framepayments-react-native 3.0.0 → 4.0.0

package/lib/ui/theme/ThemeContext.d.ts

@@ -0,0 +1,4 @@
+import type { ResolvedFrameTheme } from './defaults';
+export declare const ThemeContext: import("react").Context<ResolvedFrameTheme | null>;
+export declare function useFrameTheme(): ResolvedFrameTheme;
+//# sourceMappingURL=ThemeContext.d.ts.map

package/lib/ui/theme/ThemeContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ThemeContext.d.ts","sourceRoot":"","sources":["../../../src/ui/theme/ThemeContext.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErD,eAAO,MAAM,YAAY,oDAAiD,CAAC;AAE3E,wBAAgB,aAAa,IAAI,kBAAkB,CAQlD"}

package/lib/ui/theme/ThemeContext.js

@@ -0,0 +1,9 @@
+import { createContext, useContext } from 'react';
+export const ThemeContext = createContext(null);
+export function useFrameTheme() {
+    const theme = useContext(ThemeContext);
+    if (theme === null) {
+        throw new Error('useFrameTheme: no theme found in context. Wrap your app in <FrameProvider /> at the root.');
+    }
+    return theme;
+}

package/lib/ui/theme/defaults.d.ts

@@ -0,0 +1,35 @@
+import type { FrameTheme, FrameThemeColors, FrameThemeFonts, FrameThemeRadii } from '../../types';
+export type ColorScheme = 'light' | 'dark';
+export declare const lightColors: Required<FrameThemeColors>;
+export declare const darkColors: Required<FrameThemeColors>;
+export declare const defaultFonts: Required<FrameThemeFonts>;
+export declare const fontWeights: {
+    readonly title: "700";
+    readonly heading: "600";
+    readonly headline: "600";
+    readonly body: "400";
+    readonly bodySmall: "400";
+    readonly label: "600";
+    readonly caption: "400";
+    readonly button: "600";
+};
+export declare const fontLineHeights: {
+    readonly title: 40;
+    readonly heading: 36;
+    readonly headline: 28;
+    readonly body: 24;
+    readonly bodySmall: 20;
+    readonly label: 20;
+    readonly caption: 16;
+    readonly button: 20;
+};
+export declare const defaultRadii: Required<FrameThemeRadii>;
+export interface ResolvedFrameTheme {
+    colors: Required<FrameThemeColors>;
+    fonts: Required<FrameThemeFonts>;
+    radii: Required<FrameThemeRadii>;
+    fontWeights: typeof fontWeights;
+    fontLineHeights: typeof fontLineHeights;
+}
+export declare function resolveTheme(scheme: ColorScheme, override?: FrameTheme): ResolvedFrameTheme;
+//# sourceMappingURL=defaults.d.ts.map

package/lib/ui/theme/defaults.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"defaults.d.ts","sourceRoot":"","sources":["../../../src/ui/theme/defaults.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,UAAU,EACV,gBAAgB,EAChB,eAAe,EACf,eAAe,EAChB,MAAM,aAAa,CAAC;AAErB,MAAM,MAAM,WAAW,GAAG,OAAO,GAAG,MAAM,CAAC;AAE3C,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,gBAAgB,CAkBlD,CAAC;AAEF,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,gBAAgB,CAkBjD,CAAC;AAEF,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,eAAe,CASlD,CAAC;AAEF,eAAO,MAAM,WAAW;;;;;;;;;CASd,CAAC;AAEX,eAAO,MAAM,eAAe;;;;;;;;;CASlB,CAAC;AAEX,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,eAAe,CAIlD,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,QAAQ,CAAC,gBAAgB,CAAC,CAAC;IACnC,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACjC,KAAK,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IACjC,WAAW,EAAE,OAAO,WAAW,CAAC;IAChC,eAAe,EAAE,OAAO,eAAe,CAAC;CACzC;AAED,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,EAAE,UAAU,GAAG,kBAAkB,CAS3F"}

package/lib/ui/theme/defaults.js

@@ -0,0 +1,83 @@
+export const lightColors = {
+    primaryButton: '#324D52',
+    primaryButtonText: '#FFFFFF',
+    secondaryButton: '#00000000',
+    secondaryButtonText: '#324D52',
+    disabledButton: '#324D5259',
+    disabledButtonStroke: '#00000033',
+    disabledButtonText: '#FFFFFFB3',
+    surface: '#FFFFFF',
+    surfaceStroke: '#00000033',
+    textPrimary: '#000000',
+    textSecondary: '#6B7280',
+    error: '#B00020',
+    toastBackground: '#B00020',
+    toastText: '#FFFFFF',
+    onboardingHeaderBackground: '#324D52',
+    onboardingProgressFilledOnBrand: '#FFFFFF',
+    onboardingProgressEmptyOnBrand: '#FFFFFF66',
+};
+export const darkColors = {
+    primaryButton: '#506F8A',
+    primaryButtonText: '#FFFFFF',
+    secondaryButton: '#00000000',
+    secondaryButtonText: '#8FB3CC',
+    disabledButton: '#506F8A59',
+    disabledButtonStroke: '#FFFFFF33',
+    disabledButtonText: '#FFFFFFB3',
+    surface: '#1C1C1E',
+    surfaceStroke: '#FFFFFF33',
+    textPrimary: '#FFFFFF',
+    textSecondary: '#9CA3AF',
+    error: '#CF6679',
+    toastBackground: '#CF6679',
+    toastText: '#000000',
+    onboardingHeaderBackground: '#1F2D33',
+    onboardingProgressFilledOnBrand: '#FFFFFF',
+    onboardingProgressEmptyOnBrand: '#FFFFFF66',
+};
+export const defaultFonts = {
+    title: { name: 'system', size: 24 },
+    heading: { name: 'system', size: 24 },
+    headline: { name: 'system', size: 18 },
+    body: { name: 'system', size: 14 },
+    bodySmall: { name: 'system', size: 12 },
+    label: { name: 'system', size: 14 },
+    caption: { name: 'system', size: 11 },
+    button: { name: 'system', size: 14 },
+};
+export const fontWeights = {
+    title: '700',
+    heading: '600',
+    headline: '600',
+    body: '400',
+    bodySmall: '400',
+    label: '600',
+    caption: '400',
+    button: '600',
+};
+export const fontLineHeights = {
+    title: 40,
+    heading: 36,
+    headline: 28,
+    body: 24,
+    bodySmall: 20,
+    label: 20,
+    caption: 16,
+    button: 20,
+};
+export const defaultRadii = {
+    small: 8,
+    medium: 10,
+    large: 16,
+};
+export function resolveTheme(scheme, override) {
+    const baseColors = scheme === 'dark' ? darkColors : lightColors;
+    return {
+        colors: { ...baseColors, ...(override?.colors ?? {}) },
+        fonts: { ...defaultFonts, ...(override?.fonts ?? {}) },
+        radii: { ...defaultRadii, ...(override?.radii ?? {}) },
+        fontWeights,
+        fontLineHeights,
+    };
+}

package/lib/validation.d.ts

@@ -0,0 +1,26 @@
+export declare const POSTAL_CODE_COUNTRIES: readonly ["US", "CA", "GB", "AU", "DE", "FR", "NL", "MX", "IN", "JP", "BR", "IT", "ES", "IE", "NZ", "SG"];
+export type PostalCountryCode = (typeof POSTAL_CODE_COUNTRIES)[number];
+export declare function validateNonEmpty(value: string, fieldName: string): string | null;
+export declare function validateFullName(value: string): string | null;
+export declare function validateEmail(value: string): string | null;
+export declare function validateZipUS(value: string): string | null;
+export declare function validateCard(cardNumber: string): string | null;
+export declare function detectCardBrand(cardNumber: string): string | null;
+export declare function validateCVC(cvc: string, brand: string | null): string | null;
+export declare function validateCardExpiry(month: string, year: string, now?: Date): string | null;
+export declare function validateSSNLast4(value: string): string | null;
+export declare function validateRoutingNumberUS(value: string): string | null;
+export declare function validateAccountNumberUS(value: string, min?: number, max?: number): string | null;
+export declare function validateDateOfBirth(year: string, month: string, day: string, minAge?: number, maxAge?: number, now?: Date): string | null;
+export declare function validatePostalCode(value: string, countryCode: string): string | null;
+export declare function getSupportedPostalCodeCountries(): ReadonlyArray<PostalCountryCode>;
+/**
+ * Checks the phone number is *possible* for the given region — i.e. correct
+ * digit count and a valid country-code prefix. Mirrors iOS PhoneNumberKit's
+ * `parse(_:withRegion:ignoreType:)` which performs the same lenient check.
+ * Returns null on a number that's "possible" even if not assigned in the
+ * national plan (e.g. a UK-formatted number with `+44` still passes when the
+ * region is 'US').
+ */
+export declare function validatePhoneE164(raw: string, regionCode: string): string | null;
+//# sourceMappingURL=validation.d.ts.map

package/lib/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAIA,eAAO,MAAM,qBAAqB,2GAGxB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,CAAC,CAAC;AAoEvE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAEhF;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK7D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI1D;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI1D;AAED,wBAAgB,YAAY,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAS9D;AAED,wBAAgB,eAAe,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAIjE;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,IAAI,CAM5E;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,IAAiB,GAAG,MAAM,GAAG,IAAI,CAcrG;AAWD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI7D;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUpE;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,GAAE,MAAU,EAAE,GAAG,GAAE,MAAW,GAAG,MAAM,GAAG,IAAI,CAIvG;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,EACZ,KAAK,EAAE,MAAM,EACb,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,MAAW,EACnB,MAAM,GAAE,MAAY,EACpB,GAAG,GAAE,IAAiB,GACrB,MAAM,GAAG,IAAI,CA+Bf;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAMpF;AAED,wBAAgB,+BAA+B,IAAI,aAAa,CAAC,iBAAiB,CAAC,CAElF;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUhF"}

package/lib/validation.js

@@ -0,0 +1,235 @@
+import { parsePhoneNumberFromString } from 'libphonenumber-js';
+const EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+export const POSTAL_CODE_COUNTRIES = [
+    'US', 'CA', 'GB', 'AU', 'DE', 'FR', 'NL', 'MX',
+    'IN', 'JP', 'BR', 'IT', 'ES', 'IE', 'NZ', 'SG',
+];
+const POSTAL_REGEXES = {
+    US: /^\d{5}(-\d{4})?$/,
+    CA: /^[A-Za-z]\d[A-Za-z][ -]?\d[A-Za-z]\d$/,
+    GB: /^[A-Za-z]{1,2}\d[A-Za-z\d]?\s*\d[A-Za-z]{2}$/,
+    AU: /^\d{4}$/,
+    DE: /^\d{5}$/,
+    FR: /^\d{5}$/,
+    NL: /^\d{4}\s?[A-Za-z]{2}$/,
+    MX: /^\d{5}$/,
+    IN: /^\d{6}$/,
+    JP: /^\d{3}-?\d{4}$/,
+    BR: /^\d{5}-?\d{3}$/,
+    IT: /^\d{5}$/,
+    ES: /^\d{5}$/,
+    IE: /^[A-Za-z]\d{2}\s?[A-Za-z\d]{4}$/,
+    NZ: /^\d{4}$/,
+    SG: /^\d{6}$/,
+};
+// IIN (Issuer Identification Number) → brand. Order matters: longer prefixes
+// must be checked before shorter ones (e.g. 34/37 amex before 3 generic).
+// Length list is what each brand's PAN can be — used by validateCard().
+const CARD_BRANDS = [
+    { brand: 'amex', prefixes: ['34', '37'], lengths: [15] },
+    { brand: 'visa', prefixes: ['4'], lengths: [13, 16, 19] },
+    {
+        brand: 'mastercard',
+        prefixes: ['51', '52', '53', '54', '55', '2221', '2222', '2223', '2224', '2225', '2226', '2227', '2228', '2229',
+            '223', '224', '225', '226', '227', '228', '229', '23', '24', '25', '26', '270', '271', '2720'],
+        lengths: [16],
+    },
+    { brand: 'discover', prefixes: ['6011', '644', '645', '646', '647', '648', '649', '65'], lengths: [16, 19] },
+    { brand: 'diners', prefixes: ['300', '301', '302', '303', '304', '305', '36', '38', '39'], lengths: [14, 16, 19] },
+    { brand: 'jcb', prefixes: ['35'], lengths: [16, 17, 18, 19] },
+    { brand: 'unionpay', prefixes: ['62'], lengths: [16, 17, 18, 19] },
+];
+function detectBrand(pan) {
+    for (const entry of CARD_BRANDS) {
+        if (entry.prefixes.some((p) => pan.startsWith(p))) {
+            return { brand: entry.brand, lengths: entry.lengths };
+        }
+    }
+    return null;
+}
+function luhn(digits) {
+    let sum = 0;
+    let alt = false;
+    for (let i = digits.length - 1; i >= 0; i--) {
+        let n = digits.charCodeAt(i) - 48;
+        if (n < 0 || n > 9)
+            return false;
+        if (alt) {
+            n *= 2;
+            if (n > 9)
+                n -= 9;
+        }
+        sum += n;
+        alt = !alt;
+    }
+    return sum % 10 === 0;
+}
+export function validateNonEmpty(value, fieldName) {
+    return value.trim() === '' ? `${fieldName} is required` : null;
+}
+export function validateFullName(value) {
+    const trimmed = value.trim();
+    if (trimmed === '')
+        return 'Full name is required';
+    const parts = trimmed.split(/\s+/).filter((p) => p.length > 0);
+    return parts.length >= 2 ? null : 'Enter first and last name';
+}
+export function validateEmail(value) {
+    const trimmed = value.trim();
+    if (trimmed === '')
+        return 'Email is required';
+    return EMAIL_PATTERN.test(trimmed) ? null : 'Enter a valid email address';
+}
+export function validateZipUS(value) {
+    if (value === '')
+        return 'Zip code is required';
+    const isValid = value.length === 5 && /^\d{5}$/.test(value);
+    return isValid ? null : 'Enter a 5-digit zip code';
+}
+export function validateCard(cardNumber) {
+    const digits = cardNumber.replace(/\s/g, '');
+    if (digits === '')
+        return 'Enter valid card details';
+    if (!/^\d+$/.test(digits))
+        return 'Enter valid card details';
+    const match = detectBrand(digits);
+    if (!match)
+        return 'Enter valid card details';
+    if (!match.lengths.includes(digits.length))
+        return 'Enter valid card details';
+    if (!luhn(digits))
+        return 'Enter valid card details';
+    return null;
+}
+export function detectCardBrand(cardNumber) {
+    const digits = cardNumber.replace(/\s/g, '');
+    const match = detectBrand(digits);
+    return match?.brand ?? null;
+}
+// Amex prints a 4-digit CID on the front of the card; everyone else prints a
+// 3-digit CVV/CVC on the back. JCB and UnionPay sometimes use 4 too but
+// historically accept 3 — mirror iOS Validators which uses brand=amex as the
+// only 4-digit case.
+export function validateCVC(cvc, brand) {
+    const trimmed = cvc.replace(/\s/g, '');
+    if (trimmed === '')
+        return 'Enter the card security code';
+    if (!/^\d+$/.test(trimmed))
+        return 'Enter the card security code';
+    const expected = brand === 'amex' ? 4 : 3;
+    return trimmed.length === expected ? null : 'Enter the card security code';
+}
+export function validateCardExpiry(month, year, now = new Date()) {
+    const m = parseIntStrict(month);
+    if (m === null || m < 1 || m > 12)
+        return 'Invalid expiration month';
+    const yearString = year.length === 2 ? `20${year}` : year;
+    const y = parseIntStrict(yearString);
+    if (y === null || y < 2000 || y > 2100)
+        return 'Invalid expiration year';
+    const currentYear = now.getFullYear();
+    const currentMonth = now.getMonth() + 1;
+    if (y < currentYear || (y === currentYear && m < currentMonth)) {
+        return 'Card has expired';
+    }
+    return null;
+}
+// Like Swift's `Int(_:)` — accepts only digit strings (optionally with a
+// leading sign). Rejects scientific notation (`5e2`), decimals (`5.5`),
+// whitespace-padded values, and empty strings.
+function parseIntStrict(value) {
+    if (!/^-?\d+$/.test(value))
+        return null;
+    const n = Number.parseInt(value, 10);
+    return Number.isFinite(n) ? n : null;
+}
+export function validateSSNLast4(value) {
+    if (value === '')
+        return 'SSN is required';
+    const isValid = value.length === 4 && /^\d{4}$/.test(value);
+    return isValid ? null : 'Enter last 4 digits of SSN';
+}
+export function validateRoutingNumberUS(value) {
+    if (value === '')
+        return 'Routing number is required';
+    if (value.length !== 9 || !/^\d{9}$/.test(value)) {
+        return 'Enter a 9-digit routing number';
+    }
+    const d = Array.from(value, (c) => Number(c));
+    // ABA checksum: 3·(d0+d3+d6) + 7·(d1+d4+d7) + (d2+d5+d8) ≡ 0 (mod 10)
+    const checksum = (3 * (d[0] + d[3] + d[6]) + 7 * (d[1] + d[4] + d[7]) + (d[2] + d[5] + d[8])) % 10;
+    return checksum === 0 ? null : 'Enter a valid routing number';
+}
+export function validateAccountNumberUS(value, min = 4, max = 17) {
+    if (value === '')
+        return 'Account number is required';
+    const isValid = /^\d+$/.test(value) && value.length >= min && value.length <= max;
+    return isValid ? null : 'Enter a valid account number';
+}
+export function validateDateOfBirth(year, month, day, minAge = 18, maxAge = 120, now = new Date()) {
+    if (year === '' || month === '' || day === '')
+        return 'Date of birth is required';
+    if (year.length !== 4)
+        return 'Enter a valid date of birth';
+    const y = parseIntStrict(year);
+    const m = parseIntStrict(month);
+    const d = parseIntStrict(day);
+    if (y === null || m === null || d === null)
+        return 'Enter a valid date of birth';
+    if (m < 1 || m > 12 || d < 1)
+        return 'Enter a valid date of birth';
+    // Validate the calendar date round-trips (rejects e.g. Feb 31). The check
+    // uses UTC but compares only the tuple — timezone is irrelevant here.
+    const candidate = new Date(Date.UTC(y, m - 1, d));
+    if (candidate.getUTCFullYear() !== y ||
+        candidate.getUTCMonth() !== m - 1 ||
+        candidate.getUTCDate() !== d) {
+        return 'Enter a valid date of birth';
+    }
+    // Age math uses local time on `now` to match iOS `Calendar.current` so users
+    // on the date boundary in negative-UTC offsets compute the same age the
+    // native SDK reports.
+    let age = now.getFullYear() - y;
+    const monthDelta = now.getMonth() - (m - 1);
+    if (monthDelta < 0 || (monthDelta === 0 && now.getDate() < d))
+        age -= 1;
+    if (age < minAge)
+        return `You must be at least ${minAge} years old`;
+    if (age > maxAge)
+        return 'Enter a valid date of birth';
+    return null;
+}
+export function validatePostalCode(value, countryCode) {
+    const trimmed = value.trim();
+    if (trimmed === '')
+        return 'Postal code is required';
+    const pattern = POSTAL_REGEXES[countryCode.toUpperCase()];
+    if (!pattern)
+        return null;
+    return pattern.test(trimmed) ? null : 'Enter a valid postal code';
+}
+export function getSupportedPostalCodeCountries() {
+    return POSTAL_CODE_COUNTRIES;
+}
+/**
+ * Checks the phone number is *possible* for the given region — i.e. correct
+ * digit count and a valid country-code prefix. Mirrors iOS PhoneNumberKit's
+ * `parse(_:withRegion:ignoreType:)` which performs the same lenient check.
+ * Returns null on a number that's "possible" even if not assigned in the
+ * national plan (e.g. a UK-formatted number with `+44` still passes when the
+ * region is 'US').
+ */
+export function validatePhoneE164(raw, regionCode) {
+    const trimmed = raw.trim();
+    if (trimmed === '')
+        return 'Phone number is required';
+    try {
+        const parsed = parsePhoneNumberFromString(trimmed, regionCode);
+        if (!parsed || !parsed.isPossible())
+            return 'Enter a valid phone number';
+        return null;
+    }
+    catch {
+        return 'Enter a valid phone number';
+    }
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "framepayments-react-native",
-  "version": "3.0.0",
-  "description": "React Native SDK for Frame Payments - modal checkout and cart, with API usage via frame-node.",
+  "version": "4.0.0",
+  "description": "React Native SDK for Frame Payments — standalone, with networking via the framepayments Node SDK.",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "scripts": {
@@ -30,41 +30,80 @@
   },
   "homepage": "https://github.com/Frame-Payments/frame-react-native#readme",
   "peerDependencies": {
+    "@evervault/evervault-react-native": ">=1.4.0",
+    "@expo/config-plugins": ">=8.0.0",
+    "@fingerprintjs/fingerprintjs-pro-react-native": ">=3.0.0",
+    "expo": ">=51.0.0",
+    "expo-location": ">=17.0.0",
     "react": "*",
-    "react-native": ">=0.81.0"
+    "react-native": ">=0.81.0",
+    "react-native-plaid-link-sdk": ">=11.0.0",
+    "react-native-svg": ">=15.0.0",
+    "react-native-vision-camera": ">=4.0.0 <6.0.0",
+    "sift-react-native": ">=1.0.1"
   },
-  "frameNativeVersions": {
-    "ios": "2.2.2",
-    "android": "2.0.8"
+  "peerDependenciesMeta": {
+    "expo": {
+      "optional": true
+    },
+    "@expo/config-plugins": {
+      "optional": true
+    },
+    "expo-location": {
+      "optional": true
+    },
+    "react-native-plaid-link-sdk": {
+      "optional": true
+    },
+    "react-native-vision-camera": {
+      "optional": true
+    }
   },
   "devDependencies": {
+    "@evervault/evervault-react-native": "^1.4.2",
+    "@expo/config-plugins": "^8.0.0",
+    "@fingerprintjs/fingerprintjs-pro-react-native": "^3.14.0",
+    "@react-native/babel-preset": "^0.85.3",
+    "@testing-library/react-native": "^13.3.3",
     "@types/jest": "^29.5.0",
     "@types/react": "^19.1.1",
     "@types/react-native": "^0.73.0",
+    "@types/react-test-renderer": "^19.1.0",
     "@typescript-eslint/eslint-plugin": "^8.59.1",
     "@typescript-eslint/parser": "^8.59.1",
     "eslint": "^8.57.0",
+    "expo-location": "^19.0.4",
     "jest": "^29.7.0",
+    "prettier": "^3.8.3",
     "react": "19.1.1",
     "react-native": "^0.82.1",
+    "react-native-plaid-link-sdk": "^12.8.0",
+    "react-native-svg": "^15.15.5",
+    "react-native-vision-camera": "^5.0.10",
+    "react-test-renderer": "^19.1.1",
+    "sift-react-native": "^1.0.1",
     "ts-jest": "^29.1.0",
     "typescript": "^5.0.0"
   },
   "engines": {
-    "node": ">=16"
+    "node": ">=18"
   },
   "files": [
-    "src",
     "lib",
     "ios",
-    "android",
+    "android/build.gradle",
+    "android/consumer-rules.pro",
+    "android/src/",
+    "plugin",
+    "app.plugin.js",
     "FrameReactNative.podspec",
-    "Package.swift",
     "README.md",
     "LICENSE"
   ],
   "dependencies": {
     "@babel/runtime": "^7.28.6",
-    "framepayments": "^2.0.0"
+    "framepayments": "^2.1.5",
+    "js-sha256": "^0.11.1",
+    "libphonenumber-js": "^1.13.3"
   }
 }

package/plugin/withFrameAndroidManifest.js

@@ -0,0 +1,72 @@
+const { withAndroidManifest, AndroidConfig } = require('@expo/config-plugins');
+const fs = require('fs');
+const path = require('path');
+
+const WALLET_META = 'com.google.android.gms.wallet.api.enabled';
+const PERM_CAMERA = 'android.permission.CAMERA';
+const PERM_FINE_LOCATION = 'android.permission.ACCESS_FINE_LOCATION';
+const PERM_COARSE_LOCATION = 'android.permission.ACCESS_COARSE_LOCATION';
+
+// Reads the host app's package.json (one level up from the project root that
+// `expo prebuild` runs in) and returns true if any of the given package names
+// appear in dependencies or devDependencies. Optional peer deps drive the
+// permission set: a host app that never installs `react-native-vision-camera`
+// should not ship a CAMERA permission (Play Store flags it during review).
+function hostHasAnyDep(projectRoot, names) {
+  const pkgPath = path.join(projectRoot, 'package.json');
+  if (!fs.existsSync(pkgPath)) return false;
+  try {
+    const pkg = JSON.parse(fs.readFileSync(pkgPath, 'utf8'));
+    const all = { ...(pkg.dependencies ?? {}), ...(pkg.devDependencies ?? {}) };
+    return names.some((n) => Object.prototype.hasOwnProperty.call(all, n));
+  } catch {
+    return false;
+  }
+}
+
+function ensureWalletMeta(application) {
+  application['meta-data'] = application['meta-data'] || [];
+  const exists = application['meta-data'].some(
+    (m) => m && m.$ && m.$['android:name'] === WALLET_META,
+  );
+  if (!exists) {
+    application['meta-data'].push({
+      $: { 'android:name': WALLET_META, 'android:value': 'true' },
+    });
+  }
+}
+
+function ensurePermission(manifest, permName) {
+  manifest['uses-permission'] = manifest['uses-permission'] || [];
+  const exists = manifest['uses-permission'].some(
+    (p) => p && p.$ && p.$['android:name'] === permName,
+  );
+  if (!exists) {
+    manifest['uses-permission'].push({ $: { 'android:name': permName } });
+  }
+}
+
+const withFrameAndroidManifest = (config) =>
+  withAndroidManifest(config, (cfg) => {
+    const manifest = cfg.modResults.manifest;
+    const app = AndroidConfig.Manifest.getMainApplicationOrThrow(cfg.modResults);
+    ensureWalletMeta(app);
+
+    const projectRoot = cfg.modRequest?.projectRoot ?? process.cwd();
+    if (hostHasAnyDep(projectRoot, ['react-native-vision-camera'])) {
+      ensurePermission(manifest, PERM_CAMERA);
+    }
+    if (
+      hostHasAnyDep(projectRoot, [
+        'expo-location',
+        '@react-native-community/geolocation',
+      ])
+    ) {
+      ensurePermission(manifest, PERM_FINE_LOCATION);
+      ensurePermission(manifest, PERM_COARSE_LOCATION);
+    }
+
+    return cfg;
+  });
+
+module.exports = withFrameAndroidManifest;

package/plugin/withFrameAppBuildGradle.js

@@ -0,0 +1,42 @@
+const { withAppBuildGradle, WarningAggregator } = require('@expo/config-plugins');
+
+const PLUGIN_NAME = 'framepayments-react-native';
+const MARKER = '// @generated framepayments-react-native prove_implementation';
+const PROVE_VERSION = '6.10.3';
+const PROVE_IMPL_LINE = `    ${MARKER}\n    implementation 'com.prove.sdk:proveauth:${PROVE_VERSION}'\n`;
+
+// Injects `implementation 'com.prove.sdk:proveauth:X.Y.Z'` into the host app's
+// `android/app/build.gradle` when `enableProveAuth: true` is set on the config
+// plugin. The SDK declares Prove as `compileOnly` in its own build.gradle, so
+// the runtime classpath is only populated when the host opts in here.
+//
+// Pairs with withFrameSettingsGradle, which adds the Prove Artifactory Maven
+// repo unconditionally — having the repo declared is harmless without the
+// implementation line; the dep isn't fetched until something asks for it.
+
+function injectImplementation(contents) {
+  if (contents.includes(MARKER)) return contents;
+
+  const re = /(dependencies\s*\{)([\s\S]*?)(\n\})/;
+  const match = contents.match(re);
+  if (!match) return null;
+
+  return contents.replace(re, (_full, prefix, body, suffix) => prefix + body + '\n' + PROVE_IMPL_LINE + suffix);
+}
+
+const withFrameAppBuildGradle = (config) =>
+  withAppBuildGradle(config, (cfg) => {
+    if (cfg.modResults.language !== 'groovy') return cfg;
+    const patched = injectImplementation(cfg.modResults.contents);
+    if (patched == null) {
+      WarningAggregator.addWarningAndroid(
+        PLUGIN_NAME,
+        `Could not auto-inject ProveAuth implementation into app/build.gradle. Add it manually: implementation 'com.prove.sdk:proveauth:${PROVE_VERSION}'`
+      );
+      return cfg;
+    }
+    cfg.modResults.contents = patched;
+    return cfg;
+  });
+
+module.exports = withFrameAppBuildGradle;

package/plugin/withFrameEntitlements.js

@@ -0,0 +1,27 @@
+const { withEntitlementsPlist } = require('@expo/config-plugins');
+
+const APPLE_PAY_KEY = 'com.apple.developer.in-app-payments';
+const APP_ATTEST_KEY = 'com.apple.developer.devicecheck.appattest-environment';
+
+const withFrameEntitlements = (config, props) =>
+  withEntitlementsPlist(config, (mod) => {
+    const merchantId = props && props.applePayMerchantId;
+    if (!merchantId) return mod;
+
+    const existing = mod.modResults[APPLE_PAY_KEY];
+    const arr = Array.isArray(existing)
+      ? existing.slice()
+      : typeof existing === 'string'
+      ? [existing]
+      : [];
+    if (!arr.includes(merchantId)) arr.push(merchantId);
+    mod.modResults[APPLE_PAY_KEY] = arr;
+
+    // App Attest is required for every Apple Pay charge. Always 'production' —
+    // sandbox vs live behavior is keyed off the Frame API keys, not this value.
+    mod.modResults[APP_ATTEST_KEY] = 'production';
+
+    return mod;
+  });
+
+module.exports = withFrameEntitlements;