@agent-cards/checkout 0.9.1 → 0.11.0

package/dist/preflight-catalog.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "catalog_version": "2026-09-11.2",
+  "catalog_version": "2026-09-14.1",
   "scope": "preflight_hint",
   "integration_version_note": "bundled describes the capabilities accompanying this helper, not a claim about another installed SDK version.",
   "limits": {
@@ -1964,6 +1964,17 @@
       "status": "supported",
       "mode": "token",
       "operations": [
+        {
+          "id": "stripe.device_checkout_confirm.v1",
+          "path_pattern": "^/v1/payment_pages/cs_(?:test|live)_[A-Za-z0-9]+/confirm$",
+          "effect": "payment_confirmation",
+          "amount_binding": "expected_amount_test_evidence_currency_unqualified",
+          "psp": "stripe",
+          "version": 1,
+          "mode": "token",
+          "autopilot_eligible": false,
+          "requires": "reviewed_final_payment_and_continuation_evidence"
+        },
         {
           "id": "stripe.tokenization",
           "path_pattern": "^/v1/(?:payment_methods|tokens)$",
@@ -3420,7 +3431,8 @@
       },
       "limitations": [
         "Only the listed request format is recognized; a recognized processor is not verified merchant coverage.",
-        "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."
+        "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints.",
+        "Prepare approval before submitting a timed native card form. Both regions require the shared environment because test and live keys use the same endpoints."
       ],
       "unsupported_variants": [
         {
@@ -3434,6 +3446,24 @@
           "status": "unsupported",
           "constraint": "direct_sdk",
           "reason": "Bank-account and alternative-payment token routes are outside the new-card path."
+        },
+        {
+          "variant": "card_bound_risk_preflight",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Worldpay and Cybersource risk sessions can depend on the original card. Prepared requests refuse those results until collection can use the approved card."
+        },
+        {
+          "variant": "prepared_co_badged_network_choice",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "A prepared request cannot reuse the original card’s network preference without checking the selected card’s supported networks."
+        },
+        {
+          "variant": "proactive_authentication",
+          "status": "unsupported",
+          "constraint": "direct_sdk",
+          "reason": "Card-bearing risk authentication and proactive 3-D Secure action tokens require separate support."
         }
       ],
       "processor_amount": "none",
@@ -3711,7 +3741,7 @@
   "direct_sdk_profile": {
     "schema_version": 1,
     "profile_version": "preflight-2",
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "direct_sdk",
       "version": "bundled"
@@ -3870,7 +3900,7 @@
   "kernel_profile_template": {
     "schema_version": 1,
     "profile_version": "kernel-template-1",
-    "catalog_version": "2026-09-11.2",
+    "catalog_version": "2026-09-14.1",
     "integration": {
       "id": "kernel_native",
       "version": "REPLACE-WITH-ADAPTER-VERSION"

package/dist/preflight-schemas.json

@@ -162,7 +162,7 @@
             "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,119}$"
           },
           "catalog_version": {
-            "const": "2026-09-11.2"
+            "const": "2026-09-14.1"
           },
           "integration": {
             "type": "object",
@@ -358,7 +358,7 @@
         "const": 1
       },
       "catalog_version": {
-        "const": "2026-09-11.2"
+        "const": "2026-09-14.1"
       },
       "signals": {
         "type": "array",
@@ -550,7 +550,7 @@
         "pattern": "^[A-Za-z0-9][A-Za-z0-9._+-]{0,119}$"
       },
       "catalog_version": {
-        "const": "2026-09-11.2"
+        "const": "2026-09-14.1"
       },
       "integration": {
         "type": "object",
@@ -753,7 +753,7 @@
         "const": 1
       },
       "catalog_version": {
-        "const": "2026-09-11.2"
+        "const": "2026-09-14.1"
       },
       "integration": {
         "type": "object",

package/dist/preflight.generated.d.ts

@@ -1,6 +1,6 @@
 /** Advisory page discovery. These rules never admit a payment destination. */
 export declare const CHECKOUT_PREFLIGHT_VERSION = "1";
-export declare const CHECKOUT_PREFLIGHT_CATALOG_VERSION = "2026-09-11.2";
+export declare const CHECKOUT_PREFLIGHT_CATALOG_VERSION = "2026-09-14.1";
 export declare const CHECKOUT_PREFLIGHT_LIMITS: Readonly<{
     frames: 64;
     signals: 2048;
@@ -195,6 +195,16 @@ export declare function getCheckoutPreflightCatalog(): {
         readonly status: "supported";
         readonly mode: "token";
         readonly operations: readonly [{
+            readonly id: "stripe.device_checkout_confirm.v1";
+            readonly path_pattern: "^/v1/payment_pages/cs_(?:test|live)_[A-Za-z0-9]+/confirm$";
+            readonly effect: "payment_confirmation";
+            readonly amount_binding: "expected_amount_test_evidence_currency_unqualified";
+            readonly psp: "stripe";
+            readonly version: 1;
+            readonly mode: "token";
+            readonly autopilot_eligible: false;
+            readonly requires: "reviewed_final_payment_and_continuation_evidence";
+        }, {
             readonly id: "stripe.tokenization";
             readonly path_pattern: "^/v1/(?:payment_methods|tokens)$";
             readonly effect: "token_or_method_creation";
@@ -1137,7 +1147,7 @@ export declare function getCheckoutPreflightCatalog(): {
                 readonly requirements: readonly ["verify_merchant_billing"];
             };
         };
-        readonly limitations: readonly ["Only the listed request format is recognized; a recognized processor is not verified merchant coverage.", "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints."];
+        readonly limitations: readonly ["Only the listed request format is recognized; a recognized processor is not verified merchant coverage.", "The adapter covers the normal XHR POST new-card tokenization path on Recurly US and EU endpoints.", "Prepare approval before submitting a timed native card form. Both regions require the shared environment because test and live keys use the same endpoints."];
         readonly unsupported_variants: readonly [{
             readonly variant: "legacy_jsonp_get";
             readonly status: "unsupported";
@@ -1148,6 +1158,21 @@ export declare function getCheckoutPreflightCatalog(): {
             readonly status: "unsupported";
             readonly constraint: "direct_sdk";
             readonly reason: "Bank-account and alternative-payment token routes are outside the new-card path.";
+        }, {
+            readonly variant: "card_bound_risk_preflight";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "Worldpay and Cybersource risk sessions can depend on the original card. Prepared requests refuse those results until collection can use the approved card.";
+        }, {
+            readonly variant: "prepared_co_badged_network_choice";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "A prepared request cannot reuse the original card’s network preference without checking the selected card’s supported networks.";
+        }, {
+            readonly variant: "proactive_authentication";
+            readonly status: "unsupported";
+            readonly constraint: "direct_sdk";
+            readonly reason: "Card-bearing risk authentication and proactive 3-D Secure action tokens require separate support.";
         }];
         readonly processor_amount: "none";
         readonly challenge_surface: "merchant_browser";

package/dist/preflight.generated.js

@@ -1,9 +1,9 @@
 // Generated from @agent-cards/payment-core. Do not edit.
-// source-sha256: ced5aecd22684c680a53b9e33dff1c5333cd36823f6fe3b4b8e84f10f6f73c53
+// source-sha256: 69919c5fe4133b090eddae027fb12c5ad7c51a8c63e8719325c174aeee78c30a
 import { CHECKOUT_PREFLIGHT_CAPABILITIES } from './preflight-capabilities.generated.js';
 /** Advisory page discovery. These rules never admit a payment destination. */
 export const CHECKOUT_PREFLIGHT_VERSION = '1';
-export const CHECKOUT_PREFLIGHT_CATALOG_VERSION = '2026-09-11.2';
+export const CHECKOUT_PREFLIGHT_CATALOG_VERSION = '2026-09-14.1';
 export const CHECKOUT_PREFLIGHT_LIMITS = Object.freeze({ frames: 64, signals: 2048, snapshot_bytes: 262144, url_length: 4096 });
 // Identification-only IDs, checked against the canonical catalog by the core tests.
 // No card destination, request method, or request body pattern lives here.

package/dist/preparation.js

@@ -20,6 +20,8 @@ export class PreparationGate {
         lifecycle.abort.signal.addEventListener('abort', () => this.invalidate('cancelled'), { once: true });
     }
     async prepare(options) {
+        if (this.opts.stripeCheckout)
+            throw new CheckoutPreparationError(null, 'unsupported_processor');
         options = { ...options };
         if (this.state !== 'unused' || this.observedRequest || this.lifecycle.getState().status !== 'idle' || this.lifecycle.isBlocked()) {
             // A late opt-in cannot turn the next native retry into ordinary approval.

package/dist/prepared-processor.d.ts

@@ -1,4 +1,4 @@
-export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago';
+export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly';
 export type PreparationEnvironment = 'production' | 'sandbox' | 'shared';
 /** Shared endpoint processors cannot attest test/live mode from their URL or key prefix. */
 export declare function validPreparationEnvironment(psp: string, environment: string): boolean;

package/dist/prepared-processor.js

@@ -1,7 +1,8 @@
 import { braintreeEnvironment, isPreparedBraintreeRequest, readTokenizationJson } from './braintree.js';
+import { isPreparedRecurlyRequest } from './recurly.generated.js';
 /** Shared endpoint processors cannot attest test/live mode from their URL or key prefix. */
 export function validPreparationEnvironment(psp, environment) {
-    if (psp === 'bambora' || psp === 'mercado_pago')
+    if (psp === 'bambora' || psp === 'mercado_pago' || psp === 'recurly')
         return environment === 'shared';
     return ['square', 'braintree', 'worldpay'].includes(psp) && ['production', 'sandbox'].includes(environment);
 }
@@ -12,6 +13,8 @@ export function preparationEndpoint(psp, environment) {
         return 'https://api.bam.shift4api.net/scripts/tokenization/tokens';
     if (psp === 'mercado_pago')
         return 'https://api.mercadopago.com/v1/card_tokens';
+    if (psp === 'recurly')
+        return 'https://api.recurly.com/js/v1/token';
     if (psp === 'worldpay')
         return environment === 'production'
             ? 'https://access.worldpay.com/sessions/card' : 'https://try.access.worldpay.com/sessions/card';
@@ -70,6 +73,9 @@ export function matchesPreparedRequest(psp, environment, requestUrl, method, bod
         const request = new URL(requestUrl), endpoint = new URL(preparationEndpoint(psp, environment));
         if (request.username || request.password || request.hash)
             return false;
+        if (psp === 'recurly')
+            return [endpoint.href, 'https://api.eu.recurly.com/js/v1/token'].includes(requestUrl)
+                && isPreparedRecurlyRequest(body ?? null);
         if (psp === 'bambora') {
             if (![endpoint.href, 'https://api.na.bambora.com/scripts/tokenization/tokens'].includes(requestUrl))
                 return false;

package/dist/recurly.generated.d.ts

@@ -0,0 +1 @@
+export declare function isPreparedRecurlyRequest(body: string | null): boolean;

package/dist/recurly.generated.js

@@ -0,0 +1,87 @@
+// Generated from @agent-cards/payment-core. Do not edit.
+// source-sha256: 6a1932841621aca1a7371165e0b54a161c4dd5bb077acc190a0c5399229fa350
+/** Normal Recurly.js 4 new-card POST, before it consumes an approval.
+ * Native fields and indexed form serialization: recurly/recurly-js commit
+ * 7cd9a2b131bf12d7cebfbc7eea1ba86aa54c60e7, lib/recurly/{token,request,fraud}.js
+ * and risk/{risk,three-d-secure/three-d-secure}.js. Worldpay and Cybersource
+ * risk sessions depend on the original card; proactive Braintree also produces
+ * another token type. All nonempty risk results are refused until collection
+ * can use the approved card. This function never rewrites the body.
+ */
+const SCALARS = new Set(['number', 'month', 'year', 'cvv', 'type', 'key', 'version', 'deviceId', 'sessionId', 'instanceId',
+    'first_name', 'last_name', 'address1', 'address2', 'company', 'country', 'city', 'state', 'postal_code', 'phone',
+    'vat_number', 'tax_identifier', 'tax_identifier_type', 'fraud_session_id', 'card_network_preference']);
+const BROWSER = new Set(['color_depth', 'java_enabled', 'language', 'referrer_url', 'screen_height', 'screen_width', 'time_zone_offset', 'user_agent']);
+const FRAUD_PROCESSORS = new Set(['kount', 'litle_threat_metrix', 'braintree', 'fraudnet']);
+const contiguous = (values) => [...values.keys()].sort((a, b) => Number(a) - Number(b)).every((value, index) => value === String(index));
+export function isPreparedRecurlyRequest(body) {
+    if (typeof body !== 'string' || !body || body.length > 65536)
+        return false;
+    const chunks = body.split('&');
+    if (chunks.length > 200)
+        return false;
+    const fields = new Map();
+    const fraud = new Map();
+    try {
+        for (const chunk of chunks) {
+            const separator = chunk.indexOf('=');
+            if (separator < 1)
+                return false;
+            const name = decodeURIComponent(chunk.slice(0, separator).replace(/\+/g, ' '));
+            const value = decodeURIComponent(chunk.slice(separator + 1).replace(/\+/g, ' '));
+            if (fields.has(name) || value.length > 4096 || /[\u0000-\u001f\u007f]/.test(value))
+                return false;
+            fields.set(name, value);
+            if (SCALARS.has(name))
+                continue;
+            const browser = /^browser\[([a-z_]+)\]$/.exec(name);
+            if (browser && BROWSER.has(browser[1]))
+                continue;
+            const structured = /^fraud\[([0-9]|1[0-9])\]\[(.+)\]$/.exec(name);
+            if (!structured)
+                return false;
+            const [, index, leaf] = structured;
+            if (!['processor', 'session_id'].includes(leaf) && !/^udf\]\[([0-9]|1[0-9])\]\[(label|value)$/.test(leaf))
+                return false;
+            if (!fraud.has(index))
+                fraud.set(index, new Map());
+            fraud.get(index).set(leaf, value);
+        }
+    }
+    catch {
+        return false;
+    }
+    const number = fields.get('number') ?? '', month = fields.get('month') ?? '', year = fields.get('year') ?? '';
+    if (!/^[0-9]{12,19}$/.test(number) || !/^[0-9]{1,2}$/.test(month) || Number(month) < 1 || Number(month) > 12
+        || !/^(?:[0-9]{2}|20[0-9]{2})$/.test(year))
+        return false;
+    if (fields.has('cvv') && fields.get('cvv') !== '' && !/^[0-9]{3,4}$/.test(fields.get('cvv')))
+        return false;
+    if (fields.has('type') && fields.get('type') !== 'credit_card')
+        return false;
+    // A co-badged network choice belongs to the entered card's supported brands.
+    if (fields.get('card_network_preference'))
+        return false;
+    if (fields.has('key') && !fields.get('key')?.trim())
+        return false;
+    if (!contiguous(fraud))
+        return false;
+    for (const item of fraud.values()) {
+        if (!FRAUD_PROCESSORS.has(item.get('processor') ?? '') || !item.get('session_id'))
+            return false;
+        const udf = new Map();
+        for (const key of item.keys()) {
+            const field = /^udf\]\[([0-9]|1[0-9])\]\[(label|value)$/.exec(key);
+            if (!field)
+                continue;
+            if (item.get('processor') !== 'kount')
+                return false;
+            if (!udf.has(field[1]))
+                udf.set(field[1], new Set());
+            udf.get(field[1]).add(field[2]);
+        }
+        if (!contiguous(udf) || [...udf.values()].some(keys => keys.size !== 2))
+            return false;
+    }
+    return true;
+}

package/dist/stripe-checkout.d.ts

@@ -0,0 +1,77 @@
+import type { PausedRequest } from './client.js';
+/** Test by default. Production requires explicit opt-in and an independently admitted live grant. */
+export interface StripeCheckoutOptions {
+    environment?: 'test' | 'production';
+    sessionId: string;
+    publishableKey: string;
+}
+type StubResponse = {
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+};
+type Step = {
+    phase: 'tokenization';
+    response: StubResponse;
+} | {
+    phase: 'final';
+    request: PausedRequest;
+};
+type Phase = Step['phase'] | 'unknown';
+type GateState = 'fresh' | 'stubbed' | 'submitted' | 'stopped';
+export type StripeCheckoutBlockStage = 'request_read' | 'classification' | 'claim' | 'readiness' | 'document' | 'stub_response';
+type ReadinessReason = 'attachment_not_ready' | 'cancelled' | 'checkout_inactive' | 'approval_pending' | 'request_inactive';
+export type StripeCheckoutBlockReason = ReadinessReason | 'request_unavailable' | 'request_validation_failed' | 'context_already_present' | 'duplicate_tokenization' | 'duplicate_confirmation' | 'preparation_unavailable' | 'preparation_missing' | 'claim_invalidated' | 'document_changed' | 'document_unavailable' | 'readiness_unavailable' | 'stub_response_failed';
+/** Native pre-authorization refusal metadata. Never contains request or exception text.
+ * Classification failures intentionally do not guess which shared-core predicate rejected.
+ * gate_state is observed before the adapter retires a failed claim. A preserved duplicate
+ * belongs to a competing request: consumers must not cancel the active checkout for it.
+ */
+export interface StripeCheckoutBlockedDetail {
+    version: 1;
+    processor: 'stripe';
+    endpoint_family: 'payment_methods' | 'payment_page_confirm' | 'other';
+    phase: Phase;
+    stage: StripeCheckoutBlockStage;
+    reason: StripeCheckoutBlockReason;
+    gate_state: GateState;
+    disposition: 'active_claim_preserved' | 'checkout_stopped';
+}
+declare class StripeCheckoutRejectionError extends Error {
+    readonly stage: StripeCheckoutBlockStage;
+    readonly reason: StripeCheckoutBlockReason;
+    readonly phase?: Phase | undefined;
+    constructor(message: string, stage: StripeCheckoutBlockStage, reason: StripeCheckoutBlockReason, phase?: Phase | undefined);
+}
+export declare function stripeCheckoutReadinessError(reason: ReadinessReason): Error;
+/** A valid competing request must not retire the request that already claimed this step. */
+export declare class StripeCheckoutClaimConflictError extends StripeCheckoutRejectionError {
+    constructor(phase: Step['phase']);
+}
+/** The two native browser requests belong to one attachment and one grant.
+ * Processor rules and form transformations live in the generated shared core.
+ * The local stub contains no selected-card data and starts no authorization.
+ */
+export declare class StripeCheckoutGate {
+    private state;
+    private billing?;
+    private readonly binding?;
+    constructor(options: {
+        stripeCheckout?: StripeCheckoutOptions;
+        executionMode?: string;
+        grantId?: string;
+        amount?: number | string;
+        currency?: string;
+    });
+    matches(url: string): boolean;
+    isEnabled(): boolean;
+    isPrepared(): boolean;
+    invalidate(): void;
+    /** Observability only: this endpoint label never participates in a payment decision. */
+    describeRejection(error: unknown, rawUrl: string, stage: StripeCheckoutBlockStage, phase?: Phase): StripeCheckoutBlockedDetail;
+    assertClaim(step: Step): void;
+    /** Check the actual top-level hosted document before preparing either step. */
+    assertDocument(raw: string): void;
+    claim(request: PausedRequest): Step | null;
+}
+export {};

package/dist/stripe-checkout.generated.d.ts

@@ -0,0 +1,58 @@
+declare var STRIPE_CHECKOUT_OPERATION: string;
+declare var STRIPE_CHECKOUT_CONTEXT_HEADER: string;
+declare function validateStripeCheckoutIdentity(value: any): Readonly<{
+    environment: any;
+    livemode: boolean;
+}>;
+declare function validateStripeCheckoutCard(card: any, environment?: string): boolean;
+declare function isStripeCheckoutHostedMode(value: any): boolean;
+declare function encodeStripeCheckoutContext(value: any): string;
+declare function hasStripeCheckoutMarker(request: any): boolean;
+declare function parseStripeCheckoutContext(request: any): {
+    version: number;
+    session_id: any;
+    synthetic_payment_method_id: any;
+} | null | undefined;
+declare function isStripeCheckoutEndpoint(raw: any): boolean;
+declare function captureStripeCheckoutBilling(request: any, options: any): Readonly<{
+    session_id: any;
+    synthetic_payment_method_id: any;
+    email: string | null;
+}>;
+declare function attachStripeCheckoutBilling(request: any, captured: any, options: any): any;
+declare function classifyStripeCheckoutRequest(request: any, options?: {}): {
+    phase: string;
+    session_id: any;
+    publishable_key: any;
+    synthetic_payment_method_id?: undefined;
+    amount_cents?: undefined;
+    currency?: undefined;
+} | {
+    phase: string;
+    session_id: any;
+    publishable_key: any;
+    synthetic_payment_method_id: string | undefined;
+    amount_cents: number;
+    currency: string;
+} | null;
+declare function createStripeCheckoutTokenizationStub(request: any, options: any): {
+    status: number;
+    headers: {
+        "content-type": string;
+    };
+    body: string;
+};
+declare function parseStripeCheckoutResponse(raw: any, options: any): any;
+declare function prepareStripeCheckoutReplay(request: any, card: any, options?: {}): {
+    psp: string;
+    request: {
+        url: any;
+        method: string;
+        headers: {
+            "content-type": string;
+        };
+        body: string;
+    };
+    where: string[];
+};
+export { STRIPE_CHECKOUT_CONTEXT_HEADER, STRIPE_CHECKOUT_OPERATION, attachStripeCheckoutBilling, captureStripeCheckoutBilling, classifyStripeCheckoutRequest, createStripeCheckoutTokenizationStub, encodeStripeCheckoutContext, hasStripeCheckoutMarker, isStripeCheckoutEndpoint, isStripeCheckoutHostedMode, parseStripeCheckoutContext, parseStripeCheckoutResponse, prepareStripeCheckoutReplay, validateStripeCheckoutCard, validateStripeCheckoutIdentity };