@ianmenethil/zp-observer 6.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zenith Payments
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/PRIVACY.md

@@ -0,0 +1,67 @@
+# Privacy notice — @ianmenethil/zp-observer
+
+This library collects a small, fixed set of fields for each payment session. It does **not** read form values, iframe contents, cookies, or arbitrary DOM state.
+
+## Fields collected
+
+### `open` event (once per session)
+
+| Field | Purpose |
+|---|---|
+| `sessionId` | Identifier you pass in; typically the merchant unique payment id |
+| `timestamp` | When the modal iframe was first detected |
+| `iframeSrc` | The iframe's `src` URL (Zenith-hosted origin) |
+| `userAgent` | `navigator.userAgent` — for debugging browser-specific issues |
+| `screenWidth` / `screenHeight` | Screen size — for mobile vs desktop bucketing |
+| `navigationType` | `performance.getEntriesByType('navigation')[0].type` |
+| `metadata` | Whatever you pass into `createObserver({ metadata: ... })` |
+
+### `heartbeat` event (every `heartbeatMs`, default 5s)
+
+| Field | Purpose |
+|---|---|
+| `sessionId`, `timestamp`, `metadata` | as above |
+| `sequence` | Monotonic counter for deduplication |
+| `missedBeats` | How many consecutive failures we've seen |
+
+### `close` event (once per session)
+
+| Field | Purpose |
+|---|---|
+| `sessionId`, `timestamp`, `metadata` | as above |
+| `reason` | One of seven documented reasons (see README) |
+| `elapsedMs` | How long the session lasted |
+| `heartbeatCount` | Total heartbeats sent |
+| `missedBeats` | Consecutive failures at close time |
+| `wasPersisted` | `pagehide.persisted` — true if page went into bfcache |
+
+## Fields **not** collected
+
+- No form field values or payment card data (cross-origin blocks this anyway)
+- No cookies or storage contents
+- No click / keystroke events
+- No page URL beyond what you pass in `metadata`
+- No IP address (your server records that when it receives the request)
+
+## Scrubbing
+
+Use `beforeSend` to mutate or drop events before they leave the browser:
+
+```ts
+createObserver({
+  sessionId: mUPID,
+  transport: httpTransport({ ... }),
+  beforeSend: (ev) => {
+    if (ev.kind === 'open') {
+      return { ...ev, userAgent: '' };
+    }
+    return ev;
+  },
+});
+```
+
+Return `null` to drop an event entirely.
+
+## Cross-origin note
+
+The ZenPay payment iframe is on a Zenith-controlled domain. Browser same-origin policy means this library **cannot** read anything inside the iframe — no form values, no DOM, no keystrokes. It only observes the iframe element itself (presence, size, visibility) from the parent page.

package/README.md

@@ -0,0 +1,284 @@
+# @ianmenethil/zp-observer
+
+Telemetry for **Zenith hosted checkout**: v6 adds **domain events**, **correlation IDs**, **persistent outbox**, and a **unified session entry point** on top of the proven open/heartbeat/close model. Cross-page outcome reporting, device fingerprint bridge hooks, and HPP lifecycle observation are all wired through a single typed event bus.
+
+**Pick one path:**
+
+| You are… | Go to |
+|----------|--------|
+| Using **Vite / webpack / Node ESM** | [npm — ES modules](#npm--es-modules-import) |
+| Using **CommonJS** (`require`) | [npm — CommonJS](#npm--commonjs-require) |
+| Using a **plain HTML page** with no bundler | [CDN — `<script>` tag](#cdn--script-tag-no-bundler) |
+
+---
+
+## Install (npm only)
+
+```bash
+npm install @ianmenethil/zp-observer
+```
+
+---
+
+## Quickstart (unified session — v6)
+
+```ts
+import { createZenPaySession, httpTransport } from '@ianmenethil/zp-observer/session';
+
+const session = createZenPaySession({
+  sessionId: merchantUPID,
+  transport: httpTransport({ openUrl, aliveUrl, closeUrl }),
+  persistence: 'localStorage',
+  metadata: { merchantId: 'ACME', env: 'prod' },
+});
+
+// session.observer is started automatically.
+// Pass session.hppDefaults.onPluginClose to ZenPay.
+// Pass session.fingerprint.hooks into DEVICEFP's captureThumbmark() options.
+// session.correlationId ties every event together.
+```
+
+## Correlation IDs
+
+Every event carries a `correlationId` — a UUID minted by the observer (or supplied via `createObserver({ correlationId })`). It flows through the fingerprint, HPP init, modal open, heartbeats, close, and outcome events so your backend can join the full payment story without timestamp guessing. Pass it to DEVICEFP via the bridge hooks, or embed it in `merchantUniquePaymentId` metadata.
+
+## npm — ES modules (`import`)
+
+**`headers` on `httpTransport` is optional.** If you omit it, requests still run: heartbeats and fetch fallbacks send **`Content-Type: application/json`** only, and use **`credentials: 'include'`** so **first-party / same-site cookies** are included when the browser allows it. **`navigator.sendBeacon`** (used for `open` / `close` when it succeeds) **cannot set custom headers** — only the JSON body.
+
+So integrators often:
+
+- **No extra auth** — omit `headers`; rely on **session cookies** on your own origin, or **signed query params** baked into the three URLs.
+- **Bearer / API key** — pass `headers: () => ({ Authorization: 'Bearer …' })` (or any static object) so **heartbeat** and **fetch fallbacks** include them; beacons still won’t.
+
+```ts
+import {
+  createObserver,
+  httpTransport,
+  installZenPayAutoPatch,
+} from '@ianmenethil/zp-observer';
+
+const mUPID = 'your-merchant-unique-payment-id';
+
+const observer = createObserver({
+  sessionId: mUPID,
+  transport: httpTransport({
+    openUrl: `https://your-api.example/telemetry/${mUPID}?e=open`,
+    aliveUrl: `https://your-api.example/telemetry/${mUPID}?e=alive`,
+    closeUrl: `https://your-api.example/telemetry/${mUPID}?e=close`,
+    // Optional — only if your server needs extra headers on fetch() calls:
+    // headers: () => ({ Authorization: `Bearer ${getLogsToken()}` }),
+  }),
+});
+
+// Optional: rewrite ZenPay init so onPluginClose uses observer.shortcode automatically
+installZenPayAutoPatch(observer);
+
+observer.start();
+
+// Then open ZenPay as you already do, e.g.:
+// $.zpPayment({ merchantUniquePaymentId: mUPID, onPluginClose: observer.shortcode }).init();
+```
+
+**Without auto-patch:** after `start()`, pass **`observer.shortcode`** (a string like `window.zpcb_…`) to ZenPay’s **`onPluginClose`** — same value as the v4 bridge.
+
+**Optional subpath** (only the ZenPay patch helper):
+
+```ts
+import { installZenPayAutoPatch } from '@ianmenethil/zp-observer/auto-patch';
+```
+
+---
+
+## npm — CommonJS (`require`)
+
+```js
+const {
+  createObserver,
+  httpTransport,
+  installZenPayAutoPatch,
+} = require('@ianmenethil/zp-observer');
+
+const mUPID = 'your-merchant-unique-payment-id';
+
+const observer = createObserver({
+  sessionId: mUPID,
+  transport: httpTransport({
+    openUrl: `https://your-api.example/telemetry/${mUPID}?e=open`,
+    aliveUrl: `https://your-api.example/telemetry/${mUPID}?e=alive`,
+    closeUrl: `https://your-api.example/telemetry/${mUPID}?e=close`,
+  }),
+});
+
+installZenPayAutoPatch(observer);
+observer.start();
+```
+
+---
+
+## CDN — `<script>` tag (no bundler)
+
+1. Add **one** script from **`dist/`** (published path on unpkg/jsDelivr includes `dist/`).
+
+2. Use the global **`ZPObserver`** — same names as the npm API: `createObserver`, `httpTransport`, `installZenPayAutoPatch`, `callbackTransport`, `VERSION`.
+
+```html
+<script src="https://unpkg.com/@ianmenethil/zp-observer/dist/zp-observer.min.js"></script>
+<script>
+  (function () {
+    var mUPID = ‘your-merchant-unique-payment-id’;
+
+    var observer = ZPObserver.createObserver({
+      sessionId: mUPID,
+      transport: ZPObserver.httpTransport({
+        openUrl:  ‘/telemetry/’ + mUPID + ‘?e=open’,
+        aliveUrl: ‘/telemetry/’ + mUPID + ‘?e=alive’,
+        closeUrl: ‘/telemetry/’ + mUPID + ‘?e=close’,
+      }),
+    });
+
+    ZPObserver.installZenPayAutoPatch(observer);
+    observer.start();
+
+    // ZenPay init — if you don’t use auto-patch, pass onPluginClose: observer.shortcode
+  })();
+</script>
+```
+
+**Which CDN file?**
+
+| File | When |
+|------|------|
+| `dist/zp-observer.js` | Debugging (readable) |
+| `dist/zp-observer.min.js` | **Default** production |
+| `dist/zp-observer.min.obf.js` | Minified + obfuscated |
+
+---
+
+## API (quick reference)
+
+| Export | Role |
+|--------|------|
+| **`createObserver(options)`** | Returns `{ sessionId, correlationId, shortcode, start, stop, getState, emit, diagnostics }`. |
+| **`httpTransport({ openUrl, aliveUrl, closeUrl, eventUrl?, headers?, fetch? })`** | Default HTTP transport. `eventUrl` (optional) receives domain events. |
+| **`callbackTransport({ onOpen?, onHeartbeat?, onClose?, onEvent? })`** | Bring-your-own-sink. `onEvent` receives domain events. |
+| **`installZenPayAutoPatch(observer)`** | Wraps `$.fn.zpPayment` / `window.ZenPay` to inject `observer.shortcode` and emit `payment.hpp_init`. |
+| **`installHPPBridge(observer)`** | Wraps `window.onPaymentPluginLoaded` to emit `payment.hpp_iframe_loaded`. |
+| **`installDeviceFPBridge(observer, opts?)`** | Returns typed hooks (`onFingerprintStarted`, `onFingerprintCacheHit`, `onFingerprintSucceeded`, `onFingerprintFailed`) that emit domain events. Spread into DEVICEFP's `captureThumbmark()`. |
+| **`preflight({ transport, sample? })`** | Sends a `payment.preflight` event and returns a structured `PreflightReport` for integration debugging. |
+| **`reportOutcome({ correlationId, sessionId, outcome, transport })`** | Posts a single `payment.outcome` event from your return/thank-you page. |
+| **`createZenPaySession(options)`** | Unified entry (subpath `@ianmenethil/zp-observer/session`). Composes observer, auto-patch, HPP bridge, and fingerprint hooks. |
+| **`VERSION`** | Package version string. |
+| **`ExperimentalOptions` / `onDiagnostic`** | See [Experimental / lab](#experimental--lab-optional). |
+
+**`observer.emit(event)`** — push any `ObserverEvent` onto the bus (bridges, merchant code).  
+**`observer.diagnostics.dump()`** — JSON-serializable snapshot for support tickets.  
+**`observer.shortcode`** — string to pass to ZenPay as **`onPluginClose`** (e.g. `window.zpcb_abc123`).  
+**`observer.correlationId`** — the UUID tying this session's events together.
+
+---
+
+## Experimental / lab (optional)
+
+Use this to **turn on one browser signal at a time** and record what actually fires in your merchants’ browsers. Nothing here changes the core **`open` / `heartbeat` / `close`** contract unless you opt in to extra fields or heartbeats.
+
+- **`onDiagnostic`** — callback with typed **`DiagnosticEvent`** (`exp.pageshow`, `exp.freeze`, `exp.perf_entry`, …).
+- **`experimental.*`** — booleans such as **`capturePageShow`**, **`captureFreezeResume`**, **`capturePerformanceEntries`**, **`captureIframeResize`**, **`captureIframeSrcChanges`**, **`captureVisibilityDetail`** (includes **`navigator.onLine`** as **informational only**), **`captureWindowFocus`**, **`captureWasDiscarded`**, **`captureUserActivation`**, **`captureNavigationTimingDetail`** (adds **`userActivation`** / **`navigationDetail`** on the **`open`** payload when set).
+- **`pageLifecycleBeaconUrl`** — optional URL; sends JSON **`sendBeacon`** for **`navigation`** (at `start()`), **`pageshow`**, **`pagehide`** (mirrors the v1.2 experiment’s page-lifecycle beacons). **`exp.page_lifecycle_beacon`** diagnostics report whether **`sendBeacon`** returned true.
+- **`attachDiagnosticsToHeartbeat`** — append a ring buffer to **`metadata.zpObserverDiagnostics`** on each heartbeat (cap with **`diagnosticsMax`**, default 50).
+
+```ts
+createObserver({
+  sessionId: mUPID,
+  transport: /* … */,
+  debug: true,
+  onDiagnostic: (ev) => {
+    console.table(ev);
+    // or POST to your lab sink
+  },
+  experimental: {
+    capturePageShow: true,
+    captureFreezeResume: true,
+    capturePerformanceEntries: true,
+    captureIframeResize: true,
+    captureIframeSrcChanges: true,
+    attachDiagnosticsToHeartbeat: true,
+    // pageLifecycleBeaconUrl: 'https://your-lab.example/beacon',
+  },
+});
+```
+
+---
+
+## Bring your own transport (npm ESM example)
+
+```ts
+import { createObserver, callbackTransport } from '@ianmenethil/zp-observer';
+
+const observer = createObserver({
+  sessionId: mUPID,
+  transport: callbackTransport({
+    onOpen: (ev) => {
+      void navigator.sendBeacon('/telemetry', JSON.stringify(ev));
+    },
+    onHeartbeat: async (ev) => {
+      const res = await fetch('/telemetry', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify(ev),
+      });
+      return { ok: res.ok, status: res.status };
+    },
+    onClose: (ev) => {
+      void navigator.sendBeacon('/telemetry', JSON.stringify(ev));
+    },
+  }),
+});
+
+observer.start();
+```
+
+---
+
+## Build output layout (`dist/`)
+
+| File | Purpose |
+|------|---------|
+| **`dist/zp-observer.mjs`** | **npm ESM** — `import` resolves here |
+| **`dist/zp-observer.cjs`** | **npm CJS** — `require()` resolves here |
+| **`dist/auto-patch.mjs`** | **npm ESM subpath** — `@ianmenethil/zp-observer/auto-patch` |
+| **`dist/auto-patch.cjs`** | **npm CJS subpath** |
+| **`dist/session.mjs`** | **npm ESM subpath** — `@ianmenethil/zp-observer/session` |
+| **`dist/session.cjs`** | **npm CJS subpath** |
+| **`dist/zp-observer.min.js`** | **CDN** — `<script src>` IIFE, global `ZPObserver` |
+| **`dist/zp-observer.js`** | **CDN debug** — unminified IIFE |
+| **`dist/zp-observer.min.obf.js`** | **CDN obfuscated** — minified + obfuscated |
+| **`dist/types/`** | **TypeScript** — `.d.ts` declarations |
+
+Do not point a raw `<script>` at `.mjs` / `.cjs` files (those use ESM `import`/`export` or CJS `require`).
+
+---
+
+## Close reasons
+
+Typed as **`CloseReason`** in the published `.d.ts`. Examples: `user.callback_invoked`, `user.modal_closed`, `system.idle_timeout`, `system.network_abandoned`, `page.pagehide`, `user.manual_close`.
+
+---
+
+## Publishing (`@ianmenethil/zp-observer`)
+
+1. `npm login` with an account that can publish the **`@ianmenethil`** scope.
+2. Bump **`version`** in `package.json` (or run `npm version patch|minor|major`).
+3. Run **`npm run publish:npm`** (same as **`npm publish --access public`**). **`prepack`** runs **`npm run check`** (lint + typecheck + test + knip + jscpd) and **`npm run build`** before the tarball is packed.
+
+**Internal CDN:** On the Anticide build machine, run `npm run build:local` to copy the IIFE bundles to `_ZP-CDN-server\public`.
+
+---
+
+## Privacy
+
+See [`PRIVACY.md`](PRIVACY.md).
+
+## License
+
+MIT © Zenith Payments

package/dist/auto-patch.cjs

@@ -0,0 +1,171 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/auto-patch.ts
+var auto_patch_exports = {};
+__export(auto_patch_exports, {
+  installZenPayAutoPatch: () => installZenPayAutoPatch
+});
+module.exports = __toCommonJS(auto_patch_exports);
+
+// src/integration/zenpay-auto-patch.ts
+function logDebug(enabled, ...args) {
+  if (enabled && typeof console !== "undefined") {
+    console.log("[ZPObserver/auto-patch]", ...args);
+  }
+}
+function resolveAndCallWindowPath(windowPath) {
+  const path = windowPath.replace(/^window\./, "").split(".");
+  let ref = window;
+  for (const part of path) {
+    if (ref && typeof ref === "object" && part in ref) {
+      ref = ref[part];
+    } else {
+      ref = void 0;
+      break;
+    }
+  }
+  if (typeof ref === "function") ref();
+}
+function wrapOptions(opts, shortcode, chainExisting) {
+  const next = { ...opts ?? {} };
+  const existing = next.onPluginClose;
+  if (chainExisting && existing != null) {
+    if (typeof window !== "undefined") {
+      const wrapperName = `__zpobs_chain_${Date.now().toString(36)}`;
+      window[wrapperName] = () => {
+        try {
+          if (typeof existing === "function") {
+            existing();
+          } else if (typeof existing === "string") {
+            resolveAndCallWindowPath(existing);
+          }
+        } catch {
+        }
+        try {
+          resolveAndCallWindowPath(shortcode);
+        } catch {
+        }
+      };
+      next.onPluginClose = `window.${wrapperName}`;
+      return next;
+    }
+  }
+  next.onPluginClose = shortcode;
+  return next;
+}
+function patchJQueryPlugin($, shortcode, chainExisting, debug, onInvoke) {
+  const original = $.fn.zpPayment;
+  if (typeof original !== "function" || original.__zpobsPatched) {
+    return false;
+  }
+  const patched = function(opts) {
+    onInvoke();
+    return original.call(this, wrapOptions(opts, shortcode, chainExisting));
+  };
+  patched.__zpobsPatched = true;
+  $.fn.zpPayment = patched;
+  logDebug(debug, "patched $.fn.zpPayment");
+  return true;
+}
+function patchZenPayGlobal(shortcode, chainExisting, debug, onInvoke) {
+  const w = window;
+  const original = w.ZenPay;
+  if (typeof original !== "function" || original.__zpobsPatched) {
+    return false;
+  }
+  const handler = {
+    construct(target, args) {
+      onInvoke();
+      const [first, ...rest] = args;
+      const wrapped = wrapOptions(first, shortcode, chainExisting);
+      return Reflect.construct(target, [wrapped, ...rest]);
+    },
+    apply(target, thisArg, args) {
+      onInvoke();
+      const [first, ...rest] = args;
+      const wrapped = wrapOptions(first, shortcode, chainExisting);
+      return Reflect.apply(target, thisArg, [
+        wrapped,
+        ...rest
+      ]);
+    }
+  };
+  const patched = new Proxy(original, handler);
+  patched.__zpobsPatched = true;
+  w.ZenPay = patched;
+  logDebug(debug, "patched window.ZenPay");
+  return true;
+}
+function installZenPayAutoPatch(observer, options = {}) {
+  if (typeof window === "undefined") {
+    return { uninstall() {
+    }, isPatched: () => false };
+  }
+  const pollIntervalMs = options.pollIntervalMs ?? 200;
+  const pollTimeoutMs = options.pollTimeoutMs ?? 3e4;
+  const chainExisting = options.chainExisting !== false;
+  const debug = options.debug === true;
+  let patched = false;
+  const shortcode = observer.shortcode;
+  const w = window;
+  const emitHppInit = () => {
+    observer.emit({
+      kind: "payment.hpp_init",
+      sessionId: observer.sessionId,
+      correlationId: observer.correlationId,
+      timestamp: Date.now(),
+      metadata: {}
+    });
+  };
+  const tryPatch = () => {
+    let didSomething = false;
+    const jq = w.jQuery ?? w.$;
+    if (jq && typeof jq === "object" && "fn" in jq) {
+      if (patchJQueryPlugin(jq, shortcode, chainExisting, debug, emitHppInit)) didSomething = true;
+    }
+    if ("ZenPay" in window) {
+      if (patchZenPayGlobal(shortcode, chainExisting, debug, emitHppInit)) didSomething = true;
+    }
+    if (didSomething) patched = true;
+    return didSomething;
+  };
+  tryPatch();
+  const startedAt = Date.now();
+  let pollTimer = setInterval(() => {
+    if (Date.now() - startedAt > pollTimeoutMs) {
+      if (pollTimer !== null) {
+        clearInterval(pollTimer);
+        pollTimer = null;
+      }
+      return;
+    }
+    tryPatch();
+  }, pollIntervalMs);
+  return {
+    uninstall() {
+      if (pollTimer !== null) {
+        clearInterval(pollTimer);
+        pollTimer = null;
+      }
+    },
+    isPatched: () => patched
+  };
+}
+//# sourceMappingURL=auto-patch.cjs.map

package/dist/auto-patch.cjs.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/auto-patch.ts", "../src/integration/zenpay-auto-patch.ts"],
+  "sourcesContent": ["/**\n * @ianmenethil/zp-observer/auto-patch \u2014 subpath entry\n *\n * Single export: installZenPayAutoPatch. Import via:\n *   import { installZenPayAutoPatch } from '@ianmenethil/zp-observer/auto-patch';\n */\n\nexport { installZenPayAutoPatch } from './integration/zenpay-auto-patch.js';\nexport type { AutoPatchHandle, AutoPatchOptions } from './integration/zenpay-auto-patch.js';\n", "/**\n * ZenPay plugin auto-patch (v6).\n *\n * One-line integration: detects the ZenPay plugin and rewrites its\n * `onPluginClose` at invocation time to use our shortcode. Emits\n * `payment.hpp_init` domain events when the plugin is invoked so the\n * observer's event stream captures HPP lifecycle.\n *\n * Supports:\n *   - v3: jQuery plugin `$.fn.zpPayment`\n *   - v5: global `window.ZenPay` (class or factory)\n *\n * If neither is present at install time, we set a short-lived polling\n * watch (plugins are typically loaded via <script> before first payment).\n */\n\nimport type { Observer } from '../core/types.js';\n\ninterface JQueryLike {\n\tfn: { zpPayment?: unknown };\n}\n\ninterface ZPOptions {\n\tonPluginClose?: unknown;\n\t[key: string]: unknown;\n}\n\ntype PluginFn = (this: unknown, opts?: ZPOptions) => unknown;\n\nexport interface AutoPatchHandle {\n\tuninstall(): void;\n\tisPatched(): boolean;\n}\n\nexport interface AutoPatchOptions {\n\tpollIntervalMs?: number;\n\tpollTimeoutMs?: number;\n\tchainExisting?: boolean;\n\tdebug?: boolean;\n}\n\nfunction logDebug(enabled: boolean, ...args: unknown[]): void {\n\tif (enabled && typeof console !== 'undefined') {\n\t\tconsole.log('[ZPObserver/auto-patch]', ...args);\n\t}\n}\n\nfunction resolveAndCallWindowPath(windowPath: string): void {\n\tconst path = windowPath.replace(/^window\\./, '').split('.');\n\tlet ref: unknown = window;\n\tfor (const part of path) {\n\t\tif (ref && typeof ref === 'object' && part in ref) {\n\t\t\tref = (ref as Record<string, unknown>)[part];\n\t\t} else {\n\t\t\tref = undefined;\n\t\t\tbreak;\n\t\t}\n\t}\n\tif (typeof ref === 'function') (ref as () => void)();\n}\n\nfunction wrapOptions(\n\topts: ZPOptions | undefined,\n\tshortcode: string,\n\tchainExisting: boolean,\n): ZPOptions {\n\tconst next: ZPOptions = { ...(opts ?? {}) };\n\tconst existing = next.onPluginClose;\n\n\tif (chainExisting && existing != null) {\n\t\tif (typeof window !== 'undefined') {\n\t\t\tconst wrapperName = `__zpobs_chain_${Date.now().toString(36)}`;\n\t\t\t(window as unknown as Record<string, unknown>)[wrapperName] = () => {\n\t\t\t\ttry {\n\t\t\t\t\tif (typeof existing === 'function') {\n\t\t\t\t\t\t(existing as () => void)();\n\t\t\t\t\t} else if (typeof existing === 'string') {\n\t\t\t\t\t\tresolveAndCallWindowPath(existing);\n\t\t\t\t\t}\n\t\t\t\t} catch {\n\t\t\t\t\t// ignore\n\t\t\t\t}\n\t\t\t\ttry {\n\t\t\t\t\tresolveAndCallWindowPath(shortcode);\n\t\t\t\t} catch {\n\t\t\t\t\t// ignore\n\t\t\t\t}\n\t\t\t};\n\t\t\tnext.onPluginClose = `window.${wrapperName}`;\n\t\t\treturn next;\n\t\t}\n\t}\n\n\tnext.onPluginClose = shortcode;\n\treturn next;\n}\n\nfunction patchJQueryPlugin(\n\t$: JQueryLike,\n\tshortcode: string,\n\tchainExisting: boolean,\n\tdebug: boolean,\n\tonInvoke: () => void,\n): boolean {\n\tconst original = $.fn.zpPayment as PluginFn | undefined;\n\tif (typeof original !== 'function' || (original as { __zpobsPatched?: boolean }).__zpobsPatched) {\n\t\treturn false;\n\t}\n\n\tconst patched: PluginFn & { __zpobsPatched?: boolean } = function (\n\t\tthis: unknown,\n\t\topts?: ZPOptions,\n\t) {\n\t\tonInvoke();\n\t\treturn original.call(this, wrapOptions(opts, shortcode, chainExisting));\n\t};\n\tpatched.__zpobsPatched = true;\n\t$.fn.zpPayment = patched;\n\n\tlogDebug(debug, 'patched $.fn.zpPayment');\n\treturn true;\n}\n\nfunction patchZenPayGlobal(\n\tshortcode: string,\n\tchainExisting: boolean,\n\tdebug: boolean,\n\tonInvoke: () => void,\n): boolean {\n\tconst w = window as unknown as {\n\t\tZenPay?: (new (opts?: ZPOptions) => unknown) | ((opts?: ZPOptions) => unknown);\n\t};\n\tconst original = w.ZenPay;\n\tif (typeof original !== 'function' || (original as { __zpobsPatched?: boolean }).__zpobsPatched) {\n\t\treturn false;\n\t}\n\n\tconst handler: ProxyHandler<typeof original> = {\n\t\tconstruct(target, args) {\n\t\t\tonInvoke();\n\t\t\tconst [first, ...rest] = args as [ZPOptions | undefined, ...unknown[]];\n\t\t\tconst wrapped = wrapOptions(first, shortcode, chainExisting);\n\t\t\treturn Reflect.construct(target, [wrapped, ...rest]) as object;\n\t\t},\n\t\tapply(target, thisArg, args) {\n\t\t\tonInvoke();\n\t\t\tconst [first, ...rest] = args as [ZPOptions | undefined, ...unknown[]];\n\t\t\tconst wrapped = wrapOptions(first, shortcode, chainExisting);\n\t\t\treturn Reflect.apply(target as (...a: unknown[]) => unknown, thisArg, [\n\t\t\t\twrapped,\n\t\t\t\t...rest,\n\t\t\t]);\n\t\t},\n\t};\n\n\tconst patched = new Proxy(original, handler) as typeof original & {\n\t\t__zpobsPatched?: boolean;\n\t};\n\tpatched.__zpobsPatched = true;\n\tw.ZenPay = patched;\n\n\tlogDebug(debug, 'patched window.ZenPay');\n\treturn true;\n}\n\nexport function installZenPayAutoPatch(\n\tobserver: Pick<Observer, 'sessionId' | 'correlationId' | 'shortcode' | 'emit'>,\n\toptions: AutoPatchOptions = {},\n): AutoPatchHandle {\n\tif (typeof window === 'undefined') {\n\t\treturn { uninstall() {}, isPatched: () => false };\n\t}\n\n\tconst pollIntervalMs = options.pollIntervalMs ?? 200;\n\tconst pollTimeoutMs = options.pollTimeoutMs ?? 30_000;\n\tconst chainExisting = options.chainExisting !== false;\n\tconst debug = options.debug === true;\n\n\tlet patched = false;\n\tconst shortcode = observer.shortcode;\n\tconst w = window as unknown as { jQuery?: JQueryLike; $?: JQueryLike };\n\n\tconst emitHppInit = () => {\n\t\tobserver.emit({\n\t\t\tkind: 'payment.hpp_init',\n\t\t\tsessionId: observer.sessionId,\n\t\t\tcorrelationId: observer.correlationId,\n\t\t\ttimestamp: Date.now(),\n\t\t\tmetadata: {},\n\t\t});\n\t};\n\n\tconst tryPatch = (): boolean => {\n\t\tlet didSomething = false;\n\n\t\tconst jq = w.jQuery ?? w.$;\n\t\tif (jq && typeof jq === 'object' && 'fn' in jq) {\n\t\t\tif (patchJQueryPlugin(jq, shortcode, chainExisting, debug, emitHppInit)) didSomething = true;\n\t\t}\n\n\t\tif ('ZenPay' in window) {\n\t\t\tif (patchZenPayGlobal(shortcode, chainExisting, debug, emitHppInit)) didSomething = true;\n\t\t}\n\n\t\tif (didSomething) patched = true;\n\t\treturn didSomething;\n\t};\n\n\ttryPatch();\n\n\tconst startedAt = Date.now();\n\tlet pollTimer: ReturnType<typeof setInterval> | null = setInterval(() => {\n\t\tif (Date.now() - startedAt > pollTimeoutMs) {\n\t\t\tif (pollTimer !== null) {\n\t\t\t\tclearInterval(pollTimer);\n\t\t\t\tpollTimer = null;\n\t\t\t}\n\t\t\treturn;\n\t\t}\n\t\ttryPatch();\n\t}, pollIntervalMs);\n\n\treturn {\n\t\tuninstall() {\n\t\t\tif (pollTimer !== null) {\n\t\t\t\tclearInterval(pollTimer);\n\t\t\t\tpollTimer = null;\n\t\t\t}\n\t\t},\n\t\tisPatched: () => patched,\n\t};\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACyCA,SAAS,SAAS,YAAqB,MAAuB;AAC7D,MAAI,WAAW,OAAO,YAAY,aAAa;AAC9C,YAAQ,IAAI,2BAA2B,GAAG,IAAI;AAAA,EAC/C;AACD;AAEA,SAAS,yBAAyB,YAA0B;AAC3D,QAAM,OAAO,WAAW,QAAQ,aAAa,EAAE,EAAE,MAAM,GAAG;AAC1D,MAAI,MAAe;AACnB,aAAW,QAAQ,MAAM;AACxB,QAAI,OAAO,OAAO,QAAQ,YAAY,QAAQ,KAAK;AAClD,YAAO,IAAgC,IAAI;AAAA,IAC5C,OAAO;AACN,YAAM;AACN;AAAA,IACD;AAAA,EACD;AACA,MAAI,OAAO,QAAQ,WAAY,CAAC,IAAmB;AACpD;AAEA,SAAS,YACR,MACA,WACA,eACY;AACZ,QAAM,OAAkB,EAAE,GAAI,QAAQ,CAAC,EAAG;AAC1C,QAAM,WAAW,KAAK;AAEtB,MAAI,iBAAiB,YAAY,MAAM;AACtC,QAAI,OAAO,WAAW,aAAa;AAClC,YAAM,cAAc,iBAAiB,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC;AAC5D,MAAC,OAA8C,WAAW,IAAI,MAAM;AACnE,YAAI;AACH,cAAI,OAAO,aAAa,YAAY;AACnC,YAAC,SAAwB;AAAA,UAC1B,WAAW,OAAO,aAAa,UAAU;AACxC,qCAAyB,QAAQ;AAAA,UAClC;AAAA,QACD,QAAQ;AAAA,QAER;AACA,YAAI;AACH,mCAAyB,SAAS;AAAA,QACnC,QAAQ;AAAA,QAER;AAAA,MACD;AACA,WAAK,gBAAgB,UAAU,WAAW;AAC1C,aAAO;AAAA,IACR;AAAA,EACD;AAEA,OAAK,gBAAgB;AACrB,SAAO;AACR;AAEA,SAAS,kBACR,GACA,WACA,eACA,OACA,UACU;AACV,QAAM,WAAW,EAAE,GAAG;AACtB,MAAI,OAAO,aAAa,cAAe,SAA0C,gBAAgB;AAChG,WAAO;AAAA,EACR;AAEA,QAAM,UAAmD,SAExD,MACC;AACD,aAAS;AACT,WAAO,SAAS,KAAK,MAAM,YAAY,MAAM,WAAW,aAAa,CAAC;AAAA,EACvE;AACA,UAAQ,iBAAiB;AACzB,IAAE,GAAG,YAAY;AAEjB,WAAS,OAAO,wBAAwB;AACxC,SAAO;AACR;AAEA,SAAS,kBACR,WACA,eACA,OACA,UACU;AACV,QAAM,IAAI;AAGV,QAAM,WAAW,EAAE;AACnB,MAAI,OAAO,aAAa,cAAe,SAA0C,gBAAgB;AAChG,WAAO;AAAA,EACR;AAEA,QAAM,UAAyC;AAAA,IAC9C,UAAU,QAAQ,MAAM;AACvB,eAAS;AACT,YAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AACzB,YAAM,UAAU,YAAY,OAAO,WAAW,aAAa;AAC3D,aAAO,QAAQ,UAAU,QAAQ,CAAC,SAAS,GAAG,IAAI,CAAC;AAAA,IACpD;AAAA,IACA,MAAM,QAAQ,SAAS,MAAM;AAC5B,eAAS;AACT,YAAM,CAAC,OAAO,GAAG,IAAI,IAAI;AACzB,YAAM,UAAU,YAAY,OAAO,WAAW,aAAa;AAC3D,aAAO,QAAQ,MAAM,QAAwC,SAAS;AAAA,QACrE;AAAA,QACA,GAAG;AAAA,MACJ,CAAC;AAAA,IACF;AAAA,EACD;AAEA,QAAM,UAAU,IAAI,MAAM,UAAU,OAAO;AAG3C,UAAQ,iBAAiB;AACzB,IAAE,SAAS;AAEX,WAAS,OAAO,uBAAuB;AACvC,SAAO;AACR;AAEO,SAAS,uBACf,UACA,UAA4B,CAAC,GACX;AAClB,MAAI,OAAO,WAAW,aAAa;AAClC,WAAO,EAAE,YAAY;AAAA,IAAC,GAAG,WAAW,MAAM,MAAM;AAAA,EACjD;AAEA,QAAM,iBAAiB,QAAQ,kBAAkB;AACjD,QAAM,gBAAgB,QAAQ,iBAAiB;AAC/C,QAAM,gBAAgB,QAAQ,kBAAkB;AAChD,QAAM,QAAQ,QAAQ,UAAU;AAEhC,MAAI,UAAU;AACd,QAAM,YAAY,SAAS;AAC3B,QAAM,IAAI;AAEV,QAAM,cAAc,MAAM;AACzB,aAAS,KAAK;AAAA,MACb,MAAM;AAAA,MACN,WAAW,SAAS;AAAA,MACpB,eAAe,SAAS;AAAA,MACxB,WAAW,KAAK,IAAI;AAAA,MACpB,UAAU,CAAC;AAAA,IACZ,CAAC;AAAA,EACF;AAEA,QAAM,WAAW,MAAe;AAC/B,QAAI,eAAe;AAEnB,UAAM,KAAK,EAAE,UAAU,EAAE;AACzB,QAAI,MAAM,OAAO,OAAO,YAAY,QAAQ,IAAI;AAC/C,UAAI,kBAAkB,IAAI,WAAW,eAAe,OAAO,WAAW,EAAG,gBAAe;AAAA,IACzF;AAEA,QAAI,YAAY,QAAQ;AACvB,UAAI,kBAAkB,WAAW,eAAe,OAAO,WAAW,EAAG,gBAAe;AAAA,IACrF;AAEA,QAAI,aAAc,WAAU;AAC5B,WAAO;AAAA,EACR;AAEA,WAAS;AAET,QAAM,YAAY,KAAK,IAAI;AAC3B,MAAI,YAAmD,YAAY,MAAM;AACxE,QAAI,KAAK,IAAI,IAAI,YAAY,eAAe;AAC3C,UAAI,cAAc,MAAM;AACvB,sBAAc,SAAS;AACvB,oBAAY;AAAA,MACb;AACA;AAAA,IACD;AACA,aAAS;AAAA,EACV,GAAG,cAAc;AAEjB,SAAO;AAAA,IACN,YAAY;AACX,UAAI,cAAc,MAAM;AACvB,sBAAc,SAAS;AACvB,oBAAY;AAAA,MACb;AAAA,IACD;AAAA,IACA,WAAW,MAAM;AAAA,EAClB;AACD;",
+  "names": []
+}