npm - @visa/cli - Versions diffs - 4.1.0-rc.25 → 4.1.0-rc.4 - Mend

@visa/cli 4.1.0-rc.25 → 4.1.0-rc.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (63) hide show

package/dist/cli.js +329 -364
package/dist/mcp-server/index.js +148 -148
package/native/bin/win32-x64/visa-keychain-win.exe +0 -0
package/package.json +3 -5
package/server.json +2 -2
package/dist/checkout-engine/adapters/generic.d.ts +0 -19
package/dist/checkout-engine/adapters/generic.js +0 -201
package/dist/checkout-engine/adapters/index.d.ts +0 -7
package/dist/checkout-engine/adapters/index.js +0 -17
package/dist/checkout-engine/adapters/stripe-like.d.ts +0 -10
package/dist/checkout-engine/adapters/stripe-like.js +0 -21
package/dist/checkout-engine/browser-launch.d.ts +0 -46
package/dist/checkout-engine/browser-launch.js +0 -81
package/dist/checkout-engine/ceremony.d.ts +0 -64
package/dist/checkout-engine/ceremony.js +0 -261
package/dist/checkout-engine/cli-engine.d.ts +0 -60
package/dist/checkout-engine/cli-engine.js +0 -242
package/dist/checkout-engine/detect.d.ts +0 -61
package/dist/checkout-engine/detect.js +0 -372
package/dist/checkout-engine/evidence.d.ts +0 -22
package/dist/checkout-engine/evidence.js +0 -59
package/dist/checkout-engine/executor.d.ts +0 -172
package/dist/checkout-engine/executor.js +0 -1233
package/dist/checkout-engine/hosted-approval.d.ts +0 -78
package/dist/checkout-engine/hosted-approval.js +0 -171
package/dist/checkout-engine/index.d.ts +0 -3
package/dist/checkout-engine/index.js +0 -5
package/dist/checkout-engine/inline-target.d.ts +0 -13
package/dist/checkout-engine/inline-target.js +0 -37
package/dist/checkout-engine/instrument.d.ts +0 -54
package/dist/checkout-engine/instrument.js +0 -83
package/dist/checkout-engine/live-fill-approval.d.ts +0 -52
package/dist/checkout-engine/live-fill-approval.js +0 -107
package/dist/checkout-engine/mandate.d.ts +0 -25
package/dist/checkout-engine/mandate.js +0 -100
package/dist/checkout-engine/outcome.d.ts +0 -30
package/dist/checkout-engine/outcome.js +0 -190
package/dist/checkout-engine/owner-only-file.d.ts +0 -10
package/dist/checkout-engine/owner-only-file.js +0 -22
package/dist/checkout-engine/package.json +0 -3
package/dist/checkout-engine/pay-args.d.ts +0 -14
package/dist/checkout-engine/pay-args.js +0 -44
package/dist/checkout-engine/pay.d.ts +0 -1
package/dist/checkout-engine/pay.js +0 -13
package/dist/checkout-engine/receipt.d.ts +0 -81
package/dist/checkout-engine/receipt.js +0 -109
package/dist/checkout-engine/repo-env.d.ts +0 -11
package/dist/checkout-engine/repo-env.js +0 -23
package/dist/checkout-engine/run-live-fill.d.ts +0 -1
package/dist/checkout-engine/run-live-fill.js +0 -443
package/dist/checkout-engine/types.d.ts +0 -26
package/dist/checkout-engine/types.js +0 -2
package/dist/checkout-engine/vgs-gateway/fetch-credential.d.mts +0 -74
package/dist/checkout-engine/vgs-gateway/fetch-credential.mjs +0 -248
package/dist/checkout-engine/vgs-gateway/server-mint-client.d.ts +0 -49
package/dist/checkout-engine/vgs-gateway/server-mint-client.js +0 -150
package/dist/checkout-engine/vgs-live-instrument.d.ts +0 -141
package/dist/checkout-engine/vgs-live-instrument.js +0 -252
package/dist/checkout-engine/vic-confirmation.d.ts +0 -34
package/dist/checkout-engine/vic-confirmation.js +0 -39
package/dist/skills/pair-visa-agent/RUNTIMES.md +0 -79
package/dist/skills/pair-visa-agent/SKILL.md +0 -360
package/dist/skills/pair-visa-agent/scripts/setup.mjs +0 -48

package/dist/checkout-engine/ceremony.js DELETED Viewed

@@ -1,261 +0,0 @@
-import http from 'node:http';
-import https from 'node:https';
-import { exec } from 'node:child_process';
-// In-run device-binding ceremony — replaces the manual dev-harness tab and the
-// exported assurance file. After the operator types the approval phrase, the
-// runner serves a single-purpose loopback page, opens it in the operator's
-// normal browser (where their passkey, popup allowance, and cert exception
-// already live), and receives the ceremony's assuranceData back in-process.
-// The assurance is therefore seconds old at intent mint (the only
-// proven-reliable configuration — see the 2026-07-17 PENDING-intent runs) and
-// never touches disk.
-//
-// Security posture (same as the dev-harness, contained tighter):
-//   - The server binds 127.0.0.1 ONLY. /api/token hands the page a short-lived
-//     VGS bearer, so the server must never be reachable from another machine.
-//   - assuranceData exists in process memory only; nothing is persisted.
-//   - The page carries no card data and no service-account secret.
-/** ISO-4217 numeric codes for the consent screen — mirrors the dev-harness map. */
-export const CURRENCY_NUMERIC = {
-    USD: '840',
-    CAD: '124',
-    EUR: '978',
-    GBP: '826',
-    AUD: '036',
-};
-export function currencyNumeric(code) {
-    return CURRENCY_NUMERIC[code.toUpperCase()] ?? null;
-}
-/**
- * Build the runner-side PurchaseAssurance from a completed ceremony. Scope
- * fields come verbatim from the checkout target, so the instrument's
- * scope-alignment validation (#5709) is satisfied by construction; `now` is
- * injectable for tests.
- */
-export function assuranceFromCeremony(target, assuranceData, now = new Date()) {
-    return {
-        assuranceData,
-        mintedAt: now.toISOString(),
-        merchantHost: new URL(target.merchantUrl).hostname,
-        transactionAmount: target.transactionAmount,
-        transactionCurrencyCode: target.transactionCurrencyCode,
-    };
-}
-/**
- * The single-purpose approval page. Pure string builder so tests can assert
- * the config embed is intact and escape-safe. The config is embedded as JSON
- * with `<` escaped, so a hostile merchant name cannot break out of the script
- * element.
- */
-export function ceremonyPageHtml(cfg) {
-    const esc = (s) => s.replace(/[&<>"']/g, (ch) => {
-        const map = {
-            '&': '&amp;',
-            '<': '&lt;',
-            '>': '&gt;',
-            '"': '&quot;',
-            "'": '&#39;',
-        };
-        return map[ch];
-    });
-    const json = JSON.stringify(cfg).replace(/</g, '\\u003c');
-    return `<!doctype html>
-<html>
-<head>
-<meta charset="utf-8" />
-<meta name="viewport" content="width=device-width, initial-scale=1" />
-<title>Approve purchase — Visa</title>
-<style>
-  body { font: 15px/1.5 Menlo, 'SF Mono', monospace; max-width: 640px; margin: 40px auto; padding: 0 16px; color: #1a1a1a; background: #fff; }
-  h1 { font-size: 16px; }
-  .facts { border: 1px solid #e5e5e5; border-radius: 12px; padding: 14px; margin: 14px 0; background: #fafafa; }
-  .facts b { font-size: 18px; }
-  button { font: inherit; padding: 10px 16px; margin: 6px 6px 6px 0; border: 1px solid #111; background: #111; color: #fff; border-radius: 8px; cursor: pointer; }
-  button:disabled { opacity: .4; cursor: default; }
-  button.ghost { background: #fff; color: #111; }
-  input { font: inherit; padding: 8px; border: 1px solid #d4d4d4; border-radius: 8px; }
-  #iframeBox { border: 2px dashed #d4d4d4; border-radius: 12px; min-height: 90px; padding: 8px; margin: 12px 0; }
-  #log { color: #666; font-size: 12.5px; white-space: pre-wrap; }
-  #otpBox { display: none; margin: 10px 0; }
-  .ok { color: #16a34a } .err { color: #be123c }
-</style>
-</head>
-<body>
-<h1>Approve this purchase with your passkey</h1>
-<div class="facts">${esc(cfg.merchantName)}<br /><b>${esc(cfg.currency)} ${esc(cfg.amount)}</b></div>
-<button id="go">Start approval</button>
-<button id="tap" disabled>Approve with passkey</button>
-<div id="otpBox"><span id="otpMethods"></span> <input id="otpCode" placeholder="code" style="width:120px" /> <button id="otpSubmit" class="ghost">Submit code</button></div>
-<div id="iframeBox"></div>
-<div id="log">The agent is waiting in the terminal. Complete the approval here, then return to it.</div>
-<script type="application/json" id="cfg">${json}</script>
-<script type="module">
-import { VgsAgenticAuth } from './vgs-agentic-auth.js'
-const cfg = JSON.parse(document.getElementById('cfg').textContent)
-const log = (m, c = '') => { const el = document.getElementById('log'); el.className = c; el.textContent = m }
-let session = null
-document.getElementById('go').onclick = async () => {
-  const go = document.getElementById('go')
-  go.disabled = true
-  try {
-    log('starting the Visa session…')
-    const { access_token, error } = await (await fetch('/api/token')).json()
-    if (error) throw new Error(error)
-    const flow = new VgsAgenticAuth({
-      tokenId: cfg.tokenId, environment: cfg.environment, consumerEmail: cfg.consumerEmail,
-      accessToken: access_token, timeout: 180000,
-      authenticationAmount: cfg.amount, currencyCode: cfg.currencyNumericCode, merchantName: cfg.merchantName,
-    })
-    const box = document.getElementById('iframeBox'); box.innerHTML = ''
-    session = await flow.startSession(box)
-    if (session.needsOtp) {
-      const b = document.getElementById('otpBox'), d = document.getElementById('otpMethods')
-      b.style.display = 'block'; d.innerHTML = ''
-      log('your bank wants a one-time code first — pick a delivery method.')
-      for (const m of session.otpMethods || []) {
-        const btn = document.createElement('button'); btn.className = 'ghost'
-        btn.textContent = 'Send via ' + (m.method || m.identifier)
-        btn.onclick = async () => { try { await session.requestOtp(m); log('code sent — type it and submit.') } catch (e) { log('sending the code failed: ' + e.message, 'err') } }
-        d.appendChild(btn)
-      }
-    } else {
-      log('ready — click "Approve with passkey".', 'ok')
-      document.getElementById('tap').disabled = false
-    }
-  } catch (e) {
-    log('could not start: ' + (e && e.message || e) + ' — click "Start approval" to retry.', 'err')
-    try { session && session.destroy && session.destroy() } catch {}
-    session = null
-    go.disabled = false
-  }
-}
-document.getElementById('otpSubmit').onclick = async () => {
-  try {
-    await session.submitOtp(document.getElementById('otpCode').value.trim())
-    document.getElementById('otpBox').style.display = 'none'
-    log('code accepted — click "Approve with passkey".', 'ok')
-    document.getElementById('tap').disabled = false
-  } catch (e) { log('code rejected: ' + (e && e.message || e), 'err') }
-}
-document.getElementById('tap').onclick = async () => {
-  const tap = document.getElementById('tap')
-  tap.disabled = true
-  try {
-    log('waiting for your passkey…')
-    const assuranceData = await session.authenticate()
-    try { session.destroy && session.destroy() } catch {}
-    const r = await (await fetch('/api/assurance', { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ assuranceData }) })).json()
-    if (r.error) throw new Error(r.error)
-    document.getElementById('go').disabled = true
-    log('approved — return to the terminal. You can close this tab.', 'ok')
-  } catch (e) {
-    log('passkey failed: ' + (e && e.message || e) + ' — click "Start approval" to retry.', 'err')
-    try { session && session.destroy && session.destroy() } catch {}
-    session = null
-    document.getElementById('go').disabled = false
-  }
-}
-</script>
-</body>
-</html>
-`;
-}
-export const CEREMONY_DEFAULT_PORT = 4400;
-export const CEREMONY_DEFAULT_TIMEOUT_MS = 4 * 60 * 1000;
-/**
- * Serve the approval page on loopback, open it in the operator's browser, and
- * resolve with the fresh PurchaseAssurance once the passkey completes. Rejects
- * on timeout, port conflict, or server failure; the server is always closed.
- */
-export function runInteractiveCeremony(opts) {
-    const port = opts.port ?? CEREMONY_DEFAULT_PORT;
-    const timeoutMs = opts.timeoutMs ?? CEREMONY_DEFAULT_TIMEOUT_MS;
-    const log = opts.log ?? ((line) => process.stderr.write(`${line}\n`));
-    const openUrl = opts.openUrl ??
-        ((url) => {
-            // macOS `open`; on failure the operator still has the printed URL.
-            exec(`open ${JSON.stringify(url)}`, () => { });
-        });
-    const html = ceremonyPageHtml(opts.page);
-    return new Promise((resolve, reject) => {
-        let settled = false;
-        const handler = async (req, res) => {
-            const send = (code, body, type = 'application/json') => {
-                res.writeHead(code, { 'Content-Type': type, 'Cache-Control': 'no-store' });
-                res.end(body);
-            };
-            try {
-                const path = new URL(req.url ?? '/', 'http://localhost').pathname;
-                if (path === '/')
-                    return send(200, html, 'text/html');
-                if (path === '/vgs-agentic-auth.js')
-                    return send(200, opts.vendorSdkJs, 'text/javascript');
-                if (path === '/api/token') {
-                    const access_token = await opts.mintAccessToken();
-                    return send(200, JSON.stringify({ access_token }));
-                }
-                if (path === '/api/assurance' && req.method === 'POST') {
-                    const chunks = [];
-                    for await (const chunk of req)
-                        chunks.push(chunk);
-                    let body = {};
-                    try {
-                        body = JSON.parse(Buffer.concat(chunks).toString('utf8') || '{}');
-                    }
-                    catch {
-                        return send(400, JSON.stringify({ error: 'invalid JSON' }));
-                    }
-                    if (body.assuranceData == null) {
-                        return send(400, JSON.stringify({ error: 'assuranceData required' }));
-                    }
-                    // Flush { ok: true } BEFORE teardown: finish() drops every
-                    // connection, and destroying the in-flight socket first would show
-                    // the operator a failed approval while the runner proceeds — the
-                    // end() callback fires once the response has been handed to the OS.
-                    const assurance = assuranceFromCeremony(opts.target, body.assuranceData);
-                    res.writeHead(200, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' });
-                    res.end(JSON.stringify({ ok: true }), () => finish(null, assurance));
-                    return;
-                }
-                return send(404, JSON.stringify({ error: 'not found' }));
-            }
-            catch (err) {
-                return send(500, JSON.stringify({ error: err.message }));
-            }
-        };
-        const server = opts.tls ? https.createServer(opts.tls, handler) : http.createServer(handler);
-        const timer = setTimeout(() => {
-            finish(new Error(`no passkey approval within ${Math.round(timeoutMs / 1000)}s — ` +
-                'the checkout was not touched; rerun when ready'));
-        }, timeoutMs);
-        timer.unref();
-        function finish(err, assurance) {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            server.closeAllConnections?.();
-            server.close(() => {
-                if (err)
-                    reject(err);
-                else
-                    resolve(assurance);
-            });
-        }
-        server.on('error', (err) => {
-            finish(err.code === 'EADDRINUSE'
-                ? new Error(`port ${port} is already in use (is the dev harness still running?) — ` +
-                    'stop it and rerun')
-                : err);
-        });
-        // Loopback ONLY: /api/token hands the page a live VGS bearer.
-        server.listen(port, '127.0.0.1', () => {
-            const address = server.address();
-            const boundPort = typeof address === 'object' && address ? address.port : port;
-            const scheme = opts.tls ? 'https' : 'http';
-            const pageUrl = `${scheme}://localhost:${boundPort}`;
-            log(`Visa approval page: ${pageUrl} — complete the passkey there.`);
-            openUrl(pageUrl);
-        });
-    });
-}

package/dist/checkout-engine/cli-engine.d.ts DELETED Viewed

@@ -1,60 +0,0 @@
-import { type Browser } from 'playwright-core';
-import { prepareCheckout as realPrepareCheckout, submitApprovedCheckout as realSubmitApprovedCheckout, type PreparedCheckoutSessionStore } from './executor.js';
-import { runHostedApproval as realRunHostedApproval } from './hosted-approval.js';
-import { type VgsCheckoutTarget } from './vgs-live-instrument.js';
-import { writeReceipt as realWriteReceipt } from './receipt.js';
-import { reportVicOutcome as realReportVicOutcome, type VicConfirmationReport } from './vic-confirmation.js';
-import type { Contact } from './types.js';
-export type CliReviewInput = {
-    url: string;
-    amount: string;
-    currency: string;
-    credentialPath: string;
-    contact: Contact;
-    approvalBaseUrl: string;
-    merchantName?: string;
-    merchantCountryCode?: string;
-};
-export type CliReviewFacts = {
-    reviewId: string;
-    merchantHost: string;
-    amountMinor: number;
-    currency: string;
-    submitTargetFingerprint: string;
-    detectedRoles: string[];
-};
-export type CliPayInput = CliReviewInput & {
-    reviewId: string;
-    submit: boolean;
-};
-export type CliReceiptFacts = {
-    outcome: string;
-    confirmationRef: string | null;
-    receiptPath: string | null;
-    detail: string | null;
-    vicConfirmation: VicConfirmationReport | null;
-};
-type Session = {
-    browser: Browser;
-    target: VgsCheckoutTarget;
-    amountMinor: number;
-    currency: string;
-    contact: Contact;
-    cleanupTimer: ReturnType<typeof setTimeout>;
-};
-export type CliEngineDeps = {
-    launchBrowser?: () => Promise<Browser>;
-    prepareCheckout?: typeof realPrepareCheckout;
-    submitApprovedCheckout?: typeof realSubmitApprovedCheckout;
-    runHostedApproval?: typeof realRunHostedApproval;
-    reportVicOutcome?: typeof realReportVicOutcome;
-    writeReceipt?: typeof realWriteReceipt;
-    store?: PreparedCheckoutSessionStore;
-    sessions?: Map<string, Session>;
-    ttlMs?: number;
-};
-export declare function createCliCheckoutEngine(deps?: CliEngineDeps): {
-    review(input: CliReviewInput): Promise<CliReviewFacts>;
-    pay(input: CliPayInput): Promise<CliReceiptFacts>;
-};
-export {};

package/dist/checkout-engine/cli-engine.js DELETED Viewed

@@ -1,242 +0,0 @@
-// createCliCheckoutEngine — the review()/pay() adapter consumed by @visa/cli's
-// pay_merchant tool. It COMPOSES prepareCheckout, runHostedApproval, the
-// server-side mint (serverCreateIntent/serverFetchCryptogram — the credential is
-// minted by the verify-web deployment, not this machine), submitApprovedCheckout,
-// reportVicOutcome, and receipts into a two-call API.
-//
-// A live browser + prepared-checkout session is held in-process between review
-// and pay, keyed by reviewId, so the submitted checkout is the exact one the
-// human approved. Passkey approval uses the hosted /approve page only.
-//
-// Every browser/network primitive is injectable (CliEngineDeps) so the session/
-// timer/store lifecycle is unit-testable without launching Chromium.
-import { homedir } from 'node:os';
-import { join } from 'node:path';
-import { readFile } from 'node:fs/promises';
-import { launchCheckoutBrowser } from './browser-launch.js';
-import { prepareCheckout as realPrepareCheckout, submitApprovedCheckout as realSubmitApprovedCheckout, InMemoryPreparedCheckoutStore, } from './executor.js';
-import { runHostedApproval as realRunHostedApproval } from './hosted-approval.js';
-import { VgsAssuranceInstrument, decimalToMinor, } from './vgs-live-instrument.js';
-import { serverCreateIntent, serverFetchCryptogram, serverPostConfirmation, } from './vgs-gateway/server-mint-client.js';
-import { buildReceipt, writeReceipt as realWriteReceipt } from './receipt.js';
-import { reportVicOutcome as realReportVicOutcome, } from './vic-confirmation.js';
-const RECEIPT_DIR = join(homedir(), '.visa-mcp', 'checkout-receipts');
-// Must match the prepared-checkout store TTL so a session and its store entry
-// expire together — an abandoned review can't leak the browser + state.
-const PREPARED_TTL_MS = 5 * 60 * 1000;
-const defaultStore = new InMemoryPreparedCheckoutStore({ ttlMs: PREPARED_TTL_MS });
-const defaultSessions = new Map();
-export function createCliCheckoutEngine(deps = {}) {
-    const store = deps.store ?? defaultStore;
-    const sessions = deps.sessions ?? defaultSessions;
-    const ttlMs = deps.ttlMs ?? PREPARED_TTL_MS;
-    const launchBrowser = deps.launchBrowser ?? (() => launchCheckoutBrowser());
-    const prepareCheckout = deps.prepareCheckout ?? realPrepareCheckout;
-    const submitApprovedCheckout = deps.submitApprovedCheckout ?? realSubmitApprovedCheckout;
-    const runHostedApproval = deps.runHostedApproval ?? realRunHostedApproval;
-    const reportVicOutcome = deps.reportVicOutcome ?? realReportVicOutcome;
-    const writeReceipt = deps.writeReceipt ?? realWriteReceipt;
-    async function closeSession(reviewId) {
-        const session = sessions.get(reviewId);
-        if (!session)
-            return;
-        clearTimeout(session.cleanupTimer);
-        sessions.delete(reviewId);
-        await session.browser.close().catch(() => { });
-    }
-    function buildTarget(input) {
-        return {
-            merchantName: input.merchantName ?? new URL(input.url).hostname,
-            merchantUrl: input.url,
-            merchantCountryCode: input.merchantCountryCode ?? 'US',
-            transactionAmount: input.amount,
-            transactionCurrencyCode: input.currency,
-        };
-    }
-    return {
-        async review(input) {
-            const amountMinor = decimalToMinor(input.amount);
-            if (amountMinor === null)
-                throw new Error(`invalid amount ${JSON.stringify(input.amount)}`);
-            const host = new URL(input.url).hostname;
-            const browser = await launchBrowser();
-            try {
-                const prep = await prepareCheckout({
-                    url: input.url,
-                    mandate: {
-                        maxAmountMinor: amountMinor,
-                        currency: input.currency,
-                        merchantHost: host,
-                        expiresAt: new Date(Date.now() + 15 * 60 * 1000).toISOString(),
-                    },
-                    amountMinor,
-                    currency: input.currency,
-                    browser,
-                }, store);
-                if (prep.status !== 'ready') {
-                    await browser.close();
-                    throw new Error(`review refused: ${prep.result.outcome} — ${prep.result.detail ?? ''}`);
-                }
-                const r = prep.checkout.review;
-                // Expire the companion session on the SAME schedule as the store entry
-                // (unref'd so a pending timer never keeps the process alive).
-                const cleanupTimer = setTimeout(() => void closeSession(r.id), ttlMs);
-                cleanupTimer.unref?.();
-                sessions.set(r.id, {
-                    browser,
-                    target: buildTarget(input),
-                    amountMinor,
-                    currency: input.currency,
-                    contact: input.contact,
-                    cleanupTimer,
-                });
-                return {
-                    reviewId: r.id,
-                    merchantHost: r.merchantHost,
-                    amountMinor: r.amountMinor,
-                    currency: r.currency,
-                    submitTargetFingerprint: JSON.stringify(r.submitTargetFingerprint ?? null),
-                    detectedRoles: [...r.detectedRoles],
-                };
-            }
-            catch (err) {
-                await browser.close().catch(() => { });
-                throw err;
-            }
-        },
-        async pay(input) {
-            const session = sessions.get(input.reviewId);
-            if (!session) {
-                return {
-                    outcome: 'failed',
-                    confirmationRef: null,
-                    receiptPath: null,
-                    detail: `no prepared review ${input.reviewId} — call review first (a review does not survive a restart)`,
-                    vicConfirmation: null,
-                };
-            }
-            // Amount-bind the confirmation: the pay-call amount must match the
-            // reviewed amount. The reviewId already locks the immutable mandate, but
-            // re-checking here makes the confirmation explicitly amount-bound so a
-            // caller cannot pay a different figure than the human reviewed.
-            const payAmountMinor = decimalToMinor(input.amount);
-            if (payAmountMinor !== session.amountMinor) {
-                await closeSession(input.reviewId);
-                return {
-                    outcome: 'failed',
-                    confirmationRef: null,
-                    receiptPath: null,
-                    detail: `pay amount ${JSON.stringify(input.amount)} does not match the reviewed amount (${session.amountMinor} minor units) — start a fresh review`,
-                    vicConfirmation: null,
-                };
-            }
-            // Reject an expired prepared checkout BEFORE running the hosted passkey
-            // approval — the store may have expired/closed the entry while the review
-            // waited. Peeking here avoids minting a credential we can't submit.
-            if (!store.peek(input.reviewId)) {
-                await closeSession(input.reviewId);
-                return {
-                    outcome: 'failed',
-                    confirmationRef: null,
-                    receiptPath: null,
-                    detail: `prepared review ${input.reviewId} expired — start a fresh review`,
-                    vicConfirmation: null,
-                };
-            }
-            clearTimeout(session.cleanupTimer);
-            try {
-                const credential = JSON.parse(await readFile(input.credentialPath, 'utf8'));
-                const assurance = await runHostedApproval({
-                    baseUrl: input.approvalBaseUrl,
-                    tokenId: credential.tokenId,
-                    target: session.target,
-                    consumerEmail: session.contact.email,
-                });
-                // Server-side mint (Phase 1): the approval claim releases a scoped mint
-                // token; the credential is minted by the verify-web deployment (which
-                // holds the VGS secret), never on this machine. No token means the
-                // deployment ran the dev-auth stub — refuse loudly rather than reach for
-                // a client-held secret (there is none anymore).
-                const approvalBase = input.approvalBaseUrl;
-                const mintToken = assurance.mintToken;
-                if (!mintToken) {
-                    return {
-                        outcome: 'failed',
-                        confirmationRef: null,
-                        receiptPath: null,
-                        detail: 'the approval server issued no mint token — server-side minting requires the ' +
-                            'verify-web deployment to run real/turnkey auth (not the dev stub). Retry once it does.',
-                        vicConfirmation: null,
-                    };
-                }
-                const instrument = new VgsAssuranceInstrument(credential, assurance, session.target, session.contact.fullName ?? '', async (mintInput) => {
-                    const { intentId, status } = await serverCreateIntent(approvalBase, mintToken, mintInput);
-                    try {
-                        const payment = await serverFetchCryptogram(approvalBase, mintToken, {
-                            tokenId: mintInput.tokenId,
-                            intentId,
-                            transaction: mintInput.transaction,
-                        });
-                        return { payment, intentId };
-                    }
-                    catch (err) {
-                        throw new Error(`${err.message} (intent status at creation: ${status ?? 'unknown'})`);
-                    }
-                });
-                const mode = input.submit ? 'submit' : 'dry-run';
-                const result = await submitApprovedCheckout(input.reviewId, {
-                    approval: { approved: true, reviewId: input.reviewId },
-                    instrument,
-                    contact: session.contact,
-                    mode,
-                }, store);
-                // Report the observed submit outcome to VIC for the consumed intent
-                // (APPROVED/DECLINED). Only definitive submit answers post. Mirrors
-                // run-live-fill.ts.
-                let vicConfirmation = null;
-                if (mode === 'submit') {
-                    vicConfirmation = await reportVicOutcome({
-                        target: instrument.confirmationTarget(),
-                        outcome: result.outcome,
-                        transaction: {
-                            transactionAmount: session.target.transactionAmount,
-                            transactionCurrencyCode: session.currency,
-                        },
-                        post: (confInput) => serverPostConfirmation(approvalBase, mintToken, confInput),
-                    });
-                }
-                let receiptPath = null;
-                const report = await writeReceipt(RECEIPT_DIR, buildReceipt({
-                    mode,
-                    reviewId: input.reviewId,
-                    // Derive BOTH name and host from the reviewed session target (not
-                    // pay()'s input.url), so the receipt always reflects the checkout
-                    // the human actually reviewed + that reviewId bound for submit.
-                    merchant: {
-                        name: session.target.merchantName,
-                        host: new URL(session.target.merchantUrl).hostname,
-                    },
-                    transaction: {
-                        amount: session.target.transactionAmount,
-                        amountMinor: session.amountMinor,
-                        currency: session.currency,
-                    },
-                    result,
-                    vicConfirmation,
-                }));
-                if (report.written)
-                    receiptPath = report.path;
-                return {
-                    outcome: result.outcome,
-                    confirmationRef: result.confirmationRef ?? null,
-                    receiptPath,
-                    detail: result.detail ?? null,
-                    vicConfirmation,
-                };
-            }
-            finally {
-                await closeSession(input.reviewId);
-            }
-        },
-    };
-}

package/dist/checkout-engine/detect.d.ts DELETED Viewed

@@ -1,61 +0,0 @@
-import type { Page } from 'playwright-core';
-export type FieldSource = 'autocomplete' | 'attr-heuristic' | 'label-text' | 'iframe-psp' | 'type-inference';
-export type FieldRole = 'number' | 'expMonth' | 'expYear' | 'expCombined' | 'cvc' | 'name' | 'nameFirst' | 'nameLast' | 'email' | 'addressLine1' | 'addressLine2' | 'city' | 'state' | 'postalCode' | 'country';
-export declare const ALL_ROLES: FieldRole[];
-export type SelectOption = {
-    value: string;
-    text: string;
-};
-export type CandidateMeta = {
-    idx: number;
-    tag: 'input' | 'select' | 'textarea';
-    type: string;
-    name: string;
-    id: string;
-    placeholder: string;
-    ariaLabel: string;
-    autocomplete: string;
-    maxlength: string;
-    inputmode: string;
-    pattern: string;
-    labelText: string;
-    options: SelectOption[];
-    visible: boolean;
-};
-export type RoleMatch = {
-    role: FieldRole;
-    confidence: number;
-    source: FieldSource;
-};
-export type FieldEntry = {
-    locator: string;
-    confidence: number;
-    source: FieldSource;
-    frame?: string;
-    tag: 'input' | 'select' | 'textarea';
-    inputType: string;
-    visible: boolean;
-    options?: SelectOption[];
-    maxlength?: number;
-};
-export type FieldMap = Partial<Record<FieldRole, FieldEntry>>;
-export type FieldCandidate = {
-    role: FieldRole | null;
-    confidence: number;
-    source: FieldSource | null;
-    matches: RoleMatch[];
-    frame?: string;
-    meta: CandidateMeta;
-};
-export type PspHit = {
-    psp: string;
-    requiresAdapter: string | null;
-    frameSelector: string;
-};
-export type DetectResult = {
-    fields: FieldMap;
-    candidates: FieldCandidate[];
-    psps: PspHit[];
-};
-export declare function classifyCandidate(m: CandidateMeta): RoleMatch[];
-export declare function detectFields(page: Page): Promise<DetectResult>;