@conto_finance/sdk 0.7.0 → 0.8.0

package/dist/link-wallet.d.mts

@@ -38,8 +38,13 @@ interface LinkSpendRequest {
     amountMinor?: number;
     merchantName?: string;
     merchantUrl?: string;
-    /** Link page where the person can review the request. */
+    /**
+     * The Stripe Link page where the person can approve the request on the web
+     * while signed in to Link. Only an HTTPS link.com address is kept.
+     */
     approvalUrl?: string;
+    /** When Link stops accepting approval for the request, as an ISO 8601 time. */
+    approvalExpiresAt?: string;
     /** Set with requires_action. `auto_resume` means Link continues once the person finishes the step. */
     actionResolution?: string;
     /** Set with requires_action when Link gives the person a page to finish the step. */

package/dist/link-wallet.d.ts

@@ -38,8 +38,13 @@ interface LinkSpendRequest {
     amountMinor?: number;
     merchantName?: string;
     merchantUrl?: string;
-    /** Link page where the person can review the request. */
+    /**
+     * The Stripe Link page where the person can approve the request on the web
+     * while signed in to Link. Only an HTTPS link.com address is kept.
+     */
     approvalUrl?: string;
+    /** When Link stops accepting approval for the request, as an ISO 8601 time. */
+    approvalExpiresAt?: string;
     /** Set with requires_action. `auto_resume` means Link continues once the person finishes the step. */
     actionResolution?: string;
     /** Set with requires_action when Link gives the person a page to finish the step. */

package/dist/link-wallet.js

@@ -40,6 +40,34 @@ var import_node_fs = require("fs");
 var import_promises = require("fs/promises");
 var import_node_os = require("os");
 var import_node_path = __toESM(require("path"));
+
+// src/link-approval.ts
+function safeLinkApprovalUrl(value) {
+  if (typeof value !== "string" || value.length === 0 || value.length > 2048) return void 0;
+  let url;
+  try {
+    url = new URL(value);
+  } catch {
+    return void 0;
+  }
+  if (url.protocol !== "https:" || url.username !== "" || url.password !== "" || url.port !== "" || !(url.hostname === "link.com" || url.hostname.endsWith(".link.com"))) {
+    return void 0;
+  }
+  url.hash = "";
+  return url.toString();
+}
+function linkTime(value) {
+  let ms = Number.NaN;
+  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
+    ms = value < 1e12 ? value * 1e3 : value;
+  } else if (typeof value === "string" && value.length > 0 && value.length <= 64) {
+    ms = Date.parse(value);
+  }
+  const date = new Date(ms);
+  return Number.isNaN(date.getTime()) ? void 0 : date.toISOString();
+}
+
+// src/link-wallet.ts
 var LinkWalletError = class extends Error {
   constructor(reason, message, linkCode) {
     super(message);
@@ -102,13 +130,16 @@ function parseSpendRequest(value) {
   const status = typeof data.status === "string" && KNOWN_STATUSES.has(data.status) ? data.status : "unknown";
   const nextAction = record(record(record(data.status_details).requires_action).next_action);
   const amount = data.amount;
+  const approvalUrl = safeLinkApprovalUrl(data.approval_url);
+  const approvalExpiresAt = linkTime(data.approval_window_expires_at);
   return {
     id,
     status,
     ...Number.isSafeInteger(amount) ? { amountMinor: amount } : {},
     ...text(data.merchant_name) ? { merchantName: text(data.merchant_name) } : {},
     ...httpsUrl(data.merchant_url) ? { merchantUrl: httpsUrl(data.merchant_url) } : {},
-    ...httpsUrl(data.approval_url) ? { approvalUrl: httpsUrl(data.approval_url) } : {},
+    ...approvalUrl ? { approvalUrl } : {},
+    ...approvalExpiresAt ? { approvalExpiresAt } : {},
     ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
     ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
   };
@@ -116,15 +147,6 @@ function parseSpendRequest(value) {
 function invalidCard() {
   return new LinkWalletError("invalid_response", "Link returned card data this SDK cannot read.");
 }
-function validUntil(value) {
-  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
-    return new Date(value < 1e12 ? value * 1e3 : value).toISOString();
-  }
-  if (typeof value === "string" && !Number.isNaN(Date.parse(value))) {
-    return new Date(value).toISOString();
-  }
-  return void 0;
-}
 function parseCard(value) {
   const card = record(value);
   const number = typeof card.number === "string" ? card.number.replace(/[\s-]/g, "") : "";
@@ -136,7 +158,7 @@ function parseCard(value) {
   if (!/^\d{12,19}$/.test(number) || !/^\d{3,4}$/.test(securityValue) || !Number.isInteger(expMonth) || expMonth < 1 || expMonth > 12 || !Number.isInteger(expYear) || expYear < 2e3) {
     throw invalidCard();
   }
-  const until = validUntil(card.valid_until);
+  const until = linkTime(card.valid_until);
   const brand = text(card.brand);
   return {
     number,

package/dist/link-wallet.mjs

@@ -1,3 +1,7 @@
+import {
+  linkTime,
+  safeLinkApprovalUrl
+} from "./chunk-PVMUL3JC.mjs";
 import "./chunk-TGOYFBKZ.mjs";
 
 // src/link-wallet.ts
@@ -68,13 +72,16 @@ function parseSpendRequest(value) {
   const status = typeof data.status === "string" && KNOWN_STATUSES.has(data.status) ? data.status : "unknown";
   const nextAction = record(record(record(data.status_details).requires_action).next_action);
   const amount = data.amount;
+  const approvalUrl = safeLinkApprovalUrl(data.approval_url);
+  const approvalExpiresAt = linkTime(data.approval_window_expires_at);
   return {
     id,
     status,
     ...Number.isSafeInteger(amount) ? { amountMinor: amount } : {},
     ...text(data.merchant_name) ? { merchantName: text(data.merchant_name) } : {},
     ...httpsUrl(data.merchant_url) ? { merchantUrl: httpsUrl(data.merchant_url) } : {},
-    ...httpsUrl(data.approval_url) ? { approvalUrl: httpsUrl(data.approval_url) } : {},
+    ...approvalUrl ? { approvalUrl } : {},
+    ...approvalExpiresAt ? { approvalExpiresAt } : {},
     ...text(nextAction.resolution) ? { actionResolution: text(nextAction.resolution) } : {},
     ...httpsUrl(nextAction.action_url) ? { actionUrl: httpsUrl(nextAction.action_url) } : {}
   };
@@ -82,15 +89,6 @@ function parseSpendRequest(value) {
 function invalidCard() {
   return new LinkWalletError("invalid_response", "Link returned card data this SDK cannot read.");
 }
-function validUntil(value) {
-  if (typeof value === "number" && Number.isFinite(value) && value > 0) {
-    return new Date(value < 1e12 ? value * 1e3 : value).toISOString();
-  }
-  if (typeof value === "string" && !Number.isNaN(Date.parse(value))) {
-    return new Date(value).toISOString();
-  }
-  return void 0;
-}
 function parseCard(value) {
   const card = record(value);
   const number = typeof card.number === "string" ? card.number.replace(/[\s-]/g, "") : "";
@@ -102,7 +100,7 @@ function parseCard(value) {
   if (!/^\d{12,19}$/.test(number) || !/^\d{3,4}$/.test(securityValue) || !Number.isInteger(expMonth) || expMonth < 1 || expMonth > 12 || !Number.isInteger(expYear) || expYear < 2e3) {
     throw invalidCard();
   }
-  const until = validUntil(card.valid_until);
+  const until = linkTime(card.valid_until);
   const brand = text(card.brand);
   return {
     number,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@conto_finance/sdk",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "description": "Conto SDK for AI agent payment authorization",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -46,7 +46,7 @@
     "dev": "tsup --watch",
     "lint": "tsc --noEmit",
     "test": "npm run lint && npm run test:contract && npm run test:consumer",
-    "test:contract": "npm run build && node --test test/contract.test.mjs test/playwright.test.mjs test/browserbase.test.mjs test/checkout-verifier.test.mjs test/developer-experience.test.mjs test/checkout.test.mjs test/link-wallet.test.mjs test/purchases.test.mjs test/allowances.test.mjs test/purchase-watch-lifecycle.test.mjs ../../examples/link-wallet-agent/verify.test.mjs",
+    "test:contract": "npm run build && node --test test/contract.test.mjs test/playwright.test.mjs test/browserbase.test.mjs test/checkout-verifier.test.mjs test/developer-experience.test.mjs test/checkout.test.mjs test/link-wallet.test.mjs test/purchases.test.mjs test/allowances.test.mjs test/purchase-watch-lifecycle.test.mjs test/spending.test.mjs ../../examples/link-wallet-agent/verify.test.mjs",
     "test:consumer": "npm run build && node --test test/consumer.test.mjs",
     "verify:release": "node scripts/verify-release.mjs",
     "prepublishOnly": "npm run verify:release && npm run lint && npm run test:contract && npm run test:consumer"