tempest-react-sdk 0.77.0 → 0.78.0

package/dist/br/pix.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"pix.cjs","names":[],"sources":["../../src/br/pix.ts"],"sourcesContent":["/**\n * @tempest-limits file-lines — EMV®QRCPS-MPM for Pix: the TLV writer, the\n * CRC16-CCITT, the field catalogue with its nesting, key-type detection and the\n * parser that has to accept what other banks emit. Reader and writer live together\n * because each one is the other's test — a payload this file builds is a payload it\n * must parse back.\n */\nimport { validateCNPJ, validateCPF } from \"@/forms/br-validators\";\n\n/**\n * A Pix payload could not be built or read.\n *\n * Its own class so a caller can tell \"the operator typed a bad key\" apart from a\n * bug, and so an `ErrorBoundary` can render a form error instead of a crash.\n */\nexport class PixError extends Error {\n    constructor(message: string) {\n        super(message);\n        this.name = \"PixError\";\n    }\n}\n\n/** The five key formats DICT accepts. */\nexport type PixKeyType = \"cpf\" | \"cnpj\" | \"email\" | \"phone\" | \"evp\";\n\n/** A key after normalisation, ready to go into the payload. */\nexport interface NormalizedPixKey {\n    type: PixKeyType;\n    /** The exact string written into the BR Code. */\n    value: string;\n}\n\n/** One TLV as it appeared in a payload, unknown tags included. */\nexport interface PixField {\n    /** Two-character tag, e.g. `\"59\"`. */\n    id: string;\n    /** Raw value, still encoded when the tag is itself a template. */\n    value: string;\n}\n\n/** A BR Code that carries the key — the one you print on a poster. */\nexport interface PixStaticInput {\n    kind?: \"static\";\n    /** CPF, CNPJ, e-mail, phone or EVP. Validated and normalised. */\n    key: string;\n    /** Payee name. Truncated by the spec at 25 characters — longer throws. */\n    merchantName: string;\n    /** Payee city. Truncated by the spec at 15 characters — longer throws. */\n    merchantCity: string;\n    /** Amount in BRL. Omit for a payer-chooses-the-value QR. */\n    amount?: number;\n    /** Reference the PSP echoes back, `[A-Za-z0-9]{1,25}`. Defaults to `\"***\"`. */\n    txid?: string;\n    /** Free text shown by some wallets. Goes into tag 26, sub-tag 02. */\n    description?: string;\n    /** CEP, digits only. Optional tag 61. */\n    postalCode?: string;\n    /** Single-use QR: sets tag 01 to `\"12\"` instead of `\"11\"`. */\n    oneTime?: boolean;\n}\n\n/** A BR Code that carries a URL the wallet fetches to learn the amount. */\nexport interface PixDynamicInput {\n    kind: \"dynamic\";\n    /**\n     * `payloadLocation` — the https URL the wallet GETs, **without** the scheme,\n     * exactly as BACEN specifies (`pix.example.com/qr/v2/abc`).\n     */\n    url: string;\n    merchantName: string;\n    merchantCity: string;\n    postalCode?: string;\n    /** Single-use QR. Defaults to `true`, which is what a dynamic QR normally is. */\n    oneTime?: boolean;\n}\n\n/** Everything `pixPayload` accepts. */\nexport type PixInput = PixStaticInput | PixDynamicInput;\n\n/** A payload taken apart again. */\nexport interface PixData {\n    /** `\"dynamic\"` when tag 26 carried a URL instead of a key. */\n    kind: \"static\" | \"dynamic\";\n    /** Present on a static payload. */\n    key?: string;\n    keyType?: PixKeyType;\n    /** Present on a dynamic payload. */\n    url?: string;\n    merchantName: string;\n    merchantCity: string;\n    /** Reais. `undefined` when the payer chooses the amount. */\n    amount?: number;\n    /** ISO 4217 numeric. `\"986\"` for BRL. */\n    currency: string;\n    countryCode: string;\n    merchantCategoryCode: string;\n    /** `\"***\"` on a reusable static QR that identifies no single transaction. */\n    txid?: string;\n    description?: string;\n    postalCode?: string;\n    /** Tag 01 read as `\"12\"`. */\n    oneTime: boolean;\n    /** The four hex characters that closed the payload. */\n    crc: string;\n    /** Whether those four characters match a recomputed CRC. */\n    crcValid: boolean;\n    /** Every top-level TLV, in payload order, unknown tags included. */\n    fields: PixField[];\n}\n\n/** Options for {@link parsePixPayload}. */\nexport interface ParsePixOptions {\n    /**\n     * Throw when the checksum does not match. Default `true`.\n     *\n     * Turn it off only to inspect a payload you already know is broken: a BR Code\n     * whose CRC fails has been corrupted in transit, and the account it now points\n     * at is not the account the payee published.\n     */\n    requireCrc?: boolean;\n}\n\n/**\n * Generator polynomial of CRC-16/CCITT-FALSE, `x^16 + x^12 + x^5 + 1`.\n *\n * Taken from the CRC catalogue entry `CRC-16/IBM-3740` (alias CCITT-FALSE):\n * `width=16 poly=0x1021 init=0xffff refin=false refout=false xorout=0x0000\n * check=0x29b1`. The BACEN \"Manual de Padrões para Iniciação do Pix\" names this\n * exact variant for tag 63.\n */\nconst CRC16_POLYNOMIAL = 0x1021;\n\n/** Register preset of CRC-16/CCITT-FALSE. Not zero — that is a different variant. */\nconst CRC16_INITIAL = 0xffff;\n\n/** Keeps the shift register 16 bits wide. */\nconst CRC16_MASK = 0xffff;\n\nconst TAG_PAYLOAD_FORMAT = \"00\";\nconst TAG_POINT_OF_INITIATION = \"01\";\nconst TAG_MERCHANT_ACCOUNT_INFO = \"26\";\nconst TAG_MERCHANT_CATEGORY_CODE = \"52\";\nconst TAG_TRANSACTION_CURRENCY = \"53\";\nconst TAG_TRANSACTION_AMOUNT = \"54\";\nconst TAG_COUNTRY_CODE = \"58\";\nconst TAG_MERCHANT_NAME = \"59\";\nconst TAG_MERCHANT_CITY = \"60\";\nconst TAG_POSTAL_CODE = \"61\";\nconst TAG_ADDITIONAL_DATA = \"62\";\nconst TAG_CRC = \"63\";\n\nconst MAI_TAG_GUI = \"00\";\nconst MAI_TAG_KEY = \"01\";\nconst MAI_TAG_DESCRIPTION = \"02\";\nconst MAI_TAG_URL = \"25\";\nconst ADDITIONAL_TAG_TXID = \"05\";\n\n/** Globally Unique Identifier that marks tag 26 as a Pix account. */\nconst PIX_GUI = \"br.gov.bcb.pix\";\n\nconst PAYLOAD_FORMAT_VERSION = \"01\";\nconst POINT_OF_INITIATION_REUSABLE = \"11\";\nconst POINT_OF_INITIATION_SINGLE_USE = \"12\";\nconst DEFAULT_MERCHANT_CATEGORY_CODE = \"0000\";\nconst CURRENCY_BRL = \"986\";\nconst COUNTRY_BR = \"BR\";\nconst TXID_UNSPECIFIED = \"***\";\n\nconst MAX_MERCHANT_NAME = 25;\nconst MAX_MERCHANT_CITY = 15;\nconst MAX_TXID = 25;\nconst MAX_TLV_VALUE = 99;\nconst MAX_EMAIL_KEY = 77;\n\n/**\n * Tag 54 as EMV® QRCPS-MPM writes it: digits, and at most one `.` as the decimal\n * mark, which \"may be present even if there are no decimals\" (`\"98.\"`). Up to two\n * decimals, the minor unit ISO 4217 gives BRL (`986`). No sign, exponent, comma,\n * hex prefix or whitespace — every one of which `Number()` would happily read.\n *\n * Zero (`\"0\"`, `\"0.00\"`) is accepted: EMV asks for a non-zero amount, but the BACEN\n * BR Code manual (v2, Table 1) gives `\"0\"` as an example value of tag 54, and the\n * parser reads payloads other PSPs emit — strict with what is malformed, tolerant\n * with what the Bacen spec accepts. The builder stays stricter: `pixPayload`\n * still refuses a non-positive amount, because it only writes what we choose to emit.\n */\nconst AMOUNT_FIELD = /^\\d+(?:\\.\\d{0,2})?$/;\n\n/** Width of tag 54: \"01..13\" in the BACEN BR Code manual, Table 1. */\nconst MAX_AMOUNT_FIELD = 13;\n\n/**\n * CRC-16/CCITT-FALSE of a string, as four upper-case hex characters.\n *\n * Bitwise rather than table-driven: 200-odd characters at 8 shifts each is\n * nothing, and a 256-entry table is 2 KB of payload every consumer of the `/br`\n * entry would carry.\n *\n * The input is taken as UTF-8 bytes. A Pix payload is ASCII by construction —\n * {@link pixPayload} rejects anything else — but the function is exported and a\n * caller may hand it arbitrary text, and hashing UTF-16 code units would then\n * disagree with every other implementation.\n *\n * @param input - Bytes to run through the register.\n * @returns Four upper-case hex characters, zero-padded.\n *\n * @example\n * pixCrc16(\"123456789\"); // \"29B1\" — the catalogue check value\n */\nexport function pixCrc16(input: string): string {\n    const bytes = new TextEncoder().encode(input);\n    let crc = CRC16_INITIAL;\n    for (const byte of bytes) {\n        crc ^= byte << 8;\n        for (let bit = 0; bit < 8; bit += 1) {\n            crc =\n                (crc & 0x8000) !== 0\n                    ? ((crc << 1) ^ CRC16_POLYNOMIAL) & CRC16_MASK\n                    : (crc << 1) & CRC16_MASK;\n        }\n    }\n    return crc.toString(16).toUpperCase().padStart(4, \"0\");\n}\n\n/** Digits of a possibly masked value. */\nfunction digits(value: string): string {\n    return value.replace(/\\D/g, \"\");\n}\n\n/**\n * Drop diacritics and reject whatever is left outside printable ASCII.\n *\n * The BR Code character set has no room for accents, and a wallet that meets one\n * either fails to parse the QR or shows mojibake. Stripping them is lossy but\n * legible (\"São Paulo\" → \"Sao Paulo\"), which beats both alternatives; anything\n * that is not a diacritic — an emoji, a CJK character — is a mistake the caller\n * has to see, so it throws.\n */\nfunction toPayloadText(value: string, field: string): string {\n    const stripped = value.normalize(\"NFD\").replace(/\\p{Diacritic}/gu, \"\");\n    if (/[^\\x20-\\x7E]/.test(stripped)) {\n        throw new PixError(\n            `${field} has characters the BR Code cannot carry: ${JSON.stringify(value)}. ` +\n                \"Use unaccented ASCII.\",\n        );\n    }\n    return stripped;\n}\n\n/**\n * The EMV \"Common Character Set\" that an `ans` (Alphanumeric Special) field may\n * carry: printable ASCII, `0x20`–`0x7E`. Every root field of a BR Code is `ans`,\n * and the BACEN BR Code manual (v2, May 2020) only widened it from alphanumeric —\n * \"The restriction that established that only alphanumeric characters could be\n * used has been removed\" — not past it. Only the alternate-language template\n * (tag 64) is `String` and may carry another character set, and the builder\n * never writes it.\n */\nconst COMMON_CHARACTER_SET = /^[\\x20-\\x7E]*$/;\n\n/**\n * One `ID + 2-digit length + value` triple.\n *\n * The length is \"the number of characters included in the [value] field\" (EMV\n * MPM, as restated by the HKMA Common QR Code Specification §2; the BACEN manual:\n * \"size specifies how many characters\"). Inside the common character set a\n * character is one UTF-16 unit and one UTF-8 byte, so `value.length` is exact —\n * which is why a value outside it throws instead of being measured.\n *\n * @throws {PixError} When the value leaves the common character set or exceeds\n * the two-digit length.\n */\nfunction tlv(id: string, value: string): string {\n    if (!COMMON_CHARACTER_SET.test(value)) {\n        throw new PixError(\n            `Tag ${id} has characters outside the EMV common character set (printable ASCII): ` +\n                `${JSON.stringify(value)}.`,\n        );\n    }\n    if (value.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag ${id} is ${value.length} characters; the EMV length field holds at most ${MAX_TLV_VALUE}.`,\n        );\n    }\n    return `${id}${String(value.length).padStart(2, \"0\")}${value}`;\n}\n\n/**\n * Classify a Pix key, or `null` when it matches no accepted format.\n *\n * !!! warning \"CPF and a national phone number are both eleven digits\"\n *     `\"11987654321\"` is a valid mobile number and could be a CPF. The check\n *     digits break the tie: an 11-digit string is a CPF when its DV validates and\n *     a phone otherwise. Pass phone keys as `+5511987654321` to remove the guess\n *     entirely.\n *\n * @param key - Raw key, masked or not.\n * @returns The key type, or `null`.\n */\nexport function pixKeyType(key: string): PixKeyType | null {\n    const trimmed = key.trim();\n    if (trimmed === \"\") return null;\n\n    if (trimmed.includes(\"@\")) {\n        return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]{2,}$/.test(trimmed) && trimmed.length <= MAX_EMAIL_KEY\n            ? \"email\"\n            : null;\n    }\n    if (/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(trimmed)) {\n        return \"evp\";\n    }\n\n    const numbers = digits(trimmed);\n    if (numbers.length === 14) return validateCNPJ(numbers) ? \"cnpj\" : null;\n    if (numbers.length === 11 && validateCPF(numbers)) return \"cpf\";\n    if (trimmed.startsWith(\"+\")) {\n        return /^\\+55\\d{10,11}$/.test(`+${numbers}`) ? \"phone\" : null;\n    }\n    if (numbers.length === 10 || numbers.length === 11) return \"phone\";\n    if (numbers.length === 12 || numbers.length === 13) {\n        return numbers.startsWith(\"55\") ? \"phone\" : null;\n    }\n    return null;\n}\n\n/**\n * Validate a Pix key and return the exact string to write into the payload.\n *\n * Normalisation per type: CPF and CNPJ lose their mask, a phone becomes E.164\n * with the `+55` country code, an EVP is lower-cased, and an e-mail is\n * lower-cased because DICT stores it that way — a key that differs only in case\n * would otherwise fail to resolve.\n *\n * All validation lives in {@link pixKeyType}; past that gate the normalisation is\n * total, which is why the phone branch strips a country code purely on length\n * rather than re-checking the shape.\n *\n * @param key - Raw key, masked or not.\n * @returns The type and the normalised value.\n * @throws {PixError} When the key matches no accepted format, or when a document\n * key fails its check digits.\n *\n * @example\n * normalizePixKey(\"123.456.789-09\"); // { type: \"cpf\", value: \"12345678909\" }\n * normalizePixKey(\"(11) 98765-4321\"); // { type: \"phone\", value: \"+5511987654321\" }\n */\nexport function normalizePixKey(key: string): NormalizedPixKey {\n    const trimmed = key.trim();\n    const type = pixKeyType(trimmed);\n    if (type === null) {\n        throw new PixError(\n            `Not a Pix key: ${JSON.stringify(key)}. Expected a CPF, CNPJ, e-mail, ` +\n                \"phone (+5511987654321) or EVP (UUID).\",\n        );\n    }\n\n    if (type === \"email\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"evp\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"phone\") {\n        const numbers = digits(trimmed);\n        return { type, value: `+55${numbers.length > 11 ? numbers.slice(2) : numbers}` };\n    }\n    return { type, value: digits(trimmed) };\n}\n\n/**\n * Format an amount the way tag 54 wants it: dot separator, two decimals.\n *\n * Positivity is checked on the rounded field, not on the input: `0.004` is\n * positive and still writes `\"0.00\"`, a zero-value QR for a positive charge.\n */\nfunction toAmountField(amount: number): string {\n    if (!Number.isFinite(amount)) {\n        throw new PixError(`Amount must be a finite number, got ${amount}.`);\n    }\n    if (amount <= 0) {\n        throw new PixError(\n            `Amount must be positive, got ${amount}. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    const field = amount.toFixed(2);\n    if (Number(field) <= 0) {\n        throw new PixError(\n            `Amount ${amount} rounds to ${field} at two decimals. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    if (field.length > 13) {\n        throw new PixError(`Amount ${field} does not fit tag 54, which holds 13 characters.`);\n    }\n    return field;\n}\n\n/** Bound the two free-text identity fields the spec caps hard. */\nfunction toBoundedText(value: string, max: number, field: string): string {\n    const text = toPayloadText(value.trim(), field);\n    if (text === \"\") throw new PixError(`${field} is required.`);\n    if (text.length > max) {\n        throw new PixError(\n            `${field} is ${text.length} characters; the BR Code allows ${max}. Shorten it — ` +\n                \"truncating here would silently change what the payer sees.\",\n        );\n    }\n    return text;\n}\n\n/** Tag 62, which exists only to carry the txid. */\nfunction additionalDataField(txid: string | undefined): string {\n    const value = txid?.trim() ?? \"\";\n    if (value === \"\" || value === TXID_UNSPECIFIED) {\n        return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, TXID_UNSPECIFIED));\n    }\n    if (!new RegExp(`^[A-Za-z0-9]{1,${MAX_TXID}}$`).test(value)) {\n        throw new PixError(\n            `txid must be 1 to ${MAX_TXID} letters or digits, got ${JSON.stringify(txid)}.`,\n        );\n    }\n    return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, value));\n}\n\n/** Tag 26 for a static payload: GUI, key and the optional description. */\nfunction staticMerchantAccount(input: PixStaticInput): string {\n    const { value } = normalizePixKey(input.key);\n    let inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_KEY, value);\n    const description = input.description?.trim();\n    if (description !== undefined && description !== \"\") {\n        inner += tlv(MAI_TAG_DESCRIPTION, toPayloadText(description, \"description\"));\n    }\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten `description`.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/** Tag 26 for a dynamic payload: GUI plus the URL, and no key. */\nfunction dynamicMerchantAccount(input: PixDynamicInput): string {\n    const url = toPayloadText(input.url.trim(), \"url\").replace(/^https?:\\/\\//i, \"\");\n    if (url === \"\") throw new PixError(\"url is required for a dynamic BR Code.\");\n    const inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_URL, url);\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten the payload URL.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/**\n * Build a Pix \"Copia e Cola\" payload — the string behind a Pix QR code.\n *\n * The format is EMVCo MPM: a flat list of `ID + 2-digit length + value` triples,\n * closed by tag 63 holding a CRC-16/CCITT-FALSE over **everything before it,\n * including the literal `6304` header of tag 63 itself**. That last detail is the\n * one implementations get wrong; see {@link pixCrc16}.\n *\n * Two shapes come out of here:\n *\n * - **static** — tag 26 carries the key, so the QR is self-contained and can be\n *   printed. Amount optional; a txid of `\"***\"` means \"identifies no single\n *   transaction\", which is what a reusable poster QR wants.\n * - **dynamic** — tag 26 carries a URL instead, and the wallet fetches the amount\n *   and payee from the PSP. Use it when the value is per-order. Defaults to\n *   single-use (tag 01 = `12`).\n *\n * The distinction matters and is not cosmetic: a static QR settles against\n * whatever the payer typed, a dynamic one against what the PSP served, so a\n * charge that must reconcile to a cent needs the dynamic form.\n *\n * @param input - Static or dynamic payload description.\n * @returns The full payload, CRC included, ready to render as a QR or to copy.\n * @throws {PixError} On an unrecognised key, a field over its length cap, a\n * non-positive amount, or text that is not representable in the BR Code.\n *\n * @example\n * pixPayload({\n *   key: \"12345678909\",\n *   merchantName: \"Loja Tempest\",\n *   merchantCity: \"São Paulo\",\n *   amount: 25.5,\n *   txid: \"PEDIDO123\",\n * });\n */\nexport function pixPayload(input: PixInput): string {\n    const dynamic = input.kind === \"dynamic\";\n    const oneTime = input.oneTime ?? dynamic;\n\n    let payload = tlv(TAG_PAYLOAD_FORMAT, PAYLOAD_FORMAT_VERSION);\n    payload += tlv(\n        TAG_POINT_OF_INITIATION,\n        oneTime ? POINT_OF_INITIATION_SINGLE_USE : POINT_OF_INITIATION_REUSABLE,\n    );\n    payload += dynamic ? dynamicMerchantAccount(input) : staticMerchantAccount(input);\n    payload += tlv(TAG_MERCHANT_CATEGORY_CODE, DEFAULT_MERCHANT_CATEGORY_CODE);\n    payload += tlv(TAG_TRANSACTION_CURRENCY, CURRENCY_BRL);\n    if (!dynamic && input.amount !== undefined) {\n        payload += tlv(TAG_TRANSACTION_AMOUNT, toAmountField(input.amount));\n    }\n    payload += tlv(TAG_COUNTRY_CODE, COUNTRY_BR);\n    payload += tlv(\n        TAG_MERCHANT_NAME,\n        toBoundedText(input.merchantName, MAX_MERCHANT_NAME, \"merchantName\"),\n    );\n    payload += tlv(\n        TAG_MERCHANT_CITY,\n        toBoundedText(input.merchantCity, MAX_MERCHANT_CITY, \"merchantCity\"),\n    );\n    const postalCode = input.postalCode === undefined ? \"\" : digits(input.postalCode);\n    if (postalCode !== \"\") payload += tlv(TAG_POSTAL_CODE, postalCode);\n    payload += additionalDataField(dynamic ? TXID_UNSPECIFIED : input.txid);\n\n    const withCrcHeader = `${payload}${TAG_CRC}04`;\n    return `${withCrcHeader}${pixCrc16(withCrcHeader)}`;\n}\n\n/**\n * Split a flat run of TLVs. Stops cleanly at the first malformed triple.\n *\n * An ID may appear once per level. The BACEN BR Code manual (v2, May 2020)\n * states it for the root — \"there are no duplicate IDs in the document's root,\n * according to\" EMV® QRCPS-MPM;\n * the same holds here inside tags 26 and 62, which no conforming emitter\n * repeats either. Keeping the first of two values would give the caller one\n * reading of the payload while a wallet that keeps the last pays another.\n *\n * Lengths count characters (code points), as EMV defines them — see {@link tlv}.\n * A payload from another PSP may carry a `String` template (tag 64, or an\n * unreserved one) with non-ASCII text, where counting UTF-16 units would split\n * a character and misread every tag after it.\n *\n * @throws {PixError} When a length prefix is not two digits, runs past the end,\n * or an ID repeats at this level.\n */\nfunction parseTlv(text: string, where: string): PixField[] {\n    const input = Array.from(text);\n    const fields: PixField[] = [];\n    let cursor = 0;\n    while (cursor < input.length) {\n        const id = input.slice(cursor, cursor + 2).join(\"\");\n        const rawLength = input.slice(cursor + 2, cursor + 4).join(\"\");\n        if (!/^\\d{2}$/.test(id) || !/^\\d{2}$/.test(rawLength)) {\n            throw new PixError(\n                `Malformed TLV in ${where} at offset ${cursor}: expected a 2-digit tag and length.`,\n            );\n        }\n        const length = Number(rawLength);\n        const start = cursor + 4;\n        if (start + length > input.length) {\n            throw new PixError(\n                `Tag ${id} in ${where} declares ${length} characters but only ${input.length - start} remain.`,\n            );\n        }\n        if (fields.some((field) => field.id === id)) {\n            throw new PixError(\n                `Tag ${id} in ${where} appears more than once; a BR Code carries each tag once per level.`,\n            );\n        }\n        fields.push({ id, value: input.slice(start, start + length).join(\"\") });\n        cursor = start + length;\n    }\n    return fields;\n}\n\n/** The value of a tag — unique per level, see {@link parseTlv} — or `undefined`. */\nfunction pick(fields: readonly PixField[], id: string): string | undefined {\n    return fields.find((field) => field.id === id)?.value;\n}\n\n/**\n * Read tag 54 into reais.\n *\n * @throws {PixError} When the field is outside the EMV format\n * ({@link AMOUNT_FIELD}) or wider than 13 characters. Zero is read as `0`; see\n * {@link AMOUNT_FIELD} for why the reader accepts what `pixPayload` refuses.\n */\nfunction readAmountField(field: string): number {\n    if (field.length > MAX_AMOUNT_FIELD || !AMOUNT_FIELD.test(field)) {\n        throw new PixError(\n            `Tag 54 (amount) must be an amount like \"25.50\", with \".\" as the decimal mark, ` +\n                `at most two decimals and ${MAX_AMOUNT_FIELD} characters; got ${JSON.stringify(field)}.`,\n        );\n    }\n    return Number(field);\n}\n\n/**\n * Read a Pix \"Copia e Cola\" payload back into its parts.\n *\n * Tolerant by design: tags the SDK does not know about are kept verbatim in\n * {@link PixData.fields} instead of raising, because PSPs do add their own\n * templates and a reader that rejects them is useless in production. What is\n * *not* tolerated is a broken frame — a length prefix that runs off the end, a\n * missing tag 63 — a checksum mismatch, which means the string was corrupted in\n * transit, or a payload with two readings: a tag repeated at the root or inside\n * tags 26 and 62, a tag 26 with both a key and a URL, or a tag 54 outside the EMV\n * amount format. A preview built from one reading while the wallet pays the\n * other is the failure those rules exist for.\n *\n * The CRC detects corruption, not authorship: whoever crafts a payload\n * recomputes it, so a valid CRC says nothing about who published the account.\n *\n * @param payload - The copia-e-cola string. Surrounding whitespace is ignored.\n * @param options - See {@link ParsePixOptions}.\n * @returns The decoded payload.\n * @throws {PixError} On a malformed frame, a missing CRC tag, a repeated tag, a\n * tag 26 that is not a Pix account or that carries both a key and a URL, an\n * amount outside the EMV format, or — unless `requireCrc` is `false` — a CRC\n * mismatch.\n *\n * @example\n * const data = parsePixPayload(copied);\n * console.log(data.key, data.amount, data.txid);\n */\nexport function parsePixPayload(payload: string, options: ParsePixOptions = {}): PixData {\n    const { requireCrc = true } = options;\n    const text = payload.trim();\n    if (text.length < 8) throw new PixError(\"Payload is too short to be a BR Code.\");\n\n    const crcHeaderAt = text.length - 8;\n    if (text.slice(crcHeaderAt, crcHeaderAt + 4) !== `${TAG_CRC}04`) {\n        throw new PixError(\"Payload does not end in a `6304` CRC tag.\");\n    }\n    const crc = text.slice(-4).toUpperCase();\n    const expected = pixCrc16(text.slice(0, -4));\n    const crcValid = crc === expected;\n    if (!crcValid && requireCrc) {\n        throw new PixError(`CRC mismatch: payload says ${crc}, recomputed ${expected}.`);\n    }\n\n    const fields = parseTlv(text.slice(0, crcHeaderAt), \"payload\");\n    const merchantAccount = pick(fields, TAG_MERCHANT_ACCOUNT_INFO);\n    if (merchantAccount === undefined) {\n        throw new PixError(\"Payload has no tag 26 (merchant account information).\");\n    }\n    const account = parseTlv(merchantAccount, \"tag 26\");\n    const gui = pick(account, MAI_TAG_GUI);\n    if (gui?.toLowerCase() !== PIX_GUI) {\n        throw new PixError(\n            `Tag 26 is not a Pix account: expected GUI ${PIX_GUI}, got ${JSON.stringify(gui)}.`,\n        );\n    }\n\n    const url = pick(account, MAI_TAG_URL);\n    const key = pick(account, MAI_TAG_KEY);\n    if (url !== undefined && key !== undefined) {\n        throw new PixError(\n            \"Tag 26 carries both a key (01) and a URL (25); a BR Code is either static or dynamic, not both.\",\n        );\n    }\n    const amountField = pick(fields, TAG_TRANSACTION_AMOUNT);\n    const txid = pick(\n        parseTlv(pick(fields, TAG_ADDITIONAL_DATA) ?? \"\", \"tag 62\"),\n        ADDITIONAL_TAG_TXID,\n    );\n\n    return {\n        kind: url === undefined ? \"static\" : \"dynamic\",\n        ...(key === undefined ? {} : { key, keyType: pixKeyType(key) ?? undefined }),\n        ...(url === undefined ? {} : { url }),\n        merchantName: pick(fields, TAG_MERCHANT_NAME) ?? \"\",\n        merchantCity: pick(fields, TAG_MERCHANT_CITY) ?? \"\",\n        ...(amountField === undefined ? {} : { amount: readAmountField(amountField) }),\n        currency: pick(fields, TAG_TRANSACTION_CURRENCY) ?? \"\",\n        countryCode: pick(fields, TAG_COUNTRY_CODE) ?? \"\",\n        merchantCategoryCode: pick(fields, TAG_MERCHANT_CATEGORY_CODE) ?? \"\",\n        ...(txid === undefined ? {} : { txid }),\n        ...(pick(account, MAI_TAG_DESCRIPTION) === undefined\n            ? {}\n            : { description: pick(account, MAI_TAG_DESCRIPTION) }),\n        ...(pick(fields, TAG_POSTAL_CODE) === undefined\n            ? {}\n            : { postalCode: pick(fields, TAG_POSTAL_CODE) }),\n        oneTime: pick(fields, TAG_POINT_OF_INITIATION) === POINT_OF_INITIATION_SINGLE_USE,\n        crc,\n        crcValid,\n        fields,\n    };\n}\n"],"mappings":"8CAeA,IAAa,EAAb,cAA8B,KAAM,CAChC,YAAY,EAAiB,CACzB,MAAM,CAAO,EACb,KAAK,KAAO,UAChB,CACJ,EA8GM,EAAmB,KAGnB,EAAgB,MAGhB,EAAa,MAEb,EAAqB,KACrB,EAA0B,KAC1B,EAA4B,KAC5B,EAA6B,KAC7B,EAA2B,KAC3B,EAAyB,KACzB,EAAmB,KACnB,EAAoB,KACpB,EAAoB,KACpB,EAAkB,KAClB,EAAsB,KACtB,EAAU,KAEV,EAAc,KACd,EAAc,KACd,EAAsB,KACtB,EAAc,KACd,EAAsB,KAGtB,EAAU,iBAEV,EAAyB,KACzB,EAA+B,KAC/B,EAAiC,KACjC,EAAiC,OACjC,EAAe,MACf,EAAa,KACb,EAAmB,MAEnB,EAAoB,GACpB,EAAoB,GACpB,EAAW,GACX,EAAgB,GAChB,EAAgB,GAchB,EAAe,sBAGf,EAAmB,GAoBzB,SAAgB,EAAS,EAAuB,CAC5C,IAAM,EAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,CAAK,EACxC,EAAM,EACV,IAAK,IAAM,KAAQ,EAAO,CACtB,GAAO,GAAQ,EACf,IAAK,IAAI,EAAM,EAAG,EAAM,EAAG,GAAO,EAC9B,EACK,EAAM,OACC,GAAO,EAAK,GAAoB,EACjC,GAAO,EAAK,CAE/B,CACA,OAAO,EAAI,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,EAAG,GAAG,CACzD,CAGA,SAAS,EAAO,EAAuB,CACnC,OAAO,EAAM,QAAQ,MAAO,EAAE,CAClC,CAWA,SAAS,EAAc,EAAe,EAAuB,CACzD,IAAM,EAAW,EAAM,UAAU,KAAK,CAAC,CAAC,QAAQ,kBAAmB,EAAE,EACrE,GAAI,eAAe,KAAK,CAAQ,EAC5B,MAAM,IAAI,EACN,GAAG,EAAM,4CAA4C,KAAK,UAAU,CAAK,EAAE,wBAE/E,EAEJ,OAAO,CACX,CAWA,IAAM,EAAuB,iBAc7B,SAAS,EAAI,EAAY,EAAuB,CAC5C,GAAI,CAAC,EAAqB,KAAK,CAAK,EAChC,MAAM,IAAI,EACN,OAAO,EAAG,0EACH,KAAK,UAAU,CAAK,EAAE,EACjC,EAEJ,GAAI,EAAM,OAAS,EACf,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,OAAO,kDAAkD,EAAc,EACjG,EAEJ,MAAO,GAAG,IAAK,OAAO,EAAM,MAAM,CAAC,CAAC,SAAS,EAAG,GAAG,IAAI,GAC3D,CAcA,SAAgB,EAAW,EAAgC,CACvD,IAAM,EAAU,EAAI,KAAK,EACzB,GAAI,IAAY,GAAI,OAAO,KAE3B,GAAI,EAAQ,SAAS,GAAG,EACpB,MAAO,gCAAgC,KAAK,CAAO,GAAK,EAAQ,QAAU,EACpE,QACA,KAEV,GAAI,kEAAkE,KAAK,CAAO,EAC9E,MAAO,MAGX,IAAM,EAAU,EAAO,CAAO,EAU9B,OATI,EAAQ,SAAW,GAAW,EAAA,aAAa,CAAO,EAAI,OAAS,KAC/D,EAAQ,SAAW,IAAM,EAAA,YAAY,CAAO,EAAU,MACtD,EAAQ,WAAW,GAAG,EACf,kBAAkB,KAAK,IAAI,GAAS,EAAI,QAAU,KAEzD,EAAQ,SAAW,IAAM,EAAQ,SAAW,KAC5C,EAAQ,SAAW,IAAM,EAAQ,SAAW,KACrC,EAAQ,WAAW,IAAI,EAFyB,QAEX,IAGpD,CAuBA,SAAgB,EAAgB,EAA+B,CAC3D,IAAM,EAAU,EAAI,KAAK,EACnB,EAAO,EAAW,CAAO,EAC/B,GAAI,IAAS,KACT,MAAM,IAAI,EACN,kBAAkB,KAAK,UAAU,CAAG,EAAE,sEAE1C,EAIJ,GADI,IAAS,SACT,IAAS,MAAO,MAAO,CAAE,OAAM,MAAO,EAAQ,YAAY,CAAE,EAChE,GAAI,IAAS,QAAS,CAClB,IAAM,EAAU,EAAO,CAAO,EAC9B,MAAO,CAAE,OAAM,MAAO,MAAM,EAAQ,OAAS,GAAK,EAAQ,MAAM,CAAC,EAAI,GAAU,CACnF,CACA,MAAO,CAAE,OAAM,MAAO,EAAO,CAAO,CAAE,CAC1C,CAQA,SAAS,EAAc,EAAwB,CAC3C,GAAI,CAAC,OAAO,SAAS,CAAM,EACvB,MAAM,IAAI,EAAS,uCAAuC,EAAO,EAAE,EAEvE,GAAI,GAAU,EACV,MAAM,IAAI,EACN,gCAAgC,EAAO,wDAC3C,EAEJ,IAAM,EAAQ,EAAO,QAAQ,CAAC,EAC9B,GAAI,OAAO,CAAK,GAAK,EACjB,MAAM,IAAI,EACN,UAAU,EAAO,aAAa,EAAM,wEACxC,EAEJ,GAAI,EAAM,OAAS,GACf,MAAM,IAAI,EAAS,UAAU,EAAM,iDAAiD,EAExF,OAAO,CACX,CAGA,SAAS,EAAc,EAAe,EAAa,EAAuB,CACtE,IAAM,EAAO,EAAc,EAAM,KAAK,EAAG,CAAK,EAC9C,GAAI,IAAS,GAAI,MAAM,IAAI,EAAS,GAAG,EAAM,cAAc,EAC3D,GAAI,EAAK,OAAS,EACd,MAAM,IAAI,EACN,GAAG,EAAM,MAAM,EAAK,OAAO,kCAAkC,EAAI,0EAErE,EAEJ,OAAO,CACX,CAGA,SAAS,EAAoB,EAAkC,CAC3D,IAAM,EAAQ,GAAM,KAAK,GAAK,GAC9B,GAAI,IAAU,IAAM,IAAU,EAC1B,OAAO,EAAI,EAAqB,EAAI,EAAqB,CAAgB,CAAC,EAE9E,GAAI,CAAK,OAAO,kBAAkB,EAAS,GAAG,CAAC,CAAC,KAAK,CAAK,EACtD,MAAM,IAAI,EACN,qBAAqB,EAAS,0BAA0B,KAAK,UAAU,CAAI,EAAE,EACjF,EAEJ,OAAO,EAAI,EAAqB,EAAI,EAAqB,CAAK,CAAC,CACnE,CAGA,SAAS,EAAsB,EAA+B,CAC1D,GAAM,CAAE,SAAU,EAAgB,EAAM,GAAG,EACvC,EAAQ,EAAI,EAAa,CAAO,EAAI,EAAI,EAAa,CAAK,EACxD,EAAc,EAAM,aAAa,KAAK,EAI5C,GAHI,IAAgB,IAAA,IAAa,IAAgB,KAC7C,GAAS,EAAI,EAAqB,EAAc,EAAa,aAAa,CAAC,GAE3E,EAAM,OAAS,EACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE,EAEJ,OAAO,EAAI,EAA2B,CAAK,CAC/C,CAGA,SAAS,EAAuB,EAAgC,CAC5D,IAAM,EAAM,EAAc,EAAM,IAAI,KAAK,EAAG,KAAK,CAAC,CAAC,QAAQ,gBAAiB,EAAE,EAC9E,GAAI,IAAQ,GAAI,MAAM,IAAI,EAAS,wCAAwC,EAC3E,IAAM,EAAQ,EAAI,EAAa,CAAO,EAAI,EAAI,EAAa,CAAG,EAC9D,GAAI,EAAM,OAAS,EACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE,EAEJ,OAAO,EAAI,EAA2B,CAAK,CAC/C,CAqCA,SAAgB,EAAW,EAAyB,CAChD,IAAM,EAAU,EAAM,OAAS,UACzB,EAAU,EAAM,SAAW,EAE7B,EAAU,EAAI,EAAoB,CAAsB,EAC5D,GAAW,EACP,EACA,EAAU,EAAiC,CAC/C,EACA,GAAW,EAAU,EAAuB,CAAK,EAAI,EAAsB,CAAK,EAChF,GAAW,EAAI,EAA4B,CAA8B,EACzE,GAAW,EAAI,EAA0B,CAAY,EACjD,CAAC,GAAW,EAAM,SAAW,IAAA,KAC7B,GAAW,EAAI,EAAwB,EAAc,EAAM,MAAM,CAAC,GAEtE,GAAW,EAAI,EAAkB,CAAU,EAC3C,GAAW,EACP,EACA,EAAc,EAAM,aAAc,EAAmB,cAAc,CACvE,EACA,GAAW,EACP,EACA,EAAc,EAAM,aAAc,EAAmB,cAAc,CACvE,EACA,IAAM,EAAa,EAAM,aAAe,IAAA,GAAY,GAAK,EAAO,EAAM,UAAU,EAC5E,IAAe,KAAI,GAAW,EAAI,EAAiB,CAAU,GACjE,GAAW,EAAoB,EAAU,EAAmB,EAAM,IAAI,EAEtE,IAAM,EAAgB,GAAG,IAAU,EAAQ,IAC3C,MAAO,GAAG,IAAgB,EAAS,CAAa,GACpD,CAoBA,SAAS,EAAS,EAAc,EAA2B,CACvD,IAAM,EAAQ,MAAM,KAAK,CAAI,EACvB,EAAqB,CAAC,EACxB,EAAS,EACb,KAAO,EAAS,EAAM,QAAQ,CAC1B,IAAM,EAAK,EAAM,MAAM,EAAQ,EAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAC5C,EAAY,EAAM,MAAM,EAAS,EAAG,EAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAC7D,GAAI,CAAC,UAAU,KAAK,CAAE,GAAK,CAAC,UAAU,KAAK,CAAS,EAChD,MAAM,IAAI,EACN,oBAAoB,EAAM,aAAa,EAAO,qCAClD,EAEJ,IAAM,EAAS,OAAO,CAAS,EACzB,EAAQ,EAAS,EACvB,GAAI,EAAQ,EAAS,EAAM,OACvB,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,YAAY,EAAO,uBAAuB,EAAM,OAAS,EAAM,SACzF,EAEJ,GAAI,EAAO,KAAM,GAAU,EAAM,KAAO,CAAE,EACtC,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,oEAC1B,EAEJ,EAAO,KAAK,CAAE,KAAI,MAAO,EAAM,MAAM,EAAO,EAAQ,CAAM,CAAC,CAAC,KAAK,EAAE,CAAE,CAAC,EACtE,EAAS,EAAQ,CACrB,CACA,OAAO,CACX,CAGA,SAAS,EAAK,EAA6B,EAAgC,CACvE,OAAO,EAAO,KAAM,GAAU,EAAM,KAAO,CAAE,CAAC,EAAE,KACpD,CASA,SAAS,EAAgB,EAAuB,CAC5C,GAAI,EAAM,OAAS,GAAoB,CAAC,EAAa,KAAK,CAAK,EAC3D,MAAM,IAAI,EACN,0GACgC,EAAiB,mBAAmB,KAAK,UAAU,CAAK,EAAE,EAC9F,EAEJ,OAAO,OAAO,CAAK,CACvB,CA8BA,SAAgB,EAAgB,EAAiB,EAA2B,CAAC,EAAY,CACrF,GAAM,CAAE,aAAa,IAAS,EACxB,EAAO,EAAQ,KAAK,EAC1B,GAAI,EAAK,OAAS,EAAG,MAAM,IAAI,EAAS,uCAAuC,EAE/E,IAAM,EAAc,EAAK,OAAS,EAClC,GAAI,EAAK,MAAM,EAAa,EAAc,CAAC,IAAM,GAAG,EAAQ,IACxD,MAAM,IAAI,EAAS,2CAA2C,EAElE,IAAM,EAAM,EAAK,MAAM,EAAE,CAAC,CAAC,YAAY,EACjC,EAAW,EAAS,EAAK,MAAM,EAAG,EAAE,CAAC,EACrC,EAAW,IAAQ,EACzB,GAAI,CAAC,GAAY,EACb,MAAM,IAAI,EAAS,8BAA8B,EAAI,eAAe,EAAS,EAAE,EAGnF,IAAM,EAAS,EAAS,EAAK,MAAM,EAAG,CAAW,EAAG,SAAS,EACvD,EAAkB,EAAK,EAAQ,CAAyB,EAC9D,GAAI,IAAoB,IAAA,GACpB,MAAM,IAAI,EAAS,uDAAuD,EAE9E,IAAM,EAAU,EAAS,EAAiB,QAAQ,EAC5C,EAAM,EAAK,EAAS,CAAW,EACrC,GAAI,GAAK,YAAY,IAAM,EACvB,MAAM,IAAI,EACN,6CAA6C,EAAQ,QAAQ,KAAK,UAAU,CAAG,EAAE,EACrF,EAGJ,IAAM,EAAM,EAAK,EAAS,CAAW,EAC/B,EAAM,EAAK,EAAS,CAAW,EACrC,GAAI,IAAQ,IAAA,IAAa,IAAQ,IAAA,GAC7B,MAAM,IAAI,EACN,iGACJ,EAEJ,IAAM,EAAc,EAAK,EAAQ,CAAsB,EACjD,EAAO,EACT,EAAS,EAAK,EAAQ,CAAmB,GAAK,GAAI,QAAQ,EAC1D,CACJ,EAEA,MAAO,CACH,KAAM,IAAQ,IAAA,GAAY,SAAW,UACrC,GAAI,IAAQ,IAAA,GAAY,CAAC,EAAI,CAAE,MAAK,QAAS,EAAW,CAAG,GAAK,IAAA,EAAU,EAC1E,GAAI,IAAQ,IAAA,GAAY,CAAC,EAAI,CAAE,KAAI,EACnC,aAAc,EAAK,EAAQ,CAAiB,GAAK,GACjD,aAAc,EAAK,EAAQ,CAAiB,GAAK,GACjD,GAAI,IAAgB,IAAA,GAAY,CAAC,EAAI,CAAE,OAAQ,EAAgB,CAAW,CAAE,EAC5E,SAAU,EAAK,EAAQ,CAAwB,GAAK,GACpD,YAAa,EAAK,EAAQ,CAAgB,GAAK,GAC/C,qBAAsB,EAAK,EAAQ,CAA0B,GAAK,GAClE,GAAI,IAAS,IAAA,GAAY,CAAC,EAAI,CAAE,MAAK,EACrC,GAAI,EAAK,EAAS,CAAmB,IAAM,IAAA,GACrC,CAAC,EACD,CAAE,YAAa,EAAK,EAAS,CAAmB,CAAE,EACxD,GAAI,EAAK,EAAQ,CAAe,IAAM,IAAA,GAChC,CAAC,EACD,CAAE,WAAY,EAAK,EAAQ,CAAe,CAAE,EAClD,QAAS,EAAK,EAAQ,CAAuB,IAAM,EACnD,MACA,WACA,QACJ,CACJ"}
+{"version":3,"file":"pix.cjs","names":[],"sources":["../../src/br/pix.ts"],"sourcesContent":["/**\n * @tempest-limits file-lines — EMV®QRCPS-MPM for Pix: the TLV writer, the\n * CRC16-CCITT, the field catalogue with its nesting, key-type detection and the\n * parser that has to accept what other banks emit. Reader and writer live together\n * because each one is the other's test — a payload this file builds is a payload it\n * must parse back.\n */\nimport { validateCNPJ, validateCPF } from \"@/forms/br-validators\";\n\n/**\n * A Pix payload could not be built or read.\n *\n * Its own class so a caller can tell \"the operator typed a bad key\" apart from a\n * bug, and so an `ErrorBoundary` can render a form error instead of a crash.\n */\nexport class PixError extends Error {\n    constructor(message: string) {\n        super(message);\n        this.name = \"PixError\";\n    }\n}\n\n/** The five key formats DICT accepts. */\nexport type PixKeyType = \"cpf\" | \"cnpj\" | \"email\" | \"phone\" | \"evp\";\n\n/** A key after normalisation, ready to go into the payload. */\nexport interface NormalizedPixKey {\n    type: PixKeyType;\n    /** The exact string written into the BR Code. */\n    value: string;\n}\n\n/** One TLV as it appeared in a payload, unknown tags included. */\nexport interface PixField {\n    /** Two-character tag, e.g. `\"59\"`. */\n    id: string;\n    /** Raw value, still encoded when the tag is itself a template. */\n    value: string;\n}\n\n/** A BR Code that carries the key — the one you print on a poster. */\nexport interface PixStaticInput {\n    kind?: \"static\";\n    /** CPF, CNPJ, e-mail, phone or EVP. Validated and normalised. */\n    key: string;\n    /** Payee name. Truncated by the spec at 25 characters — longer throws. */\n    merchantName: string;\n    /** Payee city. Truncated by the spec at 15 characters — longer throws. */\n    merchantCity: string;\n    /** Amount in BRL. Omit for a payer-chooses-the-value QR. */\n    amount?: number;\n    /** Reference the PSP echoes back, `[A-Za-z0-9]{1,25}`. Defaults to `\"***\"`. */\n    txid?: string;\n    /** Free text shown by some wallets. Goes into tag 26, sub-tag 02. */\n    description?: string;\n    /** CEP, digits only. Optional tag 61. */\n    postalCode?: string;\n    /** Single-use QR: sets tag 01 to `\"12\"` instead of `\"11\"`. */\n    oneTime?: boolean;\n}\n\n/** A BR Code that carries a URL the wallet fetches to learn the amount. */\nexport interface PixDynamicInput {\n    kind: \"dynamic\";\n    /**\n     * `payloadLocation` — the https URL the wallet GETs, **without** the scheme,\n     * exactly as BACEN specifies (`pix.example.com/qr/v2/abc`).\n     */\n    url: string;\n    merchantName: string;\n    merchantCity: string;\n    postalCode?: string;\n    /** Single-use QR. Defaults to `true`, which is what a dynamic QR normally is. */\n    oneTime?: boolean;\n}\n\n/** Everything `pixPayload` accepts. */\nexport type PixInput = PixStaticInput | PixDynamicInput;\n\n/** A payload taken apart again. */\nexport interface PixData {\n    /** `\"dynamic\"` when tag 26 carried a URL instead of a key. */\n    kind: \"static\" | \"dynamic\";\n    /** Present on a static payload. */\n    key?: string;\n    keyType?: PixKeyType;\n    /** Present on a dynamic payload. */\n    url?: string;\n    merchantName: string;\n    merchantCity: string;\n    /** Reais. `undefined` when the payer chooses the amount. */\n    amount?: number;\n    /** ISO 4217 numeric. `\"986\"` for BRL. */\n    currency: string;\n    countryCode: string;\n    merchantCategoryCode: string;\n    /** `\"***\"` on a reusable static QR that identifies no single transaction. */\n    txid?: string;\n    description?: string;\n    postalCode?: string;\n    /** Tag 01 read as `\"12\"`. */\n    oneTime: boolean;\n    /** The four hex characters that closed the payload. */\n    crc: string;\n    /** Whether those four characters match a recomputed CRC. */\n    crcValid: boolean;\n    /** Every top-level TLV, in payload order, unknown tags included. */\n    fields: PixField[];\n}\n\n/** Options for {@link parsePixPayload}. */\nexport interface ParsePixOptions {\n    /**\n     * Throw when the checksum does not match. Default `true`.\n     *\n     * Turn it off only to inspect a payload you already know is broken: a BR Code\n     * whose CRC fails has been corrupted in transit, and the account it now points\n     * at is not the account the payee published.\n     */\n    requireCrc?: boolean;\n}\n\n/**\n * Generator polynomial of CRC-16/CCITT-FALSE, `x^16 + x^12 + x^5 + 1`.\n *\n * Taken from the CRC catalogue entry `CRC-16/IBM-3740` (alias CCITT-FALSE):\n * `width=16 poly=0x1021 init=0xffff refin=false refout=false xorout=0x0000\n * check=0x29b1`. The BACEN \"Manual de Padrões para Iniciação do Pix\" names this\n * exact variant for tag 63.\n */\nconst CRC16_POLYNOMIAL = 0x1021;\n\n/** Register preset of CRC-16/CCITT-FALSE. Not zero — that is a different variant. */\nconst CRC16_INITIAL = 0xffff;\n\n/** Keeps the shift register 16 bits wide. */\nconst CRC16_MASK = 0xffff;\n\nconst TAG_PAYLOAD_FORMAT = \"00\";\nconst TAG_POINT_OF_INITIATION = \"01\";\nconst TAG_MERCHANT_ACCOUNT_INFO = \"26\";\nconst TAG_MERCHANT_CATEGORY_CODE = \"52\";\nconst TAG_TRANSACTION_CURRENCY = \"53\";\nconst TAG_TRANSACTION_AMOUNT = \"54\";\nconst TAG_COUNTRY_CODE = \"58\";\nconst TAG_MERCHANT_NAME = \"59\";\nconst TAG_MERCHANT_CITY = \"60\";\nconst TAG_POSTAL_CODE = \"61\";\nconst TAG_ADDITIONAL_DATA = \"62\";\nconst TAG_CRC = \"63\";\n\nconst MAI_TAG_GUI = \"00\";\nconst MAI_TAG_KEY = \"01\";\nconst MAI_TAG_DESCRIPTION = \"02\";\nconst MAI_TAG_URL = \"25\";\nconst ADDITIONAL_TAG_TXID = \"05\";\n\n/** Globally Unique Identifier that marks tag 26 as a Pix account. */\nconst PIX_GUI = \"br.gov.bcb.pix\";\n\nconst PAYLOAD_FORMAT_VERSION = \"01\";\nconst POINT_OF_INITIATION_REUSABLE = \"11\";\nconst POINT_OF_INITIATION_SINGLE_USE = \"12\";\nconst DEFAULT_MERCHANT_CATEGORY_CODE = \"0000\";\nconst CURRENCY_BRL = \"986\";\nconst COUNTRY_BR = \"BR\";\nconst TXID_UNSPECIFIED = \"***\";\n\nconst MAX_MERCHANT_NAME = 25;\nconst MAX_MERCHANT_CITY = 15;\nconst MAX_TXID = 25;\nconst MAX_TLV_VALUE = 99;\nconst MAX_EMAIL_KEY = 77;\n\n/**\n * Tag 54 as EMV® QRCPS-MPM writes it: digits, and at most one `.` as the decimal\n * mark, which \"may be present even if there are no decimals\" (`\"98.\"`). Up to two\n * decimals, the minor unit ISO 4217 gives BRL (`986`). No sign, exponent, comma,\n * hex prefix or whitespace — every one of which `Number()` would happily read.\n *\n * Zero (`\"0\"`, `\"0.00\"`) is accepted: EMV asks for a non-zero amount, but the BACEN\n * BR Code manual (v2, Table 1) gives `\"0\"` as an example value of tag 54, and the\n * parser reads payloads other PSPs emit — strict with what is malformed, tolerant\n * with what the Bacen spec accepts. The builder stays stricter: `pixPayload`\n * still refuses a non-positive amount, because it only writes what we choose to emit.\n */\nconst AMOUNT_FIELD = /^\\d+(?:\\.\\d{0,2})?$/;\n\n/** Width of tag 54: \"01..13\" in the BACEN BR Code manual, Table 1. */\nconst MAX_AMOUNT_FIELD = 13;\n\n/**\n * CRC-16/CCITT-FALSE of a string, as four upper-case hex characters.\n *\n * Bitwise rather than table-driven: 200-odd characters at 8 shifts each is\n * nothing, and a 256-entry table is 2 KB of payload every consumer of the `/br`\n * entry would carry.\n *\n * The input is taken as UTF-8 bytes. A Pix payload is ASCII by construction —\n * {@link pixPayload} rejects anything else — but the function is exported and a\n * caller may hand it arbitrary text, and hashing UTF-16 code units would then\n * disagree with every other implementation.\n *\n * @param input - Bytes to run through the register.\n * @returns Four upper-case hex characters, zero-padded.\n *\n * @example\n * pixCrc16(\"123456789\"); // \"29B1\" — the catalogue check value\n */\nexport function pixCrc16(input: string): string {\n    const bytes = new TextEncoder().encode(input);\n    let crc = CRC16_INITIAL;\n    for (const byte of bytes) {\n        crc ^= byte << 8;\n        for (let bit = 0; bit < 8; bit += 1) {\n            crc =\n                (crc & 0x8000) !== 0\n                    ? ((crc << 1) ^ CRC16_POLYNOMIAL) & CRC16_MASK\n                    : (crc << 1) & CRC16_MASK;\n        }\n    }\n    return crc.toString(16).toUpperCase().padStart(4, \"0\");\n}\n\n/** Digits of a possibly masked value. */\nfunction digits(value: string): string {\n    return value.replace(/\\D/g, \"\");\n}\n\n/**\n * Drop diacritics and reject whatever is left outside printable ASCII.\n *\n * The BR Code character set has no room for accents, and a wallet that meets one\n * either fails to parse the QR or shows mojibake. Stripping them is lossy but\n * legible (\"São Paulo\" → \"Sao Paulo\"), which beats both alternatives; anything\n * that is not a diacritic — an emoji, a CJK character — is a mistake the caller\n * has to see, so it throws.\n */\nfunction toPayloadText(value: string, field: string): string {\n    const stripped = value.normalize(\"NFD\").replace(/\\p{Diacritic}/gu, \"\");\n    if (/[^\\x20-\\x7E]/.test(stripped)) {\n        throw new PixError(\n            `${field} has characters the BR Code cannot carry: ${JSON.stringify(value)}. ` +\n                \"Use unaccented ASCII.\",\n        );\n    }\n    return stripped;\n}\n\n/**\n * The EMV \"Common Character Set\" that an `ans` (Alphanumeric Special) field may\n * carry: printable ASCII, `0x20`–`0x7E`. Every root field of a BR Code is `ans`,\n * and the BACEN BR Code manual (v2, May 2020) only widened it from alphanumeric —\n * \"The restriction that established that only alphanumeric characters could be\n * used has been removed\" — not past it. Only the alternate-language template\n * (tag 64) is `String` and may carry another character set, and the builder\n * never writes it.\n */\nconst COMMON_CHARACTER_SET = /^[\\x20-\\x7E]*$/;\n\n/**\n * One `ID + 2-digit length + value` triple.\n *\n * The length is \"the number of characters included in the [value] field\" (EMV\n * MPM, as restated by the HKMA Common QR Code Specification §2; the BACEN manual:\n * \"size specifies how many characters\"). Inside the common character set a\n * character is one UTF-16 unit and one UTF-8 byte, so `value.length` is exact —\n * which is why a value outside it throws instead of being measured.\n *\n * @throws {PixError} When the value leaves the common character set or exceeds\n * the two-digit length.\n */\nfunction tlv(id: string, value: string): string {\n    if (!COMMON_CHARACTER_SET.test(value)) {\n        throw new PixError(\n            `Tag ${id} has characters outside the EMV common character set (printable ASCII): ` +\n                `${JSON.stringify(value)}.`,\n        );\n    }\n    if (value.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag ${id} is ${value.length} characters; the EMV length field holds at most ${MAX_TLV_VALUE}.`,\n        );\n    }\n    return `${id}${String(value.length).padStart(2, \"0\")}${value}`;\n}\n\n/**\n * Classify a Pix key, or `null` when it matches no accepted format.\n *\n * !!! warning \"CPF and a national phone number are both eleven digits\"\n *     `\"11987654321\"` is a valid mobile number and could be a CPF. The check\n *     digits break the tie: an 11-digit string is a CPF when its DV validates and\n *     a phone otherwise. Pass phone keys as `+5511987654321` to remove the guess\n *     entirely.\n *\n * @param key - Raw key, masked or not.\n * @returns The key type, or `null`.\n */\nexport function pixKeyType(key: string): PixKeyType | null {\n    const trimmed = key.trim();\n    if (trimmed === \"\") return null;\n\n    if (trimmed.includes(\"@\")) {\n        return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]{2,}$/.test(trimmed) && trimmed.length <= MAX_EMAIL_KEY\n            ? \"email\"\n            : null;\n    }\n    if (/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(trimmed)) {\n        return \"evp\";\n    }\n\n    const numbers = digits(trimmed);\n    if (numbers.length === 14) return validateCNPJ(numbers) ? \"cnpj\" : null;\n    if (numbers.length === 11 && validateCPF(numbers)) return \"cpf\";\n    if (trimmed.startsWith(\"+\")) {\n        return /^\\+55\\d{10,11}$/.test(`+${numbers}`) ? \"phone\" : null;\n    }\n    if (numbers.length === 10 || numbers.length === 11) return \"phone\";\n    if (numbers.length === 12 || numbers.length === 13) {\n        return numbers.startsWith(\"55\") ? \"phone\" : null;\n    }\n    return null;\n}\n\n/**\n * Validate a Pix key and return the exact string to write into the payload.\n *\n * Normalisation per type: CPF and CNPJ lose their mask, a phone becomes E.164\n * with the `+55` country code, an EVP is lower-cased, and an e-mail is\n * lower-cased because DICT stores it that way — a key that differs only in case\n * would otherwise fail to resolve.\n *\n * All validation lives in {@link pixKeyType}; past that gate the normalisation is\n * total, which is why the phone branch strips a country code purely on length\n * rather than re-checking the shape.\n *\n * @param key - Raw key, masked or not.\n * @returns The type and the normalised value.\n * @throws {PixError} When the key matches no accepted format, or when a document\n * key fails its check digits.\n *\n * @example\n * normalizePixKey(\"123.456.789-09\"); // { type: \"cpf\", value: \"12345678909\" }\n * normalizePixKey(\"(11) 98765-4321\"); // { type: \"phone\", value: \"+5511987654321\" }\n */\nexport function normalizePixKey(key: string): NormalizedPixKey {\n    const trimmed = key.trim();\n    const type = pixKeyType(trimmed);\n    if (type === null) {\n        throw new PixError(\n            `Not a Pix key: ${JSON.stringify(key)}. Expected a CPF, CNPJ, e-mail, ` +\n                \"phone (+5511987654321) or EVP (UUID).\",\n        );\n    }\n\n    if (type === \"email\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"evp\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"phone\") {\n        const numbers = digits(trimmed);\n        return { type, value: `+55${numbers.length > 11 ? numbers.slice(2) : numbers}` };\n    }\n    return { type, value: digits(trimmed) };\n}\n\n/**\n * Format an amount the way tag 54 wants it: dot separator, two decimals.\n *\n * Positivity is checked on the rounded field, not on the input: `0.004` is\n * positive and still writes `\"0.00\"`, a zero-value QR for a positive charge.\n */\nfunction toAmountField(amount: number): string {\n    if (!Number.isFinite(amount)) {\n        throw new PixError(`Amount must be a finite number, got ${amount}.`);\n    }\n    if (amount <= 0) {\n        throw new PixError(\n            `Amount must be positive, got ${amount}. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    const field = amount.toFixed(2);\n    if (Number(field) <= 0) {\n        throw new PixError(\n            `Amount ${amount} rounds to ${field} at two decimals. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    if (field.length > 13) {\n        throw new PixError(`Amount ${field} does not fit tag 54, which holds 13 characters.`);\n    }\n    return field;\n}\n\n/** Bound the two free-text identity fields the spec caps hard. */\nfunction toBoundedText(value: string, max: number, field: string): string {\n    const text = toPayloadText(value.trim(), field);\n    if (text === \"\") throw new PixError(`${field} is required.`);\n    if (text.length > max) {\n        throw new PixError(\n            `${field} is ${text.length} characters; the BR Code allows ${max}. Shorten it — ` +\n                \"truncating here would silently change what the payer sees.\",\n        );\n    }\n    return text;\n}\n\n/** Tag 62, which exists only to carry the txid. */\nfunction additionalDataField(txid: string | undefined): string {\n    const value = txid?.trim() ?? \"\";\n    if (value === \"\" || value === TXID_UNSPECIFIED) {\n        return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, TXID_UNSPECIFIED));\n    }\n    if (!new RegExp(`^[A-Za-z0-9]{1,${MAX_TXID}}$`).test(value)) {\n        throw new PixError(\n            `txid must be 1 to ${MAX_TXID} letters or digits, got ${JSON.stringify(txid)}.`,\n        );\n    }\n    return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, value));\n}\n\n/** Tag 26 for a static payload: GUI, key and the optional description. */\nfunction staticMerchantAccount(input: PixStaticInput): string {\n    const { value } = normalizePixKey(input.key);\n    let inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_KEY, value);\n    const description = input.description?.trim();\n    if (description !== undefined && description !== \"\") {\n        inner += tlv(MAI_TAG_DESCRIPTION, toPayloadText(description, \"description\"));\n    }\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten `description`.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/** Tag 26 for a dynamic payload: GUI plus the URL, and no key. */\nfunction dynamicMerchantAccount(input: PixDynamicInput): string {\n    const url = toPayloadText(input.url.trim(), \"url\").replace(/^https?:\\/\\//i, \"\");\n    if (url === \"\") throw new PixError(\"url is required for a dynamic BR Code.\");\n    const inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_URL, url);\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten the payload URL.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/**\n * Build a Pix \"Copia e Cola\" payload — the string behind a Pix QR code.\n *\n * The format is EMVCo MPM: a flat list of `ID + 2-digit length + value` triples,\n * closed by tag 63 holding a CRC-16/CCITT-FALSE over **everything before it,\n * including the literal `6304` header of tag 63 itself**. That last detail is the\n * one implementations get wrong; see {@link pixCrc16}.\n *\n * Two shapes come out of here:\n *\n * - **static** — tag 26 carries the key, so the QR is self-contained and can be\n *   printed. Amount optional; a txid of `\"***\"` means \"identifies no single\n *   transaction\", which is what a reusable poster QR wants.\n * - **dynamic** — tag 26 carries a URL instead, and the wallet fetches the amount\n *   and payee from the PSP. Use it when the value is per-order. Defaults to\n *   single-use (tag 01 = `12`).\n *\n * The distinction matters and is not cosmetic: a static QR settles against\n * whatever the payer typed, a dynamic one against what the PSP served, so a\n * charge that must reconcile to a cent needs the dynamic form.\n *\n * @param input - Static or dynamic payload description.\n * @returns The full payload, CRC included, ready to render as a QR or to copy.\n * @throws {PixError} On an unrecognised key, a field over its length cap, a\n * non-positive amount, or text that is not representable in the BR Code.\n *\n * @example\n * pixPayload({\n *   key: \"12345678909\",\n *   merchantName: \"Loja Tempest\",\n *   merchantCity: \"São Paulo\",\n *   amount: 25.5,\n *   txid: \"PEDIDO123\",\n * });\n */\nexport function pixPayload(input: PixInput): string {\n    const dynamic = input.kind === \"dynamic\";\n    const oneTime = input.oneTime ?? dynamic;\n\n    let payload = tlv(TAG_PAYLOAD_FORMAT, PAYLOAD_FORMAT_VERSION);\n    payload += tlv(\n        TAG_POINT_OF_INITIATION,\n        oneTime ? POINT_OF_INITIATION_SINGLE_USE : POINT_OF_INITIATION_REUSABLE,\n    );\n    payload += dynamic ? dynamicMerchantAccount(input) : staticMerchantAccount(input);\n    payload += tlv(TAG_MERCHANT_CATEGORY_CODE, DEFAULT_MERCHANT_CATEGORY_CODE);\n    payload += tlv(TAG_TRANSACTION_CURRENCY, CURRENCY_BRL);\n    if (!dynamic && input.amount !== undefined) {\n        payload += tlv(TAG_TRANSACTION_AMOUNT, toAmountField(input.amount));\n    }\n    payload += tlv(TAG_COUNTRY_CODE, COUNTRY_BR);\n    payload += tlv(\n        TAG_MERCHANT_NAME,\n        toBoundedText(input.merchantName, MAX_MERCHANT_NAME, \"merchantName\"),\n    );\n    payload += tlv(\n        TAG_MERCHANT_CITY,\n        toBoundedText(input.merchantCity, MAX_MERCHANT_CITY, \"merchantCity\"),\n    );\n    const postalCode = input.postalCode === undefined ? \"\" : digits(input.postalCode);\n    if (postalCode !== \"\") payload += tlv(TAG_POSTAL_CODE, postalCode);\n    payload += additionalDataField(dynamic ? TXID_UNSPECIFIED : input.txid);\n\n    const withCrcHeader = `${payload}${TAG_CRC}04`;\n    return `${withCrcHeader}${pixCrc16(withCrcHeader)}`;\n}\n\n/**\n * Split a flat run of TLVs. Stops cleanly at the first malformed triple.\n *\n * An ID may appear once per level. The BACEN BR Code manual (v2, May 2020)\n * states it for the root — \"there are no duplicate IDs in the document's root,\n * according to\" EMV® QRCPS-MPM;\n * the same holds here inside tags 26 and 62, which no conforming emitter\n * repeats either. Keeping the first of two values would give the caller one\n * reading of the payload while a wallet that keeps the last pays another.\n *\n * Lengths count characters (code points), as EMV defines them — see {@link tlv}.\n * A payload from another PSP may carry a `String` template (tag 64, or an\n * unreserved one) with non-ASCII text, where counting UTF-16 units would split\n * a character and misread every tag after it.\n *\n * @throws {PixError} When a length prefix is not two digits, runs past the end,\n * or an ID repeats at this level.\n */\nfunction parseTlv(text: string, where: string): PixField[] {\n    const input = Array.from(text);\n    const fields: PixField[] = [];\n    let cursor = 0;\n    while (cursor < input.length) {\n        const id = input.slice(cursor, cursor + 2).join(\"\");\n        const rawLength = input.slice(cursor + 2, cursor + 4).join(\"\");\n        if (!/^\\d{2}$/.test(id) || !/^\\d{2}$/.test(rawLength)) {\n            throw new PixError(\n                `Malformed TLV in ${where} at offset ${cursor}: expected a 2-digit tag and length.`,\n            );\n        }\n        const length = Number(rawLength);\n        const start = cursor + 4;\n        if (start + length > input.length) {\n            throw new PixError(\n                `Tag ${id} in ${where} declares ${length} characters but only ${input.length - start} remain.`,\n            );\n        }\n        if (fields.some((field) => field.id === id)) {\n            throw new PixError(\n                `Tag ${id} in ${where} appears more than once; a BR Code carries each tag once per level.`,\n            );\n        }\n        fields.push({ id, value: input.slice(start, start + length).join(\"\") });\n        cursor = start + length;\n    }\n    return fields;\n}\n\n/** The value of a tag — unique per level, see {@link parseTlv} — or `undefined`. */\nfunction pick(fields: readonly PixField[], id: string): string | undefined {\n    return fields.find((field) => field.id === id)?.value;\n}\n\n/**\n * Read tag 54 into reais.\n *\n * @throws {PixError} When the field is outside the EMV format\n * ({@link AMOUNT_FIELD}) or wider than 13 characters. Zero is read as `0`; see\n * {@link AMOUNT_FIELD} for why the reader accepts what `pixPayload` refuses.\n */\nfunction readAmountField(field: string): number {\n    if (field.length > MAX_AMOUNT_FIELD || !AMOUNT_FIELD.test(field)) {\n        throw new PixError(\n            `Tag 54 (amount) must be an amount like \"25.50\", with \".\" as the decimal mark, ` +\n                `at most two decimals and ${MAX_AMOUNT_FIELD} characters; got ${JSON.stringify(field)}.`,\n        );\n    }\n    return Number(field);\n}\n\n/**\n * Read a Pix \"Copia e Cola\" payload back into its parts.\n *\n * Tolerant by design: tags the SDK does not know about are kept verbatim in\n * {@link PixData.fields} instead of raising, because PSPs do add their own\n * templates and a reader that rejects them is useless in production. What is\n * *not* tolerated is a broken frame — a length prefix that runs off the end, a\n * missing tag 63 — a checksum mismatch, which means the string was corrupted in\n * transit, or a payload with two readings: a tag repeated at the root or inside\n * tags 26 and 62, a tag 63 anywhere but at the end, a tag 26 with both a key and\n * a URL, or a tag 54 outside the EMV amount format. A preview built from one\n * reading while the wallet pays the other is the failure those rules exist for.\n *\n * Position is checked where EMV® QRCPS-MPM — the reference the BACEN manual\n * defers to — fixes it: tag 00 is the first object and tag 63 the last; every\n * other root tag may appear in any order. Before #475 an inner `6304` + CRC\n * followed by `5405…` and a second `6304` + CRC parsed as a priced payload,\n * while the same text cut at the first CRC was a valid payload with no amount.\n *\n * The CRC detects corruption, not authorship: whoever crafts a payload\n * recomputes it, so a valid CRC says nothing about who published the account.\n *\n * @param payload - The copia-e-cola string. Surrounding whitespace is ignored.\n * @param options - See {@link ParsePixOptions}.\n * @returns The decoded payload.\n * @throws {PixError} On a malformed frame, a missing CRC tag, a tag 00 that is\n * not first or a tag 63 that is not last, a repeated tag, a\n * tag 26 that is not a Pix account or that carries both a key and a URL, an\n * amount outside the EMV format, or — unless `requireCrc` is `false` — a CRC\n * mismatch.\n *\n * @example\n * const data = parsePixPayload(copied);\n * console.log(data.key, data.amount, data.txid);\n */\nexport function parsePixPayload(payload: string, options: ParsePixOptions = {}): PixData {\n    const { requireCrc = true } = options;\n    const text = payload.trim();\n    if (text.length < 8) throw new PixError(\"Payload is too short to be a BR Code.\");\n\n    const crcHeaderAt = text.length - 8;\n    if (text.slice(crcHeaderAt, crcHeaderAt + 4) !== `${TAG_CRC}04`) {\n        throw new PixError(\"Payload does not end in a `6304` CRC tag.\");\n    }\n    const crc = text.slice(-4).toUpperCase();\n    const expected = pixCrc16(text.slice(0, -4));\n    const crcValid = crc === expected;\n    if (!crcValid && requireCrc) {\n        throw new PixError(`CRC mismatch: payload says ${crc}, recomputed ${expected}.`);\n    }\n\n    const fields = parseTlv(text.slice(0, crcHeaderAt), \"payload\");\n    if (fields[0]?.id !== TAG_PAYLOAD_FORMAT) {\n        throw new PixError(\"Tag 00 (payload format indicator) must be the first tag of a BR Code.\");\n    }\n    if (fields.some((field) => field.id === TAG_CRC)) {\n        throw new PixError(\n            \"Tag 63 (CRC) must be the last tag of a BR Code; this payload carries another one before the end.\",\n        );\n    }\n    const merchantAccount = pick(fields, TAG_MERCHANT_ACCOUNT_INFO);\n    if (merchantAccount === undefined) {\n        throw new PixError(\"Payload has no tag 26 (merchant account information).\");\n    }\n    const account = parseTlv(merchantAccount, \"tag 26\");\n    const gui = pick(account, MAI_TAG_GUI);\n    if (gui?.toLowerCase() !== PIX_GUI) {\n        throw new PixError(\n            `Tag 26 is not a Pix account: expected GUI ${PIX_GUI}, got ${JSON.stringify(gui)}.`,\n        );\n    }\n\n    const url = pick(account, MAI_TAG_URL);\n    const key = pick(account, MAI_TAG_KEY);\n    if (url !== undefined && key !== undefined) {\n        throw new PixError(\n            \"Tag 26 carries both a key (01) and a URL (25); a BR Code is either static or dynamic, not both.\",\n        );\n    }\n    const amountField = pick(fields, TAG_TRANSACTION_AMOUNT);\n    const txid = pick(\n        parseTlv(pick(fields, TAG_ADDITIONAL_DATA) ?? \"\", \"tag 62\"),\n        ADDITIONAL_TAG_TXID,\n    );\n\n    return {\n        kind: url === undefined ? \"static\" : \"dynamic\",\n        ...(key === undefined ? {} : { key, keyType: pixKeyType(key) ?? undefined }),\n        ...(url === undefined ? {} : { url }),\n        merchantName: pick(fields, TAG_MERCHANT_NAME) ?? \"\",\n        merchantCity: pick(fields, TAG_MERCHANT_CITY) ?? \"\",\n        ...(amountField === undefined ? {} : { amount: readAmountField(amountField) }),\n        currency: pick(fields, TAG_TRANSACTION_CURRENCY) ?? \"\",\n        countryCode: pick(fields, TAG_COUNTRY_CODE) ?? \"\",\n        merchantCategoryCode: pick(fields, TAG_MERCHANT_CATEGORY_CODE) ?? \"\",\n        ...(txid === undefined ? {} : { txid }),\n        ...(pick(account, MAI_TAG_DESCRIPTION) === undefined\n            ? {}\n            : { description: pick(account, MAI_TAG_DESCRIPTION) }),\n        ...(pick(fields, TAG_POSTAL_CODE) === undefined\n            ? {}\n            : { postalCode: pick(fields, TAG_POSTAL_CODE) }),\n        oneTime: pick(fields, TAG_POINT_OF_INITIATION) === POINT_OF_INITIATION_SINGLE_USE,\n        crc,\n        crcValid,\n        fields,\n    };\n}\n"],"mappings":"8CAeA,IAAa,EAAb,cAA8B,KAAM,CAChC,YAAY,EAAiB,CACzB,MAAM,CAAO,EACb,KAAK,KAAO,UAChB,CACJ,EA8GM,EAAmB,KAGnB,EAAgB,MAGhB,EAAa,MAEb,EAAqB,KACrB,EAA0B,KAC1B,EAA4B,KAC5B,EAA6B,KAC7B,EAA2B,KAC3B,EAAyB,KACzB,EAAmB,KACnB,EAAoB,KACpB,EAAoB,KACpB,EAAkB,KAClB,EAAsB,KACtB,EAAU,KAEV,EAAc,KACd,EAAc,KACd,EAAsB,KACtB,EAAc,KACd,EAAsB,KAGtB,EAAU,iBAEV,EAAyB,KACzB,EAA+B,KAC/B,EAAiC,KACjC,EAAiC,OACjC,EAAe,MACf,EAAa,KACb,EAAmB,MAEnB,EAAoB,GACpB,EAAoB,GACpB,EAAW,GACX,EAAgB,GAChB,EAAgB,GAchB,EAAe,sBAGf,EAAmB,GAoBzB,SAAgB,EAAS,EAAuB,CAC5C,IAAM,EAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,CAAK,EACxC,EAAM,EACV,IAAK,IAAM,KAAQ,EAAO,CACtB,GAAO,GAAQ,EACf,IAAK,IAAI,EAAM,EAAG,EAAM,EAAG,GAAO,EAC9B,EACK,EAAM,OACC,GAAO,EAAK,GAAoB,EACjC,GAAO,EAAK,CAE/B,CACA,OAAO,EAAI,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,EAAG,GAAG,CACzD,CAGA,SAAS,EAAO,EAAuB,CACnC,OAAO,EAAM,QAAQ,MAAO,EAAE,CAClC,CAWA,SAAS,EAAc,EAAe,EAAuB,CACzD,IAAM,EAAW,EAAM,UAAU,KAAK,CAAC,CAAC,QAAQ,kBAAmB,EAAE,EACrE,GAAI,eAAe,KAAK,CAAQ,EAC5B,MAAM,IAAI,EACN,GAAG,EAAM,4CAA4C,KAAK,UAAU,CAAK,EAAE,wBAE/E,EAEJ,OAAO,CACX,CAWA,IAAM,EAAuB,iBAc7B,SAAS,EAAI,EAAY,EAAuB,CAC5C,GAAI,CAAC,EAAqB,KAAK,CAAK,EAChC,MAAM,IAAI,EACN,OAAO,EAAG,0EACH,KAAK,UAAU,CAAK,EAAE,EACjC,EAEJ,GAAI,EAAM,OAAS,EACf,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,OAAO,kDAAkD,EAAc,EACjG,EAEJ,MAAO,GAAG,IAAK,OAAO,EAAM,MAAM,CAAC,CAAC,SAAS,EAAG,GAAG,IAAI,GAC3D,CAcA,SAAgB,EAAW,EAAgC,CACvD,IAAM,EAAU,EAAI,KAAK,EACzB,GAAI,IAAY,GAAI,OAAO,KAE3B,GAAI,EAAQ,SAAS,GAAG,EACpB,MAAO,gCAAgC,KAAK,CAAO,GAAK,EAAQ,QAAU,EACpE,QACA,KAEV,GAAI,kEAAkE,KAAK,CAAO,EAC9E,MAAO,MAGX,IAAM,EAAU,EAAO,CAAO,EAU9B,OATI,EAAQ,SAAW,GAAW,EAAA,aAAa,CAAO,EAAI,OAAS,KAC/D,EAAQ,SAAW,IAAM,EAAA,YAAY,CAAO,EAAU,MACtD,EAAQ,WAAW,GAAG,EACf,kBAAkB,KAAK,IAAI,GAAS,EAAI,QAAU,KAEzD,EAAQ,SAAW,IAAM,EAAQ,SAAW,KAC5C,EAAQ,SAAW,IAAM,EAAQ,SAAW,KACrC,EAAQ,WAAW,IAAI,EAFyB,QAEX,IAGpD,CAuBA,SAAgB,EAAgB,EAA+B,CAC3D,IAAM,EAAU,EAAI,KAAK,EACnB,EAAO,EAAW,CAAO,EAC/B,GAAI,IAAS,KACT,MAAM,IAAI,EACN,kBAAkB,KAAK,UAAU,CAAG,EAAE,sEAE1C,EAIJ,GADI,IAAS,SACT,IAAS,MAAO,MAAO,CAAE,OAAM,MAAO,EAAQ,YAAY,CAAE,EAChE,GAAI,IAAS,QAAS,CAClB,IAAM,EAAU,EAAO,CAAO,EAC9B,MAAO,CAAE,OAAM,MAAO,MAAM,EAAQ,OAAS,GAAK,EAAQ,MAAM,CAAC,EAAI,GAAU,CACnF,CACA,MAAO,CAAE,OAAM,MAAO,EAAO,CAAO,CAAE,CAC1C,CAQA,SAAS,EAAc,EAAwB,CAC3C,GAAI,CAAC,OAAO,SAAS,CAAM,EACvB,MAAM,IAAI,EAAS,uCAAuC,EAAO,EAAE,EAEvE,GAAI,GAAU,EACV,MAAM,IAAI,EACN,gCAAgC,EAAO,wDAC3C,EAEJ,IAAM,EAAQ,EAAO,QAAQ,CAAC,EAC9B,GAAI,OAAO,CAAK,GAAK,EACjB,MAAM,IAAI,EACN,UAAU,EAAO,aAAa,EAAM,wEACxC,EAEJ,GAAI,EAAM,OAAS,GACf,MAAM,IAAI,EAAS,UAAU,EAAM,iDAAiD,EAExF,OAAO,CACX,CAGA,SAAS,EAAc,EAAe,EAAa,EAAuB,CACtE,IAAM,EAAO,EAAc,EAAM,KAAK,EAAG,CAAK,EAC9C,GAAI,IAAS,GAAI,MAAM,IAAI,EAAS,GAAG,EAAM,cAAc,EAC3D,GAAI,EAAK,OAAS,EACd,MAAM,IAAI,EACN,GAAG,EAAM,MAAM,EAAK,OAAO,kCAAkC,EAAI,0EAErE,EAEJ,OAAO,CACX,CAGA,SAAS,EAAoB,EAAkC,CAC3D,IAAM,EAAQ,GAAM,KAAK,GAAK,GAC9B,GAAI,IAAU,IAAM,IAAU,EAC1B,OAAO,EAAI,EAAqB,EAAI,EAAqB,CAAgB,CAAC,EAE9E,GAAI,CAAK,OAAO,kBAAkB,EAAS,GAAG,CAAC,CAAC,KAAK,CAAK,EACtD,MAAM,IAAI,EACN,qBAAqB,EAAS,0BAA0B,KAAK,UAAU,CAAI,EAAE,EACjF,EAEJ,OAAO,EAAI,EAAqB,EAAI,EAAqB,CAAK,CAAC,CACnE,CAGA,SAAS,EAAsB,EAA+B,CAC1D,GAAM,CAAE,SAAU,EAAgB,EAAM,GAAG,EACvC,EAAQ,EAAI,EAAa,CAAO,EAAI,EAAI,EAAa,CAAK,EACxD,EAAc,EAAM,aAAa,KAAK,EAI5C,GAHI,IAAgB,IAAA,IAAa,IAAgB,KAC7C,GAAS,EAAI,EAAqB,EAAc,EAAa,aAAa,CAAC,GAE3E,EAAM,OAAS,EACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE,EAEJ,OAAO,EAAI,EAA2B,CAAK,CAC/C,CAGA,SAAS,EAAuB,EAAgC,CAC5D,IAAM,EAAM,EAAc,EAAM,IAAI,KAAK,EAAG,KAAK,CAAC,CAAC,QAAQ,gBAAiB,EAAE,EAC9E,GAAI,IAAQ,GAAI,MAAM,IAAI,EAAS,wCAAwC,EAC3E,IAAM,EAAQ,EAAI,EAAa,CAAO,EAAI,EAAI,EAAa,CAAG,EAC9D,GAAI,EAAM,OAAS,EACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE,EAEJ,OAAO,EAAI,EAA2B,CAAK,CAC/C,CAqCA,SAAgB,EAAW,EAAyB,CAChD,IAAM,EAAU,EAAM,OAAS,UACzB,EAAU,EAAM,SAAW,EAE7B,EAAU,EAAI,EAAoB,CAAsB,EAC5D,GAAW,EACP,EACA,EAAU,EAAiC,CAC/C,EACA,GAAW,EAAU,EAAuB,CAAK,EAAI,EAAsB,CAAK,EAChF,GAAW,EAAI,EAA4B,CAA8B,EACzE,GAAW,EAAI,EAA0B,CAAY,EACjD,CAAC,GAAW,EAAM,SAAW,IAAA,KAC7B,GAAW,EAAI,EAAwB,EAAc,EAAM,MAAM,CAAC,GAEtE,GAAW,EAAI,EAAkB,CAAU,EAC3C,GAAW,EACP,EACA,EAAc,EAAM,aAAc,EAAmB,cAAc,CACvE,EACA,GAAW,EACP,EACA,EAAc,EAAM,aAAc,EAAmB,cAAc,CACvE,EACA,IAAM,EAAa,EAAM,aAAe,IAAA,GAAY,GAAK,EAAO,EAAM,UAAU,EAC5E,IAAe,KAAI,GAAW,EAAI,EAAiB,CAAU,GACjE,GAAW,EAAoB,EAAU,EAAmB,EAAM,IAAI,EAEtE,IAAM,EAAgB,GAAG,IAAU,EAAQ,IAC3C,MAAO,GAAG,IAAgB,EAAS,CAAa,GACpD,CAoBA,SAAS,EAAS,EAAc,EAA2B,CACvD,IAAM,EAAQ,MAAM,KAAK,CAAI,EACvB,EAAqB,CAAC,EACxB,EAAS,EACb,KAAO,EAAS,EAAM,QAAQ,CAC1B,IAAM,EAAK,EAAM,MAAM,EAAQ,EAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAC5C,EAAY,EAAM,MAAM,EAAS,EAAG,EAAS,CAAC,CAAC,CAAC,KAAK,EAAE,EAC7D,GAAI,CAAC,UAAU,KAAK,CAAE,GAAK,CAAC,UAAU,KAAK,CAAS,EAChD,MAAM,IAAI,EACN,oBAAoB,EAAM,aAAa,EAAO,qCAClD,EAEJ,IAAM,EAAS,OAAO,CAAS,EACzB,EAAQ,EAAS,EACvB,GAAI,EAAQ,EAAS,EAAM,OACvB,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,YAAY,EAAO,uBAAuB,EAAM,OAAS,EAAM,SACzF,EAEJ,GAAI,EAAO,KAAM,GAAU,EAAM,KAAO,CAAE,EACtC,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,oEAC1B,EAEJ,EAAO,KAAK,CAAE,KAAI,MAAO,EAAM,MAAM,EAAO,EAAQ,CAAM,CAAC,CAAC,KAAK,EAAE,CAAE,CAAC,EACtE,EAAS,EAAQ,CACrB,CACA,OAAO,CACX,CAGA,SAAS,EAAK,EAA6B,EAAgC,CACvE,OAAO,EAAO,KAAM,GAAU,EAAM,KAAO,CAAE,CAAC,EAAE,KACpD,CASA,SAAS,EAAgB,EAAuB,CAC5C,GAAI,EAAM,OAAS,GAAoB,CAAC,EAAa,KAAK,CAAK,EAC3D,MAAM,IAAI,EACN,0GACgC,EAAiB,mBAAmB,KAAK,UAAU,CAAK,EAAE,EAC9F,EAEJ,OAAO,OAAO,CAAK,CACvB,CAqCA,SAAgB,EAAgB,EAAiB,EAA2B,CAAC,EAAY,CACrF,GAAM,CAAE,aAAa,IAAS,EACxB,EAAO,EAAQ,KAAK,EAC1B,GAAI,EAAK,OAAS,EAAG,MAAM,IAAI,EAAS,uCAAuC,EAE/E,IAAM,EAAc,EAAK,OAAS,EAClC,GAAI,EAAK,MAAM,EAAa,EAAc,CAAC,IAAM,GAAG,EAAQ,IACxD,MAAM,IAAI,EAAS,2CAA2C,EAElE,IAAM,EAAM,EAAK,MAAM,EAAE,CAAC,CAAC,YAAY,EACjC,EAAW,EAAS,EAAK,MAAM,EAAG,EAAE,CAAC,EACrC,EAAW,IAAQ,EACzB,GAAI,CAAC,GAAY,EACb,MAAM,IAAI,EAAS,8BAA8B,EAAI,eAAe,EAAS,EAAE,EAGnF,IAAM,EAAS,EAAS,EAAK,MAAM,EAAG,CAAW,EAAG,SAAS,EAC7D,GAAI,EAAO,EAAE,EAAE,KAAO,EAClB,MAAM,IAAI,EAAS,uEAAuE,EAE9F,GAAI,EAAO,KAAM,GAAU,EAAM,KAAO,CAAO,EAC3C,MAAM,IAAI,EACN,kGACJ,EAEJ,IAAM,EAAkB,EAAK,EAAQ,CAAyB,EAC9D,GAAI,IAAoB,IAAA,GACpB,MAAM,IAAI,EAAS,uDAAuD,EAE9E,IAAM,EAAU,EAAS,EAAiB,QAAQ,EAC5C,EAAM,EAAK,EAAS,CAAW,EACrC,GAAI,GAAK,YAAY,IAAM,EACvB,MAAM,IAAI,EACN,6CAA6C,EAAQ,QAAQ,KAAK,UAAU,CAAG,EAAE,EACrF,EAGJ,IAAM,EAAM,EAAK,EAAS,CAAW,EAC/B,EAAM,EAAK,EAAS,CAAW,EACrC,GAAI,IAAQ,IAAA,IAAa,IAAQ,IAAA,GAC7B,MAAM,IAAI,EACN,iGACJ,EAEJ,IAAM,EAAc,EAAK,EAAQ,CAAsB,EACjD,EAAO,EACT,EAAS,EAAK,EAAQ,CAAmB,GAAK,GAAI,QAAQ,EAC1D,CACJ,EAEA,MAAO,CACH,KAAM,IAAQ,IAAA,GAAY,SAAW,UACrC,GAAI,IAAQ,IAAA,GAAY,CAAC,EAAI,CAAE,MAAK,QAAS,EAAW,CAAG,GAAK,IAAA,EAAU,EAC1E,GAAI,IAAQ,IAAA,GAAY,CAAC,EAAI,CAAE,KAAI,EACnC,aAAc,EAAK,EAAQ,CAAiB,GAAK,GACjD,aAAc,EAAK,EAAQ,CAAiB,GAAK,GACjD,GAAI,IAAgB,IAAA,GAAY,CAAC,EAAI,CAAE,OAAQ,EAAgB,CAAW,CAAE,EAC5E,SAAU,EAAK,EAAQ,CAAwB,GAAK,GACpD,YAAa,EAAK,EAAQ,CAAgB,GAAK,GAC/C,qBAAsB,EAAK,EAAQ,CAA0B,GAAK,GAClE,GAAI,IAAS,IAAA,GAAY,CAAC,EAAI,CAAE,MAAK,EACrC,GAAI,EAAK,EAAS,CAAmB,IAAM,IAAA,GACrC,CAAC,EACD,CAAE,YAAa,EAAK,EAAS,CAAmB,CAAE,EACxD,GAAI,EAAK,EAAQ,CAAe,IAAM,IAAA,GAChC,CAAC,EACD,CAAE,WAAY,EAAK,EAAQ,CAAe,CAAE,EAClD,QAAS,EAAK,EAAQ,CAAuB,IAAM,EACnD,MACA,WACA,QACJ,CACJ"}

package/dist/br/pix.js

@@ -121,35 +121,38 @@ function ee(e, t = {}) {
 	if (i.length < 8) throw new n("Payload is too short to be a BR Code.");
 	let a = i.length - 8;
 	if (i.slice(a, a + 4) !== `${_}04`) throw new n("Payload does not end in a `6304` CRC tag.");
-	let o = i.slice(-4).toUpperCase(), w = R(i.slice(0, -4)), T = o === w;
-	if (!T && r) throw new n(`CRC mismatch: payload says ${o}, recomputed ${w}.`);
-	let D = Z(i.slice(0, a), "payload"), O = Q(D, c);
-	if (O === void 0) throw new n("Payload has no tag 26 (merchant account information).");
-	let k = Z(O, "tag 26"), A = Q(k, v);
-	if (A?.toLowerCase() !== C) throw new n(`Tag 26 is not a Pix account: expected GUI ${C}, got ${JSON.stringify(A)}.`);
-	let j = Q(k, x), M = Q(k, y);
-	if (j !== void 0 && M !== void 0) throw new n("Tag 26 carries both a key (01) and a URL (25); a BR Code is either static or dynamic, not both.");
-	let N = Q(D, d), P = Q(Z(Q(D, g) ?? "", "tag 62"), S);
+	let w = i.slice(-4).toUpperCase(), T = R(i.slice(0, -4)), D = w === T;
+	if (!D && r) throw new n(`CRC mismatch: payload says ${w}, recomputed ${T}.`);
+	let O = Z(i.slice(0, a), "payload");
+	if (O[0]?.id !== o) throw new n("Tag 00 (payload format indicator) must be the first tag of a BR Code.");
+	if (O.some((e) => e.id === _)) throw new n("Tag 63 (CRC) must be the last tag of a BR Code; this payload carries another one before the end.");
+	let k = Q(O, c);
+	if (k === void 0) throw new n("Payload has no tag 26 (merchant account information).");
+	let A = Z(k, "tag 26"), j = Q(A, v);
+	if (j?.toLowerCase() !== C) throw new n(`Tag 26 is not a Pix account: expected GUI ${C}, got ${JSON.stringify(j)}.`);
+	let M = Q(A, x), N = Q(A, y);
+	if (M !== void 0 && N !== void 0) throw new n("Tag 26 carries both a key (01) and a URL (25); a BR Code is either static or dynamic, not both.");
+	let P = Q(O, d), F = Q(Z(Q(O, g) ?? "", "tag 62"), S);
 	return {
-		kind: j === void 0 ? "static" : "dynamic",
-		...M === void 0 ? {} : {
-			key: M,
-			keyType: U(M) ?? void 0
+		kind: M === void 0 ? "static" : "dynamic",
+		...N === void 0 ? {} : {
+			key: N,
+			keyType: U(N) ?? void 0
 		},
-		...j === void 0 ? {} : { url: j },
-		merchantName: Q(D, p) ?? "",
-		merchantCity: Q(D, m) ?? "",
-		...N === void 0 ? {} : { amount: $(N) },
-		currency: Q(D, u) ?? "",
-		countryCode: Q(D, f) ?? "",
-		merchantCategoryCode: Q(D, l) ?? "",
-		...P === void 0 ? {} : { txid: P },
-		...Q(k, b) === void 0 ? {} : { description: Q(k, b) },
-		...Q(D, h) === void 0 ? {} : { postalCode: Q(D, h) },
-		oneTime: Q(D, s) === E,
-		crc: o,
-		crcValid: T,
-		fields: D
+		...M === void 0 ? {} : { url: M },
+		merchantName: Q(O, p) ?? "",
+		merchantCity: Q(O, m) ?? "",
+		...P === void 0 ? {} : { amount: $(P) },
+		currency: Q(O, u) ?? "",
+		countryCode: Q(O, f) ?? "",
+		merchantCategoryCode: Q(O, l) ?? "",
+		...F === void 0 ? {} : { txid: F },
+		...Q(A, b) === void 0 ? {} : { description: Q(A, b) },
+		...Q(O, h) === void 0 ? {} : { postalCode: Q(O, h) },
+		oneTime: Q(O, s) === E,
+		crc: w,
+		crcValid: D,
+		fields: O
 	};
 }
 //#endregion

package/dist/br/pix.js.map

@@ -1 +1 @@
-{"version":3,"file":"pix.js","names":[],"sources":["../../src/br/pix.ts"],"sourcesContent":["/**\n * @tempest-limits file-lines — EMV®QRCPS-MPM for Pix: the TLV writer, the\n * CRC16-CCITT, the field catalogue with its nesting, key-type detection and the\n * parser that has to accept what other banks emit. Reader and writer live together\n * because each one is the other's test — a payload this file builds is a payload it\n * must parse back.\n */\nimport { validateCNPJ, validateCPF } from \"@/forms/br-validators\";\n\n/**\n * A Pix payload could not be built or read.\n *\n * Its own class so a caller can tell \"the operator typed a bad key\" apart from a\n * bug, and so an `ErrorBoundary` can render a form error instead of a crash.\n */\nexport class PixError extends Error {\n    constructor(message: string) {\n        super(message);\n        this.name = \"PixError\";\n    }\n}\n\n/** The five key formats DICT accepts. */\nexport type PixKeyType = \"cpf\" | \"cnpj\" | \"email\" | \"phone\" | \"evp\";\n\n/** A key after normalisation, ready to go into the payload. */\nexport interface NormalizedPixKey {\n    type: PixKeyType;\n    /** The exact string written into the BR Code. */\n    value: string;\n}\n\n/** One TLV as it appeared in a payload, unknown tags included. */\nexport interface PixField {\n    /** Two-character tag, e.g. `\"59\"`. */\n    id: string;\n    /** Raw value, still encoded when the tag is itself a template. */\n    value: string;\n}\n\n/** A BR Code that carries the key — the one you print on a poster. */\nexport interface PixStaticInput {\n    kind?: \"static\";\n    /** CPF, CNPJ, e-mail, phone or EVP. Validated and normalised. */\n    key: string;\n    /** Payee name. Truncated by the spec at 25 characters — longer throws. */\n    merchantName: string;\n    /** Payee city. Truncated by the spec at 15 characters — longer throws. */\n    merchantCity: string;\n    /** Amount in BRL. Omit for a payer-chooses-the-value QR. */\n    amount?: number;\n    /** Reference the PSP echoes back, `[A-Za-z0-9]{1,25}`. Defaults to `\"***\"`. */\n    txid?: string;\n    /** Free text shown by some wallets. Goes into tag 26, sub-tag 02. */\n    description?: string;\n    /** CEP, digits only. Optional tag 61. */\n    postalCode?: string;\n    /** Single-use QR: sets tag 01 to `\"12\"` instead of `\"11\"`. */\n    oneTime?: boolean;\n}\n\n/** A BR Code that carries a URL the wallet fetches to learn the amount. */\nexport interface PixDynamicInput {\n    kind: \"dynamic\";\n    /**\n     * `payloadLocation` — the https URL the wallet GETs, **without** the scheme,\n     * exactly as BACEN specifies (`pix.example.com/qr/v2/abc`).\n     */\n    url: string;\n    merchantName: string;\n    merchantCity: string;\n    postalCode?: string;\n    /** Single-use QR. Defaults to `true`, which is what a dynamic QR normally is. */\n    oneTime?: boolean;\n}\n\n/** Everything `pixPayload` accepts. */\nexport type PixInput = PixStaticInput | PixDynamicInput;\n\n/** A payload taken apart again. */\nexport interface PixData {\n    /** `\"dynamic\"` when tag 26 carried a URL instead of a key. */\n    kind: \"static\" | \"dynamic\";\n    /** Present on a static payload. */\n    key?: string;\n    keyType?: PixKeyType;\n    /** Present on a dynamic payload. */\n    url?: string;\n    merchantName: string;\n    merchantCity: string;\n    /** Reais. `undefined` when the payer chooses the amount. */\n    amount?: number;\n    /** ISO 4217 numeric. `\"986\"` for BRL. */\n    currency: string;\n    countryCode: string;\n    merchantCategoryCode: string;\n    /** `\"***\"` on a reusable static QR that identifies no single transaction. */\n    txid?: string;\n    description?: string;\n    postalCode?: string;\n    /** Tag 01 read as `\"12\"`. */\n    oneTime: boolean;\n    /** The four hex characters that closed the payload. */\n    crc: string;\n    /** Whether those four characters match a recomputed CRC. */\n    crcValid: boolean;\n    /** Every top-level TLV, in payload order, unknown tags included. */\n    fields: PixField[];\n}\n\n/** Options for {@link parsePixPayload}. */\nexport interface ParsePixOptions {\n    /**\n     * Throw when the checksum does not match. Default `true`.\n     *\n     * Turn it off only to inspect a payload you already know is broken: a BR Code\n     * whose CRC fails has been corrupted in transit, and the account it now points\n     * at is not the account the payee published.\n     */\n    requireCrc?: boolean;\n}\n\n/**\n * Generator polynomial of CRC-16/CCITT-FALSE, `x^16 + x^12 + x^5 + 1`.\n *\n * Taken from the CRC catalogue entry `CRC-16/IBM-3740` (alias CCITT-FALSE):\n * `width=16 poly=0x1021 init=0xffff refin=false refout=false xorout=0x0000\n * check=0x29b1`. The BACEN \"Manual de Padrões para Iniciação do Pix\" names this\n * exact variant for tag 63.\n */\nconst CRC16_POLYNOMIAL = 0x1021;\n\n/** Register preset of CRC-16/CCITT-FALSE. Not zero — that is a different variant. */\nconst CRC16_INITIAL = 0xffff;\n\n/** Keeps the shift register 16 bits wide. */\nconst CRC16_MASK = 0xffff;\n\nconst TAG_PAYLOAD_FORMAT = \"00\";\nconst TAG_POINT_OF_INITIATION = \"01\";\nconst TAG_MERCHANT_ACCOUNT_INFO = \"26\";\nconst TAG_MERCHANT_CATEGORY_CODE = \"52\";\nconst TAG_TRANSACTION_CURRENCY = \"53\";\nconst TAG_TRANSACTION_AMOUNT = \"54\";\nconst TAG_COUNTRY_CODE = \"58\";\nconst TAG_MERCHANT_NAME = \"59\";\nconst TAG_MERCHANT_CITY = \"60\";\nconst TAG_POSTAL_CODE = \"61\";\nconst TAG_ADDITIONAL_DATA = \"62\";\nconst TAG_CRC = \"63\";\n\nconst MAI_TAG_GUI = \"00\";\nconst MAI_TAG_KEY = \"01\";\nconst MAI_TAG_DESCRIPTION = \"02\";\nconst MAI_TAG_URL = \"25\";\nconst ADDITIONAL_TAG_TXID = \"05\";\n\n/** Globally Unique Identifier that marks tag 26 as a Pix account. */\nconst PIX_GUI = \"br.gov.bcb.pix\";\n\nconst PAYLOAD_FORMAT_VERSION = \"01\";\nconst POINT_OF_INITIATION_REUSABLE = \"11\";\nconst POINT_OF_INITIATION_SINGLE_USE = \"12\";\nconst DEFAULT_MERCHANT_CATEGORY_CODE = \"0000\";\nconst CURRENCY_BRL = \"986\";\nconst COUNTRY_BR = \"BR\";\nconst TXID_UNSPECIFIED = \"***\";\n\nconst MAX_MERCHANT_NAME = 25;\nconst MAX_MERCHANT_CITY = 15;\nconst MAX_TXID = 25;\nconst MAX_TLV_VALUE = 99;\nconst MAX_EMAIL_KEY = 77;\n\n/**\n * Tag 54 as EMV® QRCPS-MPM writes it: digits, and at most one `.` as the decimal\n * mark, which \"may be present even if there are no decimals\" (`\"98.\"`). Up to two\n * decimals, the minor unit ISO 4217 gives BRL (`986`). No sign, exponent, comma,\n * hex prefix or whitespace — every one of which `Number()` would happily read.\n *\n * Zero (`\"0\"`, `\"0.00\"`) is accepted: EMV asks for a non-zero amount, but the BACEN\n * BR Code manual (v2, Table 1) gives `\"0\"` as an example value of tag 54, and the\n * parser reads payloads other PSPs emit — strict with what is malformed, tolerant\n * with what the Bacen spec accepts. The builder stays stricter: `pixPayload`\n * still refuses a non-positive amount, because it only writes what we choose to emit.\n */\nconst AMOUNT_FIELD = /^\\d+(?:\\.\\d{0,2})?$/;\n\n/** Width of tag 54: \"01..13\" in the BACEN BR Code manual, Table 1. */\nconst MAX_AMOUNT_FIELD = 13;\n\n/**\n * CRC-16/CCITT-FALSE of a string, as four upper-case hex characters.\n *\n * Bitwise rather than table-driven: 200-odd characters at 8 shifts each is\n * nothing, and a 256-entry table is 2 KB of payload every consumer of the `/br`\n * entry would carry.\n *\n * The input is taken as UTF-8 bytes. A Pix payload is ASCII by construction —\n * {@link pixPayload} rejects anything else — but the function is exported and a\n * caller may hand it arbitrary text, and hashing UTF-16 code units would then\n * disagree with every other implementation.\n *\n * @param input - Bytes to run through the register.\n * @returns Four upper-case hex characters, zero-padded.\n *\n * @example\n * pixCrc16(\"123456789\"); // \"29B1\" — the catalogue check value\n */\nexport function pixCrc16(input: string): string {\n    const bytes = new TextEncoder().encode(input);\n    let crc = CRC16_INITIAL;\n    for (const byte of bytes) {\n        crc ^= byte << 8;\n        for (let bit = 0; bit < 8; bit += 1) {\n            crc =\n                (crc & 0x8000) !== 0\n                    ? ((crc << 1) ^ CRC16_POLYNOMIAL) & CRC16_MASK\n                    : (crc << 1) & CRC16_MASK;\n        }\n    }\n    return crc.toString(16).toUpperCase().padStart(4, \"0\");\n}\n\n/** Digits of a possibly masked value. */\nfunction digits(value: string): string {\n    return value.replace(/\\D/g, \"\");\n}\n\n/**\n * Drop diacritics and reject whatever is left outside printable ASCII.\n *\n * The BR Code character set has no room for accents, and a wallet that meets one\n * either fails to parse the QR or shows mojibake. Stripping them is lossy but\n * legible (\"São Paulo\" → \"Sao Paulo\"), which beats both alternatives; anything\n * that is not a diacritic — an emoji, a CJK character — is a mistake the caller\n * has to see, so it throws.\n */\nfunction toPayloadText(value: string, field: string): string {\n    const stripped = value.normalize(\"NFD\").replace(/\\p{Diacritic}/gu, \"\");\n    if (/[^\\x20-\\x7E]/.test(stripped)) {\n        throw new PixError(\n            `${field} has characters the BR Code cannot carry: ${JSON.stringify(value)}. ` +\n                \"Use unaccented ASCII.\",\n        );\n    }\n    return stripped;\n}\n\n/**\n * The EMV \"Common Character Set\" that an `ans` (Alphanumeric Special) field may\n * carry: printable ASCII, `0x20`–`0x7E`. Every root field of a BR Code is `ans`,\n * and the BACEN BR Code manual (v2, May 2020) only widened it from alphanumeric —\n * \"The restriction that established that only alphanumeric characters could be\n * used has been removed\" — not past it. Only the alternate-language template\n * (tag 64) is `String` and may carry another character set, and the builder\n * never writes it.\n */\nconst COMMON_CHARACTER_SET = /^[\\x20-\\x7E]*$/;\n\n/**\n * One `ID + 2-digit length + value` triple.\n *\n * The length is \"the number of characters included in the [value] field\" (EMV\n * MPM, as restated by the HKMA Common QR Code Specification §2; the BACEN manual:\n * \"size specifies how many characters\"). Inside the common character set a\n * character is one UTF-16 unit and one UTF-8 byte, so `value.length` is exact —\n * which is why a value outside it throws instead of being measured.\n *\n * @throws {PixError} When the value leaves the common character set or exceeds\n * the two-digit length.\n */\nfunction tlv(id: string, value: string): string {\n    if (!COMMON_CHARACTER_SET.test(value)) {\n        throw new PixError(\n            `Tag ${id} has characters outside the EMV common character set (printable ASCII): ` +\n                `${JSON.stringify(value)}.`,\n        );\n    }\n    if (value.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag ${id} is ${value.length} characters; the EMV length field holds at most ${MAX_TLV_VALUE}.`,\n        );\n    }\n    return `${id}${String(value.length).padStart(2, \"0\")}${value}`;\n}\n\n/**\n * Classify a Pix key, or `null` when it matches no accepted format.\n *\n * !!! warning \"CPF and a national phone number are both eleven digits\"\n *     `\"11987654321\"` is a valid mobile number and could be a CPF. The check\n *     digits break the tie: an 11-digit string is a CPF when its DV validates and\n *     a phone otherwise. Pass phone keys as `+5511987654321` to remove the guess\n *     entirely.\n *\n * @param key - Raw key, masked or not.\n * @returns The key type, or `null`.\n */\nexport function pixKeyType(key: string): PixKeyType | null {\n    const trimmed = key.trim();\n    if (trimmed === \"\") return null;\n\n    if (trimmed.includes(\"@\")) {\n        return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]{2,}$/.test(trimmed) && trimmed.length <= MAX_EMAIL_KEY\n            ? \"email\"\n            : null;\n    }\n    if (/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(trimmed)) {\n        return \"evp\";\n    }\n\n    const numbers = digits(trimmed);\n    if (numbers.length === 14) return validateCNPJ(numbers) ? \"cnpj\" : null;\n    if (numbers.length === 11 && validateCPF(numbers)) return \"cpf\";\n    if (trimmed.startsWith(\"+\")) {\n        return /^\\+55\\d{10,11}$/.test(`+${numbers}`) ? \"phone\" : null;\n    }\n    if (numbers.length === 10 || numbers.length === 11) return \"phone\";\n    if (numbers.length === 12 || numbers.length === 13) {\n        return numbers.startsWith(\"55\") ? \"phone\" : null;\n    }\n    return null;\n}\n\n/**\n * Validate a Pix key and return the exact string to write into the payload.\n *\n * Normalisation per type: CPF and CNPJ lose their mask, a phone becomes E.164\n * with the `+55` country code, an EVP is lower-cased, and an e-mail is\n * lower-cased because DICT stores it that way — a key that differs only in case\n * would otherwise fail to resolve.\n *\n * All validation lives in {@link pixKeyType}; past that gate the normalisation is\n * total, which is why the phone branch strips a country code purely on length\n * rather than re-checking the shape.\n *\n * @param key - Raw key, masked or not.\n * @returns The type and the normalised value.\n * @throws {PixError} When the key matches no accepted format, or when a document\n * key fails its check digits.\n *\n * @example\n * normalizePixKey(\"123.456.789-09\"); // { type: \"cpf\", value: \"12345678909\" }\n * normalizePixKey(\"(11) 98765-4321\"); // { type: \"phone\", value: \"+5511987654321\" }\n */\nexport function normalizePixKey(key: string): NormalizedPixKey {\n    const trimmed = key.trim();\n    const type = pixKeyType(trimmed);\n    if (type === null) {\n        throw new PixError(\n            `Not a Pix key: ${JSON.stringify(key)}. Expected a CPF, CNPJ, e-mail, ` +\n                \"phone (+5511987654321) or EVP (UUID).\",\n        );\n    }\n\n    if (type === \"email\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"evp\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"phone\") {\n        const numbers = digits(trimmed);\n        return { type, value: `+55${numbers.length > 11 ? numbers.slice(2) : numbers}` };\n    }\n    return { type, value: digits(trimmed) };\n}\n\n/**\n * Format an amount the way tag 54 wants it: dot separator, two decimals.\n *\n * Positivity is checked on the rounded field, not on the input: `0.004` is\n * positive and still writes `\"0.00\"`, a zero-value QR for a positive charge.\n */\nfunction toAmountField(amount: number): string {\n    if (!Number.isFinite(amount)) {\n        throw new PixError(`Amount must be a finite number, got ${amount}.`);\n    }\n    if (amount <= 0) {\n        throw new PixError(\n            `Amount must be positive, got ${amount}. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    const field = amount.toFixed(2);\n    if (Number(field) <= 0) {\n        throw new PixError(\n            `Amount ${amount} rounds to ${field} at two decimals. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    if (field.length > 13) {\n        throw new PixError(`Amount ${field} does not fit tag 54, which holds 13 characters.`);\n    }\n    return field;\n}\n\n/** Bound the two free-text identity fields the spec caps hard. */\nfunction toBoundedText(value: string, max: number, field: string): string {\n    const text = toPayloadText(value.trim(), field);\n    if (text === \"\") throw new PixError(`${field} is required.`);\n    if (text.length > max) {\n        throw new PixError(\n            `${field} is ${text.length} characters; the BR Code allows ${max}. Shorten it — ` +\n                \"truncating here would silently change what the payer sees.\",\n        );\n    }\n    return text;\n}\n\n/** Tag 62, which exists only to carry the txid. */\nfunction additionalDataField(txid: string | undefined): string {\n    const value = txid?.trim() ?? \"\";\n    if (value === \"\" || value === TXID_UNSPECIFIED) {\n        return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, TXID_UNSPECIFIED));\n    }\n    if (!new RegExp(`^[A-Za-z0-9]{1,${MAX_TXID}}$`).test(value)) {\n        throw new PixError(\n            `txid must be 1 to ${MAX_TXID} letters or digits, got ${JSON.stringify(txid)}.`,\n        );\n    }\n    return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, value));\n}\n\n/** Tag 26 for a static payload: GUI, key and the optional description. */\nfunction staticMerchantAccount(input: PixStaticInput): string {\n    const { value } = normalizePixKey(input.key);\n    let inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_KEY, value);\n    const description = input.description?.trim();\n    if (description !== undefined && description !== \"\") {\n        inner += tlv(MAI_TAG_DESCRIPTION, toPayloadText(description, \"description\"));\n    }\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten `description`.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/** Tag 26 for a dynamic payload: GUI plus the URL, and no key. */\nfunction dynamicMerchantAccount(input: PixDynamicInput): string {\n    const url = toPayloadText(input.url.trim(), \"url\").replace(/^https?:\\/\\//i, \"\");\n    if (url === \"\") throw new PixError(\"url is required for a dynamic BR Code.\");\n    const inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_URL, url);\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten the payload URL.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/**\n * Build a Pix \"Copia e Cola\" payload — the string behind a Pix QR code.\n *\n * The format is EMVCo MPM: a flat list of `ID + 2-digit length + value` triples,\n * closed by tag 63 holding a CRC-16/CCITT-FALSE over **everything before it,\n * including the literal `6304` header of tag 63 itself**. That last detail is the\n * one implementations get wrong; see {@link pixCrc16}.\n *\n * Two shapes come out of here:\n *\n * - **static** — tag 26 carries the key, so the QR is self-contained and can be\n *   printed. Amount optional; a txid of `\"***\"` means \"identifies no single\n *   transaction\", which is what a reusable poster QR wants.\n * - **dynamic** — tag 26 carries a URL instead, and the wallet fetches the amount\n *   and payee from the PSP. Use it when the value is per-order. Defaults to\n *   single-use (tag 01 = `12`).\n *\n * The distinction matters and is not cosmetic: a static QR settles against\n * whatever the payer typed, a dynamic one against what the PSP served, so a\n * charge that must reconcile to a cent needs the dynamic form.\n *\n * @param input - Static or dynamic payload description.\n * @returns The full payload, CRC included, ready to render as a QR or to copy.\n * @throws {PixError} On an unrecognised key, a field over its length cap, a\n * non-positive amount, or text that is not representable in the BR Code.\n *\n * @example\n * pixPayload({\n *   key: \"12345678909\",\n *   merchantName: \"Loja Tempest\",\n *   merchantCity: \"São Paulo\",\n *   amount: 25.5,\n *   txid: \"PEDIDO123\",\n * });\n */\nexport function pixPayload(input: PixInput): string {\n    const dynamic = input.kind === \"dynamic\";\n    const oneTime = input.oneTime ?? dynamic;\n\n    let payload = tlv(TAG_PAYLOAD_FORMAT, PAYLOAD_FORMAT_VERSION);\n    payload += tlv(\n        TAG_POINT_OF_INITIATION,\n        oneTime ? POINT_OF_INITIATION_SINGLE_USE : POINT_OF_INITIATION_REUSABLE,\n    );\n    payload += dynamic ? dynamicMerchantAccount(input) : staticMerchantAccount(input);\n    payload += tlv(TAG_MERCHANT_CATEGORY_CODE, DEFAULT_MERCHANT_CATEGORY_CODE);\n    payload += tlv(TAG_TRANSACTION_CURRENCY, CURRENCY_BRL);\n    if (!dynamic && input.amount !== undefined) {\n        payload += tlv(TAG_TRANSACTION_AMOUNT, toAmountField(input.amount));\n    }\n    payload += tlv(TAG_COUNTRY_CODE, COUNTRY_BR);\n    payload += tlv(\n        TAG_MERCHANT_NAME,\n        toBoundedText(input.merchantName, MAX_MERCHANT_NAME, \"merchantName\"),\n    );\n    payload += tlv(\n        TAG_MERCHANT_CITY,\n        toBoundedText(input.merchantCity, MAX_MERCHANT_CITY, \"merchantCity\"),\n    );\n    const postalCode = input.postalCode === undefined ? \"\" : digits(input.postalCode);\n    if (postalCode !== \"\") payload += tlv(TAG_POSTAL_CODE, postalCode);\n    payload += additionalDataField(dynamic ? TXID_UNSPECIFIED : input.txid);\n\n    const withCrcHeader = `${payload}${TAG_CRC}04`;\n    return `${withCrcHeader}${pixCrc16(withCrcHeader)}`;\n}\n\n/**\n * Split a flat run of TLVs. Stops cleanly at the first malformed triple.\n *\n * An ID may appear once per level. The BACEN BR Code manual (v2, May 2020)\n * states it for the root — \"there are no duplicate IDs in the document's root,\n * according to\" EMV® QRCPS-MPM;\n * the same holds here inside tags 26 and 62, which no conforming emitter\n * repeats either. Keeping the first of two values would give the caller one\n * reading of the payload while a wallet that keeps the last pays another.\n *\n * Lengths count characters (code points), as EMV defines them — see {@link tlv}.\n * A payload from another PSP may carry a `String` template (tag 64, or an\n * unreserved one) with non-ASCII text, where counting UTF-16 units would split\n * a character and misread every tag after it.\n *\n * @throws {PixError} When a length prefix is not two digits, runs past the end,\n * or an ID repeats at this level.\n */\nfunction parseTlv(text: string, where: string): PixField[] {\n    const input = Array.from(text);\n    const fields: PixField[] = [];\n    let cursor = 0;\n    while (cursor < input.length) {\n        const id = input.slice(cursor, cursor + 2).join(\"\");\n        const rawLength = input.slice(cursor + 2, cursor + 4).join(\"\");\n        if (!/^\\d{2}$/.test(id) || !/^\\d{2}$/.test(rawLength)) {\n            throw new PixError(\n                `Malformed TLV in ${where} at offset ${cursor}: expected a 2-digit tag and length.`,\n            );\n        }\n        const length = Number(rawLength);\n        const start = cursor + 4;\n        if (start + length > input.length) {\n            throw new PixError(\n                `Tag ${id} in ${where} declares ${length} characters but only ${input.length - start} remain.`,\n            );\n        }\n        if (fields.some((field) => field.id === id)) {\n            throw new PixError(\n                `Tag ${id} in ${where} appears more than once; a BR Code carries each tag once per level.`,\n            );\n        }\n        fields.push({ id, value: input.slice(start, start + length).join(\"\") });\n        cursor = start + length;\n    }\n    return fields;\n}\n\n/** The value of a tag — unique per level, see {@link parseTlv} — or `undefined`. */\nfunction pick(fields: readonly PixField[], id: string): string | undefined {\n    return fields.find((field) => field.id === id)?.value;\n}\n\n/**\n * Read tag 54 into reais.\n *\n * @throws {PixError} When the field is outside the EMV format\n * ({@link AMOUNT_FIELD}) or wider than 13 characters. Zero is read as `0`; see\n * {@link AMOUNT_FIELD} for why the reader accepts what `pixPayload` refuses.\n */\nfunction readAmountField(field: string): number {\n    if (field.length > MAX_AMOUNT_FIELD || !AMOUNT_FIELD.test(field)) {\n        throw new PixError(\n            `Tag 54 (amount) must be an amount like \"25.50\", with \".\" as the decimal mark, ` +\n                `at most two decimals and ${MAX_AMOUNT_FIELD} characters; got ${JSON.stringify(field)}.`,\n        );\n    }\n    return Number(field);\n}\n\n/**\n * Read a Pix \"Copia e Cola\" payload back into its parts.\n *\n * Tolerant by design: tags the SDK does not know about are kept verbatim in\n * {@link PixData.fields} instead of raising, because PSPs do add their own\n * templates and a reader that rejects them is useless in production. What is\n * *not* tolerated is a broken frame — a length prefix that runs off the end, a\n * missing tag 63 — a checksum mismatch, which means the string was corrupted in\n * transit, or a payload with two readings: a tag repeated at the root or inside\n * tags 26 and 62, a tag 26 with both a key and a URL, or a tag 54 outside the EMV\n * amount format. A preview built from one reading while the wallet pays the\n * other is the failure those rules exist for.\n *\n * The CRC detects corruption, not authorship: whoever crafts a payload\n * recomputes it, so a valid CRC says nothing about who published the account.\n *\n * @param payload - The copia-e-cola string. Surrounding whitespace is ignored.\n * @param options - See {@link ParsePixOptions}.\n * @returns The decoded payload.\n * @throws {PixError} On a malformed frame, a missing CRC tag, a repeated tag, a\n * tag 26 that is not a Pix account or that carries both a key and a URL, an\n * amount outside the EMV format, or — unless `requireCrc` is `false` — a CRC\n * mismatch.\n *\n * @example\n * const data = parsePixPayload(copied);\n * console.log(data.key, data.amount, data.txid);\n */\nexport function parsePixPayload(payload: string, options: ParsePixOptions = {}): PixData {\n    const { requireCrc = true } = options;\n    const text = payload.trim();\n    if (text.length < 8) throw new PixError(\"Payload is too short to be a BR Code.\");\n\n    const crcHeaderAt = text.length - 8;\n    if (text.slice(crcHeaderAt, crcHeaderAt + 4) !== `${TAG_CRC}04`) {\n        throw new PixError(\"Payload does not end in a `6304` CRC tag.\");\n    }\n    const crc = text.slice(-4).toUpperCase();\n    const expected = pixCrc16(text.slice(0, -4));\n    const crcValid = crc === expected;\n    if (!crcValid && requireCrc) {\n        throw new PixError(`CRC mismatch: payload says ${crc}, recomputed ${expected}.`);\n    }\n\n    const fields = parseTlv(text.slice(0, crcHeaderAt), \"payload\");\n    const merchantAccount = pick(fields, TAG_MERCHANT_ACCOUNT_INFO);\n    if (merchantAccount === undefined) {\n        throw new PixError(\"Payload has no tag 26 (merchant account information).\");\n    }\n    const account = parseTlv(merchantAccount, \"tag 26\");\n    const gui = pick(account, MAI_TAG_GUI);\n    if (gui?.toLowerCase() !== PIX_GUI) {\n        throw new PixError(\n            `Tag 26 is not a Pix account: expected GUI ${PIX_GUI}, got ${JSON.stringify(gui)}.`,\n        );\n    }\n\n    const url = pick(account, MAI_TAG_URL);\n    const key = pick(account, MAI_TAG_KEY);\n    if (url !== undefined && key !== undefined) {\n        throw new PixError(\n            \"Tag 26 carries both a key (01) and a URL (25); a BR Code is either static or dynamic, not both.\",\n        );\n    }\n    const amountField = pick(fields, TAG_TRANSACTION_AMOUNT);\n    const txid = pick(\n        parseTlv(pick(fields, TAG_ADDITIONAL_DATA) ?? \"\", \"tag 62\"),\n        ADDITIONAL_TAG_TXID,\n    );\n\n    return {\n        kind: url === undefined ? \"static\" : \"dynamic\",\n        ...(key === undefined ? {} : { key, keyType: pixKeyType(key) ?? undefined }),\n        ...(url === undefined ? {} : { url }),\n        merchantName: pick(fields, TAG_MERCHANT_NAME) ?? \"\",\n        merchantCity: pick(fields, TAG_MERCHANT_CITY) ?? \"\",\n        ...(amountField === undefined ? {} : { amount: readAmountField(amountField) }),\n        currency: pick(fields, TAG_TRANSACTION_CURRENCY) ?? \"\",\n        countryCode: pick(fields, TAG_COUNTRY_CODE) ?? \"\",\n        merchantCategoryCode: pick(fields, TAG_MERCHANT_CATEGORY_CODE) ?? \"\",\n        ...(txid === undefined ? {} : { txid }),\n        ...(pick(account, MAI_TAG_DESCRIPTION) === undefined\n            ? {}\n            : { description: pick(account, MAI_TAG_DESCRIPTION) }),\n        ...(pick(fields, TAG_POSTAL_CODE) === undefined\n            ? {}\n            : { postalCode: pick(fields, TAG_POSTAL_CODE) }),\n        oneTime: pick(fields, TAG_POINT_OF_INITIATION) === POINT_OF_INITIATION_SINGLE_USE,\n        crc,\n        crcValid,\n        fields,\n    };\n}\n"],"mappings":";;AAeA,IAAa,IAAb,cAA8B,MAAM;CAChC,YAAY,GAAiB;EAEzB,AADA,MAAM,CAAO,GACb,KAAK,OAAO;CAChB;AACJ,GA8GM,IAAmB,MAGnB,IAAgB,OAGhB,IAAa,OAEb,IAAqB,MACrB,IAA0B,MAC1B,IAA4B,MAC5B,IAA6B,MAC7B,IAA2B,MAC3B,IAAyB,MACzB,IAAmB,MACnB,IAAoB,MACpB,IAAoB,MACpB,IAAkB,MAClB,IAAsB,MACtB,IAAU,MAEV,IAAc,MACd,IAAc,MACd,IAAsB,MACtB,IAAc,MACd,IAAsB,MAGtB,IAAU,kBAEV,IAAyB,MACzB,IAA+B,MAC/B,IAAiC,MACjC,IAAiC,QACjC,IAAe,OACf,IAAa,MACb,IAAmB,OAEnB,IAAoB,IACpB,IAAoB,IACpB,IAAW,IACX,IAAgB,IAChB,IAAgB,IAchB,IAAe,uBAGf,IAAmB;AAoBzB,SAAgB,EAAS,GAAuB;CAC5C,IAAM,IAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,CAAK,GACxC,IAAM;CACV,KAAK,IAAM,KAAQ,GAAO;EACtB,KAAO,KAAQ;EACf,KAAK,IAAI,IAAM,GAAG,IAAM,GAAG,KAAO,GAC9B,IACK,IAAM,SACC,KAAO,IAAK,KAAoB,IACjC,KAAO,IAAK;CAE/B;CACA,OAAO,EAAI,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,GAAG,GAAG;AACzD;AAGA,SAAS,EAAO,GAAuB;CACnC,OAAO,EAAM,QAAQ,OAAO,EAAE;AAClC;AAWA,SAAS,EAAc,GAAe,GAAuB;CACzD,IAAM,IAAW,EAAM,UAAU,KAAK,CAAC,CAAC,QAAQ,mBAAmB,EAAE;CACrE,IAAI,eAAe,KAAK,CAAQ,GAC5B,MAAM,IAAI,EACN,GAAG,EAAM,4CAA4C,KAAK,UAAU,CAAK,EAAE,wBAE/E;CAEJ,OAAO;AACX;AAWA,IAAM,IAAuB;AAc7B,SAAS,EAAI,GAAY,GAAuB;CAC5C,IAAI,CAAC,EAAqB,KAAK,CAAK,GAChC,MAAM,IAAI,EACN,OAAO,EAAG,0EACH,KAAK,UAAU,CAAK,EAAE,EACjC;CAEJ,IAAI,EAAM,SAAS,GACf,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,OAAO,kDAAkD,EAAc,EACjG;CAEJ,OAAO,GAAG,IAAK,OAAO,EAAM,MAAM,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI;AAC3D;AAcA,SAAgB,EAAW,GAAgC;CACvD,IAAM,IAAU,EAAI,KAAK;CACzB,IAAI,MAAY,IAAI,OAAO;CAE3B,IAAI,EAAQ,SAAS,GAAG,GACpB,OAAO,gCAAgC,KAAK,CAAO,KAAK,EAAQ,UAAU,IACpE,UACA;CAEV,IAAI,kEAAkE,KAAK,CAAO,GAC9E,OAAO;CAGX,IAAM,IAAU,EAAO,CAAO;CAU9B,OATI,EAAQ,WAAW,KAAW,EAAa,CAAO,IAAI,SAAS,OAC/D,EAAQ,WAAW,MAAM,EAAY,CAAO,IAAU,QACtD,EAAQ,WAAW,GAAG,IACf,kBAAkB,KAAK,IAAI,GAAS,IAAI,UAAU,OAEzD,EAAQ,WAAW,MAAM,EAAQ,WAAW,OAC5C,EAAQ,WAAW,MAAM,EAAQ,WAAW,OACrC,EAAQ,WAAW,IAAI,IAFyB,UAEX;AAGpD;AAuBA,SAAgB,EAAgB,GAA+B;CAC3D,IAAM,IAAU,EAAI,KAAK,GACnB,IAAO,EAAW,CAAO;CAC/B,IAAI,MAAS,MACT,MAAM,IAAI,EACN,kBAAkB,KAAK,UAAU,CAAG,EAAE,sEAE1C;CAIJ,IADI,MAAS,WACT,MAAS,OAAO,OAAO;EAAE;EAAM,OAAO,EAAQ,YAAY;CAAE;CAChE,IAAI,MAAS,SAAS;EAClB,IAAM,IAAU,EAAO,CAAO;EAC9B,OAAO;GAAE;GAAM,OAAO,MAAM,EAAQ,SAAS,KAAK,EAAQ,MAAM,CAAC,IAAI;EAAU;CACnF;CACA,OAAO;EAAE;EAAM,OAAO,EAAO,CAAO;CAAE;AAC1C;AAQA,SAAS,EAAc,GAAwB;CAC3C,IAAI,CAAC,OAAO,SAAS,CAAM,GACvB,MAAM,IAAI,EAAS,uCAAuC,EAAO,EAAE;CAEvE,IAAI,KAAU,GACV,MAAM,IAAI,EACN,gCAAgC,EAAO,wDAC3C;CAEJ,IAAM,IAAQ,EAAO,QAAQ,CAAC;CAC9B,IAAI,OAAO,CAAK,KAAK,GACjB,MAAM,IAAI,EACN,UAAU,EAAO,aAAa,EAAM,wEACxC;CAEJ,IAAI,EAAM,SAAS,IACf,MAAM,IAAI,EAAS,UAAU,EAAM,iDAAiD;CAExF,OAAO;AACX;AAGA,SAAS,EAAc,GAAe,GAAa,GAAuB;CACtE,IAAM,IAAO,EAAc,EAAM,KAAK,GAAG,CAAK;CAC9C,IAAI,MAAS,IAAI,MAAM,IAAI,EAAS,GAAG,EAAM,cAAc;CAC3D,IAAI,EAAK,SAAS,GACd,MAAM,IAAI,EACN,GAAG,EAAM,MAAM,EAAK,OAAO,kCAAkC,EAAI,0EAErE;CAEJ,OAAO;AACX;AAGA,SAAS,EAAoB,GAAkC;CAC3D,IAAM,IAAQ,GAAM,KAAK,KAAK;CAC9B,IAAI,MAAU,MAAM,MAAU,GAC1B,OAAO,EAAI,GAAqB,EAAI,GAAqB,CAAgB,CAAC;CAE9E,IAAI,CAAK,OAAO,kBAAkB,EAAS,GAAG,CAAC,CAAC,KAAK,CAAK,GACtD,MAAM,IAAI,EACN,qBAAqB,EAAS,0BAA0B,KAAK,UAAU,CAAI,EAAE,EACjF;CAEJ,OAAO,EAAI,GAAqB,EAAI,GAAqB,CAAK,CAAC;AACnE;AAGA,SAAS,EAAsB,GAA+B;CAC1D,IAAM,EAAE,aAAU,EAAgB,EAAM,GAAG,GACvC,IAAQ,EAAI,GAAa,CAAO,IAAI,EAAI,GAAa,CAAK,GACxD,IAAc,EAAM,aAAa,KAAK;CAI5C,IAHI,MAAgB,KAAA,KAAa,MAAgB,OAC7C,KAAS,EAAI,GAAqB,EAAc,GAAa,aAAa,CAAC,IAE3E,EAAM,SAAS,GACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE;CAEJ,OAAO,EAAI,GAA2B,CAAK;AAC/C;AAGA,SAAS,EAAuB,GAAgC;CAC5D,IAAM,IAAM,EAAc,EAAM,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,iBAAiB,EAAE;CAC9E,IAAI,MAAQ,IAAI,MAAM,IAAI,EAAS,wCAAwC;CAC3E,IAAM,IAAQ,EAAI,GAAa,CAAO,IAAI,EAAI,GAAa,CAAG;CAC9D,IAAI,EAAM,SAAS,GACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE;CAEJ,OAAO,EAAI,GAA2B,CAAK;AAC/C;AAqCA,SAAgB,EAAW,GAAyB;CAChD,IAAM,IAAU,EAAM,SAAS,WACzB,IAAU,EAAM,WAAW,GAE7B,IAAU,EAAI,GAAoB,CAAsB;CAgB5D,AAfA,KAAW,EACP,GACA,IAAU,IAAiC,CAC/C,GACA,KAAW,IAAU,EAAuB,CAAK,IAAI,EAAsB,CAAK,GAChF,KAAW,EAAI,GAA4B,CAA8B,GACzE,KAAW,EAAI,GAA0B,CAAY,GACjD,CAAC,KAAW,EAAM,WAAW,KAAA,MAC7B,KAAW,EAAI,GAAwB,EAAc,EAAM,MAAM,CAAC,IAEtE,KAAW,EAAI,GAAkB,CAAU,GAC3C,KAAW,EACP,GACA,EAAc,EAAM,cAAc,GAAmB,cAAc,CACvE,GACA,KAAW,EACP,GACA,EAAc,EAAM,cAAc,GAAmB,cAAc,CACvE;CACA,IAAM,IAAa,EAAM,eAAe,KAAA,IAAY,KAAK,EAAO,EAAM,UAAU;CAEhF,AADI,MAAe,OAAI,KAAW,EAAI,GAAiB,CAAU,IACjE,KAAW,EAAoB,IAAU,IAAmB,EAAM,IAAI;CAEtE,IAAM,IAAgB,GAAG,IAAU,EAAQ;CAC3C,OAAO,GAAG,IAAgB,EAAS,CAAa;AACpD;AAoBA,SAAS,EAAS,GAAc,GAA2B;CACvD,IAAM,IAAQ,MAAM,KAAK,CAAI,GACvB,IAAqB,CAAC,GACxB,IAAS;CACb,OAAO,IAAS,EAAM,SAAQ;EAC1B,IAAM,IAAK,EAAM,MAAM,GAAQ,IAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAC5C,IAAY,EAAM,MAAM,IAAS,GAAG,IAAS,CAAC,CAAC,CAAC,KAAK,EAAE;EAC7D,IAAI,CAAC,UAAU,KAAK,CAAE,KAAK,CAAC,UAAU,KAAK,CAAS,GAChD,MAAM,IAAI,EACN,oBAAoB,EAAM,aAAa,EAAO,qCAClD;EAEJ,IAAM,IAAS,OAAO,CAAS,GACzB,IAAQ,IAAS;EACvB,IAAI,IAAQ,IAAS,EAAM,QACvB,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,YAAY,EAAO,uBAAuB,EAAM,SAAS,EAAM,SACzF;EAEJ,IAAI,EAAO,MAAM,MAAU,EAAM,OAAO,CAAE,GACtC,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,oEAC1B;EAGJ,AADA,EAAO,KAAK;GAAE;GAAI,OAAO,EAAM,MAAM,GAAO,IAAQ,CAAM,CAAC,CAAC,KAAK,EAAE;EAAE,CAAC,GACtE,IAAS,IAAQ;CACrB;CACA,OAAO;AACX;AAGA,SAAS,EAAK,GAA6B,GAAgC;CACvE,OAAO,EAAO,MAAM,MAAU,EAAM,OAAO,CAAE,CAAC,EAAE;AACpD;AASA,SAAS,EAAgB,GAAuB;CAC5C,IAAI,EAAM,SAAS,KAAoB,CAAC,EAAa,KAAK,CAAK,GAC3D,MAAM,IAAI,EACN,0GACgC,EAAiB,mBAAmB,KAAK,UAAU,CAAK,EAAE,EAC9F;CAEJ,OAAO,OAAO,CAAK;AACvB;AA8BA,SAAgB,GAAgB,GAAiB,IAA2B,CAAC,GAAY;CACrF,IAAM,EAAE,gBAAa,OAAS,GACxB,IAAO,EAAQ,KAAK;CAC1B,IAAI,EAAK,SAAS,GAAG,MAAM,IAAI,EAAS,uCAAuC;CAE/E,IAAM,IAAc,EAAK,SAAS;CAClC,IAAI,EAAK,MAAM,GAAa,IAAc,CAAC,MAAM,GAAG,EAAQ,KACxD,MAAM,IAAI,EAAS,2CAA2C;CAElE,IAAM,IAAM,EAAK,MAAM,EAAE,CAAC,CAAC,YAAY,GACjC,IAAW,EAAS,EAAK,MAAM,GAAG,EAAE,CAAC,GACrC,IAAW,MAAQ;CACzB,IAAI,CAAC,KAAY,GACb,MAAM,IAAI,EAAS,8BAA8B,EAAI,eAAe,EAAS,EAAE;CAGnF,IAAM,IAAS,EAAS,EAAK,MAAM,GAAG,CAAW,GAAG,SAAS,GACvD,IAAkB,EAAK,GAAQ,CAAyB;CAC9D,IAAI,MAAoB,KAAA,GACpB,MAAM,IAAI,EAAS,uDAAuD;CAE9E,IAAM,IAAU,EAAS,GAAiB,QAAQ,GAC5C,IAAM,EAAK,GAAS,CAAW;CACrC,IAAI,GAAK,YAAY,MAAM,GACvB,MAAM,IAAI,EACN,6CAA6C,EAAQ,QAAQ,KAAK,UAAU,CAAG,EAAE,EACrF;CAGJ,IAAM,IAAM,EAAK,GAAS,CAAW,GAC/B,IAAM,EAAK,GAAS,CAAW;CACrC,IAAI,MAAQ,KAAA,KAAa,MAAQ,KAAA,GAC7B,MAAM,IAAI,EACN,iGACJ;CAEJ,IAAM,IAAc,EAAK,GAAQ,CAAsB,GACjD,IAAO,EACT,EAAS,EAAK,GAAQ,CAAmB,KAAK,IAAI,QAAQ,GAC1D,CACJ;CAEA,OAAO;EACH,MAAM,MAAQ,KAAA,IAAY,WAAW;EACrC,GAAI,MAAQ,KAAA,IAAY,CAAC,IAAI;GAAE;GAAK,SAAS,EAAW,CAAG,KAAK,KAAA;EAAU;EAC1E,GAAI,MAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,OAAI;EACnC,cAAc,EAAK,GAAQ,CAAiB,KAAK;EACjD,cAAc,EAAK,GAAQ,CAAiB,KAAK;EACjD,GAAI,MAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAgB,CAAW,EAAE;EAC5E,UAAU,EAAK,GAAQ,CAAwB,KAAK;EACpD,aAAa,EAAK,GAAQ,CAAgB,KAAK;EAC/C,sBAAsB,EAAK,GAAQ,CAA0B,KAAK;EAClE,GAAI,MAAS,KAAA,IAAY,CAAC,IAAI,EAAE,QAAK;EACrC,GAAI,EAAK,GAAS,CAAmB,MAAM,KAAA,IACrC,CAAC,IACD,EAAE,aAAa,EAAK,GAAS,CAAmB,EAAE;EACxD,GAAI,EAAK,GAAQ,CAAe,MAAM,KAAA,IAChC,CAAC,IACD,EAAE,YAAY,EAAK,GAAQ,CAAe,EAAE;EAClD,SAAS,EAAK,GAAQ,CAAuB,MAAM;EACnD;EACA;EACA;CACJ;AACJ"}
+{"version":3,"file":"pix.js","names":[],"sources":["../../src/br/pix.ts"],"sourcesContent":["/**\n * @tempest-limits file-lines — EMV®QRCPS-MPM for Pix: the TLV writer, the\n * CRC16-CCITT, the field catalogue with its nesting, key-type detection and the\n * parser that has to accept what other banks emit. Reader and writer live together\n * because each one is the other's test — a payload this file builds is a payload it\n * must parse back.\n */\nimport { validateCNPJ, validateCPF } from \"@/forms/br-validators\";\n\n/**\n * A Pix payload could not be built or read.\n *\n * Its own class so a caller can tell \"the operator typed a bad key\" apart from a\n * bug, and so an `ErrorBoundary` can render a form error instead of a crash.\n */\nexport class PixError extends Error {\n    constructor(message: string) {\n        super(message);\n        this.name = \"PixError\";\n    }\n}\n\n/** The five key formats DICT accepts. */\nexport type PixKeyType = \"cpf\" | \"cnpj\" | \"email\" | \"phone\" | \"evp\";\n\n/** A key after normalisation, ready to go into the payload. */\nexport interface NormalizedPixKey {\n    type: PixKeyType;\n    /** The exact string written into the BR Code. */\n    value: string;\n}\n\n/** One TLV as it appeared in a payload, unknown tags included. */\nexport interface PixField {\n    /** Two-character tag, e.g. `\"59\"`. */\n    id: string;\n    /** Raw value, still encoded when the tag is itself a template. */\n    value: string;\n}\n\n/** A BR Code that carries the key — the one you print on a poster. */\nexport interface PixStaticInput {\n    kind?: \"static\";\n    /** CPF, CNPJ, e-mail, phone or EVP. Validated and normalised. */\n    key: string;\n    /** Payee name. Truncated by the spec at 25 characters — longer throws. */\n    merchantName: string;\n    /** Payee city. Truncated by the spec at 15 characters — longer throws. */\n    merchantCity: string;\n    /** Amount in BRL. Omit for a payer-chooses-the-value QR. */\n    amount?: number;\n    /** Reference the PSP echoes back, `[A-Za-z0-9]{1,25}`. Defaults to `\"***\"`. */\n    txid?: string;\n    /** Free text shown by some wallets. Goes into tag 26, sub-tag 02. */\n    description?: string;\n    /** CEP, digits only. Optional tag 61. */\n    postalCode?: string;\n    /** Single-use QR: sets tag 01 to `\"12\"` instead of `\"11\"`. */\n    oneTime?: boolean;\n}\n\n/** A BR Code that carries a URL the wallet fetches to learn the amount. */\nexport interface PixDynamicInput {\n    kind: \"dynamic\";\n    /**\n     * `payloadLocation` — the https URL the wallet GETs, **without** the scheme,\n     * exactly as BACEN specifies (`pix.example.com/qr/v2/abc`).\n     */\n    url: string;\n    merchantName: string;\n    merchantCity: string;\n    postalCode?: string;\n    /** Single-use QR. Defaults to `true`, which is what a dynamic QR normally is. */\n    oneTime?: boolean;\n}\n\n/** Everything `pixPayload` accepts. */\nexport type PixInput = PixStaticInput | PixDynamicInput;\n\n/** A payload taken apart again. */\nexport interface PixData {\n    /** `\"dynamic\"` when tag 26 carried a URL instead of a key. */\n    kind: \"static\" | \"dynamic\";\n    /** Present on a static payload. */\n    key?: string;\n    keyType?: PixKeyType;\n    /** Present on a dynamic payload. */\n    url?: string;\n    merchantName: string;\n    merchantCity: string;\n    /** Reais. `undefined` when the payer chooses the amount. */\n    amount?: number;\n    /** ISO 4217 numeric. `\"986\"` for BRL. */\n    currency: string;\n    countryCode: string;\n    merchantCategoryCode: string;\n    /** `\"***\"` on a reusable static QR that identifies no single transaction. */\n    txid?: string;\n    description?: string;\n    postalCode?: string;\n    /** Tag 01 read as `\"12\"`. */\n    oneTime: boolean;\n    /** The four hex characters that closed the payload. */\n    crc: string;\n    /** Whether those four characters match a recomputed CRC. */\n    crcValid: boolean;\n    /** Every top-level TLV, in payload order, unknown tags included. */\n    fields: PixField[];\n}\n\n/** Options for {@link parsePixPayload}. */\nexport interface ParsePixOptions {\n    /**\n     * Throw when the checksum does not match. Default `true`.\n     *\n     * Turn it off only to inspect a payload you already know is broken: a BR Code\n     * whose CRC fails has been corrupted in transit, and the account it now points\n     * at is not the account the payee published.\n     */\n    requireCrc?: boolean;\n}\n\n/**\n * Generator polynomial of CRC-16/CCITT-FALSE, `x^16 + x^12 + x^5 + 1`.\n *\n * Taken from the CRC catalogue entry `CRC-16/IBM-3740` (alias CCITT-FALSE):\n * `width=16 poly=0x1021 init=0xffff refin=false refout=false xorout=0x0000\n * check=0x29b1`. The BACEN \"Manual de Padrões para Iniciação do Pix\" names this\n * exact variant for tag 63.\n */\nconst CRC16_POLYNOMIAL = 0x1021;\n\n/** Register preset of CRC-16/CCITT-FALSE. Not zero — that is a different variant. */\nconst CRC16_INITIAL = 0xffff;\n\n/** Keeps the shift register 16 bits wide. */\nconst CRC16_MASK = 0xffff;\n\nconst TAG_PAYLOAD_FORMAT = \"00\";\nconst TAG_POINT_OF_INITIATION = \"01\";\nconst TAG_MERCHANT_ACCOUNT_INFO = \"26\";\nconst TAG_MERCHANT_CATEGORY_CODE = \"52\";\nconst TAG_TRANSACTION_CURRENCY = \"53\";\nconst TAG_TRANSACTION_AMOUNT = \"54\";\nconst TAG_COUNTRY_CODE = \"58\";\nconst TAG_MERCHANT_NAME = \"59\";\nconst TAG_MERCHANT_CITY = \"60\";\nconst TAG_POSTAL_CODE = \"61\";\nconst TAG_ADDITIONAL_DATA = \"62\";\nconst TAG_CRC = \"63\";\n\nconst MAI_TAG_GUI = \"00\";\nconst MAI_TAG_KEY = \"01\";\nconst MAI_TAG_DESCRIPTION = \"02\";\nconst MAI_TAG_URL = \"25\";\nconst ADDITIONAL_TAG_TXID = \"05\";\n\n/** Globally Unique Identifier that marks tag 26 as a Pix account. */\nconst PIX_GUI = \"br.gov.bcb.pix\";\n\nconst PAYLOAD_FORMAT_VERSION = \"01\";\nconst POINT_OF_INITIATION_REUSABLE = \"11\";\nconst POINT_OF_INITIATION_SINGLE_USE = \"12\";\nconst DEFAULT_MERCHANT_CATEGORY_CODE = \"0000\";\nconst CURRENCY_BRL = \"986\";\nconst COUNTRY_BR = \"BR\";\nconst TXID_UNSPECIFIED = \"***\";\n\nconst MAX_MERCHANT_NAME = 25;\nconst MAX_MERCHANT_CITY = 15;\nconst MAX_TXID = 25;\nconst MAX_TLV_VALUE = 99;\nconst MAX_EMAIL_KEY = 77;\n\n/**\n * Tag 54 as EMV® QRCPS-MPM writes it: digits, and at most one `.` as the decimal\n * mark, which \"may be present even if there are no decimals\" (`\"98.\"`). Up to two\n * decimals, the minor unit ISO 4217 gives BRL (`986`). No sign, exponent, comma,\n * hex prefix or whitespace — every one of which `Number()` would happily read.\n *\n * Zero (`\"0\"`, `\"0.00\"`) is accepted: EMV asks for a non-zero amount, but the BACEN\n * BR Code manual (v2, Table 1) gives `\"0\"` as an example value of tag 54, and the\n * parser reads payloads other PSPs emit — strict with what is malformed, tolerant\n * with what the Bacen spec accepts. The builder stays stricter: `pixPayload`\n * still refuses a non-positive amount, because it only writes what we choose to emit.\n */\nconst AMOUNT_FIELD = /^\\d+(?:\\.\\d{0,2})?$/;\n\n/** Width of tag 54: \"01..13\" in the BACEN BR Code manual, Table 1. */\nconst MAX_AMOUNT_FIELD = 13;\n\n/**\n * CRC-16/CCITT-FALSE of a string, as four upper-case hex characters.\n *\n * Bitwise rather than table-driven: 200-odd characters at 8 shifts each is\n * nothing, and a 256-entry table is 2 KB of payload every consumer of the `/br`\n * entry would carry.\n *\n * The input is taken as UTF-8 bytes. A Pix payload is ASCII by construction —\n * {@link pixPayload} rejects anything else — but the function is exported and a\n * caller may hand it arbitrary text, and hashing UTF-16 code units would then\n * disagree with every other implementation.\n *\n * @param input - Bytes to run through the register.\n * @returns Four upper-case hex characters, zero-padded.\n *\n * @example\n * pixCrc16(\"123456789\"); // \"29B1\" — the catalogue check value\n */\nexport function pixCrc16(input: string): string {\n    const bytes = new TextEncoder().encode(input);\n    let crc = CRC16_INITIAL;\n    for (const byte of bytes) {\n        crc ^= byte << 8;\n        for (let bit = 0; bit < 8; bit += 1) {\n            crc =\n                (crc & 0x8000) !== 0\n                    ? ((crc << 1) ^ CRC16_POLYNOMIAL) & CRC16_MASK\n                    : (crc << 1) & CRC16_MASK;\n        }\n    }\n    return crc.toString(16).toUpperCase().padStart(4, \"0\");\n}\n\n/** Digits of a possibly masked value. */\nfunction digits(value: string): string {\n    return value.replace(/\\D/g, \"\");\n}\n\n/**\n * Drop diacritics and reject whatever is left outside printable ASCII.\n *\n * The BR Code character set has no room for accents, and a wallet that meets one\n * either fails to parse the QR or shows mojibake. Stripping them is lossy but\n * legible (\"São Paulo\" → \"Sao Paulo\"), which beats both alternatives; anything\n * that is not a diacritic — an emoji, a CJK character — is a mistake the caller\n * has to see, so it throws.\n */\nfunction toPayloadText(value: string, field: string): string {\n    const stripped = value.normalize(\"NFD\").replace(/\\p{Diacritic}/gu, \"\");\n    if (/[^\\x20-\\x7E]/.test(stripped)) {\n        throw new PixError(\n            `${field} has characters the BR Code cannot carry: ${JSON.stringify(value)}. ` +\n                \"Use unaccented ASCII.\",\n        );\n    }\n    return stripped;\n}\n\n/**\n * The EMV \"Common Character Set\" that an `ans` (Alphanumeric Special) field may\n * carry: printable ASCII, `0x20`–`0x7E`. Every root field of a BR Code is `ans`,\n * and the BACEN BR Code manual (v2, May 2020) only widened it from alphanumeric —\n * \"The restriction that established that only alphanumeric characters could be\n * used has been removed\" — not past it. Only the alternate-language template\n * (tag 64) is `String` and may carry another character set, and the builder\n * never writes it.\n */\nconst COMMON_CHARACTER_SET = /^[\\x20-\\x7E]*$/;\n\n/**\n * One `ID + 2-digit length + value` triple.\n *\n * The length is \"the number of characters included in the [value] field\" (EMV\n * MPM, as restated by the HKMA Common QR Code Specification §2; the BACEN manual:\n * \"size specifies how many characters\"). Inside the common character set a\n * character is one UTF-16 unit and one UTF-8 byte, so `value.length` is exact —\n * which is why a value outside it throws instead of being measured.\n *\n * @throws {PixError} When the value leaves the common character set or exceeds\n * the two-digit length.\n */\nfunction tlv(id: string, value: string): string {\n    if (!COMMON_CHARACTER_SET.test(value)) {\n        throw new PixError(\n            `Tag ${id} has characters outside the EMV common character set (printable ASCII): ` +\n                `${JSON.stringify(value)}.`,\n        );\n    }\n    if (value.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag ${id} is ${value.length} characters; the EMV length field holds at most ${MAX_TLV_VALUE}.`,\n        );\n    }\n    return `${id}${String(value.length).padStart(2, \"0\")}${value}`;\n}\n\n/**\n * Classify a Pix key, or `null` when it matches no accepted format.\n *\n * !!! warning \"CPF and a national phone number are both eleven digits\"\n *     `\"11987654321\"` is a valid mobile number and could be a CPF. The check\n *     digits break the tie: an 11-digit string is a CPF when its DV validates and\n *     a phone otherwise. Pass phone keys as `+5511987654321` to remove the guess\n *     entirely.\n *\n * @param key - Raw key, masked or not.\n * @returns The key type, or `null`.\n */\nexport function pixKeyType(key: string): PixKeyType | null {\n    const trimmed = key.trim();\n    if (trimmed === \"\") return null;\n\n    if (trimmed.includes(\"@\")) {\n        return /^[^\\s@]+@[^\\s@]+\\.[^\\s@]{2,}$/.test(trimmed) && trimmed.length <= MAX_EMAIL_KEY\n            ? \"email\"\n            : null;\n    }\n    if (/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(trimmed)) {\n        return \"evp\";\n    }\n\n    const numbers = digits(trimmed);\n    if (numbers.length === 14) return validateCNPJ(numbers) ? \"cnpj\" : null;\n    if (numbers.length === 11 && validateCPF(numbers)) return \"cpf\";\n    if (trimmed.startsWith(\"+\")) {\n        return /^\\+55\\d{10,11}$/.test(`+${numbers}`) ? \"phone\" : null;\n    }\n    if (numbers.length === 10 || numbers.length === 11) return \"phone\";\n    if (numbers.length === 12 || numbers.length === 13) {\n        return numbers.startsWith(\"55\") ? \"phone\" : null;\n    }\n    return null;\n}\n\n/**\n * Validate a Pix key and return the exact string to write into the payload.\n *\n * Normalisation per type: CPF and CNPJ lose their mask, a phone becomes E.164\n * with the `+55` country code, an EVP is lower-cased, and an e-mail is\n * lower-cased because DICT stores it that way — a key that differs only in case\n * would otherwise fail to resolve.\n *\n * All validation lives in {@link pixKeyType}; past that gate the normalisation is\n * total, which is why the phone branch strips a country code purely on length\n * rather than re-checking the shape.\n *\n * @param key - Raw key, masked or not.\n * @returns The type and the normalised value.\n * @throws {PixError} When the key matches no accepted format, or when a document\n * key fails its check digits.\n *\n * @example\n * normalizePixKey(\"123.456.789-09\"); // { type: \"cpf\", value: \"12345678909\" }\n * normalizePixKey(\"(11) 98765-4321\"); // { type: \"phone\", value: \"+5511987654321\" }\n */\nexport function normalizePixKey(key: string): NormalizedPixKey {\n    const trimmed = key.trim();\n    const type = pixKeyType(trimmed);\n    if (type === null) {\n        throw new PixError(\n            `Not a Pix key: ${JSON.stringify(key)}. Expected a CPF, CNPJ, e-mail, ` +\n                \"phone (+5511987654321) or EVP (UUID).\",\n        );\n    }\n\n    if (type === \"email\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"evp\") return { type, value: trimmed.toLowerCase() };\n    if (type === \"phone\") {\n        const numbers = digits(trimmed);\n        return { type, value: `+55${numbers.length > 11 ? numbers.slice(2) : numbers}` };\n    }\n    return { type, value: digits(trimmed) };\n}\n\n/**\n * Format an amount the way tag 54 wants it: dot separator, two decimals.\n *\n * Positivity is checked on the rounded field, not on the input: `0.004` is\n * positive and still writes `\"0.00\"`, a zero-value QR for a positive charge.\n */\nfunction toAmountField(amount: number): string {\n    if (!Number.isFinite(amount)) {\n        throw new PixError(`Amount must be a finite number, got ${amount}.`);\n    }\n    if (amount <= 0) {\n        throw new PixError(\n            `Amount must be positive, got ${amount}. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    const field = amount.toFixed(2);\n    if (Number(field) <= 0) {\n        throw new PixError(\n            `Amount ${amount} rounds to ${field} at two decimals. Omit \\`amount\\` for a QR whose value the payer types.`,\n        );\n    }\n    if (field.length > 13) {\n        throw new PixError(`Amount ${field} does not fit tag 54, which holds 13 characters.`);\n    }\n    return field;\n}\n\n/** Bound the two free-text identity fields the spec caps hard. */\nfunction toBoundedText(value: string, max: number, field: string): string {\n    const text = toPayloadText(value.trim(), field);\n    if (text === \"\") throw new PixError(`${field} is required.`);\n    if (text.length > max) {\n        throw new PixError(\n            `${field} is ${text.length} characters; the BR Code allows ${max}. Shorten it — ` +\n                \"truncating here would silently change what the payer sees.\",\n        );\n    }\n    return text;\n}\n\n/** Tag 62, which exists only to carry the txid. */\nfunction additionalDataField(txid: string | undefined): string {\n    const value = txid?.trim() ?? \"\";\n    if (value === \"\" || value === TXID_UNSPECIFIED) {\n        return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, TXID_UNSPECIFIED));\n    }\n    if (!new RegExp(`^[A-Za-z0-9]{1,${MAX_TXID}}$`).test(value)) {\n        throw new PixError(\n            `txid must be 1 to ${MAX_TXID} letters or digits, got ${JSON.stringify(txid)}.`,\n        );\n    }\n    return tlv(TAG_ADDITIONAL_DATA, tlv(ADDITIONAL_TAG_TXID, value));\n}\n\n/** Tag 26 for a static payload: GUI, key and the optional description. */\nfunction staticMerchantAccount(input: PixStaticInput): string {\n    const { value } = normalizePixKey(input.key);\n    let inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_KEY, value);\n    const description = input.description?.trim();\n    if (description !== undefined && description !== \"\") {\n        inner += tlv(MAI_TAG_DESCRIPTION, toPayloadText(description, \"description\"));\n    }\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten `description`.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/** Tag 26 for a dynamic payload: GUI plus the URL, and no key. */\nfunction dynamicMerchantAccount(input: PixDynamicInput): string {\n    const url = toPayloadText(input.url.trim(), \"url\").replace(/^https?:\\/\\//i, \"\");\n    if (url === \"\") throw new PixError(\"url is required for a dynamic BR Code.\");\n    const inner = tlv(MAI_TAG_GUI, PIX_GUI) + tlv(MAI_TAG_URL, url);\n    if (inner.length > MAX_TLV_VALUE) {\n        throw new PixError(\n            `Tag 26 is ${inner.length} characters, over the ${MAX_TLV_VALUE} the length field allows. ` +\n                \"Shorten the payload URL.\",\n        );\n    }\n    return tlv(TAG_MERCHANT_ACCOUNT_INFO, inner);\n}\n\n/**\n * Build a Pix \"Copia e Cola\" payload — the string behind a Pix QR code.\n *\n * The format is EMVCo MPM: a flat list of `ID + 2-digit length + value` triples,\n * closed by tag 63 holding a CRC-16/CCITT-FALSE over **everything before it,\n * including the literal `6304` header of tag 63 itself**. That last detail is the\n * one implementations get wrong; see {@link pixCrc16}.\n *\n * Two shapes come out of here:\n *\n * - **static** — tag 26 carries the key, so the QR is self-contained and can be\n *   printed. Amount optional; a txid of `\"***\"` means \"identifies no single\n *   transaction\", which is what a reusable poster QR wants.\n * - **dynamic** — tag 26 carries a URL instead, and the wallet fetches the amount\n *   and payee from the PSP. Use it when the value is per-order. Defaults to\n *   single-use (tag 01 = `12`).\n *\n * The distinction matters and is not cosmetic: a static QR settles against\n * whatever the payer typed, a dynamic one against what the PSP served, so a\n * charge that must reconcile to a cent needs the dynamic form.\n *\n * @param input - Static or dynamic payload description.\n * @returns The full payload, CRC included, ready to render as a QR or to copy.\n * @throws {PixError} On an unrecognised key, a field over its length cap, a\n * non-positive amount, or text that is not representable in the BR Code.\n *\n * @example\n * pixPayload({\n *   key: \"12345678909\",\n *   merchantName: \"Loja Tempest\",\n *   merchantCity: \"São Paulo\",\n *   amount: 25.5,\n *   txid: \"PEDIDO123\",\n * });\n */\nexport function pixPayload(input: PixInput): string {\n    const dynamic = input.kind === \"dynamic\";\n    const oneTime = input.oneTime ?? dynamic;\n\n    let payload = tlv(TAG_PAYLOAD_FORMAT, PAYLOAD_FORMAT_VERSION);\n    payload += tlv(\n        TAG_POINT_OF_INITIATION,\n        oneTime ? POINT_OF_INITIATION_SINGLE_USE : POINT_OF_INITIATION_REUSABLE,\n    );\n    payload += dynamic ? dynamicMerchantAccount(input) : staticMerchantAccount(input);\n    payload += tlv(TAG_MERCHANT_CATEGORY_CODE, DEFAULT_MERCHANT_CATEGORY_CODE);\n    payload += tlv(TAG_TRANSACTION_CURRENCY, CURRENCY_BRL);\n    if (!dynamic && input.amount !== undefined) {\n        payload += tlv(TAG_TRANSACTION_AMOUNT, toAmountField(input.amount));\n    }\n    payload += tlv(TAG_COUNTRY_CODE, COUNTRY_BR);\n    payload += tlv(\n        TAG_MERCHANT_NAME,\n        toBoundedText(input.merchantName, MAX_MERCHANT_NAME, \"merchantName\"),\n    );\n    payload += tlv(\n        TAG_MERCHANT_CITY,\n        toBoundedText(input.merchantCity, MAX_MERCHANT_CITY, \"merchantCity\"),\n    );\n    const postalCode = input.postalCode === undefined ? \"\" : digits(input.postalCode);\n    if (postalCode !== \"\") payload += tlv(TAG_POSTAL_CODE, postalCode);\n    payload += additionalDataField(dynamic ? TXID_UNSPECIFIED : input.txid);\n\n    const withCrcHeader = `${payload}${TAG_CRC}04`;\n    return `${withCrcHeader}${pixCrc16(withCrcHeader)}`;\n}\n\n/**\n * Split a flat run of TLVs. Stops cleanly at the first malformed triple.\n *\n * An ID may appear once per level. The BACEN BR Code manual (v2, May 2020)\n * states it for the root — \"there are no duplicate IDs in the document's root,\n * according to\" EMV® QRCPS-MPM;\n * the same holds here inside tags 26 and 62, which no conforming emitter\n * repeats either. Keeping the first of two values would give the caller one\n * reading of the payload while a wallet that keeps the last pays another.\n *\n * Lengths count characters (code points), as EMV defines them — see {@link tlv}.\n * A payload from another PSP may carry a `String` template (tag 64, or an\n * unreserved one) with non-ASCII text, where counting UTF-16 units would split\n * a character and misread every tag after it.\n *\n * @throws {PixError} When a length prefix is not two digits, runs past the end,\n * or an ID repeats at this level.\n */\nfunction parseTlv(text: string, where: string): PixField[] {\n    const input = Array.from(text);\n    const fields: PixField[] = [];\n    let cursor = 0;\n    while (cursor < input.length) {\n        const id = input.slice(cursor, cursor + 2).join(\"\");\n        const rawLength = input.slice(cursor + 2, cursor + 4).join(\"\");\n        if (!/^\\d{2}$/.test(id) || !/^\\d{2}$/.test(rawLength)) {\n            throw new PixError(\n                `Malformed TLV in ${where} at offset ${cursor}: expected a 2-digit tag and length.`,\n            );\n        }\n        const length = Number(rawLength);\n        const start = cursor + 4;\n        if (start + length > input.length) {\n            throw new PixError(\n                `Tag ${id} in ${where} declares ${length} characters but only ${input.length - start} remain.`,\n            );\n        }\n        if (fields.some((field) => field.id === id)) {\n            throw new PixError(\n                `Tag ${id} in ${where} appears more than once; a BR Code carries each tag once per level.`,\n            );\n        }\n        fields.push({ id, value: input.slice(start, start + length).join(\"\") });\n        cursor = start + length;\n    }\n    return fields;\n}\n\n/** The value of a tag — unique per level, see {@link parseTlv} — or `undefined`. */\nfunction pick(fields: readonly PixField[], id: string): string | undefined {\n    return fields.find((field) => field.id === id)?.value;\n}\n\n/**\n * Read tag 54 into reais.\n *\n * @throws {PixError} When the field is outside the EMV format\n * ({@link AMOUNT_FIELD}) or wider than 13 characters. Zero is read as `0`; see\n * {@link AMOUNT_FIELD} for why the reader accepts what `pixPayload` refuses.\n */\nfunction readAmountField(field: string): number {\n    if (field.length > MAX_AMOUNT_FIELD || !AMOUNT_FIELD.test(field)) {\n        throw new PixError(\n            `Tag 54 (amount) must be an amount like \"25.50\", with \".\" as the decimal mark, ` +\n                `at most two decimals and ${MAX_AMOUNT_FIELD} characters; got ${JSON.stringify(field)}.`,\n        );\n    }\n    return Number(field);\n}\n\n/**\n * Read a Pix \"Copia e Cola\" payload back into its parts.\n *\n * Tolerant by design: tags the SDK does not know about are kept verbatim in\n * {@link PixData.fields} instead of raising, because PSPs do add their own\n * templates and a reader that rejects them is useless in production. What is\n * *not* tolerated is a broken frame — a length prefix that runs off the end, a\n * missing tag 63 — a checksum mismatch, which means the string was corrupted in\n * transit, or a payload with two readings: a tag repeated at the root or inside\n * tags 26 and 62, a tag 63 anywhere but at the end, a tag 26 with both a key and\n * a URL, or a tag 54 outside the EMV amount format. A preview built from one\n * reading while the wallet pays the other is the failure those rules exist for.\n *\n * Position is checked where EMV® QRCPS-MPM — the reference the BACEN manual\n * defers to — fixes it: tag 00 is the first object and tag 63 the last; every\n * other root tag may appear in any order. Before #475 an inner `6304` + CRC\n * followed by `5405…` and a second `6304` + CRC parsed as a priced payload,\n * while the same text cut at the first CRC was a valid payload with no amount.\n *\n * The CRC detects corruption, not authorship: whoever crafts a payload\n * recomputes it, so a valid CRC says nothing about who published the account.\n *\n * @param payload - The copia-e-cola string. Surrounding whitespace is ignored.\n * @param options - See {@link ParsePixOptions}.\n * @returns The decoded payload.\n * @throws {PixError} On a malformed frame, a missing CRC tag, a tag 00 that is\n * not first or a tag 63 that is not last, a repeated tag, a\n * tag 26 that is not a Pix account or that carries both a key and a URL, an\n * amount outside the EMV format, or — unless `requireCrc` is `false` — a CRC\n * mismatch.\n *\n * @example\n * const data = parsePixPayload(copied);\n * console.log(data.key, data.amount, data.txid);\n */\nexport function parsePixPayload(payload: string, options: ParsePixOptions = {}): PixData {\n    const { requireCrc = true } = options;\n    const text = payload.trim();\n    if (text.length < 8) throw new PixError(\"Payload is too short to be a BR Code.\");\n\n    const crcHeaderAt = text.length - 8;\n    if (text.slice(crcHeaderAt, crcHeaderAt + 4) !== `${TAG_CRC}04`) {\n        throw new PixError(\"Payload does not end in a `6304` CRC tag.\");\n    }\n    const crc = text.slice(-4).toUpperCase();\n    const expected = pixCrc16(text.slice(0, -4));\n    const crcValid = crc === expected;\n    if (!crcValid && requireCrc) {\n        throw new PixError(`CRC mismatch: payload says ${crc}, recomputed ${expected}.`);\n    }\n\n    const fields = parseTlv(text.slice(0, crcHeaderAt), \"payload\");\n    if (fields[0]?.id !== TAG_PAYLOAD_FORMAT) {\n        throw new PixError(\"Tag 00 (payload format indicator) must be the first tag of a BR Code.\");\n    }\n    if (fields.some((field) => field.id === TAG_CRC)) {\n        throw new PixError(\n            \"Tag 63 (CRC) must be the last tag of a BR Code; this payload carries another one before the end.\",\n        );\n    }\n    const merchantAccount = pick(fields, TAG_MERCHANT_ACCOUNT_INFO);\n    if (merchantAccount === undefined) {\n        throw new PixError(\"Payload has no tag 26 (merchant account information).\");\n    }\n    const account = parseTlv(merchantAccount, \"tag 26\");\n    const gui = pick(account, MAI_TAG_GUI);\n    if (gui?.toLowerCase() !== PIX_GUI) {\n        throw new PixError(\n            `Tag 26 is not a Pix account: expected GUI ${PIX_GUI}, got ${JSON.stringify(gui)}.`,\n        );\n    }\n\n    const url = pick(account, MAI_TAG_URL);\n    const key = pick(account, MAI_TAG_KEY);\n    if (url !== undefined && key !== undefined) {\n        throw new PixError(\n            \"Tag 26 carries both a key (01) and a URL (25); a BR Code is either static or dynamic, not both.\",\n        );\n    }\n    const amountField = pick(fields, TAG_TRANSACTION_AMOUNT);\n    const txid = pick(\n        parseTlv(pick(fields, TAG_ADDITIONAL_DATA) ?? \"\", \"tag 62\"),\n        ADDITIONAL_TAG_TXID,\n    );\n\n    return {\n        kind: url === undefined ? \"static\" : \"dynamic\",\n        ...(key === undefined ? {} : { key, keyType: pixKeyType(key) ?? undefined }),\n        ...(url === undefined ? {} : { url }),\n        merchantName: pick(fields, TAG_MERCHANT_NAME) ?? \"\",\n        merchantCity: pick(fields, TAG_MERCHANT_CITY) ?? \"\",\n        ...(amountField === undefined ? {} : { amount: readAmountField(amountField) }),\n        currency: pick(fields, TAG_TRANSACTION_CURRENCY) ?? \"\",\n        countryCode: pick(fields, TAG_COUNTRY_CODE) ?? \"\",\n        merchantCategoryCode: pick(fields, TAG_MERCHANT_CATEGORY_CODE) ?? \"\",\n        ...(txid === undefined ? {} : { txid }),\n        ...(pick(account, MAI_TAG_DESCRIPTION) === undefined\n            ? {}\n            : { description: pick(account, MAI_TAG_DESCRIPTION) }),\n        ...(pick(fields, TAG_POSTAL_CODE) === undefined\n            ? {}\n            : { postalCode: pick(fields, TAG_POSTAL_CODE) }),\n        oneTime: pick(fields, TAG_POINT_OF_INITIATION) === POINT_OF_INITIATION_SINGLE_USE,\n        crc,\n        crcValid,\n        fields,\n    };\n}\n"],"mappings":";;AAeA,IAAa,IAAb,cAA8B,MAAM;CAChC,YAAY,GAAiB;EAEzB,AADA,MAAM,CAAO,GACb,KAAK,OAAO;CAChB;AACJ,GA8GM,IAAmB,MAGnB,IAAgB,OAGhB,IAAa,OAEb,IAAqB,MACrB,IAA0B,MAC1B,IAA4B,MAC5B,IAA6B,MAC7B,IAA2B,MAC3B,IAAyB,MACzB,IAAmB,MACnB,IAAoB,MACpB,IAAoB,MACpB,IAAkB,MAClB,IAAsB,MACtB,IAAU,MAEV,IAAc,MACd,IAAc,MACd,IAAsB,MACtB,IAAc,MACd,IAAsB,MAGtB,IAAU,kBAEV,IAAyB,MACzB,IAA+B,MAC/B,IAAiC,MACjC,IAAiC,QACjC,IAAe,OACf,IAAa,MACb,IAAmB,OAEnB,IAAoB,IACpB,IAAoB,IACpB,IAAW,IACX,IAAgB,IAChB,IAAgB,IAchB,IAAe,uBAGf,IAAmB;AAoBzB,SAAgB,EAAS,GAAuB;CAC5C,IAAM,IAAQ,IAAI,YAAY,CAAC,CAAC,OAAO,CAAK,GACxC,IAAM;CACV,KAAK,IAAM,KAAQ,GAAO;EACtB,KAAO,KAAQ;EACf,KAAK,IAAI,IAAM,GAAG,IAAM,GAAG,KAAO,GAC9B,IACK,IAAM,SACC,KAAO,IAAK,KAAoB,IACjC,KAAO,IAAK;CAE/B;CACA,OAAO,EAAI,SAAS,EAAE,CAAC,CAAC,YAAY,CAAC,CAAC,SAAS,GAAG,GAAG;AACzD;AAGA,SAAS,EAAO,GAAuB;CACnC,OAAO,EAAM,QAAQ,OAAO,EAAE;AAClC;AAWA,SAAS,EAAc,GAAe,GAAuB;CACzD,IAAM,IAAW,EAAM,UAAU,KAAK,CAAC,CAAC,QAAQ,mBAAmB,EAAE;CACrE,IAAI,eAAe,KAAK,CAAQ,GAC5B,MAAM,IAAI,EACN,GAAG,EAAM,4CAA4C,KAAK,UAAU,CAAK,EAAE,wBAE/E;CAEJ,OAAO;AACX;AAWA,IAAM,IAAuB;AAc7B,SAAS,EAAI,GAAY,GAAuB;CAC5C,IAAI,CAAC,EAAqB,KAAK,CAAK,GAChC,MAAM,IAAI,EACN,OAAO,EAAG,0EACH,KAAK,UAAU,CAAK,EAAE,EACjC;CAEJ,IAAI,EAAM,SAAS,GACf,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,OAAO,kDAAkD,EAAc,EACjG;CAEJ,OAAO,GAAG,IAAK,OAAO,EAAM,MAAM,CAAC,CAAC,SAAS,GAAG,GAAG,IAAI;AAC3D;AAcA,SAAgB,EAAW,GAAgC;CACvD,IAAM,IAAU,EAAI,KAAK;CACzB,IAAI,MAAY,IAAI,OAAO;CAE3B,IAAI,EAAQ,SAAS,GAAG,GACpB,OAAO,gCAAgC,KAAK,CAAO,KAAK,EAAQ,UAAU,IACpE,UACA;CAEV,IAAI,kEAAkE,KAAK,CAAO,GAC9E,OAAO;CAGX,IAAM,IAAU,EAAO,CAAO;CAU9B,OATI,EAAQ,WAAW,KAAW,EAAa,CAAO,IAAI,SAAS,OAC/D,EAAQ,WAAW,MAAM,EAAY,CAAO,IAAU,QACtD,EAAQ,WAAW,GAAG,IACf,kBAAkB,KAAK,IAAI,GAAS,IAAI,UAAU,OAEzD,EAAQ,WAAW,MAAM,EAAQ,WAAW,OAC5C,EAAQ,WAAW,MAAM,EAAQ,WAAW,OACrC,EAAQ,WAAW,IAAI,IAFyB,UAEX;AAGpD;AAuBA,SAAgB,EAAgB,GAA+B;CAC3D,IAAM,IAAU,EAAI,KAAK,GACnB,IAAO,EAAW,CAAO;CAC/B,IAAI,MAAS,MACT,MAAM,IAAI,EACN,kBAAkB,KAAK,UAAU,CAAG,EAAE,sEAE1C;CAIJ,IADI,MAAS,WACT,MAAS,OAAO,OAAO;EAAE;EAAM,OAAO,EAAQ,YAAY;CAAE;CAChE,IAAI,MAAS,SAAS;EAClB,IAAM,IAAU,EAAO,CAAO;EAC9B,OAAO;GAAE;GAAM,OAAO,MAAM,EAAQ,SAAS,KAAK,EAAQ,MAAM,CAAC,IAAI;EAAU;CACnF;CACA,OAAO;EAAE;EAAM,OAAO,EAAO,CAAO;CAAE;AAC1C;AAQA,SAAS,EAAc,GAAwB;CAC3C,IAAI,CAAC,OAAO,SAAS,CAAM,GACvB,MAAM,IAAI,EAAS,uCAAuC,EAAO,EAAE;CAEvE,IAAI,KAAU,GACV,MAAM,IAAI,EACN,gCAAgC,EAAO,wDAC3C;CAEJ,IAAM,IAAQ,EAAO,QAAQ,CAAC;CAC9B,IAAI,OAAO,CAAK,KAAK,GACjB,MAAM,IAAI,EACN,UAAU,EAAO,aAAa,EAAM,wEACxC;CAEJ,IAAI,EAAM,SAAS,IACf,MAAM,IAAI,EAAS,UAAU,EAAM,iDAAiD;CAExF,OAAO;AACX;AAGA,SAAS,EAAc,GAAe,GAAa,GAAuB;CACtE,IAAM,IAAO,EAAc,EAAM,KAAK,GAAG,CAAK;CAC9C,IAAI,MAAS,IAAI,MAAM,IAAI,EAAS,GAAG,EAAM,cAAc;CAC3D,IAAI,EAAK,SAAS,GACd,MAAM,IAAI,EACN,GAAG,EAAM,MAAM,EAAK,OAAO,kCAAkC,EAAI,0EAErE;CAEJ,OAAO;AACX;AAGA,SAAS,EAAoB,GAAkC;CAC3D,IAAM,IAAQ,GAAM,KAAK,KAAK;CAC9B,IAAI,MAAU,MAAM,MAAU,GAC1B,OAAO,EAAI,GAAqB,EAAI,GAAqB,CAAgB,CAAC;CAE9E,IAAI,CAAK,OAAO,kBAAkB,EAAS,GAAG,CAAC,CAAC,KAAK,CAAK,GACtD,MAAM,IAAI,EACN,qBAAqB,EAAS,0BAA0B,KAAK,UAAU,CAAI,EAAE,EACjF;CAEJ,OAAO,EAAI,GAAqB,EAAI,GAAqB,CAAK,CAAC;AACnE;AAGA,SAAS,EAAsB,GAA+B;CAC1D,IAAM,EAAE,aAAU,EAAgB,EAAM,GAAG,GACvC,IAAQ,EAAI,GAAa,CAAO,IAAI,EAAI,GAAa,CAAK,GACxD,IAAc,EAAM,aAAa,KAAK;CAI5C,IAHI,MAAgB,KAAA,KAAa,MAAgB,OAC7C,KAAS,EAAI,GAAqB,EAAc,GAAa,aAAa,CAAC,IAE3E,EAAM,SAAS,GACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE;CAEJ,OAAO,EAAI,GAA2B,CAAK;AAC/C;AAGA,SAAS,EAAuB,GAAgC;CAC5D,IAAM,IAAM,EAAc,EAAM,IAAI,KAAK,GAAG,KAAK,CAAC,CAAC,QAAQ,iBAAiB,EAAE;CAC9E,IAAI,MAAQ,IAAI,MAAM,IAAI,EAAS,wCAAwC;CAC3E,IAAM,IAAQ,EAAI,GAAa,CAAO,IAAI,EAAI,GAAa,CAAG;CAC9D,IAAI,EAAM,SAAS,GACf,MAAM,IAAI,EACN,aAAa,EAAM,OAAO,wBAAwB,EAAc,mDAEpE;CAEJ,OAAO,EAAI,GAA2B,CAAK;AAC/C;AAqCA,SAAgB,EAAW,GAAyB;CAChD,IAAM,IAAU,EAAM,SAAS,WACzB,IAAU,EAAM,WAAW,GAE7B,IAAU,EAAI,GAAoB,CAAsB;CAgB5D,AAfA,KAAW,EACP,GACA,IAAU,IAAiC,CAC/C,GACA,KAAW,IAAU,EAAuB,CAAK,IAAI,EAAsB,CAAK,GAChF,KAAW,EAAI,GAA4B,CAA8B,GACzE,KAAW,EAAI,GAA0B,CAAY,GACjD,CAAC,KAAW,EAAM,WAAW,KAAA,MAC7B,KAAW,EAAI,GAAwB,EAAc,EAAM,MAAM,CAAC,IAEtE,KAAW,EAAI,GAAkB,CAAU,GAC3C,KAAW,EACP,GACA,EAAc,EAAM,cAAc,GAAmB,cAAc,CACvE,GACA,KAAW,EACP,GACA,EAAc,EAAM,cAAc,GAAmB,cAAc,CACvE;CACA,IAAM,IAAa,EAAM,eAAe,KAAA,IAAY,KAAK,EAAO,EAAM,UAAU;CAEhF,AADI,MAAe,OAAI,KAAW,EAAI,GAAiB,CAAU,IACjE,KAAW,EAAoB,IAAU,IAAmB,EAAM,IAAI;CAEtE,IAAM,IAAgB,GAAG,IAAU,EAAQ;CAC3C,OAAO,GAAG,IAAgB,EAAS,CAAa;AACpD;AAoBA,SAAS,EAAS,GAAc,GAA2B;CACvD,IAAM,IAAQ,MAAM,KAAK,CAAI,GACvB,IAAqB,CAAC,GACxB,IAAS;CACb,OAAO,IAAS,EAAM,SAAQ;EAC1B,IAAM,IAAK,EAAM,MAAM,GAAQ,IAAS,CAAC,CAAC,CAAC,KAAK,EAAE,GAC5C,IAAY,EAAM,MAAM,IAAS,GAAG,IAAS,CAAC,CAAC,CAAC,KAAK,EAAE;EAC7D,IAAI,CAAC,UAAU,KAAK,CAAE,KAAK,CAAC,UAAU,KAAK,CAAS,GAChD,MAAM,IAAI,EACN,oBAAoB,EAAM,aAAa,EAAO,qCAClD;EAEJ,IAAM,IAAS,OAAO,CAAS,GACzB,IAAQ,IAAS;EACvB,IAAI,IAAQ,IAAS,EAAM,QACvB,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,YAAY,EAAO,uBAAuB,EAAM,SAAS,EAAM,SACzF;EAEJ,IAAI,EAAO,MAAM,MAAU,EAAM,OAAO,CAAE,GACtC,MAAM,IAAI,EACN,OAAO,EAAG,MAAM,EAAM,oEAC1B;EAGJ,AADA,EAAO,KAAK;GAAE;GAAI,OAAO,EAAM,MAAM,GAAO,IAAQ,CAAM,CAAC,CAAC,KAAK,EAAE;EAAE,CAAC,GACtE,IAAS,IAAQ;CACrB;CACA,OAAO;AACX;AAGA,SAAS,EAAK,GAA6B,GAAgC;CACvE,OAAO,EAAO,MAAM,MAAU,EAAM,OAAO,CAAE,CAAC,EAAE;AACpD;AASA,SAAS,EAAgB,GAAuB;CAC5C,IAAI,EAAM,SAAS,KAAoB,CAAC,EAAa,KAAK,CAAK,GAC3D,MAAM,IAAI,EACN,0GACgC,EAAiB,mBAAmB,KAAK,UAAU,CAAK,EAAE,EAC9F;CAEJ,OAAO,OAAO,CAAK;AACvB;AAqCA,SAAgB,GAAgB,GAAiB,IAA2B,CAAC,GAAY;CACrF,IAAM,EAAE,gBAAa,OAAS,GACxB,IAAO,EAAQ,KAAK;CAC1B,IAAI,EAAK,SAAS,GAAG,MAAM,IAAI,EAAS,uCAAuC;CAE/E,IAAM,IAAc,EAAK,SAAS;CAClC,IAAI,EAAK,MAAM,GAAa,IAAc,CAAC,MAAM,GAAG,EAAQ,KACxD,MAAM,IAAI,EAAS,2CAA2C;CAElE,IAAM,IAAM,EAAK,MAAM,EAAE,CAAC,CAAC,YAAY,GACjC,IAAW,EAAS,EAAK,MAAM,GAAG,EAAE,CAAC,GACrC,IAAW,MAAQ;CACzB,IAAI,CAAC,KAAY,GACb,MAAM,IAAI,EAAS,8BAA8B,EAAI,eAAe,EAAS,EAAE;CAGnF,IAAM,IAAS,EAAS,EAAK,MAAM,GAAG,CAAW,GAAG,SAAS;CAC7D,IAAI,EAAO,EAAE,EAAE,OAAO,GAClB,MAAM,IAAI,EAAS,uEAAuE;CAE9F,IAAI,EAAO,MAAM,MAAU,EAAM,OAAO,CAAO,GAC3C,MAAM,IAAI,EACN,kGACJ;CAEJ,IAAM,IAAkB,EAAK,GAAQ,CAAyB;CAC9D,IAAI,MAAoB,KAAA,GACpB,MAAM,IAAI,EAAS,uDAAuD;CAE9E,IAAM,IAAU,EAAS,GAAiB,QAAQ,GAC5C,IAAM,EAAK,GAAS,CAAW;CACrC,IAAI,GAAK,YAAY,MAAM,GACvB,MAAM,IAAI,EACN,6CAA6C,EAAQ,QAAQ,KAAK,UAAU,CAAG,EAAE,EACrF;CAGJ,IAAM,IAAM,EAAK,GAAS,CAAW,GAC/B,IAAM,EAAK,GAAS,CAAW;CACrC,IAAI,MAAQ,KAAA,KAAa,MAAQ,KAAA,GAC7B,MAAM,IAAI,EACN,iGACJ;CAEJ,IAAM,IAAc,EAAK,GAAQ,CAAsB,GACjD,IAAO,EACT,EAAS,EAAK,GAAQ,CAAmB,KAAK,IAAI,QAAQ,GAC1D,CACJ;CAEA,OAAO;EACH,MAAM,MAAQ,KAAA,IAAY,WAAW;EACrC,GAAI,MAAQ,KAAA,IAAY,CAAC,IAAI;GAAE;GAAK,SAAS,EAAW,CAAG,KAAK,KAAA;EAAU;EAC1E,GAAI,MAAQ,KAAA,IAAY,CAAC,IAAI,EAAE,OAAI;EACnC,cAAc,EAAK,GAAQ,CAAiB,KAAK;EACjD,cAAc,EAAK,GAAQ,CAAiB,KAAK;EACjD,GAAI,MAAgB,KAAA,IAAY,CAAC,IAAI,EAAE,QAAQ,EAAgB,CAAW,EAAE;EAC5E,UAAU,EAAK,GAAQ,CAAwB,KAAK;EACpD,aAAa,EAAK,GAAQ,CAAgB,KAAK;EAC/C,sBAAsB,EAAK,GAAQ,CAA0B,KAAK;EAClE,GAAI,MAAS,KAAA,IAAY,CAAC,IAAI,EAAE,QAAK;EACrC,GAAI,EAAK,GAAS,CAAmB,MAAM,KAAA,IACrC,CAAC,IACD,EAAE,aAAa,EAAK,GAAS,CAAmB,EAAE;EACxD,GAAI,EAAK,GAAQ,CAAe,MAAM,KAAA,IAChC,CAAC,IACD,EAAE,YAAY,EAAK,GAAQ,CAAe,EAAE;EAClD,SAAS,EAAK,GAAQ,CAAuB,MAAM;EACnD;EACA;EACA;CACJ;AACJ"}

package/dist/br.d.ts

@@ -1175,9 +1175,15 @@ export declare interface ParsePixOptions {
  * *not* tolerated is a broken frame — a length prefix that runs off the end, a
  * missing tag 63 — a checksum mismatch, which means the string was corrupted in
  * transit, or a payload with two readings: a tag repeated at the root or inside
- * tags 26 and 62, a tag 26 with both a key and a URL, or a tag 54 outside the EMV
- * amount format. A preview built from one reading while the wallet pays the
- * other is the failure those rules exist for.
+ * tags 26 and 62, a tag 63 anywhere but at the end, a tag 26 with both a key and
+ * a URL, or a tag 54 outside the EMV amount format. A preview built from one
+ * reading while the wallet pays the other is the failure those rules exist for.
+ *
+ * Position is checked where EMV® QRCPS-MPM — the reference the BACEN manual
+ * defers to — fixes it: tag 00 is the first object and tag 63 the last; every
+ * other root tag may appear in any order. Before #475 an inner `6304` + CRC
+ * followed by `5405…` and a second `6304` + CRC parsed as a priced payload,
+ * while the same text cut at the first CRC was a valid payload with no amount.
  *
  * The CRC detects corruption, not authorship: whoever crafts a payload
  * recomputes it, so a valid CRC says nothing about who published the account.
@@ -1185,7 +1191,8 @@ export declare interface ParsePixOptions {
  * @param payload - The copia-e-cola string. Surrounding whitespace is ignored.
  * @param options - See {@link ParsePixOptions}.
  * @returns The decoded payload.
- * @throws {PixError} On a malformed frame, a missing CRC tag, a repeated tag, a
+ * @throws {PixError} On a malformed frame, a missing CRC tag, a tag 00 that is
+ * not first or a tag 63 that is not last, a repeated tag, a
  * tag 26 that is not a Pix account or that carries both a key and a URL, an
  * amount outside the EMV format, or — unless `requireCrc` is `false` — a CRC
  * mismatch.

package/dist/components/CodeBlock/CodeBlock.cjs

@@ -1,3 +1,3 @@
-const e=require("../../utils/cn.cjs"),t=require("../CopyButton/CopyButton.cjs"),n=require("./tokenize.cjs"),r=require("./CodeBlock.module.cjs");let i=require("react"),a=require("react/jsx-runtime");function o({code:o,language:s,filename:c,showLineNumbers:l=!1,highlightLines:u,copyable:d=!0,maxHeight:f,wrap:p=!1,label:m,className:h,...g}){let _=(0,i.useMemo)(()=>o.replace(/^\n+/,``).replace(/\s+$/,``),[o]),v=(0,i.useMemo)(()=>n.tokenizeLines(_,s),[_,s]),y=n.resolveLanguage(s),b=(0,i.useMemo)(()=>new Set(u??[]),[u]),x=m??(c&&typeof c==`string`?`Código: ${c}`:`Bloco de código${y===`plain`?``:` em ${y}`}`),S=!!c||d;return(0,a.jsxs)(`div`,{className:e.cn(r.default.wrapper,h),...g,children:[S&&(0,a.jsxs)(`div`,{className:r.default.header,children:[(0,a.jsx)(`span`,{className:r.default.filename,children:c??(y===`plain`?``:y)}),d&&(0,a.jsx)(t.CopyButton,{value:_,className:r.default.copy})]}),(0,a.jsx)(`pre`,{className:e.cn(r.default.pre,p&&r.default.wrap),style:{maxHeight:f},tabIndex:0,role:`group`,"aria-label":x,children:(0,a.jsx)(`code`,{className:r.default.code,"data-language":y,children:v.map((t,n)=>(0,a.jsxs)(i.Fragment,{children:[(0,a.jsxs)(`span`,{className:e.cn(r.default.line,b.has(n+1)&&r.default.marked),children:[l&&(0,a.jsx)(`span`,{className:r.default.lineNumber,"aria-hidden":`true`,children:n+1}),(0,a.jsx)(`span`,{className:r.default.lineContent,children:t.map((e,t)=>(0,a.jsx)(`span`,{className:r.default[e.kind],"data-token":e.kind,children:e.value},t))})]}),n<v.length-1?`
+const e=require("../../utils/cn.cjs"),t=require("../CopyButton/CopyButton.cjs"),n=require("./tokenize.cjs"),r=require("./CodeBlock.module.cjs");let i=require("react"),a=require("react/jsx-runtime");function o({code:o,language:s,filename:c,showLineNumbers:l=!1,highlightLines:u,copyable:d=!0,maxHeight:f,wrap:p=!1,label:m,className:h,...g}){let _=(0,i.useMemo)(()=>o.replace(/^\n+/,``).trimEnd(),[o]),v=(0,i.useMemo)(()=>n.tokenizeLines(_,s),[_,s]),y=n.resolveLanguage(s),b=(0,i.useMemo)(()=>new Set(u??[]),[u]),x=m??(c&&typeof c==`string`?`Código: ${c}`:`Bloco de código${y===`plain`?``:` em ${y}`}`),S=!!c||d;return(0,a.jsxs)(`div`,{className:e.cn(r.default.wrapper,h),...g,children:[S&&(0,a.jsxs)(`div`,{className:r.default.header,children:[(0,a.jsx)(`span`,{className:r.default.filename,children:c??(y===`plain`?``:y)}),d&&(0,a.jsx)(t.CopyButton,{value:_,className:r.default.copy})]}),(0,a.jsx)(`pre`,{className:e.cn(r.default.pre,p&&r.default.wrap),style:{maxHeight:f},tabIndex:0,role:`group`,"aria-label":x,children:(0,a.jsx)(`code`,{className:r.default.code,"data-language":y,children:v.map((t,n)=>(0,a.jsxs)(i.Fragment,{children:[(0,a.jsxs)(`span`,{className:e.cn(r.default.line,b.has(n+1)&&r.default.marked),children:[l&&(0,a.jsx)(`span`,{className:r.default.lineNumber,"aria-hidden":`true`,children:n+1}),(0,a.jsx)(`span`,{className:r.default.lineContent,children:t.map((e,t)=>(0,a.jsx)(`span`,{className:r.default[e.kind],"data-token":e.kind,children:e.value},t))})]}),n<v.length-1?`
 `:null]},n))})})]})}exports.CodeBlock=o;
 //# sourceMappingURL=CodeBlock.cjs.map

package/dist/components/CodeBlock/CodeBlock.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"CodeBlock.cjs","names":[],"sources":["../../../src/components/CodeBlock/CodeBlock.tsx"],"sourcesContent":["/**\n * @tempest-limits props-count — code and language drive the scanner; filename,\n * showLineNumbers, highlightLines, maxHeight and wrap are the presentation a docs\n * page picks per block, and copyable plus label are the affordance and its\n * accessible name. All independent, all used in the SDK's own docs gallery.\n */\nimport { Fragment, useMemo } from \"react\";\nimport type { HTMLAttributes, ReactNode } from \"react\";\n\nimport { cn } from \"@/utils/cn\";\n\nimport { CopyButton } from \"../CopyButton\";\nimport { resolveLanguage, tokenizeLines } from \"./tokenize\";\nimport styles from \"./CodeBlock.module.css\";\n\nexport interface CodeBlockProps extends Omit<HTMLAttributes<HTMLDivElement>, \"children\"> {\n    /** The source to display. Leading and trailing blank lines are trimmed. */\n    code: string;\n    /** Grammar name or alias (`ts`, `bash`, `json`…). Unknown values render plain. */\n    language?: string;\n    /** Shown in the header, usually a file path. */\n    filename?: ReactNode;\n    /** Number the lines. Default `false`. */\n    showLineNumbers?: boolean;\n    /** 1-based line numbers to mark as the point of the snippet. */\n    highlightLines?: readonly number[];\n    /** Offer a copy button. Default `true`. */\n    copyable?: boolean;\n    /** Cap the height in px or any CSS length; the body scrolls past it. */\n    maxHeight?: number | string;\n    /** Wrap long lines instead of scrolling sideways. Default `false`. */\n    wrap?: boolean;\n    /**\n     * Accessible name for the code region. Defaults to naming the language, and\n     * to the filename when there is one.\n     */\n    label?: string;\n}\n\n/**\n * A read-only code sample: syntax colours, optional line numbers, copy button.\n *\n * The `<pre>` is always focusable. A code block is scrollable and holds nothing\n * focusable inside, so without a tab stop a keyboard user can see there is more\n * code past the edge and has no way to reach it. It is the one scroll container\n * where the stop is unconditional rather than measured — a code sample is\n * expected to be reachable, read and selected on its own.\n *\n * Colours come from an approximate scanner, not a parser — see {@link tokenize}.\n *\n * @example\n * <CodeBlock code={snippet} language=\"ts\" filename=\"src/main.ts\" showLineNumbers />\n * <CodeBlock code={log} language=\"bash\" maxHeight={280} />\n */\nexport function CodeBlock({\n    code,\n    language,\n    filename,\n    showLineNumbers = false,\n    highlightLines,\n    copyable = true,\n    maxHeight,\n    wrap = false,\n    label,\n    className,\n    ...rest\n}: CodeBlockProps) {\n    const trimmed = useMemo(() => code.replace(/^\\n+/, \"\").replace(/\\s+$/, \"\"), [code]);\n    const lines = useMemo(() => tokenizeLines(trimmed, language), [trimmed, language]);\n    const resolved = resolveLanguage(language);\n    const marked = useMemo(() => new Set(highlightLines ?? []), [highlightLines]);\n\n    const name =\n        label ??\n        (filename && typeof filename === \"string\"\n            ? `Código: ${filename}`\n            : `Bloco de código${resolved === \"plain\" ? \"\" : ` em ${resolved}`}`);\n\n    const hasHeader = Boolean(filename) || copyable;\n\n    return (\n        <div className={cn(styles.wrapper, className)} {...rest}>\n            {hasHeader && (\n                <div className={styles.header}>\n                    <span className={styles.filename}>\n                        {filename ?? (resolved === \"plain\" ? \"\" : resolved)}\n                    </span>\n                    {copyable && <CopyButton value={trimmed} className={styles.copy} />}\n                </div>\n            )}\n\n            <pre\n                className={cn(styles.pre, wrap && styles.wrap)}\n                style={{ maxHeight }}\n                tabIndex={0}\n                role=\"group\"\n                aria-label={name}\n            >\n                <code className={styles.code} data-language={resolved}>\n                    {lines.map((tokens, index) => (\n                        <Fragment key={index}>\n                            <span\n                                className={cn(styles.line, marked.has(index + 1) && styles.marked)}\n                            >\n                                {showLineNumbers && (\n                                    /*\n                                     * The number is decoration: it must not land in the\n                                     * clipboard when the reader selects the snippet, and a\n                                     * screen reader announcing \"one const two import\" adds\n                                     * nothing. `user-select: none` in CSS plus this.\n                                     */\n                                    <span className={styles.lineNumber} aria-hidden=\"true\">\n                                        {index + 1}\n                                    </span>\n                                )}\n                                <span className={styles.lineContent}>\n                                    {tokens.map((token, tokenIndex) => (\n                                        <span\n                                            key={tokenIndex}\n                                            className={styles[token.kind]}\n                                            data-token={token.kind}\n                                        >\n                                            {token.value}\n                                        </span>\n                                    ))}\n                                </span>\n                            </span>\n                            {/*\n                             * A real newline character, and outside the line box.\n                             * It has to be real so that selecting the snippet by\n                             * hand and copying yields the source instead of one\n                             * run-together line. It has to be outside because the\n                             * line is an inline-block: a newline within one is\n                             * consumed inside that box, and every line ends up\n                             * side by side on a single row. The last one is\n                             * dropped so the block does not end in blank space.\n                             */}\n                            {index < lines.length - 1 ? \"\\n\" : null}\n                        </Fragment>\n                    ))}\n                </code>\n            </pre>\n        </div>\n    );\n}\n"],"mappings":"sMAsDA,SAAgB,EAAU,CACtB,OACA,WACA,WACA,kBAAkB,GAClB,iBACA,WAAW,GACX,YACA,OAAO,GACP,QACA,YACA,GAAG,GACY,CACf,IAAM,GAAA,EAAU,EAAA,QAAA,KAAc,EAAK,QAAQ,OAAQ,EAAE,CAAC,CAAC,QAAQ,OAAQ,EAAE,EAAG,CAAC,CAAI,CAAC,EAC5E,GAAA,EAAQ,EAAA,QAAA,KAAc,EAAA,cAAc,EAAS,CAAQ,EAAG,CAAC,EAAS,CAAQ,CAAC,EAC3E,EAAW,EAAA,gBAAgB,CAAQ,EACnC,GAAA,EAAS,EAAA,QAAA,KAAc,IAAI,IAAI,GAAkB,CAAC,CAAC,EAAG,CAAC,CAAc,CAAC,EAEtE,EACF,IACC,GAAY,OAAO,GAAa,SAC3B,WAAW,IACX,kBAAkB,IAAa,QAAU,GAAK,OAAO,OAEzD,EAAY,EAAQ,GAAa,EAEvC,OACI,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAA,GAAG,EAAA,QAAO,QAAS,CAAS,EAAG,GAAI,EAAnD,SAAA,CACK,IACG,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAA,QAAO,OAAvB,SAAA,EACI,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,SACnB,SAAA,IAAa,IAAa,QAAU,GAAK,EACxC,CAAA,EACL,IAAY,EAAA,EAAA,IAAA,CAAC,EAAA,WAAD,CAAY,MAAO,EAAS,UAAW,EAAA,QAAO,IAAO,CAAA,CACjE,CAGT,CAAA,GAAA,EAAA,EAAA,IAAA,CAAC,MAAD,CACI,UAAW,EAAA,GAAG,EAAA,QAAO,IAAK,GAAQ,EAAA,QAAO,IAAI,EAC7C,MAAO,CAAE,WAAU,EACnB,SAAU,EACV,KAAK,QACL,aAAY,EAEZ,UAAA,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,KAAM,gBAAe,EACxC,SAAA,EAAM,KAAK,EAAQ,KAChB,EAAA,EAAA,KAAA,CAAC,EAAA,SAAD,CAAA,SAAA,EACI,EAAA,EAAA,KAAA,CAAC,OAAD,CACI,UAAW,EAAA,GAAG,EAAA,QAAO,KAAM,EAAO,IAAI,EAAQ,CAAC,GAAK,EAAA,QAAO,MAAM,EADrE,SAAA,CAGK,IAOG,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,WAAY,cAAY,OAC3C,SAAA,EAAQ,CACP,CAAA,GAEV,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,YACnB,SAAA,EAAO,KAAK,EAAO,KAChB,EAAA,EAAA,IAAA,CAAC,OAAD,CAEI,UAAW,EAAA,QAAO,EAAM,MACxB,aAAY,EAAM,KAEjB,SAAA,EAAM,KACL,EALG,CAKH,CACT,CACC,CAAA,CACJ,CAWL,CAAA,EAAA,EAAQ,EAAM,OAAS,EAAI;EAAO,IAC7B,CAAA,EAtCK,CAsCL,CACb,CACC,CAAA,CACL,CAAA,CACJ,GAEb"}
+{"version":3,"file":"CodeBlock.cjs","names":[],"sources":["../../../src/components/CodeBlock/CodeBlock.tsx"],"sourcesContent":["/**\n * @tempest-limits props-count — code and language drive the scanner; filename,\n * showLineNumbers, highlightLines, maxHeight and wrap are the presentation a docs\n * page picks per block, and copyable plus label are the affordance and its\n * accessible name. All independent, all used in the SDK's own docs gallery.\n */\nimport { Fragment, useMemo } from \"react\";\nimport type { HTMLAttributes, ReactNode } from \"react\";\n\nimport { cn } from \"@/utils/cn\";\n\nimport { CopyButton } from \"../CopyButton\";\nimport { resolveLanguage, tokenizeLines } from \"./tokenize\";\nimport styles from \"./CodeBlock.module.css\";\n\nexport interface CodeBlockProps extends Omit<HTMLAttributes<HTMLDivElement>, \"children\"> {\n    /** The source to display. Leading and trailing blank lines are trimmed. */\n    code: string;\n    /** Grammar name or alias (`ts`, `bash`, `json`…). Unknown values render plain. */\n    language?: string;\n    /** Shown in the header, usually a file path. */\n    filename?: ReactNode;\n    /** Number the lines. Default `false`. */\n    showLineNumbers?: boolean;\n    /** 1-based line numbers to mark as the point of the snippet. */\n    highlightLines?: readonly number[];\n    /** Offer a copy button. Default `true`. */\n    copyable?: boolean;\n    /** Cap the height in px or any CSS length; the body scrolls past it. */\n    maxHeight?: number | string;\n    /** Wrap long lines instead of scrolling sideways. Default `false`. */\n    wrap?: boolean;\n    /**\n     * Accessible name for the code region. Defaults to naming the language, and\n     * to the filename when there is one.\n     */\n    label?: string;\n}\n\n/**\n * A read-only code sample: syntax colours, optional line numbers, copy button.\n *\n * The `<pre>` is always focusable. A code block is scrollable and holds nothing\n * focusable inside, so without a tab stop a keyboard user can see there is more\n * code past the edge and has no way to reach it. It is the one scroll container\n * where the stop is unconditional rather than measured — a code sample is\n * expected to be reachable, read and selected on its own.\n *\n * Colours come from an approximate scanner, not a parser — see {@link tokenize}.\n *\n * @example\n * <CodeBlock code={snippet} language=\"ts\" filename=\"src/main.ts\" showLineNumbers />\n * <CodeBlock code={log} language=\"bash\" maxHeight={280} />\n */\nexport function CodeBlock({\n    code,\n    language,\n    filename,\n    showLineNumbers = false,\n    highlightLines,\n    copyable = true,\n    maxHeight,\n    wrap = false,\n    label,\n    className,\n    ...rest\n}: CodeBlockProps) {\n    const trimmed = useMemo(() => code.replace(/^\\n+/, \"\").trimEnd(), [code]);\n    const lines = useMemo(() => tokenizeLines(trimmed, language), [trimmed, language]);\n    const resolved = resolveLanguage(language);\n    const marked = useMemo(() => new Set(highlightLines ?? []), [highlightLines]);\n\n    const name =\n        label ??\n        (filename && typeof filename === \"string\"\n            ? `Código: ${filename}`\n            : `Bloco de código${resolved === \"plain\" ? \"\" : ` em ${resolved}`}`);\n\n    const hasHeader = Boolean(filename) || copyable;\n\n    return (\n        <div className={cn(styles.wrapper, className)} {...rest}>\n            {hasHeader && (\n                <div className={styles.header}>\n                    <span className={styles.filename}>\n                        {filename ?? (resolved === \"plain\" ? \"\" : resolved)}\n                    </span>\n                    {copyable && <CopyButton value={trimmed} className={styles.copy} />}\n                </div>\n            )}\n\n            <pre\n                className={cn(styles.pre, wrap && styles.wrap)}\n                style={{ maxHeight }}\n                tabIndex={0}\n                role=\"group\"\n                aria-label={name}\n            >\n                <code className={styles.code} data-language={resolved}>\n                    {lines.map((tokens, index) => (\n                        <Fragment key={index}>\n                            <span\n                                className={cn(styles.line, marked.has(index + 1) && styles.marked)}\n                            >\n                                {showLineNumbers && (\n                                    /*\n                                     * The number is decoration: it must not land in the\n                                     * clipboard when the reader selects the snippet, and a\n                                     * screen reader announcing \"one const two import\" adds\n                                     * nothing. `user-select: none` in CSS plus this.\n                                     */\n                                    <span className={styles.lineNumber} aria-hidden=\"true\">\n                                        {index + 1}\n                                    </span>\n                                )}\n                                <span className={styles.lineContent}>\n                                    {tokens.map((token, tokenIndex) => (\n                                        <span\n                                            key={tokenIndex}\n                                            className={styles[token.kind]}\n                                            data-token={token.kind}\n                                        >\n                                            {token.value}\n                                        </span>\n                                    ))}\n                                </span>\n                            </span>\n                            {/*\n                             * A real newline character, and outside the line box.\n                             * It has to be real so that selecting the snippet by\n                             * hand and copying yields the source instead of one\n                             * run-together line. It has to be outside because the\n                             * line is an inline-block: a newline within one is\n                             * consumed inside that box, and every line ends up\n                             * side by side on a single row. The last one is\n                             * dropped so the block does not end in blank space.\n                             */}\n                            {index < lines.length - 1 ? \"\\n\" : null}\n                        </Fragment>\n                    ))}\n                </code>\n            </pre>\n        </div>\n    );\n}\n"],"mappings":"sMAsDA,SAAgB,EAAU,CACtB,OACA,WACA,WACA,kBAAkB,GAClB,iBACA,WAAW,GACX,YACA,OAAO,GACP,QACA,YACA,GAAG,GACY,CACf,IAAM,GAAA,EAAU,EAAA,QAAA,KAAc,EAAK,QAAQ,OAAQ,EAAE,CAAC,CAAC,QAAQ,EAAG,CAAC,CAAI,CAAC,EAClE,GAAA,EAAQ,EAAA,QAAA,KAAc,EAAA,cAAc,EAAS,CAAQ,EAAG,CAAC,EAAS,CAAQ,CAAC,EAC3E,EAAW,EAAA,gBAAgB,CAAQ,EACnC,GAAA,EAAS,EAAA,QAAA,KAAc,IAAI,IAAI,GAAkB,CAAC,CAAC,EAAG,CAAC,CAAc,CAAC,EAEtE,EACF,IACC,GAAY,OAAO,GAAa,SAC3B,WAAW,IACX,kBAAkB,IAAa,QAAU,GAAK,OAAO,OAEzD,EAAY,EAAQ,GAAa,EAEvC,OACI,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAA,GAAG,EAAA,QAAO,QAAS,CAAS,EAAG,GAAI,EAAnD,SAAA,CACK,IACG,EAAA,EAAA,KAAA,CAAC,MAAD,CAAK,UAAW,EAAA,QAAO,OAAvB,SAAA,EACI,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,SACnB,SAAA,IAAa,IAAa,QAAU,GAAK,EACxC,CAAA,EACL,IAAY,EAAA,EAAA,IAAA,CAAC,EAAA,WAAD,CAAY,MAAO,EAAS,UAAW,EAAA,QAAO,IAAO,CAAA,CACjE,CAGT,CAAA,GAAA,EAAA,EAAA,IAAA,CAAC,MAAD,CACI,UAAW,EAAA,GAAG,EAAA,QAAO,IAAK,GAAQ,EAAA,QAAO,IAAI,EAC7C,MAAO,CAAE,WAAU,EACnB,SAAU,EACV,KAAK,QACL,aAAY,EAEZ,UAAA,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,KAAM,gBAAe,EACxC,SAAA,EAAM,KAAK,EAAQ,KAChB,EAAA,EAAA,KAAA,CAAC,EAAA,SAAD,CAAA,SAAA,EACI,EAAA,EAAA,KAAA,CAAC,OAAD,CACI,UAAW,EAAA,GAAG,EAAA,QAAO,KAAM,EAAO,IAAI,EAAQ,CAAC,GAAK,EAAA,QAAO,MAAM,EADrE,SAAA,CAGK,IAOG,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,WAAY,cAAY,OAC3C,SAAA,EAAQ,CACP,CAAA,GAEV,EAAA,EAAA,IAAA,CAAC,OAAD,CAAM,UAAW,EAAA,QAAO,YACnB,SAAA,EAAO,KAAK,EAAO,KAChB,EAAA,EAAA,IAAA,CAAC,OAAD,CAEI,UAAW,EAAA,QAAO,EAAM,MACxB,aAAY,EAAM,KAEjB,SAAA,EAAM,KACL,EALG,CAKH,CACT,CACC,CAAA,CACJ,CAWL,CAAA,EAAA,EAAQ,EAAM,OAAS,EAAI;EAAO,IAC7B,CAAA,EAtCK,CAsCL,CACb,CACC,CAAA,CACL,CAAA,CACJ,GAEb"}

package/dist/components/CodeBlock/CodeBlock.js

@@ -6,7 +6,7 @@ import { Fragment as a, useMemo as o } from "react";
 import { jsx as s, jsxs as c } from "react/jsx-runtime";
 //#region src/components/CodeBlock/CodeBlock.tsx
 function l({ code: l, language: u, filename: d, showLineNumbers: f = !1, highlightLines: p, copyable: m = !0, maxHeight: h, wrap: g = !1, label: _, className: v, ...y }) {
-	let b = o(() => l.replace(/^\n+/, "").replace(/\s+$/, ""), [l]), x = o(() => r(b, u), [b, u]), S = n(u), C = o(() => new Set(p ?? []), [p]), w = _ ?? (d && typeof d == "string" ? `Código: ${d}` : `Bloco de código${S === "plain" ? "" : ` em ${S}`}`), T = !!d || m;
+	let b = o(() => l.replace(/^\n+/, "").trimEnd(), [l]), x = o(() => r(b, u), [b, u]), S = n(u), C = o(() => new Set(p ?? []), [p]), w = _ ?? (d && typeof d == "string" ? `Código: ${d}` : `Bloco de código${S === "plain" ? "" : ` em ${S}`}`), T = !!d || m;
 	return /* @__PURE__ */ c("div", {
 		className: e(i.wrapper, v),
 		...y,

package/dist/components/CodeBlock/CodeBlock.js.map

@@ -1 +1 @@
-{"version":3,"file":"CodeBlock.js","names":[],"sources":["../../../src/components/CodeBlock/CodeBlock.tsx"],"sourcesContent":["/**\n * @tempest-limits props-count — code and language drive the scanner; filename,\n * showLineNumbers, highlightLines, maxHeight and wrap are the presentation a docs\n * page picks per block, and copyable plus label are the affordance and its\n * accessible name. All independent, all used in the SDK's own docs gallery.\n */\nimport { Fragment, useMemo } from \"react\";\nimport type { HTMLAttributes, ReactNode } from \"react\";\n\nimport { cn } from \"@/utils/cn\";\n\nimport { CopyButton } from \"../CopyButton\";\nimport { resolveLanguage, tokenizeLines } from \"./tokenize\";\nimport styles from \"./CodeBlock.module.css\";\n\nexport interface CodeBlockProps extends Omit<HTMLAttributes<HTMLDivElement>, \"children\"> {\n    /** The source to display. Leading and trailing blank lines are trimmed. */\n    code: string;\n    /** Grammar name or alias (`ts`, `bash`, `json`…). Unknown values render plain. */\n    language?: string;\n    /** Shown in the header, usually a file path. */\n    filename?: ReactNode;\n    /** Number the lines. Default `false`. */\n    showLineNumbers?: boolean;\n    /** 1-based line numbers to mark as the point of the snippet. */\n    highlightLines?: readonly number[];\n    /** Offer a copy button. Default `true`. */\n    copyable?: boolean;\n    /** Cap the height in px or any CSS length; the body scrolls past it. */\n    maxHeight?: number | string;\n    /** Wrap long lines instead of scrolling sideways. Default `false`. */\n    wrap?: boolean;\n    /**\n     * Accessible name for the code region. Defaults to naming the language, and\n     * to the filename when there is one.\n     */\n    label?: string;\n}\n\n/**\n * A read-only code sample: syntax colours, optional line numbers, copy button.\n *\n * The `<pre>` is always focusable. A code block is scrollable and holds nothing\n * focusable inside, so without a tab stop a keyboard user can see there is more\n * code past the edge and has no way to reach it. It is the one scroll container\n * where the stop is unconditional rather than measured — a code sample is\n * expected to be reachable, read and selected on its own.\n *\n * Colours come from an approximate scanner, not a parser — see {@link tokenize}.\n *\n * @example\n * <CodeBlock code={snippet} language=\"ts\" filename=\"src/main.ts\" showLineNumbers />\n * <CodeBlock code={log} language=\"bash\" maxHeight={280} />\n */\nexport function CodeBlock({\n    code,\n    language,\n    filename,\n    showLineNumbers = false,\n    highlightLines,\n    copyable = true,\n    maxHeight,\n    wrap = false,\n    label,\n    className,\n    ...rest\n}: CodeBlockProps) {\n    const trimmed = useMemo(() => code.replace(/^\\n+/, \"\").replace(/\\s+$/, \"\"), [code]);\n    const lines = useMemo(() => tokenizeLines(trimmed, language), [trimmed, language]);\n    const resolved = resolveLanguage(language);\n    const marked = useMemo(() => new Set(highlightLines ?? []), [highlightLines]);\n\n    const name =\n        label ??\n        (filename && typeof filename === \"string\"\n            ? `Código: ${filename}`\n            : `Bloco de código${resolved === \"plain\" ? \"\" : ` em ${resolved}`}`);\n\n    const hasHeader = Boolean(filename) || copyable;\n\n    return (\n        <div className={cn(styles.wrapper, className)} {...rest}>\n            {hasHeader && (\n                <div className={styles.header}>\n                    <span className={styles.filename}>\n                        {filename ?? (resolved === \"plain\" ? \"\" : resolved)}\n                    </span>\n                    {copyable && <CopyButton value={trimmed} className={styles.copy} />}\n                </div>\n            )}\n\n            <pre\n                className={cn(styles.pre, wrap && styles.wrap)}\n                style={{ maxHeight }}\n                tabIndex={0}\n                role=\"group\"\n                aria-label={name}\n            >\n                <code className={styles.code} data-language={resolved}>\n                    {lines.map((tokens, index) => (\n                        <Fragment key={index}>\n                            <span\n                                className={cn(styles.line, marked.has(index + 1) && styles.marked)}\n                            >\n                                {showLineNumbers && (\n                                    /*\n                                     * The number is decoration: it must not land in the\n                                     * clipboard when the reader selects the snippet, and a\n                                     * screen reader announcing \"one const two import\" adds\n                                     * nothing. `user-select: none` in CSS plus this.\n                                     */\n                                    <span className={styles.lineNumber} aria-hidden=\"true\">\n                                        {index + 1}\n                                    </span>\n                                )}\n                                <span className={styles.lineContent}>\n                                    {tokens.map((token, tokenIndex) => (\n                                        <span\n                                            key={tokenIndex}\n                                            className={styles[token.kind]}\n                                            data-token={token.kind}\n                                        >\n                                            {token.value}\n                                        </span>\n                                    ))}\n                                </span>\n                            </span>\n                            {/*\n                             * A real newline character, and outside the line box.\n                             * It has to be real so that selecting the snippet by\n                             * hand and copying yields the source instead of one\n                             * run-together line. It has to be outside because the\n                             * line is an inline-block: a newline within one is\n                             * consumed inside that box, and every line ends up\n                             * side by side on a single row. The last one is\n                             * dropped so the block does not end in blank space.\n                             */}\n                            {index < lines.length - 1 ? \"\\n\" : null}\n                        </Fragment>\n                    ))}\n                </code>\n            </pre>\n        </div>\n    );\n}\n"],"mappings":";;;;;;;AAsDA,SAAgB,EAAU,EACtB,SACA,aACA,aACA,qBAAkB,IAClB,mBACA,cAAW,IACX,cACA,UAAO,IACP,UACA,cACA,GAAG,KACY;CACf,IAAM,IAAU,QAAc,EAAK,QAAQ,QAAQ,EAAE,CAAC,CAAC,QAAQ,QAAQ,EAAE,GAAG,CAAC,CAAI,CAAC,GAC5E,IAAQ,QAAc,EAAc,GAAS,CAAQ,GAAG,CAAC,GAAS,CAAQ,CAAC,GAC3E,IAAW,EAAgB,CAAQ,GACnC,IAAS,QAAc,IAAI,IAAI,KAAkB,CAAC,CAAC,GAAG,CAAC,CAAc,CAAC,GAEtE,IACF,MACC,KAAY,OAAO,KAAa,WAC3B,WAAW,MACX,kBAAkB,MAAa,UAAU,KAAK,OAAO,QAEzD,IAAY,EAAQ,KAAa;CAEvC,OACI,kBAAC,OAAD;EAAK,WAAW,EAAG,EAAO,SAAS,CAAS;EAAG,GAAI;EAAnD,UAAA,CACK,KACG,kBAAC,OAAD;GAAK,WAAW,EAAO;GAAvB,UAAA,CACI,kBAAC,QAAD;IAAM,WAAW,EAAO;IACnB,UAAA,MAAa,MAAa,UAAU,KAAK;GACxC,CAAA,GACL,KAAY,kBAAC,GAAD;IAAY,OAAO;IAAS,WAAW,EAAO;GAAO,CAAA,CACjE;EAGT,CAAA,GAAA,kBAAC,OAAD;GACI,WAAW,EAAG,EAAO,KAAK,KAAQ,EAAO,IAAI;GAC7C,OAAO,EAAE,aAAU;GACnB,UAAU;GACV,MAAK;GACL,cAAY;GAEZ,UAAA,kBAAC,QAAD;IAAM,WAAW,EAAO;IAAM,iBAAe;IACxC,UAAA,EAAM,KAAK,GAAQ,MAChB,kBAAC,GAAD,EAAA,UAAA,CACI,kBAAC,QAAD;KACI,WAAW,EAAG,EAAO,MAAM,EAAO,IAAI,IAAQ,CAAC,KAAK,EAAO,MAAM;KADrE,UAAA,CAGK,KAOG,kBAAC,QAAD;MAAM,WAAW,EAAO;MAAY,eAAY;MAC3C,UAAA,IAAQ;KACP,CAAA,GAEV,kBAAC,QAAD;MAAM,WAAW,EAAO;MACnB,UAAA,EAAO,KAAK,GAAO,MAChB,kBAAC,QAAD;OAEI,WAAW,EAAO,EAAM;OACxB,cAAY,EAAM;OAEjB,UAAA,EAAM;MACL,GALG,CAKH,CACT;KACC,CAAA,CACJ;IAWL,CAAA,GAAA,IAAQ,EAAM,SAAS,IAAI,OAAO,IAC7B,EAAA,GAtCK,CAsCL,CACb;GACC,CAAA;EACL,CAAA,CACJ;;AAEb"}
+{"version":3,"file":"CodeBlock.js","names":[],"sources":["../../../src/components/CodeBlock/CodeBlock.tsx"],"sourcesContent":["/**\n * @tempest-limits props-count — code and language drive the scanner; filename,\n * showLineNumbers, highlightLines, maxHeight and wrap are the presentation a docs\n * page picks per block, and copyable plus label are the affordance and its\n * accessible name. All independent, all used in the SDK's own docs gallery.\n */\nimport { Fragment, useMemo } from \"react\";\nimport type { HTMLAttributes, ReactNode } from \"react\";\n\nimport { cn } from \"@/utils/cn\";\n\nimport { CopyButton } from \"../CopyButton\";\nimport { resolveLanguage, tokenizeLines } from \"./tokenize\";\nimport styles from \"./CodeBlock.module.css\";\n\nexport interface CodeBlockProps extends Omit<HTMLAttributes<HTMLDivElement>, \"children\"> {\n    /** The source to display. Leading and trailing blank lines are trimmed. */\n    code: string;\n    /** Grammar name or alias (`ts`, `bash`, `json`…). Unknown values render plain. */\n    language?: string;\n    /** Shown in the header, usually a file path. */\n    filename?: ReactNode;\n    /** Number the lines. Default `false`. */\n    showLineNumbers?: boolean;\n    /** 1-based line numbers to mark as the point of the snippet. */\n    highlightLines?: readonly number[];\n    /** Offer a copy button. Default `true`. */\n    copyable?: boolean;\n    /** Cap the height in px or any CSS length; the body scrolls past it. */\n    maxHeight?: number | string;\n    /** Wrap long lines instead of scrolling sideways. Default `false`. */\n    wrap?: boolean;\n    /**\n     * Accessible name for the code region. Defaults to naming the language, and\n     * to the filename when there is one.\n     */\n    label?: string;\n}\n\n/**\n * A read-only code sample: syntax colours, optional line numbers, copy button.\n *\n * The `<pre>` is always focusable. A code block is scrollable and holds nothing\n * focusable inside, so without a tab stop a keyboard user can see there is more\n * code past the edge and has no way to reach it. It is the one scroll container\n * where the stop is unconditional rather than measured — a code sample is\n * expected to be reachable, read and selected on its own.\n *\n * Colours come from an approximate scanner, not a parser — see {@link tokenize}.\n *\n * @example\n * <CodeBlock code={snippet} language=\"ts\" filename=\"src/main.ts\" showLineNumbers />\n * <CodeBlock code={log} language=\"bash\" maxHeight={280} />\n */\nexport function CodeBlock({\n    code,\n    language,\n    filename,\n    showLineNumbers = false,\n    highlightLines,\n    copyable = true,\n    maxHeight,\n    wrap = false,\n    label,\n    className,\n    ...rest\n}: CodeBlockProps) {\n    const trimmed = useMemo(() => code.replace(/^\\n+/, \"\").trimEnd(), [code]);\n    const lines = useMemo(() => tokenizeLines(trimmed, language), [trimmed, language]);\n    const resolved = resolveLanguage(language);\n    const marked = useMemo(() => new Set(highlightLines ?? []), [highlightLines]);\n\n    const name =\n        label ??\n        (filename && typeof filename === \"string\"\n            ? `Código: ${filename}`\n            : `Bloco de código${resolved === \"plain\" ? \"\" : ` em ${resolved}`}`);\n\n    const hasHeader = Boolean(filename) || copyable;\n\n    return (\n        <div className={cn(styles.wrapper, className)} {...rest}>\n            {hasHeader && (\n                <div className={styles.header}>\n                    <span className={styles.filename}>\n                        {filename ?? (resolved === \"plain\" ? \"\" : resolved)}\n                    </span>\n                    {copyable && <CopyButton value={trimmed} className={styles.copy} />}\n                </div>\n            )}\n\n            <pre\n                className={cn(styles.pre, wrap && styles.wrap)}\n                style={{ maxHeight }}\n                tabIndex={0}\n                role=\"group\"\n                aria-label={name}\n            >\n                <code className={styles.code} data-language={resolved}>\n                    {lines.map((tokens, index) => (\n                        <Fragment key={index}>\n                            <span\n                                className={cn(styles.line, marked.has(index + 1) && styles.marked)}\n                            >\n                                {showLineNumbers && (\n                                    /*\n                                     * The number is decoration: it must not land in the\n                                     * clipboard when the reader selects the snippet, and a\n                                     * screen reader announcing \"one const two import\" adds\n                                     * nothing. `user-select: none` in CSS plus this.\n                                     */\n                                    <span className={styles.lineNumber} aria-hidden=\"true\">\n                                        {index + 1}\n                                    </span>\n                                )}\n                                <span className={styles.lineContent}>\n                                    {tokens.map((token, tokenIndex) => (\n                                        <span\n                                            key={tokenIndex}\n                                            className={styles[token.kind]}\n                                            data-token={token.kind}\n                                        >\n                                            {token.value}\n                                        </span>\n                                    ))}\n                                </span>\n                            </span>\n                            {/*\n                             * A real newline character, and outside the line box.\n                             * It has to be real so that selecting the snippet by\n                             * hand and copying yields the source instead of one\n                             * run-together line. It has to be outside because the\n                             * line is an inline-block: a newline within one is\n                             * consumed inside that box, and every line ends up\n                             * side by side on a single row. The last one is\n                             * dropped so the block does not end in blank space.\n                             */}\n                            {index < lines.length - 1 ? \"\\n\" : null}\n                        </Fragment>\n                    ))}\n                </code>\n            </pre>\n        </div>\n    );\n}\n"],"mappings":";;;;;;;AAsDA,SAAgB,EAAU,EACtB,SACA,aACA,aACA,qBAAkB,IAClB,mBACA,cAAW,IACX,cACA,UAAO,IACP,UACA,cACA,GAAG,KACY;CACf,IAAM,IAAU,QAAc,EAAK,QAAQ,QAAQ,EAAE,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAI,CAAC,GAClE,IAAQ,QAAc,EAAc,GAAS,CAAQ,GAAG,CAAC,GAAS,CAAQ,CAAC,GAC3E,IAAW,EAAgB,CAAQ,GACnC,IAAS,QAAc,IAAI,IAAI,KAAkB,CAAC,CAAC,GAAG,CAAC,CAAc,CAAC,GAEtE,IACF,MACC,KAAY,OAAO,KAAa,WAC3B,WAAW,MACX,kBAAkB,MAAa,UAAU,KAAK,OAAO,QAEzD,IAAY,EAAQ,KAAa;CAEvC,OACI,kBAAC,OAAD;EAAK,WAAW,EAAG,EAAO,SAAS,CAAS;EAAG,GAAI;EAAnD,UAAA,CACK,KACG,kBAAC,OAAD;GAAK,WAAW,EAAO;GAAvB,UAAA,CACI,kBAAC,QAAD;IAAM,WAAW,EAAO;IACnB,UAAA,MAAa,MAAa,UAAU,KAAK;GACxC,CAAA,GACL,KAAY,kBAAC,GAAD;IAAY,OAAO;IAAS,WAAW,EAAO;GAAO,CAAA,CACjE;EAGT,CAAA,GAAA,kBAAC,OAAD;GACI,WAAW,EAAG,EAAO,KAAK,KAAQ,EAAO,IAAI;GAC7C,OAAO,EAAE,aAAU;GACnB,UAAU;GACV,MAAK;GACL,cAAY;GAEZ,UAAA,kBAAC,QAAD;IAAM,WAAW,EAAO;IAAM,iBAAe;IACxC,UAAA,EAAM,KAAK,GAAQ,MAChB,kBAAC,GAAD,EAAA,UAAA,CACI,kBAAC,QAAD;KACI,WAAW,EAAG,EAAO,MAAM,EAAO,IAAI,IAAQ,CAAC,KAAK,EAAO,MAAM;KADrE,UAAA,CAGK,KAOG,kBAAC,QAAD;MAAM,WAAW,EAAO;MAAY,eAAY;MAC3C,UAAA,IAAQ;KACP,CAAA,GAEV,kBAAC,QAAD;MAAM,WAAW,EAAO;MACnB,UAAA,EAAO,KAAK,GAAO,MAChB,kBAAC,QAAD;OAEI,WAAW,EAAO,EAAM;OACxB,cAAY,EAAM;OAEjB,UAAA,EAAM;MACL,GALG,CAKH,CACT;KACC,CAAA,CACJ;IAWL,CAAA,GAAA,IAAQ,EAAM,SAAS,IAAI,OAAO,IAC7B,EAAA,GAtCK,CAsCL,CACb;GACC,CAAA;EACL,CAAA,CACJ;;AAEb"}