@agent-cards/sdk 0.24.1 → 0.25.0

package/CHANGELOG.md

@@ -4,6 +4,12 @@ An unreleased change waits as a file of its own in `changes/` (`changes/README.m
 
 ## Unreleased
 
+## 0.24.2
+
+- Pause the payment a BigCommerce store's own card form sends to `https://payments.bigcommerce.com/api/public/v1/orders/payments`, for the cardholder's device, for a company Agentcard turned BigCommerce on for. The sync now also asks for `capabilities=bigcommerce_card_form`. The SDK pauses only a body that carries a new card; a card saved at the store, another processor's token and a wallet on the same URL pass through untouched, and a card the store would keep fails in your browser before anything is created. The payment names the store's total, which is the amount the cardholder approves. A BigCommerce payment also needs the matching Vault release.
+
+- Answer a store page's identical re-send of a card request the cardholder already approved. Once the approved token reached the page and the checkout awaits the merchant, a POST to the same URL with the same body under the same authorization gets the stored answer again, with a `repeat_answered` event (`psp: 'token'`) and no second prompt, only after `resolveMerchantResult` reports the order still `pending`, and at most three times. Before, a `pending` answer held every card request, so a Shopify checkout that sent its card session again never got a token it would submit, and the order stayed unconfirmed. A hold from anything else still refuses the re-send: an amount the processor charged that differs from the approval's, an unbound Stripe token, a hosted form or card endpoint answer, `requireMerchantResult`, a follow-up send in flight, an unsupported request or a cancel. Another body, URL or authorization, a completed, failed or unknown order, and an attachment with no resolver each stay a new question, held as before.
+
 ## 0.24.1
 
 - Pause eGHL's payment page entry for the cardholder's device. This build declares `eghl_hosted_payment_page`, and for a company the API turns the lane on for, Agentcard's own for now, it pauses the merchant's entry, a `GET` of `https://securepay.e-ghl.com/IPG/payment.aspx` whose query names the payment, creates a `hosted_form` authorization for it, and fails every post a page it watches sends to eGHL's hosts, so eGHL never receives the card your agent typed. The entry names its amount, and the API answers `amount_mismatch` for any other. No eGHL payment completes yet: while the relay route stays closed the API answers every create with `503 eghl_relay_unavailable`, which is expected, not a setup error.

package/dist/approvals.d.ts

@@ -39,6 +39,50 @@ export interface CreateAuthorizationInput {
     checkout_origin?: string;
     /** Pins the card that pays: one of the person's stored cards. Absent, the person's recommended card pays, else their only card, and `card` on the answer says which. */
     card_id?: string;
+    /**
+     * The products the purchase is for, as your agent's cart has them (1 to 20 lines): the approval page lists them
+     * above the total, labelled as sent by your company. Shown, never charged: the person approves `amount`.
+     * Every amount is in the smallest unit of `currency`. A line the API cannot read is refused by name
+     * (`invalid_request`), never dropped.
+     */
+    line_items?: OrderLineItem[];
+    /** The cart's subtotal, shipping, tax and discount, in the smallest unit of `currency`, each shown only when named. Need `line_items`. */
+    subtotal?: number;
+    shipping?: number;
+    tax?: number;
+    discount?: number;
+    /** Where the order ships, shown in the approval page's Ship to box. Needs `line_items`. Never returned on your reads. */
+    ship_to?: OrderShipTo;
+}
+/** One product of the cart an approval shows. */
+export interface OrderLineItem {
+    /** The product's name as the store shows it. */
+    title: string;
+    /** A positive integer. */
+    quantity: number;
+    /** The price of one, in the smallest unit of the create's `currency`; the line shows `unit_amount × quantity`. */
+    unit_amount?: number;
+    /** The line's own total, in the smallest unit; shown over `unit_amount × quantity` when both are named. */
+    amount?: number;
+    brand?: string;
+    /** The options chosen, as one string (`'Size S · Pink'`) or by name (`{ Size: 'S', Color: 'Pink' }`, shown as `S · Pink`). */
+    options?: string | Record<string, string>;
+    /** An https picture of the product. Shown only from the image hosts the approval page loads; any other shows the line without one. */
+    image_url?: string;
+}
+/** Where an approval's order ships. */
+export interface OrderShipTo {
+    name: string;
+    phone?: string;
+    /** `country` is a two-letter ISO code; absent means `US`. */
+    address: {
+        line1: string;
+        line2?: string;
+        city: string;
+        state?: string;
+        postal_code: string;
+        country?: string;
+    };
 }
 /** The card that pays, as every read names it. */
 export interface PayingCard {

package/dist/approvals.js

@@ -99,6 +99,15 @@ function resultOf(a) {
         ...(approvalUrl && a.status === 'awaiting_approval' ? { approval_url: approvalUrl } : {}),
     };
 }
+/** The cart fields a create names, passed as given: the API checks them and refuses a bad one by name. */
+function orderFieldsOf(input) {
+    const out = {};
+    for (const key of ['line_items', 'subtotal', 'shipping', 'tax', 'discount', 'ship_to']) {
+        if (input[key] !== undefined)
+            out[key] = input[key];
+    }
+    return out;
+}
 /** A random idempotency key for one create, so a retried call makes one purchase. */
 function idempotencyKey() {
     const c = globalThis.crypto;
@@ -148,6 +157,7 @@ export class ApprovalsModule extends ApiModule {
             body: {
                 user, merchant: input.merchant, amount: input.amount, currency: input.currency, psp: input.psp ?? 'stripe', mode: input.mode ?? 'token', request,
                 ...(input.return_url ? { return_url: input.return_url } : {}), ...(checkoutOrigin ? { checkout_origin: checkoutOrigin } : {}), ...(input.card_id ? { card_id: input.card_id } : {}),
+                ...orderFieldsOf(input),
             },
             headers: { 'idempotency-key': input.idempotency_key ?? idempotencyKey() },
         });

package/dist/capabilities.generated.js

@@ -1,3 +1,3 @@
 // Written by scripts/generate-capabilities.mjs from capabilities.json. Do not edit; git ignores it.
 /** capabilities.json's list, sorted; client.ts exports it as SUPPORTED_CAPABILITIES. */
-export const DECLARED_CAPABILITIES = ["aci_split_card.v1", "amadeus_checkout_actions.v1", "aps_custom_merchant_page", "aurus_one_time_token", "authorize_net_dpm_form", "barion_hosted_payment_page", "bluesnap_hosted_payment_fields", "capture_context", "cardlink_vpos_hosted_payment_page", "clover_card_token", "comgate_hosted_payment_page", "converge_hpp_process", "creditguard_pps_process", "cybersource_sa_token_create", "datatrans_secure_fields_tokenize", "eghl_hosted_payment_page", "ekashu_hosted_payment_page", "eximbay_hosted_payment_page", "fastspring_card_payment", "fiserv_card_capture", "frisbii_card_token", "gmo_shared_pk", "gopay_card_form", "gravy_session_fields_put", "hipay_vault_token", "iyzico_checkout_form", "juspay_txns.v1", "lyra_krypton_payment", "makecommerce_card_frame", "midtrans_card_token", "monei_card_token", "moneris_hosted_tokenization", "nexi_checkout_pay", "oceanpayment_hosted_payment_page", "omise_card_token", "openpay_tokenizer", "paddle_tokenex_pay", "paddle_vgs_cards", "pay_nl_card_token", "payfast_card_pay", "paygent_token", "paymentwall_card_token", "paymob_checkout_pay", "paymongo_checkout_pay", "paypal_card_fields", "payplug_hosted_payment_page", "payrails_device_encrypt", "payrexx_card_frame", "paystack_pinned_key", "paytrail_hosted_payment_page", "payu_latam_webcheckout_card", "pelecard_transaction", "pin_payments_card_token", "poynt_collect_nonce", "primer_payment_instruments", "processout_card_token", "przelewy24_hosted_payment_page", "quickpay_hosted_payment_page", "redsys_hosted_payment_page", "revolut_card_field", "sbps_token_jsonp", "shiji_sts_pinned_key", "sumup_checkout_process", "tap_card_sdk_token", "toast_pinned_key", "tokenex_iframe_tokenize", "transbank_webpay_hosted_payment_page", "twoc2p_secure_pay", "usaepay_payment_key", "verifone_card_capture", "viva_smart_checkout_chargetoken", "vtex_payments_card_payment", "wix_payments_tokenize", "worldline_mycheckout_form", "worldpay_eprotect_jsonp", "wspay_confirm", "xendit_card_token"];
+export const DECLARED_CAPABILITIES = ["aci_split_card.v1", "amadeus_checkout_actions.v1", "aps_custom_merchant_page", "aurus_one_time_token", "authorize_net_dpm_form", "barion_hosted_payment_page", "bigcommerce_card_form", "bluesnap_hosted_payment_fields", "capture_context", "cardlink_vpos_hosted_payment_page", "clover_card_token", "comgate_hosted_payment_page", "converge_hpp_process", "creditguard_pps_process", "cybersource_sa_token_create", "datatrans_secure_fields_tokenize", "eghl_hosted_payment_page", "ekashu_hosted_payment_page", "eximbay_hosted_payment_page", "fastspring_card_payment", "fiserv_card_capture", "frisbii_card_token", "gmo_shared_pk", "gopay_card_form", "gravy_session_fields_put", "hipay_vault_token", "iyzico_checkout_form", "juspay_txns.v1", "lyra_krypton_payment", "makecommerce_card_frame", "midtrans_card_token", "monei_card_token", "moneris_hosted_tokenization", "nexi_checkout_pay", "oceanpayment_hosted_payment_page", "omise_card_token", "openpay_tokenizer", "paddle_tokenex_pay", "paddle_vgs_cards", "pay_nl_card_token", "payfast_card_pay", "paygent_token", "paymentwall_card_token", "paymob_checkout_pay", "paymongo_checkout_pay", "paypal_card_fields", "payplug_hosted_payment_page", "payrails_device_encrypt", "payrexx_card_frame", "paystack_pinned_key", "paytrail_hosted_payment_page", "payu_latam_webcheckout_card", "pelecard_transaction", "pin_payments_card_token", "poynt_collect_nonce", "primer_payment_instruments", "processout_card_token", "przelewy24_hosted_payment_page", "quickpay_hosted_payment_page", "redsys_hosted_payment_page", "revolut_card_field", "sbps_token_jsonp", "shiji_sts_pinned_key", "sumup_checkout_process", "tap_card_sdk_token", "toast_pinned_key", "tokenex_iframe_tokenize", "transbank_webpay_hosted_payment_page", "twoc2p_secure_pay", "usaepay_payment_key", "verifone_card_capture", "viva_smart_checkout_chargetoken", "vtex_payments_card_payment", "wix_payments_tokenize", "worldline_mycheckout_form", "worldpay_eprotect_jsonp", "wspay_confirm", "xendit_card_token"];