@visa/cli 4.1.0-rc.107 → 4.1.0-rc.108

package/dist/checkout-engine/cli-engine.js

@@ -176,8 +176,8 @@ export function createCliCheckoutEngine(deps = {}) {
             .catch(() => false);
         process.stderr.write(marked
             ? `warning: card-mandate register failed (${reg.reason ?? 'unknown'}) — this mandate ` +
-                `will NOT be used for tap-free draws; your next checkout will use a fresh ` +
-                `per-purchase passkey tap. Re-run 'mandate start' to try again.\n`
+                `will NOT be used for tap-free draws; your next checkout will interrupt the owner ` +
+                `for a fresh per-purchase approval. Re-run 'mandate start' to try again.\n`
             : // Escalate: the mark write ALSO failed, so the mandate is persisted but
                 // NOT disabled — findCovering could still select an undrawable mandate.
                 // Tell the owner loudly not to rely on it and how to recover.
@@ -564,7 +564,7 @@ export function createCliCheckoutEngine(deps = {}) {
                             confirmationRef: null,
                             receiptPath: null,
                             detail: 'this mandate cannot draw because its delegated card authority is unavailable; ' +
-                                'restore the runtime binding or use a fresh per-purchase passkey approval',
+                                'restore the runtime binding or use a fresh per-purchase approval',
                             vicConfirmation: null,
                             source,
                             remainingMinor: null,
@@ -662,7 +662,7 @@ export function createCliCheckoutEngine(deps = {}) {
                                     }
                                     throw new Error(verdictFailure.transient
                                         ? `the card-mandate draw could not be authorized right now (${verdictFailure.reasons.join(', ') || 'temporary error'}) — retry shortly`
-                                        : `this card mandate can no longer be drawn (${verdictFailure.reasons.join(', ') || 'refused'}); it has been disabled — retry the checkout to use a fresh per-purchase passkey tap`, { cause: err });
+                                        : `this card mandate can no longer be drawn (${verdictFailure.reasons.join(', ') || 'refused'}); it has been disabled — retry the checkout to use a fresh per-purchase approval`, { cause: err });
                                 }
                                 if (!isTransientDrawFailure(err.cause ?? err)) {
                                     await ledger.markUnhonored(mandateId, now());

package/dist/checkout-engine/executor.d.ts

@@ -93,6 +93,7 @@ export type SubmitApprovedCheckoutOptions = {
     onChallengeHold?: (signal: string | null) => void;
     resolveEmailOtp?: OtpResolver;
 };
+export declare function snapshotOrigin(rawUrl: string): string;
 export type PreparedCheckoutSession = {
     checkout: PreparedCheckout;
     context: BrowserContext;

package/dist/checkout-engine/executor.js

@@ -145,6 +145,19 @@ async function findSubmit(page) {
     }
     return null;
 }
+// The diagnostic snapshot records the page ORIGIN only, never the full URL: a
+// payment-session path/query (e.g. a live Stripe `cs_live_...` checkout-session
+// id) must not be retained in the local receipt, which elsewhere promises
+// "hostname only" (#7101). Falls back to the raw value only if it does not parse
+// as a URL (never a real page.url()).
+export function snapshotOrigin(rawUrl) {
+    try {
+        return new URL(rawUrl).origin;
+    }
+    catch {
+        return '';
+    }
+}
 async function snapshotSummary(page) {
     const info = await page
         .evaluate(() => {
@@ -153,7 +166,7 @@ async function snapshotSummary(page) {
         return { title: document.title, heading: heading?.textContent?.trim() || '', body };
     })
         .catch(() => ({ title: '', heading: '', body: '' }));
-    return `url=${page.url()} title="${info.title}" heading="${info.heading}" body="${info.body}"`;
+    return `url=${snapshotOrigin(page.url())} title="${info.title}" heading="${info.heading}" body="${info.body}"`;
 }
 async function readConfirmationRef(page) {
     const ref = await page

package/dist/checkout-engine/hosted-approval.js

@@ -155,7 +155,12 @@ export async function runHostedApproval(opts) {
     const verifier = randomBytes(32).toString('base64url');
     const challenge = createHash('sha256').update(verifier, 'utf8').digest('base64url');
     const deadline = now() + timeoutMs;
-    const timeoutError = () => new Error(`no passkey approval within ${Math.round(timeoutMs / 1000)}s — ` +
+    // Verification-neutral: what the page asks the human for is a per-card
+    // property (passkey ceremony, issuer one-time code, or nothing beyond the
+    // signed-in approval) that this runner never learns. Naming a passkey here
+    // told operators on code-verified cards to wait for a device prompt that was
+    // never coming, and then blamed the timeout on the step they never saw.
+    const timeoutError = () => new Error(`no approval within ${Math.round(timeoutMs / 1000)}s — ` +
         'the checkout was cancelled; run again to retry');
     // Bound EVERY request by the remaining deadline: race the fetch against the
     // (injectable) sleep and abort the request when the deadline wins, so a
@@ -312,7 +317,7 @@ export async function runHostedApproval(opts) {
                     }
                     log(assuranceExempt
                         ? 'approval received from the hosted page (code-verified card, no passkey).'
-                        : 'passkey approval received from the hosted page.');
+                        : 'approval received from the hosted page (passkey-verified card).');
                     return {
                         ...assuranceFromCeremony(target, doc.assuranceData ?? null),
                         ...(assuranceExempt ? { assuranceExempt: true } : {}),