@agent-cards/sdk 0.23.20 → 0.23.22

package/dist/payrexx.generated.d.ts

@@ -0,0 +1,91 @@
+declare var PAYREXX_PSP: string;
+declare var PAYREXX_CAPABILITY: string;
+declare var PAYREXX_OPERATION: string;
+declare var PAYREXX_FRAME_HOST: string;
+declare var PAYREXX_PAY_PSP_ID: string;
+declare var PAYREXX_BODY_KEYS: readonly string[];
+declare var PAYREXX_REFUSAL_CODES: readonly string[];
+declare function payrexxFrameTarget(url: any): Readonly<{
+    pspId: string;
+    lang: string;
+}> | null;
+declare function isPayrexxFrameUrl(url: any): boolean;
+declare function payrexxBodyVerdict(body: any): Readonly<{
+    verdict: "refuse";
+    code: any;
+}> | Readonly<{
+    verdict: "continue";
+}> | Readonly<{
+    verdict: "card";
+}>;
+declare function payrexxGateVerdict(url: any, body: any): Readonly<{
+    verdict: "refuse";
+    code: any;
+}> | Readonly<{
+    verdict: "continue";
+}> | Readonly<{
+    verdict: "card";
+}>;
+declare function payrexxRequestRefusal(request: any): any;
+declare function isPayrexxDeviceRequest(template: any, body: any): boolean;
+declare function payrexxInstance(body: any): any;
+declare var PAYREXX_REVIEWED_INSTANCES: readonly string[];
+declare function payrexxInstanceRefusal(instance: any, instances?: readonly string[]): "payrexx_instance_unreviewed" | null;
+declare function payrexxRequestAmount(body: any): Readonly<{
+    amountCents: number;
+    currency: any;
+}> | null;
+declare function injectPayrexxCard(body: any, card: any): {
+    body: string;
+    where: any[];
+};
+declare function payrexxAnswerOutcome(status: any, text: any, card: any): {
+    outcome: string;
+    code: string;
+    reason?: undefined;
+    body?: undefined;
+    pending?: undefined;
+} | {
+    outcome: string;
+    reason: string;
+    code?: undefined;
+    body?: undefined;
+    pending?: undefined;
+} | {
+    outcome: string;
+    body: string;
+    code?: undefined;
+    reason?: undefined;
+    pending?: undefined;
+} | {
+    outcome: string;
+    body: string;
+    pending: string;
+    code?: undefined;
+    reason?: undefined;
+};
+declare function payrexxRefusalCode(text: any): "payrexx_declined" | "payrexx_three_ds_error" | "payrexx_three_ds_declined" | null;
+declare var PAYREXX_FOLLOW_UP_KINDS: readonly string[];
+declare var PAYREXX_FOLLOW_UP_LIMITS: Readonly<{
+    authentication: 1;
+    post_authentication: 1;
+}>;
+declare var PAYREXX_FOLLOW_UP_MAX: number;
+declare var PAYREXX_FOLLOW_UP_WINDOW_MS: number;
+declare var PAYREXX_FOLLOW_UP_IDLE_MS: number;
+declare var PAYREXX_FOLLOW_UP_CHALLENGE_MS: number;
+declare var PAYREXX_FOLLOW_UP_BODY_LIMIT: number;
+declare var PAYREXX_FOLLOW_UP_ANSWER_LIMIT: number;
+declare var PAYREXX_FOLLOW_UP_REFUSALS: readonly string[];
+declare function payrexxFollowUpVerdict(input: any): Readonly<{
+    ok: false;
+    refusal: any;
+}> | Readonly<{
+    ok: true;
+    kind: string | undefined;
+    slot: 1;
+}>;
+declare function payrexxFollowUpIdleMs(kind: any, answerText: any): number;
+declare function payrexxFollowUpAnswerRefusal(answerText: any): "answer_unreadable" | "card_in_answer" | null;
+declare function payrexxRefusalMessage(code: any): any;
+export { PAYREXX_BODY_KEYS, PAYREXX_CAPABILITY, PAYREXX_FOLLOW_UP_ANSWER_LIMIT, PAYREXX_FOLLOW_UP_BODY_LIMIT, PAYREXX_FOLLOW_UP_CHALLENGE_MS, PAYREXX_FOLLOW_UP_IDLE_MS, PAYREXX_FOLLOW_UP_KINDS, PAYREXX_FOLLOW_UP_LIMITS, PAYREXX_FOLLOW_UP_MAX, PAYREXX_FOLLOW_UP_REFUSALS, PAYREXX_FOLLOW_UP_WINDOW_MS, PAYREXX_FRAME_HOST, PAYREXX_OPERATION, PAYREXX_PAY_PSP_ID, PAYREXX_PSP, PAYREXX_REFUSAL_CODES, PAYREXX_REVIEWED_INSTANCES, injectPayrexxCard, isPayrexxDeviceRequest, isPayrexxFrameUrl, payrexxAnswerOutcome, payrexxBodyVerdict, payrexxFollowUpAnswerRefusal, payrexxFollowUpIdleMs, payrexxFollowUpVerdict, payrexxFrameTarget, payrexxGateVerdict, payrexxInstance, payrexxInstanceRefusal, payrexxRefusalCode, payrexxRefusalMessage, payrexxRequestAmount, payrexxRequestRefusal };

package/dist/payrexx.generated.js

@@ -0,0 +1,536 @@
+// @ts-nocheck
+// Generated from @agent-cards/payment-core. Do not edit.
+// artifact-sha256: 12336c60151bbdaa63f9d3e665fb53c8e3407ba942140bef2928e7ce3a8b3e2c
+// src/payrexx.js
+var PAYREXX_PSP = "payrexx";
+var PAYREXX_CAPABILITY = "payrexx_card_frame";
+var PAYREXX_OPERATION = "payrexx.card_request";
+var PAYREXX_FRAME_HOST = "checkout.payrexx.com";
+var PAYREXX_PAY_PSP_ID = "44";
+var PAYREXX_BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "instance",
+    "pspId",
+    "card[number]",
+    "card[cardholder]",
+    "card[exp_month]",
+    "card[exp_year]",
+    "card[cvc]",
+    "card[brand]",
+    "amount",
+    "currency",
+    "isTokenization",
+    "isSubscription",
+    "isPreAuthorization",
+    "isMoto",
+    "email"
+]);
+var PAYREXX_REFUSAL_CODES = /* @__PURE__ */ Object.freeze([
+    "payrexx_url_refused",
+    "payrexx_headers_refused",
+    "payrexx_other_provider",
+    "payrexx_wallet_card",
+    "payrexx_three_ds_resend",
+    "payrexx_keep_on_file",
+    "payrexx_not_a_sale",
+    "payrexx_body_unsupported"
+]);
+var BODY_LIMIT = 16384;
+var URL_LIMIT = 128;
+var FRAME_QUERY = /^\?pspId=([1-9][0-9]{0,3})&lang=([a-z]{2})$/;
+var GROUPED = /^[0-9]{4} [0-9]{4} [0-9]{4} [0-9]{4}$/;
+var VISA = /^4[0-9]{15}$/;
+var MASTERCARD = /^(?:5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12})$/;
+var SECURITY_CODE = /^[0-9]{3}$/;
+var MONTH = /^(?:0[1-9]|1[0-2])$/;
+var YEAR = /^20[0-9]{2}$/;
+var HOLDER = /^[\p{L}\p{M}][\p{L}\p{M} '.-]{0,44}$/u;
+var INSTANCE = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/;
+var AMOUNT = /^[1-9][0-9]{0,8}$/;
+var CURRENCY = /^[A-Z]{3}$/;
+var EMAIL = /^[^\s@]{1,64}@[^\s@]{1,189}$/;
+var FLAGS = /* @__PURE__ */ Object.freeze(["isTokenization", "isSubscription", "isPreAuthorization", "isMoto"]);
+var CARD_DIGITS = /[0-9](?:[ -]?[0-9]){11}/;
+var THREE_DS_KEY = /^(?:threeDSServerTransID|threeDSVersion|postAuth|authData\[[A-Za-z]{1,32}\])$/;
+var FORM_CONTENT_TYPE = /^application\/x-www-form-urlencoded(?:; ?charset=utf-8)?$/i;
+var ACCEPT = /^[\x20-\x7e]{1,256}$/;
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var refuse = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function payrexxFrameTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.hostname !== PAYREXX_FRAME_HOST || parsed.pathname !== "/")
+        return null;
+    const query = FRAME_QUERY.exec(parsed.search);
+    return query ? Object.freeze({ pspId: query[1], lang: query[2] }) : null;
+}
+function isPayrexxFrameUrl(url) {
+    return payrexxFrameTarget(url) !== null;
+}
+function readForm(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT)
+        return null;
+    try {
+        const pairs = body.split("&").map((chunk) => {
+            const eq = chunk.indexOf("=");
+            if (eq <= 0)
+                throw new URIError("not a form pair");
+            return [decodeURIComponent(chunk.slice(0, eq)), decodeURIComponent(chunk.slice(eq + 1))];
+        });
+        return pairs.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&") === body ? pairs : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cardNetwork(digits2) {
+    if (VISA.test(digits2))
+        return "visa";
+    return MASTERCARD.test(digits2) ? "mastercard" : null;
+}
+function judgeBody(body) {
+    const pairs = readForm(body);
+    if (pairs === null)
+        return { verdict: refuse("payrexx_body_unsupported"), pairs: null };
+    const keys = pairs.map(([key]) => key);
+    const value = Object.fromEntries(pairs);
+    if (!pairs.some(([key, entry]) => key.startsWith("card[") && key !== "card[brand]" && entry !== "")) {
+        return pairs.some(([key, entry]) => key !== "encryptedCard" && CARD_DIGITS.test(entry)) ? { verdict: refuse("payrexx_body_unsupported"), pairs: null } : { verdict: CONTINUE, pairs: null };
+    }
+    if (new Set(keys).size !== keys.length)
+        return { verdict: refuse("payrexx_body_unsupported"), pairs: null };
+    if (keys.includes("encryptedCard"))
+        return { verdict: refuse("payrexx_wallet_card"), pairs: null };
+    if (keys.some((key) => THREE_DS_KEY.test(key)))
+        return { verdict: refuse("payrexx_three_ds_resend"), pairs: null };
+    if (value.pspId !== PAYREXX_PAY_PSP_ID)
+        return { verdict: refuse("payrexx_other_provider"), pairs: null };
+    if (keys.length !== PAYREXX_BODY_KEYS.length || !keys.every((key, at) => key === PAYREXX_BODY_KEYS[at])) {
+        return { verdict: refuse("payrexx_body_unsupported"), pairs: null };
+    }
+    const number = value["card[number]"];
+    const network = GROUPED.test(number) ? cardNetwork(number.replace(/ /g, "")) : null;
+    if (network === null || value["card[brand]"] !== network || !SECURITY_CODE.test(value["card[cvc]"]) || !MONTH.test(value["card[exp_month]"]) || !YEAR.test(value["card[exp_year]"]) || !HOLDER.test(value["card[cardholder]"]) || !INSTANCE.test(value.instance) || !AMOUNT.test(value.amount) || !CURRENCY.test(value.currency) || !(value.email === "" || value.email.length <= 254 && EMAIL.test(value.email)) || !FLAGS.every((flag) => value[flag] === "true" || value[flag] === "false")) {
+        return { verdict: refuse("payrexx_body_unsupported"), pairs: null };
+    }
+    if (value.isTokenization === "true" || value.isSubscription === "true")
+        return { verdict: refuse("payrexx_keep_on_file"), pairs: null };
+    if (value.isPreAuthorization === "true" || value.isMoto === "true")
+        return { verdict: refuse("payrexx_not_a_sale"), pairs: null };
+    return { verdict: CARD, pairs };
+}
+function payrexxBodyVerdict(body) {
+    return judgeBody(body).verdict;
+}
+function payrexxGateVerdict(url, body) {
+    const target = payrexxFrameTarget(url);
+    if (target === null)
+        return refuse("payrexx_url_refused");
+    const verdict = payrexxBodyVerdict(body);
+    return verdict.verdict === "card" && target.pspId !== PAYREXX_PAY_PSP_ID ? refuse("payrexx_other_provider") : verdict;
+}
+function payrexxRequestRefusal(request) {
+    if (!record(request) || typeof request.method !== "string" || request.method.toUpperCase() !== "POST" || !isPayrexxFrameUrl(request.url))
+        return "payrexx_url_refused";
+    const headers = /* @__PURE__ */ new Map();
+    for (const [name, value] of Object.entries(record(request.headers) ? request.headers : {})) {
+        const lower = name.toLowerCase();
+        if (headers.has(lower) || typeof value !== "string")
+            return "payrexx_headers_refused";
+        headers.set(lower, value);
+    }
+    const contentType = headers.get("content-type");
+    if (contentType === void 0 || !FORM_CONTENT_TYPE.test(contentType) || headers.get("x-requested-with") !== "XMLHttpRequest" || headers.has("accept") && !ACCEPT.test(headers.get("accept")))
+        return "payrexx_headers_refused";
+    const verdict = payrexxGateVerdict(request.url, request.body);
+    if (verdict.verdict === "card")
+        return null;
+    return verdict.verdict === "refuse" ? verdict.code : "payrexx_body_unsupported";
+}
+var DEVICE_WRITTEN = /* @__PURE__ */ Object.freeze(["card[number]", "card[cardholder]", "card[exp_month]", "card[exp_year]", "card[cvc]"]);
+function isPayrexxDeviceRequest(template, body) {
+    const before = readForm(template);
+    const after = readForm(body);
+    const size = PAYREXX_BODY_KEYS.length;
+    if (!before || !after || before.length !== after.length || before.length < size)
+        return false;
+    for (let at = 0; at < before.length; at += 1) {
+        if (before[at][0] !== after[at][0] || at >= size && !THREE_DS_KEY.test(before[at][0]))
+            return false;
+        if (!DEVICE_WRITTEN.includes(before[at][0]) && before[at][1] !== after[at][1])
+            return false;
+    }
+    const head = (text) => text.split("&").slice(0, size).join("&");
+    return judgeBody(head(template)).verdict.verdict === "card" && judgeBody(head(body)).verdict.verdict === "card";
+}
+function payrexxInstance(body) {
+    const { verdict, pairs } = judgeBody(body);
+    return verdict.verdict === "card" ? Object.fromEntries(pairs).instance : null;
+}
+var PAYREXX_REVIEWED_INSTANCES = /* @__PURE__ */ Object.freeze(["wwfost"]);
+function payrexxInstanceRefusal(instance, instances = PAYREXX_REVIEWED_INSTANCES) {
+    return typeof instance === "string" && Array.isArray(instances) && instances.includes(instance) ? null : "payrexx_instance_unreviewed";
+}
+function payrexxRequestAmount(body) {
+    const { verdict, pairs } = judgeBody(body);
+    if (verdict.verdict !== "card")
+        return null;
+    const value = Object.fromEntries(pairs);
+    return Object.freeze({ amountCents: Number(value.amount), currency: value.currency.toLowerCase() });
+}
+var digits = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
+var whole = (value, min, max) => {
+    if (Number.isSafeInteger(value) && value >= 0)
+        return value;
+    return digits(value, min, max) ? Number(value) : NaN;
+};
+var cardYear = (year) => year >= 0 && year <= 99 || year >= 2e3 && year <= 2099;
+var FILL_FAILED = "Could not fill the card fields for Payrexx. Nothing was sent.";
+var CARD_NETWORK_REFUSAL = "Refusing to pay: this card network is not supported on this payment page. Nothing was sent.";
+var BRAND_MISMATCH_REFUSAL = "Refusing to pay: this Payrexx payment names a card network that is not your card's. Nothing was sent.";
+function injectPayrexxCard(body, card) {
+    const { verdict, pairs } = judgeBody(body);
+    if (verdict.verdict !== "card") {
+        throw new Error(payrexxRefusalMessage(verdict.verdict === "refuse" ? verdict.code : "payrexx_body_unsupported"));
+    }
+    const month = card ? whole(card.month, 1, 2) : NaN;
+    const year = card ? whole(card.year, 2, 4) : NaN;
+    if (!card || !digits(card.number, 12, 19) || !digits(card.cvc, 3, 4) || !(month >= 1 && month <= 12) || !cardYear(year)) {
+        throw new Error(FILL_FAILED);
+    }
+    const network = cardNetwork(card.number);
+    if (network === null)
+        throw new Error(CARD_NETWORK_REFUSAL);
+    if (!digits(card.cvc, 3, 3))
+        throw new Error(FILL_FAILED);
+    if (Object.fromEntries(pairs)["card[brand]"] !== network)
+        throw new Error(BRAND_MISMATCH_REFUSAL);
+    const written = {
+        "card[number]": card.number.replace(/([0-9]{4})(?=[0-9])/g, "$1 "),
+        "card[exp_month]": String(month).padStart(2, "0"),
+        "card[exp_year]": String(2e3 + year % 100),
+        "card[cvc]": card.cvc
+    };
+    if (typeof card.name === "string" && HOLDER.test(card.name))
+        written["card[cardholder]"] = card.name;
+    const where = [];
+    const filled = pairs.map(([key, value]) => {
+        if (!Object.prototype.hasOwnProperty.call(written, key))
+            return `${encodeURIComponent(key)}=${encodeURIComponent(value)}`;
+        where.push(key);
+        return `${encodeURIComponent(key)}=${encodeURIComponent(written[key])}`;
+    });
+    return { body: filled.join("&"), where };
+}
+var TOKEN = /^[\x21-\x7e]{1,512}$/;
+var ANSWER_LIMIT = 65536;
+var SEPARATORS = /[\s.-]/g;
+function answerCarriesCard(text, answer, number) {
+    if (text.replace(SEPARATORS, "").includes(number))
+        return true;
+    const pending = [answer];
+    while (pending.length > 0) {
+        const value = pending.pop();
+        if (typeof value === "string") {
+            if (value.replace(SEPARATORS, "").includes(number))
+                return true;
+        }
+        else if (Array.isArray(value)) {
+            for (const entry of value)
+                pending.push(entry);
+        }
+        else if (value !== null && typeof value === "object") {
+            for (const [key, entry] of Object.entries(value))
+                pending.push(key, entry);
+        }
+    }
+    return false;
+}
+function payrexxAnswerOutcome(status, text, card) {
+    if (!(status >= 200 && status < 300)) {
+        return status >= 400 && status < 500 ? { outcome: "refused", code: `http_${status}` } : { outcome: "unknown", reason: "server_error" };
+    }
+    if (typeof text !== "string" || text.length > ANSWER_LIMIT)
+        return { outcome: "unknown", reason: "payrexx_answer_unreadable" };
+    let answer;
+    try {
+        answer = JSON.parse(text);
+    }
+    catch {
+        return { outcome: "unknown", reason: "payrexx_answer_unreadable" };
+    }
+    if (!record(answer))
+        return { outcome: "unknown", reason: "payrexx_answer_unreadable" };
+    if (card && digits(card.number, 12, 19) && answerCarriesCard(text, answer, card.number)) {
+        return { outcome: "unknown", reason: "payrexx_card_in_answer" };
+    }
+    if (answer.error)
+        return { outcome: "refused", code: "payrexx_declined" };
+    if (record(answer.additional) && answer.additional.threeDSecureError)
+        return { outcome: "refused", code: "payrexx_three_ds_error" };
+    if (answer.acs_url !== void 0 || answer.pareq !== void 0 || answer.encryptedCard !== void 0) {
+        return { outcome: "unknown", reason: "payrexx_answer_unconfirmed" };
+    }
+    if (typeof answer.token === "string" && TOKEN.test(answer.token))
+        return { outcome: "approved", body: text };
+    if (!answer.token && typeof answer.threeDSServerTransID === "string" && TOKEN.test(answer.threeDSServerTransID)) {
+        const step = threeDsStep(answer.transStatus);
+        if (step === "declined")
+            return { outcome: "refused", code: "payrexx_three_ds_declined" };
+        if (step === "tokenless")
+            return { outcome: "refused", code: "payrexx_three_ds_error" };
+        if (step !== null)
+            return { outcome: "approved", body: text, pending: "three_ds" };
+    }
+    return { outcome: "unknown", reason: "payrexx_answer_unconfirmed" };
+}
+function threeDsStep(transStatus) {
+    if (transStatus === void 0)
+        return "method";
+    if (transStatus === "C")
+        return "challenge";
+    if (transStatus === "N" || transStatus === "R" || transStatus === "U")
+        return "declined";
+    return transStatus === "Y" || transStatus === "A" ? "tokenless" : null;
+}
+function payrexxRefusalCode(text) {
+    let answer;
+    try {
+        answer = typeof text === "string" && text.length <= ANSWER_LIMIT ? JSON.parse(text) : null;
+    }
+    catch {
+        return null;
+    }
+    if (!record(answer))
+        return null;
+    if (answer.error)
+        return "payrexx_declined";
+    if (record(answer.additional) && answer.additional.threeDSecureError)
+        return "payrexx_three_ds_error";
+    if (answer.token || typeof answer.threeDSServerTransID !== "string" || !TOKEN.test(answer.threeDSServerTransID))
+        return null;
+    const step = threeDsStep(answer.transStatus);
+    return step === "declined" ? "payrexx_three_ds_declined" : step === "tokenless" ? "payrexx_three_ds_error" : null;
+}
+var PAYREXX_FOLLOW_UP_KINDS = /* @__PURE__ */ Object.freeze(["authentication", "post_authentication"]);
+var PAYREXX_FOLLOW_UP_LIMITS = /* @__PURE__ */ Object.freeze({ authentication: 1, post_authentication: 1 });
+var PAYREXX_FOLLOW_UP_MAX = 2;
+var PAYREXX_FOLLOW_UP_WINDOW_MS = 15 * 60 * 1e3;
+var PAYREXX_FOLLOW_UP_IDLE_MS = 60 * 1e3;
+var PAYREXX_FOLLOW_UP_CHALLENGE_MS = 11 * 60 * 1e3;
+var PAYREXX_FOLLOW_UP_BODY_LIMIT = BODY_LIMIT;
+var PAYREXX_FOLLOW_UP_ANSWER_LIMIT = ANSWER_LIMIT;
+var PAYREXX_FOLLOW_UP_REFUSALS = /* @__PURE__ */ Object.freeze([
+    "not_a_follow_up",
+    "parent_unreadable",
+    "follow_up_closed",
+    "follow_up_in_flight",
+    "follow_up_limit",
+    "out_of_order",
+    "unreadable",
+    "shape",
+    "card_mismatch",
+    "session_mismatch"
+]);
+var AUTH_DATA_KEYS = /* @__PURE__ */ Object.freeze([
+    "indicator",
+    "colorDepth",
+    "browserLanguage",
+    "browserJavaEnabled",
+    "browserJavascriptEnabled",
+    "browserScreenHeight",
+    "browserScreenWidth",
+    "browserTZ",
+    "notificationURL",
+    "threeDSRequestorURL"
+]);
+var NOTIFICATION_URL = "https://dispatcher.payrexx.com/auth/threeDSecureV2.php";
+var AUTH_DATA_VALUE = /* @__PURE__ */ Object.freeze({
+    indicator: /^[YNU]$/,
+    colorDepth: /^[0-9]{1,2}$/,
+    browserLanguage: /^[A-Za-z]{2,8}(?:-[A-Za-z0-9]{1,8}){0,3}$/,
+    browserJavaEnabled: /^(?:true|false)$/,
+    browserJavascriptEnabled: /^true$/,
+    browserScreenHeight: /^[0-9]{1,5}$/,
+    browserScreenWidth: /^[0-9]{1,5}$/,
+    browserTZ: /^-?[0-9]{1,4}$/
+});
+var CARD_VALUE_KEYS = /* @__PURE__ */ Object.freeze(["card[number]", "card[cardholder]", "card[exp_month]", "card[exp_year]", "card[cvc]", "card[brand]"]);
+var followUpRefused = (refusal) => Object.freeze({ ok: false, refusal });
+function answerObject(answer) {
+    if (!record(answer) || !(answer.status >= 200 && answer.status < 300) || typeof answer.text !== "string" || answer.text.length > ANSWER_LIMIT)
+        return null;
+    try {
+        const parsed = JSON.parse(answer.text);
+        return record(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function threeDsRun(answer) {
+    if (!answer || answer.error || record(answer.additional) && answer.additional.threeDSecureError || answer.token)
+        return null;
+    if (typeof answer.threeDSServerTransID !== "string" || !TOKEN.test(answer.threeDSServerTransID))
+        return null;
+    if (answer.threeDSVersion !== void 0 && (typeof answer.threeDSVersion !== "string" || !TOKEN.test(answer.threeDSVersion)))
+        return null;
+    const step = threeDsStep(answer.transStatus);
+    return step === "method" || step === "challenge" ? { transId: answer.threeDSServerTransID, version: answer.threeDSVersion, step } : null;
+}
+function endsRun(answer) {
+    if (!answer)
+        return false;
+    if (answer.token || answer.error || record(answer.additional) && answer.additional.threeDSecureError)
+        return true;
+    const step = threeDsStep(answer.transStatus);
+    return step === "declined" || step === "tokenless";
+}
+function sentSends(sent) {
+    if (!Array.isArray(sent))
+        return null;
+    const out = [];
+    for (const item of sent) {
+        if (!record(item) || !PAYREXX_FOLLOW_UP_KINDS.includes(item.kind) || !["pending", "answered", "failed"].includes(item.state))
+            return null;
+        out.push({ kind: item.kind, state: item.state, answer: item.state === "answered" ? answerObject(item.answer) : null });
+    }
+    return out;
+}
+function followUpStep(extra, run, instance) {
+    const keys = extra.map(([key]) => key);
+    const value = Object.fromEntries(extra);
+    if (keys[0] !== "threeDSServerTransID")
+        return { refusal: "shape" };
+    if (keys.length === 2 && keys[1] === "postAuth") {
+        if (value.postAuth !== "true")
+            return { refusal: "shape" };
+        return value.threeDSServerTransID === run.transId ? { kind: "post_authentication" } : { refusal: "session_mismatch" };
+    }
+    const versioned = keys[1] === "threeDSVersion";
+    const auth = keys.slice(versioned ? 2 : 1);
+    if (auth.length !== AUTH_DATA_KEYS.length || !auth.every((key, at) => key === `authData[${AUTH_DATA_KEYS[at]}]`))
+        return { refusal: "shape" };
+    for (const name of AUTH_DATA_KEYS) {
+        const entry = value[`authData[${name}]`];
+        const sound = name === "notificationURL" ? entry === NOTIFICATION_URL : name === "threeDSRequestorURL" ? entry === `https://${instance}.payrexx.com` : AUTH_DATA_VALUE[name].test(entry);
+        if (!sound)
+            return { refusal: "shape" };
+    }
+    if (value.threeDSServerTransID !== run.transId || (versioned ? value.threeDSVersion !== run.version : run.version !== void 0)) {
+        return { refusal: "session_mismatch" };
+    }
+    return { kind: "authentication" };
+}
+function payrexxFollowUpVerdict(input) {
+    if (!record(input) || !record(input.request))
+        return followUpRefused("not_a_follow_up");
+    const { request } = input;
+    const parent = record(input.parent) ? input.parent : null;
+    if (String(request.method ?? "").toUpperCase() !== "POST" || !isPayrexxFrameUrl(request.url))
+        return followUpRefused("not_a_follow_up");
+    const judged = parent ? judgeBody(parent.body) : null;
+    if (!parent || !isPayrexxFrameUrl(parent.url) || judged.verdict.verdict !== "card")
+        return followUpRefused("parent_unreadable");
+    if (request.url !== parent.url)
+        return followUpRefused("not_a_follow_up");
+    const parentAnswer = answerObject(parent.answer);
+    const run = threeDsRun(parentAnswer);
+    if (!run)
+        return followUpRefused(endsRun(parentAnswer) ? "follow_up_closed" : "parent_unreadable");
+    const sent = sentSends(input.sent ?? []);
+    if (!sent)
+        return followUpRefused("parent_unreadable");
+    if (sent.some((item) => item.state === "failed" || item.state === "answered" && !threeDsRun(item.answer)))
+        return followUpRefused("follow_up_closed");
+    if (sent.some((item) => item.state === "pending"))
+        return followUpRefused("follow_up_in_flight");
+    if (sent.length >= PAYREXX_FOLLOW_UP_MAX)
+        return followUpRefused("follow_up_limit");
+    const pairs = readForm(request.body);
+    if (pairs === null)
+        return followUpRefused("unreadable");
+    const base = pairs.slice(0, PAYREXX_BODY_KEYS.length);
+    for (let at = 0; at < judged.pairs.length; at += 1) {
+        const [key, value] = judged.pairs[at];
+        if (!base[at] || base[at][0] !== key)
+            return followUpRefused("shape");
+        if (base[at][1] !== value)
+            return followUpRefused(CARD_VALUE_KEYS.includes(key) ? "card_mismatch" : "shape");
+    }
+    const step = followUpStep(pairs.slice(PAYREXX_BODY_KEYS.length), run, Object.fromEntries(judged.pairs).instance);
+    if (step.refusal)
+        return followUpRefused(step.refusal);
+    if (sent.some((item) => item.kind === step.kind))
+        return followUpRefused("follow_up_limit");
+    if (step.kind === "authentication" && (run.step !== "method" || sent.length > 0))
+        return followUpRefused("out_of_order");
+    if (step.kind === "post_authentication") {
+        const latest = sent.length === 0 ? run : threeDsRun(sent[sent.length - 1].answer);
+        if (!latest || latest.step !== "challenge" || latest.transId !== run.transId)
+            return followUpRefused("out_of_order");
+    }
+    return Object.freeze({ ok: true, kind: step.kind, slot: 1 });
+}
+function payrexxFollowUpIdleMs(kind, answerText) {
+    if (kind === "post_authentication")
+        return 0;
+    const run = threeDsRun(answerObject({ status: 200, text: answerText }));
+    if (!run)
+        return 0;
+    return run.step === "challenge" ? PAYREXX_FOLLOW_UP_CHALLENGE_MS : PAYREXX_FOLLOW_UP_IDLE_MS;
+}
+var NUMBER_ANSWER_KEY = /^(?:card)?(?:number|pan|no)$/;
+var CODE_ANSWER_KEY = /^(?:card)?(?:cvc|cvv|cvv2|securitycode)$/;
+function payrexxFollowUpAnswerRefusal(answerText) {
+    const body = answerObject({ status: 200, text: answerText });
+    if (!body)
+        return "answer_unreadable";
+    let visits = 0;
+    const pending = [[body, 0]];
+    while (pending.length > 0) {
+        const [value, depth] = pending.pop();
+        if (depth > 16 || ++visits > 6e3)
+            return "answer_unreadable";
+        if (Array.isArray(value)) {
+            for (const item of value)
+                pending.push([item, depth + 1]);
+        }
+        else if (record(value)) {
+            for (const [key, child] of Object.entries(value)) {
+                const name = key.toLowerCase().replace(/[-_ ]/g, "");
+                if (typeof child === "string" || typeof child === "number") {
+                    const flat = String(child).replace(SEPARATORS, "");
+                    if (NUMBER_ANSWER_KEY.test(name) && /[0-9]{12}/.test(flat))
+                        return "card_in_answer";
+                    if (CODE_ANSWER_KEY.test(name) && /^[0-9]{3,4}$/.test(flat))
+                        return "card_in_answer";
+                }
+                pending.push([child, depth + 1]);
+            }
+        }
+    }
+    return null;
+}
+var REFUSAL_MESSAGES = /* @__PURE__ */ Object.freeze({
+    payrexx_url_refused: "Refusing to pay: this Payrexx card request does not go to Payrexx's card form exactly as the page sends it. Nothing was sent.",
+    payrexx_headers_refused: "Refusing to pay: this Payrexx card request does not carry the card form's own headers. Nothing was sent.",
+    payrexx_other_provider: "Refusing to pay: this Payrexx page sends the card to another payment provider, which the Vault does not pay yet. Nothing was sent.",
+    payrexx_wallet_card: "Refusing to pay: this Payrexx payment uses a wallet card, not a card from your Vault. Nothing was sent.",
+    payrexx_three_ds_resend: "Refusing to pay: this Payrexx payment sends the card again for 3-D Secure, and your approval does not cover this send. Nothing was sent.",
+    payrexx_keep_on_file: "Refusing to pay: this Payrexx payment would keep the card on file without your consent. Nothing was sent.",
+    payrexx_not_a_sale: "Refusing to pay: this Payrexx payment is a hold or a mail order, not a one-time payment. Nothing was sent.",
+    payrexx_body_unsupported: "Refusing to pay: this is not the card request of Payrexx's card form. Nothing was sent."
+});
+function payrexxRefusalMessage(code) {
+    return Object.prototype.hasOwnProperty.call(REFUSAL_MESSAGES, code) ? REFUSAL_MESSAGES[code] : REFUSAL_MESSAGES.payrexx_body_unsupported;
+}
+export { PAYREXX_BODY_KEYS, PAYREXX_CAPABILITY, PAYREXX_FOLLOW_UP_ANSWER_LIMIT, PAYREXX_FOLLOW_UP_BODY_LIMIT, PAYREXX_FOLLOW_UP_CHALLENGE_MS, PAYREXX_FOLLOW_UP_IDLE_MS, PAYREXX_FOLLOW_UP_KINDS, PAYREXX_FOLLOW_UP_LIMITS, PAYREXX_FOLLOW_UP_MAX, PAYREXX_FOLLOW_UP_REFUSALS, PAYREXX_FOLLOW_UP_WINDOW_MS, PAYREXX_FRAME_HOST, PAYREXX_OPERATION, PAYREXX_PAY_PSP_ID, PAYREXX_PSP, PAYREXX_REFUSAL_CODES, PAYREXX_REVIEWED_INSTANCES, injectPayrexxCard, isPayrexxDeviceRequest, isPayrexxFrameUrl, payrexxAnswerOutcome, payrexxBodyVerdict, payrexxFollowUpAnswerRefusal, payrexxFollowUpIdleMs, payrexxFollowUpVerdict, payrexxFrameTarget, payrexxGateVerdict, payrexxInstance, payrexxInstanceRefusal, payrexxRefusalCode, payrexxRefusalMessage, payrexxRequestAmount, payrexxRequestRefusal };