propagated payment commentto bff

2026-03-12 00:42:49 +01:00
parent 4958bdb500
commit b440df97d5
94 changed files with 626 additions and 119 deletions
--- a/api/gateway/aurora/client/client.go
+++ b/api/gateway/aurora/client/client.go
@@ -202,6 +202,7 @@ func payoutParamsFromCard(req *mntxv1.CardPayoutRequest) map[string]interface{}
 	params := map[string]interface{}{
 		"project_id":           req.GetProjectId(),
 		"parent_payment_ref":   strings.TrimSpace(req.GetParentPaymentRef()),
+		"comment":              strings.TrimSpace(req.GetComment()),
 		"customer_id":          strings.TrimSpace(req.GetCustomerId()),
 		"customer_first_name":  strings.TrimSpace(req.GetCustomerFirstName()),
 		"customer_middle_name": strings.TrimSpace(req.GetCustomerMiddleName()),
@@ -230,6 +231,7 @@ func payoutParamsFromToken(req *mntxv1.CardTokenPayoutRequest) map[string]interf
 	params := map[string]interface{}{
 		"project_id":           req.GetProjectId(),
 		"parent_payment_ref":   strings.TrimSpace(req.GetParentPaymentRef()),
+		"comment":              strings.TrimSpace(req.GetComment()),
 		"customer_id":          strings.TrimSpace(req.GetCustomerId()),
 		"customer_first_name":  strings.TrimSpace(req.GetCustomerFirstName()),
 		"customer_middle_name": strings.TrimSpace(req.GetCustomerMiddleName()),
@@ -299,6 +301,9 @@ func sanitizeMetadata(source map[string]string) map[string]string {
 		if k == "" {
 			continue
 		}
+		if strings.EqualFold(k, "comment") {
+			continue
+		}
 		out[k] = strings.TrimSpace(value)
 	}
 	if len(out) == 0 {
@@ -320,6 +325,11 @@ func payoutFromOperation(op *connectorv1.Operation) *mntxv1.CardPayoutState {
 		state.Currency = strings.TrimSpace(money.GetCurrency())
 		state.AmountMinor = minorFromMoney(money)
 	}
+	if params := op.GetParams(); params != nil {
+		if field, ok := params.GetFields()["comment"]; ok {
+			state.Comment = strings.TrimSpace(field.GetStringValue())
+		}
+	}
 	return state
 }

--- a/api/gateway/aurora/go.mod
+++ b/api/gateway/aurora/go.mod
@@ -46,7 +46,7 @@ require (
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0 // indirect
--- a/api/gateway/aurora/go.sum
+++ b/api/gateway/aurora/go.sum
@@ -174,8 +174,8 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
--- a/api/gateway/aurora/internal/service/gateway/card_payout_handlers.go
+++ b/api/gateway/aurora/internal/service/gateway/card_payout_handlers.go
@@ -140,6 +140,7 @@ func sanitizeCardPayoutRequest(req *mntxv1.CardPayoutRequest) *mntxv1.CardPayout
 	r.OperationRef = strings.TrimSpace(r.GetOperationRef())
 	r.IdempotencyKey = strings.TrimSpace(r.GetIdempotencyKey())
 	r.IntentRef = strings.TrimSpace(r.GetIntentRef())
+	r.Comment = strings.TrimSpace(r.GetComment())
 	return r
 }

@@ -171,6 +172,7 @@ func sanitizeCardTokenPayoutRequest(req *mntxv1.CardTokenPayoutRequest) *mntxv1.
 	r.OperationRef = strings.TrimSpace(r.GetOperationRef())
 	r.IdempotencyKey = strings.TrimSpace(r.GetIdempotencyKey())
 	r.IntentRef = strings.TrimSpace(r.GetIntentRef())
+	r.Comment = strings.TrimSpace(r.GetComment())
 	return r
 }

--- a/api/gateway/aurora/internal/service/gateway/card_processor.go
+++ b/api/gateway/aurora/internal/service/gateway/card_processor.go
@@ -92,6 +92,9 @@ func mergePayoutStateWithExisting(state, existing *model.CardPayout) {
 	if state.IntentRef == "" {
 		state.IntentRef = existing.IntentRef
 	}
+	if state.Comment == "" {
+		state.Comment = existing.Comment
+	}
 	if existing.PaymentRef != "" {
 		state.PaymentRef = existing.PaymentRef
 	}
@@ -182,6 +185,7 @@ func payoutStateLogFields(state *model.CardPayout) []zap.Field {
 		zap.String("operation_ref", state.OperationRef),
 		zap.String("idempotency_key", state.IdempotencyKey),
 		zap.String("intent_ref", state.IntentRef),
+		zap.String("comment", state.Comment),
 	}
 }

@@ -1099,6 +1103,7 @@ func (p *cardPayoutProcessor) Submit(ctx context.Context, req *mntxv1.CardPayout
 		OperationRef:   operationRef,
 		IdempotencyKey: strings.TrimSpace(req.GetIdempotencyKey()),
 		IntentRef:      strings.TrimSpace(req.GetIntentRef()),
+		Comment:        strings.TrimSpace(req.GetComment()),
 		ProjectID:      projectID,
 		CustomerID:     strings.TrimSpace(req.GetCustomerId()),
 		AmountMinor:    req.GetAmountMinor(),
@@ -1259,6 +1264,7 @@ func (p *cardPayoutProcessor) SubmitToken(ctx context.Context, req *mntxv1.CardT
 		OperationRef:   operationRef,
 		IdempotencyKey: strings.TrimSpace(req.GetIdempotencyKey()),
 		IntentRef:      strings.TrimSpace(req.GetIntentRef()),
+		Comment:        strings.TrimSpace(req.GetComment()),
 		ProjectID:      projectID,
 		CustomerID:     strings.TrimSpace(req.GetCustomerId()),
 		AmountMinor:    req.GetAmountMinor(),
--- a/api/gateway/aurora/internal/service/gateway/card_processor_test.go
+++ b/api/gateway/aurora/internal/service/gateway/card_processor_test.go
@@ -93,6 +93,7 @@ func TestCardPayoutProcessor_Submit_Success(t *testing.T) {

 	req := validCardPayoutRequest()
 	req.ProjectId = 0
+	req.Comment = "invoice-2002"

 	resp, err := processor.Submit(context.Background(), req)
 	if err != nil {
@@ -118,6 +119,12 @@ func TestCardPayoutProcessor_Submit_Success(t *testing.T) {
 	if stored.ProviderPaymentID == "" {
 		t.Fatalf("expected provider payment id")
 	}
+	if got, want := stored.Comment, "invoice-2002"; got != want {
+		t.Fatalf("expected stored comment %q, got %q", want, got)
+	}
+	if got, want := resp.GetPayout().GetComment(), "invoice-2002"; got != want {
+		t.Fatalf("expected response comment %q, got %q", want, got)
+	}
 	if !stored.CreatedAt.Equal(existingCreated) {
 		t.Fatalf("expected created_at preserved in model, got %v", stored.CreatedAt)
 	}
--- a/api/gateway/aurora/internal/service/gateway/connector.go
+++ b/api/gateway/aurora/internal/service/gateway/connector.go
@@ -129,6 +129,7 @@ func connectorOperationParams() []*connectorv1.OperationParamSpec {
 			{Key: "amount_minor", Type: connectorv1.ParamType_INT, Required: false},
 			{Key: "project_id", Type: connectorv1.ParamType_INT, Required: false},
 			{Key: "parent_payment_ref", Type: connectorv1.ParamType_STRING, Required: true},
+			{Key: "comment", Type: connectorv1.ParamType_STRING, Required: false},
 			{Key: "customer_middle_name", Type: connectorv1.ParamType_STRING, Required: false},
 			{Key: "customer_country", Type: connectorv1.ParamType_STRING, Required: false},
 			{Key: "customer_state", Type: connectorv1.ParamType_STRING, Required: false},
@@ -188,7 +189,18 @@ func metadataFromReader(reader params.Reader) map[string]string {
 	if len(metadata) == 0 {
 		return nil
 	}
-	return metadata
+	out := make(map[string]string, len(metadata))
+	for key, value := range metadata {
+		k := strings.TrimSpace(key)
+		if k == "" || strings.EqualFold(k, "comment") {
+			continue
+		}
+		out[k] = strings.TrimSpace(value)
+	}
+	if len(out) == 0 {
+		return nil
+	}
+	return out
 }

 func buildCardTokenPayoutRequestFromParams(reader params.Reader,
@@ -218,6 +230,7 @@ func buildCardTokenPayoutRequestFromParams(reader params.Reader,
 		CardToken:          strings.TrimSpace(reader.String("card_token")),
 		CardHolder:         strings.TrimSpace(reader.String("card_holder")),
 		MaskedPan:          strings.TrimSpace(reader.String("masked_pan")),
+		Comment:            strings.TrimSpace(reader.String("comment")),
 		Metadata:           metadataFromReader(reader),
 		OperationRef:       operationRef,
 		IdempotencyKey:     strings.TrimSpace(idempotencyKey),
@@ -254,6 +267,7 @@ func buildCardPayoutRequestFromParams(reader params.Reader,
 		CardExpYear:        uint32(readerInt64(reader, "card_exp_year")),  //nolint:gosec // values are validated by request validators
 		CardExpMonth:       uint32(readerInt64(reader, "card_exp_month")), //nolint:gosec // values are validated by request validators
 		CardHolder:         strings.TrimSpace(reader.String("card_holder")),
+		Comment:            strings.TrimSpace(reader.String("comment")),
 		Metadata:           metadataFromReader(reader),
 		OperationRef:       operationRef,
 		IdempotencyKey:     strings.TrimSpace(idempotencyKey),
@@ -305,6 +319,9 @@ func payoutToOperation(state *mntxv1.CardPayoutState) *connectorv1.Operation {
 		params["payment_ref"] = paymentRef
 		params["parent_payment_ref"] = paymentRef
 	}
+	if comment := strings.TrimSpace(state.GetComment()); comment != "" {
+		params["comment"] = comment
+	}
 	if providerCode := strings.TrimSpace(state.GetProviderCode()); providerCode != "" {
 		params["provider_code"] = providerCode
 	}
--- a/api/gateway/aurora/internal/service/gateway/helpers.go
+++ b/api/gateway/aurora/internal/service/gateway/helpers.go
@@ -26,6 +26,7 @@ func CardPayoutStateFromProto(clock clockpkg.Clock, p *mntxv1.CardPayoutState) *
 		PaymentRef:        strings.TrimSpace(p.GetParentPaymentRef()),
 		OperationRef:      p.GetOperationRef(),
 		IntentRef:         p.GetIntentRef(),
+		Comment:           strings.TrimSpace(p.GetComment()),
 		IdempotencyKey:    p.GetIdempotencyKey(),
 		ProjectID:         p.ProjectId,
 		CustomerID:        p.CustomerId,
@@ -52,6 +53,7 @@ func StateToProto(m *model.CardPayout) *mntxv1.CardPayoutState {
 		ProviderCode:      m.ProviderCode,
 		ProviderMessage:   m.ProviderMessage,
 		ProviderPaymentId: m.ProviderPaymentID,
+		Comment:           strings.TrimSpace(m.Comment),
 		CreatedAt:         timestamppb.New(m.CreatedAt),
 		UpdatedAt:         timestamppb.New(m.UpdatedAt),
 	}
--- a/api/gateway/aurora/storage/model/state.go
+++ b/api/gateway/aurora/storage/model/state.go
@@ -13,6 +13,7 @@ type CardPayout struct {
 	OperationRef      string       `bson:"operationRef" json:"operation_ref"`
 	IdempotencyKey    string       `bson:"idempotencyKey" json:"idempotency_key"`
 	IntentRef         string       `bson:"intentRef" json:"intentRef"`
+	Comment           string       `bson:"comment,omitempty" json:"comment,omitempty"`
 	ProjectID         int64        `bson:"projectId" json:"project_id"`
 	CustomerID        string       `bson:"customerId" json:"customer_id"`
 	AmountMinor       int64        `bson:"amountMinor" json:"amount_minor"`
--- a/api/gateway/aurora/storage/mongo/store/payouts.go
+++ b/api/gateway/aurora/storage/mongo/store/payouts.go
@@ -89,6 +89,7 @@ func (p *Payouts) Upsert(ctx context.Context, record *model.CardPayout) error {
 	record.OperationRef = strings.TrimSpace(record.OperationRef)
 	record.PaymentRef = strings.TrimSpace(record.PaymentRef)
 	record.CustomerID = strings.TrimSpace(record.CustomerID)
+	record.Comment = strings.TrimSpace(record.Comment)
 	record.ProviderCode = strings.TrimSpace(record.ProviderCode)
 	record.ProviderPaymentID = strings.TrimSpace(record.ProviderPaymentID)

--- a/api/gateway/chain/go.mod
+++ b/api/gateway/chain/go.mod
@@ -23,7 +23,7 @@ require (

 require (
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260309015608-bb9dacb41b4e // indirect
+	github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260311194731-d5b7577c683d // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/bits-and-blooms/bitset v1.24.4 // indirect
 	github.com/bmatcuk/doublestar/v4 v4.10.0 // indirect
@@ -84,7 +84,7 @@ require (
 	go.opentelemetry.io/otel/trace v1.42.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
--- a/api/gateway/chain/go.sum
+++ b/api/gateway/chain/go.sum
@@ -6,8 +6,8 @@ github.com/DataDog/zstd v1.4.5 h1:EndNeuB0l9syBZhut0wns3gV1hL8zX8LIu6ZiVHWLIQ=
 github.com/DataDog/zstd v1.4.5/go.mod h1:1jcaCB/ufaK+sKp1NBhlGmpz41jOoPQ35bpF36t7BBo=
 github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
 github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
-github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260309015608-bb9dacb41b4e h1:sYPOzrcpCOv6rolFVWyEmjCSuZNg0yn2mVjlJYq8+2g=
-github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260309015608-bb9dacb41b4e/go.mod h1:ioLG6R+5bUSO1oeGSDxOV3FADARuMoytZCSX6MEMQkI=
+github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260311194731-d5b7577c683d h1:EA+kZ8mxGb1W/ewiIBMzb/1gg5BiW1Fvr3r4qCUBJEg=
+github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260311194731-d5b7577c683d/go.mod h1:ioLG6R+5bUSO1oeGSDxOV3FADARuMoytZCSX6MEMQkI=
 github.com/VictoriaMetrics/fastcache v1.13.0 h1:AW4mheMR5Vd9FkAPUv+NH6Nhw+fmbTMGMsNAoA/+4G0=
 github.com/VictoriaMetrics/fastcache v1.13.0/go.mod h1:hHXhl4DA2fTL2HTZDJFXWgW0LNjo6B+4aj2Wmng3TjU=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
@@ -313,8 +313,8 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 h1:mgKeJMpvi0yx/sU5GsxQ7p6s2wtOnGAHZWCHUM4KGzY=
 golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546/go.mod h1:j/pmGrbnkbPtQfxEe5D0VQhZC6qKbfKifgD0oM7sR70=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
--- a/api/gateway/chsettle/go.mod
+++ b/api/gateway/chsettle/go.mod
@@ -43,7 +43,7 @@ require (
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0 // indirect
--- a/api/gateway/chsettle/go.sum
+++ b/api/gateway/chsettle/go.sum
@@ -172,8 +172,8 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
--- a/api/gateway/common/go.mod
+++ b/api/gateway/common/go.mod
@@ -22,7 +22,7 @@ require (
 	github.com/xdg-go/stringprep v1.0.4 // indirect
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0 // indirect
 	golang.org/x/text v0.35.0 // indirect
--- a/api/gateway/common/go.sum
+++ b/api/gateway/common/go.sum
@@ -123,8 +123,8 @@ go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
 go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
--- a/api/gateway/mntx/client/client.go
+++ b/api/gateway/mntx/client/client.go
@@ -202,6 +202,7 @@ func payoutParamsFromCard(req *mntxv1.CardPayoutRequest) map[string]interface{}
 	params := map[string]interface{}{
 		"project_id":           req.GetProjectId(),
 		"parent_payment_ref":   strings.TrimSpace(req.GetParentPaymentRef()),
+		"comment":              strings.TrimSpace(req.GetComment()),
 		"customer_id":          strings.TrimSpace(req.GetCustomerId()),
 		"customer_first_name":  strings.TrimSpace(req.GetCustomerFirstName()),
 		"customer_middle_name": strings.TrimSpace(req.GetCustomerMiddleName()),
@@ -230,6 +231,7 @@ func payoutParamsFromToken(req *mntxv1.CardTokenPayoutRequest) map[string]interf
 	params := map[string]interface{}{
 		"project_id":           req.GetProjectId(),
 		"parent_payment_ref":   strings.TrimSpace(req.GetParentPaymentRef()),
+		"comment":              strings.TrimSpace(req.GetComment()),
 		"customer_id":          strings.TrimSpace(req.GetCustomerId()),
 		"customer_first_name":  strings.TrimSpace(req.GetCustomerFirstName()),
 		"customer_middle_name": strings.TrimSpace(req.GetCustomerMiddleName()),
@@ -299,6 +301,9 @@ func sanitizeMetadata(source map[string]string) map[string]string {
 		if k == "" {
 			continue
 		}
+		if strings.EqualFold(k, "comment") {
+			continue
+		}
 		out[k] = strings.TrimSpace(value)
 	}
 	if len(out) == 0 {
@@ -320,6 +325,11 @@ func payoutFromOperation(op *connectorv1.Operation) *mntxv1.CardPayoutState {
 		state.Currency = strings.TrimSpace(money.GetCurrency())
 		state.AmountMinor = minorFromMoney(money)
 	}
+	if params := op.GetParams(); params != nil {
+		if field, ok := params.GetFields()["comment"]; ok {
+			state.Comment = strings.TrimSpace(field.GetStringValue())
+		}
+	}
 	return state
 }

--- a/api/gateway/mntx/client/client_test.go
+++ b/api/gateway/mntx/client/client_test.go
@@ -142,3 +142,49 @@ func TestCreateCardTokenPayout_UsesOperationRefWhenReceiptOperationIDMissing(t *
 		t.Fatalf("payout_id mismatch: got=%q want=%q", got, want)
 	}
 }
+
+func TestCreateCardPayout_SendsCommentAsSeparateParam(t *testing.T) {
+	stub := &stubConnectorClient{
+		submitResp: &connectorv1.SubmitOperationResponse{
+			Receipt: &connectorv1.OperationReceipt{
+				OperationId: "payment-4:hop_4_card_payout_send",
+				Status:      connectorv1.OperationStatus_OPERATION_WAITING,
+			},
+		},
+	}
+	client := &gatewayClient{client: stub, cfg: Config{}}
+
+	_, err := client.CreateCardPayout(context.Background(), &mntxv1.CardPayoutRequest{
+		OperationRef:   "payment-4:hop_4_card_payout_send",
+		IdempotencyKey: "idem-4",
+		AmountMinor:    1000,
+		Currency:       "RUB",
+		Comment:        "invoice-44",
+		Metadata: map[string]string{
+			"comment":  "legacy-comment",
+			"trace_id": "trace-44",
+		},
+	})
+	if err != nil {
+		t.Fatalf("CreateCardPayout returned error: %v", err)
+	}
+	if stub.submitReq == nil || stub.submitReq.GetOperation() == nil {
+		t.Fatal("expected submitted operation")
+	}
+
+	fields := stub.submitReq.GetOperation().GetParams().GetFields()
+	if got, want := fields["comment"].GetStringValue(), "invoice-44"; got != want {
+		t.Fatalf("comment param mismatch: got=%q want=%q", got, want)
+	}
+	metadataField, ok := fields["metadata"]
+	if !ok || metadataField == nil || metadataField.GetStructValue() == nil {
+		t.Fatal("expected metadata param")
+	}
+	metadata := metadataField.GetStructValue().GetFields()
+	if _, hasComment := metadata["comment"]; hasComment {
+		t.Fatalf("metadata must not include comment key")
+	}
+	if got, want := metadata["trace_id"].GetStringValue(), "trace-44"; got != want {
+		t.Fatalf("trace_id metadata mismatch: got=%q want=%q", got, want)
+	}
+}
--- a/api/gateway/mntx/go.mod
+++ b/api/gateway/mntx/go.mod
@@ -46,7 +46,7 @@ require (
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0 // indirect
--- a/api/gateway/mntx/go.sum
+++ b/api/gateway/mntx/go.sum
@@ -174,8 +174,8 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
--- a/api/gateway/mntx/internal/service/gateway/card_payout_handlers.go
+++ b/api/gateway/mntx/internal/service/gateway/card_payout_handlers.go
@@ -141,6 +141,7 @@ func sanitizeCardPayoutRequest(req *mntxv1.CardPayoutRequest) *mntxv1.CardPayout
 	r.OperationRef = strings.TrimSpace(r.GetOperationRef())
 	r.IdempotencyKey = strings.TrimSpace(r.GetIdempotencyKey())
 	r.IntentRef = strings.TrimSpace(r.GetIntentRef())
+	r.Comment = strings.TrimSpace(r.GetComment())
 	return r
 }

@@ -172,6 +173,7 @@ func sanitizeCardTokenPayoutRequest(req *mntxv1.CardTokenPayoutRequest) *mntxv1.
 	r.OperationRef = strings.TrimSpace(r.GetOperationRef())
 	r.IdempotencyKey = strings.TrimSpace(r.GetIdempotencyKey())
 	r.IntentRef = strings.TrimSpace(r.GetIntentRef())
+	r.Comment = strings.TrimSpace(r.GetComment())
 	return r
 }

--- a/api/gateway/mntx/internal/service/gateway/card_processor.go
+++ b/api/gateway/mntx/internal/service/gateway/card_processor.go
@@ -87,6 +87,9 @@ func mergePayoutStateWithExisting(state, existing *model.CardPayout) {
 	if state.IntentRef == "" {
 		state.IntentRef = existing.IntentRef
 	}
+	if state.Comment == "" {
+		state.Comment = existing.Comment
+	}
 	if existing.PaymentRef != "" {
 		state.PaymentRef = existing.PaymentRef
 	}
@@ -168,6 +171,7 @@ func payoutStateLogFields(state *model.CardPayout) []zap.Field {
 		zap.String("operation_ref", state.OperationRef),
 		zap.String("idempotency_key", state.IdempotencyKey),
 		zap.String("intent_ref", state.IntentRef),
+		zap.String("comment", state.Comment),
 	}
 }

@@ -1070,6 +1074,7 @@ func (p *cardPayoutProcessor) Submit(ctx context.Context, req *mntxv1.CardPayout
 		OperationRef:   operationRef,
 		IdempotencyKey: strings.TrimSpace(req.GetIdempotencyKey()),
 		IntentRef:      strings.TrimSpace(req.GetIntentRef()),
+		Comment:        strings.TrimSpace(req.GetComment()),
 		ProjectID:      projectID,
 		CustomerID:     strings.TrimSpace(req.GetCustomerId()),
 		AmountMinor:    req.GetAmountMinor(),
@@ -1237,6 +1242,7 @@ func (p *cardPayoutProcessor) SubmitToken(ctx context.Context, req *mntxv1.CardT
 		OperationRef:   operationRef,
 		IdempotencyKey: strings.TrimSpace(req.GetIdempotencyKey()),
 		IntentRef:      strings.TrimSpace(req.GetIntentRef()),
+		Comment:        strings.TrimSpace(req.GetComment()),
 		ProjectID:      projectID,
 		CustomerID:     strings.TrimSpace(req.GetCustomerId()),
 		AmountMinor:    req.GetAmountMinor(),
--- a/api/gateway/mntx/internal/service/gateway/card_processor_test.go
+++ b/api/gateway/mntx/internal/service/gateway/card_processor_test.go
@@ -80,6 +80,7 @@ func TestCardPayoutProcessor_Submit_Success(t *testing.T) {

 	req := validCardPayoutRequest()
 	req.ProjectId = 0
+	req.Comment = "invoice-1001"

 	resp, err := processor.Submit(context.Background(), req)
 	if err != nil {
@@ -105,6 +106,12 @@ func TestCardPayoutProcessor_Submit_Success(t *testing.T) {
 	if stored.ProviderPaymentID == "" {
 		t.Fatalf("expected provider payment id")
 	}
+	if got, want := stored.Comment, "invoice-1001"; got != want {
+		t.Fatalf("expected stored comment %q, got %q", want, got)
+	}
+	if got, want := resp.GetPayout().GetComment(), "invoice-1001"; got != want {
+		t.Fatalf("expected response comment %q, got %q", want, got)
+	}
 	if !stored.CreatedAt.Equal(existingCreated) {
 		t.Fatalf("expected created_at preserved in model, got %v", stored.CreatedAt)
 	}
--- a/api/gateway/mntx/internal/service/gateway/connector.go
+++ b/api/gateway/mntx/internal/service/gateway/connector.go
@@ -129,6 +129,7 @@ func mntxOperationParams() []*connectorv1.OperationParamSpec {
 			{Key: "amount_minor", Type: connectorv1.ParamType_INT, Required: false},
 			{Key: "project_id", Type: connectorv1.ParamType_INT, Required: false},
 			{Key: "parent_payment_ref", Type: connectorv1.ParamType_STRING, Required: true},
+			{Key: "comment", Type: connectorv1.ParamType_STRING, Required: false},
 			{Key: "customer_middle_name", Type: connectorv1.ParamType_STRING, Required: false},
 			{Key: "customer_country", Type: connectorv1.ParamType_STRING, Required: false},
 			{Key: "customer_state", Type: connectorv1.ParamType_STRING, Required: false},
@@ -188,7 +189,18 @@ func metadataFromReader(reader params.Reader) map[string]string {
 	if len(metadata) == 0 {
 		return nil
 	}
-	return metadata
+	out := make(map[string]string, len(metadata))
+	for key, value := range metadata {
+		k := strings.TrimSpace(key)
+		if k == "" || strings.EqualFold(k, "comment") {
+			continue
+		}
+		out[k] = strings.TrimSpace(value)
+	}
+	if len(out) == 0 {
+		return nil
+	}
+	return out
 }

 func buildCardTokenPayoutRequestFromParams(reader params.Reader,
@@ -218,6 +230,7 @@ func buildCardTokenPayoutRequestFromParams(reader params.Reader,
 		CardToken:          strings.TrimSpace(reader.String("card_token")),
 		CardHolder:         strings.TrimSpace(reader.String("card_holder")),
 		MaskedPan:          strings.TrimSpace(reader.String("masked_pan")),
+		Comment:            strings.TrimSpace(reader.String("comment")),
 		Metadata:           metadataFromReader(reader),
 		OperationRef:       operationRef,
 		IdempotencyKey:     strings.TrimSpace(idempotencyKey),
@@ -254,6 +267,7 @@ func buildCardPayoutRequestFromParams(reader params.Reader,
 		CardExpYear:        uint32(readerInt64(reader, "card_exp_year")),  //nolint:gosec // values are validated by request validators
 		CardExpMonth:       uint32(readerInt64(reader, "card_exp_month")), //nolint:gosec // values are validated by request validators
 		CardHolder:         strings.TrimSpace(reader.String("card_holder")),
+		Comment:            strings.TrimSpace(reader.String("comment")),
 		Metadata:           metadataFromReader(reader),
 		OperationRef:       operationRef,
 		IdempotencyKey:     strings.TrimSpace(idempotencyKey),
@@ -305,6 +319,9 @@ func payoutToOperation(state *mntxv1.CardPayoutState) *connectorv1.Operation {
 		params["payment_ref"] = paymentRef
 		params["parent_payment_ref"] = paymentRef
 	}
+	if comment := strings.TrimSpace(state.GetComment()); comment != "" {
+		params["comment"] = comment
+	}
 	if providerCode := strings.TrimSpace(state.GetProviderCode()); providerCode != "" {
 		params["provider_code"] = providerCode
 	}
--- a/api/gateway/mntx/internal/service/gateway/helpers.go
+++ b/api/gateway/mntx/internal/service/gateway/helpers.go
@@ -26,6 +26,7 @@ func CardPayoutStateFromProto(clock clockpkg.Clock, p *mntxv1.CardPayoutState) *
 		PaymentRef:        strings.TrimSpace(p.GetParentPaymentRef()),
 		OperationRef:      p.GetOperationRef(),
 		IntentRef:         p.GetIntentRef(),
+		Comment:           strings.TrimSpace(p.GetComment()),
 		IdempotencyKey:    p.GetIdempotencyKey(),
 		ProjectID:         p.ProjectId,
 		CustomerID:        p.CustomerId,
@@ -52,6 +53,7 @@ func StateToProto(m *model.CardPayout) *mntxv1.CardPayoutState {
 		ProviderCode:      m.ProviderCode,
 		ProviderMessage:   m.ProviderMessage,
 		ProviderPaymentId: m.ProviderPaymentID,
+		Comment:           strings.TrimSpace(m.Comment),
 		CreatedAt:         timestamppb.New(m.CreatedAt),
 		UpdatedAt:         timestamppb.New(m.UpdatedAt),
 	}
--- a/api/gateway/mntx/storage/model/state.go
+++ b/api/gateway/mntx/storage/model/state.go
@@ -13,6 +13,7 @@ type CardPayout struct {
 	OperationRef      string       `bson:"operationRef" json:"operation_ref"`
 	IdempotencyKey    string       `bson:"idempotencyKey" json:"idempotency_key"`
 	IntentRef         string       `bson:"intentRef" json:"intentRef"`
+	Comment           string       `bson:"comment,omitempty" json:"comment,omitempty"`
 	ProjectID         int64        `bson:"projectId" json:"project_id"`
 	CustomerID        string       `bson:"customerId" json:"customer_id"`
 	AmountMinor       int64        `bson:"amountMinor" json:"amount_minor"`
--- a/api/gateway/mntx/storage/mongo/store/payouts.go
+++ b/api/gateway/mntx/storage/mongo/store/payouts.go
@@ -89,6 +89,7 @@ func (p *Payouts) Upsert(ctx context.Context, record *model.CardPayout) error {
 	record.OperationRef = strings.TrimSpace(record.OperationRef)
 	record.PaymentRef = strings.TrimSpace(record.PaymentRef)
 	record.CustomerID = strings.TrimSpace(record.CustomerID)
+	record.Comment = strings.TrimSpace(record.Comment)
 	record.ProviderCode = strings.TrimSpace(record.ProviderCode)
 	record.ProviderPaymentID = strings.TrimSpace(record.ProviderPaymentID)

--- a/api/gateway/tgsettle/go.mod
+++ b/api/gateway/tgsettle/go.mod
@@ -43,7 +43,7 @@ require (
 	github.com/youmark/pkcs8 v0.0.0-20240726163527-a2c0da244d78 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
 	golang.org/x/sys v0.42.0 // indirect
--- a/api/gateway/tgsettle/go.sum
+++ b/api/gateway/tgsettle/go.sum
@@ -172,8 +172,8 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
--- a/api/gateway/tron/go.mod
+++ b/api/gateway/tron/go.mod
@@ -26,7 +26,7 @@ require (

 require (
 	github.com/Microsoft/go-winio v0.6.2 // indirect
-	github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260309015608-bb9dacb41b4e // indirect
+	github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260311194731-d5b7577c683d // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
 	github.com/bits-and-blooms/bitset v1.24.4 // indirect
 	github.com/bmatcuk/doublestar/v4 v4.10.0 // indirect
@@ -92,7 +92,7 @@ require (
 	go.opentelemetry.io/otel/trace v1.42.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 // indirect
 	golang.org/x/net v0.51.0 // indirect
 	golang.org/x/sync v0.20.0 // indirect
--- a/api/gateway/tron/go.sum
+++ b/api/gateway/tron/go.sum
@@ -6,8 +6,8 @@ github.com/DataDog/zstd v1.4.5 h1:EndNeuB0l9syBZhut0wns3gV1hL8zX8LIu6ZiVHWLIQ=
 github.com/DataDog/zstd v1.4.5/go.mod h1:1jcaCB/ufaK+sKp1NBhlGmpz41jOoPQ35bpF36t7BBo=
 github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
 github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
-github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260309015608-bb9dacb41b4e h1:sYPOzrcpCOv6rolFVWyEmjCSuZNg0yn2mVjlJYq8+2g=
-github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260309015608-bb9dacb41b4e/go.mod h1:ioLG6R+5bUSO1oeGSDxOV3FADARuMoytZCSX6MEMQkI=
+github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260311194731-d5b7577c683d h1:EA+kZ8mxGb1W/ewiIBMzb/1gg5BiW1Fvr3r4qCUBJEg=
+github.com/ProjectZKM/Ziren/crates/go-runtime/zkvm_runtime v0.0.0-20260311194731-d5b7577c683d/go.mod h1:ioLG6R+5bUSO1oeGSDxOV3FADARuMoytZCSX6MEMQkI=
 github.com/VictoriaMetrics/fastcache v1.13.0 h1:AW4mheMR5Vd9FkAPUv+NH6Nhw+fmbTMGMsNAoA/+4G0=
 github.com/VictoriaMetrics/fastcache v1.13.0/go.mod h1:hHXhl4DA2fTL2HTZDJFXWgW0LNjo6B+4aj2Wmng3TjU=
 github.com/beorn7/perks v1.0.1 h1:VlbKKnNfV8bJzeqoa4cOKqO6bYr3WgKZxO8Z16+hsOM=
@@ -328,8 +328,8 @@ go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
 go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.48.0 h1:/VRzVqiRSggnhY7gNRxPauEQ5Drw9haKdM0jqfcCFts=
-golang.org/x/crypto v0.48.0/go.mod h1:r0kV5h3qnFPlQnBSrULhlsRfryS2pmewsg+XfMgkVos=
+golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4=
+golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA=
 golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546 h1:mgKeJMpvi0yx/sU5GsxQ7p6s2wtOnGAHZWCHUM4KGzY=
 golang.org/x/exp v0.0.0-20251023183803-a4bb9ffd2546/go.mod h1:j/pmGrbnkbPtQfxEe5D0VQhZC6qKbfKifgD0oM7sR70=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=