@agent-cards/sdk 0.20.0 → 0.21.0

package/dist/prepared-processor.js

@@ -6,22 +6,27 @@ import { isPreparedSpreedlyRequest, isSpreedlyTokenRequest, SPREEDLY_TOKEN_ENDPO
 import { checkoutComPreparationUrl, isPreparedCheckoutComRequest } from './checkout-com.generated.js';
 import { classifyDeclaredMerchantRequest, classifyMerchantRequest } from './merchant-hosted.js';
 import { fiservCapturePinId, fiservPreparationUrl, isPreparedFiservRequest } from './fiserv.js';
+import { cybersourceFlexPreparationUrl, isPreparedCybersourceFlexRequest } from './cybersource-flex.generated.js';
 export function preparationMode(psp) {
     return psp === 'adyen' || psp === 'fiserv' ? 'cse' : 'token';
 }
 /**
  * Shared endpoint processors cannot attest test/live mode from their URL or key prefix.
  * Adyen can: test and live are separate hosts and key prefixes. Fiserv's are separate
- * hosts too: connect (production) and connect-cert (sandbox).
+ * hosts too: connect (production) and connect-cert (sandbox). So are CyberSource
+ * Flex's: flex.cybersource.com is live, testflex.cybersource.com is test, and each has
+ * its own signing keys.
  */
 export function validPreparationEnvironment(psp, environment) {
     if (psp === 'bambora' || psp === 'mercado_pago' || psp === 'recurly' || psp === 'spreedly')
         return environment === 'shared';
-    return ['square', 'braintree', 'worldpay', 'adyen', 'checkout_com', 'paysafe', 'fiserv'].includes(psp) && ['production', 'sandbox'].includes(environment);
+    return ['square', 'braintree', 'worldpay', 'adyen', 'checkout_com', 'paysafe', 'fiserv', 'cybersource_flex'].includes(psp) && ['production', 'sandbox'].includes(environment);
 }
 export function preparationEndpoint(psp, environment) {
     if (!validPreparationEnvironment(psp, environment))
         throw new Error('unsupported_preparation_processor');
+    if (psp === 'cybersource_flex')
+        return cybersourceFlexPreparationUrl(environment);
     if (psp === 'paysafe')
         return paysafePreparationUrl(environment);
     if (psp === 'fiserv')
@@ -90,6 +95,11 @@ function freshCardBody(psp, body) {
 export function matchesPreparedRequest(psp, environment, requestUrl, method, body, headers) {
     if (method.toUpperCase() !== 'POST' || !validPreparationEnvironment(psp, environment))
         return false;
+    // CyberSource Flex: this environment's exact tokens URL, application/jwt with only the headers a
+    // browser adds beside it, and a Microform field iframe's JWE. The adapters claim only after the
+    // Flex gate verified the issuing field iframe's capture context against that JWE's key.
+    if (psp === 'cybersource_flex')
+        return isPreparedCybersourceFlexRequest(requestUrl, method.toUpperCase(), body ?? null, environment, headers);
     if (psp === 'paysafe')
         return isPreparedPaysafeRequest(requestUrl, method, body ?? null, environment, headers);
     // Fiserv: that environment's card-capture endpoint exactly, the capture rules on the whole

package/dist/registry.d.ts

@@ -6,7 +6,12 @@
  * site shares another. The list is served from the Agentcard API at runtime so
  * integrators pick up new processors without shipping a release.
  */
-export type Encoding = 'json' | 'form';
+/**
+ * The shape of the card-bearing body. `jwe`: a compact JWE the processor's own card field
+ * sealed (CyberSource Flex), opaque to everyone but the processor; served only with the
+ * capability that reads its capture context.
+ */
+export type Encoding = 'json' | 'form' | 'jwe';
 /**
  * How a paused request gets its card. `token` (the default when absent): the
  * cardholder's device calls the processor and the runtime replays the
@@ -76,10 +81,14 @@ export interface Recognizer {
     mode?: CheckoutMode;
     /**
      * Dark launch: a capability name the API attaches to an entry it serves only
-     * to a client that declared it (?capabilities=). Absent on every entry in
-     * BUILTIN_REGISTRY, because a gated entry is left out of the built-in
-     * fallback. Carried verbatim by syncRegistry for a client that does declare
-     * it, so the SDK never has to act on it.
+     * to a client that declared it (?capabilities=), from an org Agentcard
+     * enabled for the processor. Absent on every entry in BUILTIN_REGISTRY,
+     * because a gated entry is left out of the built-in fallback. Carried
+     * verbatim by syncRegistry for a client that does declare it
+     * (SUPPORTED_CAPABILITIES). authorize() refuses an entry whose capability
+     * this build does not list in SUPPORTED_CAPABILITIES
+     * (UnsupportedCapabilityError), which only a hand-built registry can hold.
+     * GMO names `gmo_shared_pk` and CyberSource Flex names `capture_context`.
      */
     capability?: string;
     /**
@@ -102,8 +111,9 @@ export interface Recognizer {
     /**
      * True when a processor's host environment is enforced: the API refuses a
      * create whose host environment disagrees with the row's test/live nature, and
-     * the device sends only documented test cards to a sandbox host. Absent on
-     * every entry today; carried verbatim by syncRegistry, and the SDK never acts
+     * the device sends only documented test cards to a sandbox host. GMO sets it
+     * (stg.token.mul-pay.jp is its test host), and as a dark entry it is never in
+     * BUILTIN_REGISTRY; carried verbatim by syncRegistry, and the SDK never acts
      * on it.
      */
     hostEnvironmentPinned?: boolean;

package/dist/stripe-checkout.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: b51ce95dc43d8ab4a7576f0cd0b2309802bb124e15197d5026a2202524d6ccf0
+// artifact-sha256: 26a574d3944a8fbf0c12ddc9378d2ae3772bd2cdc78f95a5db1b61c037ee5474
 // src/deep-freeze.js
 function deepFreeze(value) {
     if (value && typeof value === "object" && !Object.isFrozen(value)) {
@@ -632,6 +632,32 @@ var PROCESSOR_DEFINITIONS = deepFreeze([
         hostEnvironmentPinned: true,
         encoding: "json",
         passthroughHeaders: ["^x-mp-client-type$"]
+    },
+    {
+        psp: "cybersource_flex",
+        // CyberSource Flex Microform v2. ONE card-bearing request: a POST from a Microform field
+        // iframe (the loader picks the number or the securityCode iframe at random) to the capture
+        // context's flx.origin + flx.path, /flex/v2/tokens, sent as `application/jwt; charset=utf-8`
+        // with a 30 s XHR timeout. The body is a compact JWE the iframe seals under the context's own
+        // key, so it is opaque: no injector exists (injectCard and prepareDeviceReplay refuse this
+        // psp), and the device verifies the context, rebuilds the iframe's plaintext with the real
+        // card and seals it itself (cybersource-flex-replay.js). The same URL also carries Microform
+        // v0.11 and Flex API v2 direct traffic, so recognition is not coverage: the SDK creates only
+        // for a POST from a reviewed v2 field iframe whose fragment record it holds.
+        // Excluded on purpose: api/apitest.cybersource.com (server APIs, never a browser card),
+        // /flex/v1/tokens, /flex/v2/public-keys/*, /microform/bundle/* and flex.in.cybersource.com
+        // (it resolves but serves neither keys nor bundles). No other entry shares these hosts.
+        // `capability` names the capture-context sidecar a client must send on create (the reviewed
+        // "sidecar" negotiation term): the entry stays out of BUILTIN_REGISTRY, is served only to a
+        // client that declares it, and is off for every org until one is opted in. testflex is the
+        // sandbox host and the environment is pinned (S7): test kids and testflex only on sandbox rows.
+        capability: "capture_context",
+        match: "(?:test)?flex\\.cybersource\\.com/flex/v2/tokens(?![\\w/-])",
+        hosts: ["^flex\\.cybersource\\.com$", "^testflex\\.cybersource\\.com$"],
+        sandboxHosts: ["^testflex\\.cybersource\\.com$"],
+        hostEnvironmentPinned: true,
+        encoding: "jwe",
+        passthroughHeaders: []
     }
 ]);
 var PSP_RECOGNIZERS = deepFreeze(PROCESSOR_DEFINITIONS.map(({ compose, encryptedCardFields, ...definition }) => definition));
@@ -682,10 +708,19 @@ var WITHOUT_CHECKOUT_SESSIONS = Object.freeze({
 var HEADER_NEVER_FORWARD = /^(cookie|set-cookie|authorization2|proxy-authorization|host|content-length|origin|referer)$/i;
 var ALLOWED_MEDIA_TYPES = {
     json: ["application/json", "text/plain"],
-    form: ["application/x-www-form-urlencoded"]
+    form: ["application/x-www-form-urlencoded"],
+    jwe: ["application/jwt"]
 };
+var JWE_CONTENT_TYPE = "application/jwt; charset=utf-8";
 function contentTypeFor(pspOrEntry, headers) {
     const rec = trustedClientRecognizer(pspOrEntry);
+    if (rec.encoding === "jwe") {
+        const captured = Object.entries(headers || {}).find(([k]) => /^content-type$/i.test(k));
+        const base2 = captured && typeof captured[1] === "string" ? captured[1].split(";")[0].trim().toLowerCase() : "";
+        if (!ALLOWED_MEDIA_TYPES.jwe.includes(base2))
+            throw new Error("Refusing to pay: this processor takes its sealed card only as application/jwt.");
+        return JWE_CONTENT_TYPE;
+    }
     const encoding = rec && rec.encoding === "form" ? "form" : "json";
     const allowed = ALLOWED_MEDIA_TYPES[encoding];
     const fallback = allowed[0];

package/examples/preflight/kernel-native/inventory.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "catalog_version": "2026-09-15.1",
-  "catalog_sha256": "a67f74c2466590d65338b8a909f4978fc4eebf2c71f20a8bda219cbb6989d010",
+  "catalog_sha256": "927bdc284703286962911cd6d9c13f6b2117f5a177db39c06eca506924f81db1",
   "baseline_version": "kernel-native-docs-2026-09-11.1",
   "baseline_sha256": "d86722f49633d8223fccae54cd3d485df4375aee06aa156a273cc689b7c8507c",
   "native_build": null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-cards/sdk",
-  "version": "0.20.0",
+  "version": "0.21.0",
   "description": "Agentcard's SDK: one client, Agentcard, with two modules. checkout pauses a browser purchase and pays it with the person's own card; voice connects a person to your product once and approves a purchase by voice inside it. Card data never enters your process.",
   "type": "module",
   "main": "dist/index.js",
@@ -27,8 +27,8 @@
     "_comment_build": "The public SDK keeps zero runtime dependencies. Its build vendors deterministic metadata and substitution artifacts from the internal payment core, and the voice streaming door from packages/voice/src/core (the phone package, @agent-cards/voice, ships it to phones); TypeScript remains pinned.",
     "build": "node ../payment-core/scripts/build.mjs && node scripts/generate-payment-core.mjs && node scripts/generate-voice-stream.mjs && npx -y -p typescript@5.9.3 tsc && node scripts/generate-preflight-contract.mjs",
     "prepublishOnly": "pnpm build",
-    "test": "node test.mjs && node --test lifecycle.test.mjs merchant-abort.test.mjs preparation.test.mjs braintree.test.mjs pre-claim.test.mjs autopilot.test.mjs stripe-checkout.test.mjs payment-core.test.mjs prepared-processor.test.mjs merchant-hosted.test.mjs merchant-total.test.mjs sandbox-declaration.test.mjs minimum-delay.test.mjs paysafe.test.mjs payu.test.mjs attachment.test.mjs worker-targets.test.mjs mercado-checkout.test.mjs mercado-polling.test.mjs voice.test.mjs agentcard.test.mjs buy.test.mjs readme.test.mjs && node --test preflight-package.test.mjs preflight-collector.test.mjs && node --test kernel-native-qualification.test.mjs && node --test ../vault/scripts/recurly-validation/watch-duty-sdk-result.test.mjs",
-    "test:browser": "node browser.test.mjs && node stripe-browser.test.mjs && node preparation-browser.test.mjs && node checkout-com-browser.test.mjs && node paysafe-preparation-browser.test.mjs && node owned-shop-browser.test.mjs && node spreedly-browser.test.mjs && node worker-browser.test.mjs && node adyen-merchant-hosted-browser.test.mjs && node fiserv-browser.test.mjs",
+    "test": "node test.mjs && node --test lifecycle.test.mjs merchant-abort.test.mjs preparation.test.mjs braintree.test.mjs pre-claim.test.mjs autopilot.test.mjs stripe-checkout.test.mjs payment-core.test.mjs prepared-processor.test.mjs merchant-hosted.test.mjs merchant-total.test.mjs sandbox-declaration.test.mjs minimum-delay.test.mjs paysafe.test.mjs payu.test.mjs attachment.test.mjs worker-targets.test.mjs mercado-checkout.test.mjs mercado-polling.test.mjs voice.test.mjs agentcard.test.mjs buy.test.mjs readme.test.mjs gmo.test.mjs cybersource-flex.test.mjs && node --test preflight-package.test.mjs preflight-collector.test.mjs && node --test kernel-native-qualification.test.mjs && node --test ../vault/scripts/recurly-validation/watch-duty-sdk-result.test.mjs",
+    "test:browser": "node browser.test.mjs && node stripe-browser.test.mjs && node preparation-browser.test.mjs && node checkout-com-browser.test.mjs && node paysafe-preparation-browser.test.mjs && node owned-shop-browser.test.mjs && node spreedly-browser.test.mjs && node worker-browser.test.mjs && node adyen-merchant-hosted-browser.test.mjs && node fiserv-browser.test.mjs && node gmo-browser.test.mjs && node cybersource-flex-browser.test.mjs",
     "check:payment-core": "node scripts/generate-payment-core.mjs --check",
     "check:voice-stream": "node scripts/generate-voice-stream.mjs --check",
     "test:preflight": "node --test preflight-package.test.mjs preflight-collector.test.mjs kernel-native-qualification.test.mjs",