@agent-cards/sdk 0.21.0 → 0.23.0

package/dist/card-fields.generated.js

@@ -1,6 +1,8 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 3bb87b35c9e795ffbafea2021ee8c1d6c344e26611f172245f3eeffb80a6e990
+// artifact-sha256: 5c2c8becc2301811aee1b42b47148039ab07c8854932a21e80687e18090f1a93
+// src/card-number-key.js
+var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
 var FORBIDDEN_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
 function isPlainObject(v) {
@@ -24,10 +26,188 @@ function jsonAt(root, path) {
     }
     return { found: true, value: node };
 }
+// src/elavon-converge.js
+var CONVERGE_PROCESS_URLS = /* @__PURE__ */ Object.freeze([
+    "https://api.convergepay.com/hosted-payments/service/payment/hpp/process",
+    "https://api.demo.convergepay.com/hosted-payments/service/payment/hpp/process"
+]);
+var TOP_LEVEL_KEYS = /* @__PURE__ */ Object.freeze(["paymentType", "paymentData", "context", "captchaToken", "shippingSameAsBilling"]);
+var WALLET_FIELDS = /* @__PURE__ */ Object.freeze([
+    "ssl_ewallet",
+    "googlepay_authmethod",
+    "ssl_google_pay",
+    "ssl_applepay_web",
+    "ssl_dsrp_cryptogram",
+    "ssl_visapayload",
+    "ssl_ewallet_shipping"
+]);
+var SERVICE_FEE_FIELDS = /* @__PURE__ */ Object.freeze(["ssl_service_fee_agree", "ssl_service_fee_amount", "ssl_service_fee_percent"]);
+var THREE_DS_FIELDS = /* @__PURE__ */ Object.freeze([
+    "ssl_transaction_type",
+    "ssl_eci_ind",
+    "ssl_3dsecure_value",
+    "ssl_dir_server_tran_id",
+    "ssl_xid",
+    "ssl_program_protocol"
+]);
+var THREE_DS_PREFIXES = /* @__PURE__ */ Object.freeze(["ssl_3ds_", "ssl_fsg_"]);
+var SURCHARGE_FIELDS = /* @__PURE__ */ Object.freeze([
+    "ssl_credit_surcharge_agree",
+    "ssl_credit_surcharge_amount",
+    "bypass_credit_surcharge",
+    "ssl_amount_subtotal",
+    "ssl_total_amount",
+    "ssl_surcharge_fee_total"
+]);
+var RECURRING_FIELDS = /* @__PURE__ */ Object.freeze([
+    "recurring",
+    "installment",
+    "ssl_billing_cycle",
+    "ssl_next_payment_date",
+    "ssl_total_installments",
+    "ssl_skip_payment",
+    "ssl_recurring_id",
+    "ssl_recurring_batch_count",
+    "ssl_installment_id"
+]);
+var CARD_SAVING_FLAGS = /* @__PURE__ */ Object.freeze(["ssl_get_token", "ssl_add_token"]);
+var CREDENTIAL_FIELDS = /* @__PURE__ */ Object.freeze(["ssl_account_id", "ssl_merchant_id", "ssl_user_id", "ssl_pin", "ssl_vendor_id"]);
+var AMOUNT_ADD_ON_FIELDS = /* @__PURE__ */ Object.freeze(["ssl_tip_amount", "ssl_cashback_amount"]);
+var CARD_NUMBER = /^\d{12,19}$/;
+var EXPIRY_MMYY = /^(0[1-9]|1[0-2])\d{2}$/;
+var CVC = /^\d{3,4}$/;
+var AMOUNT = /^(\d{1,13})(?:\.(\d{1,2}))?$/;
+var isRecord = (value) => !!value && typeof value === "object" && !Array.isArray(value);
+var owns = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var refuse = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+var CONTINUE = /* @__PURE__ */ Object.freeze({ verdict: "continue" });
+function parseConvergeBody(body) {
+    if (typeof body !== "string" || body === "" || body.length > 131072)
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(body);
+    }
+    catch {
+        return null;
+    }
+    if (!isRecord(parsed) || JSON.stringify(parsed) !== body)
+        return null;
+    return parsed;
+}
+function convergeAmountCents(value) {
+    const text = typeof value === "number" && Number.isFinite(value) ? String(value) : value;
+    const m = typeof text === "string" ? AMOUNT.exec(text) : null;
+    if (!m)
+        return null;
+    const cents = Number(m[1]) * 100 + Number(((m[2] ?? "") + "00").slice(0, 2));
+    return Number.isSafeInteger(cents) && cents > 0 ? cents : null;
+}
+function convergeBodyVerdict(body) {
+    const parsed = parseConvergeBody(body);
+    if (parsed === null || !Object.keys(parsed).every((key) => TOP_LEVEL_KEYS.includes(key)))
+        return refuse("converge_body_malformed");
+    const data = parsed.paymentData;
+    if (!isRecord(data))
+        return refuse("converge_body_malformed");
+    const type = parsed.paymentType;
+    if (type === "ELECTRONICCHECK" || type === "FINANCING") {
+        return owns(data, "ssl_card_number") ? refuse("converge_payment_type_refused") : CONTINUE;
+    }
+    if (type === "DEBITCARD") {
+        return refuse(typeof data.ssl_transaction_type === "string" && /DISBURSEMENT/i.test(data.ssl_transaction_type) ? "converge_push_to_card_refused" : "converge_debit_card_refused");
+    }
+    if (type === "GIFTCARD")
+        return refuse("converge_gift_card_refused");
+    if (type !== "CREDITCARD")
+        return refuse("converge_payment_type_refused");
+    const keys = Object.keys(data);
+    if (CREDENTIAL_FIELDS.some((key) => owns(data, key)))
+        return refuse("converge_credential_refused");
+    if (WALLET_FIELDS.some((key) => owns(data, key)))
+        return refuse("converge_wallet_refused");
+    if (owns(parsed, "captchaToken"))
+        return refuse("converge_captcha_refused");
+    if (SERVICE_FEE_FIELDS.some((key) => owns(data, key)))
+        return refuse("converge_service_fee_refused");
+    if (THREE_DS_FIELDS.some((key) => owns(data, key)) || keys.some((key) => THREE_DS_PREFIXES.some((prefix) => key.startsWith(prefix))))
+        return refuse("converge_3ds_follow_up_refused");
+    if (SURCHARGE_FIELDS.some((key) => owns(data, key)))
+        return refuse("converge_surcharge_refused");
+    if (AMOUNT_ADD_ON_FIELDS.some((key) => owns(data, key)))
+        return refuse("converge_amount_add_on_refused");
+    if (owns(data, "ssl_token") || CARD_SAVING_FLAGS.some((key) => owns(data, key) && !(typeof data[key] === "string" && /^n$/i.test(data[key])))) {
+        return refuse("converge_card_saving_refused");
+    }
+    if (RECURRING_FIELDS.some((key) => owns(data, key)))
+        return refuse("converge_recurring_refused");
+    if (owns(data, "ssl_transaction_currency") && !(typeof data.ssl_transaction_currency === "string" && /^usd$/i.test(data.ssl_transaction_currency))) {
+        return refuse("converge_currency_refused");
+    }
+    if (convergeAmountCents(data.ssl_amount) === null)
+        return refuse("converge_amount_missing");
+    if (typeof parsed.context !== "string" || parsed.context === "")
+        return refuse("converge_context_missing");
+    if (owns(parsed, "shippingSameAsBilling") && typeof parsed.shippingSameAsBilling !== "boolean")
+        return refuse("converge_body_malformed");
+    if (!owns(data, "ssl_card_number") || data.ssl_card_number === "" || data.ssl_card_number === null)
+        return refuse("converge_card_missing");
+    if (typeof data.ssl_card_number !== "string" || !CARD_NUMBER.test(data.ssl_card_number) || typeof data.ssl_exp_date !== "string" || !EXPIRY_MMYY.test(data.ssl_exp_date) || typeof data.ssl_cvv2cvc2 !== "string" || !CVC.test(data.ssl_cvv2cvc2))
+        return refuse("converge_card_malformed");
+    return CARD;
+}
+function isConvergeProcessUrl(url) {
+    if (typeof url !== "string")
+        return false;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    return parsed.href === url && CONVERGE_PROCESS_URLS.includes(parsed.href);
+}
+// src/amadeus-body.js
+var AMADEUS_CARD_MOPID = /^creditcard[0-9]*$/;
+var record = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var owns2 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
+var holdsPan = (mopdata) => record(mopdata) && owns2(mopdata, "pan") && mopdata.pan !== null && mopdata.pan !== "";
+function amadeusBodyKind(body) {
+    let value;
+    try {
+        value = typeof body === "string" ? JSON.parse(body) : void 0;
+    }
+    catch {
+        return "card";
+    }
+    if (!record(value))
+        return "card";
+    if (value.action === "add") {
+        const entries = Array.isArray(value.data) ? value.data : [value.data];
+        return entries.some((entry) => record(entry) && typeof entry.mopid === "string" && AMADEUS_CARD_MOPID.test(entry.mopid) && holdsPan(entry.mopdata)) ? "card" : "other";
+    }
+    if (value.action === "store")
+        return record(value.data) && holdsPan(value.data.mopdata) ? "card" : "other";
+    return "other";
+}
 // src/card-fields.js
+function processorGate(recognizer, url, body) {
+    if (!recognizer || recognizer.psp !== "elavon_converge")
+        return null;
+    if (url !== void 0 && !isConvergeProcessUrl(url))
+        return { verdict: "refuse", code: "converge_url_refused" };
+    return convergeBodyVerdict(body);
+}
 function carriesCardFields(recognizer, body) {
-    if (recognizer && recognizer.encoding === "json")
-        return carriesJsonCardFields(recognizer.jsonCardFields, body);
+    const gate = processorGate(recognizer, void 0, body);
+    if (gate !== null)
+        return gate.verdict === "card";
+    if (recognizer && recognizer.encoding === "json") {
+        const claimed = carriesJsonCardFields(recognizer.jsonCardFields, body, DECLARED_PATHS_ONLY.has(recognizer.psp));
+        return claimed && recognizer.psp === "amadeus_checkout" ? amadeusBodyKind(body) === "card" : claimed;
+    }
     const fields = recognizer && recognizer.cardFields;
     if (!Array.isArray(fields) || fields.length === 0)
         return true;
@@ -35,6 +215,8 @@ function carriesCardFields(recognizer, body) {
         return true;
     if (typeof body !== "string" || body === "")
         return false;
+    const anyCase = recognizer.caseInsensitiveFormKeys === true;
+    const wanted = anyCase ? fields.map((field) => String(field).toLowerCase()) : fields;
     for (const chunk of body.split("&")) {
         const eq = chunk.indexOf("=");
         if (eq <= 0 || eq === chunk.length - 1)
@@ -46,14 +228,40 @@ function carriesCardFields(recognizer, body) {
         catch {
             continue;
         }
-        if (fields.includes(key))
+        if (wanted.includes(anyCase ? key.trim().toLowerCase() : key))
             return true;
     }
     return false;
 }
-function carriesJsonCardFields(paths, body) {
+var DECLARED_PATHS_ONLY = /* @__PURE__ */ new Set(["primer", "pelecard", "creditguard", "payrails"]);
+function carriesJsonCardFields(paths, body, declaredOnly) {
     if (!Array.isArray(paths) || paths.length === 0 || !paths.every((path) => isJsonPath(path) && path.length > 0))
         return true;
+    if (declaredOnly)
+        return declaredPathHoldsCard(paths, body);
+    let parsed;
+    try {
+        parsed = typeof body === "string" ? JSON.parse(body) : void 0;
+    }
+    catch {
+        return true;
+    }
+    if (!isPlainObject(parsed))
+        return true;
+    if (paths.some((path) => {
+        const at = jsonAt(parsed, path);
+        return at.found && (typeof at.value === "string" && at.value !== "" || typeof at.value === "number");
+    }))
+        return true;
+    const declared = /* @__PURE__ */ new Set();
+    for (const path of paths) {
+        const last = path[path.length - 1];
+        if (typeof last === "string")
+            declared.add(last.toLowerCase());
+    }
+    return namesCardNumber(parsed, declared);
+}
+function declaredPathHoldsCard(paths, body) {
     if (typeof body !== "string" || body === "")
         return false;
     let parsed;
@@ -68,9 +276,74 @@ function carriesJsonCardFields(paths, body) {
         return at.found && (typeof at.value === "string" && at.value !== "" || typeof at.value === "number");
     });
 }
+function namesCardNumber(root, declared) {
+    const pending = [root];
+    while (pending.length > 0) {
+        const node = pending.pop();
+        const named = !Array.isArray(node);
+        for (const key of Object.keys(node)) {
+            if (named) {
+                const name = key.slice(key.lastIndexOf(".") + 1).toLowerCase();
+                if (declared.has(name) || CARD_NUMBER_KEY.test(name) || name.endsWith("cardnumber"))
+                    return true;
+            }
+            const value = node[key];
+            if (value !== null && typeof value === "object")
+                pending.push(value);
+        }
+    }
+    return false;
+}
+function splitCardLeg(recognizer, body) {
+    const split = recognizer && recognizer.splitCard;
+    if (!split || typeof split !== "object" || recognizer.encoding !== "form")
+        return null;
+    if (typeof body !== "string" || body === "" || carriesCardFields(recognizer, body))
+        return null;
+    const list = (value) => Array.isArray(value) ? value.filter((key) => typeof key === "string" && key !== "") : [];
+    const absorb = list(split.absorb);
+    const pass = list(split.pass);
+    const sibling = list(split.siblingKeys);
+    const own = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (const chunk of body.split("&")) {
+        const eq = chunk.indexOf("=");
+        if (eq <= 0)
+            return null;
+        let key;
+        try {
+            key = decodeURIComponent(chunk.slice(0, eq).replace(/\+/g, " "));
+        }
+        catch {
+            return null;
+        }
+        if (seen.has(key))
+            return null;
+        seen.add(key);
+        if (!sibling.includes(key))
+            own.push(key);
+    }
+    if (own.length === 0)
+        return null;
+    if (own.every((key) => absorb.includes(key)))
+        return "absorb";
+    if (own.every((key) => pass.includes(key)))
+        return "pass";
+    return null;
+}
 function requestWithoutCard(recognizer, url, body) {
-    if (carriesCardFields(recognizer, body))
+    const gate = processorGate(recognizer, url, body);
+    if (gate !== null) {
+        if (gate.verdict === "card")
+            return null;
+        if (gate.verdict === "refuse")
+            return "refuse";
+    }
+    else if (carriesCardFields(recognizer, body)) {
         return null;
+    }
+    if (splitCardLeg(recognizer, body) === "pass")
+        return "continue";
     const pass = recognizer && recognizer.passWithoutCard;
     if (typeof pass === "string" && pass !== "") {
         let parsed;
@@ -85,4 +358,8 @@ function requestWithoutCard(recognizer, url, body) {
     }
     return "refuse";
 }
-export { carriesCardFields, requestWithoutCard };
+function cardRequestRefusal(recognizer, url, body) {
+    const gate = processorGate(recognizer, url, body);
+    return gate !== null && gate.verdict === "refuse" ? gate.code : null;
+}
+export { cardRequestRefusal, carriesCardFields, requestWithoutCard, splitCardLeg };

package/dist/cdp.d.ts

@@ -128,7 +128,9 @@ export interface AttachOptions extends LifecycleOptions, ExecutionMetadata {
      * and is read right before the card is sent; a hint lets a bad purchase be
      * refused the moment it opens, and one that disagrees with the processor is
      * refused with nothing charged. Required for GMO, whose card token request
-     * names no amount: without it a GMO request fails with AmountRequiredError.
+     * names no amount, for Pelecard, whose submission names none either, and for
+     * WSPay, whose confirm names none: without it such a request fails with
+     * AmountRequiredError.
      */
     amount?: number | string;
     currency?: string;
@@ -139,6 +141,8 @@ export interface AttachOptions extends LifecycleOptions, ExecutionMetadata {
      * (`{ amount: 4210, currency: 'usd' }`), read off the page however your
      * page spells it; the adapters call it when a card request pauses, give it
      * one second, and send nothing when it yields nothing. Absent: no page total.
+     * Required for Pelecard: a Pelecard submission with no page total fails with
+     * PageAmountRequiredError, and the page's next submission reads it again.
      */
     pageAmount?: () => Promise<{
         amount: number;