@amos.com/amos-js 0.10.4 → 0.10.6

package/dist/types.d.ts

@@ -267,16 +267,6 @@ export type Message = {
     requestId: string;
     link_token?: string;
     error?: string;
-} | {
-    /**
-     * Parent → embed: info telemetry for Rollbar. The iframe reports
-     * `message` with `endpoint`, `headers`, and `body`.
-     */
-    type: "PARENT_INFO_LOG";
-    message: string;
-    endpoint?: string;
-    headers?: Record<string, string>;
-    body?: unknown;
 };
 /**
  * Identity helper that brands an object as a typed `Message`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amos.com/amos-js",
-  "version": "0.10.4",
+  "version": "0.10.6",
   "main": "dist/index.js",
   "repository": {
     "type": "git",

package/src/apple-pay.ts

@@ -132,6 +132,9 @@ export function attachApplePayButtonListeners(
     ...options,
     height,
   };
+  // React calls `update()` on first paint, before the iframe has left
+  // about:blank. Queue until IFRAME_READY so postMessage targetOrigin matches.
+  let ready = false;
 
   function pushAmount() {
     sendUpdateAmount({ iframe, amount: current.amount });
@@ -157,6 +160,7 @@ export function attachApplePayButtonListeners(
 
     switch (event.data.type) {
       case "IFRAME_READY":
+        ready = true;
         sendParentReadyMessage(iframe);
         sendUpdateAppearance({ iframe, appearance: {} });
         pushAmount();
@@ -224,6 +228,9 @@ export function attachApplePayButtonListeners(
       const hadMerchantName = "merchantName" in patch;
       const hadButtonProps = "height" in patch || "buttonProps" in patch;
       current = { ...current, ...patch };
+      if (!ready) {
+        return;
+      }
       if (hadAmount) {
         pushAmount();
       }

package/src/google-pay.ts

@@ -118,6 +118,9 @@ export function attachGooglePayButtonListeners(
     ...options,
     height,
   };
+  // React calls `update()` on first paint, before the iframe has left
+  // about:blank. Queue until IFRAME_READY so postMessage targetOrigin matches.
+  let ready = false;
 
   function pushAmount() {
     sendUpdateAmount({ iframe, amount: current.amount });
@@ -142,6 +145,7 @@ export function attachGooglePayButtonListeners(
 
     switch (event.data.type) {
       case "IFRAME_READY":
+        ready = true;
         sendParentReadyMessage(iframe);
         sendUpdateAppearance({ iframe, appearance: {} });
         pushAmount();
@@ -194,6 +198,9 @@ export function attachGooglePayButtonListeners(
       const hadMerchantName = "merchantName" in patch;
       const hadButtonProps = "height" in patch || "buttonProps" in patch;
       current = { ...current, ...patch };
+      if (!ready) {
+        return;
+      }
       if (hadAmount) {
         pushAmount();
       }

package/src/messaging.ts

@@ -1,6 +1,5 @@
 import type { components } from "@amos.com/node";
 import { decodeJwt } from "./jwt";
-import { reportParentInfoLog } from "./log";
 import { getBankPlaidSession } from "./plaid-session";
 import {
   type Appearance,
@@ -293,24 +292,6 @@ function postConfirmIntent({
     resetIframeFields(iframe);
   }
 
-  const origin = getIframeTargetOrigin(iframe);
-  reportParentInfoLog({
-    iframe,
-    message:
-      type === "CONFIRM_PAYMENT_INTENT"
-        ? "confirmPaymentIntent"
-        : "confirmSetupIntent",
-    endpoint:
-      type === "CONFIRM_PAYMENT_INTENT"
-        ? "POST /embed/payment_intents/{id}/confirm_with_payment_method"
-        : "POST /embed/setup_intents/{id}/confirm_with_payment_method",
-    headers: {
-      origin: window.location.origin,
-      "iframe-origin": origin,
-    },
-    body: { id, token, ...(plaid ? { plaid } : {}) },
-  });
-
   iframe.contentWindow?.postMessage(
     createMessage({
       type,

package/src/payment-method-form.ts

@@ -194,6 +194,9 @@ export function attachPaymentMethodFormListeners(
   options: PaymentMethodFormListenerOptions,
 ): PaymentMethodFormController {
   let current = { ...options };
+  // React calls `update()` on first paint, before the iframe has left
+  // about:blank. Queue until IFRAME_READY so postMessage targetOrigin matches.
+  let ready = false;
 
   function handleMessage(event: MessageEvent<Message>) {
     if (event.source !== iframe.contentWindow) {
@@ -202,6 +205,7 @@ export function attachPaymentMethodFormListeners(
 
     switch (event.data.type) {
       case "IFRAME_READY":
+        ready = true;
         sendParentReadyMessage(iframe);
         sendUpdateAppearance({ iframe, appearance: current.appearance });
         break;
@@ -241,7 +245,7 @@ export function attachPaymentMethodFormListeners(
     update(patch) {
       const hadAppearance = "appearance" in patch;
       current = { ...current, ...patch };
-      if (hadAppearance) {
+      if (hadAppearance && ready) {
         sendUpdateAppearance({ iframe, appearance: current.appearance });
       }
     },

package/src/plaid-bank-ui.ts

@@ -1,4 +1,3 @@
-import { reportParentInfoLog } from "./log";
 import { requestPlaidLinkToken } from "./messaging";
 import type { PaymentMethodFormListenerOptions } from "./payment-method-form";
 import {
@@ -310,16 +309,6 @@ export function attachPlaidBankUi({
     thresholdKnown = true;
     achThreshold = event.data.achThreshold ?? undefined;
     requireVerification = event.data.requireVerification === true;
-    reportParentInfoLog({
-      iframe,
-      message: "merchant ach_threshold",
-      endpoint: "ACH_THRESHOLD",
-      headers: { origin: event.origin },
-      body: {
-        achThreshold,
-        requireVerification,
-      },
-    });
     if (linked && !requiresConnect()) {
       unlink();
       return;

package/src/types.ts

@@ -557,17 +557,6 @@ export type Message =
       requestId: string;
       link_token?: string;
       error?: string;
-    }
-  | {
-      /**
-       * Parent → embed: info telemetry for Rollbar. The iframe reports
-       * `message` with `endpoint`, `headers`, and `body`.
-       */
-      type: "PARENT_INFO_LOG";
-      message: string;
-      endpoint?: string;
-      headers?: Record<string, string>;
-      body?: unknown;
     };
 
 /**

package/dist/log.d.ts

@@ -1,12 +0,0 @@
-/**
- * Forward an info log to the embed iframe so Rollbar records it with
- * Amos credentials. Payload shape matches dashboard/embed API traces:
- * `endpoint`, `headers`, `body`.
- */
-export declare function reportParentInfoLog({ iframe, message, endpoint, headers, body, }: {
-    iframe: HTMLIFrameElement;
-    message: string;
-    endpoint: string;
-    headers?: Record<string, string>;
-    body?: unknown;
-}): void;

package/src/log.ts

@@ -1,74 +0,0 @@
-import { createMessage } from "./types";
-
-const SENSITIVE_HEADER_NAMES = new Set([
-  "authorization",
-  "cookie",
-  "set-cookie",
-  "x-api-key",
-]);
-
-const SENSITIVE_BODY_KEYS = new Set([
-  "authorization",
-  "encrypted_account_number",
-  "link_token",
-  "public_token",
-  "token",
-]);
-
-function redactHeaders(
-  headers: Record<string, string>,
-): Record<string, string> {
-  const redacted: Record<string, string> = {};
-  for (const [key, value] of Object.entries(headers)) {
-    redacted[key] = SENSITIVE_HEADER_NAMES.has(key.toLowerCase())
-      ? "[REDACTED]"
-      : value;
-  }
-  return redacted;
-}
-
-function redactBody(body: unknown): unknown {
-  if (Array.isArray(body)) {
-    return body.map(redactBody);
-  }
-  if (body !== null && typeof body === "object") {
-    const redacted: Record<string, unknown> = {};
-    for (const [key, value] of Object.entries(body)) {
-      redacted[key] = SENSITIVE_BODY_KEYS.has(key)
-        ? "[REDACTED]"
-        : redactBody(value);
-    }
-    return redacted;
-  }
-  return body;
-}
-
-/**
- * Forward an info log to the embed iframe so Rollbar records it with
- * Amos credentials. Payload shape matches dashboard/embed API traces:
- * `endpoint`, `headers`, `body`.
- */
-export function reportParentInfoLog({
-  iframe,
-  message,
-  endpoint,
-  headers = {},
-  body,
-}: {
-  iframe: HTMLIFrameElement;
-  message: string;
-  endpoint: string;
-  headers?: Record<string, string>;
-  body?: unknown;
-}): void {
-  iframe.contentWindow?.postMessage(
-    createMessage({
-      type: "PARENT_INFO_LOG",
-      message,
-      endpoint,
-      headers: redactHeaders(headers),
-      body: redactBody(body),
-    }),
-    new URL(iframe.src).origin,
-  );
-}