@agent-cards/checkout 0.10.0 → 0.11.0

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Approve a Recurly checkout before its native card request starts. Call `prepare` with `psp: 'recurly'` and `environment: 'shared'`, then submit the merchant's form once. The same selected card and approved purchase bind a new-card POST on the US or EU endpoint. The matching API, database migration and Vault release are required. Token issuance and merchant payment completion remain separate results.
+
 - Keep the selected card's issuer in guest Mercado Pago Checkout Pro in Mexico. The Vault resolves the card's eight-digit prefix against the merchant's captured checkout configuration over browser TLS. The SDK returns the original card-token response and corrects one native card association. Missing configuration, ambiguous issuers, changed checkout context, and a different card brand or type stop continuation. The matching API, Vault and encrypted relay release is required. Other Mercado Pago checkout families and merchant payment completion need separate validation.
 
 - Prepare controlled hosted Stripe Checkout in TEST mode with an explicit `stripeCheckout` attachment option and Autopilot grant. Dummy tokenization stays local; the browser's native final confirmation uses the generated shared core and enclave execution path. The matching backend and executor flags default off. This does not enable production Autopilot or establish a completed merchant order.

package/PREFLIGHT.md

@@ -208,7 +208,7 @@ Declare processor support and flow support separately. A flow entry cannot estab
 
 Take PSP identifiers, payment modes, flow identifiers, operation identifiers, and operation revisions from the packaged catalog. Verify each combination against the named adapter version before adding a `supported` entry. Use `unsupported` only for a known exclusion. A profile with a wrong schema, incompatible catalog, mismatched adapter version, or expired timestamp preserves `unknown`.
 
-The JSON contract uses `schema_version: 1`. The catalog bundled with this release uses `catalog_version: "2026-09-11.2"`. Keep the snapshot, classifier, and profile on the same catalog version. Re-normalize observations with the installed package after changing the catalog. Review the adapter declarations before issuing a compatible profile; changing the version string alone does not validate new behavior.
+The JSON contract uses `schema_version: 1`. The catalog bundled with this release uses `catalog_version: "2026-09-14.1"`. Keep the snapshot, classifier, and profile on the same catalog version. Re-normalize observations with the installed package after changing the catalog. Review the adapter declarations before issuing a compatible profile; changing the version string alone does not validate new behavior.
 
 Kernel can integrate the JSON contract immediately and supply its validated native capabilities later. No deployed Agentcard endpoint or payment request is required for that work.
 

package/README.md

@@ -134,7 +134,7 @@ Coverage is specific to the processor request format, merchant setup, browser tr
 | Stripe | tokenization replay and direct card-bearing PaymentIntent confirms are implemented; direct confirms read the intent's amount back from Stripe; a hint sent as `amount` + `currency` must agree with it. Browser token-to-intent continuation is unsupported and held. Validate the exact merchant flow before pilot use |
 | Braintree card tokenization | Prepared checkout supported; one live Haymarket Books ebook purchase with SDK `0.5.0` confirmed merchant fulfillment and SDK `completed` using a merchant receipt resolver. Independent processor capture/settlement, live 3DS and PayPal wallet flows remain unverified. |
 | Checkout.com | supported |
-| Mercado Pago | Card tokenization and prepared checkout are implemented. Guest Checkout Pro in Mexico also corrects the issuer for one native card association when the selected card has the same brand and type. A completed merchant payment remains unverified. |
+| Mercado Pago | Card tokenization and prepared checkout are implemented. Guest Checkout Pro in Mexico also corrects the issuer for one native card association when the selected card has the same brand and type. One live MXN 40 Lotería Chida purchase with published SDK 0.10.0 completed automatically through Pay; the merchant confirmed paid status and PDF fulfillment. The historical SDK result remains unknown because the private receipt adapter rejected a relative download URL; a separate read with the corrected adapter confirms that same paid receipt. Independent processor capture/settlement and other country or integration paths remain unverified. |
 | VGS Collect (Very Good Security; Wolt) | not supported: VGS's proxy aliases only submissions from its own iframe, so a replay from the cardholder's device is refused by the merchant (verified on Wolt, 2026-09-03). Not recognized, so the agent's browser is not paused there |
 | Adyen | supported (mode `cse`): the vault encrypts the card for Adyen on the cardholder's device and your browser sends it |
 | Tranzila | supported (mode `hosted_form`): the cardholder finishes on Tranzila's own page; the paused form navigation resolves to a synthetic page, and you poll the merchant's order state |
@@ -467,8 +467,17 @@ await page.getByRole('button', { name: 'Pay', exact: true }).click();
 | Worldpay | `production` or `sandbox` | Matching Access Worldpay host and `/sessions/card` |
 | Bambora | `shared` | `/scripts/tokenization/tokens` on `api.bam.shift4api.net` or `api.na.bambora.com` |
 | Mercado Pago | `shared` | `api.mercadopago.com/v1/card_tokens` with a fresh card body |
+| Recurly | `shared` | Form-encoded POST to `/js/v1/token` on `api.recurly.com` or `api.eu.recurly.com` |
 
-Use `environment: 'shared'` for Bambora and Mercado Pago because the same endpoint serves test and live requests. Agentcard cannot establish the processor's test mode from that URL or a credential prefix. Configure test mode through the merchant's processor account when testing. Agentcard's own `sandbox` flag remains separate. Prepared Worldpay, Bambora and Mercado Pago requests reject saved-card and recurring request bodies; a refused request retires the local preparation. Reconcile any existing merchant attempt before creating a new attachment.
+Use `environment: 'shared'` for Bambora, Mercado Pago and Recurly because the same endpoint serves test and live requests. Agentcard cannot establish the processor's test mode from that URL or a credential prefix. Configure test mode through the merchant's processor account when testing. Agentcard's own `sandbox` flag remains separate. Prepared Worldpay, Bambora, Mercado Pago and Recurly requests reject saved-card and recurring request bodies; a refused request retires the local preparation. Reconcile any existing merchant attempt before creating a new attachment.
+
+Prepare Recurly before clicking the merchant's payment button:
+
+```ts
+await controller.prepare({ psp: 'recurly', environment: 'shared' });
+```
+
+After approval, submit the merchant's form once. Recurly's native request timer starts with that submission. The SDK preserves the captured US or EU endpoint and accepts a new-card form only. Legacy JSONP, saved tokens, bank accounts, alternative payments and proactive authentication requests require separate support. Prepared requests also refuse nonempty Worldpay or Cybersource risk results because those sessions can depend on the original card. A nonempty co-badged network preference is also refused until the selected card’s supported networks can be checked. A card token does not confirm a donation, subscription or purchase; confirm the merchant's result before reporting payment success.
 
 ### Use Checkout Pro in Mexico
 
@@ -570,10 +579,12 @@ When the cardholder has enabled an eligible spending rule in their vault, the sa
 
 Use `executionMode: 'user_approval'` to require the existing confirmation flow. Without a selected card or grant, the backend can use exactly one eligible rule; ambiguous card selection keeps confirmation. A `grantId` restricts selection to that rule. The initial executor supports only the configured controlled Stripe test flow, and production remains disabled.
 
-For the controlled hosted Stripe Checkout TEST integration, both attachment functions accept `stripeCheckout: { sessionId, publishableKey }`. This requires a `cs_test_` Session, its `pk_test_` key, `executionMode: 'autopilot'`, an explicit `grantId`, and a positive numeric USD `amount` in cents. The top-level document must be that Session on `checkout.stripe.com`.
+For controlled hosted Stripe Checkout, both attachment functions accept `stripeCheckout: { sessionId, publishableKey, environment? }`. The default is TEST, requiring `cs_test_` and `pk_test_`. LIVE requires explicit `environment: 'production'`, a `cs_live_` Session and its `pk_live_` key. Both modes require `executionMode: 'autopilot'`, an explicit `grantId`, and a positive numeric USD `amount` in cents. The top-level document must be that Session on `checkout.stripe.com`. Direct `authorize()` calls use `stripeCheckoutEnvironment: 'production'` for the same explicit LIVE opt-in; the attachment functions pass it automatically.
 
 The SDK answers dummy-card tokenization locally, then sends the browser's final native confirmation through the shared core and enclave. The local response is preparation only: it creates no authorization and makes no processor request. The final result includes `checkoutSessionId` only after the selected grant, restricted terminal response, and captured amount have been checked. Continue to confirm the merchant order through the checkout controller.
 
-This integration requires matching backend and measured executor releases, with separate TEST flags explicitly enabled. An unavailable prepared request is declined or held for reconciliation; it cannot switch to human approval. LIVE Sessions, subscriptions, saved-card flows, and authentication continuations are not supported by this option. It cannot enable production Autopilot.
+The shared core carries a validated billing email from that tokenization request into the final confirmation before authorization. The email stays bound to the same Session and local PaymentMethod reference. Missing email stays missing; duplicate or conflicting values are refused. The SDK does not fill an email from the Agentcard account or invent one for the merchant.
+
+This integration requires matching backend and measured executor releases. TEST and LIVE have separate admission controls. LIVE also requires a newly authorized production grant on the selected real card, a fixed merchant account/profile with exactly one complete fixed-price USD line item and an independently reviewed operation qualification reference; the SDK option supplies none of these. LIVE deployment remains unqualified and disabled until that evidence exists. Exact observed totals do not establish atomic amount enforcement by Stripe. Subscriptions, saved-card flows and authentication continuations remain excluded. An unavailable preparation or uncertain result is declined or held for reconciliation; it cannot switch to a competing human-approval payment.
 
 The adapters also send the observed top-level HTTPS `merchantOrigin`, such as `https://shop.example`, without a path, query or trailing slash. Direct `authorize()` callers can supply that origin explicitly. It is a routing hint; the protected adapter independently verifies the processor account, payee and amount. If a browser cannot provide its top-level URL, an explicit `merchantOrigin` option can supply the hint; otherwise the regular approval path remains available.

package/dist/cdp.js

@@ -711,6 +711,7 @@ export async function attachToCdp(cdp, pageSessionId, opts) {
                 cardId: preparation?.cardId ?? opts.cardId,
                 executionMode: opts.executionMode,
                 grantId: opts.grantId,
+                stripeCheckoutEnvironment: opts.stripeCheckout?.environment,
                 merchantOrigin,
                 pageOrigin,
                 pageAmount,
@@ -1076,6 +1077,7 @@ export async function attachToPlaywright(page, opts) {
                     cardId: preparation?.cardId ?? opts.cardId,
                     executionMode: opts.executionMode,
                     grantId: opts.grantId,
+                    stripeCheckoutEnvironment: opts.stripeCheckout?.environment,
                     merchantOrigin,
                     pageOrigin,
                     pageAmount,

package/dist/client.d.ts

@@ -166,6 +166,8 @@ export declare class CheckoutPreparationError extends Error {
     constructor(preparationId: string | null, reason: string);
 }
 export interface AuthorizeInput extends ExecutionMetadata {
+    /** Native Checkout defaults to TEST; LIVE requires this explicit opt-in. */
+    stripeCheckoutEnvironment?: 'test' | 'production';
     /** Observed top-level HTTPS merchant origin; a routing hint, never payment authority. */
     merchantOrigin?: string;
     /** Your identifier for the person whose card should pay. */

package/dist/client.js

@@ -520,14 +520,16 @@ export class VaultClient {
             || input.executionMode === 'autopilot' || input.grantId))
             throw new Error('mercado_checkout_context_invalid');
         const nativeCheckout = hasStripeCheckoutMarker(input.request);
+        if (input.stripeCheckoutEnvironment !== undefined && !nativeCheckout)
+            throw new Error('Native Stripe Checkout environment requires its bound request.');
         const checkoutContext = nativeCheckout ? parseStripeCheckoutContext(input.request) : null;
         if (nativeCheckout) {
             if (!checkoutContext || input.preparation || input.executionMode !== 'autopilot' || !input.grantId
                 || !Number.isSafeInteger(input.amount) || Number(input.amount) <= 0 || input.currency !== 'usd'
                 || input.merchantOrigin !== 'https://checkout.stripe.com')
-                throw new Error('Native Stripe Checkout requires an explicit TEST autopilot configuration.');
+                throw new Error('Native Stripe Checkout requires an explicit mode-bound autopilot configuration.');
             const phase = classifyStripeCheckoutRequest(input.request, {
-                sessionId: checkoutContext.session_id, syntheticPaymentMethodId: checkoutContext.synthetic_payment_method_id,
+                environment: input.stripeCheckoutEnvironment, sessionId: checkoutContext.session_id, syntheticPaymentMethodId: checkoutContext.synthetic_payment_method_id,
                 amountCents: input.amount,
             });
             if (phase?.phase !== 'final')
@@ -814,7 +816,7 @@ export class VaultClient {
                     if (checkoutContext) {
                         let receipt;
                         try {
-                            receipt = parseStripeCheckoutResponse(JSON.parse(response.body), { sessionId: checkoutContext.session_id });
+                            receipt = parseStripeCheckoutResponse(JSON.parse(response.body), { environment: input.stripeCheckoutEnvironment, sessionId: checkoutContext.session_id });
                         }
                         catch { /* Never return an unvalidated processor body to the page. */ }
                         if (response.status !== 200 || !receipt || s.amount_verified !== true

package/dist/preflight-capabilities.generated.d.ts

@@ -51,7 +51,7 @@ export declare const CHECKOUT_PREFLIGHT_CAPABILITIES: {
         readonly mode: "token";
         readonly operations: readonly [{
             readonly id: "stripe.device_checkout_confirm.v1";
-            readonly path_pattern: "^/v1/payment_pages/cs_test_[A-Za-z0-9]+/confirm$";
+            readonly path_pattern: "^/v1/payment_pages/cs_(?:test|live)_[A-Za-z0-9]+/confirm$";
             readonly effect: "payment_confirmation";
             readonly amount_binding: "expected_amount_test_evidence_currency_unqualified";
             readonly psp: "stripe";
@@ -1002,7 +1002,7 @@ export declare const CHECKOUT_PREFLIGHT_CAPABILITIES: {
                 readonly requirements: readonly ["verify_merchant_billing"];
             };
         };
-        readonly limitations: readonly ["Only the listed request format is recognized; a recognized processor is not verified merchant coverage.", "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."];
+        readonly limitations: readonly ["Only the listed request format is recognized; a recognized processor is not verified merchant coverage.", "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints.", "Prepare approval before submitting a timed native card form. Both regions require the shared environment because test and live keys use the same endpoints."];
         readonly unsupported_variants: readonly [{
             readonly variant: "legacy_jsonp_get";
             readonly status: "unsupported";
@@ -1013,6 +1013,21 @@ export declare const CHECKOUT_PREFLIGHT_CAPABILITIES: {
             readonly status: "unsupported";
             readonly constraint: "direct_sdk";
             readonly reason: "Bank-account and alternative-payment token routes are outside the new-card path.";
+        }, {
+            readonly variant: "card_bound_risk_preflight";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "Worldpay and Cybersource risk sessions can depend on the original card. Prepared requests refuse those results until collection can use the approved card.";
+        }, {
+            readonly variant: "prepared_co_badged_network_choice";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "A prepared request cannot reuse the original card’s network preference without checking the selected card’s supported networks.";
+        }, {
+            readonly variant: "proactive_authentication";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "Card-bearing risk authentication and proactive 3-D Secure action tokens require separate support.";
         }];
         readonly processor_amount: "none";
         readonly challenge_surface: "merchant_browser";

package/dist/preflight-capabilities.generated.js

@@ -80,7 +80,7 @@ export const CHECKOUT_PREFLIGHT_CAPABILITIES = {
             "operations": [
                 {
                     "id": "stripe.device_checkout_confirm.v1",
-                    "path_pattern": "^/v1/payment_pages/cs_test_[A-Za-z0-9]+/confirm$",
+                    "path_pattern": "^/v1/payment_pages/cs_(?:test|live)_[A-Za-z0-9]+/confirm$",
                     "effect": "payment_confirmation",
                     "amount_binding": "expected_amount_test_evidence_currency_unqualified",
                     "psp": "stripe",
@@ -1545,7 +1545,8 @@ export const CHECKOUT_PREFLIGHT_CAPABILITIES = {
             },
             "limitations": [
                 "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
-                "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."
+                "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints.",
+                "Prepare approval before submitting a timed native card form. Both regions require the shared environment because test and live keys use the same endpoints."
             ],
             "unsupported_variants": [
                 {
@@ -1559,6 +1560,24 @@ export const CHECKOUT_PREFLIGHT_CAPABILITIES = {
                     "status": "unsupported",
                     "constraint": "direct_sdk",
                     "reason": "Bank-account and alternative-payment token routes are outside the new-card path."
+                },
+                {
+                    "variant": "card_bound_risk_preflight",
+                    "status": "unsupported",
+                    "constraint": "direct_sdk",
+                    "reason": "Worldpay and Cybersource risk sessions can depend on the original card. Prepared requests refuse those results until collection can use the approved card."
+                },
+                {
+                    "variant": "prepared_co_badged_network_choice",
+                    "status": "unsupported",
+                    "constraint": "direct_sdk",
+                    "reason": "A prepared request cannot reuse the original card’s network preference without checking the selected card’s supported networks."
+                },
+                {
+                    "variant": "proactive_authentication",
+                    "status": "unsupported",
+                    "constraint": "direct_sdk",
+                    "reason": "Card-bearing risk authentication and proactive 3-D Secure action tokens require separate support."
                 }
             ],
             "processor_amount": "none",

package/dist/preflight-catalog.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "catalog_version": "2026-09-11.2",
+  "catalog_version": "2026-09-14.1",
   "scope": "preflight_hint",
   "integration_version_note": "bundled describes the capabilities accompanying this helper, not a claim about another installed SDK version.",
   "limits": {
@@ -1966,7 +1966,7 @@
       "operations": [
         {
           "id": "stripe.device_checkout_confirm.v1",
-          "path_pattern": "^/v1/payment_pages/cs_test_[A-Za-z0-9]+/confirm$",
+          "path_pattern": "^/v1/payment_pages/cs_(?:test|live)_[A-Za-z0-9]+/confirm$",
           "effect": "payment_confirmation",
           "amount_binding": "expected_amount_test_evidence_currency_unqualified",
           "psp": "stripe",
@@ -3431,7 +3431,8 @@
       },
       "limitations": [
         "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
-        "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."
+        "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints.",
+        "Prepare approval before submitting a timed native card form. Both regions require the shared environment because test and live keys use the same endpoints."
       ],
       "unsupported_variants": [
         {
@@ -3445,6 +3446,24 @@
           "status": "unsupported",
           "constraint": "direct_sdk",
           "reason": "Bank-account and alternative-payment token routes are outside the new-card path."
+        },
+        {
+          "variant": "card_bound_risk_preflight",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Worldpay and Cybersource risk sessions can depend on the original card. Prepared requests refuse those results until collection can use the approved card."
+        },
+        {
+          "variant": "prepared_co_badged_network_choice",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "A prepared request cannot reuse the original card’s network preference without checking the selected card’s supported networks."
+        },
+        {
+          "variant": "proactive_authentication",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Card-bearing risk authentication and proactive 3-D Secure action tokens require separate support."
         }
       ],
       "processor_amount": "none",
@@ -3722,7 +3741,7 @@
   "direct_sdk_profile": {
     "schema_version": 1,
     "profile_version": "preflight-2",
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "direct_sdk",
       "version": "bundled"
@@ -3881,7 +3900,7 @@
   "kernel_profile_template": {
     "schema_version": 1,
     "profile_version": "kernel-template-1",
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "kernel_native",
       "version": "REPLACE-WITH-ADAPTER-VERSION"

package/dist/preflight-schemas.json

@@ -162,7 +162,7 @@
             "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,119}$"
           },
           "catalog_version": {
-            "const": "2026-09-11.2"
+            "const": "2026-09-14.1"
           },
           "integration": {
             "type": "object",
@@ -358,7 +358,7 @@
         "const": 1
       },
       "catalog_version": {
-        "const": "2026-09-11.2"
+        "const": "2026-09-14.1"
       },
       "signals": {
         "type": "array",
@@ -550,7 +550,7 @@
         "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,119}$"
       },
       "catalog_version": {
-        "const": "2026-09-11.2"
+        "const": "2026-09-14.1"
       },
       "integration": {
         "type": "object",
@@ -753,7 +753,7 @@
         "const": 1
       },
       "catalog_version": {
-        "const": "2026-09-11.2"
+        "const": "2026-09-14.1"
       },
       "integration": {
         "type": "object",

package/dist/preflight.generated.d.ts

@@ -1,6 +1,6 @@
 /** Advisory page discovery. These rules never admit a payment destination. */
 export declare const CHECKOUT_PREFLIGHT_VERSION = "1";
-export declare const CHECKOUT_PREFLIGHT_CATALOG_VERSION = "2026-09-11.2";
+export declare const CHECKOUT_PREFLIGHT_CATALOG_VERSION = "2026-09-14.1";
 export declare const CHECKOUT_PREFLIGHT_LIMITS: Readonly<{
     frames: 64;
     signals: 2048;
@@ -196,7 +196,7 @@ export declare function getCheckoutPreflightCatalog(): {
         readonly mode: "token";
         readonly operations: readonly [{
             readonly id: "stripe.device_checkout_confirm.v1";
-            readonly path_pattern: "^/v1/payment_pages/cs_test_[A-Za-z0-9]+/confirm$";
+            readonly path_pattern: "^/v1/payment_pages/cs_(?:test|live)_[A-Za-z0-9]+/confirm$";
             readonly effect: "payment_confirmation";
             readonly amount_binding: "expected_amount_test_evidence_currency_unqualified";
             readonly psp: "stripe";
@@ -1147,7 +1147,7 @@ export declare function getCheckoutPreflightCatalog(): {
                 readonly requirements: readonly ["verify_merchant_billing"];
             };
         };
-        readonly limitations: readonly ["Only the listed request format is recognized; a recognized processor is not verified merchant coverage.", "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."];
+        readonly limitations: readonly ["Only the listed request format is recognized; a recognized processor is not verified merchant coverage.", "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints.", "Prepare approval before submitting a timed native card form. Both regions require the shared environment because test and live keys use the same endpoints."];
         readonly unsupported_variants: readonly [{
             readonly variant: "legacy_jsonp_get";
             readonly status: "unsupported";
@@ -1158,6 +1158,21 @@ export declare function getCheckoutPreflightCatalog(): {
             readonly status: "unsupported";
             readonly constraint: "direct_sdk";
             readonly reason: "Bank-account and alternative-payment token routes are outside the new-card path.";
+        }, {
+            readonly variant: "card_bound_risk_preflight";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "Worldpay and Cybersource risk sessions can depend on the original card. Prepared requests refuse those results until collection can use the approved card.";
+        }, {
+            readonly variant: "prepared_co_badged_network_choice";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "A prepared request cannot reuse the original card’s network preference without checking the selected card’s supported networks.";
+        }, {
+            readonly variant: "proactive_authentication";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "Card-bearing risk authentication and proactive 3-D Secure action tokens require separate support.";
         }];
         readonly processor_amount: "none";
         readonly challenge_surface: "merchant_browser";

package/dist/preflight.generated.js

@@ -1,9 +1,9 @@
 // Generated from @agent-cards/payment-core. Do not edit.
-// source-sha256: ced5aecd22684c680a53b9e33dff1c5333cd36823f6fe3b4b8e84f10f6f73c53
+// source-sha256: 69919c5fe4133b090eddae027fb12c5ad7c51a8c63e8719325c174aeee78c30a
 import { CHECKOUT_PREFLIGHT_CAPABILITIES } from './preflight-capabilities.generated.js';
 /** Advisory page discovery. These rules never admit a payment destination. */
 export const CHECKOUT_PREFLIGHT_VERSION = '1';
-export const CHECKOUT_PREFLIGHT_CATALOG_VERSION = '2026-09-11.2';
+export const CHECKOUT_PREFLIGHT_CATALOG_VERSION = '2026-09-14.1';
 export const CHECKOUT_PREFLIGHT_LIMITS = Object.freeze({ frames: 64, signals: 2048, snapshot_bytes: 262144, url_length: 4096 });
 // Identification-only IDs, checked against the canonical catalog by the core tests.
 // No card destination, request method, or request body pattern lives here.

package/dist/prepared-processor.d.ts

@@ -1,4 +1,4 @@
-export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago';
+export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly';
 export type PreparationEnvironment = 'production' | 'sandbox' | 'shared';
 /** Shared endpoint processors cannot attest test/live mode from their URL or key prefix. */
 export declare function validPreparationEnvironment(psp: string, environment: string): boolean;

package/dist/prepared-processor.js

@@ -1,7 +1,8 @@
 import { braintreeEnvironment, isPreparedBraintreeRequest, readTokenizationJson } from './braintree.js';
+import { isPreparedRecurlyRequest } from './recurly.generated.js';
 /** Shared endpoint processors cannot attest test/live mode from their URL or key prefix. */
 export function validPreparationEnvironment(psp, environment) {
-    if (psp === 'bambora' || psp === 'mercado_pago')
+    if (psp === 'bambora' || psp === 'mercado_pago' || psp === 'recurly')
         return environment === 'shared';
     return ['square', 'braintree', 'worldpay'].includes(psp) && ['production', 'sandbox'].includes(environment);
 }
@@ -12,6 +13,8 @@ export function preparationEndpoint(psp, environment) {
         return 'https://api.bam.shift4api.net/scripts/tokenization/tokens';
     if (psp === 'mercado_pago')
         return 'https://api.mercadopago.com/v1/card_tokens';
+    if (psp === 'recurly')
+        return 'https://api.recurly.com/js/v1/token';
     if (psp === 'worldpay')
         return environment === 'production'
             ? 'https://access.worldpay.com/sessions/card' : 'https://try.access.worldpay.com/sessions/card';
@@ -70,6 +73,9 @@ export function matchesPreparedRequest(psp, environment, requestUrl, method, bod
         const request = new URL(requestUrl), endpoint = new URL(preparationEndpoint(psp, environment));
         if (request.username || request.password || request.hash)
             return false;
+        if (psp === 'recurly')
+            return [endpoint.href, 'https://api.eu.recurly.com/js/v1/token'].includes(requestUrl)
+                && isPreparedRecurlyRequest(body ?? null);
         if (psp === 'bambora') {
             if (![endpoint.href, 'https://api.na.bambora.com/scripts/tokenization/tokens'].includes(requestUrl))
                 return false;

package/dist/recurly.generated.d.ts

@@ -0,0 +1 @@
+export declare function isPreparedRecurlyRequest(body: string | null): boolean;

package/dist/recurly.generated.js

@@ -0,0 +1,87 @@
+// Generated from @agent-cards/payment-core. Do not edit.
+// source-sha256: 6a1932841621aca1a7371165e0b54a161c4dd5bb077acc190a0c5399229fa350
+/** Normal Recurly.js 4 new-card POST, before it consumes an approval.
+ * Native fields and indexed form serialization: recurly/recurly-js commit
+ * 7cd9a2b131bf12d7cebfbc7eea1ba86aa54c60e7, lib/recurly/{token,request,fraud}.js
+ * and risk/{risk,three-d-secure/three-d-secure}.js. Worldpay and Cybersource
+ * risk sessions depend on the original card; proactive Braintree also produces
+ * another token type. All nonempty risk results are refused until collection
+ * can use the approved card. This function never rewrites the body.
+ */
+const SCALARS = new Set(['number', 'month', 'year', 'cvv', 'type', 'key', 'version', 'deviceId', 'sessionId', 'instanceId',
+    'first_name', 'last_name', 'address1', 'address2', 'company', 'country', 'city', 'state', 'postal_code', 'phone',
+    'vat_number', 'tax_identifier', 'tax_identifier_type', 'fraud_session_id', 'card_network_preference']);
+const BROWSER = new Set(['color_depth', 'java_enabled', 'language', 'referrer_url', 'screen_height', 'screen_width', 'time_zone_offset', 'user_agent']);
+const FRAUD_PROCESSORS = new Set(['kount', 'litle_threat_metrix', 'braintree', 'fraudnet']);
+const contiguous = (values) => [...values.keys()].sort((a, b) => Number(a) - Number(b)).every((value, index) => value === String(index));
+export function isPreparedRecurlyRequest(body) {
+    if (typeof body !== 'string' || !body || body.length > 65536)
+        return false;
+    const chunks = body.split('&');
+    if (chunks.length > 200)
+        return false;
+    const fields = new Map();
+    const fraud = new Map();
+    try {
+        for (const chunk of chunks) {
+            const separator = chunk.indexOf('=');
+            if (separator < 1)
+                return false;
+            const name = decodeURIComponent(chunk.slice(0, separator).replace(/\+/g, ' '));
+            const value = decodeURIComponent(chunk.slice(separator + 1).replace(/\+/g, ' '));
+            if (fields.has(name) || value.length > 4096 || /[\u0000-\u001f\u007f]/.test(value))
+                return false;
+            fields.set(name, value);
+            if (SCALARS.has(name))
+                continue;
+            const browser = /^browser\[([a-z_]+)\]$/.exec(name);
+            if (browser && BROWSER.has(browser[1]))
+                continue;
+            const structured = /^fraud\[([0-9]|1[0-9])\]\[(.+)\]$/.exec(name);
+            if (!structured)
+                return false;
+            const [, index, leaf] = structured;
+            if (!['processor', 'session_id'].includes(leaf) && !/^udf\]\[([0-9]|1[0-9])\]\[(label|value)$/.test(leaf))
+                return false;
+            if (!fraud.has(index))
+                fraud.set(index, new Map());
+            fraud.get(index).set(leaf, value);
+        }
+    }
+    catch {
+        return false;
+    }
+    const number = fields.get('number') ?? '', month = fields.get('month') ?? '', year = fields.get('year') ?? '';
+    if (!/^[0-9]{12,19}$/.test(number) || !/^[0-9]{1,2}$/.test(month) || Number(month) < 1 || Number(month) > 12
+        || !/^(?:[0-9]{2}|20[0-9]{2})$/.test(year))
+        return false;
+    if (fields.has('cvv') && fields.get('cvv') !== '' && !/^[0-9]{3,4}$/.test(fields.get('cvv')))
+        return false;
+    if (fields.has('type') && fields.get('type') !== 'credit_card')
+        return false;
+    // A co-badged network choice belongs to the entered card's supported brands.
+    if (fields.get('card_network_preference'))
+        return false;
+    if (fields.has('key') && !fields.get('key')?.trim())
+        return false;
+    if (!contiguous(fraud))
+        return false;
+    for (const item of fraud.values()) {
+        if (!FRAUD_PROCESSORS.has(item.get('processor') ?? '') || !item.get('session_id'))
+            return false;
+        const udf = new Map();
+        for (const key of item.keys()) {
+            const field = /^udf\]\[([0-9]|1[0-9])\]\[(label|value)$/.exec(key);
+            if (!field)
+                continue;
+            if (item.get('processor') !== 'kount')
+                return false;
+            if (!udf.has(field[1]))
+                udf.set(field[1], new Set());
+            udf.get(field[1]).add(field[2]);
+        }
+        if (!contiguous(udf) || [...udf.values()].some(keys => keys.size !== 2))
+            return false;
+    }
+    return true;
+}

package/dist/stripe-checkout.d.ts

@@ -1,6 +1,7 @@
 import type { PausedRequest } from './client.js';
-/** Explicit development enrollment; this option cannot enable production execution. */
+/** Test by default. Production requires explicit opt-in and an independently admitted live grant. */
 export interface StripeCheckoutOptions {
+    environment?: 'test' | 'production';
     sessionId: string;
     publishableKey: string;
 }
@@ -53,6 +54,7 @@ export declare class StripeCheckoutClaimConflictError extends StripeCheckoutReje
  */
 export declare class StripeCheckoutGate {
     private state;
+    private billing?;
     private readonly binding?;
     constructor(options: {
         stripeCheckout?: StripeCheckoutOptions;

package/dist/stripe-checkout.generated.d.ts

@@ -1,5 +1,10 @@
 declare var STRIPE_CHECKOUT_OPERATION: string;
 declare var STRIPE_CHECKOUT_CONTEXT_HEADER: string;
+declare function validateStripeCheckoutIdentity(value: any): Readonly<{
+    environment: any;
+    livemode: boolean;
+}>;
+declare function validateStripeCheckoutCard(card: any, environment?: string): boolean;
 declare function isStripeCheckoutHostedMode(value: any): boolean;
 declare function encodeStripeCheckoutContext(value: any): string;
 declare function hasStripeCheckoutMarker(request: any): boolean;
@@ -9,6 +14,12 @@ declare function parseStripeCheckoutContext(request: any): {
     synthetic_payment_method_id: any;
 } | null | undefined;
 declare function isStripeCheckoutEndpoint(raw: any): boolean;
+declare function captureStripeCheckoutBilling(request: any, options: any): Readonly<{
+    session_id: any;
+    synthetic_payment_method_id: any;
+    email: string | null;
+}>;
+declare function attachStripeCheckoutBilling(request: any, captured: any, options: any): any;
 declare function classifyStripeCheckoutRequest(request: any, options?: {}): {
     phase: string;
     session_id: any;
@@ -44,4 +55,4 @@ declare function prepareStripeCheckoutReplay(request: any, card: any, options?:
     };
     where: string[];
 };
-export { STRIPE_CHECKOUT_CONTEXT_HEADER, STRIPE_CHECKOUT_OPERATION, classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, hasStripeCheckoutMarker, isStripeCheckoutEndpoint, isStripeCheckoutHostedMode, parseStripeCheckoutContext, parseStripeCheckoutResponse, prepareStripeCheckoutReplay };
+export { STRIPE_CHECKOUT_CONTEXT_HEADER, STRIPE_CHECKOUT_OPERATION, attachStripeCheckoutBilling, captureStripeCheckoutBilling, classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, hasStripeCheckoutMarker, isStripeCheckoutEndpoint, isStripeCheckoutHostedMode, parseStripeCheckoutContext, parseStripeCheckoutResponse, prepareStripeCheckoutReplay, validateStripeCheckoutCard, validateStripeCheckoutIdentity };

package/dist/stripe-checkout.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 41b6fde86ad6193d1d7cb505c7dda522c2d664a9939ee0a4a0b3028cfa8bfa06
+// artifact-sha256: 2f7e340ba22bc33539f11e384a3e8362ae3fa510a9f8b540783c02bebcbc1ebf
 // src/definitions.js
 function deepFreeze(value) {
     if (value && typeof value === "object" && !Object.isFrozen(value)) {
@@ -524,8 +524,8 @@ var replayPolicy = Object.freeze({ contentTypeFor, HEADER_NEVER_FORWARD });
 // src/stripe-checkout.js
 var STRIPE_CHECKOUT_OPERATION = "stripe.device_checkout_confirm.v1";
 var STRIPE_CHECKOUT_CONTEXT_HEADER = "x-agentcard-stripe-checkout-context";
-var SESSION = /^cs_test_[A-Za-z0-9]{1,200}(?![\s\S])/;
-var KEY = /^pk_test_[A-Za-z0-9_]{1,256}(?![\s\S])/;
+var SESSION = /^cs_(?:test|live)_[A-Za-z0-9]{1,200}(?![\s\S])/;
+var KEY = /^pk_(?:test|live)_[A-Za-z0-9_]{1,256}(?![\s\S])/;
 var SYNTHETIC = /^pm_agentcard_checkout_[A-Za-z0-9_-]{16,80}(?![\s\S])/;
 var reject = () => {
     throw new Error("stripe_checkout_rejected");
@@ -533,6 +533,43 @@ var reject = () => {
 var object = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var opaque = (value) => typeof value === "string" && value.length <= 8192 && !/[\x00-\x1f\x7f]/.test(value);
 var alphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+function validateStripeCheckoutIdentity(value) {
+    if (!object(value) || !["test", "production"].includes(value.environment ?? "test") || value.environment === null || !["sessionId", "publishableKey", "livemode"].some((key) => Object.hasOwn(value, key)))
+        reject();
+    const environment = value.environment ?? "test", livemode = environment === "production";
+    const mode = livemode ? "live" : "test";
+    if (Object.hasOwn(value, "sessionId") && (typeof value.sessionId !== "string" || !SESSION.test(value.sessionId) || !value.sessionId.startsWith(`cs_${mode}_`)) || Object.hasOwn(value, "publishableKey") && (typeof value.publishableKey !== "string" || !KEY.test(value.publishableKey) || !value.publishableKey.startsWith(`pk_${mode}_`)) || Object.hasOwn(value, "livemode") && value.livemode !== livemode)
+        reject();
+    return Object.freeze({ environment, livemode });
+}
+var TEST_CARDS = ["4242424242424242", "4000000000000002", "4000002500003155"];
+var SYNTHETIC_CARDS = [...TEST_CARDS, "4111111111111111"];
+function validateStripeCheckoutCard(card, environment = "test") {
+    if (!["test", "production"].includes(environment) || !object(card) || typeof card.number !== "string" || typeof card.cvc !== "string" || !/^(?:0?[1-9]|1[0-2])(?![\s\S])/.test(String(card.month)) || !/^(?:\d{2}|\d{4})(?![\s\S])/.test(String(card.year)) || card.name !== void 0 && !opaque(card.name))
+        reject();
+    if (environment === "test") {
+        if (!TEST_CARDS.includes(card.number) || card.cvc !== "123")
+            reject();
+    }
+    else {
+        if (!/^\d{13,19}(?![\s\S])/.test(card.number) || /^(\d)\1+(?![\s\S])/.test(card.number) || !/^\d{3,4}(?![\s\S])/.test(card.cvc) || SYNTHETIC_CARDS.includes(card.number))
+            reject();
+        let sum = 0, double = false;
+        for (let i = card.number.length - 1; i >= 0; i--) {
+            let digit = Number(card.number[i]);
+            if (double) {
+                digit *= 2;
+                if (digit > 9)
+                    digit -= 9;
+            }
+            sum += digit;
+            double = !double;
+        }
+        if (sum % 10 !== 0)
+            reject();
+    }
+    return true;
+}
 function isStripeCheckoutHostedMode(value) {
     return value === "hosted" || value === "hosted_page";
 }
@@ -600,7 +637,7 @@ function endpoint(raw) {
 }
 function isStripeCheckoutEndpoint(raw) {
     const url = endpoint(raw);
-    const match = url && /^\/v1\/payment_pages\/(cs_test_[A-Za-z0-9]+)\/confirm$/.exec(url.pathname);
+    const match = url && /^\/v1\/payment_pages\/(cs_(?:test|live)_[A-Za-z0-9]+)\/confirm$/.exec(url.pathname);
     return !!match && SESSION.test(match[1]);
 }
 var finalFields = /* @__PURE__ */ new Set([
@@ -608,6 +645,7 @@ var finalFields = /* @__PURE__ */ new Set([
     "key",
     "expected_amount",
     "expected_payment_method_type",
+    "payment_method_data[billing_details][email]",
     "init_checksum",
     "js_checksum",
     "version",
@@ -687,7 +725,7 @@ function keyFor(request, values, expected) {
         reject();
     let headerKey;
     if (authorization.length) {
-        const match = /^Bearer (pk_test_[A-Za-z0-9_]{1,256})$/.exec(authorization[0][1]);
+        const match = /^Bearer (pk_(?:test|live)_[A-Za-z0-9_]{1,256})$/.exec(authorization[0][1]);
         if (!match)
             reject();
         headerKey = match[1];
@@ -697,6 +735,35 @@ function keyFor(request, values, expected) {
         reject();
     return key;
 }
+var billingEmail = (value) => value === null || typeof value === "string" && value.length > 0 && value.length <= 320 && opaque(value);
+function captureStripeCheckoutBilling(request, options) {
+    const phase = classifyStripeCheckoutRequest(request, options);
+    if (phase?.phase !== "tokenization" || !SYNTHETIC.test(options?.syntheticPaymentMethodId))
+        reject();
+    const email = form(request, tokenFields).values.get("billing_details[email]") ?? null;
+    if (!billingEmail(email))
+        reject();
+    return Object.freeze({
+        session_id: phase.session_id,
+        synthetic_payment_method_id: options.syntheticPaymentMethodId,
+        email
+    });
+}
+function attachStripeCheckoutBilling(request, captured, options) {
+    const phase = classifyStripeCheckoutRequest(request, options);
+    if (phase?.phase !== "final" || !object(captured) || Object.keys(captured).length !== 3 || !["session_id", "synthetic_payment_method_id", "email"].every((key) => Object.hasOwn(captured, key)) || captured.session_id !== phase.session_id || captured.synthetic_payment_method_id !== phase.synthetic_payment_method_id || !billingEmail(captured.email))
+        reject();
+    const field = "payment_method_data[billing_details][email]";
+    const existing = form(request, finalFields).values.get(field);
+    if (existing !== void 0 && existing !== captured.email)
+        reject();
+    if (captured.email === null || existing !== void 0)
+        return { ...request };
+    const body = `${request.body}&${encodeURIComponent(field)}=${encodeURIComponent(captured.email)}`;
+    const result = { ...request, body };
+    classifyStripeCheckoutRequest(result, options);
+    return result;
+}
 function classifyStripeCheckoutRequest(request, options = {}) {
     const url = endpoint(request?.url);
     if (!url) {
@@ -719,6 +786,7 @@ function classifyStripeCheckoutRequest(request, options = {}) {
         reject();
     const { values } = form(request, final ? finalFields : tokenFields);
     const key = keyFor(request, values, options.publishableKey);
+    validateStripeCheckoutIdentity({ environment: options.environment, sessionId, publishableKey: key });
     const attributionSession = values.get("client_attribution_metadata[checkout_session_id]");
     if (attributionSession !== void 0 && attributionSession !== sessionId)
         reject();
@@ -730,6 +798,9 @@ function classifyStripeCheckoutRequest(request, options = {}) {
     }
     const amount = values.get("expected_amount");
     const syntheticId = values.get("payment_method");
+    const email = values.get("payment_method_data[billing_details][email]");
+    if (email !== void 0 && !billingEmail(email))
+        reject();
     if (!/^[1-9]\d{0,11}$/.test(amount ?? "") || !Number.isSafeInteger(Number(amount)) || options.amountCents !== void 0 && options.amountCents !== Number(amount) || values.get("expected_payment_method_type") !== "card" || !SYNTHETIC.test(syntheticId) || ["init_checksum", "js_checksum", "version", "rv_timestamp"].some((key2) => !values.get(key2)) || options.syntheticPaymentMethodId !== void 0 && options.syntheticPaymentMethodId !== syntheticId || marker && marker.synthetic_payment_method_id !== syntheticId)
         reject();
     return {
@@ -753,7 +824,7 @@ function createStripeCheckoutTokenizationStub(request, options) {
             id: options.syntheticPaymentMethodId,
             object: "payment_method",
             type: "card",
-            livemode: false,
+            livemode: validateStripeCheckoutIdentity({ environment: options.environment, sessionId: phase.session_id }).livemode,
             billing_details: { ...billing, address },
             card: {
                 brand: "visa",
@@ -783,11 +854,12 @@ function parseStripeCheckoutResponse(raw, options) {
     let value;
     try {
         value = typeof raw === "string" ? JSON.parse(raw) : raw;
+        validateStripeCheckoutIdentity({ environment: options?.environment, sessionId: options?.sessionId, livemode: value?.livemode });
     }
     catch {
         return null;
     }
-    if (!object(value) || !SESSION.test(options?.sessionId) || value.session_id !== options.sessionId || Object.keys(value).some((key) => !terminalFields.has(key)) || !["id", "object", "state", "status", "payment_status", "currency", "livemode", "session_id", "mode", "ui_mode"].every((key) => Object.hasOwn(value, key)) || typeof value.id !== "string" || !/^[A-Za-z0-9_]{1,256}(?![\s\S])/.test(value.id) || value.object !== "checkout.session" || value.state !== "succeeded" || value.status !== "complete" || value.payment_status !== "paid" || value.currency !== "usd" || value.livemode !== false || value.mode !== "payment" || !isStripeCheckoutHostedMode(value.ui_mode))
+    if (!object(value) || !SESSION.test(options?.sessionId) || value.session_id !== options.sessionId || Object.keys(value).some((key) => !terminalFields.has(key)) || !["id", "object", "state", "status", "payment_status", "currency", "livemode", "session_id", "mode", "ui_mode"].every((key) => Object.hasOwn(value, key)) || typeof value.id !== "string" || !/^[A-Za-z0-9_]{1,256}(?![\s\S])/.test(value.id) || value.object !== "checkout.session" || value.state !== "succeeded" || value.status !== "complete" || value.payment_status !== "paid" || value.currency !== "usd" || value.mode !== "payment" || !isStripeCheckoutHostedMode(value.ui_mode))
         return null;
     for (const key of ["success_url", "return_url"]) {
         if (!Object.hasOwn(value, key) || value[key] === null)
@@ -822,7 +894,7 @@ function prepareStripeCheckoutReplay(request, card, options = {}) {
         sessionId: marker.session_id,
         syntheticPaymentMethodId: marker.synthetic_payment_method_id
     });
-    if (phase?.phase !== "final" || options.amountCents !== void 0 && phase.amount_cents !== options.amountCents || options.sessionId !== void 0 && options.sessionId !== marker.session_id || !card || !["4242424242424242", "4000000000000002", "4000002500003155"].includes(card.number) || card.cvc !== "123" || !/^(?:0?[1-9]|1[0-2])$/.test(String(card.month)) || !/^(?:\d{2}|\d{4})$/.test(String(card.year)) || card.name !== void 0 && !opaque(card.name))
+    if (phase?.phase !== "final" || options.amountCents !== void 0 && phase.amount_cents !== options.amountCents || options.sessionId !== void 0 && options.sessionId !== marker.session_id || !validateStripeCheckoutCard(card, options.environment))
         reject();
     const replacements = {
         "payment_method_data[type]": "card",
@@ -840,4 +912,4 @@ function prepareStripeCheckoutReplay(request, card, options = {}) {
         where: Object.keys(replacements)
     };
 }
-export { STRIPE_CHECKOUT_CONTEXT_HEADER, STRIPE_CHECKOUT_OPERATION, classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, hasStripeCheckoutMarker, isStripeCheckoutEndpoint, isStripeCheckoutHostedMode, parseStripeCheckoutContext, parseStripeCheckoutResponse, prepareStripeCheckoutReplay };
+export { STRIPE_CHECKOUT_CONTEXT_HEADER, STRIPE_CHECKOUT_OPERATION, attachStripeCheckoutBilling, captureStripeCheckoutBilling, classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, hasStripeCheckoutMarker, isStripeCheckoutEndpoint, isStripeCheckoutHostedMode, parseStripeCheckoutContext, parseStripeCheckoutResponse, prepareStripeCheckoutReplay, validateStripeCheckoutCard, validateStripeCheckoutIdentity };

package/dist/stripe-checkout.js

@@ -1,4 +1,4 @@
-import { classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, isStripeCheckoutEndpoint, STRIPE_CHECKOUT_CONTEXT_HEADER, } from './stripe-checkout.generated.js';
+import { classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, isStripeCheckoutEndpoint, STRIPE_CHECKOUT_CONTEXT_HEADER, captureStripeCheckoutBilling, attachStripeCheckoutBilling, validateStripeCheckoutIdentity, } from './stripe-checkout.generated.js';
 class StripeCheckoutRejectionError extends Error {
     stage;
     reason;
@@ -26,22 +26,23 @@ export class StripeCheckoutClaimConflictError extends StripeCheckoutRejectionErr
  */
 export class StripeCheckoutGate {
     state = 'fresh';
+    billing;
     binding;
     constructor(options) {
         if (!options.stripeCheckout)
             return;
-        const { sessionId, publishableKey } = options.stripeCheckout;
+        const { sessionId, publishableKey, environment } = options.stripeCheckout;
+        validateStripeCheckoutIdentity({ environment, sessionId, publishableKey });
         if (options.executionMode !== 'autopilot' || !/^apg_[A-Za-z0-9_-]{1,128}(?![\s\S])/.test(options.grantId ?? '')
-            || !Number.isSafeInteger(options.amount) || Number(options.amount) <= 0 || options.currency !== 'usd'
-            || !/^cs_test_[A-Za-z0-9]{1,200}(?![\s\S])/.test(sessionId) || !/^pk_test_[A-Za-z0-9_]{1,256}(?![\s\S])/.test(publishableKey))
-            throw new Error('Native Stripe Checkout requires a TEST session, grant and numeric USD amount.');
-        this.binding = Object.freeze({ sessionId, publishableKey, amountCents: options.amount,
+            || !Number.isSafeInteger(options.amount) || Number(options.amount) <= 0 || options.currency !== 'usd')
+            throw new Error('Native Stripe Checkout requires a mode-bound session, grant and numeric USD amount.');
+        this.binding = Object.freeze({ environment, sessionId, publishableKey, amountCents: options.amount,
             syntheticPaymentMethodId: `pm_agentcard_checkout_${crypto.randomUUID().replaceAll('-', '')}` });
     }
     matches(url) { return !!this.binding && isStripeCheckoutEndpoint(url); }
     isEnabled() { return !!this.binding; }
     isPrepared() { return this.state !== 'fresh'; }
-    invalidate() { this.state = 'stopped'; }
+    invalidate() { this.state = 'stopped'; this.billing = undefined; }
     /** Observability only: this endpoint label never participates in a payment decision. */
     describeRejection(error, rawUrl, stage, phase = 'unknown') {
         let family = 'other';
@@ -102,6 +103,7 @@ export class StripeCheckoutGate {
             this.state = 'stopped';
             let response;
             try {
+                this.billing = captureStripeCheckoutBilling(request, this.binding);
                 response = createStripeCheckoutTokenizationStub(request, this.binding);
             }
             catch {
@@ -114,8 +116,17 @@ export class StripeCheckoutGate {
             throw new StripeCheckoutClaimConflictError('final');
         if (phase.phase !== 'final' || this.state !== 'stubbed')
             throw new StripeCheckoutRejectionError('Native Stripe Checkout has no matching prepared request.', 'claim', 'preparation_missing', diagnosticPhase);
+        let final;
+        try {
+            final = attachStripeCheckoutBilling(request, this.billing, this.binding);
+        }
+        catch {
+            this.invalidate();
+            throw new StripeCheckoutRejectionError('stripe_checkout_rejected', 'classification', 'request_validation_failed', 'final');
+        }
         this.state = 'submitted';
-        return { phase: 'final', request: { ...request, headers: { ...request.headers,
+        this.billing = undefined;
+        return { phase: 'final', request: { ...final, headers: { ...final.headers,
                     [STRIPE_CHECKOUT_CONTEXT_HEADER]: encodeStripeCheckoutContext({ version: 1,
                         session_id: this.binding.sessionId, synthetic_payment_method_id: this.binding.syntheticPaymentMethodId }) } } };
     }

package/examples/preflight/kernel-native/inventory.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
-  "catalog_version": "2026-09-11.2",
-  "catalog_sha256": "cf77f91526c17c55c73e14c28bca14a664e6727c0e00a439763250d80d11a967",
+  "catalog_version": "2026-09-14.1",
+  "catalog_sha256": "c5bf9f8f7372def80d2abf0e9f2942c1b33514ed516b66d3f60e98c11d43bf5c",
   "baseline_version": "kernel-native-docs-2026-09-11.1",
   "baseline_sha256": "d86722f49633d8223fccae54cd3d485df4375aee06aa156a273cc689b7c8507c",
   "native_build": null,

package/examples/preflight/kernel-profile.empty.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "profile_version": "kernel-template-1",
-  "catalog_version": "2026-09-11.2",
+  "catalog_version": "2026-09-14.1",
   "integration": {
     "id": "kernel_native",
     "version": "example-native-adapter"

package/examples/preflight/mollie-hosted.result.json

@@ -1,7 +1,7 @@
 {
   "snapshot": {
     "schema_version": 1,
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "signals": [
       {
         "rule_id": "mollie-hosted-credit-card",
@@ -33,7 +33,7 @@
   },
   "result": {
     "schema_version": 1,
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "kernel_native",
       "version": "example-native-adapter"

package/examples/preflight/stripe-script.direct.result.json

@@ -1,7 +1,7 @@
 {
   "snapshot": {
     "schema_version": 1,
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "signals": [
       {
         "rule_id": "stripe-js-v3",
@@ -26,7 +26,7 @@
   },
   "result": {
     "schema_version": 1,
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "direct_sdk",
       "version": "bundled"

package/examples/preflight/stripe-script.result.json

@@ -1,7 +1,7 @@
 {
   "snapshot": {
     "schema_version": 1,
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "signals": [
       {
         "rule_id": "stripe-js-v3",
@@ -26,7 +26,7 @@
   },
   "result": {
     "schema_version": 1,
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "kernel_native",
       "version": "example-native-adapter"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-cards/checkout",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "Let browser agents pay with the user's own card, without your infrastructure ever touching card data.",
   "type": "module",
   "main": "dist/index.js",