@agent-cards/sdk 0.23.13 → 0.23.14

package/dist/ebanx.generated.js

@@ -0,0 +1,577 @@
+// @ts-nocheck
+// Generated from @agent-cards/payment-core. Do not edit.
+// artifact-sha256: fa93cde1a237f603279ae56e0c7d9539896784842d9077fb777b8a23bacc9a3d
+// src/ebanx.js
+var EBANX_RESEND_HOSTS = Object.freeze([
+    "customer.ebanx.com",
+    "customer-frontier.ebanx.com",
+    "customer-local-latam.ebanx.com",
+    "api-local-latam.ebanx.com",
+    "api.ebanx.com",
+    "sandbox.ebanx.com",
+    "sandbox-local-latam.ebanx.com",
+    "api-diamond.ebanxpay.com",
+    "api.ebanxpay.com",
+    "sandbox.ebanxpay.com"
+]);
+var EBANX_THREE_DS_CARD_PATHS = Object.freeze([
+    "/ws/threedsecureserver-generateToken",
+    "/ws/threedsecureserver-authentications",
+    "/ws/threedsecureserver-authentication-results"
+]);
+var EBANX_CONFIRM_PATH = "/ws/checkout-v2/confirm";
+var EBANX_RESEND_REFUSALS = Object.freeze(["three_ds_card", "confirm_card_code", "unreadable"]);
+var THREE_DS = EBANX_THREE_DS_CARD_PATHS.map((path) => path.toLowerCase());
+var CONFIRM = EBANX_CONFIRM_PATH.toLowerCase();
+var CONFIRM_CARD_KEYS = Object.freeze(["card_cvv", "card_number"]);
+var record = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var own = (value, key) => record(value) && Object.prototype.hasOwnProperty.call(value, key) ? value[key] : void 0;
+function ebanxResendKind(url) {
+    let parsed;
+    try {
+        parsed = new URL(String(url));
+    }
+    catch {
+        return null;
+    }
+    if (parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    if (!EBANX_RESEND_HOSTS.includes(parsed.hostname.toLowerCase().replace(/\.$/, "")))
+        return null;
+    const path = resendPath(parsed.pathname);
+    if (path === null)
+        return "unreadable";
+    if (THREE_DS.includes(path))
+        return "three_ds";
+    return path === CONFIRM ? "confirm" : null;
+}
+var RESEND_PATH_ROUNDS = 4;
+var ASCII_ESCAPE = /%[0-7][0-9A-Fa-f]/;
+function resendPath(pathname) {
+    let path = String(pathname);
+    for (let round = 0; round < RESEND_PATH_ROUNDS && ASCII_ESCAPE.test(path); round++) {
+        path = path.replace(/%([0-7][0-9A-Fa-f])/g, (escape, hex) => String.fromCharCode(parseInt(hex, 16)));
+    }
+    if (ASCII_ESCAPE.test(path))
+        return null;
+    const segments = [];
+    for (const piece of path.split(/[/\\]/)) {
+        const segment = piece.split(";")[0];
+        if (segment === "" || segment === ".")
+            continue;
+        if (segment === "..")
+            segments.pop();
+        else
+            segments.push(segment);
+    }
+    return ("/" + segments.join("/")).toLowerCase();
+}
+function ebanxResendRefusal(request) {
+    if (!record(request) || String(request.method ?? "").toUpperCase() !== "POST")
+        return null;
+    const kind = ebanxResendKind(request.url);
+    if (kind === "unreadable")
+        return "unreadable";
+    if (kind === "three_ds")
+        return "three_ds_card";
+    if (kind !== "confirm")
+        return null;
+    const body = request.body;
+    if (typeof body !== "string" || body === "")
+        return "unreadable";
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return "unreadable";
+    }
+    if (!record(parsed))
+        return "unreadable";
+    const card = own(own(parsed, "payment"), "card");
+    if (!record(card))
+        return null;
+    return CONFIRM_CARD_KEYS.some((key) => {
+        const value = own(card, key);
+        return value !== void 0 && value !== null && value !== "";
+    }) ? "confirm_card_code" : null;
+}
+var EBANX_FOLLOW_UP_KINDS = Object.freeze(["generate_token", "authentications", "authentication_results", "confirm"]);
+var EBANX_FOLLOW_UP_LIMITS = Object.freeze({ generate_token: 1, authentications: 1, authentication_results: 48, confirm: 1 });
+var EBANX_FOLLOW_UP_MAX = 51;
+var EBANX_FOLLOW_UP_WINDOW_MS = 15 * 60 * 1e3;
+var EBANX_FOLLOW_UP_IDLE_MS = 60 * 1e3;
+var EBANX_FOLLOW_UP_CHALLENGE_MS = 11 * 60 * 1e3;
+var EBANX_FOLLOW_UP_BODY_LIMIT = 32 * 1024;
+var EBANX_FOLLOW_UP_ANSWER_LIMIT = 64 * 1024;
+var EBANX_FOLLOW_UP_REFUSALS = Object.freeze([
+    "not_a_follow_up",
+    "parent_unreadable",
+    "host_mismatch",
+    "follow_up_closed",
+    "follow_up_in_flight",
+    "follow_up_limit",
+    "out_of_order",
+    "unreadable",
+    "shape",
+    "card_mismatch",
+    "key_mismatch",
+    "amount_unapproved",
+    "amount_mismatch",
+    "token_mismatch",
+    "session_mismatch",
+    "card_on_file",
+    "instalments",
+    "unreviewed_field"
+]);
+var FOLLOW_UP_PATHS = Object.freeze({
+    "/ws/threedsecureserver-generateToken": "generate_token",
+    "/ws/threedsecureserver-authentications": "authentications",
+    "/ws/threedsecureserver-authentication-results": "authentication_results",
+    [EBANX_CONFIRM_PATH]: "confirm"
+});
+var TOKEN_HOSTS = Object.freeze([
+    "customer.ebanx.com",
+    "customer-frontier.ebanx.com",
+    "api-local-latam.ebanx.com",
+    "api.ebanx.com",
+    "sandbox.ebanx.com",
+    "sandbox-local-latam.ebanx.com",
+    "api-diamond.ebanxpay.com",
+    "api.ebanxpay.com",
+    "sandbox.ebanxpay.com"
+]);
+var CONFIRM_HOSTS = Object.freeze({
+    "customer.ebanx.com": "customer.ebanx.com",
+    "api-local-latam.ebanx.com": "customer-local-latam.ebanx.com",
+    "api-diamond.ebanxpay.com": "api-diamond.ebanxpay.com",
+    "customer-frontier.ebanx.com": "customer-frontier.ebanx.com"
+});
+var INVOICE_HASH = /^[0-9a-f]{48}$/i;
+var THREE_DS_KINDS = Object.freeze(["generate_token", "authentications", "authentication_results"]);
+var CONFIRM_PAYMENT_FIELDS = Object.freeze([
+    "hash",
+    "merchant_payment_code",
+    "payment_type",
+    "payment_type_code",
+    "card",
+    "instalments",
+    "save_card_oneclick",
+    "name",
+    "email",
+    "castle_request_token",
+    "captcha_token",
+    "device_id",
+    "app_metadata",
+    "metadata",
+    "country",
+    "document",
+    "document_type",
+    "person_type",
+    "responsible",
+    "zipcode",
+    "state",
+    "city",
+    "address",
+    "street_number",
+    "street_complement",
+    "phone_number"
+]);
+var CONFIRM_CARD_FIELDS = Object.freeze([
+    "token",
+    "payment_type_code",
+    "card_unique_id",
+    "card_cvv",
+    "threeds_eci",
+    "threeds_cryptogram",
+    "threeds_xid",
+    "threeds_version",
+    "threeds_trxid",
+    "threeds_token"
+]);
+var DIGITS = /^\d{12,19}$/;
+var DECIMAL = /^(\d{1,15})(?:\.(\d{1,3}))?$/;
+var ZERO_DECIMAL = Object.freeze(["bif", "clp", "djf", "gnf", "jpy", "kmf", "krw", "mga", "pyg", "rwf", "vnd", "vuv", "xaf", "xof", "xpf"]);
+var THREE_DECIMAL = Object.freeze(["bhd", "jod", "kwd", "omr", "tnd"]);
+var minorDigits = (currency) => ZERO_DECIMAL.includes(currency) ? 0 : THREE_DECIMAL.includes(currency) ? 3 : 2;
+var text = (value) => typeof value === "string" && value.length > 0 && value.length <= 1024;
+function parseObject(body, limit = EBANX_FOLLOW_UP_BODY_LIMIT) {
+    if (typeof body !== "string" || body.length === 0 || body.length > limit)
+        return null;
+    try {
+        const parsed = JSON.parse(body);
+        return record(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function followUpUrl(url) {
+    if (typeof url !== "string" || url.length > 2048)
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.hash || url.includes("#"))
+        return null;
+    if (!EBANX_RESEND_HOSTS.includes(parsed.hostname) || parsed.href !== url)
+        return null;
+    const kind = Object.prototype.hasOwnProperty.call(FOLLOW_UP_PATHS, parsed.pathname) ? FOLLOW_UP_PATHS[parsed.pathname] : null;
+    if (!kind)
+        return null;
+    if (kind !== "confirm")
+        return parsed.search === "" ? { kind, host: parsed.hostname, hash: null } : null;
+    const query = /^\?hash=([0-9A-Fa-f]{48})$/.exec(parsed.search);
+    return query ? { kind, host: parsed.hostname, hash: query[1] } : null;
+}
+function ebanxFollowUpKind(url) {
+    return followUpUrl(url)?.kind ?? null;
+}
+function readEbanxTokenRequest(template) {
+    if (!record(template) || typeof template.url !== "string")
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(template.url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.pathname !== "/ws/token" || !TOKEN_HOSTS.includes(parsed.hostname))
+        return null;
+    const body = parseObject(template.body);
+    const card = own(body, "card");
+    const number = own(card, "card_number");
+    const due = /^(\d{1,2})\/(\d{4})$/.exec(String(own(card, "card_due_date") ?? ""));
+    const key = own(body, "public_integration_key");
+    const country = own(body, "country");
+    if (!record(card) || typeof number !== "string" || !DIGITS.test(number) || !due || Number(due[1]) < 1 || Number(due[1]) > 12 || !text(key) || !text(country))
+        return null;
+    const cvv = own(card, "card_cvv");
+    const name = own(card, "card_name");
+    return Object.freeze({
+        host: parsed.hostname,
+        number,
+        month: Number(due[1]),
+        year: Number(due[2]),
+        cvv: typeof cvv === "string" || typeof cvv === "number" ? String(cvv) : null,
+        name: typeof name === "string" ? name : null,
+        publicIntegrationKey: key,
+        country: country.toLowerCase()
+    });
+}
+function readEbanxTokenAnswer(answer) {
+    const body = record(answer) ? parseObject(answer.text, EBANX_FOLLOW_UP_ANSWER_LIMIT) : null;
+    if (!body || own(body, "status") !== "SUCCESS" || record(answer) && answer.status !== void 0 && !(answer.status >= 200 && answer.status < 300))
+        return null;
+    const named = own(body, "token");
+    const token = record(named) ? own(named, "token") : named;
+    if (!text(token))
+        return null;
+    const brand = own(body, "payment_type_code");
+    const unique = own(body, "card_unique_id");
+    return Object.freeze({ token, paymentTypeCode: text(brand) ? brand : null, cardUniqueId: text(unique) ? unique : null });
+}
+var EBANX_PAYING_STATUSES = Object.freeze(["CO", "PE"]);
+var EBANX_ERROR_CODE = /^[A-Z]{2,4}(?:-[A-Z0-9]{1,6}){1,3}$/;
+var ebanxErrorCode = (code) => typeof code === "string" && EBANX_ERROR_CODE.test(code) && !/\d{5}/.test(code) && (code.match(/\d/g) ?? []).length < 12 ? code : null;
+function ebanxAnswerRefusal(status, answerText) {
+    if (!Number.isInteger(status))
+        return null;
+    if (status >= 400 && status < 500)
+        return ebanxErrorCode(own(parseObject(answerText, EBANX_FOLLOW_UP_ANSWER_LIMIT), "status_code")) ?? `ebanx_http_${status}`;
+    if (!(status >= 200 && status < 300))
+        return null;
+    const body = parseObject(answerText, EBANX_FOLLOW_UP_ANSWER_LIMIT);
+    if (!body)
+        return null;
+    if (own(body, "status") === "ERROR")
+        return ebanxErrorCode(own(body, "status_code")) ?? "ebanx_error";
+    const paymentStatus = own(own(body, "payment"), "status");
+    if (typeof paymentStatus === "string" && !EBANX_PAYING_STATUSES.includes(paymentStatus)) {
+        return /^[A-Z]{2}$/.test(paymentStatus) ? "ebanx_payment_" + paymentStatus.toLowerCase() : "ebanx_payment_refused";
+    }
+    return null;
+}
+var EBANX_THREE_DS_FAILED = "AUTHENTICATION_FAILED";
+var EBANX_THREE_DS_FAILED_CODE = "ebanx_3ds_failed";
+function ebanxAnswerOutcome(status, answerText, url) {
+    const kind = ebanxFollowUpKind(url);
+    if (!kind)
+        return null;
+    if (kind !== "confirm") {
+        return ebanxAnswerSession(answerText).status === EBANX_THREE_DS_FAILED ? { outcome: "refused", code: EBANX_THREE_DS_FAILED_CODE } : { outcome: "approved" };
+    }
+    if (!Number.isInteger(status) || status >= 500)
+        return { outcome: "unknown", reason: "server_error" };
+    const body = parseObject(answerText, EBANX_FOLLOW_UP_ANSWER_LIMIT);
+    const unconfirmed = { outcome: "unknown", reason: "ebanx_confirm_unconfirmed" };
+    const answered = own(body, "status");
+    if (answered === "ERROR")
+        return { outcome: "refused", code: ebanxErrorCode(own(body, "status_code")) ?? "ebanx_error" };
+    if (!(status >= 200 && status < 300) || answered !== "SUCCESS")
+        return unconfirmed;
+    const paymentStatus = own(own(body, "payment"), "status");
+    if (typeof paymentStatus !== "string" || paymentStatus === "")
+        return unconfirmed;
+    if (EBANX_PAYING_STATUSES.includes(paymentStatus))
+        return { outcome: "approved" };
+    return { outcome: "refused", code: /^[A-Z]{2}$/.test(paymentStatus) ? "ebanx_payment_" + paymentStatus.toLowerCase() : "ebanx_payment_refused" };
+}
+function answerItem(answerText) {
+    const body = parseObject(answerText, EBANX_FOLLOW_UP_ANSWER_LIMIT);
+    const data = own(body, "data");
+    return Array.isArray(data) && record(data[0]) ? data[0] : null;
+}
+function ebanxAnswerSession(answerText) {
+    const item = answerItem(answerText);
+    const read = (key) => {
+        const value = own(item, key);
+        return text(value) ? value : null;
+    };
+    const status = read("status");
+    return Object.freeze({ paymentId: read("paymentId"), accessToken: read("accessToken"), status: status ? status.toUpperCase() : null });
+}
+function ebanxFollowUpIdleMs(kind, answerText) {
+    if (kind === "confirm")
+        return 0;
+    if (kind === "authentications" && ebanxAnswerSession(answerText).status === "PENDING_AUTHENTICATION")
+        return EBANX_FOLLOW_UP_CHALLENGE_MS;
+    return EBANX_FOLLOW_UP_IDLE_MS;
+}
+function namedAmount(amount, currency) {
+    const figure = typeof amount === "number" && Number.isFinite(amount) && amount >= 0 ? String(amount) : amount;
+    if (typeof figure !== "string" || typeof currency !== "string" || !/^[A-Za-z]{3}$/.test(currency))
+        return null;
+    const match = DECIMAL.exec(figure);
+    if (!match)
+        return null;
+    const code = currency.toLowerCase();
+    const digits = minorDigits(code);
+    const fraction = match[2] ?? "";
+    if (fraction.length > digits && Number(fraction.slice(digits)) !== 0)
+        return null;
+    const minor = Number(match[1]) * 10 ** digits + Number((fraction + "000").slice(0, digits) || "0");
+    return Number.isSafeInteger(minor) ? { minor, currency: code } : null;
+}
+function approvedAmount(approved) {
+    if (!record(approved) || typeof approved.currency !== "string" || !/^[A-Za-z]{3}$/.test(approved.currency))
+        return null;
+    const minor = typeof approved.amountCents === "bigint" ? Number(approved.amountCents) : approved.amountCents;
+    return Number.isSafeInteger(minor) && minor > 0 ? { minor, currency: approved.currency.toLowerCase() } : null;
+}
+function sentFacts(sent) {
+    if (!Array.isArray(sent))
+        return null;
+    const out = [];
+    for (const item of sent) {
+        if (!record(item) || !EBANX_FOLLOW_UP_KINDS.includes(item.kind) || !["pending", "answered", "failed"].includes(item.state))
+            return null;
+        const answer = item.state === "answered" && record(item.answer) ? item.answer : null;
+        out.push({
+            kind: item.kind,
+            state: item.state,
+            body: parseObject(item.body),
+            answerText: answer && typeof answer.text === "string" ? answer.text : null,
+            answerStatus: answer && Number.isInteger(answer.status) ? answer.status : null
+        });
+    }
+    return out;
+}
+function threeDsSucceeded(item) {
+    return THREE_DS_KINDS.includes(item.kind) && item.state === "answered" && item.answerText !== null && own(answerItem(item.answerText), "status") === "AUTHENTICATION_SUCCESSFUL";
+}
+var refused = (refusal) => Object.freeze({ ok: false, refusal });
+function threeDsCardRefusal(body, parent) {
+    const info = own(body, "paymentInformation");
+    const card = own(info, "card");
+    const number = own(card, "number");
+    const month = own(card, "expirationMonth");
+    const year = own(card, "expirationYear");
+    if (!record(card) || typeof number !== "string" || typeof month !== "string" || typeof year !== "string")
+        return "shape";
+    if (!/^\d{1,2}$/.test(month) || !/^(?:\d{2}|\d{4})$/.test(year))
+        return "shape";
+    if (number !== parent.number)
+        return "card_mismatch";
+    const fullYear = year.length === 2 ? 2e3 + Number(year) : Number(year);
+    if (Number(month) !== parent.month || fullYear !== parent.year)
+        return "card_mismatch";
+    const holder = own(card, "holderName");
+    if (holder !== void 0 && holder !== null && typeof holder !== "string")
+        return "shape";
+    return null;
+}
+function ebanxFollowUpVerdict(input, options = {}) {
+    if (!record(input) || !record(input.request))
+        return refused("not_a_follow_up");
+    const { request } = input;
+    if (String(request.method ?? "").toUpperCase() !== "POST")
+        return refused("not_a_follow_up");
+    const target = followUpUrl(request.url);
+    if (!target)
+        return refused("not_a_follow_up");
+    const parentInput = record(input.parent) ? input.parent : null;
+    const parent = parentInput ? readEbanxTokenRequest(parentInput) : null;
+    const token = parentInput ? readEbanxTokenAnswer(parentInput.answer) : null;
+    if (!parent || !token)
+        return refused("parent_unreadable");
+    const { kind } = target;
+    if (kind === "confirm" ? CONFIRM_HOSTS[parent.host] !== target.host : target.host !== parent.host)
+        return refused("host_mismatch");
+    const sent = sentFacts(input.sent ?? []);
+    if (!sent)
+        return refused("parent_unreadable");
+    if (sent.some((item) => item.kind === "confirm"))
+        return refused("follow_up_closed");
+    if (sent.some((item) => item.state === "pending"))
+        return refused("follow_up_in_flight");
+    const ofKind = sent.filter((item) => item.kind === kind).length;
+    if (ofKind >= EBANX_FOLLOW_UP_LIMITS[kind] || sent.length >= EBANX_FOLLOW_UP_MAX)
+        return refused("follow_up_limit");
+    const generate = sent.find((item) => item.kind === "generate_token") ?? null;
+    const authentications = sent.find((item) => item.kind === "authentications") ?? null;
+    if (kind === "generate_token" && sent.length > 0)
+        return refused("out_of_order");
+    if (kind === "authentications" && generate?.state !== "answered")
+        return refused("out_of_order");
+    if (kind === "authentication_results" && authentications?.state !== "answered")
+        return refused("out_of_order");
+    if (kind === "confirm" && (generate?.state !== "answered" || authentications?.state !== "answered"))
+        return refused("out_of_order");
+    const body = parseObject(request.body);
+    if (!body)
+        return refused("unreadable");
+    const openedHash = generate?.body ? own(own(generate.body, "paymentInformation"), "paymentHash") : void 0;
+    if (kind === "confirm") {
+        const payment = own(body, "payment");
+        const card = own(payment, "card");
+        if (!record(payment) || !record(card))
+            return refused("shape");
+        for (const key2 of ["card_number", "card_due_date", "card_name"]) {
+            if (own(card, key2) !== void 0)
+                return refused("card_mismatch");
+        }
+        if (Object.keys(body).some((key2) => key2 !== "payment") || Object.keys(payment).some((key2) => !CONFIRM_PAYMENT_FIELDS.includes(key2)) || Object.keys(card).some((key2) => !CONFIRM_CARD_FIELDS.includes(key2)))
+            return refused("unreviewed_field");
+        const kept = own(payment, "save_card_oneclick");
+        if (kept !== void 0 && kept !== false)
+            return refused("card_on_file");
+        const instalments = own(payment, "instalments");
+        if (instalments !== void 0 && instalments !== "1" && instalments !== 1)
+            return refused("instalments");
+        if (own(payment, "payment_type") !== "creditcard")
+            return refused("unreviewed_field");
+        const country2 = own(payment, "country");
+        if (country2 !== void 0 && (typeof country2 !== "string" || country2.toLowerCase() !== parent.country))
+            return refused("key_mismatch");
+        const code = own(card, "card_cvv");
+        if (typeof code !== "string")
+            return refused("shape");
+        if (parent.cvv === null || code !== parent.cvv)
+            return refused("card_mismatch");
+        if (own(card, "token") !== token.token)
+            return refused("token_mismatch");
+        for (const brand of [own(payment, "payment_type_code"), own(card, "payment_type_code")]) {
+            if (brand !== void 0 && brand !== token.paymentTypeCode)
+                return refused("token_mismatch");
+        }
+        const unique = own(card, "card_unique_id");
+        if (unique !== void 0 && unique !== token.cardUniqueId)
+            return refused("token_mismatch");
+        const hash2 = own(payment, "hash");
+        if (typeof hash2 !== "string" || !INVOICE_HASH.test(hash2) || hash2 !== target.hash || hash2 !== openedHash)
+            return refused("session_mismatch");
+        if (!threeDsSucceeded(sent[sent.length - 1]))
+            return refused("out_of_order");
+        return Object.freeze({ ok: true, kind, slot: ofKind + 1 });
+    }
+    const cardRefusal = threeDsCardRefusal(body, parent);
+    if (cardRefusal)
+        return refused(cardRefusal);
+    let key = own(body, "publicIntegrationKey");
+    if (kind === "authentications") {
+        const extra = parseObject(own(body, "additionalData"), 4096);
+        key = own(extra, "publicIntegrationKey");
+    }
+    const country = own(body, "country");
+    if (!text(key) || !text(country))
+        return refused("shape");
+    if (key !== parent.publicIntegrationKey || country.toLowerCase() !== parent.country)
+        return refused("key_mismatch");
+    if (kind === "authentications") {
+        const count = own(own(body, "consumerAuthenticationInformation"), "installmentTotalCount");
+        if (count === void 0)
+            return refused("shape");
+        if (count !== "1" && count !== 1)
+            return refused("instalments");
+    }
+    if (!options.skipAmount) {
+        const approved = approvedAmount(input.approved);
+        if (!approved)
+            return refused("amount_unapproved");
+        const details = kind === "generate_token" ? body : own(own(body, "orderInformation"), "amountDetails");
+        const named = namedAmount(own(details, "totalAmount"), own(details, "currency"));
+        if (!named)
+            return refused("shape");
+        if (named.minor !== approved.minor || named.currency !== approved.currency)
+            return refused("amount_mismatch");
+    }
+    const hash = own(own(body, "paymentInformation"), "paymentHash");
+    if (typeof hash !== "string" || !INVOICE_HASH.test(hash))
+        return refused("shape");
+    if (kind === "generate_token")
+        return Object.freeze({ ok: true, kind, slot: ofKind + 1 });
+    if (hash !== openedHash)
+        return refused("session_mismatch");
+    const session = ebanxAnswerSession(generate.answerText);
+    if (!session.paymentId || !session.accessToken)
+        return refused("session_mismatch");
+    if (own(body, "merchantTrackId") !== session.paymentId || own(body, "token") !== session.accessToken)
+        return refused("session_mismatch");
+    return Object.freeze({ ok: true, kind, slot: ofKind + 1 });
+}
+var CARD_KEY = /^(?:pan|accountnumber|cardnumber|cardcvv|cvv|cvc|cvv2|cvc2|securitycode)$/;
+function ebanxFollowUpAnswerRefusal(answerText) {
+    const body = parseObject(answerText, EBANX_FOLLOW_UP_ANSWER_LIMIT);
+    if (!body)
+        return "answer_unreadable";
+    let visits = 0;
+    let found = false;
+    let exhausted = false;
+    const walk = (value, depth) => {
+        if (found || exhausted)
+            return;
+        if (depth > 16 || ++visits > 6e3) {
+            exhausted = true;
+            return;
+        }
+        if (Array.isArray(value)) {
+            for (const item of value)
+                walk(item, depth + 1);
+            return;
+        }
+        if (!record(value))
+            return;
+        for (const key of Object.keys(value)) {
+            const child = value[key];
+            if (CARD_KEY.test(key.toLowerCase().replace(/[-_]/g, "")) && child !== null && child !== "" && child !== false && child !== void 0) {
+                found = true;
+                return;
+            }
+            walk(child, depth + 1);
+        }
+    };
+    walk(body, 0);
+    if (exhausted)
+        return "answer_unreadable";
+    return found ? "card_in_answer" : null;
+}
+function isEbanxThreeDsFollowUp(kind) {
+    return THREE_DS_KINDS.includes(kind);
+}
+export { EBANX_CONFIRM_PATH, EBANX_FOLLOW_UP_ANSWER_LIMIT, EBANX_FOLLOW_UP_BODY_LIMIT, EBANX_FOLLOW_UP_CHALLENGE_MS, EBANX_FOLLOW_UP_IDLE_MS, EBANX_FOLLOW_UP_KINDS, EBANX_FOLLOW_UP_LIMITS, EBANX_FOLLOW_UP_MAX, EBANX_FOLLOW_UP_REFUSALS, EBANX_FOLLOW_UP_WINDOW_MS, EBANX_PAYING_STATUSES, EBANX_RESEND_HOSTS, EBANX_RESEND_REFUSALS, EBANX_THREE_DS_CARD_PATHS, EBANX_THREE_DS_FAILED, EBANX_THREE_DS_FAILED_CODE, ebanxAnswerOutcome, ebanxAnswerRefusal, ebanxAnswerSession, ebanxFollowUpAnswerRefusal, ebanxFollowUpIdleMs, ebanxFollowUpKind, ebanxFollowUpVerdict, ebanxResendKind, ebanxResendRefusal, isEbanxThreeDsFollowUp, readEbanxTokenAnswer, readEbanxTokenRequest };