@agent-cards/checkout 0.19.0 → 0.22.0

package/dist/stripe-checkout.js

@@ -1,140 +0,0 @@
-import { classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, isStripeCheckoutEndpoint, STRIPE_CHECKOUT_CONTEXT_HEADER, captureStripeCheckoutBilling, attachStripeCheckoutBilling, validateStripeCheckoutIdentity, stripeCheckoutValidationCode, STRIPE_CHECKOUT_VALIDATION_CODES, } from './stripe-checkout.generated.js';
-class StripeCheckoutRejectionError extends Error {
-    stage;
-    reason;
-    phase;
-    validationCode;
-    constructor(message, stage, reason, phase, validationCode) {
-        super(message);
-        this.stage = stage;
-        this.reason = reason;
-        this.phase = phase;
-        this.validationCode = validationCode;
-    }
-}
-export function stripeCheckoutReadinessError(reason) {
-    return new StripeCheckoutRejectionError('checkout_interception_not_ready', 'readiness', reason);
-}
-/** A valid competing request must not retire the request that already claimed this step. */
-export class StripeCheckoutClaimConflictError extends StripeCheckoutRejectionError {
-    constructor(phase) {
-        super(phase === 'tokenization' ? 'Native Stripe Checkout preparation is already claimed.'
-            : 'Native Stripe Checkout confirmation is already claimed.', 'claim', phase === 'tokenization' ? 'duplicate_tokenization' : 'duplicate_confirmation', phase);
-    }
-}
-/** The two native browser requests belong to one attachment and one grant.
- * Processor rules and form transformations live in the generated shared core.
- * The local stub contains no selected-card data and starts no authorization.
- */
-export class StripeCheckoutGate {
-    state = 'fresh';
-    billing;
-    binding;
-    constructor(options) {
-        if (!options.stripeCheckout)
-            return;
-        const { sessionId, publishableKey, environment } = options.stripeCheckout;
-        validateStripeCheckoutIdentity({ environment, sessionId, publishableKey });
-        if (options.executionMode !== 'autopilot' || !/^apg_[A-Za-z0-9_-]{1,128}(?![\s\S])/.test(options.grantId ?? '')
-            || !Number.isSafeInteger(options.amount) || Number(options.amount) <= 0 || options.currency !== 'usd')
-            throw new Error('Native Stripe Checkout requires a mode-bound session, grant and numeric USD amount.');
-        this.binding = Object.freeze({ environment, sessionId, publishableKey, amountCents: options.amount,
-            syntheticPaymentMethodId: `pm_agentcard_checkout_${crypto.randomUUID().replaceAll('-', '')}` });
-    }
-    matches(url) { return !!this.binding && isStripeCheckoutEndpoint(url); }
-    isEnabled() { return !!this.binding; }
-    isPrepared() { return this.state !== 'fresh'; }
-    invalidate() { this.state = 'stopped'; this.billing = undefined; }
-    /** Observability only: this endpoint label never participates in a payment decision. */
-    describeRejection(error, rawUrl, stage, phase = 'unknown') {
-        let family = 'other';
-        try {
-            const url = new URL(rawUrl);
-            if (url.origin === 'https://api.stripe.com' && url.pathname === '/v1/payment_methods')
-                family = 'payment_methods';
-            else if (isStripeCheckoutEndpoint(rawUrl))
-                family = 'payment_page_confirm';
-        }
-        catch { /* No untrusted URL or parser error leaves this method. */ }
-        const fallback = {
-            request_read: 'request_unavailable', classification: 'request_validation_failed', claim: 'preparation_unavailable',
-            readiness: 'readiness_unavailable', document: 'document_unavailable', stub_response: 'stub_response_failed',
-        };
-        const rejection = error instanceof StripeCheckoutRejectionError ? error : undefined;
-        const reason = rejection?.reason ?? fallback[stage];
-        return { version: 1, processor: 'stripe', endpoint_family: family,
-            phase: rejection?.phase ?? phase, stage: rejection?.stage ?? stage, reason,
-            ...(reason === 'request_validation_failed' ? { validation_code: rejection?.validationCode ?? STRIPE_CHECKOUT_VALIDATION_CODES.unclassified } : {}),
-            gate_state: this.state, disposition: error instanceof StripeCheckoutClaimConflictError ? 'active_claim_preserved' : 'checkout_stopped' };
-    }
-    assertClaim(step) {
-        if (this.state !== (step.phase === 'tokenization' ? 'stubbed' : 'submitted'))
-            throw new StripeCheckoutRejectionError('Native Stripe Checkout preparation is unavailable.', 'claim', 'claim_invalidated', step.phase);
-    }
-    /** Check the actual top-level hosted document before preparing either step. */
-    assertDocument(raw) {
-        if (!this.binding)
-            return;
-        const url = new URL(raw);
-        if (url.origin !== 'https://checkout.stripe.com' || url.username || url.password
-            || ![`/c/pay/${this.binding.sessionId}`, `/pay/${this.binding.sessionId}`, `/g/pay/${this.binding.sessionId}`, `/f/pay/${this.binding.sessionId}`].includes(url.pathname)) {
-            this.invalidate();
-            throw new StripeCheckoutRejectionError('Native Stripe Checkout document changed.', 'document', 'document_changed');
-        }
-    }
-    claim(request) {
-        if (!this.binding)
-            return null;
-        if (request.method.toUpperCase() !== 'POST')
-            return null;
-        let phase;
-        try {
-            phase = classifyStripeCheckoutRequest(request, this.binding);
-        }
-        catch (error) {
-            throw new StripeCheckoutRejectionError('stripe_checkout_rejected', 'classification', 'request_validation_failed', 'unknown', stripeCheckoutValidationCode(error));
-        }
-        if (!phase)
-            return null;
-        const diagnosticPhase = phase.phase === 'tokenization' ? 'tokenization' : phase.phase === 'final' ? 'final' : 'unknown';
-        if (Object.keys(request.headers).some(name => name.toLowerCase() === STRIPE_CHECKOUT_CONTEXT_HEADER))
-            throw new StripeCheckoutRejectionError('Native Stripe Checkout already carries a context.', 'claim', 'context_already_present', diagnosticPhase);
-        if (phase.phase === 'tokenization') {
-            if (this.state === 'stubbed' || this.state === 'submitted')
-                throw new StripeCheckoutClaimConflictError('tokenization');
-            if (this.state !== 'fresh')
-                throw new StripeCheckoutRejectionError('Native Stripe Checkout preparation is unavailable.', 'claim', 'preparation_unavailable', 'tokenization');
-            this.state = 'stopped';
-            let response;
-            try {
-                this.billing = captureStripeCheckoutBilling(request, this.binding);
-                response = createStripeCheckoutTokenizationStub(request, this.binding);
-            }
-            catch (error) {
-                const code = stripeCheckoutValidationCode(error);
-                if (code !== STRIPE_CHECKOUT_VALIDATION_CODES.unclassified)
-                    throw new StripeCheckoutRejectionError('stripe_checkout_rejected', 'classification', 'request_validation_failed', 'tokenization', code);
-                throw new StripeCheckoutRejectionError('stripe_checkout_rejected', 'stub_response', 'stub_response_failed', 'tokenization');
-            }
-            this.state = 'stubbed';
-            return { phase: 'tokenization', response };
-        }
-        if (phase.phase === 'final' && this.state === 'submitted')
-            throw new StripeCheckoutClaimConflictError('final');
-        if (phase.phase !== 'final' || this.state !== 'stubbed')
-            throw new StripeCheckoutRejectionError('Native Stripe Checkout has no matching prepared request.', 'claim', 'preparation_missing', diagnosticPhase);
-        let final;
-        try {
-            final = attachStripeCheckoutBilling(request, this.billing, this.binding);
-        }
-        catch (error) {
-            this.invalidate();
-            throw new StripeCheckoutRejectionError('stripe_checkout_rejected', 'classification', 'request_validation_failed', 'final', stripeCheckoutValidationCode(error));
-        }
-        this.state = 'submitted';
-        this.billing = undefined;
-        return { phase: 'final', request: { ...final, headers: { ...final.headers,
-                    [STRIPE_CHECKOUT_CONTEXT_HEADER]: encodeStripeCheckoutContext({ version: 1,
-                        session_id: this.binding.sessionId, synthetic_payment_method_id: this.binding.syntheticPaymentMethodId }) } } };
-    }
-}

package/dist/substitute.d.ts

@@ -1,38 +0,0 @@
-/**
- * The cse half of a replay: put the vault's ciphertext into the paused body.
- *
- * On a client-side-encrypted processor (Adyen) the cardholder's device does
- * not call the processor. It encrypts the card under the processor's public
- * key and reports the ciphertext; the paused request then continues from the
- * agent's own browser with those blobs in place of the dummy ones. Everything
- * else in the body (session data, risk data, browser info, origin) stays the
- * browser's own, so the processor's origin allowlist and risk checks see the
- * request they expected.
- *
- * Deliberately narrow: only keys that ALREADY exist as strings at the named
- * path are overwritten. A key is never added, a sibling is touched only when
- * the API names it in `remove` (Adyen's `brand`, which adyen-web derived from
- * the dummy digits the agent typed: left in place it describes the wrong card
- * and Adyen refuses the mismatch), and a body that does not carry the fields
- * is refused rather than guessed at.
- */
-export interface Substitutions {
-    encoding: 'json';
-    /** Dotted path to the object that holds the fields, e.g. `paymentMethod`. */
-    at: string;
-    /** Field name -> ciphertext, exactly as the vault reported it. */
-    fields: Record<string, string>;
-    /**
-     * Sibling keys at `at` to delete when present (never an error when absent):
-     * values the page SDK derived from the agent's dummy card that would
-     * contradict the swapped ciphertext. Served by the API per processor.
-     */
-    remove?: string[];
-}
-declare class SubstitutionErrorShape extends Error {
-    constructor(message: string);
-}
-export type SubstitutionError = SubstitutionErrorShape;
-export declare const SubstitutionError: typeof SubstitutionErrorShape;
-export declare const substituteEncryptedFields: (body: string, sub: Substitutions) => string;
-export {};

package/dist/substitute.js

@@ -1,23 +0,0 @@
-/**
- * The cse half of a replay: put the vault's ciphertext into the paused body.
- *
- * On a client-side-encrypted processor (Adyen) the cardholder's device does
- * not call the processor. It encrypts the card under the processor's public
- * key and reports the ciphertext; the paused request then continues from the
- * agent's own browser with those blobs in place of the dummy ones. Everything
- * else in the body (session data, risk data, browser info, origin) stays the
- * browser's own, so the processor's origin allowlist and risk checks see the
- * request they expected.
- *
- * Deliberately narrow: only keys that ALREADY exist as strings at the named
- * path are overwritten. A key is never added, a sibling is touched only when
- * the API names it in `remove` (Adyen's `brand`, which adyen-web derived from
- * the dummy digits the agent typed: left in place it describes the wrong card
- * and Adyen refuses the mismatch), and a body that does not carry the fields
- * is refused rather than guessed at.
- */
-// The implementation is bundled from the internal core; the published SDK
-// keeps its existing public types and does not require another package at runtime.
-import { substituteEncryptedFields as sharedSubstitute, SubstitutionError as SharedSubstitutionError, } from './substitutions.generated.js';
-export const SubstitutionError = SharedSubstitutionError;
-export const substituteEncryptedFields = sharedSubstitute;

package/dist/substitutions.generated.d.ts

@@ -1,11 +0,0 @@
-declare var SubstitutionError: {
-    new (message: any): {
-        name: string;
-        message: string;
-        stack?: string;
-        cause?: unknown;
-    };
-};
-declare function substituteEncryptedFields(body: any, sub: any): string;
-declare function substituteMerchantHosted(body: any, sub: any, opts: any): string;
-export { SubstitutionError, substituteEncryptedFields, substituteMerchantHosted };