@agent-cards/sdk 0.23.16 → 0.23.17

package/CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+- Finish a Worldpay eProtect checkout that your code resumes itself. With `attachToCdp(…, { pauseOnly: true })`, you create the authorization, read it, and call `controller.resume(read)`. The read carries the card registration as Agentcard stored it, bare JSON, and earlier releases handed exactly that to the merchant's paused registration script. Worldpay's script reads its answer only through the callback the request named, so it never received the registration: the page waited until the merchant's timeout, and the checkout read `outcome_unknown` with reason `merchant_request_aborted` after the cardholder had approved. The SDK now answers the resumed registration as it answers one it created itself, with the registration inside the request's own callback under Worldpay's script type. The SDK never hands the page a read that is not this request's registration, such as one already inside a callback or another request's answer: `resume` rejects with `PaymentOutcomeUnknownError`, reason `eprotect_registration_unconfirmed`, and the paused request fails. A checkout whose authorization the SDK creates was already answered this way and does not change. No API or Vault release is needed.
+
 - Refuse a sandbox declaration whose endpoint is on agentcard.com, Agentcard's own domain, as one on agentcard.sh is already refused. A `sandboxMerchants` entry on `VaultClient` whose endpoint is agentcard.com or any host under it makes the constructor throw:
 
   ```text
@@ -141,6 +143,8 @@
 
 - Pay a Wix checkout whose card goes to Wix's own tokenizer, from Agentcard's own account only for now (dark launch): Agentcard turns it on for another company once it checks that the site instance Wix's card frame sends belongs to the reviewed store. Every Wix checkout mounts Wix Cashier's card frame, and for Wix Payments and classic Stripe on Wix that frame posts the card to `https://cashier-pci.wixapps.net/_api/payment-gateway-web/tokenize/v2/tokens`. Wix's payment widget fails the payment 30 seconds after it asks the frame for a token, too soon for an approval after Pay, so the SDK pays a Wix checkout only through `prepare({ psp: 'wix_payments', environment: 'production' })`, at a store Agentcard reviewed (ParaHouse Magazine, Psalms & Potions and Alexandra Hagel today), with `amount` and `currency`, the total the cardholder approves: the request names none. Wix has no test environment, so a test client's `prepare()` fails with `live_host_on_sandbox_row`. The sync now also asks for `capabilities=wix_payments_tokenize`. Once the cardholder approves, the frame's request pauses, the cardholder's device sends the card through the checkout relay, and the frame receives Wix's token. The frame sends its card request once more under a fresh site instance after Wix answers 401 or 403: the SDK refuses that second request in the browser and never answers it from the first approval. The SDK fails a paused request the cardholder's device has not sent 20 seconds after the pause, of the 30 seconds Wix waits, with reason `wix_payments_send_window_closed`, as it fails a prepared Secure Acceptance token create, and the device sends nothing past its own earlier boundary.
 
+- Keep a GoPay card form's token out of your events and error messages. GoPay's card frame sends the card to its own URL, `https://secure.gopay.com/gp-card-comm/h/<token>?lang=..&ver=..&SG=<signature>`, and that token, with the signature in the query, opens that payment's card form to anyone who holds it. `redactUrl`, every event and every error message now show it as `{token}` on GoPay's card frame hosts, as in `https://secure.gopay.com/gp-card-comm/h/{token}`, and drop the query as before. The SDK does not pause a GoPay payment yet. No API or Vault release is needed.
+
 ## 0.23.0
 
 ### Upgrading from 0.22.0

package/dist/card-fields.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: e4858832550c43f6e3cbef0c64facb820d7ae9b5118a2c8c4fcadb429c94b2b0
+// artifact-sha256: 0fcc0e758acec92fba9d21092bcb3704b8a73ec864647ea194ca44eba57cb96d
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -1442,6 +1442,104 @@ function paymongoBodyVerdict(body, session) {
     const code = judgeCardAttach(parsed, session);
     return code === null ? CARD9 : refuse10(code);
 }
+// src/gopay.js
+var GOPAY_PSP = "gopay";
+var GOPAY_CARD_FORM_HOSTS = /* @__PURE__ */ Object.freeze({ "secure.gopay.com": "production", "secure.sandbox.gopay.com": "test" });
+var GOPAY_CARD_FORM_PATH = "/gp-card-comm/h/";
+var BODY_LIMIT7 = 1024;
+var ROOT_KEYS4 = /* @__PURE__ */ Object.freeze(["SG", "cardData", "type"]);
+var CARD_KEYS6 = /* @__PURE__ */ Object.freeze(["cardNumber", "cvc", "expiration"]);
+var TOKEN2 = /^[0-9A-Fa-f]{16,1024}$/;
+var SIGNATURE = /^[0-9A-Fa-f]{64}$/;
+var LANGUAGE = /^[a-z]{2}(?:-[A-Za-z]{2})?$/;
+var VERSION = /^[A-Za-z0-9]{1,16}$/;
+var QUERY_NAMES = /* @__PURE__ */ Object.freeze(["lang", "ver", "SG"]);
+var CARD_NUMBER7 = /^[0-9]{16}$/;
+var CODE = /^[0-9]{3}$/;
+var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
+var CARD_PAYMENT = "PAYMENT_CARD";
+var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys4 = (value, keys) => {
+    const own2 = Object.keys(value);
+    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+};
+var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function luhn(digits) {
+    let sum = 0;
+    for (let at = 0; at < digits.length; at += 1) {
+        let digit = Number(digits[digits.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function gopayCardFormUrl(url) {
+    if (typeof url !== "string" || url.length > 2048 || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    const environment = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
+    if (environment === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
+        return null;
+    if (!TOKEN2.test(parsed.pathname.slice(GOPAY_CARD_FORM_PATH.length)))
+        return null;
+    const names = [...parsed.searchParams.keys()];
+    if (names.some((name) => !QUERY_NAMES.includes(name)) || new Set(names).size !== names.length)
+        return null;
+    const signature = parsed.searchParams.get("SG");
+    const language = parsed.searchParams.get("lang");
+    const version = parsed.searchParams.get("ver");
+    if (signature === null || !SIGNATURE.test(signature) || language !== null && !LANGUAGE.test(language) || version !== null && !VERSION.test(version))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment, signature });
+}
+function readBody4(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record8(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function gopayBodyVerdict(body, url) {
+    let target;
+    if (url !== void 0) {
+        target = gopayCardFormUrl(url);
+        if (target === null)
+            return refuse11("gopay_url_refused");
+    }
+    const value = readBody4(body);
+    if (value === null || !sameKeys4(value, ROOT_KEYS4) || !record8(value.cardData) || !sameKeys4(value.cardData, CARD_KEYS6)) {
+        return refuse11("gopay_body_unsupported");
+    }
+    const card = value.cardData;
+    if (typeof value.SG !== "string" || !SIGNATURE.test(value.SG) || typeof card.cardNumber !== "string" || !CARD_NUMBER7.test(card.cardNumber) || !luhn(card.cardNumber) || typeof card.cvc !== "string" || !CODE.test(card.cvc) || typeof card.expiration !== "string" || !EXPIRATION.test(card.expiration) || typeof value.type !== "string") {
+        return refuse11("gopay_body_unsupported");
+    }
+    if (value.type !== CARD_PAYMENT)
+        return refuse11("gopay_card_saving_refused");
+    if (target !== void 0 && value.SG !== target.signature)
+        return refuse11("gopay_signature_mismatch");
+    return CARD10;
+}
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -1473,6 +1571,8 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "paymongo_url_refused" };
         return paymongoBodyVerdict(body, session);
     }
+    if (recognizer && recognizer.psp === GOPAY_PSP)
+        return gopayBodyVerdict(body, url);
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {

package/dist/cdp.js

@@ -7,7 +7,7 @@ import { MercadoCheckoutGate } from './mercado-checkout.js';
 import { MERCADO_CHECKOUT_PATTERN } from './mercado-checkout.generated.js';
 import { JuspayCheckoutGate } from './juspay-gate.js';
 import { ACI_CHECKOUT_REUSED, AciGate, playwrightReplacesNavigationBody } from './aci.js';
-import { EprotectGate } from './eprotect.js';
+import { EprotectGate, classifyEprotectRequest, eprotectScriptAnswer } from './eprotect.js';
 import { dispatchPreClaim, eventUrl, isArmedCreditguardCall } from './pre-claim.js';
 import { GMO_TOKEN_V1_PATTERNS, gmoRequestShop, isGmoTokenV1Request, recognizesGmo } from './gmo.js';
 import { isPaddleVgsCardsUrl } from './paddle-vgs.generated.js';
@@ -1549,6 +1549,23 @@ function replayOf(result, timeoutMs) {
     return { mode: 'token', authorizationId, status: response.status, headers: { ...response.headers }, body: response.body, amountVerified: null,
         ...(result.processor_context !== undefined ? { processorContext: result.processor_context } : {}), ...execution };
 }
+/**
+ * Worldpay eProtect's registration, resumed by the business. The read carries the registration as the API
+ * stored it, bare JSON, and the paused request is the vendor's JSONP <script>, which runs its answer and reads
+ * the registration only through the callback the paused URL named. So it gets the answer authorize() gives on
+ * the create path (client.ts): the registration inside that callback, under Worldpay's script type, and only a
+ * registration payment-core's judge accepts for that URL. A read in any other mode never answers it either. The
+ * paused URL alone decides, whatever recognizer claimed it. Any other request's replay passes as it came, and a
+ * create's replay never comes here, so no answer is wrapped twice.
+ */
+function eprotectResumedReplay(replay, request) {
+    if (classifyEprotectRequest(request.url, request.method)?.kind !== 'registration')
+        return replay;
+    const answer = replay.mode === 'token' ? eprotectScriptAnswer(request.url, replay) : null;
+    if (replay.mode !== 'token' || !answer)
+        throw new PaymentOutcomeUnknownError(replay.authorizationId, 'eprotect_registration_unconfirmed');
+    return { ...replay, status: answer.status, headers: answer.headers, body: answer.body };
+}
 /** The recogniser that claimed a paused request, by processor name, so a caller never re-matches the URL; null on a duck-typed vault without the read. */
 function recognizerNameOf(opts, url, method) {
     const read = opts.vault.recognizerOf;
@@ -2763,7 +2780,7 @@ export async function attachToCdp(cdp, pageSessionId, opts) {
             // through controller.resume; the replay it hands back goes down the same delivery path as a create's.
             const pause = opts.pauseOnly ? pauseForBusiness(opts, lifecycle, attempt.signal, { url: request.url, method: request.method, headers: request.headers ?? {}, body }, pageOrigin) : null;
             businessPause = pause;
-            const replay = pause ? await pause.replay : await opts.vault.authorize({
+            const replay = pause ? eprotectResumedReplay(await pause.replay, request) : await opts.vault.authorize({
                 user: opts.user,
                 merchant: opts.merchant,
                 amount: opts.amount,

package/dist/client.d.ts

@@ -1175,6 +1175,7 @@ export declare class CheckoutAuthError extends Error {
  * On PayPal's hosts an order id reads `{order}`:
  * https://www.paypal.com/v2/checkout/orders/{order}/confirm-payment-source.
  * On PayMongo's checkout host the session id reads `{session}`: https://checkout.paymongo.com/{session}.
+ * On GoPay's card frame hosts the card form's token reads `{token}`: https://secure.gopay.com/gp-card-comm/h/{token}.
  * A string that is not a URL keeps the part before any `?` or `#`, with the
  * same segments masked.
  */

package/dist/client.js

@@ -1115,6 +1115,18 @@ const PAYMONGO_SESSION = /(?:cs_)?(?:[A-Za-z0-9]|%[0-9A-Fa-f]{2}){24,}/gi;
 function maskPaymongoSession(path) {
     return path.replace(PAYMONGO_SESSION, '{session}');
 }
+/**
+ * GoPay's card frame posts the card to its own URL,
+ * https://secure.gopay.com/gp-card-comm/h/<hex token>?lang=..&ver=..&SG=<64 hex> (payment-core gopay.js). The
+ * token names that payment's card form, and with the SG, which redactUrl drops with the query, anyone who holds
+ * the URL can open the form and post a card to it. On GoPay's two card frame hosts the segment after /h/, in any
+ * case or after an escaped slash, reads {token}: https://secure.gopay.com/gp-card-comm/h/{token}.
+ */
+const GOPAY_CARD_FORM_HOST = /^secure(?:\.sandbox)?\.gopay\.com\.?$/i;
+const GOPAY_CARD_FORM_TOKEN = /(\/h(?:\/|%2f))[^/?#]*/gi;
+function maskGopayToken(path) {
+    return path.replace(GOPAY_CARD_FORM_TOKEN, '$1{token}');
+}
 /**
  * The processors whose card request carries its own credential in the URL path, with the hosts
  * that send it, the text that names those hosts in a string that is not a URL, and the mask. The
@@ -1155,6 +1167,7 @@ const PATH_CREDENTIALS = [
     { host: LYRA_HOST, named: /(?:payzen\.eu|systempay\.fr|societegenerale\.eu|lyra\.com)/i, mask: maskLyraSession },
     { host: PAYPAL_HOST, named: /paypal\.com/i, mask: maskPaypalOrder },
     { host: PAYMONGO_CHECKOUT_HOST, named: /checkout\.paymongo\.com/i, mask: maskPaymongoSession },
+    { host: GOPAY_CARD_FORM_HOST, named: /secure(?:\.sandbox)?\.gopay\.com/i, mask: maskGopayToken },
 ];
 /**
  * A URL as it may appear in an error message: origin + path only. A paused
@@ -1178,6 +1191,7 @@ const PATH_CREDENTIALS = [
  * On PayPal's hosts an order id reads `{order}`:
  * https://www.paypal.com/v2/checkout/orders/{order}/confirm-payment-source.
  * On PayMongo's checkout host the session id reads `{session}`: https://checkout.paymongo.com/{session}.
+ * On GoPay's card frame hosts the card form's token reads `{token}`: https://secure.gopay.com/gp-card-comm/h/{token}.
  * A string that is not a URL keeps the part before any `?` or `#`, with the
  * same segments masked.
  */

package/dist/primer.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 833d97716c57df725c942d14494012032a87b561ac7734676fe9dcb1d6be4819
+// artifact-sha256: c3b720efaa20837c1bf50cc511610282f324867e9fe5538ac155b2ff79f2d9b4
 // src/card-number-key.js
 var CARD_NUMBER_KEY = /^(number|card_number|cardnumber|cardNum|card_num|pan)$/i;
 // src/json-path.js
@@ -1450,6 +1450,104 @@ function paymongoBodyVerdict(body, session) {
     const code = judgeCardAttach(parsed, session);
     return code === null ? CARD9 : refuse10(code);
 }
+// src/gopay.js
+var GOPAY_PSP = "gopay";
+var GOPAY_CARD_FORM_HOSTS = /* @__PURE__ */ Object.freeze({ "secure.gopay.com": "production", "secure.sandbox.gopay.com": "test" });
+var GOPAY_CARD_FORM_PATH = "/gp-card-comm/h/";
+var BODY_LIMIT7 = 1024;
+var ROOT_KEYS4 = /* @__PURE__ */ Object.freeze(["SG", "cardData", "type"]);
+var CARD_KEYS6 = /* @__PURE__ */ Object.freeze(["cardNumber", "cvc", "expiration"]);
+var TOKEN2 = /^[0-9A-Fa-f]{16,1024}$/;
+var SIGNATURE = /^[0-9A-Fa-f]{64}$/;
+var LANGUAGE = /^[a-z]{2}(?:-[A-Za-z]{2})?$/;
+var VERSION = /^[A-Za-z0-9]{1,16}$/;
+var QUERY_NAMES = /* @__PURE__ */ Object.freeze(["lang", "ver", "SG"]);
+var CARD_NUMBER7 = /^[0-9]{16}$/;
+var CODE = /^[0-9]{3}$/;
+var EXPIRATION = /^[0-9]{2}(?:0[1-9]|1[0-2])$/;
+var CARD_PAYMENT = "PAYMENT_CARD";
+var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var sameKeys4 = (value, keys) => {
+    const own2 = Object.keys(value);
+    return own2.length === keys.length && own2.every((key, at) => key === keys[at]);
+};
+var refuse11 = (code) => Object.freeze({ verdict: "refuse", code });
+var CARD10 = /* @__PURE__ */ Object.freeze({ verdict: "card" });
+function luhn(digits2) {
+    let sum = 0;
+    for (let at = 0; at < digits2.length; at += 1) {
+        let digit = Number(digits2[digits2.length - 1 - at]);
+        if (at % 2 === 1) {
+            digit *= 2;
+            if (digit > 9)
+                digit -= 9;
+        }
+        sum += digit;
+    }
+    return sum % 10 === 0;
+}
+function gopayCardFormUrl(url) {
+    if (typeof url !== "string" || url.length > 2048 || url.includes("#"))
+        return null;
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return null;
+    }
+    if (parsed.href !== url || parsed.protocol !== "https:" || parsed.port || parsed.username || parsed.password)
+        return null;
+    const environment = Object.prototype.hasOwnProperty.call(GOPAY_CARD_FORM_HOSTS, parsed.hostname) ? GOPAY_CARD_FORM_HOSTS[parsed.hostname] : null;
+    if (environment === null || !parsed.pathname.startsWith(GOPAY_CARD_FORM_PATH))
+        return null;
+    if (!TOKEN2.test(parsed.pathname.slice(GOPAY_CARD_FORM_PATH.length)))
+        return null;
+    const names = [...parsed.searchParams.keys()];
+    if (names.some((name) => !QUERY_NAMES.includes(name)) || new Set(names).size !== names.length)
+        return null;
+    const signature = parsed.searchParams.get("SG");
+    const language = parsed.searchParams.get("lang");
+    const version = parsed.searchParams.get("ver");
+    if (signature === null || !SIGNATURE.test(signature) || language !== null && !LANGUAGE.test(language) || version !== null && !VERSION.test(version))
+        return null;
+    return Object.freeze({ host: parsed.hostname, environment, signature });
+}
+function readBody4(body) {
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
+        return null;
+    let value;
+    try {
+        value = JSON.parse(body);
+        if (!record8(value) || JSON.stringify(value) !== body)
+            return null;
+    }
+    catch {
+        return null;
+    }
+    return value;
+}
+function gopayBodyVerdict(body, url) {
+    let target;
+    if (url !== void 0) {
+        target = gopayCardFormUrl(url);
+        if (target === null)
+            return refuse11("gopay_url_refused");
+    }
+    const value = readBody4(body);
+    if (value === null || !sameKeys4(value, ROOT_KEYS4) || !record8(value.cardData) || !sameKeys4(value.cardData, CARD_KEYS6)) {
+        return refuse11("gopay_body_unsupported");
+    }
+    const card = value.cardData;
+    if (typeof value.SG !== "string" || !SIGNATURE.test(value.SG) || typeof card.cardNumber !== "string" || !CARD_NUMBER7.test(card.cardNumber) || !luhn(card.cardNumber) || typeof card.cvc !== "string" || !CODE.test(card.cvc) || typeof card.expiration !== "string" || !EXPIRATION.test(card.expiration) || typeof value.type !== "string") {
+        return refuse11("gopay_body_unsupported");
+    }
+    if (value.type !== CARD_PAYMENT)
+        return refuse11("gopay_card_saving_refused");
+    if (target !== void 0 && value.SG !== target.signature)
+        return refuse11("gopay_signature_mismatch");
+    return CARD10;
+}
 // src/card-fields.js
 function processorGate(recognizer, url, body) {
     if (recognizer && recognizer.psp === LYRA_PSP)
@@ -1481,6 +1579,8 @@ function processorGate(recognizer, url, body) {
             return { verdict: "refuse", code: "paymongo_url_refused" };
         return paymongoBodyVerdict(body, session);
     }
+    if (recognizer && recognizer.psp === GOPAY_PSP)
+        return gopayBodyVerdict(body, url);
     if (recognizer && recognizer.psp === GRAVY_PSP)
         return gravyBodyVerdict(body);
     if (recognizer && recognizer.psp === MONERIS_PSP) {
@@ -1601,12 +1701,12 @@ var KEEP_ON_FILE_REFUSAL = "Refusing to pay: this Primer payment would keep the
 var UNSUPPORTED_SDK_REFUSAL = "Refusing to pay: this checkout uses a Primer SDK Agentcard does not support yet. Nothing was sent.";
 var NETWORK_MISMATCH_REFUSAL = "Refusing to pay: this Primer payment names a card network that is not your card's. Nothing was sent.";
 var FILL_REFUSAL = "Could not fill the card fields for Primer. Nothing was sent.";
-var BODY_LIMIT7 = 16384;
+var BODY_LIMIT8 = 16384;
 var RESPONSE_LIMIT = 32768;
-var ROOT_KEYS4 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
+var ROOT_KEYS5 = ["paymentInstrument", "userDescription", "tokenType", "paymentFlow"];
 var INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear", "cardholderName", "preferredNetwork"];
 var REQUIRED_INSTRUMENT_KEYS = ["number", "cvv", "expirationMonth", "expirationYear"];
-var record8 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+var record9 = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
 var owns5 = (value, key) => Object.prototype.hasOwnProperty.call(value, key);
 var exact = (pattern, value) => typeof value === "string" && pattern.exec(value)?.[0] === value;
 var text2 = (value, max) => typeof value === "string" && value.length <= max && !/[\u0000-\u001f\u007f]/.test(value);
@@ -1629,7 +1729,7 @@ function isPrimerTokenizeUrl(url, method = "POST") {
     return parsed.href === url && parsed.protocol === "https:" && !parsed.port && !parsed.username && !parsed.password && !parsed.search && !parsed.hash && PRIMER_PCI_HOSTS.includes(parsed.hostname) && parsed.pathname === PRIMER_TOKENIZE_PATH;
 }
 function judgeBody2(body) {
-    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT7)
+    if (typeof body !== "string" || body === "" || body.length > BODY_LIMIT8)
         return null;
     let value;
     try {
@@ -1638,12 +1738,12 @@ function judgeBody2(body) {
     catch {
         return null;
     }
-    if (!record8(value) || !roundTrips(value, body))
+    if (!record9(value) || !roundTrips(value, body))
         return null;
-    if (!Object.keys(value).every((key) => ROOT_KEYS4.includes(key)) || !owns5(value, "paymentInstrument"))
+    if (!Object.keys(value).every((key) => ROOT_KEYS5.includes(key)) || !owns5(value, "paymentInstrument"))
         return null;
     const instrument = value.paymentInstrument;
-    if (!record8(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns5(instrument, key)))
+    if (!record9(instrument) || !Object.keys(instrument).every((key) => INSTRUMENT_KEYS.includes(key)) || !REQUIRED_INSTRUMENT_KEYS.every((key) => owns5(instrument, key)))
         return null;
     if (!digits(instrument.number, 12, 19) || !digits(instrument.cvv, 3, 4) || !exact(MONTH3, instrument.expirationMonth) || !exact(YEAR3, instrument.expirationYear))
         return null;
@@ -1671,7 +1771,7 @@ var CLIENT_TOKEN = /^[A-Za-z0-9._~+/=-]{16,4096}$/;
 var REQUEST_ID = /^[A-Za-z0-9-]{1,64}$/;
 var API_VERSION = /^2\.[0-9]{1,2}$/;
 function readHeaders(headers) {
-    if (!record8(headers))
+    if (!record9(headers))
         return null;
     const folded = /* @__PURE__ */ new Map();
     for (const [name, value] of Object.entries(headers)) {
@@ -1718,7 +1818,7 @@ function onTokenizePath(url) {
     }
 }
 function primerTokenizeRefusal(request) {
-    if (!record8(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
+    if (!record9(request) || request.method !== "POST" || !isPrimerTokenizeUrl(request.url))
         return "unsupported";
     return headersRefusal(request.headers) ?? primerBodyRefusal(request.body);
 }
@@ -1733,7 +1833,7 @@ function primerCardOnFileRefusal(url, options, policy = PRIMER_SESSION_CARD_ON_F
         return "unsupported";
     if (new URL(url).hostname !== LIVE_PCI_HOST)
         return null;
-    return primerCardOnFileDisclosure(url, policy) && record8(options) && options.keepOnFile === true ? null : "keep_on_file";
+    return primerCardOnFileDisclosure(url, policy) && record9(options) && options.keepOnFile === true ? null : "keep_on_file";
 }
 function primerRefusalMessage(reason) {
     if (reason === "keep_on_file")
@@ -1792,9 +1892,9 @@ function injectPrimerCard(body, card) {
     }
     return { body: JSON.stringify(judged.value), where };
 }
-var TOKEN2 = /^[A-Za-z0-9_-]{8,256}$/;
+var TOKEN3 = /^[A-Za-z0-9_-]{8,256}$/;
 var ERROR_ID = /^[A-Za-z][A-Za-z0-9_.-]{0,63}$/;
-var CODE = /^[A-Z][A-Z0-9_]{0,63}$/;
+var CODE2 = /^[A-Z][A-Z0-9_]{0,63}$/;
 var NETWORK_NAME = /^[A-Za-z][A-Za-z0-9 _-]{0,31}$/;
 var RESPONSE_MONTH = /^(?:0?[1-9]|1[0-2])$/;
 var RESPONSE_YEAR = /^(?:[0-9]{2}|20[0-9]{2})$/;
@@ -1817,25 +1917,25 @@ function readAnswer(body) {
         return null;
     try {
         const value = JSON.parse(body);
-        return record8(value) ? value : null;
+        return record9(value) ? value : null;
     }
     catch {
         return null;
     }
 }
-var tokenValue = (value) => exact(TOKEN2, value) && !panLike(value);
+var tokenValue = (value) => exact(TOKEN3, value) && !panLike(value);
 var optional = (value, key, check) => !owns5(value, key) || value[key] === null || check(value[key]);
 function cardDetails(data) {
-    if (!record8(data) || !exact(/^[0-9]{4}$/, data.last4Digits))
+    if (!record9(data) || !exact(/^[0-9]{4}$/, data.last4Digits))
         return null;
-    if (!optional(data, "first6Digits", (v) => exact(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain(v, 256)) || !optional(data, "network", (v) => exact(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record8))
+    if (!optional(data, "first6Digits", (v) => exact(/^[0-9]{6}$/, v)) || !optional(data, "expirationMonth", (v) => exact(RESPONSE_MONTH, v)) || !optional(data, "expirationYear", (v) => exact(RESPONSE_YEAR, v)) || !optional(data, "cardholderName", (v) => plain(v, 256)) || !optional(data, "network", (v) => exact(NETWORK_NAME, v)) || !optional(data, "isNetworkTokenized", (v) => typeof v === "boolean") || !optional(data, "binData", record9))
         return null;
     const safe = { last4Digits: data.last4Digits };
     for (const key of ["first6Digits", "expirationMonth", "expirationYear", "cardholderName", "network", "isNetworkTokenized"]) {
         if (owns5(data, key) && data[key] !== null)
             safe[key] = data[key];
     }
-    if (record8(data.binData)) {
+    if (record9(data.binData)) {
         const bin = {};
         for (const key of BIN_KEYS) {
             if (!owns5(data.binData, key) || data.binData[key] === null)
@@ -1851,7 +1951,7 @@ function cardDetails(data) {
 function threeDsSummary(value) {
     if (value === void 0 || value === null)
         return null;
-    if (!record8(value) || !exact(CODE, value.responseCode) || !optional(value, "reasonCode", (v) => exact(CODE, v)) || !optional(value, "reasonText", (v) => plain(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
+    if (!record9(value) || !exact(CODE2, value.responseCode) || !optional(value, "reasonCode", (v) => exact(CODE2, v)) || !optional(value, "reasonText", (v) => plain(v, 256)) || !optional(value, "protocolVersion", (v) => v === "" || exact(PROTOCOL, v)) || !optional(value, "challengeIssued", (v) => typeof v === "boolean"))
         return void 0;
     const safe = { responseCode: value.responseCode };
     for (const key of ["reasonCode", "reasonText", "protocolVersion", "challengeIssued"]) {
@@ -1879,7 +1979,7 @@ function rebuildToken(value) {
 }
 function primerErrorId(body) {
     const value = readAnswer(body);
-    const id = value && record8(value.error) ? value.error.errorId : null;
+    const id = value && record9(value.error) ? value.error.errorId : null;
     return exact(ERROR_ID, id) && !panLike(id) ? id : null;
 }
 function matchesCard(details, card) {

package/dist/stripe-checkout.generated.js

@@ -1,6 +1,6 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 3e73afac7d2a16c36e81a7ddca5ea143be4880e056cb31558d31d3d4d72d84b1
+// artifact-sha256: 7af6b8dae5c779ea1901a4deac135effd97b00ea0925db7a269c82330e110cc9
 // src/deep-freeze.js
 function deepFreeze(value) {
     if (value && typeof value === "object" && !Object.isFrozen(value)) {
@@ -1715,6 +1715,34 @@ var PROCESSOR_DEFINITIONS = deepFreeze([
         passthroughHeaders: ["^next-action$", "^next-router-state-tree$", "^accept$"],
         jsonCardFields: [[1, "data", "attributes", "details", "card_number"]],
         passWithoutCard: "checkout\\.paymongo\\.com/(?:cs_)?[A-Za-z0-9]{24}"
+    },
+    {
+        psp: "gopay",
+        // GoPay's payment gateway (Czech Republic and Slovakia), which a shop opens as a page or as an overlay frame
+        // (embed.js). The gateway loads GoPay's card frame from https://secure.gopay.com/gp-card-comm/h/<hex
+        // token>?lang=..&ver=..&SG=<64 hex>, and on Pay the frame posts the card as one JSON body to its own URL:
+        // {"SG":<the URL's SG>,"cardData":{"cardNumber":<16 digits>,"cvc":<3 digits>,"expiration":<YYMM>},
+        // "type":"PAYMENT_CARD"}, unencrypted. gopay.js holds the request rule the pause decision, the API's create
+        // and the device all read: exactly a card frame URL, a JSON Content-Type, and the frame's body byte for byte,
+        // with a body that names Click to Pay (the frame's "save the card" box) refused. The body names no amount
+        // and no shop: the payment GoPay keeps on its side holds both, so a live request is taken only for a
+        // checkout origin a reviewed pin lists. The frame's host answers no browser origin, so the card leaves the
+        // cardholder's device only through the checkout relay. The answer tells the gateway only whether GoPay took
+        // the card; the gateway then reads the payment's end from its own API and runs 3-D Secure by redirect.
+        // secure.sandbox.gopay.com is GoPay's sandbox: pinned (S7) to test rows, which send only test cards.
+        // Ships dark: served only to a client that declares `gopay_card_form`, gated off for every org until an
+        // operator lists one (`gopay:<org>`), and autopilot never sends this request (autopilot.js
+        // DEVICE_REPLAY_REFUSED_OPERATIONS). `(?![\w/.%-])` ends the path for a consumer that tests `match`
+        // unanchored.
+        capability: "gopay_card_form",
+        match: "secure(?:\\.sandbox)?\\.gopay\\.com/gp-card-comm/h/[0-9A-Fa-f]{16,1024}(?![\\w/.%-])",
+        hosts: ["^secure\\.gopay\\.com$", "^secure\\.sandbox\\.gopay\\.com$"],
+        sandboxHosts: ["^secure\\.sandbox\\.gopay\\.com$"],
+        hostEnvironmentPinned: true,
+        encoding: "json",
+        // The frame's own Accept rides as it sent it; origin, referer and cookies never do.
+        passthroughHeaders: ["^accept$"],
+        jsonCardFields: [["cardData", "cardNumber"]]
     }
 ]);
 var PSP_RECOGNIZERS = deepFreeze(PROCESSOR_DEFINITIONS.map(({ compose, encryptedCardFields, deviceSteps, deviceEncrypt, ...definition }) => definition));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-cards/sdk",
-  "version": "0.23.16",
+  "version": "0.23.17",
   "description": "Agentcard's SDK: one client, Agentcard, with two modules. checkout pauses a browser purchase and pays it with the person's own card; voice connects a person to your product once and approves a purchase by voice inside it. Card data never enters your process.",
   "type": "module",
   "main": "dist/index.js",