@spare-technologies/spare-link 0.1.0-beta.1 → 1.0.0

package/lib/module/core/services/hosted-flow-state.js

@@ -0,0 +1,91 @@
+"use strict";
+
+/**
+ * Where a hosted payment has got to.
+ *
+ * The phases the payer spends most of their time in — choosing a bank, reading
+ * the consent, confirming the payee — are all `hosted`: they happen inside the
+ * page, which does not report them, and the SDK has nothing to decide there.
+ */
+
+/** Immutable snapshot of a hosted payment. */
+
+const TERMINAL_PHASES = new Set(['succeeded', 'failed', 'cancelled', 'abandoned']);
+export function isTerminalPhase(phase) {
+  return TERMINAL_PHASES.has(phase);
+}
+
+/** Factories for each phase, so no caller assembles a state by hand. */
+export const HostedFlowStates = {
+  loading(reference, attempt = 1) {
+    return {
+      phase: 'loading',
+      reference,
+      attempt
+    };
+  },
+  hosted(reference, attempt = 1) {
+    return {
+      phase: 'hosted',
+      reference,
+      attempt
+    };
+  },
+  unreachable(reference, attempt = 1) {
+    return {
+      phase: 'unreachable',
+      reference,
+      attempt
+    };
+  },
+  redirecting(reference, attempt = 1) {
+    return {
+      phase: 'redirecting',
+      reference,
+      attempt
+    };
+  },
+  awaitingCallback(reference, attempt = 1) {
+    return {
+      phase: 'awaitingCallback',
+      reference,
+      attempt
+    };
+  },
+  succeeded(args) {
+    return {
+      phase: 'succeeded',
+      reference: args.reference,
+      attempt: args.attempt ?? 1,
+      ...(args.report ? {
+        report: args.report
+      } : {})
+    };
+  },
+  failed(args) {
+    return {
+      phase: 'failed',
+      reference: args.reference,
+      errorCode: args.errorCode,
+      attempt: args.attempt ?? 1,
+      ...(args.report ? {
+        report: args.report
+      } : {})
+    };
+  },
+  cancelled(reference, attempt = 1) {
+    return {
+      phase: 'cancelled',
+      reference,
+      attempt
+    };
+  },
+  abandoned(reference, attempt = 1) {
+    return {
+      phase: 'abandoned',
+      reference,
+      attempt
+    };
+  }
+};
+//# sourceMappingURL=hosted-flow-state.js.map

package/lib/module/core/services/hosted-flow-state.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["TERMINAL_PHASES","Set","isTerminalPhase","phase","has","HostedFlowStates","loading","reference","attempt","hosted","unreachable","redirecting","awaitingCallback","succeeded","args","report","failed","errorCode","cancelled","abandoned"],"sourceRoot":"../../../../src","sources":["core/services/hosted-flow-state.ts"],"mappings":";;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;;AAwBA;;AA8BA,MAAMA,eAA6C,GAAG,IAAIC,GAAG,CAAkB,CAC7E,WAAW,EACX,QAAQ,EACR,WAAW,EACX,WAAW,CACZ,CAAC;AAEF,OAAO,SAASC,eAAeA,CAACC,KAAsB,EAAW;EAC/D,OAAOH,eAAe,CAACI,GAAG,CAACD,KAAK,CAAC;AACnC;;AAEA;AACA,OAAO,MAAME,gBAAgB,GAAG;EAC9BC,OAAOA,CAACC,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IACvD,OAAO;MAAEL,KAAK,EAAE,SAAS;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EACjD,CAAC;EACDC,MAAMA,CAACF,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IACtD,OAAO;MAAEL,KAAK,EAAE,QAAQ;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EAChD,CAAC;EACDE,WAAWA,CAACH,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IAC3D,OAAO;MAAEL,KAAK,EAAE,aAAa;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EACrD,CAAC;EACDG,WAAWA,CAACJ,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IAC3D,OAAO;MAAEL,KAAK,EAAE,aAAa;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EACrD,CAAC;EACDI,gBAAgBA,CAACL,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IAChE,OAAO;MAAEL,KAAK,EAAE,kBAAkB;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EAC1D,CAAC;EACDK,SAASA,CAACC,IAIT,EAAmB;IAClB,OAAO;MACLX,KAAK,EAAE,WAAW;MAClBI,SAAS,EAAEO,IAAI,CAACP,SAAS;MACzBC,OAAO,EAAEM,IAAI,CAACN,OAAO,IAAI,CAAC;MAC1B,IAAIM,IAAI,CAACC,MAAM,GAAG;QAAEA,MAAM,EAAED,IAAI,CAACC;MAAO,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;EACH,CAAC;EACDC,MAAMA,CAACF,IAKN,EAAmB;IAClB,OAAO;MACLX,KAAK,EAAE,QAAQ;MACfI,SAAS,EAAEO,IAAI,CAACP,SAAS;MACzBU,SAAS,EAAEH,IAAI,CAACG,SAAS;MACzBT,OAAO,EAAEM,IAAI,CAACN,OAAO,IAAI,CAAC;MAC1B,IAAIM,IAAI,CAACC,MAAM,GAAG;QAAEA,MAAM,EAAED,IAAI,CAACC;MAAO,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;EACH,CAAC;EACDG,SAASA,CAACX,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IACzD,OAAO;MAAEL,KAAK,EAAE,WAAW;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EACnD,CAAC;EACDW,SAASA,CAACZ,SAAiB,EAAEC,OAAO,GAAG,CAAC,EAAmB;IACzD,OAAO;MAAEL,KAAK,EAAE,WAAW;MAAEI,SAAS;MAAEC;IAAQ,CAAC;EACnD;AACF,CAAU","ignoreList":[]}

package/lib/module/index.js

@@ -5,36 +5,22 @@
 export { SDK_VERSION } from "./version.js";
 export * from "./public/index.js";
 
-// Errors
-export { PaymentApiError, isPaymentApiError } from "./core/errors/payment-api-error.js";
-
-// Models (camelCase SDK shapes)
-
 // Bank-return URI helpers (handy for hosts implementing their own deep-link
 // router that needs to know whether a URI belongs to the payment flow).
-export { isPaymentReturnCallbackUri, extractPaymentReturnErrorCode } from "./core/models/payment-return-params.js";
+export { isPaymentReturnCallbackUri, readPaymentReturn, extractPaymentReturnErrorCode, extractPaymentReturnErrorDescription, extractPaymentReturnErrorReason, extractPaymentReturnPaymentId, extractPaymentReturnMandateId, extractPaymentReturnReference, extractPaymentReturnMerchantRef, extractPaymentReturnSignature, isPaymentReturnSuccess, paymentReturnParams } from "./core/models/payment-return-params.js";
 
-// API client
-export { LinkApiClient } from "./core/client/link-api-client.js";
-
-// Controller + state machine
-export { PaymentFlowController } from "./core/services/payment-flow-controller.js";
-export { PaymentFlowStates } from "./core/services/payment-flow-state.js";
+// Types a caller reads off a result or a state, without the machinery that
+// produces them. The orchestration internals — the controller, the raw webview,
+// the phase hook, the individual screens — are deliberately not exported: they
+// are how `SpareLinkHost` is built, not a surface anyone should build against,
+// and exporting them makes every internal rename a breaking change.
 
 // Storage interface
 
-// Consent presenter (UI helper, pure function)
-export { presentConsent, summaryFromState, formatAmount, formatCop } from "./core/services/consent-presenter.js";
-export { buildMultiPaymentRules, rulesSectionTitle } from "./core/services/multi-payment-rules-presenter.js";
-export { isMultiPayment, isInternational, supportsConfirmationOfPayee, resolvedPaymentType, consentUiVariant, PaymentType } from "./core/models/payment-type.js";
-
-// UI surface
+// UI surface: one component to mount, and the theme to match it.
 export { SpareLinkHost } from "./ui/spare-link-host.js";
-export { PaymentFlowPage } from "./ui/payment-flow-page.js";
-export { usePaymentFlowState } from "./ui/hooks/use-payment-flow-state.js";
-export { BankSelectionScreen, ConsentDetailsScreen, RedirectHandoffScreen, ResumeProcessingScreen, ResultScreen, MandateSetupSuccessScreen } from "./ui/screens/index.js";
 export { Colors, Typography, Spacing, FONT_FAMILY } from "./ui/theme/index.js";
 
 // Native platform integration
-export { collectTelemetry, launchBankRedirect, SecureStorePendingSessionStore, useSpareLinkDeepLinks } from "./internal/index.js";
+export { launchBankRedirect, SecureStorePendingSessionStore, useSpareLinkDeepLinks } from "./internal/index.js";
 //# sourceMappingURL=index.js.map

package/lib/module/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["SDK_VERSION","PaymentApiError","isPaymentApiError","isPaymentReturnCallbackUri","extractPaymentReturnErrorCode","LinkApiClient","PaymentFlowController","PaymentFlowStates","presentConsent","summaryFromState","formatAmount","formatCop","buildMultiPaymentRules","rulesSectionTitle","isMultiPayment","isInternational","supportsConfirmationOfPayee","resolvedPaymentType","consentUiVariant","PaymentType","SpareLinkHost","PaymentFlowPage","usePaymentFlowState","BankSelectionScreen","ConsentDetailsScreen","RedirectHandoffScreen","ResumeProcessingScreen","ResultScreen","MandateSetupSuccessScreen","Colors","Typography","Spacing","FONT_FAMILY","collectTelemetry","launchBankRedirect","SecureStorePendingSessionStore","useSpareLinkDeepLinks"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;;AAEA,SAASA,WAAW,QAAQ,cAAW;AAEvC,cAAc,mBAAU;;AAExB;AACA,SAASC,eAAe,EAAEC,iBAAiB,QAAQ,oCAAiC;;AAEpF;;AAoBA;AACA;AACA,SACEC,0BAA0B,EAC1BC,6BAA6B,QACxB,wCAAqC;;AAE5C;AACA,SAASC,aAAa,QAAmC,kCAA+B;;AAExF;AACA,SACEC,qBAAqB,QAGhB,4CAAyC;AAChD,SACEC,iBAAiB,QAGZ,uCAAoC;;AAE3C;;AAGA;AACA,SACEC,cAAc,EACdC,gBAAgB,EAChBC,YAAY,EACZC,SAAS,QAQJ,sCAAmC;AAE1C,SACEC,sBAAsB,EACtBC,iBAAiB,QAEZ,kDAA+C;AAEtD,SACEC,cAAc,EACdC,eAAe,EACfC,2BAA2B,EAC3BC,mBAAmB,EACnBC,gBAAgB,EAChBC,WAAW,QAEN,+BAA4B;;AAEnC;AACA,SACEC,aAAa,QAER,yBAAsB;AAC7B,SAASC,eAAe,QAAmC,2BAAwB;AACnF,SAASC,mBAAmB,QAAQ,sCAAmC;AACvE,SACEC,mBAAmB,EAEnBC,oBAAoB,EAEpBC,qBAAqB,EACrBC,sBAAsB,EAEtBC,YAAY,EAEZC,yBAAyB,QAEpB,uBAAc;AACrB,SAASC,MAAM,EAAEC,UAAU,EAAEC,OAAO,EAAEC,WAAW,QAAQ,qBAAY;;AAErE;AACA,SACEC,gBAAgB,EAChBC,kBAAkB,EAElBC,8BAA8B,EAC9BC,qBAAqB,QAChB,qBAAY","ignoreList":[]}
+{"version":3,"names":["SDK_VERSION","isPaymentReturnCallbackUri","readPaymentReturn","extractPaymentReturnErrorCode","extractPaymentReturnErrorDescription","extractPaymentReturnErrorReason","extractPaymentReturnPaymentId","extractPaymentReturnMandateId","extractPaymentReturnReference","extractPaymentReturnMerchantRef","extractPaymentReturnSignature","isPaymentReturnSuccess","paymentReturnParams","SpareLinkHost","Colors","Typography","Spacing","FONT_FAMILY","launchBankRedirect","SecureStorePendingSessionStore","useSpareLinkDeepLinks"],"sourceRoot":"../../src","sources":["index.ts"],"mappings":";;AAAA;;AAEA,SAASA,WAAW,QAAQ,cAAW;AAEvC,cAAc,mBAAU;;AAExB;AACA;AACA,SAEEC,0BAA0B,EAC1BC,iBAAiB,EACjBC,6BAA6B,EAC7BC,oCAAoC,EACpCC,+BAA+B,EAC/BC,6BAA6B,EAC7BC,6BAA6B,EAC7BC,6BAA6B,EAC7BC,+BAA+B,EAC/BC,6BAA6B,EAC7BC,sBAAsB,EACtBC,mBAAmB,QACd,wCAAqC;;AAE5C;AACA;AACA;AACA;AACA;;AAGA;;AAIA;AACA,SAASC,aAAa,QAAiC,yBAAsB;AAC7E,SAASC,MAAM,EAAEC,UAAU,EAAEC,OAAO,EAAEC,WAAW,QAAQ,qBAAY;;AAErE;AACA,SACEC,kBAAkB,EAElBC,8BAA8B,EAC9BC,qBAAqB,QAChB,qBAAY","ignoreList":[]}

package/lib/module/internal/hosted/bridge-message.js

@@ -0,0 +1,104 @@
+"use strict";
+
+import { parseUrlParts } from "../url-parts.js";
+
+/**
+ * Messages the hosted payment page sends to this SDK.
+ *
+ * The contract is one-way. The page never waits on a reply, so a message this
+ * version does not recognise is dropped rather than treated as a failure — the
+ * page continues, and a newer page stays usable by an older app.
+ *
+ * The page posts to `window.ReactNativeWebView.postMessage` as a JSON string,
+ * which arrives here as `event.nativeEvent.data`.
+ */
+
+/** The payable page is interactive. */
+
+/**
+ * A consent exists and the bank must now be opened outside the WebView.
+ *
+ * Banks commonly refuse to serve their authorization pages inside an embedded
+ * browser, and the address bar is what lets a payer tell a real bank page from
+ * a convincing copy.
+ */
+
+/** The payer cancelled, and the request is already rejected server-side. */
+
+/** The flow cannot continue. [code] is the key the page itself renders. */
+
+/**
+ * Parses a message posted by the hosted page.
+ *
+ * Returns null for anything unrecognised. The message crosses a boundary the
+ * SDK does not control, so nothing here trusts its shape — the WebView message
+ * channel is shared with every script on the page.
+ */
+export function parseHostedBridgeMessage(raw) {
+  const message = asRecord(raw);
+  if (!message) return null;
+  const type = message.type;
+  if (typeof type !== 'string') return null;
+  switch (type) {
+    case 'spare.ready':
+      return {
+        type: 'ready'
+      };
+    case 'spare.open_url':
+      {
+        const url = message.url;
+        if (typeof url !== 'string' || !isHttpsUrl(url)) return null;
+        return {
+          type: 'openUrl',
+          url
+        };
+      }
+    case 'spare.cancel':
+      return {
+        type: 'cancel'
+      };
+    case 'spare.error':
+      {
+        const code = message.code;
+        if (typeof code !== 'string' || code.trim().length === 0) return null;
+        return {
+          type: 'error',
+          code
+        };
+      }
+    default:
+      return null;
+  }
+}
+
+/**
+ * Reads the message out of whatever the WebView handed over.
+ *
+ * The page stringifies its payload, but a plain object is accepted too so the
+ * transport is not the thing that decides whether a valid message is understood.
+ */
+function asRecord(raw) {
+  if (typeof raw === 'string') {
+    try {
+      return asRecord(JSON.parse(raw));
+    } catch {
+      return null;
+    }
+  }
+  if (typeof raw !== 'object' || raw === null || Array.isArray(raw)) return null;
+  return raw;
+}
+
+/**
+ * Whether [url] is an absolute https URL.
+ *
+ * Required before handing a URL to the OS browser: the page is trusted to name
+ * a bank, not to name a scheme that could reach something else on the device.
+ * Parsed rather than pattern-matched so `https:/\/evil` and friends cannot pass
+ * for an absolute URL.
+ */
+function isHttpsUrl(url) {
+  const parts = parseUrlParts(url);
+  return parts !== null && parts.scheme === 'https' && parts.host.length > 0;
+}
+//# sourceMappingURL=bridge-message.js.map

package/lib/module/internal/hosted/bridge-message.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["parseUrlParts","parseHostedBridgeMessage","raw","message","asRecord","type","url","isHttpsUrl","code","trim","length","JSON","parse","Array","isArray","parts","scheme","host"],"sourceRoot":"../../../../src","sources":["internal/hosted/bridge-message.ts"],"mappings":";;AAAA,SAASA,aAAa,QAAQ,iBAAc;;AAE5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA;;AAKA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA;;AAKA;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,wBAAwBA,CAACC,GAAY,EAA8B;EACjF,MAAMC,OAAO,GAAGC,QAAQ,CAACF,GAAG,CAAC;EAC7B,IAAI,CAACC,OAAO,EAAE,OAAO,IAAI;EAEzB,MAAME,IAAI,GAAGF,OAAO,CAACE,IAAI;EACzB,IAAI,OAAOA,IAAI,KAAK,QAAQ,EAAE,OAAO,IAAI;EAEzC,QAAQA,IAAI;IACV,KAAK,aAAa;MAChB,OAAO;QAAEA,IAAI,EAAE;MAAQ,CAAC;IAC1B,KAAK,gBAAgB;MAAE;QACrB,MAAMC,GAAG,GAAGH,OAAO,CAACG,GAAG;QACvB,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAI,CAACC,UAAU,CAACD,GAAG,CAAC,EAAE,OAAO,IAAI;QAC5D,OAAO;UAAED,IAAI,EAAE,SAAS;UAAEC;QAAI,CAAC;MACjC;IACA,KAAK,cAAc;MACjB,OAAO;QAAED,IAAI,EAAE;MAAS,CAAC;IAC3B,KAAK,aAAa;MAAE;QAClB,MAAMG,IAAI,GAAGL,OAAO,CAACK,IAAI;QACzB,IAAI,OAAOA,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACC,IAAI,CAAC,CAAC,CAACC,MAAM,KAAK,CAAC,EAAE,OAAO,IAAI;QACrE,OAAO;UAAEL,IAAI,EAAE,OAAO;UAAEG;QAAK,CAAC;MAChC;IACA;MACE,OAAO,IAAI;EACf;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,SAASJ,QAAQA,CAACF,GAAY,EAAkC;EAC9D,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE;IAC3B,IAAI;MACF,OAAOE,QAAQ,CAACO,IAAI,CAACC,KAAK,CAACV,GAAG,CAAY,CAAC;IAC7C,CAAC,CAAC,MAAM;MACN,OAAO,IAAI;IACb;EACF;EACA,IAAI,OAAOA,GAAG,KAAK,QAAQ,IAAIA,GAAG,KAAK,IAAI,IAAIW,KAAK,CAACC,OAAO,CAACZ,GAAG,CAAC,EAAE,OAAO,IAAI;EAC9E,OAAOA,GAAG;AACZ;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAASK,UAAUA,CAACD,GAAW,EAAW;EACxC,MAAMS,KAAK,GAAGf,aAAa,CAACM,GAAG,CAAC;EAChC,OAAOS,KAAK,KAAK,IAAI,IAAIA,KAAK,CAACC,MAAM,KAAK,OAAO,IAAID,KAAK,CAACE,IAAI,CAACP,MAAM,GAAG,CAAC;AAC5E","ignoreList":[]}

package/lib/module/internal/hosted/hosted-url.js

@@ -0,0 +1,36 @@
+"use strict";
+
+import { isSameOrigin } from "../url-parts.js";
+
+/**
+ * Origin channel this SDK identifies as to the hosted page.
+ *
+ * The same value must be recorded on the payment request by the merchant's
+ * backend, because the bank redirect that completes a payment carries no query
+ * string of ours and the return path is decided from the stored row.
+ */
+export const HOSTED_ORIGIN_CHANNEL = 'sdk_react_native';
+
+/**
+ * Builds the hosted payment page URL for a payment request reference.
+ *
+ * The reference is the only credential the page needs; everything else is
+ * resolved server-side from the row it names.
+ */
+export function buildHostedPaymentUrl(args) {
+  const base = args.baseUrl.trim().replace(/\/+$/, '');
+  const reference = encodeURIComponent(args.reference.trim());
+  return `${base}/link/payment/${reference}?channel=${HOSTED_ORIGIN_CHANNEL}`;
+}
+
+/**
+ * Whether [url] belongs to the hosted origin derived from [baseUrl].
+ *
+ * The WebView loads only the hosted origin. Bank authentication deliberately
+ * happens outside it, so anything else navigating in-frame is refused rather
+ * than followed.
+ */
+export function isHostedOriginUrl(args) {
+  return isSameOrigin(args.baseUrl, args.url);
+}
+//# sourceMappingURL=hosted-url.js.map

package/lib/module/internal/hosted/hosted-url.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["isSameOrigin","HOSTED_ORIGIN_CHANNEL","buildHostedPaymentUrl","args","base","baseUrl","trim","replace","reference","encodeURIComponent","isHostedOriginUrl","url"],"sourceRoot":"../../../../src","sources":["internal/hosted/hosted-url.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,iBAAc;;AAE3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,qBAAqB,GAAG,kBAAkB;;AAEvD;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,qBAAqBA,CAACC,IAA4C,EAAU;EAC1F,MAAMC,IAAI,GAAGD,IAAI,CAACE,OAAO,CAACC,IAAI,CAAC,CAAC,CAACC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;EACpD,MAAMC,SAAS,GAAGC,kBAAkB,CAACN,IAAI,CAACK,SAAS,CAACF,IAAI,CAAC,CAAC,CAAC;EAC3D,OAAO,GAAGF,IAAI,iBAAiBI,SAAS,YAAYP,qBAAqB,EAAE;AAC7E;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASS,iBAAiBA,CAACP,IAAsC,EAAW;EACjF,OAAOH,YAAY,CAACG,IAAI,CAACE,OAAO,EAAEF,IAAI,CAACQ,GAAG,CAAC;AAC7C","ignoreList":[]}

package/lib/module/internal/index.js

@@ -1,6 +1,5 @@
 "use strict";
 
-export { collectTelemetry } from "./telemetry-collector.js";
 export { launchBankRedirect } from "./bank-redirect.js";
 export { SecureStorePendingSessionStore } from "./secure-store-pending-session-store.js";
 export { useSpareLinkDeepLinks } from "./deep-link-listener.js";

package/lib/module/internal/index.js.map

@@ -1 +1 @@
-{"version":3,"names":["collectTelemetry","launchBankRedirect","SecureStorePendingSessionStore","useSpareLinkDeepLinks"],"sourceRoot":"../../../src","sources":["internal/index.ts"],"mappings":";;AAAA,SAASA,gBAAgB,QAAQ,0BAAuB;AACxD,SAASC,kBAAkB,QAA+B,oBAAiB;AAC3E,SAASC,8BAA8B,QAAQ,yCAAsC;AACrF,SAASC,qBAAqB,QAAQ,yBAAsB","ignoreList":[]}
+{"version":3,"names":["launchBankRedirect","SecureStorePendingSessionStore","useSpareLinkDeepLinks"],"sourceRoot":"../../../src","sources":["internal/index.ts"],"mappings":";;AAAA,SAASA,kBAAkB,QAA+B,oBAAiB;AAC3E,SAASC,8BAA8B,QAAQ,yCAAsC;AACrF,SAASC,qBAAqB,QAAQ,yBAAsB","ignoreList":[]}

package/lib/module/internal/redact-uri.js

@@ -1,21 +1,65 @@
 "use strict";
 
-const SENSITIVE_QUERY_KEYS = new Set(['exchange_code', 'error_description']);
+/**
+ * Redacts the query of a bank-return URI before it is logged.
+ *
+ * Every value goes except the few that describe the outcome rather than identify
+ * anyone — see {@link KEPT_KEYS}. Redaction is a denylist by default rather than
+ * an allowlist of names to remove: an earlier version named the two keys to
+ * redact, so anything else the return ever carried was logged in full, and one of
+ * the names it knew (`exchange_code`) is not even in the contract any more.
+ *
+ * What is worth keeping in a log is the shape of the URI — its scheme, its path,
+ * which parameters were present — plus enough to explain the outcome.
+ *
+ * It also cannot use the global `URL`. React Native's is a stub whose
+ * `searchParams` returns a fresh empty instance, so `has()` was always false and
+ * this function returned the URI untouched on a device while redacting correctly
+ * under Jest, which runs on Node.
+ *
+ * The query is split here rather than read through `parseQueryParams`, because
+ * that decodes values and keeps only the first of a repeated key — fine for
+ * reading an outcome, wrong for reproducing a URI whose shape is the point.
+ */
 
-/** Redacts sensitive query params before logging bank-return URIs. */
+const REDACTED = '[REDACTED]';
+
+/**
+ * Parameters whose values are kept, because they say what happened rather than to
+ * whom.
+ *
+ * Redacting these made the log useless for the one question it gets asked. A
+ * return that resolves as unresolved does so because of its `status`, and a log
+ * reading `status=[REDACTED]` cannot tell anyone which value was not recognised.
+ *
+ * None of these identifies a payer, a payment or a request: `status` is one of a
+ * fixed vocabulary, and `errorCode` and `error` are keys from a fixed list. The
+ * identifiers — `reference`, `merchantRef`, `paymentId` — and the signature stay
+ * redacted, as does `error_description`, which is prose and could name a person.
+ */
+const KEPT_KEYS = new Set(['status', 'errorCode', 'error']);
 export function redactPaymentReturnUri(uri) {
-  try {
-    const parsed = new URL(uri);
-    let changed = false;
-    for (const key of SENSITIVE_QUERY_KEYS) {
-      if (parsed.searchParams.has(key)) {
-        parsed.searchParams.set(key, '[REDACTED]');
-        changed = true;
-      }
-    }
-    return changed ? parsed.toString() : uri;
-  } catch {
-    return '[invalid-uri]';
-  }
+  const queryStart = uri.indexOf('?');
+  const fragmentStart = uri.indexOf('#');
+
+  // No query and no fragment: nothing here carries a value.
+  if (queryStart === -1 && fragmentStart === -1) return uri;
+  const queryEnd = fragmentStart !== -1 && fragmentStart > queryStart ? fragmentStart : uri.length;
+  const beforeQuery = queryStart === -1 ? uri.slice(0, fragmentStart) : uri.slice(0, queryStart);
+  const query = queryStart === -1 ? '' : uri.slice(queryStart + 1, queryEnd);
+
+  // A fragment is dropped whole. Nothing in this SDK reads one, so its shape is
+  // not worth keeping, and a return that ever carried a token in one — as OAuth
+  // implicit flows do — must not put it in a log.
+  const hadFragment = fragmentStart !== -1;
+  const redactedQuery = query.split('&').filter(pair => pair.length > 0).map(pair => {
+    const eq = pair.indexOf('=');
+    const key = eq === -1 ? pair : pair.slice(0, eq);
+    if (KEPT_KEYS.has(key)) return pair;
+    return `${key}=${REDACTED}`;
+  }).join('&');
+  const rebuiltQuery = redactedQuery.length > 0 ? `?${redactedQuery}` : '';
+  const rebuiltFragment = hadFragment ? `#${REDACTED}` : '';
+  return `${beforeQuery}${rebuiltQuery}${rebuiltFragment}`;
 }
 //# sourceMappingURL=redact-uri.js.map

package/lib/module/internal/redact-uri.js.map

@@ -1 +1 @@
-{"version":3,"names":["SENSITIVE_QUERY_KEYS","Set","redactPaymentReturnUri","uri","parsed","URL","changed","key","searchParams","has","set","toString"],"sourceRoot":"../../../src","sources":["internal/redact-uri.ts"],"mappings":";;AAAA,MAAMA,oBAAoB,GAAG,IAAIC,GAAG,CAAC,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;;AAE5E;AACA,OAAO,SAASC,sBAAsBA,CAACC,GAAW,EAAU;EAC1D,IAAI;IACF,MAAMC,MAAM,GAAG,IAAIC,GAAG,CAACF,GAAG,CAAC;IAC3B,IAAIG,OAAO,GAAG,KAAK;IACnB,KAAK,MAAMC,GAAG,IAAIP,oBAAoB,EAAE;MACtC,IAAII,MAAM,CAACI,YAAY,CAACC,GAAG,CAACF,GAAG,CAAC,EAAE;QAChCH,MAAM,CAACI,YAAY,CAACE,GAAG,CAACH,GAAG,EAAE,YAAY,CAAC;QAC1CD,OAAO,GAAG,IAAI;MAChB;IACF;IACA,OAAOA,OAAO,GAAGF,MAAM,CAACO,QAAQ,CAAC,CAAC,GAAGR,GAAG;EAC1C,CAAC,CAAC,MAAM;IACN,OAAO,eAAe;EACxB;AACF","ignoreList":[]}
+{"version":3,"names":["REDACTED","KEPT_KEYS","Set","redactPaymentReturnUri","uri","queryStart","indexOf","fragmentStart","queryEnd","length","beforeQuery","slice","query","hadFragment","redactedQuery","split","filter","pair","map","eq","key","has","join","rebuiltQuery","rebuiltFragment"],"sourceRoot":"../../../src","sources":["internal/redact-uri.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,MAAMA,QAAQ,GAAG,YAAY;;AAE7B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,SAA8B,GAAG,IAAIC,GAAG,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AAEhF,OAAO,SAASC,sBAAsBA,CAACC,GAAW,EAAU;EAC1D,MAAMC,UAAU,GAAGD,GAAG,CAACE,OAAO,CAAC,GAAG,CAAC;EACnC,MAAMC,aAAa,GAAGH,GAAG,CAACE,OAAO,CAAC,GAAG,CAAC;;EAEtC;EACA,IAAID,UAAU,KAAK,CAAC,CAAC,IAAIE,aAAa,KAAK,CAAC,CAAC,EAAE,OAAOH,GAAG;EAEzD,MAAMI,QAAQ,GAAGD,aAAa,KAAK,CAAC,CAAC,IAAIA,aAAa,GAAGF,UAAU,GAAGE,aAAa,GAAGH,GAAG,CAACK,MAAM;EAEhG,MAAMC,WAAW,GAAGL,UAAU,KAAK,CAAC,CAAC,GAAGD,GAAG,CAACO,KAAK,CAAC,CAAC,EAAEJ,aAAa,CAAC,GAAGH,GAAG,CAACO,KAAK,CAAC,CAAC,EAAEN,UAAU,CAAC;EAC9F,MAAMO,KAAK,GAAGP,UAAU,KAAK,CAAC,CAAC,GAAG,EAAE,GAAGD,GAAG,CAACO,KAAK,CAACN,UAAU,GAAG,CAAC,EAAEG,QAAQ,CAAC;;EAE1E;EACA;EACA;EACA,MAAMK,WAAW,GAAGN,aAAa,KAAK,CAAC,CAAC;EAExC,MAAMO,aAAa,GAAGF,KAAK,CACxBG,KAAK,CAAC,GAAG,CAAC,CACVC,MAAM,CAAEC,IAAI,IAAKA,IAAI,CAACR,MAAM,GAAG,CAAC,CAAC,CACjCS,GAAG,CAAED,IAAI,IAAK;IACb,MAAME,EAAE,GAAGF,IAAI,CAACX,OAAO,CAAC,GAAG,CAAC;IAC5B,MAAMc,GAAG,GAAGD,EAAE,KAAK,CAAC,CAAC,GAAGF,IAAI,GAAGA,IAAI,CAACN,KAAK,CAAC,CAAC,EAAEQ,EAAE,CAAC;IAChD,IAAIlB,SAAS,CAACoB,GAAG,CAACD,GAAG,CAAC,EAAE,OAAOH,IAAI;IACnC,OAAO,GAAGG,GAAG,IAAIpB,QAAQ,EAAE;EAC7B,CAAC,CAAC,CACDsB,IAAI,CAAC,GAAG,CAAC;EAEZ,MAAMC,YAAY,GAAGT,aAAa,CAACL,MAAM,GAAG,CAAC,GAAG,IAAIK,aAAa,EAAE,GAAG,EAAE;EACxE,MAAMU,eAAe,GAAGX,WAAW,GAAG,IAAIb,QAAQ,EAAE,GAAG,EAAE;EAEzD,OAAO,GAAGU,WAAW,GAAGa,YAAY,GAAGC,eAAe,EAAE;AAC1D","ignoreList":[]}

package/lib/module/internal/secure-store-pending-session-store.js

@@ -1,20 +1,23 @@
 "use strict";
 
 /**
- * Production `PendingSessionStore` backed by expo-secure-store. Persists a
- * single in-flight payment session so the SDK can recover after cold start.
+ * Production `PendingSessionStore` backed by expo-secure-store. Persists the
+ * reference of a single in-flight payment so a cold start knows which payment
+ * was under way.
  */
 
 import { createLogger } from "./logger.js";
 const log = createLogger('SecureStorePendingSessionStore');
-const KEYS = {
-  sessionId: 'spare_link_session_id',
-  bankId: 'spare_link_bank_id',
-  authUrl: 'spare_link_auth_url',
-  consentAt: 'spare_link_consent_at',
-  recoveryAttempts: 'spare_link_recovery_attempts',
-  merchantRef: 'spare_link_merchant_ref'
-};
+const KEY_REFERENCE = 'spare_link_reference';
+
+/**
+ * Keys earlier versions wrote, cleared alongside our own.
+ *
+ * An app upgrading mid-payment would otherwise keep a token and session it can
+ * never resolve — the endpoints they addressed are gone — and the secure store
+ * outlives the version that wrote to it.
+ */
+const RETIRED_KEYS = ['spare_link_token', 'spare_link_session_id', 'spare_link_bank_id', 'spare_link_auth_url', 'spare_link_consent_at', 'spare_link_recovery_attempts', 'spare_link_merchant_ref'];
 async function defaultLoader() {
   try {
     return await import('expo-secure-store');
@@ -54,34 +57,26 @@ export class SecureStorePendingSessionStore {
   save(record) {
     return this.enqueueWrite(async () => {
       const s = await this.module;
-      await Promise.all([s.setItemAsync(KEYS.sessionId, record.sessionId), s.setItemAsync(KEYS.bankId, record.selectedBankId), s.setItemAsync(KEYS.authUrl, record.authorizationUrl), record.consentAt !== undefined ? s.setItemAsync(KEYS.consentAt, String(record.consentAt)) : s.deleteItemAsync(KEYS.consentAt), s.setItemAsync(KEYS.recoveryAttempts, String(record.recoveryAttempts)), record.merchantRef ? s.setItemAsync(KEYS.merchantRef, record.merchantRef) : s.deleteItemAsync(KEYS.merchantRef)]);
+      await s.setItemAsync(KEY_REFERENCE, record.reference);
     });
   }
   async load() {
     // Wait for any pending writes to settle so we read a consistent snapshot.
     await this.writeQueue.catch(() => undefined);
     const s = await this.module;
-    const [sessionId, bankId, authUrl, consentAtRaw, attemptsRaw, merchantRef] = await Promise.all([s.getItemAsync(KEYS.sessionId), s.getItemAsync(KEYS.bankId), s.getItemAsync(KEYS.authUrl), s.getItemAsync(KEYS.consentAt), s.getItemAsync(KEYS.recoveryAttempts), s.getItemAsync(KEYS.merchantRef)]);
-    if (!sessionId || !bankId || !authUrl) {
-      log.fine('load: no pending session found');
+    const reference = await s.getItemAsync(KEY_REFERENCE);
+    if (!reference) {
+      log.fine('load: no pending payment found');
       return null;
     }
-    const consentAt = consentAtRaw ? Number(consentAtRaw) : undefined;
-    const recoveryAttempts = attemptsRaw ? Number(attemptsRaw) : 0;
-    const record = {
-      sessionId,
-      selectedBankId: bankId,
-      authorizationUrl: authUrl,
-      recoveryAttempts: Number.isFinite(recoveryAttempts) ? recoveryAttempts : 0
+    return {
+      reference
     };
-    if (consentAt !== undefined && Number.isFinite(consentAt)) record.consentAt = consentAt;
-    if (merchantRef) record.merchantRef = merchantRef;
-    return record;
   }
   clear() {
     return this.enqueueWrite(async () => {
       const s = await this.module;
-      await Promise.all([s.deleteItemAsync(KEYS.sessionId), s.deleteItemAsync(KEYS.bankId), s.deleteItemAsync(KEYS.authUrl), s.deleteItemAsync(KEYS.consentAt), s.deleteItemAsync(KEYS.recoveryAttempts), s.deleteItemAsync(KEYS.merchantRef)]);
+      await Promise.all([s.deleteItemAsync(KEY_REFERENCE), ...RETIRED_KEYS.map(key => s.deleteItemAsync(key))]);
     });
   }
 }

package/lib/module/internal/secure-store-pending-session-store.js.map

@@ -1 +1 @@
-{"version":3,"names":["createLogger","log","KEYS","sessionId","bankId","authUrl","consentAt","recoveryAttempts","merchantRef","defaultLoader","err","Error","message","String","SecureStorePendingSessionStore","secureStore","writeQueue","Promise","resolve","constructor","moduleLoader","loader","module","enqueueWrite","op","next","then","catch","save","record","s","all","setItemAsync","selectedBankId","authorizationUrl","undefined","deleteItemAsync","load","consentAtRaw","attemptsRaw","getItemAsync","fine","Number","isFinite","clear"],"sourceRoot":"../../../src","sources":["internal/secure-store-pending-session-store.ts"],"mappings":";;AAAA;AACA;AACA;AACA;;AAIA,SAASA,YAAY,QAAQ,aAAU;AAEvC,MAAMC,GAAG,GAAGD,YAAY,CAAC,gCAAgC,CAAC;AAE1D,MAAME,IAAI,GAAG;EACXC,SAAS,EAAE,uBAAuB;EAClCC,MAAM,EAAE,oBAAoB;EAC5BC,OAAO,EAAE,qBAAqB;EAC9BC,SAAS,EAAE,uBAAuB;EAClCC,gBAAgB,EAAE,8BAA8B;EAChDC,WAAW,EAAE;AACf,CAAU;AAQV,eAAeC,aAAaA,CAAA,EAA+B;EACzD,IAAI;IACF,OAAQ,MAAM,MAAM,CAAC,mBAAmB,CAAC;EAC3C,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAM,IAAIC,KAAK,CACb,0FACED,GAAG,YAAYC,KAAK,GAAGD,GAAG,CAACE,OAAO,GAAGC,MAAM,CAACH,GAAG,CAAC,GAEpD,CAAC;EACH;AACF;AAEA,OAAO,MAAMI,8BAA8B,CAAgC;EACjEC,WAAW,GAAsC,IAAI;EAE7D;AACF;AACA;AACA;EACUC,UAAU,GAAkBC,OAAO,CAACC,OAAO,CAAC,CAAC;;EAErD;AACF;AACA;AACA;AACA;EACEC,WAAWA,CAACC,YAA8C,GAAGX,aAAa,EAAE;IAC1E,IAAI,CAACY,MAAM,GAAGD,YAAY;EAC5B;EAEA,IAAYE,MAAMA,CAAA,EAA+B;IAC/C,IAAI,CAAC,IAAI,CAACP,WAAW,EAAE,IAAI,CAACA,WAAW,GAAG,IAAI,CAACM,MAAM,CAAC,CAAC;IACvD,OAAO,IAAI,CAACN,WAAW;EACzB;;EAEA;EACQQ,YAAYA,CAACC,EAAuB,EAAiB;IAC3D,MAAMC,IAAI,GAAG,IAAI,CAACT,UAAU,CAACU,IAAI,CAACF,EAAE,EAAEA,EAAE,CAAC;IACzC,IAAI,CAACR,UAAU,GAAGS,IAAI,CAACE,KAAK,CAAC,MAAM;MACjC;IAAA,CACD,CAAC;IACF,OAAOF,IAAI;EACb;EAEAG,IAAIA,CAACC,MAA4B,EAAiB;IAChD,OAAO,IAAI,CAACN,YAAY,CAAC,YAAY;MACnC,MAAMO,CAAC,GAAG,MAAM,IAAI,CAACR,MAAM;MAC3B,MAAML,OAAO,CAACc,GAAG,CAAC,CAChBD,CAAC,CAACE,YAAY,CAAC9B,IAAI,CAACC,SAAS,EAAE0B,MAAM,CAAC1B,SAAS,CAAC,EAChD2B,CAAC,CAACE,YAAY,CAAC9B,IAAI,CAACE,MAAM,EAAEyB,MAAM,CAACI,cAAc,CAAC,EAClDH,CAAC,CAACE,YAAY,CAAC9B,IAAI,CAACG,OAAO,EAAEwB,MAAM,CAACK,gBAAgB,CAAC,EACrDL,MAAM,CAACvB,SAAS,KAAK6B,SAAS,GAC1BL,CAAC,CAACE,YAAY,CAAC9B,IAAI,CAACI,SAAS,EAAEO,MAAM,CAACgB,MAAM,CAACvB,SAAS,CAAC,CAAC,GACxDwB,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACI,SAAS,CAAC,EACrCwB,CAAC,CAACE,YAAY,CAAC9B,IAAI,CAACK,gBAAgB,EAAEM,MAAM,CAACgB,MAAM,CAACtB,gBAAgB,CAAC,CAAC,EACtEsB,MAAM,CAACrB,WAAW,GACdsB,CAAC,CAACE,YAAY,CAAC9B,IAAI,CAACM,WAAW,EAAEqB,MAAM,CAACrB,WAAW,CAAC,GACpDsB,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACM,WAAW,CAAC,CACxC,CAAC;IACJ,CAAC,CAAC;EACJ;EAEA,MAAM6B,IAAIA,CAAA,EAAyC;IACjD;IACA,MAAM,IAAI,CAACrB,UAAU,CAACW,KAAK,CAAC,MAAMQ,SAAS,CAAC;IAC5C,MAAML,CAAC,GAAG,MAAM,IAAI,CAACR,MAAM;IAC3B,MAAM,CAACnB,SAAS,EAAEC,MAAM,EAAEC,OAAO,EAAEiC,YAAY,EAAEC,WAAW,EAAE/B,WAAW,CAAC,GAAG,MAAMS,OAAO,CAACc,GAAG,CAAC,CAC7FD,CAAC,CAACU,YAAY,CAACtC,IAAI,CAACC,SAAS,CAAC,EAC9B2B,CAAC,CAACU,YAAY,CAACtC,IAAI,CAACE,MAAM,CAAC,EAC3B0B,CAAC,CAACU,YAAY,CAACtC,IAAI,CAACG,OAAO,CAAC,EAC5ByB,CAAC,CAACU,YAAY,CAACtC,IAAI,CAACI,SAAS,CAAC,EAC9BwB,CAAC,CAACU,YAAY,CAACtC,IAAI,CAACK,gBAAgB,CAAC,EACrCuB,CAAC,CAACU,YAAY,CAACtC,IAAI,CAACM,WAAW,CAAC,CACjC,CAAC;IACF,IAAI,CAACL,SAAS,IAAI,CAACC,MAAM,IAAI,CAACC,OAAO,EAAE;MACrCJ,GAAG,CAACwC,IAAI,CAAC,gCAAgC,CAAC;MAC1C,OAAO,IAAI;IACb;IACA,MAAMnC,SAAS,GAAGgC,YAAY,GAAGI,MAAM,CAACJ,YAAY,CAAC,GAAGH,SAAS;IACjE,MAAM5B,gBAAgB,GAAGgC,WAAW,GAAGG,MAAM,CAACH,WAAW,CAAC,GAAG,CAAC;IAC9D,MAAMV,MAA4B,GAAG;MACnC1B,SAAS;MACT8B,cAAc,EAAE7B,MAAM;MACtB8B,gBAAgB,EAAE7B,OAAO;MACzBE,gBAAgB,EAAEmC,MAAM,CAACC,QAAQ,CAACpC,gBAAgB,CAAC,GAAGA,gBAAgB,GAAG;IAC3E,CAAC;IACD,IAAID,SAAS,KAAK6B,SAAS,IAAIO,MAAM,CAACC,QAAQ,CAACrC,SAAS,CAAC,EAAEuB,MAAM,CAACvB,SAAS,GAAGA,SAAS;IACvF,IAAIE,WAAW,EAAEqB,MAAM,CAACrB,WAAW,GAAGA,WAAW;IACjD,OAAOqB,MAAM;EACf;EAEAe,KAAKA,CAAA,EAAkB;IACrB,OAAO,IAAI,CAACrB,YAAY,CAAC,YAAY;MACnC,MAAMO,CAAC,GAAG,MAAM,IAAI,CAACR,MAAM;MAC3B,MAAML,OAAO,CAACc,GAAG,CAAC,CAChBD,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACC,SAAS,CAAC,EACjC2B,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACE,MAAM,CAAC,EAC9B0B,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACG,OAAO,CAAC,EAC/ByB,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACI,SAAS,CAAC,EACjCwB,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACK,gBAAgB,CAAC,EACxCuB,CAAC,CAACM,eAAe,CAAClC,IAAI,CAACM,WAAW,CAAC,CACpC,CAAC;IACJ,CAAC,CAAC;EACJ;AACF","ignoreList":[]}
+{"version":3,"names":["createLogger","log","KEY_REFERENCE","RETIRED_KEYS","defaultLoader","err","Error","message","String","SecureStorePendingSessionStore","secureStore","writeQueue","Promise","resolve","constructor","moduleLoader","loader","module","enqueueWrite","op","next","then","catch","save","record","s","setItemAsync","reference","load","undefined","getItemAsync","fine","clear","all","deleteItemAsync","map","key"],"sourceRoot":"../../../src","sources":["internal/secure-store-pending-session-store.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;;AAIA,SAASA,YAAY,QAAQ,aAAU;AAEvC,MAAMC,GAAG,GAAGD,YAAY,CAAC,gCAAgC,CAAC;AAE1D,MAAME,aAAa,GAAG,sBAAsB;;AAE5C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,YAAY,GAAG,CACnB,kBAAkB,EAClB,uBAAuB,EACvB,oBAAoB,EACpB,qBAAqB,EACrB,uBAAuB,EACvB,8BAA8B,EAC9B,yBAAyB,CACjB;AAQV,eAAeC,aAAaA,CAAA,EAA+B;EACzD,IAAI;IACF,OAAQ,MAAM,MAAM,CAAC,mBAAmB,CAAC;EAC3C,CAAC,CAAC,OAAOC,GAAG,EAAE;IACZ,MAAM,IAAIC,KAAK,CACb,0FACED,GAAG,YAAYC,KAAK,GAAGD,GAAG,CAACE,OAAO,GAAGC,MAAM,CAACH,GAAG,CAAC,GAEpD,CAAC;EACH;AACF;AAEA,OAAO,MAAMI,8BAA8B,CAAgC;EACjEC,WAAW,GAAsC,IAAI;EAE7D;AACF;AACA;AACA;EACUC,UAAU,GAAkBC,OAAO,CAACC,OAAO,CAAC,CAAC;;EAErD;AACF;AACA;AACA;AACA;EACEC,WAAWA,CAACC,YAA8C,GAAGX,aAAa,EAAE;IAC1E,IAAI,CAACY,MAAM,GAAGD,YAAY;EAC5B;EAEA,IAAYE,MAAMA,CAAA,EAA+B;IAC/C,IAAI,CAAC,IAAI,CAACP,WAAW,EAAE,IAAI,CAACA,WAAW,GAAG,IAAI,CAACM,MAAM,CAAC,CAAC;IACvD,OAAO,IAAI,CAACN,WAAW;EACzB;;EAEA;EACQQ,YAAYA,CAACC,EAAuB,EAAiB;IAC3D,MAAMC,IAAI,GAAG,IAAI,CAACT,UAAU,CAACU,IAAI,CAACF,EAAE,EAAEA,EAAE,CAAC;IACzC,IAAI,CAACR,UAAU,GAAGS,IAAI,CAACE,KAAK,CAAC,MAAM;MACjC;IAAA,CACD,CAAC;IACF,OAAOF,IAAI;EACb;EAEAG,IAAIA,CAACC,MAA4B,EAAiB;IAChD,OAAO,IAAI,CAACN,YAAY,CAAC,YAAY;MACnC,MAAMO,CAAC,GAAG,MAAM,IAAI,CAACR,MAAM;MAC3B,MAAMQ,CAAC,CAACC,YAAY,CAACxB,aAAa,EAAEsB,MAAM,CAACG,SAAS,CAAC;IACvD,CAAC,CAAC;EACJ;EAEA,MAAMC,IAAIA,CAAA,EAAyC;IACjD;IACA,MAAM,IAAI,CAACjB,UAAU,CAACW,KAAK,CAAC,MAAMO,SAAS,CAAC;IAC5C,MAAMJ,CAAC,GAAG,MAAM,IAAI,CAACR,MAAM;IAC3B,MAAMU,SAAS,GAAG,MAAMF,CAAC,CAACK,YAAY,CAAC5B,aAAa,CAAC;IACrD,IAAI,CAACyB,SAAS,EAAE;MACd1B,GAAG,CAAC8B,IAAI,CAAC,gCAAgC,CAAC;MAC1C,OAAO,IAAI;IACb;IACA,OAAO;MAAEJ;IAAU,CAAC;EACtB;EAEAK,KAAKA,CAAA,EAAkB;IACrB,OAAO,IAAI,CAACd,YAAY,CAAC,YAAY;MACnC,MAAMO,CAAC,GAAG,MAAM,IAAI,CAACR,MAAM;MAC3B,MAAML,OAAO,CAACqB,GAAG,CAAC,CAChBR,CAAC,CAACS,eAAe,CAAChC,aAAa,CAAC,EAChC,GAAGC,YAAY,CAACgC,GAAG,CAAEC,GAAG,IAAKX,CAAC,CAACS,eAAe,CAACE,GAAG,CAAC,CAAC,CACrD,CAAC;IACJ,CAAC,CAAC;EACJ;AACF","ignoreList":[]}

package/lib/module/internal/url-parts.js

@@ -0,0 +1,139 @@
+"use strict";
+
+/**
+ * Minimal URL parsing that does not go through the global `URL`.
+ *
+ * React Native ships a stub: every component accessor — `protocol`, `hostname`,
+ * `port`, `origin`, `search`, `pathname` — throws "not implemented", and
+ * `searchParams` returns a fresh empty instance that never reads the URL it was
+ * constructed from (`react-native/Libraries/Blob/URL.js`, installed globally by
+ * `setUpXHR.js`). Code written against the standard therefore behaves correctly
+ * under Jest, which runs on Node's real `URL`, and silently reads nothing on a
+ * device.
+ *
+ * The SDK parses what it needs itself rather than asking the host app to install
+ * a polyfill whose presence it cannot verify — an origin check that quietly
+ * stops comparing hosts is worse than one that was never written.
+ */
+
+/** The parts of a URL this SDK compares origins on. */
+
+/** Scheme plus authority. Anything without an authority has no origin to compare. */
+const SCHEME_AND_AUTHORITY = /^([A-Za-z][A-Za-z0-9+.-]*):\/\/([^/?#]*)/;
+const DEFAULT_PORTS = {
+  http: 80,
+  https: 443
+};
+
+/**
+ * Splits [url] into the parts an origin comparison needs, or null if it has no
+ * authority to compare.
+ */
+export function parseUrlParts(url) {
+  const match = SCHEME_AND_AUTHORITY.exec(url.trim());
+  if (!match?.[1] || match[2] === undefined) return null;
+  const scheme = match[1].toLowerCase();
+
+  // Everything up to the last `@` is userinfo, not host. `https://api.real.example@evil.example`
+  // is a request to evil.example, and reading the left half would accept it as the real one.
+  const authority = match[2].slice(match[2].lastIndexOf('@') + 1);
+  const hostAndPort = splitHostAndPort(authority);
+  if (!hostAndPort) return null;
+  const {
+    host,
+    portText
+  } = hostAndPort;
+  if (host.length === 0) return null;
+
+  // An empty port (`https://host:/x`) means the scheme's default, as does no port.
+  if (portText === undefined || portText.length === 0) {
+    return {
+      scheme,
+      host: host.toLowerCase(),
+      port: DEFAULT_PORTS[scheme]
+    };
+  }
+  if (!/^\d+$/.test(portText)) return null;
+  const port = Number.parseInt(portText, 10);
+  if (port > 65535) return null;
+  return {
+    scheme,
+    host: host.toLowerCase(),
+    port
+  };
+}
+
+/**
+ * Whether two URLs share a scheme, host and port.
+ *
+ * Both must carry an authority, so a relative path never matches an absolute
+ * URL: `/link/payment/x` names no origin and must not be read as naming this one.
+ */
+export function isSameOrigin(a, b) {
+  const left = parseUrlParts(a);
+  const right = parseUrlParts(b);
+  if (!left || !right) return false;
+  return left.scheme === right.scheme && left.host === right.host && left.port === right.port;
+}
+
+/**
+ * Reads the query string of [url] into a plain object.
+ *
+ * The first occurrence of a repeated key wins, matching `URLSearchParams.get`.
+ * A value the SDK cannot decode is kept in its raw form rather than dropping the
+ * parameter: callers compare against known literals, and a mangled value should
+ * fail that comparison rather than read as absent.
+ */
+export function parseQueryParams(url) {
+  const params = {};
+  const start = url.indexOf('?');
+  if (start === -1) return params;
+  const fragment = url.indexOf('#', start);
+  const query = fragment === -1 ? url.slice(start + 1) : url.slice(start + 1, fragment);
+  for (const pair of query.split('&')) {
+    if (pair.length === 0) continue;
+    const eq = pair.indexOf('=');
+    const rawKey = eq === -1 ? pair : pair.slice(0, eq);
+    const rawValue = eq === -1 ? '' : pair.slice(eq + 1);
+    const key = decodeFormComponent(rawKey);
+    if (key.length === 0 || Object.hasOwn(params, key)) continue;
+    params[key] = decodeFormComponent(rawValue);
+  }
+  return params;
+}
+function splitHostAndPort(authority) {
+  // An IPv6 literal carries colons of its own, so its brackets close the host.
+  if (authority.startsWith('[')) {
+    const close = authority.indexOf(']');
+    if (close === -1) return null;
+    const host = authority.slice(0, close + 1);
+    const rest = authority.slice(close + 1);
+    if (rest.length === 0) return {
+      host,
+      portText: undefined
+    };
+    if (!rest.startsWith(':')) return null;
+    return {
+      host,
+      portText: rest.slice(1)
+    };
+  }
+  const colon = authority.indexOf(':');
+  if (colon === -1) return {
+    host: authority,
+    portText: undefined
+  };
+  return {
+    host: authority.slice(0, colon),
+    portText: authority.slice(colon + 1)
+  };
+}
+function decodeFormComponent(value) {
+  const plusesAsSpaces = value.replace(/\+/g, ' ');
+  try {
+    return decodeURIComponent(plusesAsSpaces);
+  } catch {
+    return plusesAsSpaces;
+  }
+}
+//# sourceMappingURL=url-parts.js.map