@agent-cards/checkout 0.19.0 → 0.21.0

package/dist/adyen.generated.d.ts

@@ -1,24 +0,0 @@
-/** Adyen Web Sessions payments request, before it consumes an approval.
- * adyen-web (Drop-in and the Card component in the Sessions flow) posts one
- * JSON body to /checkoutshopper/v1/sessions/{id}/payments on the merchant's
- * Adyen host, with `clientKey` as its only query parameter, and carries the
- * card as four JWE blobs under paymentMethod. Those four blobs are what the
- * cardholder's device replaces; nothing else in the body is rewritten. Test
- * and live are separate host families AND separate client-key prefixes, so a
- * preparation names one of them and the request must agree on both. A body
- * that pays with a stored card, carries a single encrypted blob, or asks
- * Adyen to store the card is not the purchase the person approved and never
- * consumes readiness. This module never rewrites a body.
- */
-export type AdyenPreparationEnvironment = 'production' | 'sandbox';
-export declare const ADYEN_ENCRYPTED_CARD_FIELDS: readonly ["encryptedCardNumber", "encryptedExpiryMonth", "encryptedExpiryYear", "encryptedSecurityCode"];
-/** Which preparation environment a hostname belongs to: Adyen's test host, one of its live host families, or neither. */
-export declare function adyenPreparationEnvironment(hostname: string): AdyenPreparationEnvironment | null;
-/** The URL a preparation advertises for the approved host family: every registry recognizes it, and it is never a real session. */
-export declare function adyenPreparationUrl(environment: AdyenPreparationEnvironment): string;
-/** A Sessions payments URL on the approved host family whose only query is a client key of that same environment. */
-export declare function isPreparedAdyenUrl(rawUrl: string, environment: AdyenPreparationEnvironment): boolean;
-/** A fresh scheme card carrying the four encrypted fields the device replaces; stored cards, single-blob encryption and store requests never consume consent. */
-export declare function isPreparedAdyenBody(body: string | null | undefined): boolean;
-/** Processor identity, environment and request shape are part of the device's prior consent. */
-export declare function isPreparedAdyenRequest(rawUrl: string, method: string, body: string | null | undefined, environment: AdyenPreparationEnvironment): boolean;

package/dist/adyen.generated.js

@@ -1,64 +0,0 @@
-export const ADYEN_ENCRYPTED_CARD_FIELDS = ['encryptedCardNumber', 'encryptedExpiryMonth', 'encryptedExpiryYear', 'encryptedSecurityCode'];
-const SESSIONS_PAYMENTS = /^\/checkoutshopper\/v1\/sessions\/[A-Za-z0-9_-]{1,256}\/payments$/;
-const TEST_HOST = /^checkoutshopper-test\.adyen\.com$/;
-const LIVE_HOST = /^(?:checkoutshopper-live(?:-[a-z]+)?\.adyen\.com|(?:[a-z0-9-]+\.)*adyenpayments\.com)$/;
-const CLIENT_KEY = /^(test|live)_[A-Za-z0-9]{32}$/;
-const record = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
-const text = (value, max = 4096) => typeof value === 'string' && value.length > 0 && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
-/** Which preparation environment a hostname belongs to: Adyen's test host, one of its live host families, or neither. */
-export function adyenPreparationEnvironment(hostname) {
-    const host = hostname.toLowerCase();
-    if (TEST_HOST.test(host))
-        return 'sandbox';
-    if (LIVE_HOST.test(host))
-        return 'production';
-    return null;
-}
-/** The URL a preparation advertises for the approved host family: every registry recognizes it, and it is never a real session. */
-export function adyenPreparationUrl(environment) {
-    return `https://checkoutshopper-${environment === 'production' ? 'live' : 'test'}.adyen.com/checkoutshopper/v1/sessions/prepared/payments`;
-}
-/** A Sessions payments URL on the approved host family whose only query is a client key of that same environment. */
-export function isPreparedAdyenUrl(rawUrl, environment) {
-    let url;
-    try {
-        url = new URL(rawUrl);
-    }
-    catch {
-        return false;
-    }
-    if (url.protocol !== 'https:' || url.port || url.username || url.password || url.hash)
-        return false;
-    if (adyenPreparationEnvironment(url.hostname) !== environment || !SESSIONS_PAYMENTS.test(url.pathname))
-        return false;
-    const names = [...url.searchParams.keys()];
-    if (names.length !== 1 || names[0] !== 'clientKey')
-        return false;
-    const key = url.searchParams.get('clientKey') ?? '';
-    const match = CLIENT_KEY.exec(key);
-    return !!match && match[0] === key && (match[1] === 'live') === (environment === 'production');
-}
-/** A fresh scheme card carrying the four encrypted fields the device replaces; stored cards, single-blob encryption and store requests never consume consent. */
-export function isPreparedAdyenBody(body) {
-    if (typeof body !== 'string' || !body || body.length > 65536)
-        return false;
-    let parsed;
-    try {
-        parsed = JSON.parse(body);
-    }
-    catch {
-        return false;
-    }
-    if (!record(parsed) || parsed.storePaymentMethod === true)
-        return false;
-    const method = parsed.paymentMethod;
-    if (!record(method) || method.type !== 'scheme')
-        return false;
-    if ('storedPaymentMethodId' in method || 'encryptedCard' in method || 'recurringDetailReference' in method)
-        return false;
-    return ADYEN_ENCRYPTED_CARD_FIELDS.every(field => text(method[field]));
-}
-/** Processor identity, environment and request shape are part of the device's prior consent. */
-export function isPreparedAdyenRequest(rawUrl, method, body, environment) {
-    return method.toUpperCase() === 'POST' && isPreparedAdyenUrl(rawUrl, environment) && isPreparedAdyenBody(body);
-}

package/dist/attachment.d.ts

@@ -1,11 +0,0 @@
-/** An attachment failure has no payment or browser credentials in its message. */
-export declare class CheckoutAttachmentError extends Error {
-    readonly reason: 'timeout' | 'closed' | 'unavailable';
-    readonly code = "checkout_attachment_failed";
-    constructor(reason: 'timeout' | 'closed' | 'unavailable');
-}
-/** Preserve a known setup cause without exposing raw transport errors. */
-export declare function attachmentFailure(error: unknown): CheckoutAttachmentError;
-export declare function attachmentDeadline(value: number | undefined): number;
-/** Stop waiting, then reject every late continuation before its next command. */
-export declare function withinAttachmentDeadline(arm: (assertActive: () => void) => Promise<void>, timeoutMs: number, signal: AbortSignal): Promise<void>;

package/dist/attachment.js

@@ -1,50 +0,0 @@
-/** An attachment failure has no payment or browser credentials in its message. */
-export class CheckoutAttachmentError extends Error {
-    reason;
-    code = 'checkout_attachment_failed';
-    constructor(reason) {
-        super('Could not attach checkout interception. Close this checkout page and retry in a fresh browser context.');
-        this.reason = reason;
-        this.name = 'CheckoutAttachmentError';
-    }
-}
-/** Preserve a known setup cause without exposing raw transport errors. */
-export function attachmentFailure(error) {
-    return error instanceof CheckoutAttachmentError ? error : new CheckoutAttachmentError('unavailable');
-}
-export function attachmentDeadline(value) {
-    if (value === undefined)
-        return 30_000;
-    if (!Number.isSafeInteger(value) || value <= 0 || value > 300_000) {
-        throw new Error('attachmentTimeoutMs must be an integer between 1 and 300000.');
-    }
-    return value;
-}
-/** Stop waiting, then reject every late continuation before its next command. */
-export async function withinAttachmentDeadline(arm, timeoutMs, signal) {
-    let stopped;
-    let timer;
-    let onAbort = () => { };
-    const assertActive = () => { if (stopped)
-        throw stopped; };
-    const deadline = new Promise((_resolve, reject) => {
-        const stop = (failure) => { stopped ??= failure; reject(stopped); };
-        onAbort = () => stop(attachmentFailure(signal.reason));
-        signal.addEventListener('abort', onAbort, { once: true });
-        if (signal.aborted)
-            onAbort();
-        else
-            timer = setTimeout(() => stop(new CheckoutAttachmentError('timeout')), timeoutMs);
-    });
-    try {
-        await Promise.race([deadline, Promise.resolve().then(() => { assertActive(); return arm(assertActive); })]);
-    }
-    catch (error) {
-        stopped ??= attachmentFailure(error);
-        throw stopped;
-    }
-    finally {
-        clearTimeout(timer);
-        signal.removeEventListener('abort', onAbort);
-    }
-}

package/dist/braintree.d.ts

@@ -1,2 +0,0 @@
-export { braintreeEnvironment, classifyBraintreeRequest, isPreparedBraintreeRequest, readTokenizationJson } from './braintree.generated.js';
-export type { BraintreeEnvironment, BraintreeRequestKind } from './braintree.generated.js';

package/dist/braintree.generated.d.ts

@@ -1,10 +0,0 @@
-/** Classify native Braintree GraphQL requests without changing their bytes. */
-export type BraintreeEnvironment = 'production' | 'sandbox';
-export type BraintreeRequestKind = 'configuration' | 'tokenization' | 'invalid';
-export declare function braintreeEnvironment(url: string): BraintreeEnvironment | undefined;
-/** Bounded duplicate-aware JSON for fresh-card preparation bodies. */
-export declare function readTokenizationJson(body: string | null): Record<string, unknown> | null;
-/** Undefined belongs to another processor; invalid Braintree requests stay blocked. */
-export declare function classifyBraintreeRequest(url: string, method: string, body: string | null): BraintreeRequestKind | undefined;
-/** Preparation accepts guest tokenization only; ordinary interception stays broader. */
-export declare function isPreparedBraintreeRequest(body: string | null): boolean;

package/dist/braintree.generated.js

@@ -1,302 +0,0 @@
-const PRODUCTION = 'https://payments.braintree-api.com/graphql';
-const SANDBOX = 'https://payments.sandbox.braintree-api.com/graphql';
-const MAX_BODY_LENGTH = 128 * 1024;
-const MAX_DEPTH = 32;
-const MAX_NODES = 10_000;
-export function braintreeEnvironment(url) {
-    return url === PRODUCTION ? 'production' : url === SANDBOX ? 'sandbox' : undefined;
-}
-function invalid() { throw new Error('invalid_braintree_request'); }
-function record(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-/** JSON.parse discards duplicate keys, so validate keys before using any value. */
-class JsonReader {
-    text;
-    at = 0;
-    nodes = 0;
-    constructor(text) {
-        this.text = text;
-    }
-    read() {
-        const value = this.value(0);
-        this.space();
-        if (this.at !== this.text.length)
-            invalid();
-        return value;
-    }
-    space() {
-        while (' \t\r\n'.includes(this.text[this.at] ?? '\0'))
-            this.at++;
-    }
-    take(expected) {
-        this.space();
-        if (this.text[this.at++] !== expected)
-            invalid();
-    }
-    string() {
-        this.space();
-        const start = this.at;
-        if (this.text[this.at++] !== '"')
-            invalid();
-        while (this.at < this.text.length) {
-            const char = this.text[this.at++];
-            if (char === '\\') {
-                this.at++;
-                continue;
-            }
-            if (char === '"')
-                return JSON.parse(this.text.slice(start, this.at));
-        }
-        return invalid();
-    }
-    value(depth) {
-        if (depth > MAX_DEPTH || ++this.nodes > MAX_NODES)
-            invalid();
-        this.space();
-        const char = this.text[this.at];
-        if (char === '"')
-            return this.string();
-        if (char === '{') {
-            this.at++;
-            const result = Object.create(null);
-            const keys = new Set();
-            this.space();
-            if (this.text[this.at] === '}') {
-                this.at++;
-                return result;
-            }
-            while (true) {
-                const key = this.string();
-                if (keys.has(key))
-                    invalid();
-                keys.add(key);
-                this.take(':');
-                result[key] = this.value(depth + 1);
-                this.space();
-                const next = this.text[this.at++];
-                if (next === '}')
-                    return result;
-                if (next !== ',')
-                    invalid();
-            }
-        }
-        if (char === '[') {
-            this.at++;
-            const result = [];
-            this.space();
-            if (this.text[this.at] === ']') {
-                this.at++;
-                return result;
-            }
-            while (true) {
-                result.push(this.value(depth + 1));
-                this.space();
-                const next = this.text[this.at++];
-                if (next === ']')
-                    return result;
-                if (next !== ',')
-                    invalid();
-            }
-        }
-        for (const [literal, value] of [['true', true], ['false', false], ['null', null]]) {
-            if (this.text.startsWith(literal, this.at)) {
-                this.at += literal.length;
-                return value;
-            }
-        }
-        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(this.text.slice(this.at));
-        if (!number)
-            invalid();
-        this.at += number[0].length;
-        const value = Number(number[0]);
-        if (!Number.isFinite(value))
-            invalid();
-        return value;
-    }
-}
-/** Bounded duplicate-aware JSON for fresh-card preparation bodies. */
-export function readTokenizationJson(body) {
-    if (typeof body !== 'string' || body.length === 0 || body.length > MAX_BODY_LENGTH)
-        return null;
-    try {
-        const value = new JsonReader(body).read();
-        return record(value) ? value : null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Native operations need names, punctuation and variables, never literals. */
-function lex(query) {
-    const tokens = [];
-    let at = 0;
-    while (at < query.length) {
-        const char = query[at];
-        if (' \t\r\n,'.includes(char)) {
-            at++;
-            continue;
-        }
-        if ('!$():{}'.includes(char)) {
-            tokens.push(char);
-            at++;
-        }
-        else if (/[A-Za-z_]/.test(char)) {
-            const start = at++;
-            while (at < query.length && /[A-Za-z_0-9]/.test(query[at]))
-                at++;
-            tokens.push(query.slice(start, at));
-        }
-        else
-            invalid(); // Includes comments, strings, fragments and directives.
-        if (tokens.length > MAX_NODES)
-            invalid();
-    }
-    return tokens;
-}
-class GraphqlReader {
-    tokens;
-    at = 0;
-    constructor(tokens) {
-        this.tokens = tokens;
-    }
-    peek() { return this.tokens[this.at]; }
-    take(expected) {
-        if (this.tokens[this.at++] !== expected)
-            invalid();
-    }
-    name() {
-        const value = this.tokens[this.at++];
-        if (!value || !/^[A-Za-z_][A-Za-z_0-9]*$/.test(value))
-            invalid();
-        return value;
-    }
-    read() {
-        const kind = this.name();
-        const name = this.name();
-        let inputDefinition = false;
-        if (this.peek() === '(') {
-            // No defaults, alternate types, unused variables or duplicate definitions.
-            for (const token of ['(', '$', 'input', ':', 'TokenizeCreditCardInput', '!', ')'])
-                this.take(token);
-            inputDefinition = true;
-        }
-        const fields = this.selection(0);
-        if (this.at !== this.tokens.length)
-            invalid();
-        return { kind, name, inputDefinition, fields };
-    }
-    selection(depth) {
-        if (depth > MAX_DEPTH)
-            invalid();
-        this.take('{');
-        const fields = [];
-        const names = new Set();
-        while (this.peek() !== '}') {
-            const name = this.name();
-            if (names.has(name))
-                invalid();
-            names.add(name);
-            const args = [];
-            if (this.peek() === '(') {
-                if (depth !== 0)
-                    invalid();
-                this.take('(');
-                const argument = this.name();
-                this.take(':');
-                this.take('$');
-                args.push({ name: argument, variable: this.name() });
-                this.take(')');
-            }
-            const children = this.peek() === '{' ? this.selection(depth + 1) : [];
-            fields.push({ name, arguments: args, fields: children });
-            // Aliases, directives and other punctuation cannot begin the next field.
-        }
-        this.take('}');
-        if (fields.length === 0)
-            invalid();
-        return fields;
-    }
-}
-/** Undefined belongs to another processor; invalid Braintree requests stay blocked. */
-export function classifyBraintreeRequest(url, method, body) {
-    let hostname;
-    try {
-        hostname = new URL(url).hostname;
-    }
-    catch {
-        return undefined;
-    }
-    if (hostname !== 'payments.braintree-api.com' && hostname !== 'payments.sandbox.braintree-api.com')
-        return undefined;
-    if (!braintreeEnvironment(url) || method !== 'POST' || typeof body !== 'string' || body.length === 0 || body.length > MAX_BODY_LENGTH)
-        return 'invalid';
-    try {
-        const envelope = new JsonReader(body).read();
-        if (!record(envelope) || typeof envelope.query !== 'string' || typeof envelope.operationName !== 'string')
-            return 'invalid';
-        if (Object.keys(envelope).some(key => !['query', 'operationName', 'variables', 'clientSdkMetadata'].includes(key)))
-            return 'invalid';
-        if (envelope.clientSdkMetadata !== undefined && !record(envelope.clientSdkMetadata))
-            return 'invalid';
-        const operation = new GraphqlReader(lex(envelope.query)).read();
-        if (operation.name !== envelope.operationName || operation.fields.length !== 1)
-            return 'invalid';
-        const root = operation.fields[0];
-        if (root.fields.length === 0)
-            return 'invalid';
-        const variables = envelope.variables === undefined ? Object.create(null) : envelope.variables;
-        if (!record(variables))
-            return 'invalid';
-        if (operation.kind === 'query' && ['ClientConfiguration', 'ClientConfigurationQuery'].includes(operation.name)
-            && !operation.inputDefinition && root.name === 'clientConfiguration' && root.arguments.length === 0
-            && Object.keys(variables).length === 0)
-            return 'configuration';
-        if (operation.kind !== 'mutation' || operation.name !== 'TokenizeCreditCard' || !operation.inputDefinition
-            || root.name !== 'tokenizeCreditCard' || root.arguments.length !== 1
-            || root.arguments[0].name !== 'input' || root.arguments[0].variable !== 'input'
-            || Object.keys(variables).length !== 1 || !record(variables.input) || !record(variables.input.creditCard))
-            return 'invalid';
-        const card = variables.input.creditCard;
-        if (!['number', 'expirationMonth', 'expirationYear'].every(key => typeof card[key] === 'string' && card[key].trim().length > 0))
-            return 'invalid';
-        if (card.cvv !== undefined && (typeof card.cvv !== 'string' || card.cvv.trim().length === 0))
-            return 'invalid';
-        return 'tokenization';
-    }
-    catch {
-        return 'invalid';
-    }
-}
-/** Preparation accepts guest tokenization only; ordinary interception stays broader. */
-export function isPreparedBraintreeRequest(body) {
-    if (classifyBraintreeRequest(PRODUCTION, 'POST', body) !== 'tokenization')
-        return false;
-    try {
-        const envelope = new JsonReader(body).read();
-        const variables = envelope.variables;
-        const input = variables.input;
-        if (Object.keys(input).some(key => key !== 'creditCard' && key !== 'options'))
-            return false;
-        const card = input.creditCard;
-        if (Object.keys(card).some(key => !['number', 'expirationMonth', 'expirationYear', 'cvv', 'cardholderName', 'billingAddress'].includes(key)))
-            return false;
-        if (Object.entries(card).some(([key, value]) => key !== 'billingAddress' && typeof value !== 'string'))
-            return false;
-        if (card.billingAddress !== undefined) {
-            if (!record(card.billingAddress))
-                return false;
-            const addressKeys = ['postalCode', 'firstName', 'lastName', 'company', 'streetAddress', 'extendedAddress',
-                'locality', 'region', 'countryCodeNumeric', 'countryCodeAlpha2', 'countryCodeAlpha3', 'countryName'];
-            if (Object.entries(card.billingAddress).some(([key, value]) => !addressKeys.includes(key) || typeof value !== 'string'))
-                return false;
-        }
-        // Fingerprint authorization defaults validation on when the option is absent.
-        // Preparation permits only an explicit request for a transient card token.
-        return record(input.options) && Object.keys(input.options).every(key => key === 'validate')
-            && input.options.validate === false;
-    }
-    catch {
-        return false;
-    }
-}

package/dist/braintree.js

@@ -1,2 +0,0 @@
-// The generated projection keeps the public SDK free of runtime dependencies.
-export { braintreeEnvironment, classifyBraintreeRequest, isPreparedBraintreeRequest, readTokenizationJson } from './braintree.generated.js';

package/dist/builtin-registry.generated.d.ts

@@ -1,2 +0,0 @@
-import type { Recognizer } from './registry.js';
-export declare const BUILTIN_REGISTRY: Recognizer[];

package/dist/builtin-registry.generated.js

@@ -1 +0,0 @@
-export const BUILTIN_REGISTRY = [{ "psp": "spreedly", "match": /core\.spreedly\.com\/v1\/payment_methods\/restricted\.json/i, "hosts": ["^core\\.spreedly\\.com$"], "encoding": "json", "passthroughHeaders": [/^spreedly-environment-key$/i] }, { "psp": "shopify", "match": /(checkout\.pci\.shopifyinc\.com|deposit\.[a-z0-9-]+\.shopifycs\.com)\/sessions/i, "hosts": ["^checkout\\.pci\\.shopifyinc\\.com$", "^deposit\\.[a-z0-9-]+\\.shopifycs\\.com$"], "encoding": "json", "passthroughHeaders": [/^shopify-identification-signature$/i] }, { "psp": "stripe", "match": /api\.stripe\.com\/v1\/(payment_methods|tokens|sources|confirmation_tokens|setup_intents\/seti_\w+\/confirm|payment_intents\/pi_\w+\/confirm|payment_pages\/cs_(?:test|live)_\w+\/confirm)/i, "hosts": ["^api\\.stripe\\.com$"], "encoding": "form", "passthroughHeaders": [/^authorization$/i, /^stripe-version$/i, /^x-stripe-client-user-agent$/i], "cardFields": ["card[number]", "payment_method_data[card][number]"], "passWithoutCard": "api\\.stripe\\.com/v1/(sources|confirmation_tokens|payment_pages/cs_(?:test|live)_\\w+/confirm)" }, { "psp": "braintree", "match": /payments(\.sandbox)?\.braintree-api\.com\/graphql/i, "hosts": ["^payments\\.braintree-api\\.com$", "^payments\\.sandbox\\.braintree-api\\.com$"], "sandboxHosts": ["^payments\\.sandbox\\.braintree-api\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^braintree-version$/i] }, { "psp": "checkout_com", "match": /(api|card-acquisition-gateway)(\.sandbox)?\.checkout\.com\/tokens/i, "hosts": ["^api\\.checkout\\.com$", "^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "sandboxHosts": ["^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "adyen", "match": /(checkoutshopper-(test|live(-[a-z]+)?)\.adyen\.com|([a-z0-9-]+\.)*adyenpayments\.com)\/checkoutshopper\/v1\/sessions\/[A-Za-z0-9_-]+\/payments/i, "hosts": ["^checkoutshopper-(test|live(-[a-z]+)?)\\.adyen\\.com$", "^([a-z0-9-]+\\.)*adyenpayments\\.com$"], "sandboxHosts": ["^checkoutshopper-test\\.adyen\\.com$"], "encoding": "json", "passthroughHeaders": [], "clientSideEncrypted": true, "mode": "cse" }, { "psp": "tranzila", "match": /(direct\.tranzila\.com\/process\/n\/|directng\.tranzila\.com\/process\/?)/i, "hosts": ["^direct\\.tranzila\\.com$", "^directng\\.tranzila\\.com$"], "encoding": "form", "passthroughHeaders": [], "mode": "hosted_form" }, { "psp": "square", "match": /pci-connect\.squareup(?:sandbox)?\.com\/v2\/card-nonce/i, "hosts": ["^pci-connect\\.squareup\\.com$", "^pci-connect\\.squareupsandbox\\.com$"], "sandboxHosts": ["^pci-connect\\.squareupsandbox\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "authorize_net", "match": /(api2|apitest)\.authorize\.net\/xml\/v1\/request\.api/i, "hosts": ["^api2\\.authorize\\.net$", "^apitest\\.authorize\\.net$"], "sandboxHosts": ["^apitest\\.authorize\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "worldpay", "match": /(try\.)?access\.worldpay\.com\/(sessions\/card|verifiedTokens\/sessions)/i, "hosts": ["^access\\.worldpay\\.com$", "^try\\.access\\.worldpay\\.com$"], "sandboxHosts": ["^try\\.access\\.worldpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^accept$/i] }, { "psp": "nuvei", "match": /(secure|ppp-test)\.safecharge\.com\/ppp\/api\/v1\/(?:cardTokenization|clientPayment|websdk\/initPaymentWithCardTokenization)\.do/i, "hosts": ["^secure\\.safecharge\\.com$", "^ppp-test\\.safecharge\\.com$"], "sandboxHosts": ["^ppp-test\\.safecharge\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "airwallex", "match": /(checkout(\.sandbox)?\.airwallex\.com|pci-api(\.sandbox)?\.airwallex\.com)\/api\/v1\/pa\/(payment_intents\/[^/?#]+\/confirm|payment_consents\/[^/?#]+\/verify|payment_methods\/create)(\?|$)/i, "hosts": ["^checkout\\.airwallex\\.com$", "^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "sandboxHosts": ["^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "encoding": "json", "passthroughHeaders": [/^client-secret$/i, /^authorization$/i, /^x-auth-token$/i, /^x-on-behalf-of$/i, /^x-api-version$/i] }, { "psp": "rapyd", "match": /(api|sandboxapi)\.rapyd\.net\/v1\/(?:hosted\/collect\/card\/[^/?#]+\/payment_method|checkout\/checkout_[A-Za-z0-9]+)(?:[?#]|$)/i, "hosts": ["^api\\.rapyd\\.net$", "^sandboxapi\\.rapyd\\.net$"], "sandboxHosts": ["^sandboxapi\\.rapyd\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "dlocal", "match": /ppmcc(-sandbox)?\.dlocal\.com\/cvault\/credit-card\/temporal/i, "hosts": ["^ppmcc\\.dlocal\\.com$", "^ppmcc-sandbox\\.dlocal\\.com$"], "sandboxHosts": ["^ppmcc-sandbox\\.dlocal\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-fields-api-key$/i, /^x-uow$/i, /^x-dlocal-infrav2$/i] }, { "psp": "ebanx", "match": /(?:(?:customer-frontier|customer|api-local-latam|api|sandbox-local-latam|sandbox)\.ebanx\.com|(?:api-diamond|api|sandbox)\.ebanxpay\.com)\/ws\/token/i, "hosts": ["^customer\\.ebanx\\.com$", "^customer-frontier\\.ebanx\\.com$", "^api\\.ebanx\\.com$", "^sandbox\\.ebanx\\.com$", "^api-local-latam\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^api-diamond\\.ebanxpay\\.com$", "^api\\.ebanxpay\\.com$", "^sandbox\\.ebanxpay\\.com$"], "sandboxHosts": ["^sandbox\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^sandbox\\.ebanxpay\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "mercado_pago", "match": /api\.mercadopago\.com\/v1\/card_tokens(?![\w/-])/i, "hosts": ["^api\\.mercadopago\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-product-id$/i] }, { "psp": "payu", "match": /(secure\.payu\.com|(merch-prod|secure)\.snd\.payu\.com)\/api\/front\/tokens/i, "hosts": ["^secure\\.payu\\.com$", "^(merch-prod|secure)\\.snd\\.payu\\.com$"], "sandboxHosts": ["^(merch-prod|secure)\\.snd\\.payu\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "razorpay", "match": /api\.razorpay\.com\/v1\/(?:standard_checkout\/)?payments\/create\/(?:ajax|checkout|fees)/i, "hosts": ["^api\\.razorpay\\.com$"], "encoding": "form", "passthroughHeaders": [/^x-razorpay-sessionid$/i, /^x-customer-access-token$/i] }, { "psp": "mollie", "match": /api\.cc\.mollie\.com\/v1\/card-tokens/i, "hosts": ["^api\\.cc\\.mollie\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "paysafe", "match": /(?:api(\.test)?\.paysafe\.com\/(?:paymenthub\/v1\/singleusepaymenthandles|js\/api\/v1\/tokenize)|hosted(\.test)?\.paysafe\.com\/checkout\/api\/v1\/tokenize)(?![\w/-])/i, "hosts": ["^api\\.paysafe\\.com$", "^api\\.test\\.paysafe\\.com$", "^hosted\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "sandboxHosts": ["^api\\.test\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-paysafe-credentials$/i, /^correlationid$/i] }, { "psp": "recurly", "match": /api(\.eu)?\.recurly\.com\/js\/v1\/token(?![\w-])/i, "hosts": ["^api\\.recurly\\.com$", "^api\\.eu\\.recurly\\.com$"], "encoding": "form", "passthroughHeaders": [/^recurly-credential-checkout-hostname$/i] }, { "psp": "moneris", "match": /(www3|esqa|gateway|gatewayqa|gatewayt|gatewaydev)\.moneris\.com\/HPPtoken\/request\.php/i, "hosts": ["^www3\\.moneris\\.com$", "^esqa\\.moneris\\.com$", "^gateway\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "sandboxHosts": ["^esqa\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "encoding": "form", "passthroughHeaders": [] }, { "psp": "bambora", "match": /(api\.na\.bambora\.com|api\.bam\.shift4api\.net)\/scripts\/tokenization\/tokens/i, "hosts": ["^api\\.na\\.bambora\\.com$", "^api\\.bam\\.shift4api\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "global_payments", "match": /(?:api\.heartlandportico\.com\/SecureSubmit\.v1\/api\/token|cert\.api2\.heartlandportico\.com\/Hps\.Exchange\.PosGateway\.Hpf\.v1\/api\/token|apis(?:\.sandbox)?(?:\.eu)?\.globalpay\.com\/ucp\/(?:merchants\/[^/]+\/)?payment-methods)/i, "hosts": ["^api\\.heartlandportico\\.com$", "^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.globalpay\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.eu\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "sandboxHosts": ["^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-gp-version$/i] }];

package/dist/card-fields.generated.d.ts

@@ -1,3 +0,0 @@
-declare function carriesCardFields(recognizer: any, body: any): boolean;
-declare function requestWithoutCard(recognizer: any, url: any, body: any): "continue" | "refuse" | null;
-export { carriesCardFields, requestWithoutCard };

package/dist/card-fields.generated.js

@@ -1,46 +0,0 @@
-// @ts-nocheck
-// Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: ac6967df3f29912d12c310418d06b6583529d5a4d5346c362ef0a7987fd4f2ab
-// src/card-fields.js
-function carriesCardFields(recognizer, body) {
-    const fields = recognizer && recognizer.cardFields;
-    if (!Array.isArray(fields) || fields.length === 0)
-        return true;
-    if (recognizer.encoding !== "form")
-        return true;
-    if (typeof body !== "string" || body === "")
-        return false;
-    for (const chunk of body.split("&")) {
-        const eq = chunk.indexOf("=");
-        if (eq <= 0 || eq === chunk.length - 1)
-            continue;
-        let key;
-        try {
-            key = decodeURIComponent(chunk.slice(0, eq).replace(/\+/g, " "));
-        }
-        catch {
-            continue;
-        }
-        if (fields.includes(key))
-            return true;
-    }
-    return false;
-}
-function requestWithoutCard(recognizer, url, body) {
-    if (carriesCardFields(recognizer, body))
-        return null;
-    const pass = recognizer && recognizer.passWithoutCard;
-    if (typeof pass === "string" && pass !== "") {
-        let parsed;
-        try {
-            parsed = new URL(url);
-        }
-        catch {
-            return "refuse";
-        }
-        if (new RegExp(`^(?:${pass})$`, "i").test(`${parsed.hostname.toLowerCase()}${parsed.pathname}`))
-            return "continue";
-    }
-    return "refuse";
-}
-export { carriesCardFields, requestWithoutCard };