@agent-cards/sdk 0.23.17 → 0.23.19

package/dist/card-fields.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 0fcc0e758acec92fba9d21092bcb3704b8a73ec864647ea194ca44eba57cb96d
+// artifact-sha256: d59cc35c7ffec2b7a8aa6b52e65fd0a6a22465f4e60812b87ec23256ea9e8885
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -302,11 +302,11 @@ var MONERIS_TOKENIZE_PATH = "/HPPtoken/request.php";
 function monerisTokenizeEnvironment(url) {
     if (typeof url !== "string")
         return null;
-    for (const environment of 
+    for (const environment2 of 
     /** @type {const} */
     ["production", "sandbox"]) {
-        if (MONERIS_TOKENIZE_HOSTS[environment].some((host) => url === `https://${host}${MONERIS_TOKENIZE_PATH}`))
-            return environment;
+        if (MONERIS_TOKENIZE_HOSTS[environment2].some((host) => url === `https://${host}${MONERIS_TOKENIZE_PATH}`))
+            return environment2;
     }
     return null;
 }
@@ -357,8 +357,8 @@ var CONTROL = /[\u0000-\u001f\u007f]/;
 var cardLikeName = (name) => (name.match(/[0-9]/g) ?? []).length >= 12;
 var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD4 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -663,10 +663,10 @@ var TYPED_ARRAY = Object.getPrototypeOf(Uint8Array.prototype);
 var typedArrayName = Object.getOwnPropertyDescriptor(TYPED_ARRAY, Symbol.toStringTag).get;
 function parseRsaPublicKey(key) {
     const spki = key && typeof key === "object" ? key.spki : void 0;
-    const pin4 = key && typeof key === "object" ? key.sha256 : void 0;
+    const pin5 = key && typeof key === "object" ? key.sha256 : void 0;
     if (typeof spki !== "string" || spki.length > 1024 || spki.length % 4 !== 0 || !BASE64.test(spki))
         throw refuse6("key");
-    if (typeof pin4 !== "string" || !SHA256_HEX.test(pin4))
+    if (typeof pin5 !== "string" || !SHA256_HEX.test(pin5))
         throw refuse6("key");
     let binary;
     try {
@@ -678,7 +678,7 @@ function parseRsaPublicKey(key) {
     if (btoa(binary) !== spki)
         throw refuse6("key");
     const der = Uint8Array.from(binary, (c) => c.charCodeAt(0));
-    if (sha256Hex(der) !== pin4)
+    if (sha256Hex(der) !== pin5)
         throw refuse6("key");
     const outer = readElement(der, 0, 48);
     if (outer.end !== der.length || outer.start + RSA_ALGORITHM.length > der.length)
@@ -746,13 +746,13 @@ var PADDLE_TOKENEX_KEYS = /* @__PURE__ */ Object.freeze({
         sha256: "92529bd289bb24d52a1bdcc42edc9ac0bb1dacbb58f7568573d44771e1287762"
     })
 });
-function paddleTokenexKey(environment) {
-    if (environment !== "sandbox" && environment !== "production")
+function paddleTokenexKey(environment2) {
+    if (environment2 !== "sandbox" && environment2 !== "production")
         return null;
-    return PADDLE_TOKENEX_KEYS[environment] ?? null;
+    return PADDLE_TOKENEX_KEYS[environment2] ?? null;
 }
-function paddleTokenexKeyBytes(environment) {
-    const key = paddleTokenexKey(environment);
+function paddleTokenexKeyBytes(environment2) {
+    const key = paddleTokenexKey(environment2);
     if (!key)
         return null;
     try {
@@ -767,8 +767,8 @@ var PADDLE_TOKENEX_PSP = "paddle_tokenex";
 var PADDLE_TOKENEX_FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys2 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -813,11 +813,11 @@ function isBase64OfBytes(value, bytes) {
     const pad = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
     return value.length / 4 * 3 - pad === bytes && btoa(atob(value)) === value;
 }
-function isPaddleTokenexCiphertext(value, environment) {
-    const bytes = paddleTokenexKeyBytes(environment);
+function isPaddleTokenexCiphertext(value, environment2) {
+    const bytes = paddleTokenexKeyBytes(environment2);
     return bytes !== null && isBase64OfBytes(value, bytes);
 }
-function readPay(body, line, environment) {
+function readPay(body, line, environment2) {
     if (typeof body !== "string" || body === "" || body.length > PAY_BODY_LIMIT)
         return null;
     let value;
@@ -849,11 +849,11 @@ function readPay(body, line, environment) {
         return null;
     for (const name of CARD_KEYS3) {
         const blob = tokenex[name];
-        if (environment === void 0) {
+        if (environment2 === void 0) {
             if (typeof blob !== "string" || !BASE642.test(blob) || blob.length < 4 || blob.length > 4096)
                 return null;
         }
-        else if (!isPaddleTokenexCiphertext(blob, environment))
+        else if (!isPaddleTokenexCiphertext(blob, environment2))
             return null;
     }
     if (tokenex.encrypted_card_number === tokenex.encrypted_cvv)
@@ -1257,8 +1257,8 @@ var TEXT_LIMIT = 256;
 var CONTROL4 = /[\u0000-\u001f\u007f]/;
 var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys3 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var plainText = (value) => typeof value === "string" && value.length <= TEXT_LIMIT && !CONTROL4.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -1460,8 +1460,8 @@ var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
 var CARD_PAYMENT = "PAYMENT_CARD";
 var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys4 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1490,8 +1490,8 @@ function gopayCardFormUrl(url) {
     }
     if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
         return null;
-    const environment = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
-    if (environment === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
+    const environment2 = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
+    if (environment2 === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
         return null;
     if (!TOKEN2.test(parsed.pathname.slice(GOPAY_CARD_FORM_PATH.length)))
         return null;
@@ -1503,7 +1503,7 @@ function gopayCardFormUrl(url) {
     const version = parsed.searchParams.get("ver");
     if (signature === null || !SIGNATURE.test(signature) || language !== null && !LANGUAGE.test(language) || version !== null && !VERSION.test(version))
         return null;
-    return Object.freeze({ host: parsed.hostname, environment, signature });
+    return Object.freeze({ host: parsed.hostname, environment: environment2, signature });
 }
 function readBody4(body) {
     if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
@@ -1540,6 +1540,916 @@ function gopayBodyVerdict(body, url) {
         return refuse11("gopay_signature_mismatch");
     return CARD10;
 }
+// src/payrexx.js
+var PAYREXX_PSP = "payrexx";
+var PAYREXX_FRAME_HOST = "checkout.payrexx.com";
+var PAYREXX_PAY_PSP_ID = "44";
+var PAYREXX_BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "instance",
+    "pspId",
+    "card[number]",
+    "card[cardholder]",
+    "card[exp_month]",
+    "card[exp_year]",
+    "card[cvc]",
+    "card[brand]",
+    "amount",
+    "currency",
+    "isTokenization",
+    "isSubscription",
+    "isPreAuthorization",
+    "isMoto",
+    "email"
+]);
+var BODY_LIMIT8 = 16384;
+var URL_LIMIT3 = 128;
+var FRAME_QUERY = /^\?pspId=([1-9][0-9]{0,3})&lang=([a-z]{2})$/;
+var GROUPED = /^[0-9]{4} [0-9]{4} [0-9]{4} [0-9]{4}$/;
+var VISA2 = /^4[0-9]{15}$/;
+var MASTERCARD2 = /^(?:5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12})$/;
+var SECURITY_CODE7 = /^[0-9]{3}$/;
+var MONTH3 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR3 = /^20[0-9]{2}$/;
+var HOLDER2 = /^[\p{L}\p{M}][\p{L}\p{M} '.-]{0,44}$/u;
+var INSTANCE = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var AMOUNT2 = /^[1-9][0-9]{0,8}$/;
+var CURRENCY = /^[A-Z]{3}$/;
+var EMAIL = /^[^\s@]{1,64}@[^\s@]{1,189}$/;
+var FLAGS = /* @__PURE__ */ Object.freeze(["isTokenization", "isSubscription", "isPreAuthorization", "isMoto"]);
+var CARD_DIGITS = /[0-9](?:[ -]?[0-9]){11}/;
+var THREE_DS_KEY = /^(?:threeDSServerTransID|threeDSVersion|postAuth|authData\[[A-Za-z]{1,32}\])$/;
+var refuse12 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD11 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE5 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function payrexxFrameTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT3 || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.hostname !== PAYREXX_FRAME_HOST || parsed.pathname !== "/")
+        return null;
+    const query = FRAME_QUERY.exec(parsed.search);
+    return query ? Object.freeze({ pspId: query[1], lang: query[2] }) : null;
+}
+function readForm2(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT8)
+        return null;
+    try {
+        const pairs = body.split("&").map((chunk) => {
+            const eq = chunk.indexOf("=");
+            if (eq <= 0)
+                throw new URIError("not a form pair");
+            return [decodeURIComponent(chunk.slice(0, eq)), decodeURIComponent(chunk.slice(eq + 1))];
+        });
+        return pairs.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&") === body ? pairs : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cardNetwork2(digits) {
+    if (VISA2.test(digits))
+        return "visa";
+    return MASTERCARD2.test(digits) ? "mastercard" : null;
+}
+function judgeBody2(body) {
+    const pairs = readForm2(body);
+    if (pairs === null)
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    const keys = pairs.map(([key]) => key);
+    const value = Object.fromEntries(pairs);
+    if (!pairs.some(([key, entry]) => key.startsWith("card[") && key !== "card[brand]" && entry !== "")) {
+        return pairs.some(([key, entry]) => key !== "encryptedCard" && CARD_DIGITS.test(entry)) ? { verdict: refuse12("payrexx_body_unsupported"), pairs: null } : { verdict: CONTINUE5, pairs: null };
+    }
+    if (new Set(keys).size !== keys.length)
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    if (keys.includes("encryptedCard"))
+        return { verdict: refuse12("payrexx_wallet_card"), pairs: null };
+    if (keys.some((key) => THREE_DS_KEY.test(key)))
+        return { verdict: refuse12("payrexx_three_ds_resend"), pairs: null };
+    if (value.pspId !== PAYREXX_PAY_PSP_ID)
+        return { verdict: refuse12("payrexx_other_provider"), pairs: null };
+    if (keys.length !== PAYREXX_BODY_KEYS.length || !keys.every((key, at) => key === PAYREXX_BODY_KEYS[at])) {
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    }
+    const number = value["card[number]"];
+    const network = GROUPED.test(number) ? cardNetwork2(number.replace(/ /g, "")) : null;
+    if (network === null || value["card[brand]"] !== network || !SECURITY_CODE7.test(value["card[cvc]"]) || !MONTH3.test(value["card[exp_month]"]) || !YEAR3.test(value["card[exp_year]"]) || !HOLDER2.test(value["card[cardholder]"]) || !INSTANCE.test(value.instance) || !AMOUNT2.test(value.amount) || !CURRENCY.test(value.currency) || !(value.email === "" || value.email.length <= 254 && EMAIL.test(value.email)) || !FLAGS.every((flag) => value[flag] === "true" || value[flag] === "false")) {
+        return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
+    }
+    if (value.isTokenization === "true" || value.isSubscription === "true")
+        return { verdict: refuse12("payrexx_keep_on_file"), pairs: null };
+    if (value.isPreAuthorization === "true" || value.isMoto === "true")
+        return { verdict: refuse12("payrexx_not_a_sale"), pairs: null };
+    return { verdict: CARD11, pairs };
+}
+function payrexxBodyVerdict(body) {
+    return judgeBody2(body).verdict;
+}
+function payrexxGateVerdict(url, body) {
+    const target = payrexxFrameTarget(url);
+    if (target === null)
+        return refuse12("payrexx_url_refused");
+    const verdict = payrexxBodyVerdict(body);
+    return verdict.verdict === "card" && target.pspId !== PAYREXX_PAY_PSP_ID ? refuse12("payrexx_other_provider") : verdict;
+}
+// src/komoju.js
+var KOMOJU_PSP = "komoju";
+var KOMOJU_HOST = "komoju.com";
+var KOMOJU_SECURE_TOKEN_URL = "https://komoju.com/api/v1/secure_tokens";
+var KOMOJU_TOKEN_URL = "https://komoju.com/api/v1/tokens";
+var KOMOJU_RETURN_URL_PREFIX = "https://multipay.komoju.com/secure-token-return.html?session_id=";
+var BODY_LIMIT9 = 4096;
+var URL_LIMIT4 = 128;
+var SESSION_ID = /^[a-z0-9]{25}$/;
+var SESSION_PAY_PATH = /^\/api\/v1\/sessions\/([a-z0-9]{25})\/pay$/;
+var TOKEN_ID = /^tok_[a-z0-9]{20,32}$/;
+var TOP_KEYS = /* @__PURE__ */ Object.freeze(["amount", "currency", "payment_details", "return_url"]);
+var KOMOJU_CARD_KEYS = /* @__PURE__ */ Object.freeze(["type", "name", "number", "month", "year", "verification_value", "email"]);
+var PAY_KEYS = /* @__PURE__ */ Object.freeze(["payment_details", "api_locale"]);
+var AMOUNT_MAX = 99999999;
+var CURRENCY2 = /^[A-Z]{3}$/;
+var NUMBER2 = /^[0-9]{12,19}$/;
+var MONTH4 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR4 = /^[0-9]{2}$/;
+var SECURITY_CODE8 = /^[0-9]{3,4}$/;
+var PAGE_NAME = /^[\x20-\x7e]{1,64}$/;
+var NAME_DIGITS_MAX = 11;
+var EMAIL2 = /^[\x21-\x7e]{1,64}@[\x21-\x7e]{1,189}$/;
+var LOCALE = /^[a-z]{2}(?:-[A-Za-z]{2,4})?$/;
+var PAN_LIKE3 = /(?:[0-9][ _.:-]*){12,}/;
+var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys5 = (value, keys) => {
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+};
+var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE6 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function komojuTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT4 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.hostname !== KOMOJU_HOST)
+        return null;
+    if (url === KOMOJU_SECURE_TOKEN_URL)
+        return Object.freeze({ kind: "secure_token" });
+    if (url === KOMOJU_TOKEN_URL)
+        return Object.freeze({ kind: "token" });
+    const pay = SESSION_PAY_PATH.exec(parsed.pathname);
+    return pay ? Object.freeze({ kind: "session_pay", session: pay[1] }) : null;
+}
+function readJson3(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT9)
+        return null;
+    try {
+        const value = JSON.parse(body);
+        return record9(value) && JSON.stringify(value) === body ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function carriesCard(details) {
+    return record9(details) && Object.keys(details).some((key) => /^(?:number|card_?number|pan)$/i.test(key));
+}
+function judgeSecureToken(value) {
+    if (!sameKeys5(value, TOP_KEYS))
+        return "komoju_body_unsupported";
+    const details = value.payment_details;
+    if (!Number.isSafeInteger(value.amount) || value.amount < 0 || value.amount > AMOUNT_MAX || typeof value.currency !== "string" || !CURRENCY2.test(value.currency) || typeof value.return_url !== "string" || !value.return_url.startsWith(KOMOJU_RETURN_URL_PREFIX) || !SESSION_ID.test(value.return_url.slice(KOMOJU_RETURN_URL_PREFIX.length)) || !record9(details) || !sameKeys5(details, KOMOJU_CARD_KEYS) || details.type !== "credit_card" || typeof details.name !== "string" || !PAGE_NAME.test(details.name) || details.name.trim() === "" || details.name.replace(/[^0-9]/g, "").length > NAME_DIGITS_MAX || typeof details.number !== "string" || !NUMBER2.test(details.number) || typeof details.month !== "string" || !MONTH4.test(details.month) || typeof details.year !== "string" || !YEAR4.test(details.year) || typeof details.verification_value !== "string" || !SECURITY_CODE8.test(details.verification_value) || typeof details.email !== "string" || !EMAIL2.test(details.email) || PAN_LIKE3.test(details.email)) {
+        return "komoju_body_unsupported";
+    }
+    return value.amount === 0 ? "komoju_keeps_card" : null;
+}
+function tokenPay(value) {
+    const keys = Object.keys(value);
+    return (sameKeys5(value, PAY_KEYS) || keys.length === 1 && keys[0] === "payment_details") && typeof value.payment_details === "string" && TOKEN_ID.test(value.payment_details) && (value.api_locale === void 0 || typeof value.api_locale === "string" && LOCALE.test(value.api_locale));
+}
+function komojuBodyVerdict(body, url) {
+    let target = null;
+    if (url !== void 0) {
+        target = komojuTarget(url);
+        if (target === null)
+            return refuse13("komoju_url_refused");
+    }
+    const value = readJson3(body);
+    if (target !== null && target.kind !== "secure_token") {
+        if (value !== null && target.kind === "session_pay" && tokenPay(value))
+            return CONTINUE6;
+        return refuse13(value !== null && carriesCard(value.payment_details) ? "komoju_fallback_refused" : "komoju_body_unsupported");
+    }
+    if (value === null)
+        return refuse13("komoju_body_unsupported");
+    if (target === null && tokenPay(value))
+        return CONTINUE6;
+    if (target === null && !Object.prototype.hasOwnProperty.call(value, "return_url") && carriesCard(value.payment_details)) {
+        return refuse13("komoju_fallback_refused");
+    }
+    const code = judgeSecureToken(value);
+    return code === null ? CARD12 : refuse13(code);
+}
+// src/paygent.js
+var PAYGENT_PSP = "paygent";
+var PAYGENT_TOKEN_HOSTS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze(["token.paygent.co.jp"]),
+    sandbox: Object.freeze(["sandbox.paygent.co.jp"])
+});
+var PAYGENT_TOKEN_PATH = "/n/token/request";
+var PAYGENT_BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "merchant_id",
+    "token_generate_key",
+    "card_number",
+    "card_expire_year",
+    "card_expire_month",
+    "card_cvc",
+    "card_name"
+]);
+var BODY_LIMIT10 = 2048;
+var URL_LIMIT5 = 128;
+var MERCHANT_ID = /^[0-9]{5,6}$/;
+var LIVE_KEY = /^live_[A-Za-z0-9]{24}$/;
+var SANDBOX_KEY = /^(?!live_)[a-z]{1,8}_[A-Za-z0-9]{24}$/;
+var NUMBER3 = /^[0-9]{12,19}$/;
+var YEAR5 = /^[0-9]{2}$/;
+var MONTH5 = /^(?:0?[1-9]|1[0-2])$/;
+var SECURITY_CODE9 = /^[0-9]{3,4}$/;
+var PAGE_HOLDER = /^(?:[A-Za-z][A-Za-z .'-]{0,44})?$/;
+var refuse14 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD13 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function paygentEnvironment(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT5 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.pathname !== PAYGENT_TOKEN_PATH)
+        return null;
+    if (PAYGENT_TOKEN_HOSTS.production.includes(parsed.hostname))
+        return "production";
+    if (PAYGENT_TOKEN_HOSTS.sandbox.includes(parsed.hostname))
+        return "sandbox";
+    return null;
+}
+function readBody5(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT10)
+        return null;
+    try {
+        const pairs = body.split("&").map((chunk) => {
+            const eq = chunk.indexOf("=");
+            if (eq <= 0)
+                throw new URIError("not a pair");
+            return [chunk.slice(0, eq), decodeURIComponent(chunk.slice(eq + 1))];
+        });
+        return pairs.map(([key, value]) => `${key}=${encodeURIComponent(value)}`).join("&") === body ? pairs : null;
+    }
+    catch {
+        return null;
+    }
+}
+var CVC_ONLY_KEYS = /* @__PURE__ */ Object.freeze(["merchant_id", "token_generate_key", "card_cvc", "cvc_only_flg"]);
+var sameKeys6 = (pairs, keys) => pairs.length === keys.length && pairs.every(([key], at) => key === keys[at]);
+function judgeBody3(body) {
+    const pairs = readBody5(body);
+    if (pairs === null)
+        return { code: "paygent_body_unsupported", pairs: null };
+    if (sameKeys6(pairs, CVC_ONLY_KEYS))
+        return { code: "paygent_cvc_only", pairs: null };
+    if (!sameKeys6(pairs, PAYGENT_BODY_KEYS))
+        return { code: "paygent_body_unsupported", pairs: null };
+    const value = Object.fromEntries(pairs);
+    if (!MERCHANT_ID.test(value.merchant_id) || !(LIVE_KEY.test(value.token_generate_key) || SANDBOX_KEY.test(value.token_generate_key)) || !NUMBER3.test(value.card_number) || !YEAR5.test(value.card_expire_year) || !MONTH5.test(value.card_expire_month) || !SECURITY_CODE9.test(value.card_cvc) || !PAGE_HOLDER.test(value.card_name)) {
+        return { code: "paygent_body_unsupported", pairs: null };
+    }
+    return { code: null, pairs };
+}
+function paygentBodyVerdict(body) {
+    const { code } = judgeBody3(body);
+    return code === null ? CARD13 : refuse14(code);
+}
+function paygentRequestVerdict(url, body) {
+    const environment2 = paygentEnvironment(url);
+    if (environment2 === null)
+        return refuse14("paygent_url_refused");
+    const { code, pairs } = judgeBody3(body);
+    if (code !== null)
+        return refuse14(code);
+    const key = pairs[1][1];
+    return (environment2 === "production" ? LIVE_KEY : SANDBOX_KEY).test(key) ? CARD13 : refuse14("paygent_key_environment");
+}
+// src/multipart-form.js
+var BODY_LIMIT11 = 65536;
+var CRLF = "\r\n";
+var BOUNDARY_CHARACTERS = "[A-Za-z0-9'+_.-]{1,70}";
+var BOUNDARY = new RegExp(`^${BOUNDARY_CHARACTERS}$`);
+var CONTENT_TYPE = new RegExp(`^multipart/form-data; ?boundary=(${BOUNDARY_CHARACTERS})$`, "i");
+var DISPOSITION = /^content-disposition: ?form-data; name="([^"\\\r\n]*)"$/i;
+var FILE_HINT = /^content-disposition:.*;\s*filename\*?=|^content-type:/i;
+var refusal = (code) => Object.freeze({ refusal: code });
+var listed = (list, name) => Array.isArray(list) && list.includes(name);
+function multipartBoundary(contentType) {
+    const match = typeof contentType === "string" ? CONTENT_TYPE.exec(contentType) : null;
+    return match ? match[1] : null;
+}
+function boundaryOf(body, contentType) {
+    const lineEnd = body.indexOf(CRLF);
+    const firstLine = body.startsWith("--") && lineEnd !== -1 ? body.slice(2, lineEnd) : null;
+    if (firstLine === null || !BOUNDARY.test(firstLine))
+        return null;
+    if (contentType === void 0 || contentType === null)
+        return firstLine;
+    return multipartBoundary(contentType) === firstLine ? firstLine : null;
+}
+function readMultipartForm(body, contentType) {
+    if (typeof body !== "string" || body.length > BODY_LIMIT11)
+        return refusal("multipart_not_form");
+    const boundary = boundaryOf(body, contentType);
+    if (boundary === null)
+        return refusal("multipart_not_form");
+    const dash = `--${boundary}`;
+    const delimiter = `${CRLF}${dash}`;
+    const parts = [];
+    let position = dash.length + CRLF.length;
+    for (;;) {
+        const headerEnd = body.indexOf(`${CRLF}${CRLF}`, position);
+        if (headerEnd === -1)
+            return refusal("multipart_not_form");
+        const headers = body.slice(position, headerEnd).split(CRLF);
+        if (headers.some((line) => FILE_HINT.test(line)))
+            return refusal("multipart_file_part");
+        const disposition = headers.length === 1 ? DISPOSITION.exec(headers[0]) : null;
+        if (!disposition)
+            return refusal("multipart_not_form");
+        const start = headerEnd + 2 * CRLF.length;
+        const end = body.indexOf(delimiter, start);
+        if (end === -1)
+            return refusal("multipart_not_form");
+        parts.push(Object.freeze({ name: disposition[1], value: body.slice(start, end), start, end }));
+        position = end + delimiter.length;
+        if (body.startsWith("--", position)) {
+            const rest = body.slice(position + 2);
+            return rest === "" || rest === CRLF ? Object.freeze({ boundary, parts: Object.freeze(parts) }) : refusal("multipart_not_form");
+        }
+        if (!body.startsWith(CRLF, position))
+            return refusal("multipart_not_form");
+        position += CRLF.length;
+    }
+}
+function soundRule(rule) {
+    if (!rule || typeof rule !== "object" || !Array.isArray(rule.parts) || !Array.isArray(rule.card) || rule.card.length === 0)
+        return false;
+    const names = [...rule.parts, ...rule.card];
+    if (!names.every((name) => typeof name === "string" && name !== ""))
+        return false;
+    return new Set(rule.card).size === rule.card.length && rule.card.every((name) => rule.parts.includes(name));
+}
+function judge(body, contentType, rule) {
+    if (!soundRule(rule))
+        throw new TypeError("A multipart rule lists its part names and, among them, its card parts.");
+    const read = readMultipartForm(body, contentType);
+    if (read.refusal)
+        return read;
+    if (read.parts.some((part) => !listed(rule.parts, part.name)))
+        return refusal("multipart_unknown_part");
+    for (const name of rule.card) {
+        const count = read.parts.filter((part) => part.name === name).length;
+        if (count === 0)
+            return refusal("multipart_missing_card_part");
+        if (count > 1)
+            return refusal("multipart_duplicate_card_part");
+    }
+    return read;
+}
+function multipartFormRefusal(body, contentType, rule) {
+    const read = judge(body, contentType, rule);
+    return read.refusal ?? null;
+}
+// src/pay-nl.js
+var PAY_NL_PSP = "pay_nl";
+var PAY_NL_TOKEN_URL = "https://payment.pay.nl/v1/Payment/getCardToken/json";
+var PAY_NL_PARTS = /* @__PURE__ */ Object.freeze([
+    "serviceId",
+    "requestToken",
+    "payment[method]",
+    "payment[card][number]",
+    "payment[card][name]",
+    "payment[card][cvc]",
+    "payment[card][expire_month]",
+    "payment[card][expire_year]"
+]);
+var PAY_NL_CARD_PARTS = /* @__PURE__ */ Object.freeze([
+    "payment[card][number]",
+    "payment[card][name]",
+    "payment[card][cvc]",
+    "payment[card][expire_month]",
+    "payment[card][expire_year]"
+]);
+var pin4 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), serviceIds: Object.freeze([...fields.serviceIds]) });
+var PAY_NL_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin4({ id: "weeztix", merchant: "Weeztix", origins: ["https://shop.weeztix.com"], serviceIds: ["SL-6399-2740"] })
+]);
+var RULE = /* @__PURE__ */ Object.freeze({ parts: PAY_NL_PARTS, card: PAY_NL_CARD_PARTS });
+var SERVICE_ID = /^SL-\d{4}-\d{4}$/;
+var REQUEST_TOKEN = /^[0-9a-f]{40}$/i;
+var NUMBER4 = /^[0-9]{8,19}$/;
+var HOLDER3 = /^\p{L}+(?: \p{L}+)*$/u;
+var HOLDER_LIMIT2 = 256;
+var SECURITY_CODE10 = /^[0-9]{3,4}$/;
+var MONTH6 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR6 = /^[0-9]{2}$/;
+var refuse15 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD14 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isPayNlTokenUrl(url) {
+    return url === PAY_NL_TOKEN_URL;
+}
+function readBody6(body, contentType) {
+    if (multipartFormRefusal(body, contentType, RULE) !== null)
+        return null;
+    const { parts } = readMultipartForm(body, contentType);
+    if (parts.length !== PAY_NL_PARTS.length || !parts.every((part, at) => part.name === PAY_NL_PARTS[at]))
+        return null;
+    const value = Object.fromEntries(parts.map((part) => [part.name, part.value]));
+    const name = value["payment[card][name]"];
+    if (!SERVICE_ID.test(value.serviceId) || !REQUEST_TOKEN.test(value.requestToken) || value["payment[method]"] !== "card" || !NUMBER4.test(value["payment[card][number]"]) || name.length > HOLDER_LIMIT2 || !HOLDER3.test(name) || !SECURITY_CODE10.test(value["payment[card][cvc]"]) || !MONTH6.test(value["payment[card][expire_month]"]) || !YEAR6.test(value["payment[card][expire_year]"]))
+        return null;
+    return value;
+}
+function payNlBodyVerdict(body, contentType) {
+    return readBody6(body, contentType) === null ? refuse15("pay_nl_body_unsupported") : CARD14;
+}
+var ERROR_KEYS = /* @__PURE__ */ Object.freeze(["errorId", "errorTag", "errorMessage", "errorFieldName"]);
+var REQUEST_KEYS = /* @__PURE__ */ Object.freeze(["result", ...ERROR_KEYS]);
+// src/revolut.js
+var REVOLUT_PSP = "revolut";
+var REVOLUT_HOSTS = /* @__PURE__ */ Object.freeze(["merchant.revolut.com", "sandbox-merchant.revolut.com"]);
+var REVOLUT_BODY_KEYS = /* @__PURE__ */ Object.freeze(["payment_method", "customer", "amount", "channel"]);
+var REVOLUT_CARD_FIELD_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "number",
+    "expiry_month",
+    "expiry_year",
+    "cvv",
+    "kount_session_id",
+    "billing_address",
+    "cardholder_name",
+    "shipping_address",
+    "save_for",
+    "environment"
+]);
+var REVOLUT_CARD_POPUP_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "number",
+    "expiry_month",
+    "expiry_year",
+    "cvv",
+    "kount_session_id",
+    "cardholder_name",
+    "billing_address",
+    "shipping_address",
+    "save_for",
+    "environment"
+]);
+var REVOLUT_CHANNELS = /* @__PURE__ */ Object.freeze(["WEB_SDK", "REV_CHECKOUT", "HOSTED_PAYMENT_PAGE"]);
+var BODY_LIMIT12 = 16384;
+var URL_LIMIT6 = 128;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var PAYMENTS_PATH = /^\/api\/public\/orders\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/payments$/;
+var CARD_NUMBER8 = /^[0-9]{12,19}$/;
+var SECURITY_CODE11 = /^[0-9]{3,4}$/;
+var KOUNT_SESSION = /^[0-9a-f]{32}$/;
+var AMOUNT_LIMIT = 1e11;
+var ADDRESS_KEYS = /* @__PURE__ */ Object.freeze(["country", "region", "city", "postcode", "street_line_1", "street_line_2"]);
+var ENVIRONMENT_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "color_depth",
+    "screen_width",
+    "screen_height",
+    "java_enabled",
+    "time_zone_utc_offset",
+    "challenge_window_width",
+    "browser_url",
+    "referrer_url"
+]);
+var NEW_CUSTOMER_KEYS = /* @__PURE__ */ Object.freeze(["type", "email", "name", "phone"]);
+var COUNTRY = /^[A-Z]{2}$/;
+var PHONE = /^\+?[0-9 \u00a0\/().-]{6,32}$/;
+var EMAIL3 = /^[^\s@]{1,64}@[^\s@]{1,255}$/;
+var TEXT_LIMIT2 = 256;
+var CONTROL5 = /[\u0000-\u001f\u007f]/;
+var CARD_MEMBER2 = /^(?:number|card_?number|cardnumber|cardnum|card_num|pan|cvv|cvc|cvv2)$/i;
+var record10 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own2 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var inOrder = (value, keys) => {
+    let at = 0;
+    for (const name of Object.keys(value)) {
+        while (at < keys.length && keys[at] !== name)
+            at += 1;
+        if (at === keys.length)
+            return false;
+        at += 1;
+    }
+    return true;
+};
+var wellFormed = (value) => {
+    try {
+        encodeURIComponent(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+var plainText2 = (value) => typeof value === "string" && value.length >= 1 && value.length <= TEXT_LIMIT2 && !CONTROL5.test(value) && (value.match(/[0-9]/g) ?? []).length < 12 && wellFormed(value);
+var between = (value, min, max) => Number.isSafeInteger(value) && value >= min && value <= max;
+var NETWORK = /^(?:4[0-9]{15}|4[0-9]{12}|5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12}|3[47][0-9]{13})$/;
+var luhn2 = (digits) => {
+    let sum = 0;
+    for (let at = 0; at < digits.length; at += 1) {
+        let d = digits.charCodeAt(digits.length - 1 - at) - 48;
+        if (at % 2 === 1) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+    }
+    return sum % 10 === 0;
+};
+var ANY_NETWORK = /^[2-6][0-9]{12,18}$/;
+var holdsCardShape = (text2, shape = NETWORK) => (text2.match(/[0-9]{13,}/g) ?? []).some((run) => run.length > 19 || shape.test(run) && luhn2(run));
+var phone = (value) => typeof value === "string" && PHONE.test(value) && (value.match(/[0-9]/g) ?? []).length >= 6 && (value.match(/[0-9]/g) ?? []).length <= 15;
+var refuse16 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD15 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE7 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function revolutPaymentsTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT6 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !REVOLUT_HOSTS.includes(parsed.hostname))
+        return null;
+    const match = PAYMENTS_PATH.exec(parsed.pathname);
+    return match ? Object.freeze({ host: parsed.hostname, order: match[1] }) : null;
+}
+function isRevolutPaymentsUrl(url) {
+    return revolutPaymentsTarget(url) !== null;
+}
+function readBody7(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT12)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record10(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function address(value) {
+    if (!record10(value) || !inOrder(value, ADDRESS_KEYS))
+        return false;
+    const names = Object.keys(value);
+    if (!names.some((key) => typeof value[key] === "string" && value[key].trim() !== ""))
+        return false;
+    return names.every((key) => value[key] === "" || (key === "country" ? typeof value[key] === "string" && COUNTRY.test(value[key]) : plainText2(value[key])));
+}
+function pageUrl(value) {
+    if (typeof value !== "string" || value.length > 2048 || CONTROL5.test(value) || holdsCardShape(value, ANY_NETWORK) || !wellFormed(value))
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return parsed.protocol === "https:" || parsed.protocol === "http:";
+}
+function referrerOrigin(value) {
+    if (value === "" || value === "null")
+        return true;
+    if (typeof value !== "string" || value.length > 512 || holdsCardShape(value, ANY_NETWORK))
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return (parsed.protocol === "https:" || parsed.protocol === "http:") && parsed.origin === value;
+}
+function environment(value) {
+    if (!record10(value) || !inOrder(value, ENVIRONMENT_KEYS))
+        return false;
+    return value.type === "browser" && between(value.color_depth, 0, 256) && between(value.screen_width, 0, 1e5) && between(value.screen_height, 0, 1e5) && typeof value.java_enabled === "boolean" && between(value.time_zone_utc_offset, -1440, 1440) && between(value.challenge_window_width, 1, 1e4) && (!own2(value, "browser_url") || pageUrl(value.browser_url)) && (!own2(value, "referrer_url") || referrerOrigin(value.referrer_url));
+}
+function customer(value) {
+    if (!record10(value))
+        return false;
+    if (value.type === "existing") {
+        const names = Object.keys(value);
+        return names.length === 2 && names[0] === "type" && names[1] === "id" && typeof value.id === "string" && UUID.test(value.id);
+    }
+    if (value.type !== "new" || !inOrder(value, NEW_CUSTOMER_KEYS) || !own2(value, "email"))
+        return false;
+    if (typeof value.email !== "string" || !EMAIL3.test(value.email) || !plainText2(value.email))
+        return false;
+    if (own2(value, "name") && !plainText2(value.name))
+        return false;
+    return !own2(value, "phone") || phone(value.phone);
+}
+function cardMethod(value) {
+    if (!record10(value) || value.type !== "card")
+        return "revolut_body_unsupported";
+    if (!inOrder(value, REVOLUT_CARD_FIELD_KEYS) && !inOrder(value, REVOLUT_CARD_POPUP_KEYS))
+        return "revolut_body_unsupported";
+    if (typeof value.number !== "string" || !CARD_NUMBER8.test(value.number) || !between(value.expiry_month, 1, 12) || !between(value.expiry_year, 2e3, 2099) || typeof value.cvv !== "string" || !SECURITY_CODE11.test(value.cvv))
+        return "revolut_body_unsupported";
+    if (!own2(value, "environment") || !environment(value.environment))
+        return "revolut_body_unsupported";
+    if (own2(value, "kount_session_id") && (typeof value.kount_session_id !== "string" || !KOUNT_SESSION.test(value.kount_session_id))) {
+        return "revolut_body_unsupported";
+    }
+    for (const key of ["billing_address", "shipping_address"]) {
+        if (own2(value, key) && !address(value[key]))
+            return "revolut_body_unsupported";
+    }
+    if (own2(value, "cardholder_name") && !plainText2(value.cardholder_name))
+        return "revolut_body_unsupported";
+    if (own2(value, "save_for")) {
+        if (value.save_for === "CUSTOMER" || value.save_for === "MERCHANT")
+            return "revolut_card_on_file";
+        if (value.save_for !== "NONE")
+            return "revolut_body_unsupported";
+    }
+    return null;
+}
+function namesCardValue2(parsed) {
+    const pending = record10(parsed) || Array.isArray(parsed) ? [parsed] : [];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        for (const key of Object.keys(node)) {
+            if (!Array.isArray(node) && CARD_MEMBER2.test(key))
+                return true;
+            const value = node[key];
+            if (value !== null && typeof value === "object")
+                pending.push(value);
+        }
+    }
+    return false;
+}
+function revolutBodyVerdict(body) {
+    const value = readBody7(body);
+    if (value === null) {
+        return body === void 0 || body === null || body === "" ? CONTINUE7 : refuse16("revolut_body_unsupported");
+    }
+    const method = record10(value.payment_method) ? value.payment_method.type : void 0;
+    if (method !== "card")
+        return namesCardValue2(value) ? refuse16("revolut_body_unsupported") : CONTINUE7;
+    if (!inOrder(value, REVOLUT_BODY_KEYS) || Object.keys(value).length !== REVOLUT_BODY_KEYS.length)
+        return refuse16("revolut_body_unsupported");
+    const code = cardMethod(value.payment_method);
+    if (code !== null)
+        return refuse16(code);
+    if (!customer(value.customer) || !between(value.amount, 1, AMOUNT_LIMIT) || !REVOLUT_CHANNELS.includes(value.channel)) {
+        return refuse16("revolut_body_unsupported");
+    }
+    return CARD15;
+}
+// src/sumup.js
+var SUMUP_PSP = "sumup";
+var SUMUP_API_HOST = "api.sumup.com";
+var SUMUP_CHECKOUT_PATH = "/v0.2/checkouts/";
+var BODY_LIMIT13 = 16384;
+var CHECKOUT_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-5][0-9a-f]{3}-[089ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var ROOT_KEYS5 = /* @__PURE__ */ Object.freeze([
+    "payment_type",
+    "device_information",
+    "method_details",
+    "personal_details",
+    "card",
+    "installments",
+    "mandate",
+    "lxn_session_token",
+    "customer_details",
+    "sca_experience"
+]);
+var CARD_KEYS7 = /* @__PURE__ */ Object.freeze(["zip_code", "name", "number", "expiry_month", "expiry_year", "cvv"]);
+var PERSONAL_KEYS = /* @__PURE__ */ Object.freeze(["first_name", "last_name", "email", "address", "birth_date", "phone"]);
+var ADDRESS_KEYS2 = /* @__PURE__ */ Object.freeze(["country", "city", "line1", "line2", "postal_code", "state"]);
+var CUSTOMER_KEYS = /* @__PURE__ */ Object.freeze(["first_name", "last_name", "email", "note_for_merchant"]);
+var CARD_NUMBER9 = /^[0-9]{12,19}$/;
+var MONTH7 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR7 = /^(?:[0-9]{2}|[0-9]{4})$/;
+var CODE2 = /^[0-9]{3,4}$/;
+var BASE643 = /^[A-Za-z0-9+/]{4,4096}={0,2}$/;
+var BASE64_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var DEVICE_KEYS2 = /* @__PURE__ */ Object.freeze([
+    "user_agent",
+    "language",
+    "timezone_offset",
+    "screen_width",
+    "screen_height",
+    "color_depth",
+    "modal_width",
+    "modal_height",
+    "adblock",
+    "realIp",
+    "route"
+]);
+var RISK_TOKEN = /^[A-Za-z0-9_+/=-]+\.[A-Za-z0-9_+/=-]+\.[A-Za-z0-9_+/=-]*$/;
+var RISK_TOKEN_LIMIT = 4096;
+var PAN_LIKE4 = /(?:[0-9][ _.:-]*){12,}/;
+var DATE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/;
+var COUNTRY2 = /^[A-Z]{2}$/;
+var PHONE2 = /^[ #0-9_+\/().-]{1,32}$/;
+var CARD_PAYMENT2 = "card";
+var SCA_EXPERIENCE = "iframe";
+var record11 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var refuse17 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD16 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function orderedSubset(value, keys) {
+    let at = -1;
+    for (const key of Object.keys(value)) {
+        const next = keys.indexOf(key);
+        if (next <= at)
+            return false;
+        at = next;
+    }
+    return true;
+}
+function luhn3(digits) {
+    let sum = 0;
+    for (let at = 0; at < digits.length; at += 1) {
+        let digit = Number(digits[digits.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0 && sum > 0;
+}
+var printable = (value) => [...value].every((ch) => ch.charCodeAt(0) >= 32 && ch.charCodeAt(0) !== 127);
+function typed(value, limit = 256) {
+    return typeof value === "string" && value.length >= 1 && value.length <= limit && !PAN_LIKE4.test(value) && printable(value);
+}
+function decodeBase64(text2) {
+    if (typeof text2 !== "string" || !BASE643.test(text2) || text2.length % 4 !== 0)
+        return null;
+    let bits = 0;
+    let value = 0;
+    let out = "";
+    for (const ch of text2.replace(/=+$/, "")) {
+        value = (value << 6 | BASE64_ALPHABET.indexOf(ch)) & 16777215;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out += String.fromCharCode(value >> bits & 255);
+        }
+    }
+    return out;
+}
+function soundDevice(text2) {
+    const json = decodeBase64(text2);
+    if (json === null)
+        return false;
+    let value;
+    try {
+        value = JSON.parse(json);
+        if (JSON.stringify(value) !== json)
+            return false;
+    }
+    catch {
+        return false;
+    }
+    if (!record11(value) || Object.keys(value).join() !== "deviceId,components" || typeof value.deviceId !== "string" || value.deviceId.length > 256 || PAN_LIKE4.test(value.deviceId) || !printable(value.deviceId) || !Array.isArray(value.components) || value.components.length !== DEVICE_KEYS2.length) {
+        return false;
+    }
+    return value.components.every((component, at) => record11(component) && Object.keys(component).join() === "key,value" && component.key === DEVICE_KEYS2[at] && typeof component.value === "string" && component.value.length <= 1024 && !PAN_LIKE4.test(component.value) && printable(component.value));
+}
+var soundRiskToken = (token) => typeof token === "string" && token.length <= RISK_TOKEN_LIMIT && RISK_TOKEN.test(token) && !PAN_LIKE4.test(token);
+function sumupCheckoutUrl(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("#") || url.includes("?"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    if (parsed.hostname !== SUMUP_API_HOST || !parsed.pathname.startsWith(SUMUP_CHECKOUT_PATH))
+        return null;
+    const checkoutId = parsed.pathname.slice(SUMUP_CHECKOUT_PATH.length);
+    return CHECKOUT_ID.test(checkoutId) ? Object.freeze({ checkoutId }) : null;
+}
+function readBody8(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT13)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record11(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function soundCard(card) {
+    if (!record11(card) || !orderedSubset(card, CARD_KEYS7))
+        return false;
+    if (typeof card.number !== "string" || !CARD_NUMBER9.test(card.number) || !luhn3(card.number))
+        return false;
+    if (typeof card.expiry_month !== "string" || !MONTH7.test(card.expiry_month))
+        return false;
+    if (typeof card.expiry_year !== "string" || !YEAR7.test(card.expiry_year))
+        return false;
+    if (typeof card.cvv !== "string" || !CODE2.test(card.cvv))
+        return false;
+    if (card.name !== void 0 && (!typed(card.name, 129) || /[0-9]/.test(card.name)))
+        return false;
+    if (card.zip_code !== void 0 && !typed(card.zip_code, 10))
+        return false;
+    return true;
+}
+function soundPersonal(details) {
+    if (!record11(details) || !orderedSubset(details, PERSONAL_KEYS) || Object.keys(details).length === 0)
+        return false;
+    for (const key of ["first_name", "last_name", "email"]) {
+        if (details[key] !== void 0 && !typed(details[key]))
+            return false;
+    }
+    if (details.birth_date !== void 0 && (typeof details.birth_date !== "string" || !DATE.test(details.birth_date)))
+        return false;
+    if (details.phone !== void 0 && (typeof details.phone !== "string" || !PHONE2.test(details.phone) || (details.phone.match(/[0-9]/g) ?? []).length > 15))
+        return false;
+    if (details.address === void 0)
+        return true;
+    const address2 = details.address;
+    if (!record11(address2) || !orderedSubset(address2, ADDRESS_KEYS2) || Object.keys(address2).length === 0)
+        return false;
+    if (address2.country !== void 0 && (typeof address2.country !== "string" || !COUNTRY2.test(address2.country)))
+        return false;
+    return ["city", "line1", "line2", "postal_code", "state"].every((key) => address2[key] === void 0 || typed(address2[key]));
+}
+function soundCustomer(details) {
+    if (!record11(details) || !orderedSubset(details, CUSTOMER_KEYS) || Object.keys(details).length === 0)
+        return false;
+    return CUSTOMER_KEYS.every((key) => details[key] === void 0 || typed(details[key], key === "note_for_merchant" ? 1024 : 256));
+}
+function sumupBodyVerdict(body, url) {
+    if (url !== void 0 && sumupCheckoutUrl(url) === null)
+        return refuse17("sumup_url_refused");
+    const value = readBody8(body);
+    if (value === null || !orderedSubset(value, ROOT_KEYS5))
+        return refuse17("sumup_body_unsupported");
+    if (value.payment_type !== CARD_PAYMENT2 || !soundDevice(value.device_information) || !soundCard(value.card) || value.installments !== 1) {
+        return refuse17("sumup_body_unsupported");
+    }
+    if (value.method_details !== void 0 && !(record11(value.method_details) && orderedSubset(value.method_details, ["zip_code"]) && typed(value.method_details.zip_code, 10)))
+        return refuse17("sumup_body_unsupported");
+    if (value.personal_details !== void 0 && !soundPersonal(value.personal_details))
+        return refuse17("sumup_body_unsupported");
+    if (value.customer_details !== void 0 && !soundCustomer(value.customer_details))
+        return refuse17("sumup_body_unsupported");
+    if (value.lxn_session_token !== void 0 && !soundRiskToken(value.lxn_session_token))
+        return refuse17("sumup_body_unsupported");
+    if (value.sca_experience !== void 0 && value.sca_experience !== SCA_EXPERIENCE)
+        return refuse17("sumup_body_unsupported");
+    if (value.mandate !== void 0)
+        return refuse17("sumup_card_saving_refused");
+    return CARD16;
+}
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -1549,6 +2459,8 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "wix_payments_url_refused" };
         return wixPaymentsBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === KOMOJU_PSP)
+        return komojuBodyVerdict(body, url);
     if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
         if (url !== void 0 && !isPaddleVgsCardsUrl(url))
             return { verdict: "refuse", code: "paddle_vgs_url_refused" };
@@ -1559,6 +2471,17 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "payfast_url_refused" };
         return payfastBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === PAYREXX_PSP) {
+        return url !== void 0 ? payrexxGateVerdict(url, body) : payrexxBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYGENT_PSP) {
+        return url !== void 0 ? paygentRequestVerdict(url, body) : paygentBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAY_NL_PSP) {
+        if (url !== void 0 && !isPayNlTokenUrl(url))
+            return { verdict: "refuse", code: "pay_nl_url_refused" };
+        return payNlBodyVerdict(body);
+    }
     if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
         const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
         if (url !== void 0 && target === null)
@@ -1573,6 +2496,13 @@ function processorGate(recognizer, url, body) {
     }
     if (recognizer && recognizer.psp === GOPAY_PSP)
         return gopayBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === REVOLUT_PSP) {
+        if (url !== void 0 && !isRevolutPaymentsUrl(url))
+            return { verdict: "refuse", code: "revolut_url_refused" };
+        return revolutBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === SUMUP_PSP)
+        return sumupBodyVerdict(body, url);
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {
@@ -1690,7 +2620,7 @@ function splitCardLeg(recognizer, body) {
     const absorb = list(split.absorb);
     const pass = list(split.pass);
     const sibling = list(split.siblingKeys);
-    const own2 = [];
+    const own3 = [];
     const seen = /* @__PURE__ */ new Set();
     for (const chunk of body.split("&")) {
         const eq = chunk.indexOf("=");
@@ -1707,13 +2637,13 @@ function splitCardLeg(recognizer, body) {
             return null;
         seen.add(key);
         if (!sibling.includes(key))
-            own2.push(key);
+            own3.push(key);
     }
-    if (own2.length === 0)
+    if (own3.length === 0)
         return null;
-    if (own2.every((key) => absorb.includes(key)))
+    if (own3.every((key) => absorb.includes(key)))
         return "absorb";
-    if (own2.every((key) => pass.includes(key)))
+    if (own3.every((key) => pass.includes(key)))
         return "pass";
     return null;
 }