@agent-cards/sdk 0.23.28 → 0.24.0

package/dist/prepared-processor.js

@@ -18,6 +18,8 @@ import { WIX_PAYMENTS_TOKENIZE_URL, isPreparedWixPaymentsRequest } from './wix-p
 import { paygentEnvironment, paygentPreparationUrl, paygentRequestRefusal } from './paygent.generated.js';
 import { HIPAY_TOKEN_URLS, hipayRequestRefusal, hipayTokenEnvironment, isPreparedHipayRequest } from './hipay.generated.js';
 import { OPENPAY_PREPARATION_URLS, isPreparedOpenpayRequest, openpayRequestRefusal, openpayTokenEnvironment } from './openpay.generated.js';
+import { VTEX_PAYMENTS_PREPARATION_URL, isPreparedVtexPaymentsRequest, vtexPaymentsCardTarget, vtexPaymentsRequestRefusal } from './vtex-payments.generated.js';
+import { PROCESSOUT_PREPARATION_URLS, isPreparedProcessoutRequest, processoutEnvironment, processoutRequestRefusal } from './processout.generated.js';
 export function preparationMode(psp) {
     return psp === 'adyen' || psp === 'fiserv' || psp === 'verifone' ? 'cse' : 'token';
 }
@@ -54,16 +56,17 @@ export function preparedApprovalAnswersRetry(psp) {
  * live, testsecureacceptance is test. So are Paddle VGS's two card URLs: vault is live,
  * sandbox-vault is test. So are Paygent's two token hosts: token is live, sandbox is test. So are
  * HiPay's two vault hosts: secure2-vault is live, stage-secure2-vault is test. So are Openpay's API
- * hosts: api.openpay.<mx|co|pe> is live, sandbox-api.openpay.<mx|co|pe> is test.
+ * hosts: api.openpay.<mx|co|pe> is live, sandbox-api.openpay.<mx|co|pe> is test. ProcessOut's share
+ * one host, and the card URL's project id attests them: proj_ is live, test-proj_ is test.
  */
 export function validPreparationEnvironment(psp, environment) {
     if (psp === 'bambora' || psp === 'mercado_pago' || psp === 'recurly' || psp === 'spreedly')
         return environment === 'shared';
-    // Wix Payments has production alone: its tokenizer has no test host.
-    if (psp === 'wix_payments')
+    // Wix Payments has production alone: its tokenizer has no test host. VTEX Payments too: every store's vault is live.
+    if (psp === 'wix_payments' || psp === 'vtex_payments')
         return environment === 'production';
     return ['square', 'braintree', 'worldpay', 'adyen', 'checkout_com', 'paysafe', 'fiserv', 'cybersource_flex', 'aci', 'creditguard', 'worldpay_eprotect', 'amadeus_checkout', 'verifone',
-        'cybersource_secure_acceptance', 'paddle_vgs', 'paygent', 'hipay', 'openpay_bbva'].includes(psp) && ['production', 'sandbox'].includes(environment);
+        'cybersource_secure_acceptance', 'paddle_vgs', 'paygent', 'hipay', 'openpay_bbva', 'processout'].includes(psp) && ['production', 'sandbox'].includes(environment);
 }
 /**
  * ACI's prepared endpoint, the literal the API names (backend checkout-prepared-processor.ts): its
@@ -77,12 +80,12 @@ export function aciPreparationUrl(environment) {
 /**
  * A processor whose card request names an id the merchant mints only at Pay time (ACI's checkout
  * id), or the merchant's own id (Openpay's token URL carries the merchant id in its path and the
- * country in its host), so no URL can be prepared in advance: whether the adapters can intercept it
- * is asked of the registry (VaultClient.recognizesProcessor), not of the prepared endpoint, which
- * only names the preparation.
+ * country in its host, ProcessOut's card URL the project id in its query), so no URL can be prepared
+ * in advance: whether the adapters can intercept it is asked of the registry
+ * (VaultClient.recognizesProcessor), not of the prepared endpoint, which only names the preparation.
  */
 export function preparationBindsByShape(psp) {
-    return psp === 'aci' || psp === 'openpay_bbva';
+    return psp === 'aci' || psp === 'openpay_bbva' || psp === 'vtex_payments' || psp === 'processout';
 }
 /**
  * The endpoint a CreditGuard preparation stands for, per environment, as the API advertises it: the
@@ -124,6 +127,15 @@ export function preparationEndpoint(psp, environment) {
     // and the claim binds the real token URL by environment and shape (matchesPreparedRequest), as ACI's.
     if (psp === 'openpay_bbva')
         return OPENPAY_PREPARATION_URLS[environment];
+    // VTEX Payments: the literal that only names the preparation. Its "prepared" is no transaction id, so no card request
+    // is ever sent to it, and the claim binds the store's own card post by its shape (matchesPreparedRequest).
+    if (psp === 'vtex_payments')
+        return VTEX_PAYMENTS_PREPARATION_URL;
+    // ProcessOut: the literal the API names (backend checkout-prepared-processor.ts). It only names the preparation and its
+    // environment: its "prepared" is shorter than any project id, so no card request is ever sent to it, and the claim binds
+    // the real card URL by its project's environment and its shape (matchesPreparedRequest), as Openpay's.
+    if (psp === 'processout')
+        return PROCESSOUT_PREPARATION_URLS[environment];
     // A Verifone endpoint is its reviewed profile's leg, never one per environment (verifone.ts).
     if (psp === 'verifone')
         throw new Error('unsupported_preparation_processor');
@@ -304,6 +316,19 @@ export function matchesPreparedRequest(psp, environment, requestUrl, method, bod
     // merchant a later release reviews needs no new build of this library.
     if (psp === 'openpay_bbva')
         return isPreparedOpenpayRequest(requestUrl, method, body ?? null, environment, headers ?? {});
+    // VTEX Payments: a post to a store's own vault and payment-core's whole request rule (Ollie's JSON content type and
+    // one credit card line for the URL's transaction), the rule the API and the Vault bind with too. Ollie's resend to
+    // api.vtexvault.com never binds. Which store a request may reach is the API's to judge at the bind and the Vault's
+    // before it writes the card, against the reviewed pins each holds, so a store a later release reviews needs no new SDK.
+    if (psp === 'vtex_payments')
+        return isPreparedVtexPaymentsRequest(requestUrl, method, body ?? null, environment, headers ?? {});
+    // ProcessOut: a card URL whose project names the environment and payment-core's whole request rule (the JSON content
+    // type, the API version, the URL's own project credential and tokenizeCard's body), the rule the API and the Vault bind
+    // with too. Which project a live request may name is the API's to judge at the bind and the Vault's before it writes
+    // the card, against the reviewed pin each of them holds for the approved checkout origin, so a store a later release
+    // reviews needs no new build of this library.
+    if (psp === 'processout')
+        return isPreparedProcessoutRequest(requestUrl, method, body ?? null, environment, headers ?? {});
     if (psp === 'creditguard')
         return matchesPreparedCreditguard(environment, requestUrl, body, headers, binding);
     // A Verifone request is judged only through the profile its preparation names (matchesPreparation).
@@ -479,6 +504,21 @@ export function preparedRequestRefusal(psp, environment, requestUrl, body, heade
             return 'checkout_changed';
         return openpayRequestRefusal({ url: requestUrl, method: 'POST', headers, body: body ?? null }) ?? 'checkout_changed';
     }
+    // A VTEX post on a vault host names what payment-core's request rule refused (vtex_payments_fallback_refused for
+    // Ollie's resend to api.vtexvault.com, vtex_payments_installments, ...); any other request is `checkout_changed`.
+    if (psp === 'vtex_payments') {
+        if (environment !== 'production' || vtexPaymentsCardTarget(requestUrl) === null)
+            return 'checkout_changed';
+        return vtexPaymentsRequestRefusal({ url: requestUrl, method: 'POST', headers, body: body ?? null }) ?? 'checkout_changed';
+    }
+    // A ProcessOut card request whose project names the prepared environment names what payment-core's request rule
+    // refused (processout_headers_refused, processout_body_unsupported); the other environment's project, another query
+    // or path, or any other request is `checkout_changed`.
+    if (psp === 'processout') {
+        if (processoutEnvironment(requestUrl) !== environment)
+            return 'checkout_changed';
+        return processoutRequestRefusal({ url: requestUrl, method: 'POST', headers, body: body ?? null }) ?? 'checkout_changed';
+    }
     if (psp !== 'amadeus_checkout' || amadeusEnvironment(requestUrl) !== environment)
         return 'checkout_changed';
     const merchantHost = merchantHostOf(merchantOrigin);