@agent-cards/sdk 0.23.21 → 0.23.23

package/dist/primer.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 2212f400551ed9deef56926befac7e0a0704717658d13228b1245199050dad1d
+// artifact-sha256: cd9e71f205ba2b11824dd49d5dd2fb4ebd67f5bb0c38dfe974bbace93f7b018b
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -109,12 +109,12 @@ function parseConvergeBody(body) {
     return parsed;
 }
 function convergeAmountCents(value) {
-    const text7 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
-    const m = typeof text7 === "string" ? AMOUNT.exec(text7) : null;
+    const text9 = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
+    const m = typeof text9 === "string" ? AMOUNT.exec(text9) : null;
     if (!m)
         return null;
-    const cents = Number(m[1]) * 100 + Number(((m[2] ?? "") + "00").slice(0, 2));
-    return Number.isSafeInteger(cents) && cents > 0 ? cents : null;
+    const cents2 = Number(m[1]) * 100 + Number(((m[2] ?? "") + "00").slice(0, 2));
+    return Number.isSafeInteger(cents2) && cents2 > 0 ? cents2 : null;
 }
 function convergeBodyVerdict(body) {
     const parsed = parseConvergeBody(body);
@@ -365,8 +365,8 @@ var CONTROL = /[\u0000-\u001f\u007f]/;
 var cardLikeName = (name) => (name.match(/[0-9]/g) ?? []).length >= 12;
 var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD4 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -590,9 +590,9 @@ var K = /* @__PURE__ */ new Uint32Array([
     3329325298
 ]);
 var rotr = (x, n) => x >>> n | x << 32 - n;
-function utf8(text7) {
+function utf8(text9) {
     const out = [];
-    for (const char of text7) {
+    for (const char of text9) {
         let cp = char.codePointAt(0);
         if (cp >= 55296 && cp <= 57343)
             cp = 65533;
@@ -671,13 +671,13 @@ var TYPED_ARRAY = Object.getPrototypeOf(Uint8Array.prototype);
 var typedArrayName = Object.getOwnPropertyDescriptor(TYPED_ARRAY, Symbol.toStringTag).get;
 function parseRsaPublicKey(key) {
     const spki = key && typeof key === "object" ? key.spki : void 0;
-    const pin8 = key && typeof key === "object" ? key.sha256 : void 0;
+    const pin11 = key && typeof key === "object" ? key.sha256 : void 0;
     const named = key && typeof key === "object" && Object.prototype.hasOwnProperty.call(key, "exponent") ? key.exponent : void 0;
     if (named !== void 0 && named !== 17)
         throw refuse6("key");
     if (typeof spki !== "string" || spki.length > 1024 || spki.length % 4 !== 0 || !BASE64.test(spki))
         throw refuse6("key");
-    if (typeof pin8 !== "string" || !SHA256_HEX.test(pin8))
+    if (typeof pin11 !== "string" || !SHA256_HEX.test(pin11))
         throw refuse6("key");
     let binary;
     try {
@@ -689,7 +689,7 @@ function parseRsaPublicKey(key) {
     if (btoa(binary) !== spki)
         throw refuse6("key");
     const der = Uint8Array.from(binary, (c) => c.charCodeAt(0));
-    if (sha256Hex(der) !== pin8)
+    if (sha256Hex(der) !== pin11)
         throw refuse6("key");
     const outer = readElement(der, 0, 48);
     if (outer.end !== der.length || outer.start + RSA_ALGORITHM.length > der.length)
@@ -779,8 +779,8 @@ var PADDLE_TOKENEX_PSP = "paddle_tokenex";
 var PADDLE_TOKENEX_FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys2 = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1269,8 +1269,8 @@ var TEXT_LIMIT = 256;
 var CONTROL4 = /[\u0000-\u001f\u007f]/;
 var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys3 = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var plainText = (value) => typeof value === "string" && value.length <= TEXT_LIMIT && !CONTROL4.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -1300,13 +1300,13 @@ function billingFields(value) {
     if (names.length > MAX_FIELDS)
         return false;
     return names.every((name) => {
-        const field = value[name];
+        const field2 = value[name];
         if (!FIELD_NAME.test(name))
             return false;
-        if (!record6(field))
-            return billingText(field);
-        const nested = Object.keys(field);
-        return nested.length <= MAX_NESTED_FIELDS && nested.every((key) => FIELD_NAME.test(key) && billingText(field[key]));
+        if (!record6(field2))
+            return billingText(field2);
+        const nested = Object.keys(field2);
+        return nested.length <= MAX_NESTED_FIELDS && nested.every((key) => FIELD_NAME.test(key) && billingText(field2[key]));
     });
 }
 function wixPaymentsBodyVerdict(body) {
@@ -1380,14 +1380,14 @@ function readJson2(body) {
     catch {
         return { parsed: null, exact: false };
     }
-    let exact4 = false;
+    let exact5 = false;
     try {
-        exact4 = body.length <= BODY_LIMIT6 && JSON.stringify(parsed) === body;
+        exact5 = body.length <= BODY_LIMIT6 && JSON.stringify(parsed) === body;
     }
     catch {
-        exact4 = false;
+        exact5 = false;
     }
-    return { parsed, exact: exact4 };
+    return { parsed, exact: exact5 };
 }
 function billingValue(value) {
     if (value === UNDEFINED)
@@ -1442,14 +1442,14 @@ function attachType(parsed) {
     return typeof type === "string" ? type : null;
 }
 function paymongoBodyVerdict(body, session) {
-    const { parsed, exact: exact4 } = readJson2(body);
+    const { parsed, exact: exact5 } = readJson2(body);
     const type = parsed === null ? null : attachType(parsed);
     if (type !== "card") {
         if (parsed === null)
             return body === void 0 || body === null || body === "" ? CONTINUE4 : refuse10("paymongo_body_unsupported");
         return namesCardValue(parsed) ? refuse10("paymongo_body_unsupported") : CONTINUE4;
     }
-    if (!exact4)
+    if (!exact5)
         return refuse10("paymongo_body_unsupported");
     const code = judgeCardAttach(parsed, session);
     return code === null ? CARD9 : refuse10(code);
@@ -1472,15 +1472,15 @@ var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
 var CARD_PAYMENT = "PAYMENT_CARD";
 var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys4 = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
-function luhn(digits3) {
+function luhn(digits4) {
     let sum = 0;
-    for (let at = 0; at < digits3.length; at += 1) {
-        let digit = Number(digits3[digits3.length - 1 - at]);
+    for (let at = 0; at < digits4.length; at += 1) {
+        let digit = Number(digits4[digits4.length - 1 - at]);
         if (at % 2 === 1) {
             digit *= 2;
             if (digit > 9)
@@ -1627,10 +1627,10 @@ function readForm2(body) {
         return null;
     }
 }
-function cardNetwork2(digits3) {
-    if (VISA2.test(digits3))
+function cardNetwork2(digits4) {
+    if (VISA2.test(digits4))
         return "visa";
-    return MASTERCARD2.test(digits3) ? "mastercard" : null;
+    return MASTERCARD2.test(digits4) ? "mastercard" : null;
 }
 function judgeBody2(body) {
     const pairs = readForm2(body);
@@ -1654,7 +1654,7 @@ function judgeBody2(body) {
     }
     const number = value["card[number]"];
     const network = GROUPED.test(number) ? cardNetwork2(number.replace(/ /g, "")) : null;
-    if (network === null || value["card[brand]"] !== network || !SECURITY_CODE7.test(value["card[cvc]"]) || !MONTH3.test(value["card[exp_month]"]) || !YEAR3.test(value["card[exp_year]"]) || !HOLDER2.test(value["card[cardholder]"]) || !INSTANCE.test(value.instance) || !AMOUNT2.test(value.amount) || !CURRENCY.test(value.currency) || !(value.email === "" || value.email.length <= 254 && EMAIL.test(value.email)) || !FLAGS.every((flag) => value[flag] === "true" || value[flag] === "false")) {
+    if (network === null || value["card[brand]"] !== network || !SECURITY_CODE7.test(value["card[cvc]"]) || !MONTH3.test(value["card[exp_month]"]) || !YEAR3.test(value["card[exp_year]"]) || !HOLDER2.test(value["card[cardholder]"]) || !INSTANCE.test(value.instance) || !AMOUNT2.test(value.amount) || !CURRENCY.test(value.currency) || !(value.email === "" || value.email.length <= 254 && EMAIL.test(value.email)) || !FLAGS.every((flag3) => value[flag3] === "true" || value[flag3] === "false")) {
         return { verdict: refuse12("payrexx_body_unsupported"), pairs: null };
     }
     if (value.isTokenization === "true" || value.isSubscription === "true")
@@ -1703,8 +1703,8 @@ var LOCALE = /^[a-z]{2}(?:-[A-Za-z]{2,4})?$/;
 var PAN_LIKE3 = /(?:[0-9][ _.:-]*){12,}/;
 var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys5 = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1870,6 +1870,17 @@ function paygentRequestVerdict(url, body) {
     const key = pairs[1][1];
     return (environment2 === "production" ? LIVE_KEY : SANDBOX_KEY).test(key) ? CARD13 : refuse14("paygent_key_environment");
 }
+var pin4 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]) });
+var PAYGENT_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin4({
+        id: "fundex_tcs_eng",
+        merchant: "Tokyo Chinese School",
+        merchantId: "60362",
+        keySha256: "6073dee112b1e4089025d1c1f3c4cfad818c314a81943ffa55b839cb2df51018",
+        origins: ["https://fundexapp.jp"],
+        currency: "jpy"
+    })
+]);
 // src/multipart-form.js
 var BODY_LIMIT11 = 65536;
 var CRLF = "\r\n";
@@ -1977,9 +1988,9 @@ var PAY_NL_CARD_PARTS = /* @__PURE__ */ Object.freeze([
     "payment[card][expire_month]",
     "payment[card][expire_year]"
 ]);
-var pin4 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), serviceIds: Object.freeze([...fields.serviceIds]) });
+var pin5 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), serviceIds: Object.freeze([...fields.serviceIds]) });
 var PAY_NL_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
-    pin4({ id: "weeztix", merchant: "Weeztix", origins: ["https://shop.weeztix.com"], serviceIds: ["SL-6399-2740"] })
+    pin5({ id: "weeztix", merchant: "Weeztix", origins: ["https://shop.weeztix.com"], serviceIds: ["SL-6399-2740"] })
 ]);
 var RULE = /* @__PURE__ */ Object.freeze({ parts: PAY_NL_PARTS, card: PAY_NL_CARD_PARTS });
 var SERVICE_ID = /^SL-\d{4}-\d{4}$/;
@@ -2095,10 +2106,10 @@ var wellFormed = (value) => {
 var plainText2 = (value) => typeof value === "string" && value.length >= 1 && value.length <= TEXT_LIMIT2 && !CONTROL5.test(value) && (value.match(/[0-9]/g) ?? []).length < 12 && wellFormed(value);
 var between = (value, min, max) => Number.isSafeInteger(value) && value >= min && value <= max;
 var NETWORK = /^(?:4[0-9]{15}|4[0-9]{12}|5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12}|3[47][0-9]{13})$/;
-var luhn2 = (digits3) => {
+var luhn2 = (digits4) => {
     let sum = 0;
-    for (let at = 0; at < digits3.length; at += 1) {
-        let d = digits3.charCodeAt(digits3.length - 1 - at) - 48;
+    for (let at = 0; at < digits4.length; at += 1) {
+        let d = digits4.charCodeAt(digits4.length - 1 - at) - 48;
         if (at % 2 === 1) {
             d *= 2;
             if (d > 9)
@@ -2109,7 +2120,7 @@ var luhn2 = (digits3) => {
     return sum % 10 === 0;
 };
 var ANY_NETWORK = /^[2-6][0-9]{12,18}$/;
-var holdsCardShape = (text7, shape = NETWORK) => (text7.match(/[0-9]{13,}/g) ?? []).some((run) => run.length > 19 || shape.test(run) && luhn2(run));
+var holdsCardShape = (text9, shape = NETWORK) => (text9.match(/[0-9]{13,}/g) ?? []).some((run) => run.length > 19 || shape.test(run) && luhn2(run));
 var phone = (value) => typeof value === "string" && PHONE.test(value) && (value.match(/[0-9]/g) ?? []).length >= 6 && (value.match(/[0-9]/g) ?? []).length <= 15;
 var refuse16 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD15 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -2320,10 +2331,10 @@ function orderedSubset(value, keys) {
     }
     return true;
 }
-function luhn3(digits3) {
+function luhn3(digits4) {
     let sum = 0;
-    for (let at = 0; at < digits3.length; at += 1) {
-        let digit = Number(digits3[digits3.length - 1 - at]);
+    for (let at = 0; at < digits4.length; at += 1) {
+        let digit = Number(digits4[digits4.length - 1 - at]);
         if (at % 2 === 1) {
             digit *= 2;
             if (digit > 9)
@@ -2337,13 +2348,13 @@ var printable = (value) => [...value].every((ch) => ch.charCodeAt(0) >= 32 && ch
 function typed(value, limit = 256) {
     return typeof value === "string" && value.length >= 1 && value.length <= limit && !PAN_LIKE4.test(value) && printable(value);
 }
-function decodeBase64(text7) {
-    if (typeof text7 !== "string" || !BASE643.test(text7) || text7.length % 4 !== 0)
+function decodeBase64(text9) {
+    if (typeof text9 !== "string" || !BASE643.test(text9) || text9.length % 4 !== 0)
         return null;
     let bits = 0;
     let value = 0;
     let out = "";
-    for (const ch of text7.replace(/=+$/, "")) {
+    for (const ch of text9.replace(/=+$/, "")) {
         value = (value << 6 | BASE64_ALPHABET.indexOf(ch)) & 16777215;
         bits += 6;
         if (bits >= 8) {
@@ -2353,8 +2364,8 @@ function decodeBase64(text7) {
     }
     return out;
 }
-function soundDevice(text7) {
-    const json = decodeBase64(text7);
+function soundDevice(text9) {
+    const json = decodeBase64(text9);
     if (json === null)
         return false;
     let value;
@@ -2472,17 +2483,17 @@ function sumupBodyVerdict(body, url) {
 var SALTED = /* @__PURE__ */ Object.freeze([83, 97, 108, 116, 101, 100, 95, 95]);
 var B64 = /^[A-Za-z0-9+/]+={0,2}$/;
 var FIELD_LIMIT = 1024;
-function decodeCanonical(text7) {
-    if (typeof text7 !== "string" || text7.length === 0 || text7.length % 4 !== 0 || !B64.test(text7))
+function decodeCanonical(text9) {
+    if (typeof text9 !== "string" || text9.length === 0 || text9.length % 4 !== 0 || !B64.test(text9))
         return null;
     let binary;
     try {
-        binary = atob(text7);
+        binary = atob(text9);
     }
     catch {
         return null;
     }
-    if (btoa(binary) !== text7)
+    if (btoa(binary) !== text9)
         return null;
     return Uint8Array.from(binary, (char) => char.charCodeAt(0));
 }
@@ -2724,8 +2735,8 @@ var TEXT_LIMIT3 = 256;
 var CONTROL7 = /[\u0000-\u001f\u007f]/;
 var record13 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys7 = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var plainText3 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT3 && !CONTROL7.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse19 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -2769,10 +2780,19 @@ function hipayBodyVerdict(body) {
         return refuse19("hipay_keeps_card");
     return value.multi_use === 0 ? CARD18 : refuse19("hipay_body_unsupported");
 }
-var pin5 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), usernames: Object.freeze([...fields.usernames]) });
+var pin6 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), usernames: Object.freeze([...fields.usernames]) });
 var HIPAY_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
-    pin5({ id: "happybulle", merchant: "HappyBulle", origins: ["https://www.happybulle.com"], usernames: ["94683309.secure-gateway.hipay-tpp.com"] })
+    pin6({ id: "happybulle", merchant: "HappyBulle", origins: ["https://www.happybulle.com"], usernames: ["94683309.secure-gateway.hipay-tpp.com"] })
 ]);
+// src/deep-freeze.js
+function deepFreeze(value) {
+    if (value && typeof value === "object" && !Object.isFrozen(value)) {
+        for (const child of Object.values(value))
+            deepFreeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
 // src/amazon-payment-services.js
 var APS_PSP = "amazon_payment_services";
 var APS_HOSTS = /* @__PURE__ */ Object.freeze({ "checkout.payfort.com": "production", "sbcheckout.payfort.com": "sandbox" });
@@ -3057,14 +3077,14 @@ function cloverTokenUrl(url) {
         return null;
     return Object.freeze({ host: parsed.hostname, environment: CLOVER_TOKEN_HOSTS[parsed.hostname] });
 }
-function cloverBrand(digits3) {
-    if (typeof digits3 !== "string" || !/^[0-9]{6,19}$/.test(digits3))
+function cloverBrand(digits4) {
+    if (typeof digits4 !== "string" || !/^[0-9]{6,19}$/.test(digits4))
         return null;
-    const two = Number(digits3.slice(0, 2));
-    const three = Number(digits3.slice(0, 3));
-    const four = Number(digits3.slice(0, 4));
-    const six = Number(digits3.slice(0, 6));
-    if (digits3.startsWith("4"))
+    const two = Number(digits4.slice(0, 2));
+    const three = Number(digits4.slice(0, 3));
+    const four = Number(digits4.slice(0, 4));
+    const six = Number(digits4.slice(0, 6));
+    if (digits4.startsWith("4"))
         return "VISA";
     if (two === 34 || two === 37)
         return "AMEX";
@@ -3166,14 +3186,14 @@ var record16 = (value) => value !== null && typeof value === "object" && !Array.
 function isTapPaymentsTokenUrl(url) {
     return url === TAP_PAYMENTS_TOKEN_URL;
 }
-var pin6 = (fields) => Object.freeze({
+var pin7 = (fields) => Object.freeze({
     ...fields,
     origins: Object.freeze([...fields.origins]),
     sessions: Object.freeze({ ...fields.sessions }),
     key: Object.freeze({ ...fields.key })
 });
 var TAP_PAYMENTS_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
-    pin6({
+    pin7({
         id: "casefilegame",
         merchant: "Casefilegame",
         tapMerchantId: "67977048",
@@ -3437,7 +3457,7 @@ var YEAR11 = /^[0-9]{2}$/;
 var CODE4 = /^[0-9]{3}$/;
 var NAME_LIMIT3 = 100;
 var NAME_WORD = /[a-z]+/gi;
-var printable2 = (text7) => [...text7].every((character) => {
+var printable2 = (text9) => [...text9].every((character) => {
     const point = character.codePointAt(0);
     return point >= 32 && !(point >= 127 && point <= 159) && point !== 8232 && point !== 8233;
 });
@@ -3446,15 +3466,15 @@ var HOSTNAME = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](
 var PUBLISHABLE_KEY = /^[A-Za-z0-9]{16,64}$/;
 var record18 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys8 = (value, keys) => {
-    const own6 = Object.keys(value);
-    return own6.length === keys.length && own6.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse24 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD23 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
-function luhn4(digits3) {
+function luhn4(digits4) {
     let sum = 0;
-    for (let at = 0; at < digits3.length; at += 1) {
-        let digit = Number(digits3[digits3.length - 1 - at]);
+    for (let at = 0; at < digits4.length; at += 1) {
+        let digit = Number(digits4[digits4.length - 1 - at]);
         if (at % 2 === 1) {
             digit *= 2;
             if (digit > 9)
@@ -3713,12 +3733,93 @@ var SUCCESS_RULES = {
     cvvIncluded: (value) => typeof value === "boolean"
 };
 var SUCCESS_KEYS = Object.keys(SUCCESS_RULES);
+// src/openpay.js
+var OPENPAY_PSP = "openpay_bbva";
+var OPENPAY_API_HOSTS = /* @__PURE__ */ Object.freeze({
+    "api.openpay.mx": "production",
+    "api.openpay.co": "production",
+    "api.openpay.pe": "production",
+    "sandbox-api.openpay.mx": "sandbox",
+    "sandbox-api.openpay.co": "sandbox",
+    "sandbox-api.openpay.pe": "sandbox"
+});
+var OPENPAY_CARD_KEYS = /* @__PURE__ */ Object.freeze(["card_number", "holder_name", "cvv2", "expiration_month", "expiration_year", "address"]);
+var OPENPAY_ADDRESS_KEYS = /* @__PURE__ */ Object.freeze(["line1", "line2", "line3", "state", "city", "postal_code", "country_code"]);
+var BODY_LIMIT23 = 4096;
+var URL_LIMIT10 = 96;
+var TOKEN_URL = /^https:\/\/((?:sandbox-)?api\.openpay\.(?:mx|co|pe))\/v1\/([a-z0-9]{10,40})\/tokens$/;
+var NUMBER6 = /^[0-9]{12,19}$/;
+var SECURITY_CODE14 = /^[0-9]{3,4}$/;
+var MONTH_TEXT = /^(?:0?[1-9]|1[0-2])$/;
+var YEAR12 = /^[0-9]{2}$/;
+var COUNTRY3 = /^[A-Z]{2}$/;
+var LETTERS2 = "A-Za-z\\u00C0-\\u00D6\\u00D8-\\u00F6\\u00F8-\\u017F";
+var PAGE_NAME3 = new RegExp(`^[${LETTERS2} .'-]{1,64}$`);
+var HAS_LETTER2 = new RegExp(`[${LETTERS2}]`);
+var ADDRESS_VALUE2 = new RegExp(`^[\\x20-\\x7e\\u00a0-\\u017f]{0,128}$`);
+var PAN_LIKE6 = new RegExp(`(?:[0-9][^0-9${LETTERS2}]*){12,}`);
+var record20 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var hasOwn = (object, key) => Object.prototype.hasOwnProperty.call(object, key);
+var refuse25 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD24 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function openpayTokenTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT10)
+        return null;
+    const match = TOKEN_URL.exec(url);
+    if (!match)
+        return null;
+    return Object.freeze({ environment: OPENPAY_API_HOSTS[match[1]], host: match[1], merchantId: match[2] });
+}
+function readJson6(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT23)
+        return null;
+    try {
+        const value = JSON.parse(body);
+        return record20(value) && JSON.stringify(value) === body ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+var soundMonth = (value) => Number.isInteger(value) && value >= 1 && value <= 12 || typeof value === "string" && MONTH_TEXT.test(value);
+function soundAddress2(address2) {
+    if (!record20(address2))
+        return false;
+    const keys = Object.keys(address2);
+    return keys.length > 0 && keys.every((key) => OPENPAY_ADDRESS_KEYS.includes(key) && typeof address2[key] === "string" && ADDRESS_VALUE2.test(address2[key]) && !PAN_LIKE6.test(address2[key])) && keys.some((key) => address2[key] !== "") && (!hasOwn(address2, "country_code") || COUNTRY3.test(address2.country_code));
+}
+function openpayBodyVerdict(body, url) {
+    if (url !== void 0 && openpayTokenTarget(url) === null)
+        return refuse25("openpay_url_refused");
+    const value = readJson6(body);
+    if (value === null)
+        return refuse25("openpay_body_unsupported");
+    const keys = Object.keys(value);
+    if (!keys.every((key) => OPENPAY_CARD_KEYS.includes(key)) || !["card_number", "holder_name", "cvv2", "expiration_month", "expiration_year"].every((key) => keys.includes(key))) {
+        return refuse25("openpay_body_unsupported");
+    }
+    if (typeof value.card_number !== "string" || !NUMBER6.test(value.card_number) || typeof value.cvv2 !== "string" || !SECURITY_CODE14.test(value.cvv2) || !soundMonth(value.expiration_month) || typeof value.expiration_year !== "string" || !YEAR12.test(value.expiration_year) || typeof value.holder_name !== "string" || !PAGE_NAME3.test(value.holder_name) || !HAS_LETTER2.test(value.holder_name) || keys.includes("address") && !soundAddress2(value.address)) {
+        return refuse25("openpay_body_unsupported");
+    }
+    return CARD24;
+}
+var pin8 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), publicKeys: Object.freeze([...fields.publicKeys]) });
+var OPENPAY_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin8({
+        id: "diario_de_yucatan",
+        merchant: "Diario de Yucatán",
+        origins: ["https://www.yucatan.com.mx"],
+        host: "api.openpay.mx",
+        merchantId: "mqyloyrm8tsvtsgcrj0d",
+        publicKeys: ["pk_260aa43616a445bb98472e6ca51da968"]
+    })
+]);
 // src/poynt.js
 var POYNT_PSP = "poynt";
 var UUID4 = "[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}";
 var NONCE_URL = new RegExp(`^https://services\\.poynt\\.net/v1/commerce/stores/(${UUID4})/payment-tokens/generate-nonce$`);
 var STORE_ID = new RegExp(`^${UUID4}$`);
-var BODY_LIMIT23 = 8192;
+var BODY_LIMIT24 = 8192;
 var ROOT_KEYS8 = /* @__PURE__ */ Object.freeze(["applicationId", "channelId", "card", "verificationData"]);
 var CARD_KEYS10 = /* @__PURE__ */ Object.freeze(["number", "expirationMonth", "expirationYear", "type", "cardHolderFirstName", "cardHolderLastName", "cardHolderFullName"]);
 var ADDRESS_KEYS4 = /* @__PURE__ */ Object.freeze(["postalCode", "line1", "line2", "city", "territory", "countryCode", "postalCodeExtension"]);
@@ -3728,17 +3829,17 @@ var CARD_ON_FILE_KEYS = /* @__PURE__ */ Object.freeze(["saveFinancialInstrumentO
 var CARD_TYPES = /* @__PURE__ */ Object.freeze(["VISA", "MASTERCARD", "AMERICAN_EXPRESS", "DINERS_CLUB", "DISCOVER", "JCB", "UNIONPAY", "MAESTRO", "ELO", "HIPERCARD", "TROY", ""]);
 var CARD_NUMBER12 = /^[0-9]{12,19}$/;
 var MONTH12 = /^(?:0[1-9]|1[0-2])$/;
-var YEAR12 = /^20[0-9]{2}$/;
-var SECURITY_CODE14 = /^[0-9]{3,4}$/;
+var YEAR13 = /^20[0-9]{2}$/;
+var SECURITY_CODE15 = /^[0-9]{3,4}$/;
 var IDENTIFIER = /^[A-Za-z0-9:._-]{1,128}$/;
 var APPLICATION_ID = new RegExp(`^urn:aid:${UUID4}$`);
 var POSTAL_CODE3 = /^[A-Za-z0-9_]{0,16}$/;
-var COUNTRY3 = /^[A-Z]{2}$/;
+var COUNTRY4 = /^[A-Z]{2}$/;
 var TEXT_LIMIT7 = 256;
 var CONTROL10 = /[\u0000-\u001f\u007f]/;
-var cardLike2 = (text7) => (text7.match(/[0-9]/g) ?? []).length >= 12;
+var cardLike2 = (text9) => (text9.match(/[0-9]/g) ?? []).length >= 12;
 var text5 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT7 && !CONTROL10.test(value) && !cardLike2(value);
-var record20 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var record21 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var own5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var inOrder4 = (value, order, required) => {
     const keys = Object.keys(value);
@@ -3751,8 +3852,8 @@ var inOrder4 = (value, order, required) => {
     }
     return required.every((key) => keys.includes(key));
 };
-var refuse25 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD24 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var refuse26 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD25 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function poyntStoreId(url) {
     const match = typeof url === "string" ? NONCE_URL.exec(url) : null;
     return match ? match[1] : null;
@@ -3761,12 +3862,12 @@ function isPoyntNonceUrl(url) {
     return poyntStoreId(url) !== null;
 }
 function readBody14(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT23)
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT24)
         return null;
     let value;
     try {
         value = JSON.parse(body);
-        if (!record20(value) || JSON.stringify(value) !== body)
+        if (!record21(value) || JSON.stringify(value) !== body)
             return null;
     }
     catch {
@@ -3777,32 +3878,32 @@ function readBody14(body) {
 function poyntBodyVerdict(body) {
     const value = readBody14(body);
     if (value === null)
-        return refuse25("poynt_body_unsupported");
+        return refuse26("poynt_body_unsupported");
     if (CARD_ON_FILE_KEYS.some((key) => own5(value, key)))
-        return refuse25("poynt_card_on_file");
+        return refuse26("poynt_card_on_file");
     if (!inOrder4(value, ROOT_KEYS8, REQUIRED_ROOT) || typeof value.applicationId !== "string" || !APPLICATION_ID.test(value.applicationId) || own5(value, "channelId") && (typeof value.channelId !== "string" || !IDENTIFIER.test(value.channelId))) {
-        return refuse25("poynt_body_unsupported");
+        return refuse26("poynt_body_unsupported");
     }
     const { card, verificationData: verification } = value;
-    if (!record20(card) || !inOrder4(card, CARD_KEYS10, REQUIRED_CARD) || typeof card.number !== "string" || !CARD_NUMBER12.test(card.number) || typeof card.expirationMonth !== "string" || !MONTH12.test(card.expirationMonth) || typeof card.expirationYear !== "string" || !YEAR12.test(card.expirationYear) || !CARD_TYPES.includes(card.type) || !["cardHolderFirstName", "cardHolderLastName", "cardHolderFullName"].every((key) => !own5(card, key) || text5(card[key]))) {
-        return refuse25("poynt_body_unsupported");
+    if (!record21(card) || !inOrder4(card, CARD_KEYS10, REQUIRED_CARD) || typeof card.number !== "string" || !CARD_NUMBER12.test(card.number) || typeof card.expirationMonth !== "string" || !MONTH12.test(card.expirationMonth) || typeof card.expirationYear !== "string" || !YEAR13.test(card.expirationYear) || !CARD_TYPES.includes(card.type) || !["cardHolderFirstName", "cardHolderLastName", "cardHolderFullName"].every((key) => !own5(card, key) || text5(card[key]))) {
+        return refuse26("poynt_body_unsupported");
     }
-    if (!record20(verification) || Object.keys(verification).join() !== "cardHolderBillingAddress,cvData" || typeof verification.cvData !== "string" || !SECURITY_CODE14.test(verification.cvData))
-        return refuse25("poynt_body_unsupported");
+    if (!record21(verification) || Object.keys(verification).join() !== "cardHolderBillingAddress,cvData" || typeof verification.cvData !== "string" || !SECURITY_CODE15.test(verification.cvData))
+        return refuse26("poynt_body_unsupported");
     const address2 = verification.cardHolderBillingAddress;
-    if (!record20(address2) || !inOrder4(address2, ADDRESS_KEYS4, []) || !Object.values(address2).every(text5) || own5(address2, "postalCode") && !POSTAL_CODE3.test(address2.postalCode) || own5(address2, "postalCodeExtension") && !POSTAL_CODE3.test(address2.postalCodeExtension) || own5(address2, "countryCode") && !COUNTRY3.test(address2.countryCode))
-        return refuse25("poynt_body_unsupported");
-    return CARD24;
+    if (!record21(address2) || !inOrder4(address2, ADDRESS_KEYS4, []) || !Object.values(address2).every(text5) || own5(address2, "postalCode") && !POSTAL_CODE3.test(address2.postalCode) || own5(address2, "postalCodeExtension") && !POSTAL_CODE3.test(address2.postalCodeExtension) || own5(address2, "countryCode") && !COUNTRY4.test(address2.countryCode))
+        return refuse26("poynt_body_unsupported");
+    return CARD25;
 }
-var pin7 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), storeIds: Object.freeze([...fields.storeIds]) });
+var pin9 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), storeIds: Object.freeze([...fields.storeIds]) });
 var POYNT_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
-    pin7({
+    pin9({
         id: "yearning_for_learning",
         merchant: "Yearning for Learning Publishing & Coaching",
         origins: ["https://ff305485-ba6c-423a-87b0-cebe3f83ffe9.mysimplestore.com"],
         storeIds: ["71ac12ed-e61f-4318-95db-db0e7c649d6f"]
     }),
-    pin7({
+    pin9({
         id: "timber_ridge_bookkeeping",
         merchant: "Timber Ridge Bookkeeping",
         origins: ["https://d7d64ac3-0352-4e53-af9a-f6d8e7b5fb71.mysimplestore.com"],
@@ -3810,196 +3911,2483 @@ var POYNT_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
     })
 ]);
 var MAX_ANSWER_CHARS = 16 * 1024;
-// src/card-fields.js
-function processorGate(recognizer, url, body) {
-    if (recognizer && recognizer.psp === LYRA_PSP)
-        return lyraBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === WIX_PAYMENTS_PSP) {
-        if (url !== void 0 && !isWixPaymentsTokenizeUrl(url))
-            return { verdict: "refuse", code: "wix_payments_url_refused" };
-        return wixPaymentsBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === KOMOJU_PSP)
-        return komojuBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === HIPAY_PSP) {
-        if (url !== void 0 && !isHipayTokenUrl(url))
-            return { verdict: "refuse", code: "hipay_url_refused" };
-        return hipayBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === PAYPAL_PSP) {
-        if (url !== void 0 && !isPaypalConfirmUrl(url))
-            return { verdict: "refuse", code: "paypal_url_refused" };
-        return paypalBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === MAKECOMMERCE_PSP)
-        return makecommerceBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === POYNT_PSP) {
-        if (url !== void 0 && !isPoyntNonceUrl(url))
-            return { verdict: "refuse", code: "poynt_url_refused" };
-        return poyntBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
-        if (url !== void 0 && !isPaddleVgsCardsUrl(url))
-            return { verdict: "refuse", code: "paddle_vgs_url_refused" };
-        return paddleVgsBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === PAYFAST_PSP) {
-        if (url !== void 0 && !isPayfastPayUrl(url))
-            return { verdict: "refuse", code: "payfast_url_refused" };
-        return payfastBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === PAYREXX_PSP) {
-        return url !== void 0 ? payrexxGateVerdict(url, body) : payrexxBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === PAYGENT_PSP) {
-        return url !== void 0 ? paygentRequestVerdict(url, body) : paygentBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === PAY_NL_PSP) {
-        if (url !== void 0 && !isPayNlTokenUrl(url))
-            return { verdict: "refuse", code: "pay_nl_url_refused" };
-        return payNlBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === TWOC2P_PSP) {
-        if (url === void 0)
-            return twoC2pBodyVerdict(body);
-        const target = twoC2pPaymentTarget(url);
-        if (target === null)
-            return { verdict: "refuse", code: "twoc2p_url_refused" };
-        if (!target.reviewed)
-            return twoC2pPaymentCarriesCard(body) ? { verdict: "refuse", code: "twoc2p_build_unreviewed" } : { verdict: "continue" };
-        const keyBytes = twoC2pKeyBytes(target.environment);
-        return keyBytes === null ? { verdict: "refuse", code: "twoc2p_field_unreviewed" } : twoC2pBodyVerdict(body, keyBytes, target.environment);
-    }
-    if (recognizer && recognizer.psp === APS_PSP)
-        return apsBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === CONEKTA_PSP)
-        return conektaBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
-        const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
-        if (url !== void 0 && target === null)
-            return { verdict: "refuse", code: "paddle_tokenex_pay_unsupported" };
-        return paddleTokenexBodyVerdict(body, target ? target.line : void 0);
-    }
-    if (recognizer && recognizer.psp === PAYMONGO_PSP) {
-        const session = url !== void 0 ? paymongoCheckoutSession(url) : void 0;
-        if (url !== void 0 && session === null)
-            return { verdict: "refuse", code: "paymongo_url_refused" };
-        return paymongoBodyVerdict(body, session);
-    }
-    if (recognizer && recognizer.psp === GOPAY_PSP)
-        return gopayBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === REVOLUT_PSP) {
-        if (url !== void 0 && !isRevolutPaymentsUrl(url))
-            return { verdict: "refuse", code: "revolut_url_refused" };
-        return revolutBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === SUMUP_PSP)
-        return sumupBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === CLOVER_PSP)
-        return cloverBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === TAP_PAYMENTS_PSP) {
-        if (url !== void 0 && !isTapPaymentsTokenUrl(url))
-            return { verdict: "refuse", code: "tap_payments_url_refused" };
-        return tapPaymentsBodyVerdict(body);
-    }
-    if (recognizer && recognizer.psp === TOKENEX_IFRAME_PSP)
-        return tokenexIframeBodyVerdict(body, url);
-    if (recognizer && recognizer.psp === GRAVY_PSP)
-        return gravyBodyVerdict(body);
-    if (recognizer && recognizer.psp === MONERIS_PSP) {
-        if (url !== void 0 && !isMonerisTokenizeUrl(url))
-            return { verdict: "refuse", code: "moneris_url_refused" };
-        return monerisBodyVerdict(body);
+// src/cardcom.js
+var CARDCOM_PSP = "cardcom";
+var CARDCOM_HOST = "secure.cardcom.solutions";
+var CARDCOM_ORIGIN = "https://secure.cardcom.solutions";
+var CARDCOM_SUBMIT_PATH = "/api/EA5/SubmitPayment";
+var CARDCOM_CURRENCIES = /* @__PURE__ */ Object.freeze({ 1: "ils", 826: "gbp", 840: "usd", 978: "eur" });
+var BODY_LIMIT25 = 65536;
+var TOP_KEYS2 = /* @__PURE__ */ Object.freeze(["GoogleToken", "UserAgent", "NumberOfTries", "GooglePayToken", "Store", "_3DSecureReq", "HooxReference"]);
+var STORE_KEYS = /* @__PURE__ */ Object.freeze([
+    "CommonStore",
+    "CompanyInfoStore",
+    "ProductsStore",
+    "DeliveryStore",
+    "DocumentStore",
+    "DetailsStore",
+    "PaymentStore"
+]);
+var THREE_DS_KEYS = /* @__PURE__ */ Object.freeze([
+    "TerminalNum",
+    "CoinId",
+    "CardNumber",
+    "CardholderFullName",
+    "CardholderPhone",
+    "CardHolderEmail",
+    "CVV",
+    "CardExpireMonth",
+    "CardExpireYear",
+    "RequestedBillingAmount",
+    "UserAgentHeader",
+    "browserLanguage",
+    "_3ds_browserjavaenabled",
+    "_3ds_browserscreenheight",
+    "_3ds_browserscreenwidth",
+    "_3ds_browsercolordepth",
+    "_3ds_challengewindowsize",
+    "_3ds_channel",
+    "_3ds_category",
+    "_3ds_transtype",
+    "ExternalAisurit4DealPageUID",
+    "DealToSaveJSON",
+    "GooglePayToken",
+    "DirectDebitSplitPaymentsSum",
+    "SapakMutav"
+]);
+var COMMON_KEYS = /* @__PURE__ */ Object.freeze([
+    "Uid",
+    "OldUid",
+    "TerminalNumber",
+    "TerminalType",
+    "StoreInitialized",
+    "SuccessRedirectUrl",
+    "ErrorRedirectUrl",
+    "BackgroundImageUrl",
+    "AdditionalDataJson",
+    "Language",
+    "UniqTempDealID",
+    "IsError",
+    "ErrorCode",
+    "ErrorMessage",
+    "OpeningText",
+    "IsEA5SinglePage",
+    "CurrentCardcomBitIntervalId",
+    "SapakMutav",
+    "ShowCookiesBanner",
+    "HideFooter",
+    "LPVersion"
+]);
+var COMPANY_KEYS = /* @__PURE__ */ Object.freeze([
+    "CompanyNumber",
+    "Name",
+    "Address1",
+    "Address2",
+    "Address3",
+    "Tel",
+    "Email",
+    "LogoURL",
+    "LogoAlt",
+    "YoutubeLink",
+    "InstagramLink",
+    "FacebookLink",
+    "WhatsappLink",
+    "Comments",
+    "ShowGPayLogo",
+    "ShowMasterCardLogo",
+    "ShowVisaLogo",
+    "ShowAmexLogo",
+    "ShowDinersLogo",
+    "ShowIsracardLogo",
+    "MetaTitle",
+    "MetaDescription",
+    "MetaImage"
+]);
+var DELIVERY_KEYS = /* @__PURE__ */ Object.freeze([
+    "ShowDeliveryForm",
+    "DeliveryMethodField",
+    "CityField",
+    "StreetField",
+    "BuildingNumberField",
+    "ApartmentNumberField",
+    "FloorField",
+    "EntranceField",
+    "DeliveryNotesField",
+    "Cities",
+    "Streets"
+]);
+var DOCUMENT_KEYS = /* @__PURE__ */ Object.freeze([
+    "ShowInvoiceForm",
+    "Comments",
+    "Title",
+    "NameField",
+    "IdField",
+    "MobileField",
+    "AdditionalPhoneField",
+    "EmailField",
+    "EmailConfirmField",
+    "CityField",
+    "StreetField",
+    "ZipcodeField",
+    "SendPreBuyDataToServer",
+    "DocTypeToCreate"
+]);
+var DETAILS_KEYS = /* @__PURE__ */ Object.freeze(["ShowDetailsForm", "ShowCancelBtn", "CancelUrl", "Comments", "FormFields"]);
+var PAYMENT_KEYS = /* @__PURE__ */ Object.freeze([
+    "Comments",
+    "ButtonText",
+    "ButtonTextZeroSum",
+    "HideCreditCardFieldsOnZeroSum",
+    "EmailField",
+    "MobileField",
+    "CardNumberField",
+    "YearsField",
+    "MonthsField",
+    "CvvField",
+    "CardOwnerNameField",
+    "CardTZField",
+    "PaymentsField",
+    "OpenSumField",
+    "CardOwnerCityField",
+    "CardOwnerAddressField",
+    "CardOwnerZipcodeField",
+    "ApprovedTermsAndConditions",
+    "ShowTermsAndConditions",
+    "TermsAndConditionsUrl",
+    "AllowMerchantMessages",
+    "MustAllowMerchantMessages",
+    "ShowMerchantMessages",
+    "ShowPayPal",
+    "ShowUpayBitButton",
+    "ShowPayMeBitButton",
+    "ShowCardcomBitButton",
+    "ShowApplePay",
+    "MerchantApplePayLogoUrl",
+    "ShowGooglePay",
+    "ShowRecaptcha",
+    "RecaptchaVersion",
+    "IsCredit",
+    "NumOfRetriesAllowed",
+    "Commissions",
+    "Is3DSecureEnabled",
+    "Was3DSActiveOnPageLoad",
+    "ThreeDSecureTransactionId",
+    "ShowSuccessPopup",
+    "ShowErrorPopup",
+    "DonationType",
+    "ThreeDSecureCavv",
+    "GoogleCardNumber",
+    "GoogleExpirationYear",
+    "GoogleExpirationMonth",
+    "CanSkipAuthentication",
+    "CartTitle",
+    "IsDirectDebit",
+    "EnableHooxOffers",
+    "HooxID",
+    "SupportedCardBrands",
+    "IsDirectDebitSplitPayments",
+    "ApplePayApplicationData",
+    "ShowPaymentButton",
+    "OrderSummeryTitle",
+    "AllowBitEmptyCardOwnerName",
+    "IsCreateToken",
+    "TurnstileSiteKey",
+    "PrivacyPolicyUrl",
+    "DualCardsBINs",
+    "IsHideCart",
+    "IsJ5"
+]);
+var FIELD_KEYS = /* @__PURE__ */ Object.freeze([
+    "Ref",
+    "Id",
+    "Order",
+    "InputType",
+    "Required",
+    "PreventPaste",
+    "Show",
+    "Data",
+    "Value",
+    "Direction",
+    "Disabled"
+]);
+var PRODUCT_KEYS = /* @__PURE__ */ Object.freeze([
+    "MinQuantity",
+    "MaxQuantity",
+    "JumpsInQuantity",
+    "SelectedBuyQuantity",
+    "QuantityOptions",
+    "Comments",
+    "IsManualSum",
+    "PaymentsOptions",
+    "IsCouponActive",
+    "ManualPrice",
+    "ManualPriceTxt",
+    "IsVatFree",
+    "SpecialPrices",
+    "PreConfiguredPrice",
+    "IsPreSelected",
+    "CurrentInventory",
+    "CheckInventory",
+    "uid",
+    "imageUrl",
+    "name",
+    "description",
+    "BasePrice",
+    "PriceBeforeDiscount",
+    "BaseISOCurrency",
+    "PriceToShow",
+    "PriceBeforeDiscountToShow",
+    "IsCurrent"
+]);
+var CURRENCY_KEYS = /* @__PURE__ */ Object.freeze(["Code", "AlphabeticCode", "ValueToNis", "NameHeb", "NameEn", "CoinSing"]);
+var NO_COUPON = '{"IsActivatedByUser":false,"IsActive":false,"CouponCode":"","IsValid":false,"DiscountType":0,"DiscountValue":0,"CouponType":1}';
+var FRESH_MANUAL_SUM = '{"Ref":"","Id":0,"Order":0,"InputType":0,"Required":false,"PreventPaste":false,"Show":true,"Data":{"Label":"","validators":[],"SelectList":[]},"Value":"","Direction":0,"Disabled":false}';
+var DONATION = /* @__PURE__ */ Object.freeze({ none: 0, monthly: 1, multiple: 2, single: 3 });
+var PAGE_ID = /^[A-Za-z0-9_-]{16,32}$/;
+var DEAL_ID = /^[0-9a-z]{6,40}$/;
+var PRODUCT_ID = /^[A-Za-z0-9_-]{8,64}$/;
+var TOKEN3 = /^[A-Za-z0-9_.:+/=-]{1,8192}$/;
+var SCREEN = /^[0-9]{1,5}$/;
+var LANGUAGE2 = /^[A-Za-z]{2,3}(?:-[A-Za-z0-9]{1,8}){0,3}$/;
+var CARD_NUMBER13 = /^[0-9]{12,19}$/;
+var MONTH13 = /^(?:[1-9]|1[0-2])$/;
+var YEAR14 = /^20[0-9]{2}$/;
+var CODE5 = /^[0-9]{3,4}$/;
+var TEXT_LIMIT8 = 256;
+var LONG_TEXT_LIMIT = BODY_LIMIT25;
+var record22 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var sameKeys9 = (value, keys) => {
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
+};
+var exact3 = (pattern, value) => typeof value === "string" && pattern.test(value);
+var printable3 = (text9) => [...text9].every((character) => {
+    const point = character.codePointAt(0);
+    return point >= 32 && !(point >= 127 && point <= 159) && point !== 8232 && point !== 8233;
+});
+var text6 = (value, limit = TEXT_LIMIT8) => typeof value === "string" && value.length <= limit && printable3(value);
+var pageText = (value, limit = LONG_TEXT_LIMIT) => value === null || typeof value === "string" && value.length <= limit;
+var whole = (value, min = 0, max = Number.MAX_SAFE_INTEGER) => Number.isSafeInteger(value) && value >= min && value <= max;
+var flag = (value) => typeof value === "boolean";
+var optionalFlag = (value) => value === null || flag(value);
+var refuse27 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD26 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function luhn5(digits4) {
+    let sum = 0;
+    for (let at = 0; at < digits4.length; at += 1) {
+        let digit = Number(digits4[digits4.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
     }
-    if (!recognizer || recognizer.psp !== "elavon_converge")
+    return sum % 10 === 0;
+}
+function cents(value) {
+    if (typeof value !== "number" || !Number.isFinite(value) || value <= 0 || value > 1e7)
         return null;
-    if (url !== void 0 && !isConvergeProcessUrl(url))
-        return { verdict: "refuse", code: "converge_url_refused" };
-    return convergeBodyVerdict(body);
+    const minor = Math.round(value * 100);
+    return Math.abs(minor - value * 100) < 1e-6 ? minor : null;
 }
-function carriesCardFields(recognizer, body) {
-    const gate = processorGate(recognizer, void 0, body);
-    if (gate !== null)
-        return gate.verdict === "card";
-    if (recognizer && recognizer.encoding === "json") {
-        const claimed = carriesJsonCardFields(recognizer.jsonCardFields, body, DECLARED_PATHS_ONLY.has(recognizer.psp));
-        return claimed && recognizer.psp === "amadeus_checkout" ? amadeusBodyKind(body) === "card" : claimed;
-    }
-    const fields = recognizer && recognizer.cardFields;
-    if (!Array.isArray(fields) || fields.length === 0)
-        return true;
-    if (recognizer.encoding !== "form")
-        return true;
-    if (typeof body !== "string" || body === "")
+function isCardcomSubmitUrl(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
         return false;
-    const anyCase = recognizer.caseInsensitiveFormKeys === true;
-    const wanted = anyCase ? fields.map((field) => String(field).toLowerCase()) : fields;
-    for (const chunk of body.split("&")) {
-        const eq = chunk.indexOf("=");
-        if (eq <= 0 || eq === chunk.length - 1)
-            continue;
-        let key;
-        try {
-            key = decodeURIComponent(chunk.slice(0, eq).replace(/\+/g, " "));
-        }
-        catch {
-            continue;
-        }
-        if (wanted.includes(anyCase ? key.trim().toLowerCase() : key))
-            return true;
-    }
-    return false;
-}
-var DECLARED_PATHS_ONLY = /* @__PURE__ */ new Set(["primer", "pelecard", "creditguard", "payrails"]);
-function carriesJsonCardFields(paths, body, declaredOnly) {
-    if (!Array.isArray(paths) || paths.length === 0 || !paths.every((path) => isJsonPath(path) && path.length > 0))
-        return true;
-    if (declaredOnly)
-        return declaredPathHoldsCard(paths, body);
     let parsed;
     try {
-        parsed = typeof body === "string" ? JSON.parse(body) : void 0;
+        parsed = new URL(url);
     }
     catch {
-        return true;
-    }
-    if (!isPlainObject(parsed))
-        return true;
-    if (paths.some((path) => {
-        const at = jsonAt(parsed, path);
-        return at.found && (typeof at.value === "string" && at.value !== "" || typeof at.value === "number");
-    }))
-        return true;
-    const declared = /* @__PURE__ */ new Set();
-    for (const path of paths) {
-        const last = path[path.length - 1];
-        if (typeof last === "string")
-            declared.add(last.toLowerCase());
+        return false;
     }
-    return namesCardNumber(parsed, declared);
+    return parsed.href === url && parsed.protocol === "https:" && !parsed.port && !parsed.username && !parsed.password && !parsed.search && !parsed.hash && parsed.hostname === CARDCOM_HOST && parsed.pathname === CARDCOM_SUBMIT_PATH;
 }
-function declaredPathHoldsCard(paths, body) {
-    if (typeof body !== "string" || body === "")
-        return false;
-    let parsed;
+function readBody15(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT25)
+        return null;
+    let value;
     try {
-        parsed = JSON.parse(body);
+        value = JSON.parse(body);
+        if (!record22(value) || JSON.stringify(value) !== body)
+            return null;
     }
     catch {
-        return false;
+        return null;
     }
-    return paths.some((path) => {
-        const at = jsonAt(parsed, path);
-        return at.found && (typeof at.value === "string" && at.value !== "" || typeof at.value === "number");
-    });
+    return value;
 }
-function namesCardNumber(root, declared) {
-    const pending = [root];
-    while (pending.length > 0) {
-        const node = pending.pop();
-        const named = !Array.isArray(node);
-        for (const key of Object.keys(node)) {
-            if (named) {
+function field(value) {
+    return record22(value) && sameKeys9(value, FIELD_KEYS) && text6(value.Ref, 64) && whole(value.Id) && whole(value.Order) && whole(value.InputType) && flag(value.Required) && flag(value.PreventPaste) && flag(value.Show) && record22(value.Data) && typeof value.Value === "string" && value.Value.length <= 4096 && whole(value.Direction) && flag(value.Disabled);
+}
+var optionalField = (value) => value === null || field(value);
+function selectValues(value) {
+    const list = field(value) ? value.Data.SelectList : null;
+    if (!Array.isArray(list) || list.length === 0)
+        return null;
+    return list.map((option) => record22(option) && typeof option.value === "string" ? option.value : null);
+}
+function commonStore(value) {
+    return record22(value) && sameKeys9(value, COMMON_KEYS) && exact3(PAGE_ID, value.Uid) && (value.OldUid === null || value.OldUid === "" || value.OldUid === value.Uid) && whole(value.TerminalNumber, 1, 99999999) && whole(value.TerminalType) && value.StoreInitialized === true && pageText(value.SuccessRedirectUrl) && pageText(value.ErrorRedirectUrl) && pageText(value.BackgroundImageUrl) && pageText(value.AdditionalDataJson) && exact3(LANGUAGE2, value.Language) && exact3(DEAL_ID, value.UniqTempDealID) && value.IsError === false && value.ErrorCode === 0 && value.ErrorMessage === "" && value.OpeningText === "" && flag(value.IsEA5SinglePage) && whole(value.CurrentCardcomBitIntervalId) && value.SapakMutav === "" && flag(value.ShowCookiesBanner) && flag(value.HideFooter) && value.LPVersion === 0;
+}
+function companyStore(value) {
+    return record22(value) && sameKeys9(value, COMPANY_KEYS) && whole(value.CompanyNumber, 1) && COMPANY_KEYS.slice(1).every((key) => key.startsWith("Show") ? flag(value[key]) : pageText(value[key]));
+}
+var SUM_TEXT = /^(?:0*[1-9][0-9]*(?:\.[0-9]+)?|0+\.[0-9]*[1-9][0-9]*)$/;
+var sumText = (text9, sum) => text9 === null || typeof text9 === "string" && SUM_TEXT.test(text9) && Number.parseFloat(text9) === sum;
+function chosenProduct(value) {
+    return record22(value) && sameKeys9(value, PRODUCT_KEYS) && whole(value.MinQuantity) && whole(value.MaxQuantity) && whole(value.JumpsInQuantity) && value.SelectedBuyQuantity === 1 && Array.isArray(value.QuantityOptions) && value.QuantityOptions.length === 0 && pageText(value.Comments) && flag(value.IsManualSum) && Array.isArray(value.PaymentsOptions) && flag(value.IsCouponActive) && typeof value.ManualPrice === "number" && sumText(value.ManualPriceTxt, value.ManualPrice) && flag(value.IsVatFree) && Array.isArray(value.SpecialPrices) && (value.PreConfiguredPrice === null || typeof value.PreConfiguredPrice === "number") && flag(value.IsPreSelected) && typeof value.CurrentInventory === "number" && flag(value.CheckInventory) && exact3(PRODUCT_ID, value.uid) && pageText(value.imageUrl) && typeof value.name === "string" && pageText(value.name) && pageText(value.description) && typeof value.BasePrice === "number" && typeof value.PriceBeforeDiscount === "number" && whole(value.BaseISOCurrency) && typeof value.PriceToShow === "number" && typeof value.PriceBeforeDiscountToShow === "number" && flag(value.IsCurrent);
+}
+var DAY_RATES = /* @__PURE__ */ Object.freeze({ 1: 1, 826: 4.1194, 840: 3.089, 978: 3.4769 });
+var dayRate = (code, rate) => typeof rate === "number" && Number.isFinite(rate) && (code === 1 ? rate === 1 : rate >= DAY_RATES[code] * 0.75 && rate <= DAY_RATES[code] * 1.25);
+function chargedCurrency(value) {
+    return record22(value) && sameKeys9(value, CURRENCY_KEYS) && whole(value.Code) && owns6(CARDCOM_CURRENCIES, value.Code) && value.AlphabeticCode === CARDCOM_CURRENCIES[value.Code].toUpperCase() && dayRate(value.Code, value.ValueToNis) && pageText(value.NameHeb) && pageText(value.NameEn) && pageText(value.CoinSing);
+}
+function freshProductsStore(products) {
+    return {
+        Title: "",
+        isDonation: false,
+        showCurrencyConvert: false,
+        currencies: [],
+        selectedCurrency: products.selectedCurrency,
+        coupon: products.coupon,
+        couponCalculatedDiscount: 0,
+        CurrentCouponCode: "",
+        products: products.products,
+        deliveryMethods: products.deliveryMethods,
+        haveImages: false,
+        isCouponActive: false,
+        ShowProductPrice: false,
+        ShowTotalPrice: false,
+        ItemsDisplayType: 0,
+        ManualSumField: JSON.parse(FRESH_MANUAL_SUM),
+        ShowVatInfo: false,
+        Vat: 0,
+        TotalPriceNotRequireVat: 0,
+        TotalPriceRequireVat: 0,
+        TotalVat: 0,
+        DiscountSum: 0,
+        ShowDonationAmountsButtons: false,
+        DonationDescription: ""
+    };
+}
+function productsStore(value) {
+    if (!record22(value) || !Array.isArray(value.products) || value.products.length !== 1 || !chosenProduct(value.products[0]) || !chargedCurrency(value.selectedCurrency) || !Array.isArray(value.deliveryMethods) || !value.deliveryMethods.every((method) => record22(method) && method.IsCurrent === false && typeof method.PriceToShow === "number") || JSON.stringify(value.coupon) !== NO_COUPON)
+        return false;
+    return JSON.stringify(freshProductsStore(value)) === JSON.stringify(value);
+}
+function deliveryStore(value) {
+    return record22(value) && sameKeys9(value, DELIVERY_KEYS) && flag(value.ShowDeliveryForm) && DELIVERY_KEYS.slice(1, 9).every((key) => optionalField(value[key])) && Array.isArray(value.Cities) && value.Cities.length === 0 && Array.isArray(value.Streets) && value.Streets.length === 0;
+}
+function documentStore(value) {
+    return record22(value) && sameKeys9(value, DOCUMENT_KEYS) && flag(value.ShowInvoiceForm) && pageText(value.Comments) && pageText(value.Title) && DOCUMENT_KEYS.slice(3, 12).every((key) => optionalField(value[key])) && flag(value.SendPreBuyDataToServer) && whole(value.DocTypeToCreate);
+}
+function detailsStore(value) {
+    return record22(value) && sameKeys9(value, DETAILS_KEYS) && flag(value.ShowDetailsForm) && value.ShowCancelBtn === false && value.CancelUrl === "" && pageText(value.Comments) && Array.isArray(value.FormFields) && value.FormFields.every(field);
+}
+function pageCard(payment) {
+    const number = payment.CardNumberField.Value;
+    const years = selectValues(payment.YearsField);
+    return CARD_NUMBER13.test(number) && luhn5(number) && MONTH13.test(payment.MonthsField.Value) && YEAR14.test(payment.YearsField.Value) && (years === null || years.includes(payment.YearsField.Value)) && CODE5.test(payment.CvvField.Value) && payment.CardOwnerNameField.Value.length >= 2 && text6(payment.CardOwnerNameField.Value, 100);
+}
+function paymentStore(value) {
+    if (!record22(value) || !sameKeys9(value, PAYMENT_KEYS))
+        return false;
+    const fields = [
+        "EmailField",
+        "MobileField",
+        "CardNumberField",
+        "YearsField",
+        "MonthsField",
+        "CvvField",
+        "CardOwnerNameField",
+        "CardTZField",
+        "PaymentsField",
+        "OpenSumField"
+    ];
+    const untouched = ["CardOwnerCityField", "CardOwnerAddressField", "CardOwnerZipcodeField"];
+    const flags = [
+        "HideCreditCardFieldsOnZeroSum",
+        "ApprovedTermsAndConditions",
+        "ShowTermsAndConditions",
+        "AllowMerchantMessages",
+        "MustAllowMerchantMessages",
+        "ShowMerchantMessages",
+        "ShowPayPal",
+        "ShowUpayBitButton",
+        "ShowPayMeBitButton",
+        "ShowCardcomBitButton",
+        "ShowApplePay",
+        "ShowGooglePay",
+        "ShowRecaptcha",
+        "IsCredit",
+        "Is3DSecureEnabled",
+        "ShowSuccessPopup",
+        "ShowErrorPopup",
+        "CanSkipAuthentication",
+        "IsDirectDebit",
+        "EnableHooxOffers",
+        "IsDirectDebitSplitPayments",
+        "ShowPaymentButton",
+        "AllowBitEmptyCardOwnerName",
+        "IsCreateToken",
+        "IsHideCart",
+        "IsJ5"
+    ];
+    const texts = [
+        "Comments",
+        "ButtonText",
+        "ButtonTextZeroSum",
+        "TermsAndConditionsUrl",
+        "MerchantApplePayLogoUrl",
+        "RecaptchaVersion",
+        "CartTitle",
+        "HooxID",
+        "ApplePayApplicationData",
+        "OrderSummeryTitle",
+        "TurnstileSiteKey",
+        "PrivacyPolicyUrl"
+    ];
+    return fields.every((key) => field(value[key])) && untouched.every((key) => JSON.stringify(value[key]) === "{}") && flags.every((key) => flag(value[key])) && texts.every((key) => pageText(value[key])) && whole(value.NumOfRetriesAllowed, 0, 99) && Array.isArray(value.Commissions) && value.Commissions.every(record22) && optionalFlag(value.Was3DSActiveOnPageLoad) && pageText(value.ThreeDSecureTransactionId) && pageText(value.ThreeDSecureCavv) && Object.values(DONATION).includes(value.DonationType) && value.GoogleCardNumber === "" && value.GoogleExpirationYear === "0" && value.GoogleExpirationMonth === "0" && Array.isArray(value.SupportedCardBrands) && value.SupportedCardBrands.every((brand) => text6(brand, 32)) && Array.isArray(value.DualCardsBINs) && value.DualCardsBINs.every(record22) && pageCard(value);
+}
+function threeDsBlock(value, block) {
+    const { CommonStore: common, ProductsStore: products, PaymentStore: payment } = value.Store;
+    if (!record22(block) || !sameKeys9(block, THREE_DS_KEYS) || typeof block.RequestedBillingAmount !== "number" || !exact3(LANGUAGE2, block.browserLanguage) || !exact3(SCREEN, block._3ds_browserscreenheight) || !exact3(SCREEN, block._3ds_browserscreenwidth) || !exact3(SCREEN, block._3ds_browsercolordepth))
+        return false;
+    const rebuilt = {
+        TerminalNum: common.TerminalNumber,
+        CoinId: products.selectedCurrency.Code,
+        CardNumber: payment.CardNumberField.Value,
+        CardholderFullName: payment.CardOwnerNameField.Value,
+        CardholderPhone: payment.MobileField.Value,
+        CardHolderEmail: payment.EmailField.Value,
+        CVV: payment.CvvField.Value,
+        CardExpireMonth: payment.MonthsField.Value,
+        CardExpireYear: payment.YearsField.Value.substr(2, 2),
+        RequestedBillingAmount: block.RequestedBillingAmount,
+        UserAgentHeader: value.UserAgent,
+        browserLanguage: block.browserLanguage,
+        _3ds_browserjavaenabled: "true",
+        _3ds_browserscreenheight: block._3ds_browserscreenheight,
+        _3ds_browserscreenwidth: block._3ds_browserscreenwidth,
+        _3ds_browsercolordepth: block._3ds_browsercolordepth,
+        _3ds_challengewindowsize: "05",
+        _3ds_channel: "02",
+        _3ds_category: "01",
+        _3ds_transtype: "01",
+        ExternalAisurit4DealPageUID: common.Uid,
+        DealToSaveJSON: "",
+        GooglePayToken: "",
+        DirectDebitSplitPaymentsSum: 0,
+        SapakMutav: ""
+    };
+    return JSON.stringify(rebuilt) === JSON.stringify(block);
+}
+var hooxReference = (value) => value === null || value === "" || whole(value) || typeof value === "string" && /^[\x21-\x7e]{1,256}$/.test(value);
+function pageBody(body) {
+    const value = readBody15(body);
+    if (value === null || !sameKeys9(value, TOP_KEYS2) || typeof value.GoogleToken !== "string" || value.GoogleToken !== "" && !TOKEN3.test(value.GoogleToken) || value.UserAgent === "" || !text6(value.UserAgent, 1024) || !whole(value.NumberOfTries, 1, 10) || value.GooglePayToken !== "" || !hooxReference(value.HooxReference) || !record22(value.Store) || !sameKeys9(value.Store, STORE_KEYS))
+        return null;
+    const store = value.Store;
+    if (!commonStore(store.CommonStore) || !companyStore(store.CompanyInfoStore) || !productsStore(store.ProductsStore) || !deliveryStore(store.DeliveryStore) || !documentStore(store.DocumentStore) || !detailsStore(store.DetailsStore) || !paymentStore(store.PaymentStore) || !threeDsBlock(value, value._3DSecureReq))
+        return null;
+    const product = store.ProductsStore.products[0];
+    const price = cents(product.PriceToShow);
+    if (price === null || cents(value._3DSecureReq.RequestedBillingAmount) !== price || product.BaseISOCurrency !== store.ProductsStore.selectedCurrency.Code || product.IsManualSum && product.ManualPrice !== product.PriceToShow)
+        return null;
+    if (store.PaymentStore.ShowRecaptcha !== (value.GoogleToken !== ""))
+        return null;
+    return value;
+}
+function cardcomBodyVerdict(body, url) {
+    if (url !== void 0 && !isCardcomSubmitUrl(url))
+        return refuse27("cardcom_url_refused");
+    const value = pageBody(body);
+    if (value === null)
+        return refuse27("cardcom_body_unsupported");
+    const payment = value.Store.PaymentStore;
+    const receiptId = value.Store.DocumentStore.IdField;
+    if (payment.Is3DSecureEnabled || payment.Was3DSActiveOnPageLoad === true || payment.ThreeDSecureTransactionId || payment.ThreeDSecureCavv) {
+        return refuse27("cardcom_three_d_secure_refused");
+    }
+    if (payment.IsCreateToken || payment.IsJ5)
+        return refuse27("cardcom_card_saving_refused");
+    if (payment.IsDirectDebitSplitPayments || payment.PaymentsField.Value !== "1" || payment.DonationType === DONATION.monthly || payment.DonationType === DONATION.multiple || payment.IsDirectDebit && payment.DonationType !== DONATION.single) {
+        return refuse27("cardcom_recurring_refused");
+    }
+    if (payment.CardTZField.Value !== "" || payment.CardTZField.Show && payment.CardTZField.Required || receiptId !== null && (receiptId.Value !== "" || receiptId.Show && receiptId.Required))
+        return refuse27("cardcom_id_required");
+    if (payment.ShowRecaptcha && payment.RecaptchaVersion !== "v3")
+        return refuse27("cardcom_captcha_unsupported");
+    return CARD26;
+}
+var CARDCOM_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    Object.freeze({
+        id: "machon_alte_usd",
+        merchant: "Machon Alte",
+        origins: Object.freeze([CARDCOM_ORIGIN]),
+        page: "kzR5pTyr0kC3oqjpGbCMiQ",
+        terminal: 162226,
+        products: Object.freeze([Object.freeze({ uid: "JoQrlcuGCUWYM4I66eX7pw", currency: "usd", price: null })]),
+        settings: "e38d7c7abce83a3a994a707e345595cf6ec2a15d77794a8eea70c0d5ce4773ab"
+    })
+]);
+// src/nexi-checkout.js
+var NEXI_CHECKOUT_PSP = "nexi_checkout";
+var NEXI_CHECKOUT_PAY_HOSTS = /* @__PURE__ */ Object.freeze({ "checkout.dibspayment.eu": "production", "test.checkout.dibspayment.eu": "test" });
+var NEXI_CHECKOUT_PAY_PATH = "/api/v1/pay";
+var BODY_LIMIT26 = 4096;
+var BODY_KEYS = /* @__PURE__ */ Object.freeze([
+    "type",
+    "paymentType",
+    "acceptedTermsAndConditions",
+    "amountConfirmedByConsumer",
+    "surchargeAmount",
+    "consumerCheckedSaveNewPaymentMethod",
+    "consumerHasConsentedToRememberingNewDevice",
+    "consumerWantsToBeAnonymous",
+    "language"
+]);
+var CARD_KEYS11 = /* @__PURE__ */ Object.freeze(["cardNumber", "cardVerificationCode", "cardholderName", "expiryMonth", "expiryYear"]);
+var CARD_NUMBER14 = /^[0-9]{13,19}$/;
+var MONTH14 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR15 = /^[0-9]{2}$/;
+var CODE6 = /^[0-9]{3,4}$/;
+var TEXT_LIMIT9 = 128;
+var EMAIL_LIMIT2 = 254;
+var LANGUAGE3 = /^[a-z]{2}-[a-z]{2}$/i;
+var AMOUNT_LIMIT2 = 2147483647;
+var record23 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var sameKeys10 = (value, keys) => {
+    const found = Object.keys(value);
+    return found.length === keys.length && found.every((key, at) => key === keys[at]);
+};
+var refuse28 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD27 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var printable4 = (text9) => [...text9].every((character) => {
+    const point = character.codePointAt(0);
+    return point >= 32 && !(point >= 127 && point <= 159) && point !== 8232 && point !== 8233;
+});
+var text7 = (value, limit) => typeof value === "string" && value.length <= limit && printable4(value);
+function luhn6(digits4) {
+    let sum = 0;
+    for (let at = 0; at < digits4.length; at += 1) {
+        let digit = Number(digits4[digits4.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function nexiCheckoutPayUrl(url) {
+    if (typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || parsed.search || parsed.hash || parsed.pathname !== NEXI_CHECKOUT_PAY_PATH)
+        return null;
+    if (!own6(NEXI_CHECKOUT_PAY_HOSTS, parsed.hostname))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: NEXI_CHECKOUT_PAY_HOSTS[parsed.hostname] });
+}
+function isNexiCheckoutPayUrl(url) {
+    return nexiCheckoutPayUrl(url) !== null;
+}
+function readBody16(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT26)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record23(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function cardFormValues(card) {
+    if (!record23(card))
+        return false;
+    const keys = Object.keys(card);
+    const expected = own6(card, "email") ? CARD_KEYS11.length + 1 : CARD_KEYS11.length;
+    if (keys.length !== expected || !CARD_KEYS11.every((key) => own6(card, key)))
+        return false;
+    if (own6(card, "email") && !text7(card.email, EMAIL_LIMIT2))
+        return false;
+    return typeof card.cardNumber === "string" && CARD_NUMBER14.test(card.cardNumber) && luhn6(card.cardNumber) && typeof card.cardVerificationCode === "string" && CODE6.test(card.cardVerificationCode) && text7(card.cardholderName, TEXT_LIMIT9) && card.cardholderName.trim() !== "" && typeof card.expiryMonth === "string" && MONTH14.test(card.expiryMonth) && typeof card.expiryYear === "string" && YEAR15.test(card.expiryYear);
+}
+var amount = (value, least) => Number.isSafeInteger(value) && value >= least && value <= AMOUNT_LIMIT2;
+var flag2 = (value) => typeof value === "boolean";
+function nexiCheckoutBodyVerdict(body, url) {
+    if (url !== void 0 && !isNexiCheckoutPayUrl(url))
+        return refuse28("nexi_checkout_url_refused");
+    const value = readBody16(body);
+    if (value === null || !sameKeys10(value, BODY_KEYS))
+        return refuse28("nexi_checkout_body_unsupported");
+    if (value.type !== "card" || !record23(value.paymentType) || !sameKeys10(value.paymentType, ["card"]) || !cardFormValues(value.paymentType.card) || !flag2(value.acceptedTermsAndConditions) || !amount(value.amountConfirmedByConsumer, 1) || !amount(value.surchargeAmount, 0) || !flag2(value.consumerCheckedSaveNewPaymentMethod) || !flag2(value.consumerHasConsentedToRememberingNewDevice) || !flag2(value.consumerWantsToBeAnonymous) || typeof value.language !== "string" || value.language !== "" && !LANGUAGE3.test(value.language))
+        return refuse28("nexi_checkout_body_unsupported");
+    if (value.consumerCheckedSaveNewPaymentMethod || value.consumerHasConsentedToRememberingNewDevice)
+        return refuse28("nexi_checkout_card_saving_refused");
+    if (value.surchargeAmount !== 0)
+        return refuse28("nexi_checkout_surcharge_refused");
+    return CARD27;
+}
+// src/toast.js
+var TOAST_PSP = "toast";
+var TOAST_PAYMENT_METHODS_URL = "https://payments.toasttab.com/v1/payment-methods";
+var TOAST_KEY_ID = "RSA-OAEP-SHA1::bacb4887-8314-4c23-98fc-d5ef7bc99e94_oo-legacy-browsers";
+var TOAST_SUBSTITUTION = /* @__PURE__ */ Object.freeze({ at: "card", fields: Object.freeze(["cardData"]) });
+var BODY_LIMIT27 = 8192;
+var ROOT_KEYS9 = /* @__PURE__ */ Object.freeze(["type", "card", "sessionSecret", "usage", "setupFutureUsage", "billingDetails"]);
+var CARD_KEYS12 = /* @__PURE__ */ Object.freeze(["keyId", "cardData"]);
+var WALLETS = /* @__PURE__ */ Object.freeze(["APPLE_PAY", "GOOGLE_PAY"]);
+var SESSION_SECRET = /^[\x21-\x7e]{1,1024}$/;
+var POSTAL_CODE4 = /^[A-Za-z0-9 -]{0,16}$/;
+var CIPHERTEXT_B64 = /^[A-Za-z0-9+/]{341}[AQgw]==$/;
+var record24 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys11 = (value, keys) => {
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
+};
+var refuse29 = (code) => Object.freeze({ verdict: "refuse", code });
+var failed = (code) => (
+/** @type {ToastBodyReadJs} */
+Object.freeze({ ok: false, code }));
+var CARD28 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE10 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function isWalletBody(parsed) {
+    const card = parsed.card;
+    const rootOk = sameKeys11(parsed, ["type", "card", "sessionSecret"]) || sameKeys11(parsed, ["type", "card", "sessionSecret", "billingDetails"]) && record24(parsed.billingDetails);
+    return rootOk && WALLETS.includes(parsed.type) && record24(card) && sameKeys11(card, ["keyId", "cardData", "wallet"]) && card.keyId === null && typeof card.cardData === "string" && record24(card.wallet) && sameKeys11(card.wallet, ["type"]) && card.wallet.type === parsed.type && typeof parsed.sessionSecret === "string";
+}
+function isToastPaymentMethodsUrl(url) {
+    return url === TOAST_PAYMENT_METHODS_URL;
+}
+function isToastCiphertext(value) {
+    return typeof value === "string" && CIPHERTEXT_B64.test(value);
+}
+function readToastBody(body) {
+    const malformed = failed("toast_body_malformed");
+    if (typeof body !== "string" || body.length > BODY_LIMIT27)
+        return malformed;
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return malformed;
+    }
+    if (!record24(parsed) || JSON.stringify(parsed) !== body)
+        return malformed;
+    if (isWalletBody(parsed))
+        return (
+        /** @type {ToastBodyReadJs} */
+        Object.freeze({ ok: false, wallet: true }));
+    const card = parsed.card;
+    if (!sameKeys11(parsed, ROOT_KEYS9) || parsed.type !== "CARD" || !record24(card) || !sameKeys11(card, CARD_KEYS12))
+        return malformed;
+    if (typeof card.keyId !== "string")
+        return malformed;
+    if (card.keyId !== TOAST_KEY_ID)
+        return failed("toast_foreign_key");
+    if (!isToastCiphertext(card.cardData))
+        return malformed;
+    if (typeof parsed.sessionSecret !== "string" || !SESSION_SECRET.test(parsed.sessionSecret))
+        return malformed;
+    if (parsed.usage !== null || parsed.setupFutureUsage !== null)
+        return failed("toast_keeps_card");
+    const billing = parsed.billingDetails;
+    if (!record24(billing) || !sameKeys11(billing, ["postalCode"]) || typeof billing.postalCode !== "string" || !POSTAL_CODE4.test(billing.postalCode))
+        return malformed;
+    const read = { ok: true, sessionSecret: parsed.sessionSecret, postalCode: billing.postalCode, cardData: card.cardData };
+    return Object.freeze(read);
+}
+function toastBodyVerdict(body) {
+    const read = readToastBody(body);
+    if (read.ok)
+        return CARD28;
+    return read.wallet ? CONTINUE10 : refuse29(read.code);
+}
+// src/fastspring.js
+var FASTSPRING_PSP = "fastspring";
+var FASTSPRING_STORE_PINS = /* @__PURE__ */ Object.freeze([
+    Object.freeze({ environment: "production", store: "daisydisk", storefront: "", merchant: "DaisyDisk" })
+]);
+var URL_LIMIT11 = 256;
+var BODY_LIMIT28 = 32768;
+var STORE = "[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?";
+var CARD_URL = new RegExp(`^https://(${STORE})(\\.test)?\\.onfastspring\\.com((?:/(?:popup|embedded)-[A-Za-z0-9_-]{1,64})?)/session/([A-Za-z0-9_-]{16,64})/payment$`);
+var DIGITS = /^[0-9]{12,19}$/;
+var MONTH15 = /^(?:0?[1-9]|1[0-2])$/;
+var YEAR16 = /^(?:[0-9]{2}|[0-9]{4})$/;
+var SECURITY_CODE16 = /^[0-9]{3,4}$/;
+var CARD_KEYS13 = /* @__PURE__ */ Object.freeze(["year", "month", "number", "security"]);
+var SAVED_CARD_KEYS = /* @__PURE__ */ Object.freeze(["savedCardId", "savedCardEnding", "savedCardBin", "variantType"]);
+var BODY_KEYS2 = /* @__PURE__ */ new Set([
+    "contact",
+    "card",
+    "sepa",
+    "ach",
+    "pad",
+    "bacs",
+    "upi",
+    "mercadopago",
+    "cpfNumber",
+    "dniNumber",
+    "googlepay",
+    "applepay",
+    "paymentKlarna",
+    "paymentType",
+    "subscribe",
+    "captcha",
+    "recipientSelected",
+    "recipient",
+    "customerReference",
+    "autoRenew",
+    "fingerprint",
+    "savedPaypalId",
+    "savedVenmoId",
+    "cashapp"
+]);
+var METHOD_KEYS = /* @__PURE__ */ Object.freeze(["sepa", "ach", "pad", "bacs", "upi", "mercadopago", "googlepay", "applepay", "paymentKlarna"]);
+var SAVED_METHOD_KEYS = /* @__PURE__ */ Object.freeze(["savedPaypalId", "savedVenmoId", "cashapp"]);
+var TEXT2 = /^[^\x00-\x1f\x7f]{0,256}$/;
+var IP_ADDRESS = /^[0-9A-Fa-f.:]{2,45}$/;
+var FINGERPRINT_KEYS = /* @__PURE__ */ Object.freeze(["uniqueId", "fingerprintHash"]);
+var CARD_MEMBER3 = /^(?:card_?number|cc_?number|pan|cvc2?|cvv2?|security_?code)$/i;
+var record25 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own7 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var nothing = (value) => value === void 0 || value === null || value === "" || value === false;
+var refuse30 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD29 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE11 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function fastspringCardUrl(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT11 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.port || parsed.username || parsed.password)
+        return null;
+    const match = CARD_URL.exec(url);
+    if (!match)
+        return null;
+    return Object.freeze({
+        environment: match[2] ? "sandbox" : "production",
+        store: match[1],
+        storefront: match[3],
+        session: match[4],
+        sessionUrl: url.slice(0, -"/payment".length)
+    });
+}
+function isFastspringCardUrl(url) {
+    return fastspringCardUrl(url) !== null;
+}
+function readJson7(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT28)
+        return { parsed: null, exact: false };
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return { parsed: null, exact: false };
+    }
+    let exact5 = false;
+    try {
+        exact5 = JSON.stringify(parsed) === body;
+    }
+    catch {
+        exact5 = false;
+    }
+    return { parsed, exact: exact5 };
+}
+function numberDigits(number) {
+    if (typeof number !== "string")
+        return null;
+    const digits4 = number.replace(/ /g, "");
+    if (!DIGITS.test(digits4))
+        return null;
+    return number === digits4 || number === digits4.replace(/(.{4})/g, "$1 ").trim() ? digits4 : null;
+}
+function emptyDetails(key, value) {
+    if (nothing(value))
+        return true;
+    if (!record25(value))
+        return false;
+    return Object.entries(value).every(([name, leaf]) => nothing(leaf) || key === "sepa" && name === "ipAddress" && typeof leaf === "string" && IP_ADDRESS.test(leaf));
+}
+function namesCardOutside(parsed) {
+    const pending = Object.entries(parsed).filter(([key]) => key !== "card").map(([, value]) => value).filter((value) => value !== null && typeof value === "object");
+    if (Object.keys(parsed).some((key) => key !== "card" && CARD_MEMBER3.test(key)))
+        return true;
+    while (pending.length > 0) {
+        const node = pending.pop();
+        for (const key of Object.keys(node)) {
+            if (!Array.isArray(node) && CARD_MEMBER3.test(key))
+                return true;
+            const value = node[key];
+            if (value !== null && typeof value === "object")
+                pending.push(value);
+        }
+    }
+    return false;
+}
+var cardValues = (card) => record25(card) && (!nothing(card.number) || !nothing(card.security));
+function judgeCard2(parsed) {
+    const card = parsed.card;
+    if (record25(card) && SAVED_CARD_KEYS.some((key) => own7(card, key)))
+        return "fastspring_saved_card";
+    if (SAVED_METHOD_KEYS.some((key) => own7(parsed, key)))
+        return "fastspring_saved_card";
+    if (!Object.keys(parsed).every((key) => BODY_KEYS2.has(key)) || namesCardOutside(parsed))
+        return "fastspring_body_unsupported";
+    if (!record25(card) || Object.keys(card).length !== CARD_KEYS13.length || !CARD_KEYS13.every((key) => own7(card, key)) || numberDigits(card.number) === null || typeof card.month !== "string" || !MONTH15.test(card.month) || typeof card.year !== "string" || !YEAR16.test(card.year) || typeof card.security !== "string" || !SECURITY_CODE16.test(card.security))
+        return "fastspring_body_unsupported";
+    if (parsed.recipientSelected === true || own7(parsed, "recipient"))
+        return "fastspring_gift";
+    if (typeof parsed.recipientSelected !== "boolean")
+        return "fastspring_body_unsupported";
+    if (parsed.autoRenew === true)
+        return "fastspring_keep_on_file";
+    if (!nothing(parsed.autoRenew))
+        return "fastspring_body_unsupported";
+    for (const key of ["cpfNumber", "dniNumber"]) {
+        if (nothing(parsed[key]))
+            continue;
+        return typeof parsed[key] === "string" ? "fastspring_local_route" : "fastspring_body_unsupported";
+    }
+    const captcha = parsed.captcha;
+    if (!record25(captcha) || Object.keys(captcha).length !== 2 || typeof captcha.token !== "string" || typeof captcha.captchaType !== "string")
+        return "fastspring_body_unsupported";
+    if (captcha.token !== "" || captcha.captchaType !== "")
+        return "fastspring_captcha_unsupported";
+    if (own7(parsed, "customerReference"))
+        return "fastspring_body_unsupported";
+    if (!METHOD_KEYS.every((key) => emptyDetails(key, parsed[key])))
+        return "fastspring_body_unsupported";
+    const contact = parsed.contact;
+    if (!record25(contact) || !Object.values(contact).every((value) => value === null || typeof value === "boolean" || typeof value === "string" && TEXT2.test(value)))
+        return "fastspring_body_unsupported";
+    if (!(parsed.subscribe === void 0 || parsed.subscribe === null || typeof parsed.subscribe === "boolean"))
+        return "fastspring_body_unsupported";
+    const fingerprint = parsed.fingerprint;
+    if (fingerprint !== void 0 && !(record25(fingerprint) && Object.keys(fingerprint).every((key) => FINGERPRINT_KEYS.includes(key)) && Object.values(fingerprint).every((value) => value === null || typeof value === "number" && Number.isFinite(value) || typeof value === "string" && TEXT2.test(value))))
+        return "fastspring_body_unsupported";
+    return null;
+}
+function fastspringBodyVerdict(body) {
+    const { parsed, exact: exact5 } = readJson7(body);
+    if (!record25(parsed))
+        return body === void 0 || body === null || body === "" ? CONTINUE11 : refuse30("fastspring_body_unsupported");
+    if (parsed.paymentType !== "card") {
+        if (cardValues(parsed.card) || namesCardOutside(parsed))
+            return refuse30("fastspring_body_unsupported");
+        return typeof parsed.paymentType === "string" && parsed.paymentType !== "" ? CONTINUE11 : refuse30("fastspring_body_unsupported");
+    }
+    if (!exact5)
+        return refuse30("fastspring_body_unsupported");
+    const code = judgeCard2(parsed);
+    return code === null ? CARD29 : refuse30(code);
+}
+// src/omise.js
+var OMISE_PSP = "omise";
+var OMISE_TOKEN_URL = "https://vault.omise.co/tokens";
+var OMISE_CARD_KEYS = /* @__PURE__ */ Object.freeze([
+    "number",
+    "name",
+    "expiration_month",
+    "expiration_year",
+    "security_code",
+    "email",
+    "phone_number",
+    "country",
+    "state",
+    "city",
+    "postal_code",
+    "street1",
+    "street2"
+]);
+var BODY_LIMIT29 = 4096;
+var SECURITY_CODE17 = /^[0-9]{3,4}$/;
+var MONTH_TEXT2 = /^(?:0?[1-9]|1[0-2])$/;
+var YEAR_TEXT = /^(?:[0-9]{2}|20[0-9]{2})$/;
+var COUNTRY5 = /^[A-Za-z]{2}$/;
+var PHONE3 = /^\+?[0-9 ()-]{6,24}$/;
+var POSTAL_NUMBER_LIMIT = 99999999999;
+var TEXT_LIMIT10 = 256;
+var CONTROL11 = /[\u0000-\u001f\u007f]/;
+var NUMBER_FIELD = /^[0-9]+(?: [0-9]+){0,6}$/;
+var record26 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own8 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var wellFormed2 = (value) => {
+    try {
+        encodeURIComponent(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+var digits2 = (value) => (value.match(/\p{Nd}/gu) ?? []).length;
+var plainText5 = (value) => typeof value === "string" && value.length >= 1 && value.length <= TEXT_LIMIT10 && !CONTROL11.test(value) && digits2(value) < 12 && wellFormed2(value);
+var optionalText2 = (value) => value === "" || plainText5(value);
+function luhnValid(run) {
+    let sum = 0;
+    for (let i = 0; i < run.length; i += 1) {
+        let digit = run.charCodeAt(run.length - 1 - i) - 48;
+        if (i % 2 === 1)
+            digit = digit * 2 > 9 ? digit * 2 - 9 : digit * 2;
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function cardShaped(value) {
+    const groups = value.match(/[0-9]+/g) ?? [];
+    for (let first = 0; first < groups.length; first += 1) {
+        let run = "";
+        for (let last = first; last < groups.length && run.length < 19; last += 1) {
+            run += groups[last];
+            if (run.length >= 13 && run.length <= 19 && run[0] >= "2" && run[0] <= "6" && luhnValid(run))
+                return true;
+        }
+    }
+    return false;
+}
+var phoneNumber = (value) => typeof value === "string" && PHONE3.test(value) && digits2(value) >= 6 && digits2(value) <= 15 && !cardShaped(value);
+var numberField = (value) => typeof value === "string" && NUMBER_FIELD.test(value) && digits2(value) >= 12 && digits2(value) <= 19;
+var refuse31 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD30 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isOmiseTokenUrl(url) {
+    return url === OMISE_TOKEN_URL;
+}
+function readBody17(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT29)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record26(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function monthValue(value) {
+    if (typeof value === "number")
+        return Number.isSafeInteger(value) && value >= 1 && value <= 12;
+    return typeof value === "string" && MONTH_TEXT2.test(value);
+}
+function yearValue(value) {
+    if (typeof value === "number")
+        return Number.isSafeInteger(value) && (value >= 0 && value <= 99 || value >= 2e3 && value <= 2099);
+    return typeof value === "string" && YEAR_TEXT.test(value);
+}
+function cardMembers(card) {
+    if (!record26(card) || !Object.keys(card).every((key) => OMISE_CARD_KEYS.includes(key)))
+        return false;
+    if (!numberField(card.number) || !plainText5(card.name) || !monthValue(card.expiration_month) || !yearValue(card.expiration_year) || typeof card.security_code !== "string" || !SECURITY_CODE17.test(card.security_code))
+        return false;
+    for (const key of ["email", "state", "city", "street1", "street2"]) {
+        if (own8(card, key) && !optionalText2(card[key]))
+            return false;
+    }
+    if (own8(card, "country") && (typeof card.country !== "string" || !COUNTRY5.test(card.country)))
+        return false;
+    if (own8(card, "phone_number") && !(card.phone_number === "" || phoneNumber(card.phone_number)))
+        return false;
+    if (own8(card, "postal_code")) {
+        const code = card.postal_code;
+        const sound = typeof code === "number" ? Number.isSafeInteger(code) && code >= 0 && code <= POSTAL_NUMBER_LIMIT : optionalText2(code);
+        if (!sound)
+            return false;
+    }
+    return true;
+}
+function omiseBodyVerdict(body) {
+    const value = readBody17(body);
+    if (value === null)
+        return refuse31("omise_body_unsupported");
+    const keys = Object.keys(value);
+    if (keys.length !== 1 || keys[0] !== "card" || !cardMembers(value.card))
+        return refuse31("omise_body_unsupported");
+    return CARD30;
+}
+var pin10 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fields.origins]), keys: Object.freeze([...fields.keys]) });
+var OMISE_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
+    pin10({ id: "taejai", merchant: "Taejai", origins: ["https://taejai.com"], keys: ["pkey_53q6mm66esjr563ob0h"] }),
+    pin10({ id: "socialgiver", merchant: "Socialgiver", origins: ["https://www.socialgiver.com"], keys: ["pkey_5d5o2iahksmyrkybemg"] }),
+    pin10({ id: "thireq_pecko_links", merchant: "Thireq Pecko", origins: ["https://linksplus.omise.co"], keys: ["pkey_65w70xniwsinf0gm680"] })
+]);
+// src/xendit.js
+var XENDIT_PSP = "xendit";
+var XENDIT_TOKEN_URL = "https://api.xendit.co/v2/credit_card_tokens";
+var XENDIT_TOKEN_KEYS = /* @__PURE__ */ Object.freeze([
+    "is_single_use",
+    "card_data",
+    "should_authenticate",
+    "billing_details",
+    "fp_session_id",
+    "metadata",
+    "amount",
+    "card_cvn",
+    "currency",
+    "mid_label",
+    "external_id"
+]);
+var XENDIT_CARD_KEYS = /* @__PURE__ */ Object.freeze([
+    "account_number",
+    "exp_month",
+    "exp_year",
+    "cvn",
+    "card_holder_name",
+    "card_holder_email",
+    "card_holder_first_name",
+    "card_holder_last_name",
+    "card_holder_phone_number"
+]);
+var BODY_LIMIT30 = 8192;
+var CARD_NUMBER15 = /^[0-9]{12,19}$/;
+var SECURITY_CODE18 = /^[0-9]{3,4}$/;
+var MONTH16 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR17 = /^20[0-9]{2}$/;
+var CURRENCY4 = /^[A-Z]{3}$/;
+var AMOUNT_LIMIT3 = 1e12;
+var FP_SESSION = /^[A-Za-z0-9._:-]{0,256}$/;
+var FORTER_TOKEN = /^[A-Za-z0-9._~:+/=-]{1,1024}$/;
+var MID_LABEL = /^[A-Za-z0-9_.-]{1,64}$/;
+var EXTERNAL_ID = /^[\x21-\x7e]{1,255}$/;
+var PHONE4 = /^\+?[0-9]{6,15}$/;
+var TEXT_LIMIT11 = 256;
+var CONTROL12 = /[\u0000-\u001f\u007f]/;
+var BILLING_KEYS = /* @__PURE__ */ Object.freeze(["given_names", "surname", "email", "mobile_number", "phone_number", "address"]);
+var ADDRESS_KEYS5 = /* @__PURE__ */ Object.freeze(["country", "street_line1", "street_line2", "city", "province_state", "postal_code", "category"]);
+var AMOUNT_TEXT = /^[0-9]{1,13}(?:\.[0-9]{1,2})?$/;
+var record27 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own9 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var inOrder5 = (value, keys) => {
+    let at = 0;
+    for (const name of Object.keys(value)) {
+        while (at < keys.length && keys[at] !== name)
+            at += 1;
+        if (at === keys.length)
+            return false;
+        at += 1;
+    }
+    return true;
+};
+var wellFormed3 = (value) => {
+    try {
+        encodeURIComponent(value);
+        return true;
+    }
+    catch {
+        return false;
+    }
+};
+var plainText6 = (value) => typeof value === "string" && value.length >= 1 && value.length <= TEXT_LIMIT11 && !CONTROL12.test(value) && (value.match(/[0-9]/g) ?? []).length < 12 && wellFormed3(value);
+var reference = (value) => typeof value === "string" && EXTERNAL_ID.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
+var refuse32 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD31 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isXenditTokenUrl(url) {
+    return url === XENDIT_TOKEN_URL;
+}
+function readBody18(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT30)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record27(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function amountValue(value) {
+    if (typeof value === "number" && !Number.isFinite(value))
+        return false;
+    const text9 = typeof value === "number" ? String(value) : value;
+    if (typeof text9 !== "string" || !AMOUNT_TEXT.test(text9))
+        return false;
+    const amount2 = Number(text9);
+    return amount2 > 0 && amount2 <= AMOUNT_LIMIT3;
+}
+function billingDetails(value) {
+    if (!record27(value) || !inOrder5(value, BILLING_KEYS))
+        return false;
+    return Object.keys(value).every((key) => {
+        const field2 = value[key];
+        if (key !== "address")
+            return key === "mobile_number" || key === "phone_number" ? typeof field2 === "string" && PHONE4.test(field2) : plainText6(field2);
+        return record27(field2) && inOrder5(field2, ADDRESS_KEYS5) && Object.keys(field2).every((name) => plainText6(field2[name]));
+    });
+}
+function cardData(value) {
+    if (!record27(value) || !inOrder5(value, XENDIT_CARD_KEYS))
+        return false;
+    if (typeof value.account_number !== "string" || !CARD_NUMBER15.test(value.account_number) || typeof value.exp_month !== "string" || !MONTH16.test(value.exp_month) || typeof value.exp_year !== "string" || !YEAR17.test(value.exp_year) || typeof value.cvn !== "string" || !SECURITY_CODE18.test(value.cvn))
+        return false;
+    for (const key of ["card_holder_name", "card_holder_email", "card_holder_first_name", "card_holder_last_name"]) {
+        if (own9(value, key) && !plainText6(value[key]))
+            return false;
+    }
+    return !own9(value, "card_holder_phone_number") || typeof value.card_holder_phone_number === "string" && PHONE4.test(value.card_holder_phone_number);
+}
+function xenditBodyVerdict(body) {
+    const value = readBody18(body);
+    if (value === null || !inOrder5(value, XENDIT_TOKEN_KEYS) || !own9(value, "is_single_use") || !own9(value, "card_data")) {
+        return refuse32("xendit_body_unsupported");
+    }
+    if (value.is_single_use !== true)
+        return value.is_single_use === false ? refuse32("xendit_multiple_use") : refuse32("xendit_body_unsupported");
+    if (!cardData(value.card_data) || value.should_authenticate !== true || !amountValue(value.amount) || typeof value.currency !== "string" || !CURRENCY4.test(value.currency))
+        return refuse32("xendit_body_unsupported");
+    if (own9(value, "card_cvn") && value.card_cvn !== value.card_data.cvn)
+        return refuse32("xendit_body_unsupported");
+    if (own9(value, "billing_details") && !billingDetails(value.billing_details))
+        return refuse32("xendit_body_unsupported");
+    if (own9(value, "fp_session_id") && (typeof value.fp_session_id !== "string" || !FP_SESSION.test(value.fp_session_id)))
+        return refuse32("xendit_body_unsupported");
+    if (own9(value, "metadata")) {
+        const metadata = value.metadata;
+        if (!record27(metadata) || Object.keys(metadata).length !== 1 || !record27(metadata._forter) || Object.keys(metadata._forter).length !== 1 || typeof metadata._forter.token !== "string" || !FORTER_TOKEN.test(metadata._forter.token))
+            return refuse32("xendit_body_unsupported");
+    }
+    if (own9(value, "mid_label") && (typeof value.mid_label !== "string" || !MID_LABEL.test(value.mid_label)))
+        return refuse32("xendit_body_unsupported");
+    if (own9(value, "external_id") && !reference(value.external_id))
+        return refuse32("xendit_body_unsupported");
+    return CARD31;
+}
+// src/tappay.js
+var TAPPAY_PSP = "tappay";
+var TAPPAY_GETPRIME_URL = "https://js.tappaysdk.com/payment/tpdirect/production/getprime";
+var BODY_LIMIT31 = 8192;
+var REQUIRED_KEYS3 = /* @__PURE__ */ Object.freeze(["cardnumber", "cardduedate", "appid", "appkey", "appname", "url", "protocol", "tappay_sdk_version", "cardholder_info"]);
+var KEY_ORDER = /* @__PURE__ */ Object.freeze(["cardnumber", "cardduedate", "appid", "appkey", "appname", "url", "port", "protocol", "tappay_sdk_version", "cardholder_info", "cardccv", "device_id"]);
+var OPTIONAL_KEYS2 = /* @__PURE__ */ Object.freeze(["port", "cardccv", "device_id"]);
+var CARDHOLDER_KEYS = /* @__PURE__ */ Object.freeze(["name_en", "email", "phone_number_country_code", "phone_number"]);
+var CARD_NUMBER16 = /^[0-9]{12,19}$/;
+var CARD_DUE_DATE = /^20[0-9]{2}(?:0[1-9]|1[0-2])$/;
+var SECURITY_CODE19 = /^[0-9]{3,4}$/;
+var APP_KEY = /^[A-Za-z0-9_-]{16,512}$/;
+var SDK_VERSION = /^v[0-9]+(?:\.[0-9]+){1,3}$/;
+var HOSTNAME2 = /^[A-Za-z0-9.:-]{1,255}$/;
+var ORIGIN_URL = /^https?:\/\/[A-Za-z0-9.:_/-]{1,255}$/;
+var PROTOCOL = /^https?:$/;
+var PORT = /^[0-9]{0,5}$/;
+var CONTROL13 = /[\u0000-\u001f\u007f]/;
+var TEXT_LIMIT12 = 256;
+var DEVICE_ID = /^[A-Za-z0-9_-]{1,128}$/;
+var record28 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var plainText7 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT12 && !CONTROL13.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
+var holderField = (value) => value === null || plainText7(value);
+var refuse33 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD32 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isTappayGetPrimeUrl(url) {
+    return url === TAPPAY_GETPRIME_URL;
+}
+function readBody19(body) {
+    if (typeof body !== "string" || body.length > BODY_LIMIT31)
+        return null;
+    const eq = body.indexOf("=");
+    if (eq !== "jsonString".length || body.slice(0, eq) !== "jsonString")
+        return null;
+    const json = body.slice(eq + 1);
+    let value;
+    try {
+        value = JSON.parse(json);
+        if (!record28(value) || JSON.stringify(value) !== json)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function keysInOrder(value) {
+    const keys = Object.keys(value);
+    for (const key of REQUIRED_KEYS3) {
+        if (!keys.includes(key))
+            return false;
+    }
+    for (const key of keys) {
+        if (!KEY_ORDER.includes(key) || !REQUIRED_KEYS3.includes(key) && !OPTIONAL_KEYS2.includes(key))
+            return false;
+    }
+    const rank = (key) => KEY_ORDER.indexOf(key);
+    for (let at = 1; at < keys.length; at += 1) {
+        if (rank(keys[at]) <= rank(keys[at - 1]))
+            return false;
+    }
+    return true;
+}
+function cardholderInfo(value) {
+    if (!record28(value))
+        return false;
+    const keys = Object.keys(value);
+    return keys.length <= CARDHOLDER_KEYS.length && keys.every((key) => CARDHOLDER_KEYS.includes(key) && holderField(value[key]));
+}
+function tappayBodyVerdict(body) {
+    const value = readBody19(body);
+    if (value === null || !keysInOrder(value))
+        return refuse33("tappay_body_unsupported");
+    if (typeof value.cardnumber !== "string" || !CARD_NUMBER16.test(value.cardnumber) || typeof value.cardduedate !== "string" || !CARD_DUE_DATE.test(value.cardduedate) || !Number.isInteger(value.appid) || value.appid < 0 || typeof value.appkey !== "string" || !APP_KEY.test(value.appkey) || typeof value.appname !== "string" || !HOSTNAME2.test(value.appname) || typeof value.url !== "string" || !ORIGIN_URL.test(value.url) || typeof value.protocol !== "string" || !PROTOCOL.test(value.protocol) || typeof value.tappay_sdk_version !== "string" || !SDK_VERSION.test(value.tappay_sdk_version) || !cardholderInfo(value.cardholder_info)) {
+        return refuse33("tappay_body_unsupported");
+    }
+    if (Object.prototype.hasOwnProperty.call(value, "port") && (typeof value.port !== "string" || !PORT.test(value.port)))
+        return refuse33("tappay_body_unsupported");
+    if (Object.prototype.hasOwnProperty.call(value, "cardccv") && (typeof value.cardccv !== "string" || !SECURITY_CODE19.test(value.cardccv)))
+        return refuse33("tappay_body_unsupported");
+    if (Object.prototype.hasOwnProperty.call(value, "device_id") && (typeof value.device_id !== "string" || !DEVICE_ID.test(value.device_id)))
+        return refuse33("tappay_body_unsupported");
+    return CARD32;
+}
+// src/paymob.js
+var PAYMOB_PSP = "paymob";
+var PAYMOB_HOSTS = /* @__PURE__ */ Object.freeze(["accept.paymob.com", "uae.paymob.com", "ksa.paymob.com", "oman.paymob.com", "accept.paymobsolutions.com"]);
+var PAYMOB_PAY_PATH = "/api/acceptance/payments/pay";
+var URL_LIMIT12 = 128;
+var BODY_LIMIT32 = 16384;
+var KEY_LIMIT = 8192;
+var NUMBER7 = /^[0-9]{12,19}$/;
+var MONTH17 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR18 = /^[0-9]{2}$/;
+var SECURITY_CODE20 = /^[0-9]{3,4}$/;
+var TEXT3 = /^[^\x00-\x1f\x7f]{0,256}$/;
+var HOLDER_TEXT = /^[^\x00-\x1f\x7f]{0,128}$/;
+var FIELD = /^[a-z][a-z0-9_]{0,39}$/;
+var FINGERPRINT3 = /^[\x21-\x7e]{1,256}$/;
+var ORIGIN2 = /^https?:\/\/[A-Za-z0-9.-]{1,253}(?::[0-9]{1,5})?$/;
+var SWITCH = /* @__PURE__ */ new Set(["True", "False"]);
+var SOURCE_FOR = /* @__PURE__ */ Object.freeze({ IFRAME: "True", PIXEL: "False" });
+var CARD_MEMBER4 = /^(?:card_?number|pan|cvv|cvc|cvn|card_pin|card_expiry|expiry_month|expiry_year|security_code)$/i;
+var SAVED_CARD = "TOKEN";
+var OTHER_CARD_SUBTYPES = /* @__PURE__ */ new Set(["OMANNET", "PREMIUM", "PREMIUM6_ONLINE", "SYMPL"]);
+var CARD_SOURCE_KEYS = /* @__PURE__ */ new Set(["identifier", "sourceholder_name", "subtype", "expiry_month", "expiry_year", "cvn", "unified_checkout", "save_card"]);
+var TOP_KEYS3 = /* @__PURE__ */ new Set([
+    "source",
+    "billing",
+    "shipping_data",
+    "payment_token",
+    "api_source",
+    "unified_checkout",
+    "save_card",
+    "fingerprint",
+    "merchant-domain",
+    "customer",
+    "converted_currency",
+    "no_of_cards_selected",
+    "split_payment_amount"
+]);
+var REQUIRED_TOP_KEYS = ["source", "payment_token", "api_source", "unified_checkout", "save_card"];
+var REQUIRED_SOURCE_KEYS = ["identifier", "subtype", "expiry_month", "expiry_year", "cvn", "unified_checkout", "save_card"];
+var record29 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own10 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse34 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD33 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE12 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function paymobPayHost(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT12 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !PAYMOB_HOSTS.includes(parsed.hostname) || parsed.pathname !== PAYMOB_PAY_PATH)
+        return null;
+    return parsed.hostname;
+}
+function isPaymobPayUrl(url) {
+    return paymobPayHost(url) !== null;
+}
+var BASE645 = /^[A-Za-z0-9+/]+={0,2}$/;
+var BASE64URL = /^[A-Za-z0-9_-]+$/;
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+function decodeBase642(text9, url) {
+    if (typeof text9 !== "string" || text9 === "")
+        return null;
+    let body = text9;
+    if (url) {
+        if (!BASE64URL.test(body) || body.length % 4 === 1)
+            return null;
+    }
+    else {
+        if (!BASE645.test(body) || body.length % 4 !== 0)
+            return null;
+        body = body.replace(/=+$/, "");
+    }
+    const extra = url ? "-_" : "+/";
+    const bytes = new Uint8Array(Math.floor(body.length * 3 / 4));
+    let buffer = 0;
+    let bits = 0;
+    let at = 0;
+    for (const char of body) {
+        const value = (ALPHABET + extra).indexOf(char);
+        if (value < 0)
+            return null;
+        buffer = buffer << 6 | value;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            bytes[at++] = buffer >> bits & 255;
+        }
+    }
+    if (buffer & (1 << bits) - 1)
+        return null;
+    return bytes.subarray(0, at);
+}
+function jsonOf(bytes) {
+    if (!bytes)
+        return null;
+    let text9;
+    try {
+        text9 = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        return null;
+    }
+    try {
+        const value = JSON.parse(text9);
+        return record29(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+var positive = (value) => Number.isSafeInteger(value) && value > 0;
+var CURRENCY5 = /^[A-Z]{3}$/;
+var KEY_CLAIMS = /* @__PURE__ */ new Set([
+    "user_id",
+    "integration_id",
+    "order_id",
+    "amount_cents",
+    "currency",
+    "exp",
+    "billing_data",
+    "extra",
+    "notification_url",
+    "redirection_url",
+    "redirect_url",
+    "lock_order_when_paid",
+    "single_payment_attempt",
+    "next_payment_intention",
+    "created_by",
+    "is_partner",
+    "split_payment_methods"
+]);
+var SUBSCRIPTION_CLAIMS = /* @__PURE__ */ new Set(["subscription_plan_id", "subscription_start_date"]);
+var UNREADABLE_KEY = /* @__PURE__ */ Object.freeze({ facts: null, code: "paymob_payment_key_unreadable" });
+function readPaymentKey(key) {
+    if (typeof key !== "string" || key.length > KEY_LIMIT)
+        return UNREADABLE_KEY;
+    const outer = decodeBase642(key, false);
+    if (!outer)
+        return UNREADABLE_KEY;
+    let jwt;
+    try {
+        jwt = new TextDecoder("utf-8", { fatal: true }).decode(outer);
+    }
+    catch {
+        return UNREADABLE_KEY;
+    }
+    const parts = jwt.split(".");
+    if (parts.length !== 3 || parts.some((part) => part === "" || !BASE64URL.test(part)))
+        return UNREADABLE_KEY;
+    const header = jsonOf(decodeBase642(parts[0], true));
+    if (!header || Object.keys(header).length !== 2 || header.alg !== "HS512" || header.typ !== "JWT")
+        return UNREADABLE_KEY;
+    const signature = decodeBase642(parts[2], true);
+    if (!signature || signature.length !== 64)
+        return UNREADABLE_KEY;
+    const payload = jsonOf(decodeBase642(parts[1], true));
+    if (!payload)
+        return UNREADABLE_KEY;
+    const claims = Object.keys(payload);
+    if (claims.some((claim) => SUBSCRIPTION_CLAIMS.has(claim) && payload[claim] !== null))
+        return Object.freeze({ facts: null, code: "paymob_subscription" });
+    if (claims.some((claim) => !KEY_CLAIMS.has(claim) && !SUBSCRIPTION_CLAIMS.has(claim)))
+        return UNREADABLE_KEY;
+    const { user_id: merchantId, integration_id: integrationId, order_id: orderId, amount_cents: amountCents, currency, exp } = payload;
+    if (!positive(merchantId) || !positive(integrationId) || !positive(orderId) || !Number.isSafeInteger(amountCents) || amountCents < 0 || typeof currency !== "string" || !CURRENCY5.test(currency) || own10(payload, "exp") && !positive(exp))
+        return UNREADABLE_KEY;
+    if (amountCents === 0)
+        return Object.freeze({ facts: null, code: "paymob_no_amount" });
+    return Object.freeze({ facts: Object.freeze({ merchantId, integrationId, orderId, amountCents, currency, expiresAt: own10(payload, "exp") ? exp : null }), code: null });
+}
+function readJson8(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT32)
+        return { parsed: null, exact: false };
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return { parsed: null, exact: false };
+    }
+    let exact5 = false;
+    try {
+        exact5 = body.length <= BODY_LIMIT32 && JSON.stringify(parsed) === body;
+    }
+    catch {
+        exact5 = false;
+    }
+    return { parsed, exact: exact5 };
+}
+function namesCardValue3(parsed) {
+    const pending = parsed !== null && typeof parsed === "object" ? [parsed] : [];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        for (const key of Object.keys(node)) {
+            if (!Array.isArray(node) && CARD_MEMBER4.test(key))
+                return true;
+            const value = node[key];
+            if (value !== null && typeof value === "object")
+                pending.push(value);
+        }
+    }
+    return false;
+}
+function addressBlock(value) {
+    return record29(value) && Object.keys(value).length <= 32 && Object.entries(value).every(([key, text9]) => FIELD.test(key) && !CARD_MEMBER4.test(key) && (text9 === null || typeof text9 === "string" && TEXT3.test(text9)));
+}
+function judgeCardPayment(parsed) {
+    const source = parsed.source;
+    for (const key of Object.keys(parsed))
+        if (!TOP_KEYS3.has(key))
+            return "paymob_body_unsupported";
+    for (const key of Object.keys(source)) {
+        if (key === "is_card_to_installment" || key === "tenure")
+            return "paymob_installments";
+        if (!CARD_SOURCE_KEYS.has(key))
+            return "paymob_body_unsupported";
+    }
+    if (own10(parsed, "customer"))
+        return "paymob_account";
+    if (own10(parsed, "no_of_cards_selected") || own10(parsed, "split_payment_amount"))
+        return "paymob_split_payment";
+    if (own10(parsed, "converted_currency"))
+        return "paymob_currency_conversion";
+    if (!REQUIRED_TOP_KEYS.every((key) => own10(parsed, key)) || !REQUIRED_SOURCE_KEYS.every((key) => own10(source, key)))
+        return "paymob_body_unsupported";
+    if (source.save_card === true || parsed.save_card === true)
+        return "paymob_keep_on_file";
+    if (source.save_card !== false || parsed.save_card !== false)
+        return "paymob_body_unsupported";
+    if (typeof source.identifier !== "string" || !NUMBER7.test(source.identifier) || typeof source.expiry_month !== "string" || !MONTH17.test(source.expiry_month) || typeof source.expiry_year !== "string" || !YEAR18.test(source.expiry_year) || typeof source.cvn !== "string" || !SECURITY_CODE20.test(source.cvn) || own10(source, "sourceholder_name") && !(typeof source.sourceholder_name === "string" && HOLDER_TEXT.test(source.sourceholder_name))) {
+        return "paymob_body_unsupported";
+    }
+    if (!own10(SOURCE_FOR, parsed.api_source) || !SWITCH.has(parsed.unified_checkout) || parsed.unified_checkout !== SOURCE_FOR[parsed.api_source] || source.unified_checkout !== parsed.unified_checkout)
+        return "paymob_body_unsupported";
+    if (own10(parsed, "billing") && !addressBlock(parsed.billing) || own10(parsed, "shipping_data") && !addressBlock(parsed.shipping_data)) {
+        return "paymob_body_unsupported";
+    }
+    if (own10(parsed, "fingerprint") && parsed.fingerprint !== null && !(typeof parsed.fingerprint === "string" && FINGERPRINT3.test(parsed.fingerprint))) {
+        return "paymob_body_unsupported";
+    }
+    if (own10(parsed, "merchant-domain") && !(typeof parsed["merchant-domain"] === "string" && ORIGIN2.test(parsed["merchant-domain"]))) {
+        return "paymob_body_unsupported";
+    }
+    return readPaymentKey(parsed.payment_token).code;
+}
+function paymobBodyVerdict(body) {
+    if (body === void 0 || body === null || body === "")
+        return CONTINUE12;
+    const { parsed, exact: exact5 } = readJson8(body);
+    if (!exact5 || !record29(parsed) || !record29(parsed.source) || typeof parsed.source.subtype !== "string")
+        return refuse34("paymob_body_unsupported");
+    const subtype = parsed.source.subtype;
+    if (subtype === "CARD") {
+        const code = judgeCardPayment(parsed);
+        return code === null ? CARD33 : refuse34(code);
+    }
+    if (subtype === SAVED_CARD)
+        return refuse34("paymob_saved_card");
+    if (OTHER_CARD_SUBTYPES.has(subtype) || namesCardValue3(parsed))
+        return refuse34("paymob_body_unsupported");
+    return CONTINUE12;
+}
+// src/payu-latam.js
+var PAYU_LATAM_PSP = "payu_latam";
+var PAYU_LATAM_HOSTS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze(["checkout.payulatam.com"]),
+    sandbox: Object.freeze(["sandbox.checkout.payulatam.com"])
+});
+var PAYU_LATAM_COUNTRIES = /* @__PURE__ */ Object.freeze(["cl", "co", "mx", "pa", "pe"]);
+var UNREVIEWED_COUNTRIES = /* @__PURE__ */ Object.freeze(["ar", "br"]);
+var PAYU_LATAM_CARD_BRANDS = /* @__PURE__ */ Object.freeze(["VISA", "MASTERCARD", "AMEX", "DINERS"]);
+var BODY_LIMIT33 = 65536;
+var URL_LIMIT13 = 256;
+var SUBMIT_PATH = /^\/ppp-web-gateway-payu\/checkout\/submit\/([a-z]{2})\/credit_card\/([0-9a-f]{32})$/;
+var KEY = /^[0-9a-f]{32}$/;
+var CARD_KEYS14 = /* @__PURE__ */ Object.freeze(["number", "securityCode", "expirationDateMonth", "expirationDateYear", "cardType"]);
+var CARD_REQUIRED2 = /* @__PURE__ */ Object.freeze(["number", "securityCode", "expirationDateMonth", "expirationDateYear"]);
+var CARD_TYPES2 = /* @__PURE__ */ Object.freeze(["CREDIT", "DEBIT", "PREPAID"]);
+var NOT_THE_CARD_FORM = /* @__PURE__ */ Object.freeze([
+    "checkoutPaymentMethod",
+    "response",
+    "checkoutPse",
+    "checkoutKhipu",
+    "smsCode",
+    "checkoutDebitCard"
+]);
+var TRANSACTION_MEMBERS = /* @__PURE__ */ Object.freeze([
+    "id",
+    "key",
+    "isPaymentAttempt",
+    "payer",
+    "state",
+    "merchantId",
+    "orderId",
+    "order",
+    "checkoutPaymentMethod",
+    "paymentNetwork",
+    "paymentMethodType",
+    "paymentMethodMain",
+    "bank",
+    "paymentAgreementId",
+    "paymentCountry",
+    "paymentExchangeRate",
+    "response",
+    "expirationDate",
+    "lastUpdatedDate",
+    "creationDate",
+    "termsAndConditionId",
+    "installments",
+    "installmentValue",
+    "internationalCard",
+    "checkoutVersion",
+    "payerCommissionValue",
+    "payerInterestValue",
+    "payerPricingValue",
+    "promotionId",
+    "shippingValue",
+    "shipmentMerchantValue",
+    "additionalValue",
+    "administrativeFee",
+    "payerTotalAmount",
+    "source",
+    "integrationMethod",
+    "cardType",
+    "creditCardCountry",
+    "shippingInfo",
+    "questionnaire",
+    "merchantSoftDescriptor",
+    "pmNetworkValue",
+    "tea",
+    "cft",
+    "hasPaymentByPoints",
+    "loyaltyProgramRedeemedAmount",
+    "loyaltyProgramRedeemedPoints",
+    "lendingEligible",
+    "registerLendingDevice",
+    "lendingDeviceToken",
+    "abandonedLendingTransaction",
+    "masterpassObfuscateCreditCardNumber",
+    "isMasterpass",
+    "brandName",
+    "transactionType",
+    "nossoNumero",
+    "paymentTaxesDetails",
+    "shopifyGid",
+    "shopifyVersion",
+    "shopifyShopDomain",
+    "shopifyRedirectTime",
+    "paymentCancelUrl",
+    "checkoutCreditCard",
+    "isRegisterPayer",
+    "creditCardTokenId",
+    "checkoutPse",
+    "checkoutKhipu",
+    "smsCode",
+    "checkoutDebitCard"
+]);
+var ADDRESS = ["street1", "street2", "street3", "city", "state", "country", "postalCode", "phone"];
+var PERSON = [
+    "fullName",
+    "emailAddress",
+    "contactPhone",
+    "phoneCountryCode",
+    "dniNumber",
+    "isDniNumberEncrypt",
+    "dniType",
+    "personType",
+    "businessName",
+    "cnpj",
+    "gender"
+];
+var MONEY = ["value", "symbol", "currency"];
+var RECORD_MEMBERS = /* @__PURE__ */ Object.freeze({
+    payer: [...PERSON, "merchantBuyerId", "billingAddress", "birthDate", "identificationNumber", "identificationType"],
+    "payer.billingAddress": ADDRESS,
+    order: [
+        "id",
+        "referenceCode",
+        "airlineCode",
+        "description",
+        "isTest",
+        "signature",
+        "language",
+        "buyer",
+        "shipment",
+        "state",
+        "status",
+        "paymentApprovalDate",
+        "creationDate",
+        "accountId",
+        "amount",
+        "tax",
+        "totalPurchase",
+        "currency",
+        "amountConvertedValue",
+        "taxConvertedValue",
+        "taxReturnBase",
+        "taxReturnBaseConvertedValue",
+        "additionalValue",
+        "administrativeFee",
+        "taxAdministrativeFee",
+        "taxAdministrativeFeeReturnBase",
+        "enabledPaymentMethods",
+        "enabledInstallments",
+        "enabledPaymentMethodTypes",
+        "enabledIin",
+        "enabledPseBanks",
+        "enabledKhipuBanks",
+        "paymentMethodsDescription",
+        "urlEncodedId",
+        "shippingValue",
+        "paymentRequestLinkId",
+        "airlineDescription",
+        "displayShipping",
+        "displayBuyerComments",
+        "buyerCommentsLabel",
+        "extraParameters",
+        "dispersion"
+    ],
+    "order.buyer": [...PERSON, "merchantBuyerId", "buyerAddress", "comments"],
+    "order.buyer.buyerAddress": ADDRESS,
+    "order.shipment": [...PERSON, "merchantShipmentId", "shippingAddress", "comments"],
+    "order.shipment.shippingAddress": ADDRESS,
+    "order.amount": MONEY,
+    "order.tax": MONEY,
+    "order.totalPurchase": MONEY,
+    "order.amountConvertedValue": MONEY,
+    "order.taxConvertedValue": MONEY,
+    "order.taxReturnBase": MONEY,
+    "order.taxReturnBaseConvertedValue": MONEY,
+    shippingInfo: [
+        "userLogin",
+        "id",
+        "reference",
+        "description",
+        "currency",
+        "deliveryCity",
+        "deliveryCityName",
+        "deliveryAddress1",
+        "deliveryAddress2",
+        "deliveryAddress3",
+        "postalCode",
+        "fullName",
+        "documentType",
+        "document",
+        "phoneNumber",
+        "observationsReceivingShipment",
+        "destinationState",
+        "destinationStateName",
+        "destinationCountry",
+        "destinationEmail",
+        "originFullName",
+        "originIdentificationType",
+        "originIdentification",
+        "originCity",
+        "originState",
+        "originCountry",
+        "originAddress",
+        "originZipCode",
+        "originPhone",
+        "originEmail",
+        "kilogramWeight",
+        "volumetricWeight",
+        "totalValue",
+        "declaredValue",
+        "shippingValue",
+        "guideNumber",
+        "enlistmentApplies",
+        "deliveryDate",
+        "deliveryDays",
+        "minDeliveryDays",
+        "packageHeight",
+        "packageWidth",
+        "packageLength",
+        "shippingProvider",
+        "shippingState",
+        "creationDate",
+        "lastUpdateDate",
+        "expirationDate",
+        "signature",
+        "strCreationDate",
+        "comment",
+        "warehouseId",
+        "additionalDeliveryDays",
+        "shippingMerchantValue"
+    ],
+    // PayU's own ten, as transaction/create names them, and the merchant's extra1 to extra4 (the payment form's
+    // optional fields), each text or nothing.
+    "order.extraParameters": [
+        "CURRENCY",
+        "LANGUAGE",
+        "ACCOUNT_ID",
+        "ALGORITHM_SIGNATURE",
+        "CHECKOUT_VERSION",
+        "RESPONSE_URL",
+        "IS_TEST",
+        "SIGNATURE",
+        "NOTIFY_URL",
+        "IP_COUNTRY",
+        "EXTRA1",
+        "EXTRA2",
+        "EXTRA3",
+        "EXTRA4"
+    ]
+});
+var TEXT_RECORDS = /* @__PURE__ */ Object.freeze(["order.extraParameters"]);
+var CARD_WORDS = /* @__PURE__ */ Object.freeze([
+    "card",
+    "cards",
+    "pan",
+    "cvv",
+    "cvv2",
+    "cvc",
+    "cvd",
+    "csc",
+    "ccv",
+    "cc",
+    "token",
+    "masterpass",
+    "wallet",
+    "register",
+    "recurring",
+    "recurrent",
+    "recurrence",
+    "keep",
+    "store",
+    "save",
+    "saved",
+    "vault",
+    "exp",
+    "expiry",
+    "expiration",
+    "expiracion",
+    "tarjeta",
+    "tarjetas",
+    "vencimiento"
+]);
+var OWN_CARD_MEMBERS = /* @__PURE__ */ Object.freeze([
+    "checkoutCreditCard",
+    "cardType",
+    "internationalCard",
+    "creditCardCountry",
+    "isMasterpass",
+    "masterpassObfuscateCreditCardNumber",
+    "isRegisterPayer",
+    "registerLendingDevice",
+    "lendingDeviceToken",
+    "creditCardTokenId",
+    "checkoutDebitCard",
+    "expirationDate",
+    "shippingInfo.expirationDate"
+]);
+var SIGNATURE2 = /^[0-9a-f]{32,128}$/i;
+var OPAQUE_MEMBERS = /* @__PURE__ */ Object.freeze({
+    key: /^[0-9a-f]{32}$/,
+    "order.signature": SIGNATURE2,
+    "order.extraParameters.SIGNATURE": SIGNATURE2,
+    "shippingInfo.signature": SIGNATURE2,
+    "order.urlEncodedId": /^[A-Za-z0-9+/=_-]{1,256}$/,
+    shopifyGid: /^gid:\/\/shopify\/[A-Za-z]+\/[0-9]{1,20}$/
+});
+var IS_TEST_TEXT = /* @__PURE__ */ Object.freeze({ true: ["true", "1"], false: ["false", "0"] });
+var MASKS = /* @__PURE__ */ Object.freeze({ VISA: [4, 4, 4, 4], MASTERCARD: [4, 4, 4, 4], AMEX: [4, 6, 5], DINERS: [4, 6, 4] });
+var NETWORK2 = /* @__PURE__ */ Object.freeze({
+    VISA: /^4(?:[0-9]{12}|[0-9]{15})$/,
+    MASTERCARD: /^(?:5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12})$/,
+    AMEX: /^3[47][0-9]{13}$/,
+    DINERS: /^(?:3(?:0[0-5]|[68][0-9])[0-9]{11}|3095[0-9]{10}|3[89][0-9]{12})$/
+});
+var SECURITY_CODE21 = /^[0-9]{3,4}$/;
+var COUNTRY6 = /^[A-Z]{2}$/;
+var record30 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns7 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse35 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD34 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var absent = (value, key) => !owns7(value, key) || value[key] === null;
+function payuLatamSubmitTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT13 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    const environment2 = PAYU_LATAM_HOSTS.production.includes(parsed.hostname) ? "production" : PAYU_LATAM_HOSTS.sandbox.includes(parsed.hostname) ? "sandbox" : null;
+    const match = environment2 === null ? null : SUBMIT_PATH.exec(parsed.pathname);
+    if (match === null || !(PAYU_LATAM_COUNTRIES.includes(match[1]) || UNREVIEWED_COUNTRIES.includes(match[1])))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: environment2, country: match[1], key: match[2] });
+}
+function readJson9(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT33)
+        return null;
+    let at = 0;
+    let nodes = 0;
+    const fail = () => {
+        throw new Error("invalid_payu_latam_json");
+    };
+    const space = () => {
+        while (" 	\r\n".includes(body[at] ?? "\0"))
+            at += 1;
+    };
+    const string = () => {
+        space();
+        const start = at;
+        if (body[at++] !== '"')
+            fail();
+        while (at < body.length) {
+            const character = body[at++];
+            if (character === "\\") {
+                at += 1;
+                continue;
+            }
+            if (character === '"')
+                return JSON.parse(body.slice(start, at));
+        }
+        return fail();
+    };
+    const value = (depth) => {
+        if (depth > 8 || ++nodes > 4096)
+            fail();
+        space();
+        const character = body[at];
+        if (character === '"')
+            return string();
+        if (character === "{") {
+            at += 1;
+            const result = /* @__PURE__ */ Object.create(null);
+            const seen = /* @__PURE__ */ new Set();
+            space();
+            if (body[at] === "}") {
+                at += 1;
+                return result;
+            }
+            for (;;) {
+                const key = string();
+                if (seen.has(key) || ["__proto__", "prototype", "constructor"].includes(key))
+                    fail();
+                seen.add(key);
+                space();
+                if (body[at++] !== ":")
+                    fail();
+                result[key] = value(depth + 1);
+                space();
+                const next = body[at++];
+                if (next === "}")
+                    return result;
+                if (next !== ",")
+                    fail();
+            }
+        }
+        if (character === "[") {
+            at += 1;
+            const result = [];
+            space();
+            if (body[at] === "]") {
+                at += 1;
+                return result;
+            }
+            for (;;) {
+                result.push(value(depth + 1));
+                space();
+                const next = body[at++];
+                if (next === "]")
+                    return result;
+                if (next !== ",")
+                    fail();
+            }
+        }
+        for (const literal of ["true", "false", "null"]) {
+            if (body.startsWith(literal, at)) {
+                at += literal.length;
+                return JSON.parse(literal);
+            }
+        }
+        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(body.slice(at, at + 32));
+        if (!number || /^-?[0-9]{16,}$/.test(number[0]))
+            fail();
+        at += number[0].length;
+        const parsed = Number(number[0]);
+        if (!Number.isFinite(parsed))
+            fail();
+        return parsed;
+    };
+    try {
+        const parsed = value(0);
+        space();
+        return at === body.length && record30(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cardNamed2(key) {
+    const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean).map((word) => word.toLowerCase());
+    const phrase = words.join(" ");
+    return words.some((word) => CARD_WORDS.includes(word)) || ["security code", "codigo seguridad", "codigo verificacion"].some((said) => phrase.includes(said));
+}
+function carriesCardNumber(text9) {
+    for (const [run] of text9.matchAll(/[0-9]+(?:[ ._/,-][0-9]+)*/g)) {
+        const groups = run.split(/[ ._/,-]/);
+        for (let first = 0; first < groups.length; first += 1) {
+            let digits4 = "";
+            for (let last = first; last < groups.length && digits4.length + groups[last].length <= 19; last += 1) {
+                digits4 += groups[last];
+                if (digits4.length >= 13 && digits4[0] >= "2" && digits4[0] <= "6" && luhn7(digits4))
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+var wholeCardNumber = (text9) => /^[2-6][0-9]{12,18}$/.test(text9) && luhn7(text9);
+function membersRefusal(root) {
+    const pending = [[root, ""]];
+    while (pending.length > 0) {
+        const [node, path] = pending.pop();
+        const own12 = path === "" ? TRANSACTION_MEMBERS : owns7(RECORD_MEMBERS, path) ? RECORD_MEMBERS[path] : null;
+        for (const [key, child] of Object.entries(node)) {
+            const at = Array.isArray(node) ? path : path === "" ? key : `${path}.${key}`;
+            if (at === "checkoutCreditCard")
+                continue;
+            if (own12 !== null && !own12.includes(key))
+                return true;
+            if (TEXT_RECORDS.includes(path) && child !== null && typeof child !== "string")
+                return true;
+            if (!Array.isArray(node) && owns7(OPAQUE_MEMBERS, at)) {
+                if (child !== null && (typeof child !== "string" || !OPAQUE_MEMBERS[at].test(child) || wholeCardNumber(child)))
+                    return true;
+                continue;
+            }
+            if (!Array.isArray(node) && !OWN_CARD_MEMBERS.includes(at) && cardNamed2(key) && child !== null && child !== false)
+                return true;
+            if (typeof child === "string" && carriesCardNumber(child))
+                return true;
+            if (typeof child === "number" && (!/Date$/.test(key) || String(child).length > 13) && carriesCardNumber(String(child)))
+                return true;
+            if (child !== null && typeof child === "object")
+                pending.push([child, at]);
+        }
+    }
+    return false;
+}
+function cardDigits(number, brand) {
+    if (typeof number !== "string")
+        return null;
+    if (/^[0-9]{12,19}$/.test(number))
+        return number;
+    const groups = number.split(" ");
+    const mask = MASKS[brand];
+    if (!mask || groups.length !== mask.length || !groups.every((group, at) => group.length === mask[at] && /^[0-9]+$/.test(group)))
+        return null;
+    return groups.join("");
+}
+function luhn7(digits4) {
+    let sum = 0;
+    for (let at = digits4.length - 1, double = false; at >= 0; at -= 1, double = !double) {
+        let digit = digits4.charCodeAt(at) - 48;
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function cardRefusal(card, brand) {
+    if (!record30(card) || !Object.keys(card).every((key) => CARD_KEYS14.includes(key)) || !CARD_REQUIRED2.every((key) => owns7(card, key))) {
+        return "payu_latam_body_unsupported";
+    }
+    const digits4 = cardDigits(card.number, brand);
+    if (digits4 === null || !NETWORK2[brand].test(digits4) || !luhn7(digits4))
+        return "payu_latam_body_unsupported";
+    const code = card.securityCode;
+    if (typeof code !== "string" || !SECURITY_CODE21.test(code) || code.length !== (brand === "AMEX" ? 4 : 3))
+        return "payu_latam_body_unsupported";
+    const { expirationDateMonth: month, expirationDateYear: year } = card;
+    if (!Number.isSafeInteger(month) || month < 1 || month > 12 || !Number.isSafeInteger(year) || year < 0 || year > 99)
+        return "payu_latam_body_unsupported";
+    if (!absent(card, "cardType") && !CARD_TYPES2.includes(card.cardType))
+        return "payu_latam_body_unsupported";
+    return null;
+}
+function judgeBody5(body, target) {
+    const value = readJson9(body);
+    if (value === null || value.paymentMethodType !== "CREDIT_CARD" || typeof value.key !== "string" || !KEY.test(value.key) || !record30(value.order) || !record30(value.payer))
+        return { code: "payu_latam_body_unsupported", value: null };
+    if (target !== void 0 && value.key !== target.key)
+        return { code: "payu_latam_session_mismatch", value: null };
+    if (!absent(value, "creditCardTokenId") || value.isMasterpass === true || !absent(value, "masterpassObfuscateCreditCardNumber")) {
+        return { code: "payu_latam_saved_card", value: null };
+    }
+    if (NOT_THE_CARD_FORM.some((key) => !absent(value, key)) || membersRefusal(value) || !absent(value, "lendingDeviceToken") || !absent(value, "questionnaire") || !(absent(value, "registerLendingDevice") || value.registerLendingDevice === false))
+        return { code: "payu_latam_body_unsupported", value: null };
+    const brand = value.paymentMethodMain;
+    if (typeof brand !== "string" || !PAYU_LATAM_CARD_BRANDS.includes(brand))
+        return { code: "payu_latam_card_unsupported", value: null };
+    const card = cardRefusal(value.checkoutCreditCard, brand);
+    if (card !== null)
+        return { code: card, value: null };
+    if (value.installments !== 1 && value.installments !== "1")
+        return { code: "payu_latam_installments_unsupported", value: null };
+    if (!absent(value, "cardType") && !CARD_TYPES2.includes(value.cardType) || !absent(value, "internationalCard") && typeof value.internationalCard !== "boolean" || !absent(value, "creditCardCountry") && (typeof value.creditCardCountry !== "string" || !COUNTRY6.test(value.creditCardCountry)) || !absent(value, "transactionType") && value.transactionType !== "AUTHORIZATION_AND_CAPTURE" || !absent(value, "isMasterpass") && typeof value.isMasterpass !== "boolean" || typeof value.order.isTest !== "boolean")
+        return { code: "payu_latam_body_unsupported", value: null };
+    const extra = value.order.extraParameters;
+    if (!record30(extra) || !IS_TEST_TEXT[value.order.isTest].includes(extra.IS_TEST)) {
+        return { code: "payu_latam_body_unsupported", value: null };
+    }
+    if (value.isRegisterPayer === true)
+        return { code: "payu_latam_keep_on_file", value: null };
+    if (!absent(value, "isRegisterPayer") && value.isRegisterPayer !== false)
+        return { code: "payu_latam_body_unsupported", value: null };
+    if (target !== void 0 && target.environment === "production" && value.order.isTest)
+        return { code: "payu_latam_environment_mismatch", value: null };
+    return { code: null, value };
+}
+function payuLatamBodyVerdict(body, url) {
+    let target;
+    if (url !== void 0) {
+        target = payuLatamSubmitTarget(url);
+        if (target === null)
+            return refuse35("payu_latam_url_refused");
+        if (!PAYU_LATAM_COUNTRIES.includes(target.country))
+            return refuse35("payu_latam_country_unreviewed");
+    }
+    const { code } = judgeBody5(body, target);
+    return code === null ? CARD34 : refuse35(code);
+}
+// src/registration.js
+var PARTS = { psp: "id", definitions: "list", refusedOperations: "list", settlementReadback: "any", exactUrl: "rule", bodyGate: "rule", amount: "rule" };
+var PSP_ID = /^[a-z][a-z0-9_]*$/;
+var registrationProblems = (spec) => problemsOf(spec, PARTS);
+function problemsOf(spec, parts) {
+    if (!spec || typeof spec !== "object")
+        return ["a registration is an object"];
+    const psp = spec.psp;
+    if (typeof psp !== "string" || !PSP_ID.test(psp))
+        return [`${JSON.stringify(psp)} is not a processor id`];
+    const problems2 = Object.keys(spec).filter((key) => !(key in parts)).map((key) => `${psp}: ${key} is no registration part`);
+    for (const [key, kind] of Object.entries(parts)) {
+        const value = spec[key];
+        if (value === void 0)
+            continue;
+        if (kind === "rule" && typeof value !== "function")
+            problems2.push(`${psp}: ${key} is not a function`);
+        if (kind === "numbers" && !((Array.isArray(value) || value instanceof Set) && [...value].every((n) => typeof n === "string" && /^\d{12,19}$/.test(n)))) {
+            problems2.push(`${psp}: ${key} is not a list of card numbers`);
+        }
+    }
+    if ("definitions" in parts) {
+        if (!Array.isArray(spec.definitions) || spec.definitions.length === 0)
+            problems2.push(`${psp}: names no definition`);
+        else if (spec.definitions.some((definition) => definition?.psp !== psp))
+            problems2.push(`${psp}: a definition names another processor`);
+        for (const id of spec.refusedOperations ?? []) {
+            if (typeof id !== "string" || !id.startsWith(`${psp}.`))
+                problems2.push(`${psp}: ${JSON.stringify(id)} is not one of its operations`);
+        }
+    }
+    return problems2;
+}
+function registered(spec, parts) {
+    const problems2 = problemsOf(spec, parts);
+    if (problems2.length)
+        throw new Error(`payment-core registration refused: ${problems2.join("; ")}`);
+    return deepFreeze({ ...spec });
+}
+function registerProcessor(spec) {
+    return registered(spec, PARTS);
+}
+// src/processors/midtrans.js
+var MIDTRANS_PSP = "midtrans";
+var MIDTRANS_OPERATION = "midtrans.card_request";
+var MIDTRANS_TOKEN_URL = "https://api.midtrans.com/v2/token";
+var MIDTRANS_SANDBOX_TOKEN_URL = "https://api.sandbox.midtrans.com/v2/token";
+var MIDTRANS_TOKEN_KEYS = /* @__PURE__ */ Object.freeze(["card_cvv", "card_number", "card_exp_month", "card_exp_year", "installment_term"]);
+var BODY_LIMIT34 = 4096;
+var CARD_NUMBER17 = /^[0-9]{12,19}$/;
+var SECURITY_CODE22 = /^[0-9]{3,4}$/;
+var MONTH18 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR19 = /^20[0-9]{2}$/;
+var TERM = /^[0-9]{1,3}$/;
+var record31 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own11 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var inOrder6 = (value, keys) => {
+    let at = 0;
+    for (const name of Object.keys(value)) {
+        while (at < keys.length && keys[at] !== name)
+            at += 1;
+        if (at === keys.length)
+            return false;
+        at += 1;
+    }
+    return true;
+};
+var refuse36 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD35 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isMidtransTokenUrl(url) {
+    return url === MIDTRANS_TOKEN_URL || url === MIDTRANS_SANDBOX_TOKEN_URL;
+}
+function readBody20(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT34)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record31(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function midtransBodyVerdict(body) {
+    const value = readBody20(body);
+    if (value === null || !inOrder6(value, MIDTRANS_TOKEN_KEYS)) {
+        if (record31(value) && (own11(value, "token_id") || own11(value, "two_click")) && !own11(value, "card_number"))
+            return refuse36("midtrans_saved_card");
+        return refuse36("midtrans_body_unsupported");
+    }
+    if (!own11(value, "card_cvv") || !own11(value, "card_number") || !own11(value, "card_exp_month") || !own11(value, "card_exp_year")) {
+        return refuse36("midtrans_body_unsupported");
+    }
+    if (typeof value.card_cvv !== "string" || !SECURITY_CODE22.test(value.card_cvv) || typeof value.card_number !== "string" || !CARD_NUMBER17.test(value.card_number) || typeof value.card_exp_month !== "string" || !MONTH18.test(value.card_exp_month) || typeof value.card_exp_year !== "string" || !YEAR19.test(value.card_exp_year))
+        return refuse36("midtrans_body_unsupported");
+    if (own11(value, "installment_term") && (typeof value.installment_term !== "string" || !TERM.test(value.installment_term)))
+        return refuse36("midtrans_body_unsupported");
+    return CARD35;
+}
+var midtrans_default = /* @__PURE__ */ registerProcessor({
+    psp: MIDTRANS_PSP,
+    definitions: [
+        {
+            psp: "midtrans",
+            // Snap's token request, as the header above reads it. Sandbox has its own host, so the device sends a
+            // test-mode request only Midtrans' documented test cards (hostEnvironmentPinned, device-replay.js S7).
+            // Ships dark: served only to a client that declares `midtrans_card_token`, gated off for every org until an
+            // operator lists one (`midtrans:<org>`), and the backend's gate serves only Agentcard's own company until the
+            // token's publishable key is bound to the merchant (backend config.ts MIDTRANS_KEY_BOUND_TO_MERCHANT).
+            capability: "midtrans_card_token",
+            match: "api\\.(?:sandbox\\.)?midtrans\\.com/v2/token",
+            hosts: ["^api\\.midtrans\\.com$", "^api\\.sandbox\\.midtrans\\.com$"],
+            sandboxHosts: ["^api\\.sandbox\\.midtrans\\.com$"],
+            hostEnvironmentPinned: true,
+            encoding: "json",
+            // Snap's own headers: the publishable client key (Authorization Basic) and X-Service. Origin, Referer and
+            // cookies never ride.
+            passthroughHeaders: ["^authorization$", "^x-service$"],
+            jsonCardFields: [["card_number"]]
+        }
+    ],
+    // Only the cardholder's device sends a token, after a person approves; no reviewed list names midtrans.
+    refusedOperations: [MIDTRANS_OPERATION],
+    // Not surveyed: the token moves no money, and the merchant's own charge names its status by the order id alone.
+    settlementReadback: "not_surveyed",
+    exactUrl: isMidtransTokenUrl,
+    bodyGate: (url, body) => url !== void 0 && !isMidtransTokenUrl(url) ? { verdict: "refuse", code: "midtrans_url_refused" } : midtransBodyVerdict(body)
+});
+// src/processors/index.generated.js
+var REGISTERED_MODULES = Object.freeze({
+    midtrans: midtrans_default
+});
+// src/registry.js
+var REGISTERED_PROCESSORS = Object.values(REGISTERED_MODULES);
+var ids = REGISTERED_PROCESSORS.map((processor) => processor.psp);
+var problems = REGISTERED_PROCESSORS.flatMap(registrationProblems);
+for (const [name, processor] of Object.entries(REGISTERED_MODULES)) {
+    if (processor.psp !== name)
+        problems.push(`processors/${name}.js registers ${JSON.stringify(processor.psp)}`);
+}
+if (ids.some((id, i) => i > 0 && ids[i - 1] >= id))
+    problems.push(`registered processors out of id order: ${ids.join(", ")}`);
+if (problems.length)
+    throw new Error(`payment-core registry refused: ${problems.join("; ")}`);
+var BY_PSP = new Map(REGISTERED_PROCESSORS.map((processor) => [processor.psp, processor]));
+var REGISTERED_IDS = Object.freeze(ids);
+var REGISTERED_DEFINITIONS = Object.freeze(REGISTERED_PROCESSORS.flatMap((processor) => processor.definitions));
+var REGISTERED_REFUSED_OPERATIONS = Object.freeze(REGISTERED_PROCESSORS.flatMap((processor) => processor.refusedOperations ?? []));
+var REGISTERED_SETTLEMENT_READBACK = Object.freeze(REGISTERED_PROCESSORS.filter((processor) => processor.settlementReadback !== void 0).map((processor) => [processor.psp, processor.settlementReadback]));
+function registeredRule(psp, name) {
+    return typeof psp === "string" ? BY_PSP.get(psp)?.[name] : void 0;
+}
+// src/card-fields.js
+function processorGate(recognizer, url, body) {
+    if (recognizer && recognizer.psp === LYRA_PSP)
+        return lyraBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === WIX_PAYMENTS_PSP) {
+        if (url !== void 0 && !isWixPaymentsTokenizeUrl(url))
+            return { verdict: "refuse", code: "wix_payments_url_refused" };
+        return wixPaymentsBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === KOMOJU_PSP)
+        return komojuBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === HIPAY_PSP) {
+        if (url !== void 0 && !isHipayTokenUrl(url))
+            return { verdict: "refuse", code: "hipay_url_refused" };
+        return hipayBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYPAL_PSP) {
+        if (url !== void 0 && !isPaypalConfirmUrl(url))
+            return { verdict: "refuse", code: "paypal_url_refused" };
+        return paypalBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === MAKECOMMERCE_PSP)
+        return makecommerceBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === OPENPAY_PSP)
+        return openpayBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === POYNT_PSP) {
+        if (url !== void 0 && !isPoyntNonceUrl(url))
+            return { verdict: "refuse", code: "poynt_url_refused" };
+        return poyntBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === CARDCOM_PSP)
+        return cardcomBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === TOAST_PSP) {
+        if (url !== void 0 && !isToastPaymentMethodsUrl(url))
+            return { verdict: "refuse", code: "toast_url_refused" };
+        return toastBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYU_LATAM_PSP)
+        return payuLatamBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
+        if (url !== void 0 && !isPaddleVgsCardsUrl(url))
+            return { verdict: "refuse", code: "paddle_vgs_url_refused" };
+        return paddleVgsBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYFAST_PSP) {
+        if (url !== void 0 && !isPayfastPayUrl(url))
+            return { verdict: "refuse", code: "payfast_url_refused" };
+        return payfastBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYREXX_PSP) {
+        return url !== void 0 ? payrexxGateVerdict(url, body) : payrexxBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYGENT_PSP) {
+        return url !== void 0 ? paygentRequestVerdict(url, body) : paygentBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAY_NL_PSP) {
+        if (url !== void 0 && !isPayNlTokenUrl(url))
+            return { verdict: "refuse", code: "pay_nl_url_refused" };
+        return payNlBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === TWOC2P_PSP) {
+        if (url === void 0)
+            return twoC2pBodyVerdict(body);
+        const target = twoC2pPaymentTarget(url);
+        if (target === null)
+            return { verdict: "refuse", code: "twoc2p_url_refused" };
+        if (!target.reviewed)
+            return twoC2pPaymentCarriesCard(body) ? { verdict: "refuse", code: "twoc2p_build_unreviewed" } : { verdict: "continue" };
+        const keyBytes = twoC2pKeyBytes(target.environment);
+        return keyBytes === null ? { verdict: "refuse", code: "twoc2p_field_unreviewed" } : twoC2pBodyVerdict(body, keyBytes, target.environment);
+    }
+    if (recognizer && recognizer.psp === APS_PSP)
+        return apsBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === CONEKTA_PSP)
+        return conektaBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === PADDLE_TOKENEX_PSP) {
+        const target = url !== void 0 ? paddleTokenexPayTarget(url) : null;
+        if (url !== void 0 && target === null)
+            return { verdict: "refuse", code: "paddle_tokenex_pay_unsupported" };
+        return paddleTokenexBodyVerdict(body, target ? target.line : void 0);
+    }
+    if (recognizer && recognizer.psp === PAYMONGO_PSP) {
+        const session = url !== void 0 ? paymongoCheckoutSession(url) : void 0;
+        if (url !== void 0 && session === null)
+            return { verdict: "refuse", code: "paymongo_url_refused" };
+        return paymongoBodyVerdict(body, session);
+    }
+    if (recognizer && recognizer.psp === GOPAY_PSP)
+        return gopayBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === REVOLUT_PSP) {
+        if (url !== void 0 && !isRevolutPaymentsUrl(url))
+            return { verdict: "refuse", code: "revolut_url_refused" };
+        return revolutBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === SUMUP_PSP)
+        return sumupBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === CLOVER_PSP)
+        return cloverBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === TAP_PAYMENTS_PSP) {
+        if (url !== void 0 && !isTapPaymentsTokenUrl(url))
+            return { verdict: "refuse", code: "tap_payments_url_refused" };
+        return tapPaymentsBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === TOKENEX_IFRAME_PSP)
+        return tokenexIframeBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === NEXI_CHECKOUT_PSP)
+        return nexiCheckoutBodyVerdict(body, url);
+    if (recognizer && recognizer.psp === FASTSPRING_PSP) {
+        if (url !== void 0 && !isFastspringCardUrl(url))
+            return { verdict: "refuse", code: "fastspring_url_refused" };
+        return fastspringBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === OMISE_PSP) {
+        if (url !== void 0 && !isOmiseTokenUrl(url))
+            return { verdict: "refuse", code: "omise_url_refused" };
+        return omiseBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === XENDIT_PSP) {
+        if (url !== void 0 && !isXenditTokenUrl(url))
+            return { verdict: "refuse", code: "xendit_url_refused" };
+        return xenditBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === PAYMOB_PSP) {
+        if (url !== void 0 && !isPaymobPayUrl(url))
+            return { verdict: "refuse", code: "paymob_url_refused" };
+        return paymobBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === GRAVY_PSP)
+        return gravyBodyVerdict(body);
+    if (recognizer && recognizer.psp === MONERIS_PSP) {
+        if (url !== void 0 && !isMonerisTokenizeUrl(url))
+            return { verdict: "refuse", code: "moneris_url_refused" };
+        return monerisBodyVerdict(body);
+    }
+    if (recognizer && recognizer.psp === TAPPAY_PSP) {
+        if (url !== void 0 && !isTappayGetPrimeUrl(url))
+            return { verdict: "refuse", code: "tappay_url_refused" };
+        return tappayBodyVerdict(body);
+    }
+    const ownGate = registeredRule(recognizer?.psp, "bodyGate");
+    if (ownGate)
+        return ownGate(url, body);
+    if (!recognizer || recognizer.psp !== "elavon_converge")
+        return null;
+    if (url !== void 0 && !isConvergeProcessUrl(url))
+        return { verdict: "refuse", code: "converge_url_refused" };
+    return convergeBodyVerdict(body);
+}
+function carriesCardFields(recognizer, body) {
+    const gate = processorGate(recognizer, void 0, body);
+    if (gate !== null)
+        return gate.verdict === "card";
+    if (recognizer && recognizer.encoding === "json") {
+        const claimed = carriesJsonCardFields(recognizer.jsonCardFields, body, DECLARED_PATHS_ONLY.has(recognizer.psp));
+        return claimed && recognizer.psp === "amadeus_checkout" ? amadeusBodyKind(body) === "card" : claimed;
+    }
+    const fields = recognizer && recognizer.cardFields;
+    if (!Array.isArray(fields) || fields.length === 0)
+        return true;
+    if (recognizer.encoding !== "form")
+        return true;
+    if (typeof body !== "string" || body === "")
+        return false;
+    const anyCase = recognizer.caseInsensitiveFormKeys === true;
+    const wanted = anyCase ? fields.map((field2) => String(field2).toLowerCase()) : fields;
+    for (const chunk of body.split("&")) {
+        const eq = chunk.indexOf("=");
+        if (eq <= 0 || eq === chunk.length - 1)
+            continue;
+        let key;
+        try {
+            key = decodeURIComponent(chunk.slice(0, eq).replace(/\+/g, " "));
+        }
+        catch {
+            continue;
+        }
+        if (wanted.includes(anyCase ? key.trim().toLowerCase() : key))
+            return true;
+    }
+    return false;
+}
+var DECLARED_PATHS_ONLY = /* @__PURE__ */ new Set(["primer", "pelecard", "creditguard", "payrails"]);
+function carriesJsonCardFields(paths, body, declaredOnly) {
+    if (!Array.isArray(paths) || paths.length === 0 || !paths.every((path) => isJsonPath(path) && path.length > 0))
+        return true;
+    if (declaredOnly)
+        return declaredPathHoldsCard(paths, body);
+    let parsed;
+    try {
+        parsed = typeof body === "string" ? JSON.parse(body) : void 0;
+    }
+    catch {
+        return true;
+    }
+    if (!isPlainObject(parsed))
+        return true;
+    if (paths.some((path) => {
+        const at = jsonAt(parsed, path);
+        return at.found && (typeof at.value === "string" && at.value !== "" || typeof at.value === "number");
+    }))
+        return true;
+    const declared = /* @__PURE__ */ new Set();
+    for (const path of paths) {
+        const last = path[path.length - 1];
+        if (typeof last === "string")
+            declared.add(last.toLowerCase());
+    }
+    return namesCardNumber(parsed, declared);
+}
+function declaredPathHoldsCard(paths, body) {
+    if (typeof body !== "string" || body === "")
+        return false;
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return false;
+    }
+    return paths.some((path) => {
+        const at = jsonAt(parsed, path);
+        return at.found && (typeof at.value === "string" && at.value !== "" || typeof at.value === "number");
+    });
+}
+function namesCardNumber(root, declared) {
+    const pending = [root];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        const named = !Array.isArray(node);
+        for (const key of Object.keys(node)) {
+            if (named) {
                 const name = key.slice(key.lastIndexOf(".") + 1).toLowerCase();
                 if (declared.has(name) || CARD_NUMBER_KEY.test(name) || name.endsWith("cardnumber"))
                     return true;
@@ -4024,21 +6412,21 @@ var KEEP_ON_FILE_REFUSAL = "Refusing to pay: this Primer payment would keep the
 var UNSUPPORTED_SDK_REFUSAL = "Refusing to pay: this checkout uses a Primer SDK Agentcard does not support yet. Nothing was sent.";
 var NETWORK_MISMATCH_REFUSAL = "Refusing to pay: this Primer payment names a card network that is not your card's. Nothing was sent.";
 var FILL_REFUSAL = "Could not fill the card fields for Primer. Nothing was sent.";
-var BODY_LIMIT24 = 16384;
+var BODY_LIMIT35 = 16384;
 var RESPONSE_LIMIT = 32768;
-var ROOT_KEYS9 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
+var ROOT_KEYS10 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
 var INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear", "cardholderName", "preferredNetwork"];
 var REQUIRED_INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear"];
-var record21 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var owns6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var exact3 = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
-var text6 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
-var digits2 = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
+var record32 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns8 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var exact4 = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
+var text8 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
+var digits3 = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
 var panLike2 = (value) => /(?:[0-9][ _.:-]*){12,}/.test(value);
-var plain2 = (value, max) => text6(value, max) && !panLike2(value);
-var MONTH13 = /^(?:0[1-9]|1[0-2])$/;
-var YEAR13 = /^20[0-9]{2}$/;
-var NETWORK2 = /^[A-Z][A-Z_]{1,31}$/;
+var plain2 = (value, max) => text8(value, max) && !panLike2(value);
+var MONTH19 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR20 = /^20[0-9]{2}$/;
+var NETWORK3 = /^[A-Z][A-Z_]{1,31}$/;
 function isPrimerTokenizeUrl(url, method = "POST") {
     if (method !== "POST" || typeof url !== "string" || url.length > 256 || url.includes("?") || url.includes("#"))
         return false;
@@ -4051,8 +6439,8 @@ function isPrimerTokenizeUrl(url, method = "POST") {
     }
     return parsed.href === url && parsed.protocol === "https:" && !parsed.port && !parsed.username && !parsed.password && !parsed.search && !parsed.hash && PRIMER_PCI_HOSTS.includes(parsed.hostname) && parsed.pathname === PRIMER_TOKENIZE_PATH;
 }
-function judgeBody5(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT24)
+function judgeBody6(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT35)
         return null;
     let value;
     try {
@@ -4061,21 +6449,21 @@ function judgeBody5(body) {
     catch {
         return null;
     }
-    if (!record21(value) || !roundTrips(value, body))
+    if (!record32(value) || !roundTrips(value, body))
         return null;
-    if (!Object.keys(value).every((key) => ROOT_KEYS9.includes(key)) || !owns6(value, "paymentInstrument"))
+    if (!Object.keys(value).every((key) => ROOT_KEYS10.includes(key)) || !owns8(value, "paymentInstrument"))
         return null;
     const instrument = value.paymentInstrument;
-    if (!record21(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns6(instrument, key)))
+    if (!record32(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns8(instrument, key)))
         return null;
-    if (!digits2(instrument.number, 12, 19) || !digits2(instrument.cvv, 3, 4) || !exact3(MONTH13, instrument.expirationMonth) || !exact3(YEAR13, instrument.expirationYear))
+    if (!digits3(instrument.number, 12, 19) || !digits3(instrument.cvv, 3, 4) || !exact4(MONTH19, instrument.expirationMonth) || !exact4(YEAR20, instrument.expirationYear))
         return null;
-    if (owns6(instrument, "cardholderName") && instrument.cardholderName !== null && !plain2(instrument.cardholderName, 256) || owns6(instrument, "preferredNetwork") && instrument.preferredNetwork !== null && !exact3(NETWORK2, instrument.preferredNetwork) || owns6(value, "userDescription") && value.userDescription !== null && !plain2(value.userDescription, 256) || owns6(value, "tokenType") && value.tokenType !== "MULTI_USE" || owns6(value, "paymentFlow") && value.paymentFlow !== "VAULT")
+    if (owns8(instrument, "cardholderName") && instrument.cardholderName !== null && !plain2(instrument.cardholderName, 256) || owns8(instrument, "preferredNetwork") && instrument.preferredNetwork !== null && !exact4(NETWORK3, instrument.preferredNetwork) || owns8(value, "userDescription") && value.userDescription !== null && !plain2(value.userDescription, 256) || owns8(value, "tokenType") && value.tokenType !== "MULTI_USE" || owns8(value, "paymentFlow") && value.paymentFlow !== "VAULT")
         return null;
-    return { value, keepOnFile: owns6(value, "tokenType") || owns6(value, "paymentFlow") };
+    return { value, keepOnFile: owns8(value, "tokenType") || owns8(value, "paymentFlow") };
 }
 function primerBodyRefusal(body) {
-    const judged = judgeBody5(body);
+    const judged = judgeBody6(body);
     if (!judged)
         return "unsupported";
     return judged.keepOnFile ? "keep_on_file" : null;
@@ -4084,7 +6472,7 @@ function isPrimerNewCardBody(body) {
     return primerBodyRefusal(body) === null;
 }
 function primerKeepOnFileRequested(body) {
-    const judged = judgeBody5(body);
+    const judged = judgeBody6(body);
     return judged ? judged.keepOnFile : null;
 }
 var CARD_GATE = /* @__PURE__ */ Object.freeze({ psp: "primer", encoding: "json", jsonCardFields: [["paymentInstrument", "number"]] });
@@ -4094,7 +6482,7 @@ var CLIENT_TOKEN = /^[A-Za-z0-9._~+/=-]{16,4096}$/;
 var REQUEST_ID = /^[A-Za-z0-9-]{1,64}$/;
 var API_VERSION = /^2\.[0-9]{1,2}$/;
 function readHeaders(headers) {
-    if (!record21(headers))
+    if (!record32(headers))
         return null;
     const folded = /* @__PURE__ */ new Map();
     for (const [name, value] of Object.entries(headers)) {
@@ -4112,9 +6500,9 @@ function headersRefusal(headers) {
     const version = folded.get("primer-sdk-version");
     if (typeof version !== "string")
         return "unsupported";
-    if (!exact3(LEGACY_SDK_VERSION, version))
+    if (!exact4(LEGACY_SDK_VERSION, version))
         return "unsupported_sdk";
-    if (!exact3(CONTENT_TYPE2, folded.get("content-type")) || !exact3(CLIENT_TOKEN, folded.get("primer-client-token")) || folded.has("primer-sdk-client") && folded.get("primer-sdk-client") !== "WEB" || folded.has("x-api-version") && !exact3(API_VERSION, folded.get("x-api-version")) || folded.has("primer-sdk-checkout-session-id") && !exact3(REQUEST_ID, folded.get("primer-sdk-checkout-session-id")) || folded.has("x-request-id") && !exact3(REQUEST_ID, folded.get("x-request-id")))
+    if (!exact4(CONTENT_TYPE2, folded.get("content-type")) || !exact4(CLIENT_TOKEN, folded.get("primer-client-token")) || folded.has("primer-sdk-client") && folded.get("primer-sdk-client") !== "WEB" || folded.has("x-api-version") && !exact4(API_VERSION, folded.get("x-api-version")) || folded.has("primer-sdk-checkout-session-id") && !exact4(REQUEST_ID, folded.get("primer-sdk-checkout-session-id")) || folded.has("x-request-id") && !exact4(REQUEST_ID, folded.get("x-request-id")))
         return "unsupported";
     return null;
 }
@@ -4141,7 +6529,7 @@ function onTokenizePath(url) {
     }
 }
 function primerTokenizeRefusal(request) {
-    if (!record21(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
+    if (!record32(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
         return "unsupported";
     return headersRefusal(request.headers) ?? primerBodyRefusal(request.body);
 }
@@ -4156,7 +6544,7 @@ function primerCardOnFileRefusal(url, options, policy = PRIMER_SESSION_CARD_ON_F
         return "unsupported";
     if (new URL(url).hostname !== LIVE_PCI_HOST)
         return null;
-    return primerCardOnFileDisclosure(url, policy) && record21(options) && options.keepOnFile === true ? null : "keep_on_file";
+    return primerCardOnFileDisclosure(url, policy) && record32(options) && options.keepOnFile === true ? null : "keep_on_file";
 }
 function primerRefusalMessage(reason) {
     if (reason === "keep_on_file")
@@ -4168,7 +6556,7 @@ function primerRefusalMessage(reason) {
     return UNSUPPORTED_REFUSAL;
 }
 function primerCardNetwork(number) {
-    if (!digits2(number, 12, 19))
+    if (!digits3(number, 12, 19))
         return null;
     const two = Number(number.slice(0, 2));
     const four = Number(number.slice(0, 4));
@@ -4181,7 +6569,7 @@ function primerCardNetwork(number) {
     return null;
 }
 function primerNetworkRefusal(body, card) {
-    const judged = judgeBody5(body);
+    const judged = judgeBody6(body);
     if (!judged)
         return "unsupported";
     const preferred = judged.value.paymentInstrument.preferredNetwork;
@@ -4191,14 +6579,14 @@ function primerNetworkRefusal(body, card) {
     return network !== null && network === preferred ? null : "network_mismatch";
 }
 function injectPrimerCard(body, card) {
-    const judged = judgeBody5(body);
+    const judged = judgeBody6(body);
     if (!judged)
         throw new Error(UNSUPPORTED_REFUSAL);
     if (judged.keepOnFile)
         throw new Error(KEEP_ON_FILE_REFUSAL);
-    const month = card && (Number.isInteger(card.month) || digits2(card.month, 1, 2)) ? Number(card.month) : NaN;
-    const year = card && (Number.isInteger(card.year) || digits2(card.year, 2, 4)) ? Number(card.year) : NaN;
-    if (!card || !digits2(card.number, 12, 19) || !(month >= 1 && month <= 12) || !(year >= 0 && year <= 99 || year >= 2e3 && year <= 2099) || !digits2(card.cvc, 3, 4)) {
+    const month = card && (Number.isInteger(card.month) || digits3(card.month, 1, 2)) ? Number(card.month) : NaN;
+    const year = card && (Number.isInteger(card.year) || digits3(card.year, 2, 4)) ? Number(card.year) : NaN;
+    if (!card || !digits3(card.number, 12, 19) || !(month >= 1 && month <= 12) || !(year >= 0 && year <= 99 || year >= 2e3 && year <= 2099) || !digits3(card.cvc, 3, 4)) {
         throw new Error(FILL_REFUSAL);
     }
     if (primerNetworkRefusal(body, card) !== null)
@@ -4215,13 +6603,13 @@ function injectPrimerCard(body, card) {
     }
     return { body: JSON.stringify(judged.value), where };
 }
-var TOKEN3 = /^[A-Za-z0-9_-]{8,256}$/;
+var TOKEN4 = /^[A-Za-z0-9_-]{8,256}$/;
 var ERROR_ID = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/;
-var CODE5 = /^[A-Z][A-Z0-9_]{0,63}$/;
+var CODE7 = /^[A-Z][A-Z0-9_]{0,63}$/;
 var NETWORK_NAME = /^[A-Za-z][A-Za-z0-9 _-]{0,31}$/;
 var RESPONSE_MONTH = /^(?:0?[1-9]|1[0-2])$/;
 var RESPONSE_YEAR = /^(?:[0-9]{2}|20[0-9]{2})$/;
-var PROTOCOL = /^[0-9]{1,2}(?:\.[0-9]{1,2}){0,2}$/;
+var PROTOCOL2 = /^[0-9]{1,2}(?:\.[0-9]{1,2}){0,2}$/;
 var BIN_KEYS = [
     "network",
     "issuerCountryCode",
@@ -4240,28 +6628,28 @@ function readAnswer(body) {
         return null;
     try {
         const value = JSON.parse(body);
-        return record21(value) ? value : null;
+        return record32(value) ? value : null;
     }
     catch {
         return null;
     }
 }
-var tokenValue = (value) => exact3(TOKEN3, value) && !panLike2(value);
-var optional = (value, key, check) => !owns6(value, key) || value[key] === null || check(value[key]);
+var tokenValue = (value) => exact4(TOKEN4, value) && !panLike2(value);
+var optional = (value, key, check) => !owns8(value, key) || value[key] === null || check(value[key]);
 function cardDetails(data) {
-    if (!record21(data) || !exact3(/^[0-9]{4}$/, data.last4Digits))
+    if (!record32(data) || !exact4(/^[0-9]{4}$/, data.last4Digits))
         return null;
-    if (!optional(data, "first6Digits", (v) => exact3(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact3(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact3(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain2(v, 256)) || !optional(data, "network", (v) => exact3(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record21))
+    if (!optional(data, "first6Digits", (v) => exact4(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact4(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact4(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain2(v, 256)) || !optional(data, "network", (v) => exact4(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record32))
         return null;
     const safe = { last4Digits: data.last4Digits };
     for (const key of ["first6Digits", "expirationMonth", "expirationYear", "cardholderName", "network", "isNetworkTokenized"]) {
-        if (owns6(data, key) && data[key] !== null)
+        if (owns8(data, key) && data[key] !== null)
             safe[key] = data[key];
     }
-    if (record21(data.binData)) {
+    if (record32(data.binData)) {
         const bin = {};
         for (const key of BIN_KEYS) {
-            if (!owns6(data.binData, key) || data.binData[key] === null)
+            if (!owns8(data.binData, key) || data.binData[key] === null)
                 continue;
             if (!plain2(data.binData[key], 128))
                 return null;
@@ -4274,11 +6662,11 @@ function cardDetails(data) {
 function threeDsSummary(value) {
     if (value === void 0 || value === null)
         return null;
-    if (!record21(value) || !exact3(CODE5, value.responseCode) || !optional(value, "reasonCode", (v) => exact3(CODE5, v)) || !optional(value, "reasonText", (v) => plain2(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact3(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
+    if (!record32(value) || !exact4(CODE7, value.responseCode) || !optional(value, "reasonCode", (v) => exact4(CODE7, v)) || !optional(value, "reasonText", (v) => plain2(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact4(PROTOCOL2, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
         return void 0;
     const safe = { responseCode: value.responseCode };
     for (const key of ["reasonCode", "reasonText", "protocolVersion", "challengeIssued"]) {
-        if (owns6(value, key) && value[key] !== null)
+        if (owns8(value, key) && value[key] !== null)
             safe[key] = value[key];
     }
     return safe;
@@ -4291,7 +6679,7 @@ function rebuildToken(value) {
     if (!details || threeDs === void 0)
         return null;
     const safe = { token: value.token };
-    if (owns6(value, "analyticsId") && value.analyticsId !== null)
+    if (owns8(value, "analyticsId") && value.analyticsId !== null)
         safe.analyticsId = value.analyticsId;
     safe.tokenType = "SINGLE_USE";
     safe.paymentInstrumentType = "PAYMENT_CARD";
@@ -4302,8 +6690,8 @@ function rebuildToken(value) {
 }
 function primerErrorId(body) {
     const value = readAnswer(body);
-    const id = value && record21(value.error) ? value.error.errorId : null;
-    return exact3(ERROR_ID, id) && !panLike2(id) ? id : null;
+    const id = value && record32(value.error) ? value.error.errorId : null;
+    return exact4(ERROR_ID, id) && !panLike2(id) ? id : null;
 }
 function matchesCard(details, card) {
     const number = card && typeof card.number === "string" ? card.number : "";