@agent-cards/sdk 0.21.0 → 0.22.0

package/dist/preflight.generated.js

@@ -1,5 +1,5 @@
 // Generated from @agent-cards/payment-core. Do not edit.
-// source-sha256: 3a36f98936b5a93687dd4a052d1d4513935a093736b19475f023b5a0847c6b4a
+// source-sha256: ed01cf8d69fe6aa9e1be54dfd1a9b1e20cdfcb3a498f4b8a934726e38a1639ba
 import { CHECKOUT_PREFLIGHT_CAPABILITIES } from './preflight-capabilities.generated.js';
 /** Advisory page discovery. These rules never admit a payment destination. */
 export const CHECKOUT_PREFLIGHT_VERSION = '1';
@@ -68,6 +68,14 @@ RULES.push({ id: 'fiserv-commercehub-payment-fields', psp: 'fiserv', kinds: ['sc
     sources: [fiservSource('https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js'), fiservSource('https://orangepay-ecommerce.hdpayments.homedepot.com/env.js')] }, { id: 'fiserv-commercehub-checkout-script', psp: 'fiserv', kinds: ['script'], hostname: /^commercehub-checkout\.fiservapps\.com$/, pathname: /^\/sdk\/[0-9]+\.[0-9]+\.[0-9]+\/checkout\.js$/, origin: 'https://commercehub-checkout.fiservapps.com', path_pattern: '/sdk/:version/checkout.js',
     sources: [fiservSource('https://developer.fiserv.com/product/CommerceHub/docs/Online-Commerce/Integration-Options/Hosted-Checkout/Hosted-Checkout-Version-Release')] }, { id: 'fiserv-secure-data-capture-frame', psp: 'fiserv', kinds: ['frame', 'iframe', 'document'], hostname: /^commercehub-secure-data-capture\.fiservapps\.com$/, pathname: /^\/sdk-secure\/[0-9]+\.[0-9]+\.[0-9]+\/iframe\.html$/, origin: 'https://commercehub-secure-data-capture.fiservapps.com', path_pattern: '/sdk-secure/:version/iframe.html',
     sources: [fiservSource('https://commercehub-checkout.fiservapps.com/sdk/3.8.14/payment-fields.js'), fiservSource('https://commercehub-secure-data-capture.fiservapps.com/sdk-secure/3.8.14/iframe.html')] });
+// Verifone eCommerce, read 2026-09-25 from Verifone's own hosts and docs: a merchant page
+// that encrypts the card itself (Secure Card Capture) loads verifone.js from Verifone's
+// jsclient host for its region, byte-identical on every host. Verifone ships dark (its
+// definition names a capability), so the bundled catalog declares no support for it:
+// the script identifies verifone and the result stays unknown.
+const verifoneSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'verifone-secure-card-capture-script', psp: 'verifone', kinds: ['script'], hostname: /^us\.jsclient\.verifone\.cloud$/, pathname: /^\/verifone\.js$/, origin: 'https://us.jsclient.verifone.cloud', path_pattern: '/verifone.js',
+    sources: [verifoneSource('https://us.jsclient.verifone.cloud/verifone.js'), verifoneSource('https://verifone.cloud/docs/online-payments/securecardcapture')] });
 // GMO Payment Gateway PG Multipayment (dark: its processor declares a capability, so the bundled
 // catalog does not list it and these signals stay unknown until a client opts in). Token v2's
 // mp-token.js identifies the processor. Token v1's ext/js/token.js (a JSONP GET), GMO Elements'
@@ -98,6 +106,173 @@ const cybersourceSources = [
 RULES.push({ id: 'cybersource-flex-microform-script', psp: 'cybersource_flex', kinds: ['script'], hostname: /^flex\.cybersource\.com$/, pathname: /^\/microform\/bundle\/v2(?:\.[0-9]+\.[0-9]+)?\/flex-microform\.min\.js$/, origin: 'https://flex.cybersource.com', path_pattern: '/microform/bundle/v2{,.:minor.:patch}/flex-microform.min.js',
     sources: cybersourceSources }, { id: 'cybersource-flex-microform-field', psp: 'cybersource_flex', kinds: ['frame', 'iframe', 'document'], hostname: /^flex\.cybersource\.com$/, pathname: /^\/microform\/bundle\/v2\.[0-9]+\.[0-9]+\/iframe\.html$/, origin: 'https://flex.cybersource.com', path_pattern: '/microform/bundle/v:version/iframe.html',
     sources: cybersourceSources });
+// Juspay HyperCheckout: Juspay's own hosted payment page (the Session API's payment_links.web),
+// which a merchant embeds in an iframe (IndiGo's payment step). The card request that page makes
+// has not been observed, so the Vault does not take it over, and the rule tells the agent so
+// before it types a placeholder. Juspay is served dark, so no catalog processor entry backs the
+// candidate and the result stays unknown either way.
+RULES.push({ id: 'juspay-hypercheckout-payment-page', psp: 'juspay', kinds: ['document', 'frame', 'iframe'], hostname: /^api\.juspay\.in$/, pathname: /^\/orders\/ordeh_[A-Za-z0-9]+\/payment-page$/, origin: 'https://api.juspay.in', path_pattern: '/orders/:order/payment-page',
+    sources: [{ kind: 'primary_source', reference: 'https://juspay.io/in/docs/api-reference/docs/express-checkout/session', reviewed_on: '2026-09-23' }],
+    variant_unverified: 'The Juspay HyperCheckout payment page at /orders/:order/payment-page sends the card from Juspay\'s own page, a request the Vault does not take over.' });
+// Pelecard Iframe/Redirect 2.0, reviewed from Pelecard's public payment page scripts and three archived
+// payment pages on 2026-09-25. The processor ships dark: until the bundled catalog serves pelecard, a
+// lone Pelecard signal names the processor and stays unknown. The legacy 1.0 page on
+// gateway.pelecard.biz posts the card as a top-level form and stays unknown through `variant_unverified`.
+const pelecardSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'pelecard-payment-page', psp: 'pelecard', kinds: ['document', 'frame', 'iframe'], hostname: /^gateway21\.pelecard\.biz$/, pathname: /^\/PaymentGW\/?$/, origin: 'https://gateway21.pelecard.biz', path_pattern: '/PaymentGW',
+    sources: [pelecardSource('https://gateway21.pelecard.biz/ManualIframe/Chart'), pelecardSource('https://docs.pelecard.com/documentation/iframe-redirect-programmer-manual-version-06-2025/')] }, { id: 'pelecard-payment-script', psp: 'pelecard', kinds: ['script'], hostname: /^gateway21\.pelecard\.biz$/, pathname: /^\/Scripts\/Payment\/(?:Payment|General)\.js$/, origin: 'https://gateway21.pelecard.biz', path_pattern: '/Scripts/Payment/{Payment,General}.js',
+    sources: [pelecardSource('https://gateway21.pelecard.biz/Scripts/Payment/Payment.js'), pelecardSource('https://gateway21.pelecard.biz/Scripts/Payment/General.js')] }, { id: 'pelecard-legacy-payment-form', psp: 'pelecard', kinds: ['document', 'frame', 'iframe', 'form'], hostname: /^gateway\.pelecard\.biz$/, pathname: /^\/PayProcess\/Transaction$/, origin: 'https://gateway.pelecard.biz', path_pattern: '/PayProcess/Transaction',
+    sources: [pelecardSource('https://gateway.pelecard.biz/')],
+    variant_unverified: 'The implemented Pelecard adapter covers the Iframe/Redirect 2.0 card submission on gateway21 and gateway20.pelecard.biz; the legacy 1.0 page on gateway.pelecard.biz posts the card as a top-level form and is not admitted.' });
+// ACI Worldwide COPYandPAY (Halfords), reviewed from ACI's own widget files on 2026-09-25. The
+// processor ships dark: until the bundled catalog serves aci, a lone ACI signal names the
+// processor and stays unknown. The widget script URL carries ?checkoutId=, which never matches.
+const aciSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'aci-copyandpay-widget-script', psp: 'aci', kinds: ['script'], hostname: /^eu-prod\.oppwa\.com$/, pathname: /^\/v1\/paymentWidgets\.js$/, origin: 'https://eu-prod.oppwa.com', path_pattern: '/v1/paymentWidgets.js',
+    sources: [aciSource('https://eu-prod.oppwa.com/v1/paymentWidgets.js'), aciSource('https://docs.aciworldwide.com/integration-guide')] }, { id: 'aci-copyandpay-card-frame', psp: 'aci', kinds: ['frame', 'iframe', 'document'], hostname: /^eu-prod\.oppwa\.com$/, pathname: /^\/v1\/pciIframe\.html$/, origin: 'https://eu-prod.oppwa.com', path_pattern: '/v1/pciIframe.html',
+    sources: [aciSource('https://eu-prod.oppwa.com/v1/pciIframe.html'), aciSource('https://eu-prod.oppwa.com/v1/paymentWidgets.js')] });
+// Hyp CreditGuard PPS, reviewed from the public PPS shells and bundles and the Redirect API 2.6 guide
+// on 2026-09-25. The processor ships dark: until the bundled catalog serves creditguard, a lone PPS
+// signal names the processor and stays unknown. The legacy CGMPI page identifies its family and
+// stays unknown through `variant_unverified`.
+const creditguardSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'creditguard-pps-hosted-page', psp: 'creditguard', kinds: ['document', 'frame', 'iframe'], hostname: /^pps\.creditguard\.co\.il$/, pathname: /^\/$/, origin: 'https://pps.creditguard.co.il', path_pattern: '/',
+    sources: [creditguardSource('https://www.creditguard.co.il/wp-content/uploads/2021/10/CG-Gateway-Redirect-API-for-PPS.pdf'), creditguardSource('https://pps.creditguard.co.il/')] }, { id: 'creditguard-pps-template-script', psp: 'creditguard', kinds: ['script'], hostname: /^pps\.creditguard\.co\.il$/, pathname: /^\/templates\/[A-Za-z0-9_-]{1,64}\/main\.js$/, origin: 'https://pps.creditguard.co.il', path_pattern: '/templates/:template/main.js',
+    sources: [creditguardSource('https://pps.creditguard.co.il/templates/cgt-basic/main.js')] }, { id: 'creditguard-legacy-mpi-page', psp: 'creditguard', kinds: ['document', 'frame', 'iframe', 'form'], hostname: /^cgmpi\.creditguard\.co\.il$/, pathname: /^\/CGMPI_Server\/PerformTransaction$/, origin: 'https://cgmpi.creditguard.co.il', path_pattern: '/CGMPI_Server/PerformTransaction',
+    sources: [creditguardSource('https://www.creditguard.co.il/wp-content/uploads/2020/11/CG-Gateway-Redirect-API.pdf')],
+    variant_unverified: 'The implemented CreditGuard adapter covers the PPS page on pps, pps2 and ppsuat.creditguard.co.il; the legacy CGMPI page on cgmpi.creditguard.co.il is not admitted.' });
+// Primer Web SDK v2, reviewed from Primer's public SDK bundles (sdk.primer.io/web/v2.63.0 and v2.65.0,
+// the @primer-io/checkout-web 2.65.0 loader) and Printful's add-card chunk on 2026-09-25. One host serves
+// the SDK for sandbox and production sessions alike; the session's pciUrl decides where the card goes. The
+// processor ships dark: until the bundled catalog serves primer, a lone Primer signal names the processor
+// and stays unknown. Primer Checkout (@primer-io/primer-js) loads its api-controller from
+// /web/hosted-pages/ and stays unknown through `variant_unverified`.
+const primerSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'primer-core-sdk-script', psp: 'primer', kinds: ['script'], hostname: /^sdk\.primer\.io$/, pathname: /^\/web\/v2\.[0-9]+\.[0-9]+\/PrimerCoreSDK\.min\.js$/, origin: 'https://sdk.primer.io', path_pattern: '/web/v2.:minor.:patch/PrimerCoreSDK.min.js',
+    sources: [primerSource('https://sdk.primer.io/web/v2.63.0/PrimerCoreSDK.min.js'), primerSource('https://www.npmjs.com/package/@primer-io/checkout-web/v/2.65.0')] }, { id: 'primer-card-frame', psp: 'primer', kinds: ['document', 'frame', 'iframe'], hostname: /^sdk\.primer\.io$/, pathname: /^\/web\/v2\.[0-9]+\.[0-9]+\/(?:hosted-input|api-controller)\.html$/, origin: 'https://sdk.primer.io', path_pattern: '/web/v2.:minor.:patch/{hosted-input,api-controller}.html',
+    sources: [primerSource('https://sdk.primer.io/web/v2.63.0/hosted-input.html'), primerSource('https://sdk.primer.io/web/v2.63.0/api-controller.html')] }, { id: 'primer-checkout-api-controller', psp: 'primer', kinds: ['document', 'frame', 'iframe', 'script'], hostname: /^sdk\.primer\.io$/, pathname: /^\/web\/hosted-pages\/v[0-9]+\.[0-9]+\.[0-9]+\/api-controller\.(?:html|mjs)$/, origin: 'https://sdk.primer.io', path_pattern: '/web/hosted-pages/:version/api-controller.{html,mjs}',
+    sources: [primerSource('https://sdk.primer.io/web/hosted-pages/v1.1.0/api-controller.mjs'), primerSource('https://www.npmjs.com/package/@primer-io/primer-js/v/1.10.1')],
+    variant_unverified: 'The implemented Primer adapter covers the Web SDK v2 card tokenization; Primer Checkout (primer-js) sends the card from a hosted api-controller that gives up on the request after 30 seconds and is not admitted.' });
+// Payrails web SDK v6, reviewed from Payrails' public CDN files, the @payrails/web-sdk 6.5.0 loader
+// and Blacklane's static bundles on 2026-09-25. The loader injects
+// assets.payrails.io/web-sdk/<v6, or a build featureConfig.sdkVersion pins>/payrails.js, and the card
+// form mounts its fields as assets.payrails.io/apps/secure-frame/<v6 or x.y.z>/index.html iframes.
+// Only 6.x is matched, the body and JWE shape the Vault checks. window.__payrailsWebSdk__, the global
+// the bundle publishes, is page state rather than a loaded resource, so discovery never reads it.
+// The processor ships dark: until the bundled catalog serves payrails, a Payrails signal names it and
+// stays unknown. Once served, only the card-form save is covered, and it is conditional on consent.
+const payrailsSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'payrails-web-sdk-v6-script', psp: 'payrails', kinds: ['script'], hostname: /^assets\.payrails\.io$/, pathname: /^\/web-sdk\/v?6(?:\.[0-9]+\.[0-9]+)?\/payrails\.js$/, origin: 'https://assets.payrails.io', path_pattern: '/web-sdk/{v6,6.:minor.:patch}/payrails.js',
+    sources: [payrailsSource('https://assets.payrails.io/web-sdk/v6/payrails.js'), payrailsSource('https://www.npmjs.com/package/@payrails/web-sdk/v/6.5.0')] }, { id: 'payrails-secure-frame-v6', psp: 'payrails', kinds: ['frame', 'iframe', 'document'], hostname: /^assets\.payrails\.io$/, pathname: /^\/apps\/secure-frame\/(?:v6|6\.[0-9]+\.[0-9]+)\/index\.html$/, origin: 'https://assets.payrails.io', path_pattern: '/apps/secure-frame/{v6,6.:minor.:patch}/index.html',
+    sources: [payrailsSource('https://assets.payrails.io/apps/secure-frame/v6/index.html'), payrailsSource('https://docs.payrails.com/docs/secure-fields')] });
+// Elavon Converge Hosted Payment Page (NY DMV), reviewed from Converge's own page shell and bundle
+// on 2026-09-25 (byte-identical on the production and demo hosts). The processor ships dark: until
+// the bundled catalog serves elavon_converge, a lone Converge signal names the processor and stays
+// unknown. The page URL carries ?ssl_txn_auth_token=, which never takes part in matching. The
+// Lightbox modal and Checkout.js are named as unverified variants.
+const convergeSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'elavon-converge-hosted-payment-page', psp: 'elavon_converge', kinds: ['document', 'frame', 'iframe'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/',
+    sources: [convergeSource('https://api.convergepay.com/hosted-payments/'), convergeSource('https://developer.elavon.com/products/hosted-payment-page/v1/take-a-payment')] }, { id: 'elavon-converge-hpp-bundle', psp: 'elavon_converge', kinds: ['script'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/assets\/hpp-[0-9]+\.[0-9]+\.[0-9]+\.js$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/assets/hpp-:version.js',
+    sources: [convergeSource('https://api.convergepay.com/hosted-payments/assets/hpp-2.505.07.js')] }, { id: 'elavon-converge-lightbox', psp: 'elavon_converge', kinds: ['document', 'frame', 'iframe'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/hpm\/?$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/hpm',
+    sources: [convergeSource('https://api.demo.convergepay.com/hosted-payments/hpm'), convergeSource('https://api.convergepay.com/hosted-payments/PayWithConverge.js')],
+    variant_unverified: 'The implemented Elavon Converge adapter covers the Hosted Payment Page; the Lightbox payment modal at hosted-payments/hpm posts to its own endpoint and is not admitted.' }, { id: 'elavon-converge-checkout-js', psp: 'elavon_converge', kinds: ['script'], hostname: /^api\.convergepay\.com$/, pathname: /^\/hosted-payments\/(?:Checkout|PayWithConverge)\.js$/, origin: 'https://api.convergepay.com', path_pattern: '/hosted-payments/{Checkout,PayWithConverge}.js',
+    sources: [convergeSource('https://api.convergepay.com/hosted-payments/Checkout.js'), convergeSource('https://api.convergepay.com/hosted-payments/PayWithConverge.js')],
+    variant_unverified: 'The implemented Elavon Converge adapter covers the Hosted Payment Page; Checkout.js and the Lightbox launcher post the card from the merchant page and are not admitted.' });
+// Worldpay eProtect: the vendor's JS API scripts, its iframe client and the Worldpay-origin payframe
+// identify the processor. While its definition ships dark it is outside the bundled capabilities, so
+// a page using it stays unknown here. B&H serves the same script from a domain it names itself,
+// which is identified and refused; any other merchant-named domain stays unidentified, because a
+// host wildcard here would make every card frame attributable to eProtect.
+const eprotectSources = [
+    { kind: 'primary_source', reference: 'https://request.eprotect.vantivcnp.com/eProtect/eProtect-api3.js', reviewed_on: '2026-09-23' },
+    { kind: 'official_documentation', reference: 'https://docs.worldpay.com/assets/pdf/Worldpay_eProtect_Integration_Guide.pdf', reviewed_on: '2026-09-23' },
+];
+const eprotectScript = /^\/eProtect\/(?:eProtect|litle)-api[23]\.js$/;
+RULES.push({ id: 'worldpay-eprotect-js-api', psp: 'worldpay_eprotect', kinds: ['script'], hostname: /^request\.eprotect\.vantivcnp\.com$/, pathname: eprotectScript,
+    origin: 'https://request.eprotect.vantivcnp.com', path_pattern: '/eProtect/{eProtect,litle}-api{2,3}.js', sources: eprotectSources }, { id: 'worldpay-eprotect-iframe-client', psp: 'worldpay_eprotect', kinds: ['script'], hostname: /^request\.eprotect\.vantivcnp\.com$/,
+    pathname: /^\/eProtect\/js\/(?:payframe|eProtect-iframe)-client[34](?:\.min)?\.js$/, origin: 'https://request.eprotect.vantivcnp.com',
+    path_pattern: '/eProtect/js/{payframe,eProtect-iframe}-client{3,4}[.min].js', sources: eprotectSources }, { id: 'worldpay-eprotect-payframe', psp: 'worldpay_eprotect', kinds: ['frame', 'iframe', 'document'], hostname: /^request\.eprotect\.vantivcnp\.com$/,
+    pathname: /^\/eProtect\/payframe_[A-Za-z0-9]{1,64}_[A-Za-z0-9_-]{1,96}\.html$/, origin: 'https://request.eprotect.vantivcnp.com',
+    path_pattern: '/eProtect/payframe_:paypageId_:style.html', sources: eprotectSources }, { id: 'worldpay-eprotect-merchant-domain', psp: 'worldpay_eprotect', kinds: ['script'], hostname: /^paypage\.bhphotovideo\.com$/, pathname: eprotectScript,
+    origin: 'https://paypage.bhphotovideo.com', path_pattern: '/eProtect/{eProtect,litle}-api{2,3}.js', sources: eprotectSources,
+    variant_unverified: 'This eProtect script is served from a merchant-named domain, not a Worldpay eProtect host; only Worldpay’s own eProtect hosts are covered.' });
+// WSPay Components (WSPay's build of Monri Components), reviewed from the vendor's public bundles
+// on 2026-09-23. The processor ships dark: until the bundled catalog serves wspay, a lone WSPay
+// signal names the processor and stays unknown. Monri Components on ipg.monri.com and the WSPay
+// Form hosted page identify their family and stay unknown through `variant_unverified`.
+const wspaySource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-23' });
+RULES.push({ id: 'wspay-components-script', psp: 'wspay', kinds: ['script'], hostname: /^proxy\.wspay\.biz$/, pathname: /^\/dist\/(?:components|monri)\.js$/, origin: 'https://proxy.wspay.biz', path_pattern: '/dist/{components,monri}.js',
+    sources: [wspaySource('https://proxy.wspay.biz/dist/components.js'), wspaySource('https://proxy.wspay.biz/dist/monri.js')] }, { id: 'wspay-components-card-frame', psp: 'wspay', kinds: ['frame', 'iframe', 'document'], hostname: /^proxy\.wspay\.biz$/, pathname: /^\/v2\/js\/payment-method-component-dynamic\.html$/, origin: 'https://proxy.wspay.biz', path_pattern: '/v2/js/payment-method-component-dynamic.html',
+    sources: [wspaySource('https://proxy.wspay.biz/dist/components.js'), wspaySource('https://proxy.wspay.biz/v2/js/payment-method-component-dynamic.html')] }, { id: 'wspay-form-hosted-page', psp: 'wspay', kinds: ['document', 'frame', 'iframe', 'form'], hostname: /^form\.wspay\.biz$/, pathname: /^\/authorization(?:\.aspx)?$/, origin: 'https://form.wspay.biz', path_pattern: '/authorization{,.aspx}',
+    sources: [wspaySource('https://docs.wspay.info/wspayform')],
+    variant_unverified: 'The implemented WSPay adapter covers the WSPay Components card confirm on proxy.wspay.biz; the WSPay Form hosted page posts the card to form.wspay.biz and is not admitted.' }, { id: 'monri-components-script', psp: 'monri', kinds: ['script'], hostname: /^ipg\.monri\.com$/, pathname: /^\/dist\/(?:components|monri)\.js$/, origin: 'https://ipg.monri.com', path_pattern: '/dist/{components,monri}.js',
+    sources: [wspaySource('https://ipg.monri.com/en/documentation/components'), wspaySource('https://ipg.monri.com/dist/components.js')],
+    variant_unverified: 'Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.' }, { id: 'monri-components-card-frame', psp: 'monri', kinds: ['frame', 'iframe', 'document'], hostname: /^ipg\.monri\.com$/, pathname: /^\/v2\/js\/payment-(?:method-component-dynamic|component)\.html$/, origin: 'https://ipg.monri.com', path_pattern: '/v2/js/payment-{method-component-dynamic,component}.html',
+    sources: [wspaySource('https://ipg.monri.com/dist/components.js')],
+    variant_unverified: 'Monri Components on ipg.monri.com confirm the card on Monri’s own hosts, which need the relay route; only the WSPay Components confirm on proxy.wspay.biz is implemented.' });
+// Shiji STS behind the MyCheck Wallet V3 (dark: its processor declares a capability, so the bundled
+// catalog does not list it and these signals stay unknown until a client opts in). The in-page
+// wallet (main.js) and the STS proxy script identify the processor. The wallet's iframe integration
+// (sdk.js, wallet-iframe.html) and Shiji's ps-js-apm library identify it too, but no Vault mode covers
+// them, so each keeps the result unknown through `variant_unverified`. Sources: the reviewed bundles
+// (sts.proxy.v2.1.js sha256 aee72b81...346ade84, wallet main.js 7d28c3bf...03580fdb).
+const shijiSources = [
+    { kind: 'primary_source', reference: 'https://cdn.shijipayment.com/sts/sts.proxy.v2.1.js', reviewed_on: '2026-09-25' },
+    { kind: 'primary_source', reference: 'https://wallet-sdk-v3.mycheckapp.com/latest/static/js/main.js', reviewed_on: '2026-09-25' },
+];
+RULES.push({ id: 'mycheck-wallet-v3-script', psp: 'shiji_sts', kinds: ['script'], hostname: /^wallet-sdk-v3\.mycheckapp\.com$/, pathname: /^\/[A-Za-z0-9._-]+\/static\/js\/main\.js$/, origin: 'https://wallet-sdk-v3.mycheckapp.com', path_pattern: '/:version/static/js/main.js',
+    sources: shijiSources }, { id: 'shiji-sts-proxy-script', psp: 'shiji_sts', kinds: ['script'], hostname: /^cdn\.shijipayment\.com$/, pathname: /^\/sts\/sts\.proxy\.v2\.1\.js$/, origin: 'https://cdn.shijipayment.com', path_pattern: '/sts/sts.proxy.v2.1.js',
+    sources: shijiSources }, { id: 'mycheck-wallet-v3-iframe-sdk', psp: 'shiji_sts', kinds: ['script'], hostname: /^wallet-sdk-v3\.mycheckapp\.com$/, pathname: /^\/[A-Za-z0-9._-]+\/sdk\.js$/, origin: 'https://wallet-sdk-v3.mycheckapp.com', path_pattern: '/:version/sdk.js',
+    sources: [{ kind: 'primary_source', reference: 'https://wallet-sdk-v3.mycheckapp.com/latest/sdk.js', reviewed_on: '2026-09-25' }],
+    variant_unverified: 'The MyCheck wallet iframe integration sends the card from MyCheck\'s own frame; only the in-page wallet (main.js) is admitted.' }, { id: 'mycheck-wallet-v3-iframe', psp: 'shiji_sts', kinds: ['frame', 'iframe', 'document'], hostname: /^wallet-sdk-v3\.mycheckapp\.com$/, pathname: /^\/wallet-iframe\.html$/, origin: 'https://wallet-sdk-v3.mycheckapp.com', path_pattern: '/wallet-iframe.html',
+    sources: [{ kind: 'primary_source', reference: 'https://wallet-sdk-v3.mycheckapp.com/wallet-iframe.html', reviewed_on: '2026-09-25' }],
+    variant_unverified: 'The MyCheck wallet iframe integration sends the card from MyCheck\'s own frame; only the in-page wallet (main.js) is admitted.' }, { id: 'shiji-ps-js-apm-script', psp: 'shiji_sts', kinds: ['script'], hostname: /^cdn\.shijipayment\.com$/, pathname: /^\/libraries\/shijipayments\.latest\.min\.js$/, origin: 'https://cdn.shijipayment.com', path_pattern: '/libraries/shijipayments.latest.min.js',
+    sources: [{ kind: 'primary_source', reference: 'https://cdn.shijipayment.com/libraries/shijipayments.latest.min.js', reviewed_on: '2026-09-25' }],
+    variant_unverified: 'Shiji\'s ps-js-apm library can take its STS key and URL from server configuration; only the MyCheck Wallet V3 path under the pinned key is admitted.' });
+// Amadeus Payment Platform (Outpayce), reviewed from Amadeus's public Checkout Web SDK (the 7.1.0
+// bundle, its form-field pages and user guide under prd.payment.amadeus.com/checkout/sdk/) and the
+// Data Collection Page script on paypages.payment.amadeus.com on 2026-09-25. The SDK loads its tunnel,
+// pan and cvv frames from the same versioned directory; the DCP page is framed from /ATPDCP/land/.
+// The processor ships dark: until the bundled catalog serves amadeus_checkout, a lone Amadeus signal
+// names the processor and stays unknown.
+const amadeusSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+RULES.push({ id: 'amadeus-checkout-sdk-script', psp: 'amadeus_checkout', kinds: ['script'], hostname: /^prd\.payment\.amadeus\.com$/, pathname: /^\/checkout\/sdk\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/sdk-es(?:5|2015|2022)\.js$/, origin: 'https://prd.payment.amadeus.com', path_pattern: '/checkout/sdk/:version/sdk-{es5,es2015,es2022}.js',
+    sources: [amadeusSource('https://prd.payment.amadeus.com/checkout/sdk/7.1.0/sdk-es2022.js'), amadeusSource('https://prd.payment.amadeus.com/checkout/sdk/manifest.json')] }, { id: 'amadeus-checkout-sdk-frame', psp: 'amadeus_checkout', kinds: ['document', 'frame', 'iframe'], hostname: /^prd\.payment\.amadeus\.com$/, pathname: /^\/checkout\/sdk\/[0-9]{1,3}\.[0-9]{1,3}\.[0-9]{1,3}\/form-fields\/(?:tunnel|pan|cvv)\.html$/, origin: 'https://prd.payment.amadeus.com', path_pattern: '/checkout/sdk/:version/form-fields/{tunnel,pan,cvv}.html',
+    sources: [amadeusSource('https://prd.payment.amadeus.com/checkout/sdk/7.1.0/form-fields/tunnel.html'), amadeusSource('https://github.com/outpaycelab/outpayce-checkout-sdk-web/blob/main/userguide.md')] }, { id: 'amadeus-data-collection-page', psp: 'amadeus_checkout', kinds: ['document', 'frame', 'iframe'], hostname: /^paypages\.payment\.amadeus\.com$/, pathname: /^\/1ASIATP\/ATPDCP\/land\/?$/, origin: 'https://paypages.payment.amadeus.com', path_pattern: '/1ASIATP/ATPDCP/land/',
+    sources: [amadeusSource('https://paypages.payment.amadeus.com/1ASIATP/ATPDCP/static/dcppages/standard/js/standard-acb53a79a0.min.js')] });
+// Worldline Connect MyCheckout (dark: its processor declares a capability, so the bundled catalog
+// does not list it and these signals stay unknown until a client opts in). The hosted payment page
+// itself identifies the processor: /checkout/<hosted checkout> on the `payment.` subdomain of a
+// data center (pay1 Europe, pay2 US), and its card form's action, /checkout. Read from Worldline's
+// template bundle and a recorded MyCheckout card page (Aveda Belgium, Sep 2025).
+const worldlineSources = [
+    { kind: 'primary_source', reference: 'https://assets.pay1.checkout.worldline-solutions.com/templates/generic/responsive/wro/html-footer.js', reviewed_on: '2026-09-30' },
+    { kind: 'official_documentation', reference: 'https://docs.connect.worldline-solutions.com/documentation/hosted-payment-pages/', reviewed_on: '2026-09-30' },
+];
+RULES.push({ id: 'worldline-mycheckout-page', psp: 'worldline_mycheckout', kinds: ['document', 'frame', 'iframe'], hostname: /^payment\.pay1\.checkout\.worldline-solutions\.com$/,
+    pathname: /^\/checkout\/(?:payment-product-details\/)?[1-9][0-9]{0,9}-[0-9a-f]{32}:[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}:[0-9a-f]{32}$/,
+    origin: 'https://payment.pay1.checkout.worldline-solutions.com', path_pattern: '/checkout/{payment-product-details/}:hosted_checkout', sources: worldlineSources }, { id: 'worldline-mycheckout-card-form', psp: 'worldline_mycheckout', kinds: ['form'], hostname: /^payment\.pay1\.checkout\.worldline-solutions\.com$/, pathname: /^\/checkout$/,
+    origin: 'https://payment.pay1.checkout.worldline-solutions.com', path_pattern: '/checkout', sources: worldlineSources });
+// A processor that ships dark (its definition declares a capability) is left out of the bundled
+// catalog. Datatrans's discovery rules wait with it: they join RULES only once KNOWN_PSPS, the
+// bundled catalog's processors, lists its psp. Until then its assets are not evidence, so a page
+// that loads them, alone or beside another processor's SDK, reads exactly as it did before the
+// processor existed. (The dark GMO, CyberSource Flex, Juspay, Pelecard, ACI, CreditGuard,
+// Primer, Payrails, Elavon Converge, Worldpay eProtect, WSPay, Shiji STS, Amadeus and Worldline
+// MyCheckout rules above join RULES now, and their signals stay unknown.)
+const SERVED_ONLY_RULES = [];
+// Datatrans / PCI Proxy Secure Fields 2.0.0, reviewed from Datatrans's public library and iframe
+// script (pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.js and .min.js, field.js 3.24.602)
+// and the PCI Proxy docs on 2026-09-25. The library loads the card and CVV iframes from the
+// paymentField document on the same host. Dark behind datatrans_secure_fields_tokenize.
+const datatransSource = (reference) => ({ kind: 'primary_source', reference, reviewed_on: '2026-09-25' });
+for (const [suffix, hostname, origin] of [['', /^pay\.datatrans\.com$/, 'https://pay.datatrans.com'],
+    ['-sandbox', /^pay\.sandbox\.datatrans\.com$/, 'https://pay.sandbox.datatrans.com']]) {
+    SERVED_ONLY_RULES.push({ id: `datatrans-secure-fields-script${suffix}`, psp: 'datatrans', kinds: ['script'], hostname, pathname: /^\/upp\/payment\/js\/secure-fields-2\.0\.0(?:\.min)?\.js$/, origin, path_pattern: '/upp/payment/js/secure-fields-2.0.0{,.min}.js',
+        sources: [datatransSource('https://pay.datatrans.com/upp/payment/js/secure-fields-2.0.0.js'), datatransSource('https://docs.pci-proxy.com/docs/secure-fields-quick-start')] }, { id: `datatrans-secure-fields-frame${suffix}`, psp: 'datatrans', kinds: ['document', 'frame', 'iframe'], hostname, pathname: /^\/upp\/payment\/SecureFields\/paymentField$/, origin, path_pattern: '/upp/payment/SecureFields/paymentField',
+        sources: [datatransSource('https://pay.datatrans.com/upp/payment/SecureFields/field.js'), datatransSource('https://docs.datatrans.ch/docs/secure-fields')] });
+}
+RULES.push(...SERVED_ONLY_RULES.filter(rule => KNOWN_PSPS.includes(rule.psp)));
 // Keep sandbox evidence truthful instead of labelling it with a production origin.
 for (const [baseId, suffix, hostname, origin] of [
     ['gmo-mp-token-script', 'test', /^stg\.static\.mul-pay\.jp$/, 'https://stg.static.mul-pay.jp'],
@@ -106,6 +281,23 @@ for (const [baseId, suffix, hostname, origin] of [
     ['gmo-link-hosted-page', 'test', /^pt01\.mul-pay\.jp$/, 'https://pt01.mul-pay.jp'],
     ['cybersource-flex-microform-script', 'test', /^testflex\.cybersource\.com$/, 'https://testflex.cybersource.com'],
     ['cybersource-flex-microform-field', 'test', /^testflex\.cybersource\.com$/, 'https://testflex.cybersource.com'],
+    ['worldpay-eprotect-js-api', 'prelive', /^request\.eprotect\.vantivprelive\.com$/, 'https://request.eprotect.vantivprelive.com'],
+    ['worldpay-eprotect-iframe-client', 'prelive', /^request\.eprotect\.vantivprelive\.com$/, 'https://request.eprotect.vantivprelive.com'],
+    ['worldpay-eprotect-payframe', 'prelive', /^request\.eprotect\.vantivprelive\.com$/, 'https://request.eprotect.vantivprelive.com'],
+    ['mycheck-wallet-v3-script', 'sandbox', /^wallet-sdk-v3-sandbox\.mycheckapp\.com$/, 'https://wallet-sdk-v3-sandbox.mycheckapp.com'],
+    ['mycheck-wallet-v3-script', 'test', /^wallet-sdk-v3-test\.mycheckapp\.com$/, 'https://wallet-sdk-v3-test.mycheckapp.com'],
+    ['shiji-sts-proxy-script', 'dev', /^cdn\.shijipayment\.dev$/, 'https://cdn.shijipayment.dev'],
+    ['mycheck-wallet-v3-iframe-sdk', 'sandbox', /^wallet-sdk-v3-sandbox\.mycheckapp\.com$/, 'https://wallet-sdk-v3-sandbox.mycheckapp.com'],
+    ['mycheck-wallet-v3-iframe-sdk', 'test', /^wallet-sdk-v3-test\.mycheckapp\.com$/, 'https://wallet-sdk-v3-test.mycheckapp.com'],
+    ['mycheck-wallet-v3-iframe', 'sandbox', /^wallet-sdk-v3-sandbox\.mycheckapp\.com$/, 'https://wallet-sdk-v3-sandbox.mycheckapp.com'],
+    ['mycheck-wallet-v3-iframe', 'test', /^wallet-sdk-v3-test\.mycheckapp\.com$/, 'https://wallet-sdk-v3-test.mycheckapp.com'],
+    // MyCheckout's US data center and the pre-production twins of both.
+    ['worldline-mycheckout-page', 'pay2', /^payment\.pay2\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-page', 'preprod', /^payment\.pay1\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay1.preprod.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-page', 'pay2-preprod', /^payment\.pay2\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.preprod.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-card-form', 'pay2', /^payment\.pay2\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-card-form', 'preprod', /^payment\.pay1\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay1.preprod.checkout.worldline-solutions.com'],
+    ['worldline-mycheckout-card-form', 'pay2-preprod', /^payment\.pay2\.preprod\.checkout\.worldline-solutions\.com$/, 'https://payment.pay2.preprod.checkout.worldline-solutions.com'],
     ['square-web-sdk', 'sandbox', /^sandbox\.web\.squarecdn\.com$/, 'https://sandbox.web.squarecdn.com'],
     ['paysafe-js', 'test', /^hosted\.test\.paysafe\.com$/, 'https://hosted.test.paysafe.com'],
     ['worldpay-checkout-sdk', 'try', /^try\.access\.worldpay\.com$/, 'https://try.access.worldpay.com'],
@@ -115,6 +307,11 @@ for (const [baseId, suffix, hostname, origin] of [
     ['authorize-net-sim-hosted-form', 'secure2', /^secure2\.authorize\.net$/, 'https://secure2.authorize.net'],
     ['worldpay-hosted-payment-page', 'test', /^secure-test\.worldpay\.com$/, 'https://secure-test.worldpay.com'],
     ['rapyd-hosted-checkout-page', 'sandbox', /^sandboxcheckout\.rapyd\.net$/, 'https://sandboxcheckout.rapyd.net'],
+    // The pdt and uat copies of the SDK are byte-identical to prd.
+    ['amadeus-checkout-sdk-script', 'pdt', /^pdt\.payment\.amadeus\.com$/, 'https://pdt.payment.amadeus.com'],
+    ['amadeus-checkout-sdk-script', 'uat', /^uat\.payment\.amadeus\.com$/, 'https://uat.payment.amadeus.com'],
+    ['amadeus-checkout-sdk-frame', 'pdt', /^pdt\.payment\.amadeus\.com$/, 'https://pdt.payment.amadeus.com'],
+    ['amadeus-checkout-sdk-frame', 'uat', /^uat\.payment\.amadeus\.com$/, 'https://uat.payment.amadeus.com'],
     // Adyen's regional live hosts (docs.adyen.com/development-resources/live-endpoints/).
     ['adyen-secured-fields-live', 'us', /^checkoutshopper-live-us\.adyen\.com$/, 'https://checkoutshopper-live-us.adyen.com'],
     ['adyen-secured-fields-live', 'au', /^checkoutshopper-live-au\.adyen\.com$/, 'https://checkoutshopper-live-au.adyen.com'],
@@ -125,6 +322,38 @@ for (const [baseId, suffix, hostname, origin] of [
     ['fiserv-commercehub-payment-fields', 'cert', /^commercehub-checkout-cert\.fiservapps\.com$/, 'https://commercehub-checkout-cert.fiservapps.com'],
     ['fiserv-commercehub-checkout-script', 'cert', /^commercehub-checkout-cert\.fiservapps\.com$/, 'https://commercehub-checkout-cert.fiservapps.com'],
     ['fiserv-secure-data-capture-frame', 'cert', /^commercehub-secure-data-capture-cert\.fiservapps\.com$/, 'https://commercehub-secure-data-capture-cert.fiservapps.com'],
+    // Verifone's other regions and its two sandboxes serve the same verifone.js.
+    ['verifone-secure-card-capture-script', 'emea', /^emea\.jsclient\.verifone\.cloud$/, 'https://emea.jsclient.verifone.cloud'],
+    ['verifone-secure-card-capture-script', 'uscst', /^uscst\.jsclient\.vficloud\.net$/, 'https://uscst.jsclient.vficloud.net'],
+    ['verifone-secure-card-capture-script', 'cst', /^cst\.jsclient\.vficloud\.net$/, 'https://cst.jsclient.vficloud.net'],
+    // Juspay's sandbox, and api.juspay.io, the host the Session API's own sample payment link uses.
+    ['juspay-hypercheckout-payment-page', 'sandbox', /^sandbox\.juspay\.in$/, 'https://sandbox.juspay.in'],
+    ['juspay-hypercheckout-payment-page', 'io', /^api\.juspay\.io$/, 'https://api.juspay.io'],
+    // Older Pelecard terminals serve the same page and scripts from gateway20 (live and test terminals alike).
+    ['pelecard-payment-page', 'gateway20', /^gateway20\.pelecard\.biz$/, 'https://gateway20.pelecard.biz'],
+    ['pelecard-payment-script', 'gateway20', /^gateway20\.pelecard\.biz$/, 'https://gateway20.pelecard.biz'],
+    // ACI serves the same widget from its second live host and its two INTEGRATOR_TEST hosts.
+    ['aci-copyandpay-widget-script', 'oppwa', /^oppwa\.com$/, 'https://oppwa.com'],
+    ['aci-copyandpay-widget-script', 'eu-test', /^eu-test\.oppwa\.com$/, 'https://eu-test.oppwa.com'],
+    ['aci-copyandpay-widget-script', 'test', /^test\.oppwa\.com$/, 'https://test.oppwa.com'],
+    ['aci-copyandpay-card-frame', 'oppwa', /^oppwa\.com$/, 'https://oppwa.com'],
+    ['aci-copyandpay-card-frame', 'eu-test', /^eu-test\.oppwa\.com$/, 'https://eu-test.oppwa.com'],
+    ['aci-copyandpay-card-frame', 'test', /^test\.oppwa\.com$/, 'https://test.oppwa.com'],
+    // CreditGuard's second production PPS host and its UAT host.
+    ['creditguard-pps-hosted-page', 'pps2', /^pps2\.creditguard\.co\.il$/, 'https://pps2.creditguard.co.il'],
+    ['creditguard-pps-template-script', 'pps2', /^pps2\.creditguard\.co\.il$/, 'https://pps2.creditguard.co.il'],
+    ['creditguard-pps-hosted-page', 'uat', /^ppsuat\.creditguard\.co\.il$/, 'https://ppsuat.creditguard.co.il'],
+    ['creditguard-pps-template-script', 'uat', /^ppsuat\.creditguard\.co\.il$/, 'https://ppsuat.creditguard.co.il'],
+    // Converge's demo environment serves the same page and bundles.
+    ['elavon-converge-hosted-payment-page', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['elavon-converge-hpp-bundle', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['elavon-converge-lightbox', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['elavon-converge-checkout-js', 'demo', /^api\.demo\.convergepay\.com$/, 'https://api.demo.convergepay.com'],
+    ['wspay-components-script', 'test', /^proxy-test\.wspay\.biz$/, 'https://proxy-test.wspay.biz'],
+    ['wspay-components-card-frame', 'test', /^proxy-test\.wspay\.biz$/, 'https://proxy-test.wspay.biz'],
+    ['wspay-form-hosted-page', 'test', /^formtest\.wspay\.biz$/, 'https://formtest.wspay.biz'],
+    ['monri-components-script', 'test', /^ipgtest\.monri\.com$/, 'https://ipgtest.monri.com'],
+    ['monri-components-card-frame', 'test', /^ipgtest\.monri\.com$/, 'https://ipgtest.monri.com'],
 ]) {
     RULES.push({ ...RULES.find(rule => rule.id === baseId), id: `${baseId}-${suffix}`, hostname, origin });
 }
@@ -577,14 +806,14 @@ export function getCheckoutPreflightSchemas() {
             schema_version: { const: 1 }, profile_version: text, catalog_version: { const: CHECKOUT_PREFLIGHT_CATALOG_VERSION }, integration,
             processor_entries: { type: 'array', maxItems: 256, items: {
                     type: 'object', additionalProperties: false, required: ['psp', 'mode', 'scenario', 'status'], properties: {
-                        psp: { enum: KNOWN_PSPS }, mode: { enum: ['token', 'cse', 'hosted_form'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
+                        psp: { enum: KNOWN_PSPS }, mode: { enum: ['token', 'cse', 'hosted_form', 'device_encrypt'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
                         limitations: { type: 'array', maxItems: 16, items: { type: 'string', maxLength: 256, pattern: '^[^\\u0000-\\u001f]*$' } },
                     },
                 } },
             expires_at: { type: 'string', format: 'date-time', maxLength: 40 }, entries: { type: 'array', maxItems: 256, items: {
                     type: 'object', additionalProperties: false, required: ['flow', 'operation', 'operation_version', 'mode', 'scenario', 'status'], properties: {
                         flow: { enum: FLOWS.map(flow => flow.id) }, operation: { enum: FLOWS.map(flow => flow.operation) }, operation_version: { const: 1 },
-                        mode: { enum: ['token', 'cse', 'hosted_form'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
+                        mode: { enum: ['token', 'cse', 'hosted_form', 'device_encrypt'] }, scenario: { enum: SCENARIOS }, status: { enum: ['supported', 'unsupported'] },
                         limitations: { type: 'array', maxItems: 16, items: { type: 'string', maxLength: 256, pattern: '^[^\\u0000-\\u001f]*$' } },
                     },
                 } },
@@ -598,7 +827,7 @@ export function getCheckoutPreflightSchemas() {
     const result = { $schema: 'https://json-schema.org/draft/2020-12/schema', type: 'object', additionalProperties: false,
         required: ['schema_version', 'catalog_version', 'integration', 'scenario', 'scenario_defaulted', 'psp', 'flow', 'mode', 'status', 'support_scope', 'checkout_flow_status', 'candidates', 'reason_codes', 'limitations', 'missing_evidence', 'observation', 'scope', 'merchant_confirmation_required'], properties: {
             schema_version: { const: 1 }, catalog_version: { const: CHECKOUT_PREFLIGHT_CATALOG_VERSION }, integration,
-            scenario: { enum: SCENARIOS }, scenario_defaulted: { type: 'boolean' }, psp: { type: ['string', 'null'] }, flow: { type: ['string', 'null'] }, mode: { enum: ['token', 'cse', 'hosted_form', null] },
+            scenario: { enum: SCENARIOS }, scenario_defaulted: { type: 'boolean' }, psp: { type: ['string', 'null'] }, flow: { type: ['string', 'null'] }, mode: { enum: ['token', 'cse', 'hosted_form', 'device_encrypt', null] },
             support_scope: { enum: ['processor_integration', 'checkout_flow', null] }, checkout_flow_status: { enum: ['identified', 'unknown', 'ambiguous'] },
             status: { enum: ['supported', 'unsupported', 'unknown'] }, candidates: { type: 'array', items: { type: 'object', additionalProperties: false, required: ['psp', 'relevance', 'evidence'], properties: {
                         psp: { type: 'string' }, relevance: { enum: ['active', 'undetermined'] }, evidence: { type: 'array', items: evidence },

package/dist/preparation.d.ts

@@ -14,8 +14,11 @@ export declare class PreparationGate {
     private expiryTimer?;
     constructor(opts: AttachOptions, lifecycle: CheckoutLifecycle, readDocumentUrl: () => Promise<string>);
     private prepare;
-    /** Called for every recognized card mutation, before any await or local retry guard. */
-    claim(requestUrl: string, requestBody?: string | null, requestHeaders?: Record<string, string>): PreparedCheckout | undefined;
+    /**
+     * Called for every recognized card request, before any await or local retry guard. The request's
+     * own method is what binds: a POST for most processors, the registration GET for Worldpay eProtect.
+     */
+    claim(requestUrl: string, requestMethod: string, requestBody?: string | null, requestHeaders?: Record<string, string>): PreparedCheckout | undefined;
     assertDocument(): Promise<void>;
     private readDocument;
     isEngaged(): boolean;

package/dist/preparation.js

@@ -1,6 +1,6 @@
 import { CheckoutPreparationError } from './client.js';
-import { validAmountInput } from './client.js';
-import { matchesPreparation, validPreparationEnvironment, preparationEndpoint } from './prepared-processor.js';
+import { amountRefusal, validAmountInput } from './client.js';
+import { matchesPreparation, validPreparationEnvironment, preparationEndpoint, preparationBindsByShape, preparationRequestMethod, preparedRequestRefusal } from './prepared-processor.js';
 /** A local, one-use rendezvous. It never starts or retries a merchant request. */
 export class PreparationGate {
     opts;
@@ -41,7 +41,17 @@ export class PreparationGate {
                 throw new CheckoutPreparationError(null, 'unsupported_processor');
             // A Fiserv checkout's merchantProfile names a key pin, which prepareCheckout checks: its
             // capture endpoint is checked below like any processor-hosted checkout's.
-            if (options.merchantProfile !== undefined && options.psp !== 'fiserv') {
+            if (options.psp === 'verifone') {
+                // A Verifone merchant's own server: a profile the last sync served, which this
+                // attachment pauses, enabled for this client.
+                const profile = typeof this.opts.vault.verifoneProfile === 'function' && typeof options.merchantProfile === 'string'
+                    ? this.opts.vault.verifoneProfile(options.merchantProfile) : null;
+                if (!profile)
+                    throw new CheckoutPreparationError(null, 'processor_interception_unavailable');
+                if (profile.status !== 'enabled')
+                    throw new CheckoutPreparationError(null, 'unsupported_checkout');
+            }
+            else if (options.merchantProfile !== undefined && options.psp !== 'fiserv') {
                 // An Adyen merchant's own endpoint: a profile this build reviewed, which
                 // this attachment pauses, and one Agentcard turned on for this client.
                 const profile = typeof this.opts.vault.merchantProfile === 'function' && typeof options.merchantProfile === 'string'
@@ -55,11 +65,19 @@ export class PreparationGate {
             }
             else {
                 const tokenizer = preparationEndpoint(options.psp, options.environment);
-                if (!this.opts.vault.isCardRequest(tokenizer, 'POST'))
+                // ACI's card-number request names a checkout id the merchant mints at Pay time, and a GET card
+                // request (Worldpay eProtect) is recognized by its whole query, which the page has not written
+                // yet, so no prepared URL is ever their card request: ask whether the registry serves the
+                // processor at all instead. A preparation the adapters would never pause could never bind.
+                const interceptable = preparationBindsByShape(options.psp) || preparationRequestMethod(options.psp) === 'GET'
+                    ? typeof this.opts.vault.recognizesProcessor === 'function' && this.opts.vault.recognizesProcessor(options.psp)
+                    : this.opts.vault.isCardRequest(tokenizer, 'POST');
+                if (!interceptable)
                     throw new CheckoutPreparationError(null, 'processor_interception_unavailable');
             }
-            if (!validAmountInput(this.opts.amount) || this.opts.amount === 0 || !/^[a-z]{3}$/i.test(this.opts.currency ?? ''))
-                throw new CheckoutPreparationError(null, 'amount_required');
+            if (!validAmountInput(this.opts.amount) || this.opts.amount === 0 || !/^[a-z]{3}$/i.test(this.opts.currency ?? '')) {
+                throw new CheckoutPreparationError(null, 'amount_required', undefined, this.opts.amount != null && !validAmountInput(this.opts.amount) ? amountRefusal(this.opts.amount, this.opts.currency) : undefined);
+            }
             if (signal.aborted)
                 throw new CheckoutPreparationError(null, 'cancelled');
             this.documentUrl = await this.readDocument();
@@ -109,8 +127,11 @@ export class PreparationGate {
         }
         // Keep the signal listener after ready: caller cancellation retires the handle too.
     }
-    /** Called for every recognized card mutation, before any await or local retry guard. */
-    claim(requestUrl, requestBody, requestHeaders) {
+    /**
+     * Called for every recognized card request, before any await or local retry guard. The request's
+     * own method is what binds: a POST for most processors, the registration GET for Worldpay eProtect.
+     */
+    claim(requestUrl, requestMethod, requestBody, requestHeaders) {
         this.observedRequest = true;
         if (this.state === 'unused')
             return undefined;
@@ -121,8 +142,13 @@ export class PreparationGate {
         const prepared = this.prepared;
         // A merchant-hosted preparation claims only its profile's reviewed card request.
         // A Fiserv preparation claims only a capture under the key pin it names.
-        if (Date.parse(prepared.expiresAt) <= Date.now() || !matchesPreparation(prepared, requestUrl, 'POST', requestBody, requestHeaders)) {
-            const reason = Date.parse(prepared.expiresAt) <= Date.now() ? 'expired' : 'checkout_changed';
+        // A CreditGuard preparation claims only a submit to the page it framed.
+        // A Worldpay eProtect preparation claims only its registration GET naming the paypageId it carries.
+        if (Date.parse(prepared.expiresAt) <= Date.now() || !matchesPreparation(prepared, requestUrl, requestMethod, requestBody, requestHeaders)) {
+            // An Amadeus request payment-core refuses names its own reason (preparedRequestRefusal), so
+            // Air France's split expiry reads amadeus_merchant_held_expiry rather than a changed checkout.
+            const reason = Date.parse(prepared.expiresAt) <= Date.now() ? 'expired'
+                : preparedRequestRefusal(prepared.psp, prepared.environment, requestUrl, requestBody, requestHeaders, prepared.merchantOrigin);
             this.invalidate(reason);
             throw new CheckoutPreparationError(prepared.id, reason);
         }

package/dist/prepared-processor.d.ts

@@ -1,23 +1,84 @@
-export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly' | 'spreedly' | 'adyen' | 'checkout_com' | 'paysafe' | 'fiserv' | 'cybersource_flex';
+/**
+ * aci: prepared only. ACI's widget gives up on Pay after 60 seconds, too soon for a prompt that
+ * waits on a person, so the cardholder approves before the agent clicks Pay. Its environments are
+ * its live hosts (production) and its INTEGRATOR_TEST hosts (sandbox).
+ *
+ * worldpay_eprotect: prepared only. Its merchants give up on the registration 10 to 15 seconds
+ * after Pay (5 before the vendor script fails over), too soon for a prompt that waits on a person,
+ * so the cardholder approves before the agent clicks Pay. Its environments are its two card hosts:
+ * the production primary and the pre-live host (sandbox).
+ *
+ * amadeus_checkout: prepared only. Its SDK tunnel abandons the add after 30 seconds, too soon
+ * for an approval after Pay. Its environments are its hosts: paypages (production) and
+ * paypages.test (sandbox).
+ */
+export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly' | 'spreedly' | 'adyen' | 'checkout_com' | 'paysafe' | 'fiserv' | 'cybersource_flex' | 'aci' | 'creditguard' | 'worldpay_eprotect' | 'amadeus_checkout' | 'verifone';
 export type PreparationEnvironment = 'production' | 'sandbox' | 'shared';
 /**
  * How the approved card reaches the processor: the device's own request (token), or
  * ciphertext the device produces for this browser to send (cse: Adyen's four encrypted
- * fields, or Fiserv's Secure Data Capture envelope under a key Agentcard pinned).
+ * fields, Fiserv's Secure Data Capture envelope under a key Agentcard pinned, or a
+ * verifone.js blob under one).
  */
 export type PreparationMode = 'token' | 'cse';
 export declare function preparationMode(psp: string): PreparationMode;
+/** The method of the native card request a preparation binds: the registration GET for Worldpay eProtect, a POST for every other processor. */
+export declare function preparationRequestMethod(psp: string): 'GET' | 'POST';
 /**
  * Shared endpoint processors cannot attest test/live mode from their URL or key prefix.
  * Adyen can: test and live are separate hosts and key prefixes. Fiserv's are separate
  * hosts too: connect (production) and connect-cert (sandbox). So are CyberSource
  * Flex's: flex.cybersource.com is live, testflex.cybersource.com is test, and each has
- * its own signing keys.
+ * its own signing keys. A Verifone preparation pays in the environment of the key its reviewed
+ * profile pins.
  */
 export declare function validPreparationEnvironment(psp: string, environment: string): boolean;
+/**
+ * ACI's prepared endpoint, the literal the API names (backend checkout-prepared-processor.ts): its
+ * environment's primary widget host and a checkout id that can never be real, since the merchant
+ * mints the checkout only at Pay time. The bind matches the card-number request by host
+ * environment and shape instead (matchesPreparedRequest).
+ */
+export declare function aciPreparationUrl(environment: PreparationEnvironment): string;
+/**
+ * A processor whose card request names an id the merchant mints only at Pay time (ACI's checkout
+ * id), so no URL can be prepared in advance: whether the adapters can intercept it is asked of the
+ * registry (VaultClient.recognizesProcessor), not of the prepared endpoint.
+ */
+export declare function preparationBindsByShape(psp: string): boolean;
+/**
+ * The endpoint a CreditGuard preparation stands for, per environment, as the API advertises it: the
+ * PPS card submit on pps (production) or ppsuat (sandbox) under the nil transaction id. It only
+ * proves the synced registry recognizes CreditGuard. A real submit names the txId of the page the
+ * preparation framed and may be on pps2, so it is matched by shape (matchesPreparedRequest), never
+ * by equality with this URL.
+ */
+export declare function creditguardPreparationUrl(environment: 'production' | 'sandbox'): string;
 export declare function preparationEndpoint(psp: PreparationProcessor, environment: PreparationEnvironment): string;
-/** Processor identity and environment are part of the device's prior consent. */
-export declare function matchesPreparedRequest(psp: PreparationProcessor, environment: PreparationEnvironment, requestUrl: string, method: string, body?: string | null, headers?: Record<string, string>): boolean;
+/**
+ * What a preparation binds beyond its processor and environment. CreditGuard: the merchant page the
+ * cardholder approved (the submit's ppDomain names it) and the hosted page the checkout framed (the
+ * submit must pay that page's own transaction). Worldpay eProtect: the paypageId naming the Worldpay
+ * merchant the registration is for, fixed before its page sent anything. Every other processor
+ * ignores all three.
+ */
+export interface PreparedRequestBinding {
+    merchantOrigin?: string;
+    paymentPageUrl?: string;
+    paypageId?: string | null;
+}
+/**
+ * The approved merchant page's host, with its port if it has one: what the Amadeus SDK sends in its
+ * Amadeus-Checkout-Sdk-Host header (location.host). Null for anything but an http(s) origin. The
+ * API's twin (checkout-prepared-processor.ts) reads the same value.
+ */
+export declare function merchantHostOf(merchantOrigin: string | null | undefined): string | null;
+/**
+ * Processor identity and environment are part of the device's prior consent. `binding` carries what
+ * the preparation fixed beyond them (PreparedRequestBinding); Amadeus binds its SDK's Host header to
+ * `binding.merchantOrigin`, the origin the cardholder approved, and fails without one.
+ */
+export declare function matchesPreparedRequest(psp: PreparationProcessor, environment: PreparationEnvironment, requestUrl: string, method: string, body?: string | null, headers?: Record<string, string>, binding?: PreparedRequestBinding): boolean;
 /**
  * The one request a merchant-hosted preparation pays: the reviewed profile's
  * card request itself (classifyMerchantRequest pauses it), at the profile's exact
@@ -34,6 +95,11 @@ export declare function matchesPreparedMerchantRequest(profileId: string, reques
  * the one its envelope's key is pinned as for its endpoint and merchant, must be that
  * pin, as the API's bind requires. Two pins in one environment (a merchant's old and new
  * keys during a rotation) never spend each other's approval. No other processor names one.
+ * A CreditGuard preparation binds the merchant page it approved and the page it framed
+ * (merchantOrigin, paymentPageUrl), which matchesPreparedRequest holds the submit to.
+ * A Worldpay eProtect preparation names the paypageId its registration must carry.
+ * An Amadeus preparation binds its SDK's Host header to the page the cardholder approved
+ * (merchantOrigin), as the API does.
  */
 export declare function matchesPreparation(preparation: {
     psp: PreparationProcessor;
@@ -42,4 +108,17 @@ export declare function matchesPreparation(preparation: {
     sandboxDeclaration?: {
         endpoint: string;
     };
+    merchantOrigin?: string;
+    paymentPageUrl?: string;
+    paypageId?: string;
 }, requestUrl: string, method: string, body?: string | null, headers?: Record<string, string>): boolean;
+/**
+ * The reason a claim reports for a request its preparation does not match. An Amadeus preparation
+ * names what payment-core's Amadeus check refused on its own environment's card URL, as
+ * `amadeus_<reason>`: Air France's and KLM's add, whose expiry their own form keeps, is
+ * `amadeus_merchant_held_expiry`, every Data Collection Page store is
+ * `amadeus_dcp_field_config_unreviewed` until a merchant's field config is reviewed, and a Host
+ * header that does not name the approved page is `amadeus_header_binding`. Everything else, another
+ * processor's request or the other environment's host included, is `checkout_changed`.
+ */
+export declare function preparedRequestRefusal(psp: PreparationProcessor, environment: PreparationEnvironment, requestUrl: string, body?: string | null, headers?: Record<string, string>, merchantOrigin?: string | null): string;