@agent-cards/checkout 0.6.0 → 0.8.0

package/dist/braintree.js

@@ -1,302 +1,2 @@
-const PRODUCTION = 'https://payments.braintree-api.com/graphql';
-const SANDBOX = 'https://payments.sandbox.braintree-api.com/graphql';
-const MAX_BODY_LENGTH = 128 * 1024;
-const MAX_DEPTH = 32;
-const MAX_NODES = 10_000;
-export function braintreeEnvironment(url) {
-    return url === PRODUCTION ? 'production' : url === SANDBOX ? 'sandbox' : undefined;
-}
-function invalid() { throw new Error('invalid_braintree_request'); }
-function record(value) {
-    return value !== null && typeof value === 'object' && !Array.isArray(value);
-}
-/** JSON.parse discards duplicate keys, so validate keys before using any value. */
-class JsonReader {
-    text;
-    at = 0;
-    nodes = 0;
-    constructor(text) {
-        this.text = text;
-    }
-    read() {
-        const value = this.value(0);
-        this.space();
-        if (this.at !== this.text.length)
-            invalid();
-        return value;
-    }
-    space() {
-        while (' \t\r\n'.includes(this.text[this.at] ?? '\0'))
-            this.at++;
-    }
-    take(expected) {
-        this.space();
-        if (this.text[this.at++] !== expected)
-            invalid();
-    }
-    string() {
-        this.space();
-        const start = this.at;
-        if (this.text[this.at++] !== '"')
-            invalid();
-        while (this.at < this.text.length) {
-            const char = this.text[this.at++];
-            if (char === '\\') {
-                this.at++;
-                continue;
-            }
-            if (char === '"')
-                return JSON.parse(this.text.slice(start, this.at));
-        }
-        return invalid();
-    }
-    value(depth) {
-        if (depth > MAX_DEPTH || ++this.nodes > MAX_NODES)
-            invalid();
-        this.space();
-        const char = this.text[this.at];
-        if (char === '"')
-            return this.string();
-        if (char === '{') {
-            this.at++;
-            const result = Object.create(null);
-            const keys = new Set();
-            this.space();
-            if (this.text[this.at] === '}') {
-                this.at++;
-                return result;
-            }
-            while (true) {
-                const key = this.string();
-                if (keys.has(key))
-                    invalid();
-                keys.add(key);
-                this.take(':');
-                result[key] = this.value(depth + 1);
-                this.space();
-                const next = this.text[this.at++];
-                if (next === '}')
-                    return result;
-                if (next !== ',')
-                    invalid();
-            }
-        }
-        if (char === '[') {
-            this.at++;
-            const result = [];
-            this.space();
-            if (this.text[this.at] === ']') {
-                this.at++;
-                return result;
-            }
-            while (true) {
-                result.push(this.value(depth + 1));
-                this.space();
-                const next = this.text[this.at++];
-                if (next === ']')
-                    return result;
-                if (next !== ',')
-                    invalid();
-            }
-        }
-        for (const [literal, value] of [['true', true], ['false', false], ['null', null]]) {
-            if (this.text.startsWith(literal, this.at)) {
-                this.at += literal.length;
-                return value;
-            }
-        }
-        const number = /^-?(?:0|[1-9][0-9]*)(?:\.[0-9]+)?(?:[eE][+-]?[0-9]+)?/.exec(this.text.slice(this.at));
-        if (!number)
-            invalid();
-        this.at += number[0].length;
-        const value = Number(number[0]);
-        if (!Number.isFinite(value))
-            invalid();
-        return value;
-    }
-}
-/** Bounded duplicate-aware JSON for fresh-card preparation bodies. */
-export function readTokenizationJson(body) {
-    if (typeof body !== 'string' || body.length === 0 || body.length > MAX_BODY_LENGTH)
-        return null;
-    try {
-        const value = new JsonReader(body).read();
-        return record(value) ? value : null;
-    }
-    catch {
-        return null;
-    }
-}
-/** Native operations need names, punctuation and variables, never literals. */
-function lex(query) {
-    const tokens = [];
-    let at = 0;
-    while (at < query.length) {
-        const char = query[at];
-        if (' \t\r\n,'.includes(char)) {
-            at++;
-            continue;
-        }
-        if ('!$():{}'.includes(char)) {
-            tokens.push(char);
-            at++;
-        }
-        else if (/[A-Za-z_]/.test(char)) {
-            const start = at++;
-            while (at < query.length && /[A-Za-z_0-9]/.test(query[at]))
-                at++;
-            tokens.push(query.slice(start, at));
-        }
-        else
-            invalid(); // Includes comments, strings, fragments and directives.
-        if (tokens.length > MAX_NODES)
-            invalid();
-    }
-    return tokens;
-}
-class GraphqlReader {
-    tokens;
-    at = 0;
-    constructor(tokens) {
-        this.tokens = tokens;
-    }
-    peek() { return this.tokens[this.at]; }
-    take(expected) {
-        if (this.tokens[this.at++] !== expected)
-            invalid();
-    }
-    name() {
-        const value = this.tokens[this.at++];
-        if (!value || !/^[A-Za-z_][A-Za-z_0-9]*$/.test(value))
-            invalid();
-        return value;
-    }
-    read() {
-        const kind = this.name();
-        const name = this.name();
-        let inputDefinition = false;
-        if (this.peek() === '(') {
-            // No defaults, alternate types, unused variables or duplicate definitions.
-            for (const token of ['(', '$', 'input', ':', 'TokenizeCreditCardInput', '!', ')'])
-                this.take(token);
-            inputDefinition = true;
-        }
-        const fields = this.selection(0);
-        if (this.at !== this.tokens.length)
-            invalid();
-        return { kind, name, inputDefinition, fields };
-    }
-    selection(depth) {
-        if (depth > MAX_DEPTH)
-            invalid();
-        this.take('{');
-        const fields = [];
-        const names = new Set();
-        while (this.peek() !== '}') {
-            const name = this.name();
-            if (names.has(name))
-                invalid();
-            names.add(name);
-            const args = [];
-            if (this.peek() === '(') {
-                if (depth !== 0)
-                    invalid();
-                this.take('(');
-                const argument = this.name();
-                this.take(':');
-                this.take('$');
-                args.push({ name: argument, variable: this.name() });
-                this.take(')');
-            }
-            const children = this.peek() === '{' ? this.selection(depth + 1) : [];
-            fields.push({ name, arguments: args, fields: children });
-            // Aliases, directives and other punctuation cannot begin the next field.
-        }
-        this.take('}');
-        if (fields.length === 0)
-            invalid();
-        return fields;
-    }
-}
-/** Undefined belongs to another processor; invalid Braintree requests stay blocked. */
-export function classifyBraintreeRequest(url, method, body) {
-    let hostname;
-    try {
-        hostname = new URL(url).hostname;
-    }
-    catch {
-        return undefined;
-    }
-    if (hostname !== 'payments.braintree-api.com' && hostname !== 'payments.sandbox.braintree-api.com')
-        return undefined;
-    if (!braintreeEnvironment(url) || method !== 'POST' || typeof body !== 'string' || body.length === 0 || body.length > MAX_BODY_LENGTH)
-        return 'invalid';
-    try {
-        const envelope = new JsonReader(body).read();
-        if (!record(envelope) || typeof envelope.query !== 'string' || typeof envelope.operationName !== 'string')
-            return 'invalid';
-        if (Object.keys(envelope).some(key => !['query', 'operationName', 'variables', 'clientSdkMetadata'].includes(key)))
-            return 'invalid';
-        if (envelope.clientSdkMetadata !== undefined && !record(envelope.clientSdkMetadata))
-            return 'invalid';
-        const operation = new GraphqlReader(lex(envelope.query)).read();
-        if (operation.name !== envelope.operationName || operation.fields.length !== 1)
-            return 'invalid';
-        const root = operation.fields[0];
-        if (root.fields.length === 0)
-            return 'invalid';
-        const variables = envelope.variables === undefined ? Object.create(null) : envelope.variables;
-        if (!record(variables))
-            return 'invalid';
-        if (operation.kind === 'query' && ['ClientConfiguration', 'ClientConfigurationQuery'].includes(operation.name)
-            && !operation.inputDefinition && root.name === 'clientConfiguration' && root.arguments.length === 0
-            && Object.keys(variables).length === 0)
-            return 'configuration';
-        if (operation.kind !== 'mutation' || operation.name !== 'TokenizeCreditCard' || !operation.inputDefinition
-            || root.name !== 'tokenizeCreditCard' || root.arguments.length !== 1
-            || root.arguments[0].name !== 'input' || root.arguments[0].variable !== 'input'
-            || Object.keys(variables).length !== 1 || !record(variables.input) || !record(variables.input.creditCard))
-            return 'invalid';
-        const card = variables.input.creditCard;
-        if (!['number', 'expirationMonth', 'expirationYear'].every(key => typeof card[key] === 'string' && card[key].trim().length > 0))
-            return 'invalid';
-        if (card.cvv !== undefined && (typeof card.cvv !== 'string' || card.cvv.trim().length === 0))
-            return 'invalid';
-        return 'tokenization';
-    }
-    catch {
-        return 'invalid';
-    }
-}
-/** Preparation accepts guest tokenization only; ordinary interception stays broader. */
-export function isPreparedBraintreeRequest(body) {
-    if (classifyBraintreeRequest(PRODUCTION, 'POST', body) !== 'tokenization')
-        return false;
-    try {
-        const envelope = new JsonReader(body).read();
-        const variables = envelope.variables;
-        const input = variables.input;
-        if (Object.keys(input).some(key => key !== 'creditCard' && key !== 'options'))
-            return false;
-        const card = input.creditCard;
-        if (Object.keys(card).some(key => !['number', 'expirationMonth', 'expirationYear', 'cvv', 'cardholderName', 'billingAddress'].includes(key)))
-            return false;
-        if (Object.entries(card).some(([key, value]) => key !== 'billingAddress' && typeof value !== 'string'))
-            return false;
-        if (card.billingAddress !== undefined) {
-            if (!record(card.billingAddress))
-                return false;
-            const addressKeys = ['postalCode', 'firstName', 'lastName', 'company', 'streetAddress', 'extendedAddress',
-                'locality', 'region', 'countryCodeNumeric', 'countryCodeAlpha2', 'countryCodeAlpha3', 'countryName'];
-            if (Object.entries(card.billingAddress).some(([key, value]) => !addressKeys.includes(key) || typeof value !== 'string'))
-                return false;
-        }
-        // Fingerprint authorization defaults validation on when the option is absent.
-        // Preparation permits only an explicit request for a transient card token.
-        return record(input.options) && Object.keys(input.options).every(key => key === 'validate')
-            && input.options.validate === false;
-    }
-    catch {
-        return false;
-    }
-}
+// The generated projection keeps the public SDK free of runtime dependencies.
+export { braintreeEnvironment, classifyBraintreeRequest, isPreparedBraintreeRequest, readTokenizationJson } from './braintree.generated.js';

package/dist/builtin-registry.generated.d.ts

@@ -0,0 +1,2 @@
+import type { Recognizer } from './registry.js';
+export declare const BUILTIN_REGISTRY: Recognizer[];

package/dist/builtin-registry.generated.js

@@ -0,0 +1 @@
+export const BUILTIN_REGISTRY = [{ "psp": "shopify", "match": /(checkout\.pci\.shopifyinc\.com|deposit\.[a-z0-9-]+\.shopifycs\.com)\/sessions/i, "hosts": ["^checkout\\.pci\\.shopifyinc\\.com$", "^deposit\\.[a-z0-9-]+\\.shopifycs\\.com$"], "encoding": "json", "passthroughHeaders": [/^shopify-identification-signature$/i] }, { "psp": "stripe", "match": /api\.stripe\.com\/v1\/(payment_methods|tokens|setup_intents\/seti_\w+\/confirm|payment_intents\/pi_\w+\/confirm)/i, "hosts": ["^api\\.stripe\\.com$"], "encoding": "form", "passthroughHeaders": [/^authorization$/i, /^stripe-version$/i, /^x-stripe-client-user-agent$/i] }, { "psp": "braintree", "match": /payments(\.sandbox)?\.braintree-api\.com\/graphql/i, "hosts": ["^payments\\.braintree-api\\.com$", "^payments\\.sandbox\\.braintree-api\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^braintree-version$/i] }, { "psp": "checkout_com", "match": /(api|card-acquisition-gateway)(\.sandbox)?\.checkout\.com\/tokens/i, "hosts": ["^api\\.checkout\\.com$", "^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "adyen", "match": /(checkoutshopper-(test|live(-[a-z]+)?)\.adyen\.com|([a-z0-9-]+\.)*adyenpayments\.com)\/checkoutshopper\/v1\/sessions\/[A-Za-z0-9_-]+\/payments/i, "hosts": ["^checkoutshopper-(test|live(-[a-z]+)?)\\.adyen\\.com$", "^([a-z0-9-]+\\.)*adyenpayments\\.com$"], "encoding": "json", "passthroughHeaders": [], "clientSideEncrypted": true, "mode": "cse" }, { "psp": "tranzila", "match": /(direct\.tranzila\.com\/process\/n\/|directng\.tranzila\.com\/process\/?)/i, "hosts": ["^direct\\.tranzila\\.com$", "^directng\\.tranzila\\.com$"], "encoding": "form", "passthroughHeaders": [], "mode": "hosted_form" }, { "psp": "square", "match": /pci-connect\.squareup(?:sandbox)?\.com\/v2\/card-nonce/i, "hosts": ["^pci-connect\\.squareup\\.com$", "^pci-connect\\.squareupsandbox\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "authorize_net", "match": /(api2|apitest)\.authorize\.net\/xml\/v1\/request\.api/i, "hosts": ["^api2\\.authorize\\.net$", "^apitest\\.authorize\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "worldpay", "match": /(try\.)?access\.worldpay\.com\/(sessions\/card|verifiedTokens\/sessions)/i, "hosts": ["^access\\.worldpay\\.com$", "^try\\.access\\.worldpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^accept$/i] }, { "psp": "nuvei", "match": /(secure|ppp-test)\.safecharge\.com\/ppp\/api\/v1\/(?:cardTokenization|clientPayment|websdk\/initPaymentWithCardTokenization)\.do/i, "hosts": ["^secure\\.safecharge\\.com$", "^ppp-test\\.safecharge\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "airwallex", "match": /(checkout(\.sandbox)?\.airwallex\.com|pci-api(\.sandbox)?\.airwallex\.com)\/api\/v1\/pa\/(payment_intents\/[^/?#]+\/confirm|payment_consents\/[^/?#]+\/verify|payment_methods\/create)(\?|$)/i, "hosts": ["^checkout\\.airwallex\\.com$", "^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "encoding": "json", "passthroughHeaders": [/^client-secret$/i, /^authorization$/i, /^x-auth-token$/i, /^x-on-behalf-of$/i, /^x-api-version$/i] }, { "psp": "rapyd", "match": /(api|sandboxapi)\.rapyd\.net\/v1\/(?:hosted\/collect\/card\/[^/?#]+\/payment_method|checkout\/checkout_[A-Za-z0-9]+)(?:[?#]|$)/i, "hosts": ["^api\\.rapyd\\.net$", "^sandboxapi\\.rapyd\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "dlocal", "match": /ppmcc(-sandbox)?\.dlocal\.com\/cvault\/credit-card\/temporal/i, "hosts": ["^ppmcc\\.dlocal\\.com$", "^ppmcc-sandbox\\.dlocal\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-fields-api-key$/i, /^x-uow$/i, /^x-dlocal-infrav2$/i] }, { "psp": "ebanx", "match": /(?:(?:customer-frontier|customer|api-local-latam|api|sandbox-local-latam|sandbox)\.ebanx\.com|(?:api-diamond|api|sandbox)\.ebanxpay\.com)\/ws\/token/i, "hosts": ["^customer\\.ebanx\\.com$", "^customer-frontier\\.ebanx\\.com$", "^api\\.ebanx\\.com$", "^sandbox\\.ebanx\\.com$", "^api-local-latam\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^api-diamond\\.ebanxpay\\.com$", "^api\\.ebanxpay\\.com$", "^sandbox\\.ebanxpay\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "mercado_pago", "match": /api\.mercadopago\.com\/v1\/card_tokens(?![\w/-])/i, "hosts": ["^api\\.mercadopago\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-product-id$/i] }, { "psp": "payu", "match": /(secure\.payu\.com|(merch-prod|secure)\.snd\.payu\.com)\/api\/front\/tokens/i, "hosts": ["^secure\\.payu\\.com$", "^(merch-prod|secure)\\.snd\\.payu\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "razorpay", "match": /api\.razorpay\.com\/v1\/(?:standard_checkout\/)?payments\/create\/(?:ajax|checkout|fees)/i, "hosts": ["^api\\.razorpay\\.com$"], "encoding": "form", "passthroughHeaders": [/^x-razorpay-sessionid$/i, /^x-customer-access-token$/i] }, { "psp": "mollie", "match": /api\.cc\.mollie\.com\/v1\/card-tokens/i, "hosts": ["^api\\.cc\\.mollie\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "paysafe", "match": /(?:api(\.test)?\.paysafe\.com\/(?:paymenthub\/v1\/singleusepaymenthandles|js\/api\/v1\/tokenize)|hosted(\.test)?\.paysafe\.com\/checkout\/api\/v1\/tokenize)(?![\w/-])/i, "hosts": ["^api\\.paysafe\\.com$", "^api\\.test\\.paysafe\\.com$", "^hosted\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-paysafe-credentials$/i, /^correlationid$/i] }, { "psp": "recurly", "match": /api(\.eu)?\.recurly\.com\/js\/v1\/token(?![\w-])/i, "hosts": ["^api\\.recurly\\.com$", "^api\\.eu\\.recurly\\.com$"], "encoding": "form", "passthroughHeaders": [/^recurly-credential-checkout-hostname$/i] }, { "psp": "moneris", "match": /(www3|esqa|gateway|gatewayqa|gatewayt|gatewaydev)\.moneris\.com\/HPPtoken\/request\.php/i, "hosts": ["^www3\\.moneris\\.com$", "^esqa\\.moneris\\.com$", "^gateway\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "encoding": "form", "passthroughHeaders": [] }, { "psp": "bambora", "match": /(api\.na\.bambora\.com|api\.bam\.shift4api\.net)\/scripts\/tokenization\/tokens/i, "hosts": ["^api\\.na\\.bambora\\.com$", "^api\\.bam\\.shift4api\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "global_payments", "match": /(?:api\.heartlandportico\.com\/SecureSubmit\.v1\/api\/token|cert\.api2\.heartlandportico\.com\/Hps\.Exchange\.PosGateway\.Hpf\.v1\/api\/token|apis(?:\.sandbox)?(?:\.eu)?\.globalpay\.com\/ucp\/(?:merchants\/[^/]+\/)?payment-methods)/i, "hosts": ["^api\\.heartlandportico\\.com$", "^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.globalpay\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.eu\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-gp-version$/i] }];

package/dist/cdp.d.ts

@@ -1,4 +1,4 @@
-import { type VaultClient } from './client.js';
+import { type VaultClient, type ExecutionMetadata } from './client.js';
 import { type CheckoutController, type LifecycleOptions, type PaymentEndpointGuard } from './lifecycle.js';
 /**
  * The CORS headers a fulfilled CROSS-ORIGIN request needs, or null when the
@@ -71,20 +71,34 @@ export interface CdpLike {
     send(method: string, params?: any, sessionId?: string): Promise<any>;
     on(handler: (method: string, params: any, sessionId?: string) => void): void;
 }
-export interface AttachOptions extends LifecycleOptions {
+export interface AttachOptions extends LifecycleOptions, ExecutionMetadata {
+    /** Fallback when the browser cannot expose its top-level origin. Never an amount/payee authority. */
+    merchantOrigin?: string;
     vault: VaultClient;
     user: string;
     merchant: string;
-    /** Display string for the approval screen. Optional when amountCents + currency are given. */
-    amount?: string;
     /**
-     * The amount as a number (smallest currency unit) with its ISO 4217 code.
-     * See AuthorizeInput.amountCents: on a Stripe PaymentIntent confirm this
-     * binds the approval to the intent's amount, checked at create and again
-     * right before replay, so a larger charge is refused with nothing charged.
+     * Your hint at the amount, an integer in the currency's smallest unit or a
+     * decimal string in normal units, with its ISO 4217 code. See
+     * AuthorizeInput.amount: the processor's own amount is the higher authority
+     * and is read right before the card is sent; a hint lets a bad purchase be
+     * refused the moment it opens, and one that disagrees with the processor is
+     * refused with nothing charged.
      */
-    amountCents?: number;
+    amount?: number | string;
     currency?: string;
+    /**
+     * The total the checkout page shows, the lowest authority: used only when
+     * neither the processor's request nor your `amount` names one. Pass a reader
+     * that returns an integer in the currency's smallest unit with its code
+     * (`{ amount: 4210, currency: 'usd' }`), read off the page however your
+     * page spells it; the adapters call it when a card request pauses, give it
+     * one second, and send nothing when it yields nothing. Absent: no page total.
+     */
+    pageAmount?: () => Promise<{
+        amount: number;
+        currency: string;
+    } | undefined>;
     cardId?: string;
     timeoutMs?: number;
     /** Browser interception setup deadline, separate from approval. Defaults to 30000 ms; maximum 300000 ms. */

package/dist/cdp.js

@@ -274,6 +274,79 @@ export function withCorsHeaders(headers, cors) {
 function headerEntries(headers) {
     return Object.entries(headers).map(([name, value]) => ({ name, value: String(value) }));
 }
+/**
+ * The origin of the top-level document the payment form is on, read when a
+ * card request pauses: the fact that names the merchant for the company's
+ * presets (the API's checkout_origin). An https origin, or http://localhost
+ * for local checkout; anything else, or a page that cannot be read, yields
+ * undefined and the authorization goes out without one (a merchant, category
+ * or place rule then refuses it as unknown, never the request itself).
+ */
+async function pageOriginOf(readDocumentUrl, signal) {
+    let timer;
+    let abort;
+    try {
+        const documentUrl = await Promise.race([
+            Promise.resolve().then(readDocumentUrl).catch(() => undefined),
+            new Promise((resolve) => {
+                timer = setTimeout(resolve, 1_000);
+                abort = () => resolve(undefined);
+                signal.addEventListener('abort', abort, { once: true });
+                if (signal.aborted)
+                    abort();
+            }),
+        ]);
+        if (typeof documentUrl !== 'string')
+            return undefined;
+        const url = new URL(documentUrl);
+        if (url.username || url.password)
+            return undefined;
+        if (url.protocol === 'https:' || (url.protocol === 'http:' && url.hostname === 'localhost'))
+            return url.origin;
+        return undefined;
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+        if (abort)
+            signal.removeEventListener('abort', abort);
+    }
+}
+/**
+ * The page total, the lowest amount authority, through the integrator's own
+ * reader (AttachOptions.pageAmount): an integer in the smallest unit with its
+ * currency, or nothing. A read is a courtesy, never a wait: it gets one
+ * second, and anything unreadable yields undefined so the authorization goes
+ * out without a page total.
+ */
+const PAGE_AMOUNT_READ_MS = 1_000;
+async function pageAmountOf(opts) {
+    if (!opts.pageAmount)
+        return undefined;
+    let timer;
+    try {
+        const raw = await Promise.race([
+            Promise.resolve().then(() => opts.pageAmount()).catch(() => undefined),
+            new Promise((resolve) => { timer = setTimeout(() => resolve(undefined), PAGE_AMOUNT_READ_MS); }),
+        ]);
+        if (!raw || typeof raw !== 'object')
+            return undefined;
+        const { amount, currency } = raw;
+        if (!Number.isSafeInteger(amount) || amount < 0 || typeof currency !== 'string' || !/^[A-Za-z]{3}$/.test(currency))
+            return undefined;
+        return { amount: amount, currency: currency.toLowerCase() };
+    }
+    catch {
+        return undefined;
+    }
+    finally {
+        if (timer)
+            clearTimeout(timer);
+    }
+}
 /**
  * Last-resort patterns: the built-in recognizers' hosts, derived the same way
  * as everything else. Used only when the vault hands back nothing at all (a
@@ -335,13 +408,14 @@ export async function attachToCdp(cdp, pageSessionId, opts) {
     let setupFailureReported = false;
     const lifecycle = new CheckoutLifecycle(opts);
     let preparationFrameId;
-    const preparationGate = new PreparationGate(opts, lifecycle, async () => {
+    const readDocumentUrl = async () => {
         const tree = await cdp.send('Page.getFrameTree', {}, pageSessionId);
         if (typeof tree?.frameTree?.frame?.url !== 'string')
             throw new Error('merchant_document_unavailable');
         preparationFrameId = tree.frameTree.frame.id;
         return tree.frameTree.frame.url;
-    });
+    };
+    const preparationGate = new PreparationGate(opts, lifecycle, readDocumentUrl);
     const guards = paymentEndpointGuards(opts.paymentEndpoints);
     const armed = new Set();
     const arming = new Map();
@@ -533,14 +607,23 @@ export async function attachToCdp(cdp, pageSessionId, opts) {
             activeRequest = { attempt, networkId, sessionId, frameId };
             if (preparation)
                 await preparationGate.assertDocument();
+            const pageOrigin = await pageOriginOf(readDocumentUrl, attempt.signal);
+            const pageAmount = await pageAmountOf(opts);
+            attempt.assertLive();
+            const merchantOrigin = preparation?.merchantOrigin ?? (opts.executionMode === 'user_approval'
+                ? opts.merchantOrigin : pageOrigin?.startsWith('https:') ? pageOrigin : opts.merchantOrigin);
             attempt.assertLive();
             const replay = await opts.vault.authorize({
                 user: opts.user,
                 merchant: opts.merchant,
                 amount: opts.amount,
-                amountCents: opts.amountCents,
                 currency: opts.currency,
                 cardId: preparation?.cardId ?? opts.cardId,
+                executionMode: opts.executionMode,
+                grantId: opts.grantId,
+                merchantOrigin,
+                pageOrigin,
+                pageAmount,
                 preparation,
                 timeoutMs: opts.timeoutMs,
                 signal: lifecycle.abort.signal,
@@ -675,11 +758,12 @@ export async function attachToPlaywright(page, opts) {
         throw new Error('Service workers are active; use a checkout context created with serviceWorkers: "block".');
     }
     const lifecycle = new CheckoutLifecycle(opts);
-    const preparationGate = new PreparationGate(opts, lifecycle, async () => {
+    const readDocumentUrl = async () => {
         if (page.isClosed?.() || typeof page.url !== 'function')
             throw new Error('merchant_document_unavailable');
         return page.url();
-    });
+    };
+    const preparationGate = new PreparationGate(opts, lifecycle, readDocumentUrl);
     const guards = paymentEndpointGuards(opts.paymentEndpoints);
     // Playwright's own routing, NOT a hand-rolled CDP session.
     //
@@ -800,14 +884,23 @@ export async function attachToPlaywright(page, opts) {
                 activeRequest = { request, frames, attempt };
                 if (preparation)
                     await preparationGate.assertDocument();
+                const pageOrigin = await pageOriginOf(readDocumentUrl, attempt.signal);
+                const pageAmount = await pageAmountOf(opts);
+                assertRequestLive();
+                const merchantOrigin = preparation?.merchantOrigin ?? (opts.executionMode === 'user_approval'
+                    ? opts.merchantOrigin : pageOrigin?.startsWith('https:') ? pageOrigin : opts.merchantOrigin);
                 assertRequestLive();
                 const replay = await opts.vault.authorize({
                     user: opts.user,
                     merchant: opts.merchant,
                     amount: opts.amount,
-                    amountCents: opts.amountCents,
                     currency: opts.currency,
                     cardId: preparation?.cardId ?? opts.cardId,
+                    executionMode: opts.executionMode,
+                    grantId: opts.grantId,
+                    merchantOrigin,
+                    pageOrigin,
+                    pageAmount,
                     preparation,
                     timeoutMs: opts.timeoutMs,
                     signal: lifecycle.abort.signal,