@agent-cards/sdk 0.23.0 → 0.23.1

package/CHANGELOG.md

@@ -2,6 +2,10 @@
 
 ## Unreleased
 
+- Stop the card fields adyen-web 5 encrypts at a reviewed Adyen merchant profile. adyen-web 5 seals each field as an RSA-OAEP / A256CBC-HS512 JWE, where adyen-web 6 writes RSA-OAEP-256 / A256GCM, and the SDK read only adyen-web 6's form. So the card requests of Cathay Pacific's payment page and Dunelm's legacy checkout, and Cathay's charge request after its signing step, reached the merchant with the agent's dummy card. The adapters now read both forms as a card. Both profiles ship in `observe`, so the adapters abort each of these requests before it leaves the browser and report it as `merchant_profile_observed`. The Vault writes only adyen-web 6's form, so the API refuses a create for a card request in adyen-web 5's form with `cse_template_unsupported`, and nothing is charged.
+
+- Abort the requests in which IHG's pay page sends the typed card outside its reviewed card request, in every status, as `card_endpoint_refused` with reason `card_resend`. The page posts the same booking to IHG's enrollment service while its pre-ticked "Enroll for free" box stays ticked, posts it on other paths for more than one room, a travel agent or Business Rewards, and at a hotel that asks for 3-D Secure first posts the number to two 3-D Secure calls. The SDK let each of these reach IHG with the agent's dummy card. A booking with the box unticked reaches IHG's reviewed card request, which the adapters refuse as before while IHG is in `observe`.
+
 ## 0.23.0
 
 ### Upgrading from 0.22.0

package/dist/adyen-merchant-hosted.generated.d.ts

@@ -1,6 +1,7 @@
 declare var MERCHANT_EXCHANGES_MAX: number;
 declare var MERCHANT_PROFILE_RECOGNIZERS: any;
 declare function declaredEndpointRefusal(endpoint: any): string | null;
+declare function isAdyenWebJweCompact(s: any): boolean;
 declare function sha256Hex(input: any): string;
 declare function merchantAmountFromResponses(profile: any, input: any): {
     ok: boolean;
@@ -274,4 +275,4 @@ declare function declaredUrlGlobs(endpoint: any): string[];
 declare function merchantProfileRulesMatch(profileId: any, served: any): boolean;
 declare function merchantProfileEnvironment(profileId: any): "production" | "sandbox";
 declare function merchantProfileEndpointFor(profileId: any, checkoutOrigin: any): string | null;
-export { MERCHANT_EXCHANGES_MAX, MERCHANT_PROFILE_RECOGNIZERS, carriesAdyenCardCiphertext, classifyDeclaredMerchantRequest, classifyMerchantBody, classifyMerchantRequest, declaredEndpointRefusal, declaredTemplatedUrl, declaredUrlGlobs, declaredUrlRelation, merchantAmountExchanges, merchantAmountFromResponses, merchantAmountPending, merchantAmountStagesOf, merchantBodyKeyPathSha256, merchantChargedFromResponses, merchantProfileEndpointFor, merchantProfileEnvironment, merchantProfileRulesMatch, merchantProfileTemplatedUrl, merchantProfileUrlGlobs, merchantProfileUrlRelation, merchantTotalFromResponses, sha256Hex };
+export { MERCHANT_EXCHANGES_MAX, MERCHANT_PROFILE_RECOGNIZERS, carriesAdyenCardCiphertext, classifyDeclaredMerchantRequest, classifyMerchantBody, classifyMerchantRequest, declaredEndpointRefusal, declaredTemplatedUrl, declaredUrlGlobs, declaredUrlRelation, isAdyenWebJweCompact, merchantAmountExchanges, merchantAmountFromResponses, merchantAmountPending, merchantAmountStagesOf, merchantBodyKeyPathSha256, merchantChargedFromResponses, merchantProfileEndpointFor, merchantProfileEnvironment, merchantProfileRulesMatch, merchantProfileTemplatedUrl, merchantProfileUrlGlobs, merchantProfileUrlRelation, merchantTotalFromResponses, sha256Hex };

package/dist/adyen-merchant-hosted.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 7e4df686b96640378871d711a94bb545232ca858824a30c20e5a9d242a255f3b
+// artifact-sha256: c979802cf1a5aa95eedd5dd00949cd56c5c478ca3c637b3232b69597cc62d4a4
 // src/deep-freeze.js
 function deepFreeze(value) {
     if (value && typeof value === "object" && !Object.isFrozen(value)) {
@@ -1640,40 +1640,38 @@ function merchantBodyRefusal(profile, body) {
     return null;
 }
 // src/adyen-jwe.js
-var ADYEN_JWE_HEADER = { alg: "RSA-OAEP-256", enc: "A256GCM", version: "1" };
 var BASE64URL = /^[A-Za-z0-9_-]+$/;
-function isAdyenJweCompact(s) {
-    if (typeof s !== "string" || s.length > 2048)
-        return false;
-    const parts = s.split(".");
-    if (parts.length !== 5)
-        return false;
-    const [header, encryptedKey, iv, ciphertext, tag] = parts;
-    if (!parts.every((p) => p.length > 0 && BASE64URL.test(p)))
-        return false;
-    if (encryptedKey.length !== 342 || iv.length !== 16 || tag.length !== 22)
-        return false;
-    if (ciphertext.length > 1024)
-        return false;
-    return isAdyenJweHeader(header);
-}
-function isAdyenJweHeader(segment) {
-    if (!BASE64URL.test(segment) || segment.length > 128)
-        return false;
+var ADYEN_WEB_JWE_FORMATS = /* @__PURE__ */ Object.freeze([
+    /* @__PURE__ */ Object.freeze({ alg: "RSA-OAEP-256", enc: "A256GCM", iv: 16, tag: 22 }),
+    /* @__PURE__ */ Object.freeze({ alg: "RSA-OAEP", enc: "A256CBC-HS512", iv: 22, tag: 43 })
+]);
+var ADYEN_WEB_CIPHERTEXT_MAX = 8192;
+var ADYEN_WEB_HEADER_MAX = 128;
+function adyenWebJweHeader(segment) {
+    if (!BASE64URL.test(segment) || segment.length > ADYEN_WEB_HEADER_MAX)
+        return null;
     let parsed;
     try {
         parsed = JSON.parse(new TextDecoder().decode(Uint8Array.from(atob(segment.replace(/-/g, "+").replace(/_/g, "/")), (c) => c.charCodeAt(0))));
     }
     catch {
-        return false;
+        return null;
     }
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+        return null;
+    return Object.keys(parsed).sort().join(",") === "alg,enc,version" && parsed.version === "1" ? parsed : null;
+}
+function isAdyenWebJweCompact(s) {
+    if (typeof s !== "string" || s.length > ADYEN_WEB_HEADER_MAX + 342 + 22 + ADYEN_WEB_CIPHERTEXT_MAX + 43 + 4)
         return false;
-    const obj = parsed;
-    const keys = Object.keys(obj).sort();
-    if (keys.join(",") !== "alg,enc,version")
+    const parts = s.split(".");
+    if (parts.length !== 5 || !parts.every((p) => p.length > 0 && BASE64URL.test(p)))
+        return false;
+    const [header, encryptedKey, iv, ciphertext, tag] = parts;
+    if (encryptedKey.length !== 342 || ciphertext.length > ADYEN_WEB_CIPHERTEXT_MAX)
         return false;
-    return obj.alg === ADYEN_JWE_HEADER.alg && obj.enc === ADYEN_JWE_HEADER.enc && obj.version === ADYEN_JWE_HEADER.version;
+    const parsed = adyenWebJweHeader(header);
+    return parsed !== null && ADYEN_WEB_JWE_FORMATS.some((form) => parsed.alg === form.alg && parsed.enc === form.enc && iv.length === form.iv && tag.length === form.tag);
 }
 // src/sha256.js
 var K = /* @__PURE__ */ new Uint32Array([
@@ -1873,16 +1871,18 @@ function merchantProfileUrlRelation(profileId, rawUrl) {
         return "then";
     return otherCardRequestOf(profile, url) ? "other" : null;
 }
-var JWE_AT = /ey[A-Za-z0-9_-]{1,126}\.[A-Za-z0-9_-]{342}\.[A-Za-z0-9_-]{16}\.[A-Za-z0-9_-]{1,1024}\.[A-Za-z0-9_-]{22}/y;
+var JWE_AT = /* @__PURE__ */ ADYEN_WEB_JWE_FORMATS.map(({ iv, tag }) => new RegExp(`ey[A-Za-z0-9_-]{1,126}\\.[A-Za-z0-9_-]{342}\\.[A-Za-z0-9_-]{${iv}}\\.[A-Za-z0-9_-]{1,${ADYEN_WEB_CIPHERTEXT_MAX}}\\.[A-Za-z0-9_-]{${tag}}`, "y"));
 var LEGACY_BLOB = /adyenjs_0_1_\d{1,4}(?:\$|%24)/i;
 function textCarriesCiphertext(text) {
     if (LEGACY_BLOB.test(text))
         return true;
     for (let at = text.indexOf("ey"); at !== -1; at = text.indexOf("ey", at + 1)) {
-        JWE_AT.lastIndex = at;
-        const match = JWE_AT.exec(text);
-        if (match && isAdyenJweCompact(match[0]))
-            return true;
+        for (const pattern of JWE_AT) {
+            pattern.lastIndex = at;
+            const match = pattern.exec(text);
+            if (match && isAdyenWebJweCompact(match[0]))
+                return true;
+        }
     }
     return false;
 }
@@ -1947,7 +1947,7 @@ function holderRefusal(profile, parsed) {
         return `the paused body carries no card object where ${profile.merchant}'s card request holds it`;
     }
     const values = Object.values(profile.fields).map((name) => Object.prototype.hasOwnProperty.call(holder.value, name) ? holder.value[name] : void 0);
-    if (!values.every((value) => typeof value === "string" && isAdyenJweCompact(value))) {
+    if (!values.every((value) => typeof value === "string" && isAdyenWebJweCompact(value))) {
         return `the paused body does not carry the four encrypted card fields ${profile.merchant}'s card request holds a new card in`;
     }
     if (new Set(values).size !== values.length)
@@ -2145,4 +2145,4 @@ function merchantProfileEndpointFor(profileId, checkoutOrigin) {
     const query = Object.entries(profile.query).map(([key, value]) => `${key}=${value}`).join("&");
     return `${pair.endpoint}${profile.path}${query ? `?${query}` : ""}`;
 }
-export { MERCHANT_EXCHANGES_MAX, MERCHANT_PROFILE_RECOGNIZERS, carriesAdyenCardCiphertext, classifyDeclaredMerchantRequest, classifyMerchantBody, classifyMerchantRequest, declaredEndpointRefusal, declaredTemplatedUrl, declaredUrlGlobs, declaredUrlRelation, merchantAmountExchanges, merchantAmountFromResponses, merchantAmountPending, merchantAmountStagesOf, merchantBodyKeyPathSha256, merchantChargedFromResponses, merchantProfileEndpointFor, merchantProfileEnvironment, merchantProfileRulesMatch, merchantProfileTemplatedUrl, merchantProfileUrlGlobs, merchantProfileUrlRelation, merchantTotalFromResponses, sha256Hex };
+export { MERCHANT_EXCHANGES_MAX, MERCHANT_PROFILE_RECOGNIZERS, carriesAdyenCardCiphertext, classifyDeclaredMerchantRequest, classifyMerchantBody, classifyMerchantRequest, declaredEndpointRefusal, declaredTemplatedUrl, declaredUrlGlobs, declaredUrlRelation, isAdyenWebJweCompact, merchantAmountExchanges, merchantAmountFromResponses, merchantAmountPending, merchantAmountStagesOf, merchantBodyKeyPathSha256, merchantChargedFromResponses, merchantProfileEndpointFor, merchantProfileEnvironment, merchantProfileRulesMatch, merchantProfileTemplatedUrl, merchantProfileUrlGlobs, merchantProfileUrlRelation, merchantTotalFromResponses, sha256Hex };

package/dist/merchant-card-endpoints.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 82c93c756fd934cb52d2d868b73e546d741aebbe53f12d4c38c9173abf7a0c03
+// artifact-sha256: ed096050a26a3c26d7fc8167d1bfbeb05e120b392a9aa7a34a924514c56fc870
 // src/json-path.js
 var FORBIDDEN_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
 function isPlainObject(v) {
@@ -1117,7 +1117,8 @@ var MERCHANT_CARD_ENDPOINT_PROFILES = /* @__PURE__ */ deepFreeze([
             'ReservationService.createReservation posts the first reservation, JSON with withCredentials, to https://apis.ihg.com/reservations/v3/hotels: {id, imageStatus "COMMIT", segments: [{payment: {paymentByPoints, paymentInformation: {paymentCard}, guaranteeType, billingAddress}, ...}], userProfiles, hotels}.',
             "paymentCard (getPaymentInformation): {cardCode, expireDate `${expirationMonth}${expirationYear}` (MMYY), cardHolderName, cvvNumber: {token: <CVV>}, cardNumber: {token: <PAN, spaces stripped>}}, plus 3dsData after a PSD2 check.",
             "Headers: x-ihg-api-key (public client key), content-type application/json; charset=UTF-8, ihg-language, X-IHG-SSO-TOKEN, x-accept-currency (USD), IHG-SellSource, Forter-Token; interceptors add IHG-SessionId and IHG-TransactionId.",
-            "Hotels that set isPaymentServiceInformationRequired first send the PAN to /payments/threedsecure/v1/token and /paymentSetup and put the result in 3dsData, which is refused here; China UnionPay and PayPal set cupTokenId and paymentSource, also refused."
+            "Hotels that set isPaymentServiceInformationRequired first send the PAN to /payments/threedsecure/v1/token ({cardToken: <PAN>, cardType}) and /paymentSetup (card.token: <PAN>) and put the result in 3dsData, which is refused here; China UnionPay and PayPal set cupTokenId and paymentSource, also refused. Both 3-D Secure posts are in resends below.",
+            'pay-ng v14.149.0, read live Oct 6, 2026 (live-checks-oct6/ihg): the pay page posts the same reservation body, card in the clear, to /channels/direct/quickEnroll/v8/hotelReservations while its pre-ticked "Enroll for free as you book" box stays ticked (/quickEnroll/v9/hotelReservations behind the shouldUseNewQuickEnrolV9 flag, /quickEnroll/v8/multiRoomReservation for a cart), and to /reservations/v3/hotels/rooms/fromCart for more than one room, /reservations/v3/hotels/rooms/agent/reservations for a travel agent and /reservations/v3/businessRewardReservations for Business Rewards. Each is in resends below, so the SDK aborts it in every status.'
         ],
         har: null,
         checkout: "https://www.ihg.com",
@@ -1171,7 +1172,17 @@ var MERCHANT_CARD_ENDPOINT_PROFILES = /* @__PURE__ */ deepFreeze([
         amount: null,
         currency: "USD",
         response: { headers: ["content-type", "set-cookie"], withhold: [] },
-        resends: [],
+        // The page's other posts of the same card (evidence above): an approval never covers them.
+        resends: [
+            { method: "POST", path: "/channels/direct/quickEnroll/v8/hotelReservations", query: {} },
+            { method: "POST", path: "/channels/direct/quickEnroll/v9/hotelReservations", query: {} },
+            { method: "POST", path: "/channels/direct/quickEnroll/v8/multiRoomReservation", query: {} },
+            { method: "POST", path: "/reservations/v3/hotels/rooms/fromCart", query: {} },
+            { method: "POST", path: "/reservations/v3/hotels/rooms/agent/reservations", query: {} },
+            { method: "POST", path: "/reservations/v3/businessRewardReservations", query: {} },
+            { method: "POST", path: "/payments/threedsecure/v1/token", query: {} },
+            { method: "POST", path: "/payments/threedsecure/v1/paymentSetup", query: {} }
+        ],
         challenge: null,
         facts: null,
         bootstrap: "/robots.txt",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-cards/sdk",
-  "version": "0.23.0",
+  "version": "0.23.1",
   "description": "Agentcard's SDK: one client, Agentcard, with two modules. checkout pauses a browser purchase and pays it with the person's own card; voice connects a person to your product once and approves a purchase by voice inside it. Card data never enters your process.",
   "type": "module",
   "main": "dist/index.js",