@gbitx/pay-react-native 0.1.0

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/validation.ts","../src/redact.ts","../src/config.ts","../src/controller.ts","../src/GbitXPay.ts","../src/messageHandler.ts","../src/webviewPolicy.ts","../src/CheckoutModal.tsx","../src/GbitXPayProvider.tsx","../src/useGbitXPay.ts","../src/version.ts"],"names":["useColorScheme","useState","useRef","useCallback","_a","useEffect","BackHandler","Platform","StatusBar","jsx","Modal","jsxs","View","Text","TouchableOpacity","Fragment","WebView","ActivityIndicator","StyleSheet","useMemo"],"mappings":";;;;;;;;AA6CO,IAAM,aAAA,GAAN,MAAM,cAAA,SAAsB,KAAA,CAAM;AAAA,EAIvC,WAAA,CAAY,IAAA,EAAyB,OAAA,EAAiB,IAAA,EAA0B;AAC9E,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAGZ,IAAA,MAAM,OAA0B,EAAC;AACjC,IAAA,IAAI,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAM,gBAAA,EAAkB,IAAA,CAAK,gBAAA,GAAmB,IAAA,CAAK,gBAAA;AACzD,IAAA,IAAI,QAAO,IAAA,IAAA,IAAA,GAAA,MAAA,GAAA,IAAA,CAAM,aAAA,CAAA,KAAkB,QAAA,EAAU,IAAA,CAAK,gBAAgB,IAAA,CAAK,aAAA;AACvE,IAAA,IAAA,CAAK,OAAO,MAAA,CAAO,IAAA,CAAK,IAAI,CAAA,CAAE,SAAS,IAAA,GAAO,MAAA;AAI9C,IAAA,IAAI,IAAA,IAAQ,WAAW,IAAA,EAAM;AAC3B,MAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,OAAA,EAAS,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,EAAO,UAAA,EAAY,KAAA,EAAO,QAAA,EAAU,KAAA,EAAO,YAAA,EAAc,MAAM,CAAA;AAAA,IACpH;AAGA,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,cAAA,CAAc,SAAS,CAAA;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAA,GAAS;AAzEX,IAAA,IAAA,EAAA,EAAA,EAAA;AA0EI,IAAA,MAAM,GAAA,GAA+B;AAAA,MACnC,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,SAAS,IAAA,CAAK;AAAA,KAChB;AACA,IAAA,IAAA,CAAI,UAAK,IAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAW,kBAAkB,GAAA,CAAI,gBAAA,GAAmB,KAAK,IAAA,CAAK,gBAAA;AAClE,IAAA,IAAI,QAAA,CAAO,UAAK,IAAA,KAAL,IAAA,GAAA,MAAA,GAAA,EAAA,CAAW,mBAAkB,QAAA,EAAU,GAAA,CAAI,aAAA,GAAgB,IAAA,CAAK,IAAA,CAAK,aAAA;AAChF,IAAA,OAAO,GAAA;AAAA,EACT;AACF;AAGO,SAAS,gBAAgB,CAAA,EAAgC;AAC9D,EAAA,OAAO,CAAA,YAAa,iBAAkB,OAAO,CAAA,KAAM,YAAY,CAAA,KAAM,IAAA,IAAS,EAAwB,IAAA,KAAS,eAAA;AACjH;;;ACnFA,IAAM,kBAAA,GAAqB,+BAAA;AAK3B,IAAM,aAAA,GAAgB,uBAAA;AAKtB,IAAM,eAAA,GAAkB,uBAAA;AAKjB,SAAS,qBAAqB,cAAA,EAAoE;AACvG,EAAA,IAAI,OAAO,cAAA,KAAmB,QAAA,IAAY,cAAA,CAAe,IAAA,OAAW,EAAA,EAAI;AACtE,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,EAAe,sCAAsC,CAAA;AAAA,EAC/E;AACA,EAAA,MAAM,GAAA,GAAM,eAAe,IAAA,EAAK;AAChC,EAAA,IAAI,GAAA,CAAI,UAAA,CAAW,KAAK,CAAA,EAAG;AACzB,IAAA,MAAM,IAAI,aAAA;AAAA,MACR,iBAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,kBAAA,CAAmB,IAAA,CAAK,GAAG,CAAA,EAAG;AACjC,IAAA,MAAM,IAAI,aAAA,CAAc,aAAA,EAAe,iEAAuD,CAAA;AAAA,EAChG;AACA,EAAA,MAAM,WAAA,GAA2B,GAAA,CAAI,UAAA,CAAW,UAAU,IAAI,MAAA,GAAS,MAAA;AACvE,EAAA,OAAO,EAAE,KAAK,WAAA,EAAY;AAC5B;AAGO,SAAS,iBAAA,CACd,WACA,WAAA,EAC4C;AAC5C,EAAA,MAAM,KAAK,OAAO,SAAA,KAAc,QAAA,GAAW,SAAA,CAAU,MAAK,GAAI,EAAA;AAC9D,EAAA,MAAM,QAAQ,OAAO,WAAA,KAAgB,QAAA,GAAW,WAAA,CAAY,MAAK,GAAI,EAAA;AACrE,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,EAAE,CAAA,EAAG;AAC3B,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,oCAAoC,CAAA;AAAA,EACnF;AACA,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,KAAK,CAAA,EAAG;AAChC,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,sCAAsC,CAAA;AAAA,EACrF;AACA,EAAA,OAAO,EAAE,SAAA,EAAW,EAAA,EAAI,WAAA,EAAa,KAAA,EAAM;AAC7C;AAIO,SAAS,iBAAA,CAAkB,KAAc,KAAA,EAAuB;AACrE,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,IAAA,OAAW,EAAA,EAAI;AAChD,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,CAAA,EAAG,KAAK,CAAA,aAAA,CAAe,CAAA;AAAA,EACtE;AACA,EAAA,IAAI,CAAA;AACJ,EAAA,IAAI;AACF,IAAA,CAAA,GAAI,IAAI,GAAA,CAAI,GAAA,CAAI,IAAA,EAAM,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,CAAA,EAAG,KAAK,CAAA,oBAAA,CAAsB,CAAA;AAAA,EAC7E;AACA,EAAA,IAAI,CAAA,CAAE,aAAa,QAAA,EAAU;AAC3B,IAAA,MAAM,IAAI,aAAA,CAAc,mBAAA,EAAqB,CAAA,EAAG,KAAK,CAAA,eAAA,CAAiB,CAAA;AAAA,EACxE;AACA,EAAA,OAAO,CAAA,CAAE,MAAA;AACX;AAKO,SAAS,gBAAA,CAAiB,cAAA,EAAwB,SAAA,EAAmB,WAAA,EAA6B;AACvG,EAAA,OAAO,CAAA,EAAG,cAAc,CAAA,GAAA,EAAM,kBAAA,CAAmB,SAAS,CAAC,CAAA,gBAAA,EAAmB,kBAAA,CAAmB,WAAW,CAAC,CAAA,CAAA;AAC/G;;;ACtEO,SAAS,UAAU,GAAA,EAAqB;AAC7C,EAAA,IAAI;AACF,IAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAG,CAAA;AACrB,IAAA,OAAO,CAAA,EAAG,CAAA,CAAE,MAAM,CAAA,EAAG,EAAE,QAAQ,CAAA,CAAA;AAAA,EACjC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,mBAAA;AAAA,EACT;AACF;AAGO,SAAS,cAAc,KAAA,EAAuB;AACnD,EAAA,OAAO,KAAA,CAEJ,OAAA,CAAQ,sCAAA,EAAwC,YAAY,CAAA,CAE5D,OAAA,CAAQ,qBAAA,EAAuB,YAAY,CAAA,CAE3C,OAAA,CAAQ,uBAAA,EAAyB,YAAY,CAAA;AAClD;AAEA,SAAS,cAAc,KAAA,EAAwB;AAC7C,EAAA,MAAM,IAAA,uBAAW,OAAA,EAAgB;AACjC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,SAAA,CAAU,KAAA,EAAO,CAAC,IAAI,CAAA,KAAM;AACtC,MAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,KAAM,IAAA,EAAM;AACvC,QAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAC,CAAA,EAAG,OAAO,YAAA;AACxB,QAAA,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,MACZ;AACA,MAAA,OAAO,CAAA;AAAA,IACT,CAAC,CAAA;AAAA,EACH,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,OAAO,KAAK,CAAA;AAAA,EACrB;AACF;AAEA,IAAI,MAAA,GAAS,KAAA;AACN,SAAS,SAAS,EAAA,EAAmB;AAC1C,EAAA,MAAA,GAAS,CAAC,CAAC,EAAA;AACb;AAGO,SAAS,YAAY,KAAA,EAAwB;AAClD,EAAA,IAAI,CAAC,MAAA,EAAQ;AACb,EAAA,IAAI;AACF,IAAA,MAAM,IAAA,GAAO,KAAA,CAAM,GAAA,CAAI,CAAC,MAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,aAAA,CAAc,CAAC,CAAE,CAAA,CAAE,KAAK,GAAG,CAAA;AAEtF,IAAA,OAAA,CAAQ,GAAA,CAAI,YAAA,EAAc,aAAA,CAAc,IAAI,CAAC,CAAA;AAAA,EAC/C,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;;;ACjDA,IAAM,gBAAA,GAAmB,2BAAA;AACzB,IAAM,kBAAA,GAAqB,GAAA;AAC3B,IAAM,cAAA,GAAiB,GAAA;AACvB,IAAM,cAAA,GAAiB,GAAA;AAcvB,IAAI,MAAA,GAAgB,cAAA;AACpB,IAAI,OAAA,GAAiC,IAAA;AACrC,IAAI,SAAA,GAA4C,IAAA;AAChD,IAAI,YAAA,GAA8B,IAAA;AAE3B,SAAS,YAAA,GAAwB;AACtC,EAAA,OAAO,MAAA,KAAW,gBAAgB,OAAA,KAAY,IAAA;AAChD;AAEO,SAAS,iBAAA,GAA2C;AACzD,EAAA,OAAO,OAAA;AACT;AAUA,SAAS,iBAAiB,EAAA,EAAqB;AAC7C,EAAA,IAAI,OAAO,OAAO,QAAA,IAAY,CAAC,OAAO,QAAA,CAAS,EAAE,GAAG,OAAO,kBAAA;AAC3D,EAAA,OAAO,IAAA,CAAK,GAAA,CAAI,cAAA,EAAgB,IAAA,CAAK,GAAA,CAAI,gBAAgB,IAAA,CAAK,KAAA,CAAM,EAAE,CAAC,CAAC,CAAA;AAC1E;AAIA,SAAS,WAAA,CAAY,KAAc,QAAA,EAA0B;AAC3D,EAAA,OAAO,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,CAAI,IAAA,KAAS,aAAA,CAAc,GAAA,CAAI,IAAA,EAAM,CAAA,GAAI,QAAA;AAC7E;AAIO,SAAS,cAAA,CACd,MAAA,EACA,IAAA,EACA,gBAAA,EACe;AACf,EAAA,MAAM,CAAA,GAAI,QAAQ,EAAC;AACnB,EAAA,IAAI,MAAA,KAAW,GAAA,IAAO,CAAA,CAAE,IAAA,KAAS,qBAAA,EAAuB;AACtD,IAAA,OAAO,IAAI,aAAA,CAAc,qBAAA,EAAuB,YAAY,CAAA,CAAE,OAAA,EAAS,0EAA0E,CAAA,EAAG;AAAA,MAClJ,kBAAkB,OAAO,CAAA,CAAE,gBAAA,KAAqB,QAAA,GAAW,EAAE,gBAAA,GAAmB;AAAA,KACjF,CAAA;AAAA,EACH;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,OAAO,IAAI,aAAA,CAAc,oBAAA,EAAsB,YAAY,CAAA,CAAE,OAAA,EAAS,sCAAsC,CAAC,CAAA;AAAA,EAC/G;AACA,EAAA,IAAI,WAAW,GAAA,EAAK;AAClB,IAAA,MAAM,EAAA,GAAK,OAAO,gBAAgB,CAAA;AAClC,IAAA,OAAO,IAAI,aAAA,CAAc,cAAA,EAAgB,YAAY,CAAA,CAAE,OAAA,EAAS,8CAA8C,CAAA,EAAG;AAAA,MAC/G,eAAe,MAAA,CAAO,QAAA,CAAS,EAAE,CAAA,IAAK,EAAA,GAAK,IAAI,EAAA,GAAK;AAAA,KACrD,CAAA;AAAA,EACH;AACA,EAAA,IAAI,UAAU,GAAA,EAAK;AACjB,IAAA,OAAO,IAAI,aAAA,CAAc,cAAA,EAAgB,YAAY,CAAA,CAAE,OAAA,EAAS,wDAAwD,CAAC,CAAA;AAAA,EAC3H;AAEA,EAAA,OAAO,IAAI,aAAA,CAAc,aAAA,EAAe,YAAY,CAAA,CAAE,OAAA,EAAS,mCAAmC,CAAC,CAAA;AACrG;AAKO,SAAS,mBAAmB,IAAA,EAA6F;AAC9H,EAAA,MAAM,CAAA,GAAI,IAAA;AAOV,EAAA,IAAI,CAAC,CAAA,IAAK,CAAA,CAAE,OAAA,KAAY,IAAA,EAAM;AAC5B,IAAA,MAAM,IAAI,aAAA,CAAc,cAAA,EAAgB,+CAA+C,CAAA;AAAA,EACzF;AACA,EAAA,IAAI,CAAA,CAAE,WAAA,KAAgB,MAAA,IAAU,CAAA,CAAE,gBAAgB,MAAA,EAAQ;AACxD,IAAA,MAAM,IAAI,aAAA,CAAc,cAAA,EAAgB,2CAA2C,CAAA;AAAA,EACrF;AACA,EAAA,IAAI,cAAA;AACJ,EAAA,IAAI;AACF,IAAA,cAAA,GAAiB,iBAAA,CAAkB,CAAA,CAAE,eAAA,EAAiB,iBAAiB,CAAA;AAAA,EACzE,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,aAAA,CAAc,cAAA,EAAgB,kDAAkD,CAAA;AAAA,EAC5F;AACA,EAAA,MAAM,IAAI,CAAA,CAAE,QAAA;AACZ,EAAA,IAAI,CAAC,KAAK,OAAO,CAAA,KAAM,YAAY,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAA,EAAG;AACnD,IAAA,MAAM,IAAI,aAAA,CAAc,cAAA,EAAgB,wCAAwC,CAAA;AAAA,EAClF;AACA,EAAA,MAAM,IAAA,GAAO,OAAO,CAAA,CAAE,IAAA,KAAS,QAAA,IAAY,CAAA,CAAE,IAAA,CAAK,IAAA,EAAK,GAAI,CAAA,CAAE,IAAA,CAAK,IAAA,EAAK,GAAI,UAAA;AAC3E,EAAA,MAAM,OAAA,GAAU,OAAO,CAAA,CAAE,OAAA,KAAY,QAAA,IAAY,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAK,GAAI,CAAA,CAAE,OAAA,CAAQ,IAAA,EAAK,GAAI,IAAA;AACvF,EAAA,OAAO,EAAE,aAAa,CAAA,CAAE,WAAA,EAAa,gBAAgB,QAAA,EAAU,EAAE,IAAA,EAAM,OAAA,EAAQ,EAAE;AACnF;AAEA,eAAe,WAAA,CAAY,GAAA,EAAa,OAAA,EAAiB,SAAA,EAA4C;AAtHrG,EAAA,IAAA,EAAA,EAAA,EAAA;AAuHE,EAAA,MAAM,GAAA,GAAM,GAAG,OAAO,CAAA,cAAA,CAAA;AACtB,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,SAAS,CAAA;AAE5D,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,MAAM,MAAM,GAAA,EAAK;AAAA,MACrB,MAAA,EAAQ,KAAA;AAAA,MACR,QAAQ,UAAA,CAAW,MAAA;AAAA,MACnB,SAAS,EAAE,aAAA,EAAe,UAAU,GAAG,CAAA,CAAA,EAAI,QAAQ,kBAAA;AAAmB,KACvE,CAAA;AAAA,EACH,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,IAAI,aAAA,CAAc,eAAA,EAAiB,2DAAA,EAA6D,EAAE,OAAO,CAAA;AAAA,EACjH,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AAGA,EAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA;AAE9C,EAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,IAAA,MAAM,cAAA,CAAe,IAAI,MAAA,EAAQ,IAAA,EAAA,CAAe,eAAI,OAAA,KAAJ,IAAA,GAAA,MAAA,GAAA,EAAA,CAAa,GAAA,KAAb,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,CAAA,EAAA,EAAmB,aAAA,CAAc,CAAA;AAAA,EACnF;AAEA,EAAA,MAAM,MAAA,GAAS,mBAAmB,IAAI,CAAA;AACtC,EAAA,OAAO;AAAA,IACL,cAAA,EAAgB,GAAA;AAAA,IAChB,aAAa,MAAA,CAAO,WAAA;AAAA,IACpB,gBAAgB,MAAA,CAAO,cAAA;AAAA,IACvB,UAAU,MAAA,CAAO;AAAA,GACnB;AACF;AAMA,eAAsB,UAAU,OAAA,EAA0C;AACxE,EAAA,IAAI,OAAA,IAAW,OAAA,CAAQ,KAAA,EAAO,QAAA,CAAS,IAAI,CAAA;AAE3C,EAAA,MAAM,EAAE,GAAA,EAAK,WAAA,EAAa,WAAU,GAAI,oBAAA,CAAqB,mCAAS,cAAc,CAAA;AAEpF,EAAA,IAAI,OAAA,CAAQ,WAAA,IAAe,OAAA,CAAQ,WAAA,KAAgB,SAAA,EAAW;AAC5D,IAAA,MAAM,IAAI,aAAA,CAAc,sBAAA,EAAwB,4DAA4D,CAAA;AAAA,EAC9G;AAEA,EAAA,MAAM,SAAA,GAAY,gBAAA,CAAiB,OAAA,CAAQ,SAAS,CAAA;AACpD,EAAA,MAAM,UAAU,OAAA,CAAQ,UAAA,GAAa,kBAAkB,OAAA,CAAQ,UAAA,EAAY,YAAY,CAAA,GAAI,gBAAA;AAG3F,EAAA,IAAI,SAAA,IAAa,iBAAiB,GAAA,EAAK;AACrC,IAAA,MAAM,SAAA;AACN,IAAA;AAAA,EACF;AAEA,EAAA,MAAA,GAAS,aAAA;AACT,EAAA,QAAA,CAAS,mCAAA,EAAqC,CAAA,EAAG,OAAO,CAAA,cAAA,CAAgB,CAAA;AAExE,EAAA,MAAM,OAAO,YAAqC;AAChD,IAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,GAAA,EAAK,SAAS,SAAS,CAAA;AAG1D,IAAA,IAAI,QAAA,CAAS,gBAAgB,SAAA,EAAW;AACtC,MAAA,MAAM,IAAI,aAAA,CAAc,sBAAA,EAAwB,kDAAkD,CAAA;AAAA,IACpG;AACA,IAAA,IAAI,OAAA,CAAQ,WAAA,IAAe,OAAA,CAAQ,WAAA,KAAgB,SAAS,WAAA,EAAa;AACvE,MAAA,MAAM,IAAI,aAAA,CAAc,sBAAA,EAAwB,+DAA+D,CAAA;AAAA,IACjH;AACA,IAAA,OAAO,QAAA;AAAA,EACT,CAAA,GAAG;AAEH,EAAA,SAAA,GAAY,GAAA;AACZ,EAAA,YAAA,GAAe,GAAA;AAEf,EAAA,IAAI;AACF,IAAA,MAAM,WAAW,MAAM,GAAA;AAKvB,IAAA,IAAI,cAAc,GAAA,EAAK;AACrB,MAAA,OAAA,GAAU,QAAA;AACV,MAAA,MAAA,GAAS,YAAA;AACT,MAAA,QAAA,CAAS,8BAAA,EAAgC,SAAS,WAAW,CAAA;AAAA,IAC/D;AAAA,EACF,SAAS,GAAA,EAAK;AAGZ,IAAA,IAAI,cAAc,GAAA,EAAK;AACrB,MAAA,MAAA,GAAS,kBAAA;AACT,MAAA,OAAA,GAAU,IAAA;AAAA,IACZ;AACA,IAAA,MAAM,GAAA;AAAA,EACR,CAAA,SAAE;AACA,IAAA,IAAI,cAAc,GAAA,EAAK;AACrB,MAAA,SAAA,GAAY,IAAA;AACZ,MAAA,YAAA,GAAe,IAAA;AAAA,IACjB;AAAA,EACF;AACF;;;ACtMA,IAAI,KAAA,GAA6B,IAAA;AACjC,IAAI,OAAA,GAAkC,IAAA;AAK/B,SAAS,aAAa,QAAA,EAAoC;AAC/D,EAAA,KAAA,GAAQ,QAAA;AACR,EAAA,IAAI,OAAA,WAAkB,OAAO,CAAA;AAC7B,EAAA,OAAO,MAAM;AACX,IAAA,IAAI,KAAA,KAAU,UAAU,KAAA,GAAQ,IAAA;AAAA,EAClC,CAAA;AACF;AAeO,SAAS,QAAQ,OAAA,EAAiD;AACvE,EAAA,OAAO,IAAI,OAAA,CAAuB,CAAC,OAAA,EAAS,MAAA,KAAW;AACrD,IAAA,IAAI,CAAC,cAAa,EAAG;AACnB,MAAA,MAAA,CAAO,IAAI,aAAA,CAAc,gBAAA,EAAkB,yEAAyE,CAAC,CAAA;AACrH,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAA,CAAO,IAAI,aAAA,CAAc,aAAA,EAAe,4EAA4E,CAAC,CAAA;AACrH,MAAA;AAAA,IACF;AACA,IAAA,IAAI,OAAA,EAAS;AACX,MAAA,MAAA,CAAO,IAAI,aAAA,CAAc,mBAAA,EAAqB,6BAA6B,CAAC,CAAA;AAC5E,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,iBAAA,CAAkB,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAS,SAAA,EAAW,OAAA,IAAA,IAAA,GAAA,KAAA,CAAA,GAAA,OAAA,CAAS,WAAW,CAAA;AAAA,IACnE,SAAS,CAAA,EAAG;AACV,MAAA,MAAA,CAAO,CAAC,CAAA;AACR,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,SAAS,iBAAA,EAAkB;AACjC,IAAA,IAAI,CAAC,MAAA,EAAQ;AAEX,MAAA,MAAA,CAAO,IAAI,aAAA,CAAc,gBAAA,EAAkB,iDAAiD,CAAC,CAAA;AAC7F,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,MAAM,gBAAA,CAAiB,MAAA,CAAO,gBAAgB,IAAA,CAAK,SAAA,EAAW,KAAK,WAAW,CAAA;AAEpF,IAAA,IAAI,IAAA,GAAO,KAAA;AACX,IAAA,MAAM,OAAA,GAA2B;AAAA,MAC/B,WAAW,IAAA,CAAK,SAAA;AAAA,MAChB,aAAa,IAAA,CAAK,WAAA;AAAA,MAClB,GAAA;AAAA,MACA,MAAA;AAAA,MACA,UAAU,OAAA,CAAQ,QAAA;AAAA,MAClB,SAAS,OAAA,CAAQ,OAAA;AAAA,MACjB,MAAA,EAAQ,CAAC,MAAA,KAA0B;AACjC,QAAA,IAAI,IAAA,EAAM;AACV,QAAA,IAAA,GAAO,IAAA;AACP,QAAA,OAAA,GAAU,IAAA;AACV,QAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAQ,IAAA,CAAA;AACR,QAAA,OAAA,CAAQ,MAAM,CAAA;AAAA,MAChB;AAAA,KACF;AAEA,IAAA,OAAA,GAAU,OAAA;AACV,IAAA,KAAA,CAAM,OAAO,CAAA;AAAA,EACf,CAAC,CAAA;AACH;;;ACzFO,IAAM,QAAA,GAAW;AAAA,EACtB,SAAA;AAAA,EACA;AACF;;;ACTA,IAAM,WAAA,GAAiD;AAAA,EACrD,sBAAA,EAAwB,QAAA;AAAA,EACxB,yBAAA,EAA2B,WAAA;AAAA,EAC3B,yBAAA,EAA2B,WAAA;AAAA,EAC3B,uBAAA,EAAyB,SAAA;AAAA,EACzB,sBAAA,EAAwB,QAAA;AAAA,EACxB,sBAAA,EAAwB;AAC1B,CAAA;AAIA,IAAM,iBAAA,GAAoB,IAAA;AAE1B,IAAM,gBAAA,GAA6C;AAAA,EACjD,SAAA;AAAA,EAAW,kBAAA;AAAA,EAAoB,WAAA;AAAA,EAAa,YAAA;AAAA,EAAc,WAAA;AAAA,EAAa,SAAA;AAAA,EAAW,QAAA;AAAA,EAAU;AAC9F,CAAA;AASA,SAAS,SAAS,CAAA,EAA2B;AAC3C,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,GAAW,CAAA,GAAI,IAAA;AACrC;AAQA,SAAS,gBAAgB,CAAA,EAA2B;AAClD,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,EAAU,OAAO,CAAA;AAClC,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,MAAA,CAAO,QAAA,CAAS,CAAC,CAAA,EAAG;AAC/C,IAAA,MAAM,CAAA,GAAI,OAAO,CAAC,CAAA;AAClB,IAAA,OAAO,CAAA,CAAE,SAAS,GAAG,CAAA,IAAK,EAAE,QAAA,CAAS,GAAG,IAAI,IAAA,GAAO,CAAA;AAAA,EACrD;AACA,EAAA,OAAO,IAAA;AACT;AAMO,SAAS,gBAAgB,KAAA,EAAyC;AAnDzE,EAAA,IAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AAoDE,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA,KAAU,YAAY,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG,OAAO,IAAA;AACxE,EAAA,MAAM,CAAA,GAAI,KAAA;AAEV,EAAA,MAAM,EAAA,GAAK,QAAA,CAAS,CAAA,CAAE,EAAE,CAAA;AACxB,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,CAAA,CAAE,MAAM,CAAA;AAChC,EAAA,IAAI,CAAC,MAAM,CAAC,MAAA,IAAU,CAAE,gBAAA,CAAuC,QAAA,CAAS,MAAM,CAAA,EAAG,OAAO,IAAA;AAExF,EAAA,MAAM,IAAA,GAAO,EAAE,IAAA,KAAS,MAAA,IAAU,EAAE,IAAA,KAAS,SAAA,GAAY,EAAE,IAAA,GAAO,SAAA;AAElE,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,MAAA;AAAA,IACA,MAAA,EAAA,CAAQ,EAAA,GAAA,eAAA,CAAgB,CAAA,CAAE,MAAM,MAAxB,IAAA,GAAA,EAAA,GAA6B,EAAA;AAAA,IACrC,QAAA,EAAA,CAAU,EAAA,GAAA,QAAA,CAAS,CAAA,CAAE,QAAQ,MAAnB,IAAA,GAAA,EAAA,GAAwB,EAAA;AAAA,IAClC,MAAA,EAAQ,QAAA,CAAS,CAAA,CAAE,MAAM,CAAA;AAAA,IACzB,OAAA,EAAS,QAAA,CAAS,CAAA,CAAE,OAAO,CAAA;AAAA,IAC3B,YAAA,EAAc,eAAA,CAAgB,CAAA,CAAE,YAAY,CAAA;AAAA,IAC5C,UAAA,EAAY,eAAA,CAAgB,CAAA,CAAE,UAAU,CAAA;AAAA,IACxC,IAAA;AAAA,IACA,WAAA,EAAa,QAAA,CAAS,CAAA,CAAE,WAAW,CAAA;AAAA,IACnC,SAAA,EAAA,CAAW,EAAA,GAAA,QAAA,CAAS,CAAA,CAAE,SAAS,MAApB,IAAA,GAAA,EAAA,GAAyB;AAAA,GACtC;AACF;AAKO,SAAS,mBAAmB,GAAA,EAAoC;AACrE,EAAA,IAAI,OAAO,QAAQ,QAAA,IAAY,GAAA,CAAI,WAAW,CAAA,IAAK,GAAA,CAAI,MAAA,GAAS,iBAAA,EAAmB,OAAO,IAAA;AAE1F,EAAA,IAAI,GAAA;AACJ,EAAA,IAAI;AACF,IAAA,GAAA,GAAM,IAAA,CAAK,MAAM,GAAG,CAAA;AAAA,EACtB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACA,EAAA,IAAI,CAAC,OAAO,OAAO,GAAA,KAAQ,YAAY,KAAA,CAAM,OAAA,CAAQ,GAAG,CAAA,EAAG,OAAO,IAAA;AAElE,EAAA,MAAM,OAAQ,GAAA,CAA2B,IAAA;AACzC,EAAA,IAAI,OAAO,IAAA,KAAS,QAAA,EAAU,OAAO,IAAA;AACrC,EAAA,MAAM,MAAA,GAAS,YAAY,IAAI,CAAA;AAC/B,EAAA,IAAI,CAAC,QAAQ,OAAO,IAAA;AAEpB,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAA;AAAA,IACN,OAAA,EAAS,eAAA,CAAiB,GAAA,CAA8B,OAAO;AAAA,GACjE;AACF;AASO,SAAS,cAAA,CAAe,MAAyB,OAAA,EAAwD;AAC9G,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,WAAA;AACH,MAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,OAAA,EAAQ;AAAA,IACxC,KAAK,WAAA;AAAA,IACL,KAAK,QAAA;AACH,MAAA,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,eAAe,OAAA,EAAQ;AAAA,IAC/D,KAAK,SAAA;AACH,MAAA,OAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,WAAW,OAAA,EAAQ;AAAA,IACzD,KAAK,QAAA;AACH,MAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAA,EAAQ;AAAA,IACrC,KAAK,QAAA;AAAA,IACL;AACE,MAAA,OAAO,IAAA;AAAA;AAEb;;;ACjHA,SAAS,MAAM,GAAA,EAA0B;AACvC,EAAA,IAAI,OAAO,GAAA,KAAQ,QAAA,IAAY,GAAA,KAAQ,IAAI,OAAO,IAAA;AAClD,EAAA,IAAI;AACF,IAAA,OAAO,IAAI,IAAI,GAAG,CAAA;AAAA,EACpB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AASO,SAAS,gBAAA,CAAiB,gBAAwB,GAAA,EAAuB;AAC9E,EAAA,MAAM,CAAA,GAAI,MAAM,GAAG,CAAA;AACnB,EAAA,OAAO,CAAC,CAAC,CAAA,IAAK,EAAE,QAAA,KAAa,QAAA,IAAY,EAAE,MAAA,KAAW,cAAA;AACxD;AAcO,SAAS,sBAAA,CAAuB,gBAAwB,GAAA,EAAuB;AACpF,EAAA,MAAM,CAAA,GAAI,MAAM,GAAG,CAAA;AACnB,EAAA,OAAO,CAAC,CAAC,CAAA,IAAK,EAAE,QAAA,KAAa,QAAA,IAAY,EAAE,MAAA,KAAW,cAAA;AACxD;AAKO,SAAS,sBAAA,CAAuB,gBAAwB,GAAA,EAAuB;AACpF,EAAA,MAAM,CAAA,GAAI,MAAM,GAAG,CAAA;AACnB,EAAA,OAAO,CAAC,CAAC,CAAA,IAAK,CAAA,CAAE,QAAA,KAAa,QAAA,IAAY,CAAA,CAAE,MAAA,KAAW,cAAA,IAAkB,CAAA,CAAE,QAAA,CAAS,UAAA,CAAW,KAAK,CAAA;AACrG;ACtBA,IAAM,cAAA,GAAiB,KAAK,EAAA,GAAK,GAAA;AAUjC,SAAS,QAAA,GAAwB;AAC/B,EAAA,MAAM,SAASA,0BAAA,EAAe;AAC9B,EAAA,OAAO,MAAA,KAAW,MAAA,GACd,EAAE,EAAA,EAAI,SAAA,EAAW,MAAM,SAAA,EAAW,GAAA,EAAK,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,OAAA,EAAS,WAAU,GACxF,EAAE,EAAA,EAAI,SAAA,EAAW,IAAA,EAAM,SAAA,EAAW,KAAK,SAAA,EAAW,MAAA,EAAQ,SAAA,EAAW,OAAA,EAAS,SAAA,EAAU;AAC9F;AAEO,SAAS,aAAA,CAAc,EAAE,OAAA,EAAQ,EAAqD;AAjD7F,EAAA,IAAA,EAAA;AAkDE,EAAA,MAAM,QAAQ,QAAA,EAAS;AACvB,EAAA,MAAM,cAAA,GAAiB,QAAQ,MAAA,CAAO,cAAA;AAEtC,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIC,eAAS,KAAK,CAAA;AAChD,EAAA,MAAM,CAAC,SAAA,EAAW,YAAY,CAAA,GAAIA,eAAS,KAAK,CAAA;AAGhD,EAAA,MAAM,UAAA,GAAaC,aAAO,KAAK,CAAA;AAC/B,EAAA,MAAM,cAAA,GAAiBA,aAAO,KAAK,CAAA;AACnC,EAAA,MAAM,eAAA,GAAkBA,YAAA,CAAe,OAAA,CAAQ,GAAG,CAAA;AAClD,EAAA,MAAM,WAAA,GAAcA,aAA6C,IAAI,CAAA;AACrE,EAAA,MAAM,UAAA,GAAaA,aAAgB,IAAI,CAAA;AAIvC,EAAA,MAAM,MAAA,GAASC,iBAAA;AAAA,IACb,CAAC,MAAA,KAA0B;AAlE/B,MAAA,IAAAC,GAAAA;AAmEM,MAAA,IAAI,WAAW,OAAA,EAAS;AACxB,MAAA,UAAA,CAAW,OAAA,GAAU,IAAA;AACrB,MAAA,IAAI,YAAY,OAAA,EAAS;AACvB,QAAA,YAAA,CAAa,YAAY,OAAO,CAAA;AAChC,QAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AAAA,MACxB;AACA,MAAA,eAAA,CAAgB,OAAA,GAAU,EAAA;AAC1B,MAAA,QAAA,CAAS,QAAA,EAAU,MAAA,CAAO,MAAA,EAAQ,QAAA,IAAY,MAAA,GAAA,CAASA,GAAAA,GAAA,MAAA,CAAO,MAAA,KAAP,IAAA,GAAAA,GAAAA,GAAiB,EAAA,GAAK,EAAE,CAAA;AAC/E,MAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AAAA,IACvB,CAAA;AAAA,IACA,CAAC,OAAO;AAAA,GACV;AAOA,EAAA,MAAM,iBAAA,GAAoBD,iBAAA;AAAA,IACxB,CAAC,GAAA,KAAyC,gBAAA,CAAiB,cAAA,EAAgB,IAAI,GAAG,CAAA;AAAA,IAClF,CAAC,cAAc;AAAA,GACjB;AAIA,EAAA,MAAM,gBAAA,GAAmBA,kBAAY,MAAM;AAAA,EAE3C,CAAA,EAAG,EAAE,CAAA;AAGL,EAAA,MAAM,aAAA,GAAgBA,iBAAA;AAAA,IACpB,CAAC,KAAA,KAA+B;AAlGpC,MAAA,IAAAC,GAAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA,EAAA;AA6GM,MAAA,MAAM,SAAA,GAAA,CAAYA,GAAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,WAAA,KAAP,gBAAAA,GAAAA,CAAoB,GAAA;AACtC,MAAA,MAAM,sBAAsB,sBAAA,CAAuB,cAAA,EAAgB,eAAA,CAAgB,OAAA,IAAW,QAAQ,GAAG,CAAA;AACzG,MAAA,IAAI,OAAO,SAAA,KAAc,QAAA,IAAY,SAAA,KAAc,EAAA,EAAI;AACrD,QAAA,IAAI,CAAC,sBAAA,CAAuB,cAAA,EAAgB,SAAS,CAAA,IAAK,CAAC,mBAAA,EAAqB;AAAA,MAClF,CAAA,MAAA,IAAW,CAAC,mBAAA,EAAqB;AAC/B,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAS,kBAAA,CAAA,CAAmB,EAAA,GAAA,KAAA,IAAA,IAAA,GAAA,MAAA,GAAA,KAAA,CAAO,WAAA,KAAP,mBAAoB,IAAI,CAAA;AAC1D,MAAA,IAAI,CAAC,MAAA,EAAQ;AAKb,MAAA,IAAI,OAAO,OAAA,IAAW,MAAA,CAAO,OAAA,CAAQ,EAAA,KAAO,QAAQ,SAAA,EAAW;AAE/D,MAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,OAAA,KAAR,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,CAAA,OAAA,EAAkB,EAAE,IAAA,EAAM,MAAA,CAAO,MAAM,OAAA,EAAA,CAAS,EAAA,GAAA,MAAA,CAAO,OAAA,KAAP,IAAA,GAAA,EAAA,GAAkB,MAAA,EAAU,CAAA;AAE5E,MAAA,IAAI,MAAA,CAAO,SAAS,QAAA,EAAU;AAC5B,QAAA,YAAA,CAAa,IAAI,CAAA;AACjB,QAAA,IAAI,CAAC,eAAe,OAAA,EAAS;AAC3B,UAAA,cAAA,CAAe,OAAA,GAAU,IAAA;AACzB,UAAA,CAAA,EAAA,GAAA,OAAA,CAAQ,QAAA,KAAR,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,CAAA,OAAA,CAAA;AAAA,QACF;AACA,QAAA;AAAA,MACF;AAEA,MAAA,MAAM,MAAA,GAAS,cAAA,CAAe,MAAA,CAAO,IAAA,EAAM,OAAO,OAAO,CAAA;AACzD,MAAA,IAAI,MAAA,SAAe,MAAM,CAAA;AAAA,IAC3B,CAAA;AAAA,IACA,CAAC,cAAA,EAAgB,OAAA,EAAS,MAAM;AAAA,GAClC;AAGA,EAAA,MAAM,cAAA,GAAiBD,iBAAA;AAAA,IACrB,CAAC,GAAA,KAAqC;AACpC,MAAA,IAAI,CAAC,KAAK,OAAO,IAAA;AACjB,MAAA,IAAI;AACF,QAAA,MAAM,CAAA,GAAI,IAAI,GAAA,CAAI,GAAG,CAAA;AACrB,QAAA,OAAO,EAAE,MAAA,KAAW,cAAA,IAAkB,CAAA,CAAE,QAAA,CAAS,WAAW,KAAK,CAAA;AAAA,MACnE,CAAA,CAAA,MAAQ;AACN,QAAA,OAAO,KAAA;AAAA,MACT;AAAA,IACF,CAAA;AAAA,IACA,CAAC,cAAc;AAAA,GACjB;AAEA,EAAA,MAAM,eAAA,GAAkBA,iBAAA;AAAA,IACtB,CAAC,CAAA,KAA0C;AA7J/C,MAAA,IAAAC,GAAAA;AA8JM,MAAA,IAAI,cAAA,CAAA,CAAeA,MAAA,CAAA,IAAA,IAAA,GAAA,MAAA,GAAA,CAAA,CAAG,WAAA,KAAH,gBAAAA,GAAAA,CAAgB,GAAG,CAAA,EAAG,YAAA,CAAa,IAAI,CAAA;AAAA,IAC5D,CAAA;AAAA,IACA,CAAC,cAAc;AAAA,GACjB;AAEA,EAAA,MAAM,WAAA,GAAcD,kBAAY,MAAY;AAG1C,IAAA,YAAA,CAAa,IAAI,CAAA;AAAA,EACnB,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,KAAA,GAAQA,kBAAY,MAAM;AAzKlC,IAAA,IAAAC,GAAAA;AA0KI,IAAA,YAAA,CAAa,KAAK,CAAA;AAClB,IAAA,YAAA,CAAa,KAAK,CAAA;AAClB,IAAA,CAAAA,GAAAA,GAAA,UAAA,CAAW,OAAA,KAAX,IAAA,GAAA,MAAA,GAAAA,GAAAA,CAAoB,MAAA,EAAA;AAAA,EACtB,CAAA,EAAG,EAAE,CAAA;AAGL,EAAAC,eAAA,CAAU,MAAM;AAEd,IAAA,WAAA,CAAY,OAAA,GAAU,UAAA,CAAW,MAAM,MAAA,CAAO,EAAE,MAAA,EAAQ,SAAA,EAAW,MAAA,EAAQ,iBAAA,EAAmB,CAAA,EAAG,cAAc,CAAA;AAE/G,IAAA,MAAM,SAAS,MAAe;AAC5B,MAAA,MAAA,CAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,eAAe,CAAA;AACrD,MAAA,OAAO,IAAA;AAAA,IACT,CAAA;AACA,IAAA,MAAM,GAAA,GAAMC,uBAAA,CAAY,gBAAA,CAAiB,mBAAA,EAAqB,MAAM,CAAA;AAEpE,IAAA,OAAO,MAAM;AA1LjB,MAAA,IAAAF,GAAAA,EAAA,EAAA;AA2LM,MAAA,GAAA,CAAI,MAAA,EAAO;AACX,MAAA,IAAI,YAAY,OAAA,EAAS;AACvB,QAAA,YAAA,CAAa,YAAY,OAAO,CAAA;AAChC,QAAA,WAAA,CAAY,OAAA,GAAU,IAAA;AAAA,MACxB;AACA,MAAA,CAAA,EAAA,GAAA,CAAAA,MAAA,UAAA,CAAW,OAAA,KAAX,IAAA,GAAA,MAAA,GAAAA,GAAAA,CAAoB,gBAApB,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,CAAAA,GAAAA,CAAAA;AAGA,MAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACvB,QAAA,UAAA,CAAW,OAAA,GAAU,IAAA;AACrB,QAAA,OAAA,CAAQ,OAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,aAAa,CAAA;AAAA,MAC7D;AAAA,IACF,CAAA;AAAA,EAEF,CAAA,EAAG,EAAE,CAAA;AAGL,EAAAC,eAAA,CAAU,MAAM;AACd,IAAA,QAAA,CAAS,SAAA,EAAW,SAAA,CAAU,OAAA,CAAQ,GAAG,CAAC,CAAA;AAAA,EAE5C,CAAA,EAAG,EAAE,CAAA;AAEL,EAAA,MAAM,WAAWE,oBAAA,CAAS,EAAA,KAAO,aAAY,EAAA,GAAAC,qBAAA,CAAU,aAAA,KAAV,YAA2B,CAAA,GAAI,CAAA;AAE5E,EAAA,uBACEC,cAAA;AAAA,IAACC,iBAAA;AAAA,IAAA;AAAA,MACC,OAAA,EAAO,IAAA;AAAA,MACP,aAAA,EAAc,OAAA;AAAA,MACd,iBAAA,EAAkB,WAAA;AAAA,MAClB,oBAAA,EAAoB,IAAA;AAAA,MACpB,cAAA,EAAgB,MAAM,MAAA,CAAO,EAAE,QAAQ,WAAA,EAAa,MAAA,EAAQ,eAAe,CAAA;AAAA,MAC3E,WAAW,MAAM;AACf,QAAA,IAAI,CAAC,WAAW,OAAA,EAAS,MAAA,CAAO,EAAE,MAAA,EAAQ,WAAA,EAAa,MAAA,EAAQ,WAAA,EAAa,CAAA;AAAA,MAC9E,CAAA;AAAA,MAEA,QAAA,kBAAAC,eAAA,CAACC,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,SAAA,EAAW,EAAE,eAAA,EAAiB,KAAA,CAAM,EAAA,EAAI,UAAA,EAAY,QAAA,EAAU,CAAA,EACjF,QAAA,EAAA;AAAA,wBAAAD,eAAA,CAACC,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,MAAA,EAAQ,EAAE,iBAAA,EAAmB,KAAA,CAAM,MAAA,EAAQ,CAAA,EAC9D,QAAA,EAAA;AAAA,0BAAAH,cAAA,CAACI,oBAAK,KAAA,EAAO,CAAC,MAAA,CAAO,KAAA,EAAO,EAAE,KAAA,EAAO,KAAA,CAAM,IAAA,EAAM,GAAG,aAAA,EAAe,CAAA,EAChE,QAAA,EAAA,OAAA,CAAQ,MAAA,CAAO,SAAS,IAAA,EAC3B,CAAA;AAAA,0BACAJ,cAAA;AAAA,YAACK,4BAAA;AAAA,YAAA;AAAA,cACC,OAAA,EAAS,MAAM,MAAA,CAAO,EAAE,QAAQ,WAAA,EAAa,MAAA,EAAQ,eAAe,CAAA;AAAA,cACpE,iBAAA,EAAkB,QAAA;AAAA,cAClB,kBAAA,EAAmB,gBAAA;AAAA,cACnB,OAAA,EAAS,EAAE,GAAA,EAAK,EAAA,EAAI,QAAQ,EAAA,EAAI,IAAA,EAAM,EAAA,EAAI,KAAA,EAAO,EAAA,EAAG;AAAA,cACpD,OAAO,MAAA,CAAO,QAAA;AAAA,cAEd,QAAA,kBAAAL,cAAA,CAACI,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,KAAA,CAAM,IAAA,EAAM,CAAA,EAAG,QAAA,EAAA,QAAA,EAAC;AAAA;AAAA;AAC3D,SAAA,EACF,CAAA;AAAA,wBAEAJ,cAAA,CAACG,gBAAA,EAAA,EAAK,KAAA,EAAO,MAAA,CAAO,IAAA,EACjB,QAAA,EAAA,SAAA,mBACCD,eAAA,CAACC,gBAAA,EAAA,EAAK,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,kBAAA,EAAmB,yBAAA,EAC7C,QAAA,EAAA;AAAA,0BAAAH,cAAA,CAACI,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,UAAA,EAAY,EAAE,KAAA,EAAO,KAAA,CAAM,IAAA,EAAM,CAAA,EAAG,QAAA,EAAA,yBAAA,EAAuB,CAAA;AAAA,0BAChFJ,cAAA,CAACI,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,QAAA,EAAU,EAAE,KAAA,EAAO,KAAA,CAAM,GAAA,EAAK,CAAA,EAAG,QAAA,EAAA,sCAAA,EAAoC,CAAA;AAAA,0BAC1FJ,cAAA,CAACK,4BAAA,EAAA,EAAiB,OAAA,EAAS,KAAA,EAAO,iBAAA,EAAkB,QAAA,EAAS,KAAA,EAAO,CAAC,MAAA,CAAO,QAAA,EAAU,EAAE,WAAA,EAAa,KAAA,CAAM,MAAA,EAAQ,CAAA,EACjH,QAAA,kBAAAL,cAAA,CAACI,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,SAAA,EAAW,EAAE,KAAA,EAAO,KAAA,CAAM,IAAA,EAAM,CAAA,EAAG,mBAAK,CAAA,EAC/D,CAAA;AAAA,0BACAJ,cAAA;AAAA,YAACK,4BAAA;AAAA,YAAA;AAAA,cACC,OAAA,EAAS,MAAM,MAAA,CAAO,EAAE,QAAQ,WAAA,EAAa,MAAA,EAAQ,eAAe,CAAA;AAAA,cACpE,iBAAA,EAAkB,QAAA;AAAA,cAClB,OAAO,MAAA,CAAO,SAAA;AAAA,cAEd,QAAA,kBAAAL,cAAA,CAACI,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,aAAA,EAAe,EAAE,KAAA,EAAO,KAAA,CAAM,GAAA,EAAK,CAAA,EAAG,QAAA,EAAA,OAAA,EAAK;AAAA;AAAA;AAClE,SAAA,EACF,oBAEAF,eAAA,CAAAI,mBAAA,EAAA,EACE,QAAA,EAAA;AAAA,0BAAAN,cAAA;AAAA,YAACO,0BAAA;AAAA,YAAA;AAAA,cACC,GAAA,EAAK,UAAA;AAAA,cACL,MAAA,EAAQ,EAAE,GAAA,EAAK,OAAA,CAAQ,GAAA,EAAI;AAAA,cAE3B,eAAA,EAAiB,CAAC,GAAG,CAAA;AAAA,cACrB,4BAAA,EAA8B,iBAAA;AAAA,cAC9B,uBAAA,EAAyB,CAAC,CAAA,KAAyB;AAtQnE,gBAAA,IAAAZ,GAAAA,EAAA,EAAA;AAuQkB,gBAAA,eAAA,CAAgB,UAAU,CAAA,CAAE,GAAA;AAK5B,gBAAA,IAAI,OAAO,CAAA,CAAE,GAAA,KAAQ,QAAA,IAAY,YAAY,IAAA,CAAK,CAAA,CAAE,GAAG,CAAA,IAAK,CAAC,gBAAA,CAAiB,cAAA,EAAgB,CAAA,CAAE,GAAG,CAAA,EAAG;AACpG,kBAAA,IAAI,CAAC,WAAW,OAAA,EAAS;AACvB,oBAAA,CAAA,EAAA,GAAA,CAAAA,MAAA,UAAA,CAAW,OAAA,KAAX,IAAA,GAAA,MAAA,GAAAA,GAAAA,CAAoB,gBAApB,IAAA,GAAA,MAAA,GAAA,EAAA,CAAA,IAAA,CAAAA,GAAAA,CAAAA;AACA,oBAAA,YAAA,CAAa,IAAI,CAAA;AAAA,kBACnB;AAAA,gBACF;AAAA,cACF,CAAA;AAAA,cACA,SAAA,EAAW,aAAA;AAAA,cACX,YAAA,EAAc,gBAAA;AAAA,cAEd,yBAAA,EAA2B,KAAA;AAAA,cAC3B,qCAAA,EAAuC,KAAA;AAAA,cACvC,eAAA,EAAiB,KAAA;AAAA,cACjB,2BAAA,EAA6B,KAAA;AAAA,cAC7B,gCAAA,EAAkC,KAAA;AAAA,cAClC,wBAAA,EAA0B,KAAA;AAAA,cAC1B,oBAAA,EAAsB,KAAA;AAAA,cACtB,SAAA,EAAW,KAAA;AAAA,cACX,gBAAA,EAAiB,OAAA;AAAA,cAEjB,yBAAA,EAAyB,IAAA;AAAA,cACzB,+BAAA,EAA+B,IAAA;AAAA,cAE/B,OAAA,EAAS,eAAA;AAAA,cACT,WAAA,EAAa,eAAA;AAAA,cACb,4BAAA,EAA8B,WAAA;AAAA,cAC9B,mBAAA,EAAqB,WAAA;AAAA,cACrB,SAAA,EAAW,MAAM,YAAA,CAAa,IAAI,CAAA;AAAA,cAClC,OAAO,EAAE,IAAA,EAAM,CAAA,EAAG,eAAA,EAAiB,MAAM,EAAA;AAAG;AAAA,WAC9C;AAAA,UACC,CAAC,SAAA,mBACAK,cAAA,CAACG,gBAAA,EAAA,EAAK,KAAA,EAAO,CAAC,MAAA,CAAO,cAAA,EAAgB,EAAE,eAAA,EAAiB,KAAA,CAAM,EAAA,EAAI,CAAA,EAAG,kBAAA,EAAmB,kBAAA,EACtF,QAAA,kBAAAH,cAAA,CAACQ,6BAAA,EAAA,EAAkB,IAAA,EAAK,SAAQ,KAAA,EAAO,KAAA,CAAM,OAAA,EAAS,CAAA,EACxD,CAAA,GACE;AAAA,SAAA,EACN,CAAA,EAEJ;AAAA,OAAA,EACF;AAAA;AAAA,GACF;AAEJ;AAEA,IAAM,MAAA,GAASC,uBAAW,MAAA,CAAO;AAAA,EAC/B,SAAA,EAAW,EAAE,IAAA,EAAM,CAAA,EAAE;AAAA,EACrB,MAAA,EAAQ;AAAA,IACN,aAAA,EAAe,KAAA;AAAA,IACf,UAAA,EAAY,QAAA;AAAA,IACZ,cAAA,EAAgB,eAAA;AAAA,IAChB,iBAAA,EAAmB,EAAA;AAAA,IACnB,MAAA,EAAQ,EAAA;AAAA,IACR,mBAAmBA,sBAAA,CAAW;AAAA,GAChC;AAAA,EACA,KAAA,EAAO,EAAE,QAAA,EAAU,EAAA,EAAI,YAAY,KAAA,EAAO,IAAA,EAAM,CAAA,EAAG,WAAA,EAAa,EAAA,EAAG;AAAA,EACnE,QAAA,EAAU,EAAE,KAAA,EAAO,EAAA,EAAI,QAAQ,EAAA,EAAI,UAAA,EAAY,QAAA,EAAU,cAAA,EAAgB,QAAA,EAAS;AAAA,EAClF,SAAA,EAAW,EAAE,QAAA,EAAU,EAAA,EAAI,YAAY,KAAA,EAAM;AAAA,EAC7C,IAAA,EAAM,EAAE,IAAA,EAAM,CAAA,EAAE;AAAA,EAChB,cAAA,EAAgB,EAAE,GAAGA,sBAAA,CAAW,oBAAoB,UAAA,EAAY,QAAA,EAAU,gBAAgB,QAAA,EAAS;AAAA,EACnG,MAAA,EAAQ,EAAE,IAAA,EAAM,CAAA,EAAG,YAAY,QAAA,EAAU,cAAA,EAAgB,QAAA,EAAU,OAAA,EAAS,EAAA,EAAG;AAAA,EAC/E,YAAY,EAAE,QAAA,EAAU,IAAI,UAAA,EAAY,KAAA,EAAO,cAAc,CAAA,EAAE;AAAA,EAC/D,UAAU,EAAE,QAAA,EAAU,IAAI,SAAA,EAAW,QAAA,EAAU,cAAc,EAAA,EAAG;AAAA,EAChE,QAAA,EAAU,EAAE,iBAAA,EAAmB,EAAA,EAAI,iBAAiB,EAAA,EAAI,YAAA,EAAc,EAAA,EAAI,WAAA,EAAa,CAAA,EAAE;AAAA,EACzF,SAAA,EAAW,EAAE,QAAA,EAAU,EAAA,EAAI,YAAY,KAAA,EAAM;AAAA,EAC7C,SAAA,EAAW,EAAE,SAAA,EAAW,EAAA,EAAI,SAAS,CAAA,EAAE;AAAA,EACvC,aAAA,EAAe,EAAE,QAAA,EAAU,EAAA;AAC7B,CAAC,CAAA;AC9TM,SAAS,gBAAA,CAAiB,EAAE,QAAA,EAAS,EAAuD;AACjG,EAAA,MAAM,CAAC,OAAA,EAAS,UAAU,CAAA,GAAIjB,eAAiC,IAAI,CAAA;AAEnE,EAAAI,gBAAU,MAAM,YAAA,CAAa,UAAU,CAAA,EAAG,EAAE,CAAA;AAE5C,EAAA,uBACEM,eAAAA,CAAAI,mBAAAA,EAAA,EACG,QAAA,EAAA;AAAA,IAAA,QAAA;AAAA,IAGA,0BAAUN,cAAAA,CAAC,iBAAsC,OAAA,EAAA,EAAnB,OAAA,CAAQ,SAA6B,CAAA,GAAK;AAAA,GAAA,EAC3E,CAAA;AAEJ;ACfO,SAAS,WAAA,GAA2B;AACzC,EAAA,OAAOU,cAAQ,OAAO,EAAE,WAAW,OAAA,EAAQ,CAAA,EAAI,EAAE,CAAA;AACnD;;;ACZO,IAAM,WAAA,GAAc","file":"index.cjs","sourcesContent":["// The ONE public error type. Terminal payment outcomes (cancelled / expired\n// / failed) are NOT errors — they resolve as a PaymentResult. Throw/reject\n// only for SDK or credential faults. `code` is a stable, closed union;\n// changing it is a semver-major event.\n\nexport type GbitXPayErrorCode =\n  // present() called before configure() completed successfully.\n  | 'not_configured'\n  // present() called with no <GbitXPayProvider> mounted in the tree.\n  | 'not_mounted'\n  // publishable key wrong/revoked/malformed, or a config 4xx.\n  | 'invalid_key'\n  // a SECRET key (gk_) was handed to the SDK — a serious integration bug.\n  | 'secret_key_used'\n  // key environment and server environment disagree.\n  | 'environment_mismatch'\n  // merchant not yet approved for this (live) key.\n  | 'onboarding_required'\n  // merchant account suspended.\n  | 'merchant_suspended'\n  // config endpoint rate-limited (429).\n  | 'rate_limited'\n  // could not reach GbitX (DNS/TLS/offline/timeout).\n  | 'network_error'\n  // GbitX reachable but returned 5xx or an unusable body.\n  | 'server_error'\n  // bad arguments to configure()/present() (e.g. malformed paymentId).\n  | 'invalid_arguments';\n\n// Publicly readable meta — ONLY safe, serializable fields. The transport\n// `cause` is accepted by the constructor but is never placed on an enumerable\n// property (see below), so it can't be captured by `{...error}`, JSON, or a\n// crash reporter that walks own-enumerable keys.\nexport interface GbitXPayErrorMeta {\n  // Present on 'onboarding_required'.\n  onboardingStatus?: string;\n  // Present on 'rate_limited' when the server sent Retry-After.\n  retryAfterSec?: number;\n}\n\n// What the constructor accepts. `cause` may reference a Request/URL holding a\n// token, so it is stored non-enumerably on the standard Error `cause` slot and\n// kept out of `meta`, `message`, and `toJSON()`.\nexport type GbitXPayErrorInit = GbitXPayErrorMeta & { cause?: unknown };\n\nexport class GbitXPayError extends Error {\n  readonly code: GbitXPayErrorCode;\n  readonly meta?: GbitXPayErrorMeta;\n\n  constructor(code: GbitXPayErrorCode, message: string, init?: GbitXPayErrorInit) {\n    super(message);\n    this.name = 'GbitXPayError';\n    this.code = code;\n\n    // Only safe fields go on the enumerable, serializable `meta`.\n    const meta: GbitXPayErrorMeta = {};\n    if (init?.onboardingStatus) meta.onboardingStatus = init.onboardingStatus;\n    if (typeof init?.retryAfterSec === 'number') meta.retryAfterSec = init.retryAfterSec;\n    this.meta = Object.keys(meta).length ? meta : undefined;\n\n    // The cause (if any) is stored NON-enumerably so spreads / JSON / crash\n    // reporters that walk own-enumerable keys never see it.\n    if (init && 'cause' in init) {\n      Object.defineProperty(this, 'cause', { value: init.cause, enumerable: false, writable: false, configurable: true });\n    }\n\n    // Keep instanceof working across transpile targets / bundlers.\n    Object.setPrototypeOf(this, GbitXPayError.prototype);\n  }\n\n  // Custom serialization so a crash reporter or JSON.stringify() can never\n  // leak `cause` (which might hold the checkout URL with #t=<clientToken>).\n  // Only the safe, non-sensitive fields are emitted.\n  toJSON() {\n    const out: Record<string, unknown> = {\n      name: this.name,\n      code: this.code,\n      message: this.message,\n    };\n    if (this.meta?.onboardingStatus) out.onboardingStatus = this.meta.onboardingStatus;\n    if (typeof this.meta?.retryAfterSec === 'number') out.retryAfterSec = this.meta.retryAfterSec;\n    return out;\n  }\n}\n\n// Narrowing helper for consumers who don't want `instanceof`.\nexport function isGbitXPayError(e: unknown): e is GbitXPayError {\n  return e instanceof GbitXPayError || (typeof e === 'object' && e !== null && (e as { name?: string }).name === 'GbitXPayError');\n}\n","import { GbitXPayError } from './errors';\nimport type { Environment } from './types';\n\n// A publishable key: pk_{live|test}_ + 32 random bytes hex (256-bit), exactly\n// matching generateApiKey() in gatewayService/src/utils/crypto.js.\nconst PUBLISHABLE_KEY_RE = /^pk_(live|test)_[0-9a-f]{64}$/;\n\n// paymentId is a cuid from Prisma (@default(cuid())): url-safe, no\n// slash/dot/whitespace. We reject anything that could rewrite the URL\n// path/query/fragment rather than relying on encoding alone.\nconst PAYMENT_ID_RE = /^[A-Za-z0-9_-]{8,64}$/;\n\n// clientToken is the payment cancelToken (crypto.randomBytes(16).hex = 32 hex\n// chars today). Kept a bounded alphanumeric charset so it can never carry\n// control chars into the URL fragment; permissive on length for future-proofing.\nconst CLIENT_TOKEN_RE = /^[A-Za-z0-9]{16,128}$/;\n\n// Validate the publishable key BEFORE any network call. A secret key gets its\n// own security-flavored error so an integrator immediately pulls it out of the\n// binary. The key value is NEVER included in an error message.\nexport function assertPublishableKey(publishableKey: unknown): { key: string; environment: Environment } {\n  if (typeof publishableKey !== 'string' || publishableKey.trim() === '') {\n    throw new GbitXPayError('invalid_key', 'A publishableKey string is required.');\n  }\n  const key = publishableKey.trim();\n  if (key.startsWith('gk_')) {\n    throw new GbitXPayError(\n      'secret_key_used',\n      'A SECRET key (gk_) was passed to the SDK. Use a publishable key (pk_) only, and remove the secret key from your app immediately.',\n    );\n  }\n  if (!PUBLISHABLE_KEY_RE.test(key)) {\n    throw new GbitXPayError('invalid_key', 'publishableKey must look like pk_live_… or pk_test_….');\n  }\n  const environment: Environment = key.startsWith('pk_live_') ? 'live' : 'test';\n  return { key, environment };\n}\n\n// Validate present() arguments BEFORE building any URL or presenting anything.\nexport function assertPaymentArgs(\n  paymentId: unknown,\n  clientToken: unknown,\n): { paymentId: string; clientToken: string } {\n  const id = typeof paymentId === 'string' ? paymentId.trim() : '';\n  const token = typeof clientToken === 'string' ? clientToken.trim() : '';\n  if (!PAYMENT_ID_RE.test(id)) {\n    throw new GbitXPayError('invalid_arguments', 'paymentId is missing or malformed.');\n  }\n  if (!CLIENT_TOKEN_RE.test(token)) {\n    throw new GbitXPayError('invalid_arguments', 'clientToken is missing or malformed.');\n  }\n  return { paymentId: id, clientToken: token };\n}\n\n// Assert an https origin and return its canonical origin form. Used for both\n// the API base and the server-returned checkout base.\nexport function assertHttpsOrigin(raw: unknown, label: string): string {\n  if (typeof raw !== 'string' || raw.trim() === '') {\n    throw new GbitXPayError('invalid_arguments', `${label} is required.`);\n  }\n  let u: URL;\n  try {\n    u = new URL(raw.trim());\n  } catch {\n    throw new GbitXPayError('invalid_arguments', `${label} is not a valid URL.`);\n  }\n  if (u.protocol !== 'https:') {\n    throw new GbitXPayError('invalid_arguments', `${label} must be https.`);\n  }\n  return u.origin;\n}\n\n// Build the checkout URL. Args are pre-validated; we still encodeURIComponent\n// as belt-and-suspenders. The clientToken rides in the fragment (#t=) exactly\n// like POST /v1/payments returns, so the page's existing hash-capture works.\nexport function buildCheckoutUrl(checkoutOrigin: string, paymentId: string, clientToken: string): string {\n  return `${checkoutOrigin}/p/${encodeURIComponent(paymentId)}?embed=native#t=${encodeURIComponent(clientToken)}`;\n}\n","// Credential hygiene. The publishable key, the client token, and the full\n// checkout URL (which carries #t=<clientToken>) must NEVER hit a log, a\n// breadcrumb, or a serialized error. Everything here is defensive: even the\n// debug logger routes through redaction.\n\n// Reduce a URL to origin + pathname, dropping the query and fragment (where\n// the token lives). Use this anywhere a URL might be surfaced.\nexport function redactUrl(url: string): string {\n  try {\n    const u = new URL(url);\n    return `${u.origin}${u.pathname}`;\n  } catch {\n    return '[unparseable-url]';\n  }\n}\n\n// Scrub key-shaped and token substrings from arbitrary text.\nexport function redactSecrets(input: string): string {\n  return input\n    // gk_/pk_ live/test keys -> keep the class prefix, redact the body.\n    .replace(/([gp]k_(?:live|test)_)[0-9a-f]{6,}/gi, '$1redacted')\n    // t= token in a fragment OR query string (#t=…, ?t=…, &t=…).\n    .replace(/([#?&]t=)[^\\s&\"']+/g, '$1redacted')\n    // Authorization: Bearer <key/token>.\n    .replace(/(Bearer\\s+)[^\\s\"']+/gi, '$1redacted');\n}\n\nfunction safeStringify(value: unknown): string {\n  const seen = new WeakSet<object>();\n  try {\n    return JSON.stringify(value, (_k, v) => {\n      if (typeof v === 'object' && v !== null) {\n        if (seen.has(v)) return '[circular]';\n        seen.add(v);\n      }\n      return v;\n    });\n  } catch {\n    return String(value);\n  }\n}\n\nlet _debug = false;\nexport function setDebug(on: boolean): void {\n  _debug = !!on;\n}\n\n// Debug logger. Off by default; even when on it redacts every line.\nexport function debugLog(...parts: unknown[]): void {\n  if (!_debug) return;\n  try {\n    const line = parts.map((p) => (typeof p === 'string' ? p : safeStringify(p))).join(' ');\n    // eslint-disable-next-line no-console\n    console.log('[GbitXPay]', redactSecrets(line));\n  } catch {\n    /* logging must never throw */\n  }\n}\n","import { GbitXPayError } from './errors';\nimport { assertPublishableKey, assertHttpsOrigin } from './validation';\nimport { debugLog, setDebug, redactSecrets } from './redact';\nimport type { ConfigureOptions, Environment, MerchantInfo } from './types';\n\n// Bootstrap API base — where /v1/sdk/config lives (distinct from the checkout\n// host returned by that endpoint). Overridable via configure({ apiBaseUrl })\n// for staging, but must be https.\nconst DEFAULT_API_BASE = 'https://gateway.gbitx.com';\nconst DEFAULT_TIMEOUT_MS = 10_000;\nconst MIN_TIMEOUT_MS = 1_000;\nconst MAX_TIMEOUT_MS = 60_000;\n\nexport interface ResolvedConfig {\n  publishableKey: string;\n  environment: Environment;\n  // Frozen https origin of the checkout host (e.g. https://pay.gbitx.com).\n  // The single root of trust for the WebView source, originWhitelist, and\n  // every message-origin check. Server-authoritative, asserted https.\n  checkoutOrigin: string;\n  merchant: MerchantInfo;\n}\n\ntype State = 'unconfigured' | 'configuring' | 'configured' | 'configure_failed';\n\nlet _state: State = 'unconfigured';\nlet _config: ResolvedConfig | null = null;\nlet _inflight: Promise<ResolvedConfig> | null = null;\nlet _inflightKey: string | null = null;\n\nexport function isConfigured(): boolean {\n  return _state === 'configured' && _config !== null;\n}\n\nexport function getResolvedConfig(): ResolvedConfig | null {\n  return _config;\n}\n\n// Test-only reset of module state. Not exported from the package index.\nexport function __resetConfigForTest(): void {\n  _state = 'unconfigured';\n  _config = null;\n  _inflight = null;\n  _inflightKey = null;\n}\n\nfunction normalizeTimeout(ms: unknown): number {\n  if (typeof ms !== 'number' || !Number.isFinite(ms)) return DEFAULT_TIMEOUT_MS;\n  return Math.min(MAX_TIMEOUT_MS, Math.max(MIN_TIMEOUT_MS, Math.floor(ms)));\n}\n\n// Only echo a server-provided message after scrubbing it (defense in depth —\n// the publishableKeyAuth messages are static today, but never trust that).\nfunction safeMessage(msg: unknown, fallback: string): string {\n  return typeof msg === 'string' && msg.trim() ? redactSecrets(msg.trim()) : fallback;\n}\n\n// Map a non-2xx GET /v1/sdk/config response to a typed error, keyed off the\n// real backend shapes (publishableKeyAuth.js). Pure + unit-tested.\nexport function mapConfigError(\n  status: number,\n  body: { code?: string; message?: string; onboardingStatus?: string } | null | undefined,\n  retryAfterHeader?: string | null,\n): GbitXPayError {\n  const b = body || {};\n  if (status === 403 && b.code === 'ONBOARDING_REQUIRED') {\n    return new GbitXPayError('onboarding_required', safeMessage(b.message, 'This publishable key is not active yet. Complete onboarding to activate.'), {\n      onboardingStatus: typeof b.onboardingStatus === 'string' ? b.onboardingStatus : undefined,\n    });\n  }\n  if (status === 403) {\n    return new GbitXPayError('merchant_suspended', safeMessage(b.message, 'This merchant account is not active.'));\n  }\n  if (status === 429) {\n    const ra = Number(retryAfterHeader);\n    return new GbitXPayError('rate_limited', safeMessage(b.message, 'Too many requests. Please try again shortly.'), {\n      retryAfterSec: Number.isFinite(ra) && ra > 0 ? ra : undefined,\n    });\n  }\n  if (status >= 500) {\n    return new GbitXPayError('server_error', safeMessage(b.message, 'GbitXPay is temporarily unavailable. Please try again.'));\n  }\n  // 401 and any other 4xx -> the key was rejected.\n  return new GbitXPayError('invalid_key', safeMessage(b.message, 'The publishable key was rejected.'));\n}\n\n// Validate a 2xx body's shape so 'configured' means the REAL backend answered\n// correctly (a captive portal / CDN error page / partial deploy that returns\n// 200 with junk is treated as server_error, not silently accepted). Pure.\nexport function parseConfigSuccess(body: unknown): { environment: Environment; checkoutOrigin: string; merchant: MerchantInfo } {\n  const b = body as {\n    success?: unknown;\n    environment?: unknown;\n    checkoutBaseUrl?: unknown;\n    merchant?: { name?: unknown; website?: unknown } | null;\n  } | null;\n\n  if (!b || b.success !== true) {\n    throw new GbitXPayError('server_error', 'Unexpected response while validating the key.');\n  }\n  if (b.environment !== 'live' && b.environment !== 'test') {\n    throw new GbitXPayError('server_error', 'Unexpected config response (environment).');\n  }\n  let checkoutOrigin: string;\n  try {\n    checkoutOrigin = assertHttpsOrigin(b.checkoutBaseUrl, 'checkoutBaseUrl');\n  } catch {\n    throw new GbitXPayError('server_error', 'Insecure or invalid checkout origin from server.');\n  }\n  const m = b.merchant;\n  if (!m || typeof m !== 'object' || Array.isArray(m)) {\n    throw new GbitXPayError('server_error', 'Unexpected config response (merchant).');\n  }\n  const name = typeof m.name === 'string' && m.name.trim() ? m.name.trim() : 'Merchant';\n  const website = typeof m.website === 'string' && m.website.trim() ? m.website.trim() : null;\n  return { environment: b.environment, checkoutOrigin, merchant: { name, website } };\n}\n\nasync function fetchConfig(key: string, apiBase: string, timeoutMs: number): Promise<ResolvedConfig> {\n  const url = `${apiBase}/v1/sdk/config`;\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), timeoutMs);\n\n  let res: Response;\n  try {\n    res = await fetch(url, {\n      method: 'GET',\n      signal: controller.signal,\n      headers: { Authorization: `Bearer ${key}`, Accept: 'application/json' },\n    });\n  } catch (cause) {\n    throw new GbitXPayError('network_error', 'Could not reach GbitXPay to validate the publishable key.', { cause });\n  } finally {\n    clearTimeout(timer);\n  }\n\n  // Body may be non-JSON (proxy/CDN error page) — parse defensively.\n  const body = await res.json().catch(() => null);\n\n  if (!res.ok) {\n    throw mapConfigError(res.status, body as never, res.headers?.get?.('retry-after'));\n  }\n\n  const parsed = parseConfigSuccess(body);\n  return {\n    publishableKey: key,\n    environment: parsed.environment,\n    checkoutOrigin: parsed.checkoutOrigin,\n    merchant: parsed.merchant,\n  };\n}\n\n// Validate the publishable key against the GbitX backend and prepare the SDK.\n// Must complete successfully before present() can run. Safe to call more than\n// once (an in-flight call for the SAME key is shared; the last successful\n// configure wins).\nexport async function configure(options: ConfigureOptions): Promise<void> {\n  if (options && options.debug) setDebug(true);\n\n  const { key, environment: prefixEnv } = assertPublishableKey(options?.publishableKey);\n\n  if (options.environment && options.environment !== prefixEnv) {\n    throw new GbitXPayError('environment_mismatch', 'The environment option does not match the publishable key.');\n  }\n\n  const timeoutMs = normalizeTimeout(options.timeoutMs);\n  const apiBase = options.apiBaseUrl ? assertHttpsOrigin(options.apiBaseUrl, 'apiBaseUrl') : DEFAULT_API_BASE;\n\n  // Share an in-flight configure for the same key.\n  if (_inflight && _inflightKey === key) {\n    await _inflight;\n    return;\n  }\n\n  _state = 'configuring';\n  debugLog('configure: validating key against', `${apiBase}/v1/sdk/config`);\n\n  const run = (async (): Promise<ResolvedConfig> => {\n    const resolved = await fetchConfig(key, apiBase, timeoutMs);\n    // Cross-check the key prefix against the server's environment. A mismatch\n    // is a fatal misconfiguration (mis-issued/tampered key or wrong backend).\n    if (resolved.environment !== prefixEnv) {\n      throw new GbitXPayError('environment_mismatch', 'Key environment and server environment disagree.');\n    }\n    if (options.environment && options.environment !== resolved.environment) {\n      throw new GbitXPayError('environment_mismatch', 'The environment option does not match the server environment.');\n    }\n    return resolved;\n  })();\n\n  _inflight = run;\n  _inflightKey = key;\n\n  try {\n    const resolved = await run;\n    // Only commit if THIS run is still the current in-flight one. A later\n    // configure() (different key) may have superseded us while we awaited; a\n    // stale, superseded run must never overwrite the winning checkoutOrigin\n    // (the root of trust). If superseded, drop our result silently.\n    if (_inflight === run) {\n      _config = resolved;\n      _state = 'configured';\n      debugLog('configure: ok, environment =', resolved.environment);\n    }\n  } catch (err) {\n    // Only flip to failed if this run is still the current one (a newer\n    // configure() may have superseded us).\n    if (_inflight === run) {\n      _state = 'configure_failed';\n      _config = null;\n    }\n    throw err;\n  } finally {\n    if (_inflight === run) {\n      _inflight = null;\n      _inflightKey = null;\n    }\n  }\n}\n","import { GbitXPayError } from './errors';\nimport { assertPaymentArgs, buildCheckoutUrl } from './validation';\nimport { getResolvedConfig, isConfigured, type ResolvedConfig } from './config';\nimport type { PaymentResult, PresentOptions } from './types';\n\n// One active checkout session, handed to the mounted host (GbitXPayProvider)\n// to render. `settle` is the SINGLE exit: the controller dedupes it and\n// resolves the present() promise, then tells the host to unmount.\nexport interface CheckoutSession {\n  paymentId: string;\n  clientToken: string;\n  url: string;\n  config: ResolvedConfig;\n  onLoaded?: () => void;\n  onEvent?: PresentOptions['onEvent'];\n  settle: (result: PaymentResult) => void;\n}\n\ntype HostListener = (session: CheckoutSession | null) => void;\n\nlet _host: HostListener | null = null;\nlet _active: CheckoutSession | null = null;\n\n// The provider registers exactly one host. If a host is already registered\n// (two providers mounted — a merchant mistake), the last one wins and we warn\n// via the returned unregister being scoped to the specific listener.\nexport function registerHost(listener: HostListener): () => void {\n  _host = listener;\n  if (_active) listener(_active); // replay a pending session to a late host\n  return () => {\n    if (_host === listener) _host = null;\n  };\n}\n\nexport function hasHost(): boolean {\n  return _host !== null;\n}\n\n// Test-only.\nexport function __resetControllerForTest(): void {\n  _host = null;\n  _active = null;\n}\n\n// Open the hosted checkout for one payment. Resolves with the terminal\n// PaymentResult (confirmed / cancelled / expired / failed). Rejects ONLY for\n// SDK/credential faults (GbitXPayError). A terminal outcome is never a reject.\nexport function present(options: PresentOptions): Promise<PaymentResult> {\n  return new Promise<PaymentResult>((resolve, reject) => {\n    if (!isConfigured()) {\n      reject(new GbitXPayError('not_configured', 'Call and await GbitXPay.configure({ publishableKey }) before present().'));\n      return;\n    }\n    if (!_host) {\n      reject(new GbitXPayError('not_mounted', 'Mount <GbitXPayProvider> once near your app root before calling present().'));\n      return;\n    }\n    if (_active) {\n      reject(new GbitXPayError('invalid_arguments', 'A checkout is already open.'));\n      return;\n    }\n\n    let args: { paymentId: string; clientToken: string };\n    try {\n      args = assertPaymentArgs(options?.paymentId, options?.clientToken);\n    } catch (e) {\n      reject(e);\n      return;\n    }\n\n    const config = getResolvedConfig();\n    if (!config) {\n      // Guarded by isConfigured() above; defensive.\n      reject(new GbitXPayError('not_configured', 'Configuration was lost. Call configure() again.'));\n      return;\n    }\n\n    const url = buildCheckoutUrl(config.checkoutOrigin, args.paymentId, args.clientToken);\n\n    let done = false;\n    const session: CheckoutSession = {\n      paymentId: args.paymentId,\n      clientToken: args.clientToken,\n      url,\n      config,\n      onLoaded: options.onLoaded,\n      onEvent: options.onEvent,\n      settle: (result: PaymentResult) => {\n        if (done) return; // controller-level latch (the modal has its own too)\n        done = true;\n        _active = null;\n        _host?.(null); // ask the host to unmount the modal/WebView\n        resolve(result);\n      },\n    };\n\n    _active = session;\n    _host(session);\n  });\n}\n","import { configure } from './config';\nimport { present } from './controller';\n\n// The imperative singleton. `configure` once at startup; `present` per payment.\n//\n//   import { GbitXPay } from '@gbitx/pay-react-native';\n//   await GbitXPay.configure({ publishableKey: 'pk_live_…' });\n//   const result = await GbitXPay.present({ paymentId, clientToken });\n//   if (result.status === 'confirmed') showThankYou();\n//   // …but only fulfil the order from your signed server webhook.\nexport const GbitXPay = {\n  configure,\n  present,\n} as const;\n\nexport type GbitXPayApi = typeof GbitXPay;\n","import type { CheckoutEventType, PaymentResult, PaymentStatus, SanitizedPayment } from './types';\n\n// Exact set of bridge event types the checkout page emits. Anything else is\n// dropped. Keys are the wire `type` strings; values are the short event names.\nconst KNOWN_TYPES: Record<string, CheckoutEventType> = {\n  'gbitx:payment:loaded': 'loaded',\n  'gbitx:payment:confirmed': 'confirmed',\n  'gbitx:payment:cancelled': 'cancelled',\n  'gbitx:payment:expired': 'expired',\n  'gbitx:payment:failed': 'failed',\n  'gbitx:payment:closed': 'closed',\n};\n\n// A bridge message is a single JSON string. Cap it well under any sane size so\n// a hostile page can't feed us a giant string before we even parse.\nconst MAX_MESSAGE_BYTES = 8192;\n\nconst PAYMENT_STATUSES: readonly PaymentStatus[] = [\n  'PENDING', 'AWAITING_PAYMENT', 'UNDERPAID', 'CONFIRMING', 'CONFIRMED', 'EXPIRED', 'FAILED', 'CANCELLED',\n];\n\nexport interface ParsedMessage {\n  type: CheckoutEventType;\n  // null for :loaded (the page sends {}) or when a payment payload is absent\n  // / malformed. Terminal handling tolerates null (webhook is truth).\n  payment: SanitizedPayment | null;\n}\n\nfunction asString(v: unknown): string | null {\n  return typeof v === 'string' ? v : null;\n}\n\n// Accept string OR finite number for decimal amount fields (the page sends\n// strings — Prisma Decimal — but we stay tolerant) and normalize to a plain\n// decimal string. A number whose String() form uses exponential notation\n// (very large, or small like 1e-8) is dropped to null rather than surfaced as\n// \"1e-8\"/\"1e+21\"; the field is display-only, so null is safer than a\n// misleading exponent.\nfunction asDecimalString(v: unknown): string | null {\n  if (typeof v === 'string') return v;\n  if (typeof v === 'number' && Number.isFinite(v)) {\n    const s = String(v);\n    return s.includes('e') || s.includes('E') ? null : s;\n  }\n  return null;\n}\n\n// Re-pick ONLY the whitelisted fields into a fresh object. This discards any\n// extra keys (prototype-pollution vectors, functions, nested junk, and the\n// fields the page deliberately strips). Returns null if the payload is not a\n// usable payment (no id or unknown status).\nexport function sanitizePayment(input: unknown): SanitizedPayment | null {\n  if (!input || typeof input !== 'object' || Array.isArray(input)) return null;\n  const p = input as Record<string, unknown>;\n\n  const id = asString(p.id);\n  const status = asString(p.status);\n  if (!id || !status || !(PAYMENT_STATUSES as readonly string[]).includes(status)) return null;\n\n  const mode = p.mode === 'LIVE' || p.mode === 'SANDBOX' ? p.mode : 'SANDBOX';\n\n  return {\n    id,\n    status: status as PaymentStatus,\n    amount: asDecimalString(p.amount) ?? '',\n    currency: asString(p.currency) ?? '',\n    crypto: asString(p.crypto),\n    network: asString(p.network),\n    amountCrypto: asDecimalString(p.amountCrypto),\n    amountPaid: asDecimalString(p.amountPaid),\n    mode,\n    confirmedAt: asString(p.confirmedAt),\n    expiresAt: asString(p.expiresAt) ?? '',\n  };\n}\n\n// Defensively parse a raw onMessage string into a known event, or null. Never\n// throws. Callers MUST have already verified the message origin (the WebView's\n// committed top-frame URL) before invoking this.\nexport function parseBridgeMessage(raw: unknown): ParsedMessage | null {\n  if (typeof raw !== 'string' || raw.length === 0 || raw.length > MAX_MESSAGE_BYTES) return null;\n\n  let obj: unknown;\n  try {\n    obj = JSON.parse(raw);\n  } catch {\n    return null;\n  }\n  if (!obj || typeof obj !== 'object' || Array.isArray(obj)) return null;\n\n  const type = (obj as { type?: unknown }).type;\n  if (typeof type !== 'string') return null;\n  const mapped = KNOWN_TYPES[type];\n  if (!mapped) return null;\n\n  return {\n    type: mapped,\n    payment: sanitizePayment((obj as { payment?: unknown }).payment),\n  };\n}\n\n// True for the events that end a checkout session.\nexport function isTerminal(type: CheckoutEventType): boolean {\n  return type !== 'loaded';\n}\n\n// Map a terminal event to a PaymentResult. `loaded` is non-terminal -> null.\n// `closed` and `cancelled` collapse to a single cancelled representation.\nexport function terminalResult(type: CheckoutEventType, payment: SanitizedPayment | null): PaymentResult | null {\n  switch (type) {\n    case 'confirmed':\n      return { status: 'confirmed', payment };\n    case 'cancelled':\n    case 'closed':\n      return { status: 'cancelled', reason: 'user_closed', payment };\n    case 'expired':\n      return { status: 'expired', reason: 'expired', payment };\n    case 'failed':\n      return { status: 'failed', payment };\n    case 'loaded':\n    default:\n      return null;\n  }\n}\n","// Pure, unit-testable WebView security policy — the exact origin decisions the\n// SDK's trust rests on. Kept free of any react-native import so it can be\n// tested in Node and so the decisions are auditable in isolation.\n//\n// EXACT origin equality everywhere (never startsWith / includes). The library's\n// own `originWhitelist` prop is a *prefix* match (unanchored regex), so\n// `https://pay.gbitx.com` there would also match `https://pay.gbitx.com.evil.com`\n// and `https://pay.gbitx.company`. We therefore set originWhitelist to ['*'] in\n// the component and make THIS module the single authoritative gate.\n\nfunction parse(url: unknown): URL | null {\n  if (typeof url !== 'string' || url === '') return null;\n  try {\n    return new URL(url);\n  } catch {\n    return null;\n  }\n}\n\n// May a navigation load inside the WebView? In native embed mode the checkout\n// is fully self-contained — it performs NO off-origin navigation and uses NO\n// wallet deep-links (verified against PaymentPage.jsx: redirects are suppressed\n// and \"return to merchant\" links are swapped for close buttons). So the only\n// thing allowed to load is the pinned checkout origin over https; everything\n// else is blocked and opened nowhere (no Linking), removing the \"a compromised\n// page force-opens an external URL / deep-link\" vector entirely.\nexport function mayLoadInWebView(checkoutOrigin: string, url: unknown): boolean {\n  const u = parse(url);\n  return !!u && u.protocol === 'https:' && u.origin === checkoutOrigin;\n}\n\n// Is a URL the pinned checkout origin over https? EXACT origin, NO path clause.\n// Used to validate the per-message authenticated sender URL, whose shape differs\n// by platform: on iOS react-native-webview reports the full frame URL, but on\n// Android it reports the sender ORIGIN only (no path). Requiring a /p/ path here\n// would reject every legitimate Android message. The /p/ path is instead asserted\n// on the committed top-frame URL (isTrustedMessageSource) — exactly how the iOS\n// native SDK splits frameInfo.securityOrigin (origin) from the committed URL (path).\n//\n// Caveat vs the native SDKs: on react-native-webview's Android path this URL is the\n// TOP-frame value, not a per-frame authenticated sender origin, so it cannot by\n// itself isolate a sub-frame. That residual is covered by the hosted page's CSP\n// (frame-src 'none' blocks injected iframes) plus the page shipping no iframes.\nexport function isTrustedMessageOrigin(checkoutOrigin: string, url: unknown): boolean {\n  const u = parse(url);\n  return !!u && u.protocol === 'https:' && u.origin === checkoutOrigin;\n}\n\n// Is a URL the pinned origin over https AND on a payment path (/p/...)? Applied to\n// the committed top-frame URL (from onNavigationStateChange), which always carries\n// the full path. This is the native mirror of the page's own embed-origin boundary.\nexport function isTrustedMessageSource(checkoutOrigin: string, url: unknown): boolean {\n  const u = parse(url);\n  return !!u && u.protocol === 'https:' && u.origin === checkoutOrigin && u.pathname.startsWith('/p/');\n}\n","import React, { useCallback, useEffect, useRef, useState } from 'react';\nimport {\n  ActivityIndicator,\n  BackHandler,\n  Modal,\n  Platform,\n  StatusBar,\n  StyleSheet,\n  Text,\n  TouchableOpacity,\n  useColorScheme,\n  View,\n} from 'react-native';\nimport { WebView } from 'react-native-webview';\nimport type {\n  ShouldStartLoadRequest,\n  WebViewMessageEvent,\n  WebViewNavigation,\n} from 'react-native-webview/lib/WebViewTypes';\n\nimport type { CheckoutSession } from './controller';\nimport type { PaymentResult } from './types';\nimport { parseBridgeMessage, terminalResult } from './messageHandler';\nimport { mayLoadInWebView, isTrustedMessageSource, isTrustedMessageOrigin } from './webviewPolicy';\nimport { debugLog, redactUrl } from './redact';\n\n// Absolute ceiling on a single checkout session. The server payment expires in\n// 60 minutes; this fixed backstop (payment window + grace) guarantees present()\n// resolves even if the WebView is backgrounded/offline and the page can never\n// emit its own 'expired'. Fixed (not derived from any device-controlled\n// payload) so it can neither be shortened by a hostile page nor overflow the\n// 32-bit setTimeout delay.\nconst SESSION_MAX_MS = 65 * 60 * 1000;\n\ninterface ThemeTokens {\n  bg: string;\n  text: string;\n  sub: string;\n  border: string;\n  spinner: string;\n}\n\nfunction useTheme(): ThemeTokens {\n  const scheme = useColorScheme();\n  return scheme === 'dark'\n    ? { bg: '#0a0f0c', text: '#f2f5f3', sub: '#9aa5a0', border: '#1c2620', spinner: '#3ecf6b' }\n    : { bg: '#ffffff', text: '#0a0f0c', sub: '#5b6660', border: '#e6ebe8', spinner: '#07811f' };\n}\n\nexport function CheckoutModal({ session }: { session: CheckoutSession }): React.ReactElement {\n  const theme = useTheme();\n  const checkoutOrigin = session.config.checkoutOrigin;\n\n  const [pageReady, setPageReady] = useState(false);\n  const [loadError, setLoadError] = useState(false);\n\n  // Refs so async handlers always see current values without re-subscribing.\n  const settledRef = useRef(false);\n  const loadedFiredRef = useRef(false);\n  const committedUrlRef = useRef<string>(session.url);\n  const backstopRef = useRef<ReturnType<typeof setTimeout> | null>(null);\n  const webViewRef = useRef<WebView>(null);\n\n  // The SINGLE exit. Idempotent. Clears timers, forgets the token-bearing URL,\n  // and hands the result to the controller (which also dedupes and unmounts us).\n  const settle = useCallback(\n    (result: PaymentResult) => {\n      if (settledRef.current) return;\n      settledRef.current = true;\n      if (backstopRef.current) {\n        clearTimeout(backstopRef.current);\n        backstopRef.current = null;\n      }\n      committedUrlRef.current = ''; // drop the URL (carries #t=token) from memory\n      debugLog('settle', result.status, 'reason' in result ? result.reason ?? '' : '');\n      session.settle(result);\n    },\n    [session],\n  );\n\n  // ── WebView: navigation lock (sole authoritative gate) ─────────────────────\n  // originWhitelist is set to ['*'] so the library never auto-decides (its\n  // whitelist is a loose prefix match); every navigation is routed here and only\n  // the exact pinned origin over https may load. Off-origin is blocked and NOT\n  // opened anywhere.\n  const handleShouldStart = useCallback(\n    (req: ShouldStartLoadRequest): boolean => mayLoadInWebView(checkoutOrigin, req.url),\n    [checkoutOrigin],\n  );\n\n  // Never spawn a child WebView or open anything. window.open / target=_blank\n  // are already suppressed by the props below; this is defense in depth.\n  const handleOpenWindow = useCallback(() => {\n    /* no-op: never open a second browsing context */\n  }, []);\n\n  // ── WebView: message trust gate + dispatch ─────────────────────────────────\n  const handleMessage = useCallback(\n    (event: WebViewMessageEvent) => {\n      // Trust gate (two independent checks, mirroring the iOS native SDK):\n      //   1. The per-message sender URL must be the pinned origin over https.\n      //      react-native-webview reports this differently per platform — a FULL\n      //      frame URL on iOS, but the sender ORIGIN ONLY (no path) on Android —\n      //      so we check ORIGIN here, never a path (a /p/ requirement would drop\n      //      every legitimate Android message and hang the checkout).\n      //   2. The committed top-frame URL (always full, from onNavigationStateChange)\n      //      must be the pinned origin on a /p/ path.\n      // Both must hold. If the platform provides no sender URL, fall back to the\n      // committed /p/ gate alone. Fail closed on any mismatch.\n      const senderUrl = event?.nativeEvent?.url;\n      const committedOnCheckout = isTrustedMessageSource(checkoutOrigin, committedUrlRef.current || session.url);\n      if (typeof senderUrl === 'string' && senderUrl !== '') {\n        if (!isTrustedMessageOrigin(checkoutOrigin, senderUrl) || !committedOnCheckout) return;\n      } else if (!committedOnCheckout) {\n        return;\n      }\n\n      const parsed = parseBridgeMessage(event?.nativeEvent?.data);\n      if (!parsed) return;\n\n      // Bind to THIS payment: a message whose payload is for a different payment\n      // id is dropped (the origin gate + single active session already scope us,\n      // this closes id-confusion for good).\n      if (parsed.payment && parsed.payment.id !== session.paymentId) return;\n\n      session.onEvent?.({ type: parsed.type, payment: parsed.payment ?? undefined });\n\n      if (parsed.type === 'loaded') {\n        setPageReady(true);\n        if (!loadedFiredRef.current) {\n          loadedFiredRef.current = true;\n          session.onLoaded?.();\n        }\n        return; // non-terminal\n      }\n\n      const result = terminalResult(parsed.type, parsed.payment);\n      if (result) settle(result);\n    },\n    [checkoutOrigin, session, settle],\n  );\n\n  // ── WebView: load/crash error handling (main-frame only) ───────────────────\n  const isMainFrameUrl = useCallback(\n    (url: string | undefined): boolean => {\n      if (!url) return true; // top-level failure with no url\n      try {\n        const u = new URL(url);\n        return u.origin === checkoutOrigin && u.pathname.startsWith('/p/');\n      } catch {\n        return false;\n      }\n    },\n    [checkoutOrigin],\n  );\n\n  const handleLoadError = useCallback(\n    (e: { nativeEvent?: { url?: string } }) => {\n      if (isMainFrameUrl(e?.nativeEvent?.url)) setLoadError(true);\n    },\n    [isMainFrameUrl],\n  );\n\n  const handleCrash = useCallback((): void => {\n    // Renderer died. Do NOT blind-reload into an unknown state — surface an\n    // error the user can retry. A success can only come from a trusted message.\n    setLoadError(true);\n  }, []);\n\n  const retry = useCallback(() => {\n    setLoadError(false);\n    setPageReady(false);\n    webViewRef.current?.reload();\n  }, []);\n\n  // ── Android hardware back + fixed backstop + unmount cleanup ────────────────\n  useEffect(() => {\n    // Absolute session backstop (fixed duration — see SESSION_MAX_MS).\n    backstopRef.current = setTimeout(() => settle({ status: 'expired', reason: 'client_backstop' }), SESSION_MAX_MS);\n\n    const onBack = (): boolean => {\n      settle({ status: 'cancelled', reason: 'back_button' });\n      return true; // we own the back gesture while checkout is open\n    };\n    const sub = BackHandler.addEventListener('hardwareBackPress', onBack);\n\n    return () => {\n      sub.remove();\n      if (backstopRef.current) {\n        clearTimeout(backstopRef.current);\n        backstopRef.current = null;\n      }\n      webViewRef.current?.stopLoading?.();\n      // If we unmount without a terminal event, settle once so the merchant's\n      // promise never hangs and no orphaned WebView keeps polling.\n      if (!settledRef.current) {\n        settledRef.current = true;\n        session.settle({ status: 'cancelled', reason: 'dismissed' });\n      }\n    };\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  // One redacted breadcrumb (origin + path only — never the #t= token).\n  useEffect(() => {\n    debugLog('present', redactUrl(session.url));\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, []);\n\n  const topInset = Platform.OS === 'android' ? StatusBar.currentHeight ?? 0 : 0;\n\n  return (\n    <Modal\n      visible\n      animationType=\"slide\"\n      presentationStyle=\"pageSheet\"\n      statusBarTranslucent\n      onRequestClose={() => settle({ status: 'cancelled', reason: 'back_button' })}\n      onDismiss={() => {\n        if (!settledRef.current) settle({ status: 'cancelled', reason: 'dismissed' });\n      }}\n    >\n      <View style={[styles.container, { backgroundColor: theme.bg, paddingTop: topInset }]}>\n        <View style={[styles.header, { borderBottomColor: theme.border }]}>\n          <Text style={[styles.title, { color: theme.text }]} numberOfLines={1}>\n            {session.config.merchant.name}\n          </Text>\n          <TouchableOpacity\n            onPress={() => settle({ status: 'cancelled', reason: 'user_closed' })}\n            accessibilityRole=\"button\"\n            accessibilityLabel=\"Close checkout\"\n            hitSlop={{ top: 12, bottom: 12, left: 12, right: 12 }}\n            style={styles.closeBtn}\n          >\n            <Text style={[styles.closeIcon, { color: theme.text }]}>✕</Text>\n          </TouchableOpacity>\n        </View>\n\n        <View style={styles.body}>\n          {loadError ? (\n            <View style={styles.center} accessibilityLabel=\"Checkout failed to load\">\n              <Text style={[styles.errorTitle, { color: theme.text }]}>Could not load checkout</Text>\n              <Text style={[styles.errorSub, { color: theme.sub }]}>Check your connection and try again.</Text>\n              <TouchableOpacity onPress={retry} accessibilityRole=\"button\" style={[styles.retryBtn, { borderColor: theme.border }]}>\n                <Text style={[styles.retryText, { color: theme.text }]}>Retry</Text>\n              </TouchableOpacity>\n              <TouchableOpacity\n                onPress={() => settle({ status: 'cancelled', reason: 'load_failed' })}\n                accessibilityRole=\"button\"\n                style={styles.closeLink}\n              >\n                <Text style={[styles.closeLinkText, { color: theme.sub }]}>Close</Text>\n              </TouchableOpacity>\n            </View>\n          ) : (\n            <>\n              <WebView\n                ref={webViewRef}\n                source={{ uri: session.url }}\n                // ── origin + navigation lock (this handler is the sole gate) ──\n                originWhitelist={['*']}\n                onShouldStartLoadWithRequest={handleShouldStart}\n                onNavigationStateChange={(s: WebViewNavigation) => {\n                  committedUrlRef.current = s.url;\n                  // Defense in depth: originWhitelist is ['*'] so handleShouldStart\n                  // is the sole nav gate. If the committed top frame ever lands on\n                  // an http(s) URL that is NOT the pinned origin (a library\n                  // regression bypassing the gate), stop trusting the session.\n                  if (typeof s.url === 'string' && /^https?:/i.test(s.url) && !mayLoadInWebView(checkoutOrigin, s.url)) {\n                    if (!settledRef.current) {\n                      webViewRef.current?.stopLoading?.();\n                      setLoadError(true);\n                    }\n                  }\n                }}\n                onMessage={handleMessage}\n                onOpenWindow={handleOpenWindow}\n                // ── window / file / storage lockdown ──\n                setSupportMultipleWindows={false}\n                javaScriptCanOpenWindowsAutomatically={false}\n                allowFileAccess={false}\n                allowFileAccessFromFileURLs={false}\n                allowUniversalAccessFromFileURLs={false}\n                thirdPartyCookiesEnabled={false}\n                sharedCookiesEnabled={false}\n                incognito={false}\n                mixedContentMode=\"never\"\n                // ── media (no autoplay, no camera/mic grants) ──\n                allowsInlineMediaPlayback\n                mediaPlaybackRequiresUserAction\n                // ── load + crash handling ──\n                onError={handleLoadError}\n                onHttpError={handleLoadError}\n                onContentProcessDidTerminate={handleCrash}\n                onRenderProcessGone={handleCrash}\n                onLoadEnd={() => setPageReady(true)}\n                style={{ flex: 1, backgroundColor: theme.bg }}\n              />\n              {!pageReady ? (\n                <View style={[styles.loadingOverlay, { backgroundColor: theme.bg }]} accessibilityLabel=\"Loading checkout\">\n                  <ActivityIndicator size=\"large\" color={theme.spinner} />\n                </View>\n              ) : null}\n            </>\n          )}\n        </View>\n      </View>\n    </Modal>\n  );\n}\n\nconst styles = StyleSheet.create({\n  container: { flex: 1 },\n  header: {\n    flexDirection: 'row',\n    alignItems: 'center',\n    justifyContent: 'space-between',\n    paddingHorizontal: 16,\n    height: 52,\n    borderBottomWidth: StyleSheet.hairlineWidth,\n  },\n  title: { fontSize: 15, fontWeight: '500', flex: 1, marginRight: 12 },\n  closeBtn: { width: 32, height: 32, alignItems: 'center', justifyContent: 'center' },\n  closeIcon: { fontSize: 18, fontWeight: '400' },\n  body: { flex: 1 },\n  loadingOverlay: { ...StyleSheet.absoluteFillObject, alignItems: 'center', justifyContent: 'center' },\n  center: { flex: 1, alignItems: 'center', justifyContent: 'center', padding: 32 },\n  errorTitle: { fontSize: 16, fontWeight: '500', marginBottom: 8 },\n  errorSub: { fontSize: 13, textAlign: 'center', marginBottom: 20 },\n  retryBtn: { paddingHorizontal: 24, paddingVertical: 10, borderRadius: 10, borderWidth: 1 },\n  retryText: { fontSize: 14, fontWeight: '500' },\n  closeLink: { marginTop: 14, padding: 8 },\n  closeLinkText: { fontSize: 13 },\n});\n","import React, { useEffect, useState } from 'react';\nimport { registerHost, type CheckoutSession } from './controller';\nimport { CheckoutModal } from './CheckoutModal';\n\n// Mount ONCE near your app root. It renders nothing until a checkout is\n// presented, then hosts the full-screen checkout modal. Imperative\n// GbitXPay.present() drives it via the module controller.\n//\n//   export default function App() {\n//     return (\n//       <GbitXPayProvider>\n//         <YourApp />\n//       </GbitXPayProvider>\n//     );\n//   }\nexport function GbitXPayProvider({ children }: { children?: React.ReactNode }): React.ReactElement {\n  const [session, setSession] = useState<CheckoutSession | null>(null);\n\n  useEffect(() => registerHost(setSession), []);\n\n  return (\n    <>\n      {children}\n      {/* key by paymentId so each checkout gets a fresh modal (fresh latch,\n          fresh state) and nothing leaks across payments. */}\n      {session ? <CheckoutModal key={session.paymentId} session={session} /> : null}\n    </>\n  );\n}\n","import { useMemo } from 'react';\nimport { configure } from './config';\nimport { present } from './controller';\nimport type { ConfigureOptions, PresentOptions, PaymentResult } from './types';\n\nexport interface UseGbitXPay {\n  configure: (options: ConfigureOptions) => Promise<void>;\n  present: (options: PresentOptions) => Promise<PaymentResult>;\n}\n\n// Hook flavor of the API for components that prefer it. Thin, stable wrapper\n// over the same singleton — configure/present are module-level, so this holds\n// no state of its own; the identity is memoized for dependency arrays.\nexport function useGbitXPay(): UseGbitXPay {\n  return useMemo(() => ({ configure, present }), []);\n}\n","// Single source of truth for the SDK version. Surfaced in the WebView\n// userAgent suffix (never with any credential appended) for abuse\n// throttling and analytics. Keep in sync with package.json \"version\".\nexport const SDK_VERSION = '0.1.0';\n"]}

package/dist/index.d.mts

@@ -0,0 +1,98 @@
+import React from 'react';
+
+type GbitXPayErrorCode = 'not_configured' | 'not_mounted' | 'invalid_key' | 'secret_key_used' | 'environment_mismatch' | 'onboarding_required' | 'merchant_suspended' | 'rate_limited' | 'network_error' | 'server_error' | 'invalid_arguments';
+interface GbitXPayErrorMeta {
+    onboardingStatus?: string;
+    retryAfterSec?: number;
+}
+type GbitXPayErrorInit = GbitXPayErrorMeta & {
+    cause?: unknown;
+};
+declare class GbitXPayError extends Error {
+    readonly code: GbitXPayErrorCode;
+    readonly meta?: GbitXPayErrorMeta;
+    constructor(code: GbitXPayErrorCode, message: string, init?: GbitXPayErrorInit);
+    toJSON(): Record<string, unknown>;
+}
+declare function isGbitXPayError(e: unknown): e is GbitXPayError;
+
+type Environment = 'live' | 'test';
+type PaymentStatus = 'PENDING' | 'AWAITING_PAYMENT' | 'UNDERPAID' | 'CONFIRMING' | 'CONFIRMED' | 'EXPIRED' | 'FAILED' | 'CANCELLED';
+interface SanitizedPayment {
+    id: string;
+    status: PaymentStatus;
+    amount: string;
+    currency: string;
+    crypto: string | null;
+    network: string | null;
+    amountCrypto: string | null;
+    amountPaid: string | null;
+    mode: 'LIVE' | 'SANDBOX';
+    confirmedAt: string | null;
+    expiresAt: string;
+}
+type CancelReason = 'user_closed' | 'dismissed' | 'back_button' | 'load_failed';
+type ExpiredReason = 'expired' | 'client_backstop';
+type PaymentResult = {
+    status: 'confirmed';
+    payment: SanitizedPayment | null;
+} | {
+    status: 'cancelled';
+    reason?: CancelReason;
+    payment?: SanitizedPayment | null;
+} | {
+    status: 'expired';
+    reason?: ExpiredReason;
+    payment?: SanitizedPayment | null;
+} | {
+    status: 'failed';
+    payment?: SanitizedPayment | null;
+};
+interface ConfigureOptions {
+    publishableKey: string;
+    environment?: Environment;
+    timeoutMs?: number;
+    apiBaseUrl?: string;
+    debug?: boolean;
+}
+interface MerchantInfo {
+    name: string;
+    website: string | null;
+}
+type CheckoutEventType = 'loaded' | 'confirmed' | 'cancelled' | 'expired' | 'failed' | 'closed';
+interface CheckoutEvent {
+    type: CheckoutEventType;
+    payment?: SanitizedPayment;
+}
+interface PresentOptions {
+    paymentId: string;
+    clientToken: string;
+    onLoaded?: () => void;
+    onEvent?: (event: CheckoutEvent) => void;
+}
+
+declare function configure(options: ConfigureOptions): Promise<void>;
+
+declare function present(options: PresentOptions): Promise<PaymentResult>;
+
+declare const GbitXPay: {
+    readonly configure: typeof configure;
+    readonly present: typeof present;
+};
+type GbitXPayApi = typeof GbitXPay;
+
+declare function GbitXPayProvider({ children }: {
+    children?: React.ReactNode;
+}): React.ReactElement;
+
+interface UseGbitXPay {
+    configure: (options: ConfigureOptions) => Promise<void>;
+    present: (options: PresentOptions) => Promise<PaymentResult>;
+}
+declare function useGbitXPay(): UseGbitXPay;
+
+declare function setDebug(on: boolean): void;
+
+declare const SDK_VERSION = "0.1.0";
+
+export { type CancelReason, type CheckoutEvent, type CheckoutEventType, type ConfigureOptions, type Environment, type ExpiredReason, GbitXPay, type GbitXPayApi, GbitXPayError, type GbitXPayErrorCode, type GbitXPayErrorMeta, GbitXPayProvider, type MerchantInfo, type PaymentResult, type PaymentStatus, type PresentOptions, SDK_VERSION, type SanitizedPayment, type UseGbitXPay, isGbitXPayError, setDebug, useGbitXPay };

package/dist/index.d.ts

@@ -0,0 +1,98 @@
+import React from 'react';
+
+type GbitXPayErrorCode = 'not_configured' | 'not_mounted' | 'invalid_key' | 'secret_key_used' | 'environment_mismatch' | 'onboarding_required' | 'merchant_suspended' | 'rate_limited' | 'network_error' | 'server_error' | 'invalid_arguments';
+interface GbitXPayErrorMeta {
+    onboardingStatus?: string;
+    retryAfterSec?: number;
+}
+type GbitXPayErrorInit = GbitXPayErrorMeta & {
+    cause?: unknown;
+};
+declare class GbitXPayError extends Error {
+    readonly code: GbitXPayErrorCode;
+    readonly meta?: GbitXPayErrorMeta;
+    constructor(code: GbitXPayErrorCode, message: string, init?: GbitXPayErrorInit);
+    toJSON(): Record<string, unknown>;
+}
+declare function isGbitXPayError(e: unknown): e is GbitXPayError;
+
+type Environment = 'live' | 'test';
+type PaymentStatus = 'PENDING' | 'AWAITING_PAYMENT' | 'UNDERPAID' | 'CONFIRMING' | 'CONFIRMED' | 'EXPIRED' | 'FAILED' | 'CANCELLED';
+interface SanitizedPayment {
+    id: string;
+    status: PaymentStatus;
+    amount: string;
+    currency: string;
+    crypto: string | null;
+    network: string | null;
+    amountCrypto: string | null;
+    amountPaid: string | null;
+    mode: 'LIVE' | 'SANDBOX';
+    confirmedAt: string | null;
+    expiresAt: string;
+}
+type CancelReason = 'user_closed' | 'dismissed' | 'back_button' | 'load_failed';
+type ExpiredReason = 'expired' | 'client_backstop';
+type PaymentResult = {
+    status: 'confirmed';
+    payment: SanitizedPayment | null;
+} | {
+    status: 'cancelled';
+    reason?: CancelReason;
+    payment?: SanitizedPayment | null;
+} | {
+    status: 'expired';
+    reason?: ExpiredReason;
+    payment?: SanitizedPayment | null;
+} | {
+    status: 'failed';
+    payment?: SanitizedPayment | null;
+};
+interface ConfigureOptions {
+    publishableKey: string;
+    environment?: Environment;
+    timeoutMs?: number;
+    apiBaseUrl?: string;
+    debug?: boolean;
+}
+interface MerchantInfo {
+    name: string;
+    website: string | null;
+}
+type CheckoutEventType = 'loaded' | 'confirmed' | 'cancelled' | 'expired' | 'failed' | 'closed';
+interface CheckoutEvent {
+    type: CheckoutEventType;
+    payment?: SanitizedPayment;
+}
+interface PresentOptions {
+    paymentId: string;
+    clientToken: string;
+    onLoaded?: () => void;
+    onEvent?: (event: CheckoutEvent) => void;
+}
+
+declare function configure(options: ConfigureOptions): Promise<void>;
+
+declare function present(options: PresentOptions): Promise<PaymentResult>;
+
+declare const GbitXPay: {
+    readonly configure: typeof configure;
+    readonly present: typeof present;
+};
+type GbitXPayApi = typeof GbitXPay;
+
+declare function GbitXPayProvider({ children }: {
+    children?: React.ReactNode;
+}): React.ReactElement;
+
+interface UseGbitXPay {
+    configure: (options: ConfigureOptions) => Promise<void>;
+    present: (options: PresentOptions) => Promise<PaymentResult>;
+}
+declare function useGbitXPay(): UseGbitXPay;
+
+declare function setDebug(on: boolean): void;
+
+declare const SDK_VERSION = "0.1.0";
+
+export { type CancelReason, type CheckoutEvent, type CheckoutEventType, type ConfigureOptions, type Environment, type ExpiredReason, GbitXPay, type GbitXPayApi, GbitXPayError, type GbitXPayErrorCode, type GbitXPayErrorMeta, GbitXPayProvider, type MerchantInfo, type PaymentResult, type PaymentStatus, type PresentOptions, SDK_VERSION, type SanitizedPayment, type UseGbitXPay, isGbitXPayError, setDebug, useGbitXPay };