@agent-cards/sdk 0.23.27 → 0.23.28

package/CHANGELOG.md

@@ -4,6 +4,14 @@ An unreleased change waits as a file of its own in `changes/` (`changes/README.m
 
 ## Unreleased
 
+## 0.23.28
+
+- Hand the page no Juspay `/txns` answer whose bank redirect could carry the card. The page receives only Juspay's order id, transaction id, status and bank redirect, and the SDK now hands over an approved answer only when the redirect's pay/start link and its parameters name no 3-D Secure PaReq and hold no compressed value. A PaReq carries the card deflated, and any compressed value can, where a check that reads text never finds it. For any other answer, `authorize()` throws `PaymentOutcomeUnknownError` with reason `juspay_response_unconfirmed`, and the page never gets it. Agentcard's API checks the answer the same way before it stores it, whatever SDK version asks, so this is a second check behind it.
+
+- Read Juspay's transaction id the same way. The page gets the transaction id beside the bank redirect, so a `/txns` answer whose transaction id names a 3-D Secure PaReq or holds a compressed value now ends the same way, with `PaymentOutcomeUnknownError` and reason `juspay_response_unconfirmed`.
+
+- Stop Payrexx Pay's 3-D Secure posts after an answer whose 3-D Secure step could carry the card. When Payrexx answers the card request by starting 3-D Secure, the frame posts the card again for the authentication and the post-authentication, and the cardholder's device sends each post with the real card. An answer whose method or ACS address, or any of its members, names a 3-D Secure PaReq or holds a compressed value no longer opens those posts: each one fails in the browser, and the checkout reads `unsupported` with reason `unsupported_payrexx_card_resend`. Agentcard's API judges the answer the same way before it hands one over, so this is a second check behind it.
+
 ## 0.23.27
 
 - Pause Pin Payments' card request for the cardholder's device, for a company Agentcard turned Pin Payments on for. Pin's Hosted Fields (its control frame on `cdn.pinpayments.com`) and Pin.js on a merchant's own page send the card as JSON to `https://api.pinpayments.com/1/cards` under the merchant's publishable key, and Pin answers with a card token the merchant's server charges afterwards. The sync now also asks for `capabilities=pin_payments_card_token`, and the API serves Pin's recognizer only for a company Agentcard turned Pin on for. The SDK pauses only the card fields' own request at that exact URL: a secret key, an amount or any other body there fails in your browser before anything is created, and Pin's JSONP form and a card's own record are never paused. The cardholder's device sends the request to Pin itself with the real card, and the page gets Pin's card token. Pin's request names no price, so pass `amount` and `currency`, above zero: without them `authorize()` throws `AmountRequiredError` before anything is created. The API pays only a Pin account Agentcard reviewed for the checkout page the request comes from. Matching API and Vault releases are required. Pin Payments stays off for every company Agentcard has not turned it on for.

package/dist/juspay-gate.js

@@ -116,9 +116,9 @@ export class JuspayCheckoutGate {
 export function juspayPageAnswer(status, body, request) {
     if (status !== 200)
         return null;
-    // No token argument: like the API, the SDK never holds the real token the device's tokenize returned.
+    // No token or card argument: like the API, the SDK never holds the real token the device's tokenize returned, or the card.
     try {
-        return sanitizeJuspayTxnsResponse(body, request, undefined);
+        return sanitizeJuspayTxnsResponse(body, request, undefined, undefined);
     }
     catch {
         return null;

package/dist/juspay.generated.d.ts

@@ -69,8 +69,8 @@ declare function readJuspayTokenizeReply(status: any, text: any): {
     token?: undefined;
 };
 declare function isJuspayTokenizeRefusal(code: any): boolean;
-declare function sanitizeJuspayTxnsResponse(text: any, template: any, token: any): string;
-declare function juspayTxnsOutcome(status: any, text: any, template: any, token: any): {
+declare function sanitizeJuspayTxnsResponse(text: any, template: any, token: any, card: any): string;
+declare function juspayTxnsOutcome(status: any, text: any, template: any, token: any, card: any): {
     outcome: string;
     reason: string;
     code?: undefined;

package/dist/juspay.generated.js

@@ -1,6 +1,174 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: c771bc4608bb5f6fd8db2cd15a071bec7cfc12c8d753d1e38403790599ddf300
+// artifact-sha256: e7c7e538df5795d38e76bb0d005b7c053e5aecd796034c2195c57a1541901827
+// src/three-ds-step.js
+var RUN = /[A-Za-z0-9+/_-]{12,}/g;
+var RUN_LENGTH = 12;
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var LAYERS = 2;
+var PAREQ = /pareq/i;
+var PAGE_PAREQ = /\bname\s*=\s*["']?[^"'\s>]*pareq/i;
+var THREE_DS_STEP_UNREADABLE = "unreadable_three_ds_step";
+var THREE_DS_STEP_HOLDS_CARD = "card_in_three_ds_step";
+var PERCENT_LAYERS = 8;
+function percentDecoded(text) {
+    let out = text;
+    for (let layer = 0; layer < PERCENT_LAYERS; layer += 1) {
+        const next = out.replace(/%([0-9A-Fa-f]{2})/g, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+        if (next === out)
+            break;
+        out = next;
+    }
+    return out;
+}
+var NAMED = /* @__PURE__ */ Object.freeze({
+    amp: "&",
+    percnt: "%",
+    num: "#",
+    quest: "?",
+    semi: ";",
+    excl: "!",
+    dollar: "$",
+    lpar: "(",
+    rpar: ")",
+    ast: "*",
+    comma: ",",
+    commat: "@",
+    lsqb: "[",
+    rsqb: "]",
+    lcub: "{",
+    rcub: "}",
+    verbar: "|",
+    bsol: "\\",
+    hat: "^",
+    grave: "`",
+    plus: "+",
+    sol: "/",
+    equals: "=",
+    lowbar: "_",
+    period: ".",
+    colon: ":",
+    quot: '"',
+    apos: "'",
+    lt: "<",
+    gt: ">"
+});
+var NUMERIC = "#(?:[xX]([0-9a-fA-F]+)|([0-9]+));?";
+var BARE_NAME = "(sup[123]|frac(?:12|14|34)|[A-Za-z]+);?";
+var referenceText = (hex, decimal, name) => {
+    if (name !== void 0)
+        return Object.prototype.hasOwnProperty.call(NAMED, name.toLowerCase()) ? NAMED[name.toLowerCase()] : " ";
+    const point = hex === void 0 ? parseInt(decimal, 10) : parseInt(hex, 16);
+    return point <= 1114111 ? String.fromCodePoint(point) : "";
+};
+function referenceReadings(text) {
+    const read = (pattern) => text.replace(new RegExp(`&(?:${NUMERIC}|${pattern})`, "g"), (_, hex, decimal, name) => referenceText(hex, decimal, name));
+    return [read("([A-Za-z][A-Za-z0-9]*);"), read(BARE_NAME)];
+}
+function readings(text) {
+    const out = /* @__PURE__ */ new Set([text, percentDecoded(text)]);
+    for (const reading of [...out])
+        for (const decoded of referenceReadings(reading))
+            out.add(decoded).add(percentDecoded(decoded));
+    return out;
+}
+function base64Bytes(run, skip) {
+    let bits = 0;
+    let value = 0;
+    let out = "";
+    for (let i = skip; i < run.length; i += 1) {
+        const char = run[i];
+        value = value << 6 | (char === "-" ? 62 : char === "_" ? 63 : ALPHABET.indexOf(char));
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out += String.fromCharCode(value >> bits);
+            value &= (1 << bits) - 1;
+        }
+    }
+    return out;
+}
+var compressed = (bytes) => bytes.charCodeAt(0) === 31 && bytes.charCodeAt(1) === 139 || bytes.charCodeAt(0) === 120 && (30720 + bytes.charCodeAt(1)) % 31 === 0;
+function holdsStream(text, layers) {
+    for (const reading of readings(text)) {
+        for (const [run] of reading.matchAll(RUN)) {
+            const starts = [0];
+            for (let slash = run.indexOf("/"); slash >= 0; slash = run.indexOf("/", slash + 1))
+                starts.push(slash + 1);
+            if (starts.some((start) => run.length - start >= RUN_LENGTH && compressed(base64Bytes(run.slice(start, start + 4), 0))))
+                return true;
+            for (let skip = 0; layers > 0 && skip < 4; skip += 1)
+                if (holdsStream(base64Bytes(run, skip), layers - 1))
+                    return true;
+        }
+    }
+    return false;
+}
+function numberPattern(card) {
+    const number = card && (typeof card.number === "string" || typeof card.number === "number") ? String(card.number).replace(/[^0-9]/g, "") : "";
+    return number.length >= 12 && number.length <= 19 ? new RegExp(number.split("").join("[^0-9A-Za-z]{0,3}")) : null;
+}
+function holdsNumber(text, pattern, layers) {
+    for (const reading of readings(text)) {
+        if (pattern.test(reading))
+            return true;
+        if (layers === 0)
+            continue;
+        for (const [run] of reading.matchAll(RUN)) {
+            for (let skip = 0; skip < 4; skip += 1)
+                if (holdsNumber(base64Bytes(run, skip), pattern, layers - 1))
+                    return true;
+        }
+    }
+    return false;
+}
+function addressTexts(value) {
+    if (typeof value !== "string")
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    const names = [];
+    const texts = [value, ...url.pathname.split("/")];
+    for (const pair of `${url.search.slice(1)}&${url.hash.slice(1)}`.split("&")) {
+        if (pair === "")
+            continue;
+        const at = pair.indexOf("=");
+        names.push(at < 0 ? pair : pair.slice(0, at));
+        if (at >= 0)
+            texts.push(pair.slice(at + 1));
+    }
+    return { names, texts: [...texts, ...names] };
+}
+var textOf = (value) => typeof value === "string" ? value : JSON.stringify(value) ?? "";
+function threeDsStepLeak(card, step) {
+    const names = [];
+    const texts = [];
+    for (const url of step.urls ?? []) {
+        const address = addressTexts(url);
+        if (!address)
+            return THREE_DS_STEP_UNREADABLE;
+        names.push(...address.names);
+        texts.push(...address.texts);
+    }
+    for (const [name, value] of step.fields ?? []) {
+        names.push(textOf(name));
+        texts.push(textOf(name), textOf(value));
+    }
+    for (const page of step.pages ?? []) {
+        if ([...readings(textOf(page))].some((reading) => PAGE_PAREQ.test(reading)))
+            return THREE_DS_STEP_UNREADABLE;
+        texts.push(textOf(page));
+    }
+    if (names.some((name) => [...readings(name)].some((reading) => PAREQ.test(reading))) || texts.some((text) => holdsStream(text, LAYERS)))
+        return THREE_DS_STEP_UNREADABLE;
+    const pattern = numberPattern(card);
+    return pattern && texts.some((text) => holdsNumber(text, pattern, LAYERS)) ? THREE_DS_STEP_HOLDS_CARD : null;
+}
 // src/juspay.js
 var ENDPOINTS = Object.freeze({
     production: Object.freeze({ host: "api.juspay.in", txns: "https://api.juspay.in/txns", tokenize: "https://api.juspay.in/card/tokenize" }),
@@ -631,7 +799,7 @@ function payStartLink(url, host, merchantOk) {
         return false;
     return !url.pathname.split("/").some((segment) => /^\d{12,19}$/.test(segment) && luhn(segment));
 }
-function sanitizeJuspayTxnsResponse(text, template, token) {
+function sanitizeJuspayTxnsResponse(text, template, token, card) {
     const paused = templateOf(template);
     const value = readJson(text, MAX_RESPONSE);
     const forms = tokenForms(token);
@@ -675,9 +843,11 @@ function sanitizeJuspayTxnsResponse(text, template, token) {
         }
         authentication.params = safe;
     }
+    if (threeDsStepLeak(card, { urls: [authentication.url], fields: [["txn_id", txnId], ...Object.entries(authentication.params ?? {})] }))
+        return invalid();
     return JSON.stringify({ order_id: orderId, txn_id: txnId, status, payment: { authentication } });
 }
-function juspayTxnsOutcome(status, text, template, token) {
+function juspayTxnsOutcome(status, text, template, token, card) {
     if (!Number.isInteger(status))
         return { outcome: "unknown", reason: "juspay_unconfirmed" };
     if (status >= 500)
@@ -696,7 +866,7 @@ function juspayTxnsOutcome(status, text, template, token) {
     if (!JUSPAY_APPROVED_STATUSES.includes(value.status))
         return { outcome: "unknown", reason: "juspay_status_unknown" };
     try {
-        return { outcome: "approved", body: sanitizeJuspayTxnsResponse(text, template, token) };
+        return { outcome: "approved", body: sanitizeJuspayTxnsResponse(text, template, token, card) };
     }
     catch {
         return { outcome: "unknown", reason: "juspay_unsafe_response" };

package/dist/payrexx.generated.js

@@ -1,6 +1,174 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 12336c60151bbdaa63f9d3e665fb53c8e3407ba942140bef2928e7ce3a8b3e2c
+// artifact-sha256: 5166082ae6c8f452fbcd2df5f679aa40e78fe7fc9f9dff20d9d50512ae7b4487
+// src/three-ds-step.js
+var RUN = /[A-Za-z0-9+/_-]{12,}/g;
+var RUN_LENGTH = 12;
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var LAYERS = 2;
+var PAREQ = /pareq/i;
+var PAGE_PAREQ = /\bname\s*=\s*["']?[^"'\s>]*pareq/i;
+var THREE_DS_STEP_UNREADABLE = "unreadable_three_ds_step";
+var THREE_DS_STEP_HOLDS_CARD = "card_in_three_ds_step";
+var PERCENT_LAYERS = 8;
+function percentDecoded(text) {
+    let out = text;
+    for (let layer = 0; layer < PERCENT_LAYERS; layer += 1) {
+        const next = out.replace(/%([0-9A-Fa-f]{2})/g, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+        if (next === out)
+            break;
+        out = next;
+    }
+    return out;
+}
+var NAMED = /* @__PURE__ */ Object.freeze({
+    amp: "&",
+    percnt: "%",
+    num: "#",
+    quest: "?",
+    semi: ";",
+    excl: "!",
+    dollar: "$",
+    lpar: "(",
+    rpar: ")",
+    ast: "*",
+    comma: ",",
+    commat: "@",
+    lsqb: "[",
+    rsqb: "]",
+    lcub: "{",
+    rcub: "}",
+    verbar: "|",
+    bsol: "\\",
+    hat: "^",
+    grave: "`",
+    plus: "+",
+    sol: "/",
+    equals: "=",
+    lowbar: "_",
+    period: ".",
+    colon: ":",
+    quot: '"',
+    apos: "'",
+    lt: "<",
+    gt: ">"
+});
+var NUMERIC = "#(?:[xX]([0-9a-fA-F]+)|([0-9]+));?";
+var BARE_NAME = "(sup[123]|frac(?:12|14|34)|[A-Za-z]+);?";
+var referenceText = (hex, decimal, name) => {
+    if (name !== void 0)
+        return Object.prototype.hasOwnProperty.call(NAMED, name.toLowerCase()) ? NAMED[name.toLowerCase()] : " ";
+    const point = hex === void 0 ? parseInt(decimal, 10) : parseInt(hex, 16);
+    return point <= 1114111 ? String.fromCodePoint(point) : "";
+};
+function referenceReadings(text) {
+    const read = (pattern) => text.replace(new RegExp(`&(?:${NUMERIC}|${pattern})`, "g"), (_, hex, decimal, name) => referenceText(hex, decimal, name));
+    return [read("([A-Za-z][A-Za-z0-9]*);"), read(BARE_NAME)];
+}
+function readings(text) {
+    const out = /* @__PURE__ */ new Set([text, percentDecoded(text)]);
+    for (const reading of [...out])
+        for (const decoded of referenceReadings(reading))
+            out.add(decoded).add(percentDecoded(decoded));
+    return out;
+}
+function base64Bytes(run, skip) {
+    let bits = 0;
+    let value = 0;
+    let out = "";
+    for (let i = skip; i < run.length; i += 1) {
+        const char = run[i];
+        value = value << 6 | (char === "-" ? 62 : char === "_" ? 63 : ALPHABET.indexOf(char));
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out += String.fromCharCode(value >> bits);
+            value &= (1 << bits) - 1;
+        }
+    }
+    return out;
+}
+var compressed = (bytes) => bytes.charCodeAt(0) === 31 && bytes.charCodeAt(1) === 139 || bytes.charCodeAt(0) === 120 && (30720 + bytes.charCodeAt(1)) % 31 === 0;
+function holdsStream(text, layers) {
+    for (const reading of readings(text)) {
+        for (const [run] of reading.matchAll(RUN)) {
+            const starts = [0];
+            for (let slash = run.indexOf("/"); slash >= 0; slash = run.indexOf("/", slash + 1))
+                starts.push(slash + 1);
+            if (starts.some((start) => run.length - start >= RUN_LENGTH && compressed(base64Bytes(run.slice(start, start + 4), 0))))
+                return true;
+            for (let skip = 0; layers > 0 && skip < 4; skip += 1)
+                if (holdsStream(base64Bytes(run, skip), layers - 1))
+                    return true;
+        }
+    }
+    return false;
+}
+function numberPattern(card) {
+    const number = card && (typeof card.number === "string" || typeof card.number === "number") ? String(card.number).replace(/[^0-9]/g, "") : "";
+    return number.length >= 12 && number.length <= 19 ? new RegExp(number.split("").join("[^0-9A-Za-z]{0,3}")) : null;
+}
+function holdsNumber(text, pattern, layers) {
+    for (const reading of readings(text)) {
+        if (pattern.test(reading))
+            return true;
+        if (layers === 0)
+            continue;
+        for (const [run] of reading.matchAll(RUN)) {
+            for (let skip = 0; skip < 4; skip += 1)
+                if (holdsNumber(base64Bytes(run, skip), pattern, layers - 1))
+                    return true;
+        }
+    }
+    return false;
+}
+function addressTexts(value) {
+    if (typeof value !== "string")
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    const names = [];
+    const texts = [value, ...url.pathname.split("/")];
+    for (const pair of `${url.search.slice(1)}&${url.hash.slice(1)}`.split("&")) {
+        if (pair === "")
+            continue;
+        const at = pair.indexOf("=");
+        names.push(at < 0 ? pair : pair.slice(0, at));
+        if (at >= 0)
+            texts.push(pair.slice(at + 1));
+    }
+    return { names, texts: [...texts, ...names] };
+}
+var textOf = (value) => typeof value === "string" ? value : JSON.stringify(value) ?? "";
+function threeDsStepLeak(card, step) {
+    const names = [];
+    const texts = [];
+    for (const url of step.urls ?? []) {
+        const address = addressTexts(url);
+        if (!address)
+            return THREE_DS_STEP_UNREADABLE;
+        names.push(...address.names);
+        texts.push(...address.texts);
+    }
+    for (const [name, value] of step.fields ?? []) {
+        names.push(textOf(name));
+        texts.push(textOf(name), textOf(value));
+    }
+    for (const page of step.pages ?? []) {
+        if ([...readings(textOf(page))].some((reading) => PAGE_PAREQ.test(reading)))
+            return THREE_DS_STEP_UNREADABLE;
+        texts.push(textOf(page));
+    }
+    if (names.some((name) => [...readings(name)].some((reading) => PAREQ.test(reading))) || texts.some((text) => holdsStream(text, LAYERS)))
+        return THREE_DS_STEP_UNREADABLE;
+    const pattern = numberPattern(card);
+    return pattern && texts.some((text) => holdsNumber(text, pattern, LAYERS)) ? THREE_DS_STEP_HOLDS_CARD : null;
+}
 // src/payrexx.js
 var PAYREXX_PSP = "payrexx";
 var PAYREXX_CAPABILITY = "payrexx_card_frame";
@@ -287,8 +455,14 @@ function payrexxAnswerOutcome(status, text, card) {
             return { outcome: "refused", code: "payrexx_three_ds_declined" };
         if (step === "tokenless")
             return { outcome: "refused", code: "payrexx_three_ds_error" };
-        if (step !== null)
+        if (step !== null) {
+            const urls = [answer.threeDSMethodURL, answer.acsURL].filter((url) => typeof url === "string" && url !== "");
+            const members = Object.entries(answer).map(([key, value]) => [key, typeof value === "string" ? value : ""]);
+            const leak = threeDsStepLeak(card, { urls, fields: [...members, ["", text]] });
+            if (leak)
+                return { outcome: "unknown", reason: leak === THREE_DS_STEP_UNREADABLE ? "payrexx_three_ds_unreadable" : "payrexx_card_in_answer" };
             return { outcome: "approved", body: text, pending: "three_ds" };
+        }
     }
     return { outcome: "unknown", reason: "payrexx_answer_unconfirmed" };
 }

package/dist/wspay.generated.d.ts

@@ -17,7 +17,7 @@ declare function injectWspayCard(body: any, card: any, options: any): {
     body: string;
     where: string[];
 };
-declare function wspayResponseOutcome(status: any, text2: any): {
+declare function wspayResponseOutcome(status: any, text2: any, card: any): {
     outcome: string;
     reason: string;
     code?: undefined;

package/dist/wspay.generated.js

@@ -1,6 +1,174 @@
 // @ts-nocheck
 // Generated from @agent-cards/payment-core. Do not edit.
-// artifact-sha256: 9ba65916c5dc5ee3ca830d630cafbde62d537e61991c33c80f1520ac93ef0b0d
+// artifact-sha256: f3d9221468606ad3d7512105a7eb6c2eef4b813d5772cb2a5c31042874cb4984
+// src/three-ds-step.js
+var RUN = /[A-Za-z0-9+/_-]{12,}/g;
+var RUN_LENGTH = 12;
+var ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+var LAYERS = 2;
+var PAREQ = /pareq/i;
+var PAGE_PAREQ = /\bname\s*=\s*["']?[^"'\s>]*pareq/i;
+var THREE_DS_STEP_UNREADABLE = "unreadable_three_ds_step";
+var THREE_DS_STEP_HOLDS_CARD = "card_in_three_ds_step";
+var PERCENT_LAYERS = 8;
+function percentDecoded(text2) {
+    let out = text2;
+    for (let layer = 0; layer < PERCENT_LAYERS; layer += 1) {
+        const next = out.replace(/%([0-9A-Fa-f]{2})/g, (_, hex) => String.fromCharCode(parseInt(hex, 16)));
+        if (next === out)
+            break;
+        out = next;
+    }
+    return out;
+}
+var NAMED = /* @__PURE__ */ Object.freeze({
+    amp: "&",
+    percnt: "%",
+    num: "#",
+    quest: "?",
+    semi: ";",
+    excl: "!",
+    dollar: "$",
+    lpar: "(",
+    rpar: ")",
+    ast: "*",
+    comma: ",",
+    commat: "@",
+    lsqb: "[",
+    rsqb: "]",
+    lcub: "{",
+    rcub: "}",
+    verbar: "|",
+    bsol: "\\",
+    hat: "^",
+    grave: "`",
+    plus: "+",
+    sol: "/",
+    equals: "=",
+    lowbar: "_",
+    period: ".",
+    colon: ":",
+    quot: '"',
+    apos: "'",
+    lt: "<",
+    gt: ">"
+});
+var NUMERIC = "#(?:[xX]([0-9a-fA-F]+)|([0-9]+));?";
+var BARE_NAME = "(sup[123]|frac(?:12|14|34)|[A-Za-z]+);?";
+var referenceText = (hex, decimal, name) => {
+    if (name !== void 0)
+        return Object.prototype.hasOwnProperty.call(NAMED, name.toLowerCase()) ? NAMED[name.toLowerCase()] : " ";
+    const point = hex === void 0 ? parseInt(decimal, 10) : parseInt(hex, 16);
+    return point <= 1114111 ? String.fromCodePoint(point) : "";
+};
+function referenceReadings(text2) {
+    const read = (pattern) => text2.replace(new RegExp(`&(?:${NUMERIC}|${pattern})`, "g"), (_, hex, decimal, name) => referenceText(hex, decimal, name));
+    return [read("([A-Za-z][A-Za-z0-9]*);"), read(BARE_NAME)];
+}
+function readings(text2) {
+    const out = /* @__PURE__ */ new Set([text2, percentDecoded(text2)]);
+    for (const reading of [...out])
+        for (const decoded of referenceReadings(reading))
+            out.add(decoded).add(percentDecoded(decoded));
+    return out;
+}
+function base64Bytes(run, skip) {
+    let bits = 0;
+    let value = 0;
+    let out = "";
+    for (let i = skip; i < run.length; i += 1) {
+        const char = run[i];
+        value = value << 6 | (char === "-" ? 62 : char === "_" ? 63 : ALPHABET.indexOf(char));
+        bits += 6;
+        if (bits >= 8) {
+            bits -= 8;
+            out += String.fromCharCode(value >> bits);
+            value &= (1 << bits) - 1;
+        }
+    }
+    return out;
+}
+var compressed = (bytes) => bytes.charCodeAt(0) === 31 && bytes.charCodeAt(1) === 139 || bytes.charCodeAt(0) === 120 && (30720 + bytes.charCodeAt(1)) % 31 === 0;
+function holdsStream(text2, layers) {
+    for (const reading of readings(text2)) {
+        for (const [run] of reading.matchAll(RUN)) {
+            const starts = [0];
+            for (let slash = run.indexOf("/"); slash >= 0; slash = run.indexOf("/", slash + 1))
+                starts.push(slash + 1);
+            if (starts.some((start) => run.length - start >= RUN_LENGTH && compressed(base64Bytes(run.slice(start, start + 4), 0))))
+                return true;
+            for (let skip = 0; layers > 0 && skip < 4; skip += 1)
+                if (holdsStream(base64Bytes(run, skip), layers - 1))
+                    return true;
+        }
+    }
+    return false;
+}
+function numberPattern(card) {
+    const number = card && (typeof card.number === "string" || typeof card.number === "number") ? String(card.number).replace(/[^0-9]/g, "") : "";
+    return number.length >= 12 && number.length <= 19 ? new RegExp(number.split("").join("[^0-9A-Za-z]{0,3}")) : null;
+}
+function holdsNumber(text2, pattern, layers) {
+    for (const reading of readings(text2)) {
+        if (pattern.test(reading))
+            return true;
+        if (layers === 0)
+            continue;
+        for (const [run] of reading.matchAll(RUN)) {
+            for (let skip = 0; skip < 4; skip += 1)
+                if (holdsNumber(base64Bytes(run, skip), pattern, layers - 1))
+                    return true;
+        }
+    }
+    return false;
+}
+function addressTexts(value) {
+    if (typeof value !== "string")
+        return null;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return null;
+    }
+    const names = [];
+    const texts = [value, ...url.pathname.split("/")];
+    for (const pair of `${url.search.slice(1)}&${url.hash.slice(1)}`.split("&")) {
+        if (pair === "")
+            continue;
+        const at = pair.indexOf("=");
+        names.push(at < 0 ? pair : pair.slice(0, at));
+        if (at >= 0)
+            texts.push(pair.slice(at + 1));
+    }
+    return { names, texts: [...texts, ...names] };
+}
+var textOf = (value) => typeof value === "string" ? value : JSON.stringify(value) ?? "";
+function threeDsStepLeak(card, step) {
+    const names = [];
+    const texts = [];
+    for (const url of step.urls ?? []) {
+        const address = addressTexts(url);
+        if (!address)
+            return THREE_DS_STEP_UNREADABLE;
+        names.push(...address.names);
+        texts.push(...address.texts);
+    }
+    for (const [name, value] of step.fields ?? []) {
+        names.push(textOf(name));
+        texts.push(textOf(name), textOf(value));
+    }
+    for (const page of step.pages ?? []) {
+        if ([...readings(textOf(page))].some((reading) => PAGE_PAREQ.test(reading)))
+            return THREE_DS_STEP_UNREADABLE;
+        texts.push(textOf(page));
+    }
+    if (names.some((name) => [...readings(name)].some((reading) => PAREQ.test(reading))) || texts.some((text2) => holdsStream(text2, LAYERS)))
+        return THREE_DS_STEP_UNREADABLE;
+    const pattern = numberPattern(card);
+    return pattern && texts.some((text2) => holdsNumber(text2, pattern, LAYERS)) ? THREE_DS_STEP_HOLDS_CARD : null;
+}
 // src/wspay.js
 var WSPAY_CONFIRM_HOSTS = Object.freeze(["proxy.wspay.biz", "proxy-test.wspay.biz"]);
 var WSPAY_TEST_HOST = "proxy-test.wspay.biz";
@@ -303,7 +471,7 @@ function responseCode(result) {
     const code = record(trx) ? trx.response_code : null;
     return exact(/^[0-9]{4}$/, code) ? code : null;
 }
-function wspayResponseOutcome(status, text2) {
+function wspayResponseOutcome(status, text2, card) {
     if (status !== 200)
         return { outcome: "unknown", reason: "wspay_status_unconfirmed" };
     const value = readJson(text2);
@@ -319,8 +487,12 @@ function wspayResponseOutcome(status, text2) {
     }
     if (value.status === "approved" && approvedResult(result))
         return { outcome: "approved" };
-    if (value.status === "action_required" && (result === null || result === void 0) && keysWithin(value.action_required, ["acs_url", "redirect_to"]) && httpsUrl(value.action_required.acs_url) && httpsUrl(value.action_required.redirect_to))
+    if (value.status === "action_required" && (result === null || result === void 0) && keysWithin(value.action_required, ["acs_url", "redirect_to"]) && httpsUrl(value.action_required.acs_url) && httpsUrl(value.action_required.redirect_to)) {
+        const leak = threeDsStepLeak(card, { urls: [value.action_required.acs_url, value.action_required.redirect_to] });
+        if (leak)
+            return { outcome: "unknown", reason: leak === THREE_DS_STEP_UNREADABLE ? "wspay_three_ds_unreadable" : "wspay_answer_holds_card" };
         return { outcome: "approved", pending: "three_ds" };
+    }
     return { outcome: "unknown", reason: "wspay_unconfirmed" };
 }
 function sanitizeWspayResponse(text2, options) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-cards/sdk",
-  "version": "0.23.27",
+  "version": "0.23.28",
   "description": "Agentcard's SDK: one client, Agentcard, with two modules. checkout pauses a browser purchase and pays it with the person's own card; voice connects a person to your product once and approves a purchase by voice inside it. Card data never enters your process.",
   "type": "module",
   "main": "dist/index.js",