@agent-cards/sdk 0.23.12 → 0.23.14

package/dist/card-fields.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: c8e0308b7790c3577c56ec0428577a42c308ccdbeff3eb041c6103d9e9b338a8
+// artifact-sha256: 0fd8db3c00fa0c1aea085fd184efe4b3ebc67c57673b69d2daec5a912991e181
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -101,8 +101,8 @@ function parseConvergeBody(body) {
     return parsed;
 }
 function convergeAmountCents(value) {
-    const text = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
-    const m = typeof text === "string" ? AMOUNT.exec(text) : null;
+    const text2 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
+    const m = typeof text2 === "string" ? AMOUNT.exec(text2) : null;
     if (!m)
         return null;
     const cents = Number(m[1]) * 100 + Number(((m[2] ?? "") + "00").slice(0, 2));
@@ -406,13 +406,853 @@ var pin2 = (fields) => Object.freeze({
 var PADDLE_VGS_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
     pin2({ id: "rectangle_pro", merchant: "Rectangle Pro", origins: ["https://rectangleapp.com"], sellerClaim: null })
 ]);
+var FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
+var METADATA_KEYS = /* @__PURE__ */ Object.freeze(["cardholder_name", ...FACT_KEYS]);
+// src/payfast.js
+var PAYFAST_PSP = "payfast";
+var PAYFAST_PAY_HOSTS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze(["payment.payfast.io", "www.payfast.co.za"]),
+    sandbox: Object.freeze(["sandbox.payfast.co.za"])
+});
+var PAYFAST_BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "card_number",
+    "cardholder_name",
+    "consent_check",
+    "cvv",
+    "expiry_month",
+    "expiry_year",
+    "g-recaptcha-response",
+    "captcha_version",
+    "captcha_action"
+]);
+var BODY_LIMIT3 = 8192;
+var URL_LIMIT = 256;
+var PAY_PATH = /^\/eng\/method\/CreditCard\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/pay$/;
+var VISA = /^4[0-9]{15}$/;
+var MASTERCARD = /^(?:5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12})$/;
+var AMEX = /^3[47][0-9]{13}$/;
+var SECURITY_CODE3 = /^[0-9]{3,4}$/;
+var MONTH = /^(?:0?[1-9]|1[0-2])$/;
+var YEAR = /^[0-9]{2}$/;
+var HOLDER = /^(?!(?:[^0-9]*[0-9]){3})[a-zA-Z0-9 -]+\.?[a-zA-Z0-9 -]+$/;
+var HOLDER_LIMIT = 256;
+var CAPTCHA_VERSIONS = /* @__PURE__ */ Object.freeze(["v0", "v1", "v2"]);
+var SOLVED_CAPTCHA2 = /^[A-Za-z0-9_-]{1,4096}$/;
+var refuse5 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD5 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var formEncode = (value) => encodeURIComponent(value).replace(/%20/g, "+");
+function payfastEnvironment(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !PAY_PATH.test(parsed.pathname))
+        return null;
+    if (PAYFAST_PAY_HOSTS.production.includes(parsed.hostname))
+        return "production";
+    if (PAYFAST_PAY_HOSTS.sandbox.includes(parsed.hostname))
+        return "sandbox";
+    return null;
+}
+function isPayfastPayUrl(url) {
+    return payfastEnvironment(url) !== null;
+}
+function readForm(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT3)
+        return null;
+    try {
+        const pairs = body.split("&").map((chunk) => {
+            const eq = chunk.indexOf("=");
+            if (eq <= 0)
+                throw new URIError("not a form pair");
+            return [decodeURIComponent(chunk.slice(0, eq).replace(/\+/g, " ")), decodeURIComponent(chunk.slice(eq + 1).replace(/\+/g, " "))];
+        });
+        return pairs.map(([key, value]) => `${formEncode(key)}=${formEncode(value)}`).join("&") === body ? pairs : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cardNetwork(number) {
+    if (typeof number !== "string")
+        return null;
+    if (VISA.test(number))
+        return "visa";
+    if (MASTERCARD.test(number))
+        return "mastercard";
+    return AMEX.test(number) ? "amex" : null;
+}
+function judgeBody(body) {
+    const pairs = readForm(body);
+    if (pairs === null)
+        return { code: "payfast_body_unsupported", pairs: null };
+    if (pairs.some(([key]) => key === "cc_key"))
+        return { code: "payfast_saved_card", pairs: null };
+    if (pairs.length !== PAYFAST_BODY_KEYS.length || !pairs.every(([key], at) => key === PAYFAST_BODY_KEYS[at])) {
+        return { code: "payfast_body_unsupported", pairs: null };
+    }
+    const value = Object.fromEntries(pairs);
+    const answer = value["g-recaptcha-response"];
+    if (cardNetwork(value.card_number) === null || !SECURITY_CODE3.test(value.cvv) || !MONTH.test(value.expiry_month) || !YEAR.test(value.expiry_year) || value.cardholder_name.length > HOLDER_LIMIT || !HOLDER.test(value.cardholder_name) || !(answer === "" || SOLVED_CAPTCHA2.test(answer)) || !CAPTCHA_VERSIONS.includes(value.captcha_version) || value.captcha_action !== "checkout") {
+        return { code: "payfast_body_unsupported", pairs: null };
+    }
+    if (value.consent_check === "1")
+        return { code: "payfast_keep_on_file", pairs: null };
+    return value.consent_check === "" ? { code: null, pairs } : { code: "payfast_body_unsupported", pairs: null };
+}
+function payfastBodyVerdict(body) {
+    const { code } = judgeBody(body);
+    return code === null ? CARD5 : refuse5(code);
+}
+// src/sha256.js
+var K = /* @__PURE__ */ new Uint32Array([
+    1116352408,
+    1899447441,
+    3049323471,
+    3921009573,
+    961987163,
+    1508970993,
+    2453635748,
+    2870763221,
+    3624381080,
+    310598401,
+    607225278,
+    1426881987,
+    1925078388,
+    2162078206,
+    2614888103,
+    3248222580,
+    3835390401,
+    4022224774,
+    264347078,
+    604807628,
+    770255983,
+    1249150122,
+    1555081692,
+    1996064986,
+    2554220882,
+    2821834349,
+    2952996808,
+    3210313671,
+    3336571891,
+    3584528711,
+    113926993,
+    338241895,
+    666307205,
+    773529912,
+    1294757372,
+    1396182291,
+    1695183700,
+    1986661051,
+    2177026350,
+    2456956037,
+    2730485921,
+    2820302411,
+    3259730800,
+    3345764771,
+    3516065817,
+    3600352804,
+    4094571909,
+    275423344,
+    430227734,
+    506948616,
+    659060556,
+    883997877,
+    958139571,
+    1322822218,
+    1537002063,
+    1747873779,
+    1955562222,
+    2024104815,
+    2227730452,
+    2361852424,
+    2428436474,
+    2756734187,
+    3204031479,
+    3329325298
+]);
+var rotr = (x, n) => x >>> n | x << 32 - n;
+function utf8(text2) {
+    const out = [];
+    for (const char of text2) {
+        let cp = char.codePointAt(0);
+        if (cp >= 55296 && cp <= 57343)
+            cp = 65533;
+        if (cp < 128)
+            out.push(cp);
+        else if (cp < 2048)
+            out.push(192 | cp >> 6, 128 | cp & 63);
+        else if (cp < 65536)
+            out.push(224 | cp >> 12, 128 | cp >> 6 & 63, 128 | cp & 63);
+        else
+            out.push(240 | cp >> 18, 128 | cp >> 12 & 63, 128 | cp >> 6 & 63, 128 | cp & 63);
+    }
+    return Uint8Array.from(out);
+}
+function sha256Hex(input) {
+    const isBytes = Object.prototype.toString.call(input) === "[object Uint8Array]";
+    if (typeof input !== "string" && !isBytes)
+        throw new TypeError("sha256Hex takes a string or a Uint8Array.");
+    const bytes = typeof input === "string" ? utf8(input) : input;
+    const length = bytes.length;
+    const padded = new Uint8Array((length + 8 >> 6) + 1 << 6);
+    padded.set(bytes);
+    padded[length] = 128;
+    const view = new DataView(padded.buffer);
+    view.setUint32(padded.length - 8, Math.floor(length / 536870912));
+    view.setUint32(padded.length - 4, length << 3 >>> 0);
+    const H = new Uint32Array([1779033703, 3144134277, 1013904242, 2773480762, 1359893119, 2600822924, 528734635, 1541459225]);
+    const W = new Uint32Array(64);
+    for (let offset = 0; offset < padded.length; offset += 64) {
+        for (let t = 0; t < 16; t++)
+            W[t] = view.getUint32(offset + t * 4);
+        for (let t = 16; t < 64; t++) {
+            const s0 = rotr(W[t - 15], 7) ^ rotr(W[t - 15], 18) ^ W[t - 15] >>> 3;
+            const s1 = rotr(W[t - 2], 17) ^ rotr(W[t - 2], 19) ^ W[t - 2] >>> 10;
+            W[t] = W[t - 16] + s0 + W[t - 7] + s1 >>> 0;
+        }
+        let a = H[0], b = H[1], c = H[2], d = H[3], e = H[4], f = H[5], g = H[6], h = H[7];
+        for (let t = 0; t < 64; t++) {
+            const t1 = h + (rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25)) + (e & f ^ ~e & g) + K[t] + W[t] >>> 0;
+            const t2 = (rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22)) + (a & b ^ a & c ^ b & c) >>> 0;
+            h = g;
+            g = f;
+            f = e;
+            e = d + t1 >>> 0;
+            d = c;
+            c = b;
+            b = a;
+            a = t1 + t2 >>> 0;
+        }
+        H[0] += a;
+        H[1] += b;
+        H[2] += c;
+        H[3] += d;
+        H[4] += e;
+        H[5] += f;
+        H[6] += g;
+        H[7] += h;
+    }
+    return Array.from(H, (word) => word.toString(16).padStart(8, "0")).join("");
+}
+// src/rsa-pkcs1v15.js
+var RsaPkcs1v15Error = class extends Error {
+    constructor(reason) {
+        super("RSA PKCS#1 v1.5 encryption refused.");
+        this.name = "RsaPkcs1v15Error";
+        this.code = "rsa_pkcs1v15_refused";
+        this.reason = reason;
+    }
+};
+var refuse6 = (reason) => new RsaPkcs1v15Error(reason);
+var BASE64 = /^[A-Za-z0-9+/]+={0,2}$/;
+var SHA256_HEX = /^[0-9a-f]{64}$/;
+var RSA_ALGORITHM = [48, 13, 6, 9, 42, 134, 72, 134, 247, 13, 1, 1, 1, 5, 0];
+var MODULUS_BYTES = [128, 256, 384, 512];
+var TYPED_ARRAY = Object.getPrototypeOf(Uint8Array.prototype);
+var typedArrayName = Object.getOwnPropertyDescriptor(TYPED_ARRAY, Symbol.toStringTag).get;
+function parseRsaPublicKey(key) {
+    const spki = key && typeof key === "object" ? key.spki : void 0;
+    const pin3 = key && typeof key === "object" ? key.sha256 : void 0;
+    if (typeof spki !== "string" || spki.length > 1024 || spki.length % 4 !== 0 || !BASE64.test(spki))
+        throw refuse6("key");
+    if (typeof pin3 !== "string" || !SHA256_HEX.test(pin3))
+        throw refuse6("key");
+    let binary;
+    try {
+        binary = atob(spki);
+    }
+    catch {
+        throw refuse6("key");
+    }
+    if (btoa(binary) !== spki)
+        throw refuse6("key");
+    const der = Uint8Array.from(binary, (c) => c.charCodeAt(0));
+    if (sha256Hex(der) !== pin3)
+        throw refuse6("key");
+    const outer = readElement(der, 0, 48);
+    if (outer.end !== der.length || outer.start + RSA_ALGORITHM.length > der.length)
+        throw refuse6("key");
+    if (!RSA_ALGORITHM.every((byte, i) => der[outer.start + i] === byte))
+        throw refuse6("key");
+    const bits = readElement(der, outer.start + RSA_ALGORITHM.length, 3);
+    if (bits.end !== outer.end || bits.start === bits.end || der[bits.start] !== 0)
+        throw refuse6("key");
+    const rsa = readElement(der, bits.start + 1, 48);
+    if (rsa.end !== bits.end)
+        throw refuse6("key");
+    const modulus = readPositiveInteger(der, rsa.start);
+    const exponent = readPositiveInteger(der, modulus.end);
+    if (exponent.end !== rsa.end)
+        throw refuse6("key");
+    const n = modulus.bytes;
+    if (!MODULUS_BYTES.includes(n.length) || !(n[0] & 128) || !(n[n.length - 1] & 1))
+        throw refuse6("key");
+    const e = exponent.bytes;
+    if (e.length !== 3 || e[0] !== 1 || e[1] !== 0 || e[2] !== 1)
+        throw refuse6("key");
+    return Object.freeze({ n: toBigInt(n), e: 65537n, size: n.length });
+}
+function readElement(der, at, tag) {
+    if (at + 2 > der.length || der[at] !== tag)
+        throw refuse6("key");
+    let length = der[at + 1];
+    let start = at + 2;
+    if (length & 128) {
+        const count = length & 127;
+        if (count === 0 || count > 2 || start + count > der.length || der[start] === 0)
+            throw refuse6("key");
+        length = count === 1 ? der[start] : der[start] * 256 + der[start + 1];
+        if (length < 128)
+            throw refuse6("key");
+        start += count;
+    }
+    if (start + length > der.length)
+        throw refuse6("key");
+    return { start, end: start + length };
+}
+function readPositiveInteger(der, at) {
+    const { start, end } = readElement(der, at, 2);
+    if (end === start || der[start] & 128)
+        throw refuse6("key");
+    if (der[start] === 0 && (end - start === 1 || !(der[start + 1] & 128)))
+        throw refuse6("key");
+    return { bytes: der.subarray(der[start] === 0 ? start + 1 : start, end), end };
+}
+function toBigInt(bytes) {
+    let hex = "";
+    for (let i = 0; i < bytes.length; i++)
+        hex += (bytes[i] < 16 ? "0" : "") + bytes[i].toString(16);
+    return BigInt(`0x${hex}`);
+}
+// src/paddle-keys.js
+var PADDLE_TOKENEX_KEYS = /* @__PURE__ */ Object.freeze({
+    sandbox: Object.freeze({
+        spki: "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWpIQFjQQCPpaIlJKpegirp5kLkzLB1AxHmnLk73D3TJbAGqr1QmlsWDBtMPMRpdzzUM7ZwX3kzhIuATV4Pe7RKp3nZlVmcrT0YCQXBrTwqZNh775z58GP2kZs+gVfNqBampJPzSB/hB62KkByhECn6grrRjiAVwJyZVEvs/2vrxaEpO+aE16emtX12RgI5JdzdOiNyZEQteU6zRBRJEocPWVxExaOpVVVJ5+UnW0LcalzA+lRGRTrQJ5JguAPiAOzRPTK/lYFFpCAl/F8wtoAVG1c8zO2NcQ0Pko+fmeidRFxJ/did2btV+9Mkze3mBphwFmvnxa35LF+Cs/XJHDwIDAQAB",
+        sha256: "877d29a008ed9998d6035032870c63dcc4cbf37ca22cb50b0cc9fe2250a9e3dc"
+    }),
+    production: Object.freeze({
+        spki: "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8gGPMwBRPuVyJReZGIkWH/+Bf5pnpDN1bSR2cLYLXVT8CaSnTw74qeboSnktgYCi1D9R3Bj2fYzTIwGGZb8KinLdxwbqZmHwrE9cFhCaHbG/E0PbqQGhXP2vbniZTT4M0i0Cbi7ES3Bw5zqNbIZZnX041QEpxLvIyWPKZCX+fBogNMhWfCF779aclChjHkwZMsufThVWE9xklWGxXiytx5aL4I5JPxq0I7cAkZGGs4aF/GxWwPaq7R3wPikJQ0YHnCMfcURzl2Hnw/inqyMy+JB6djTq2/BdzMAhWTh3cDWq9Xu+gEkb/QCd0n1yYIdKuDISlk/AfHdWe34IvzhVyQIDAQAB",
+        sha256: "92529bd289bb24d52a1bdcc42edc9ac0bb1dacbb58f7568573d44771e1287762"
+    })
+});
+function paddleTokenexKey(environment) {
+    if (environment !== "sandbox" && environment !== "production")
+        return null;
+    return PADDLE_TOKENEX_KEYS[environment] ?? null;
+}
+function paddleTokenexKeyBytes(environment) {
+    const key = paddleTokenexKey(environment);
+    if (!key)
+        return null;
+    try {
+        return parseRsaPublicKey(key).size;
+    }
+    catch {
+        return null;
+    }
+}
+// src/paddle-tokenex.js
+var PADDLE_TOKENEX_PSP = "paddle_tokenex";
+var PADDLE_TOKENEX_FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
+var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys2 = (value, keys) => {
+    const own = Object.keys(value);
+    return own.length === keys.length && own.every((key, at) => key === keys[at]);
+};
+var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE2 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+var PAY_URL = /^https:\/\/(sandbox-)?checkout-service\.paddle\.com\/(checkout|transaction-checkout)\/[A-Za-z0-9_-]{1,64}\/pay$/;
+function paddleTokenexPayTarget(url) {
+    const match = typeof url === "string" ? PAY_URL.exec(url) : null;
+    return match ? Object.freeze({ environment: match[1] ? "sandbox" : "production", line: match[2] === "checkout" ? "classic" : "billing" }) : null;
+}
+function paddleTokenexPayCarriesCard(body) {
+    if (typeof body !== "string")
+        return true;
+    try {
+        return JSON.stringify(JSON.parse(body)).includes('"tokenex_card"');
+    }
+    catch {
+        return true;
+    }
+}
+var FRAME_BRANDS = /* @__PURE__ */ Object.freeze(["visa", "master", "american_express", "discover", "diners_club", "jcb", "maestro", "dankort", "unionpay", "unknown"]);
+var NAME_LIMIT2 = 256;
+var CONTROL2 = /[\u0000-\u001f\u007f]/;
+var FIRST_SIX = /^[0-9]{6}$/;
+var LAST_FOUR = /^[0-9]{4}$/;
+var BASE642 = /^[A-Za-z0-9+/]+={0,2}$/;
+var cardLikeName2 = (name) => (name.match(/[0-9]/g) ?? []).length >= 12;
+var expiryMonth = (month) => Number.isInteger(month) && month >= 1 && month <= 12;
+var expiryYear = (year) => Number.isInteger(year) && year >= 2e3 && year <= 2099;
+var PAY_BODY_LIMIT = 16384;
+var PAY_DATA_KEYS = /* @__PURE__ */ Object.freeze(["payment_method_type", "payment_method_data"]);
+var PAY_CARD_KEYS = /* @__PURE__ */ Object.freeze(["metadata", "three_d_s", "tokenex_card"]);
+var METADATA_KEYS2 = /* @__PURE__ */ Object.freeze(["cardholder_name", ...PADDLE_TOKENEX_FACT_KEYS]);
+var CARD_KEYS3 = /* @__PURE__ */ Object.freeze(["encrypted_card_number", "encrypted_cvv"]);
+var BROWSER_INFO = /^[A-Za-z0-9+/]{1,4096}={0,2}$/;
+var RADAR_TOKEN = /^[\x21-\x7e]{1,512}$/;
+var COUNTRY_CODE = /^[A-Za-z]{2}$/;
+var FRONTEND_HOST = /^https:\/\/[\x21-\x7e]{1,1024}$/;
+var radarKeys = (value) => sameKeys2(value, ["token", "country_code"]) || sameKeys2(value, ["country_code", "token"]);
+function isBase64OfBytes(value, bytes) {
+    if (typeof value !== "string" || value.length !== Math.ceil(bytes / 3) * 4 || !BASE642.test(value))
+        return false;
+    const pad = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+    return value.length / 4 * 3 - pad === bytes && btoa(atob(value)) === value;
+}
+function isPaddleTokenexCiphertext(value, environment) {
+    const bytes = paddleTokenexKeyBytes(environment);
+    return bytes !== null && isBase64OfBytes(value, bytes);
+}
+function readPay(body, line, environment) {
+    if (typeof body !== "string" || body === "" || body.length > PAY_BODY_LIMIT)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record4(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    const data = value.data;
+    if (!sameKeys2(value, ["data"]) || !record4(data) || !(sameKeys2(data, PAY_DATA_KEYS) || sameKeys2(data, [...PAY_DATA_KEYS, "checkout"])) || data.payment_method_type !== (line === "classic" ? "CARD" : "card"))
+        return null;
+    if (data.checkout !== void 0 && !(record4(data.checkout) && sameKeys2(data.checkout, ["frontend_host"]) && typeof data.checkout.frontend_host === "string" && FRONTEND_HOST.test(data.checkout.frontend_host)))
+        return null;
+    const method = data.payment_method_data;
+    const card = record4(method) && sameKeys2(method, ["card"]) ? method.card : null;
+    if (!record4(card) || !(sameKeys2(card, PAY_CARD_KEYS) || sameKeys2(card, [...PAY_CARD_KEYS, "session_tracking"])))
+        return null;
+    const metadata = card.metadata;
+    if (!record4(metadata) || !sameKeys2(metadata, METADATA_KEYS2) || typeof metadata.cardholder_name !== "string" || metadata.cardholder_name.length > NAME_LIMIT2 || CONTROL2.test(metadata.cardholder_name) || cardLikeName2(metadata.cardholder_name) || typeof metadata.card_first_six !== "string" || !FIRST_SIX.test(metadata.card_first_six) || typeof metadata.card_last_four !== "string" || !LAST_FOUR.test(metadata.card_last_four) || !expiryMonth(metadata.expiry_month) || !expiryYear(metadata.expiry_year) || !FRAME_BRANDS.includes(metadata.card_brand))
+        return null;
+    const details = card.three_d_s;
+    if (!record4(details) || !sameKeys2(details, ["browser_info"]) || typeof details.browser_info !== "string" || !BROWSER_INFO.test(details.browser_info))
+        return null;
+    const tokenex = card.tokenex_card;
+    if (!record4(tokenex) || !sameKeys2(tokenex, CARD_KEYS3))
+        return null;
+    for (const name of CARD_KEYS3) {
+        const blob = tokenex[name];
+        if (environment === void 0) {
+            if (typeof blob !== "string" || !BASE642.test(blob) || blob.length < 4 || blob.length > 4096)
+                return null;
+        }
+        else if (!isPaddleTokenexCiphertext(blob, environment))
+            return null;
+    }
+    if (tokenex.encrypted_card_number === tokenex.encrypted_cvv)
+        return null;
+    if (card.session_tracking !== void 0) {
+        const tracking = card.session_tracking;
+        const radar = record4(tracking) && sameKeys2(tracking, ["stripe_radar"]) ? tracking.stripe_radar : null;
+        if (!record4(radar) || !radarKeys(radar) || typeof radar.token !== "string" || !RADAR_TOKEN.test(radar.token) || typeof radar.country_code !== "string" || !COUNTRY_CODE.test(radar.country_code))
+            return null;
+    }
+    return value;
+}
+function paddleTokenexBodyVerdict(body, line) {
+    if (!paddleTokenexPayCarriesCard(body))
+        return CONTINUE2;
+    for (const candidate of line === "classic" || line === "billing" ? [line] : ["classic", "billing"]) {
+        if (readPay(body, candidate) !== null)
+            return CARD6;
+    }
+    return refuse7("paddle_tokenex_pay_unsupported");
+}
+var CARD_PATH = /* @__PURE__ */ Object.freeze(["data", "payment_method_data", "card"]);
+var TOKENEX_PATH = /* @__PURE__ */ Object.freeze([...CARD_PATH, "tokenex_card"]);
+// src/lyra.js
+var LYRA_PSP = "lyra";
+var LYRA_PROCESS_PATH = "/api-payment/V4/Charge/Public/ProcessPayment/2";
+var LYRA_HOSTS = /* @__PURE__ */ Object.freeze({
+    "api.payzen.eu": Object.freeze({ staticOrigin: "https://static.payzen.eu", prefixes: Object.freeze(["01", "02"]) }),
+    "api.systempay.fr": Object.freeze({ staticOrigin: "https://static.systempay.fr", prefixes: Object.freeze(["24", "25"]) }),
+    "api-sogecommerce.societegenerale.eu": Object.freeze({ staticOrigin: "https://static-sogecommerce.societegenerale.eu", prefixes: Object.freeze(["06", "07"]) }),
+    "api.lyra.com": Object.freeze({ staticOrigin: "https://static.lyra.com", prefixes: Object.freeze(["10", "11"]) })
+});
+var BODY_LIMIT4 = 32768;
+var TOKEN = /^([0-9a-z]{2})[0-9A-Za-z]([A-Za-z0-9_-]{64,16384})$/;
+var SESSION = /^[A-Za-z0-9._-]{1,128}$/;
+var PUBLIC_KEY = /^([0-9]{4,12}):(testpublickey|publickey)_[A-Za-z0-9]{1,128}$/;
+var REMOTE_ID = /^[0-9a-f]{32}$/;
+var CARD_NUMBER5 = /^[0-9]{12,19}$/;
+var SECURITY_CODE4 = /^[0-9]{3,4}$/;
+var MONTH2 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR2 = /^20[0-9]{2}$/;
+var BRAND = /^[A-Z][A-Z0-9_-]{1,31}$/;
+var CONTROL3 = /[\u0000-\u001f\u007f]/;
+var PAN_LIKE2 = /(?:[0-9][ _.:-]*){12,}/;
+var CARD_KEYS4 = /* @__PURE__ */ Object.freeze([
+    "formToken",
+    "clientVersion",
+    "kryptonCallbackUrl",
+    "language",
+    "paymentForm",
+    "postUrl",
+    "publicKey",
+    "remoteId",
+    "wsUser",
+    "refererUrl",
+    "challengePreference",
+    "device",
+    "partialPaymentsAllowed",
+    "paymentMethodCloseButton",
+    "skipPaymentTicket"
+]);
+var CARD_REQUIRED = /* @__PURE__ */ Object.freeze(["formToken", "paymentForm", "publicKey", "remoteId"]);
+var PAYMENT_FORM_KEYS = /* @__PURE__ */ Object.freeze(["pan", "securityCode", "cardHolderName", "expiryMonth", "expiryYear", "brand"]);
+var FOLLOW_UP_KEYS = /* @__PURE__ */ Object.freeze([
+    "formToken",
+    "publicKey",
+    "instructionResult",
+    "remoteId",
+    "clientVersion",
+    "device",
+    "wsUser",
+    "partialPaymentsAllowed",
+    "paymentMethodCloseButton",
+    "skipPaymentTicket"
+]);
+var FOLLOW_UP_REQUIRED = /* @__PURE__ */ Object.freeze(["formToken", "publicKey", "instructionResult", "remoteId"]);
+var INSTRUCTION_RESULT_KEYS = /* @__PURE__ */ Object.freeze(["name", "value", "protocol"]);
+var DEVICE_KEYS = /* @__PURE__ */ Object.freeze([
+    "deviceType",
+    "acceptHeader",
+    "userAgent",
+    "javaEnabled",
+    "language",
+    "colorDepth",
+    "screenHeight",
+    "screenWidth",
+    "timeZoneOffset"
+]);
+var TEXT_MEMBERS = /* @__PURE__ */ Object.freeze({
+    clientVersion: 64,
+    language: 16,
+    postUrl: 2048,
+    wsUser: 32,
+    refererUrl: 2048,
+    challengePreference: 64,
+    paymentMethodCloseButton: 32
+});
+var BOOLEAN_MEMBERS = /* @__PURE__ */ Object.freeze(["partialPaymentsAllowed", "skipPaymentTicket"]);
+var CALLBACK_PATH = "/static/js/krypton-client/V4.0/done/done.html";
+var record5 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns4 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var keysWithin = (value, allowed) => record5(value) && Object.keys(value).every((key) => allowed.includes(key));
+var text = (value, max) => typeof value === "string" && value.length <= max && !CONTROL3.test(value);
+var refuse8 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD7 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE3 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function lyraProcessPaymentUrl(url) {
+    if (typeof url !== "string" || url.length > 512 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !owns4(LYRA_HOSTS, parsed.hostname))
+        return null;
+    const path = parsed.pathname;
+    if (path === LYRA_PROCESS_PATH)
+        return Object.freeze({ host: parsed.hostname, session: null });
+    const marker = `${LYRA_PROCESS_PATH};jsessionid=`;
+    if (!path.startsWith(marker))
+        return null;
+    const session = path.slice(marker.length);
+    return SESSION.test(session) ? Object.freeze({ host: parsed.hostname, session }) : null;
+}
+function base64UrlBytes(input) {
+    const alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+    const bytes = [];
+    let bits = 0;
+    let value = 0;
+    for (const character of input) {
+        const sextet = alphabet.indexOf(character);
+        if (sextet < 0)
+            return null;
+        value = value << 6 | sextet;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            bytes.push(value >> bits & 255);
+            value &= (1 << bits) - 1;
+        }
+    }
+    return bytes;
+}
+function jsonObjectText(bytes, start) {
+    let depth = 0;
+    let inString = false;
+    let escaped = false;
+    for (let at = start; at < bytes.length; at += 1) {
+        const byte = bytes[at];
+        if (inString) {
+            if (escaped)
+                escaped = false;
+            else if (byte === 92)
+                escaped = true;
+            else if (byte === 34)
+                inString = false;
+            continue;
+        }
+        if (byte === 34)
+            inString = true;
+        else if (byte === 123)
+            depth += 1;
+        else if (byte === 125) {
+            depth -= 1;
+            if (depth === 0) {
+                try {
+                    return decodeURIComponent(bytes.slice(start, at + 1).map((b) => "%" + b.toString(16).padStart(2, "0")).join(""));
+                }
+                catch {
+                    return null;
+                }
+            }
+        }
+    }
+    return null;
+}
+function lyraFormTokenFacts(token) {
+    const match = typeof token === "string" ? TOKEN.exec(token) : null;
+    const bytes = match ? base64UrlBytes(match[2]) : null;
+    if (!bytes || bytes.length < 20 || bytes[18] !== 123)
+        return null;
+    const json = jsonObjectText(bytes, 18);
+    let dna;
+    try {
+        dna = json === null ? null : JSON.parse(json);
+    }
+    catch {
+        return null;
+    }
+    if (!record5(dna) || !Number.isSafeInteger(dna.amount) || dna.amount < 0 || typeof dna.currency !== "string" || !/^[A-Z]{3}$/.test(dna.currency) || dna.mode !== "TEST" && dna.mode !== "PRODUCTION" || typeof dna.formAction !== "string" || !/^[A-Z_]{1,32}$/.test(dna.formAction) || owns4(dna, "jSessionId") && (typeof dna.jSessionId !== "string" || !SESSION.test(dna.jSessionId)))
+        return null;
+    return Object.freeze({
+        prefix: match[1],
+        amount: dna.amount,
+        currency: dna.currency,
+        mode: dna.mode,
+        formAction: dna.formAction,
+        session: owns4(dna, "jSessionId") ? dna.jSessionId : null
+    });
+}
+function readJson(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT4)
+        return null;
+    let at = 0;
+    let nodes = 0;
+    const fail = () => {
+        throw new Error("invalid_lyra_json");
+    };
+    const space = () => {
+        while (" 	\r\n".includes(body[at] ?? "\0"))
+            at += 1;
+    };
+    const string = () => {
+        space();
+        const start = at;
+        if (body[at++] !== '"')
+            fail();
+        while (at < body.length) {
+            const character = body[at++];
+            if (character === "\\") {
+                at += 1;
+                continue;
+            }
+            if (character === '"')
+                return JSON.parse(body.slice(start, at));
+        }
+        return fail();
+    };
+    const value = (depth) => {
+        if (depth > 6 || ++nodes > 256)
+            fail();
+        space();
+        const character = body[at];
+        if (character === '"')
+            return string();
+        if (character === "{") {
+            at += 1;
+            const result = /* @__PURE__ */ Object.create(null);
+            const seen = /* @__PURE__ */ new Set();
+            space();
+            if (body[at] === "}") {
+                at += 1;
+                return result;
+            }
+            for (;;) {
+                const key = string();
+                if (seen.has(key) || ["__proto__", "prototype", "constructor"].includes(key))
+                    fail();
+                seen.add(key);
+                space();
+                if (body[at++] !== ":")
+                    fail();
+                result[key] = value(depth + 1);
+                space();
+                const next = body[at++];
+                if (next === "}")
+                    return result;
+                if (next !== ",")
+                    fail();
+            }
+        }
+        if (character === "[") {
+            at += 1;
+            const result = [];
+            space();
+            if (body[at] === "]") {
+                at += 1;
+                return result;
+            }
+            for (;;) {
+                result.push(value(depth + 1));
+                space();
+                const next = body[at++];
+                if (next === "]")
+                    return result;
+                if (next !== ",")
+                    fail();
+            }
+        }
+        for (const literal of ["true", "false", "null"]) {
+            if (body.startsWith(literal, at)) {
+                at += literal.length;
+                return JSON.parse(literal);
+            }
+        }
+        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(body.slice(at, at + 32));
+        if (!number)
+            fail();
+        at += number[0].length;
+        const parsed = Number(number[0]);
+        if (!Number.isFinite(parsed))
+            fail();
+        return parsed;
+    };
+    try {
+        const parsed = value(0);
+        space();
+        return at === body.length && record5(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function namesCard(root) {
+    const pending = [root];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        for (const key of Object.keys(node)) {
+            if (!Array.isArray(node) && /^(?:pan|cardnumber|card_number|number|securitycode|cvv|cvc|paymentform|paymentmethodtoken)$/i.test(key))
+                return true;
+            const child = node[key];
+            if (child !== null && typeof child === "object")
+                pending.push(child);
+        }
+    }
+    return false;
+}
+function sharedMembersReadable(value) {
+    for (const [key, max] of Object.entries(TEXT_MEMBERS))
+        if (owns4(value, key) && value[key] !== null && !text(value[key], max))
+            return false;
+    for (const key of BOOLEAN_MEMBERS)
+        if (owns4(value, key) && value[key] !== null && typeof value[key] !== "boolean")
+            return false;
+    if (owns4(value, "device")) {
+        const device = value.device;
+        if (!keysWithin(device, DEVICE_KEYS))
+            return false;
+        for (const member of Object.values(device)) {
+            if (!(member === null || text(member, 512) || typeof member === "boolean" || Number.isSafeInteger(member) && member >= 0 && member <= 1e5))
+                return false;
+        }
+    }
+    return true;
+}
+function followUpReadable(value) {
+    const result = value.instructionResult;
+    return keysWithin(value, FOLLOW_UP_KEYS) && FOLLOW_UP_REQUIRED.every((key) => owns4(value, key)) && text(value.formToken, 16384) && value.formToken !== "" && text(value.publicKey, 160) && value.publicKey !== "" && typeof value.remoteId === "string" && REMOTE_ID.test(value.remoteId) && sharedMembersReadable(value) && keysWithin(result, INSTRUCTION_RESULT_KEYS) && typeof result.name === "string" && /^[A-Z_]{1,32}$/.test(result.name) && (!owns4(result, "value") || result.value === null || text(result.value, 16384)) && (!owns4(result, "protocol") || result.protocol === null || record5(result.protocol)) && !namesCard(value);
+}
+function bindingHolds(facts, publicKey, target) {
+    const key = PUBLIC_KEY.exec(publicKey);
+    if (!key || facts.mode === "TEST" !== (key[2] === "testpublickey"))
+        return false;
+    if (target === void 0)
+        return true;
+    return LYRA_HOSTS[target.host].prefixes.includes(facts.prefix) && facts.session === target.session;
+}
+function lyraBodyVerdict(body, url) {
+    let target;
+    if (url !== void 0) {
+        target = lyraProcessPaymentUrl(url);
+        if (target === null)
+            return refuse8("lyra_url_refused");
+    }
+    const value = readJson(body);
+    if (value === null)
+        return refuse8("lyra_body_unsupported");
+    if (!owns4(value, "paymentForm"))
+        return followUpReadable(value) ? CONTINUE3 : refuse8("lyra_body_unsupported");
+    const form = value.paymentForm;
+    if (!keysWithin(value, CARD_KEYS4) || !CARD_REQUIRED.every((key) => owns4(value, key)) || !sharedMembersReadable(value) || !keysWithin(form, PAYMENT_FORM_KEYS) || typeof form.pan !== "string" || !CARD_NUMBER5.test(form.pan) || typeof form.expiryMonth !== "string" || !MONTH2.test(form.expiryMonth) || typeof form.expiryYear !== "string" || !YEAR2.test(form.expiryYear) || owns4(form, "securityCode") && (typeof form.securityCode !== "string" || !SECURITY_CODE4.test(form.securityCode)) || owns4(form, "cardHolderName") && (!text(form.cardHolderName, 256) || PAN_LIKE2.test(form.cardHolderName)) || owns4(form, "brand") && (typeof form.brand !== "string" || !BRAND.test(form.brand)) || typeof value.remoteId !== "string" || !REMOTE_ID.test(value.remoteId) || typeof value.publicKey !== "string" || owns4(value, "kryptonCallbackUrl") && !Object.values(LYRA_HOSTS).some((entry) => value.kryptonCallbackUrl === `${entry.staticOrigin}${CALLBACK_PATH}`)) {
+        return refuse8("lyra_body_unsupported");
+    }
+    const facts = lyraFormTokenFacts(value.formToken);
+    if (facts === null)
+        return refuse8("lyra_body_unsupported");
+    if (facts.formAction !== "PAYMENT")
+        return refuse8("lyra_keeps_card");
+    if (!bindingHolds(facts, value.publicKey, target))
+        return refuse8("lyra_session_mismatch");
+    return CARD7;
+}
+var LYRA_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    Object.freeze({
+        id: "le_mas_lyon",
+        merchant: "Association Le MAS",
+        origins: Object.freeze(["https://www.mas-asso.fr"]),
+        shopIds: Object.freeze(["95120524"]),
+        hosts: Object.freeze(["api.systempay.fr"])
+    })
+]);
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
+    if (recognizer && recognizer.psp === LYRA_PSP)
+        return lyraBodyVerdict(body, url);
     if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
         if (url !== void 0 && !isPaddleVgsCardsUrl(url))
             return { verdict: "refuse", code: "paddle_vgs_url_refused" };
         return paddleVgsBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === PAYFAST_PSP) {
+        if (url !== void 0 && !isPayfastPayUrl(url))
+            return { verdict: "refuse", code: "payfast_url_refused" };
+        return payfastBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
+        const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
+        if (url !== void 0 && target === null)
+            return { verdict: "refuse", code: "paddle_tokenex_pay_unsupported" };
+        return paddleTokenexBodyVerdict(body, target ? target.line : void 0);
+    }
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {