@swype-org/deposit 0.3.31 → 0.3.32

package/dist/index.cjs

@@ -147,12 +147,13 @@ function parseWidthHint(key, value) {
 function buildRevealMessage() {
   return { type: "blink:reveal" };
 }
-function buildSignedPayloadMessage(merchantId, payload, signature) {
+function buildSignedPayloadMessage(merchantId, payload, signature, balance) {
   return {
     type: "blink:signed-payload",
     merchantId,
     payload,
-    signature
+    signature,
+    ...balance === void 0 ? {} : { balance }
   };
 }
 
@@ -173,6 +174,16 @@ function normalizeBrandHex(value) {
   return `#${digits[0]}${digits[0]}${digits[1]}${digits[1]}${digits[2]}${digits[2]}`;
 }
 
+// src/balanceParam.ts
+var MAX_BALANCE_USD = 1e12;
+function normalizeDisplayBalance(value) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return null;
+  if (value < 0 || value >= MAX_BALANCE_USD) return null;
+  const cents = Math.floor(Number((value * 100).toPrecision(15)));
+  if (cents < 0 || cents >= MAX_BALANCE_USD * 100) return null;
+  return (cents / 100).toFixed(2);
+}
+
 // src/walletBridge/discover.ts
 function createWalletDiscoverer() {
   if (typeof window === "undefined") {
@@ -1573,6 +1584,32 @@ var Deposit = class {
     const encoded = Object.keys(BRAND_COLOR_PARAM_KEYS).filter((key) => accepted[key] !== void 0).map((key) => `${BRAND_COLOR_PARAM_KEYS[key]}-${accepted[key].slice(1)}`).join(".");
     if (encoded) url.searchParams.set("brand", encoded);
   }
+  /**
+   * Normalizes the display-only {@link DepositRequest.balance} for the wire,
+   * or returns `undefined` to omit it everywhere — the `blink:signed-payload`
+   * sibling field and the legacy fallback URL param alike. Additive wire
+   * discipline: an unset or rejected balance leaves both channels
+   * byte-for-byte what they always were, and old webviews ignore the field
+   * by construction.
+   *
+   * Validated here purely so the merchant sees the complaint in their OWN
+   * console (same rationale as {@link applyBrandParam}); the hosted flow
+   * re-validates whatever arrives, since both channels are host-controlled
+   * input. A rejected balance never blocks the deposit — the flow proceeds
+   * without the subtitle.
+   */
+  normalizeRequestBalance(balance) {
+    if (balance === void 0 || balance === null) return void 0;
+    const normalized = normalizeDisplayBalance(balance);
+    if (normalized === null) {
+      const received = typeof balance === "number" ? String(balance) : JSON.stringify(balance) ?? String(balance);
+      console.error(
+        `[blink] balance must be a finite number >= 0 and < 1e12 (USD, display only); received ${received}. Ignoring it.`
+      );
+      return void 0;
+    }
+    return normalized;
+  }
   /**
    * Fluid is the default; `layout: 'fixed'` opts back into the legacy
    * container. Embedded is a separate presentation and never fluid — the
@@ -1631,6 +1668,7 @@ var Deposit = class {
         signer: typeof this.config.signer === "string" ? this.config.signer : "<function>"
       });
       const signerRequest = buildSignerRequest(request, webviewBaseUrl);
+      const displayBalance = this.normalizeRequestBalance(request.balance);
       let preloadIframe;
       let iframeReadyPromise;
       const warm = this.takeWarmIframe();
@@ -1683,7 +1721,8 @@ var Deposit = class {
             buildSignedPayloadMessage(
               signerResponse.merchantId,
               signerResponse.payload,
-              signerResponse.signature
+              signerResponse.signature,
+              displayBalance
             ),
             this.hostedOrigin
           );
@@ -1697,6 +1736,9 @@ var Deposit = class {
         hostedUrl.searchParams.set("merchantId", signerResponse.merchantId);
         hostedUrl.searchParams.set("payload", signerResponse.payload);
         hostedUrl.searchParams.set("signature", signerResponse.signature);
+        if (displayBalance !== void 0) {
+          hostedUrl.searchParams.set("balance", displayBalance);
+        }
         this.applyFullWidgetParam(hostedUrl);
         if (this.isEmbedded()) {
           this.applyLayoutParam(hostedUrl);
@@ -1869,7 +1911,7 @@ function detectMerchantColorScheme() {
 var Checkout = Deposit;
 
 // src/index.ts
-var VERSION = "0.3.27";
+var VERSION = "0.3.32";
 
 exports.ALLOWED_RPC_METHODS = ALLOWED_RPC_METHODS;
 exports.BRIDGE_PROTOCOL_VERSION = BRIDGE_PROTOCOL_VERSION;