@spare-technologies/spare-link 0.1.0-beta.1 → 1.0.0

package/lib/typescript/commonjs/internal/secure-store-pending-session-store.d.ts

@@ -1,6 +1,7 @@
 /**
- * Production `PendingSessionStore` backed by expo-secure-store. Persists a
- * single in-flight payment session so the SDK can recover after cold start.
+ * Production `PendingSessionStore` backed by expo-secure-store. Persists the
+ * reference of a single in-flight payment so a cold start knows which payment
+ * was under way.
  */
 import type { PendingSessionRecord } from '../core/models';
 import type { PendingSessionStore } from '../core/services/pending-session-store';

package/lib/typescript/commonjs/internal/secure-store-pending-session-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"secure-store-pending-session-store.d.ts","sourceRoot":"","sources":["../../../../src/internal/secure-store-pending-session-store.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAclF,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAcD,qBAAa,8BAA+B,YAAW,mBAAmB;IACxE,OAAO,CAAC,WAAW,CAA2C;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D;;;OAGG;IACH,OAAO,CAAC,UAAU,CAAoC;IAEtD;;;;OAIG;gBACS,YAAY,GAAE,MAAM,OAAO,CAAC,iBAAiB,CAAiB;IAI1E,OAAO,KAAK,MAAM,GAGjB;IAED,kEAAkE;IAClE,OAAO,CAAC,YAAY;IAQpB,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkB3C,IAAI,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IA6BlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAavB"}
+{"version":3,"file":"secure-store-pending-session-store.d.ts","sourceRoot":"","sources":["../../../../src/internal/secure-store-pending-session-store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAwBlF,MAAM,WAAW,iBAAiB;IAChC,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAClD,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7C;AAcD,qBAAa,8BAA+B,YAAW,mBAAmB;IACxE,OAAO,CAAC,WAAW,CAA2C;IAC9D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAmC;IAC1D;;;OAGG;IACH,OAAO,CAAC,UAAU,CAAoC;IAEtD;;;;OAIG;gBACS,YAAY,GAAE,MAAM,OAAO,CAAC,iBAAiB,CAAiB;IAI1E,OAAO,KAAK,MAAM,GAGjB;IAED,kEAAkE;IAClE,OAAO,CAAC,YAAY;IAQpB,IAAI,CAAC,MAAM,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C,IAAI,IAAI,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAYlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CASvB"}

package/lib/typescript/commonjs/internal/url-parts.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Minimal URL parsing that does not go through the global `URL`.
+ *
+ * React Native ships a stub: every component accessor — `protocol`, `hostname`,
+ * `port`, `origin`, `search`, `pathname` — throws "not implemented", and
+ * `searchParams` returns a fresh empty instance that never reads the URL it was
+ * constructed from (`react-native/Libraries/Blob/URL.js`, installed globally by
+ * `setUpXHR.js`). Code written against the standard therefore behaves correctly
+ * under Jest, which runs on Node's real `URL`, and silently reads nothing on a
+ * device.
+ *
+ * The SDK parses what it needs itself rather than asking the host app to install
+ * a polyfill whose presence it cannot verify — an origin check that quietly
+ * stops comparing hosts is worse than one that was never written.
+ */
+/** The parts of a URL this SDK compares origins on. */
+export interface UrlParts {
+    /** Lower-cased, without the trailing colon. */
+    scheme: string;
+    /** Lower-cased host, without userinfo. IPv6 hosts keep their brackets. */
+    host: string;
+    /** The explicit port, or the scheme's default where it has one. */
+    port: number | undefined;
+}
+/**
+ * Splits [url] into the parts an origin comparison needs, or null if it has no
+ * authority to compare.
+ */
+export declare function parseUrlParts(url: string): UrlParts | null;
+/**
+ * Whether two URLs share a scheme, host and port.
+ *
+ * Both must carry an authority, so a relative path never matches an absolute
+ * URL: `/link/payment/x` names no origin and must not be read as naming this one.
+ */
+export declare function isSameOrigin(a: string, b: string): boolean;
+/**
+ * Reads the query string of [url] into a plain object.
+ *
+ * The first occurrence of a repeated key wins, matching `URLSearchParams.get`.
+ * A value the SDK cannot decode is kept in its raw form rather than dropping the
+ * parameter: callers compare against known literals, and a mangled value should
+ * fail that comparison rather than read as absent.
+ */
+export declare function parseQueryParams(url: string): Record<string, string>;
+//# sourceMappingURL=url-parts.d.ts.map

package/lib/typescript/commonjs/internal/url-parts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"url-parts.d.ts","sourceRoot":"","sources":["../../../../src/internal/url-parts.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,uDAAuD;AACvD,MAAM,WAAW,QAAQ;IACvB,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAOD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,QAAQ,GAAG,IAAI,CA0B1D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAK1D;AAED;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAqBpE"}

package/lib/typescript/commonjs/public/index.d.ts

@@ -1,11 +1,9 @@
-export { type PaymentEnvironment, type SpareApiTenant, type SpareLinkConfig, type SpareLinkResumeConfig, defaultBaseUrlFor, tenantCountryCode, resolvedBaseUrl, resolvedResumeBaseUrl, assertValidConfig, } from './spare-link-config';
-export { type SpareLinkEvent, type SpareLinkEventType, type SpareLinkInitialized, type SpareLinkSessionLoaded, type SpareLinkConsentStarted, type SpareLinkRedirectToBank, type SpareLinkBankCallbackReceived, type SpareLinkSucceeded, type SpareLinkFailed, type SpareLinkCancelled, type SpareLinkAbandoned, SPARE_LINK_EVENT_TYPES, isSpareLinkEvent, SpareLinkEvents, } from './spare-link-event';
+export { type PaymentEnvironment, type SpareApiTenant, type SpareLinkConfig, defaultBaseUrlFor, tenantCountryCode, resolvedBaseUrl, assertValidConfig, } from './spare-link-config';
+export { type SpareLinkEvent, type SpareLinkEventType, type SpareLinkInitialized, type SpareLinkPageReady, type SpareLinkRedirectToBank, type SpareLinkBankCallbackReceived, type SpareLinkSucceeded, type SpareLinkFailed, type SpareLinkCancelled, type SpareLinkAbandoned, SPARE_LINK_EVENT_TYPES, isSpareLinkEvent, SpareLinkEvents, } from './spare-link-event';
 export { type PaymentStatus, type PaymentResult, type PaymentSuccess, type PaymentCancelled, type PaymentFailed, type PaymentAbandoned, paymentSuccess, paymentCancelled, paymentFailed, paymentAbandoned, } from './payment-result';
-export type { SpareLinkCallbacks, SpareLinkSuccessCallback, SpareLinkExitCallback, SpareLinkEventCallback, } from './spare-link-callbacks';
-export type { RecoveryResult, NoRecoveryReason, NoRecoveryNeeded, SessionRecovered, RecoveryAwaitingUser, } from './recovery-result';
-export { isSessionRecovered, isNoRecoveryNeeded, isRecoveryAwaitingUser, } from './recovery-result';
+export type { RecoveryResult, NoRecoveryReason, NoRecoveryNeeded, SessionRecovered, } from './recovery-result';
+export { isSessionRecovered, isNoRecoveryNeeded } from './recovery-result';
 export { SpareLinkSession } from './spare-link-session';
 export { SpareLink, type SpareLinkOptions } from './spare-link-instance';
-export { kMaxRecoveryAttempts, DEFAULT_REQUEST_TIMEOUT_MS, DEFAULT_AWAITING_CALLBACK_TIMEOUT_MS, DEFAULT_AWAITING_CALLBACK_POLL_MS, } from './constants';
 export { configureSpareLinkLogging, createLogger, type SpareLinkLogLevel, type SpareLinkLogRecord, type SpareLinkLogSink, type SpareLinkLogger, } from '../internal/logger';
 //# sourceMappingURL=index.d.ts.map

package/lib/typescript/commonjs/public/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/public/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,qBAAqB,EAC1B,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,qBAAqB,EACrB,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,sBAAsB,EAC3B,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,kBAAkB,EAClB,wBAAwB,EACxB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAEhC,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,oBAAoB,GACrB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzE,OAAO,EACL,oBAAoB,EACpB,0BAA0B,EAC1B,oCAAoC,EACpC,iCAAiC,GAClC,MAAM,aAAa,CAAC;AAErB,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/public/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EACf,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,KAAK,cAAc,EACnB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,KAAK,kBAAkB,EACvB,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EACvB,sBAAsB,EACtB,gBAAgB,EAChB,eAAe,GAChB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,aAAa,EAClB,KAAK,aAAa,EAClB,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,gBAAgB,GACjB,MAAM,kBAAkB,CAAC;AAE1B,YAAY,EACV,cAAc,EACd,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAE3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,KAAK,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAEzE,OAAO,EACL,yBAAyB,EACzB,YAAY,EACZ,KAAK,iBAAiB,EACtB,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,oBAAoB,CAAC"}

package/lib/typescript/commonjs/public/payment-result.d.ts

@@ -1,26 +1,59 @@
 /**
  * Terminal outcome of a payment flow — narrow on the `status` field.
+ *
+ * Every result here is read off a deep link, which is interceptable by design
+ * and names no bank identifiers. It reports what happened rather than attesting
+ * to it: confirm with your backend via `GET /payment-requests/{reference}`
+ * before acting on one.
  */
 export type PaymentStatus = 'success' | 'cancelled' | 'failed' | 'abandoned';
 interface PaymentResultBase {
     status: PaymentStatus;
-    /** The `link_token` JWS that identifies this payment flow. Mirrors Flutter's `linkToken`. */
-    linkToken: string;
-    bankId?: string;
-    linkSessionId?: string;
+    /** The payment request this flow was paying, and what your backend reads the
+     *  authoritative result by. */
+    reference: string;
+    /** The merchant's own reference for the attempt, when the return named one. */
+    merchantRef?: string;
+    /**
+     * Spare's identifier for the payment, present on a reported success.
+     *
+     * Distinct from `reference`, which names the request. This is what an order
+     * records.
+     */
+    paymentId?: string;
+    /**
+     * Spare's identifier for a mandate, present when the flow created one.
+     *
+     * A return names a payment or a mandate, never both. Read whichever is set
+     * rather than assuming which the flow produced.
+     */
+    mandateId?: string;
+    /**
+     * The return's signature: an ES256 JWS whose payload is the return URL, every
+     * parameter included.
+     *
+     * The only part of the return that cannot be forged. Verify it against Spare's
+     * public key on your backend before acting on the outcome — the SDK holds no
+     * keys and passes it through unchecked.
+     */
+    signature?: string;
+    /**
+     * The machine-readable reason a payment did not complete, e.g. `user_cancelled`.
+     *
+     * Alongside `errorCode`, which is often generic where this is not.
+     */
+    errorReason?: string;
     message?: string;
     errorCode?: string;
     resolvedAtMs?: number;
 }
-/** Payment completed at the bank. `exchangeCode` may be null when recovered
- * via status polling (the bank delivered the code straight to the merchant
- * backend, bypassing the SDK). */
+/**
+ * The return reported a completed payment.
+ *
+ * Treat this as a prompt to confirm with your backend, not as settlement.
+ */
 export interface PaymentSuccess extends PaymentResultBase {
     status: 'success';
-    exchangeCode?: string;
-    merchantRef?: string;
-    /** API payment type string (e.g. `FixedPeriodicSchedule`), when available. Mirrors Flutter's `paymentType`. */
-    paymentType?: string;
 }
 export interface PaymentCancelled extends PaymentResultBase {
     status: 'cancelled';
@@ -30,7 +63,12 @@ export interface PaymentFailed extends PaymentResultBase {
     status: 'failed';
     errorCode: string;
 }
-/** Flow abandoned mid-flight (app killed, host removed the SDK navigator). */
+/**
+ * The payer left before the flow resolved either way.
+ *
+ * A payment already at the bank may still complete after this, so it is not a
+ * failure — only your backend knows how it ended.
+ */
 export interface PaymentAbandoned extends PaymentResultBase {
     status: 'abandoned';
 }

package/lib/typescript/commonjs/public/payment-result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"payment-result.d.ts","sourceRoot":"","sources":["../../../../src/public/payment-result.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE7E,UAAU,iBAAiB;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB,6FAA6F;IAC7F,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;kCAEkC;AAClC,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,MAAM,EAAE,SAAS,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+GAA+G;IAC/G,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,gBAAgB,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAIjG,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,cAAc,CAEnF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,gBAAgB,CAEzF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,aAAa,CAEhF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,gBAAgB,CAEzF"}
+{"version":3,"file":"payment-result.d.ts","sourceRoot":"","sources":["../../../../src/public/payment-result.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE7E,UAAU,iBAAiB;IACzB,MAAM,EAAE,aAAa,CAAC;IACtB;mCAC+B;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;GAIG;AACH,MAAM,WAAW,cAAe,SAAQ,iBAAiB;IACvD,MAAM,EAAE,SAAS,CAAC;CACnB;AAED,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,iFAAiF;AACjF,MAAM,WAAW,aAAc,SAAQ,iBAAiB;IACtD,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAiB,SAAQ,iBAAiB;IACzD,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,gBAAgB,GAAG,aAAa,GAAG,gBAAgB,CAAC;AAIjG,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,cAAc,CAEnF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,gBAAgB,CAEzF;AAED,wBAAgB,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,CAAC,GAAG,aAAa,CAEhF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,QAAQ,CAAC,GAAG,gBAAgB,CAEzF"}

package/lib/typescript/commonjs/public/recovery-result.d.ts

@@ -1,36 +1,27 @@
 import type { PaymentResult } from './payment-result';
 /**
  * Why {@link SpareLink.resumeIfNeeded} did not recover a terminal session.
- * Mirrors Flutter's `NoRecoveryReason`.
- */
-export type NoRecoveryReason = 'noPendingSession' | 'flowAlreadyActive' | 'persistenceUnavailable';
-/**
- * Outcome of {@link SpareLink.resumeIfNeeded}.
  *
- * Discriminated union aligned with Flutter's sealed `RecoveryResult`.
+ * `outcomeUnknown` is the one that carries weight: a payment was pending and no
+ * return arrived, so **it may have completed**. The SDK holds no credentials and
+ * has nothing to ask with — the reference is handed back for your backend to
+ * resolve.
  */
-export type RecoveryResult = NoRecoveryNeeded | SessionRecovered | RecoveryAwaitingUser;
-/** No pending session was recovered. */
+export type NoRecoveryReason = 'noPendingSession' | 'flowAlreadyActive' | 'persistenceUnavailable' | 'outcomeUnknown';
+/** Outcome of {@link SpareLink.resumeIfNeeded}. */
+export type RecoveryResult = NoRecoveryNeeded | SessionRecovered;
+/** No pending payment was resolved to a terminal outcome. */
 export interface NoRecoveryNeeded {
     readonly kind: 'none';
     readonly reason: NoRecoveryReason;
+    /** The pending payment's reference, when `reason` is `outcomeUnknown`. */
+    readonly reference?: string;
 }
-/** A pending session was recovered to a terminal {@link PaymentResult}. */
+/** A pending payment was resolved to a terminal {@link PaymentResult}. */
 export interface SessionRecovered {
     readonly kind: 'recovered';
     readonly result: PaymentResult;
 }
-/**
- * A pending session is non-terminal and the SDK opened its recovery UI —
- * the integrator should treat this as in-progress, not "nothing happened".
- * The terminal outcome arrives later via `SpareLink.events` /
- * `spareLink.emitTerminal`, not as a second `resumeIfNeeded` resolution.
- */
-export interface RecoveryAwaitingUser {
-    readonly kind: 'awaitingUser';
-    readonly linkToken: string;
-}
 export declare function isSessionRecovered(r: RecoveryResult): r is SessionRecovered;
 export declare function isNoRecoveryNeeded(r: RecoveryResult): r is NoRecoveryNeeded;
-export declare function isRecoveryAwaitingUser(r: RecoveryResult): r is RecoveryAwaitingUser;
 //# sourceMappingURL=recovery-result.d.ts.map

package/lib/typescript/commonjs/public/recovery-result.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery-result.d.ts","sourceRoot":"","sources":["../../../../src/public/recovery-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,GAAG,mBAAmB,GAAG,wBAAwB,CAAC;AAEnG;;;;GAIG;AACH,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;AAExF,wCAAwC;AACxC,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;CACnC;AAED,2EAA2E;AAC3E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,gBAAgB,CAE3E;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,gBAAgB,CAE3E;AAED,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,oBAAoB,CAEnF"}
+{"version":3,"file":"recovery-result.d.ts","sourceRoot":"","sources":["../../../../src/public/recovery-result.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;;;GAOG;AACH,MAAM,MAAM,gBAAgB,GACxB,kBAAkB,GAClB,mBAAmB,GACnB,wBAAwB,GACxB,gBAAgB,CAAC;AAErB,mDAAmD;AACnD,MAAM,MAAM,cAAc,GAAG,gBAAgB,GAAG,gBAAgB,CAAC;AAEjE,6DAA6D;AAC7D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,gBAAgB,CAE3E;AAED,wBAAgB,kBAAkB,CAAC,CAAC,EAAE,cAAc,GAAG,CAAC,IAAI,gBAAgB,CAE3E"}

package/lib/typescript/commonjs/public/spare-link-config.d.ts

@@ -1,49 +1,31 @@
 /**
- * Deployment environment for the Spare Link API.
- *
- * Each value maps to a default base URL
- * the SDK will hit unless `baseUrl` is overridden in {@link SpareLinkConfig}.
+ * Deployment environment for the Spare Link API, which is also where the hosted
+ * payment page is served from.
  */
-export type PaymentEnvironment = 'sandbox' | 'production';
+export type PaymentEnvironment = 'local' | 'dev' | 'sandbox' | 'production';
 export declare function defaultBaseUrlFor(env: PaymentEnvironment): string;
 /** Spare API tenant — one country per tenant. */
 export type SpareApiTenant = 'ksa' | 'uae' | 'bah';
 export declare function tenantCountryCode(t: SpareApiTenant): string;
-/** Configuration to start a Spare Link payment flow. */
+/** Configuration for a Spare Link instance. */
 export interface SpareLinkConfig {
-    /** One-time link token minted by the merchant backend via POST /link/token/payment. */
-    linkToken: string;
-    /** Target environment (sandbox vs production). */
+    /** Target environment. Selects the host the hosted page is loaded from. */
     environment: PaymentEnvironment;
-    /** Tenant (country). */
-    tenant: SpareApiTenant;
     /**
-     * Override the base URL. Set only for local dev (e.g. `http://localhost:4000`)
-     * — production should rely on the environment-derived default.
+     * Tenant (country). The hosted flow currently serves UAE only; the value is
+     * kept for that selection and for the tenants that follow.
      */
+    tenant: SpareApiTenant;
+    /** Override the host. Set for a physical device pointed at a local API. */
     baseUrl?: string;
-    /**
-     * Inject a custom fetch implementation for advanced cases (cert pinning,
-     * request logging). Defaults to `globalThis.fetch`.
-     */
-    fetch?: typeof fetch;
-    /** Per-request timeout in milliseconds. Defaults to 15000. */
-    requestTimeoutMs?: number;
 }
 /** Resolved base URL: explicit `baseUrl` if provided, else the environment default. */
 export declare function resolvedBaseUrl(config: SpareLinkConfig): string;
 /**
- * Recovery config — like {@link SpareLinkConfig} but without `linkToken`
- * (read from the persisted record).
+ * Throws if a config cannot be honoured.
+ *
+ * Called from {@link SpareLink}'s constructor, so a bad value fails where it was
+ * written rather than reaching the webview as a URL nobody meant.
  */
-export interface SpareLinkResumeConfig {
-    environment: PaymentEnvironment;
-    tenant: SpareApiTenant;
-    baseUrl?: string;
-    fetch?: typeof fetch;
-    requestTimeoutMs?: number;
-}
-export declare function resolvedResumeBaseUrl(config: SpareLinkResumeConfig): string;
-/** Throws if a SpareLinkConfig is structurally invalid. */
 export declare function assertValidConfig(config: SpareLinkConfig): void;
 //# sourceMappingURL=spare-link-config.d.ts.map

package/lib/typescript/commonjs/public/spare-link-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spare-link-config.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-config.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,YAAY,CAAC;AAO1D,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAEjE;AAED,iDAAiD;AACjD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAQnD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAE3D;AAED,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,uFAAuF;IACvF,SAAS,EAAE,MAAM,CAAC;IAElB,kDAAkD;IAClD,WAAW,EAAE,kBAAkB,CAAC;IAEhC,wBAAwB;IACxB,MAAM,EAAE,cAAc,CAAC;IAEvB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB;;;OAGG;IACH,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAErB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAE/D;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,WAAW,EAAE,kBAAkB,CAAC;IAChC,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,qBAAqB,GAAG,MAAM,CAE3E;AAED,2DAA2D;AAC3D,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAO/D"}
+{"version":3,"file":"spare-link-config.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-config.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG,OAAO,GAAG,KAAK,GAAG,SAAS,GAAG,YAAY,CAAC;AA+B5E,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,kBAAkB,GAAG,MAAM,CAEjE;AAED,iDAAiD;AACjD,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,KAAK,GAAG,KAAK,CAAC;AAQnD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,cAAc,GAAG,MAAM,CAE3D;AAED,+CAA+C;AAC/C,MAAM,WAAW,eAAe;IAC9B,2EAA2E;IAC3E,WAAW,EAAE,kBAAkB,CAAC;IAEhC;;;OAGG;IACH,MAAM,EAAE,cAAc,CAAC;IAEvB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,MAAM,EAAE,eAAe,GAAG,MAAM,CAE/D;AAWD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI,CAU/D"}

package/lib/typescript/commonjs/public/spare-link-event.d.ts

@@ -2,55 +2,54 @@ import type { PaymentResult } from './payment-result';
 /**
  * Lifecycle events emitted on {@link SpareLink.events}.
  *
- * This is a discriminated union (TypeScript's equivalent to Dart sealed classes).
- * Use a switch on the `type` field for exhaustive handling:
+ * Analytics only — never required to drive the flow. This is a discriminated
+ * union (TypeScript's equivalent to Dart sealed classes); switch on `type` for
+ * exhaustive handling:
  *
  * ```ts
  * spareLink.events.subscribe((event) => {
  *   switch (event.type) {
  *     case 'initialized':
- *       console.log('Started flow for', event.linkToken);
+ *       console.log('Started flow for', event.reference);
  *       break;
- *     case 'sessionLoaded':
- *       console.log('Session loaded', event.linkSessionId);
+ *     case 'pageReady':
+ *       console.log('Payer can act on the page');
  *       break;
  *     case 'succeeded':
- *       console.log('Payment succeeded', event.result.exchangeCode);
+ *       console.log('Reported success for', event.result.reference);
  *       break;
  *     // ...
  *   }
  * });
  * ```
  */
-export type SpareLinkEvent = SpareLinkInitialized | SpareLinkSessionLoaded | SpareLinkConsentStarted | SpareLinkRedirectToBank | SpareLinkBankCallbackReceived | SpareLinkSucceeded | SpareLinkFailed | SpareLinkCancelled | SpareLinkAbandoned;
+export type SpareLinkEvent = SpareLinkInitialized | SpareLinkPageReady | SpareLinkRedirectToBank | SpareLinkBankCallbackReceived | SpareLinkSucceeded | SpareLinkFailed | SpareLinkCancelled | SpareLinkAbandoned;
 /** The SDK has started a payment flow. */
 export interface SpareLinkInitialized {
     readonly type: 'initialized';
-    readonly linkToken: string;
+    readonly reference: string;
 }
-/** The payment session was loaded from the server. */
-export interface SpareLinkSessionLoaded {
-    readonly type: 'sessionLoaded';
-    readonly linkToken: string;
-    /** Server-assigned link session ID when available from the API. */
-    readonly linkSessionId?: string;
-}
-/** The user confirmed consent and a consent request was submitted. */
-export interface SpareLinkConsentStarted {
-    readonly type: 'consentStarted';
-    readonly linkToken: string;
+/**
+ * The hosted page is interactive and the payer has something to act on.
+ *
+ * The steps after this — choosing a bank, the payee check, reading the consent —
+ * happen inside the page, which does not report them.
+ */
+export interface SpareLinkPageReady {
+    readonly type: 'pageReady';
+    readonly reference: string;
 }
-/** The user is being redirected to their bank's authorization page. */
+/** The payer is being handed to their bank, outside the WebView. */
 export interface SpareLinkRedirectToBank {
     readonly type: 'redirectToBank';
-    readonly linkToken: string;
+    readonly reference: string;
 }
 /** The bank has redirected back with a callback URI. */
 export interface SpareLinkBankCallbackReceived {
     readonly type: 'bankCallbackReceived';
-    readonly linkToken: string;
+    readonly reference: string;
 }
-/** The payment completed successfully and the flow is about to resolve. */
+/** The return reported a completed payment and the flow is about to resolve. */
 export interface SpareLinkSucceeded {
     readonly type: 'succeeded';
     readonly result: PaymentResult;
@@ -60,28 +59,27 @@ export interface SpareLinkFailed {
     readonly type: 'failed';
     readonly result: PaymentResult;
 }
-/** The user cancelled the payment and the flow is about to resolve. */
+/** The payer cancelled the payment and the flow is about to resolve. */
 export interface SpareLinkCancelled {
     readonly type: 'cancelled';
     readonly result: PaymentResult;
 }
-/** The flow was abandoned without an explicit user action. */
+/** The payer left before the flow resolved either way. */
 export interface SpareLinkAbandoned {
     readonly type: 'abandoned';
     readonly result: PaymentResult;
 }
 /** All possible event type strings for type narrowing. */
-export declare const SPARE_LINK_EVENT_TYPES: readonly ["initialized", "sessionLoaded", "consentStarted", "redirectToBank", "bankCallbackReceived", "succeeded", "failed", "cancelled", "abandoned"];
+export declare const SPARE_LINK_EVENT_TYPES: readonly ["initialized", "pageReady", "redirectToBank", "bankCallbackReceived", "succeeded", "failed", "cancelled", "abandoned"];
 export type SpareLinkEventType = (typeof SPARE_LINK_EVENT_TYPES)[number];
 /** Type guard for SpareLinkEvent. */
 export declare function isSpareLinkEvent(value: unknown): value is SpareLinkEvent;
 /** Factory functions for creating events (internal use). */
 export declare const SpareLinkEvents: {
-    readonly initialized: (linkToken: string) => SpareLinkInitialized;
-    readonly sessionLoaded: (linkToken: string, linkSessionId?: string) => SpareLinkSessionLoaded;
-    readonly consentStarted: (linkToken: string) => SpareLinkConsentStarted;
-    readonly redirectToBank: (linkToken: string) => SpareLinkRedirectToBank;
-    readonly bankCallbackReceived: (linkToken: string) => SpareLinkBankCallbackReceived;
+    readonly initialized: (reference: string) => SpareLinkInitialized;
+    readonly pageReady: (reference: string) => SpareLinkPageReady;
+    readonly redirectToBank: (reference: string) => SpareLinkRedirectToBank;
+    readonly bankCallbackReceived: (reference: string) => SpareLinkBankCallbackReceived;
     readonly succeeded: (result: PaymentResult) => SpareLinkSucceeded;
     readonly failed: (result: PaymentResult) => SpareLinkFailed;
     readonly cancelled: (result: PaymentResult) => SpareLinkCancelled;

package/lib/typescript/commonjs/public/spare-link-event.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spare-link-event.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,sBAAsB,GACtB,uBAAuB,GACvB,uBAAuB,GACvB,6BAA6B,GAC7B,kBAAkB,GAClB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,sDAAsD;AACtD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,mEAAmE;IACnE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,sEAAsE;AACtE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wDAAwD;AACxD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB,wJAUzB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,qCAAqC;AACrC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE;AAED,4DAA4D;AAC5D,eAAO,MAAM,eAAe;sCACH,MAAM,KAAG,oBAAoB;wCAG3B,MAAM,kBAAkB,MAAM,KAAG,sBAAsB;yCAKtD,MAAM,KAAG,uBAAuB;yCAGhC,MAAM,KAAG,uBAAuB;+CAG1B,MAAM,KAAG,6BAA6B;iCAGpD,aAAa,KAAG,kBAAkB;8BAGrC,aAAa,KAAG,eAAe;iCAG5B,aAAa,KAAG,kBAAkB;iCAGlC,aAAa,KAAG,kBAAkB;CAG5C,CAAC"}
+{"version":3,"file":"spare-link-event.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,MAAM,cAAc,GACtB,oBAAoB,GACpB,kBAAkB,GAClB,uBAAuB,GACvB,6BAA6B,GAC7B,kBAAkB,GAClB,eAAe,GACf,kBAAkB,GAClB,kBAAkB,CAAC;AAEvB,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wDAAwD;AACxD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,gFAAgF;AAChF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,2DAA2D;AAC3D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,wEAAwE;AACxE,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,0DAA0D;AAC1D,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;CAChC;AAED,0DAA0D;AAC1D,eAAO,MAAM,sBAAsB,kIASzB,CAAC;AAEX,MAAM,MAAM,kBAAkB,GAAG,CAAC,OAAO,sBAAsB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzE,qCAAqC;AACrC,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAIxE;AAED,4DAA4D;AAC5D,eAAO,MAAM,eAAe;sCACH,MAAM,KAAG,oBAAoB;oCAG/B,MAAM,KAAG,kBAAkB;yCAGtB,MAAM,KAAG,uBAAuB;+CAG1B,MAAM,KAAG,6BAA6B;iCAGpD,aAAa,KAAG,kBAAkB;8BAGrC,aAAa,KAAG,eAAe;iCAG5B,aAAa,KAAG,kBAAkB;iCAGlC,aAAa,KAAG,kBAAkB;CAG5C,CAAC"}

package/lib/typescript/commonjs/public/spare-link-host-api.d.ts

@@ -1,26 +1,15 @@
 import type { PaymentResult } from './payment-result';
 import type { RecoveryResult } from './recovery-result';
-import type { SpareLinkSession } from './spare-link-session';
 /**
  * Imperative API the {@link SpareLinkHost} mounts and wires to a
  * {@link SpareLink} instance.
  *
  * @internal
  */
-export interface SpareLinkHostApi {
-    start(args: {
-        linkToken: string;
-    }): Promise<SpareLinkSession>;
-    handleRedirect(uri: URL | string): Promise<boolean>;
-    resumeIfNeeded(): Promise<RecoveryResult>;
-    isFlowActive(): boolean;
-}
-/** @internal */
 export interface SpareLinkHostDelegate {
     startFlow(args: {
-        linkToken: string;
+        reference: string;
         resolve: (result: PaymentResult) => void;
-        onSessionLoaded?: (linkSessionId: string) => void;
     }): void;
     handleRedirect(uri: URL | string): Promise<boolean>;
     resumeIfNeeded(): Promise<RecoveryResult>;

package/lib/typescript/commonjs/public/spare-link-host-api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spare-link-host-api.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-host-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAE7D;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAC9D,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1C,YAAY,IAAI,OAAO,CAAC;CACzB;AAED,gBAAgB;AAChB,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,IAAI,EAAE;QACd,SAAS,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;QACzC,eAAe,CAAC,EAAE,CAAC,aAAa,EAAE,MAAM,KAAK,IAAI,CAAC;KACnD,GAAG,IAAI,CAAC;IACT,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1C,YAAY,IAAI,OAAO,CAAC;CACzB"}
+{"version":3,"file":"spare-link-host-api.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-host-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;IACvF,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpD,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1C,YAAY,IAAI,OAAO,CAAC;CACzB"}

package/lib/typescript/commonjs/public/spare-link-instance.d.ts

@@ -1,7 +1,7 @@
 import type { PendingSessionStore } from '../core/services/pending-session-store';
 import { type EventEmitter } from '../internal/event-emitter';
 import { type PaymentResult } from './payment-result';
-import { type NoRecoveryReason, type RecoveryResult, isSessionRecovered } from './recovery-result';
+import type { NoRecoveryReason, RecoveryResult } from './recovery-result';
 import { type PaymentEnvironment, type SpareApiTenant } from './spare-link-config';
 import { type SpareLinkEvent } from './spare-link-event';
 import type { SpareLinkHostDelegate } from './spare-link-host-api';
@@ -10,14 +10,15 @@ export interface SpareLinkOptions {
     environment: PaymentEnvironment;
     tenant: SpareApiTenant;
     baseUrl?: string;
-    fetch?: typeof fetch;
-    requestTimeoutMs?: number;
     /** Store for crash-safe recovery. Defaults to none — wire e.g. `SecureStorePendingSessionStore`. */
     pendingSessionStore?: PendingSessionStore;
 }
 /**
- * Entry point for the Spare Link payment SDK — aligned with Flutter's
- * instance-based {@link SpareLink} API.
+ * Entry point for the Spare Link payment SDK.
+ *
+ * Your backend creates the payment request — with `channel: 'sdk_react_native'`
+ * and the return URLs your app is registered for — and gives the app the
+ * reference it returns. That reference is all this SDK needs.
  *
  * Mount {@link SpareLinkHost} once near your app root and pass this instance:
  *
@@ -31,13 +32,15 @@ export interface SpareLinkOptions {
  *   <App />
  * </SpareLinkHost>
  * ```
+ *
+ * The SDK makes no API calls of its own and holds no credentials. Every result
+ * it reports comes from a deep link that is interceptable by design, so confirm
+ * with your backend via `GET /payment-requests/{reference}` before acting on one.
  */
 export declare class SpareLink {
     readonly environment: PaymentEnvironment;
     readonly tenant: SpareApiTenant;
     readonly baseUrl: string | undefined;
-    readonly fetch: typeof fetch | undefined;
-    readonly requestTimeoutMs: number | undefined;
     readonly pendingSessionStore: PendingSessionStore | undefined;
     private readonly _events;
     private _host;
@@ -52,17 +55,25 @@ export declare class SpareLink {
     /** Returns `true` while a payment flow started via {@link start} is in progress. */
     get isFlowActive(): boolean;
     /**
-     * Starts a new payment flow.
+     * Opens the hosted payment page for `reference` and resolves when the flow ends.
      *
-     * Returns a {@link SpareLinkSession} immediately; await `session.result`
-     * for the terminal outcome.
+     * Returns a {@link SpareLinkSession} immediately; await `session.result` for the
+     * terminal outcome. There is no session to load first: the page resolves the
+     * request itself, so the payer sees it without waiting on a round trip.
      */
     start(args: {
-        linkToken: string;
+        reference: string;
     }): Promise<SpareLinkSession>;
-    /** Processes a deep-link URI received from the bank. */
+    /** Processes a deep-link URI the payer returned through. */
     handleRedirect(uri: URL | string): Promise<boolean>;
-    /** Checks for a pending session saved during a previous flow and recovers it. */
+    /**
+     * Reports a payment that was left in progress by a previous app session.
+     *
+     * If the return deep link arrived before the app had a flow to give it to, the
+     * outcome is resolved from it. Otherwise the SDK cannot say how the payment
+     * ended — it holds no credentials, so it has nothing to ask with — and reports
+     * `outcomeUnknown` with the reference for your backend to resolve.
+     */
     resumeIfNeeded(): Promise<RecoveryResult>;
     dispose(): void;
     /**
@@ -75,15 +86,10 @@ export declare class SpareLink {
     emitEvent(event: SpareLinkEvent): void;
     /** @internal */
     emitTerminal(result: PaymentResult): void;
+    private _resolveImmediately;
     private _emitTerminal;
     private _hostStart;
     private _drainPending;
 }
-/** Map legacy recovery helper outcomes to Flutter-aligned {@link RecoveryResult}. */
-export declare function mapHostRecovery(recovery: RecoveryResult | {
-    kind: 'inProgress';
-    linkToken: string;
-}): RecoveryResult;
-export declare function noRecovery(reason: NoRecoveryReason): RecoveryResult;
-export { isSessionRecovered };
+export declare function noRecovery(reason: NoRecoveryReason, reference?: string): RecoveryResult;
 //# sourceMappingURL=spare-link-instance.d.ts.map

package/lib/typescript/commonjs/public/spare-link-instance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spare-link-instance.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,KAAK,gBAAgB,EAAE,KAAK,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACnG,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAEpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,kBAAkB,CAAC;IAChC,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,oGAAoG;IACpG,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAgBD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,SAAS;IACpB,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,OAAO,KAAK,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAE9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,SAAS,CAAS;IAE1B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyB;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;gBAE3C,OAAO,EAAE,gBAAgB;IASrC,+DAA+D;IAC/D,IAAI,MAAM,IAAI,YAAY,CAAC,cAAc,CAAC,CAEzC;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,oFAAoF;IACpF,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;;OAKG;IACG,KAAK,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAiCnE,wDAAwD;IAClD,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUzD,iFAAiF;IAC3E,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC;IAe/C,OAAO,IAAI,IAAI;IA2Bf;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,IAAI;IAQpD,gBAAgB;IAChB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAItC,gBAAgB;IAChB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAIzC,OAAO,CAAC,aAAa;YAiBP,UAAU;IA6BxB,OAAO,CAAC,aAAa;CAiBtB;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,cAAc,GAAG;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnE,cAAc,CAKhB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc,CAEnE;AAED,OAAO,EAAE,kBAAkB,EAAE,CAAC"}
+{"version":3,"file":"spare-link-instance.d.ts","sourceRoot":"","sources":["../../../../src/public/spare-link-instance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,KAAK,YAAY,EAAsB,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,KAAK,aAAa,EAAoB,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,EACL,KAAK,kBAAkB,EACvB,KAAK,cAAc,EAGpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,oBAAoB,CAAC;AAC1E,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,kBAAkB,CAAC;IAChC,MAAM,EAAE,cAAc,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oGAAoG;IACpG,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;CAC3C;AAgBD;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,SAAS;IACpB,QAAQ,CAAC,WAAW,EAAE,kBAAkB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,mBAAmB,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAE9D,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAwC;IAChE,OAAO,CAAC,KAAK,CAAsC;IACnD,OAAO,CAAC,SAAS,CAAS;IAE1B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAsB;IACrD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAyB;IAC3D,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAuB;gBAE3C,OAAO,EAAE,gBAAgB;IAerC,+DAA+D;IAC/D,IAAI,MAAM,IAAI,YAAY,CAAC,cAAc,CAAC,CAEzC;IAED,IAAI,eAAe,IAAI,MAAM,CAE5B;IAED,oFAAoF;IACpF,IAAI,YAAY,IAAI,OAAO,CAE1B;IAED;;;;;;OAMG;IACG,KAAK,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAqBnE,4DAA4D;IACtD,cAAc,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAUzD;;;;;;;OAOG;IACG,cAAc,IAAI,OAAO,CAAC,cAAc,CAAC;IAY/C,OAAO,IAAI,IAAI;IA2Bf;;;;OAIG;IACH,WAAW,CAAC,IAAI,EAAE,qBAAqB,GAAG,MAAM,IAAI;IAQpD,gBAAgB;IAChB,SAAS,CAAC,KAAK,EAAE,cAAc,GAAG,IAAI;IAItC,gBAAgB;IAChB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI;IAIzC,OAAO,CAAC,mBAAmB;IAM3B,OAAO,CAAC,aAAa;YAiBP,UAAU;IAwBxB,OAAO,CAAC,aAAa;CAiBtB;AAED,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,cAAc,CAEvF"}

package/lib/typescript/commonjs/public/spare-link-session.d.ts

@@ -2,19 +2,14 @@ import type { PaymentResult } from './payment-result';
 /**
  * Handle for an in-flight or completed payment started via {@link SpareLink.start}.
  *
- * Mirrors Flutter's `SpareLinkSession` — `linkToken` is available immediately;
- * await `result` for the terminal outcome.
+ * `reference` is available immediately; await `result` for the terminal outcome.
  */
 export declare class SpareLinkSession {
-    readonly linkToken: string;
-    linkSessionId: string | undefined;
+    readonly reference: string;
     readonly result: Promise<PaymentResult>;
     constructor(args: {
-        linkToken: string;
+        reference: string;
         result: Promise<PaymentResult>;
-        linkSessionId?: string;
     });
-    /** Called internally when the server provides {@link linkSessionId}. */
-    updateLinkSessionId(value: string): void;
 }
 //# sourceMappingURL=spare-link-session.d.ts.map