@agent-cards/sdk 0.23.19 → 0.23.21

package/dist/primer.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 16332ca203bb18be112c4fb3f5605a1e7520cdef85c954bed2f14292c8284212
+// artifact-sha256: 2212f400551ed9deef56926befac7e0a0704717658d13228b1245199050dad1d
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -109,8 +109,8 @@ function parseConvergeBody(body) {
     return parsed;
 }
 function convergeAmountCents(value) {
-    const text3 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
-    const m = typeof text3 === "string" ? AMOUNT.exec(text3) : null;
+    const text7 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
+    const m = typeof text7 === "string" ? AMOUNT.exec(text7) : null;
     if (!m)
         return null;
     const cents = Number(m[1]) * 100 + Number(((m[2] ?? "") + "00").slice(0, 2));
@@ -365,8 +365,8 @@ var CONTROL = /[\u0000-\u001f\u007f]/;
 var cardLikeName = (name) => (name.match(/[0-9]/g) ?? []).length >= 12;
 var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys = (value, keys) => {
-    const own3 = Object.keys(value);
-    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
 };
 var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD4 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -590,9 +590,9 @@ var K = /* @__PURE__ */ new Uint32Array([
     3329325298
 ]);
 var rotr = (x, n) => x >>> n | x << 32 - n;
-function utf8(text3) {
+function utf8(text7) {
     const out = [];
-    for (const char of text3) {
+    for (const char of text7) {
         let cp = char.codePointAt(0);
         if (cp >= 55296 && cp <= 57343)
             cp = 65533;
@@ -671,10 +671,13 @@ var TYPED_ARRAY = Object.getPrototypeOf(Uint8Array.prototype);
 var typedArrayName = Object.getOwnPropertyDescriptor(TYPED_ARRAY, Symbol.toStringTag).get;
 function parseRsaPublicKey(key) {
     const spki = key && typeof key === "object" ? key.spki : void 0;
-    const pin5 = key && typeof key === "object" ? key.sha256 : void 0;
+    const pin8 = key && typeof key === "object" ? key.sha256 : void 0;
+    const named = key && typeof key === "object" && Object.prototype.hasOwnProperty.call(key, "exponent") ? key.exponent : void 0;
+    if (named !== void 0 && named !== 17)
+        throw refuse6("key");
     if (typeof spki !== "string" || spki.length > 1024 || spki.length % 4 !== 0 || !BASE64.test(spki))
         throw refuse6("key");
-    if (typeof pin5 !== "string" || !SHA256_HEX.test(pin5))
+    if (typeof pin8 !== "string" || !SHA256_HEX.test(pin8))
         throw refuse6("key");
     let binary;
     try {
@@ -686,7 +689,7 @@ function parseRsaPublicKey(key) {
     if (btoa(binary) !== spki)
         throw refuse6("key");
     const der = Uint8Array.from(binary, (c) => c.charCodeAt(0));
-    if (sha256Hex(der) !== pin5)
+    if (sha256Hex(der) !== pin8)
         throw refuse6("key");
     const outer = readElement(der, 0, 48);
     if (outer.end !== der.length || outer.start + RSA_ALGORITHM.length > der.length)
@@ -707,9 +710,10 @@ function parseRsaPublicKey(key) {
     if (!MODULUS_BYTES.includes(n.length) || !(n[0] & 128) || !(n[n.length - 1] & 1))
         throw refuse6("key");
     const e = exponent.bytes;
-    if (e.length !== 3 || e[0] !== 1 || e[1] !== 0 || e[2] !== 1)
+    const expected = named === 17 ? [17] : [1, 0, 1];
+    if (e.length !== expected.length || !expected.every((byte, i) => e[i] === byte))
         throw refuse6("key");
-    return Object.freeze({ n: toBigInt(n), e: 65537n, size: n.length });
+    return Object.freeze({ n: toBigInt(n), e: named === 17 ? 17n : 65537n, size: n.length });
 }
 function readElement(der, at, tag) {
     if (at + 2 > der.length || der[at] !== tag)
@@ -775,8 +779,8 @@ var PADDLE_TOKENEX_PSP = "paddle_tokenex";
 var PADDLE_TOKENEX_FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys2 = (value, keys) => {
-    const own3 = Object.keys(value);
-    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
 };
 var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1265,8 +1269,8 @@ var TEXT_LIMIT = 256;
 var CONTROL4 = /[\u0000-\u001f\u007f]/;
 var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys3 = (value, keys) => {
-    const own3 = Object.keys(value);
-    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
 };
 var plainText = (value) => typeof value === "string" && value.length <= TEXT_LIMIT && !CONTROL4.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -1376,14 +1380,14 @@ function readJson2(body) {
     catch {
         return { parsed: null, exact: false };
     }
-    let exact2 = false;
+    let exact4 = false;
     try {
-        exact2 = body.length <= BODY_LIMIT6 && JSON.stringify(parsed) === body;
+        exact4 = body.length <= BODY_LIMIT6 && JSON.stringify(parsed) === body;
     }
     catch {
-        exact2 = false;
+        exact4 = false;
     }
-    return { parsed, exact: exact2 };
+    return { parsed, exact: exact4 };
 }
 function billingValue(value) {
     if (value === UNDEFINED)
@@ -1438,14 +1442,14 @@ function attachType(parsed) {
     return typeof type === "string" ? type : null;
 }
 function paymongoBodyVerdict(body, session) {
-    const { parsed, exact: exact2 } = readJson2(body);
+    const { parsed, exact: exact4 } = readJson2(body);
     const type = parsed === null ? null : attachType(parsed);
     if (type !== "card") {
         if (parsed === null)
             return body === void 0 || body === null || body === "" ? CONTINUE4 : refuse10("paymongo_body_unsupported");
         return namesCardValue(parsed) ? refuse10("paymongo_body_unsupported") : CONTINUE4;
     }
-    if (!exact2)
+    if (!exact4)
         return refuse10("paymongo_body_unsupported");
     const code = judgeCardAttach(parsed, session);
     return code === null ? CARD9 : refuse10(code);
@@ -1468,15 +1472,15 @@ var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
 var CARD_PAYMENT = "PAYMENT_CARD";
 var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys4 = (value, keys) => {
-    const own3 = Object.keys(value);
-    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
 };
 var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
-function luhn(digits2) {
+function luhn(digits3) {
     let sum = 0;
-    for (let at = 0; at < digits2.length; at += 1) {
-        let digit = Number(digits2[digits2.length - 1 - at]);
+    for (let at = 0; at < digits3.length; at += 1) {
+        let digit = Number(digits3[digits3.length - 1 - at]);
         if (at % 2 === 1) {
             digit *= 2;
             if (digit > 9)
@@ -1484,7 +1488,7 @@ function luhn(digits2) {
         }
         sum += digit;
     }
-    return sum % 10 === 0;
+    return sum > 0 && sum % 10 === 0;
 }
 function gopayCardFormUrl(url) {
     if (typeof url !== "string" || url.length > 2048 || url.includes("#"))
@@ -1548,6 +1552,9 @@ function gopayBodyVerdict(body, url) {
         return refuse11("gopay_signature_mismatch");
     return CARD10;
 }
+var GOPAY_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    Object.freeze({ id: "caramilla", merchant: "Caramilla.cz", origins: Object.freeze(["https://www.caramilla.cz"]) })
+]);
 // src/payrexx.js
 var PAYREXX_PSP = "payrexx";
 var PAYREXX_FRAME_HOST = "checkout.payrexx.com";
@@ -1620,10 +1627,10 @@ function readForm2(body) {
         return null;
     }
 }
-function cardNetwork2(digits2) {
-    if (VISA2.test(digits2))
+function cardNetwork2(digits3) {
+    if (VISA2.test(digits3))
         return "visa";
-    return MASTERCARD2.test(digits2) ? "mastercard" : null;
+    return MASTERCARD2.test(digits3) ? "mastercard" : null;
 }
 function judgeBody2(body) {
     const pairs = readForm2(body);
@@ -1666,6 +1673,9 @@ function payrexxGateVerdict(url, body) {
     const verdict = payrexxBodyVerdict(body);
     return verdict.verdict === "card" && target.pspId !== PAYREXX_PAY_PSP_ID ? refuse12("payrexx_other_provider") : verdict;
 }
+var PAYREXX_FOLLOW_UP_WINDOW_MS = 15 * 60 * 1e3;
+var PAYREXX_FOLLOW_UP_IDLE_MS = 60 * 1e3;
+var PAYREXX_FOLLOW_UP_CHALLENGE_MS = 11 * 60 * 1e3;
 // src/komoju.js
 var KOMOJU_PSP = "komoju";
 var KOMOJU_HOST = "komoju.com";
@@ -1693,8 +1703,8 @@ var LOCALE = /^[a-z]{2}(?:-[A-Za-z]{2,4})?$/;
 var PAN_LIKE3 = /(?:[0-9][ _.:-]*){12,}/;
 var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys5 = (value, keys) => {
-    const own3 = Object.keys(value);
-    return own3.length === keys.length && own3.every((key, at) => key === keys[at]);
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
 };
 var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1979,7 +1989,7 @@ var HOLDER3 = /^\p{L}+(?: \p{L}+)*$/u;
 var HOLDER_LIMIT2 = 256;
 var SECURITY_CODE10 = /^[0-9]{3,4}$/;
 var MONTH6 = /^(?:0[1-9]|1[0-2])$/;
-var YEAR6 = /^[0-9]{2}$/;
+var YEAR6 = /^(?:[0-9]{2}|20[0-9]{2})$/;
 var refuse15 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD14 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function isPayNlTokenUrl(url) {
@@ -2085,10 +2095,10 @@ var wellFormed = (value) => {
 var plainText2 = (value) => typeof value === "string" && value.length >= 1 && value.length <= TEXT_LIMIT2 && !CONTROL5.test(value) && (value.match(/[0-9]/g) ?? []).length < 12 && wellFormed(value);
 var between = (value, min, max) => Number.isSafeInteger(value) && value >= min && value <= max;
 var NETWORK = /^(?:4[0-9]{15}|4[0-9]{12}|5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12}|3[47][0-9]{13})$/;
-var luhn2 = (digits2) => {
+var luhn2 = (digits3) => {
     let sum = 0;
-    for (let at = 0; at < digits2.length; at += 1) {
-        let d = digits2.charCodeAt(digits2.length - 1 - at) - 48;
+    for (let at = 0; at < digits3.length; at += 1) {
+        let d = digits3.charCodeAt(digits3.length - 1 - at) - 48;
         if (at % 2 === 1) {
             d *= 2;
             if (d > 9)
@@ -2099,7 +2109,7 @@ var luhn2 = (digits2) => {
     return sum % 10 === 0;
 };
 var ANY_NETWORK = /^[2-6][0-9]{12,18}$/;
-var holdsCardShape = (text3, shape = NETWORK) => (text3.match(/[0-9]{13,}/g) ?? []).some((run) => run.length > 19 || shape.test(run) && luhn2(run));
+var holdsCardShape = (text7, shape = NETWORK) => (text7.match(/[0-9]{13,}/g) ?? []).some((run) => run.length > 19 || shape.test(run) && luhn2(run));
 var phone = (value) => typeof value === "string" && PHONE.test(value) && (value.match(/[0-9]/g) ?? []).length >= 6 && (value.match(/[0-9]/g) ?? []).length <= 15;
 var refuse16 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD15 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -2310,10 +2320,10 @@ function orderedSubset(value, keys) {
     }
     return true;
 }
-function luhn3(digits2) {
+function luhn3(digits3) {
     let sum = 0;
-    for (let at = 0; at < digits2.length; at += 1) {
-        let digit = Number(digits2[digits2.length - 1 - at]);
+    for (let at = 0; at < digits3.length; at += 1) {
+        let digit = Number(digits3[digits3.length - 1 - at]);
         if (at % 2 === 1) {
             digit *= 2;
             if (digit > 9)
@@ -2327,13 +2337,13 @@ var printable = (value) => [...value].every((ch) => ch.charCodeAt(0) >= 32 && ch
 function typed(value, limit = 256) {
     return typeof value === "string" && value.length >= 1 && value.length <= limit && !PAN_LIKE4.test(value) && printable(value);
 }
-function decodeBase64(text3) {
-    if (typeof text3 !== "string" || !BASE643.test(text3) || text3.length % 4 !== 0)
+function decodeBase64(text7) {
+    if (typeof text7 !== "string" || !BASE643.test(text7) || text7.length % 4 !== 0)
         return null;
     let bits = 0;
     let value = 0;
     let out = "";
-    for (const ch of text3.replace(/=+$/, "")) {
+    for (const ch of text7.replace(/=+$/, "")) {
         value = (value << 6 | BASE64_ALPHABET.indexOf(ch)) & 16777215;
         bits += 6;
         if (bits >= 8) {
@@ -2343,8 +2353,8 @@ function decodeBase64(text3) {
     }
     return out;
 }
-function soundDevice(text3) {
-    const json = decodeBase64(text3);
+function soundDevice(text7) {
+    const json = decodeBase64(text7);
     if (json === null)
         return false;
     let value;
@@ -2458,6 +2468,1348 @@ function sumupBodyVerdict(body, url) {
         return refuse17("sumup_card_saving_refused");
     return CARD16;
 }
+// src/twoc2p-secure-pay.js
+var SALTED = /* @__PURE__ */ Object.freeze([83, 97, 108, 116, 101, 100, 95, 95]);
+var B64 = /^[A-Za-z0-9+/]+={0,2}$/;
+var FIELD_LIMIT = 1024;
+function decodeCanonical(text7) {
+    if (typeof text7 !== "string" || text7.length === 0 || text7.length % 4 !== 0 || !B64.test(text7))
+        return null;
+    let binary;
+    try {
+        binary = atob(text7);
+    }
+    catch {
+        return null;
+    }
+    if (btoa(binary) !== text7)
+        return null;
+    return Uint8Array.from(binary, (char) => char.charCodeAt(0));
+}
+function twoC2pSecurePayParts(value) {
+    if (typeof value !== "string" || value.length > FIELD_LIMIT || !/^[0-9a-f]{4}/.test(value))
+        return null;
+    const length = parseInt(value.slice(0, 4), 16);
+    if (length < 4 || 4 + length >= value.length)
+        return null;
+    const rsaText = value.slice(4, 4 + length);
+    const rsa = decodeCanonical(rsaText);
+    const cipher = decodeCanonical(value.slice(4 + length));
+    if (!rsa || !cipher || cipher.length < 32 || cipher.length > 80 || cipher.length % 16 !== 0)
+        return null;
+    if (!SALTED.every((byte, at) => cipher[at] === byte))
+        return null;
+    return { rsaText, rsa, salt: cipher.slice(8, 16), blocks: (cipher.length - 16) / 16 };
+}
+function isTwoC2pPageField(value, keyBytes) {
+    const parts = twoC2pSecurePayParts(value);
+    if (!parts || !Number.isInteger(keyBytes) || keyBytes < 128)
+        return false;
+    const expected = Math.ceil(keyBytes / 3) * 4;
+    return parts.rsaText.length === expected && (parts.rsa.length === keyBytes || parts.rsa.length === keyBytes - 1);
+}
+// src/twoc2p-keys.js
+var TWOC2P_KEYS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze({
+        spki: "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC/1ljsxI+r6qQraTFrHfWNrV41vxumBF+4ILAG3WsN6HEBQU2wSUv/IyQmZkiys1ilOb+OOuQTH8OXMnqQg9E4epyePW3L7IeOieSbIIDeSX6UpTWmT/Fs7moWZkN8RpuCV0u87n3AY2tQbtcSqwEKi2sxzWLFwscoGn6N5yVIpQIDAQAB",
+        sha256: "bb8f27929ce140c6ef0ec9c4a20d7ca0b83376bc35a501985dc40d16669384fe",
+        script: Object.freeze({ url: "https://t.2c2p.com/SecurePayment/api/my2c2p.1.7.6.min.js", sha256: "4a745a37765a2e28e299d64f6ea5811aab27b176da61db6f840fa85d6a47e763" })
+    }),
+    sandbox: Object.freeze({
+        spki: "MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDKakJC+2MSZikKoPzlNqXvJCuWNLhejg3gMRePSetYNNgnhyqFwwAR7t7i/B2QFZoixSYc2/23cJz0jA5O+q+Cu3fycqKlf1L9966+X3B9nyHe2eKQZr8KrcS/8+sEKcd0pLATY4AleW1iktuN+2oghrDKuv+aDNztWcOy+PTofwIDAQAB",
+        sha256: "7f80c07f1d72db28ede10dae942940657c72dfa789836c9fdf283cba6feff2e6",
+        script: Object.freeze({ url: "https://demo2.2c2p.com/2C2PFrontEnd/SecurePayment/api/my2c2p.1.7.6.min.js", sha256: "435723d92bfefb00607a56851967e0b745d52b8d49443de5f0000f0583fde5cc" })
+    })
+});
+function twoC2pKey(environment2) {
+    if (environment2 !== "production" && environment2 !== "sandbox")
+        return null;
+    return TWOC2P_KEYS[environment2] ?? null;
+}
+function twoC2pKeyBytes(environment2) {
+    const key = twoC2pKey(environment2);
+    if (!key)
+        return null;
+    try {
+        return parseRsaPublicKey(key).size;
+    }
+    catch {
+        return null;
+    }
+}
+// src/twoc2p.js
+var TWOC2P_PSP = "twoc2p";
+var TWOC2P_FIELD = "securePayToken";
+var TWOC2P_REVIEWED_BUILDS = /* @__PURE__ */ Object.freeze(["4.1", "4.2", "4.3", "4.4", "4.5"]);
+var record12 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var refuse18 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD17 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE8 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+var PAYMENT_URL = /^https:\/\/(sandbox-)?pgwv4\.2c2p\.com\/payment\/(4\.[0-9]{1,2})\/Payment$/;
+function twoC2pPaymentTarget(url) {
+    const match = typeof url === "string" ? PAYMENT_URL.exec(url) : null;
+    if (!match)
+        return null;
+    return Object.freeze({ environment: match[1] ? "sandbox" : "production", version: match[2], reviewed: TWOC2P_REVIEWED_BUILDS.includes(match[2]) });
+}
+function twoC2pPaymentCarriesCard(body) {
+    if (typeof body !== "string")
+        return true;
+    try {
+        return JSON.stringify(JSON.parse(body)).includes(`"${TWOC2P_FIELD}"`);
+    }
+    catch {
+        return true;
+    }
+}
+var ROOT_KEYS6 = /* @__PURE__ */ Object.freeze(["paymentToken", "clientIP", "locale", "responseReturnUrl", "clientID", "payment"]);
+var CODE_KEYS = /* @__PURE__ */ Object.freeze(["channelCode", "agentCode", "agentChannelCode"]);
+var DATA_KEYS2 = /* @__PURE__ */ Object.freeze([
+    "name",
+    "isIppChosen",
+    "cardDetails",
+    "loyaltyPoints",
+    "fxRateID",
+    "email",
+    "mobileNo",
+    "mobileNoPrefix",
+    "customerNote",
+    "paymentExpiry",
+    "securePayToken",
+    "cardTokenize",
+    "accountTokenization",
+    "token",
+    "customerToken",
+    "accountNo",
+    "installmentPeriod",
+    "interestType",
+    "payLaterPeriod",
+    "billingAddress1",
+    "billingAddress2",
+    "billingCity",
+    "billingState",
+    "billingCountryCode",
+    "billingPostalCode",
+    "riskInfo"
+]);
+var RISK_KEYS = /* @__PURE__ */ Object.freeze(["customer_id", "shipping_method", "deviceSessionId", "customData"]);
+var BODY_LIMIT14 = 16384;
+var CONTROL6 = /[\u0000-\u001f\u007f]/;
+var CARD_LIKE = /(?:[0-9][ _.:/-]*){12,}/;
+var PAYMENT_TOKEN = /^[A-Za-z0-9+/]{16,1000}={0,2}$/;
+var UUID2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var IP = /^[0-9A-Fa-f.:]{2,45}$/;
+var LOCALE2 = /^[A-Za-z]{2,3}(?:[-_][A-Za-z0-9]{2,8})?$/;
+var AGENT = /^[A-Za-z0-9_]{1,32}$/;
+var RISK_TOKEN2 = /^[\x21-\x7e]{1,512}$/;
+var RETURN_URL = /^https:\/\/((?:sandbox-)?pgw-ui\.2c2p\.com)\/payment\/4\.[0-9]{1,2}(?:\/|\/index\.html)?#\/(?:info|mobile\/process)\/([A-Za-z0-9+/]{16,1000}={0,2})?$/;
+var PAGE_HOSTS = /* @__PURE__ */ Object.freeze({ production: "pgw-ui.2c2p.com", sandbox: "sandbox-pgw-ui.2c2p.com" });
+var returnUrlTaken = (value, paymentToken, environment2) => {
+    if (value === void 0)
+        return true;
+    const match = typeof value === "string" ? RETURN_URL.exec(value) : null;
+    return !!match && (match[2] === void 0 || match[2] === paymentToken) && (environment2 === void 0 || match[1] === PAGE_HOSTS[environment2]);
+};
+var inOrder2 = (value, order) => {
+    let at = -1;
+    for (const key of Object.keys(value)) {
+        const next = order.indexOf(key);
+        if (next <= at)
+            return false;
+        at = next;
+    }
+    return true;
+};
+var text2 = (value, limit) => typeof value === "string" && value.length <= limit && !CONTROL6.test(value) && !CARD_LIKE.test(value);
+var optionalText = (value, limit) => value === void 0 || text2(value, limit);
+function twoC2pBodyVerdict(body, keyBytes = 128, environment2 = void 0) {
+    if (!twoC2pPaymentCarriesCard(body))
+        return CONTINUE8;
+    if (typeof body !== "string" || body.length > BODY_LIMIT14)
+        return refuse18("twoc2p_body_unsupported");
+    let value;
+    try {
+        value = JSON.parse(body);
+    }
+    catch {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    if (!record12(value) || JSON.stringify(value) !== body || !inOrder2(value, ROOT_KEYS6))
+        return refuse18("twoc2p_body_unsupported");
+    if (typeof value.paymentToken !== "string" || !PAYMENT_TOKEN.test(value.paymentToken) || value.clientIP !== void 0 && !(typeof value.clientIP === "string" && IP.test(value.clientIP)) || value.locale !== void 0 && !(typeof value.locale === "string" && LOCALE2.test(value.locale)) || !returnUrlTaken(value.responseReturnUrl, value.paymentToken, environment2) || value.clientID !== void 0 && !(typeof value.clientID === "string" && UUID2.test(value.clientID)))
+        return refuse18("twoc2p_body_unsupported");
+    const payment = value.payment;
+    if (!record12(payment) || Object.keys(payment).join(",") !== "code,data")
+        return refuse18("twoc2p_body_unsupported");
+    const code = payment.code;
+    const data = payment.data;
+    if (!record12(code) || !record12(data))
+        return refuse18("twoc2p_body_unsupported");
+    if (Object.prototype.hasOwnProperty.call(code, "subChannelCode"))
+        return refuse18("twoc2p_stored_card");
+    if (code.channelCode === "IPP" || code.channelCode === "LIPP")
+        return refuse18("twoc2p_installments");
+    if (!inOrder2(code, CODE_KEYS) || code.channelCode === void 0)
+        return refuse18("twoc2p_body_unsupported");
+    if (code.channelCode !== "CC")
+        return refuse18("twoc2p_channel_unsupported");
+    if ([code.agentCode, code.agentChannelCode].some((part) => part !== void 0 && !(typeof part === "string" && AGENT.test(part))))
+        return refuse18("twoc2p_body_unsupported");
+    return dataVerdict(data, keyBytes, body);
+}
+function dataVerdict(data, keyBytes, body) {
+    if (data.cardTokenize !== void 0 || data.accountTokenization !== void 0)
+        return refuse18("twoc2p_keeps_card");
+    if (data.token !== void 0 || data.customerToken !== void 0)
+        return refuse18("twoc2p_stored_card");
+    if (data.accountNo !== void 0)
+        return refuse18("twoc2p_card_in_clear");
+    const details = data.cardDetails;
+    if (record12(details) && (details.cardNo !== void 0 || details.accountNo !== void 0))
+        return refuse18("twoc2p_card_in_clear");
+    if (record12(details) && Object.keys(details).some((key) => key !== "email"))
+        return refuse18("twoc2p_stored_card");
+    if (data.isIppChosen === true || data.installmentPeriod !== void 0 || data.interestType !== void 0 || data.payLaterPeriod !== void 0) {
+        return refuse18("twoc2p_installments");
+    }
+    if (data.fxRateID !== void 0)
+        return refuse18("twoc2p_currency_conversion");
+    if (data.loyaltyPoints !== void 0 && !(Array.isArray(data.loyaltyPoints) && data.loyaltyPoints.length === 0)) {
+        return refuse18("twoc2p_loyalty_redemption");
+    }
+    if (!inOrder2(data, DATA_KEYS2) || data.paymentExpiry !== void 0)
+        return refuse18("twoc2p_body_unsupported");
+    if (typeof data.securePayToken !== "string" || !isTwoC2pPageField(data.securePayToken, keyBytes))
+        return refuse18("twoc2p_field_unreviewed");
+    if (body.split(data.securePayToken).length !== 2)
+        return refuse18("twoc2p_body_unsupported");
+    if (data.isIppChosen !== void 0 && data.isIppChosen !== false)
+        return refuse18("twoc2p_body_unsupported");
+    if (details !== void 0 && !(record12(details) && (details.email === void 0 || text2(details.email, 254))))
+        return refuse18("twoc2p_body_unsupported");
+    if (!optionalText(data.name, 128) || !optionalText(data.email, 254) || !optionalText(data.customerNote, 255) || !(data.mobileNo === void 0 || typeof data.mobileNo === "string" && /^[0-9]{4,11}$/.test(data.mobileNo)) || !(data.mobileNoPrefix === void 0 || typeof data.mobileNoPrefix === "string" && /^\+?[0-9]{1,4}$/.test(data.mobileNoPrefix))) {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    for (const key of ["billingAddress1", "billingAddress2", "billingCity", "billingState", "billingPostalCode"]) {
+        if (!optionalText(data[key], 128))
+            return refuse18("twoc2p_body_unsupported");
+    }
+    if (data.billingCountryCode !== void 0 && !(typeof data.billingCountryCode === "string" && /^[A-Za-z]{2}$/.test(data.billingCountryCode))) {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    const risk = data.riskInfo;
+    if (risk !== void 0 && risk !== null && !(record12(risk) && Object.keys(risk).join(",") === RISK_KEYS.join(",") && risk.customer_id === "" && risk.shipping_method === "" && typeof risk.deviceSessionId === "string" && RISK_TOKEN2.test(risk.deviceSessionId) && record12(risk.customData) && Object.keys(risk.customData).length === 0)) {
+        return refuse18("twoc2p_body_unsupported");
+    }
+    return CARD17;
+}
+// src/hipay.js
+var HIPAY_PSP = "hipay";
+var HIPAY_TOKEN_URLS = /* @__PURE__ */ Object.freeze({
+    production: "https://secure2-vault.hipay-tpp.com/rest/v2/token",
+    sandbox: "https://stage-secure2-vault.hipay-tpp.com/rest/v2/token"
+});
+var BODY_LIMIT15 = 2048;
+var HOSTED_KEYS = /* @__PURE__ */ Object.freeze(["multi_use", "card_expiry_month", "card_expiry_year", "card_number", "card_holder", "cvc"]);
+var HOSTED_KEYS_NO_HOLDER = /* @__PURE__ */ Object.freeze(["multi_use", "card_expiry_month", "card_expiry_year", "card_number", "cvc"]);
+var DIRECT_KEYS = /* @__PURE__ */ Object.freeze(["card_expiry_month", "card_expiry_year", "card_number", "card_holder", "cvc", "multi_use"]);
+var DIRECT_KEYS_NO_HOLDER = /* @__PURE__ */ Object.freeze(["card_expiry_month", "card_expiry_year", "card_number", "cvc", "multi_use"]);
+var CARD_SHAPES = /* @__PURE__ */ Object.freeze([HOSTED_KEYS, HOSTED_KEYS_NO_HOLDER, DIRECT_KEYS, DIRECT_KEYS_NO_HOLDER]);
+var NUMBER_ONLY_KEYS = /* @__PURE__ */ Object.freeze(["multi_use", "card_expiry_month", "card_expiry_year", "card_number"]);
+var CARD_NUMBER10 = /^[0-9]{12,19}$/;
+var SECURITY_CODE12 = /^[0-9]{3,4}$/;
+var MONTH8 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR8 = /^20[0-9]{2}$/;
+var TEXT_LIMIT3 = 256;
+var CONTROL7 = /[\u0000-\u001f\u007f]/;
+var record13 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys7 = (value, keys) => {
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+};
+var plainText3 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT3 && !CONTROL7.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
+var refuse19 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD18 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function hipayTokenEnvironment(url) {
+    if (url === HIPAY_TOKEN_URLS.production)
+        return "production";
+    if (url === HIPAY_TOKEN_URLS.sandbox)
+        return "sandbox";
+    return null;
+}
+function isHipayTokenUrl(url) {
+    return hipayTokenEnvironment(url) !== null;
+}
+function readBody9(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT15)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record13(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function hipayBodyVerdict(body) {
+    const value = readBody9(body);
+    if (value === null)
+        return refuse19("hipay_body_unsupported");
+    if (sameKeys7(value, NUMBER_ONLY_KEYS))
+        return refuse19("hipay_number_only");
+    if (!CARD_SHAPES.some((keys) => sameKeys7(value, keys)))
+        return refuse19("hipay_body_unsupported");
+    if (typeof value.card_number !== "string" || !CARD_NUMBER10.test(value.card_number) || typeof value.cvc !== "string" || !SECURITY_CODE12.test(value.cvc) || typeof value.card_expiry_month !== "string" || !MONTH8.test(value.card_expiry_month) || typeof value.card_expiry_year !== "string" || !YEAR8.test(value.card_expiry_year) || "card_holder" in value && !plainText3(value.card_holder)) {
+        return refuse19("hipay_body_unsupported");
+    }
+    if (value.multi_use === 1)
+        return refuse19("hipay_keeps_card");
+    return value.multi_use === 0 ? CARD18 : refuse19("hipay_body_unsupported");
+}
+var pin5 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), usernames: Object.freeze([...fields.usernames]) });
+var HIPAY_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin5({ id: "happybulle", merchant: "HappyBulle", origins: ["https://www.happybulle.com"], usernames: ["94683309.secure-gateway.hipay-tpp.com"] })
+]);
+// src/amazon-payment-services.js
+var APS_PSP = "amazon_payment_services";
+var APS_HOSTS = /* @__PURE__ */ Object.freeze({ "checkout.payfort.com": "production", "sbcheckout.payfort.com": "sandbox" });
+var APS_TOKENIZATION_PATH = "/FortAPI/paymentPage";
+var APS_SIGNED_FIELDS = /* @__PURE__ */ Object.freeze([
+    "service_command",
+    "access_code",
+    "merchant_identifier",
+    "merchant_reference",
+    "language",
+    "return_url",
+    "signature"
+]);
+var APS_CARD_FIELDS = /* @__PURE__ */ Object.freeze(["card_number", "expiry_date", "card_security_code"]);
+var APS_OPTIONAL_FIELDS = /* @__PURE__ */ Object.freeze(["card_holder_name", "remember_me"]);
+var URL_LIMIT7 = 2048;
+var BODY_LIMIT16 = 32 * 1024;
+var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
+var controlFree = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+var SHAPES = /* @__PURE__ */ new Map([
+    ["service_command", (v) => v === "TOKENIZATION"],
+    ["access_code", (v) => exact(/^[A-Za-z0-9]{1,20}$/, v)],
+    ["merchant_identifier", (v) => exact(/^[A-Za-z0-9]{1,20}$/, v)],
+    ["merchant_reference", (v) => exact(/^[A-Za-z0-9._-]{1,40}$/, v)],
+    ["language", (v) => v === "en" || v === "ar"],
+    // Hex SHA-256 (APS's default), SHA-512, or the 40 characters of the SHA-1 APS calls SHA-128.
+    ["signature", (v) => exact(/^(?:[0-9A-Fa-f]{40}|[0-9A-Fa-f]{64}|[0-9A-Fa-f]{128})$/, v)],
+    ["card_number", (v) => exact(/^[0-9]{12,19}$/, v)],
+    ["expiry_date", (v) => exact(/^[0-9]{2}(?:0[1-9]|1[0-2])$/, v)],
+    ["card_security_code", (v) => exact(/^[0-9]{3,4}$/, v)],
+    ["card_holder_name", (v) => controlFree(v, 255)],
+    ["remember_me", (v) => v === "YES" || v === "NO"]
+]);
+function apsTokenizationUrl(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT7 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.pathname !== APS_TOKENIZATION_PATH || !Object.prototype.hasOwnProperty.call(APS_HOSTS, parsed.hostname))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: APS_HOSTS[parsed.hostname] });
+}
+function formEncode2(value) {
+    let encoded;
+    try {
+        encoded = encodeURIComponent(value);
+    }
+    catch {
+        return null;
+    }
+    return encoded.replace(/[!'()~]/g, (ch) => `%${ch.charCodeAt(0).toString(16).toUpperCase()}`).replace(/%20/g, "+");
+}
+function formDecode(raw) {
+    if (!/^(?:[A-Za-z0-9*._+-]|%[0-9A-F]{2})*$/.test(raw))
+        return null;
+    let value;
+    try {
+        value = decodeURIComponent(raw.replace(/\+/g, "%20"));
+    }
+    catch {
+        return null;
+    }
+    return formEncode2(value) === raw ? value : null;
+}
+function parseForm(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT16)
+        return null;
+    const pairs = [];
+    const values = /* @__PURE__ */ new Map();
+    for (const chunk of body.split("&")) {
+        const separator = chunk.indexOf("=");
+        if (separator < 1)
+            return null;
+        const rawName = chunk.slice(0, separator), raw = chunk.slice(separator + 1);
+        const name = formDecode(rawName), value = formDecode(raw);
+        if (name === null || value === null || values.has(name))
+            return null;
+        pairs.push({ name, rawName, raw, value });
+        values.set(name, value);
+    }
+    return { pairs, values };
+}
+function returnUrlAdmitted(value) {
+    if (typeof value !== "string" || value.length > 400 || value.includes("#") || /[\u0000- \u007f]/.test(value))
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    return parsed.protocol === "https:" && !parsed.username && !parsed.password && parsed.href === value;
+}
+function apsBodyRefusal(body) {
+    const form = parseForm(body);
+    if (!form)
+        return "aps_body_unsupported";
+    const has = (name) => form.values.has(name);
+    if (has("token_name"))
+        return "aps_saved_card_refused";
+    if ([...form.values.keys()].some((name) => /^merchant_extra[1-5]?$|^agreement_id$|^recurring_/.test(name)))
+        return "aps_recurring_refused";
+    if (has("service_command") && form.values.get("service_command") !== "TOKENIZATION")
+        return "aps_service_command_refused";
+    const allowed = /* @__PURE__ */ new Set([...APS_SIGNED_FIELDS, ...APS_CARD_FIELDS, ...APS_OPTIONAL_FIELDS]);
+    if (form.pairs.some(({ name }) => !allowed.has(name)))
+        return "aps_body_unsupported";
+    if (!returnUrlAdmitted(form.values.get("return_url")))
+        return "aps_return_url_refused";
+    for (const name of [...APS_SIGNED_FIELDS, ...APS_CARD_FIELDS]) {
+        if (name !== "return_url" && !SHAPES.get(name)(form.values.get(name)))
+            return "aps_body_unsupported";
+    }
+    for (const name of APS_OPTIONAL_FIELDS) {
+        if (has(name) && !SHAPES.get(name)(form.values.get(name)))
+            return "aps_body_unsupported";
+    }
+    return null;
+}
+function apsBodyVerdict(body, url) {
+    if (url !== void 0 && !apsTokenizationUrl(url))
+        return { verdict: "refuse", code: "aps_url_refused" };
+    const form = parseForm(body);
+    const names = form ? [...form.values.keys()] : typeof body === "string" ? body.split("&").map((chunk) => {
+        try {
+            return decodeURIComponent(chunk.split("=")[0].replace(/\+/g, " "));
+        }
+        catch {
+            return APS_CARD_FIELDS[0];
+        }
+    }) : [APS_CARD_FIELDS[0]];
+    const mentionsCard = !form && typeof body === "string" && APS_CARD_FIELDS.some((name) => body.toLowerCase().includes(name) || body.replace(/%([0-9A-Fa-f]{2})/g, (_, hex) => String.fromCharCode(parseInt(hex, 16))).toLowerCase().includes(name));
+    if (!mentionsCard && !names.some((name) => APS_CARD_FIELDS.includes(name.trim().toLowerCase())))
+        return { verdict: "continue" };
+    const code = apsBodyRefusal(body);
+    return code ? { verdict: "refuse", code } : { verdict: "card" };
+}
+var ANSWER_LIMIT = 64 * 1024;
+// src/paypal.js
+var PAYPAL_PSP = "paypal";
+var PAYPAL_CONFIRM_HOSTS = /* @__PURE__ */ Object.freeze(["www.paypal.com", "www.sandbox.paypal.com", "api-m.paypal.com", "api-m.sandbox.paypal.com"]);
+var CONFIRM_PATH = /^\/v2\/checkout\/orders\/([A-Z0-9]{1,36})\/confirm-payment-source$/;
+var BODY_LIMIT17 = 8192;
+var CARD_KEYS8 = /* @__PURE__ */ Object.freeze(["number", "expiry", "security_code", "name", "billing_address", "attributes", "brand_preference"]);
+var ADDRESS_KEYS3 = /* @__PURE__ */ Object.freeze([
+    "address_line_1",
+    "address_line_2",
+    "address_line_3",
+    "admin_area_1",
+    "admin_area_2",
+    "admin_area_3",
+    "admin_area_4",
+    "postal_code",
+    "country_code"
+]);
+var CONTROL8 = /[\u0000-\u001f\u007f]/;
+var TEXT_LIMIT4 = 300;
+var cardLike = (value) => (value.match(/[0-9]/g) ?? []).length >= 12;
+var text3 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT4 && !CONTROL8.test(value) && !cardLike(value);
+var record14 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own3 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var keysWithin2 = (value, allowed) => record14(value) && Object.keys(value).every((key) => allowed.includes(key));
+var refuse20 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD19 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE9 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function paypalConfirmOrderId(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !PAYPAL_CONFIRM_HOSTS.includes(parsed.hostname))
+        return null;
+    return CONFIRM_PATH.exec(parsed.pathname)?.[1] ?? null;
+}
+function isPaypalConfirmUrl(url) {
+    return paypalConfirmOrderId(url) !== null;
+}
+function readBody10(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT17)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record14(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+var typedNumber = (value) => typeof value === "string" && value.length <= 23 && /^[0-9]+(?: [0-9]+)*$/.test(value) && value.replace(/ /g, "").length >= 12 && value.replace(/ /g, "").length <= 19;
+function installmentsOk(value) {
+    if (!keysWithin2(value, ["term", "interval_duration"]) || Object.keys(value).length === 0)
+        return false;
+    if (own3(value, "term") && !(Number.isSafeInteger(value.term) && value.term >= 1 && value.term <= 99))
+        return false;
+    return !own3(value, "interval_duration") || typeof value.interval_duration === "string" && /^P[0-9]{1,3}[DWMY]$/.test(value.interval_duration);
+}
+function paypalBodyVerdict(body) {
+    const value = readBody10(body);
+    if (value === null)
+        return refuse20("paypal_body_unsupported");
+    const source = value.payment_source;
+    const card = record14(source) ? source.card : void 0;
+    const number = record14(card) ? card.number : void 0;
+    if (number === void 0 || number === null || number === "")
+        return CONTINUE9;
+    const context = value.application_context;
+    const attributes = record14(card.attributes) ? card.attributes : null;
+    if (record14(context) && context.vault === true || own3(card, "stored_credential") || attributes && (own3(attributes, "vault") || own3(attributes, "customer")))
+        return refuse20("paypal_card_on_file");
+    if (attributes && record14(attributes.verification) && attributes.verification.method === "SCA_ALWAYS")
+        return refuse20("paypal_three_ds");
+    if (!keysWithin2(value, ["payment_source"]) || !keysWithin2(source, ["card"]) || !keysWithin2(card, CARD_KEYS8) || !typedNumber(card.number) || typeof card.expiry !== "string" || !/^[0-9]{4}-(?:0[1-9]|1[0-2])$/.test(card.expiry))
+        return refuse20("paypal_body_unsupported");
+    if (own3(card, "security_code") && !(typeof card.security_code === "string" && /^[0-9]{3,4}$/.test(card.security_code)))
+        return refuse20("paypal_body_unsupported");
+    if (own3(card, "name") && !(text3(card.name) && card.name.trim() !== ""))
+        return refuse20("paypal_body_unsupported");
+    if (own3(card, "brand_preference") && !(typeof card.brand_preference === "string" && /^[A-Z][A-Z_]{1,31}$/.test(card.brand_preference))) {
+        return refuse20("paypal_body_unsupported");
+    }
+    if (own3(card, "billing_address") && !(keysWithin2(card.billing_address, ADDRESS_KEYS3) && Object.values(card.billing_address).every(text3))) {
+        return refuse20("paypal_body_unsupported");
+    }
+    if (own3(card, "attributes") && !(keysWithin2(attributes, ["installments"]) && installmentsOk(attributes.installments))) {
+        return refuse20("paypal_body_unsupported");
+    }
+    return CARD19;
+}
+// src/clover.js
+var CLOVER_PSP = "clover";
+var CLOVER_TOKEN_HOSTS = /* @__PURE__ */ Object.freeze({ "token.clover.com": "production", "token-sandbox.dev.clover.com": "test" });
+var CLOVER_TOKEN_PATH = "/v1/tokens";
+var BODY_LIMIT18 = 4096;
+var REQUIRED_KEYS = /* @__PURE__ */ Object.freeze(["encrypted_pan", "exp_month", "exp_year", "cvv", "first6", "last4", "brand"]);
+var OPTIONAL_KEYS = /* @__PURE__ */ Object.freeze(["address_line1", "phone_numbers", "email_address", "name", "address_zip"]);
+var CARD_ORDER = /* @__PURE__ */ Object.freeze([...REQUIRED_KEYS, ...OPTIONAL_KEYS]);
+var ENCRYPTED_PAN = /^[A-Za-z0-9+/]{341}[AQgw]==$/;
+var MONTH9 = /^(?:[1-9]|1[0-2])$/;
+var YEAR9 = /^(?:[0-9]|[1-9][0-9])$/;
+var CODE3 = /^[0-9]{3,4}$/;
+var FIRST6 = /^[0-9]{6}$/;
+var LAST4 = /^[0-9]{4}$/;
+var BRANDS = /* @__PURE__ */ new Set(["VISA", "MC", "AMEX", "DISCOVER", "DINERS_CLUB", "JCB"]);
+var PHONE_TYPES = /* @__PURE__ */ new Set(["home_number", "mobile_number", "work_number"]);
+var COUNTRY_CODE2 = /^[0-9]{1,4}$/;
+var SUBSCRIBER = /^[0-9]{1,11}$/;
+var POSTAL_CODE2 = /^[A-Za-z0-9]{1,10}$/;
+var TEXT_LIMIT5 = 256;
+var EMAIL_LIMIT = 254;
+var CARD_LIKE_RUN = /[0-9]{12,}/;
+var record15 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own4 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse21 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD20 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function cloverTokenUrl(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    if (!own4(CLOVER_TOKEN_HOSTS, parsed.hostname) || parsed.pathname !== CLOVER_TOKEN_PATH)
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: CLOVER_TOKEN_HOSTS[parsed.hostname] });
+}
+function cloverBrand(digits3) {
+    if (typeof digits3 !== "string" || !/^[0-9]{6,19}$/.test(digits3))
+        return null;
+    const two = Number(digits3.slice(0, 2));
+    const three = Number(digits3.slice(0, 3));
+    const four = Number(digits3.slice(0, 4));
+    const six = Number(digits3.slice(0, 6));
+    if (digits3.startsWith("4"))
+        return "VISA";
+    if (two === 34 || two === 37)
+        return "AMEX";
+    if (two >= 51 && two <= 55 || four >= 2221 && four < 2721)
+        return "MC";
+    if (four >= 3528 && four <= 3589)
+        return "JCB";
+    if (two === 64 || three >= 644 && three <= 659 || four === 6011 || six >= 622129 && six <= 622925)
+        return "DISCOVER";
+    if (two === 36 || two === 38 || two === 39 || three === 309 || three >= 300 && three <= 305)
+        return "DINERS_CLUB";
+    if ([5018, 5020, 5038, 5893, 6e3, 6304, 6759, 6761, 6762, 6763, 6799].includes(four))
+        return "MAESTRO";
+    return "UNKNOWN";
+}
+var isCiphertext = (value) => typeof value === "string" && ENCRYPTED_PAN.test(value);
+function readBody11(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT18)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record15(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function inFrameOrder(keys) {
+    let last = -1;
+    for (const key of keys) {
+        const at = CARD_ORDER.indexOf(key);
+        if (at <= last)
+            return false;
+        last = at;
+    }
+    return REQUIRED_KEYS.every((key) => keys.includes(key));
+}
+var sideText = (value, limit = TEXT_LIMIT5) => typeof value === "string" && value.length <= limit && !CARD_LIKE_RUN.test(value);
+function isPhoneNumbers(value) {
+    if (!record15(value))
+        return false;
+    const types = Object.keys(value);
+    if (types.length !== 1 || !PHONE_TYPES.has(types[0]))
+        return false;
+    const phone2 = value[types[0]];
+    if (!record15(phone2))
+        return false;
+    const keys = Object.keys(phone2);
+    return keys.length === 2 && keys[0] === "country_code" && keys[1] === "subscriber" && typeof phone2.country_code === "string" && COUNTRY_CODE2.test(phone2.country_code) && typeof phone2.subscriber === "string" && SUBSCRIBER.test(phone2.subscriber);
+}
+function isCardMember(card) {
+    if (!record15(card) || !inFrameOrder(Object.keys(card)))
+        return false;
+    if (!isCiphertext(card.encrypted_pan))
+        return false;
+    if (typeof card.exp_month !== "string" || !MONTH9.test(card.exp_month))
+        return false;
+    if (typeof card.exp_year !== "string" || !YEAR9.test(card.exp_year))
+        return false;
+    if (typeof card.cvv !== "string" || !CODE3.test(card.cvv))
+        return false;
+    if (typeof card.first6 !== "string" || !FIRST6.test(card.first6))
+        return false;
+    if (typeof card.last4 !== "string" || !LAST4.test(card.last4))
+        return false;
+    if (typeof card.brand !== "string" || !BRANDS.has(card.brand) || cloverBrand(card.first6) !== card.brand)
+        return false;
+    if (own4(card, "address_line1") && !sideText(card.address_line1))
+        return false;
+    if (own4(card, "phone_numbers") && !isPhoneNumbers(card.phone_numbers))
+        return false;
+    if (own4(card, "email_address") && !(sideText(card.email_address, EMAIL_LIMIT) && /^[^\s@]+@[^\s@]+$/.test(card.email_address)))
+        return false;
+    if (own4(card, "name") && !(sideText(card.name) && card.name !== "" && card.name === card.name.trim()))
+        return false;
+    if (own4(card, "address_zip") && !(typeof card.address_zip === "string" && POSTAL_CODE2.test(card.address_zip)))
+        return false;
+    return true;
+}
+function cloverBodyVerdict(body, url) {
+    if (url !== void 0 && cloverTokenUrl(url) === null)
+        return refuse21("clover_url_refused");
+    const value = readBody11(body);
+    if (value === null)
+        return refuse21("clover_body_unsupported");
+    const keys = Object.keys(value);
+    if (keys.length !== 1 || keys[0] !== "card" || !isCardMember(value.card))
+        return refuse21("clover_body_unsupported");
+    return CARD20;
+}
+// src/tap-payments.js
+var TAP_PAYMENTS_PSP = "tap_payments";
+var TAP_PAYMENTS_TOKEN_URL = "https://sdk.tap.company/v2/card/token";
+var TAP_PAYMENTS_PURPOSES = /* @__PURE__ */ Object.freeze(["CHARGE", "AUTHORIZE"]);
+var record16 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+function isTapPaymentsTokenUrl(url) {
+    return url === TAP_PAYMENTS_TOKEN_URL;
+}
+var pin6 = (fields) => Object.freeze({
+    ...fields,
+    origins: Object.freeze([...fields.origins]),
+    sessions: Object.freeze({ ...fields.sessions }),
+    key: Object.freeze({ ...fields.key })
+});
+var TAP_PAYMENTS_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin6({
+        id: "casefilegame",
+        merchant: "Casefilegame",
+        tapMerchantId: "67977048",
+        publishableKey: "pk_live_ydlRjrWcLXaVvpsSBQKOie86",
+        environment: "production",
+        origins: ["https://checkout.tap.company"],
+        // The WooCommerce plugin's redirect (Plugin-WooCommerce-All-in-one tap.php 567-586, read 2026-10-17)
+        // creates the src_all charge with save_card false and names no agreement, subscription or destinations.
+        sessions: { saveCard: false, agreement: false, subscription: false, destinations: false },
+        key: {
+            spki: "MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAzja2vB+Iyafj2Mm3pFg65z7Yvj9ZeoFLdMBgWFyyjF020r5HSPKVhuZ39uJkjs0U/kWgEpKDzHZAKdtGv36dS33NjMAzYpgFkD8j+9/YWqpvAGRj5nv1b/q7NaiZk3b1wm7aXHJOx5L6rPQf2qDQxhcSNHocU+Uy8wGmGxRRu6QRKN3khaz4o4jJDzqxns4h/ShzHjdZeWIVfpCAyVoED0IESBYrvGEhJeyKnga5XdHdBU2yP8P1huO4RbSKcZv00ZgxVHAQQ9CqArW3TE8SyLLnJPkSpSHHBnIPSQS1z3ld1mImy/zqTd4ltkV6XHpYqVvoPmys2EuZX3pMvCcPGwIBEQ==",
+            sha256: "6eb4e89a1e05a06a39d631f6fb450c052a9cad9935edc1921e84e80207470552",
+            // The shared parser takes exponent 17 only under a pin that names it (rsa-pkcs1v15.js).
+            exponent: 17
+        }
+    })
+]);
+var BODY_LIMIT19 = 16384;
+var ROOT_KEYS7 = /* @__PURE__ */ Object.freeze([
+    "encryptedData",
+    "purpose",
+    "customer",
+    "consent",
+    "merchant",
+    "order",
+    "payment_agreement",
+    "client_ip",
+    "device",
+    "browser",
+    "app"
+]);
+var REQUIRED_KEYS2 = /* @__PURE__ */ Object.freeze(["encryptedData", "purpose", "order", "device", "browser", "app"]);
+var SAVE_PURPOSES = /* @__PURE__ */ Object.freeze(["SAVE_TOKEN", "SAVE_AUTHENTICATED_TOKEN"]);
+var ORDER_KEYS = /* @__PURE__ */ Object.freeze(["amount", "currency", "id", "description", "metadata", "reference"]);
+var DEVICE_KEYS3 = /* @__PURE__ */ Object.freeze(["source", "ip"]);
+var BROWSER_KEYS = /* @__PURE__ */ Object.freeze(["name", "id"]);
+var APP_KEYS = /* @__PURE__ */ Object.freeze(["identifier", "name", "version", "iframe_version", "sdk_version"]);
+var CIPHERTEXT_BYTES = /* @__PURE__ */ Object.freeze([128, 256, 384, 512]);
+var BASE644 = /^[A-Za-z0-9+/]+={0,2}$/;
+var CURRENCY3 = /^[A-Z]{3}$/;
+var TEXT_LIMIT6 = 512;
+var CONTROL9 = /[\u0000-\u001f\u007f]/;
+var CARD_LONG_DIGITS = /(?:\p{Nd}[\s-]?){12}\p{Nd}/u;
+var NESTING_LIMIT = 4;
+var MEMBERS_LIMIT = 64;
+var refuse22 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD21 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function decodedBytes(value) {
+    if (typeof value !== "string" || value.length % 4 !== 0 || !BASE644.test(value))
+        return -1;
+    try {
+        if (btoa(atob(value)) !== value)
+            return -1;
+    }
+    catch {
+        return -1;
+    }
+    const pad = value.endsWith("==") ? 2 : value.endsWith("=") ? 1 : 0;
+    return value.length / 4 * 3 - pad;
+}
+function isTapPaymentsCiphertext(value) {
+    return CIPHERTEXT_BYTES.includes(decodedBytes(value));
+}
+function readBody12(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT19)
+        return null;
+    try {
+        const value = JSON.parse(body);
+        return record16(value) && JSON.stringify(value) === body ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+var inOrder3 = (keys, order) => {
+    let at = -1;
+    for (const key of keys) {
+        const next = order.indexOf(key);
+        if (next <= at)
+            return false;
+        at = next;
+    }
+    return true;
+};
+var onlyKeys = (value, allowed) => record16(value) && Object.keys(value).every((key) => allowed.includes(key));
+var plainText4 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT6 && !CONTROL9.test(value) && !CARD_LONG_DIGITS.test(value);
+var plainScalar = (value) => value === null || typeof value === "boolean" || typeof value === "number" && Number.isFinite(value) && !CARD_LONG_DIGITS.test(String(value)) || plainText4(value);
+function plainJson(value, depth = 0, budget = { members: 0 }) {
+    if (depth > NESTING_LIMIT)
+        return false;
+    if (Array.isArray(value)) {
+        budget.members += value.length;
+        return budget.members <= MEMBERS_LIMIT && value.every((item) => plainJson(item, depth + 1, budget));
+    }
+    if (record16(value)) {
+        const keys = Object.keys(value);
+        budget.members += keys.length;
+        return budget.members <= MEMBERS_LIMIT && keys.every((key) => plainText4(key) && plainJson(value[key], depth + 1, budget));
+    }
+    return plainScalar(value);
+}
+function soundOrder(order) {
+    if (!onlyKeys(order, ORDER_KEYS) || !inOrder3(Object.keys(order), ORDER_KEYS))
+        return false;
+    if ("amount" in order && !(typeof order.amount === "number" && Number.isFinite(order.amount) && order.amount >= 0 && !CARD_LONG_DIGITS.test(String(order.amount))))
+        return false;
+    if ("currency" in order && !(typeof order.currency === "string" && CURRENCY3.test(order.currency)))
+        return false;
+    if ("id" in order && !plainText4(order.id))
+        return false;
+    if ("description" in order && !plainText4(order.description))
+        return false;
+    if ("metadata" in order && !plainJson(order.metadata))
+        return false;
+    return !("reference" in order) || plainJson(order.reference);
+}
+var soundDevice2 = (device) => onlyKeys(device, DEVICE_KEYS3) && inOrder3(Object.keys(device), DEVICE_KEYS3) && (device.source === "web" || device.source === "app") && (!("ip" in device) || plainText4(device.ip));
+var soundBrowser = (browser) => onlyKeys(browser, BROWSER_KEYS) && inOrder3(Object.keys(browser), BROWSER_KEYS) && (!("name" in browser) || plainText4(browser.name)) && plainText4(browser.id);
+var versionValue = (value) => plainText4(value) || typeof value === "number" && Number.isFinite(value) && !CARD_LONG_DIGITS.test(String(value));
+var soundApp = (app) => onlyKeys(app, APP_KEYS) && inOrder3(Object.keys(app), APP_KEYS) && app.identifier === "card_sdk" && app.name === "card_sdk" && ["version", "iframe_version", "sdk_version"].every((key) => !(key in app) || versionValue(app[key]));
+function tapPaymentsBodyVerdict(body) {
+    const value = readBody12(body);
+    if (value === null)
+        return refuse22("tap_payments_body_unsupported");
+    const keys = Object.keys(value);
+    if (!keys.every((key) => ROOT_KEYS7.includes(key)) || !inOrder3(keys, ROOT_KEYS7) || !REQUIRED_KEYS2.every((key) => keys.includes(key))) {
+        return refuse22("tap_payments_body_unsupported");
+    }
+    if (!isTapPaymentsCiphertext(value.encryptedData))
+        return refuse22("tap_payments_body_unsupported");
+    if (typeof value.purpose !== "string")
+        return refuse22("tap_payments_body_unsupported");
+    if (SAVE_PURPOSES.includes(value.purpose))
+        return refuse22("tap_payments_keep_on_file");
+    if (!TAP_PAYMENTS_PURPOSES.includes(value.purpose))
+        return refuse22("tap_payments_body_unsupported");
+    if ("payment_agreement" in value && value.payment_agreement !== null)
+        return refuse22("tap_payments_keep_on_file");
+    if ("consent" in value) {
+        const consent = value.consent;
+        if (!record16(consent) || Object.keys(consent).length !== 1 || typeof consent.acknowledge !== "boolean")
+            return refuse22("tap_payments_body_unsupported");
+        if (consent.acknowledge)
+            return refuse22("tap_payments_keep_on_file");
+    }
+    if ("customer" in value && !(record16(value.customer) && plainJson(value.customer)) || "merchant" in value && !(record16(value.merchant) && plainJson(value.merchant)) || "client_ip" in value && value.client_ip !== null && !plainText4(value.client_ip) || !soundOrder(value.order) || !soundDevice2(value.device) || !soundBrowser(value.browser) || !soundApp(value.app)) {
+        return refuse22("tap_payments_body_unsupported");
+    }
+    return CARD21;
+}
+// src/conekta.js
+var CONEKTA_PSP = "conekta";
+var CONEKTA_TOKENS_URL = "https://api.conekta.io/tokens";
+var CONEKTA_COMPONENT_TOKEN_URLS = /* @__PURE__ */ Object.freeze(["https://pay.conekta.com/api/tokens", "https://pay.conekta.com/api/tokens/"]);
+var CONEKTA_CARD_KEYS = /* @__PURE__ */ Object.freeze(["number", "name", "cvc", "exp_month", "exp_year", "exp", "address", "device_fingerprint"]);
+var CONEKTA_ADDRESS_KEYS = /* @__PURE__ */ Object.freeze(["street1", "street2", "street3", "city", "state", "zip", "country"]);
+var BODY_LIMIT20 = 4096;
+var URL_LIMIT8 = 64;
+var NUMBER5 = /^[0-9]{12,19}$/;
+var SECURITY_CODE13 = /^[0-9]{3,4}$/;
+var MONTH10 = /^(?:0?[1-9]|1[0-2])$/;
+var YEAR10 = /^(?:[0-9]{2}|20[0-9]{2})$/;
+var EXPIRY2 = /^(?:0[1-9]|1[0-2])\/(?:[0-9]{2}|20[0-9]{2})$/;
+var FINGERPRINT = /^(?:[a-z0-9]{31,32})?$/;
+var LETTERS = "A-Za-z\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u017F";
+var PAGE_NAME2 = new RegExp(`^[${LETTERS} .'-]{1,64}$`);
+var HAS_LETTER = new RegExp(`[${LETTERS}]`);
+var ADDRESS_VALUE = new RegExp(`^[\\x20-\\x7e\\u00a0-\\u017f]{0,128}$`);
+var PAN_LIKE5 = new RegExp(`(?:[0-9][^0-9${LETTERS}]*){12,}`);
+var record17 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var refuse23 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD22 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function conektaTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT8)
+        return null;
+    if (url === CONEKTA_TOKENS_URL)
+        return Object.freeze({ kind: "tokens" });
+    return CONEKTA_COMPONENT_TOKEN_URLS.includes(url) ? Object.freeze({ kind: "component" }) : null;
+}
+function readJson4(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT20)
+        return null;
+    try {
+        const value = JSON.parse(body);
+        return record17(value) && JSON.stringify(value) === body ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function componentBody(value) {
+    const keys = Object.keys(value);
+    return keys.length === 2 && keys[0] === "data" && keys[1] === "key" && typeof value.data === "string" && typeof value.key === "string";
+}
+function soundAddress(address2) {
+    if (!record17(address2))
+        return false;
+    const keys = Object.keys(address2);
+    return keys.length > 0 && keys.every((key) => CONEKTA_ADDRESS_KEYS.includes(key) && typeof address2[key] === "string" && ADDRESS_VALUE.test(address2[key]) && !PAN_LIKE5.test(address2[key])) && keys.some((key) => address2[key] !== "");
+}
+function judgeCard(card) {
+    if (!record17(card))
+        return "conekta_body_unsupported";
+    const keys = Object.keys(card);
+    if (!keys.every((key) => CONEKTA_CARD_KEYS.includes(key)) || keys[keys.length - 1] !== "device_fingerprint" || !["number", "name", "cvc", "exp_month", "exp_year"].every((key) => keys.includes(key)))
+        return "conekta_body_unsupported";
+    if (typeof card.number !== "string" || !NUMBER5.test(card.number) || typeof card.cvc !== "string" || !SECURITY_CODE13.test(card.cvc) || typeof card.exp_month !== "string" || !MONTH10.test(card.exp_month) || typeof card.exp_year !== "string" || !YEAR10.test(card.exp_year) || typeof card.name !== "string" || !PAGE_NAME2.test(card.name) || !HAS_LETTER.test(card.name) || typeof card.device_fingerprint !== "string" || !FINGERPRINT.test(card.device_fingerprint))
+        return "conekta_body_unsupported";
+    if (keys.includes("exp") && (typeof card.exp !== "string" || !EXPIRY2.test(card.exp) || card.exp !== `${card.exp_month}/${card.exp_year}`)) {
+        return "conekta_body_unsupported";
+    }
+    if (keys.includes("address") && !soundAddress(card.address))
+        return "conekta_body_unsupported";
+    return null;
+}
+function conektaBodyVerdict(body, url) {
+    if (url !== void 0) {
+        const target = conektaTarget(url);
+        if (target === null)
+            return refuse23("conekta_url_refused");
+        if (target.kind === "component")
+            return refuse23("conekta_component_unsupported");
+    }
+    const value = readJson4(body);
+    if (value === null)
+        return refuse23("conekta_body_unsupported");
+    if (componentBody(value))
+        return refuse23("conekta_component_unsupported");
+    const keys = Object.keys(value);
+    if (keys.length !== 1 || keys[0] !== "card")
+        return refuse23("conekta_body_unsupported");
+    const code = judgeCard(value.card);
+    return code === null ? CARD22 : refuse23(code);
+}
+var HOLDER4 = new RegExp(`^[${LETTERS}](?:[${LETTERS} .'-]{0,62}[${LETTERS}.])?$`);
+var ERROR_TYPE_STATUS = /* @__PURE__ */ Object.freeze({
+    malformed_request_error: 400,
+    authentication_error: 401,
+    processing_error: 402,
+    resource_not_found_error: 404,
+    conflict_error: 409,
+    precondition_required_error: 412,
+    parameter_validation_error: 422
+});
+var CONEKTA_ANSWER_ERROR_TYPES = /* @__PURE__ */ Object.freeze(Object.keys(ERROR_TYPE_STATUS));
+// src/makecommerce.js
+var MAKECOMMERCE_PSP = "makecommerce";
+var MAKECOMMERCE_CARD_HOSTS = /* @__PURE__ */ Object.freeze({ "cc.maksekeskus.ee": "production", "cc-test.maksekeskus.ee": "test" });
+var MAKECOMMERCE_CARD_PATH = "/card-payment";
+var MAKECOMMERCE_FRAME_VERSIONS = /* @__PURE__ */ Object.freeze(["cde.31", "cde.35"]);
+var BODY_LIMIT21 = 4096;
+var HEAD_KEYS = /* @__PURE__ */ Object.freeze(["transaction", "customer", "ocp", "checkout"]);
+var TAIL_KEYS = /* @__PURE__ */ Object.freeze(["card", "tokenizer", "shop_id", "client_data", "hostname", "public_key"]);
+var CARD_KEYS9 = /* @__PURE__ */ Object.freeze(["name", "number", "exp_month", "exp_year", "cvc"]);
+var CLIENT_KEYS = /* @__PURE__ */ Object.freeze(["client_fingerprint", "client_tz_offset", "client_time"]);
+var UUID3 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var EMAIL4 = /^(?!.*\.\.)(?!.*-$)(?!^-)[A-Za-z0-9._%+-]+@[A-Za-z0-9]+(?:-[A-Za-z0-9]+)*(?:\.[A-Za-z]{2,})+$/;
+var CARD_NUMBER11 = /^[0-9]{13,19}$/;
+var MONTH11 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR11 = /^[0-9]{2}$/;
+var CODE4 = /^[0-9]{3}$/;
+var NAME_LIMIT3 = 100;
+var NAME_WORD = /[a-z]+/gi;
+var printable2 = (text7) => [...text7].every((character) => {
+    const point = character.codePointAt(0);
+    return point >= 32 && !(point >= 127 && point <= 159) && point !== 8232 && point !== 8233;
+});
+var FINGERPRINT2 = /^[0-9a-f]{40}$/i;
+var HOSTNAME = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?)+$/;
+var PUBLISHABLE_KEY = /^[A-Za-z0-9]{16,64}$/;
+var record18 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys8 = (value, keys) => {
+    const own6 = Object.keys(value);
+    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+};
+var refuse24 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD23 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function luhn4(digits3) {
+    let sum = 0;
+    for (let at = 0; at < digits3.length; at += 1) {
+        let digit = Number(digits3[digits3.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function makecommerceCardUrl(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.search || parsed.hash || parsed.pathname !== MAKECOMMERCE_CARD_PATH)
+        return null;
+    if (!Object.prototype.hasOwnProperty.call(MAKECOMMERCE_CARD_HOSTS, parsed.hostname))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: MAKECOMMERCE_CARD_HOSTS[parsed.hostname] });
+}
+function isMakecommerceCardUrl(url) {
+    return makecommerceCardUrl(url) !== null;
+}
+function readBody13(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT21)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record18(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+var box = (value) => record18(value) && sameKeys8(value, ["requested"]) && typeof value.requested === "boolean";
+var holderName = (name) => typeof name === "string" && name.length <= NAME_LIMIT3 && printable2(name) && (name.match(NAME_WORD) ?? []).length > 1;
+function frameCardValues(card) {
+    return record18(card) && sameKeys8(card, CARD_KEYS9) && holderName(card.name) && typeof card.number === "string" && CARD_NUMBER11.test(card.number) && luhn4(card.number) && typeof card.exp_month === "string" && MONTH11.test(card.exp_month) && typeof card.exp_year === "string" && YEAR11.test(card.exp_year) && typeof card.cvc === "string" && CODE4.test(card.cvc);
+}
+function clientData(value) {
+    return record18(value) && sameKeys8(value, CLIENT_KEYS) && typeof value.client_fingerprint === "string" && FINGERPRINT2.test(value.client_fingerprint) && Number.isFinite(value.client_tz_offset) && Math.abs(value.client_tz_offset) <= 14 && Number.isSafeInteger(value.client_time) && value.client_time > 0;
+}
+function makecommerceBodyVerdict(body, url) {
+    if (url !== void 0 && !isMakecommerceCardUrl(url))
+        return refuse24("makecommerce_url_refused");
+    const value = readBody13(body);
+    if (value === null)
+        return refuse24("makecommerce_body_unsupported");
+    const recurring = Object.prototype.hasOwnProperty.call(value, "recurring");
+    if (!sameKeys8(value, [...HEAD_KEYS, ...recurring ? ["recurring"] : [], ...TAIL_KEYS]))
+        return refuse24("makecommerce_body_unsupported");
+    if (!record18(value.transaction) || !sameKeys8(value.transaction, ["id"]) || typeof value.transaction.id !== "string" || !UUID3.test(value.transaction.id) || !record18(value.customer) || !sameKeys8(value.customer, ["email"]) || typeof value.customer.email !== "string" || value.customer.email.length > 254 || !EMAIL4.test(value.customer.email) || !box(value.ocp) || recurring && !box(value.recurring) || !MAKECOMMERCE_FRAME_VERSIONS.includes(value.checkout) || value.tokenizer !== value.checkout || !frameCardValues(value.card) || typeof value.shop_id !== "string" || !UUID3.test(value.shop_id) || !clientData(value.client_data) || typeof value.hostname !== "string" || !HOSTNAME.test(value.hostname) || typeof value.public_key !== "string" || !PUBLISHABLE_KEY.test(value.public_key))
+        return refuse24("makecommerce_body_unsupported");
+    if (value.ocp.requested || recurring && value.recurring.requested)
+        return refuse24("makecommerce_card_saving_refused");
+    return CARD23;
+}
+// src/tokenex-iframe.js
+var TOKENEX_IFRAME_PSP = "tokenex_iframe";
+var TOKENEX_IFRAME_HOSTS = Object.freeze(["htp.tokenex.com", "test-htp.tokenex.com"]);
+var TOKENEX_IFRAME_PATH = "/iframe/v3";
+var TOKENEX_IFRAME_REFUSAL_REASONS = Object.freeze(["unsupported", "brand_mismatch", "unreviewed_account"]);
+var TOKENEX_IFRAME_BODY_KEYS = Object.freeze([
+    "TokenExID",
+    "Origin",
+    "AuthenticationKey",
+    "Timestamp",
+    "Data",
+    "CvvValue",
+    "TokenScheme",
+    "CvvOnly",
+    "PCI",
+    "ReturnHash",
+    "use3DS",
+    "ThreeDSMethodNotificationUrl",
+    "kountSessionId",
+    "fraudMerchantId",
+    "UseKount",
+    "kountMode",
+    "kountAnId",
+    "FraudServicesRiskRequestModel",
+    "EnforceLuhnCompliance",
+    "CustomDataLuhnCheck"
+]);
+var TOKENEX_IFRAME_TOKEN_SCHEMES = Object.freeze(["sixTOKENfour"]);
+var TOKENEX_IFRAME_REVIEWED_ACCOUNTS = Object.freeze({
+    "htp.tokenex.com": Object.freeze({}),
+    "test-htp.tokenex.com": Object.freeze({})
+});
+var TOKENEX_IFRAME_ACCOUNT_NAMES = Object.freeze({
+    "htp.tokenex.com": Object.freeze({}),
+    "test-htp.tokenex.com": Object.freeze({})
+});
+var BODY_LIMIT22 = 8192;
+var URL_LIMIT9 = 2048;
+var record19 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var exact2 = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
+var text4 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+var digits = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
+var panLike = (value) => (value.match(/\p{Nd}/gu) ?? []).length >= 12;
+var plain = (value, max) => text4(value, max) && !panLike(value);
+var TOKENEX_ID = /^[0-9]{16}$/;
+var AUTHENTICATION_KEY = /^[A-Za-z0-9+/]{43}=$/;
+var TIMESTAMP = /^20[0-9]{2}(?:0[1-9]|1[0-2])(?:0[1-9]|[12][0-9]|3[01])(?:[01][0-9]|2[0-3])[0-5][0-9][0-5][0-9]$/;
+function isOrigin(value) {
+    if (typeof value !== "string" || value.length > 255 || !value.startsWith("https://"))
+        return false;
+    try {
+        return new URL(value).origin === value;
+    }
+    catch {
+        return false;
+    }
+}
+var BOUND = {
+    TokenExID: (value) => exact2(TOKENEX_ID, value),
+    Origin: isOrigin,
+    AuthenticationKey: (value) => exact2(AUTHENTICATION_KEY, value),
+    Timestamp: (value) => exact2(TIMESTAMP, value),
+    TokenScheme: (value) => TOKENEX_IFRAME_TOKEN_SCHEMES.includes(value)
+};
+var BOUND_KEYS = Object.keys(BOUND);
+var BOOLEAN = /^(?:true|false)$/i;
+var QUERY_RULES = {
+    ...BOUND,
+    Mode: (value) => value === "Data",
+    PCI: (value) => exact2(/^true$/i, value),
+    CVV: (value) => exact2(/^true$/i, value),
+    Container: (value) => exact2(/^[A-Za-z][A-Za-z0-9_-]{0,63}$/, value),
+    CvvContainer: (value) => exact2(/^[A-Za-z][A-Za-z0-9_-]{0,63}$/, value),
+    EnforceLuhnCompliance: (value) => exact2(BOOLEAN, value),
+    CustomDataLabel: (value) => plain(value, 64),
+    CustomCvvDataLabel: (value) => plain(value, 64),
+    ExpiresInSeconds: (value) => exact2(/^[1-9][0-9]{0,3}$/, value),
+    ReturnAutoCompleteValues: (value) => exact2(BOOLEAN, value)
+};
+var QUERY_REQUIRED = [...BOUND_KEYS, "Mode", "PCI", "CVV"];
+function readQuery(search) {
+    if (typeof search !== "string" || !search.startsWith("?") || search.length < 2)
+        return null;
+    const query = /* @__PURE__ */ new Map();
+    for (const chunk of search.slice(1).split("&")) {
+        const eq = chunk.indexOf("=");
+        if (eq < 1)
+            return null;
+        let key, value;
+        try {
+            key = decodeURIComponent(chunk.slice(0, eq));
+            value = decodeURIComponent(chunk.slice(eq + 1));
+        }
+        catch {
+            return null;
+        }
+        if (query.has(key) || !owns5(QUERY_RULES, key) || !QUERY_RULES[key](value))
+            return null;
+        query.set(key, value);
+    }
+    return QUERY_REQUIRED.every((key) => query.has(key)) ? query : null;
+}
+function tokenexIframeTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT9 || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    if (!TOKENEX_IFRAME_HOSTS.includes(parsed.hostname) || parsed.pathname !== TOKENEX_IFRAME_PATH)
+        return null;
+    const query = readQuery(parsed.search);
+    return query ? { host: parsed.hostname, query } : null;
+}
+var PLACEHOLDER = /^[0-9]{1,19}(?: [0-9]{1,19}){0,5}$/;
+var placeholderDigits = (value) => exact2(PLACEHOLDER, value) && value.length <= 23 ? value.replace(/ /g, "") : null;
+var RULES = {
+    ...BOUND,
+    Data: (value) => {
+        const pan = placeholderDigits(value);
+        return pan !== null && pan.length >= 13 && pan.length <= 19;
+    },
+    CvvValue: (value) => digits(value, 3, 4),
+    CvvOnly: (value) => value === "False",
+    PCI: (value) => value === "True",
+    ReturnHash: (value) => value === null,
+    use3DS: (value) => value === "False",
+    ThreeDSMethodNotificationUrl: (value) => value === "",
+    kountSessionId: (value) => value === "",
+    fraudMerchantId: (value) => value === "",
+    UseKount: (value) => value === "False",
+    kountMode: (value) => value === "",
+    kountAnId: (value) => value === "",
+    FraudServicesRiskRequestModel: (value) => value === "",
+    EnforceLuhnCompliance: (value) => value === "true" || value === "false",
+    CustomDataLuhnCheck: (value) => value === true
+};
+function readJson5(body, limit) {
+    if (typeof body !== "string" || body === "" || body.length > limit)
+        return null;
+    try {
+        const value = JSON.parse(body);
+        return record19(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+function judgeBody4(body) {
+    const value = readJson5(body, BODY_LIMIT22);
+    if (!value || JSON.stringify(value) !== body)
+        return null;
+    const keys = Object.keys(value);
+    if (keys.length !== TOKENEX_IFRAME_BODY_KEYS.length || keys.some((key, index) => key !== TOKENEX_IFRAME_BODY_KEYS[index]))
+        return null;
+    return keys.every((key) => RULES[key](value[key])) ? value : null;
+}
+function carriesCard2(body) {
+    const value = readJson5(body, BODY_LIMIT22 * 4);
+    return value !== null && typeof value.Data === "string" && value.Data !== "";
+}
+function bindingRefusal(target, value) {
+    return BOUND_KEYS.every((key) => target.query.get(key) === value[key]) ? null : "unsupported";
+}
+var TOKENEX_IFRAME_GATE_CODES = Object.freeze(["tokenex_iframe_url_refused", "tokenex_iframe_body_unsupported", "tokenex_iframe_query_mismatch"]);
+function tokenexIframeBodyVerdict(body, url) {
+    if (!carriesCard2(body))
+        return { verdict: "continue" };
+    const target = url !== void 0 ? tokenexIframeTarget(url) : null;
+    if (url !== void 0 && !target)
+        return { verdict: "refuse", code: "tokenex_iframe_url_refused" };
+    const value = judgeBody4(body);
+    if (!value)
+        return { verdict: "refuse", code: "tokenex_iframe_body_unsupported" };
+    if (target && bindingRefusal(target, value))
+        return { verdict: "refuse", code: "tokenex_iframe_query_mismatch" };
+    return { verdict: "card" };
+}
+var SUCCESS_RULES = {
+    token: (value) => digits(value, 13, 19),
+    firstSix: (value) => digits(value, 6, 6),
+    lastFour: (value) => digits(value, 4, 4),
+    referenceNumber: (value) => exact2(/^[A-Za-z0-9-]{1,64}$/, value),
+    tokenHMAC: (value) => exact2(/^[A-Za-z0-9+/]{1,128}={0,2}$/, value),
+    cvvIncluded: (value) => typeof value === "boolean"
+};
+var SUCCESS_KEYS = Object.keys(SUCCESS_RULES);
+// src/poynt.js
+var POYNT_PSP = "poynt";
+var UUID4 = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
+var NONCE_URL = new RegExp(`^https://services\\.poynt\\.net/v1/commerce/stores/(${UUID4})/payment-tokens/generate-nonce$`);
+var STORE_ID = new RegExp(`^${UUID4}$`);
+var BODY_LIMIT23 = 8192;
+var ROOT_KEYS8 = /* @__PURE__ */ Object.freeze(["applicationId", "channelId", "card", "verificationData"]);
+var CARD_KEYS10 = /* @__PURE__ */ Object.freeze(["number", "expirationMonth", "expirationYear", "type", "cardHolderFirstName", "cardHolderLastName", "cardHolderFullName"]);
+var ADDRESS_KEYS4 = /* @__PURE__ */ Object.freeze(["postalCode", "line1", "line2", "city", "territory", "countryCode", "postalCodeExtension"]);
+var REQUIRED_ROOT = /* @__PURE__ */ Object.freeze(["applicationId", "card", "verificationData"]);
+var REQUIRED_CARD = /* @__PURE__ */ Object.freeze(["number", "expirationMonth", "expirationYear", "type", "cardHolderFullName"]);
+var CARD_ON_FILE_KEYS = /* @__PURE__ */ Object.freeze(["saveFinancialInstrumentOnFile", "financialInstrumentAgreement"]);
+var CARD_TYPES = /* @__PURE__ */ Object.freeze(["VISA", "MASTERCARD", "AMERICAN_EXPRESS", "DINERS_CLUB", "DISCOVER", "JCB", "UNIONPAY", "MAESTRO", "ELO", "HIPERCARD", "TROY", ""]);
+var CARD_NUMBER12 = /^[0-9]{12,19}$/;
+var MONTH12 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR12 = /^20[0-9]{2}$/;
+var SECURITY_CODE14 = /^[0-9]{3,4}$/;
+var IDENTIFIER = /^[A-Za-z0-9:._-]{1,128}$/;
+var APPLICATION_ID = new RegExp(`^urn:aid:${UUID4}$`);
+var POSTAL_CODE3 = /^[A-Za-z0-9_]{0,16}$/;
+var COUNTRY3 = /^[A-Z]{2}$/;
+var TEXT_LIMIT7 = 256;
+var CONTROL10 = /[\u0000-\u001f\u007f]/;
+var cardLike2 = (text7) => (text7.match(/[0-9]/g) ?? []).length >= 12;
+var text5 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT7 && !CONTROL10.test(value) && !cardLike2(value);
+var record20 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var inOrder4 = (value, order, required) => {
+    const keys = Object.keys(value);
+    let at = -1;
+    for (const key of keys) {
+        const next = order.indexOf(key);
+        if (next <= at)
+            return false;
+        at = next;
+    }
+    return required.every((key) => keys.includes(key));
+};
+var refuse25 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD24 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function poyntStoreId(url) {
+    const match = typeof url === "string" ? NONCE_URL.exec(url) : null;
+    return match ? match[1] : null;
+}
+function isPoyntNonceUrl(url) {
+    return poyntStoreId(url) !== null;
+}
+function readBody14(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT23)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record20(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function poyntBodyVerdict(body) {
+    const value = readBody14(body);
+    if (value === null)
+        return refuse25("poynt_body_unsupported");
+    if (CARD_ON_FILE_KEYS.some((key) => own5(value, key)))
+        return refuse25("poynt_card_on_file");
+    if (!inOrder4(value, ROOT_KEYS8, REQUIRED_ROOT) || typeof value.applicationId !== "string" || !APPLICATION_ID.test(value.applicationId) || own5(value, "channelId") && (typeof value.channelId !== "string" || !IDENTIFIER.test(value.channelId))) {
+        return refuse25("poynt_body_unsupported");
+    }
+    const { card, verificationData: verification } = value;
+    if (!record20(card) || !inOrder4(card, CARD_KEYS10, REQUIRED_CARD) || typeof card.number !== "string" || !CARD_NUMBER12.test(card.number) || typeof card.expirationMonth !== "string" || !MONTH12.test(card.expirationMonth) || typeof card.expirationYear !== "string" || !YEAR12.test(card.expirationYear) || !CARD_TYPES.includes(card.type) || !["cardHolderFirstName", "cardHolderLastName", "cardHolderFullName"].every((key) => !own5(card, key) || text5(card[key]))) {
+        return refuse25("poynt_body_unsupported");
+    }
+    if (!record20(verification) || Object.keys(verification).join() !== "cardHolderBillingAddress,cvData" || typeof verification.cvData !== "string" || !SECURITY_CODE14.test(verification.cvData))
+        return refuse25("poynt_body_unsupported");
+    const address2 = verification.cardHolderBillingAddress;
+    if (!record20(address2) || !inOrder4(address2, ADDRESS_KEYS4, []) || !Object.values(address2).every(text5) || own5(address2, "postalCode") && !POSTAL_CODE3.test(address2.postalCode) || own5(address2, "postalCodeExtension") && !POSTAL_CODE3.test(address2.postalCodeExtension) || own5(address2, "countryCode") && !COUNTRY3.test(address2.countryCode))
+        return refuse25("poynt_body_unsupported");
+    return CARD24;
+}
+var pin7 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), storeIds: Object.freeze([...fields.storeIds]) });
+var POYNT_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin7({
+        id: "yearning_for_learning",
+        merchant: "Yearning for Learning Publishing & Coaching",
+        origins: ["https://ff305485-ba6c-423a-87b0-cebe3f83ffe9.mysimplestore.com"],
+        storeIds: ["71ac12ed-e61f-4318-95db-db0e7c649d6f"]
+    }),
+    pin7({
+        id: "timber_ridge_bookkeeping",
+        merchant: "Timber Ridge Bookkeeping",
+        origins: ["https://d7d64ac3-0352-4e53-af9a-f6d8e7b5fb71.mysimplestore.com"],
+        storeIds: ["27be984a-0a03-4a54-8675-e64bbbe1c43e"]
+    })
+]);
+var MAX_ANSWER_CHARS = 16 * 1024;
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -2469,6 +3821,23 @@ function processorGate(recognizer, url, body) {
     }
     if (recognizer && recognizer.psp === KOMOJU_PSP)
         return komojuBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === HIPAY_PSP) {
+        if (url !== void 0 && !isHipayTokenUrl(url))
+            return { verdict: "refuse", code: "hipay_url_refused" };
+        return hipayBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYPAL_PSP) {
+        if (url !== void 0 && !isPaypalConfirmUrl(url))
+            return { verdict: "refuse", code: "paypal_url_refused" };
+        return paypalBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === MAKECOMMERCE_PSP)
+        return makecommerceBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === POYNT_PSP) {
+        if (url !== void 0 && !isPoyntNonceUrl(url))
+            return { verdict: "refuse", code: "poynt_url_refused" };
+        return poyntBodyVerdict(body);
+    }
     if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
         if (url !== void 0 && !isPaddleVgsCardsUrl(url))
             return { verdict: "refuse", code: "paddle_vgs_url_refused" };
@@ -2490,6 +3859,21 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "pay_nl_url_refused" };
         return payNlBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === TWOC2P_PSP) {
+        if (url === void 0)
+            return twoC2pBodyVerdict(body);
+        const target = twoC2pPaymentTarget(url);
+        if (target === null)
+            return { verdict: "refuse", code: "twoc2p_url_refused" };
+        if (!target.reviewed)
+            return twoC2pPaymentCarriesCard(body) ? { verdict: "refuse", code: "twoc2p_build_unreviewed" } : { verdict: "continue" };
+        const keyBytes = twoC2pKeyBytes(target.environment);
+        return keyBytes === null ? { verdict: "refuse", code: "twoc2p_field_unreviewed" } : twoC2pBodyVerdict(body, keyBytes, target.environment);
+    }
+    if (recognizer && recognizer.psp === APS_PSP)
+        return apsBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === CONEKTA_PSP)
+        return conektaBodyVerdict(body, url);
     if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
         const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
         if (url !== void 0 && target === null)
@@ -2511,6 +3895,15 @@ function processorGate(recognizer, url, body) {
     }
     if (recognizer && recognizer.psp === SUMUP_PSP)
         return sumupBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === CLOVER_PSP)
+        return cloverBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === TAP_PAYMENTS_PSP) {
+        if (url !== void 0 && !isTapPaymentsTokenUrl(url))
+            return { verdict: "refuse", code: "tap_payments_url_refused" };
+        return tapPaymentsBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === TOKENEX_IFRAME_PSP)
+        return tokenexIframeBodyVerdict(body, url);
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {
@@ -2631,20 +4024,20 @@ var KEEP_ON_FILE_REFUSAL = "Refusing to pay: this Primer payment would keep the
 var UNSUPPORTED_SDK_REFUSAL = "Refusing to pay: this checkout uses a Primer SDK Agentcard does not support yet. Nothing was sent.";
 var NETWORK_MISMATCH_REFUSAL = "Refusing to pay: this Primer payment names a card network that is not your card's. Nothing was sent.";
 var FILL_REFUSAL = "Could not fill the card fields for Primer. Nothing was sent.";
-var BODY_LIMIT14 = 16384;
+var BODY_LIMIT24 = 16384;
 var RESPONSE_LIMIT = 32768;
-var ROOT_KEYS6 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
+var ROOT_KEYS9 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
 var INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear", "cardholderName", "preferredNetwork"];
 var REQUIRED_INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear"];
-var record12 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var owns5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
-var text2 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
-var digits = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
-var panLike = (value) => /(?:[0-9][ _.:-]*){12,}/.test(value);
-var plain = (value, max) => text2(value, max) && !panLike(value);
-var MONTH8 = /^(?:0[1-9]|1[0-2])$/;
-var YEAR8 = /^20[0-9]{2}$/;
+var record21 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var exact3 = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
+var text6 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+var digits2 = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
+var panLike2 = (value) => /(?:[0-9][ _.:-]*){12,}/.test(value);
+var plain2 = (value, max) => text6(value, max) && !panLike2(value);
+var MONTH13 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR13 = /^20[0-9]{2}$/;
 var NETWORK2 = /^[A-Z][A-Z_]{1,31}$/;
 function isPrimerTokenizeUrl(url, method = "POST") {
     if (method !== "POST" || typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
@@ -2658,8 +4051,8 @@ function isPrimerTokenizeUrl(url, method = "POST") {
     }
     return parsed.href === url && parsed.protocol === "https:" && !parsed.port && !parsed.username && !parsed.password && !parsed.search && !parsed.hash && PRIMER_PCI_HOSTS.includes(parsed.hostname) && parsed.pathname === PRIMER_TOKENIZE_PATH;
 }
-function judgeBody4(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT14)
+function judgeBody5(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT24)
         return null;
     let value;
     try {
@@ -2668,21 +4061,21 @@ function judgeBody4(body) {
     catch {
         return null;
     }
-    if (!record12(value) || !roundTrips(value, body))
+    if (!record21(value) || !roundTrips(value, body))
         return null;
-    if (!Object.keys(value).every((key) => ROOT_KEYS6.includes(key)) || !owns5(value, "paymentInstrument"))
+    if (!Object.keys(value).every((key) => ROOT_KEYS9.includes(key)) || !owns6(value, "paymentInstrument"))
         return null;
     const instrument = value.paymentInstrument;
-    if (!record12(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns5(instrument, key)))
+    if (!record21(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns6(instrument, key)))
         return null;
-    if (!digits(instrument.number, 12, 19) || !digits(instrument.cvv, 3, 4) || !exact(MONTH8, instrument.expirationMonth) || !exact(YEAR8, instrument.expirationYear))
+    if (!digits2(instrument.number, 12, 19) || !digits2(instrument.cvv, 3, 4) || !exact3(MONTH13, instrument.expirationMonth) || !exact3(YEAR13, instrument.expirationYear))
         return null;
-    if (owns5(instrument, "cardholderName") && instrument.cardholderName !== null && !plain(instrument.cardholderName, 256) || owns5(instrument, "preferredNetwork") && instrument.preferredNetwork !== null && !exact(NETWORK2, instrument.preferredNetwork) || owns5(value, "userDescription") && value.userDescription !== null && !plain(value.userDescription, 256) || owns5(value, "tokenType") && value.tokenType !== "MULTI_USE" || owns5(value, "paymentFlow") && value.paymentFlow !== "VAULT")
+    if (owns6(instrument, "cardholderName") && instrument.cardholderName !== null && !plain2(instrument.cardholderName, 256) || owns6(instrument, "preferredNetwork") && instrument.preferredNetwork !== null && !exact3(NETWORK2, instrument.preferredNetwork) || owns6(value, "userDescription") && value.userDescription !== null && !plain2(value.userDescription, 256) || owns6(value, "tokenType") && value.tokenType !== "MULTI_USE" || owns6(value, "paymentFlow") && value.paymentFlow !== "VAULT")
         return null;
-    return { value, keepOnFile: owns5(value, "tokenType") || owns5(value, "paymentFlow") };
+    return { value, keepOnFile: owns6(value, "tokenType") || owns6(value, "paymentFlow") };
 }
 function primerBodyRefusal(body) {
-    const judged = judgeBody4(body);
+    const judged = judgeBody5(body);
     if (!judged)
         return "unsupported";
     return judged.keepOnFile ? "keep_on_file" : null;
@@ -2691,7 +4084,7 @@ function isPrimerNewCardBody(body) {
     return primerBodyRefusal(body) === null;
 }
 function primerKeepOnFileRequested(body) {
-    const judged = judgeBody4(body);
+    const judged = judgeBody5(body);
     return judged ? judged.keepOnFile : null;
 }
 var CARD_GATE = /* @__PURE__ */ Object.freeze({ psp: "primer", encoding: "json", jsonCardFields: [["paymentInstrument", "number"]] });
@@ -2701,7 +4094,7 @@ var CLIENT_TOKEN = /^[A-Za-z0-9._~+/=-]{16,4096}$/;
 var REQUEST_ID = /^[A-Za-z0-9-]{1,64}$/;
 var API_VERSION = /^2\.[0-9]{1,2}$/;
 function readHeaders(headers) {
-    if (!record12(headers))
+    if (!record21(headers))
         return null;
     const folded = /* @__PURE__ */ new Map();
     for (const [name, value] of Object.entries(headers)) {
@@ -2719,9 +4112,9 @@ function headersRefusal(headers) {
     const version = folded.get("primer-sdk-version");
     if (typeof version !== "string")
         return "unsupported";
-    if (!exact(LEGACY_SDK_VERSION, version))
+    if (!exact3(LEGACY_SDK_VERSION, version))
         return "unsupported_sdk";
-    if (!exact(CONTENT_TYPE2, folded.get("content-type")) || !exact(CLIENT_TOKEN, folded.get("primer-client-token")) || folded.has("primer-sdk-client") && folded.get("primer-sdk-client") !== "WEB" || folded.has("x-api-version") && !exact(API_VERSION, folded.get("x-api-version")) || folded.has("primer-sdk-checkout-session-id") && !exact(REQUEST_ID, folded.get("primer-sdk-checkout-session-id")) || folded.has("x-request-id") && !exact(REQUEST_ID, folded.get("x-request-id")))
+    if (!exact3(CONTENT_TYPE2, folded.get("content-type")) || !exact3(CLIENT_TOKEN, folded.get("primer-client-token")) || folded.has("primer-sdk-client") && folded.get("primer-sdk-client") !== "WEB" || folded.has("x-api-version") && !exact3(API_VERSION, folded.get("x-api-version")) || folded.has("primer-sdk-checkout-session-id") && !exact3(REQUEST_ID, folded.get("primer-sdk-checkout-session-id")) || folded.has("x-request-id") && !exact3(REQUEST_ID, folded.get("x-request-id")))
         return "unsupported";
     return null;
 }
@@ -2748,7 +4141,7 @@ function onTokenizePath(url) {
     }
 }
 function primerTokenizeRefusal(request) {
-    if (!record12(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
+    if (!record21(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
         return "unsupported";
     return headersRefusal(request.headers) ?? primerBodyRefusal(request.body);
 }
@@ -2763,7 +4156,7 @@ function primerCardOnFileRefusal(url, options, policy = PRIMER_SESSION_CARD_ON_F
         return "unsupported";
     if (new URL(url).hostname !== LIVE_PCI_HOST)
         return null;
-    return primerCardOnFileDisclosure(url, policy) && record12(options) && options.keepOnFile === true ? null : "keep_on_file";
+    return primerCardOnFileDisclosure(url, policy) && record21(options) && options.keepOnFile === true ? null : "keep_on_file";
 }
 function primerRefusalMessage(reason) {
     if (reason === "keep_on_file")
@@ -2775,7 +4168,7 @@ function primerRefusalMessage(reason) {
     return UNSUPPORTED_REFUSAL;
 }
 function primerCardNetwork(number) {
-    if (!digits(number, 12, 19))
+    if (!digits2(number, 12, 19))
         return null;
     const two = Number(number.slice(0, 2));
     const four = Number(number.slice(0, 4));
@@ -2788,7 +4181,7 @@ function primerCardNetwork(number) {
     return null;
 }
 function primerNetworkRefusal(body, card) {
-    const judged = judgeBody4(body);
+    const judged = judgeBody5(body);
     if (!judged)
         return "unsupported";
     const preferred = judged.value.paymentInstrument.preferredNetwork;
@@ -2798,14 +4191,14 @@ function primerNetworkRefusal(body, card) {
     return network !== null && network === preferred ? null : "network_mismatch";
 }
 function injectPrimerCard(body, card) {
-    const judged = judgeBody4(body);
+    const judged = judgeBody5(body);
     if (!judged)
         throw new Error(UNSUPPORTED_REFUSAL);
     if (judged.keepOnFile)
         throw new Error(KEEP_ON_FILE_REFUSAL);
-    const month = card && (Number.isInteger(card.month) || digits(card.month, 1, 2)) ? Number(card.month) : NaN;
-    const year = card && (Number.isInteger(card.year) || digits(card.year, 2, 4)) ? Number(card.year) : NaN;
-    if (!card || !digits(card.number, 12, 19) || !(month >= 1 && month <= 12) || !(year >= 0 && year <= 99 || year >= 2e3 && year <= 2099) || !digits(card.cvc, 3, 4)) {
+    const month = card && (Number.isInteger(card.month) || digits2(card.month, 1, 2)) ? Number(card.month) : NaN;
+    const year = card && (Number.isInteger(card.year) || digits2(card.year, 2, 4)) ? Number(card.year) : NaN;
+    if (!card || !digits2(card.number, 12, 19) || !(month >= 1 && month <= 12) || !(year >= 0 && year <= 99 || year >= 2e3 && year <= 2099) || !digits2(card.cvc, 3, 4)) {
         throw new Error(FILL_REFUSAL);
     }
     if (primerNetworkRefusal(body, card) !== null)
@@ -2816,7 +4209,7 @@ function injectPrimerCard(body, card) {
     instrument.expirationMonth = String(month).padStart(2, "0");
     instrument.expirationYear = String(year < 100 ? 2e3 + year : year);
     const where = ["paymentInstrument.number", "paymentInstrument.cvv", "paymentInstrument.expirationMonth", "paymentInstrument.expirationYear"];
-    if (typeof instrument.cardholderName === "string" && typeof card.name === "string" && card.name.trim() !== "" && plain(card.name, 256)) {
+    if (typeof instrument.cardholderName === "string" && typeof card.name === "string" && card.name.trim() !== "" && plain2(card.name, 256)) {
         instrument.cardholderName = card.name;
         where.push("paymentInstrument.cardholderName");
     }
@@ -2824,7 +4217,7 @@ function injectPrimerCard(body, card) {
 }
 var TOKEN3 = /^[A-Za-z0-9_-]{8,256}$/;
 var ERROR_ID = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/;
-var CODE3 = /^[A-Z][A-Z0-9_]{0,63}$/;
+var CODE5 = /^[A-Z][A-Z0-9_]{0,63}$/;
 var NETWORK_NAME = /^[A-Za-z][A-Za-z0-9 _-]{0,31}$/;
 var RESPONSE_MONTH = /^(?:0?[1-9]|1[0-2])$/;
 var RESPONSE_YEAR = /^(?:[0-9]{2}|20[0-9]{2})$/;
@@ -2847,30 +4240,30 @@ function readAnswer(body) {
         return null;
     try {
         const value = JSON.parse(body);
-        return record12(value) ? value : null;
+        return record21(value) ? value : null;
     }
     catch {
         return null;
     }
 }
-var tokenValue = (value) => exact(TOKEN3, value) && !panLike(value);
-var optional = (value, key, check) => !owns5(value, key) || value[key] === null || check(value[key]);
+var tokenValue = (value) => exact3(TOKEN3, value) && !panLike2(value);
+var optional = (value, key, check) => !owns6(value, key) || value[key] === null || check(value[key]);
 function cardDetails(data) {
-    if (!record12(data) || !exact(/^[0-9]{4}$/, data.last4Digits))
+    if (!record21(data) || !exact3(/^[0-9]{4}$/, data.last4Digits))
         return null;
-    if (!optional(data, "first6Digits", (v) => exact(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain(v, 256)) || !optional(data, "network", (v) => exact(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record12))
+    if (!optional(data, "first6Digits", (v) => exact3(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact3(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact3(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain2(v, 256)) || !optional(data, "network", (v) => exact3(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record21))
         return null;
     const safe = { last4Digits: data.last4Digits };
     for (const key of ["first6Digits", "expirationMonth", "expirationYear", "cardholderName", "network", "isNetworkTokenized"]) {
-        if (owns5(data, key) && data[key] !== null)
+        if (owns6(data, key) && data[key] !== null)
             safe[key] = data[key];
     }
-    if (record12(data.binData)) {
+    if (record21(data.binData)) {
         const bin = {};
         for (const key of BIN_KEYS) {
-            if (!owns5(data.binData, key) || data.binData[key] === null)
+            if (!owns6(data.binData, key) || data.binData[key] === null)
                 continue;
-            if (!plain(data.binData[key], 128))
+            if (!plain2(data.binData[key], 128))
                 return null;
             bin[key] = data.binData[key];
         }
@@ -2881,11 +4274,11 @@ function cardDetails(data) {
 function threeDsSummary(value) {
     if (value === void 0 || value === null)
         return null;
-    if (!record12(value) || !exact(CODE3, value.responseCode) || !optional(value, "reasonCode", (v) => exact(CODE3, v)) || !optional(value, "reasonText", (v) => plain(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
+    if (!record21(value) || !exact3(CODE5, value.responseCode) || !optional(value, "reasonCode", (v) => exact3(CODE5, v)) || !optional(value, "reasonText", (v) => plain2(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact3(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
         return void 0;
     const safe = { responseCode: value.responseCode };
     for (const key of ["reasonCode", "reasonText", "protocolVersion", "challengeIssued"]) {
-        if (owns5(value, key) && value[key] !== null)
+        if (owns6(value, key) && value[key] !== null)
             safe[key] = value[key];
     }
     return safe;
@@ -2898,7 +4291,7 @@ function rebuildToken(value) {
     if (!details || threeDs === void 0)
         return null;
     const safe = { token: value.token };
-    if (owns5(value, "analyticsId") && value.analyticsId !== null)
+    if (owns6(value, "analyticsId") && value.analyticsId !== null)
         safe.analyticsId = value.analyticsId;
     safe.tokenType = "SINGLE_USE";
     safe.paymentInstrumentType = "PAYMENT_CARD";
@@ -2909,8 +4302,8 @@ function rebuildToken(value) {
 }
 function primerErrorId(body) {
     const value = readAnswer(body);
-    const id = value && record12(value.error) ? value.error.errorId : null;
-    return exact(ERROR_ID, id) && !panLike(id) ? id : null;
+    const id = value && record21(value.error) ? value.error.errorId : null;
+    return exact3(ERROR_ID, id) && !panLike2(id) ? id : null;
 }
 function matchesCard(details, card) {
     const number = card && typeof card.number === "string" ? card.number : "";