@agent-cards/sdk 0.21.0 → 0.22.0

package/dist/builtin-registry.generated.js

@@ -1 +1 @@
-export const BUILTIN_REGISTRY = [{ "psp": "spreedly", "match": /core\.spreedly\.com\/v1\/payment_methods\/restricted\.json/i, "hosts": ["^core\\.spreedly\\.com$"], "encoding": "json", "passthroughHeaders": [/^spreedly-environment-key$/i] }, { "psp": "shopify", "match": /(checkout\.pci\.shopifyinc\.com|deposit\.[a-z0-9-]+\.shopifycs\.com)\/sessions/i, "hosts": ["^checkout\\.pci\\.shopifyinc\\.com$", "^deposit\\.[a-z0-9-]+\\.shopifycs\\.com$"], "encoding": "json", "passthroughHeaders": [/^shopify-identification-signature$/i] }, { "psp": "stripe", "match": /api\.stripe\.com\/v1\/(payment_methods|tokens|sources|confirmation_tokens|setup_intents\/seti_\w+\/confirm|payment_intents\/pi_\w+\/confirm|payment_pages\/cs_(?:test|live)_\w+\/confirm)/i, "hosts": ["^api\\.stripe\\.com$"], "encoding": "form", "passthroughHeaders": [/^authorization$/i, /^stripe-version$/i, /^x-stripe-client-user-agent$/i], "cardFields": ["card[number]", "payment_method_data[card][number]"], "passWithoutCard": "api\\.stripe\\.com/v1/(sources|confirmation_tokens|payment_pages/cs_(?:test|live)_\\w+/confirm)" }, { "psp": "braintree", "match": /payments(\.sandbox)?\.braintree-api\.com\/graphql/i, "hosts": ["^payments\\.braintree-api\\.com$", "^payments\\.sandbox\\.braintree-api\\.com$"], "sandboxHosts": ["^payments\\.sandbox\\.braintree-api\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^braintree-version$/i] }, { "psp": "checkout_com", "match": /(api|card-acquisition-gateway)(\.sandbox)?\.checkout\.com\/tokens/i, "hosts": ["^api\\.checkout\\.com$", "^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "sandboxHosts": ["^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "adyen", "match": /(checkoutshopper-(test|live(-[a-z]+)?)\.adyen\.com|([a-z0-9-]+\.)*adyenpayments\.com)\/checkoutshopper\/v1\/sessions\/[A-Za-z0-9_-]+\/payments/i, "hosts": ["^checkoutshopper-(test|live(-[a-z]+)?)\\.adyen\\.com$", "^([a-z0-9-]+\\.)*adyenpayments\\.com$"], "sandboxHosts": ["^checkoutshopper-test\\.adyen\\.com$"], "encoding": "json", "passthroughHeaders": [], "clientSideEncrypted": true, "mode": "cse" }, { "psp": "tranzila", "match": /(direct\.tranzila\.com\/process\/n\/|directng\.tranzila\.com\/process\/?)/i, "hosts": ["^direct\\.tranzila\\.com$", "^directng\\.tranzila\\.com$"], "encoding": "form", "passthroughHeaders": [], "mode": "hosted_form" }, { "psp": "square", "match": /pci-connect\.squareup(?:sandbox)?\.com\/v2\/card-nonce/i, "hosts": ["^pci-connect\\.squareup\\.com$", "^pci-connect\\.squareupsandbox\\.com$"], "sandboxHosts": ["^pci-connect\\.squareupsandbox\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "authorize_net", "match": /(api2|apitest)\.authorize\.net\/xml\/v1\/request\.api/i, "hosts": ["^api2\\.authorize\\.net$", "^apitest\\.authorize\\.net$"], "sandboxHosts": ["^apitest\\.authorize\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "worldpay", "match": /(try\.)?access\.worldpay\.com\/(sessions\/card|verifiedTokens\/sessions)/i, "hosts": ["^access\\.worldpay\\.com$", "^try\\.access\\.worldpay\\.com$"], "sandboxHosts": ["^try\\.access\\.worldpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^accept$/i] }, { "psp": "nuvei", "match": /(secure|ppp-test)\.safecharge\.com\/ppp\/api\/v1\/(?:cardTokenization|clientPayment|websdk\/initPaymentWithCardTokenization)\.do/i, "hosts": ["^secure\\.safecharge\\.com$", "^ppp-test\\.safecharge\\.com$"], "sandboxHosts": ["^ppp-test\\.safecharge\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "airwallex", "match": /(checkout(\.sandbox)?\.airwallex\.com|pci-api(\.sandbox)?\.airwallex\.com)\/api\/v1\/pa\/(payment_intents\/[^/?#]+\/confirm|payment_consents\/[^/?#]+\/verify|payment_methods\/create)(\?|$)/i, "hosts": ["^checkout\\.airwallex\\.com$", "^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "sandboxHosts": ["^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "encoding": "json", "passthroughHeaders": [/^client-secret$/i, /^authorization$/i, /^x-auth-token$/i, /^x-on-behalf-of$/i, /^x-api-version$/i] }, { "psp": "rapyd", "match": /(api|sandboxapi)\.rapyd\.net\/v1\/(?:hosted\/collect\/card\/[^/?#]+\/payment_method|checkout\/checkout_[A-Za-z0-9]+)(?:[?#]|$)/i, "hosts": ["^api\\.rapyd\\.net$", "^sandboxapi\\.rapyd\\.net$"], "sandboxHosts": ["^sandboxapi\\.rapyd\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "dlocal", "match": /ppmcc(-sandbox)?\.dlocal\.com\/cvault\/credit-card\/temporal/i, "hosts": ["^ppmcc\\.dlocal\\.com$", "^ppmcc-sandbox\\.dlocal\\.com$"], "sandboxHosts": ["^ppmcc-sandbox\\.dlocal\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-fields-api-key$/i, /^x-uow$/i, /^x-dlocal-infrav2$/i] }, { "psp": "ebanx", "match": /(?:(?:customer-frontier|customer|api-local-latam|api|sandbox-local-latam|sandbox)\.ebanx\.com|(?:api-diamond|api|sandbox)\.ebanxpay\.com)\/ws\/token/i, "hosts": ["^customer\\.ebanx\\.com$", "^customer-frontier\\.ebanx\\.com$", "^api\\.ebanx\\.com$", "^sandbox\\.ebanx\\.com$", "^api-local-latam\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^api-diamond\\.ebanxpay\\.com$", "^api\\.ebanxpay\\.com$", "^sandbox\\.ebanxpay\\.com$"], "sandboxHosts": ["^sandbox\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^sandbox\\.ebanxpay\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "mercado_pago", "match": /api\.mercadopago\.com\/v1\/card_tokens(?![\w/-])/i, "hosts": ["^api\\.mercadopago\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-product-id$/i] }, { "psp": "payu", "match": /(secure\.payu\.com|(merch-prod|secure)\.snd\.payu\.com)\/api\/front\/tokens/i, "hosts": ["^secure\\.payu\\.com$", "^(merch-prod|secure)\\.snd\\.payu\\.com$"], "sandboxHosts": ["^(merch-prod|secure)\\.snd\\.payu\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "razorpay", "match": /api\.razorpay\.com\/v1\/(?:standard_checkout\/)?payments\/create\/(?:ajax|checkout|fees)/i, "hosts": ["^api\\.razorpay\\.com$"], "encoding": "form", "passthroughHeaders": [/^x-razorpay-sessionid$/i, /^x-customer-access-token$/i] }, { "psp": "mollie", "match": /api\.cc\.mollie\.com\/v1\/card-tokens/i, "hosts": ["^api\\.cc\\.mollie\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "paysafe", "match": /(?:api(\.test)?\.paysafe\.com\/(?:paymenthub\/v1\/singleusepaymenthandles|js\/api\/v1\/tokenize)|hosted(\.test)?\.paysafe\.com\/checkout\/api\/v1\/tokenize)(?![\w/-])/i, "hosts": ["^api\\.paysafe\\.com$", "^api\\.test\\.paysafe\\.com$", "^hosted\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "sandboxHosts": ["^api\\.test\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-paysafe-credentials$/i, /^correlationid$/i] }, { "psp": "recurly", "match": /api(\.eu)?\.recurly\.com\/js\/v1\/token(?![\w-])/i, "hosts": ["^api\\.recurly\\.com$", "^api\\.eu\\.recurly\\.com$"], "encoding": "form", "passthroughHeaders": [/^recurly-credential-checkout-hostname$/i] }, { "psp": "moneris", "match": /(www3|esqa|gateway|gatewayqa|gatewayt|gatewaydev)\.moneris\.com\/HPPtoken\/request\.php/i, "hosts": ["^www3\\.moneris\\.com$", "^esqa\\.moneris\\.com$", "^gateway\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "sandboxHosts": ["^esqa\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "encoding": "form", "passthroughHeaders": [] }, { "psp": "bambora", "match": /(api\.na\.bambora\.com|api\.bam\.shift4api\.net)\/scripts\/tokenization\/tokens/i, "hosts": ["^api\\.na\\.bambora\\.com$", "^api\\.bam\\.shift4api\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "global_payments", "match": /(?:api\.heartlandportico\.com\/SecureSubmit\.v1\/api\/token|cert\.api2\.heartlandportico\.com\/Hps\.Exchange\.PosGateway\.Hpf\.v1\/api\/token|apis(?:\.sandbox)?(?:\.eu)?\.globalpay\.com\/ucp\/(?:merchants\/[^/]+\/)?payment-methods)/i, "hosts": ["^api\\.heartlandportico\\.com$", "^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.globalpay\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.eu\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "sandboxHosts": ["^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-gp-version$/i] }, { "psp": "gravy", "match": /api(\.sandbox)?\.[a-z0-9-]+\.gr4vy\.app\/checkout\/sessions\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/fields/i, "hosts": ["^api\\.[a-z0-9-]+\\.gr4vy\\.app$", "^api\\.sandbox\\.[a-z0-9-]+\\.gr4vy\\.app$"], "sandboxHosts": ["^api\\.sandbox\\.[a-z0-9-]+\\.gr4vy\\.app$"], "encoding": "json", "passthroughHeaders": [] }];
+export const BUILTIN_REGISTRY = [{ "psp": "spreedly", "match": /core\.spreedly\.com\/v1\/payment_methods\/restricted\.json/i, "hosts": ["^core\\.spreedly\\.com$"], "encoding": "json", "passthroughHeaders": [/^spreedly-environment-key$/i] }, { "psp": "shopify", "match": /(checkout\.pci\.shopifyinc\.com|deposit\.[a-z0-9-]+\.shopifycs\.com)\/sessions/i, "hosts": ["^checkout\\.pci\\.shopifyinc\\.com$", "^deposit\\.[a-z0-9-]+\\.shopifycs\\.com$"], "encoding": "json", "passthroughHeaders": [/^shopify-identification-signature$/i] }, { "psp": "stripe", "match": /api\.stripe\.com\/v1\/(payment_methods|tokens|sources|confirmation_tokens|setup_intents\/seti_\w+\/confirm|payment_intents\/pi_\w+\/confirm|payment_pages\/cs_(?:test|live)_\w+\/confirm)/i, "hosts": ["^api\\.stripe\\.com$"], "encoding": "form", "passthroughHeaders": [/^authorization$/i, /^stripe-version$/i, /^x-stripe-client-user-agent$/i], "cardFields": ["card[number]", "payment_method_data[card][number]"], "passWithoutCard": "api\\.stripe\\.com/v1/(sources|confirmation_tokens|payment_pages/cs_(?:test|live)_\\w+/confirm)" }, { "psp": "braintree", "match": /payments(\.sandbox)?\.braintree-api\.com\/graphql/i, "hosts": ["^payments\\.braintree-api\\.com$", "^payments\\.sandbox\\.braintree-api\\.com$"], "sandboxHosts": ["^payments\\.sandbox\\.braintree-api\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^braintree-version$/i] }, { "psp": "checkout_com", "match": /(api|card-acquisition-gateway)(\.sandbox)?\.checkout\.com\/tokens/i, "hosts": ["^api\\.checkout\\.com$", "^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "sandboxHosts": ["^api\\.sandbox\\.checkout\\.com$", "^card-acquisition-gateway\\.sandbox\\.checkout\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "adyen", "match": /(checkoutshopper-(test|live(-[a-z]+)?)\.adyen\.com|([a-z0-9-]+\.)*adyenpayments\.com)\/checkoutshopper\/v1\/sessions\/[A-Za-z0-9_-]+\/payments/i, "hosts": ["^checkoutshopper-(test|live(-[a-z]+)?)\\.adyen\\.com$", "^([a-z0-9-]+\\.)*adyenpayments\\.com$"], "sandboxHosts": ["^checkoutshopper-test\\.adyen\\.com$"], "encoding": "json", "passthroughHeaders": [], "clientSideEncrypted": true, "mode": "cse" }, { "psp": "tranzila", "match": /(direct\.tranzila\.com\/process\/n\/|directng\.tranzila\.com\/process\/?)/i, "hosts": ["^direct\\.tranzila\\.com$", "^directng\\.tranzila\\.com$"], "encoding": "form", "passthroughHeaders": [], "mode": "hosted_form" }, { "psp": "square", "match": /pci-connect\.squareup(?:sandbox)?\.com\/v2\/card-nonce/i, "hosts": ["^pci-connect\\.squareup\\.com$", "^pci-connect\\.squareupsandbox\\.com$"], "sandboxHosts": ["^pci-connect\\.squareupsandbox\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "authorize_net", "match": /(api2|apitest)\.authorize\.net\/xml\/v1\/request\.api/i, "hosts": ["^api2\\.authorize\\.net$", "^apitest\\.authorize\\.net$"], "sandboxHosts": ["^apitest\\.authorize\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "worldpay", "match": /(try\.)?access\.worldpay\.com\/(sessions\/card|verifiedTokens\/sessions)/i, "hosts": ["^access\\.worldpay\\.com$", "^try\\.access\\.worldpay\\.com$"], "sandboxHosts": ["^try\\.access\\.worldpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^accept$/i] }, { "psp": "nuvei", "match": /(secure|ppp-test)\.safecharge\.com\/ppp\/api\/v1\/(?:cardTokenization|clientPayment|websdk\/initPaymentWithCardTokenization)\.do/i, "hosts": ["^secure\\.safecharge\\.com$", "^ppp-test\\.safecharge\\.com$"], "sandboxHosts": ["^ppp-test\\.safecharge\\.com$"], "encoding": "json", "passthroughHeaders": [], "jsonCardFields": [["paymentOption", "card", "cardNumber"], ["cardData", "cardNumber"]], "passWithoutCard": "(?:secure|ppp-test)\\.safecharge\\.com/ppp/api/v1/(?:clientPayment|websdk/initPaymentWithCardTokenization)\\.do" }, { "psp": "airwallex", "match": /(checkout(\.sandbox)?\.airwallex\.com|pci-api(\.sandbox)?\.airwallex\.com)\/api\/v1\/pa\/(payment_intents\/[^/?#]+\/confirm|payment_consents\/[^/?#]+\/verify|payment_methods\/create)(\?|$)/i, "hosts": ["^checkout\\.airwallex\\.com$", "^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "sandboxHosts": ["^checkout\\.sandbox\\.airwallex\\.com$", "^pci-api\\.sandbox\\.airwallex\\.com$"], "encoding": "json", "passthroughHeaders": [/^client-secret$/i, /^authorization$/i, /^x-auth-token$/i, /^x-on-behalf-of$/i, /^x-api-version$/i] }, { "psp": "rapyd", "match": /(api|sandboxapi)\.rapyd\.net\/v1\/(?:hosted\/collect\/card\/[^/?#]+\/payment_method|checkout\/checkout_[A-Za-z0-9]+)(?:[?#]|$)/i, "hosts": ["^api\\.rapyd\\.net$", "^sandboxapi\\.rapyd\\.net$"], "sandboxHosts": ["^sandboxapi\\.rapyd\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "dlocal", "match": /ppmcc(-sandbox)?\.dlocal\.com\/cvault\/credit-card\/temporal/i, "hosts": ["^ppmcc\\.dlocal\\.com$", "^ppmcc-sandbox\\.dlocal\\.com$"], "sandboxHosts": ["^ppmcc-sandbox\\.dlocal\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-fields-api-key$/i, /^x-uow$/i, /^x-dlocal-infrav2$/i] }, { "psp": "ebanx", "match": /(?:(?:customer-frontier|customer|api-local-latam|api|sandbox-local-latam|sandbox)\.ebanx\.com|(?:api-diamond|api|sandbox)\.ebanxpay\.com)\/ws\/token/i, "hosts": ["^customer\\.ebanx\\.com$", "^customer-frontier\\.ebanx\\.com$", "^api\\.ebanx\\.com$", "^sandbox\\.ebanx\\.com$", "^api-local-latam\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^api-diamond\\.ebanxpay\\.com$", "^api\\.ebanxpay\\.com$", "^sandbox\\.ebanxpay\\.com$"], "sandboxHosts": ["^sandbox\\.ebanx\\.com$", "^sandbox-local-latam\\.ebanx\\.com$", "^sandbox\\.ebanxpay\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "mercado_pago", "match": /api\.mercadopago\.com\/v1\/card_tokens(?![\w/-])/i, "hosts": ["^api\\.mercadopago\\.com$"], "encoding": "json", "passthroughHeaders": [/^x-product-id$/i] }, { "psp": "payu", "match": /(secure\.payu\.com|(merch-prod|secure)\.snd\.payu\.com)\/api\/front\/tokens/i, "hosts": ["^secure\\.payu\\.com$", "^(merch-prod|secure)\\.snd\\.payu\\.com$"], "sandboxHosts": ["^(merch-prod|secure)\\.snd\\.payu\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i] }, { "psp": "razorpay", "match": /api\.razorpay\.com\/v1\/(?:standard_checkout\/)?payments\/create\/(?:ajax|checkout|fees)/i, "hosts": ["^api\\.razorpay\\.com$"], "encoding": "form", "passthroughHeaders": [/^x-razorpay-sessionid$/i, /^x-customer-access-token$/i] }, { "psp": "mollie", "match": /api\.cc\.mollie\.com\/v1\/card-tokens/i, "hosts": ["^api\\.cc\\.mollie\\.com$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "paysafe", "match": /(?:api(\.test)?\.paysafe\.com\/(?:paymenthub\/v1\/singleusepaymenthandles|js\/api\/v1\/tokenize)|hosted(\.test)?\.paysafe\.com\/checkout\/api\/v1\/tokenize)(?![\w/-])/i, "hosts": ["^api\\.paysafe\\.com$", "^api\\.test\\.paysafe\\.com$", "^hosted\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "sandboxHosts": ["^api\\.test\\.paysafe\\.com$", "^hosted\\.test\\.paysafe\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-paysafe-credentials$/i, /^correlationid$/i] }, { "psp": "recurly", "match": /api(\.eu)?\.recurly\.com\/js\/v1\/token(?![\w-])/i, "hosts": ["^api\\.recurly\\.com$", "^api\\.eu\\.recurly\\.com$"], "encoding": "form", "passthroughHeaders": [/^recurly-credential-checkout-hostname$/i] }, { "psp": "moneris", "match": /(www3|esqa|gateway|gatewayqa|gatewayt|gatewaydev)\.moneris\.com\/HPPtoken\/request\.php/i, "hosts": ["^www3\\.moneris\\.com$", "^esqa\\.moneris\\.com$", "^gateway\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "sandboxHosts": ["^esqa\\.moneris\\.com$", "^gatewayqa\\.moneris\\.com$", "^gatewayt\\.moneris\\.com$", "^gatewaydev\\.moneris\\.com$"], "encoding": "form", "passthroughHeaders": [] }, { "psp": "bambora", "match": /(api\.na\.bambora\.com|api\.bam\.shift4api\.net)\/scripts\/tokenization\/tokens/i, "hosts": ["^api\\.na\\.bambora\\.com$", "^api\\.bam\\.shift4api\\.net$"], "encoding": "json", "passthroughHeaders": [] }, { "psp": "global_payments", "match": /(?:api\.heartlandportico\.com\/SecureSubmit\.v1\/api\/token|cert\.api2\.heartlandportico\.com\/Hps\.Exchange\.PosGateway\.Hpf\.v1\/api\/token|apis(?:\.sandbox)?(?:\.eu)?\.globalpay\.com\/ucp\/(?:merchants\/[^/]+\/)?payment-methods)/i, "hosts": ["^api\\.heartlandportico\\.com$", "^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.globalpay\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.eu\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "sandboxHosts": ["^cert\\.api2\\.heartlandportico\\.com$", "^apis\\.sandbox\\.globalpay\\.com$", "^apis\\.sandbox\\.eu\\.globalpay\\.com$"], "encoding": "json", "passthroughHeaders": [/^authorization$/i, /^x-gp-version$/i] }, { "psp": "gravy", "match": /api(\.sandbox)?\.[a-z0-9-]+\.gr4vy\.app\/checkout\/sessions\/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\/fields/i, "hosts": ["^api\\.[a-z0-9-]+\\.gr4vy\\.app$", "^api\\.sandbox\\.[a-z0-9-]+\\.gr4vy\\.app$"], "sandboxHosts": ["^api\\.sandbox\\.[a-z0-9-]+\\.gr4vy\\.app$"], "encoding": "json", "passthroughHeaders": [] }];

package/dist/card-endpoint.d.ts

@@ -0,0 +1,177 @@
+/** The SDK's view of a reviewed card endpoint profile: where its card request goes and what may travel with it. */
+export interface CardEndpointProfile {
+    readonly id: string;
+    readonly merchant: string;
+    readonly status: 'observe' | 'enabled';
+    /** The exact https origin of the page the card is typed into. */
+    readonly checkout: string;
+    /** The exact https origin the card request goes to. */
+    readonly endpoint: string;
+    readonly method: 'POST';
+    readonly path: string;
+    readonly query: Readonly<Record<string, string>>;
+    readonly encoding: 'json' | 'form' | 'multipart';
+    readonly session: {
+        readonly cookies: boolean;
+        readonly headers: readonly string[];
+        readonly required: readonly string[];
+    };
+    readonly response: {
+        readonly headers: readonly string[];
+    };
+}
+/** One cookie of the endpoint's jar, name and value only. */
+export interface CardEndpointCookie {
+    name: string;
+    value: string;
+}
+/**
+ * What the adapters capture from a paused card request and hand to the create: the
+ * URL, the origin of the page it was paused on, the profile's session headers, the
+ * endpoint's cookies for a cookie profile, a Referer on the checkout page, and the
+ * body, which holds only the placeholder card the agent typed. Never a real card,
+ * always cardholder data: it travels only in `merchant_card_endpoint.session`.
+ */
+export interface CardEndpointSession {
+    url: string;
+    page_origin: string;
+    headers: Record<string, string>;
+    cookies?: CardEndpointCookie[];
+    referer?: string;
+    body: string;
+}
+/** The psp and mode a card endpoint authorization carries; neither is a processor. */
+export declare const CARD_ENDPOINT_PSP: string;
+export declare const CARD_ENDPOINT_MODE: "card_endpoint";
+/**
+ * Why a card endpoint payment was refused before anything was created or sent. Nothing
+ * was charged, and the message names no URL, body or session value.
+ *
+ * - `not_enabled`: this build's copy of the profile does not take payments yet.
+ * - `amount_required`: the attachment names no amount; the agent's amount is the only authority here.
+ * - `approval_required`: the attachment asks for Autopilot; every payment here needs the cardholder's approval.
+ * - `preparation_unsupported`: a prepared checkout cannot pay a merchant's own card endpoint.
+ * - `request_unsupported`: the paused request is not the card request Agentcard reviewed
+ *   (`detail` says what, naming fields, never values).
+ *
+ * Every reason but `request_unsupported` answers the same way for every request on the
+ * attachment, so the adapters stop asking; `request_unsupported` refuses only the
+ * request it is about.
+ */
+export type CardEndpointRefusal = 'not_enabled' | 'amount_required' | 'approval_required' | 'preparation_unsupported' | 'request_unsupported';
+export declare class CardEndpointRefusedError extends Error {
+    readonly profile: string;
+    readonly reason: CardEndpointRefusal;
+    readonly detail: string | null;
+    constructor(profile: string, reason: CardEndpointRefusal, detail?: string | null);
+    /** True when every later request on the attachment would be refused the same way. */
+    get permanent(): boolean;
+}
+/** The reviewed profile (any status) whose card request `url` and `method` are exactly, or null. */
+export declare function cardEndpointFor(url: string, method: string): CardEndpointProfile | null;
+/** The reviewed profile with this id, or null. */
+export declare function cardEndpointById(id: string): CardEndpointProfile | null;
+/** Whether this build's copy of the profile takes payments (enabled, nothing pending, a reviewed HAR, not recurring). */
+export declare function cardEndpointLive(profile: CardEndpointProfile | string): boolean;
+/** What an event may say about a card endpoint request: the profile and the endpoint origin, never the URL's path or query. */
+export declare function cardEndpointDetail(profile: CardEndpointProfile): {
+    profile: string;
+    endpoint: string;
+};
+/**
+ * Fetch.enable patterns covering every profile's card request, in any status: its
+ * origin and path with each `:name` segment and the query as wildcards. A coarse
+ * pre-filter, like cardUrlPatterns for processors; cardEndpointFor is the exact check
+ * each paused request is held to, and anything it refuses continues untouched.
+ */
+export declare function cardEndpointPatterns(): string[];
+/** What an adapter reads off a paused card endpoint request. */
+export interface CardEndpointCapture {
+    url: string;
+    /** The paused request's headers as the browser reports them; the jar's cookies are never among them. */
+    headers: Record<string, string> | undefined;
+    /** The paused body: the placeholder card the agent typed and the rest of the merchant's fields. */
+    body: string;
+    /** The origin of the top-level page the request was paused on, when it could be read. */
+    pageOrigin: string | undefined;
+    /** The endpoint's cookie jar for this URL (HttpOnly included). Read only for a cookie profile. */
+    cookies: () => Promise<CardEndpointCookie[]>;
+}
+/**
+ * The session the create carries for a paused card endpoint request: the profile's own
+ * header names and nothing else, the Referer only when it is a page on the checkout
+ * origin, the endpoint's cookies only for a cookie profile, and the body. Checked with
+ * the same rules the API and the device run (payment-core
+ * merchantCardEndpointSessionRefusal), so a request they would refuse never leaves this
+ * process: a CardEndpointRefusedError (`request_unsupported`) instead, naming no value.
+ */
+export declare function captureCardEndpointSession(profile: CardEndpointProfile, capture: CardEndpointCapture): Promise<CardEndpointSession>;
+/**
+ * The headers the paused request is answered with: the profile's answer headers the
+ * merchant sent, and never Set-Cookie (cookies reach the browser through
+ * cardEndpointCookies, on the endpoint host only).
+ */
+export declare function cardEndpointAnswerHeaders(profile: CardEndpointProfile, headers: Record<string, string>): Record<string, string>;
+/**
+ * The fixed answer a paused request gets when the cardholder's device withheld the
+ * merchant's answer (it carried the card, or a compressed stream the device cannot
+ * read): an error the merchant's page stops on. The card request was sent; whether
+ * the merchant took the payment is unknown until the order is checked.
+ */
+export declare const CARD_ENDPOINT_WITHHELD_ANSWER: Readonly<{
+    status: number;
+    headers: Readonly<Record<string, string>>;
+    body: string;
+}>;
+/**
+ * A Set-Cookie value from the merchant's answer, as an adapter writes it into the
+ * agent's browser: host-only on the endpoint host, or on the parent domain its Domain
+ * attribute names when that is a rotation of a cookie the browser already holds there
+ * (`domain`), at the cookie's path, Secure whatever the merchant said (the endpoint is
+ * https-only, so no cookie the SDK writes ever travels over plain http), with its other
+ * flags and expiry. `expires` is seconds since the epoch, absent for a session cookie,
+ * and 1 for a cookie the merchant expired, which the browser then removes.
+ */
+export interface CardEndpointSetCookie {
+    name: string;
+    value: string;
+    /** The endpoint's origin, which a host-only cookie is written for. */
+    origin: string;
+    /** The endpoint's host name. */
+    host: string;
+    /**
+     * The domain (no leading dot) the cookie is written on as a domain cookie: set only
+     * when the merchant's Domain attribute names the endpoint host or a parent of it and
+     * the browser already sends the endpoint a cookie of this name on that domain, so the
+     * write replaces that cookie. Absent for every other cookie, which is host-only.
+     */
+    domain?: string;
+    path: string;
+    /** True for every cookie the SDK writes: see above. */
+    secure: boolean;
+    httpOnly: boolean;
+    sameSite?: 'Strict' | 'Lax' | 'None';
+    expires?: number;
+}
+/**
+ * One cookie the browser sends to the endpoint, as the adapters read the jar
+ * (Network.getCookies or context.cookies()): its name and its domain, which a leading
+ * dot marks as a domain cookie.
+ */
+export interface CardEndpointJarCookie {
+    name: string;
+    domain: string;
+}
+/**
+ * The merchant's Set-Cookie values as cookies to write (parseSetCookie), and how many
+ * could not be written as one (a malformed line, a prefix or a Domain the browser would
+ * refuse, a Domain with the jar unread). `jar` is the endpoint's cookies as the adapter
+ * read them, null when the read failed. Only a profile whose answer may carry cookies
+ * has any.
+ */
+export declare function cardEndpointCookies(profile: CardEndpointProfile, requestUrl: string, setCookies: readonly string[], nowMs?: number, jar?: readonly CardEndpointJarCookie[] | null): {
+    cookies: CardEndpointSetCookie[];
+    skipped: number;
+};
+/** Why a session is not one the profile lets travel (payment-core merchantCardEndpointSessionRefusal), or null. Names no value. */
+export declare function cardEndpointSessionRefusal(profile: CardEndpointProfile, session: unknown): string | null;

package/dist/card-endpoint.js

@@ -0,0 +1,286 @@
+// A reviewed merchant's own card endpoint: the SDK's half of the card endpoint mode.
+//
+// Some merchants post the typed card from their own checkout page straight to their
+// own server, with no processor in between (AT&T, Italo, Universal Orlando, Target
+// Optical, Opus Virtual Offices). Agentcard reviews each one and pins it as a profile
+// in the payment core (merchant-card-endpoints.generated.ts, the SDK's copy of the
+// same rules the API and the Vault run): the page the card is typed into, the exact
+// origin, path and query of the card request, which session headers and cookies it
+// needs, and which answer headers may travel back.
+//
+// The adapters arm every profile's endpoint. A POST that is exactly a profile's card
+// request pauses. While this build's copy of the profile does not take payments
+// (observe, a fact only a partner HAR can pin, no reviewed HAR, a recurring charge)
+// the request is aborted as an unsupported checkout and nothing is created. Otherwise
+// the adapter captures the request's session (the profile's own header list, the
+// endpoint's cookie jar for a cookie profile, a Referer on the checkout page) and
+// hands it with the paused body, which holds only the placeholder card the agent
+// typed, to the create. The cardholder's device sends the real card request to the
+// merchant itself, over the checkout relay, and reports the merchant's answer; the
+// adapter writes its Set-Cookie values into the agent's browser on the endpoint host
+// (or on the parent domain of a cookie the browser already holds there, which the
+// write replaces) and answers the paused request with it. The real card never reaches
+// this process or the agent's page.
+//
+// The endpoint URL (it carries cart, booking and instance ids), the paused body, the
+// session and the answer are cardholder data even with no real card in them: no
+// event, error or log line from this module names any of them. Events name the
+// profile id and the endpoint origin only.
+import { MERCHANT_CARD_ENDPOINT_MODE as SHARED_MODE, MERCHANT_CARD_ENDPOINT_PSP as SHARED_PSP, MERCHANT_CARD_ENDPOINT_RECOGNIZERS as SHARED_RECOGNIZERS, matchMerchantCardEndpoint as sharedMatch, merchantCardEndpointLive as sharedLive, merchantCardEndpointSessionRefusal as sharedSessionRefusal, } from './merchant-card-endpoints.generated.js';
+/** The psp and mode a card endpoint authorization carries; neither is a processor. */
+export const CARD_ENDPOINT_PSP = SHARED_PSP;
+export const CARD_ENDPOINT_MODE = SHARED_MODE;
+const PROFILES = SHARED_RECOGNIZERS;
+export class CardEndpointRefusedError extends Error {
+    profile;
+    reason;
+    detail;
+    constructor(profile, reason, detail = null) {
+        super(`refused a payment to the ${profile} card endpoint (${reason})${detail ? `: ${detail}` : ''}. Nothing was created and nothing was charged.`);
+        this.profile = profile;
+        this.reason = reason;
+        this.detail = detail;
+        this.name = 'CardEndpointRefusedError';
+    }
+    /** True when every later request on the attachment would be refused the same way. */
+    get permanent() { return this.reason !== 'request_unsupported'; }
+}
+/** The reviewed profile (any status) whose card request `url` and `method` are exactly, or null. */
+export function cardEndpointFor(url, method) {
+    try {
+        return sharedMatch(url, method, undefined) ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The reviewed profile with this id, or null. */
+export function cardEndpointById(id) {
+    return PROFILES.find((profile) => profile.id === id) ?? null;
+}
+/** Whether this build's copy of the profile takes payments (enabled, nothing pending, a reviewed HAR, not recurring). */
+export function cardEndpointLive(profile) {
+    return sharedLive(typeof profile === 'string' ? profile : profile.id) === true;
+}
+/** What an event may say about a card endpoint request: the profile and the endpoint origin, never the URL's path or query. */
+export function cardEndpointDetail(profile) {
+    return { profile: profile.id, endpoint: profile.endpoint };
+}
+// A CDP URL pattern treats '*' and '?' as wildcards and '\' as their escape.
+const globEscape = (text) => text.replace(/[\\*?]/g, (char) => `\\${char}`);
+/**
+ * Fetch.enable patterns covering every profile's card request, in any status: its
+ * origin and path with each `:name` segment and the query as wildcards. A coarse
+ * pre-filter, like cardUrlPatterns for processors; cardEndpointFor is the exact check
+ * each paused request is held to, and anything it refuses continues untouched.
+ */
+export function cardEndpointPatterns() {
+    return [...new Set(PROFILES.map((profile) => `${globEscape(profile.endpoint)}${profile.path.split('/').map((segment) => (segment.startsWith(':') ? '*' : globEscape(segment))).join('/')}*`))];
+}
+// Header names a capture never keeps, whatever a profile lists: the device's transport
+// writes Cookie, Origin and Host itself, the connection's own headers are its own, and
+// the Referer travels in its own member. payment-core's session check refuses the same.
+const NEVER_KEPT = /^(?:cookie|cookie2|set-cookie|origin|referer|host|content-length|transfer-encoding|connection|keep-alive|upgrade|te|trailer|expect|proxy-.*|:.*)$/;
+/** The paused request's Referer when it is a page on the profile's checkout origin, written as a browser serializes it; else nothing. */
+function keptReferer(profile, value) {
+    if (typeof value !== 'string' || value.includes('#'))
+        return undefined;
+    try {
+        const url = new URL(value);
+        return url.origin === profile.checkout && url.href === value && !url.username && !url.password ? value : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * The session the create carries for a paused card endpoint request: the profile's own
+ * header names and nothing else, the Referer only when it is a page on the checkout
+ * origin, the endpoint's cookies only for a cookie profile, and the body. Checked with
+ * the same rules the API and the device run (payment-core
+ * merchantCardEndpointSessionRefusal), so a request they would refuse never leaves this
+ * process: a CardEndpointRefusedError (`request_unsupported`) instead, naming no value.
+ */
+export async function captureCardEndpointSession(profile, capture) {
+    const headers = {};
+    const seen = new Set();
+    let referer;
+    for (const [name, value] of Object.entries(capture.headers ?? {})) {
+        const lower = name.toLowerCase();
+        if (seen.has(lower))
+            throw new CardEndpointRefusedError(profile.id, 'request_unsupported', 'the paused request names one header twice');
+        seen.add(lower);
+        if (lower === 'referer') {
+            referer = keptReferer(profile, value);
+            continue;
+        }
+        if (NEVER_KEPT.test(lower) || !profile.session.headers.includes(lower))
+            continue;
+        headers[lower] = typeof value === 'string' ? value : String(value);
+    }
+    const session = { url: capture.url, page_origin: capture.pageOrigin ?? '', headers, body: capture.body };
+    if (profile.session.cookies) {
+        const jar = await capture.cookies();
+        session.cookies = (Array.isArray(jar) ? jar : []).map(({ name, value }) => ({ name, value }));
+    }
+    if (referer !== undefined)
+        session.referer = referer;
+    const refusal = sharedSessionRefusal(profile.id, session);
+    if (refusal)
+        throw new CardEndpointRefusedError(profile.id, 'request_unsupported', refusal);
+    return session;
+}
+/**
+ * The headers the paused request is answered with: the profile's answer headers the
+ * merchant sent, and never Set-Cookie (cookies reach the browser through
+ * cardEndpointCookies, on the endpoint host only).
+ */
+export function cardEndpointAnswerHeaders(profile, headers) {
+    const out = {};
+    for (const [name, value] of Object.entries(headers)) {
+        const lower = name.toLowerCase();
+        if (lower === 'set-cookie' || !profile.response.headers.includes(lower) || typeof value !== 'string' || !/^[\x20-\x7e\t]*$/.test(value))
+            continue;
+        out[lower] = value;
+    }
+    return out;
+}
+/**
+ * The fixed answer a paused request gets when the cardholder's device withheld the
+ * merchant's answer (it carried the card, or a compressed stream the device cannot
+ * read): an error the merchant's page stops on. The card request was sent; whether
+ * the merchant took the payment is unknown until the order is checked.
+ */
+export const CARD_ENDPOINT_WITHHELD_ANSWER = Object.freeze({
+    status: 502,
+    headers: Object.freeze({ 'content-type': 'application/json', 'cache-control': 'no-store' }),
+    body: JSON.stringify({ error: { code: 'agentcard_answer_withheld', message: 'The merchant answered, and Agentcard withheld the answer because it could carry card data. Check the order with the merchant before trying again.' } }),
+});
+// RFC 6265 cookie-name (a token) and cookie-value, as payment-core checks a session cookie.
+const COOKIE_NAME = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]{1,256}$/;
+const COOKIE_VALUE = /^(?:[\x21\x23-\x2b\x2d-\x3a\x3c-\x5b\x5d-\x7e]*|"[\x21\x23-\x2b\x2d-\x3a\x3c-\x5b\x5d-\x7e]*")$/;
+const COOKIE_PATH = /^\/[\x21-\x3a\x3c-\x7e]{0,1023}$/;
+// Browsers keep a cookie for at most 400 days.
+const MAX_COOKIE_AGE_S = 400 * 24 * 60 * 60;
+/** RFC 6265 5.1.4: the directory of the request path, the path a cookie with no Path attribute gets. */
+function defaultCookiePath(requestUrl) {
+    let path;
+    try {
+        path = new URL(requestUrl).pathname;
+    }
+    catch {
+        return '/';
+    }
+    const last = path.lastIndexOf('/');
+    return last <= 0 ? '/' : path.slice(0, last);
+}
+/**
+ * One Set-Cookie line as the cookie to write, or null when a browser would not store it
+ * or it cannot be written safely. `jar` is the endpoint's cookies (null when they could
+ * not be read). A Domain attribute the endpoint host does not belong to drops the cookie
+ * (RFC 6265 5.3), as a browser does. One the host belongs to puts the cookie on that
+ * domain when the jar already holds a domain cookie of this name there, so the rotation
+ * replaces it; otherwise the cookie stays host-only. With the jar unread, a cookie that
+ * names a Domain is not written, since its write could leave two cookies of one name.
+ */
+function parseSetCookie(profile, requestUrl, line, nowS, jar) {
+    if (typeof line !== 'string' || line.length > 8192 || /[\x00-\x08\x0a-\x1f\x7f]/.test(line))
+        return null;
+    const [pair, ...attributes] = line.split(';');
+    const eq = pair.indexOf('=');
+    if (eq <= 0)
+        return null;
+    const name = pair.slice(0, eq).trim();
+    const value = pair.slice(eq + 1).trim();
+    if (!COOKIE_NAME.test(name) || !COOKIE_VALUE.test(value))
+        return null;
+    let path = defaultCookiePath(requestUrl);
+    let secure = false;
+    let httpOnly = false;
+    let sameSite;
+    let expires;
+    let maxAge;
+    let named;
+    for (const attribute of attributes) {
+        const at = attribute.indexOf('=');
+        const key = (at === -1 ? attribute : attribute.slice(0, at)).trim().toLowerCase();
+        const text = at === -1 ? '' : attribute.slice(at + 1).trim();
+        if (key === 'path') {
+            if (COOKIE_PATH.test(text))
+                path = text;
+        }
+        else if (key === 'secure')
+            secure = true;
+        else if (key === 'httponly')
+            httpOnly = true;
+        else if (key === 'samesite') {
+            const lower = text.toLowerCase();
+            sameSite = lower === 'strict' ? 'Strict' : lower === 'lax' ? 'Lax' : lower === 'none' ? 'None' : undefined;
+        }
+        else if (key === 'max-age') {
+            if (/^-?\d{1,12}$/.test(text))
+                maxAge = Number(text);
+        }
+        else if (key === 'expires') {
+            const at = Date.parse(text);
+            if (Number.isFinite(at))
+                expires = Math.floor(at / 1000);
+        }
+        // RFC 6265 5.2.3: the last non-empty Domain counts, without a leading dot, in lower case.
+        else if (key === 'domain') {
+            const domain = text.replace(/^\./, '').toLowerCase();
+            if (domain !== '')
+                named = domain;
+        }
+    }
+    if (maxAge !== undefined)
+        expires = maxAge <= 0 ? 1 : nowS + Math.min(maxAge, MAX_COOKIE_AGE_S);
+    else if (expires !== undefined)
+        expires = expires <= nowS ? 1 : Math.min(expires, nowS + MAX_COOKIE_AGE_S);
+    // The prefixes a browser enforces on the merchant's own line: __Secure- needs Secure,
+    // __Host- also needs Path=/.
+    if ((name.startsWith('__Secure-') || name.startsWith('__Host-')) && !secure)
+        return null;
+    if (name.startsWith('__Host-') && path !== '/')
+        return null;
+    const host = new URL(profile.endpoint).hostname;
+    let domain;
+    if (named !== undefined) {
+        // __Host- cookies never name a Domain; a Domain the endpoint host is not inside is refused by a browser.
+        if (name.startsWith('__Host-') || (host !== named && !host.endsWith(`.${named}`)))
+            return null;
+        if (jar === null)
+            return null;
+        if (jar.some((held) => held.name === name && String(held.domain).toLowerCase() === `.${named}`))
+            domain = named;
+    }
+    return {
+        name, value, origin: profile.endpoint, host, ...(domain !== undefined ? { domain } : {}), path, secure: true, httpOnly,
+        ...(sameSite ? { sameSite } : {}), ...(expires !== undefined ? { expires } : {}),
+    };
+}
+/**
+ * The merchant's Set-Cookie values as cookies to write (parseSetCookie), and how many
+ * could not be written as one (a malformed line, a prefix or a Domain the browser would
+ * refuse, a Domain with the jar unread). `jar` is the endpoint's cookies as the adapter
+ * read them, null when the read failed. Only a profile whose answer may carry cookies
+ * has any.
+ */
+export function cardEndpointCookies(profile, requestUrl, setCookies, nowMs = Date.now(), jar = []) {
+    if (!profile.response.headers.includes('set-cookie'))
+        return { cookies: [], skipped: setCookies.length };
+    const cookies = [];
+    let skipped = 0;
+    for (const line of setCookies) {
+        const cookie = parseSetCookie(profile, requestUrl, line, Math.floor(nowMs / 1000), jar);
+        if (cookie)
+            cookies.push(cookie);
+        else
+            skipped += 1;
+    }
+    return { cookies, skipped };
+}
+/** Why a session is not one the profile lets travel (payment-core merchantCardEndpointSessionRefusal), or null. Names no value. */
+export function cardEndpointSessionRefusal(profile, session) {
+    return sharedSessionRefusal(profile.id, session) ?? null;
+}

package/dist/card-fields.generated.d.ts

@@ -1,3 +1,5 @@
-declare function carriesCardFields(recognizer: any, body: any): boolean;
-declare function requestWithoutCard(recognizer: any, url: any, body: any): "continue" | "refuse" | null;
-export { carriesCardFields, requestWithoutCard };
+declare function carriesCardFields(recognizer: any, body: any): any;
+declare function splitCardLeg(recognizer: any, body: any): "absorb" | "pass" | null;
+declare function requestWithoutCard(recognizer: any, url: any, body: any): "refuse" | "continue" | null;
+declare function cardRequestRefusal(recognizer: any, url: any, body: any): any;
+export { cardRequestRefusal, carriesCardFields, requestWithoutCard, splitCardLeg };