@agent-cards/sdk 0.23.22 → 0.23.23

package/dist/card-fields.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 5079a0d54849efcb72153c66e2e73268acb14d5e1da10c04c10a9497b3ac884d
+// artifact-sha256: d1aac0b870ff4b5f9d63a43d1c2bb0eef03841846206282b5aeca4f540f0e73d
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -357,8 +357,8 @@ var CONTROL = /[\u0000-\u001f\u007f]/;
 var cardLikeName = (name) => (name.match(/[0-9]/g) ?? []).length >= 12;
 var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD4 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -771,8 +771,8 @@ var PADDLE_TOKENEX_PSP = "paddle_tokenex";
 var PADDLE_TOKENEX_FACT_KEYS = /* @__PURE__ */ Object.freeze(["card_first_six", "card_last_four", "expiry_month", "expiry_year", "card_brand"]);
 var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys2 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1261,8 +1261,8 @@ var TEXT_LIMIT = 256;
 var CONTROL4 = /[\u0000-\u001f\u007f]/;
 var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys3 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var plainText = (value) => typeof value === "string" && value.length <= TEXT_LIMIT && !CONTROL4.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -1464,8 +1464,8 @@ var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
 var CARD_PAYMENT = "PAYMENT_CARD";
 var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys4 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -1695,8 +1695,8 @@ var LOCALE = /^[a-z]{2}(?:-[A-Za-z]{2,4})?$/;
 var PAN_LIKE3 = /(?:[0-9][ _.:-]*){12,}/;
 var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys5 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -2727,8 +2727,8 @@ var TEXT_LIMIT3 = 256;
 var CONTROL7 = /[\u0000-\u001f\u007f]/;
 var record13 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys7 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var plainText3 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT3 && !CONTROL7.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
 var refuse19 = (code) => Object.freeze({ verdict: "refuse", code });
@@ -2776,6 +2776,15 @@ var pin6 = (fields) => Object.freeze({ ...fields, origins: Object.freeze([...fie
 var HIPAY_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
     pin6({ id: "happybulle", merchant: "HappyBulle", origins: ["https://www.happybulle.com"], usernames: ["94683309.secure-gateway.hipay-tpp.com"] })
 ]);
+// src/deep-freeze.js
+function deepFreeze(value) {
+    if (value && typeof value === "object" && !Object.isFrozen(value)) {
+        for (const child of Object.values(value))
+            deepFreeze(child);
+        Object.freeze(value);
+    }
+    return value;
+}
 // src/amazon-payment-services.js
 var APS_PSP = "amazon_payment_services";
 var APS_HOSTS = /* @__PURE__ */ Object.freeze({ "checkout.payfort.com": "production", "sbcheckout.payfort.com": "sandbox" });
@@ -3449,8 +3458,8 @@ var HOSTNAME = /^(?=.{1,253}$)[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?(?:\.[a-z0-9](
 var PUBLISHABLE_KEY = /^[A-Za-z0-9]{16,64}$/;
 var record18 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys8 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse24 = (code) => Object.freeze({ verdict: "refuse", code });
 var CARD23 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
@@ -4141,8 +4150,8 @@ var LONG_TEXT_LIMIT = BODY_LIMIT25;
 var record22 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var owns6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var sameKeys9 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var exact3 = (pattern, value) => typeof value === "string" && pattern.test(value);
 var printable3 = (text8) => [...text8].every((character) => {
@@ -4541,8 +4550,8 @@ var POSTAL_CODE4 = /^[A-Za-z0-9 -]{0,16}$/;
 var CIPHERTEXT_B64 = /^[A-Za-z0-9+/]{341}[AQgw]==$/;
 var record24 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var sameKeys11 = (value, keys) => {
-    const own10 = Object.keys(value);
-    return own10.length === keys.length && own10.every((key, at) => key === keys[at]);
+    const own12 = Object.keys(value);
+    return own12.length === keys.length && own12.every((key, at) => key === keys[at]);
 };
 var refuse29 = (code) => Object.freeze({ verdict: "refuse", code });
 var failed = (code) => (
@@ -5063,6 +5072,1083 @@ function xenditBodyVerdict(body) {
         return refuse32("xendit_body_unsupported");
     return CARD31;
 }
+// src/tappay.js
+var TAPPAY_PSP = "tappay";
+var TAPPAY_GETPRIME_URL = "https://js.tappaysdk.com/payment/tpdirect/production/getprime";
+var BODY_LIMIT31 = 8192;
+var REQUIRED_KEYS3 = /* @__PURE__ */ Object.freeze(["cardnumber", "cardduedate", "appid", "appkey", "appname", "url", "protocol", "tappay_sdk_version", "cardholder_info"]);
+var KEY_ORDER = /* @__PURE__ */ Object.freeze(["cardnumber", "cardduedate", "appid", "appkey", "appname", "url", "port", "protocol", "tappay_sdk_version", "cardholder_info", "cardccv", "device_id"]);
+var OPTIONAL_KEYS2 = /* @__PURE__ */ Object.freeze(["port", "cardccv", "device_id"]);
+var CARDHOLDER_KEYS = /* @__PURE__ */ Object.freeze(["name_en", "email", "phone_number_country_code", "phone_number"]);
+var CARD_NUMBER16 = /^[0-9]{12,19}$/;
+var CARD_DUE_DATE = /^20[0-9]{2}(?:0[1-9]|1[0-2])$/;
+var SECURITY_CODE19 = /^[0-9]{3,4}$/;
+var APP_KEY = /^[A-Za-z0-9_-]{16,512}$/;
+var SDK_VERSION = /^v[0-9]+(?:\.[0-9]+){1,3}$/;
+var HOSTNAME2 = /^[A-Za-z0-9.:-]{1,255}$/;
+var ORIGIN_URL = /^https?:\/\/[A-Za-z0-9.:_/-]{1,255}$/;
+var PROTOCOL = /^https?:$/;
+var PORT = /^[0-9]{0,5}$/;
+var CONTROL13 = /[\u0000-\u001f\u007f]/;
+var TEXT_LIMIT12 = 256;
+var DEVICE_ID = /^[A-Za-z0-9_-]{1,128}$/;
+var record28 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var plainText7 = (value) => typeof value === "string" && value.length <= TEXT_LIMIT12 && !CONTROL13.test(value) && (value.match(/[0-9]/g) ?? []).length < 12;
+var holderField = (value) => value === null || plainText7(value);
+var refuse33 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD32 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isTappayGetPrimeUrl(url) {
+    return url === TAPPAY_GETPRIME_URL;
+}
+function readBody19(body) {
+    if (typeof body !== "string" || body.length > BODY_LIMIT31)
+        return null;
+    const eq = body.indexOf("=");
+    if (eq !== "jsonString".length || body.slice(0, eq) !== "jsonString")
+        return null;
+    const json = body.slice(eq + 1);
+    let value;
+    try {
+        value = JSON.parse(json);
+        if (!record28(value) || JSON.stringify(value) !== json)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function keysInOrder(value) {
+    const keys = Object.keys(value);
+    for (const key of REQUIRED_KEYS3) {
+        if (!keys.includes(key))
+            return false;
+    }
+    for (const key of keys) {
+        if (!KEY_ORDER.includes(key) || !REQUIRED_KEYS3.includes(key) && !OPTIONAL_KEYS2.includes(key))
+            return false;
+    }
+    const rank = (key) => KEY_ORDER.indexOf(key);
+    for (let at = 1; at < keys.length; at += 1) {
+        if (rank(keys[at]) <= rank(keys[at - 1]))
+            return false;
+    }
+    return true;
+}
+function cardholderInfo(value) {
+    if (!record28(value))
+        return false;
+    const keys = Object.keys(value);
+    return keys.length <= CARDHOLDER_KEYS.length && keys.every((key) => CARDHOLDER_KEYS.includes(key) && holderField(value[key]));
+}
+function tappayBodyVerdict(body) {
+    const value = readBody19(body);
+    if (value === null || !keysInOrder(value))
+        return refuse33("tappay_body_unsupported");
+    if (typeof value.cardnumber !== "string" || !CARD_NUMBER16.test(value.cardnumber) || typeof value.cardduedate !== "string" || !CARD_DUE_DATE.test(value.cardduedate) || !Number.isInteger(value.appid) || value.appid < 0 || typeof value.appkey !== "string" || !APP_KEY.test(value.appkey) || typeof value.appname !== "string" || !HOSTNAME2.test(value.appname) || typeof value.url !== "string" || !ORIGIN_URL.test(value.url) || typeof value.protocol !== "string" || !PROTOCOL.test(value.protocol) || typeof value.tappay_sdk_version !== "string" || !SDK_VERSION.test(value.tappay_sdk_version) || !cardholderInfo(value.cardholder_info)) {
+        return refuse33("tappay_body_unsupported");
+    }
+    if (Object.prototype.hasOwnProperty.call(value, "port") && (typeof value.port !== "string" || !PORT.test(value.port)))
+        return refuse33("tappay_body_unsupported");
+    if (Object.prototype.hasOwnProperty.call(value, "cardccv") && (typeof value.cardccv !== "string" || !SECURITY_CODE19.test(value.cardccv)))
+        return refuse33("tappay_body_unsupported");
+    if (Object.prototype.hasOwnProperty.call(value, "device_id") && (typeof value.device_id !== "string" || !DEVICE_ID.test(value.device_id)))
+        return refuse33("tappay_body_unsupported");
+    return CARD32;
+}
+// src/paymob.js
+var PAYMOB_PSP = "paymob";
+var PAYMOB_HOSTS = /* @__PURE__ */ Object.freeze(["accept.paymob.com", "uae.paymob.com", "ksa.paymob.com", "oman.paymob.com", "accept.paymobsolutions.com"]);
+var PAYMOB_PAY_PATH = "/api/acceptance/payments/pay";
+var URL_LIMIT12 = 128;
+var BODY_LIMIT32 = 16384;
+var KEY_LIMIT = 8192;
+var NUMBER7 = /^[0-9]{12,19}$/;
+var MONTH17 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR18 = /^[0-9]{2}$/;
+var SECURITY_CODE20 = /^[0-9]{3,4}$/;
+var TEXT3 = /^[^\x00-\x1f\x7f]{0,256}$/;
+var HOLDER_TEXT = /^[^\x00-\x1f\x7f]{0,128}$/;
+var FIELD = /^[a-z][a-z0-9_]{0,39}$/;
+var FINGERPRINT3 = /^[\x21-\x7e]{1,256}$/;
+var ORIGIN2 = /^https?:\/\/[A-Za-z0-9.-]{1,253}(?::[0-9]{1,5})?$/;
+var SWITCH = /* @__PURE__ */ new Set(["True", "False"]);
+var SOURCE_FOR = /* @__PURE__ */ Object.freeze({ IFRAME: "True", PIXEL: "False" });
+var CARD_MEMBER4 = /^(?:card_?number|pan|cvv|cvc|cvn|card_pin|card_expiry|expiry_month|expiry_year|security_code)$/i;
+var SAVED_CARD = "TOKEN";
+var OTHER_CARD_SUBTYPES = /* @__PURE__ */ new Set(["OMANNET", "PREMIUM", "PREMIUM6_ONLINE", "SYMPL"]);
+var CARD_SOURCE_KEYS = /* @__PURE__ */ new Set(["identifier", "sourceholder_name", "subtype", "expiry_month", "expiry_year", "cvn", "unified_checkout", "save_card"]);
+var TOP_KEYS3 = /* @__PURE__ */ new Set([
+    "source",
+    "billing",
+    "shipping_data",
+    "payment_token",
+    "api_source",
+    "unified_checkout",
+    "save_card",
+    "fingerprint",
+    "merchant-domain",
+    "customer",
+    "converted_currency",
+    "no_of_cards_selected",
+    "split_payment_amount"
+]);
+var REQUIRED_TOP_KEYS = ["source", "payment_token", "api_source", "unified_checkout", "save_card"];
+var REQUIRED_SOURCE_KEYS = ["identifier", "subtype", "expiry_month", "expiry_year", "cvn", "unified_checkout", "save_card"];
+var record29 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own10 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse34 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD33 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE12 = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function paymobPayHost(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT12 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !PAYMOB_HOSTS.includes(parsed.hostname) || parsed.pathname !== PAYMOB_PAY_PATH)
+        return null;
+    return parsed.hostname;
+}
+function isPaymobPayUrl(url) {
+    return paymobPayHost(url) !== null;
+}
+var BASE645 = /^[A-Za-z0-9+/]+={0,2}$/;
+var BASE64URL = /^[A-Za-z0-9_-]+$/;
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+function decodeBase642(text8, url) {
+    if (typeof text8 !== "string" || text8 === "")
+        return null;
+    let body = text8;
+    if (url) {
+        if (!BASE64URL.test(body) || body.length % 4 === 1)
+            return null;
+    }
+    else {
+        if (!BASE645.test(body) || body.length % 4 !== 0)
+            return null;
+        body = body.replace(/=+$/, "");
+    }
+    const extra = url ? "-_" : "+/";
+    const bytes = new Uint8Array(Math.floor(body.length * 3 / 4));
+    let buffer = 0;
+    let bits = 0;
+    let at = 0;
+    for (const char of body) {
+        const value = (ALPHABET + extra).indexOf(char);
+        if (value < 0)
+            return null;
+        buffer = buffer << 6 | value;
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            bytes[at++] = buffer >> bits & 255;
+        }
+    }
+    if (buffer & (1 << bits) - 1)
+        return null;
+    return bytes.subarray(0, at);
+}
+function jsonOf(bytes) {
+    if (!bytes)
+        return null;
+    let text8;
+    try {
+        text8 = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    }
+    catch {
+        return null;
+    }
+    try {
+        const value = JSON.parse(text8);
+        return record29(value) ? value : null;
+    }
+    catch {
+        return null;
+    }
+}
+var positive = (value) => Number.isSafeInteger(value) && value > 0;
+var CURRENCY5 = /^[A-Z]{3}$/;
+var KEY_CLAIMS = /* @__PURE__ */ new Set([
+    "user_id",
+    "integration_id",
+    "order_id",
+    "amount_cents",
+    "currency",
+    "exp",
+    "billing_data",
+    "extra",
+    "notification_url",
+    "redirection_url",
+    "redirect_url",
+    "lock_order_when_paid",
+    "single_payment_attempt",
+    "next_payment_intention",
+    "created_by",
+    "is_partner",
+    "split_payment_methods"
+]);
+var SUBSCRIPTION_CLAIMS = /* @__PURE__ */ new Set(["subscription_plan_id", "subscription_start_date"]);
+var UNREADABLE_KEY = /* @__PURE__ */ Object.freeze({ facts: null, code: "paymob_payment_key_unreadable" });
+function readPaymentKey(key) {
+    if (typeof key !== "string" || key.length > KEY_LIMIT)
+        return UNREADABLE_KEY;
+    const outer = decodeBase642(key, false);
+    if (!outer)
+        return UNREADABLE_KEY;
+    let jwt;
+    try {
+        jwt = new TextDecoder("utf-8", { fatal: true }).decode(outer);
+    }
+    catch {
+        return UNREADABLE_KEY;
+    }
+    const parts = jwt.split(".");
+    if (parts.length !== 3 || parts.some((part) => part === "" || !BASE64URL.test(part)))
+        return UNREADABLE_KEY;
+    const header = jsonOf(decodeBase642(parts[0], true));
+    if (!header || Object.keys(header).length !== 2 || header.alg !== "HS512" || header.typ !== "JWT")
+        return UNREADABLE_KEY;
+    const signature = decodeBase642(parts[2], true);
+    if (!signature || signature.length !== 64)
+        return UNREADABLE_KEY;
+    const payload = jsonOf(decodeBase642(parts[1], true));
+    if (!payload)
+        return UNREADABLE_KEY;
+    const claims = Object.keys(payload);
+    if (claims.some((claim) => SUBSCRIPTION_CLAIMS.has(claim) && payload[claim] !== null))
+        return Object.freeze({ facts: null, code: "paymob_subscription" });
+    if (claims.some((claim) => !KEY_CLAIMS.has(claim) && !SUBSCRIPTION_CLAIMS.has(claim)))
+        return UNREADABLE_KEY;
+    const { user_id: merchantId, integration_id: integrationId, order_id: orderId, amount_cents: amountCents, currency, exp } = payload;
+    if (!positive(merchantId) || !positive(integrationId) || !positive(orderId) || !Number.isSafeInteger(amountCents) || amountCents < 0 || typeof currency !== "string" || !CURRENCY5.test(currency) || own10(payload, "exp") && !positive(exp))
+        return UNREADABLE_KEY;
+    if (amountCents === 0)
+        return Object.freeze({ facts: null, code: "paymob_no_amount" });
+    return Object.freeze({ facts: Object.freeze({ merchantId, integrationId, orderId, amountCents, currency, expiresAt: own10(payload, "exp") ? exp : null }), code: null });
+}
+function readJson8(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT32)
+        return { parsed: null, exact: false };
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return { parsed: null, exact: false };
+    }
+    let exact4 = false;
+    try {
+        exact4 = body.length <= BODY_LIMIT32 && JSON.stringify(parsed) === body;
+    }
+    catch {
+        exact4 = false;
+    }
+    return { parsed, exact: exact4 };
+}
+function namesCardValue3(parsed) {
+    const pending = parsed !== null && typeof parsed === "object" ? [parsed] : [];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        for (const key of Object.keys(node)) {
+            if (!Array.isArray(node) && CARD_MEMBER4.test(key))
+                return true;
+            const value = node[key];
+            if (value !== null && typeof value === "object")
+                pending.push(value);
+        }
+    }
+    return false;
+}
+function addressBlock(value) {
+    return record29(value) && Object.keys(value).length <= 32 && Object.entries(value).every(([key, text8]) => FIELD.test(key) && !CARD_MEMBER4.test(key) && (text8 === null || typeof text8 === "string" && TEXT3.test(text8)));
+}
+function judgeCardPayment(parsed) {
+    const source = parsed.source;
+    for (const key of Object.keys(parsed))
+        if (!TOP_KEYS3.has(key))
+            return "paymob_body_unsupported";
+    for (const key of Object.keys(source)) {
+        if (key === "is_card_to_installment" || key === "tenure")
+            return "paymob_installments";
+        if (!CARD_SOURCE_KEYS.has(key))
+            return "paymob_body_unsupported";
+    }
+    if (own10(parsed, "customer"))
+        return "paymob_account";
+    if (own10(parsed, "no_of_cards_selected") || own10(parsed, "split_payment_amount"))
+        return "paymob_split_payment";
+    if (own10(parsed, "converted_currency"))
+        return "paymob_currency_conversion";
+    if (!REQUIRED_TOP_KEYS.every((key) => own10(parsed, key)) || !REQUIRED_SOURCE_KEYS.every((key) => own10(source, key)))
+        return "paymob_body_unsupported";
+    if (source.save_card === true || parsed.save_card === true)
+        return "paymob_keep_on_file";
+    if (source.save_card !== false || parsed.save_card !== false)
+        return "paymob_body_unsupported";
+    if (typeof source.identifier !== "string" || !NUMBER7.test(source.identifier) || typeof source.expiry_month !== "string" || !MONTH17.test(source.expiry_month) || typeof source.expiry_year !== "string" || !YEAR18.test(source.expiry_year) || typeof source.cvn !== "string" || !SECURITY_CODE20.test(source.cvn) || own10(source, "sourceholder_name") && !(typeof source.sourceholder_name === "string" && HOLDER_TEXT.test(source.sourceholder_name))) {
+        return "paymob_body_unsupported";
+    }
+    if (!own10(SOURCE_FOR, parsed.api_source) || !SWITCH.has(parsed.unified_checkout) || parsed.unified_checkout !== SOURCE_FOR[parsed.api_source] || source.unified_checkout !== parsed.unified_checkout)
+        return "paymob_body_unsupported";
+    if (own10(parsed, "billing") && !addressBlock(parsed.billing) || own10(parsed, "shipping_data") && !addressBlock(parsed.shipping_data)) {
+        return "paymob_body_unsupported";
+    }
+    if (own10(parsed, "fingerprint") && parsed.fingerprint !== null && !(typeof parsed.fingerprint === "string" && FINGERPRINT3.test(parsed.fingerprint))) {
+        return "paymob_body_unsupported";
+    }
+    if (own10(parsed, "merchant-domain") && !(typeof parsed["merchant-domain"] === "string" && ORIGIN2.test(parsed["merchant-domain"]))) {
+        return "paymob_body_unsupported";
+    }
+    return readPaymentKey(parsed.payment_token).code;
+}
+function paymobBodyVerdict(body) {
+    if (body === void 0 || body === null || body === "")
+        return CONTINUE12;
+    const { parsed, exact: exact4 } = readJson8(body);
+    if (!exact4 || !record29(parsed) || !record29(parsed.source) || typeof parsed.source.subtype !== "string")
+        return refuse34("paymob_body_unsupported");
+    const subtype = parsed.source.subtype;
+    if (subtype === "CARD") {
+        const code = judgeCardPayment(parsed);
+        return code === null ? CARD33 : refuse34(code);
+    }
+    if (subtype === SAVED_CARD)
+        return refuse34("paymob_saved_card");
+    if (OTHER_CARD_SUBTYPES.has(subtype) || namesCardValue3(parsed))
+        return refuse34("paymob_body_unsupported");
+    return CONTINUE12;
+}
+// src/payu-latam.js
+var PAYU_LATAM_PSP = "payu_latam";
+var PAYU_LATAM_HOSTS = /* @__PURE__ */ Object.freeze({
+    production: Object.freeze(["checkout.payulatam.com"]),
+    sandbox: Object.freeze(["sandbox.checkout.payulatam.com"])
+});
+var PAYU_LATAM_COUNTRIES = /* @__PURE__ */ Object.freeze(["cl", "co", "mx", "pa", "pe"]);
+var UNREVIEWED_COUNTRIES = /* @__PURE__ */ Object.freeze(["ar", "br"]);
+var PAYU_LATAM_CARD_BRANDS = /* @__PURE__ */ Object.freeze(["VISA", "MASTERCARD", "AMEX", "DINERS"]);
+var BODY_LIMIT33 = 65536;
+var URL_LIMIT13 = 256;
+var SUBMIT_PATH = /^\/ppp-web-gateway-payu\/checkout\/submit\/([a-z]{2})\/credit_card\/([0-9a-f]{32})$/;
+var KEY = /^[0-9a-f]{32}$/;
+var CARD_KEYS14 = /* @__PURE__ */ Object.freeze(["number", "securityCode", "expirationDateMonth", "expirationDateYear", "cardType"]);
+var CARD_REQUIRED2 = /* @__PURE__ */ Object.freeze(["number", "securityCode", "expirationDateMonth", "expirationDateYear"]);
+var CARD_TYPES2 = /* @__PURE__ */ Object.freeze(["CREDIT", "DEBIT", "PREPAID"]);
+var NOT_THE_CARD_FORM = /* @__PURE__ */ Object.freeze([
+    "checkoutPaymentMethod",
+    "response",
+    "checkoutPse",
+    "checkoutKhipu",
+    "smsCode",
+    "checkoutDebitCard"
+]);
+var TRANSACTION_MEMBERS = /* @__PURE__ */ Object.freeze([
+    "id",
+    "key",
+    "isPaymentAttempt",
+    "payer",
+    "state",
+    "merchantId",
+    "orderId",
+    "order",
+    "checkoutPaymentMethod",
+    "paymentNetwork",
+    "paymentMethodType",
+    "paymentMethodMain",
+    "bank",
+    "paymentAgreementId",
+    "paymentCountry",
+    "paymentExchangeRate",
+    "response",
+    "expirationDate",
+    "lastUpdatedDate",
+    "creationDate",
+    "termsAndConditionId",
+    "installments",
+    "installmentValue",
+    "internationalCard",
+    "checkoutVersion",
+    "payerCommissionValue",
+    "payerInterestValue",
+    "payerPricingValue",
+    "promotionId",
+    "shippingValue",
+    "shipmentMerchantValue",
+    "additionalValue",
+    "administrativeFee",
+    "payerTotalAmount",
+    "source",
+    "integrationMethod",
+    "cardType",
+    "creditCardCountry",
+    "shippingInfo",
+    "questionnaire",
+    "merchantSoftDescriptor",
+    "pmNetworkValue",
+    "tea",
+    "cft",
+    "hasPaymentByPoints",
+    "loyaltyProgramRedeemedAmount",
+    "loyaltyProgramRedeemedPoints",
+    "lendingEligible",
+    "registerLendingDevice",
+    "lendingDeviceToken",
+    "abandonedLendingTransaction",
+    "masterpassObfuscateCreditCardNumber",
+    "isMasterpass",
+    "brandName",
+    "transactionType",
+    "nossoNumero",
+    "paymentTaxesDetails",
+    "shopifyGid",
+    "shopifyVersion",
+    "shopifyShopDomain",
+    "shopifyRedirectTime",
+    "paymentCancelUrl",
+    "checkoutCreditCard",
+    "isRegisterPayer",
+    "creditCardTokenId",
+    "checkoutPse",
+    "checkoutKhipu",
+    "smsCode",
+    "checkoutDebitCard"
+]);
+var ADDRESS = ["street1", "street2", "street3", "city", "state", "country", "postalCode", "phone"];
+var PERSON = [
+    "fullName",
+    "emailAddress",
+    "contactPhone",
+    "phoneCountryCode",
+    "dniNumber",
+    "isDniNumberEncrypt",
+    "dniType",
+    "personType",
+    "businessName",
+    "cnpj",
+    "gender"
+];
+var MONEY = ["value", "symbol", "currency"];
+var RECORD_MEMBERS = /* @__PURE__ */ Object.freeze({
+    payer: [...PERSON, "merchantBuyerId", "billingAddress", "birthDate", "identificationNumber", "identificationType"],
+    "payer.billingAddress": ADDRESS,
+    order: [
+        "id",
+        "referenceCode",
+        "airlineCode",
+        "description",
+        "isTest",
+        "signature",
+        "language",
+        "buyer",
+        "shipment",
+        "state",
+        "status",
+        "paymentApprovalDate",
+        "creationDate",
+        "accountId",
+        "amount",
+        "tax",
+        "totalPurchase",
+        "currency",
+        "amountConvertedValue",
+        "taxConvertedValue",
+        "taxReturnBase",
+        "taxReturnBaseConvertedValue",
+        "additionalValue",
+        "administrativeFee",
+        "taxAdministrativeFee",
+        "taxAdministrativeFeeReturnBase",
+        "enabledPaymentMethods",
+        "enabledInstallments",
+        "enabledPaymentMethodTypes",
+        "enabledIin",
+        "enabledPseBanks",
+        "enabledKhipuBanks",
+        "paymentMethodsDescription",
+        "urlEncodedId",
+        "shippingValue",
+        "paymentRequestLinkId",
+        "airlineDescription",
+        "displayShipping",
+        "displayBuyerComments",
+        "buyerCommentsLabel",
+        "extraParameters",
+        "dispersion"
+    ],
+    "order.buyer": [...PERSON, "merchantBuyerId", "buyerAddress", "comments"],
+    "order.buyer.buyerAddress": ADDRESS,
+    "order.shipment": [...PERSON, "merchantShipmentId", "shippingAddress", "comments"],
+    "order.shipment.shippingAddress": ADDRESS,
+    "order.amount": MONEY,
+    "order.tax": MONEY,
+    "order.totalPurchase": MONEY,
+    "order.amountConvertedValue": MONEY,
+    "order.taxConvertedValue": MONEY,
+    "order.taxReturnBase": MONEY,
+    "order.taxReturnBaseConvertedValue": MONEY,
+    shippingInfo: [
+        "userLogin",
+        "id",
+        "reference",
+        "description",
+        "currency",
+        "deliveryCity",
+        "deliveryCityName",
+        "deliveryAddress1",
+        "deliveryAddress2",
+        "deliveryAddress3",
+        "postalCode",
+        "fullName",
+        "documentType",
+        "document",
+        "phoneNumber",
+        "observationsReceivingShipment",
+        "destinationState",
+        "destinationStateName",
+        "destinationCountry",
+        "destinationEmail",
+        "originFullName",
+        "originIdentificationType",
+        "originIdentification",
+        "originCity",
+        "originState",
+        "originCountry",
+        "originAddress",
+        "originZipCode",
+        "originPhone",
+        "originEmail",
+        "kilogramWeight",
+        "volumetricWeight",
+        "totalValue",
+        "declaredValue",
+        "shippingValue",
+        "guideNumber",
+        "enlistmentApplies",
+        "deliveryDate",
+        "deliveryDays",
+        "minDeliveryDays",
+        "packageHeight",
+        "packageWidth",
+        "packageLength",
+        "shippingProvider",
+        "shippingState",
+        "creationDate",
+        "lastUpdateDate",
+        "expirationDate",
+        "signature",
+        "strCreationDate",
+        "comment",
+        "warehouseId",
+        "additionalDeliveryDays",
+        "shippingMerchantValue"
+    ],
+    // PayU's own ten, as transaction/create names them, and the merchant's extra1 to extra4 (the payment form's
+    // optional fields), each text or nothing.
+    "order.extraParameters": [
+        "CURRENCY",
+        "LANGUAGE",
+        "ACCOUNT_ID",
+        "ALGORITHM_SIGNATURE",
+        "CHECKOUT_VERSION",
+        "RESPONSE_URL",
+        "IS_TEST",
+        "SIGNATURE",
+        "NOTIFY_URL",
+        "IP_COUNTRY",
+        "EXTRA1",
+        "EXTRA2",
+        "EXTRA3",
+        "EXTRA4"
+    ]
+});
+var TEXT_RECORDS = /* @__PURE__ */ Object.freeze(["order.extraParameters"]);
+var CARD_WORDS = /* @__PURE__ */ Object.freeze([
+    "card",
+    "cards",
+    "pan",
+    "cvv",
+    "cvv2",
+    "cvc",
+    "cvd",
+    "csc",
+    "ccv",
+    "cc",
+    "token",
+    "masterpass",
+    "wallet",
+    "register",
+    "recurring",
+    "recurrent",
+    "recurrence",
+    "keep",
+    "store",
+    "save",
+    "saved",
+    "vault",
+    "exp",
+    "expiry",
+    "expiration",
+    "expiracion",
+    "tarjeta",
+    "tarjetas",
+    "vencimiento"
+]);
+var OWN_CARD_MEMBERS = /* @__PURE__ */ Object.freeze([
+    "checkoutCreditCard",
+    "cardType",
+    "internationalCard",
+    "creditCardCountry",
+    "isMasterpass",
+    "masterpassObfuscateCreditCardNumber",
+    "isRegisterPayer",
+    "registerLendingDevice",
+    "lendingDeviceToken",
+    "creditCardTokenId",
+    "checkoutDebitCard",
+    "expirationDate",
+    "shippingInfo.expirationDate"
+]);
+var SIGNATURE2 = /^[0-9a-f]{32,128}$/i;
+var OPAQUE_MEMBERS = /* @__PURE__ */ Object.freeze({
+    key: /^[0-9a-f]{32}$/,
+    "order.signature": SIGNATURE2,
+    "order.extraParameters.SIGNATURE": SIGNATURE2,
+    "shippingInfo.signature": SIGNATURE2,
+    "order.urlEncodedId": /^[A-Za-z0-9+/=_-]{1,256}$/,
+    shopifyGid: /^gid:\/\/shopify\/[A-Za-z]+\/[0-9]{1,20}$/
+});
+var IS_TEST_TEXT = /* @__PURE__ */ Object.freeze({ true: ["true", "1"], false: ["false", "0"] });
+var MASKS = /* @__PURE__ */ Object.freeze({ VISA: [4, 4, 4, 4], MASTERCARD: [4, 4, 4, 4], AMEX: [4, 6, 5], DINERS: [4, 6, 4] });
+var NETWORK2 = /* @__PURE__ */ Object.freeze({
+    VISA: /^4(?:[0-9]{12}|[0-9]{15})$/,
+    MASTERCARD: /^(?:5[1-5][0-9]{14}|2(?:2(?:2[1-9]|[3-9][0-9])|[3-6][0-9]{2}|7(?:[01][0-9]|20))[0-9]{12})$/,
+    AMEX: /^3[47][0-9]{13}$/,
+    DINERS: /^(?:3(?:0[0-5]|[68][0-9])[0-9]{11}|3095[0-9]{10}|3[89][0-9]{12})$/
+});
+var SECURITY_CODE21 = /^[0-9]{3,4}$/;
+var COUNTRY6 = /^[A-Z]{2}$/;
+var record30 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns7 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse35 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD34 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var absent = (value, key) => !owns7(value, key) || value[key] === null;
+function payuLatamSubmitTarget(url) {
+    if (typeof url !== "string" || url.length > URL_LIMIT13 || url.includes("?") || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    const environment2 = PAYU_LATAM_HOSTS.production.includes(parsed.hostname) ? "production" : PAYU_LATAM_HOSTS.sandbox.includes(parsed.hostname) ? "sandbox" : null;
+    const match = environment2 === null ? null : SUBMIT_PATH.exec(parsed.pathname);
+    if (match === null || !(PAYU_LATAM_COUNTRIES.includes(match[1]) || UNREVIEWED_COUNTRIES.includes(match[1])))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment: environment2, country: match[1], key: match[2] });
+}
+function readJson9(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT33)
+        return null;
+    let at = 0;
+    let nodes = 0;
+    const fail = () => {
+        throw new Error("invalid_payu_latam_json");
+    };
+    const space = () => {
+        while (" 	\r\n".includes(body[at] ?? "\0"))
+            at += 1;
+    };
+    const string = () => {
+        space();
+        const start = at;
+        if (body[at++] !== '"')
+            fail();
+        while (at < body.length) {
+            const character = body[at++];
+            if (character === "\\") {
+                at += 1;
+                continue;
+            }
+            if (character === '"')
+                return JSON.parse(body.slice(start, at));
+        }
+        return fail();
+    };
+    const value = (depth) => {
+        if (depth > 8 || ++nodes > 4096)
+            fail();
+        space();
+        const character = body[at];
+        if (character === '"')
+            return string();
+        if (character === "{") {
+            at += 1;
+            const result = /* @__PURE__ */ Object.create(null);
+            const seen = /* @__PURE__ */ new Set();
+            space();
+            if (body[at] === "}") {
+                at += 1;
+                return result;
+            }
+            for (;;) {
+                const key = string();
+                if (seen.has(key) || ["__proto__", "prototype", "constructor"].includes(key))
+                    fail();
+                seen.add(key);
+                space();
+                if (body[at++] !== ":")
+                    fail();
+                result[key] = value(depth + 1);
+                space();
+                const next = body[at++];
+                if (next === "}")
+                    return result;
+                if (next !== ",")
+                    fail();
+            }
+        }
+        if (character === "[") {
+            at += 1;
+            const result = [];
+            space();
+            if (body[at] === "]") {
+                at += 1;
+                return result;
+            }
+            for (;;) {
+                result.push(value(depth + 1));
+                space();
+                const next = body[at++];
+                if (next === "]")
+                    return result;
+                if (next !== ",")
+                    fail();
+            }
+        }
+        for (const literal of ["true", "false", "null"]) {
+            if (body.startsWith(literal, at)) {
+                at += literal.length;
+                return JSON.parse(literal);
+            }
+        }
+        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(body.slice(at, at + 32));
+        if (!number || /^-?[0-9]{16,}$/.test(number[0]))
+            fail();
+        at += number[0].length;
+        const parsed = Number(number[0]);
+        if (!Number.isFinite(parsed))
+            fail();
+        return parsed;
+    };
+    try {
+        const parsed = value(0);
+        space();
+        return at === body.length && record30(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function cardNamed2(key) {
+    const words = key.replace(/([a-z0-9])([A-Z])/g, "$1 $2").split(/[^A-Za-z0-9]+/).filter(Boolean).map((word) => word.toLowerCase());
+    const phrase = words.join(" ");
+    return words.some((word) => CARD_WORDS.includes(word)) || ["security code", "codigo seguridad", "codigo verificacion"].some((said) => phrase.includes(said));
+}
+function carriesCardNumber(text8) {
+    for (const [run] of text8.matchAll(/[0-9]+(?:[ ._/,-][0-9]+)*/g)) {
+        const groups = run.split(/[ ._/,-]/);
+        for (let first = 0; first < groups.length; first += 1) {
+            let digits3 = "";
+            for (let last = first; last < groups.length && digits3.length + groups[last].length <= 19; last += 1) {
+                digits3 += groups[last];
+                if (digits3.length >= 13 && digits3[0] >= "2" && digits3[0] <= "6" && luhn7(digits3))
+                    return true;
+            }
+        }
+    }
+    return false;
+}
+var wholeCardNumber = (text8) => /^[2-6][0-9]{12,18}$/.test(text8) && luhn7(text8);
+function membersRefusal(root) {
+    const pending = [[root, ""]];
+    while (pending.length > 0) {
+        const [node, path] = pending.pop();
+        const own12 = path === "" ? TRANSACTION_MEMBERS : owns7(RECORD_MEMBERS, path) ? RECORD_MEMBERS[path] : null;
+        for (const [key, child] of Object.entries(node)) {
+            const at = Array.isArray(node) ? path : path === "" ? key : `${path}.${key}`;
+            if (at === "checkoutCreditCard")
+                continue;
+            if (own12 !== null && !own12.includes(key))
+                return true;
+            if (TEXT_RECORDS.includes(path) && child !== null && typeof child !== "string")
+                return true;
+            if (!Array.isArray(node) && owns7(OPAQUE_MEMBERS, at)) {
+                if (child !== null && (typeof child !== "string" || !OPAQUE_MEMBERS[at].test(child) || wholeCardNumber(child)))
+                    return true;
+                continue;
+            }
+            if (!Array.isArray(node) && !OWN_CARD_MEMBERS.includes(at) && cardNamed2(key) && child !== null && child !== false)
+                return true;
+            if (typeof child === "string" && carriesCardNumber(child))
+                return true;
+            if (typeof child === "number" && (!/Date$/.test(key) || String(child).length > 13) && carriesCardNumber(String(child)))
+                return true;
+            if (child !== null && typeof child === "object")
+                pending.push([child, at]);
+        }
+    }
+    return false;
+}
+function cardDigits(number, brand) {
+    if (typeof number !== "string")
+        return null;
+    if (/^[0-9]{12,19}$/.test(number))
+        return number;
+    const groups = number.split(" ");
+    const mask = MASKS[brand];
+    if (!mask || groups.length !== mask.length || !groups.every((group, at) => group.length === mask[at] && /^[0-9]+$/.test(group)))
+        return null;
+    return groups.join("");
+}
+function luhn7(digits3) {
+    let sum = 0;
+    for (let at = digits3.length - 1, double = false; at >= 0; at -= 1, double = !double) {
+        let digit = digits3.charCodeAt(at) - 48;
+        if (double) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function cardRefusal(card, brand) {
+    if (!record30(card) || !Object.keys(card).every((key) => CARD_KEYS14.includes(key)) || !CARD_REQUIRED2.every((key) => owns7(card, key))) {
+        return "payu_latam_body_unsupported";
+    }
+    const digits3 = cardDigits(card.number, brand);
+    if (digits3 === null || !NETWORK2[brand].test(digits3) || !luhn7(digits3))
+        return "payu_latam_body_unsupported";
+    const code = card.securityCode;
+    if (typeof code !== "string" || !SECURITY_CODE21.test(code) || code.length !== (brand === "AMEX" ? 4 : 3))
+        return "payu_latam_body_unsupported";
+    const { expirationDateMonth: month, expirationDateYear: year } = card;
+    if (!Number.isSafeInteger(month) || month < 1 || month > 12 || !Number.isSafeInteger(year) || year < 0 || year > 99)
+        return "payu_latam_body_unsupported";
+    if (!absent(card, "cardType") && !CARD_TYPES2.includes(card.cardType))
+        return "payu_latam_body_unsupported";
+    return null;
+}
+function judgeBody5(body, target) {
+    const value = readJson9(body);
+    if (value === null || value.paymentMethodType !== "CREDIT_CARD" || typeof value.key !== "string" || !KEY.test(value.key) || !record30(value.order) || !record30(value.payer))
+        return { code: "payu_latam_body_unsupported", value: null };
+    if (target !== void 0 && value.key !== target.key)
+        return { code: "payu_latam_session_mismatch", value: null };
+    if (!absent(value, "creditCardTokenId") || value.isMasterpass === true || !absent(value, "masterpassObfuscateCreditCardNumber")) {
+        return { code: "payu_latam_saved_card", value: null };
+    }
+    if (NOT_THE_CARD_FORM.some((key) => !absent(value, key)) || membersRefusal(value) || !absent(value, "lendingDeviceToken") || !absent(value, "questionnaire") || !(absent(value, "registerLendingDevice") || value.registerLendingDevice === false))
+        return { code: "payu_latam_body_unsupported", value: null };
+    const brand = value.paymentMethodMain;
+    if (typeof brand !== "string" || !PAYU_LATAM_CARD_BRANDS.includes(brand))
+        return { code: "payu_latam_card_unsupported", value: null };
+    const card = cardRefusal(value.checkoutCreditCard, brand);
+    if (card !== null)
+        return { code: card, value: null };
+    if (value.installments !== 1 && value.installments !== "1")
+        return { code: "payu_latam_installments_unsupported", value: null };
+    if (!absent(value, "cardType") && !CARD_TYPES2.includes(value.cardType) || !absent(value, "internationalCard") && typeof value.internationalCard !== "boolean" || !absent(value, "creditCardCountry") && (typeof value.creditCardCountry !== "string" || !COUNTRY6.test(value.creditCardCountry)) || !absent(value, "transactionType") && value.transactionType !== "AUTHORIZATION_AND_CAPTURE" || !absent(value, "isMasterpass") && typeof value.isMasterpass !== "boolean" || typeof value.order.isTest !== "boolean")
+        return { code: "payu_latam_body_unsupported", value: null };
+    const extra = value.order.extraParameters;
+    if (!record30(extra) || !IS_TEST_TEXT[value.order.isTest].includes(extra.IS_TEST)) {
+        return { code: "payu_latam_body_unsupported", value: null };
+    }
+    if (value.isRegisterPayer === true)
+        return { code: "payu_latam_keep_on_file", value: null };
+    if (!absent(value, "isRegisterPayer") && value.isRegisterPayer !== false)
+        return { code: "payu_latam_body_unsupported", value: null };
+    if (target !== void 0 && target.environment === "production" && value.order.isTest)
+        return { code: "payu_latam_environment_mismatch", value: null };
+    return { code: null, value };
+}
+function payuLatamBodyVerdict(body, url) {
+    let target;
+    if (url !== void 0) {
+        target = payuLatamSubmitTarget(url);
+        if (target === null)
+            return refuse35("payu_latam_url_refused");
+        if (!PAYU_LATAM_COUNTRIES.includes(target.country))
+            return refuse35("payu_latam_country_unreviewed");
+    }
+    const { code } = judgeBody5(body, target);
+    return code === null ? CARD34 : refuse35(code);
+}
+// src/registration.js
+var PARTS = { psp: "id", definitions: "list", refusedOperations: "list", settlementReadback: "any", exactUrl: "rule", bodyGate: "rule", amount: "rule" };
+var PSP_ID = /^[a-z][a-z0-9_]*$/;
+var registrationProblems = (spec) => problemsOf(spec, PARTS);
+function problemsOf(spec, parts) {
+    if (!spec || typeof spec !== "object")
+        return ["a registration is an object"];
+    const psp = spec.psp;
+    if (typeof psp !== "string" || !PSP_ID.test(psp))
+        return [`${JSON.stringify(psp)} is not a processor id`];
+    const problems2 = Object.keys(spec).filter((key) => !(key in parts)).map((key) => `${psp}: ${key} is no registration part`);
+    for (const [key, kind] of Object.entries(parts)) {
+        const value = spec[key];
+        if (value === void 0)
+            continue;
+        if (kind === "rule" && typeof value !== "function")
+            problems2.push(`${psp}: ${key} is not a function`);
+        if (kind === "numbers" && !((Array.isArray(value) || value instanceof Set) && [...value].every((n) => typeof n === "string" && /^\d{12,19}$/.test(n)))) {
+            problems2.push(`${psp}: ${key} is not a list of card numbers`);
+        }
+    }
+    if ("definitions" in parts) {
+        if (!Array.isArray(spec.definitions) || spec.definitions.length === 0)
+            problems2.push(`${psp}: names no definition`);
+        else if (spec.definitions.some((definition) => definition?.psp !== psp))
+            problems2.push(`${psp}: a definition names another processor`);
+        for (const id of spec.refusedOperations ?? []) {
+            if (typeof id !== "string" || !id.startsWith(`${psp}.`))
+                problems2.push(`${psp}: ${JSON.stringify(id)} is not one of its operations`);
+        }
+    }
+    return problems2;
+}
+function registered(spec, parts) {
+    const problems2 = problemsOf(spec, parts);
+    if (problems2.length)
+        throw new Error(`payment-core registration refused: ${problems2.join("; ")}`);
+    return deepFreeze({ ...spec });
+}
+function registerProcessor(spec) {
+    return registered(spec, PARTS);
+}
+// src/processors/midtrans.js
+var MIDTRANS_PSP = "midtrans";
+var MIDTRANS_OPERATION = "midtrans.card_request";
+var MIDTRANS_TOKEN_URL = "https://api.midtrans.com/v2/token";
+var MIDTRANS_SANDBOX_TOKEN_URL = "https://api.sandbox.midtrans.com/v2/token";
+var MIDTRANS_TOKEN_KEYS = /* @__PURE__ */ Object.freeze(["card_cvv", "card_number", "card_exp_month", "card_exp_year", "installment_term"]);
+var BODY_LIMIT34 = 4096;
+var CARD_NUMBER17 = /^[0-9]{12,19}$/;
+var SECURITY_CODE22 = /^[0-9]{3,4}$/;
+var MONTH18 = /^(?:0[1-9]|1[0-2])$/;
+var YEAR19 = /^20[0-9]{2}$/;
+var TERM = /^[0-9]{1,3}$/;
+var record31 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own11 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var inOrder6 = (value, keys) => {
+    let at = 0;
+    for (const name of Object.keys(value)) {
+        while (at < keys.length && keys[at] !== name)
+            at += 1;
+        if (at === keys.length)
+            return false;
+        at += 1;
+    }
+    return true;
+};
+var refuse36 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD35 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function isMidtransTokenUrl(url) {
+    return url === MIDTRANS_TOKEN_URL || url === MIDTRANS_SANDBOX_TOKEN_URL;
+}
+function readBody20(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT34)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record31(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function midtransBodyVerdict(body) {
+    const value = readBody20(body);
+    if (value === null || !inOrder6(value, MIDTRANS_TOKEN_KEYS)) {
+        if (record31(value) && (own11(value, "token_id") || own11(value, "two_click")) && !own11(value, "card_number"))
+            return refuse36("midtrans_saved_card");
+        return refuse36("midtrans_body_unsupported");
+    }
+    if (!own11(value, "card_cvv") || !own11(value, "card_number") || !own11(value, "card_exp_month") || !own11(value, "card_exp_year")) {
+        return refuse36("midtrans_body_unsupported");
+    }
+    if (typeof value.card_cvv !== "string" || !SECURITY_CODE22.test(value.card_cvv) || typeof value.card_number !== "string" || !CARD_NUMBER17.test(value.card_number) || typeof value.card_exp_month !== "string" || !MONTH18.test(value.card_exp_month) || typeof value.card_exp_year !== "string" || !YEAR19.test(value.card_exp_year))
+        return refuse36("midtrans_body_unsupported");
+    if (own11(value, "installment_term") && (typeof value.installment_term !== "string" || !TERM.test(value.installment_term)))
+        return refuse36("midtrans_body_unsupported");
+    return CARD35;
+}
+var midtrans_default = /* @__PURE__ */ registerProcessor({
+    psp: MIDTRANS_PSP,
+    definitions: [
+        {
+            psp: "midtrans",
+            // Snap's token request, as the header above reads it. Sandbox has its own host, so the device sends a
+            // test-mode request only Midtrans' documented test cards (hostEnvironmentPinned, device-replay.js S7).
+            // Ships dark: served only to a client that declares `midtrans_card_token`, gated off for every org until an
+            // operator lists one (`midtrans:<org>`), and the backend's gate serves only Agentcard's own company until the
+            // token's publishable key is bound to the merchant (backend config.ts MIDTRANS_KEY_BOUND_TO_MERCHANT).
+            capability: "midtrans_card_token",
+            match: "api\\.(?:sandbox\\.)?midtrans\\.com/v2/token",
+            hosts: ["^api\\.midtrans\\.com$", "^api\\.sandbox\\.midtrans\\.com$"],
+            sandboxHosts: ["^api\\.sandbox\\.midtrans\\.com$"],
+            hostEnvironmentPinned: true,
+            encoding: "json",
+            // Snap's own headers: the publishable client key (Authorization Basic) and X-Service. Origin, Referer and
+            // cookies never ride.
+            passthroughHeaders: ["^authorization$", "^x-service$"],
+            jsonCardFields: [["card_number"]]
+        }
+    ],
+    // Only the cardholder's device sends a token, after a person approves; no reviewed list names midtrans.
+    refusedOperations: [MIDTRANS_OPERATION],
+    // Not surveyed: the token moves no money, and the merchant's own charge names its status by the order id alone.
+    settlementReadback: "not_surveyed",
+    exactUrl: isMidtransTokenUrl,
+    bodyGate: (url, body) => url !== void 0 && !isMidtransTokenUrl(url) ? { verdict: "refuse", code: "midtrans_url_refused" } : midtransBodyVerdict(body)
+});
+// src/processors/index.generated.js
+var REGISTERED_MODULES = Object.freeze({
+    midtrans: midtrans_default
+});
+// src/registry.js
+var REGISTERED_PROCESSORS = Object.values(REGISTERED_MODULES);
+var ids = REGISTERED_PROCESSORS.map((processor) => processor.psp);
+var problems = REGISTERED_PROCESSORS.flatMap(registrationProblems);
+for (const [name, processor] of Object.entries(REGISTERED_MODULES)) {
+    if (processor.psp !== name)
+        problems.push(`processors/${name}.js registers ${JSON.stringify(processor.psp)}`);
+}
+if (ids.some((id, i) => i > 0 && ids[i - 1] >= id))
+    problems.push(`registered processors out of id order: ${ids.join(", ")}`);
+if (problems.length)
+    throw new Error(`payment-core registry refused: ${problems.join("; ")}`);
+var BY_PSP = new Map(REGISTERED_PROCESSORS.map((processor) => [processor.psp, processor]));
+var REGISTERED_IDS = Object.freeze(ids);
+var REGISTERED_DEFINITIONS = Object.freeze(REGISTERED_PROCESSORS.flatMap((processor) => processor.definitions));
+var REGISTERED_REFUSED_OPERATIONS = Object.freeze(REGISTERED_PROCESSORS.flatMap((processor) => processor.refusedOperations ?? []));
+var REGISTERED_SETTLEMENT_READBACK = Object.freeze(REGISTERED_PROCESSORS.filter((processor) => processor.settlementReadback !== void 0).map((processor) => [processor.psp, processor.settlementReadback]));
+function registeredRule(psp, name) {
+    return typeof psp === "string" ? BY_PSP.get(psp)?.[name] : void 0;
+}
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -5100,6 +6186,8 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "toast_url_refused" };
         return toastBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === PAYU_LATAM_PSP)
+        return payuLatamBodyVerdict(body, url);
     if (recognizer && recognizer.psp === PADDLE_VGS_PSP) {
         if (url !== void 0 && !isPaddleVgsCardsUrl(url))
             return { verdict: "refuse", code: "paddle_vgs_url_refused" };
@@ -5183,6 +6271,11 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "xendit_url_refused" };
         return xenditBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === PAYMOB_PSP) {
+        if (url !== void 0 && !isPaymobPayUrl(url))
+            return { verdict: "refuse", code: "paymob_url_refused" };
+        return paymobBodyVerdict(body);
+    }
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {
@@ -5190,6 +6283,14 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "moneris_url_refused" };
         return monerisBodyVerdict(body);
     }
+    if (recognizer && recognizer.psp === TAPPAY_PSP) {
+        if (url !== void 0 && !isTappayGetPrimeUrl(url))
+            return { verdict: "refuse", code: "tappay_url_refused" };
+        return tappayBodyVerdict(body);
+    }
+    const ownGate = registeredRule(recognizer?.psp, "bodyGate");
+    if (ownGate)
+        return ownGate(url, body);
     if (!recognizer || recognizer.psp !== "elavon_converge")
         return null;
     if (url !== void 0 && !isConvergeProcessUrl(url))
@@ -5300,7 +6401,7 @@ function splitCardLeg(recognizer, body) {
     const absorb = list(split.absorb);
     const pass = list(split.pass);
     const sibling = list(split.siblingKeys);
-    const own10 = [];
+    const own12 = [];
     const seen = /* @__PURE__ */ new Set();
     for (const chunk of body.split("&")) {
         const eq = chunk.indexOf("=");
@@ -5317,13 +6418,13 @@ function splitCardLeg(recognizer, body) {
             return null;
         seen.add(key);
         if (!sibling.includes(key))
-            own10.push(key);
+            own12.push(key);
     }
-    if (own10.length === 0)
+    if (own12.length === 0)
         return null;
-    if (own10.every((key) => absorb.includes(key)))
+    if (own12.every((key) => absorb.includes(key)))
         return "absorb";
-    if (own10.every((key) => pass.includes(key)))
+    if (own12.every((key) => pass.includes(key)))
         return "pass";
     return null;
 }