@swype-org/deposit 0.3.31 → 0.3.34

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { D as DepositStatus, a as DepositResult, b as DepositError, c as DepositConfig, d as DepositRequest } from './types-NMNL3Jut.cjs';
-export { C as CheckoutConfig, e as CheckoutError, f as CheckoutErrorCode, g as CheckoutStatus, h as DepositErrorCode, S as SignerFunction, i as SignerRequest, j as SignerResponse, T as TransferSummary, k as getDisplayMessage } from './types-NMNL3Jut.cjs';
+import { D as DepositStatus, a as DepositResult, b as DepositError, c as DepositConfig, d as DepositRequest } from './types-Bwy_1TQT.cjs';
+export { C as CheckoutConfig, e as CheckoutError, f as CheckoutErrorCode, g as CheckoutStatus, h as DepositErrorCode, S as SignerFunction, i as SignerRequest, j as SignerResponse, T as TransferSummary, k as getDisplayMessage } from './types-Bwy_1TQT.cjs';
 
 declare const DEFAULT_WEBVIEW_BASE_URL = "https://pay.blink.cash";
 declare const SANDBOX_WEBVIEW_BASE_URL = "https://pay-sandbox.blink.cash";
@@ -224,6 +224,31 @@ declare class Deposit {
      * ignoring the config.
      */
     private applyBrandParam;
+    /**
+     * Normalizes the display-only {@link DepositRequest.balance} for the wire,
+     * or returns `undefined` to omit it everywhere — the `blink:signed-payload`
+     * sibling field and the legacy fallback URL param alike. Additive wire
+     * discipline: an unset or rejected balance leaves both channels
+     * byte-for-byte what they always were, and old webviews ignore the field
+     * by construction.
+     *
+     * Validated here purely so the merchant sees the complaint in their OWN
+     * console (same rationale as {@link applyBrandParam}); the hosted flow
+     * re-validates whatever arrives, since both channels are host-controlled
+     * input. A rejected balance never blocks the deposit — the flow proceeds
+     * without the subtitle.
+     */
+    private normalizeRequestBalance;
+    /**
+     * Normalizes {@link DepositRequest.minimumDeposit} for the wire, or returns
+     * `undefined` to omit it everywhere. Same additive discipline and same
+     * console-complaint rationale as {@link normalizeRequestBalance}.
+     *
+     * A rejected minimum never blocks the deposit — the flow proceeds on
+     * Blink's own per-route floor, which is the safe direction to fail: the
+     * merchant loses their higher floor, nobody is locked out of depositing.
+     */
+    private normalizeRequestMinimumDeposit;
     /**
      * Fluid is the default; `layout: 'fixed'` opts back into the legacy
      * container. Embedded is a separate presentation and never fluid — the
@@ -419,6 +444,6 @@ interface RpcHostOptions {
  */
 declare function attachRpcHost(options: RpcHostOptions): RpcHostHandle;
 
-declare const VERSION = "0.3.27";
+declare const VERSION = "0.3.32";
 
 export { ALLOWED_RPC_METHODS, type AdvertisedWallet, BRIDGE_PROTOCOL_VERSION, type EIP1193Provider as BridgeEIP1193Provider, type BridgeHelloMessage, type BridgeMessage, Checkout, DEFAULT_WEBVIEW_BASE_URL, Deposit, DepositConfig, DepositError, DepositRequest, DepositResult, DepositStatus, type EIP6963ProviderDetail, type EIP6963ProviderInfo, type RegisteredProvider, type RpcEventMessage, type RpcHostHandle, type RpcHostOptions, type RpcRequestMessage, type RpcResponseMessage, SANDBOX_WEBVIEW_BASE_URL, VERSION, type WalletDiscovererHandle, type WalletsAdvertisedMessage, attachRpcHost, createWalletDiscoverer, parseBridgeMessage };

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { D as DepositStatus, a as DepositResult, b as DepositError, c as DepositConfig, d as DepositRequest } from './types-NMNL3Jut.js';
-export { C as CheckoutConfig, e as CheckoutError, f as CheckoutErrorCode, g as CheckoutStatus, h as DepositErrorCode, S as SignerFunction, i as SignerRequest, j as SignerResponse, T as TransferSummary, k as getDisplayMessage } from './types-NMNL3Jut.js';
+import { D as DepositStatus, a as DepositResult, b as DepositError, c as DepositConfig, d as DepositRequest } from './types-Bwy_1TQT.js';
+export { C as CheckoutConfig, e as CheckoutError, f as CheckoutErrorCode, g as CheckoutStatus, h as DepositErrorCode, S as SignerFunction, i as SignerRequest, j as SignerResponse, T as TransferSummary, k as getDisplayMessage } from './types-Bwy_1TQT.js';
 
 declare const DEFAULT_WEBVIEW_BASE_URL = "https://pay.blink.cash";
 declare const SANDBOX_WEBVIEW_BASE_URL = "https://pay-sandbox.blink.cash";
@@ -224,6 +224,31 @@ declare class Deposit {
      * ignoring the config.
      */
     private applyBrandParam;
+    /**
+     * Normalizes the display-only {@link DepositRequest.balance} for the wire,
+     * or returns `undefined` to omit it everywhere — the `blink:signed-payload`
+     * sibling field and the legacy fallback URL param alike. Additive wire
+     * discipline: an unset or rejected balance leaves both channels
+     * byte-for-byte what they always were, and old webviews ignore the field
+     * by construction.
+     *
+     * Validated here purely so the merchant sees the complaint in their OWN
+     * console (same rationale as {@link applyBrandParam}); the hosted flow
+     * re-validates whatever arrives, since both channels are host-controlled
+     * input. A rejected balance never blocks the deposit — the flow proceeds
+     * without the subtitle.
+     */
+    private normalizeRequestBalance;
+    /**
+     * Normalizes {@link DepositRequest.minimumDeposit} for the wire, or returns
+     * `undefined` to omit it everywhere. Same additive discipline and same
+     * console-complaint rationale as {@link normalizeRequestBalance}.
+     *
+     * A rejected minimum never blocks the deposit — the flow proceeds on
+     * Blink's own per-route floor, which is the safe direction to fail: the
+     * merchant loses their higher floor, nobody is locked out of depositing.
+     */
+    private normalizeRequestMinimumDeposit;
     /**
      * Fluid is the default; `layout: 'fixed'` opts back into the legacy
      * container. Embedded is a separate presentation and never fluid — the
@@ -419,6 +444,6 @@ interface RpcHostOptions {
  */
 declare function attachRpcHost(options: RpcHostOptions): RpcHostHandle;
 
-declare const VERSION = "0.3.27";
+declare const VERSION = "0.3.32";
 
 export { ALLOWED_RPC_METHODS, type AdvertisedWallet, BRIDGE_PROTOCOL_VERSION, type EIP1193Provider as BridgeEIP1193Provider, type BridgeHelloMessage, type BridgeMessage, Checkout, DEFAULT_WEBVIEW_BASE_URL, Deposit, DepositConfig, DepositError, DepositRequest, DepositResult, DepositStatus, type EIP6963ProviderDetail, type EIP6963ProviderInfo, type RegisteredProvider, type RpcEventMessage, type RpcHostHandle, type RpcHostOptions, type RpcRequestMessage, type RpcResponseMessage, SANDBOX_WEBVIEW_BASE_URL, VERSION, type WalletDiscovererHandle, type WalletsAdvertisedMessage, attachRpcHost, createWalletDiscoverer, parseBridgeMessage };

package/dist/index.js

@@ -1,7 +1,7 @@
-export { ALLOWED_RPC_METHODS, BRIDGE_PROTOCOL_VERSION, Checkout, CheckoutError, DEFAULT_WEBVIEW_BASE_URL, Deposit, DepositError, SANDBOX_WEBVIEW_BASE_URL, attachRpcHost, createWalletDiscoverer, getDisplayMessage, parseBridgeMessage } from './chunk-HBW7IVRJ.js';
+export { ALLOWED_RPC_METHODS, BRIDGE_PROTOCOL_VERSION, Checkout, CheckoutError, DEFAULT_WEBVIEW_BASE_URL, Deposit, DepositError, SANDBOX_WEBVIEW_BASE_URL, attachRpcHost, createWalletDiscoverer, getDisplayMessage, parseBridgeMessage } from './chunk-24WCJE4H.js';
 
 // src/index.ts
-var VERSION = "0.3.27";
+var VERSION = "0.3.32";
 
 export { VERSION };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AA2CO,IAAM,OAAA,GAAU","file":"index.js","sourcesContent":["export { Deposit, Checkout, DEFAULT_WEBVIEW_BASE_URL, SANDBOX_WEBVIEW_BASE_URL } from './checkout.ts';\nexport { DepositError, CheckoutError, getDisplayMessage } from './errors.ts';\nexport type { DepositErrorCode, CheckoutErrorCode } from './errors.ts';\nexport type {\n  DepositConfig,\n  CheckoutConfig,\n  DepositStatus,\n  CheckoutStatus,\n  DepositRequest,\n  DepositResult,\n  SignerFunction,\n  SignerRequest,\n  SignerResponse,\n  TransferSummary,\n} from './types.ts';\n\n// ── Wallet bridge (advanced) ──────────────────────────────────────────\n// Internal building blocks for the top-frame → iframe wallet bridge.\n// Default merchant integrations don't need these — `createIframe()` wires\n// them automatically. Re-exported so monorepo tests and any merchant\n// custom-iframe wrapper can poke at the protocol shapes.\nexport { createWalletDiscoverer } from './walletBridge/discover.ts';\nexport type { WalletDiscovererHandle, RegisteredProvider } from './walletBridge/discover.ts';\nexport { attachRpcHost } from './walletBridge/rpcHost.ts';\nexport type { RpcHostHandle, RpcHostOptions } from './walletBridge/rpcHost.ts';\nexport {\n  ALLOWED_RPC_METHODS,\n  BRIDGE_PROTOCOL_VERSION,\n  parseBridgeMessage,\n} from './walletBridge/protocol.ts';\nexport type {\n  AdvertisedWallet,\n  BridgeMessage,\n  BridgeHelloMessage,\n  WalletsAdvertisedMessage,\n  RpcRequestMessage,\n  RpcResponseMessage,\n  RpcEventMessage,\n  EIP1193Provider as BridgeEIP1193Provider,\n  EIP6963ProviderInfo,\n  EIP6963ProviderDetail,\n} from './walletBridge/protocol.ts';\n\nexport const VERSION = '0.3.27';\n"]}
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AA2CO,IAAM,OAAA,GAAU","file":"index.js","sourcesContent":["export { Deposit, Checkout, DEFAULT_WEBVIEW_BASE_URL, SANDBOX_WEBVIEW_BASE_URL } from './checkout.ts';\nexport { DepositError, CheckoutError, getDisplayMessage } from './errors.ts';\nexport type { DepositErrorCode, CheckoutErrorCode } from './errors.ts';\nexport type {\n  DepositConfig,\n  CheckoutConfig,\n  DepositStatus,\n  CheckoutStatus,\n  DepositRequest,\n  DepositResult,\n  SignerFunction,\n  SignerRequest,\n  SignerResponse,\n  TransferSummary,\n} from './types.ts';\n\n// ── Wallet bridge (advanced) ──────────────────────────────────────────\n// Internal building blocks for the top-frame → iframe wallet bridge.\n// Default merchant integrations don't need these — `createIframe()` wires\n// them automatically. Re-exported so monorepo tests and any merchant\n// custom-iframe wrapper can poke at the protocol shapes.\nexport { createWalletDiscoverer } from './walletBridge/discover.ts';\nexport type { WalletDiscovererHandle, RegisteredProvider } from './walletBridge/discover.ts';\nexport { attachRpcHost } from './walletBridge/rpcHost.ts';\nexport type { RpcHostHandle, RpcHostOptions } from './walletBridge/rpcHost.ts';\nexport {\n  ALLOWED_RPC_METHODS,\n  BRIDGE_PROTOCOL_VERSION,\n  parseBridgeMessage,\n} from './walletBridge/protocol.ts';\nexport type {\n  AdvertisedWallet,\n  BridgeMessage,\n  BridgeHelloMessage,\n  WalletsAdvertisedMessage,\n  RpcRequestMessage,\n  RpcResponseMessage,\n  RpcEventMessage,\n  EIP1193Provider as BridgeEIP1193Provider,\n  EIP6963ProviderInfo,\n  EIP6963ProviderDetail,\n} from './walletBridge/protocol.ts';\n\nexport const VERSION = '0.3.32';\n"]}

package/dist/react.cjs

@@ -150,12 +150,14 @@ function parseWidthHint(key, value) {
 function buildRevealMessage() {
   return { type: "blink:reveal" };
 }
-function buildSignedPayloadMessage(merchantId, payload, signature) {
+function buildSignedPayloadMessage(merchantId, payload, signature, balance, minimumDeposit) {
   return {
     type: "blink:signed-payload",
     merchantId,
     payload,
-    signature
+    signature,
+    ...balance === void 0 ? {} : { balance },
+    ...minimumDeposit === void 0 ? {} : { minimumDeposit }
   };
 }
 
@@ -176,6 +178,26 @@ function normalizeBrandHex(value) {
   return `#${digits[0]}${digits[0]}${digits[1]}${digits[1]}${digits[2]}${digits[2]}`;
 }
 
+// src/balanceParam.ts
+var MAX_BALANCE_USD = 1e12;
+function normalizeDisplayBalance(value) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return null;
+  if (value < 0 || value >= MAX_BALANCE_USD) return null;
+  const cents = Math.floor(Number((value * 100).toPrecision(15)));
+  if (cents < 0 || cents >= MAX_BALANCE_USD * 100) return null;
+  return (cents / 100).toFixed(2);
+}
+
+// src/minimumDepositParam.ts
+var MAX_MINIMUM_DEPOSIT_USD = 1e6;
+function normalizeMinimumDeposit(value) {
+  if (typeof value !== "number" || !Number.isFinite(value)) return null;
+  if (value <= 0 || value >= MAX_MINIMUM_DEPOSIT_USD) return null;
+  const cents = Math.ceil(Number((value * 100).toPrecision(15)));
+  if (cents <= 0 || cents >= MAX_MINIMUM_DEPOSIT_USD * 100) return null;
+  return (cents / 100).toFixed(2);
+}
+
 // src/walletBridge/discover.ts
 function createWalletDiscoverer() {
   if (typeof window === "undefined") {
@@ -1576,6 +1598,53 @@ var Deposit = class {
     const encoded = Object.keys(BRAND_COLOR_PARAM_KEYS).filter((key) => accepted[key] !== void 0).map((key) => `${BRAND_COLOR_PARAM_KEYS[key]}-${accepted[key].slice(1)}`).join(".");
     if (encoded) url.searchParams.set("brand", encoded);
   }
+  /**
+   * Normalizes the display-only {@link DepositRequest.balance} for the wire,
+   * or returns `undefined` to omit it everywhere — the `blink:signed-payload`
+   * sibling field and the legacy fallback URL param alike. Additive wire
+   * discipline: an unset or rejected balance leaves both channels
+   * byte-for-byte what they always were, and old webviews ignore the field
+   * by construction.
+   *
+   * Validated here purely so the merchant sees the complaint in their OWN
+   * console (same rationale as {@link applyBrandParam}); the hosted flow
+   * re-validates whatever arrives, since both channels are host-controlled
+   * input. A rejected balance never blocks the deposit — the flow proceeds
+   * without the subtitle.
+   */
+  normalizeRequestBalance(balance) {
+    if (balance === void 0 || balance === null) return void 0;
+    const normalized = normalizeDisplayBalance(balance);
+    if (normalized === null) {
+      const received = typeof balance === "number" ? String(balance) : JSON.stringify(balance) ?? String(balance);
+      console.error(
+        `[blink] balance must be a finite number >= 0 and < 1e12 (USD, display only); received ${received}. Ignoring it.`
+      );
+      return void 0;
+    }
+    return normalized;
+  }
+  /**
+   * Normalizes {@link DepositRequest.minimumDeposit} for the wire, or returns
+   * `undefined` to omit it everywhere. Same additive discipline and same
+   * console-complaint rationale as {@link normalizeRequestBalance}.
+   *
+   * A rejected minimum never blocks the deposit — the flow proceeds on
+   * Blink's own per-route floor, which is the safe direction to fail: the
+   * merchant loses their higher floor, nobody is locked out of depositing.
+   */
+  normalizeRequestMinimumDeposit(minimumDeposit) {
+    if (minimumDeposit === void 0 || minimumDeposit === null) return void 0;
+    const normalized = normalizeMinimumDeposit(minimumDeposit);
+    if (normalized === null) {
+      const received = typeof minimumDeposit === "number" ? String(minimumDeposit) : JSON.stringify(minimumDeposit) ?? String(minimumDeposit);
+      console.error(
+        `[blink] minimumDeposit must be a finite number > 0 and < 1e6 (USD); received ${received}. Ignoring it.`
+      );
+      return void 0;
+    }
+    return normalized;
+  }
   /**
    * Fluid is the default; `layout: 'fixed'` opts back into the legacy
    * container. Embedded is a separate presentation and never fluid — the
@@ -1634,6 +1703,8 @@ var Deposit = class {
         signer: typeof this.config.signer === "string" ? this.config.signer : "<function>"
       });
       const signerRequest = buildSignerRequest(request, webviewBaseUrl);
+      const displayBalance = this.normalizeRequestBalance(request.balance);
+      const minimumDeposit = this.normalizeRequestMinimumDeposit(request.minimumDeposit);
       let preloadIframe;
       let iframeReadyPromise;
       const warm = this.takeWarmIframe();
@@ -1686,7 +1757,9 @@ var Deposit = class {
             buildSignedPayloadMessage(
               signerResponse.merchantId,
               signerResponse.payload,
-              signerResponse.signature
+              signerResponse.signature,
+              displayBalance,
+              minimumDeposit
             ),
             this.hostedOrigin
           );
@@ -1700,6 +1773,12 @@ var Deposit = class {
         hostedUrl.searchParams.set("merchantId", signerResponse.merchantId);
         hostedUrl.searchParams.set("payload", signerResponse.payload);
         hostedUrl.searchParams.set("signature", signerResponse.signature);
+        if (displayBalance !== void 0) {
+          hostedUrl.searchParams.set("balance", displayBalance);
+        }
+        if (minimumDeposit !== void 0) {
+          hostedUrl.searchParams.set("minDeposit", minimumDeposit);
+        }
         this.applyFullWidgetParam(hostedUrl);
         if (this.isEmbedded()) {
           this.applyLayoutParam(hostedUrl);