@agent-cards/sdk 0.22.0 → 0.23.1

package/dist/ekashu.d.ts

@@ -0,0 +1,35 @@
+/**
+ * NMI's Hosted Payment Page (formerly eKashu), as this SDK reads it.
+ *
+ * The merchant's page posts an entry form, top-level, to https://live.ekashu.com/ (test:
+ * test.ekashu.com), and NMI answers with its own card page. That entry carries no card, and it
+ * is the one request this SDK pauses: the cardholder's device repeats it over the end-to-end TLS
+ * relay and fills the card into the page NMI returns to it (payment-core processors/ekashu.js).
+ * Everything else the agent's browser posts to NMI carries a card the agent typed: the card page's
+ * own post (/index.php) and its 3-D Secure calls (ajax_3d_secure_v2_*.php). This SDK aborts every
+ * one of them, so a placeholder card never reaches NMI.
+ *
+ * The hosts are payment-core's EKASHU_HOSTS; payment-core.test.mjs pins the two lists together.
+ */
+export declare const EKASHU_PSP = "ekashu";
+export declare const EKASHU_HOSTS: readonly string[];
+/** Whether this URL is on one of NMI's hosted payment page hosts (https, standard port, no credentials). */
+export declare function isEkashuHost(url: string): boolean;
+/**
+ * The only request on NMI's hosts that is the merchant's entry: a POST to the host's root, with no
+ * query. The entry the SDK pauses; every other POST there carries a card and is aborted.
+ */
+export declare function isEkashuEntry(url: string, method: string): boolean;
+/** The entry URL on the same NMI host as this URL, the one the registry recognizes when this build is armed for NMI. */
+export declare function ekashuEntryUrl(url: string): string | null;
+/**
+ * Whether an adapter must hand this request to the pre-claim gates: it is on one of NMI's hosts
+ * and this build's registry serves that host's entry. The card page's own post and its 3-D Secure
+ * calls are not the entry, so the registry's card-request test (anchored to the entry) does not
+ * name them; the CDP adapter still pauses them through the recognizer's host-wide URL patterns,
+ * and attachToPlaywright's route predicate asks this, so both adapters show the gates every
+ * request to an armed NMI host.
+ */
+export declare function isArmedEkashuUrl(vault: {
+    isCardRequest(url: string, method?: string): boolean;
+}, url: string): boolean;

package/dist/ekashu.js

@@ -0,0 +1,55 @@
+/**
+ * NMI's Hosted Payment Page (formerly eKashu), as this SDK reads it.
+ *
+ * The merchant's page posts an entry form, top-level, to https://live.ekashu.com/ (test:
+ * test.ekashu.com), and NMI answers with its own card page. That entry carries no card, and it
+ * is the one request this SDK pauses: the cardholder's device repeats it over the end-to-end TLS
+ * relay and fills the card into the page NMI returns to it (payment-core processors/ekashu.js).
+ * Everything else the agent's browser posts to NMI carries a card the agent typed: the card page's
+ * own post (/index.php) and its 3-D Secure calls (ajax_3d_secure_v2_*.php). This SDK aborts every
+ * one of them, so a placeholder card never reaches NMI.
+ *
+ * The hosts are payment-core's EKASHU_HOSTS; payment-core.test.mjs pins the two lists together.
+ */
+export const EKASHU_PSP = 'ekashu';
+export const EKASHU_HOSTS = Object.freeze(['live.ekashu.com', 'test.ekashu.com']);
+/** Whether this URL is on one of NMI's hosted payment page hosts (https, standard port, no credentials). */
+export function isEkashuHost(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return false;
+    }
+    return parsed.protocol === 'https:' && !parsed.port && !parsed.username && !parsed.password
+        && EKASHU_HOSTS.includes(parsed.hostname.toLowerCase());
+}
+/**
+ * The only request on NMI's hosts that is the merchant's entry: a POST to the host's root, with no
+ * query. The entry the SDK pauses; every other POST there carries a card and is aborted.
+ */
+export function isEkashuEntry(url, method) {
+    if (String(method).toUpperCase() !== 'POST' || !isEkashuHost(url))
+        return false;
+    const parsed = new URL(url);
+    return parsed.pathname === '/' && !parsed.search && !parsed.hash;
+}
+/** The entry URL on the same NMI host as this URL, the one the registry recognizes when this build is armed for NMI. */
+export function ekashuEntryUrl(url) {
+    if (!isEkashuHost(url))
+        return null;
+    return `https://${new URL(url).hostname.toLowerCase()}/`;
+}
+/**
+ * Whether an adapter must hand this request to the pre-claim gates: it is on one of NMI's hosts
+ * and this build's registry serves that host's entry. The card page's own post and its 3-D Secure
+ * calls are not the entry, so the registry's card-request test (anchored to the entry) does not
+ * name them; the CDP adapter still pauses them through the recognizer's host-wide URL patterns,
+ * and attachToPlaywright's route predicate asks this, so both adapters show the gates every
+ * request to an armed NMI host.
+ */
+export function isArmedEkashuUrl(vault, url) {
+    const entry = ekashuEntryUrl(url);
+    return entry !== null && vault.isCardRequest(entry, 'POST');
+}

package/dist/lifecycle.d.ts

@@ -217,15 +217,18 @@ export declare class CheckoutLifecycle implements CheckoutController {
      * cybersource-flex.ts), a Juspay card request that is not the reviewed
      * payment (juspay_request_unsupported, juspay-gate.ts), such as save card,
      * EMI, a direct card or a sibling host, a reviewed merchant card endpoint
-     * this build does not pay (merchant_card_endpoint_not_enabled), a CreditGuard
+     * this build does not pay (merchant_card_endpoint_not_enabled), a request that
+     * sends the typed card to such a merchant again outside its card request
+     * (merchant_card_endpoint_resend_refused), a CreditGuard
      * page that runs its own 3-D Secure (creditguard_three_d_secure), a
      * recognized Primer request in a form its gate refuses (unsupported_primer_sdk,
      * unsupported_primer_request), a Payrails request its gate refuses
-     * (`unsupported_payrails_card_payment` and the card-save refusal codes), or a
+     * (`unsupported_payrails_card_payment` and the card-save refusal codes), a
      * Shiji STS request its gate refuses (shiji_sts_keep_on_file and the other
-     * shiji-sts.ts reasons).
+     * shiji-sts.ts reasons), or a post to a processor's own card page that only
+     * the cardholder's device can fill (processor_card_page: NMI's).
      */
-    unsupported(reason?: 'unrecognized_payment_endpoint' | 'merchant_profile_observe' | 'merchant_request_unsupported' | GmoUnsupportedReason | 'microform_unsupported' | 'juspay_request_unsupported' | 'merchant_card_endpoint_not_enabled' | 'creditguard_three_d_secure' | 'unsupported_primer_sdk' | 'unsupported_primer_request' | PayrailsUnsupportedReason | ShijiStsUnsupportedReason): void;
+    unsupported(reason?: 'unrecognized_payment_endpoint' | 'merchant_profile_observe' | 'merchant_request_unsupported' | GmoUnsupportedReason | 'microform_unsupported' | 'juspay_request_unsupported' | 'merchant_card_endpoint_not_enabled' | 'merchant_card_endpoint_resend_refused' | 'creditguard_three_d_secure' | 'unsupported_primer_sdk' | 'unsupported_primer_request' | PayrailsUnsupportedReason | ShijiStsUnsupportedReason | 'processor_card_page'): void;
     /**
      * A card request that only a prepared checkout pays (an Adyen merchant
      * profile's, or a Fiserv card capture) arrived with no preparation on this

package/dist/lifecycle.js

@@ -193,13 +193,16 @@ export class CheckoutLifecycle {
      * cybersource-flex.ts), a Juspay card request that is not the reviewed
      * payment (juspay_request_unsupported, juspay-gate.ts), such as save card,
      * EMI, a direct card or a sibling host, a reviewed merchant card endpoint
-     * this build does not pay (merchant_card_endpoint_not_enabled), a CreditGuard
+     * this build does not pay (merchant_card_endpoint_not_enabled), a request that
+     * sends the typed card to such a merchant again outside its card request
+     * (merchant_card_endpoint_resend_refused), a CreditGuard
      * page that runs its own 3-D Secure (creditguard_three_d_secure), a
      * recognized Primer request in a form its gate refuses (unsupported_primer_sdk,
      * unsupported_primer_request), a Payrails request its gate refuses
-     * (`unsupported_payrails_card_payment` and the card-save refusal codes), or a
+     * (`unsupported_payrails_card_payment` and the card-save refusal codes), a
      * Shiji STS request its gate refuses (shiji_sts_keep_on_file and the other
-     * shiji-sts.ts reasons).
+     * shiji-sts.ts reasons), or a post to a processor's own card page that only
+     * the cardholder's device can fill (processor_card_page: NMI's).
      */
     unsupported(reason = 'unrecognized_payment_endpoint') {
         this.held = true;

package/dist/merchant-card-endpoints.generated.d.ts

@@ -6,6 +6,7 @@ declare var SubstitutionError: {
         cause?: unknown;
     };
 };
+declare var HILTON_CREATE_RESERVATION_DOCUMENTS: readonly string[];
 declare var MERCHANT_CARD_ENDPOINT_PSP: string;
 declare var MERCHANT_CARD_ENDPOINT_MODE: string;
 declare var MERCHANT_CARD_ENDPOINT_PROFILES: any;
@@ -15,6 +16,31 @@ declare function merchantCardEndpointById(id: any): any;
 declare function trustedMerchantCardEndpoint(idOrEntry: any): any;
 declare function merchantCardEndpointRecognizerById(id: any): any;
 declare function merchantCardEndpointLive(idOrEntry: any): boolean;
+declare var MERCHANT_CARD_ENDPOINT_FACTS_TEXT_MAX: number;
+declare var MERCHANT_CARD_ENDPOINT_FACT_READERS: readonly string[];
+declare function merchantCardEndpointFactsRole(profile: any, cardUrl: any, exchange: any): "card" | "record" | "unread" | "inert" | null;
+declare function projectMerchantCardEndpointFacts(profile: any, cardUrl: any, exchange: any): {
+    none: boolean;
+    refusal?: undefined;
+    record?: undefined;
+} | {
+    refusal: any;
+    none?: undefined;
+    record?: undefined;
+} | {
+    record: {
+        method: any;
+        url: any;
+        state: any;
+    };
+    none?: undefined;
+    refusal?: undefined;
+};
+declare function readMerchantCardEndpointFacts(profile: any, cardUrl: any, record: any): any;
+declare function merchantCardEndpointFactsRefusal(profile: any, facts: any, agent: any): {
+    code: any;
+    reason: any;
+} | null;
 declare var MERCHANT_CARD_ENDPOINT_LIMITS: Readonly<{
     bodyBytes: number;
     answerBytes: number;
@@ -23,7 +49,10 @@ declare var MERCHANT_CARD_ENDPOINT_LIMITS: Readonly<{
     headerBytes: number;
     cookies: 64;
 }>;
+declare function merchantCardEndpointRequestOrigin(profile: any): any;
 declare function merchantCardEndpointBodyRefusal(profile: any, body: any, contentType: any): string | null;
+declare function merchantCardEndpointPasses(profile: any, body: any, contentType: any): boolean;
+declare function merchantCardEndpointSessionTtl(profile: any, body: any, contentType: any): any;
 declare function merchantCardEndpointAmount(profile: any, body: any, contentType: any): {
     amountCents: null;
     currency: any;
@@ -31,13 +60,18 @@ declare function merchantCardEndpointAmount(profile: any, body: any, contentType
     amountCents: number;
     currency: any;
 };
+declare function merchantCardEndpointCarriesCard(profile: any, body: any, contentType: any): any;
 declare function merchantCardEndpointMatches(profile: any, rawUrl: any, method: any, opts: any): boolean;
 declare function matchMerchantCardEndpoint(rawUrl: any, method: any, opts: any): any;
+declare function matchMerchantCardEndpointResend(rawUrl: any, method: any): any;
 declare function assertMerchantCardEndpoint(authorization: any): URL & {
     profile: any;
 };
 declare function merchantCardEndpointSessionRefusal(profile: any, bundle: any): string | null;
+declare function merchantCardEndpointCheckoutKey(profile: any, bundle: any): string | null;
+declare function merchantCardEndpointEncrypts(profile: any): boolean;
 declare function substituteMerchantCardEndpoint(body: any, contentType: any, profile: any, card: any): any;
+declare function encryptMerchantCardEndpointBody(body: any, contentType: any, profile: any, card: any, crypto: any): Promise<any>;
 declare function merchantEndpointRequest(profile: any, bundle: any, card: any): {
     url: any;
     method: any;
@@ -46,7 +80,16 @@ declare function merchantEndpointRequest(profile: any, bundle: any, card: any):
     };
     body: any;
 };
+declare function encryptedMerchantEndpointRequest(profile: any, bundle: any, card: any, crypto: any): Promise<{
+    url: any;
+    method: any;
+    headers: {
+        "content-type": any;
+    };
+    body: any;
+}>;
 declare function responseCardLeak(card: any, response: any): "card_in_response" | "unreadable_in_response" | null;
+declare function merchantCardEndpointAnswerRefusal(profile: any, bodyText: any): "refused_step_in_response" | null;
 declare function merchantCardEndpointAnswer(profile: any, response: any, card: any): {
     status: any;
     withheld: string;
@@ -60,4 +103,20 @@ declare function merchantCardEndpointAnswer(profile: any, response: any, card: a
     bodyText: any;
     withheld?: undefined;
 };
-export { MERCHANT_CARD_ENDPOINT_CLIENT_TABLE, MERCHANT_CARD_ENDPOINT_LIMITS, MERCHANT_CARD_ENDPOINT_MODE, MERCHANT_CARD_ENDPOINT_PROFILES, MERCHANT_CARD_ENDPOINT_PSP, MERCHANT_CARD_ENDPOINT_RECOGNIZERS, SubstitutionError, assertMerchantCardEndpoint, matchMerchantCardEndpoint, merchantCardEndpointAmount, merchantCardEndpointAnswer, merchantCardEndpointBodyRefusal, merchantCardEndpointById, merchantCardEndpointLive, merchantCardEndpointMatches, merchantCardEndpointRecognizerById, merchantCardEndpointSessionRefusal, merchantEndpointRequest, responseCardLeak, substituteMerchantCardEndpoint, trustedMerchantCardEndpoint };
+declare function merchantCardEndpointNavigationAnswer(profile: any, answer: any, requestUrl: any): {
+    kind: string;
+    reason?: undefined;
+    status?: undefined;
+    location?: undefined;
+} | {
+    kind: string;
+    reason: string;
+    status?: undefined;
+    location?: undefined;
+} | {
+    kind: string;
+    status: any;
+    location: string;
+    reason?: undefined;
+};
+export { HILTON_CREATE_RESERVATION_DOCUMENTS, MERCHANT_CARD_ENDPOINT_CLIENT_TABLE, MERCHANT_CARD_ENDPOINT_FACTS_TEXT_MAX, MERCHANT_CARD_ENDPOINT_FACT_READERS, MERCHANT_CARD_ENDPOINT_LIMITS, MERCHANT_CARD_ENDPOINT_MODE, MERCHANT_CARD_ENDPOINT_PROFILES, MERCHANT_CARD_ENDPOINT_PSP, MERCHANT_CARD_ENDPOINT_RECOGNIZERS, SubstitutionError, assertMerchantCardEndpoint, encryptMerchantCardEndpointBody, encryptedMerchantEndpointRequest, matchMerchantCardEndpoint, matchMerchantCardEndpointResend, merchantCardEndpointAmount, merchantCardEndpointAnswer, merchantCardEndpointAnswerRefusal, merchantCardEndpointBodyRefusal, merchantCardEndpointById, merchantCardEndpointCarriesCard, merchantCardEndpointCheckoutKey, merchantCardEndpointEncrypts, merchantCardEndpointFactsRefusal, merchantCardEndpointFactsRole, merchantCardEndpointLive, merchantCardEndpointMatches, merchantCardEndpointNavigationAnswer, merchantCardEndpointPasses, merchantCardEndpointRecognizerById, merchantCardEndpointRequestOrigin, merchantCardEndpointSessionRefusal, merchantCardEndpointSessionTtl, merchantEndpointRequest, projectMerchantCardEndpointFacts, readMerchantCardEndpointFacts, responseCardLeak, substituteMerchantCardEndpoint, trustedMerchantCardEndpoint };