lecodes-sdk 2.4.2 → 2.4.3

package/src/plugins/gen/browser/sdk/browser.ts

@@ -8,6 +8,9 @@
 //   const back = await Browser.open(checkoutUrl, { returnUrl: [paid, failed], embedded: true })
 //                                                                  a checkout in an embedded page,
 //                                                                  resolved with the URL it reached
+//                                                                  (navigated to in the page, or
+//                                                                  opened by a bank's app through
+//                                                                  the app's verified link)
 //
 // It resolves with the return URL reached, or null when the user left. `returnUrl` says what ENDS
 // the page; `embedded` says WHERE it runs — the system sheet (shared logins, passkeys, Apple Pay;
@@ -38,7 +41,8 @@ export interface BrowserOpenOptions {
   /** What ends the page: a URL prefix, or several (a checkout's success and failure URLs). The
    *  promise resolves with the URL reached. In the sheet every prefix must share one scheme — the
    *  platform intercepts one; a custom scheme needs app.json `urlScheme`, an https one the app's
-   *  verified links. */
+   *  verified links (app.json `appLinks`). Embedded, the view intercepts the navigation itself,
+   *  and a verified https return from another app (a bank's) ends the page too. */
   returnUrl?: string | string[]
   /** Run the page in an embedded WebView under a close bar instead of the system sheet. The
    *  WebView intercepts any return URL itself, https included. */
@@ -157,10 +161,16 @@ const openEmbedded = (url: string, options: BrowserOpenOptions): Promise<string
     if (routed) Router.pop()
     else { screen.close(); previous?.open() }
   }
+  // Two ways the return URL arrives: the page navigates to it inside the view (`stop`), or
+  // another app does — a bank's app the checkout handed off to sends the person back through the
+  // app's verified link (app.json "appLinks"), which reaches the app as its "url" event while the
+  // page still shows the bank's form. Both end the flow; `done` makes the second a no-op.
   let done = false
+  const off = stops.length ? _onAppUrl(back => { if (matching(back, stops)) finish(back) }) : () => {}
   const finish = (back: string | null): void => {
     if (done) return
     done = true
+    off()
     leave()
     resolve(back)
   }

package/src/version.ts

@@ -4,7 +4,7 @@
 // same manifest). Its MAJOR is the bundle ↔ runtime contract: a bundle's `// sdk:` header line
 // and a host's embedded version must agree on the major for the host to run the bundle; minor
 // and patch never gate anything (features are detected, never versioned).
-export const SDK_VERSION = "2.4.2"
+export const SDK_VERSION = "2.4.3"
 
 /** The major of a semver string, or null when it is not one. */
 export const sdkMajor = (version: string | null | undefined): number | null => {