@agent-cards/checkout 0.18.0 → 0.21.0

package/dist/registry.js

@@ -1,296 +0,0 @@
-/**
- * Which outbound requests carry a raw card, and where the card sits inside them.
- *
- * This is the only merchant-specific knowledge in the system, and it is keyed by
- * PSP rather than by merchant: every Shopify store shares one entry, every Stripe
- * site shares another. The list is served from the Agentcard API at runtime so
- * integrators pick up new processors without shipping a release.
- */
-// Pinned fallback generated from the single shared processor catalog.
-import { BUILTIN_REGISTRY } from './builtin-registry.generated.js';
-export { BUILTIN_REGISTRY };
-export function findRecognizer(url, registry = BUILTIN_REGISTRY) {
-    // Match the way the SERVER does, on the PARSED url — never as a substring of
-    // the raw string. `match` is unanchored, so a raw-string test classifies any
-    // URL that merely CONTAINS a tokenizer endpoint as a card request:
-    //   https://evil.com/?next=https://api.stripe.com/v1/tokens
-    // The server refuses that (its hosts[] are anchored against URL.hostname), so
-    // the request could not be intercepted anyway — but the SDK had already paused
-    // it, and a pause it cannot complete becomes an ABORT. That turns an
-    // integrator's unrelated POST into a failed request.
-    //
-    // hosts[] is synced from the API precisely so the client can apply the server's
-    // own allowlist. Use it when present, and fall back to matching `match`
-    // against "hostname + pathname" (not the query) for a registry served by an
-    // older API that predates the field.
-    let parsed;
-    try {
-        parsed = new URL(url);
-    }
-    catch {
-        return null;
-    }
-    if (parsed.protocol !== 'https:' || parsed.port || parsed.username || parsed.password)
-        return null;
-    const hostPath = `${parsed.hostname.toLowerCase()}${parsed.pathname}`;
-    return (registry.find((r) => {
-        if (r.hosts && r.hosts.length > 0) {
-            const hostAllowed = r.hosts.some((h) => new RegExp(h, 'i').test(parsed.hostname));
-            if (!hostAllowed)
-                return false;
-        }
-        // FULLY ANCHORED, exactly as the server does it. Unanchored, any EXTENSION
-        // of a valid path is admitted on a legitimate processor host
-        // (api.stripe.com/v1/tokens/anything), which the service then refuses —
-        // and a pause the SDK cannot complete becomes an abort.
-        return new RegExp(`^(?:${r.match.source})$`, 'i').test(hostPath);
-    }) ?? null);
-}
-// ---------------------------------------------------------------------------
-// Registry -> CDP url patterns
-//
-// `Fetch.enable` takes GLOB url patterns (`*` = any run of characters, `?` =
-// exactly one, `\` escapes), never regexes, so the registry's anchored host
-// regexes have to be widened into globs before a raw-CDP integrator can arm
-// interception with them.
-//
-// These patterns are only a COARSE pre-filter. Every request they pause is
-// re-checked with the real recognizer (VaultClient.isCardRequest) before
-// anything is intercepted, so a pattern that is too BROAD costs one extra
-// continueRequest round-trip, while one that is too NARROW silently drops the
-// card request on the floor and the shopper pays with their own card. Every
-// conversion below therefore WIDENS: anything not expressible as a glob
-// (character classes, groups, quantifiers, lookarounds) becomes `*`.
-// ---------------------------------------------------------------------------
-/**
- * Glob url patterns covering every host in `registry` — what to hand
- * `Fetch.enable` so a card request is ever paused. Deliberately a superset of
- * the recognizers; isCardRequest is the exact check.
- */
-export function cardUrlPatterns(registry) {
-    const out = new Set();
-    for (const rec of registry ?? []) {
-        for (const pattern of recognizerUrlPatterns(rec))
-            out.add(pattern);
-    }
-    return [...out];
-}
-function recognizerUrlPatterns(rec) {
-    const hosts = Array.isArray(rec?.hosts) ? rec.hosts.filter((h) => typeof h === 'string') : [];
-    if (hosts.length > 0) {
-        // Host text ANYWHERE in the URL, not `*://host/*`. Two reasons: a URL with
-        // userinfo (`https://u:p@host/…`) still has `host` as its hostname so the
-        // registry matches it, and isCardRequest tests `match` unanchored against
-        // the raw URL, so a URL merely carrying the host in its query also
-        // "matches" client-side. Anchoring the scheme would arm narrower than
-        // either check.
-        //
-        // Lowercased because CDP matches these globs case-SENSITIVELY against the
-        // canonical url, and a canonical url's authority is always lowercase (the
-        // URL parser folds it before the request is ever issued) — the same
-        // normalization resolveRecognizerForUrl does with url.hostname. Do not
-        // "fix" this by wildcarding the letters: `*???.??????.???*` matches most of
-        // the web and would pause every request on the page.
-        return hosts.flatMap((h) => regexSourceToGlobs(h)).map((g) => wrap(g).toLowerCase());
-    }
-    // No hosts[] — a registry pinned before the field existed, or hand-built.
-    // Fall back to widening `match`, which is the predicate isCardRequest
-    // actually applies. Path case can matter to a glob (CDP matches
-    // case-sensitively) while a hostname is always lowercased by the URL parser,
-    // so arm both spellings rather than guess.
-    return regexSourceToGlobs(rec?.match?.source ?? '')
-        .map(wrap)
-        .flatMap((g) => (g === g.toLowerCase() ? [g] : [g, g.toLowerCase()]));
-}
-/** `a|b` at the top level is two independent hostnames, so it is two globs. */
-function regexSourceToGlobs(source) {
-    return splitTopLevelAlternation(source).map(branchToGlob);
-}
-function splitTopLevelAlternation(source) {
-    const parts = [];
-    let depth = 0;
-    let inClass = false;
-    let start = 0;
-    for (let i = 0; i < source.length; i++) {
-        const c = source[i];
-        if (c === '\\') {
-            i++;
-            continue;
-        }
-        if (inClass) {
-            if (c === ']')
-                inClass = false;
-            continue;
-        }
-        if (c === '[') {
-            inClass = true;
-            continue;
-        }
-        if (c === '(') {
-            depth++;
-            continue;
-        }
-        if (c === ')') {
-            depth = Math.max(0, depth - 1);
-            continue;
-        }
-        if (c === '|' && depth === 0) {
-            parts.push(source.slice(start, i));
-            start = i + 1;
-        }
-    }
-    parts.push(source.slice(start));
-    return parts;
-}
-/**
- * One alternation-free regex source -> one glob. Literal characters survive;
- * every construct that can match more than itself collapses to `*`. An empty
- * result is `*` on purpose: an empty regex matches every hostname, so the glob
- * that mirrors it has to match every URL.
- */
-function branchToGlob(branch) {
-    const atoms = [];
-    let i = 0;
-    while (i < branch.length) {
-        const c = branch[i];
-        let atom;
-        if (c === '^' || c === '$') {
-            i += 1;
-            continue;
-        } // anchors constrain nothing in a glob
-        if (c === '\\') {
-            const next = branch[i + 1] ?? '';
-            i += 2;
-            // \d \w \s \b … are classes/assertions; only escaped punctuation (\., \-)
-            // is a literal character.
-            atom = /[A-Za-z0-9]/.test(next) ? '*' : globEscape(next);
-        }
-        else if (c === '[') {
-            i = skipCharClass(branch, i);
-            atom = '*';
-        }
-        else if (c === '(') {
-            i = skipGroup(branch, i); // groups, non-capturing groups, lookarounds
-            atom = '*';
-        }
-        else if (c === '.') {
-            i += 1;
-            atom = '*';
-        }
-        else if (c === ')' || c === ']') {
-            i += 1; // unbalanced closer: ignore rather than throw
-            continue;
-        }
-        else if (quantifierEnd(branch, i) !== null) {
-            // A quantifier with nothing in front of it. Widen whatever preceded it.
-            i = quantifierEnd(branch, i);
-            if (atoms.length > 0)
-                atoms[atoms.length - 1] = '*';
-            else
-                atoms.push('*');
-            continue;
-        }
-        else {
-            i += 1;
-            atom = globEscape(c);
-        }
-        // `x?` / `x*` / `x+` / `x{2,3}`: the atom is optional or repeatable, so the
-        // only glob that covers every string it accepts is `*`.
-        const after = quantifierEnd(branch, i);
-        if (after !== null) {
-            i = after;
-            atom = '*';
-        }
-        atoms.push(atom);
-    }
-    return collapse(atoms).join('');
-}
-/** Index just past a quantifier at `i`, or null when there isn't one. */
-function quantifierEnd(source, i) {
-    const c = source[i];
-    let end;
-    if (c === '*' || c === '+' || c === '?') {
-        end = i + 1;
-    }
-    else if (c === '{') {
-        const close = source.indexOf('}', i);
-        if (close === -1 || !/^\{\d+(,\d*)?\}$/.test(source.slice(i, close + 1)))
-            return null;
-        end = close + 1;
-    }
-    else {
-        return null;
-    }
-    if (source[end] === '?')
-        end += 1; // lazy quantifier
-    return end;
-}
-function skipCharClass(source, i) {
-    let j = i + 1;
-    if (source[j] === '^')
-        j++;
-    if (source[j] === ']')
-        j++; // a leading `]` is a literal
-    for (; j < source.length; j++) {
-        if (source[j] === '\\') {
-            j++;
-            continue;
-        }
-        if (source[j] === ']')
-            return j + 1;
-    }
-    return source.length;
-}
-function skipGroup(source, i) {
-    let depth = 0;
-    let inClass = false;
-    for (let j = i; j < source.length; j++) {
-        const c = source[j];
-        if (c === '\\') {
-            j++;
-            continue;
-        }
-        if (inClass) {
-            if (c === ']')
-                inClass = false;
-            continue;
-        }
-        if (c === '[') {
-            inClass = true;
-            continue;
-        }
-        if (c === '(') {
-            depth++;
-            continue;
-        }
-        if (c === ')') {
-            depth--;
-            if (depth === 0)
-                return j + 1;
-        }
-    }
-    return source.length;
-}
-/** `*` and `?` are the glob's own wildcards; `\` is its escape. */
-function globEscape(ch) {
-    return ch === '*' || ch === '?' || ch === '\\' ? `\\${ch}` : ch;
-}
-/** `**` matches exactly what `*` does; keep patterns readable. */
-function collapse(atoms) {
-    const out = [];
-    for (const a of atoms) {
-        if (a === '*' && out[out.length - 1] === '*')
-            continue;
-        out.push(a);
-    }
-    return out;
-}
-/** `…host…` -> `*host*`, without doubling a `*` the conversion already emitted. */
-function wrap(glob) {
-    let body = glob;
-    while (body.startsWith('*'))
-        body = body.slice(1);
-    while (body.length > 0 && body.endsWith('*') && !body.endsWith('\\*'))
-        body = body.slice(0, -1);
-    return body.length > 0 ? `*${body}*` : '*';
-}

package/dist/spreedly.generated.d.ts

@@ -1,10 +0,0 @@
-declare var SPREEDLY_TOKEN_ENDPOINT: string;
-declare function isSpreedlyTokenRequest(url: any, method?: string): boolean;
-declare function isPreparedSpreedlyRequest(body: any): boolean;
-declare function isSpreedlyRequest(request: any): boolean;
-declare function injectSpreedlyCard(body: any, card: any): {
-    body: string;
-    where: string[];
-};
-declare function sanitizeSpreedlyTokenResponse(body: any): string;
-export { SPREEDLY_TOKEN_ENDPOINT, injectSpreedlyCard, isPreparedSpreedlyRequest, isSpreedlyRequest, isSpreedlyTokenRequest, sanitizeSpreedlyTokenResponse };

package/dist/spreedly.generated.js

@@ -1,332 +0,0 @@
-// @ts-nocheck
-// Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: bd953f414724afdcc2930f895f106fbc908b78875358b33d01c0ee55985b9a29
-// src/spreedly.js
-var SPREEDLY_TOKEN_ENDPOINT = "https://core.spreedly.com/v1/payment_methods/restricted.json";
-var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var owns = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
-var text = (value, max = 1024) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
-var id = (value) => exact(/^[A-Za-z0-9_-]{1,128}$/, value);
-var keys = (value, allowed) => record(value) && Object.keys(value).every((key) => allowed.includes(key));
-var digits = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
-var month = (value) => (Number.isInteger(value) || digits(value, 1, 2)) && Number(value) >= 1 && Number(value) <= 12;
-var year = (value) => (Number.isInteger(value) || digits(value, 2, 4)) && (Number(value) >= 0 && Number(value) <= 99 || Number(value) >= 2e3 && Number(value) <= 9999);
-var CARD_TEXT = [
-    "first_name",
-    "last_name",
-    "full_name",
-    "email",
-    "address1",
-    "address2",
-    "city",
-    "state",
-    "zip",
-    "country",
-    "phone_number",
-    "company",
-    "shipping_address1",
-    "shipping_address2",
-    "shipping_city",
-    "shipping_state",
-    "shipping_zip",
-    "shipping_country",
-    "shipping_phone_number"
-];
-var AUTH = ["nonce", "timestamp", "certificate_token", "signature"];
-var CARD_TYPES = /* @__PURE__ */ new Set([
-    "visa",
-    "master",
-    "american_express",
-    "diners_club",
-    "discover",
-    "jcb",
-    "maestro",
-    "maestro_no_luhn",
-    "elo",
-    "carnet",
-    "dankort",
-    "alelo",
-    "cabal",
-    "naranja",
-    "unionpay",
-    "alia",
-    "creditel",
-    "confiable",
-    "synchrony",
-    "routex",
-    "mada",
-    "passcard",
-    "edenred",
-    "anda",
-    "tarjeta_d",
-    "sodexo",
-    "sodexo_no_luhn",
-    "panal",
-    "verve",
-    "tuya",
-    "uatp",
-    "patagonia_365",
-    "tarjeta_sol",
-    "tarjeta_unica",
-    "consumax",
-    "tarjeta_fertil",
-    "favacard",
-    "elebar",
-    "tarjeta_axis",
-    "tarjeta_plan_platino",
-    "tarjeta_fiel",
-    "copeplus",
-    "tarjeta_credimas",
-    "tarjeta_local",
-    "tarjeta_sucredito",
-    "sidecreer",
-    "cliper",
-    "centrocard",
-    "wex",
-    "codensa"
-]);
-var panLike = (value) => /(?:[0-9][ _.:-]*){12,}/.test(value);
-var opaqueId = (value) => id(value) && /[A-Za-z]/.test(value) && !panLike(value);
-function readJson(body) {
-    if (typeof body !== "string" || !body || body.length > 65536)
-        return null;
-    let at = 0, nodes = 0;
-    const fail = () => {
-        throw new Error("invalid_spreedly_json");
-    };
-    const space = () => {
-        while (" 	\r\n".includes(body[at] ?? "\0"))
-            at++;
-    };
-    const string = () => {
-        space();
-        const start = at;
-        if (body[at++] !== '"')
-            fail();
-        while (at < body.length) {
-            const char = body[at++];
-            if (char === "\\") {
-                at++;
-                continue;
-            }
-            if (char === '"')
-                return JSON.parse(body.slice(start, at));
-        }
-        return fail();
-    };
-    const value = (depth) => {
-        if (depth > 12 || ++nodes > 1e3)
-            fail();
-        space();
-        const char = body[at];
-        if (char === '"')
-            return string();
-        if (char === "{") {
-            at++;
-            const result = /* @__PURE__ */ Object.create(null), seen = /* @__PURE__ */ new Set();
-            space();
-            if (body[at] === "}") {
-                at++;
-                return result;
-            }
-            while (true) {
-                const key = string();
-                if (seen.has(key) || ["__proto__", "prototype", "constructor"].includes(key))
-                    fail();
-                seen.add(key);
-                space();
-                if (body[at++] !== ":")
-                    fail();
-                result[key] = value(depth + 1);
-                space();
-                const next = body[at++];
-                if (next === "}")
-                    return result;
-                if (next !== ",")
-                    fail();
-            }
-        }
-        if (char === "[") {
-            at++;
-            const result = [];
-            space();
-            if (body[at] === "]") {
-                at++;
-                return result;
-            }
-            while (true) {
-                result.push(value(depth + 1));
-                space();
-                const next = body[at++];
-                if (next === "]")
-                    return result;
-                if (next !== ",")
-                    fail();
-            }
-        }
-        for (const literal of ["true", "false", "null"]) {
-            if (body.startsWith(literal, at)) {
-                at += literal.length;
-                return JSON.parse(literal);
-            }
-        }
-        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(body.slice(at));
-        if (!number)
-            fail();
-        at += number[0].length;
-        const parsed = Number(number[0]);
-        if (!Number.isFinite(parsed))
-            fail();
-        return parsed;
-    };
-    try {
-        const parsed = value(0);
-        space();
-        return at === body.length && record(parsed) ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-function isSpreedlyTokenRequest(url, method = "POST") {
-    if (method !== "POST" || typeof url !== "string" || !url.startsWith(SPREEDLY_TOKEN_ENDPOINT + "?"))
-        return false;
-    try {
-        const parsed = new URL(url);
-        if (parsed.href !== url || parsed.origin + parsed.pathname !== SPREEDLY_TOKEN_ENDPOINT || parsed.hash)
-            return false;
-        const seen = /* @__PURE__ */ new Set();
-        for (const pair of parsed.search.slice(1).split("&")) {
-            const separator = pair.indexOf("=");
-            const name = pair.slice(0, separator), value = pair.slice(separator + 1);
-            if (separator < 1 || seen.has(name))
-                return false;
-            seen.add(name);
-            if (name === "from" ? value !== "iframe" : name === "v" ? !exact(/^1\.[0-9]{1,4}$/, value) : name === "client" ? !exact(/^[A-Za-z0-9_.-]{1,64}$/, value) : true)
-                return false;
-        }
-        return seen.has("from") && seen.has("v");
-    }
-    catch {
-        return false;
-    }
-}
-function preparedBody(body) {
-    const value = readJson(body);
-    if (!keys(value, ["environment_key", "payment_method", ...AUTH]) || !id(value.environment_key) || !keys(value.payment_method, ["credit_card", "allow_blank_name", "allow_expired_date", "metadata"]))
-        return null;
-    const suppliedAuth = AUTH.filter((key) => owns(value, key));
-    if (suppliedAuth.length && (suppliedAuth.length !== AUTH.length || !text(value.nonce) || !value.nonce || !(digits(value.timestamp, 1, 16) || Number.isSafeInteger(value.timestamp) && value.timestamp > 0) || !id(value.certificate_token) || !exact(/^[A-Za-z0-9+/=_-]{1,8192}$/, value.signature)))
-        return null;
-    const pm = value.payment_method, cc = pm.credit_card;
-    if (!keys(cc, ["number", "verification_value", "month", "year", "eligible_for_card_updater", ...CARD_TEXT]) || !digits(cc.number, 12, 19) || !digits(cc.verification_value, 3, 4) || !month(cc.month) || !year(cc.year) || CARD_TEXT.some((key) => owns(cc, key) && !text(cc[key])) || owns(cc, "eligible_for_card_updater") && cc.eligible_for_card_updater !== false)
-        return null;
-    if (owns(pm, "allow_blank_name") && typeof pm.allow_blank_name !== "boolean" || owns(pm, "allow_expired_date") && pm.allow_expired_date !== false)
-        return null;
-    if (owns(pm, "metadata") && (!record(pm.metadata) || Object.keys(pm.metadata).length > 20 || Object.entries(pm.metadata).some(([key, value2]) => !exact(/^[A-Za-z][A-Za-z0-9_-]{0,63}$/, key) || !(value2 === null || typeof value2 === "boolean" || Number.isFinite(value2) || text(value2)))))
-        return null;
-    return value;
-}
-function isPreparedSpreedlyRequest(body) {
-    return preparedBody(body) !== null;
-}
-function isSpreedlyRequest(request) {
-    if (!record(request) || request.method !== "POST" || !isSpreedlyTokenRequest(request.url, request.method) || !record(request.headers))
-        return false;
-    const body = preparedBody(request.body);
-    if (!body)
-        return false;
-    const headers = /* @__PURE__ */ new Map();
-    for (const [name, value] of Object.entries(request.headers)) {
-        const lower = name.toLowerCase();
-        if (headers.has(lower) || !text(value, 8192))
-            return false;
-        headers.set(lower, value);
-    }
-    return exact(/^application\/json(?:;\s*charset=utf-8)?$/i, headers.get("content-type")) && headers.get("spreedly-environment-key") === body.environment_key;
-}
-function injectSpreedlyCard(body, card) {
-    const value = preparedBody(body);
-    if (!value)
-        throw new Error("Refusing to pay: unsupported Spreedly new-card request.");
-    if (!card || !digits(card.number, 12, 19) || !digits(card.cvc, 3, 4) || !month(card.month) || !year(card.year)) {
-        throw new Error("Could not fill the card fields for Spreedly. Nothing was sent.");
-    }
-    const cc = value.payment_method.credit_card;
-    cc.number = card.number;
-    cc.verification_value = card.cvc;
-    cc.month = typeof cc.month === "number" ? Number(card.month) : String(card.month);
-    const selectedYear = String(card.year), nativeYear = String(cc.year);
-    const replacementYear = nativeYear.length === 2 && selectedYear.length === 4 ? selectedYear.slice(-2) : nativeYear.length === 4 && selectedYear.length === 2 ? "20" + selectedYear : selectedYear;
-    cc.year = typeof cc.year === "number" ? Number(replacementYear) : replacementYear;
-    return { body: JSON.stringify(value), where: ["number", "verification_value", "month", "year"].map((key) => "payment_method.credit_card." + key) };
-}
-function sanitizeSpreedlyTokenResponse(body) {
-    const value = readJson(body), transaction = value?.transaction, pm = transaction?.payment_method;
-    const fail = () => {
-        throw new Error("Invalid Spreedly token response.");
-    };
-    if (!record(transaction) || !record(pm) || transaction.succeeded !== true || transaction.transaction_type !== "AddPaymentMethod" || transaction.state !== "succeeded" || pm.payment_method_type !== "credit_card" || !opaqueId(pm.token))
-        return fail();
-    if (!text(pm.number, 32) || !exact(/^[Xx*]{8,15}[0-9]{4}$/, pm.number.replace(/-/g, "")) || !digits(pm.last_four_digits, 4, 4) || !pm.number.endsWith(pm.last_four_digits) || !exact(/^[Xx*]{3,4}$/, pm.verification_value) || !month(pm.month) || !year(pm.year))
-        return fail();
-    const safePm = {
-        token: pm.token,
-        payment_method_type: "credit_card",
-        number: pm.number,
-        verification_value: pm.verification_value,
-        last_four_digits: pm.last_four_digits,
-        month: pm.month,
-        year: pm.year
-    };
-    if (owns(pm, "card_type")) {
-        if (!CARD_TYPES.has(pm.card_type))
-            return fail();
-        safePm.card_type = pm.card_type;
-    }
-    if (owns(pm, "storage_state")) {
-        if (!["cached", "retained"].includes(pm.storage_state))
-            return fail();
-        safePm.storage_state = pm.storage_state;
-    }
-    if (owns(pm, "fingerprint")) {
-        if (!opaqueId(pm.fingerprint))
-            return fail();
-        safePm.fingerprint = pm.fingerprint;
-    }
-    for (const [key, width] of [["first_six_digits", 6], ["first_eight_digits", 8]]) {
-        if (owns(pm, key) && pm[key] !== null) {
-            if (!digits(pm[key], width, width))
-                return fail();
-            safePm[key] = pm[key];
-        }
-    }
-    for (const key of ["test", "eligible_for_card_updater"]) {
-        if (owns(pm, key)) {
-            if (typeof pm[key] !== "boolean")
-                return fail();
-            safePm[key] = pm[key];
-        }
-    }
-    for (const key of CARD_TEXT) {
-        if (!owns(pm, key))
-            continue;
-        if (pm[key] !== null && (!text(pm[key]) || panLike(pm[key])))
-            return fail();
-        safePm[key] = pm[key];
-    }
-    if (owns(pm, "errors")) {
-        if (!Array.isArray(pm.errors) || pm.errors.length)
-            return fail();
-        safePm.errors = [];
-    }
-    const safeTransaction = { succeeded: true, transaction_type: "AddPaymentMethod", state: "succeeded", payment_method: safePm };
-    if (owns(transaction, "token")) {
-        if (!opaqueId(transaction.token))
-            return fail();
-        safeTransaction.token = transaction.token;
-    }
-    return JSON.stringify({ transaction: safeTransaction });
-}
-export { SPREEDLY_TOKEN_ENDPOINT, injectSpreedlyCard, isPreparedSpreedlyRequest, isSpreedlyRequest, isSpreedlyTokenRequest, sanitizeSpreedlyTokenResponse };