@agent-cards/sdk 0.23.18 → 0.23.20

package/dist/card-fields.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 0021d69ee6583030342d0f5ed625f1cb4bec88236f01fbf7450e41293f6f450d
+// artifact-sha256: 7e485110ac882bd8e19be7369be8487a532ae7dc93bde3bf660fecb1851f500e
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -101,8 +101,8 @@ function parseConvergeBody(body) {
     return parsed;
 }
 function convergeAmountCents(value) {
-    const text2 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
-    const m = typeof text2 === "string" ? AMOUNT.exec(text2) : null;
+    const text3 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
+    const m = typeof text3 === "string" ? AMOUNT.exec(text3) : null;
     if (!m)
         return null;
     const cents = Number(m[1]) * 100 + Number(((m[2] ?? "") + "00").slice(0, 2));
@@ -302,11 +302,11 @@ var MONERIS_TOKENIZE_PATH = "/HPPtoken/request.php";
 function monerisTokenizeEnvironment(url) {
     if (typeof url !== "string")
         return null;
-    for (const environment of 
+    for (const environment2 of 
     /** @type {const} */
     ["production", "sandbox"]) {
-        if (MONERIS_TOKENIZE_HOSTS[environment].some((host) => url === `https://${host}${MONERIS_TOKENIZE_PATH}`))
-            return environment;
+        if (MONERIS_TOKENIZE_HOSTS[environment2].some((host) => url === `https://${host}${MONERIS_TOKENIZE_PATH}`))
+            return environment2;
     }
     return null;
 }
@@ -357,8 +357,8 @@ var CONTROL = /[\u0000-\u001f\u007f]/;
 var cardLikeName = (name) => (name.match(/[0-9]/g) ?? []).length >= 12;
 var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD4 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -582,9 +582,9 @@ var K = /* @__PURE__ */ new Uint32Array([
     3329325298
 ]);
 var rotr = (x, n) => x >>> n | x << 32 - n;
-function utf8(text2) {
+function utf8(text3) {
     const out = [];
-    for (const char of text2) {
+    for (const char of text3) {
         let cp = char.codePointAt(0);
         if (cp >= 55296 && cp <= 57343)
             cp = 65533;
@@ -746,13 +746,13 @@ var PADDLE_TOKENEX_KEYS = /* @__PURE__ */ Object.freeze({
         sha256: "92529bd289bb24d52a1bdcc42edc9ac0bb1dacbb58f7568573d44771e1287762"
     })
 });
-function paddleTokenexKey(environment) {
-    if (environment !== "sandbox" && environment !== "production")
+function paddleTokenexKey(environment2) {
+    if (environment2 !== "sandbox" && environment2 !== "production")
         return null;
-    return PADDLE_TOKENEX_KEYS[environment] ?? null;
+    return PADDLE_TOKENEX_KEYS[environment2] ?? null;
 }
-function paddleTokenexKeyBytes(environment) {
-    const key = paddleTokenexKey(environment);
+function paddleTokenexKeyBytes(environment2) {
+    const key = paddleTokenexKey(environment2);
     if (!key)
         return null;
     try {
@@ -767,8 +767,8 @@ var PADDLE_TOKENEX_PSP = "paddle_tokenex";
 var PADDLE_TOKENEX_FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys2 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -813,11 +813,11 @@ function isBase64OfBytes(value, bytes) {
     const pad = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
     return value.length / 4 * 3 - pad === bytes && btoa(atob(value)) === value;
 }
-function isPaddleTokenexCiphertext(value, environment) {
-    const bytes = paddleTokenexKeyBytes(environment);
+function isPaddleTokenexCiphertext(value, environment2) {
+    const bytes = paddleTokenexKeyBytes(environment2);
     return bytes !== null && isBase64OfBytes(value, bytes);
 }
-function readPay(body, line, environment) {
+function readPay(body, line, environment2) {
     if (typeof body !== "string" || body === "" || body.length > PAY_BODY_LIMIT)
         return null;
     let value;
@@ -849,11 +849,11 @@ function readPay(body, line, environment) {
         return null;
     for (const name of CARD_KEYS3) {
         const blob = tokenex[name];
-        if (environment === void 0) {
+        if (environment2 === void 0) {
             if (typeof blob !== "string" || !BASE642.test(blob) || blob.length < 4 || blob.length > 4096)
                 return null;
         }
-        else if (!isPaddleTokenexCiphertext(blob, environment))
+        else if (!isPaddleTokenexCiphertext(blob, environment2))
             return null;
     }
     if (tokenex.encrypted_card_number === tokenex.encrypted_cvv)
@@ -1257,8 +1257,8 @@ var TEXT_LIMIT = 256;
 var CONTROL4 = /[\u0000-\u001f\u007f]/;
 var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys3 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var plainText = (value) => typeof value === "string" && value.length <= TEXT_LIMIT && !CONTROL4.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -1368,14 +1368,14 @@ function readJson2(body) {
     catch {
         return { parsed: null, exact: false };
     }
-    let exact = false;
+    let exact2 = false;
     try {
-        exact = body.length <= BODY_LIMIT6 && JSON.stringify(parsed) === body;
+        exact2 = body.length <= BODY_LIMIT6 && JSON.stringify(parsed) === body;
     }
     catch {
-        exact = false;
+        exact2 = false;
     }
-    return { parsed, exact };
+    return { parsed, exact: exact2 };
 }
 function billingValue(value) {
     if (value === UNDEFINED)
@@ -1430,14 +1430,14 @@ function attachType(parsed) {
     return typeof type === "string" ? type : null;
 }
 function paymongoBodyVerdict(body, session) {
-    const { parsed, exact } = readJson2(body);
+    const { parsed, exact: exact2 } = readJson2(body);
     const type = parsed === null ? null : attachType(parsed);
     if (type !== "card") {
         if (parsed === null)
             return body === void 0 || body === null || body === "" ? CONTINUE4 : refuse10("paymongo_body_unsupported");
         return namesCardValue(parsed) ? refuse10("paymongo_body_unsupported") : CONTINUE4;
     }
-    if (!exact)
+    if (!exact2)
         return refuse10("paymongo_body_unsupported");
     const code = judgeCardAttach(parsed, session);
     return code === null ? CARD9 : refuse10(code);
@@ -1460,8 +1460,8 @@ var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
 var CARD_PAYMENT = "PAYMENT_CARD";
 var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys4 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1490,8 +1490,8 @@ function gopayCardFormUrl(url) {
     }
     if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
         return null;
-    const environment = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
-    if (environment === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
+    const environment2 = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
+    if (environment2 === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
         return null;
     if (!TOKEN2.test(parsed.pathname.slice(GOPAY_CARD_FORM_PATH.length)))
         return null;
@@ -1503,7 +1503,7 @@ function gopayCardFormUrl(url) {
     const version = parsed.searchParams.get("ver");
     if (signature === null || !SIGNATURE.test(signature) || language !== null && !LANGUAGE.test(language) || version !== null && !VERSION.test(version))
         return null;
-    return Object.freeze({ host: parsed.hostname, environment, signature });
+    return Object.freeze({ host: parsed.hostname, environment: environment2, signature });
 }
 function readBody4(body) {
     if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
@@ -1658,6 +1658,9 @@ function payrexxGateVerdict(url, body) {
     const verdict = payrexxBodyVerdict(body);
     return verdict.verdict === "card" && target.pspId !== PAYREXX_PAY_PSP_ID ? refuse12("payrexx_other_provider") : verdict;
 }
+var PAYREXX_FOLLOW_UP_WINDOW_MS = 15 * 60 * 1e3;
+var PAYREXX_FOLLOW_UP_IDLE_MS = 60 * 1e3;
+var PAYREXX_FOLLOW_UP_CHALLENGE_MS = 11 * 60 * 1e3;
 // src/komoju.js
 var KOMOJU_PSP = "komoju";
 var KOMOJU_HOST = "komoju.com";
@@ -1685,8 +1688,8 @@ var LOCALE = /^[a-z]{2}(?:-[A-Za-z]{2,4})?$/;
 var PAN_LIKE3 = /(?:[0-9][ _.:-]*){12,}/;
 var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys5 = (value, keys) => {
-    const own2 = Object.keys(value);
-    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
 };
 var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1843,14 +1846,14 @@ function paygentBodyVerdict(body) {
     return code === null ? CARD13 : refuse14(code);
 }
 function paygentRequestVerdict(url, body) {
-    const environment = paygentEnvironment(url);
-    if (environment === null)
+    const environment2 = paygentEnvironment(url);
+    if (environment2 === null)
         return refuse14("paygent_url_refused");
     const { code, pairs } = judgeBody3(body);
     if (code !== null)
         return refuse14(code);
     const key = pairs[1][1];
-    return (environment === "production" ? LIVE_KEY : SANDBOX_KEY).test(key) ? CARD13 : refuse14("paygent_key_environment");
+    return (environment2 === "production" ? LIVE_KEY : SANDBOX_KEY).test(key) ? CARD13 : refuse14("paygent_key_environment");
 }
 // src/multipart-form.js
 var BODY_LIMIT11 = 65536;
@@ -1994,6 +1997,907 @@ function payNlBodyVerdict(body, contentType) {
 }
 var ERROR_KEYS = /* @__PURE__ */ Object.freeze(["errorId", "errorTag", "errorMessage", "errorFieldName"]);
 var REQUEST_KEYS = /* @__PURE__ */ Object.freeze(["result", ...ERROR_KEYS]);
+// src/revolut.js
+var REVOLUT_PSP = "revolut";
+var REVOLUT_HOSTS = /* @__PURE__ */ Object.freeze(["merchant.revolut.com", "sandbox-merchant.revolut.com"]);
+var REVOLUT_BODY_KEYS = /* @__PURE__ */ Object.freeze(["payment_method", "customer", "amount", "channel"]);
+var REVOLUT_CARD_FIELD_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "number",
+    "expiry_month",
+    "expiry_year",
+    "cvv",
+    "kount_session_id",
+    "billing_address",
+    "cardholder_name",
+    "shipping_address",
+    "save_for",
+    "environment"
+]);
+var REVOLUT_CARD_POPUP_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "number",
+    "expiry_month",
+    "expiry_year",
+    "cvv",
+    "kount_session_id",
+    "cardholder_name",
+    "billing_address",
+    "shipping_address",
+    "save_for",
+    "environment"
+]);
+var REVOLUT_CHANNELS = /* @__PURE__ */ Object.freeze(["WEB_SDK", "REV_CHECKOUT", "HOSTED_PAYMENT_PAGE"]);
+var BODY_LIMIT12 = 16384;
+var URL_LIMIT6 = 128;
+var UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var PAYMENTS_PATH = /^\/api\/public\/orders\/([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\/payments$/;
+var CARD_NUMBER8 = /^[0-9]{12,19}$/;
+var SECURITY_CODE11 = /^[0-9]{3,4}$/;
+var KOUNT_SESSION = /^[0-9a-f]{32}$/;
+var AMOUNT_LIMIT = 1e11;
+var ADDRESS_KEYS = /* @__PURE__ */ Object.freeze(["country", "region", "city", "postcode", "street_line_1", "street_line_2"]);
+var ENVIRONMENT_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "color_depth",
+    "screen_width",
+    "screen_height",
+    "java_enabled",
+    "time_zone_utc_offset",
+    "challenge_window_width",
+    "browser_url",
+    "referrer_url"
+]);
+var NEW_CUSTOMER_KEYS = /* @__PURE__ */ Object.freeze(["type", "email", "name", "phone"]);
+var COUNTRY = /^[A-Z]{2}$/;
+var PHONE = /^\+?[0-9 \u00a0\/().-]{6,32}$/;
+var EMAIL3 = /^[^\s@]{1,64}@[^\s@]{1,255}$/;
+var TEXT_LIMIT2 = 256;
+var CONTROL5 = /[\u0000-\u001f\u007f]/;
+var CARD_MEMBER2 = /^(?:number|card_?number|cardnumber|cardnum|card_num|pan|cvv|cvc|cvv2)$/i;
+var record10 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own2 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var inOrder = (value, keys) => {
+    let at = 0;
+    for (const name of Object.keys(value)) {
+        while (at < keys.length && keys[at] !== name)
+            at += 1;
+        if (at === keys.length)
+            return false;
+        at += 1;
+    }
+    return true;
+};
+var wellFormed = (value) => {
+    try {
+        encodeURIComponent(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+var plainText2 = (value) => typeof value === "string" && value.length >= 1 && value.length <= TEXT_LIMIT2 && !CONTROL5.test(value) && (value.match(/[0-9]/g) ?? []).length < 12 && wellFormed(value);
+var between = (value, min, max) => Number.isSafeInteger(value) && value >= min && value <= max;
+var NETWORK = /^(?:4[0-9]{15}|4[0-9]{12}|5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12}|3[47][0-9]{13})$/;
+var luhn2 = (digits) => {
+    let sum = 0;
+    for (let at = 0; at < digits.length; at += 1) {
+        let d = digits.charCodeAt(digits.length - 1 - at) - 48;
+        if (at % 2 === 1) {
+            d *= 2;
+            if (d > 9)
+                d -= 9;
+        }
+        sum += d;
+    }
+    return sum % 10 === 0;
+};
+var ANY_NETWORK = /^[2-6][0-9]{12,18}$/;
+var holdsCardShape = (text3, shape = NETWORK) => (text3.match(/[0-9]{13,}/g) ?? []).some((run) => run.length > 19 || shape.test(run) && luhn2(run));
+var phone = (value) => typeof value === "string" && PHONE.test(value) && (value.match(/[0-9]/g) ?? []).length >= 6 && (value.match(/[0-9]/g) ?? []).length <= 15;
+var refuse16 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD15 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE7 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function revolutPaymentsTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT6 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !REVOLUT_HOSTS.includes(parsed.hostname))
+        return null;
+    const match = PAYMENTS_PATH.exec(parsed.pathname);
+    return match ? Object.freeze({ host: parsed.hostname, order: match[1] }) : null;
+}
+function isRevolutPaymentsUrl(url) {
+    return revolutPaymentsTarget(url) !== null;
+}
+function readBody7(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT12)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record10(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function address(value) {
+    if (!record10(value) || !inOrder(value, ADDRESS_KEYS))
+        return false;
+    const names = Object.keys(value);
+    if (!names.some((key) => typeof value[key] === "string" && value[key].trim() !== ""))
+        return false;
+    return names.every((key) => value[key] === "" || (key === "country" ? typeof value[key] === "string" && COUNTRY.test(value[key]) : plainText2(value[key])));
+}
+function pageUrl(value) {
+    if (typeof value !== "string" || value.length > 2048 || CONTROL5.test(value) || holdsCardShape(value, ANY_NETWORK) || !wellFormed(value))
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return parsed.protocol === "https:" || parsed.protocol === "http:";
+}
+function referrerOrigin(value) {
+    if (value === "" || value === "null")
+        return true;
+    if (typeof value !== "string" || value.length > 512 || holdsCardShape(value, ANY_NETWORK))
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return (parsed.protocol === "https:" || parsed.protocol === "http:") && parsed.origin === value;
+}
+function environment(value) {
+    if (!record10(value) || !inOrder(value, ENVIRONMENT_KEYS))
+        return false;
+    return value.type === "browser" && between(value.color_depth, 0, 256) && between(value.screen_width, 0, 1e5) && between(value.screen_height, 0, 1e5) && typeof value.java_enabled === "boolean" && between(value.time_zone_utc_offset, -1440, 1440) && between(value.challenge_window_width, 1, 1e4) && (!own2(value, "browser_url") || pageUrl(value.browser_url)) && (!own2(value, "referrer_url") || referrerOrigin(value.referrer_url));
+}
+function customer(value) {
+    if (!record10(value))
+        return false;
+    if (value.type === "existing") {
+        const names = Object.keys(value);
+        return names.length === 2 && names[0] === "type" && names[1] === "id" && typeof value.id === "string" && UUID.test(value.id);
+    }
+    if (value.type !== "new" || !inOrder(value, NEW_CUSTOMER_KEYS) || !own2(value, "email"))
+        return false;
+    if (typeof value.email !== "string" || !EMAIL3.test(value.email) || !plainText2(value.email))
+        return false;
+    if (own2(value, "name") && !plainText2(value.name))
+        return false;
+    return !own2(value, "phone") || phone(value.phone);
+}
+function cardMethod(value) {
+    if (!record10(value) || value.type !== "card")
+        return "revolut_body_unsupported";
+    if (!inOrder(value, REVOLUT_CARD_FIELD_KEYS) && !inOrder(value, REVOLUT_CARD_POPUP_KEYS))
+        return "revolut_body_unsupported";
+    if (typeof value.number !== "string" || !CARD_NUMBER8.test(value.number) || !between(value.expiry_month, 1, 12) || !between(value.expiry_year, 2e3, 2099) || typeof value.cvv !== "string" || !SECURITY_CODE11.test(value.cvv))
+        return "revolut_body_unsupported";
+    if (!own2(value, "environment") || !environment(value.environment))
+        return "revolut_body_unsupported";
+    if (own2(value, "kount_session_id") && (typeof value.kount_session_id !== "string" || !KOUNT_SESSION.test(value.kount_session_id))) {
+        return "revolut_body_unsupported";
+    }
+    for (const key of ["billing_address", "shipping_address"]) {
+        if (own2(value, key) && !address(value[key]))
+            return "revolut_body_unsupported";
+    }
+    if (own2(value, "cardholder_name") && !plainText2(value.cardholder_name))
+        return "revolut_body_unsupported";
+    if (own2(value, "save_for")) {
+        if (value.save_for === "CUSTOMER" || value.save_for === "MERCHANT")
+            return "revolut_card_on_file";
+        if (value.save_for !== "NONE")
+            return "revolut_body_unsupported";
+    }
+    return null;
+}
+function namesCardValue2(parsed) {
+    const pending = record10(parsed) || Array.isArray(parsed) ? [parsed] : [];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        for (const key of Object.keys(node)) {
+            if (!Array.isArray(node) && CARD_MEMBER2.test(key))
+                return true;
+            const value = node[key];
+            if (value !== null && typeof value === "object")
+                pending.push(value);
+        }
+    }
+    return false;
+}
+function revolutBodyVerdict(body) {
+    const value = readBody7(body);
+    if (value === null) {
+        return body === void 0 || body === null || body === "" ? CONTINUE7 : refuse16("revolut_body_unsupported");
+    }
+    const method = record10(value.payment_method) ? value.payment_method.type : void 0;
+    if (method !== "card")
+        return namesCardValue2(value) ? refuse16("revolut_body_unsupported") : CONTINUE7;
+    if (!inOrder(value, REVOLUT_BODY_KEYS) || Object.keys(value).length !== REVOLUT_BODY_KEYS.length)
+        return refuse16("revolut_body_unsupported");
+    const code = cardMethod(value.payment_method);
+    if (code !== null)
+        return refuse16(code);
+    if (!customer(value.customer) || !between(value.amount, 1, AMOUNT_LIMIT) || !REVOLUT_CHANNELS.includes(value.channel)) {
+        return refuse16("revolut_body_unsupported");
+    }
+    return CARD15;
+}
+// src/sumup.js
+var SUMUP_PSP = "sumup";
+var SUMUP_API_HOST = "api.sumup.com";
+var SUMUP_CHECKOUT_PATH = "/v0.2/checkouts/";
+var BODY_LIMIT13 = 16384;
+var CHECKOUT_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-5][0-9a-f]{3}-[089ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+var ROOT_KEYS5 = /* @__PURE__ */ Object.freeze([
+    "payment_type",
+    "device_information",
+    "method_details",
+    "personal_details",
+    "card",
+    "installments",
+    "mandate",
+    "lxn_session_token",
+    "customer_details",
+    "sca_experience"
+]);
+var CARD_KEYS7 = /* @__PURE__ */ Object.freeze(["zip_code", "name", "number", "expiry_month", "expiry_year", "cvv"]);
+var PERSONAL_KEYS = /* @__PURE__ */ Object.freeze(["first_name", "last_name", "email", "address", "birth_date", "phone"]);
+var ADDRESS_KEYS2 = /* @__PURE__ */ Object.freeze(["country", "city", "line1", "line2", "postal_code", "state"]);
+var CUSTOMER_KEYS = /* @__PURE__ */ Object.freeze(["first_name", "last_name", "email", "note_for_merchant"]);
+var CARD_NUMBER9 = /^[0-9]{12,19}$/;
+var MONTH7 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR7 = /^(?:[0-9]{2}|[0-9]{4})$/;
+var CODE2 = /^[0-9]{3,4}$/;
+var BASE643 = /^[A-Za-z0-9+/]{4,4096}={0,2}$/;
+var BASE64_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var DEVICE_KEYS2 = /* @__PURE__ */ Object.freeze([
+    "user_agent",
+    "language",
+    "timezone_offset",
+    "screen_width",
+    "screen_height",
+    "color_depth",
+    "modal_width",
+    "modal_height",
+    "adblock",
+    "realIp",
+    "route"
+]);
+var RISK_TOKEN = /^[A-Za-z0-9_+/=-]+\.[A-Za-z0-9_+/=-]+\.[A-Za-z0-9_+/=-]*$/;
+var RISK_TOKEN_LIMIT = 4096;
+var PAN_LIKE4 = /(?:[0-9][ _.:-]*){12,}/;
+var DATE = /^[0-9]{4}-[0-9]{2}-[0-9]{2}$/;
+var COUNTRY2 = /^[A-Z]{2}$/;
+var PHONE2 = /^[ #0-9_+\/().-]{1,32}$/;
+var CARD_PAYMENT2 = "card";
+var SCA_EXPERIENCE = "iframe";
+var record11 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var refuse17 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD16 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function orderedSubset(value, keys) {
+    let at = -1;
+    for (const key of Object.keys(value)) {
+        const next = keys.indexOf(key);
+        if (next <= at)
+            return false;
+        at = next;
+    }
+    return true;
+}
+function luhn3(digits) {
+    let sum = 0;
+    for (let at = 0; at < digits.length; at += 1) {
+        let digit = Number(digits[digits.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0 && sum > 0;
+}
+var printable = (value) => [...value].every((ch) => ch.charCodeAt(0) >= 32 && ch.charCodeAt(0) !== 127);
+function typed(value, limit = 256) {
+    return typeof value === "string" && value.length >= 1 && value.length <= limit && !PAN_LIKE4.test(value) && printable(value);
+}
+function decodeBase64(text3) {
+    if (typeof text3 !== "string" || !BASE643.test(text3) || text3.length % 4 !== 0)
+        return null;
+    let bits = 0;
+    let value = 0;
+    let out = "";
+    for (const ch of text3.replace(/=+$/, "")) {
+        value = (value << 6 | BASE64_ALPHABET.indexOf(ch)) & 16777215;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out += String.fromCharCode(value >> bits & 255);
+        }
+    }
+    return out;
+}
+function soundDevice(text3) {
+    const json = decodeBase64(text3);
+    if (json === null)
+        return false;
+    let value;
+    try {
+        value = JSON.parse(json);
+        if (JSON.stringify(value) !== json)
+            return false;
+    }
+    catch {
+        return false;
+    }
+    if (!record11(value) || Object.keys(value).join() !== "deviceId,components" || typeof value.deviceId !== "string" || value.deviceId.length > 256 || PAN_LIKE4.test(value.deviceId) || !printable(value.deviceId) || !Array.isArray(value.components) || value.components.length !== DEVICE_KEYS2.length) {
+        return false;
+    }
+    return value.components.every((component, at) => record11(component) && Object.keys(component).join() === "key,value" && component.key === DEVICE_KEYS2[at] && typeof component.value === "string" && component.value.length <= 1024 && !PAN_LIKE4.test(component.value) && printable(component.value));
+}
+var soundRiskToken = (token) => typeof token === "string" && token.length <= RISK_TOKEN_LIMIT && RISK_TOKEN.test(token) && !PAN_LIKE4.test(token);
+function sumupCheckoutUrl(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("#") || url.includes("?"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    if (parsed.hostname !== SUMUP_API_HOST || !parsed.pathname.startsWith(SUMUP_CHECKOUT_PATH))
+        return null;
+    const checkoutId = parsed.pathname.slice(SUMUP_CHECKOUT_PATH.length);
+    return CHECKOUT_ID.test(checkoutId) ? Object.freeze({ checkoutId }) : null;
+}
+function readBody8(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT13)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record11(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function soundCard(card) {
+    if (!record11(card) || !orderedSubset(card, CARD_KEYS7))
+        return false;
+    if (typeof card.number !== "string" || !CARD_NUMBER9.test(card.number) || !luhn3(card.number))
+        return false;
+    if (typeof card.expiry_month !== "string" || !MONTH7.test(card.expiry_month))
+        return false;
+    if (typeof card.expiry_year !== "string" || !YEAR7.test(card.expiry_year))
+        return false;
+    if (typeof card.cvv !== "string" || !CODE2.test(card.cvv))
+        return false;
+    if (card.name !== void 0 && (!typed(card.name, 129) || /[0-9]/.test(card.name)))
+        return false;
+    if (card.zip_code !== void 0 && !typed(card.zip_code, 10))
+        return false;
+    return true;
+}
+function soundPersonal(details) {
+    if (!record11(details) || !orderedSubset(details, PERSONAL_KEYS) || Object.keys(details).length === 0)
+        return false;
+    for (const key of ["first_name", "last_name", "email"]) {
+        if (details[key] !== void 0 && !typed(details[key]))
+            return false;
+    }
+    if (details.birth_date !== void 0 && (typeof details.birth_date !== "string" || !DATE.test(details.birth_date)))
+        return false;
+    if (details.phone !== void 0 && (typeof details.phone !== "string" || !PHONE2.test(details.phone) || (details.phone.match(/[0-9]/g) ?? []).length > 15))
+        return false;
+    if (details.address === void 0)
+        return true;
+    const address2 = details.address;
+    if (!record11(address2) || !orderedSubset(address2, ADDRESS_KEYS2) || Object.keys(address2).length === 0)
+        return false;
+    if (address2.country !== void 0 && (typeof address2.country !== "string" || !COUNTRY2.test(address2.country)))
+        return false;
+    return ["city", "line1", "line2", "postal_code", "state"].every((key) => address2[key] === void 0 || typed(address2[key]));
+}
+function soundCustomer(details) {
+    if (!record11(details) || !orderedSubset(details, CUSTOMER_KEYS) || Object.keys(details).length === 0)
+        return false;
+    return CUSTOMER_KEYS.every((key) => details[key] === void 0 || typed(details[key], key === "note_for_merchant" ? 1024 : 256));
+}
+function sumupBodyVerdict(body, url) {
+    if (url !== void 0 && sumupCheckoutUrl(url) === null)
+        return refuse17("sumup_url_refused");
+    const value = readBody8(body);
+    if (value === null || !orderedSubset(value, ROOT_KEYS5))
+        return refuse17("sumup_body_unsupported");
+    if (value.payment_type !== CARD_PAYMENT2 || !soundDevice(value.device_information) || !soundCard(value.card) || value.installments !== 1) {
+        return refuse17("sumup_body_unsupported");
+    }
+    if (value.method_details !== void 0 && !(record11(value.method_details) && orderedSubset(value.method_details, ["zip_code"]) && typed(value.method_details.zip_code, 10)))
+        return refuse17("sumup_body_unsupported");
+    if (value.personal_details !== void 0 && !soundPersonal(value.personal_details))
+        return refuse17("sumup_body_unsupported");
+    if (value.customer_details !== void 0 && !soundCustomer(value.customer_details))
+        return refuse17("sumup_body_unsupported");
+    if (value.lxn_session_token !== void 0 && !soundRiskToken(value.lxn_session_token))
+        return refuse17("sumup_body_unsupported");
+    if (value.sca_experience !== void 0 && value.sca_experience !== SCA_EXPERIENCE)
+        return refuse17("sumup_body_unsupported");
+    if (value.mandate !== void 0)
+        return refuse17("sumup_card_saving_refused");
+    return CARD16;
+}
+// src/twoc2p-secure-pay.js
+var SALTED = /* @__PURE__ */ Object.freeze([83, 97, 108, 116, 101, 100, 95, 95]);
+var B64 = /^[A-Za-z0-9+/]+={0,2}$/;
+var FIELD_LIMIT = 1024;
+function decodeCanonical(text3) {
+    if (typeof text3 !== "string" || text3.length === 0 || text3.length % 4 !== 0 || !B64.test(text3))
+        return null;
+    let binary;
+    try {
+        binary = atob(text3);
+    }
+    catch {
+        return null;
+    }
+    if (btoa(binary) !== text3)
+        return null;
+    return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+}
+function twoC2pSecurePayParts(value) {
+    if (typeof value !== "string" || value.length > FIELD_LIMIT || !/^[0-9a-f]{4}/.test(value))
+        return null;
+    const length = parseInt(value.slice(0, 4), 16);
+    if (length < 4 || 4 + length >= value.length)
+        return null;
+    const rsaText = value.slice(4, 4 + length);
+    const rsa = decodeCanonical(rsaText);
+    const cipher = decodeCanonical(value.slice(4 + length));
+    if (!rsa || !cipher || cipher.length < 32 || cipher.length > 80 || cipher.length % 16 !== 0)
+        return null;
+    if (!SALTED.every((byte, at) => cipher[at] === byte))
+        return null;
+    return { rsaText, rsa, salt: cipher.slice(8, 16), blocks: (cipher.length - 16) / 16 };
+}
+function isTwoC2pPageField(value, keyBytes) {
+    const parts = twoC2pSecurePayParts(value);
+    if (!parts || !Number.isInteger(keyBytes) || keyBytes < 128)
+        return false;
+    const expected = Math.ceil(keyBytes / 3) * 4;
+    return parts.rsaText.length === expected && (parts.rsa.length === keyBytes || parts.rsa.length === keyBytes - 1);
+}
+// src/twoc2p-keys.js
+var TWOC2P_KEYS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze({
+        spki: "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/1ljsxI+r6qQraTFrHfWNrV41vxumBF+4ILAG3WsN6HEBQU2wSUv/IyQmZkiys1ilOb+OOuQTH8OXMnqQg9E4epyePW3L7IeOieSbIIDeSX6UpTWmT/Fs7moWZkN8RpuCV0u87n3AY2tQbtcSqwEKi2sxzWLFwscoGn6N5yVIpQIDAQAB",
+        sha256: "bb8f27929ce140c6ef0ec9c4a20d7ca0b83376bc35a501985dc40d16669384fe",
+        script: Object.freeze({ url: "https://t.2c2p.com/SecurePayment/api/my2c2p.1.7.6.min.js", sha256: "4a745a37765a2e28e299d64f6ea5811aab27b176da61db6f840fa85d6a47e763" })
+    }),
+    sandbox: Object.freeze({
+        spki: "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKakJC+2MSZikKoPzlNqXvJCuWNLhejg3gMRePSetYNNgnhyqFwwAR7t7i/B2QFZoixSYc2/23cJz0jA5O+q+Cu3fycqKlf1L9966+X3B9nyHe2eKQZr8KrcS/8+sEKcd0pLATY4AleW1iktuN+2oghrDKuv+aDNztWcOy+PTofwIDAQAB",
+        sha256: "7f80c07f1d72db28ede10dae942940657c72dfa789836c9fdf283cba6feff2e6",
+        script: Object.freeze({ url: "https://demo2.2c2p.com/2C2PFrontEnd/SecurePayment/api/my2c2p.1.7.6.min.js", sha256: "435723d92bfefb00607a56851967e0b745d52b8d49443de5f0000f0583fde5cc" })
+    })
+});
+function twoC2pKey(environment2) {
+    if (environment2 !== "production" && environment2 !== "sandbox")
+        return null;
+    return TWOC2P_KEYS[environment2] ?? null;
+}
+function twoC2pKeyBytes(environment2) {
+    const key = twoC2pKey(environment2);
+    if (!key)
+        return null;
+    try {
+        return parseRsaPublicKey(key).size;
+    }
+    catch {
+        return null;
+    }
+}
+// src/twoc2p.js
+var TWOC2P_PSP = "twoc2p";
+var TWOC2P_FIELD = "securePayToken";
+var TWOC2P_REVIEWED_BUILDS = /* @__PURE__ */ Object.freeze(["4.1", "4.2", "4.3", "4.4", "4.5"]);
+var record12 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var refuse18 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD17 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE8 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+var PAYMENT_URL = /^https:\/\/(sandbox-)?pgwv4\.2c2p\.com\/payment\/(4\.[0-9]{1,2})\/Payment$/;
+function twoC2pPaymentTarget(url) {
+    const match = typeof url === "string" ? PAYMENT_URL.exec(url) : null;
+    if (!match)
+        return null;
+    return Object.freeze({ environment: match[1] ? "sandbox" : "production", version: match[2], reviewed: TWOC2P_REVIEWED_BUILDS.includes(match[2]) });
+}
+function twoC2pPaymentCarriesCard(body) {
+    if (typeof body !== "string")
+        return true;
+    try {
+        return JSON.stringify(JSON.parse(body)).includes(`"${TWOC2P_FIELD}"`);
+    }
+    catch {
+        return true;
+    }
+}
+var ROOT_KEYS6 = /* @__PURE__ */ Object.freeze(["paymentToken", "clientIP", "locale", "responseReturnUrl", "clientID", "payment"]);
+var CODE_KEYS = /* @__PURE__ */ Object.freeze(["channelCode", "agentCode", "agentChannelCode"]);
+var DATA_KEYS2 = /* @__PURE__ */ Object.freeze([
+    "name",
+    "isIppChosen",
+    "cardDetails",
+    "loyaltyPoints",
+    "fxRateID",
+    "email",
+    "mobileNo",
+    "mobileNoPrefix",
+    "customerNote",
+    "paymentExpiry",
+    "securePayToken",
+    "cardTokenize",
+    "accountTokenization",
+    "token",
+    "customerToken",
+    "accountNo",
+    "installmentPeriod",
+    "interestType",
+    "payLaterPeriod",
+    "billingAddress1",
+    "billingAddress2",
+    "billingCity",
+    "billingState",
+    "billingCountryCode",
+    "billingPostalCode",
+    "riskInfo"
+]);
+var RISK_KEYS = /* @__PURE__ */ Object.freeze(["customer_id", "shipping_method", "deviceSessionId", "customData"]);
+var BODY_LIMIT14 = 16384;
+var CONTROL6 = /[\u0000-\u001f\u007f]/;
+var CARD_LIKE = /(?:[0-9][ _.:/-]*){12,}/;
+var PAYMENT_TOKEN = /^[A-Za-z0-9+/]{16,1000}={0,2}$/;
+var UUID2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var IP = /^[0-9A-Fa-f.:]{2,45}$/;
+var LOCALE2 = /^[A-Za-z]{2,3}(?:[-_][A-Za-z0-9]{2,8})?$/;
+var AGENT = /^[A-Za-z0-9_]{1,32}$/;
+var RISK_TOKEN2 = /^[\x21-\x7e]{1,512}$/;
+var RETURN_URL = /^https:\/\/((?:sandbox-)?pgw-ui\.2c2p\.com)\/payment\/4\.[0-9]{1,2}(?:\/|\/index\.html)?#\/(?:info|mobile\/process)\/([A-Za-z0-9+/]{16,1000}={0,2})?$/;
+var PAGE_HOSTS = /* @__PURE__ */ Object.freeze({ production: "pgw-ui.2c2p.com", sandbox: "sandbox-pgw-ui.2c2p.com" });
+var returnUrlTaken = (value, paymentToken, environment2) => {
+    if (value === void 0)
+        return true;
+    const match = typeof value === "string" ? RETURN_URL.exec(value) : null;
+    return !!match && (match[2] === void 0 || match[2] === paymentToken) && (environment2 === void 0 || match[1] === PAGE_HOSTS[environment2]);
+};
+var inOrder2 = (value, order) => {
+    let at = -1;
+    for (const key of Object.keys(value)) {
+        const next = order.indexOf(key);
+        if (next <= at)
+            return false;
+        at = next;
+    }
+    return true;
+};
+var text2 = (value, limit) => typeof value === "string" && value.length <= limit && !CONTROL6.test(value) && !CARD_LIKE.test(value);
+var optionalText = (value, limit) => value === void 0 || text2(value, limit);
+function twoC2pBodyVerdict(body, keyBytes = 128, environment2 = void 0) {
+    if (!twoC2pPaymentCarriesCard(body))
+        return CONTINUE8;
+    if (typeof body !== "string" || body.length > BODY_LIMIT14)
+        return refuse18("twoc2p_body_unsupported");
+    let value;
+    try {
+        value = JSON.parse(body);
+    }
+    catch {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    if (!record12(value) || JSON.stringify(value) !== body || !inOrder2(value, ROOT_KEYS6))
+        return refuse18("twoc2p_body_unsupported");
+    if (typeof value.paymentToken !== "string" || !PAYMENT_TOKEN.test(value.paymentToken) || value.clientIP !== void 0 && !(typeof value.clientIP === "string" && IP.test(value.clientIP)) || value.locale !== void 0 && !(typeof value.locale === "string" && LOCALE2.test(value.locale)) || !returnUrlTaken(value.responseReturnUrl, value.paymentToken, environment2) || value.clientID !== void 0 && !(typeof value.clientID === "string" && UUID2.test(value.clientID)))
+        return refuse18("twoc2p_body_unsupported");
+    const payment = value.payment;
+    if (!record12(payment) || Object.keys(payment).join(",") !== "code,data")
+        return refuse18("twoc2p_body_unsupported");
+    const code = payment.code;
+    const data = payment.data;
+    if (!record12(code) || !record12(data))
+        return refuse18("twoc2p_body_unsupported");
+    if (Object.prototype.hasOwnProperty.call(code, "subChannelCode"))
+        return refuse18("twoc2p_stored_card");
+    if (code.channelCode === "IPP" || code.channelCode === "LIPP")
+        return refuse18("twoc2p_installments");
+    if (!inOrder2(code, CODE_KEYS) || code.channelCode === void 0)
+        return refuse18("twoc2p_body_unsupported");
+    if (code.channelCode !== "CC")
+        return refuse18("twoc2p_channel_unsupported");
+    if ([code.agentCode, code.agentChannelCode].some((part) => part !== void 0 && !(typeof part === "string" && AGENT.test(part))))
+        return refuse18("twoc2p_body_unsupported");
+    return dataVerdict(data, keyBytes, body);
+}
+function dataVerdict(data, keyBytes, body) {
+    if (data.cardTokenize !== void 0 || data.accountTokenization !== void 0)
+        return refuse18("twoc2p_keeps_card");
+    if (data.token !== void 0 || data.customerToken !== void 0)
+        return refuse18("twoc2p_stored_card");
+    if (data.accountNo !== void 0)
+        return refuse18("twoc2p_card_in_clear");
+    const details = data.cardDetails;
+    if (record12(details) && (details.cardNo !== void 0 || details.accountNo !== void 0))
+        return refuse18("twoc2p_card_in_clear");
+    if (record12(details) && Object.keys(details).some((key) => key !== "email"))
+        return refuse18("twoc2p_stored_card");
+    if (data.isIppChosen === true || data.installmentPeriod !== void 0 || data.interestType !== void 0 || data.payLaterPeriod !== void 0) {
+        return refuse18("twoc2p_installments");
+    }
+    if (data.fxRateID !== void 0)
+        return refuse18("twoc2p_currency_conversion");
+    if (data.loyaltyPoints !== void 0 && !(Array.isArray(data.loyaltyPoints) && data.loyaltyPoints.length === 0)) {
+        return refuse18("twoc2p_loyalty_redemption");
+    }
+    if (!inOrder2(data, DATA_KEYS2) || data.paymentExpiry !== void 0)
+        return refuse18("twoc2p_body_unsupported");
+    if (typeof data.securePayToken !== "string" || !isTwoC2pPageField(data.securePayToken, keyBytes))
+        return refuse18("twoc2p_field_unreviewed");
+    if (body.split(data.securePayToken).length !== 2)
+        return refuse18("twoc2p_body_unsupported");
+    if (data.isIppChosen !== void 0 && data.isIppChosen !== false)
+        return refuse18("twoc2p_body_unsupported");
+    if (details !== void 0 && !(record12(details) && (details.email === void 0 || text2(details.email, 254))))
+        return refuse18("twoc2p_body_unsupported");
+    if (!optionalText(data.name, 128) || !optionalText(data.email, 254) || !optionalText(data.customerNote, 255) || !(data.mobileNo === void 0 || typeof data.mobileNo === "string" && /^[0-9]{4,11}$/.test(data.mobileNo)) || !(data.mobileNoPrefix === void 0 || typeof data.mobileNoPrefix === "string" && /^\+?[0-9]{1,4}$/.test(data.mobileNoPrefix))) {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    for (const key of ["billingAddress1", "billingAddress2", "billingCity", "billingState", "billingPostalCode"]) {
+        if (!optionalText(data[key], 128))
+            return refuse18("twoc2p_body_unsupported");
+    }
+    if (data.billingCountryCode !== void 0 && !(typeof data.billingCountryCode === "string" && /^[A-Za-z]{2}$/.test(data.billingCountryCode))) {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    const risk = data.riskInfo;
+    if (risk !== void 0 && risk !== null && !(record12(risk) && Object.keys(risk).join(",") === RISK_KEYS.join(",") && risk.customer_id === "" && risk.shipping_method === "" && typeof risk.deviceSessionId === "string" && RISK_TOKEN2.test(risk.deviceSessionId) && record12(risk.customData) && Object.keys(risk.customData).length === 0)) {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    return CARD17;
+}
+// src/hipay.js
+var HIPAY_PSP = "hipay";
+var HIPAY_TOKEN_URLS = /* @__PURE__ */ Object.freeze({
+    production: "https://secure2-vault.hipay-tpp.com/rest/v2/token",
+    sandbox: "https://stage-secure2-vault.hipay-tpp.com/rest/v2/token"
+});
+var BODY_LIMIT15 = 2048;
+var HOSTED_KEYS = /* @__PURE__ */ Object.freeze(["multi_use", "card_expiry_month", "card_expiry_year", "card_number", "card_holder", "cvc"]);
+var HOSTED_KEYS_NO_HOLDER = /* @__PURE__ */ Object.freeze(["multi_use", "card_expiry_month", "card_expiry_year", "card_number", "cvc"]);
+var DIRECT_KEYS = /* @__PURE__ */ Object.freeze(["card_expiry_month", "card_expiry_year", "card_number", "card_holder", "cvc", "multi_use"]);
+var DIRECT_KEYS_NO_HOLDER = /* @__PURE__ */ Object.freeze(["card_expiry_month", "card_expiry_year", "card_number", "cvc", "multi_use"]);
+var CARD_SHAPES = /* @__PURE__ */ Object.freeze([HOSTED_KEYS, HOSTED_KEYS_NO_HOLDER, DIRECT_KEYS, DIRECT_KEYS_NO_HOLDER]);
+var NUMBER_ONLY_KEYS = /* @__PURE__ */ Object.freeze(["multi_use", "card_expiry_month", "card_expiry_year", "card_number"]);
+var CARD_NUMBER10 = /^[0-9]{12,19}$/;
+var SECURITY_CODE12 = /^[0-9]{3,4}$/;
+var MONTH8 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR8 = /^20[0-9]{2}$/;
+var TEXT_LIMIT3 = 256;
+var CONTROL7 = /[\u0000-\u001f\u007f]/;
+var record13 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys7 = (value, keys) => {
+    const own3 = Object.keys(value);
+    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+};
+var plainText3 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT3 && !CONTROL7.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
+var refuse19 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD18 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function hipayTokenEnvironment(url) {
+    if (url === HIPAY_TOKEN_URLS.production)
+        return "production";
+    if (url === HIPAY_TOKEN_URLS.sandbox)
+        return "sandbox";
+    return null;
+}
+function isHipayTokenUrl(url) {
+    return hipayTokenEnvironment(url) !== null;
+}
+function readBody9(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT15)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record13(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function hipayBodyVerdict(body) {
+    const value = readBody9(body);
+    if (value === null)
+        return refuse19("hipay_body_unsupported");
+    if (sameKeys7(value, NUMBER_ONLY_KEYS))
+        return refuse19("hipay_number_only");
+    if (!CARD_SHAPES.some((keys) => sameKeys7(value, keys)))
+        return refuse19("hipay_body_unsupported");
+    if (typeof value.card_number !== "string" || !CARD_NUMBER10.test(value.card_number) || typeof value.cvc !== "string" || !SECURITY_CODE12.test(value.cvc) || typeof value.card_expiry_month !== "string" || !MONTH8.test(value.card_expiry_month) || typeof value.card_expiry_year !== "string" || !YEAR8.test(value.card_expiry_year) || "card_holder" in value && !plainText3(value.card_holder)) {
+        return refuse19("hipay_body_unsupported");
+    }
+    if (value.multi_use === 1)
+        return refuse19("hipay_keeps_card");
+    return value.multi_use === 0 ? CARD18 : refuse19("hipay_body_unsupported");
+}
+// src/amazon-payment-services.js
+var APS_PSP = "amazon_payment_services";
+var APS_HOSTS = /* @__PURE__ */ Object.freeze({ "checkout.payfort.com": "production", "sbcheckout.payfort.com": "sandbox" });
+var APS_TOKENIZATION_PATH = "/FortAPI/paymentPage";
+var APS_SIGNED_FIELDS = /* @__PURE__ */ Object.freeze([
+    "service_command",
+    "access_code",
+    "merchant_identifier",
+    "merchant_reference",
+    "language",
+    "return_url",
+    "signature"
+]);
+var APS_CARD_FIELDS = /* @__PURE__ */ Object.freeze(["card_number", "expiry_date", "card_security_code"]);
+var APS_OPTIONAL_FIELDS = /* @__PURE__ */ Object.freeze(["card_holder_name", "remember_me"]);
+var URL_LIMIT7 = 2048;
+var BODY_LIMIT16 = 32 * 1024;
+var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
+var controlFree = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+var SHAPES = /* @__PURE__ */ new Map([
+    ["service_command", (v) => v === "TOKENIZATION"],
+    ["access_code", (v) => exact(/^[A-Za-z0-9]{1,20}$/, v)],
+    ["merchant_identifier", (v) => exact(/^[A-Za-z0-9]{1,20}$/, v)],
+    ["merchant_reference", (v) => exact(/^[A-Za-z0-9._-]{1,40}$/, v)],
+    ["language", (v) => v === "en" || v === "ar"],
+    // Hex SHA-256 (APS's default), SHA-512, or the 40 characters of the SHA-1 APS calls SHA-128.
+    ["signature", (v) => exact(/^(?:[0-9A-Fa-f]{40}|[0-9A-Fa-f]{64}|[0-9A-Fa-f]{128})$/, v)],
+    ["card_number", (v) => exact(/^[0-9]{12,19}$/, v)],
+    ["expiry_date", (v) => exact(/^[0-9]{2}(?:0[1-9]|1[0-2])$/, v)],
+    ["card_security_code", (v) => exact(/^[0-9]{3,4}$/, v)],
+    ["card_holder_name", (v) => controlFree(v, 255)],
+    ["remember_me", (v) => v === "YES" || v === "NO"]
+]);
+function apsTokenizationUrl(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT7 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.pathname !== APS_TOKENIZATION_PATH || !Object.prototype.hasOwnProperty.call(APS_HOSTS, parsed.hostname))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: APS_HOSTS[parsed.hostname] });
+}
+function formEncode2(value) {
+    let encoded;
+    try {
+        encoded = encodeURIComponent(value);
+    }
+    catch {
+        return null;
+    }
+    return encoded.replace(/[!'()~]/g, (ch) => `%${ch.charCodeAt(0).toString(16).toUpperCase()}`).replace(/%20/g, "+");
+}
+function formDecode(raw) {
+    if (!/^(?:[A-Za-z0-9*._+-]|%[0-9A-F]{2})*$/.test(raw))
+        return null;
+    let value;
+    try {
+        value = decodeURIComponent(raw.replace(/\+/g, "%20"));
+    }
+    catch {
+        return null;
+    }
+    return formEncode2(value) === raw ? value : null;
+}
+function parseForm(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT16)
+        return null;
+    const pairs = [];
+    const values = /* @__PURE__ */ new Map();
+    for (const chunk of body.split("&")) {
+        const separator = chunk.indexOf("=");
+        if (separator < 1)
+            return null;
+        const rawName = chunk.slice(0, separator), raw = chunk.slice(separator + 1);
+        const name = formDecode(rawName), value = formDecode(raw);
+        if (name === null || value === null || values.has(name))
+            return null;
+        pairs.push({ name, rawName, raw, value });
+        values.set(name, value);
+    }
+    return { pairs, values };
+}
+function returnUrlAdmitted(value) {
+    if (typeof value !== "string" || value.length > 400 || value.includes("#") || /[\u0000- \u007f]/.test(value))
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return parsed.protocol === "https:" && !parsed.username && !parsed.password && parsed.href === value;
+}
+function apsBodyRefusal(body) {
+    const form = parseForm(body);
+    if (!form)
+        return "aps_body_unsupported";
+    const has = (name) => form.values.has(name);
+    if (has("token_name"))
+        return "aps_saved_card_refused";
+    if ([...form.values.keys()].some((name) => /^merchant_extra[1-5]?$|^agreement_id$|^recurring_/.test(name)))
+        return "aps_recurring_refused";
+    if (has("service_command") && form.values.get("service_command") !== "TOKENIZATION")
+        return "aps_service_command_refused";
+    const allowed = /* @__PURE__ */ new Set([...APS_SIGNED_FIELDS, ...APS_CARD_FIELDS, ...APS_OPTIONAL_FIELDS]);
+    if (form.pairs.some(({ name }) => !allowed.has(name)))
+        return "aps_body_unsupported";
+    if (!returnUrlAdmitted(form.values.get("return_url")))
+        return "aps_return_url_refused";
+    for (const name of [...APS_SIGNED_FIELDS, ...APS_CARD_FIELDS]) {
+        if (name !== "return_url" && !SHAPES.get(name)(form.values.get(name)))
+            return "aps_body_unsupported";
+    }
+    for (const name of APS_OPTIONAL_FIELDS) {
+        if (has(name) && !SHAPES.get(name)(form.values.get(name)))
+            return "aps_body_unsupported";
+    }
+    return null;
+}
+function apsBodyVerdict(body, url) {
+    if (url !== void 0 && !apsTokenizationUrl(url))
+        return { verdict: "refuse", code: "aps_url_refused" };
+    const form = parseForm(body);
+    const names = form ? [...form.values.keys()] : typeof body === "string" ? body.split("&").map((chunk) => {
+        try {
+            return decodeURIComponent(chunk.split("=")[0].replace(/\+/g, " "));
+        }
+        catch {
+            return APS_CARD_FIELDS[0];
+        }
+    }) : [APS_CARD_FIELDS[0]];
+    const mentionsCard = !form && typeof body === "string" && APS_CARD_FIELDS.some((name) => body.toLowerCase().includes(name) || body.replace(/%([0-9A-Fa-f]{2})/g, (_, hex) => String.fromCharCode(parseInt(hex, 16))).toLowerCase().includes(name));
+    if (!mentionsCard && !names.some((name) => APS_CARD_FIELDS.includes(name.trim().toLowerCase())))
+        return { verdict: "continue" };
+    const code = apsBodyRefusal(body);
+    return code ? { verdict: "refuse", code } : { verdict: "card" };
+}
+var ANSWER_LIMIT = 64 * 1024;
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -2005,6 +2909,11 @@ function processorGate(recognizer, url, body) {
     }
     if (recognizer && recognizer.psp === KOMOJU_PSP)
         return komojuBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === HIPAY_PSP) {
+        if (url !== void 0 && !isHipayTokenUrl(url))
+            return { verdict: "refuse", code: "hipay_url_refused" };
+        return hipayBodyVerdict(body);
+    }
     if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
         if (url !== void 0 && !isPaddleVgsCardsUrl(url))
             return { verdict: "refuse", code: "paddle_vgs_url_refused" };
@@ -2026,6 +2935,19 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "pay_nl_url_refused" };
         return payNlBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === TWOC2P_PSP) {
+        if (url === void 0)
+            return twoC2pBodyVerdict(body);
+        const target = twoC2pPaymentTarget(url);
+        if (target === null)
+            return { verdict: "refuse", code: "twoc2p_url_refused" };
+        if (!target.reviewed)
+            return twoC2pPaymentCarriesCard(body) ? { verdict: "refuse", code: "twoc2p_build_unreviewed" } : { verdict: "continue" };
+        const keyBytes = twoC2pKeyBytes(target.environment);
+        return keyBytes === null ? { verdict: "refuse", code: "twoc2p_field_unreviewed" } : twoC2pBodyVerdict(body, keyBytes, target.environment);
+    }
+    if (recognizer && recognizer.psp === APS_PSP)
+        return apsBodyVerdict(body, url);
     if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
         const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
         if (url !== void 0 && target === null)
@@ -2040,6 +2962,13 @@ function processorGate(recognizer, url, body) {
     }
     if (recognizer && recognizer.psp === GOPAY_PSP)
         return gopayBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === REVOLUT_PSP) {
+        if (url !== void 0 && !isRevolutPaymentsUrl(url))
+            return { verdict: "refuse", code: "revolut_url_refused" };
+        return revolutBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === SUMUP_PSP)
+        return sumupBodyVerdict(body, url);
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {
@@ -2157,7 +3086,7 @@ function splitCardLeg(recognizer, body) {
     const absorb = list(split.absorb);
     const pass = list(split.pass);
     const sibling = list(split.siblingKeys);
-    const own2 = [];
+    const own3 = [];
     const seen = /* @__PURE__ */ new Set();
     for (const chunk of body.split("&")) {
         const eq = chunk.indexOf("=");
@@ -2174,13 +3103,13 @@ function splitCardLeg(recognizer, body) {
             return null;
         seen.add(key);
         if (!sibling.includes(key))
-            own2.push(key);
+            own3.push(key);
     }
-    if (own2.length === 0)
+    if (own3.length === 0)
         return null;
-    if (own2.every((key) => absorb.includes(key)))
+    if (own3.every((key) => absorb.includes(key)))
         return "absorb";
-    if (own2.every((key) => pass.includes(key)))
+    if (own3.every((key) => pass.includes(key)))
         return "pass";
     return null;
 }