@agent-cards/sdk 0.23.27 → 0.24.0

package/dist/pre-claim.d.ts

@@ -12,6 +12,7 @@ import { type MerchantProfile } from './merchant-hosted.js';
 import type { MerchantHandoffWatch } from './merchant-handoff.js';
 import { type CybersourceFlexDecision, type CybersourceFlexPause, type FlexRequest } from './cybersource-flex.js';
 import { type CardEndpointProfile } from './card-endpoint.js';
+import { type NikeOrders } from './nike-order.js';
 import { type PayrailsSessionCapture, type PayrailsSidecar } from './payrails.js';
 import { type VerifoneProfile } from './verifone.js';
 import { type WorldlineMyCheckoutProducts } from './worldline-mycheckout.js';
@@ -250,6 +251,8 @@ export interface PreClaimContext {
      * card frame is refused.
      */
     payrexx?: PayrexxFollowUps;
+    /** The approval Nike's order is held to once a card went through Nike's profile (nike-order.ts). Absent: Nike's order is left alone. */
+    nikeOrders?: NikeOrders;
 }
 /**
  * The URL an event may name for a request. For an armed merchant profile's
@@ -265,6 +268,10 @@ export declare function eventUrl(vault: {
 /** A gate returns a decision when it handles the request, undefined to defer to
  * the next gate, or a promise of either when it must do I/O first. */
 export type PreClaimGate = (ctx: PreClaimContext) => PreClaimDecision | undefined | Promise<PreClaimDecision | undefined>;
+/** What the Nike order gate reads of a paused request and its attachment. */
+export type NikeOrderGateContext = Pick<PreClaimContext, 'request' | 'nikeOrders' | 'lifecycle' | 'effects' | 'onEvent' | 'lifecycleAborted' | 'terminal'>;
+/** The Nike order gate's decision, already performed, or undefined when the request is not its to judge. */
+export declare function nikeOrderGate(ctx: NikeOrderGateContext): Promise<PreClaimDecision> | undefined;
 export declare const MERCHANT_BODY_UNREADABLE = "the paused request carries no body the SDK could read, so Agentcard cannot tell whether it carries a card";
 export declare const verifonePreClaim: PreClaimGate;
 export declare const fiservPreClaim: PreClaimGate;
@@ -280,6 +287,7 @@ export declare function isArmedCreditguardCall(vault: {
 } | undefined, url: string): boolean;
 export declare const przelewy24PreClaim: PreClaimGate;
 export declare const barionPreClaim: PreClaimGate;
+export declare const payplugPreClaim: PreClaimGate;
 export declare const ekashuPreClaim: PreClaimGate;
 export declare const transbankPreClaim: PreClaimGate;
 export declare const paytrailPreClaim: PreClaimGate;
@@ -287,6 +295,7 @@ export declare const redsysPreClaim: PreClaimGate;
 export declare const quickpayPreClaim: PreClaimGate;
 export declare const comgatePreClaim: PreClaimGate;
 export declare const eximbayPreClaim: PreClaimGate;
+export declare const oceanpaymentPreClaim: PreClaimGate;
 export declare const paypalHostedFieldsPreClaim: PreClaimGate;
 export declare const paypalCardFormsPreClaim: PreClaimGate;
 export declare const cybersourceSecureAcceptancePreClaim: PreClaimGate;

package/dist/pre-claim.js

@@ -66,7 +66,7 @@ import { datatransPauseDecision, isDatatransHost } from './datatrans.js';
 import { DATATRANS_INVALID_REQUEST } from './datatrans.generated.js';
 import { INVALID_TOKENEX_IFRAME_REQUEST, TOKENEX_IFRAME_PSP, isTokenexIframePath, servesTokenexIframe, tokenexIframePauseDecision, } from './tokenex-iframe.js';
 import { isPelecardHost, pelecardRefusal } from './pelecard.js';
-import { ACI_CHECKOUT_REUSED } from './aci.js';
+import { ACI_CHECKOUT_REUSED, SPLIT_CARD_REUSED } from './aci.js';
 import { ACI_EXPIRY_UNSTRIPPABLE } from './aci.generated.js';
 import { CREDITGUARD_PPS_HOSTS, classifyCreditguardRequest, creditguardCompanionAnswer, creditguardCompanionCall, creditguardNuveiRefusal, creditguardProcessRefusal, creditguardProcessTxId, } from './creditguard.generated.js';
 import { isPrimerPciHost, primerRequestVerdict } from './primer.js';
@@ -78,6 +78,7 @@ import { isFiservCaptureHost, isFiservPausableBody } from './fiserv.js';
 import { CYBERSOURCE_FLEX_PSP, isCybersourceFlexHost } from './cybersource-flex.js';
 import { cardEndpointCarriesCard, cardEndpointDetail, cardEndpointFor, cardEndpointLive, cardEndpointPasses, cardEndpointResendFor, cardEndpointReviewed, } from './card-endpoint.js';
 import { cardEndpointStoppedPage, refusedNavigationOutcome } from './card-endpoint-page.js';
+import { NIKE_ORDER_DETAIL } from './nike-order.js';
 import { PAYRAILS_HOLDING_REASONS, PAYRAILS_SESSION_MESSAGE, isPayrailsHost, isPayrailsPaymentUrl, isPayrailsStaticHost, payrailsKeyRefusal, payrailsPaymentRefusal, payrailsRequestKind, payrailsSaveRefusal, } from './payrails.js';
 import { classifyVerifoneProfileRequest, verifoneTemplatedUrl } from './verifone.js';
 import { isPaymentHighwayCardLookup, isPaymentHighwayHost, isPaytrailCardMethodUrl, isPaytrailEntry, isPaytrailServed } from './paytrail.js';
@@ -86,9 +87,11 @@ import { isArmedTransbankUrl } from './transbank.js';
 import { isRedsysEntry, isRedsysHost, redsysEntryUrl } from './redsys.js';
 import { isArmedPrzelewy24Url, isPrzelewy24PayStep } from './przelewy24.js';
 import { isArmedBarionUrl, isBarionPayStep } from './barion.js';
+import { isArmedPayplugUrl, isPayplugPayStep } from './payplug.js';
 import { isQuickpayCardLookup, isQuickpayEntry, quickpayEntryUrl } from './quickpay.js';
 import { isArmedComgateUrl } from './comgate.js';
 import { isArmedEximbayUrl, isEximbayEntry } from './eximbay.js';
+import { isArmedOceanpaymentUrl, isOceanpaymentSendPay } from './oceanpayment.js';
 import { PAYPAL_HOSTED_FIELDS_REASON, isPaypalHostedFieldsConfirm, paypalHostedFieldsBody } from './paypal-hosted-fields.js';
 import { PAYPAL_CARD_FIELDS_REASON, PAYPAL_GUEST_CHECKOUT_REASON, isPaypalCardFieldsConfirm, isPaypalGraphql, paypalCardFieldsBody, paypalGraphqlCard, paypalGraphqlNamesCardOperation, } from './paypal-card-forms.js';
 import { CYBERSOURCE_SECURE_ACCEPTANCE_REASON, CYBERSOURCE_SECURE_ACCEPTANCE_RECIPIENT, cybersourceSecureAcceptanceRequest, isCybersourceSecureAcceptanceUrl, isSecureAcceptanceFramePost, } from './cybersource-secure-acceptance.js';
@@ -287,6 +290,38 @@ async function cardEndpointUnsupported(ctx, profile, reviewed) {
     await ctx.effects.abort();
     return { kind: 'abort' };
 }
+// Nike's order after its card request (nike-order.ts, payment-core merchant-card-endpoint-nike-order.js), Felipe's amount
+// rule C: the one request off a profile's endpoint the SDK holds. Once the adapters asked the cardholder to pay a card
+// request through Nike's profile on this attachment, every write to Nike's API host is judged here. One reviewed order
+// whose total and currency are the approved amount continues with its body unchanged, and only while the checkout still
+// names that approval as under way (followUpMaySend); after it, only a byte-identical retry does. An order that fails the
+// rule aborts, so Nike never authorizes the card, and the checkout ends failed with nothing charged
+// (lifecycle.merchantOrderRefused); so does every order while no approved amount was read, and every later order under
+// that approval. Another order after the one let go, or one the checkout no longer names as under way, aborts and leaves
+// the checkout's state as it is. Anything else, every request of an attachment where no card went through Nike's
+// profile included, defers. The adapters also run nikeOrderGate on a request paused at the browser target.
+const nikeOrderPreClaim = (ctx) => nikeOrderGate(ctx);
+/** The Nike order gate's decision, already performed, or undefined when the request is not its to judge. */
+export function nikeOrderGate(ctx) {
+    const verdict = ctx.nikeOrders?.judge(ctx.request.url, ctx.request.method, () => ctx.request.body, (authorizationId) => followUpMaySend(ctx, { authorizationId })) ?? null;
+    if (!verdict)
+        return undefined;
+    return verdict.refusal === null ? nikeOrderReleased(ctx, verdict.authorizationId) : nikeOrderRefused(ctx, verdict.authorizationId, verdict.refusal);
+}
+// The refusals that stop one order and leave the checkout's state as it is.
+const NIKE_ORDER_STOPS = new Set(['another_order', 'approval_not_current', 'earlier_order_refused']);
+async function nikeOrderReleased(ctx, authorizationId) {
+    ctx.onEvent?.({ type: 'merchant_order_released', detail: { authorizationId, ...NIKE_ORDER_DETAIL } });
+    await ctx.effects.continueRequest().catch(() => { });
+    return { kind: 'continue' };
+}
+async function nikeOrderRefused(ctx, authorizationId, reason) {
+    if (!NIKE_ORDER_STOPS.has(reason))
+        ctx.lifecycle.merchantOrderRefused(`merchant_order_${reason}`);
+    ctx.onEvent?.({ type: 'merchant_order_refused', detail: { authorizationId, ...NIKE_ORDER_DETAIL, reason } });
+    await ctx.effects.abort();
+    return { kind: 'abort' };
+}
 // Mercado Pago's native Checkout Pro shares one origin between its BIN-lookup
 // configuration and its card association. A request that is not for that origin
 // defers synchronously; a POST to it is handled asynchronously (a document read
@@ -1034,6 +1069,12 @@ async function pelecardBlock(ctx, reason) {
 // Everything else on ACI's hosts (the widget script, /bins, /v1/collect, GETs)
 // is not a POST to a checkout and defers. Synchronous for the card-number
 // request, so it pauses in the microtask it paused in.
+// A JSON split card the registry serves (aci.ts) takes the same path, keyed by
+// the URL its legs share: its card request defers to the arbiter unless that URL
+// already has one answered, or one running with no approval open
+// (split_card_reused), its code and expiry requests are held, a holder request
+// continues, and anything else is refused with the processor's code or
+// split_card_leg_unsupported. It has no /payment.
 const aciPreClaim = (ctx) => {
     const leg = ctx.aci?.classify(ctx.request.url, ctx.request.method, ctx.request.body);
     if (!leg)
@@ -1050,8 +1091,15 @@ const aciPreClaim = (ctx) => {
         return aciPayment(ctx);
     // The card-number request: the arbiter pauses it for the vault claim flow,
     // unless this checkout already has one running or answered (AciGate.begin).
-    if (ctx.aci.reused(leg))
-        return aciRefuse(ctx, ACI_CHECKOUT_REUSED);
+    // While a JSON split card's approval is still open, its card request again is
+    // the page's retry of the one it gave up on: the adapters bind that retry to
+    // the open approval, or refuse it there as a second purchase, so the page's
+    // retry gets the late approval's answer instead of a refusal here.
+    if (ctx.aci.reused(leg)) {
+        if ('group' in leg && ctx.awaitingApproval())
+            return undefined;
+        return aciRefuse(ctx, 'group' in leg ? SPLIT_CARD_REUSED : ACI_CHECKOUT_REUSED);
+    }
     return undefined;
 };
 async function aciContinue(ctx) {
@@ -1059,16 +1107,17 @@ async function aciContinue(ctx) {
     return { kind: 'continue' };
 }
 async function aciHold(ctx, leg) {
+    const prefix = 'group' in leg ? 'split_card' : 'aci';
     const answer = await ctx.aci.hold(leg);
     if (answer && !ctx.interceptionAborted() && !ctx.lifecycleAborted()) {
         try {
             await ctx.effects.answer(answer);
-            ctx.onEvent?.({ type: 'aci_leg_absorbed', detail: { url: redactUrl(ctx.request.url) } });
+            ctx.onEvent?.({ type: `${prefix}_leg_absorbed`, detail: { url: redactUrl(ctx.request.url) } });
             return { kind: 'answer' };
         }
         catch { /* the page's request is gone; nothing was forwarded */ }
     }
-    ctx.onEvent?.({ type: 'blocked', detail: 'aci_leg_unanswered' });
+    ctx.onEvent?.({ type: 'blocked', detail: `${prefix}_leg_unanswered` });
     await ctx.effects.abort();
     return { kind: 'abort' };
 }
@@ -1680,6 +1729,20 @@ export const barionPreClaim = (ctx) => {
         return undefined;
     return processorPageAbort(ctx);
 };
+// PayPlug's payment page (payplug.ts). Once this build's registry serves PayPlug's entry (a capability the API serves
+// only to Agentcard's own company), every request to PayPlug's page host pauses. The merchant's redirect to the page,
+// a GET of /pay/<payment id> or /pay/test/<payment id> exactly, is no step of this gate's: it defers, and the terminal
+// arbiter pauses it for the claim flow like any card request, so the cardholder's device pays it. Every step toward
+// paying on the page itself aborts as an unsupported checkout: every POST to the page's host, the card post among
+// them. So PayPlug never sees the card the agent typed. The page's own GETs, its scripts, styles, images and frames,
+// continue. With PayPlug not served, the gate defers, and every request continues as before. Synchronous until it must
+// abort, like every gate. Exported for the gate registry's tests.
+export const payplugPreClaim = (ctx) => {
+    const { url, method } = ctx.request;
+    if (!isPayplugPayStep(url, method) || !isArmedPayplugUrl(ctx.vault, url))
+        return undefined;
+    return processorPageAbort(ctx);
+};
 // NMI's hosted payment page (ekashu.ts). Once this build's registry serves NMI's entry (a
 // capability the API serves only to a company Agentcard turned NMI on for), every request to
 // NMI's two hosts pauses, and this gate judges the POSTs:
@@ -1844,6 +1907,21 @@ export const eximbayPreClaim = (ctx) => {
         return undefined;
     return processorPageAbort(ctx);
 };
+// Oceanpayment's hosted payment page (oceanpayment.ts). Once this build's registry serves Oceanpayment's card post (a
+// capability the API serves only to the company the gate turns Oceanpayment on for), every request to its two hosts
+// pauses, and this gate judges the ones that are not a GET:
+//   - the page's card post, exactly as its form action writes it, defers, and the terminal arbiter pauses it for the
+//     claim flow like any card request: the cardholder's device pays it;
+//   - every other one (Cardinal's device-data call, which carries the typed number, a card post of another spelling, the
+//     page's cancel) aborts as an unsupported checkout, so Oceanpayment never sees the card the agent typed.
+// A GET (the page, its scripts, its log) is not this gate's and continues. With Oceanpayment not served, the gate defers
+// and every request continues as before. Synchronous until it must abort, like every gate. Exported for its tests.
+export const oceanpaymentPreClaim = (ctx) => {
+    const { url, method } = ctx.request;
+    if (String(method).toUpperCase() === 'GET' || !isArmedOceanpaymentUrl(ctx.vault, url) || isOceanpaymentSendPay(url, method))
+        return undefined;
+    return processorPageAbort(ctx);
+};
 // PayPal's legacy Hosted Fields (paypal-hosted-fields.ts). Its tokenization frame posts the card the
 // agent typed to the Orders v2 confirm-payment-source on cors.api.paypal.com (or its sandbox), which
 // no Vault mode takes over, so every company's adapters hand each POST there to this gate:
@@ -2499,8 +2577,9 @@ async function unsupportedContinue(ctx) {
  * arbiter runs after all of them and is not part of this list. A gate appended
  * after Stripe is never offered a step Stripe claimed: Stripe answers, aborts or
  * pauses each one itself. */
-export const PSP_PRE_CLAIM_GATES = [cardEndpointResendPreClaim, cardEndpointPreClaim, mercadoPreClaim, juspayPreClaim, braintreePreClaim, stripePreClaim, merchantHostedPreClaim, verifonePreClaim, fiservPreClaim, gmoPreClaim, cybersourceFlexPreClaim, datatransPreClaim, tokenexIframePreClaim, pelecardPreClaim, aciPreClaim, creditguardPreClaim, primerPreClaim, payrailsPreClaim, convergePreClaim, eprotectPreClaim, sbpsPreClaim, wspayPreClaim, shijiStsPreClaim, ekashuPreClaim, redsysPreClaim, quickpayPreClaim, comgatePreClaim, przelewy24PreClaim, transbankPreClaim, eximbayPreClaim, barionPreClaim, paypalHostedFieldsPreClaim,
-    paypalCardFormsPreClaim, cybersourceSecureAcceptancePreClaim, worldlineMyCheckoutPreClaim, paddleVgsPayPreClaim, ebanxPreClaim, payrexxPreClaim, hipayPreClaim, paytrailPreClaim];
+export const PSP_PRE_CLAIM_GATES = [cardEndpointResendPreClaim, cardEndpointPreClaim, nikeOrderPreClaim, mercadoPreClaim, juspayPreClaim, braintreePreClaim, stripePreClaim, merchantHostedPreClaim, verifonePreClaim, fiservPreClaim, gmoPreClaim, cybersourceFlexPreClaim, datatransPreClaim, tokenexIframePreClaim, pelecardPreClaim, aciPreClaim, creditguardPreClaim, primerPreClaim, payrailsPreClaim, convergePreClaim, eprotectPreClaim, sbpsPreClaim, wspayPreClaim, shijiStsPreClaim, ekashuPreClaim, redsysPreClaim, quickpayPreClaim, comgatePreClaim, przelewy24PreClaim, transbankPreClaim, eximbayPreClaim, barionPreClaim, payplugPreClaim, paypalHostedFieldsPreClaim,
+    paypalCardFormsPreClaim, cybersourceSecureAcceptancePreClaim, worldlineMyCheckoutPreClaim, paddleVgsPayPreClaim, ebanxPreClaim, payrexxPreClaim, hipayPreClaim, paytrailPreClaim,
+    oceanpaymentPreClaim];
 /** Run each gate in order; the first to return a decision wins. If none does,
  * the terminal arbiter decides between continue, abort (unsupported) and pause.
  * Returns synchronously while every gate defers synchronously (an ordinary card

package/dist/preflight-capabilities.generated.d.ts

@@ -1193,10 +1193,6 @@ export declare const CHECKOUT_PREFLIGHT_CAPABILITIES: {
         readonly psp: "vgs";
         readonly reason: "iframe_bound_tokenization";
         readonly action: "human_checkout";
-    }, {
-        readonly psp: "bluesnap";
-        readonly reason: "multi_request_tokenization_not_supported";
-        readonly action: "human_checkout";
     }, {
         readonly psp: "stripe";
         readonly reason: "unbound_token_to_payment_intent_continuation";

package/dist/preflight-capabilities.generated.js

@@ -1840,11 +1840,6 @@ export const CHECKOUT_PREFLIGHT_CAPABILITIES = {
             "reason": "iframe_bound_tokenization",
             "action": "human_checkout"
         },
-        {
-            "psp": "bluesnap",
-            "reason": "multi_request_tokenization_not_supported",
-            "action": "human_checkout"
-        },
         {
             "psp": "stripe",
             "reason": "unbound_token_to_payment_intent_continuation",

package/dist/preflight-catalog.json

@@ -2139,6 +2139,52 @@
       "hostname_pattern": "^cdn\\.sandbox\\.[a-z0-9-]+\\.gr4vy\\.app$",
       "pathname_pattern": "^\\/secure-fields\\/(?:latest|[0-9]{1,3}(?:\\.[0-9]{1,3}){0,2})\\/secure-fields\\.js$"
     },
+    {
+      "id": "bambora-na-custom-checkout-fields",
+      "psp": "bambora",
+      "kinds": [
+        "frame",
+        "iframe",
+        "document"
+      ],
+      "origin": "https://libs.na.bambora.com",
+      "path_pattern": "/customcheckout/1.:minor.:patch{,-:build}/iframe.html",
+      "sources": [
+        {
+          "kind": "primary_source",
+          "reference": "https://docs.na.worldline-solutions.com/build-your-integration/checkout-form/custom-checkout/reference",
+          "reviewed_on": "2026-09-11"
+        },
+        {
+          "kind": "saved_observation",
+          "reference": "catalog-psp-scan-2026-10-23:kent-ca-custom-checkout-1.0.2-card-fields",
+          "reviewed_on": "2026-10-23"
+        }
+      ],
+      "hostname_pattern": "^libs\\.na\\.bambora\\.com$",
+      "pathname_pattern": "^\\/customcheckout\\/1\\.[0-9]{1,3}\\.[0-9]{1,3}(?:-[0-9]{1,4})?\\/iframe\\.html$"
+    },
+    {
+      "id": "worldpay-wpg-hosted-payment-page",
+      "psp": "worldpay",
+      "kinds": [
+        "document",
+        "frame",
+        "iframe"
+      ],
+      "origin": "https://payments.worldpay.com",
+      "path_pattern": "/app/{hpp,hpp-iframe}/*",
+      "sources": [
+        {
+          "kind": "saved_observation",
+          "reference": "catalog-psp-scan-2026-10-23:razer-worldpay-hosted-payment-page",
+          "reviewed_on": "2026-10-23"
+        }
+      ],
+      "variant_unverified": "The implemented Worldpay adapter covers Access Checkout card sessions; Worldpay hosted payment pages under payments.worldpay.com/app/hpp take the card on Worldpay's own page and are not admitted.",
+      "hostname_pattern": "^payments\\.worldpay\\.com$",
+      "pathname_pattern": "^\\/app\\/hpp(?:-iframe)?\\/"
+    },
     {
       "id": "paypal-hosted-fields-payments-sdk",
       "psp": "paypal",
@@ -6958,11 +7004,6 @@
       "reason": "iframe_bound_tokenization",
       "action": "human_checkout"
     },
-    {
-      "psp": "bluesnap",
-      "reason": "multi_request_tokenization_not_supported",
-      "action": "human_checkout"
-    },
     {
       "psp": "stripe",
       "reason": "unbound_token_to_payment_intent_continuation",

package/dist/preflight-playwright.d.ts

@@ -20,9 +20,9 @@ export interface CheckoutCollectionOptions {
     timeoutMs?: number;
     /** Maximum frame count. Default and maximum 64. */
     maxFrames?: number;
-    /** Maximum document and asset observations. Default and maximum 2,048. */
+    /** Maximum document and asset observations. Default and maximum 2,048. An asset no reviewed rule can match is skipped and not counted. */
     maxSignals?: number;
-    /** Maximum transient observation and returned snapshot size. Default and maximum 262,144 bytes; minimum 512 bytes. */
+    /** Maximum transient observation and returned snapshot size. Default and maximum 262,144 bytes; minimum 512 bytes. Skipped assets cost nothing. */
     maxSnapshotBytes?: number;
 }
 export type InspectCheckoutOptions = CheckoutPreflightOptions & {

package/dist/preflight-playwright.js

@@ -1,10 +1,15 @@
-import { normalizeCheckoutSignals, assessCheckoutSupport, cardEntryAttributable, } from './preflight.js';
+import { normalizeCheckoutSignals, assessCheckoutSupport, cardEntryAttributable, getCheckoutPreflightCatalog, CHECKOUT_PREFLIGHT_LIMITS, } from './preflight.js';
 const EVENTS = ['framenavigated', 'frameattached', 'framedetached'];
 const DEADLINE = Symbol('checkout inspection deadline');
 const DEFAULTS = { timeoutMs: 1_500, maxFrames: 64, maxSignals: 2_048, maxSnapshotBytes: 262_144 };
 /** Frames at one nesting depth are read together. A remote CDP connection pays per round trip, not per frame. */
 const CONCURRENCY = 8;
+/** Script, iframe and form elements one frame's read examines, skipped ones included, so a page cannot keep the read walking. */
+const ELEMENT_LIMIT = 16_384;
 const encoder = new TextEncoder();
+let reviewedHosts;
+/** Hostname patterns of the reviewed rules. A URL on any other host can never become evidence. */
+const reviewedHostPatterns = () => reviewedHosts ??= [...new Set(getCheckoutPreflightCatalog().rules.map(rule => rule.hostname_pattern))];
 function bounded(value, fallback, maximum, minimum = 1) {
     if (value === undefined)
         return fallback;
@@ -185,7 +190,7 @@ export async function collectCheckoutSignals(page, options = {}) {
                     }
                 }
                 visibility.set(frame, visible);
-                const data = await beforeDeadline(() => frame.evaluate(({ remaining, byteBudget }) => {
+                const data = await beforeDeadline(() => frame.evaluate(({ signalRoom, byteBudget, hosts, elementLimit, urlLength, rawUrlLength }) => {
                     const collected = [];
                     let bytes = 0;
                     let signalLimit = false;
@@ -203,9 +208,37 @@ export async function collectCheckoutSignals(page, options = {}) {
                         const rect = element.getBoundingClientRect();
                         return rect.width > 0 && rect.height > 0;
                     };
+                    // The normalizer drops a URL short enough to match without a trace when it is not https, carries credentials
+                    // or a port, or sits on a host no reviewed rule names (preflight.ts). Such a URL can never become evidence,
+                    // so the read skips it before it costs any signal or byte budget, and a store's own scripts (hundreds on a
+                    // RequireJS checkout) no longer spend the budget before the read reaches the card frames. A URL kept here is
+                    // still matched against the reviewed rules by the normalizer, so the page cannot add evidence this way. The
+                    // patterns are tested case-insensitively: a hostname is lowercase, so this keeps every host a rule can match.
+                    const reviewed = hosts.map(source => new RegExp(source, 'i'));
+                    const named = new Map();
+                    const silent = (url) => {
+                        if (url.href.length > rawUrlLength || url.origin.length + url.pathname.length > urlLength)
+                            return false;
+                        if (url.protocol !== 'https:' || url.username || url.password || url.port)
+                            return true;
+                        let known = named.get(url.hostname);
+                        if (known === undefined) {
+                            known = reviewed.some(pattern => pattern.test(url.hostname));
+                            named.set(url.hostname, known);
+                        }
+                        return !known;
+                    };
+                    const silentAddress = (address) => { try {
+                        return silent(new URL(address));
+                    }
+                    catch {
+                        return false;
+                    } };
+                    // The frame's own address takes a signal slot only when it is appended, which a silent one never is.
+                    const remaining = Math.max(0, signalRoom - (silentAddress(document.URL) ? 0 : 1));
                     const elements = document.querySelectorAll('script[src], iframe[src], form[action]');
                     for (let index = 0; index < elements.length; index++) {
-                        if (index >= remaining) {
+                        if (index >= elementLimit) {
                             signalLimit = true;
                             break;
                         }
@@ -214,23 +247,29 @@ export async function collectCheckoutSignals(page, options = {}) {
                         const source = element.getAttribute(kind === 'form' ? 'action' : 'src');
                         if (!source)
                             continue;
+                        let url = null;
+                        try {
+                            url = new URL(source, document.baseURI);
+                        }
+                        catch { /* an unparsable location is skipped below unless it is oversized */ }
+                        if (url && silent(url))
+                            continue;
                         if (source.length > byteBudget - bytes) {
                             byteLimit = true;
                             break;
                         }
-                        let url;
-                        try {
-                            url = new URL(source, document.baseURI).href;
-                        }
-                        catch {
+                        if (!url)
                             continue;
+                        if (collected.length >= remaining) {
+                            signalLimit = true;
+                            break;
                         }
-                        bytes += url.length * 3 + 128;
+                        bytes += url.href.length * 3 + 128;
                         if (bytes > byteBudget) {
                             byteLimit = true;
                             break;
                         }
-                        collected.push({ kind, url, visible: kind === 'script' ? null : shown(element) });
+                        collected.push({ kind, url: url.href, visible: kind === 'script' ? null : shown(element) });
                     }
                     // Card-entry detection reads field metadata only: the autocomplete token or the
                     // control's name and id. Values, labels and page text are never read.
@@ -248,11 +287,20 @@ export async function collectCheckoutSignals(page, options = {}) {
                         if (cardField && shown(input))
                             cardEntry = true;
                     }
+                    // The frame's own address follows the same rule, so an ad or widget frame's long address is not charged
+                    // either: it neither trips the byte budget nor is blanked. It still comes back whole, since the navigation
+                    // and card-entry checks below need it, and a silent address is at most rawUrlLength characters long.
                     const documentUrl = document.URL;
-                    if (documentUrl.length * 3 > byteBudget)
+                    const documentSilent = silentAddress(documentUrl);
+                    const oversized = !documentSilent && documentUrl.length * 3 > byteBudget;
+                    if (oversized)
                         byteLimit = true;
-                    return { documentUrl: byteLimit && documentUrl.length * 3 > byteBudget ? '' : documentUrl, collected, signalLimit, byteLimit, cardEntry };
-                }, { remaining: Math.max(0, limits.maxSignals - signals.length - 1), byteBudget: Math.max(0, limits.maxSnapshotBytes - transientBytes) }), deadline);
+                    return { documentUrl: oversized ? '' : documentUrl, documentSilent, collected, signalLimit, byteLimit, cardEntry };
+                }, {
+                    signalRoom: Math.max(0, limits.maxSignals - signals.length), byteBudget: Math.max(0, limits.maxSnapshotBytes - transientBytes),
+                    hosts: reviewedHostPatterns(), elementLimit: ELEMENT_LIMIT,
+                    urlLength: CHECKOUT_PREFLIGHT_LIMITS.url_length, rawUrlLength: CHECKOUT_PREFLIGHT_LIMITS.raw_url_length,
+                }), deadline);
                 const releaseError = released ? await released : undefined;
                 if (releaseError !== undefined)
                     throw releaseError;
@@ -286,7 +334,8 @@ export async function collectCheckoutSignals(page, options = {}) {
                 if (!outcome)
                     continue;
                 const { data, frame_id, parent_frame_id, nested, visible } = outcome;
-                append({ kind: nested ? 'frame' : 'document', url: data.documentUrl, frame_id, parent_frame_id, visible });
+                if (!data.documentSilent)
+                    append({ kind: nested ? 'frame' : 'document', url: data.documentUrl, frame_id, parent_frame_id, visible });
                 for (const signal of data.collected) {
                     if (!append({ ...signal, frame_id, parent_frame_id, visible: visible === false ? false : signal.kind === 'script' ? visible : visible === null ? null : signal.visible }))
                         break;

package/dist/preflight-schemas.json

@@ -466,6 +466,8 @@
                 "mercado-pago-checkout-pro-card-form",
                 "gravy-secure-fields-script",
                 "gravy-secure-fields-script-sandbox",
+                "bambora-na-custom-checkout-fields",
+                "worldpay-wpg-hosted-payment-page",
                 "paypal-hosted-fields-payments-sdk",
                 "paypal-card-fields-v5",
                 "paypal-card-fields-v6",
@@ -1102,6 +1104,8 @@
                       "mercado-pago-checkout-pro-card-form",
                       "gravy-secure-fields-script",
                       "gravy-secure-fields-script-sandbox",
+                      "bambora-na-custom-checkout-fields",
+                      "worldpay-wpg-hosted-payment-page",
                       "paypal-hosted-fields-payments-sdk",
                       "paypal-card-fields-v5",
                       "paypal-card-fields-v6",

package/dist/preflight.generated.d.ts

@@ -1340,10 +1340,6 @@ export declare function getCheckoutPreflightCatalog(): {
         readonly psp: "vgs";
         readonly reason: "iframe_bound_tokenization";
         readonly action: "human_checkout";
-    }, {
-        readonly psp: "bluesnap";
-        readonly reason: "multi_request_tokenization_not_supported";
-        readonly action: "human_checkout";
     }, {
         readonly psp: "stripe";
         readonly reason: "unbound_token_to_payment_intent_continuation";

package/dist/preflight.generated.js

@@ -1,5 +1,5 @@
 // Generated from @agent-cards/payment-core. Do not edit.
-// source-sha256: 639ffa689e8dfcf093eeba7e34b86c570e53ab17970976ae462a41fd2120d753
+// source-sha256: 761b59c7c043a43a8d462a840e204c1677c55c0022f37e6be4a007d025357af8
 import { CHECKOUT_PREFLIGHT_CAPABILITIES } from './preflight-capabilities.generated.js';
 /** Advisory page discovery. These rules never admit a payment destination. */
 export const CHECKOUT_PREFLIGHT_VERSION = '1';
@@ -69,6 +69,29 @@ RULES.push({ id: 'tranzila-terminal-hosted-page', psp: 'tranzila', kinds: ['docu
 { id: 'gravy-secure-fields-script', psp: 'gravy', kinds: ['script'], hostname: /^cdn\.[a-z0-9-]+\.gr4vy\.app$/, pathname: GRAVY_SECURE_FIELDS_SCRIPT, origin: 'https://cdn.:merchant.gr4vy.app', path_pattern: '/secure-fields/{latest,:version}/secure-fields.js',
     sources: GRAVY_SOURCES }, { id: 'gravy-secure-fields-script-sandbox', psp: 'gravy', kinds: ['script'], hostname: /^cdn\.sandbox\.[a-z0-9-]+\.gr4vy\.app$/, pathname: GRAVY_SECURE_FIELDS_SCRIPT, origin: 'https://cdn.sandbox.:merchant.gr4vy.app', path_pattern: '/secure-fields/{latest,:version}/secure-fields.js',
     sources: GRAVY_SOURCES });
+// Card frames the catalog scan of 2026-10-23 read at stores' card forms (no card typed, nothing paid). Each
+// rule names its processor from a frame on the processor's own host. A file on the store's own host that only
+// carries the processor's name, such as the copy of Bambora's customcheckout.js that Kent serves itself, names
+// nothing.
+const catalogScan = (reference) => ({ kind: 'saved_observation', reference: `catalog-psp-scan-2026-10-23:${reference}`, reviewed_on: '2026-10-23' });
+RULES.push(
+// Bambora Custom Checkout draws each card field as an iframe from the release its library was built for:
+// /customcheckout/1/customcheckout.js draws 1.0.5-39 (the reviewed rule above), and Kent's own copy draws
+// 1.0.2. The release names the frame and nothing more. Payment-core's bambora entry matches the card request
+// on its own (/scripts/tokenization/tokens), so a release whose frame sent the card anywhere else would send
+// only the placeholder card the agent typed.
+{ id: 'bambora-na-custom-checkout-fields', psp: 'bambora', kinds: ['frame', 'iframe', 'document'], hostname: /^libs\.na\.bambora\.com$/,
+    pathname: /^\/customcheckout\/1\.[0-9]{1,3}\.[0-9]{1,3}(?:-[0-9]{1,4})?\/iframe\.html$/, origin: 'https://libs.na.bambora.com', path_pattern: '/customcheckout/1.:minor.:patch{,-:build}/iframe.html',
+    sources: [{ kind: 'primary_source', reference: 'https://docs.na.worldline-solutions.com/build-your-integration/checkout-form/custom-checkout/reference', reviewed_on: '2026-09-11' },
+        catalogScan('kent-ca-custom-checkout-1.0.2-card-fields')] }, 
+// Worldpay's hosted payment pages on payments.worldpay.com: Razer's checkout opens
+// /app/hpp-iframe/integration/wpg/corporate in an iframe, which lands on /app/hpp/<build>/payment/start, where
+// the shopper types the card on Worldpay's own page. The SDK's worldpay entry takes over Access Checkout's card
+// session only, so the page names worldpay and stays unknown, as the secure.worldpay.com/wcc pages do.
+{ id: 'worldpay-wpg-hosted-payment-page', psp: 'worldpay', kinds: ['document', 'frame', 'iframe'], hostname: /^payments\.worldpay\.com$/,
+    pathname: /^\/app\/hpp(?:-iframe)?\//, origin: 'https://payments.worldpay.com', path_pattern: '/app/{hpp,hpp-iframe}/*',
+    sources: [catalogScan('razer-worldpay-hosted-payment-page')],
+    variant_unverified: 'The implemented Worldpay adapter covers Access Checkout card sessions; Worldpay hosted payment pages under payments.worldpay.com/app/hpp take the card on Worldpay\'s own page and are not admitted.' });
 // PayPal's legacy Hosted Fields (its JS SDK's components=hosted-fields), reviewed 2026-10-07 from Planet Golf
 // UK's payment step (read live 2026-10-06, SDK 5.0.580) and the two frame files it loads. The SDK renders each
 // card field as braintree-web's 3.32.0-payments-sdk-dev hosted-fields-input-frame.min.html (sha256

package/dist/prepared-processor.d.ts

@@ -37,8 +37,20 @@
  * approval after Pay. Its environments are its API hosts: api.openpay.<mx|co|pe> (production) and
  * sandbox-api.openpay.<mx|co|pe> (sandbox). The token URL names the merchant in its path, so no URL is
  * prepared in advance: the claim binds the request by its host's environment and its shape, as ACI's.
+ *
+ * vtex_payments: prepared only. Ollie's headless checkout aborts its card post to the store's VTEX vault 12 seconds after
+ * it starts it, too soon for an approval after Pay. Its one environment is production: VTEX has no test host. The card
+ * URL names the store's account in its host and VTEX's transaction in its path, neither known before Pay, so the claim
+ * binds the request by its shape, as Openpay's. Ollie sends the same post again on a non-OK answer or a network error,
+ * then once more to api.vtexvault.com: the first post spends the approval, and each later one is refused like any
+ * request on a spent preparation, so one approval is one card use.
+ *
+ * processout: prepared only. ProcessOut.js gives its card frame 20 seconds from the tokenize message before it calls
+ * the page's error callback, too soon for an approval after the shop's continue press. Its environments share one
+ * host, api.processout.com: the project id in the card URL's query names them, proj_ (production) and test-proj_
+ * (sandbox), so the claim binds the request by its project's environment and its shape, as Openpay's.
  */
-export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly' | 'spreedly' | 'adyen' | 'checkout_com' | 'paysafe' | 'fiserv' | 'cybersource_flex' | 'aci' | 'creditguard' | 'worldpay_eprotect' | 'amadeus_checkout' | 'verifone' | 'cybersource_secure_acceptance' | 'paddle_vgs' | 'wix_payments' | 'paygent' | 'hipay' | 'openpay_bbva';
+export type PreparationProcessor = 'square' | 'braintree' | 'worldpay' | 'bambora' | 'mercado_pago' | 'recurly' | 'spreedly' | 'adyen' | 'checkout_com' | 'paysafe' | 'fiserv' | 'cybersource_flex' | 'aci' | 'creditguard' | 'worldpay_eprotect' | 'amadeus_checkout' | 'verifone' | 'cybersource_secure_acceptance' | 'paddle_vgs' | 'wix_payments' | 'paygent' | 'hipay' | 'openpay_bbva' | 'vtex_payments' | 'processout';
 export type PreparationEnvironment = 'production' | 'sandbox' | 'shared';
 /**
  * How the approved card reaches the processor: the device's own request (token), or
@@ -77,7 +89,8 @@ export declare function preparedApprovalAnswersRetry(psp: string): boolean;
  * live, testsecureacceptance is test. So are Paddle VGS's two card URLs: vault is live,
  * sandbox-vault is test. So are Paygent's two token hosts: token is live, sandbox is test. So are
  * HiPay's two vault hosts: secure2-vault is live, stage-secure2-vault is test. So are Openpay's API
- * hosts: api.openpay.<mx|co|pe> is live, sandbox-api.openpay.<mx|co|pe> is test.
+ * hosts: api.openpay.<mx|co|pe> is live, sandbox-api.openpay.<mx|co|pe> is test. ProcessOut's share
+ * one host, and the card URL's project id attests them: proj_ is live, test-proj_ is test.
  */
 export declare function validPreparationEnvironment(psp: string, environment: string): boolean;
 /**
@@ -90,9 +103,9 @@ export declare function aciPreparationUrl(environment: PreparationEnvironment):
 /**
  * A processor whose card request names an id the merchant mints only at Pay time (ACI's checkout
  * id), or the merchant's own id (Openpay's token URL carries the merchant id in its path and the
- * country in its host), so no URL can be prepared in advance: whether the adapters can intercept it
- * is asked of the registry (VaultClient.recognizesProcessor), not of the prepared endpoint, which
- * only names the preparation.
+ * country in its host, ProcessOut's card URL the project id in its query), so no URL can be prepared
+ * in advance: whether the adapters can intercept it is asked of the registry
+ * (VaultClient.recognizesProcessor), not of the prepared endpoint, which only names the preparation.
  */
 export declare function preparationBindsByShape(psp: string): boolean;
 /**