@wirexapp/card-sdk-core 1.1.0-beta.3 → 1.1.0

package/dist/walletLaunch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletLaunch.d.ts","sourceRoot":"","sources":["../src/walletLaunch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,qBAAqB;IACpC,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,cAAc,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,EAAE,MAAM,CAAC;IACjB;;8DAE0D;IAC1D,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,kEAAkE;AAClE,eAAO,MAAM,sBAAsB;;;;;;;;;CASzB,CAAC;AAIX;;;;qDAIqD;AACrD,eAAO,MAAM,yBAAyB,GAAI,QAAQ,qBAAqB,KAAG,MAiBzE,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,oBAAoB,GAAI,aAAa,MAAM,EAAE,QAAQ,qBAAqB,EAAE,SAAS,MAAM,KAAG,MAI1G,CAAC"}

package/dist/walletLaunch.js

@@ -0,0 +1,45 @@
+import { resolveWalletReturnUrl } from './walletReturnUrl.js';
+/** Fragment keys (single letters: the fragment is QR payload). */
+export const PCI_WALLET_LAUNCH_KEYS = {
+    token: 't',
+    estimationId: 'e',
+    sourceAmount: 's',
+    destinationAmount: 'd',
+    fee: 'f',
+    expiresAt: 'x',
+    provider: 'p',
+    returnUrl: 'r',
+};
+const money = (value) => `${value.amount}:${value.currency}`;
+/** `t=<token>&e=<estimationId>&s=<amount>:<CUR>[&d=…][&f=…][&x=<unix seconds>]&p=<provider>[&r=<return link>]`
+ *  (no leading `#`). Throws a `TypeError` for a `returnUrl` the frame would
+ *  refuse (the frame ignores such a link silently — fail here, at build
+ *  time, instead). The raw value is encoded, never a normalised form, so the
+ *  fragment stays byte-identical across the SDKs. */
+export const buildWalletLaunchFragment = (params) => {
+    if (params.returnUrl !== undefined && !resolveWalletReturnUrl(params.returnUrl)) {
+        throw new TypeError("returnUrl must be an https App Link or your app's own scheme — javascript:, data:, blob:, file:, about: and http: are refused");
+    }
+    const keys = PCI_WALLET_LAUNCH_KEYS;
+    const query = new URLSearchParams();
+    query.set(keys.token, params.checkoutToken);
+    query.set(keys.estimationId, params.quote.estimationId);
+    query.set(keys.sourceAmount, money(params.quote.sourceAmount));
+    if (params.quote.destinationAmount)
+        query.set(keys.destinationAmount, money(params.quote.destinationAmount));
+    if (params.quote.fee)
+        query.set(keys.fee, money(params.quote.fee));
+    if (params.quote.expiresAtMs)
+        query.set(keys.expiresAt, String(Math.floor(params.quote.expiresAtMs / 1000)));
+    query.set(keys.provider, params.provider);
+    if (params.returnUrl)
+        query.set(keys.returnUrl, params.returnUrl);
+    return query.toString();
+};
+/** The full URL to open top-level (Custom Tab) or to encode in a QR. */
+export const buildWalletLaunchUrl = (frameOrigin, params, client) => {
+    const base = `${frameOrigin.replace(/\/+$/, '')}/wallet-checkout.html`;
+    const query = client ? `?client=${encodeURIComponent(client)}` : '';
+    return `${base}${query}#${buildWalletLaunchFragment(params)}`;
+};
+//# sourceMappingURL=walletLaunch.js.map

package/dist/walletLaunch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletLaunch.js","sourceRoot":"","sources":["../src/walletLaunch.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AA0B3D,kEAAkE;AAClE,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,KAAK,EAAE,GAAG;IACV,YAAY,EAAE,GAAG;IACjB,YAAY,EAAE,GAAG;IACjB,iBAAiB,EAAE,GAAG;IACtB,GAAG,EAAE,GAAG;IACR,SAAS,EAAE,GAAG;IACd,QAAQ,EAAE,GAAG;IACb,SAAS,EAAE,GAAG;CACN,CAAC;AAEX,MAAM,KAAK,GAAG,CAAC,KAAoD,EAAU,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;AAEpH;;;;qDAIqD;AACrD,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,MAA6B,EAAU,EAAE;IACjF,IAAI,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,sBAAsB,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,SAAS,CACjB,+HAA+H,CAChI,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC;IACpC,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;IACpC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC5C,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACxD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,KAAK,CAAC,iBAAiB;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAC7G,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IAC7G,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAClE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;AAC1B,CAAC,CAAC;AAEF,wEAAwE;AACxE,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,WAAmB,EAAE,MAA6B,EAAE,MAAe,EAAU,EAAE;IAClH,MAAM,IAAI,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,OAAO,GAAG,IAAI,GAAG,KAAK,IAAI,yBAAyB,CAAC,MAAM,CAAC,EAAE,CAAC;AAChE,CAAC,CAAC"}

package/dist/walletReturnUrl.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Return-link policy for STANDALONE launches (the result screen's "Return to
+ * the app" — `returnUrl` in the init, `r` in the launch fragment).
+ *
+ * Any scheme an app can register is accepted: `https:` (an Android App Link /
+ * iOS Universal Link — the OS verifies it for the partner's package, the
+ * preferred form) or the app's own scheme (`com.partner.app:/wallet/return` —
+ * works on both platforms without a domain; any installed app may claim it,
+ * which the partner accepts). Refused are only the schemes that differ IN
+ * KIND from "open the partner's app": the ones a browser executes as content
+ * in the checkout's own origin (`javascript:`, `data:`, `blob:`, …),
+ * browser-internal ones, and cleartext `http:`. Everything else is reachable
+ * through an https redirect anyway, so a longer denylist would be theatre.
+ *
+ * The link carries `estimation_id` and `outcome` only — never the token,
+ * never the wallet payload — and is a UX signal: the app reconciles by
+ * estimation status. Mirrored byte-for-byte in
+ * `sdk-service/frames-src/src/returnLink.ts` (the frames bundle must not
+ * pull the host SDK in) — change both.
+ */
+export declare const PCI_WALLET_RETURN_URL_BLOCKED_SCHEMES: readonly string[];
+/**
+ * The normalised href when `candidate` is an acceptable return link, else
+ * `null`. Parsed with the WHATWG URL parser BEFORE the scheme check, so case
+ * tricks and embedded tabs / newlines in the scheme (`JavaScript:`,
+ * `java\tscript:`) are normalised away rather than slipping past a string
+ * compare.
+ */
+export declare const resolveWalletReturnUrl: (candidate: unknown) => string | null;
+//# sourceMappingURL=walletReturnUrl.d.ts.map

package/dist/walletReturnUrl.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletReturnUrl.d.ts","sourceRoot":"","sources":["../src/walletReturnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,qCAAqC,EAAE,SAAS,MAAM,EAkBlE,CAAC;AAQF;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,GAAI,WAAW,OAAO,KAAG,MAAM,GAAG,IASpE,CAAC"}

package/dist/walletReturnUrl.js

@@ -0,0 +1,63 @@
+/**
+ * Return-link policy for STANDALONE launches (the result screen's "Return to
+ * the app" — `returnUrl` in the init, `r` in the launch fragment).
+ *
+ * Any scheme an app can register is accepted: `https:` (an Android App Link /
+ * iOS Universal Link — the OS verifies it for the partner's package, the
+ * preferred form) or the app's own scheme (`com.partner.app:/wallet/return` —
+ * works on both platforms without a domain; any installed app may claim it,
+ * which the partner accepts). Refused are only the schemes that differ IN
+ * KIND from "open the partner's app": the ones a browser executes as content
+ * in the checkout's own origin (`javascript:`, `data:`, `blob:`, …),
+ * browser-internal ones, and cleartext `http:`. Everything else is reachable
+ * through an https redirect anyway, so a longer denylist would be theatre.
+ *
+ * The link carries `estimation_id` and `outcome` only — never the token,
+ * never the wallet payload — and is a UX signal: the app reconciles by
+ * estimation status. Mirrored byte-for-byte in
+ * `sdk-service/frames-src/src/returnLink.ts` (the frames bundle must not
+ * pull the host SDK in) — change both.
+ */
+export const PCI_WALLET_RETURN_URL_BLOCKED_SCHEMES = [
+    // executed as content in this origin
+    'javascript:',
+    'vbscript:',
+    'data:',
+    'blob:',
+    'filesystem:',
+    // browser-internal
+    'file:',
+    'about:',
+    'chrome:',
+    'chrome-extension:',
+    'edge:',
+    'moz-extension:',
+    'safari-web-extension:',
+    'view-source:',
+    // cleartext — https is the only web scheme
+    'http:',
+];
+const BLOCKED = new Set(PCI_WALLET_RETURN_URL_BLOCKED_SCHEMES);
+/** Longest return link accepted — the launch URL is a QR payload / a Custom
+ *  Tab URL, and a partner's return link is a short route. */
+const MAX_RETURN_URL_CHARS = 2048;
+/**
+ * The normalised href when `candidate` is an acceptable return link, else
+ * `null`. Parsed with the WHATWG URL parser BEFORE the scheme check, so case
+ * tricks and embedded tabs / newlines in the scheme (`JavaScript:`,
+ * `java\tscript:`) are normalised away rather than slipping past a string
+ * compare.
+ */
+export const resolveWalletReturnUrl = (candidate) => {
+    if (typeof candidate !== 'string' || !candidate || candidate.length > MAX_RETURN_URL_CHARS)
+        return null;
+    let url;
+    try {
+        url = new URL(candidate);
+    }
+    catch {
+        return null;
+    }
+    return BLOCKED.has(url.protocol) ? null : url.href;
+};
+//# sourceMappingURL=walletReturnUrl.js.map

package/dist/walletReturnUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"walletReturnUrl.js","sourceRoot":"","sources":["../src/walletReturnUrl.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAsB;IACtE,qCAAqC;IACrC,aAAa;IACb,WAAW;IACX,OAAO;IACP,OAAO;IACP,aAAa;IACb,mBAAmB;IACnB,OAAO;IACP,QAAQ;IACR,SAAS;IACT,mBAAmB;IACnB,OAAO;IACP,gBAAgB;IAChB,uBAAuB;IACvB,cAAc;IACd,2CAA2C;IAC3C,OAAO;CACR,CAAC;AAEF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,qCAAqC,CAAC,CAAC;AAE/D;6DAC6D;AAC7D,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAElC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,SAAkB,EAAiB,EAAE;IAC1E,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,oBAAoB;QAAE,OAAO,IAAI,CAAC;IACxG,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;AACrD,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wirexapp/card-sdk-core",
-  "version": "1.1.0-beta.3",
+  "version": "1.1.0",
   "type": "module",
   "description": "Shared foundation of the Wirex PCI card SDK: postMessage protocol, frame channel, frame-URL building, collect machinery. CHD-free.",
   "license": "UNLICENSED",