@agent-cards/checkout 0.19.0 → 0.21.0

package/dist/spreedly.generated.js

@@ -1,332 +0,0 @@
-// @ts-nocheck
-// Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: bd953f414724afdcc2930f895f106fbc908b78875358b33d01c0ee55985b9a29
-// src/spreedly.js
-var SPREEDLY_TOKEN_ENDPOINT = "https://core.spreedly.com/v1/payment_methods/restricted.json";
-var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
-var owns = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
-var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
-var text = (value, max = 1024) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
-var id = (value) => exact(/^[A-Za-z0-9_-]{1,128}$/, value);
-var keys = (value, allowed) => record(value) && Object.keys(value).every((key) => allowed.includes(key));
-var digits = (value, min, max) => typeof value === "string" && value.length >= min && value.length <= max && !/[^0-9]/.test(value);
-var month = (value) => (Number.isInteger(value) || digits(value, 1, 2)) && Number(value) >= 1 && Number(value) <= 12;
-var year = (value) => (Number.isInteger(value) || digits(value, 2, 4)) && (Number(value) >= 0 && Number(value) <= 99 || Number(value) >= 2e3 && Number(value) <= 9999);
-var CARD_TEXT = [
-    "first_name",
-    "last_name",
-    "full_name",
-    "email",
-    "address1",
-    "address2",
-    "city",
-    "state",
-    "zip",
-    "country",
-    "phone_number",
-    "company",
-    "shipping_address1",
-    "shipping_address2",
-    "shipping_city",
-    "shipping_state",
-    "shipping_zip",
-    "shipping_country",
-    "shipping_phone_number"
-];
-var AUTH = ["nonce", "timestamp", "certificate_token", "signature"];
-var CARD_TYPES = /* @__PURE__ */ new Set([
-    "visa",
-    "master",
-    "american_express",
-    "diners_club",
-    "discover",
-    "jcb",
-    "maestro",
-    "maestro_no_luhn",
-    "elo",
-    "carnet",
-    "dankort",
-    "alelo",
-    "cabal",
-    "naranja",
-    "unionpay",
-    "alia",
-    "creditel",
-    "confiable",
-    "synchrony",
-    "routex",
-    "mada",
-    "passcard",
-    "edenred",
-    "anda",
-    "tarjeta_d",
-    "sodexo",
-    "sodexo_no_luhn",
-    "panal",
-    "verve",
-    "tuya",
-    "uatp",
-    "patagonia_365",
-    "tarjeta_sol",
-    "tarjeta_unica",
-    "consumax",
-    "tarjeta_fertil",
-    "favacard",
-    "elebar",
-    "tarjeta_axis",
-    "tarjeta_plan_platino",
-    "tarjeta_fiel",
-    "copeplus",
-    "tarjeta_credimas",
-    "tarjeta_local",
-    "tarjeta_sucredito",
-    "sidecreer",
-    "cliper",
-    "centrocard",
-    "wex",
-    "codensa"
-]);
-var panLike = (value) => /(?:[0-9][ _.:-]*){12,}/.test(value);
-var opaqueId = (value) => id(value) && /[A-Za-z]/.test(value) && !panLike(value);
-function readJson(body) {
-    if (typeof body !== "string" || !body || body.length > 65536)
-        return null;
-    let at = 0, nodes = 0;
-    const fail = () => {
-        throw new Error("invalid_spreedly_json");
-    };
-    const space = () => {
-        while (" 	\r\n".includes(body[at] ?? "\0"))
-            at++;
-    };
-    const string = () => {
-        space();
-        const start = at;
-        if (body[at++] !== '"')
-            fail();
-        while (at < body.length) {
-            const char = body[at++];
-            if (char === "\\") {
-                at++;
-                continue;
-            }
-            if (char === '"')
-                return JSON.parse(body.slice(start, at));
-        }
-        return fail();
-    };
-    const value = (depth) => {
-        if (depth > 12 || ++nodes > 1e3)
-            fail();
-        space();
-        const char = body[at];
-        if (char === '"')
-            return string();
-        if (char === "{") {
-            at++;
-            const result = /* @__PURE__ */ Object.create(null), seen = /* @__PURE__ */ new Set();
-            space();
-            if (body[at] === "}") {
-                at++;
-                return result;
-            }
-            while (true) {
-                const key = string();
-                if (seen.has(key) || ["__proto__", "prototype", "constructor"].includes(key))
-                    fail();
-                seen.add(key);
-                space();
-                if (body[at++] !== ":")
-                    fail();
-                result[key] = value(depth + 1);
-                space();
-                const next = body[at++];
-                if (next === "}")
-                    return result;
-                if (next !== ",")
-                    fail();
-            }
-        }
-        if (char === "[") {
-            at++;
-            const result = [];
-            space();
-            if (body[at] === "]") {
-                at++;
-                return result;
-            }
-            while (true) {
-                result.push(value(depth + 1));
-                space();
-                const next = body[at++];
-                if (next === "]")
-                    return result;
-                if (next !== ",")
-                    fail();
-            }
-        }
-        for (const literal of ["true", "false", "null"]) {
-            if (body.startsWith(literal, at)) {
-                at += literal.length;
-                return JSON.parse(literal);
-            }
-        }
-        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(body.slice(at));
-        if (!number)
-            fail();
-        at += number[0].length;
-        const parsed = Number(number[0]);
-        if (!Number.isFinite(parsed))
-            fail();
-        return parsed;
-    };
-    try {
-        const parsed = value(0);
-        space();
-        return at === body.length && record(parsed) ? parsed : null;
-    }
-    catch {
-        return null;
-    }
-}
-function isSpreedlyTokenRequest(url, method = "POST") {
-    if (method !== "POST" || typeof url !== "string" || !url.startsWith(SPREEDLY_TOKEN_ENDPOINT + "?"))
-        return false;
-    try {
-        const parsed = new URL(url);
-        if (parsed.href !== url || parsed.origin + parsed.pathname !== SPREEDLY_TOKEN_ENDPOINT || parsed.hash)
-            return false;
-        const seen = /* @__PURE__ */ new Set();
-        for (const pair of parsed.search.slice(1).split("&")) {
-            const separator = pair.indexOf("=");
-            const name = pair.slice(0, separator), value = pair.slice(separator + 1);
-            if (separator < 1 || seen.has(name))
-                return false;
-            seen.add(name);
-            if (name === "from" ? value !== "iframe" : name === "v" ? !exact(/^1\.[0-9]{1,4}$/, value) : name === "client" ? !exact(/^[A-Za-z0-9_.-]{1,64}$/, value) : true)
-                return false;
-        }
-        return seen.has("from") && seen.has("v");
-    }
-    catch {
-        return false;
-    }
-}
-function preparedBody(body) {
-    const value = readJson(body);
-    if (!keys(value, ["environment_key", "payment_method", ...AUTH]) || !id(value.environment_key) || !keys(value.payment_method, ["credit_card", "allow_blank_name", "allow_expired_date", "metadata"]))
-        return null;
-    const suppliedAuth = AUTH.filter((key) => owns(value, key));
-    if (suppliedAuth.length && (suppliedAuth.length !== AUTH.length || !text(value.nonce) || !value.nonce || !(digits(value.timestamp, 1, 16) || Number.isSafeInteger(value.timestamp) && value.timestamp > 0) || !id(value.certificate_token) || !exact(/^[A-Za-z0-9+/=_-]{1,8192}$/, value.signature)))
-        return null;
-    const pm = value.payment_method, cc = pm.credit_card;
-    if (!keys(cc, ["number", "verification_value", "month", "year", "eligible_for_card_updater", ...CARD_TEXT]) || !digits(cc.number, 12, 19) || !digits(cc.verification_value, 3, 4) || !month(cc.month) || !year(cc.year) || CARD_TEXT.some((key) => owns(cc, key) && !text(cc[key])) || owns(cc, "eligible_for_card_updater") && cc.eligible_for_card_updater !== false)
-        return null;
-    if (owns(pm, "allow_blank_name") && typeof pm.allow_blank_name !== "boolean" || owns(pm, "allow_expired_date") && pm.allow_expired_date !== false)
-        return null;
-    if (owns(pm, "metadata") && (!record(pm.metadata) || Object.keys(pm.metadata).length > 20 || Object.entries(pm.metadata).some(([key, value2]) => !exact(/^[A-Za-z][A-Za-z0-9_-]{0,63}$/, key) || !(value2 === null || typeof value2 === "boolean" || Number.isFinite(value2) || text(value2)))))
-        return null;
-    return value;
-}
-function isPreparedSpreedlyRequest(body) {
-    return preparedBody(body) !== null;
-}
-function isSpreedlyRequest(request) {
-    if (!record(request) || request.method !== "POST" || !isSpreedlyTokenRequest(request.url, request.method) || !record(request.headers))
-        return false;
-    const body = preparedBody(request.body);
-    if (!body)
-        return false;
-    const headers = /* @__PURE__ */ new Map();
-    for (const [name, value] of Object.entries(request.headers)) {
-        const lower = name.toLowerCase();
-        if (headers.has(lower) || !text(value, 8192))
-            return false;
-        headers.set(lower, value);
-    }
-    return exact(/^application\/json(?:;\s*charset=utf-8)?$/i, headers.get("content-type")) && headers.get("spreedly-environment-key") === body.environment_key;
-}
-function injectSpreedlyCard(body, card) {
-    const value = preparedBody(body);
-    if (!value)
-        throw new Error("Refusing to pay: unsupported Spreedly new-card request.");
-    if (!card || !digits(card.number, 12, 19) || !digits(card.cvc, 3, 4) || !month(card.month) || !year(card.year)) {
-        throw new Error("Could not fill the card fields for Spreedly. Nothing was sent.");
-    }
-    const cc = value.payment_method.credit_card;
-    cc.number = card.number;
-    cc.verification_value = card.cvc;
-    cc.month = typeof cc.month === "number" ? Number(card.month) : String(card.month);
-    const selectedYear = String(card.year), nativeYear = String(cc.year);
-    const replacementYear = nativeYear.length === 2 && selectedYear.length === 4 ? selectedYear.slice(-2) : nativeYear.length === 4 && selectedYear.length === 2 ? "20" + selectedYear : selectedYear;
-    cc.year = typeof cc.year === "number" ? Number(replacementYear) : replacementYear;
-    return { body: JSON.stringify(value), where: ["number", "verification_value", "month", "year"].map((key) => "payment_method.credit_card." + key) };
-}
-function sanitizeSpreedlyTokenResponse(body) {
-    const value = readJson(body), transaction = value?.transaction, pm = transaction?.payment_method;
-    const fail = () => {
-        throw new Error("Invalid Spreedly token response.");
-    };
-    if (!record(transaction) || !record(pm) || transaction.succeeded !== true || transaction.transaction_type !== "AddPaymentMethod" || transaction.state !== "succeeded" || pm.payment_method_type !== "credit_card" || !opaqueId(pm.token))
-        return fail();
-    if (!text(pm.number, 32) || !exact(/^[Xx*]{8,15}[0-9]{4}$/, pm.number.replace(/-/g, "")) || !digits(pm.last_four_digits, 4, 4) || !pm.number.endsWith(pm.last_four_digits) || !exact(/^[Xx*]{3,4}$/, pm.verification_value) || !month(pm.month) || !year(pm.year))
-        return fail();
-    const safePm = {
-        token: pm.token,
-        payment_method_type: "credit_card",
-        number: pm.number,
-        verification_value: pm.verification_value,
-        last_four_digits: pm.last_four_digits,
-        month: pm.month,
-        year: pm.year
-    };
-    if (owns(pm, "card_type")) {
-        if (!CARD_TYPES.has(pm.card_type))
-            return fail();
-        safePm.card_type = pm.card_type;
-    }
-    if (owns(pm, "storage_state")) {
-        if (!["cached", "retained"].includes(pm.storage_state))
-            return fail();
-        safePm.storage_state = pm.storage_state;
-    }
-    if (owns(pm, "fingerprint")) {
-        if (!opaqueId(pm.fingerprint))
-            return fail();
-        safePm.fingerprint = pm.fingerprint;
-    }
-    for (const [key, width] of [["first_six_digits", 6], ["first_eight_digits", 8]]) {
-        if (owns(pm, key) && pm[key] !== null) {
-            if (!digits(pm[key], width, width))
-                return fail();
-            safePm[key] = pm[key];
-        }
-    }
-    for (const key of ["test", "eligible_for_card_updater"]) {
-        if (owns(pm, key)) {
-            if (typeof pm[key] !== "boolean")
-                return fail();
-            safePm[key] = pm[key];
-        }
-    }
-    for (const key of CARD_TEXT) {
-        if (!owns(pm, key))
-            continue;
-        if (pm[key] !== null && (!text(pm[key]) || panLike(pm[key])))
-            return fail();
-        safePm[key] = pm[key];
-    }
-    if (owns(pm, "errors")) {
-        if (!Array.isArray(pm.errors) || pm.errors.length)
-            return fail();
-        safePm.errors = [];
-    }
-    const safeTransaction = { succeeded: true, transaction_type: "AddPaymentMethod", state: "succeeded", payment_method: safePm };
-    if (owns(transaction, "token")) {
-        if (!opaqueId(transaction.token))
-            return fail();
-        safeTransaction.token = transaction.token;
-    }
-    return JSON.stringify({ transaction: safeTransaction });
-}
-export { SPREEDLY_TOKEN_ENDPOINT, injectSpreedlyCard, isPreparedSpreedlyRequest, isSpreedlyRequest, isSpreedlyTokenRequest, sanitizeSpreedlyTokenResponse };

package/dist/stripe-checkout.d.ts

@@ -1,81 +0,0 @@
-import { STRIPE_CHECKOUT_VALIDATION_CODES } from './stripe-checkout.generated.js';
-import type { PausedRequest } from './client.js';
-/** Test by default. Production requires explicit opt-in and an independently admitted live grant. */
-export interface StripeCheckoutOptions {
-    environment?: 'test' | 'production';
-    sessionId: string;
-    publishableKey: string;
-}
-type StubResponse = {
-    status: number;
-    headers: Record<string, string>;
-    body: string;
-};
-type Step = {
-    phase: 'tokenization';
-    response: StubResponse;
-} | {
-    phase: 'final';
-    request: PausedRequest;
-};
-type Phase = Step['phase'] | 'unknown';
-type GateState = 'fresh' | 'stubbed' | 'submitted' | 'stopped';
-type ValidationCode = (typeof STRIPE_CHECKOUT_VALIDATION_CODES)[keyof typeof STRIPE_CHECKOUT_VALIDATION_CODES];
-export type StripeCheckoutBlockStage = 'request_read' | 'classification' | 'claim' | 'readiness' | 'document' | 'stub_response';
-type ReadinessReason = 'attachment_not_ready' | 'cancelled' | 'checkout_inactive' | 'approval_pending' | 'request_inactive';
-export type StripeCheckoutBlockReason = ReadinessReason | 'request_unavailable' | 'request_validation_failed' | 'context_already_present' | 'duplicate_tokenization' | 'duplicate_confirmation' | 'preparation_unavailable' | 'preparation_missing' | 'claim_invalidated' | 'document_changed' | 'document_unavailable' | 'readiness_unavailable' | 'stub_response_failed';
-/** Native pre-authorization refusal metadata. Never contains request or exception text.
- * A classification code comes only from the shared core's fixed vocabulary.
- * gate_state is observed before the adapter retires a failed claim. A preserved duplicate
- * belongs to a competing request: consumers must not cancel the active checkout for it.
- */
-export interface StripeCheckoutBlockedDetail {
-    version: 1;
-    processor: 'stripe';
-    endpoint_family: 'payment_methods' | 'payment_page_confirm' | 'other';
-    phase: Phase;
-    stage: StripeCheckoutBlockStage;
-    reason: StripeCheckoutBlockReason;
-    validation_code?: ValidationCode;
-    gate_state: GateState;
-    disposition: 'active_claim_preserved' | 'checkout_stopped';
-}
-declare class StripeCheckoutRejectionError extends Error {
-    readonly stage: StripeCheckoutBlockStage;
-    readonly reason: StripeCheckoutBlockReason;
-    readonly phase?: Phase | undefined;
-    readonly validationCode?: ValidationCode | undefined;
-    constructor(message: string, stage: StripeCheckoutBlockStage, reason: StripeCheckoutBlockReason, phase?: Phase | undefined, validationCode?: ValidationCode | undefined);
-}
-export declare function stripeCheckoutReadinessError(reason: ReadinessReason): Error;
-/** A valid competing request must not retire the request that already claimed this step. */
-export declare class StripeCheckoutClaimConflictError extends StripeCheckoutRejectionError {
-    constructor(phase: Step['phase']);
-}
-/** The two native browser requests belong to one attachment and one grant.
- * Processor rules and form transformations live in the generated shared core.
- * The local stub contains no selected-card data and starts no authorization.
- */
-export declare class StripeCheckoutGate {
-    private state;
-    private billing?;
-    private readonly binding?;
-    constructor(options: {
-        stripeCheckout?: StripeCheckoutOptions;
-        executionMode?: string;
-        grantId?: string;
-        amount?: number | string;
-        currency?: string;
-    });
-    matches(url: string): boolean;
-    isEnabled(): boolean;
-    isPrepared(): boolean;
-    invalidate(): void;
-    /** Observability only: this endpoint label never participates in a payment decision. */
-    describeRejection(error: unknown, rawUrl: string, stage: StripeCheckoutBlockStage, phase?: Phase): StripeCheckoutBlockedDetail;
-    assertClaim(step: Step): void;
-    /** Check the actual top-level hosted document before preparing either step. */
-    assertDocument(raw: string): void;
-    claim(request: PausedRequest): Step | null;
-}
-export {};

package/dist/stripe-checkout.generated.d.ts

@@ -1,82 +0,0 @@
-declare var STRIPE_CHECKOUT_OPERATION: string;
-declare var STRIPE_CHECKOUT_CONTEXT_HEADER: string;
-declare var STRIPE_CHECKOUT_VALIDATION_CODES: Readonly<{
-    unclassified: "unclassified";
-    request_shape: "request_shape";
-    request_body_bounds: "request_body_bounds";
-    request_headers: "request_headers";
-    form_encoding: "form_encoding";
-    form_field_unknown: "form_field_unknown";
-    form_field_duplicate: "form_field_duplicate";
-    form_value_bounds: "form_value_bounds";
-    context_invalid: "context_invalid";
-    session_binding: "session_binding";
-    publishable_key: "publishable_key";
-    mode_binding: "mode_binding";
-    attribution_session: "attribution_session";
-    tokenization_fields: "tokenization_fields";
-    billing_email: "billing_email";
-    billing_binding: "billing_binding";
-    billing_conflict: "billing_conflict";
-    expected_amount: "expected_amount";
-    payment_method_type: "payment_method_type";
-    synthetic_payment_method: "synthetic_payment_method";
-    required_final_fields: "required_final_fields";
-}>;
-declare function stripeCheckoutValidationCode(error: any): "unclassified" | "request_shape" | "request_body_bounds" | "request_headers" | "form_encoding" | "form_field_unknown" | "form_field_duplicate" | "form_value_bounds" | "context_invalid" | "session_binding" | "publishable_key" | "mode_binding" | "attribution_session" | "tokenization_fields" | "billing_email" | "billing_binding" | "billing_conflict" | "expected_amount" | "payment_method_type" | "synthetic_payment_method" | "required_final_fields";
-declare function validateStripeCheckoutIdentity(value: any): Readonly<{
-    environment: any;
-    livemode: boolean;
-}>;
-declare function validateStripeCheckoutCard(card: any, environment?: string): boolean;
-declare function isStripeCheckoutHostedMode(value: any): boolean;
-declare function encodeStripeCheckoutContext(value: any): string;
-declare function hasStripeCheckoutMarker(request: any): boolean;
-declare function parseStripeCheckoutContext(request: any): {
-    version: number;
-    session_id: any;
-    synthetic_payment_method_id: any;
-} | null | undefined;
-declare function isStripeCheckoutEndpoint(raw: any): boolean;
-declare function captureStripeCheckoutBilling(request: any, options: any): Readonly<{
-    session_id: any;
-    synthetic_payment_method_id: any;
-    email: string | null;
-}>;
-declare function attachStripeCheckoutBilling(request: any, captured: any, options: any): any;
-declare function classifyStripeCheckoutRequest(request: any, options?: {}): {
-    phase: string;
-    session_id: any;
-    publishable_key: any;
-    synthetic_payment_method_id?: undefined;
-    amount_cents?: undefined;
-    currency?: undefined;
-} | {
-    phase: string;
-    session_id: any;
-    publishable_key: any;
-    synthetic_payment_method_id: string | undefined;
-    amount_cents: number;
-    currency: string;
-} | null;
-declare function createStripeCheckoutTokenizationStub(request: any, options: any): {
-    status: number;
-    headers: {
-        "content-type": string;
-    };
-    body: string;
-};
-declare function parseStripeCheckoutResponse(raw: any, options: any): any;
-declare function prepareStripeCheckoutReplay(request: any, card: any, options?: {}): {
-    psp: string;
-    request: {
-        url: any;
-        method: string;
-        headers: {
-            "content-type": string;
-        };
-        body: string;
-    };
-    where: string[];
-};
-export { STRIPE_CHECKOUT_CONTEXT_HEADER, STRIPE_CHECKOUT_OPERATION, STRIPE_CHECKOUT_VALIDATION_CODES, attachStripeCheckoutBilling, captureStripeCheckoutBilling, classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, hasStripeCheckoutMarker, isStripeCheckoutEndpoint, isStripeCheckoutHostedMode, parseStripeCheckoutContext, parseStripeCheckoutResponse, prepareStripeCheckoutReplay, stripeCheckoutValidationCode, validateStripeCheckoutCard, validateStripeCheckoutIdentity };