@agent-cards/sdk 0.23.16 → 0.23.18

package/dist/primer.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 833d97716c57df725c942d14494012032a87b561ac7734676fe9dcb1d6be4819
+// artifact-sha256: f9b8cc9ac7688a49667fd7cec9f9452aa50c4531fbe82ec999872c2f0d9444c5
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -671,10 +671,10 @@ var TYPED_ARRAY = Object.getPrototypeOf(Uint8Array.prototype);
 var typedArrayName = Object.getOwnPropertyDescriptor(TYPED_ARRAY, Symbol.toStringTag).get;
 function parseRsaPublicKey(key) {
     const spki = key && typeof key === "object" ? key.spki : void 0;
-    const pin4 = key && typeof key === "object" ? key.sha256 : void 0;
+    const pin5 = key && typeof key === "object" ? key.sha256 : void 0;
     if (typeof spki !== "string" || spki.length > 1024 || spki.length % 4 !== 0 || !BASE64.test(spki))
         throw refuse6("key");
-    if (typeof pin4 !== "string" || !SHA256_HEX.test(pin4))
+    if (typeof pin5 !== "string" || !SHA256_HEX.test(pin5))
         throw refuse6("key");
     let binary;
     try {
@@ -686,7 +686,7 @@ function parseRsaPublicKey(key) {
     if (btoa(binary) !== spki)
         throw refuse6("key");
     const der = Uint8Array.from(binary, (c) => c.charCodeAt(0));
-    if (sha256Hex(der) !== pin4)
+    if (sha256Hex(der) !== pin5)
         throw refuse6("key");
     const outer = readElement(der, 0, 48);
     if (outer.end !== der.length || outer.start + RSA_ALGORITHM.length > der.length)
@@ -1450,6 +1450,558 @@ function paymongoBodyVerdict(body, session) {
     const code = judgeCardAttach(parsed, session);
     return code === null ? CARD9 : refuse10(code);
 }
+// src/gopay.js
+var GOPAY_PSP = "gopay";
+var GOPAY_CARD_FORM_HOSTS = /* @__PURE__ */ Object.freeze({ "secure.gopay.com": "production", "secure.sandbox.gopay.com": "test" });
+var GOPAY_CARD_FORM_PATH = "/gp-card-comm/h/";
+var BODY_LIMIT7 = 1024;
+var ROOT_KEYS4 = /* @__PURE__ */ Object.freeze(["SG", "cardData", "type"]);
+var CARD_KEYS6 = /* @__PURE__ */ Object.freeze(["cardNumber", "cvc", "expiration"]);
+var TOKEN2 = /^[0-9A-Fa-f]{16,1024}$/;
+var SIGNATURE = /^[0-9A-Fa-f]{64}$/;
+var LANGUAGE = /^[a-z]{2}(?:-[A-Za-z]{2})?$/;
+var VERSION = /^[A-Za-z0-9]{1,16}$/;
+var QUERY_NAMES = /* @__PURE__ */ Object.freeze(["lang", "ver", "SG"]);
+var CARD_NUMBER7 = /^[0-9]{16}$/;
+var CODE = /^[0-9]{3}$/;
+var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
+var CARD_PAYMENT = "PAYMENT_CARD";
+var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys4 = (value, keys) => {
+    const own2 = Object.keys(value);
+    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+};
+var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function luhn(digits2) {
+    let sum = 0;
+    for (let at = 0; at < digits2.length; at += 1) {
+        let digit = Number(digits2[digits2.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function gopayCardFormUrl(url) {
+    if (typeof url !== "string" || url.length > 2048 || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    const environment = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
+    if (environment === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
+        return null;
+    if (!TOKEN2.test(parsed.pathname.slice(GOPAY_CARD_FORM_PATH.length)))
+        return null;
+    const names = [...parsed.searchParams.keys()];
+    if (names.some((name) => !QUERY_NAMES.includes(name)) || new Set(names).size !== names.length)
+        return null;
+    const signature = parsed.searchParams.get("SG");
+    const language = parsed.searchParams.get("lang");
+    const version = parsed.searchParams.get("ver");
+    if (signature === null || !SIGNATURE.test(signature) || language !== null && !LANGUAGE.test(language) || version !== null && !VERSION.test(version))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment, signature });
+}
+function readBody4(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record8(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function gopayBodyVerdict(body, url) {
+    let target;
+    if (url !== void 0) {
+        target = gopayCardFormUrl(url);
+        if (target === null)
+            return refuse11("gopay_url_refused");
+    }
+    const value = readBody4(body);
+    if (value === null || !sameKeys4(value, ROOT_KEYS4) || !record8(value.cardData) || !sameKeys4(value.cardData, CARD_KEYS6)) {
+        return refuse11("gopay_body_unsupported");
+    }
+    const card = value.cardData;
+    if (typeof value.SG !== "string" || !SIGNATURE.test(value.SG) || typeof card.cardNumber !== "string" || !CARD_NUMBER7.test(card.cardNumber) || !luhn(card.cardNumber) || typeof card.cvc !== "string" || !CODE.test(card.cvc) || typeof card.expiration !== "string" || !EXPIRATION.test(card.expiration) || typeof value.type !== "string") {
+        return refuse11("gopay_body_unsupported");
+    }
+    if (value.type !== CARD_PAYMENT)
+        return refuse11("gopay_card_saving_refused");
+    if (target !== void 0 && value.SG !== target.signature)
+        return refuse11("gopay_signature_mismatch");
+    return CARD10;
+}
+// src/payrexx.js
+var PAYREXX_PSP = "payrexx";
+var PAYREXX_FRAME_HOST = "checkout.payrexx.com";
+var PAYREXX_PAY_PSP_ID = "44";
+var PAYREXX_BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "instance",
+    "pspId",
+    "card[number]",
+    "card[cardholder]",
+    "card[exp_month]",
+    "card[exp_year]",
+    "card[cvc]",
+    "card[brand]",
+    "amount",
+    "currency",
+    "isTokenization",
+    "isSubscription",
+    "isPreAuthorization",
+    "isMoto",
+    "email"
+]);
+var BODY_LIMIT8 = 16384;
+var URL_LIMIT3 = 128;
+var FRAME_QUERY = /^\?pspId=([1-9][0-9]{0,3})&lang=([a-z]{2})$/;
+var GROUPED = /^[0-9]{4} [0-9]{4} [0-9]{4} [0-9]{4}$/;
+var VISA2 = /^4[0-9]{15}$/;
+var MASTERCARD2 = /^(?:5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12})$/;
+var SECURITY_CODE7 = /^[0-9]{3}$/;
+var MONTH3 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR3 = /^20[0-9]{2}$/;
+var HOLDER2 = /^[\p{L}\p{M}][\p{L}\p{M} '.-]{0,44}$/u;
+var INSTANCE = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var AMOUNT2 = /^[1-9][0-9]{0,8}$/;
+var CURRENCY = /^[A-Z]{3}$/;
+var EMAIL = /^[^\s@]{1,64}@[^\s@]{1,189}$/;
+var FLAGS = /* @__PURE__ */ Object.freeze(["isTokenization", "isSubscription", "isPreAuthorization", "isMoto"]);
+var CARD_DIGITS = /[0-9](?:[ -]?[0-9]){11}/;
+var THREE_DS_KEY = /^(?:threeDSServerTransID|threeDSVersion|postAuth|authData\[[A-Za-z]{1,32}\])$/;
+var refuse12 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD11 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE5 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function payrexxFrameTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT3 || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.hostname !== PAYREXX_FRAME_HOST || parsed.pathname !== "/")
+        return null;
+    const query = FRAME_QUERY.exec(parsed.search);
+    return query ? Object.freeze({ pspId: query[1], lang: query[2] }) : null;
+}
+function readForm2(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT8)
+        return null;
+    try {
+        const pairs = body.split("&").map((chunk) => {
+            const eq = chunk.indexOf("=");
+            if (eq <= 0)
+                throw new URIError("not a form pair");
+            return [decodeURIComponent(chunk.slice(0, eq)), decodeURIComponent(chunk.slice(eq + 1))];
+        });
+        return pairs.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&") === body ? pairs : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cardNetwork2(digits2) {
+    if (VISA2.test(digits2))
+        return "visa";
+    return MASTERCARD2.test(digits2) ? "mastercard" : null;
+}
+function judgeBody2(body) {
+    const pairs = readForm2(body);
+    if (pairs === null)
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    const keys = pairs.map(([key]) => key);
+    const value = Object.fromEntries(pairs);
+    if (!pairs.some(([key, entry]) => key.startsWith("card[") && key !== "card[brand]" && entry !== "")) {
+        return pairs.some(([key, entry]) => key !== "encryptedCard" && CARD_DIGITS.test(entry)) ? { verdict: refuse12("payrexx_body_unsupported"), pairs: null } : { verdict: CONTINUE5, pairs: null };
+    }
+    if (new Set(keys).size !== keys.length)
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    if (keys.includes("encryptedCard"))
+        return { verdict: refuse12("payrexx_wallet_card"), pairs: null };
+    if (keys.some((key) => THREE_DS_KEY.test(key)))
+        return { verdict: refuse12("payrexx_three_ds_resend"), pairs: null };
+    if (value.pspId !== PAYREXX_PAY_PSP_ID)
+        return { verdict: refuse12("payrexx_other_provider"), pairs: null };
+    if (keys.length !== PAYREXX_BODY_KEYS.length || !keys.every((key, at) => key === PAYREXX_BODY_KEYS[at])) {
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    }
+    const number = value["card[number]"];
+    const network = GROUPED.test(number) ? cardNetwork2(number.replace(/ /g, "")) : null;
+    if (network === null || value["card[brand]"] !== network || !SECURITY_CODE7.test(value["card[cvc]"]) || !MONTH3.test(value["card[exp_month]"]) || !YEAR3.test(value["card[exp_year]"]) || !HOLDER2.test(value["card[cardholder]"]) || !INSTANCE.test(value.instance) || !AMOUNT2.test(value.amount) || !CURRENCY.test(value.currency) || !(value.email === "" || value.email.length <= 254 && EMAIL.test(value.email)) || !FLAGS.every((flag) => value[flag] === "true" || value[flag] === "false")) {
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    }
+    if (value.isTokenization === "true" || value.isSubscription === "true")
+        return { verdict: refuse12("payrexx_keep_on_file"), pairs: null };
+    if (value.isPreAuthorization === "true" || value.isMoto === "true")
+        return { verdict: refuse12("payrexx_not_a_sale"), pairs: null };
+    return { verdict: CARD11, pairs };
+}
+function payrexxBodyVerdict(body) {
+    return judgeBody2(body).verdict;
+}
+function payrexxGateVerdict(url, body) {
+    const target = payrexxFrameTarget(url);
+    if (target === null)
+        return refuse12("payrexx_url_refused");
+    const verdict = payrexxBodyVerdict(body);
+    return verdict.verdict === "card" && target.pspId !== PAYREXX_PAY_PSP_ID ? refuse12("payrexx_other_provider") : verdict;
+}
+// src/komoju.js
+var KOMOJU_PSP = "komoju";
+var KOMOJU_HOST = "komoju.com";
+var KOMOJU_SECURE_TOKEN_URL = "https://komoju.com/api/v1/secure_tokens";
+var KOMOJU_TOKEN_URL = "https://komoju.com/api/v1/tokens";
+var KOMOJU_RETURN_URL_PREFIX = "https://multipay.komoju.com/secure-token-return.html?session_id=";
+var BODY_LIMIT9 = 4096;
+var URL_LIMIT4 = 128;
+var SESSION_ID = /^[a-z0-9]{25}$/;
+var SESSION_PAY_PATH = /^\/api\/v1\/sessions\/([a-z0-9]{25})\/pay$/;
+var TOKEN_ID = /^tok_[a-z0-9]{20,32}$/;
+var TOP_KEYS = /* @__PURE__ */ Object.freeze(["amount", "currency", "payment_details", "return_url"]);
+var KOMOJU_CARD_KEYS = /* @__PURE__ */ Object.freeze(["type", "name", "number", "month", "year", "verification_value", "email"]);
+var PAY_KEYS = /* @__PURE__ */ Object.freeze(["payment_details", "api_locale"]);
+var AMOUNT_MAX = 99999999;
+var CURRENCY2 = /^[A-Z]{3}$/;
+var NUMBER2 = /^[0-9]{12,19}$/;
+var MONTH4 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR4 = /^[0-9]{2}$/;
+var SECURITY_CODE8 = /^[0-9]{3,4}$/;
+var PAGE_NAME = /^[\x20-\x7e]{1,64}$/;
+var NAME_DIGITS_MAX = 11;
+var EMAIL2 = /^[\x21-\x7e]{1,64}@[\x21-\x7e]{1,189}$/;
+var LOCALE = /^[a-z]{2}(?:-[A-Za-z]{2,4})?$/;
+var PAN_LIKE3 = /(?:[0-9][ _.:-]*){12,}/;
+var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys5 = (value, keys) => {
+    const own2 = Object.keys(value);
+    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+};
+var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE6 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function komojuTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT4 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.hostname !== KOMOJU_HOST)
+        return null;
+    if (url === KOMOJU_SECURE_TOKEN_URL)
+        return Object.freeze({ kind: "secure_token" });
+    if (url === KOMOJU_TOKEN_URL)
+        return Object.freeze({ kind: "token" });
+    const pay = SESSION_PAY_PATH.exec(parsed.pathname);
+    return pay ? Object.freeze({ kind: "session_pay", session: pay[1] }) : null;
+}
+function readJson3(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT9)
+        return null;
+    try {
+        const value = JSON.parse(body);
+        return record9(value) && JSON.stringify(value) === body ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function carriesCard(details) {
+    return record9(details) && Object.keys(details).some((key) => /^(?:number|card_?number|pan)$/i.test(key));
+}
+function judgeSecureToken(value) {
+    if (!sameKeys5(value, TOP_KEYS))
+        return "komoju_body_unsupported";
+    const details = value.payment_details;
+    if (!Number.isSafeInteger(value.amount) || value.amount < 0 || value.amount > AMOUNT_MAX || typeof value.currency !== "string" || !CURRENCY2.test(value.currency) || typeof value.return_url !== "string" || !value.return_url.startsWith(KOMOJU_RETURN_URL_PREFIX) || !SESSION_ID.test(value.return_url.slice(KOMOJU_RETURN_URL_PREFIX.length)) || !record9(details) || !sameKeys5(details, KOMOJU_CARD_KEYS) || details.type !== "credit_card" || typeof details.name !== "string" || !PAGE_NAME.test(details.name) || details.name.trim() === "" || details.name.replace(/[^0-9]/g, "").length > NAME_DIGITS_MAX || typeof details.number !== "string" || !NUMBER2.test(details.number) || typeof details.month !== "string" || !MONTH4.test(details.month) || typeof details.year !== "string" || !YEAR4.test(details.year) || typeof details.verification_value !== "string" || !SECURITY_CODE8.test(details.verification_value) || typeof details.email !== "string" || !EMAIL2.test(details.email) || PAN_LIKE3.test(details.email)) {
+        return "komoju_body_unsupported";
+    }
+    return value.amount === 0 ? "komoju_keeps_card" : null;
+}
+function tokenPay(value) {
+    const keys = Object.keys(value);
+    return (sameKeys5(value, PAY_KEYS) || keys.length === 1 && keys[0] === "payment_details") && typeof value.payment_details === "string" && TOKEN_ID.test(value.payment_details) && (value.api_locale === void 0 || typeof value.api_locale === "string" && LOCALE.test(value.api_locale));
+}
+function komojuBodyVerdict(body, url) {
+    let target = null;
+    if (url !== void 0) {
+        target = komojuTarget(url);
+        if (target === null)
+            return refuse13("komoju_url_refused");
+    }
+    const value = readJson3(body);
+    if (target !== null && target.kind !== "secure_token") {
+        if (value !== null && target.kind === "session_pay" && tokenPay(value))
+            return CONTINUE6;
+        return refuse13(value !== null && carriesCard(value.payment_details) ? "komoju_fallback_refused" : "komoju_body_unsupported");
+    }
+    if (value === null)
+        return refuse13("komoju_body_unsupported");
+    if (target === null && tokenPay(value))
+        return CONTINUE6;
+    if (target === null && !Object.prototype.hasOwnProperty.call(value, "return_url") && carriesCard(value.payment_details)) {
+        return refuse13("komoju_fallback_refused");
+    }
+    const code = judgeSecureToken(value);
+    return code === null ? CARD12 : refuse13(code);
+}
+// src/paygent.js
+var PAYGENT_PSP = "paygent";
+var PAYGENT_TOKEN_HOSTS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze(["token.paygent.co.jp"]),
+    sandbox: Object.freeze(["sandbox.paygent.co.jp"])
+});
+var PAYGENT_TOKEN_PATH = "/n/token/request";
+var PAYGENT_BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "merchant_id",
+    "token_generate_key",
+    "card_number",
+    "card_expire_year",
+    "card_expire_month",
+    "card_cvc",
+    "card_name"
+]);
+var BODY_LIMIT10 = 2048;
+var URL_LIMIT5 = 128;
+var MERCHANT_ID = /^[0-9]{5,6}$/;
+var LIVE_KEY = /^live_[A-Za-z0-9]{24}$/;
+var SANDBOX_KEY = /^(?!live_)[a-z]{1,8}_[A-Za-z0-9]{24}$/;
+var NUMBER3 = /^[0-9]{12,19}$/;
+var YEAR5 = /^[0-9]{2}$/;
+var MONTH5 = /^(?:0?[1-9]|1[0-2])$/;
+var SECURITY_CODE9 = /^[0-9]{3,4}$/;
+var PAGE_HOLDER = /^(?:[A-Za-z][A-Za-z .'-]{0,44})?$/;
+var refuse14 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD13 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function paygentEnvironment(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT5 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.pathname !== PAYGENT_TOKEN_PATH)
+        return null;
+    if (PAYGENT_TOKEN_HOSTS.production.includes(parsed.hostname))
+        return "production";
+    if (PAYGENT_TOKEN_HOSTS.sandbox.includes(parsed.hostname))
+        return "sandbox";
+    return null;
+}
+function readBody5(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT10)
+        return null;
+    try {
+        const pairs = body.split("&").map((chunk) => {
+            const eq = chunk.indexOf("=");
+            if (eq <= 0)
+                throw new URIError("not a pair");
+            return [chunk.slice(0, eq), decodeURIComponent(chunk.slice(eq + 1))];
+        });
+        return pairs.map(([key, value]) => `${key}=${encodeURIComponent(value)}`).join("&") === body ? pairs : null;
+    }
+    catch {
+        return null;
+    }
+}
+var CVC_ONLY_KEYS = /* @__PURE__ */ Object.freeze(["merchant_id", "token_generate_key", "card_cvc", "cvc_only_flg"]);
+var sameKeys6 = (pairs, keys) => pairs.length === keys.length && pairs.every(([key], at) => key === keys[at]);
+function judgeBody3(body) {
+    const pairs = readBody5(body);
+    if (pairs === null)
+        return { code: "paygent_body_unsupported", pairs: null };
+    if (sameKeys6(pairs, CVC_ONLY_KEYS))
+        return { code: "paygent_cvc_only", pairs: null };
+    if (!sameKeys6(pairs, PAYGENT_BODY_KEYS))
+        return { code: "paygent_body_unsupported", pairs: null };
+    const value = Object.fromEntries(pairs);
+    if (!MERCHANT_ID.test(value.merchant_id) || !(LIVE_KEY.test(value.token_generate_key) || SANDBOX_KEY.test(value.token_generate_key)) || !NUMBER3.test(value.card_number) || !YEAR5.test(value.card_expire_year) || !MONTH5.test(value.card_expire_month) || !SECURITY_CODE9.test(value.card_cvc) || !PAGE_HOLDER.test(value.card_name)) {
+        return { code: "paygent_body_unsupported", pairs: null };
+    }
+    return { code: null, pairs };
+}
+function paygentBodyVerdict(body) {
+    const { code } = judgeBody3(body);
+    return code === null ? CARD13 : refuse14(code);
+}
+function paygentRequestVerdict(url, body) {
+    const environment = paygentEnvironment(url);
+    if (environment === null)
+        return refuse14("paygent_url_refused");
+    const { code, pairs } = judgeBody3(body);
+    if (code !== null)
+        return refuse14(code);
+    const key = pairs[1][1];
+    return (environment === "production" ? LIVE_KEY : SANDBOX_KEY).test(key) ? CARD13 : refuse14("paygent_key_environment");
+}
+// src/multipart-form.js
+var BODY_LIMIT11 = 65536;
+var CRLF = "\r\n";
+var BOUNDARY_CHARACTERS = "[A-Za-z0-9'+_.-]{1,70}";
+var BOUNDARY = new RegExp(`^${BOUNDARY_CHARACTERS}$`);
+var CONTENT_TYPE = new RegExp(`^multipart/form-data; ?boundary=(${BOUNDARY_CHARACTERS})$`, "i");
+var DISPOSITION = /^content-disposition: ?form-data; name="([^"\\\r\n]*)"$/i;
+var FILE_HINT = /^content-disposition:.*;\s*filename\*?=|^content-type:/i;
+var refusal = (code) => Object.freeze({ refusal: code });
+var listed = (list, name) => Array.isArray(list) && list.includes(name);
+function multipartBoundary(contentType) {
+    const match = typeof contentType === "string" ? CONTENT_TYPE.exec(contentType) : null;
+    return match ? match[1] : null;
+}
+function boundaryOf(body, contentType) {
+    const lineEnd = body.indexOf(CRLF);
+    const firstLine = body.startsWith("--") && lineEnd !== -1 ? body.slice(2, lineEnd) : null;
+    if (firstLine === null || !BOUNDARY.test(firstLine))
+        return null;
+    if (contentType === void 0 || contentType === null)
+        return firstLine;
+    return multipartBoundary(contentType) === firstLine ? firstLine : null;
+}
+function readMultipartForm(body, contentType) {
+    if (typeof body !== "string" || body.length > BODY_LIMIT11)
+        return refusal("multipart_not_form");
+    const boundary = boundaryOf(body, contentType);
+    if (boundary === null)
+        return refusal("multipart_not_form");
+    const dash = `--${boundary}`;
+    const delimiter = `${CRLF}${dash}`;
+    const parts = [];
+    let position = dash.length + CRLF.length;
+    for (;;) {
+        const headerEnd = body.indexOf(`${CRLF}${CRLF}`, position);
+        if (headerEnd === -1)
+            return refusal("multipart_not_form");
+        const headers = body.slice(position, headerEnd).split(CRLF);
+        if (headers.some((line) => FILE_HINT.test(line)))
+            return refusal("multipart_file_part");
+        const disposition = headers.length === 1 ? DISPOSITION.exec(headers[0]) : null;
+        if (!disposition)
+            return refusal("multipart_not_form");
+        const start = headerEnd + 2 * CRLF.length;
+        const end = body.indexOf(delimiter, start);
+        if (end === -1)
+            return refusal("multipart_not_form");
+        parts.push(Object.freeze({ name: disposition[1], value: body.slice(start, end), start, end }));
+        position = end + delimiter.length;
+        if (body.startsWith("--", position)) {
+            const rest = body.slice(position + 2);
+            return rest === "" || rest === CRLF ? Object.freeze({ boundary, parts: Object.freeze(parts) }) : refusal("multipart_not_form");
+        }
+        if (!body.startsWith(CRLF, position))
+            return refusal("multipart_not_form");
+        position += CRLF.length;
+    }
+}
+function soundRule(rule) {
+    if (!rule || typeof rule !== "object" || !Array.isArray(rule.parts) || !Array.isArray(rule.card) || rule.card.length === 0)
+        return false;
+    const names = [...rule.parts, ...rule.card];
+    if (!names.every((name) => typeof name === "string" && name !== ""))
+        return false;
+    return new Set(rule.card).size === rule.card.length && rule.card.every((name) => rule.parts.includes(name));
+}
+function judge(body, contentType, rule) {
+    if (!soundRule(rule))
+        throw new TypeError("A multipart rule lists its part names and, among them, its card parts.");
+    const read = readMultipartForm(body, contentType);
+    if (read.refusal)
+        return read;
+    if (read.parts.some((part) => !listed(rule.parts, part.name)))
+        return refusal("multipart_unknown_part");
+    for (const name of rule.card) {
+        const count = read.parts.filter((part) => part.name === name).length;
+        if (count === 0)
+            return refusal("multipart_missing_card_part");
+        if (count > 1)
+            return refusal("multipart_duplicate_card_part");
+    }
+    return read;
+}
+function multipartFormRefusal(body, contentType, rule) {
+    const read = judge(body, contentType, rule);
+    return read.refusal ?? null;
+}
+// src/pay-nl.js
+var PAY_NL_PSP = "pay_nl";
+var PAY_NL_TOKEN_URL = "https://payment.pay.nl/v1/Payment/getCardToken/json";
+var PAY_NL_PARTS = /* @__PURE__ */ Object.freeze([
+    "serviceId",
+    "requestToken",
+    "payment[method]",
+    "payment[card][number]",
+    "payment[card][name]",
+    "payment[card][cvc]",
+    "payment[card][expire_month]",
+    "payment[card][expire_year]"
+]);
+var PAY_NL_CARD_PARTS = /* @__PURE__ */ Object.freeze([
+    "payment[card][number]",
+    "payment[card][name]",
+    "payment[card][cvc]",
+    "payment[card][expire_month]",
+    "payment[card][expire_year]"
+]);
+var pin4 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), serviceIds: Object.freeze([...fields.serviceIds]) });
+var PAY_NL_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin4({ id: "weeztix", merchant: "Weeztix", origins: ["https://shop.weeztix.com"], serviceIds: ["SL-6399-2740"] })
+]);
+var RULE = /* @__PURE__ */ Object.freeze({ parts: PAY_NL_PARTS, card: PAY_NL_CARD_PARTS });
+var SERVICE_ID = /^SL-\d{4}-\d{4}$/;
+var REQUEST_TOKEN = /^[0-9a-f]{40}$/i;
+var NUMBER4 = /^[0-9]{8,19}$/;
+var HOLDER3 = /^\p{L}+(?: \p{L}+)*$/u;
+var HOLDER_LIMIT2 = 256;
+var SECURITY_CODE10 = /^[0-9]{3,4}$/;
+var MONTH6 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR6 = /^[0-9]{2}$/;
+var refuse15 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD14 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isPayNlTokenUrl(url) {
+    return url === PAY_NL_TOKEN_URL;
+}
+function readBody6(body, contentType) {
+    if (multipartFormRefusal(body, contentType, RULE) !== null)
+        return null;
+    const { parts } = readMultipartForm(body, contentType);
+    if (parts.length !== PAY_NL_PARTS.length || !parts.every((part, at) => part.name === PAY_NL_PARTS[at]))
+        return null;
+    const value = Object.fromEntries(parts.map((part) => [part.name, part.value]));
+    const name = value["payment[card][name]"];
+    if (!SERVICE_ID.test(value.serviceId) || !REQUEST_TOKEN.test(value.requestToken) || value["payment[method]"] !== "card" || !NUMBER4.test(value["payment[card][number]"]) || name.length > HOLDER_LIMIT2 || !HOLDER3.test(name) || !SECURITY_CODE10.test(value["payment[card][cvc]"]) || !MONTH6.test(value["payment[card][expire_month]"]) || !YEAR6.test(value["payment[card][expire_year]"]))
+        return null;
+    return value;
+}
+function payNlBodyVerdict(body, contentType) {
+    return readBody6(body, contentType) === null ? refuse15("pay_nl_body_unsupported") : CARD14;
+}
+var ERROR_KEYS = /* @__PURE__ */ Object.freeze(["errorId", "errorTag", "errorMessage", "errorFieldName"]);
+var REQUEST_KEYS = /* @__PURE__ */ Object.freeze(["result", ...ERROR_KEYS]);
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -1459,6 +2011,8 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "wix_payments_url_refused" };
         return wixPaymentsBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === KOMOJU_PSP)
+        return komojuBodyVerdict(body, url);
     if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
         if (url !== void 0 && !isPaddleVgsCardsUrl(url))
             return { verdict: "refuse", code: "paddle_vgs_url_refused" };
@@ -1469,6 +2023,17 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "payfast_url_refused" };
         return payfastBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === PAYREXX_PSP) {
+        return url !== void 0 ? payrexxGateVerdict(url, body) : payrexxBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYGENT_PSP) {
+        return url !== void 0 ? paygentRequestVerdict(url, body) : paygentBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAY_NL_PSP) {
+        if (url !== void 0 && !isPayNlTokenUrl(url))
+            return { verdict: "refuse", code: "pay_nl_url_refused" };
+        return payNlBodyVerdict(body);
+    }
     if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
         const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
         if (url !== void 0 && target === null)
@@ -1481,6 +2046,8 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "paymongo_url_refused" };
         return paymongoBodyVerdict(body, session);
     }
+    if (recognizer && recognizer.psp === GOPAY_PSP)
+        return gopayBodyVerdict(body, url);
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {
@@ -1601,20 +2168,20 @@ var KEEP_ON_FILE_REFUSAL = "Refusing to pay: this Primer payment would keep the
 var UNSUPPORTED_SDK_REFUSAL = "Refusing to pay: this checkout uses a Primer SDK Agentcard does not support yet. Nothing was sent.";
 var NETWORK_MISMATCH_REFUSAL = "Refusing to pay: this Primer payment names a card network that is not your card's. Nothing was sent.";
 var FILL_REFUSAL = "Could not fill the card fields for Primer. Nothing was sent.";
-var BODY_LIMIT7 = 16384;
+var BODY_LIMIT12 = 16384;
 var RESPONSE_LIMIT = 32768;
-var ROOT_KEYS4 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
+var ROOT_KEYS5 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
 var INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear", "cardholderName", "preferredNetwork"];
 var REQUIRED_INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear"];
-var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var record10 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var owns5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
 var text2 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
 var digits = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
 var panLike = (value) => /(?:[0-9][ _.:-]*){12,}/.test(value);
 var plain = (value, max) => text2(value, max) && !panLike(value);
-var MONTH3 = /^(?:0[1-9]|1[0-2])$/;
-var YEAR3 = /^20[0-9]{2}$/;
+var MONTH7 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR7 = /^20[0-9]{2}$/;
 var NETWORK = /^[A-Z][A-Z_]{1,31}$/;
 function isPrimerTokenizeUrl(url, method = "POST") {
     if (method !== "POST" || typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
@@ -1628,8 +2195,8 @@ function isPrimerTokenizeUrl(url, method = "POST") {
     }
     return parsed.href === url && parsed.protocol === "https:" && !parsed.port && !parsed.username && !parsed.password && !parsed.search && !parsed.hash && PRIMER_PCI_HOSTS.includes(parsed.hostname) && parsed.pathname === PRIMER_TOKENIZE_PATH;
 }
-function judgeBody2(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
+function judgeBody4(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT12)
         return null;
     let value;
     try {
@@ -1638,21 +2205,21 @@ function judgeBody2(body) {
     catch {
         return null;
     }
-    if (!record8(value) || !roundTrips(value, body))
+    if (!record10(value) || !roundTrips(value, body))
         return null;
-    if (!Object.keys(value).every((key) => ROOT_KEYS4.includes(key)) || !owns5(value, "paymentInstrument"))
+    if (!Object.keys(value).every((key) => ROOT_KEYS5.includes(key)) || !owns5(value, "paymentInstrument"))
         return null;
     const instrument = value.paymentInstrument;
-    if (!record8(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns5(instrument, key)))
+    if (!record10(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns5(instrument, key)))
         return null;
-    if (!digits(instrument.number, 12, 19) || !digits(instrument.cvv, 3, 4) || !exact(MONTH3, instrument.expirationMonth) || !exact(YEAR3, instrument.expirationYear))
+    if (!digits(instrument.number, 12, 19) || !digits(instrument.cvv, 3, 4) || !exact(MONTH7, instrument.expirationMonth) || !exact(YEAR7, instrument.expirationYear))
         return null;
     if (owns5(instrument, "cardholderName") && instrument.cardholderName !== null && !plain(instrument.cardholderName, 256) || owns5(instrument, "preferredNetwork") && instrument.preferredNetwork !== null && !exact(NETWORK, instrument.preferredNetwork) || owns5(value, "userDescription") && value.userDescription !== null && !plain(value.userDescription, 256) || owns5(value, "tokenType") && value.tokenType !== "MULTI_USE" || owns5(value, "paymentFlow") && value.paymentFlow !== "VAULT")
         return null;
     return { value, keepOnFile: owns5(value, "tokenType") || owns5(value, "paymentFlow") };
 }
 function primerBodyRefusal(body) {
-    const judged = judgeBody2(body);
+    const judged = judgeBody4(body);
     if (!judged)
         return "unsupported";
     return judged.keepOnFile ? "keep_on_file" : null;
@@ -1661,17 +2228,17 @@ function isPrimerNewCardBody(body) {
     return primerBodyRefusal(body) === null;
 }
 function primerKeepOnFileRequested(body) {
-    const judged = judgeBody2(body);
+    const judged = judgeBody4(body);
     return judged ? judged.keepOnFile : null;
 }
 var CARD_GATE = /* @__PURE__ */ Object.freeze({ psp: "primer", encoding: "json", jsonCardFields: [["paymentInstrument", "number"]] });
-var CONTENT_TYPE = /^application\/json(?:;\s*charset=utf-8)?$/i;
+var CONTENT_TYPE2 = /^application\/json(?:;\s*charset=utf-8)?$/i;
 var LEGACY_SDK_VERSION = /^v2\.[0-9]{1,3}\.[0-9]{1,3}$/;
 var CLIENT_TOKEN = /^[A-Za-z0-9._~+/=-]{16,4096}$/;
 var REQUEST_ID = /^[A-Za-z0-9-]{1,64}$/;
 var API_VERSION = /^2\.[0-9]{1,2}$/;
 function readHeaders(headers) {
-    if (!record8(headers))
+    if (!record10(headers))
         return null;
     const folded = /* @__PURE__ */ new Map();
     for (const [name, value] of Object.entries(headers)) {
@@ -1691,7 +2258,7 @@ function headersRefusal(headers) {
         return "unsupported";
     if (!exact(LEGACY_SDK_VERSION, version))
         return "unsupported_sdk";
-    if (!exact(CONTENT_TYPE, folded.get("content-type")) || !exact(CLIENT_TOKEN, folded.get("primer-client-token")) || folded.has("primer-sdk-client") && folded.get("primer-sdk-client") !== "WEB" || folded.has("x-api-version") && !exact(API_VERSION, folded.get("x-api-version")) || folded.has("primer-sdk-checkout-session-id") && !exact(REQUEST_ID, folded.get("primer-sdk-checkout-session-id")) || folded.has("x-request-id") && !exact(REQUEST_ID, folded.get("x-request-id")))
+    if (!exact(CONTENT_TYPE2, folded.get("content-type")) || !exact(CLIENT_TOKEN, folded.get("primer-client-token")) || folded.has("primer-sdk-client") && folded.get("primer-sdk-client") !== "WEB" || folded.has("x-api-version") && !exact(API_VERSION, folded.get("x-api-version")) || folded.has("primer-sdk-checkout-session-id") && !exact(REQUEST_ID, folded.get("primer-sdk-checkout-session-id")) || folded.has("x-request-id") && !exact(REQUEST_ID, folded.get("x-request-id")))
         return "unsupported";
     return null;
 }
@@ -1718,7 +2285,7 @@ function onTokenizePath(url) {
     }
 }
 function primerTokenizeRefusal(request) {
-    if (!record8(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
+    if (!record10(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
         return "unsupported";
     return headersRefusal(request.headers) ?? primerBodyRefusal(request.body);
 }
@@ -1733,7 +2300,7 @@ function primerCardOnFileRefusal(url, options, policy = PRIMER_SESSION_CARD_ON_F
         return "unsupported";
     if (new URL(url).hostname !== LIVE_PCI_HOST)
         return null;
-    return primerCardOnFileDisclosure(url, policy) && record8(options) && options.keepOnFile === true ? null : "keep_on_file";
+    return primerCardOnFileDisclosure(url, policy) && record10(options) && options.keepOnFile === true ? null : "keep_on_file";
 }
 function primerRefusalMessage(reason) {
     if (reason === "keep_on_file")
@@ -1758,7 +2325,7 @@ function primerCardNetwork(number) {
     return null;
 }
 function primerNetworkRefusal(body, card) {
-    const judged = judgeBody2(body);
+    const judged = judgeBody4(body);
     if (!judged)
         return "unsupported";
     const preferred = judged.value.paymentInstrument.preferredNetwork;
@@ -1768,7 +2335,7 @@ function primerNetworkRefusal(body, card) {
     return network !== null && network === preferred ? null : "network_mismatch";
 }
 function injectPrimerCard(body, card) {
-    const judged = judgeBody2(body);
+    const judged = judgeBody4(body);
     if (!judged)
         throw new Error(UNSUPPORTED_REFUSAL);
     if (judged.keepOnFile)
@@ -1792,9 +2359,9 @@ function injectPrimerCard(body, card) {
     }
     return { body: JSON.stringify(judged.value), where };
 }
-var TOKEN2 = /^[A-Za-z0-9_-]{8,256}$/;
+var TOKEN3 = /^[A-Za-z0-9_-]{8,256}$/;
 var ERROR_ID = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/;
-var CODE = /^[A-Z][A-Z0-9_]{0,63}$/;
+var CODE2 = /^[A-Z][A-Z0-9_]{0,63}$/;
 var NETWORK_NAME = /^[A-Za-z][A-Za-z0-9 _-]{0,31}$/;
 var RESPONSE_MONTH = /^(?:0?[1-9]|1[0-2])$/;
 var RESPONSE_YEAR = /^(?:[0-9]{2}|20[0-9]{2})$/;
@@ -1817,25 +2384,25 @@ function readAnswer(body) {
         return null;
     try {
         const value = JSON.parse(body);
-        return record8(value) ? value : null;
+        return record10(value) ? value : null;
     }
     catch {
         return null;
     }
 }
-var tokenValue = (value) => exact(TOKEN2, value) && !panLike(value);
+var tokenValue = (value) => exact(TOKEN3, value) && !panLike(value);
 var optional = (value, key, check) => !owns5(value, key) || value[key] === null || check(value[key]);
 function cardDetails(data) {
-    if (!record8(data) || !exact(/^[0-9]{4}$/, data.last4Digits))
+    if (!record10(data) || !exact(/^[0-9]{4}$/, data.last4Digits))
         return null;
-    if (!optional(data, "first6Digits", (v) => exact(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain(v, 256)) || !optional(data, "network", (v) => exact(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record8))
+    if (!optional(data, "first6Digits", (v) => exact(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain(v, 256)) || !optional(data, "network", (v) => exact(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record10))
         return null;
     const safe = { last4Digits: data.last4Digits };
     for (const key of ["first6Digits", "expirationMonth", "expirationYear", "cardholderName", "network", "isNetworkTokenized"]) {
         if (owns5(data, key) && data[key] !== null)
             safe[key] = data[key];
     }
-    if (record8(data.binData)) {
+    if (record10(data.binData)) {
         const bin = {};
         for (const key of BIN_KEYS) {
             if (!owns5(data.binData, key) || data.binData[key] === null)
@@ -1851,7 +2418,7 @@ function cardDetails(data) {
 function threeDsSummary(value) {
     if (value === void 0 || value === null)
         return null;
-    if (!record8(value) || !exact(CODE, value.responseCode) || !optional(value, "reasonCode", (v) => exact(CODE, v)) || !optional(value, "reasonText", (v) => plain(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
+    if (!record10(value) || !exact(CODE2, value.responseCode) || !optional(value, "reasonCode", (v) => exact(CODE2, v)) || !optional(value, "reasonText", (v) => plain(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
         return void 0;
     const safe = { responseCode: value.responseCode };
     for (const key of ["reasonCode", "reasonText", "protocolVersion", "challengeIssued"]) {
@@ -1879,7 +2446,7 @@ function rebuildToken(value) {
 }
 function primerErrorId(body) {
     const value = readAnswer(body);
-    const id = value && record8(value.error) ? value.error.errorId : null;
+    const id = value && record10(value.error) ? value.error.errorId : null;
     return exact(ERROR_ID, id) && !panLike(id) ? id : null;
 }
 function matchesCard(details, card) {