Card contract: Idempotency-Key + 409s, DECLINED status, CARD_TRANSACTION.DECLINED, threeDSecurePassword - #686

Draft

kphurley7 wants to merge 8 commits into

mainfrom

kph/cards-idempotency-txn-webhook

Commits on Jul 29, 2026

Add card Idempotency-Key, 409 responses, and CARD.TRANSACTION_UPDATE webhook

kphurley7
and
claude
committed
ADD: DECLINED terminal status to CardTransactionStatus
kphurley7
committed
ADD: optional write-only threeDSecurePassword on card create
kphurley7
committed
REWORK: adopt the merged CARD_TRANSACTION.* webhook family, add DECLINED

kphurley7
and
claude
committed
LINT: ignore field-names-camelCase for threeDSecurePassword

kphurley7
and
claude
committed
DOCS: standalone-refund semantics for EU card programs

kphurley7
and
claude
committed
LINT: spectral override for threeDSecurePassword camelCase

kphurley7
and
claude
committed
REWORK: drop DECLINED status/webhook — declines derive to EXCEPTION

kphurley7
and
claude
committed