@conto_finance/sdk 0.1.0 → 0.4.0

package/dist/chunk-O5RAAB2U.mjs

@@ -0,0 +1,123 @@
+// src/browser-checkout.ts
+import { createHash } from "crypto";
+var MAX_URL_LENGTH = 2048;
+var MAX_LOCATOR_LENGTH = 1024;
+var MAX_TEXT_LENGTH = 500;
+var BrowserCheckoutTargetVerificationError = class extends Error {
+  constructor(code, message) {
+    super(message);
+    this.code = code;
+    this.name = "BrowserCheckoutTargetVerificationError";
+  }
+};
+function invalid(message) {
+  throw new BrowserCheckoutTargetVerificationError("BROWSER_CHECKOUT_TARGET_INVALID", message);
+}
+function canonicalHttpsUrl(value, field) {
+  if (typeof value !== "string" || !value || value.length > MAX_URL_LENGTH) {
+    invalid(`${field} is invalid.`);
+  }
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    invalid(`${field} is invalid.`);
+  }
+  if (url.protocol !== "https:" || url.username || url.password) {
+    invalid(`${field} must use HTTPS without credentials.`);
+  }
+  url.hostname = url.hostname.toLowerCase();
+  url.hash = "";
+  return url.toString();
+}
+function canonicalText(value, field, options = {}) {
+  if (value === void 0) {
+    if (options.required) invalid(`${field} is required.`);
+    return null;
+  }
+  if (typeof value !== "string") invalid(`${field} is invalid.`);
+  const trimmed = value.trim();
+  const normalized = options.collapseWhitespace === false ? trimmed : trimmed.replace(/\s+/g, " ");
+  if (options.required && !normalized || normalized.length > (options.maxLength ?? MAX_TEXT_LENGTH)) {
+    invalid(`${field} is invalid.`);
+  }
+  return normalized || null;
+}
+function canonicalizeBrowserCheckoutTarget(snapshot) {
+  if (!snapshot || typeof snapshot !== "object") {
+    invalid("The browser checkout target is invalid.");
+  }
+  if (typeof snapshot.disabled !== "boolean") {
+    invalid("target.disabled is invalid.");
+  }
+  const tagName = canonicalText(snapshot.tagName, "target.tagName", {
+    required: true,
+    maxLength: 80
+  });
+  return Object.freeze({
+    pageUrl: canonicalHttpsUrl(snapshot.pageUrl, "target.pageUrl"),
+    locator: canonicalText(snapshot.locator, "target.locator", {
+      collapseWhitespace: false,
+      required: true,
+      maxLength: MAX_LOCATOR_LENGTH
+    }) ?? "",
+    tagName: (tagName ?? "").toLowerCase(),
+    role: canonicalText(snapshot.role, "target.role", { maxLength: 80 })?.toLowerCase() ?? null,
+    accessibleName: canonicalText(snapshot.accessibleName, "target.accessibleName"),
+    targetUrl: snapshot.targetUrl ? canonicalHttpsUrl(snapshot.targetUrl, "target.targetUrl") : null,
+    formAction: snapshot.formAction ? canonicalHttpsUrl(snapshot.formAction, "target.formAction") : null,
+    opensNewPage: snapshot.opensNewPage === true,
+    disabled: snapshot.disabled
+  });
+}
+function fingerprintBrowserCheckoutTarget(snapshot) {
+  const canonical = canonicalizeBrowserCheckoutTarget(snapshot);
+  const digest = createHash("sha256").update(JSON.stringify(canonical)).digest("hex");
+  return `browser_target_sha256_${digest}`;
+}
+function createVerifiedBrowserCheckoutDriver(resolver) {
+  if (!resolver || typeof resolver.resolve !== "function") {
+    invalid("A browser checkout target resolver is required.");
+  }
+  return Object.freeze({
+    async dispatch(input) {
+      const target = await resolver.resolve(input);
+      if (!target) {
+        throw new BrowserCheckoutTargetVerificationError(
+          "BROWSER_CHECKOUT_TARGET_NOT_FOUND",
+          "The approved browser checkout target was not found."
+        );
+      }
+      if (typeof target.dispatch !== "function") {
+        invalid("The resolved browser checkout target cannot be dispatched.");
+      }
+      const canonical = canonicalizeBrowserCheckoutTarget(target.snapshot);
+      const approvedPageUrl = canonicalHttpsUrl(input.action.pageUrl, "action.pageUrl");
+      const approvedTargetUrl = input.action.targetUrl ? canonicalHttpsUrl(input.action.targetUrl, "action.targetUrl") : null;
+      const observedDestinations = [canonical.targetUrl, canonical.formAction].filter(
+        (value) => value !== null
+      );
+      const destinationsAreBound = approvedTargetUrl === null ? observedDestinations.length === 0 : observedDestinations.length > 0 && observedDestinations.every((value) => value === approvedTargetUrl);
+      if (canonical.pageUrl !== approvedPageUrl || !destinationsAreBound || fingerprintBrowserCheckoutTarget(target.snapshot) !== input.action.targetFingerprint.trim()) {
+        throw new BrowserCheckoutTargetVerificationError(
+          "BROWSER_CHECKOUT_TARGET_CHANGED",
+          "The browser checkout target changed after Conto authorization."
+        );
+      }
+      if (canonical.disabled) {
+        throw new BrowserCheckoutTargetVerificationError(
+          "BROWSER_CHECKOUT_TARGET_DISABLED",
+          "The approved browser checkout target is disabled."
+        );
+      }
+      return target.dispatch();
+    }
+  });
+}
+
+export {
+  BrowserCheckoutTargetVerificationError,
+  canonicalizeBrowserCheckoutTarget,
+  fingerprintBrowserCheckoutTarget,
+  createVerifiedBrowserCheckoutDriver
+};