@visa/cli 4.1.0-rc.102 → 4.1.0-rc.103

package/dist/checkout-engine/cli-engine.d.ts

@@ -23,6 +23,8 @@ export type CliReviewInput = {
     credentialPath: string;
     /** See {@link CardInstrumentSource}. */
     cardTokenId?: string;
+    /** Exact request-key identity selected by the caller. */
+    agentJkt?: string;
     contact: Contact;
     approvalBaseUrl: string;
     merchantName?: string;
@@ -121,6 +123,7 @@ type Session = {
     amountMinor: number;
     currency: string;
     contact: Contact;
+    agentJkt?: string;
     cleanupTimer: ReturnType<typeof setTimeout>;
 };
 export interface CardDrawVerdictDraw {

package/dist/checkout-engine/cli-engine.js

@@ -395,6 +395,7 @@ export function createCliCheckoutEngine(deps = {}) {
                     amountMinor,
                     currency: input.currency,
                     contact: input.contact,
+                    ...(input.agentJkt ? { agentJkt: input.agentJkt } : {}),
                     cleanupTimer,
                 });
                 return {
@@ -471,6 +472,18 @@ export function createCliCheckoutEngine(deps = {}) {
                     remainingMinor: null,
                 };
             }
+            if (input.agentJkt !== session.agentJkt) {
+                await closeSession(input.reviewId);
+                return {
+                    outcome: 'failed',
+                    confirmationRef: null,
+                    receiptPath: null,
+                    detail: 'pay agent authority does not match the reviewed request key — start a fresh review',
+                    vicConfirmation: null,
+                    source: null,
+                    remainingMinor: null,
+                };
+            }
             // Amount-bind the confirmation: the pay-call amount must match the
             // reviewed amount. The reviewId already locks the immutable mandate, but
             // re-checking here makes the confirmation explicitly amount-bound so a
@@ -519,6 +532,7 @@ export function createCliCheckoutEngine(deps = {}) {
                     merchantHost: host,
                     currencyCode: session.currency,
                     amountMinor: session.amountMinor,
+                    agentJkt: session.agentJkt,
                     now: now(),
                 });
                 let source;

package/dist/checkout-engine/mandate/mandate-ledger.d.ts

@@ -77,6 +77,8 @@ export type CoverQuery = {
     merchantHost: string;
     currencyCode: string;
     amountMinor: number;
+    /** Exact selected request key; omitted means legacy unbound mandates only. */
+    agentJkt?: string;
     now?: Date;
 };
 /** Available headroom = ceiling - committed - reserved. Integer minor units. */

package/dist/checkout-engine/mandate/mandate-ledger.js

@@ -199,6 +199,7 @@ export class MandateLedger {
         // one only matches its own host. Network Retail/5999 eligibility is
         // enforced downstream and is not inferred from a website hostname.
         (m.crossMerchant || m.merchantHost === query.merchantHost) &&
+            m.agentJkt === query.agentJkt &&
             m.currencyCode.toUpperCase() === query.currencyCode.toUpperCase() &&
             !m.unhonoredAt &&
             !m.registerFailedAt &&