@agent-cards/sdk 0.24.1 → 0.25.0

package/dist/stripe-checkout.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 13395ab9cfe5d3a197ccb1efe5cd2211ffa86ffdd727d65cfb175f967d52314d
+// artifact-sha256: b2ba367a9b8d1758f1deea226abb2ca6637b40a88aa0c5ee7f359e074f4c017e
 // src/deep-freeze.js
 function deepFreeze(value) {
     if (value && typeof value === "object" && !Object.isFrozen(value)) {
@@ -157,6 +157,96 @@ var aurus_default = /* @__PURE__ */ registerProcessor({
     bodyGate: (url, body) => url !== void 0 && !isAurusTokenUrl(url) ? refuse("aurus_url_refused") : aurusBodyVerdict(body),
     limitations: ["The card frame seals the card in the page under a public key its own script carries; the cardholder's device does not seal for Aurus yet, so a held request opens no approval that pays."]
 });
+// src/processors/bigcommerce.js
+var BIGCOMMERCE_PSP = "bigcommerce";
+var BIGCOMMERCE_OPERATION = "bigcommerce.card_request";
+var BIGCOMMERCE_PAYMENTS_URL = "https://payments.bigcommerce.com/api/public/v1/orders/payments";
+var BODY_LIMIT2 = 65536;
+var CARD_KEYS = /* @__PURE__ */ new Set([
+    "account_name",
+    "month",
+    "number",
+    "verification_value",
+    "year",
+    "customer_code",
+    "three_d_secure",
+    "hosted_form_nonce"
+]);
+var OTHER_INSTRUMENTS = /* @__PURE__ */ Object.freeze(["bigpay_token", "credit_card_token", "credit_card_cryptogram"]);
+var NUMBER = /^[0-9]{12,19}$/;
+var CURRENCY = /^[A-Z]{3}$/;
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse2 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD2 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function isBigcommercePaymentsUrl(url) {
+    return url === BIGCOMMERCE_PAYMENTS_URL;
+}
+function readBody2(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT2)
+        return null;
+    try {
+        const parsed = JSON.parse(body);
+        return record(parsed) && record(parsed.payment) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function bigcommerceBodyVerdict(body, url) {
+    if (url !== void 0 && !isBigcommercePaymentsUrl(url))
+        return refuse2("bigcommerce_url_refused");
+    const parsed = readBody2(body);
+    if (!parsed)
+        return refuse2("bigcommerce_body_unsupported");
+    const { payment } = parsed;
+    if (!own(payment, "credit_card"))
+        return CONTINUE;
+    const card = payment.credit_card;
+    if (!record(card) || OTHER_INSTRUMENTS.some((key) => own(payment, key)) || Object.keys(card).some((key) => !CARD_KEYS.has(key)) || typeof card.number !== "string" || !NUMBER.test(card.number)) {
+        return refuse2("bigcommerce_body_unsupported");
+    }
+    if (payment.vault_payment_instrument === true)
+        return refuse2("bigcommerce_keep_on_file");
+    return CARD2;
+}
+function bigcommerceAmount(template) {
+    const parsed = record(template) ? readBody2(template.body) : null;
+    const order = parsed && record(parsed.order) ? parsed.order : null;
+    const total = order && record(order.totals) ? order.totals.grand_total : void 0;
+    if (!Number.isSafeInteger(total) || total <= 0 || typeof order.currency !== "string" || !CURRENCY.test(order.currency))
+        return null;
+    return { amountCents: total, currency: order.currency.toLowerCase() };
+}
+var bigcommerce_default = /* @__PURE__ */ registerProcessor({
+    psp: BIGCOMMERCE_PSP,
+    definitions: [
+        {
+            psp: "bigcommerce",
+            // The card request above. One host serves every BigCommerce store, test and live alike, so no sandbox host is
+            // marked. Ships dark: served only to a client that declares `bigcommerce_card_form`, for a company the backend's
+            // processor gate turns BigCommerce on for. `(?![\w/.%-])` ends the path for a consumer that tests `match`
+            // unanchored; the exact-URL rule holds the rest.
+            capability: "bigcommerce_card_form",
+            match: "payments\\.bigcommerce\\.com/api/public/v1/orders/payments(?![\\w/.%-])",
+            hosts: ["^payments\\.bigcommerce\\.com$"],
+            encoding: "json",
+            // The order's payment token and the JSON Accept. Origin, Referer and cookies never ride.
+            passthroughHeaders: ["^authorization$", "^accept$"],
+            jsonCardFields: [["payment", "credit_card", "number"]],
+            // A payment with no new card on the same URL continues untouched (bigcommerceBodyVerdict says which).
+            passWithoutCard: "payments\\.bigcommerce\\.com/api/public/v1/orders/payments"
+        }
+    ],
+    // The request charges the store's gateway at once, so only the cardholder's device sends it, after a person approves.
+    refusedOperations: [BIGCOMMERCE_OPERATION],
+    // Not surveyed: reading a BigCommerce payment back takes the store's own API credentials, which Agentcard never holds.
+    settlementReadback: "not_surveyed",
+    exactUrl: isBigcommercePaymentsUrl,
+    bodyGate: (url, body) => bigcommerceBodyVerdict(body, url),
+    amount: bigcommerceAmount
+});
 // src/processors/bluesnap.js
 var BLUESNAP_PSP = "bluesnap";
 var BLUESNAP_OPERATION = "bluesnap.card_request";
@@ -164,16 +254,16 @@ var BLUESNAP_HOSTS = /* @__PURE__ */ Object.freeze({ 1: "ws1.bluesnap.com", 2: "
 var BLUESNAP_SANDBOX_HOST = "sandpay.bluesnap.com";
 var BLUESNAP_CARD_KEYS = /* @__PURE__ */ Object.freeze(["cvv", "ccNumber", "expDate"]);
 var BLUESNAP_LEG_KEYS = /* @__PURE__ */ Object.freeze(["cvv", "expDate"]);
-var BODY_LIMIT2 = 1024;
+var BODY_LIMIT3 = 1024;
 var TOKEN_URL = /^https:\/\/(ws1|ws2|sandpay)\.bluesnap\.com\/services\/2\/payment-fields-tokens\/([0-9a-f]{64}_[12]?)$/;
 var CARD_NUMBER = /^[0-9]{12,19}$/;
 var SECURITY_CODE = /^[0-9]{3,4}$/;
 var EXPIRY = /^(?:0[1-9]|1[0-2])\/20[0-9]{2}$/;
 var SAVED_CARD_KEYS = ["last4Digits", "lastFourDigits", "ccType"];
-var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse2 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD2 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var record2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own2 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse3 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD3 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 var LEG = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
 function bluesnapTokenUrl(url) {
     const match = typeof url === "string" ? TOKEN_URL.exec(url) : null;
@@ -185,30 +275,30 @@ function bluesnapTokenUrl(url) {
 function isBluesnapTokenUrl(url) {
     return bluesnapTokenUrl(url) !== null;
 }
-function readBody2(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT2)
+function readBody3(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT3)
         return null;
     try {
         const value = JSON.parse(body);
-        return record(value) && JSON.stringify(value) === body ? value : null;
+        return record2(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
     }
 }
 function bluesnapBodyVerdict(body) {
-    const value = readBody2(body);
+    const value = readBody3(body);
     if (value === null)
-        return refuse2("bluesnap_body_unsupported");
+        return refuse3("bluesnap_body_unsupported");
     const keys = Object.keys(value);
     if (keys.some((key) => SAVED_CARD_KEYS.includes(key)))
-        return refuse2(own(value, "ccNumber") ? "bluesnap_body_unsupported" : "bluesnap_saved_card");
+        return refuse3(own2(value, "ccNumber") ? "bluesnap_body_unsupported" : "bluesnap_saved_card");
     if (keys.length === 0 || keys.some((key, i) => !BLUESNAP_CARD_KEYS.includes(key) || i > 0 && BLUESNAP_CARD_KEYS.indexOf(keys[i - 1]) >= BLUESNAP_CARD_KEYS.indexOf(key))) {
-        return refuse2("bluesnap_body_unsupported");
+        return refuse3("bluesnap_body_unsupported");
     }
-    if (own(value, "ccNumber") && !(typeof value.ccNumber === "string" && CARD_NUMBER.test(value.ccNumber)) || own(value, "cvv") && !(typeof value.cvv === "string" && SECURITY_CODE.test(value.cvv)) || own(value, "expDate") && !(typeof value.expDate === "string" && EXPIRY.test(value.expDate)))
-        return refuse2("bluesnap_body_unsupported");
-    return own(value, "ccNumber") ? CARD2 : LEG;
+    if (own2(value, "ccNumber") && !(typeof value.ccNumber === "string" && CARD_NUMBER.test(value.ccNumber)) || own2(value, "cvv") && !(typeof value.cvv === "string" && SECURITY_CODE.test(value.cvv)) || own2(value, "expDate") && !(typeof value.expDate === "string" && EXPIRY.test(value.expDate)))
+        return refuse3("bluesnap_body_unsupported");
+    return own2(value, "ccNumber") ? CARD3 : LEG;
 }
 var bluesnap_default = /* @__PURE__ */ registerProcessor({
     psp: BLUESNAP_PSP,
@@ -312,7 +402,7 @@ var REQUIRED = Object.freeze([
     "ekashu_failure_url",
     "ekashu_callback_success_url"
 ]);
-var CARD_KEYS = Object.freeze([
+var CARD_KEYS2 = Object.freeze([
     "ekashu_card_number",
     "ekashu_expires_end_month",
     "ekashu_expires_end_year",
@@ -514,7 +604,7 @@ var CURRENCIES2 = Object.freeze({ EUR: "eur" });
 var MAX_URL = 512;
 var MAX_ENTRY3 = 8 * 1024;
 var MAX_VALUE = 256;
-var own2 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var own3 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var field = (name, reason) => ({ ok: false, code: "hosted_form_field_refused", field: name, reason });
 function cardlinkVposEntryHost(raw) {
     if (typeof raw !== "string" || raw.length > MAX_URL || raw.includes("?") || raw.includes("#"))
@@ -526,7 +616,7 @@ function cardlinkVposEntryHost(raw) {
     catch {
         return null;
     }
-    if (url.href !== raw || url.protocol !== "https:" || url.port || url.username || url.password || !own2(CARDLINK_VPOS_HOSTS, url.hostname) || url.pathname !== CARDLINK_VPOS_ENTRY_PATH)
+    if (url.href !== raw || url.protocol !== "https:" || url.port || url.username || url.password || !own3(CARDLINK_VPOS_HOSTS, url.hostname) || url.pathname !== CARDLINK_VPOS_ENTRY_PATH)
         return null;
     return url.hostname;
 }
@@ -569,7 +659,7 @@ function cardlinkVposMerchant(mid, vposHost, merchants = CARDLINK_VPOS_MERCHANTS
 function entryAmount(values) {
     const amount = values.get("orderAmount");
     const code = values.get("currency");
-    const currency = typeof code === "string" && own2(CURRENCIES2, code) ? CURRENCIES2[code] : null;
+    const currency = typeof code === "string" && own3(CURRENCIES2, code) ? CURRENCIES2[code] : null;
     if (!currency || typeof amount !== "string" || !/^(?:0|[1-9]\d{0,11})(?:\.\d{1,2})?$/.test(amount))
         return null;
     const [whole, fraction = ""] = amount.split(".");
@@ -624,7 +714,7 @@ function checkCardlinkVposEntry(body, { url = null, merchants = CARDLINK_VPOS_ME
         return field("payMethod", /^iris$/i.test(method) ? "not_a_card_payment" : "special_flow");
     const amount = entryAmount(values);
     if (!amount)
-        return field(own2(CURRENCIES2, values.get("currency")) ? "orderAmount" : "currency", "malformed");
+        return field(own3(CURRENCIES2, values.get("currency")) ? "orderAmount" : "currency", "malformed");
     if (!/^\d{1,30}$/.test(values.get("mid")))
         return field("mid", "malformed");
     if (!/^[A-Za-z0-9]{1,50}$/.test(values.get("orderid")))
@@ -661,16 +751,16 @@ var CARDLINK_VPOS_TDS2_FIELDS = Object.freeze([
 ]);
 var PAGE_FIELDS = Object.freeze(["trid", "st", "payStep", "cmd", "startbonus", "bonusdata"]);
 var WALLET_FIELDS = Object.freeze(["walletId", "applePayResponse"]);
-var CARD3 = Object.freeze({ number: "card.pan", holder: "card.holderName", month: "card.expiryMonth", year: "card.expiryYear", cvc: "card.cvv" });
-var TEXT_CONTROLS = /* @__PURE__ */ new Set([CARD3.number, CARD3.holder, CARD3.cvc]);
-var SELECT_CONTROLS = /* @__PURE__ */ new Set([CARD3.month, CARD3.year]);
+var CARD4 = Object.freeze({ number: "card.pan", holder: "card.holderName", month: "card.expiryMonth", year: "card.expiryYear", cvc: "card.cvv" });
+var TEXT_CONTROLS = /* @__PURE__ */ new Set([CARD4.number, CARD4.holder, CARD4.cvc]);
+var SELECT_CONTROLS = /* @__PURE__ */ new Set([CARD4.month, CARD4.year]);
 var MAX_PAGE3 = 256 * 1024;
 var COOKIE_DOMAINS = Object.freeze({
     "vpos.eurocommerce.gr": "eurocommerce.gr",
     "ecommerce.cardlink.gr": "cardlink.gr",
     "www.alphaecommerce.gr": "alphaecommerce.gr"
 });
-var POST_REQUIRED = Object.freeze(["trid", "st", "cmd", CARD3.number, CARD3.holder, CARD3.month, CARD3.year, CARD3.cvc, "makepayment"]);
+var POST_REQUIRED = Object.freeze(["trid", "st", "cmd", CARD4.number, CARD4.holder, CARD4.month, CARD4.year, CARD4.cvc, "makepayment"]);
 var POST_EMPTY = Object.freeze(["payStep", "startbonus", "bonusdata", ...WALLET_FIELDS]);
 var POST_ALLOWED = /* @__PURE__ */ new Set([...POST_REQUIRED, ...POST_EMPTY, "paymentMethod", ...CARDLINK_VPOS_TDS2_FIELDS]);
 var CARDLINK_VPOS_REFUSALS = Object.freeze([
@@ -800,7 +890,7 @@ var REQUIRED4 = Object.freeze([
     "CurrencyCode",
     "HashValue"
 ]);
-var CARD_KEYS2 = /* @__PURE__ */ new Set(["cardno", "cardexp", "cardcvv2", "cardholder", "param2", "param4", "cvv2", "epmonth2", "epyear2", "custocp"]);
+var CARD_KEYS3 = /* @__PURE__ */ new Set(["cardno", "cardexp", "cardcvv2", "cardholder", "param2", "param4", "cvv2", "epmonth2", "epyear2", "custocp"]);
 var SECRET_KEYS = /* @__PURE__ */ new Set(["password"]);
 var STORED_KEYS2 = /* @__PURE__ */ new Set([
     "tokentype",
@@ -857,7 +947,7 @@ function checkEghlEntry(body, { url = null, merchants = EGHL_MERCHANTS } = {}) {
         if (value === "")
             continue;
         const folded = key.toLowerCase();
-        if (CARD_KEYS2.has(folded))
+        if (CARD_KEYS3.has(folded))
             return field2(key, "card_in_entry");
         if (SECRET_KEYS.has(folded))
             return field2(key, "not_an_entry");
@@ -989,7 +1079,7 @@ var FRISBII_REFUSED_PATHS = /* @__PURE__ */ Object.freeze({
     "/v1/token/cof/": "frisbii_stored_card_unsupported",
     "/v1/token/create_click_to_pay": "frisbii_click_to_pay_unsupported"
 });
-var BODY_LIMIT3 = 8192;
+var BODY_LIMIT4 = 8192;
 var URL_LIMIT2 = 256;
 var CARD_NUMBER2 = /^[0-9]{12,19}$/;
 var MONTH = /^(?:0[1-9]|1[0-2])$/;
@@ -1033,13 +1123,13 @@ var BROWSER_ORDER = /* @__PURE__ */ Object.freeze([
     "tz"
 ]);
 var LABEL = /^[A-Za-z0-9_-]{1,64}$/;
-var record2 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own3 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse3 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD4 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own4 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD5 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 var text = (value, max) => typeof value === "string" && value.length <= max;
 var absentOrNull = (value) => value === void 0 || value === null;
-var inOrder = (value, order) => Object.keys(value).every((key) => order.includes(key)) && Object.keys(value).join() === order.filter((key) => own3(value, key)).join();
+var inOrder = (value, order) => Object.keys(value).every((key) => order.includes(key)) && Object.keys(value).join() === order.filter((key) => own4(value, key)).join();
 function frisbiiTokenUrl(url) {
     if (typeof url !== "string" || url.length > URL_LIMIT2 || url.includes("#"))
         return null;
@@ -1050,7 +1140,7 @@ function frisbiiTokenUrl(url) {
     catch {
         return null;
     }
-    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own3(FRISBII_HOSTS, parsed.hostname) || parsed.pathname !== FRISBII_TOKEN_PATH)
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own4(FRISBII_HOSTS, parsed.hostname) || parsed.pathname !== FRISBII_TOKEN_PATH)
         return null;
     const match = /^\?session=([A-Za-z0-9_-]{8,128})$/.exec(parsed.search);
     return match ? Object.freeze({ host: parsed.hostname, brand: FRISBII_HOSTS[parsed.hostname], session: match[1] }) : null;
@@ -1066,7 +1156,7 @@ function frisbiiRefusedFlowUrl(url) {
     catch {
         return null;
     }
-    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own3(FRISBII_HOSTS, parsed.hostname) || !own3(FRISBII_REFUSED_PATHS, parsed.pathname))
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own4(FRISBII_HOSTS, parsed.hostname) || !own4(FRISBII_REFUSED_PATHS, parsed.pathname))
         return null;
     return FRISBII_REFUSED_PATHS[parsed.pathname];
 }
@@ -1080,28 +1170,28 @@ function luhn(digits2) {
     }
     return sum % 10 === 0;
 }
-function readBody3(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT3)
+function readBody4(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT4)
         return null;
     try {
         const value = JSON.parse(body);
-        return record2(value) && JSON.stringify(value) === body ? value : null;
+        return record3(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
     }
 }
 function browserInfo(info) {
-    return record2(info) && Object.keys(info).join() === BROWSER_ORDER.join() && info.javascriptEnabled === true && typeof info.javaEnabled === "boolean" && /^size_[0-9]{3}x[0-9]{3}$/.test(info.challengeWindowSize) && [info.colorDepth, info.screenHeight, info.screenWidth].every((n) => Number.isSafeInteger(n) && n >= 0 && n <= 1e5) && Number.isSafeInteger(info.tz) && Math.abs(info.tz) <= 1440;
+    return record3(info) && Object.keys(info).join() === BROWSER_ORDER.join() && info.javascriptEnabled === true && typeof info.javaEnabled === "boolean" && /^size_[0-9]{3}x[0-9]{3}$/.test(info.challengeWindowSize) && [info.colorDepth, info.screenHeight, info.screenWidth].every((n) => Number.isSafeInteger(n) && n >= 0 && n <= 1e5) && Number.isSafeInteger(info.tz) && Math.abs(info.tz) <= 1440;
 }
 function scaBlock(block, target) {
-    if (!record2(block) || !inOrder(block, SCA_ORDER) || !own3(block, "returnUrl") || !own3(block, "tokenBrowserInfo"))
+    if (!record3(block) || !inOrder(block, SCA_ORDER) || !own4(block, "returnUrl") || !own4(block, "tokenBrowserInfo"))
         return false;
     if (!Number.isSafeInteger(block.amount) || block.amount < 0 || typeof block.currency !== "string" || !/^[A-Z]{3}$/.test(block.currency))
         return false;
     if (!(absentOrNull(block.orderId) || text(block.orderId, 128)) || !(absentOrNull(block.orderText) || text(block.orderText, 512)))
         return false;
-    if (!(absentOrNull(block.merchantScaData) || record2(block.merchantScaData)))
+    if (!(absentOrNull(block.merchantScaData) || record3(block.merchantScaData)))
         return false;
     if (!text(block.returnUrl, 2048) || !browserInfo(block.tokenBrowserInfo))
         return false;
@@ -1109,16 +1199,16 @@ function scaBlock(block, target) {
     return back !== null && (target === null || back[1] === target.brand && back[2] === target.session);
 }
 function frisbiiBodyVerdict(body, url) {
-    const value = readBody3(body);
-    if (value === null || !inOrder(value, BODY_ORDER) || !BODY_REQUIRED.every((key) => own3(value, key)) || BODY_REFUSED.some((key) => own3(value, key)))
-        return refuse3("frisbii_body_unsupported");
+    const value = readBody4(body);
+    if (value === null || !inOrder(value, BODY_ORDER) || !BODY_REQUIRED.every((key) => own4(value, key)) || BODY_REFUSED.some((key) => own4(value, key)))
+        return refuse4("frisbii_body_unsupported");
     if (value.recurring === true || value.intent === "CHARGE_AND_STORE")
-        return refuse3("frisbii_card_on_file");
+        return refuse4("frisbii_card_on_file");
     const target = url === void 0 ? null : frisbiiTokenUrl(url);
     if (url !== void 0 && target === null)
-        return refuse3("frisbii_body_unsupported");
+        return refuse4("frisbii_body_unsupported");
     const sound = typeof value.number === "string" && CARD_NUMBER2.test(value.number) && luhn(value.number) && typeof value.month === "string" && MONTH.test(value.month) && typeof value.year === "string" && YEAR.test(value.year) && typeof value.cvv === "string" && SECURITY_CODE2.test(value.cvv) && typeof value.pkey === "string" && IDENTIFIER.test(value.pkey) && value.recurring === false && (value.cardholder_name === void 0 || text(value.cardholder_name, 64)) && (value.intent === void 0 || value.intent === "CHARGE") && (absentOrNull(value.recurringAverageAmount) || Number.isSafeInteger(value.recurringAverageAmount) && value.recurringAverageAmount >= 0) && (absentOrNull(value.agreementFilter) || typeof value.agreementFilter === "string" && LABEL.test(value.agreementFilter) || Array.isArray(value.agreementFilter) && value.agreementFilter.length <= 16 && value.agreementFilter.every((entry) => typeof entry === "string" && LABEL.test(entry))) && SCA_RULES.includes(value.strongAuthenticationRule) && (value.tokenStrongAuthenticationRequest === void 0 || scaBlock(value.tokenStrongAuthenticationRequest, target));
-    return sound ? CARD4 : refuse3("frisbii_body_unsupported");
+    return sound ? CARD5 : refuse4("frisbii_body_unsupported");
 }
 var frisbii_default = /* @__PURE__ */ registerProcessor({
     psp: FRISBII_PSP,
@@ -1153,8 +1243,8 @@ var frisbii_default = /* @__PURE__ */ registerProcessor({
             return frisbiiBodyVerdict(body);
         const flow = frisbiiRefusedFlowUrl(url);
         if (flow !== null)
-            return refuse3(flow);
-        return isFrisbiiTokenUrl(url) ? frisbiiBodyVerdict(body, url) : refuse3("frisbii_url_refused");
+            return refuse4(flow);
+        return isFrisbiiTokenUrl(url) ? frisbiiBodyVerdict(body, url) : refuse4("frisbii_url_refused");
     },
     limitations: ["A live Frisbii card goes only to a merchant account a reviewed pin lists, and none is pinned yet."]
 });
@@ -1183,7 +1273,7 @@ var IYZICO_CARD_KEYS = /* @__PURE__ */ Object.freeze([
     "registerConsumerCard",
     "registerCard"
 ]);
-var BODY_LIMIT4 = 4096;
+var BODY_LIMIT5 = 4096;
 var CARD_NUMBER3 = /^[0-9]{12,19}$/;
 var SECURITY_CODE3 = /^[0-9]{3,4}$/;
 var MONTH2 = /^(?:0?[1-9]|1[0-2])$/;
@@ -1193,8 +1283,8 @@ var CHANNELS = /* @__PURE__ */ Object.freeze(["WEB", "MOBILE_WEB", "MOBILE_IOS",
 var METADATA_KEYS = /* @__PURE__ */ Object.freeze(["lightRedesign", "pwiGrowthActionDisabled"]);
 var FLAG = /^[A-Za-z_]{1,16}$/;
 var HOLDER = /^[^\x00-\x1f\x7f0-9]{3,100}$/u;
-var record3 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own4 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var inOrder2 = (value, keys) => {
     let at = 0;
     for (const name of Object.keys(value)) {
@@ -1206,17 +1296,17 @@ var inOrder2 = (value, keys) => {
     }
     return true;
 };
-var refuse4 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD5 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var refuse5 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function isIyzicoCardUrl(url) {
     return typeof url === "string" && IYZICO_CARD_URLS.includes(url);
 }
-function readBody4(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT4)
+function readBody5(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT5)
         return null;
     try {
         const value = JSON.parse(body);
-        return record3(value) && JSON.stringify(value) === body ? value : null;
+        return record4(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
@@ -1228,26 +1318,26 @@ function hundredths(price) {
     return value > 0 ? value : null;
 }
 var holderName = (name) => typeof name === "string" && HOLDER.test(name) && name.trim().split(/\s+/).filter((word) => word.length > 1).length > 1;
-var metadata = (value) => record3(value) && inOrder2(value, METADATA_KEYS) && Object.values(value).every((flag) => Array.isArray(flag) && flag.length === 1 && typeof flag[0] === "string" && FLAG.test(flag[0]));
+var metadata = (value) => record4(value) && inOrder2(value, METADATA_KEYS) && Object.values(value).every((flag) => Array.isArray(flag) && flag.length === 1 && typeof flag[0] === "string" && FLAG.test(flag[0]));
 function iyzicoBodyVerdict(body) {
-    const value = readBody4(body);
+    const value = readBody5(body);
     if (value === null)
-        return refuse4("iyzico_body_unsupported");
+        return refuse5("iyzico_body_unsupported");
     const card = value.paymentCard;
-    if (record3(card) && (own4(card, "cardToken") || own4(card, "ucsToken") || own4(card, "consumerToken")) && !own4(card, "cardNumber"))
-        return refuse4("iyzico_saved_card");
-    if (own4(value, "dccPayment") || own4(value, "dccQueryRrn"))
-        return refuse4("iyzico_dcc_refused");
-    if (own4(value, "gsmNumber") || own4(value, "buyerProtected") && value.buyerProtected !== false || record3(card) && (own4(card, "registerCard") && card.registerCard !== 0 || own4(card, "registerConsumerCard") && card.registerConsumerCard !== false)) {
-        return refuse4("iyzico_keeps_card");
+    if (record4(card) && (own5(card, "cardToken") || own5(card, "ucsToken") || own5(card, "consumerToken")) && !own5(card, "cardNumber"))
+        return refuse5("iyzico_saved_card");
+    if (own5(value, "dccPayment") || own5(value, "dccQueryRrn"))
+        return refuse5("iyzico_dcc_refused");
+    if (own5(value, "gsmNumber") || own5(value, "buyerProtected") && value.buyerProtected !== false || record4(card) && (own5(card, "registerCard") && card.registerCard !== 0 || own5(card, "registerConsumerCard") && card.registerConsumerCard !== false)) {
+        return refuse5("iyzico_keeps_card");
     }
     if (Number.isSafeInteger(value.installment) && value.installment > 1)
-        return refuse4("iyzico_installments_refused");
-    if (!inOrder2(value, IYZICO_BODY_KEYS) || !["installment", "paidPrice", "paymentChannel", "paymentCard"].every((key) => own4(value, key)) || value.installment !== 1 || hundredths(value.paidPrice) === null || !CHANNELS.includes(value.paymentChannel) || own4(value, "pwiMetadata") && !metadata(value.pwiMetadata))
-        return refuse4("iyzico_body_unsupported");
-    if (!record3(card) || Object.keys(card).join() !== IYZICO_CARD_KEYS.join() || typeof card.cardNumber !== "string" || !CARD_NUMBER3.test(card.cardNumber) || !holderName(card.cardHolderName) || typeof card.expireYear !== "string" || !YEAR2.test(card.expireYear) || typeof card.expireMonth !== "string" || !MONTH2.test(card.expireMonth) || typeof card.cvc !== "string" || !SECURITY_CODE3.test(card.cvc))
-        return refuse4("iyzico_body_unsupported");
-    return CARD5;
+        return refuse5("iyzico_installments_refused");
+    if (!inOrder2(value, IYZICO_BODY_KEYS) || !["installment", "paidPrice", "paymentChannel", "paymentCard"].every((key) => own5(value, key)) || value.installment !== 1 || hundredths(value.paidPrice) === null || !CHANNELS.includes(value.paymentChannel) || own5(value, "pwiMetadata") && !metadata(value.pwiMetadata))
+        return refuse5("iyzico_body_unsupported");
+    if (!record4(card) || Object.keys(card).join() !== IYZICO_CARD_KEYS.join() || typeof card.cardNumber !== "string" || !CARD_NUMBER3.test(card.cardNumber) || !holderName(card.cardHolderName) || typeof card.expireYear !== "string" || !YEAR2.test(card.expireYear) || typeof card.expireMonth !== "string" || !MONTH2.test(card.expireMonth) || typeof card.cvc !== "string" || !SECURITY_CODE3.test(card.cvc))
+        return refuse5("iyzico_body_unsupported");
+    return CARD6;
 }
 var iyzico_default = /* @__PURE__ */ registerProcessor({
     psp: IYZICO_PSP,
@@ -1280,7 +1370,7 @@ var iyzico_default = /* @__PURE__ */ registerProcessor({
         source: "https://docs.iyzico.com/en/payment-methods/checkoutform/cf-implementation/cf-retrieve"
     },
     exactUrl: isIyzicoCardUrl,
-    bodyGate: (url, body) => url !== void 0 && !isIyzicoCardUrl(url) ? refuse4("iyzico_url_refused") : iyzicoBodyVerdict(body)
+    bodyGate: (url, body) => url !== void 0 && !isIyzicoCardUrl(url) ? refuse5("iyzico_url_refused") : iyzicoBodyVerdict(body)
 });
 // src/processors/midtrans.js
 var MIDTRANS_PSP = "midtrans";
@@ -1288,14 +1378,14 @@ var MIDTRANS_OPERATION = "midtrans.card_request";
 var MIDTRANS_TOKEN_URL = "https://api.midtrans.com/v2/token";
 var MIDTRANS_SANDBOX_TOKEN_URL = "https://api.sandbox.midtrans.com/v2/token";
 var MIDTRANS_TOKEN_KEYS = /* @__PURE__ */ Object.freeze(["card_cvv", "card_number", "card_exp_month", "card_exp_year", "installment_term"]);
-var BODY_LIMIT5 = 4096;
+var BODY_LIMIT6 = 4096;
 var CARD_NUMBER4 = /^[0-9]{12,19}$/;
 var SECURITY_CODE4 = /^[0-9]{3,4}$/;
 var MONTH3 = /^(?:0[1-9]|1[0-2])$/;
 var YEAR3 = /^20[0-9]{2}$/;
 var TERM = /^[0-9]{1,3}$/;
-var record4 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var record5 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var inOrder3 = (value, keys) => {
     let at = 0;
     for (const name of Object.keys(value)) {
@@ -1307,18 +1397,18 @@ var inOrder3 = (value, keys) => {
     }
     return true;
 };
-var refuse5 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD6 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var refuse6 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD7 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function isMidtransTokenUrl(url) {
     return url === MIDTRANS_TOKEN_URL || url === MIDTRANS_SANDBOX_TOKEN_URL;
 }
-function readBody5(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT5)
+function readBody6(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT6)
         return null;
     let value;
     try {
         value = JSON.parse(body);
-        if (!record4(value) || JSON.stringify(value) !== body)
+        if (!record5(value) || JSON.stringify(value) !== body)
             return null;
     }
     catch {
@@ -1327,20 +1417,20 @@ function readBody5(body) {
     return value;
 }
 function midtransBodyVerdict(body) {
-    const value = readBody5(body);
+    const value = readBody6(body);
     if (value === null || !inOrder3(value, MIDTRANS_TOKEN_KEYS)) {
-        if (record4(value) && (own5(value, "token_id") || own5(value, "two_click")) && !own5(value, "card_number"))
-            return refuse5("midtrans_saved_card");
-        return refuse5("midtrans_body_unsupported");
+        if (record5(value) && (own6(value, "token_id") || own6(value, "two_click")) && !own6(value, "card_number"))
+            return refuse6("midtrans_saved_card");
+        return refuse6("midtrans_body_unsupported");
     }
-    if (!own5(value, "card_cvv") || !own5(value, "card_number") || !own5(value, "card_exp_month") || !own5(value, "card_exp_year")) {
-        return refuse5("midtrans_body_unsupported");
+    if (!own6(value, "card_cvv") || !own6(value, "card_number") || !own6(value, "card_exp_month") || !own6(value, "card_exp_year")) {
+        return refuse6("midtrans_body_unsupported");
     }
     if (typeof value.card_cvv !== "string" || !SECURITY_CODE4.test(value.card_cvv) || typeof value.card_number !== "string" || !CARD_NUMBER4.test(value.card_number) || typeof value.card_exp_month !== "string" || !MONTH3.test(value.card_exp_month) || typeof value.card_exp_year !== "string" || !YEAR3.test(value.card_exp_year))
-        return refuse5("midtrans_body_unsupported");
-    if (own5(value, "installment_term") && (typeof value.installment_term !== "string" || !TERM.test(value.installment_term)))
-        return refuse5("midtrans_body_unsupported");
-    return CARD6;
+        return refuse6("midtrans_body_unsupported");
+    if (own6(value, "installment_term") && (typeof value.installment_term !== "string" || !TERM.test(value.installment_term)))
+        return refuse6("midtrans_body_unsupported");
+    return CARD7;
 }
 var midtrans_default = /* @__PURE__ */ registerProcessor({
     psp: MIDTRANS_PSP,
@@ -1375,20 +1465,20 @@ var midtrans_default = /* @__PURE__ */ registerProcessor({
 var MONEI_PSP = "monei";
 var MONEI_OPERATION = "monei.card_request";
 var MONEI_TOKENS_URL = "https://api.monei.com/v1/tokens";
-var BODY_LIMIT6 = 1024;
+var BODY_LIMIT7 = 1024;
 var PAYMENT_ID = /^(?:[0-9a-f]{32}|[0-9a-f]{40})$/;
 var MONEI_CARD_KEYS = /* @__PURE__ */ Object.freeze(["number", "expMonth", "expYear", "cvc"]);
-var NUMBER = /^[0-9]{12,19}$/;
+var NUMBER2 = /^[0-9]{12,19}$/;
 var MONTH4 = /^(?:0[1-9]|1[0-2])$/;
 var YEAR4 = /^[0-9]{2}$/;
 var CODE = /^[0-9]{3,4}$/;
-var record5 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var keysAre = (value, keys) => {
     const found = Object.keys(value);
     return found.length === keys.length && found.every((key, at) => key === keys[at]);
 };
-var refuse6 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD7 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD8 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function luhn2(digits2) {
     let sum = 0;
     for (let at = 0; at < digits2.length; at += 1) {
@@ -1405,12 +1495,12 @@ function luhn2(digits2) {
 function isMoneiTokensUrl(url) {
     return url === MONEI_TOKENS_URL;
 }
-function readBody6(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT6)
+function readBody7(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
         return null;
     try {
         const value = JSON.parse(body);
-        return record5(value) && JSON.stringify(value) === body ? value : null;
+        return record6(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
@@ -1418,19 +1508,19 @@ function readBody6(body) {
 }
 function moneiBodyVerdict(body, url) {
     if (url !== void 0 && !isMoneiTokensUrl(url))
-        return refuse6("monei_url_refused");
-    const value = readBody6(body);
+        return refuse7("monei_url_refused");
+    const value = readBody7(body);
     if (value === null || !keysAre(value, ["paymentId", "paymentMethod"]) || typeof value.paymentId !== "string" || !PAYMENT_ID.test(value.paymentId))
-        return refuse6("monei_body_unsupported");
+        return refuse7("monei_body_unsupported");
     const method = value.paymentMethod;
-    if (!record5(method) || !keysAre(method, ["card"]) || !record5(method.card) || !keysAre(method.card, MONEI_CARD_KEYS))
-        return refuse6("monei_body_unsupported");
+    if (!record6(method) || !keysAre(method, ["card"]) || !record6(method.card) || !keysAre(method.card, MONEI_CARD_KEYS))
+        return refuse7("monei_body_unsupported");
     const { number, expMonth, expYear, cvc } = method.card;
     if (![number, expMonth, expYear, cvc].every((part) => typeof part === "string"))
-        return refuse6("monei_body_unsupported");
-    if (!NUMBER.test(number) || !luhn2(number) || !MONTH4.test(expMonth) || !YEAR4.test(expYear) || !CODE.test(cvc))
-        return refuse6("monei_body_unsupported");
-    return CARD7;
+        return refuse7("monei_body_unsupported");
+    if (!NUMBER2.test(number) || !luhn2(number) || !MONTH4.test(expMonth) || !YEAR4.test(expYear) || !CODE.test(cvc))
+        return refuse7("monei_body_unsupported");
+    return CARD8;
 }
 var MONEI_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
     Object.freeze({ merchant: "Genuins", accountIds: Object.freeze(["8d58ab4c-4ad0-4053-b18f-79d80e9ee158"]), merchantUrls: Object.freeze(["https://genuins.com/"]) })
@@ -1494,9 +1584,9 @@ var OCEANPAYMENT_FORM_FIELDS = /* @__PURE__ */ Object.freeze([
     "reference"
 ]);
 var URL_LIMIT3 = 2048;
-var BODY_LIMIT7 = 8192;
+var BODY_LIMIT8 = 8192;
 var SEND_PAY = /^\/gateway\/sendPay;jsessionid=[A-Za-z0-9._!-]{16,128}$/;
-var own6 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var own7 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var exact = (pattern, value) => typeof value === "string" && pattern.test(value);
 var CARD_RUN = /[0-9]{12}/;
 var printable = (max) => (value) => typeof value === "string" && value.length <= max && /^[\x20-\x7e]*$/.test(value) && !CARD_RUN.test(value);
@@ -1543,7 +1633,7 @@ function oceanpaymentSendPayUrl(url) {
     catch {
         return null;
     }
-    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own6(OCEANPAYMENT_HOSTS, parsed.hostname) || !SEND_PAY.test(parsed.pathname))
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own7(OCEANPAYMENT_HOSTS, parsed.hostname) || !SEND_PAY.test(parsed.pathname))
         return null;
     return Object.freeze({ host: parsed.hostname, environment: OCEANPAYMENT_HOSTS[parsed.hostname] });
 }
@@ -1571,7 +1661,7 @@ function formDecode(raw) {
     return formEncode(value) === raw ? value : null;
 }
 function readPairs(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT8)
         return null;
     const pairs = [];
     for (const chunk of body.split("&")) {
@@ -1656,7 +1746,7 @@ var PAYMENTWALL_PSP = "paymentwall";
 var PAYMENTWALL_OPERATION = "paymentwall.card_request";
 var PAYMENTWALL_TOKEN_URL = "https://pwgateway.com/api/token";
 var PAYMENTWALL_SANDBOX_TOKEN_URL = "https://api.paymentwall.com/api/brick/token";
-var BODY_LIMIT8 = 2048;
+var BODY_LIMIT9 = 2048;
 var KEY = "public_key";
 var PUBLIC_KEY = /^(?:t_)?[A-Za-z0-9]{16,64}$/;
 var SHAPES2 = /* @__PURE__ */ Object.freeze({
@@ -1666,8 +1756,8 @@ var SHAPES2 = /* @__PURE__ */ Object.freeze({
     "card[exp_year]": /^(?:[0-9]{2}|20[0-9]{2})$/,
     "card[cvv]": /^[0-9]{3,4}$/
 });
-var refuse7 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD8 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var refuse8 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD9 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function luhn3(digits2) {
     let sum = 0;
     for (let at = 0; at < digits2.length; at += 1) {
@@ -1695,7 +1785,7 @@ function paymentwallKeyEnvironment(publicKey) {
     return publicKey.startsWith("t_") ? "sandbox" : "production";
 }
 function readPairs2(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT8 || !/^[A-Za-z0-9_[\]=&]+$/.test(body))
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT9 || !/^[A-Za-z0-9_[\]=&]+$/.test(body))
         return null;
     const pairs = /* @__PURE__ */ new Map();
     for (const chunk of body.split("&")) {
@@ -1711,21 +1801,21 @@ function readPairs2(body) {
 }
 function paymentwallBodyVerdict(body, url) {
     if (url !== void 0 && !isPaymentwallTokenUrl(url))
-        return refuse7("paymentwall_url_refused");
+        return refuse8("paymentwall_url_refused");
     const pairs = readPairs2(body);
     if (pairs === null)
-        return refuse7("paymentwall_body_unsupported");
+        return refuse8("paymentwall_body_unsupported");
     if (pairs.has("card[token]") && !pairs.has("card[number]"))
-        return refuse7("paymentwall_saved_card");
+        return refuse8("paymentwall_saved_card");
     const keys = Object.keys(SHAPES2);
     if (pairs.size !== keys.length || !keys.every((key) => pairs.has(key) && SHAPES2[key].test(pairs.get(key)))) {
-        return refuse7("paymentwall_body_unsupported");
+        return refuse8("paymentwall_body_unsupported");
     }
     if (!luhn3(pairs.get("card[number]")))
-        return refuse7("paymentwall_body_unsupported");
+        return refuse8("paymentwall_body_unsupported");
     if (url !== void 0 && paymentwallKeyEnvironment(pairs.get(KEY)) !== paymentwallUrlEnvironment(url))
-        return refuse7("paymentwall_key_refused");
-    return CARD8;
+        return refuse8("paymentwall_key_refused");
+    return CARD9;
 }
 var paymentwall_default = /* @__PURE__ */ registerProcessor({
     psp: PAYMENTWALL_PSP,
@@ -1878,7 +1968,7 @@ var PAYSTACK_BODY_KEYS = /* @__PURE__ */ Object.freeze([
     "transaction_type"
 ]);
 var OPTIONAL = /* @__PURE__ */ new Set(["access_code", "card_holder_name", "transaction_type"]);
-var BODY_LIMIT9 = 4096;
+var BODY_LIMIT10 = 4096;
 var CIPHERTEXT_BYTES = [62, 63, 64];
 var BASE64 = /^[A-Za-z0-9+/]+={0,2}$/;
 var SHAPES3 = /* @__PURE__ */ Object.freeze({
@@ -1892,8 +1982,8 @@ var SHAPES3 = /* @__PURE__ */ Object.freeze({
     card_holder_name: /^[^\x00-\x1f\x7f0-9]{1,128}$/u,
     transaction_type: /^[a-z_]{1,32}$/
 });
-var own7 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse8 = (code) => Object.freeze({ verdict: "refuse", code });
+var own8 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
 function paystackFormValue(value) {
     return encodeURIComponent(String(value)).replace(/%20/g, "+").replace(/[!'()*~]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
 }
@@ -1916,7 +2006,7 @@ function isCiphertext(value) {
     return btoa(binary) === value && CIPHERTEXT_BYTES.includes(binary.length);
 }
 function readForm(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT9)
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT10)
         return null;
     const entries = [];
     for (const part of body.split("&")) {
@@ -1935,21 +2025,21 @@ function readForm(body) {
 function paystackBodyVerdict(body) {
     const entries = readForm(body);
     if (entries === null)
-        return refuse8("paystack_body_unsupported");
+        return refuse9("paystack_body_unsupported");
     const keys = entries.map(([key]) => key);
     if (keys.includes("subscription"))
-        return refuse8("paystack_subscription");
+        return refuse9("paystack_subscription");
     if (keys.includes("remember_card") && entries.find(([key]) => key === "remember_card")[1] !== "false")
-        return refuse8("paystack_saved_card");
+        return refuse9("paystack_saved_card");
     const expected = PAYSTACK_BODY_KEYS.filter((key) => !OPTIONAL.has(key) || keys.includes(key));
     if (keys.length !== expected.length || keys.some((key, i) => key !== expected[i]))
-        return refuse8("paystack_body_unsupported");
+        return refuse9("paystack_body_unsupported");
     const fields = Object.fromEntries(entries);
     if (!isCiphertext(fields.clientdata))
-        return refuse8("paystack_body_unsupported");
+        return refuse9("paystack_body_unsupported");
     for (const [key, shape] of Object.entries(SHAPES3)) {
-        if (own7(fields, key) && !shape.test(fields[key]))
-            return refuse8("paystack_body_unsupported");
+        if (own8(fields, key) && !shape.test(fields[key]))
+            return refuse9("paystack_body_unsupported");
     }
     return Object.freeze({ verdict: "card", fields: Object.freeze(fields) });
 }
@@ -1976,7 +2066,7 @@ var paystack_default = /* @__PURE__ */ registerProcessor({
     // Not surveyed: reading a charge back takes the merchant's secret key, which Agentcard never holds.
     settlementReadback: "not_surveyed",
     exactUrl: isPaystackChargeUrl,
-    bodyGate: (url, body) => url !== void 0 && !isPaystackChargeUrl(url) ? refuse8("paystack_url_refused") : paystackBodyVerdict(body),
+    bodyGate: (url, body) => url !== void 0 && !isPaystackChargeUrl(url) ? refuse9("paystack_url_refused") : paystackBodyVerdict(body),
     // No amount reader: the charge names none, so the agent's pair is the figure the cardholder approves.
     limitations: ["The charge names no merchant and no amount: Paystack's transaction binds both, so the cardholder approves the agent's figure for whichever Paystack merchant opened the checkout."]
 });
@@ -1984,7 +2074,7 @@ var paystack_default = /* @__PURE__ */ registerProcessor({
 var PROCESSOUT_PSP = "processout";
 var PROCESSOUT_OPERATION = "processout.card_request";
 var URL_LIMIT4 = 512;
-var BODY_LIMIT10 = 4096;
+var BODY_LIMIT11 = 4096;
 var CARD_URL = /^https:\/\/api\.processout\.com\/cards\?legacyrequest=true&project_id=((?:test-)?proj_[A-Za-z0-9]{16,64})&x-Content-Type=application\/json&x-API-Version=1\.3\.0\.0&x-Authorization=Basic%20([A-Za-z0-9+/]{4,256}={0,2})$/;
 var PAGE_KEYS2 = /* @__PURE__ */ Object.freeze(["name", "contact", "preferred_scheme"]);
 var CONTACT_KEYS = /* @__PURE__ */ Object.freeze(["address1", "address2", "city", "state", "country_code", "zip"]);
@@ -1999,7 +2089,7 @@ var DEVICE_KEYS = /* @__PURE__ */ Object.freeze([
 ]);
 var PROCESSOUT_CARD_KEYS = /* @__PURE__ */ Object.freeze(["number", "exp_month", "exp_year", "cvc2"]);
 var BODY_KEYS = /* @__PURE__ */ new Set([...PAGE_KEYS2, "device", ...DEVICE_KEYS, ...PROCESSOUT_CARD_KEYS]);
-var NUMBER2 = /^[0-9]{12,19}$/;
+var NUMBER3 = /^[0-9]{12,19}$/;
 var MONTH5 = /^(?:[1-9]|1[0-2])$/;
 var YEAR5 = /^20[0-9]{2}$/;
 var CODE2 = /^[0-9]{3,4}$/;
@@ -2007,10 +2097,10 @@ var TEXT_LIMIT = 256;
 var SCHEME = /^[A-Za-z][A-Za-z0-9 _-]{0,31}$/;
 var LANGUAGE2 = /^[A-Za-z]{1,8}(?:-[A-Za-z0-9]{1,8}){0,4}$/;
 var PAN_LIKE = /(?:[0-9][^0-9A-Za-z]*){12,}/;
-var record6 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own8 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse9 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD9 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var record7 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own9 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse10 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 var BASE642 = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
 function base64Of(text3) {
     let out = "";
@@ -2047,12 +2137,12 @@ function processoutCardTarget(url) {
 function isProcessoutCardUrl(url) {
     return processoutCardTarget(url) !== null;
 }
-function readBody7(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT10)
+function readBody8(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT11)
         return null;
     try {
         const value = JSON.parse(body);
-        return record6(value) && JSON.stringify(value) === body ? value : null;
+        return record7(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
@@ -2070,31 +2160,31 @@ var DEVICE_RULES = /* @__PURE__ */ Object.freeze({
 });
 function soundDevice(value) {
     const device = value.device;
-    if (!record6(device) || !own8(device, "request_origin") || !own8(device, "app_timezone_offset"))
+    if (!record7(device) || !own9(device, "request_origin") || !own9(device, "app_timezone_offset"))
         return false;
-    return DEVICE_KEYS.every((key) => own8(device, key) ? DEVICE_RULES[key](device[key]) && own8(value, key) && value[key] === device[key] : !own8(value, key)) && Object.keys(device).every((key) => DEVICE_KEYS.includes(key));
+    return DEVICE_KEYS.every((key) => own9(device, key) ? DEVICE_RULES[key](device[key]) && own9(value, key) && value[key] === device[key] : !own9(value, key)) && Object.keys(device).every((key) => DEVICE_KEYS.includes(key));
 }
 function soundPageData(value) {
-    if (own8(value, "name") && !pageText(value.name))
+    if (own9(value, "name") && !pageText(value.name))
         return false;
-    if (own8(value, "preferred_scheme") && !(value.preferred_scheme === null || typeof value.preferred_scheme === "string" && SCHEME.test(value.preferred_scheme)))
+    if (own9(value, "preferred_scheme") && !(value.preferred_scheme === null || typeof value.preferred_scheme === "string" && SCHEME.test(value.preferred_scheme)))
         return false;
     const contact = value.contact;
-    return record6(contact) && Object.keys(contact).every((key) => CONTACT_KEYS.includes(key) && pageText(contact[key]));
+    return record7(contact) && Object.keys(contact).every((key) => CONTACT_KEYS.includes(key) && pageText(contact[key]));
 }
 function processoutBodyVerdict(body, url) {
     if (url !== void 0 && processoutCardTarget(url) === null)
-        return refuse9("processout_url_refused");
-    const value = readBody7(body);
+        return refuse10("processout_url_refused");
+    const value = readBody8(body);
     if (value === null || !Object.keys(value).every((key) => BODY_KEYS.has(key)))
-        return refuse9("processout_body_unsupported");
+        return refuse10("processout_body_unsupported");
     if (!PROCESSOUT_CARD_KEYS.every((key) => typeof value[key] === "string"))
-        return refuse9("processout_body_unsupported");
-    if (!NUMBER2.test(value.number) || !luhn4(value.number) || !MONTH5.test(value.exp_month) || !YEAR5.test(value.exp_year) || !CODE2.test(value.cvc2))
-        return refuse9("processout_body_unsupported");
+        return refuse10("processout_body_unsupported");
+    if (!NUMBER3.test(value.number) || !luhn4(value.number) || !MONTH5.test(value.exp_month) || !YEAR5.test(value.exp_year) || !CODE2.test(value.cvc2))
+        return refuse10("processout_body_unsupported");
     if (!soundPageData(value) || !soundDevice(value))
-        return refuse9("processout_body_unsupported");
-    return CARD9;
+        return refuse10("processout_body_unsupported");
+    return CARD10;
 }
 var processout_default = /* @__PURE__ */ registerProcessor({
     psp: PROCESSOUT_PSP,
@@ -2137,15 +2227,15 @@ var USAEPAY_HOSTS = /* @__PURE__ */ Object.freeze({
     "sandbox.usaepay.com": "sandbox"
 });
 var USAEPAY_PAYMENT_KEYS_PATH = "/api/v2/pub/payment_keys";
-var BODY_LIMIT11 = 512;
+var BODY_LIMIT12 = 512;
 var URL_LIMIT5 = 256;
 var CARD_NUMBER5 = /^[0-9]{13,19}$/;
 var EXPIRATION = /^(?:0[1-9]|1[0-2])[0-9]{2}$/;
 var SECURITY_CODE5 = /^(?:[0-9]{3,4})?$/;
-var record7 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own9 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse10 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own10 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD11 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 function usaepayPaymentKeysUrl(url) {
     if (typeof url !== "string" || url.length > URL_LIMIT5 || url.includes("?") || url.includes("#"))
         return null;
@@ -2156,7 +2246,7 @@ function usaepayPaymentKeysUrl(url) {
     catch {
         return null;
     }
-    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own9(USAEPAY_HOSTS, parsed.hostname) || parsed.pathname !== USAEPAY_PAYMENT_KEYS_PATH)
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own10(USAEPAY_HOSTS, parsed.hostname) || parsed.pathname !== USAEPAY_PAYMENT_KEYS_PATH)
         return null;
     return Object.freeze({ host: parsed.hostname, environment: USAEPAY_HOSTS[parsed.hostname] });
 }
@@ -2171,23 +2261,23 @@ function luhn5(digits2) {
     }
     return sum % 10 === 0;
 }
-function readBody8(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT11)
+function readBody9(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT12)
         return null;
     try {
         const value = JSON.parse(body);
-        return record7(value) && JSON.stringify(value) === body ? value : null;
+        return record8(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
     }
 }
 function usaepayBodyVerdict(body) {
-    const value = readBody8(body);
+    const value = readBody9(body);
     const card = value === null ? null : value.creditcard;
-    if (value === null || Object.keys(value).join() !== "creditcard" || !record7(card) || Object.keys(card).join() !== "number,expiration,cvc" || typeof card.number !== "string" || !CARD_NUMBER5.test(card.number) || !luhn5(card.number) || typeof card.expiration !== "string" || !EXPIRATION.test(card.expiration) || typeof card.cvc !== "string" || !SECURITY_CODE5.test(card.cvc))
-        return refuse10("usaepay_body_unsupported");
-    return CARD10;
+    if (value === null || Object.keys(value).join() !== "creditcard" || !record8(card) || Object.keys(card).join() !== "number,expiration,cvc" || typeof card.number !== "string" || !CARD_NUMBER5.test(card.number) || !luhn5(card.number) || typeof card.expiration !== "string" || !EXPIRATION.test(card.expiration) || typeof card.cvc !== "string" || !SECURITY_CODE5.test(card.cvc))
+        return refuse11("usaepay_body_unsupported");
+    return CARD11;
 }
 var usaepay_default = /* @__PURE__ */ registerProcessor({
     psp: USAEPAY_PSP,
@@ -2219,7 +2309,7 @@ var usaepay_default = /* @__PURE__ */ registerProcessor({
         source: "https://help.usaepay.info/developer/payjs-v2/ , https://help.usaepay.info/api/rest/"
     },
     exactUrl: isUsaepayPaymentKeysUrl,
-    bodyGate: (url, body) => url !== void 0 && !isUsaepayPaymentKeysUrl(url) ? refuse10("usaepay_url_refused") : usaepayBodyVerdict(body)
+    bodyGate: (url, body) => url !== void 0 && !isUsaepayPaymentKeysUrl(url) ? refuse11("usaepay_url_refused") : usaepayBodyVerdict(body)
     // No amount reader: the request names none, so the agent's pair is the figure the cardholder approves.
 });
 // src/processors/viva_wallet.js
@@ -2255,7 +2345,7 @@ var VIVA_WALLET_BODY_KEYS = /* @__PURE__ */ Object.freeze([
     "merchantTrns",
     "captchaToken"
 ]);
-var BODY_LIMIT12 = 16384;
+var BODY_LIMIT13 = 16384;
 var URL_LIMIT6 = 256;
 var ORDER_CODE = /^[0-9]{16}$/;
 var CARD_NUMBER6 = /^[0-9]{13,19}$/;
@@ -2267,10 +2357,10 @@ var MEMBER_NAME = /^[A-Za-z][A-Za-z0-9]{0,31}$/;
 var SHORT_ID = /^[A-Za-z0-9_-]{1,64}$/;
 var TEXT = /^[^\u0000-\u001f\u007f]{0,200}$/;
 var CARD_DIGITS = /[0-9]{12,}/;
-var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own10 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD11 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own11 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse12 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 var inOrder4 = (value, keys) => {
     let at = 0;
     for (const name of Object.keys(value)) {
@@ -2285,7 +2375,7 @@ var inOrder4 = (value, keys) => {
 var cardDigits = (text3) => CARD_DIGITS.test(text3.replace(/[^0-9A-Za-z]/g, ""));
 var plainText = (value) => typeof value === "string" && TEXT.test(value) && !cardDigits(value);
 var scalar = (value) => value === null || typeof value === "boolean" || Number.isSafeInteger(value) && Math.abs(value) < 1e9 || plainText(value);
-var flatRecord = (value, limit) => record8(value) && Object.keys(value).length <= limit && Object.entries(value).every(([key, item]) => MEMBER_NAME.test(key) && scalar(item));
+var flatRecord = (value, limit) => record9(value) && Object.keys(value).length <= limit && Object.entries(value).every(([key, item]) => MEMBER_NAME.test(key) && scalar(item));
 function vivaWalletChargeTokensUrl(url) {
     if (typeof url !== "string" || url.length > URL_LIMIT6 || url.includes("?") || url.includes("#"))
         return null;
@@ -2296,7 +2386,7 @@ function vivaWalletChargeTokensUrl(url) {
     catch {
         return null;
     }
-    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own10(VIVA_WALLET_HOSTS, parsed.hostname) || parsed.pathname !== VIVA_WALLET_CHARGE_TOKENS_PATH)
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password || !own11(VIVA_WALLET_HOSTS, parsed.hostname) || parsed.pathname !== VIVA_WALLET_CHARGE_TOKENS_PATH)
         return null;
     return Object.freeze({ host: parsed.hostname, environment: VIVA_WALLET_HOSTS[parsed.hostname] });
 }
@@ -2314,12 +2404,12 @@ function luhn6(digits2) {
 function vivaWalletMaskedNumber(number) {
     return `${number.slice(0, 6)}${"X".repeat(Math.max(0, number.length - 10))}${number.slice(-4)}`;
 }
-function readBody9(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT12)
+function readBody10(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT13)
         return null;
     try {
         const value = JSON.parse(body);
-        return record8(value) && JSON.stringify(value) === body ? value : null;
+        return record9(value) && JSON.stringify(value) === body ? value : null;
     }
     catch {
         return null;
@@ -2331,26 +2421,26 @@ function currencyNumber(value) {
     return typeof value === "string" && /^[0-9]{3}$/.test(value) ? Number(value) : null;
 }
 function vivaWalletBodyVerdict(body) {
-    const value = readBody9(body);
+    const value = readBody10(body);
     if (value === null || !Object.keys(value).every((key) => VIVA_WALLET_BODY_KEYS.includes(key))) {
-        return value !== null && (own10(value, "creditCardId") || own10(value, "token")) ? refuse11("viva_wallet_stored_card") : refuse11("viva_wallet_body_unsupported");
+        return value !== null && (own11(value, "creditCardId") || own11(value, "token")) ? refuse12("viva_wallet_stored_card") : refuse12("viva_wallet_body_unsupported");
     }
     if (value.rememberCard !== false)
-        return refuse11(value.rememberCard === true ? "viva_wallet_keep_on_file" : "viva_wallet_body_unsupported");
+        return refuse12(value.rememberCard === true ? "viva_wallet_keep_on_file" : "viva_wallet_body_unsupported");
     if (value.dccAccepted === true)
-        return refuse11("viva_wallet_currency_conversion");
-    if (own10(value, "dccAccepted") && value.dccAccepted !== false)
-        return refuse11("viva_wallet_body_unsupported");
-    if (own10(value, "scaRequestedTransactionId"))
-        return refuse11("viva_wallet_retry_refused");
+        return refuse12("viva_wallet_currency_conversion");
+    if (own11(value, "dccAccepted") && value.dccAccepted !== false)
+        return refuse12("viva_wallet_body_unsupported");
+    if (own11(value, "scaRequestedTransactionId"))
+        return refuse12("viva_wallet_retry_refused");
     if (!(value.installments === 0 || value.installments === 1)) {
-        return refuse11(Number.isSafeInteger(value.installments) && value.installments > 1 ? "viva_wallet_installments" : "viva_wallet_body_unsupported");
+        return refuse12(Number.isSafeInteger(value.installments) && value.installments > 1 ? "viva_wallet_installments" : "viva_wallet_body_unsupported");
     }
-    if (!inOrder4(value, VIVA_WALLET_BODY_KEYS) || ["offerCodes", "loyaltySupported", "redeemedAmount", "retrievalReferenceNumber", "merchantTrns"].some((key) => own10(value, key)))
-        return refuse11("viva_wallet_body_unsupported");
+    if (!inOrder4(value, VIVA_WALLET_BODY_KEYS) || ["offerCodes", "loyaltySupported", "redeemedAmount", "retrievalReferenceNumber", "merchantTrns"].some((key) => own11(value, key)))
+        return refuse12("viva_wallet_body_unsupported");
     const number = value.number;
-    const sound = typeof value.orderCode === "string" && ORDER_CODE.test(value.orderCode) && Number.isSafeInteger(value.amount) && value.amount > 0 && currencyNumber(value.currencyCode) !== null && plainText(value.holderName) && value.holderName.trim() !== "" && plainText(value.holderMail) && (value.cvc === null || typeof value.cvc === "string" && SECURITY_CODE6.test(value.cvc)) && typeof number === "string" && CARD_NUMBER6.test(number) && luhn6(number) && typeof value.expirationMonth === "string" && MONTH6.test(value.expirationMonth) && typeof value.expirationYear === "string" && YEAR6.test(value.expirationYear) && flatRecord(value.customer, 12) && (!own10(value, "friendlyName") || plainText(value.friendlyName)) && value.maskedNumber === vivaWalletMaskedNumber(number) && (!own10(value, "bankId") || typeof value.bankId === "string" && SHORT_ID.test(value.bankId) || Number.isSafeInteger(value.bankId) && value.bankId >= 0) && (!own10(value, "selectedBrand") || value.selectedBrand === null || flatRecord(value.selectedBrand, 16)) && (!own10(value, "cardholderBrandSelection") || typeof value.cardholderBrandSelection === "boolean") && (!own10(value, "dccOptions") || flatRecord(value.dccOptions, 16)) && (!own10(value, "captchaToken") || typeof value.captchaToken === "string" && CAPTCHA_TOKEN.test(value.captchaToken));
-    return sound ? CARD11 : refuse11("viva_wallet_body_unsupported");
+    const sound = typeof value.orderCode === "string" && ORDER_CODE.test(value.orderCode) && Number.isSafeInteger(value.amount) && value.amount > 0 && currencyNumber(value.currencyCode) !== null && plainText(value.holderName) && value.holderName.trim() !== "" && plainText(value.holderMail) && (value.cvc === null || typeof value.cvc === "string" && SECURITY_CODE6.test(value.cvc)) && typeof number === "string" && CARD_NUMBER6.test(number) && luhn6(number) && typeof value.expirationMonth === "string" && MONTH6.test(value.expirationMonth) && typeof value.expirationYear === "string" && YEAR6.test(value.expirationYear) && flatRecord(value.customer, 12) && (!own11(value, "friendlyName") || plainText(value.friendlyName)) && value.maskedNumber === vivaWalletMaskedNumber(number) && (!own11(value, "bankId") || typeof value.bankId === "string" && SHORT_ID.test(value.bankId) || Number.isSafeInteger(value.bankId) && value.bankId >= 0) && (!own11(value, "selectedBrand") || value.selectedBrand === null || flatRecord(value.selectedBrand, 16)) && (!own11(value, "cardholderBrandSelection") || typeof value.cardholderBrandSelection === "boolean") && (!own11(value, "dccOptions") || flatRecord(value.dccOptions, 16)) && (!own11(value, "captchaToken") || typeof value.captchaToken === "string" && CAPTCHA_TOKEN.test(value.captchaToken));
+    return sound ? CARD12 : refuse12("viva_wallet_body_unsupported");
 }
 var VIVA_WALLET_CURRENCIES = /* @__PURE__ */ Object.freeze({
     978: "eur",
@@ -2413,9 +2503,9 @@ var viva_wallet_default = /* @__PURE__ */ registerProcessor({
     refusedOperations: [VIVA_WALLET_OPERATION],
     settlementReadback: "not_surveyed",
     exactUrl: isVivaWalletChargeTokensUrl,
-    bodyGate: (url, body) => url !== void 0 && !isVivaWalletChargeTokensUrl(url) ? refuse11("viva_wallet_url_refused") : vivaWalletBodyVerdict(body),
+    bodyGate: (url, body) => url !== void 0 && !isVivaWalletChargeTokensUrl(url) ? refuse12("viva_wallet_url_refused") : vivaWalletBodyVerdict(body),
     // The body names the order's amount in cents and its numeric currency, which the page's card-free charge repeats.
-    amount: (template) => record8(template) && isVivaWalletChargeTokensUrl(template.url) ? vivaWalletAmount(template.body) : null
+    amount: (template) => record9(template) && isVivaWalletChargeTokensUrl(template.url) ? vivaWalletAmount(template.body) : null
 });
 // src/processors/vtex_payments.js
 var VTEX_PAYMENTS_PSP = "vtex_payments";
@@ -2465,7 +2555,7 @@ var VTEX_PAYMENTS_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
     Object.freeze({ account: "alssports", origin: "https://www.als.com", merchant: "Al's Sporting Goods", currency: "USD" }),
     Object.freeze({ account: "roadrunnersports", origin: "https://www.roadrunnersports.com", merchant: "Road Runner Sports", currency: "USD" })
 ]);
-var BODY_LIMIT13 = 16384;
+var BODY_LIMIT14 = 16384;
 var ACCOUNT_HOST = /^([a-z0-9]{1,63})\.vtexvault\.com$/;
 var PATH = /^\/api\/payments\/transactions\/([0-9A-Fa-f]{32})\/payments$/;
 var ORDER_GROUP = /^[0-9]{6,24}$/;
@@ -2473,7 +2563,7 @@ var BASE643 = /^[A-Za-z0-9+/]{4,1020}={0,2}$/;
 var CARD_NUMBER7 = /^[0-9]{12,19}$/;
 var SECURITY_CODE7 = /^[0-9]{3,4}$/;
 var DUE_DATE = /^(?:0[1-9]|1[0-2])\/[0-9]{2}$/;
-var CURRENCY = /^[A-Z]{3}$/;
+var CURRENCY2 = /^[A-Z]{3}$/;
 var TRANSACTION_ID = /^[0-9A-Fa-f]{32}$/;
 var MERCHANT_NAME = /^[A-Za-z0-9_.-]{1,64}$/;
 var SHORT_ID2 = /^[A-Za-z0-9_-]{1,64}$/;
@@ -2481,10 +2571,10 @@ var FINGERPRINT = /^[A-Za-z0-9_.:=+/-]{1,256}$/;
 var TEXT2 = /^[^\u0000-\u001f\u007f]{1,200}$/;
 var CARD_DIGITS2 = /[0-9]{12,}/;
 var DEVICE_INFO_KEYS = Object.freeze(["sw", "sh", "cd", "tz", "lang", "java", "sourceApplication"]);
-var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var own11 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var refuse12 = (code) => Object.freeze({ verdict: "refuse", code });
-var CARD12 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var record10 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var own12 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse13 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD13 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
 var inOrder5 = (value, keys) => {
     let at = 0;
     for (const name of Object.keys(value)) {
@@ -2534,18 +2624,18 @@ function deviceInfoSound(text3) {
     catch {
         return false;
     }
-    if (!record9(info) || !Object.keys(info).every((key) => DEVICE_INFO_KEYS.includes(key)))
+    if (!record10(info) || !Object.keys(info).every((key) => DEVICE_INFO_KEYS.includes(key)))
         return false;
     for (const key of ["sw", "sh", "cd"])
-        if (own11(info, key) && !(count(info[key]) && info[key] <= 1e5))
+        if (own12(info, key) && !(count(info[key]) && info[key] <= 1e5))
             return false;
-    if (own11(info, "tz") && !(Number.isSafeInteger(info.tz) && Math.abs(info.tz) <= 1440))
+    if (own12(info, "tz") && !(Number.isSafeInteger(info.tz) && Math.abs(info.tz) <= 1440))
         return false;
-    if (own11(info, "lang") && !(typeof info.lang === "string" && /^[A-Za-z]{0,8}$/.test(info.lang)))
+    if (own12(info, "lang") && !(typeof info.lang === "string" && /^[A-Za-z]{0,8}$/.test(info.lang)))
         return false;
-    if (own11(info, "java") && typeof info.java !== "boolean")
+    if (own12(info, "java") && typeof info.java !== "boolean")
         return false;
-    return !own11(info, "sourceApplication") || typeof info.sourceApplication === "string" && /^[A-Za-z0-9_.-]{1,32}$/.test(info.sourceApplication);
+    return !own12(info, "sourceApplication") || typeof info.sourceApplication === "string" && /^[A-Za-z0-9_.-]{1,32}$/.test(info.sourceApplication);
 }
 function vtexPaymentsCardTarget(url) {
     if (typeof url !== "string" || url.length > 8192)
@@ -2591,8 +2681,8 @@ function isVtexPaymentsCardUrl(url) {
     const target = vtexPaymentsCardTarget(url);
     return target !== null && !target.fallback;
 }
-function readBody10(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT13)
+function readBody11(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT14)
         return null;
     let value;
     try {
@@ -2606,13 +2696,13 @@ function readBody10(body) {
     return value;
 }
 function cardLine(line) {
-    if (!record9(line))
+    if (!record10(line))
         return false;
-    const fields = record9(line.fields) ? line.fields : {};
-    return line.groupName === "creditCardPaymentGroup" || line.groupName === "debitCardPaymentGroup" || own11(line, "accountId") || own11(fields, "accountId") || own11(fields, "cardNumber") || own11(fields, "validationCode") || own11(fields, "dueDate");
+    const fields = record10(line.fields) ? line.fields : {};
+    return line.groupName === "creditCardPaymentGroup" || line.groupName === "debitCardPaymentGroup" || own12(line, "accountId") || own12(fields, "accountId") || own12(fields, "cardNumber") || own12(fields, "validationCode") || own12(fields, "dueDate");
 }
 function addressSound(address) {
-    if (!record9(address) || !inOrder5(address, VTEX_PAYMENTS_ADDRESS_KEYS))
+    if (!record10(address) || !inOrder5(address, VTEX_PAYMENTS_ADDRESS_KEYS))
         return false;
     for (const [key, value] of Object.entries(address)) {
         if (key === "addressType") {
@@ -2633,7 +2723,7 @@ function addressSound(address) {
     return true;
 }
 function fieldsSound(fields) {
-    if (!record9(fields) || !inOrder5(fields, VTEX_PAYMENTS_FIELD_KEYS) || own11(fields, "metadata"))
+    if (!record10(fields) || !inOrder5(fields, VTEX_PAYMENTS_FIELD_KEYS) || own12(fields, "metadata"))
         return false;
     if (!(typeof fields.cardNumber === "string" && CARD_NUMBER7.test(fields.cardNumber)))
         return false;
@@ -2643,38 +2733,38 @@ function fieldsSound(fields) {
         return false;
     if (!plainText2(fields.holderName))
         return false;
-    if (own11(fields, "document") && !(fields.document === "" || plainText2(fields.document) && fields.document.length <= 32))
+    if (own12(fields, "document") && !(fields.document === "" || plainText2(fields.document) && fields.document.length <= 32))
         return false;
-    if (own11(fields, "address") && !addressSound(fields.address))
+    if (own12(fields, "address") && !addressSound(fields.address))
         return false;
-    if (own11(fields, "deviceFingerprint") && !(typeof fields.deviceFingerprint === "string" && FINGERPRINT.test(fields.deviceFingerprint)))
+    if (own12(fields, "deviceFingerprint") && !(typeof fields.deviceFingerprint === "string" && FINGERPRINT.test(fields.deviceFingerprint)))
         return false;
-    return !own11(fields, "addressId") || typeof fields.addressId === "string" && SHORT_ID2.test(fields.addressId);
+    return !own12(fields, "addressId") || typeof fields.addressId === "string" && SHORT_ID2.test(fields.addressId);
 }
 function vtexPaymentsBodyVerdict(body, target) {
-    const lines = readBody10(body);
-    if (lines === null || lines.length === 0 || !lines.every(record9))
-        return refuse12("vtex_payments_body_unsupported");
+    const lines = readBody11(body);
+    if (lines === null || lines.length === 0 || !lines.every(record10))
+        return refuse13("vtex_payments_body_unsupported");
     const cards = lines.filter(cardLine);
-    if (cards.some((line2) => own11(line2, "accountId") || own11(line2.fields ?? {}, "accountId")))
-        return refuse12("vtex_payments_saved_card");
+    if (cards.some((line2) => own12(line2, "accountId") || own12(line2.fields ?? {}, "accountId")))
+        return refuse13("vtex_payments_saved_card");
     if (cards.length === 0)
-        return refuse12("vtex_payments_body_unsupported");
-    if (lines.length !== 1 || own11(lines[0], "id"))
-        return refuse12("vtex_payments_split_payment");
+        return refuse13("vtex_payments_body_unsupported");
+    if (lines.length !== 1 || own12(lines[0], "id"))
+        return refuse13("vtex_payments_split_payment");
     const line = lines[0];
     if (!inOrder5(line, VTEX_PAYMENTS_LINE_KEYS) || line.groupName !== "creditCardPaymentGroup")
-        return refuse12("vtex_payments_body_unsupported");
-    if (!(typeof line.currencyCode === "string" && CURRENCY.test(line.currencyCode)) || !own11(VTEX_PAYMENTS_NETWORKS, line.paymentSystem) || !Number.isSafeInteger(line.paymentSystem) || !(count(line.value) && line.value > 0))
-        return refuse12("vtex_payments_body_unsupported");
-    if (line.installments !== 1 || line.referenceValue !== line.value || own11(line, "installmentsInterestRate") && line.installmentsInterestRate !== 0 || own11(line, "installmentsValue") && line.installmentsValue !== line.value)
-        return refuse12("vtex_payments_installments");
+        return refuse13("vtex_payments_body_unsupported");
+    if (!(typeof line.currencyCode === "string" && CURRENCY2.test(line.currencyCode)) || !own12(VTEX_PAYMENTS_NETWORKS, line.paymentSystem) || !Number.isSafeInteger(line.paymentSystem) || !(count(line.value) && line.value > 0))
+        return refuse13("vtex_payments_body_unsupported");
+    if (line.installments !== 1 || line.referenceValue !== line.value || own12(line, "installmentsInterestRate") && line.installmentsInterestRate !== 0 || own12(line, "installmentsValue") && line.installmentsValue !== line.value)
+        return refuse13("vtex_payments_installments");
     const transaction = line.transaction;
-    if (!record9(transaction) || Object.keys(transaction).join() !== "id,merchantName" || !(typeof transaction.id === "string" && TRANSACTION_ID.test(transaction.id)) || !(typeof transaction.merchantName === "string" && MERCHANT_NAME.test(transaction.merchantName)))
-        return refuse12("vtex_payments_body_unsupported");
+    if (!record10(transaction) || Object.keys(transaction).join() !== "id,merchantName" || !(typeof transaction.id === "string" && TRANSACTION_ID.test(transaction.id)) || !(typeof transaction.merchantName === "string" && MERCHANT_NAME.test(transaction.merchantName)))
+        return refuse13("vtex_payments_body_unsupported");
     if (target && transaction.id.toUpperCase() !== target.transactionId.toUpperCase())
-        return refuse12("vtex_payments_split_payment");
-    return fieldsSound(line.fields) ? CARD12 : refuse12("vtex_payments_body_unsupported");
+        return refuse13("vtex_payments_split_payment");
+    return fieldsSound(line.fields) ? CARD13 : refuse13("vtex_payments_body_unsupported");
 }
 function vtexPaymentsAmount(body) {
     if (vtexPaymentsBodyVerdict(body).verdict !== "card")
@@ -2719,14 +2809,15 @@ var vtex_payments_default = /* @__PURE__ */ registerProcessor({
             return vtexPaymentsBodyVerdict(body);
         const target = vtexPaymentsCardTarget(url);
         if (target === null)
-            return refuse12("vtex_payments_url_refused");
-        return target.fallback ? refuse12("vtex_payments_fallback_refused") : vtexPaymentsBodyVerdict(body, target);
+            return refuse13("vtex_payments_url_refused");
+        return target.fallback ? refuse13("vtex_payments_fallback_refused") : vtexPaymentsBodyVerdict(body, target);
     },
-    amount: (template) => record9(template) && isVtexPaymentsCardUrl(template.url) ? vtexPaymentsAmount(template.body) : null
+    amount: (template) => record10(template) && isVtexPaymentsCardUrl(template.url) ? vtexPaymentsAmount(template.body) : null
 });
 // src/processors/index.generated.js
 var REGISTERED_MODULES = Object.freeze({
     aurus: aurus_default,
+    bigcommerce: bigcommerce_default,
     bluesnap: bluesnap_default,
     cardlink_vpos: cardlink_vpos_default,
     eghl: eghl_default,
@@ -5706,6 +5797,9 @@ function trustedClientRecognizer(pspOrEntry) {
         throw new Error("Refusing to pay: unknown payment processor.");
     return definition;
 }
+// src/answer-card-leak.js
+var UTF8_SEQUENCE = "[\\x00-\\x7f]|[\\xc2-\\xdf][\\x80-\\xbf]|\\xe0[\\xa0-\\xbf][\\x80-\\xbf]|[\\xe1-\\xec\\xee\\xef][\\x80-\\xbf]{2}|\\xed[\\x80-\\x9f][\\x80-\\xbf]|\\xf0[\\x90-\\xbf][\\x80-\\xbf]{2}|[\\xf1-\\xf3][\\x80-\\xbf]{3}|\\xf4[\\x80-\\x8f][\\x80-\\xbf]{2}";
+var UTF8_WHOLE = /* @__PURE__ */ new RegExp(`^(?:${UTF8_SEQUENCE})*$`);
 // src/datatrans.js
 var DATATRANS_HOSTS = Object.freeze(["pay.datatrans.com", "pay.sandbox.datatrans.com"]);
 var DATATRANS_REFUSAL_REASONS = Object.freeze(["unsupported", "card_on_file", "brand_mismatch", "unregistered_merchant"]);
@@ -5895,7 +5989,7 @@ var HIPAY_MERCHANT_PINS = /* @__PURE__ */ Object.freeze([
     pin6({ id: "happybulle", merchant: "HappyBulle", origins: ["https://www.happybulle.com"], usernames: ["94683309.secure-gateway.hipay-tpp.com"] })
 ]);
 // src/amazon-payment-services.js
-var BODY_LIMIT14 = 32 * 1024;
+var BODY_LIMIT15 = 32 * 1024;
 var ANSWER_LIMIT = 64 * 1024;
 // src/clover.js
 var REQUIRED_KEYS = /* @__PURE__ */ Object.freeze(["encrypted_pan", "exp_month", "exp_year", "cvv", "first6", "last4", "brand"]);
@@ -6247,7 +6341,7 @@ var RECORD_MEMBERS = /* @__PURE__ */ Object.freeze({
     ]
 });
 // src/pin-payments.js
-var CARD_KEYS3 = /* @__PURE__ */ Object.freeze(["name", "number", "cvc", "expiry_month", "expiry_year"]);
+var CARD_KEYS4 = /* @__PURE__ */ Object.freeze(["name", "number", "cvc", "expiry_month", "expiry_year"]);
 var ADDRESS_KEYS = /* @__PURE__ */ Object.freeze([
     "address_line1",
     "address_line2",
@@ -6258,7 +6352,7 @@ var ADDRESS_KEYS = /* @__PURE__ */ Object.freeze([
 ]);
 var KEY2 = "publishable_api_key";
 var METHOD = "_method";
-var DOCUMENTED = /* @__PURE__ */ new Set([KEY2, METHOD, ...CARD_KEYS3, ...ADDRESS_KEYS]);
+var DOCUMENTED = /* @__PURE__ */ new Set([KEY2, METHOD, ...CARD_KEYS4, ...ADDRESS_KEYS]);
 var TOKEN_FACTS = /* @__PURE__ */ Object.freeze([
     "token",
     "scheme",