@agent-cards/sdk 0.23.20 → 0.23.22

package/dist/prepared-processor.d.ts

@@ -25,11 +25,15 @@
  * Cashier's card frame for a token, too soon for an approval after Pay. Its one environment is
  * production: Wix's tokenizer has no test host.
  *
+ * paygent: prepared only. Paygent's PaygentToken.js abandons its token request 35 seconds after the
+ * merchant's press sends it, too soon for an approval after the press. Its environments are its two token
+ * hosts: token.paygent.co.jp (production) and sandbox.paygent.co.jp (sandbox).
+ *
  * hipay: prepared only. The merchant's page gives HiPay's hosted fields 20 seconds after Pay, too soon for an
  * approval after Pay. Its environments are its two vault hosts: secure2-vault (production) and
  * stage-secure2-vault (sandbox).
  */
-export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly' | 'spreedly' | 'adyen' | 'checkout_com' | 'paysafe' | 'fiserv' | 'cybersource_flex' | 'aci' | 'creditguard' | 'worldpay_eprotect' | 'amadeus_checkout' | 'verifone' | 'cybersource_secure_acceptance' | 'paddle_vgs' | 'wix_payments' | 'hipay';
+export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly' | 'spreedly' | 'adyen' | 'checkout_com' | 'paysafe' | 'fiserv' | 'cybersource_flex' | 'aci' | 'creditguard' | 'worldpay_eprotect' | 'amadeus_checkout' | 'verifone' | 'cybersource_secure_acceptance' | 'paddle_vgs' | 'wix_payments' | 'paygent' | 'hipay';
 export type PreparationEnvironment = 'production' | 'sandbox' | 'shared';
 /**
  * How the approved card reaches the processor: the device's own request (token), or
@@ -66,7 +70,8 @@ export declare function preparedApprovalAnswersRetry(psp: string): boolean;
  * its own signing keys. A Verifone preparation pays in the environment of the key its reviewed
  * profile pins. CyberSource Secure Acceptance's are separate hosts too: secureacceptance is
  * live, testsecureacceptance is test. So are Paddle VGS's two card URLs: vault is live,
- * sandbox-vault is test. So are HiPay's two vault hosts: secure2-vault is live, stage-secure2-vault is test.
+ * sandbox-vault is test. So are Paygent's two token hosts: token is live, sandbox is test. So are
+ * HiPay's two vault hosts: secure2-vault is live, stage-secure2-vault is test.
  */
 export declare function validPreparationEnvironment(psp: string, environment: string): boolean;
 /**

package/dist/prepared-processor.js

@@ -15,6 +15,7 @@ import { isPreparedVerifoneRequest } from './verifone.js';
 import { isPreparedSecureAcceptanceRequest, secureAcceptanceEnvironment, secureAcceptancePreparationUrl, secureAcceptanceRequestRefusal, } from './cybersource-secure-acceptance.generated.js';
 import { PADDLE_VGS_CARDS_URLS, isPreparedPaddleVgsRequest } from './paddle-vgs.generated.js';
 import { WIX_PAYMENTS_TOKENIZE_URL, isPreparedWixPaymentsRequest } from './wix-payments.generated.js';
+import { paygentEnvironment, paygentPreparationUrl, paygentRequestRefusal } from './paygent.generated.js';
 import { HIPAY_TOKEN_URLS, hipayRequestRefusal, hipayTokenEnvironment, isPreparedHipayRequest } from './hipay.generated.js';
 export function preparationMode(psp) {
     return psp === 'adyen' || psp === 'fiserv' || psp === 'verifone' ? 'cse' : 'token';
@@ -50,7 +51,8 @@ export function preparedApprovalAnswersRetry(psp) {
  * its own signing keys. A Verifone preparation pays in the environment of the key its reviewed
  * profile pins. CyberSource Secure Acceptance's are separate hosts too: secureacceptance is
  * live, testsecureacceptance is test. So are Paddle VGS's two card URLs: vault is live,
- * sandbox-vault is test. So are HiPay's two vault hosts: secure2-vault is live, stage-secure2-vault is test.
+ * sandbox-vault is test. So are Paygent's two token hosts: token is live, sandbox is test. So are
+ * HiPay's two vault hosts: secure2-vault is live, stage-secure2-vault is test.
  */
 export function validPreparationEnvironment(psp, environment) {
     if (psp === 'bambora' || psp === 'mercado_pago' || psp === 'recurly' || psp === 'spreedly')
@@ -59,7 +61,7 @@ export function validPreparationEnvironment(psp, environment) {
     if (psp === 'wix_payments')
         return environment === 'production';
     return ['square', 'braintree', 'worldpay', 'adyen', 'checkout_com', 'paysafe', 'fiserv', 'cybersource_flex', 'aci', 'creditguard', 'worldpay_eprotect', 'amadeus_checkout', 'verifone',
-        'cybersource_secure_acceptance', 'paddle_vgs', 'hipay'].includes(psp) && ['production', 'sandbox'].includes(environment);
+        'cybersource_secure_acceptance', 'paddle_vgs', 'paygent', 'hipay'].includes(psp) && ['production', 'sandbox'].includes(environment);
 }
 /**
  * ACI's prepared endpoint, the literal the API names (backend checkout-prepared-processor.ts): its
@@ -107,6 +109,9 @@ export function preparationEndpoint(psp, environment) {
     // Wix Payments: the tokenize URL, the only URL the claim takes for it.
     if (psp === 'wix_payments')
         return WIX_PAYMENTS_TOKENIZE_URL;
+    // Paygent: the token URL on the environment's host, the only URL the claim takes for it.
+    if (psp === 'paygent')
+        return paygentPreparationUrl(environment);
     // HiPay: the token create on the environment's vault, the only URL the claim takes for it.
     if (psp === 'hipay')
         return HIPAY_TOKEN_URLS[environment];
@@ -267,6 +272,15 @@ export function matchesPreparedRequest(psp, environment, requestUrl, method, bod
     // site's app instance and the card frame's body), the rule the API and the Vault bind with too.
     if (psp === 'wix_payments')
         return isPreparedWixPaymentsRequest(requestUrl, method.toUpperCase(), body ?? null, environment, headers ?? {});
+    // Paygent: the environment's own token URL and payment-core's whole request rule (the script's text/plain
+    // and createToken's body byte for byte), the rule the API and the Vault bind with too. The method as the page
+    // sent it: the device sends only an uppercase POST. Which merchant_id and token key a live request may name
+    // is the API's to judge at the bind and the Vault's before it writes the card, against the reviewed pins
+    // each of them holds, so a merchant a later release reviews needs no new build of this library.
+    if (psp === 'paygent') {
+        return paygentEnvironment(requestUrl) === environment
+            && paygentRequestRefusal({ url: requestUrl, method, headers: headers ?? {}, body: body ?? null }) === null;
+    }
     // HiPay: the environment's own vault and payment-core's whole request rule (a JSON content type, a public username of
     // that environment and a complete create, never the hosted fields' number-only post), the rule the API and the Vault
     // bind with too.