// Time comes only from the original authenticated phone-bootstrap callable. // Conservative network bounds shorten leases; browser wall time cannot extend // any signed phone factor, server session or business request deadline. function createOriginalServerClock({currentScope,monotonicNow=()=>performance.now(),fallback=Date.now}={}){ const fail=()=>{throw Object.assign(Error('original_server_clock_unconfirmed'),{code:'original_server_clock_unconfirmed'});}; const positive=n=>Number.isSafeInteger(n)&&n>0; let anchor=null; function current(){ if(!anchor)fail();const scope=currentScope(),now=monotonicNow(); if(scope?.active!==true||scope.generation!==anchor.generation||!Number.isFinite(now)||now30000|| ![started,finished,elapsed].every(Number.isFinite)||started<0||elapsed<0||elapsed>=30000||reply.expiresAtMs<=reply.observedAtMs+elapsed)fail(); anchor={uid,generation,started,finished,observedAtMs:reply.observedAtMs};current();return now(); } function lowerAt(at){current();if(!Number.isFinite(at)||at<0||at>anchor.finished)fail();return Math.floor(anchor.observedAtMs+at-anchor.finished);} function acceptSession(reply,frame){ if(!reply||Object.keys(reply).sort().join('|')!=='contactRevision|expiresAtMs|observedAtMs|revision|sessionId|sessionVersion|uid'||typeof reply.sessionId!=='string'||!/^[A-Za-z0-9_.:-]{2,160}$/.test(reply.sessionId)||![reply.revision,reply.contactRevision,reply.sessionVersion].every(positive))fail(); return accept({uid:reply.uid,expectedRevision:reply.revision,observedAtMs:reply.observedAtMs,expiresAtMs:reply.expiresAtMs},frame); } return Object.freeze({now,accept,acceptSession,lowerAt,reset(){anchor=null;}}); } const adapter=(()=>{ const PROJECT='autolink-pro-app',APP='1:468551753895:web:cb9939ec64f3d72c727b82'; const fail=code=>{throw Object.assign(Error(code),{code});}; const id=v=>typeof v==='string'&&/^[A-Za-z0-9_-]{1,160}$/.test(v); const digest=v=>typeof v==='string'&&/^[a-f0-9]{64}$/.test(v); const minor=v=>Number.isSafeInteger(v)&&v>=0; const copy=v=>structuredClone(v); const exact=(r,keys)=>r&&typeof r==='object'&&!Array.isArray(r)&&Object.keys(r).sort().join('|')===[...keys].sort().join('|'); // The caller supplies the EXISTING original App SDK objects and current view // lifecycle, never a WordPress user ID, email match, bearer or paid flag. function createMarketplaceWebsiteAccountPayments({enabled=false,creditEnabled=false,subscriptionsEnabled=false, auth,functions,httpsCallable,currentScope,clockAuthority=null,resumeReadEnabled=false,clock=Date.now,monotonicNow=()=>performance.now()}={}){ const off=()=>fail('marketplace_account_payments_unbound'); if(enabled!==true)return Object.freeze({enabled:false,read:off,prepareTopUp:off,beginTopUp:off,captureReturnedTopUp:off,readTopUp:off,cancelTopUp:off,subscription:off}); if(auth?.app!==functions?.app||auth?.app?.options?.projectId!==PROJECT||auth.app.options.appId!==APP||functions.region!=='us-central1'||typeof httpsCallable!=='function'||typeof currentScope!=='function')fail('original_marketplace_sdk_required'); const options=Object.freeze({timeout:30000,limitedUseAppCheckTokens:true}); const calls=new Map();for(const name of ['establishMarketplaceCurrentSession','readMarketplaceCurrentSession','recoverMarketplaceCurrentSession','prepareMarketplaceCheckout','acceptMarketplaceAccountTerms'])calls.set(name,httpsCallable(functions,name,options)); let session=null,pending=null,epoch=0; function invalidate(){epoch++;session=null;pending=null;} function latch(){const user=auth.currentUser,s=currentScope(),started=monotonicNow();if(!id(user?.uid)||!s?.active||!Number.isSafeInteger(s.generation))fail('sign_in_to_original_marketplace_account');return {uid:user.uid,user,generation:s.generation,epoch,started};} function current(l){const s=currentScope(),elapsed=monotonicNow()-l.started;if(auth.currentUser?.uid!==l.uid||auth.currentUser!==l.user||s?.active!==true||s.generation!==l.generation||epoch!==l.epoch||elapsed<0||elapsed>=30000)fail('marketplace_account_changed_or_request_expired');return elapsed;} async function call(name,data,l,assertOriginalDispatch=null){current(l);if(assertOriginalDispatch!==null&&typeof assertOriginalDispatch!=='function')fail('original_dispatch_guard_required');const payload=copy(data);assertOriginalDispatch?.();await l.user.getIdToken(true);current(l);assertOriginalDispatch?.();const r=await calls.get(name)(payload);current(l);return copy(r.data);} function observation(r,l,selector=null){ if(!exact(r,['uid','sessionId','sessionVersion','contactRevision','revision','observedAtMs','expiresAtMs'])||r.uid!==l.uid||!id(r.sessionId)||![r.sessionVersion,r.contactRevision,r.revision,r.observedAtMs,r.expiresAtMs].every(n=>Number.isSafeInteger(n)&&n>0)||r.expiresAtMs-r.observedAtMs>30000||r.expiresAtMs<=r.observedAtMs||clock()=r.expiresAtMs||selector&&['uid','sessionId','sessionVersion','contactRevision','revision'].some(k=>selector[k]!==r[k]))fail('marketplace_current_session_unconfirmed'); const elapsed=current(l),remaining=Math.min(r.expiresAtMs-clock(),r.expiresAtMs-r.observedAtMs-elapsed);if(remaining<=0)fail('marketplace_current_session_expired');return {...r,acceptedAtMono:monotonicNow(),remainingMs:remaining,generation:l.generation}; } function sessionCurrent(l){if(!session||session.uid!==l.uid||session.generation!==l.generation||monotonicNow()-session.acceptedAtMono<0||monotonicNow()-session.acceptedAtMono>=session.remainingMs||clock()=session.expiresAtMs)fail('marketplace_current_session_required');} async function resumeEstablishedSession(){ if(resumeReadEnabled!==true||!clockAuthority?.acceptSession)off();const l=latch(); const r=await call('readMarketplaceCurrentSession',{payload:{operation:'readCurrentSessionResume'}},l);current(l); clockAuthority.acceptSession(r,{uid:l.uid,generation:l.generation,started:l.started,finished:monotonicNow()}); session=observation(r,l);return {uid:session.uid,expiresAtMs:session.expiresAtMs}; } async function refresh(){const l=latch();if(!session||session.uid!==l.uid)fail('marketplace_current_session_required');const r=await call('readMarketplaceCurrentSession',{sessionId:session.sessionId,payload:{}},l);session=observation(r,l,session);return {uid:session.uid,expiresAtMs:session.expiresAtMs};} // Invoked only from the existing same-App phone-verification callback. The // server separately verifies the signed phone/MFA event and original CAS. async function bootstrapAfterPhoneVerification(result,expectedRevision,{assertOriginalDispatch=null}={}){const l=latch();if(result?.uid!==l.uid||result?.phoneVerificationCompleted!==true||!Number.isSafeInteger(expectedRevision)||expectedRevision<0)fail('original_phone_session_required'); const r=await call('establishMarketplaceCurrentSession',{payload:{expectedRevision}},l,assertOriginalDispatch); if(!exact(r,['uid','sessionId','sessionVersion','contactRevision','revision'])||r.uid!==l.uid||!id(r.sessionId)||r.revision!==expectedRevision+1||![r.sessionVersion,r.contactRevision].every(n=>Number.isSafeInteger(n)&&n>0))fail('marketplace_session_establishment_unconfirmed'); const observed=await call('readMarketplaceCurrentSession',{sessionId:r.sessionId,payload:{}},l);session=observation(observed,l,r);return {uid:r.uid,expiresAtMs:session.expiresAtMs}; } async function recoverSession(expectedRevision,{assertOriginalDispatch=null}={}){const l=latch();if(!Number.isSafeInteger(expectedRevision)||expectedRevision<0)fail('original_session_cas_required');const r=await call('recoverMarketplaceCurrentSession',{payload:{expectedRevision}},l,assertOriginalDispatch);if(r.revision!==expectedRevision+1)fail('marketplace_session_recovery_unconfirmed');session=observation(r,l);return {uid:r.uid,expiresAtMs:session.expiresAtMs};} async function freshSession(l){if(!session||session.uid!==l.uid||session.generation!==l.generation)fail('marketplace_current_session_required');const r=await call('readMarketplaceCurrentSession',{sessionId:session.sessionId,payload:{}},l);session=observation(r,l,session);} async function invoke(payload){const l=latch();await freshSession(l);sessionCurrent(l);const selector=session.sessionId;const r=await call('prepareMarketplaceCheckout',{sessionId:selector,payload},l);sessionCurrent(l);return {r,l};} function ownReply(r,l){if(r?.actorUid!==undefined&&r.actorUid!==l.uid||r?.environment!=='live'||r?.livePaymentEnabled!==true)fail('marketplace_payment_reply_unconfirmed');return r;} async function read(cursor=null){const {r,l}=await invoke({operation:'readAccountPayments',cursor});ownReply(r,l);if(r.actorUid!==l.uid||!Array.isArray(r.creditHistory)||r.creditHistory.length>40||r.wallet?.currency!=='AUD'||!(r.wallet.availableMinor===null||minor(r.wallet.availableMinor))||!Number.isSafeInteger(r.observedAtMs)||!Number.isSafeInteger(r.expiresAtMs))fail('marketplace_account_history_unconfirmed');const elapsed=current(l);if(clock()=r.expiresAtMs||r.expiresAtMs-r.observedAtMs>30000||r.expiresAtMs-r.observedAtMs-elapsed<=0)fail('marketplace_account_history_expired');return r;} async function prepareTopUp(amountMinor){if(creditEnabled!==true||!minor(amountMinor)||amountMinor<1)off();if(pending)fail('check_original_pending_payment_first');const requestId=crypto.randomUUID().replaceAll('-','');const {r,l}=await invoke({operation:'prepareCreditTopUp',requestId,amountMinor});ownReply(r,l);if(!digest(r.topUpId)||!digest(r.choiceHash)||r.requestId!==requestId||r.amountMinor!==amountMinor||r.currency!=='AUD'||r.status!=='quoted'||!Number.isSafeInteger(r.expectedRevision)||clock()>=r.expiresAtMs)fail('credit_quote_unconfirmed');pending={uid:l.uid,topUpId:r.topUpId,requestId,choiceHash:r.choiceHash,expectedRevision:r.expectedRevision,expiresAtMs:r.expiresAtMs};return r;} function ownPending(){const l=latch();if(!pending||pending.uid!==l.uid)fail('original_credit_intent_required');return pending;} async function beginTopUp(explicitConsent){if(creditEnabled!==true)off();const p=ownPending();if(explicitConsent!==true||clock()>=p.expiresAtMs)fail('fresh_credit_consent_required');const {r,l}=await invoke({operation:'createCreditTopUp',topUpId:p.topUpId,choiceHash:p.choiceHash,expectedRevision:p.expectedRevision,explicitConsent:true});ownReply(r,l);if(r.topUpId!==p.topUpId)fail('credit_intent_reply_changed');if(Number.isSafeInteger(r.expectedRevision))p.expectedRevision=r.expectedRevision; if(r.approvalUrl){const u=new URL(r.approvalUrl);if(u.protocol!=='https:'||u.hostname!=='www.paypal.com'||u.port||u.username||u.password||u.pathname!=='/checkoutnow'||u.hash||[...u.searchParams.keys()].join('|')!=='token')fail('credit_approval_url_unconfirmed');} return r; // An approval URL/ACK is never a balance or entitlement. } async function resumeTopUp(topUpId){if(creditEnabled!==true||!digest(topUpId))off();const {r,l}=await invoke({operation:'resumeCreditTopUp',topUpId});ownReply(r,l);if(r.topUpId!==topUpId||!id(r.requestId)||!Number.isSafeInteger(r.expectedRevision))fail('credit_intent_reply_changed');pending={uid:l.uid,topUpId,requestId:r.requestId,expectedRevision:r.expectedRevision};return r;} async function captureReturnedTopUp(){if(creditEnabled!==true)off();const p=ownPending();const {r,l}=await invoke({operation:'captureCreditTopUp',topUpId:p.topUpId,expectedRevision:p.expectedRevision});ownReply(r,l);if(r.topUpId!==p.topUpId||r.creditPosted!==false)fail('credit_intent_reply_changed');return r;} async function readTopUp(){const p=ownPending(),{r,l}=await invoke({operation:'readCreditTopUp',topUpId:p.topUpId});ownReply(r,l);if(r.actorUid!==l.uid||r.topUpId!==p.topUpId||typeof r.credited!=='boolean')fail('credit_intent_reply_changed');if(r.credited)pending=null;return r;} async function cancelTopUp(){if(creditEnabled!==true)off();const p=ownPending(),{r,l}=await invoke({operation:'cancelCreditTopUp',topUpId:p.topUpId});ownReply(r,l);if(r.topUpId!==p.topUpId)fail('credit_intent_reply_changed');if(r.status==='cancel_requested')pending=null;return r;} const subscriptionFields={subscriptionChoices:[],prepareSubscriptionChoice:['planKey','units'],beginSubscription:['choiceHash','expectedRevision','explicitConsent','requestId'],requestSubscriptionCancellation:['expectedRevision','requestId'],readSubscription:[]}; async function subscription(operation,args={}){if(subscriptionsEnabled!==true)off();const keys=subscriptionFields[operation];if(!keys||!exact(args,keys))fail('subscription_operation_invalid');const l=latch();await freshSession(l);sessionCurrent(l);const r=await call('acceptMarketplaceAccountTerms',{operation,scopeActorUid:l.uid,...copy(args)},l);sessionCurrent(l);return ownReply(r,l);} async function readSubscriptionPayments(cursor=null){const {r,l}=await invoke({operation:'readSubscriptionPayments',cursor});ownReply(r,l);if(r.actorUid!==l.uid||!Array.isArray(r.payments)||r.payments.length>100||typeof r.confirmed!=='boolean')fail('subscription_history_unconfirmed');return r;} return Object.freeze({enabled:true,invalidate,refresh,resumeEstablishedSession,bootstrapAfterPhoneVerification,recoverSession,read,readSubscriptionPayments,prepareTopUp,beginTopUp,resumeTopUp,captureReturnedTopUp,readTopUp,cancelTopUp,subscription}); } function accountPaymentsView(reply){ if(reply?.environment!=='live'||reply.livePaymentEnabled!==true||!id(reply.actorUid)||!Array.isArray(reply.creditHistory))fail('marketplace_account_history_unconfirmed'); const aud=n=>'A$'+(n/100).toFixed(2); const balance=reply.wallet?.confirmed===true&&minor(reply.wallet.availableMinor)?aud(reply.wallet.availableMinor):'Credit not yet confirmed'; return {balance,plan:reply.subscription?.planKey??'No reconciled plan',planStatus:reply.subscription?.status??'Unknown', history:reply.creditHistory.map(r=>({kind:r.kind,amount:minor(r.amountMinor)?aud(r.amountMinor):null,date:Number.isSafeInteger(r.occurredAtMs)?new Date(r.occurredAtMs).toISOString():null})), environment:'live',livePaymentEnabled:true}; } return Object.freeze({createMarketplaceWebsiteAccountPayments,accountPaymentsView});})(); const panel=(()=>{ const {accountPaymentsView}=adapter; const failure=()=>{throw Error('original_marketplace_panel_unbound');}; function parseAudAmount(text){if(typeof text!=='string'||!/^(0|[1-9][0-9]{0,6})(?:\.[0-9]{1,2})?$/.test(text))throw Error('enter_amount_in_australian_dollars');const [d,c='']=text.split('.'),n=Number(d)*100+Number(c.padEnd(2,'0'));if(!Number.isSafeInteger(n)||n<1)throw Error('enter_amount_in_australian_dollars');return n;} // root is the existing Account Payments draft element. All content is text-only; // private provider/customer resources and recording/payment URLs are never HTML. function bindAccountPaymentsPanel({root,client,clock=Date.now,enabled=false,creditEnabled=false,subscriptionsEnabled=false, signInOriginal,chooseOriginalSubscription,openApproval,confirmServerQuote}={}){ if(!root?.querySelector||!client)failure();if(enabled!==true)return Object.freeze({enabled:false,dispose:()=>{}}); const one=id=>{const e=root.querySelector('#'+id);if(!e)failure();return e;},status=one('account-payment-status'),balance=one('marketplace-cleared-credit'),plan=one('marketplace-current-plan'),history=one('marketplace-payment-history'),pendingList=one('marketplace-pending-payments'); const buttons=[one('marketplace-account-sign-in'),one('marketplace-manage-subscription'),one('marketplace-add-credit'),one('marketplace-refresh-payment')],amount=one('marketplace-credit-amount'),consent=one('marketplace-credit-consent'); let alive=true,busy=false,generation=0;const disposers=[]; const lock=()=>{buttons.forEach(e=>e.disabled=busy||!alive);buttons[1].disabled=busy||!alive;buttons[2].disabled=busy||!alive||creditEnabled!==true||!!subscriptionPicker.selected(root)||!consent.checked||!Number.isSafeInteger(paymentPreferences.creditMinor(amount.value))||paymentPreferences.creditMinor(amount.value)<500||paymentPreferences.creditMinor(amount.value)>100000;amount.disabled=busy||!alive;consent.disabled=amount.disabled;}; async function run(fn){if(busy||!alive)return;busy=true;const g=++generation;lock();try{await fn(()=>alive&&g===generation);}catch(error){if(alive&&g===generation){const diagnostic=/^(functions\/[a-z-]+|marketplace_[a-z_]+|original_[a-z_]+)$/.test(error?.code??'')?error.code:'account_read_unconfirmed';status.setAttribute('data-account-read-result',diagnostic);status.textContent='Your account records could not load. Please try again shortly.';}}finally{if(alive&&g===generation){busy=false;lock();}}} function render(r){const v=accountPaymentsView(r);balance.textContent=v.balance;accountSummary.render(root,r,clock());subscriptionPicker.renderCurrent(root,r.subscription);history.replaceChildren();one('marketplace-payment-history-title').hidden=v.history.length===0;for(const x of v.history){const li=root.ownerDocument.createElement('li');li.textContent=[x.kind,x.amount,x.date??'Date not recorded'].filter(Boolean).join(' · ');history.appendChild(li);}pendingList.replaceChildren();for(const p of r.topUps??[]){const li=root.ownerDocument.createElement('li');li.textContent='Saved credit payment · A$'+(p.amountMinor/100).toFixed(2)+' · '+p.status;if(creditEnabled===true&&p.status!=='cancel_requested'){const button=root.ownerDocument.createElement('button');button.type='button';button.textContent=p.status==='created'?'Continue this payment':'Check this payment';button.addEventListener('click',()=>run(async current=>{const resumed=await client.resumeTopUp(p.topUpId);if(!current())return;if(resumed.approvalUrl){if(typeof openApproval!=='function')failure();await openApproval(resumed.approvalUrl);return;}if(resumed.status==='created'){await client.captureReturnedTopUp();if(!current())return;}const checked=await client.readTopUp();if(!current())return;const latest=await client.read();if(current()){render(latest);status.textContent=checked.credited?'This credit payment is confirmed.':'This credit payment is awaiting verification.';}}));li.appendChild(button);}pendingList.appendChild(li);}status.textContent='Your account details are up to date.';} const on=(e,fn)=>{e.addEventListener('click',fn);disposers.push(()=>e.removeEventListener('click',fn));}; on(buttons[0],()=>run(async current=>{if(typeof signInOriginal!=='function')failure();await signInOriginal();if(!current())return;const r=await client.read();if(current())render(r);})); // The public picker owns plan selection. Paid activation remains server confirmed. on(buttons[2],()=>run(async current=>{if(subscriptionPicker.selected(root)||!consent.checked||typeof openApproval!=='function'||typeof confirmServerQuote!=='function')failure();const q=await client.prepareTopUp(parseAudAmount(amount.value));if(!current())return;const accepted=await confirmServerQuote({amountMinor:q.amountMinor,currency:q.currency,expiresAtMs:q.expiresAtMs});if(!current()||accepted!==true)return;const r=await client.beginTopUp(true);if(!current())return;if(r.approvalUrl)await openApproval(r.approvalUrl);else status.textContent='Keep this payment and check its current status.';})); on(buttons[3],()=>run(async current=>{const r=await client.read();if(current())render(r);})); const preferenceChanged=()=>lock();amount.addEventListener('input',preferenceChanged);consent.addEventListener('change',preferenceChanged);root.addEventListener('account-payment-preference-changed',preferenceChanged);disposers.push(()=>{amount.removeEventListener('input',preferenceChanged);consent.removeEventListener('change',preferenceChanged);root.removeEventListener('account-payment-preference-changed',preferenceChanged);}); lock();status.textContent='Sign in using your existing Marketplace account.'; return Object.freeze({enabled:true,refresh:()=>run(async current=>{const r=await client.read();if(current())render(r);}),dispose:()=>{alive=false;generation++;client.invalidate();disposers.forEach(f=>f());lock();}}); } return Object.freeze({bindAccountPaymentsPanel,parseAudAmount});})(); // Preserve the actual Firebase RecaptchaVerifier. Its public render() returns // the widget ID; Google's documented reset(id) also dismisses the image popup. // No challenge is solved, token fabricated, verification disabled or SMS sent. function createCancelablePhoneVerifier({authSdk,auth,container,pageWindow}={}){ const verifier=new authSdk.RecaptchaVerifier(auth,container,{size:'normal'}),clear=verifier.clear.bind(verifier); let widgetId=null,cleared=false; const reset=()=>{try{if(Number.isInteger(widgetId)&&widgetId>=0&&typeof pageWindow?.grecaptcha?.reset==='function')pageWindow.grecaptcha.reset(widgetId);}catch{}}; verifier.clear=()=>{cleared=true;reset();clear();}; void verifier.render().then(id=>{widgetId=id;if(cleared)reset();},()=>{}); return verifier; } const originalPhone=(()=>{ const PROJECT='autolink-pro-app',APP='1:468551753895:web:cb9939ec64f3d72c727b82'; const fail=code=>{throw Object.assign(Error(code),{code});}; const uid=v=>typeof v==='string'&&/^[A-Za-z0-9_-]{1,160}$/.test(v); const positive=v=>Number.isSafeInteger(v)&&v>0; const e164=v=>typeof v==='string'&&/^\+[1-9][0-9]{6,14}$/.test(v); const exact=(v,keys)=>v&&typeof v==='object'&&!Array.isArray(v)&&Object.keys(v).sort().join('|')===[...keys].sort().join('|'); // Original SDK phone linking/reauthentication only. This controller has no // signInWithPhoneNumber, signInWithCredential, account creation or merge path. // The nullable CAS reader is a separately reviewed SAME-session-service port; // the browser never assumes an absent private account or supplies revision0. function createOriginalMarketplacePhoneSessionBridge({enabled=false,auth,authSdk,client,currentScope, createApplicationVerifier,readBootstrap=null,clockAuthority=null,clock=Date.now,monotonicNow=()=>performance.now()}={}){ const off=()=>fail('original_phone_session_binding_required'); if(enabled!==true)return Object.freeze({enabled:false,requestCode:off,confirmCode:off,readRevision:off,confirmSession:off,recoverSession:off,cancel:()=>{},dispose:()=>{}}); if(auth?.app?.options?.projectId!==PROJECT||auth.app.options.appId!==APP||typeof currentScope!=='function'||typeof createApplicationVerifier!=='function'||typeof authSdk?.PhoneAuthProvider!=='function'||typeof authSdk.PhoneAuthProvider.credential!=='function'||typeof authSdk.linkWithCredential!=='function'||typeof authSdk.reauthenticateWithCredential!=='function'||typeof client?.bootstrapAfterPhoneVerification!=='function'||typeof client?.recoverSession!=='function')off(); let epoch=0,busy=false,disposed=false,completed=false,challenge=null,verified=null,revision=null,attempt=null,verifier=null; function latch(){const user=auth.currentUser,s=currentScope();if(disposed||!uid(user?.uid)||user.emailVerified!==true||user.isAnonymous!==false||s?.active!==true||!Number.isSafeInteger(s.generation)||typeof user.reload!=='function'||typeof user.getIdTokenResult!=='function')fail('original_verified_account_required');return {user,uid:user.uid,generation:s.generation,epoch,started:monotonicNow(),wall:clock()};} function current(l,limit=30000){const s=currentScope(),elapsed=monotonicNow()-l.started;if(disposed||auth.currentUser!==l.user||auth.currentUser?.uid!==l.uid||auth.currentUser.emailVerified!==true||auth.currentUser.isAnonymous!==false||s?.active!==true||s.generation!==l.generation||epoch!==l.epoch||elapsed<0||elapsed>=limit)fail('phone_account_changed_or_request_expired');return elapsed;} function releaseVerifier(){const old=verifier;verifier=null;try{old?.clear();}catch{}} function ownPhone(l,number,allowMissing){current(l);const p=l.user.providerData;if(!Array.isArray(p))fail('original_phone_enrollment_unconfirmed');const phones=p.filter(x=>x.providerId==='phone');if(l.user.phoneNumber==null){if(!allowMissing||phones.length!==0)fail('original_phone_enrollment_unconfirmed');return false;}if(l.user.phoneNumber!==number||phones.length!==1||phones[0].uid!==number||phones[0].phoneNumber!==number)fail('use_original_linked_phone');return true;} function tokenFrame(l,result,number,authStarted){ current(l);const c=result?.claims,f=c?.firebase,now=clock(),authAtMs=c?.auth_time*1000,expiresAtMs=c?.exp*1000; const checks=[ [c?.sub===l.uid,'subject'],[c?.aud===PROJECT,'project'],[c?.iss===`https://securetoken.google.com/${PROJECT}`,'issuer'], [c?.email===l.user.email,'email'],[c?.email_verified===true,'email_verified'],[!f?.tenant,'tenant'], [f?.sign_in_provider==='phone','phone_primary'],[f?.sign_in_second_factor===undefined&&f?.second_factor_identifier===undefined,'factor'], [c?.phone_number===number,'phone_number'],[[c?.iat,c?.exp,c?.auth_time].every(positive),'timestamps'],[positive(now),'clock'], [authAtMs<=now,'auth_time'],[authAtMs>=Math.floor(authStarted/1000)*1000,'auth_after_attempt'],[c?.iat*1000>=authAtMs,'issued_after_auth'], [c?.iat*1000<=now,'issued_time'],[expiresAtMs>now,'token_expiry'],[now-authAtMs<600000,'recent_auth']]; const failed=checks.find(([valid])=>!valid);if(failed)fail('phone_proof_'+failed[1]); ownPhone(l,number,false); return Object.freeze({uid:l.uid,user:l.user,generation:l.generation,epoch:l.epoch,number,authAtMs,expiresAtMs,acceptedAtMono:monotonicNow(),remainingMs:Math.min(expiresAtMs-now,authAtMs+600000-now)}); } function signedCurrent(v){const l=latch();if(!v||v.uid!==l.uid||v.user!==l.user||v.generation!==l.generation||v.epoch!==epoch||clock()=v.expiresAtMs||clock()>=v.authAtMs+600000||monotonicNow()-v.acceptedAtMono<0||monotonicNow()-v.acceptedAtMono>=v.remainingMs)fail('fresh_original_phone_event_required');ownPhone(l,v.number,false);return l;} async function exclusive(fn){if(busy)fail('phone_verification_in_progress');busy=true;try{return await fn();}finally{busy=false;}} async function requestCode({phoneNumber,explicitSmsConsent=false}={}){return exclusive(async()=>{ if(attempt)fail('recover_original_session_result_first');if(!e164(phoneNumber)||explicitSmsConsent!==true)fail('phone_and_sms_consent_required'); const l=latch();await l.user.reload();current(l);ownPhone(l,phoneNumber,true); challenge=null;verified=null;revision=null;releaseVerifier(); const candidate=createApplicationVerifier(auth);current(l);if(!candidate||typeof candidate.verify!=='function'||typeof candidate.clear!=='function'){try{candidate?.clear?.();}catch{}off();}verifier=candidate; try{const provider=new authSdk.PhoneAuthProvider(auth);current(l);const verificationId=await provider.verifyPhoneNumber(phoneNumber,verifier);current(l,600000);if(typeof verificationId!=='string'||!verificationId||verificationId.length>4096)fail('phone_code_request_unconfirmed');challenge={...l,phoneNumber,verificationId,challengeStarted:monotonicNow()};return Object.freeze({state:'code_sent'});} catch(error){releaseVerifier();fail(error?.code==='phone_account_changed_or_request_expired'?error.code:'phone_code_request_unconfirmed');} });} async function confirmCode(code){return exclusive(async()=>{ if(!challenge||typeof code!=='string'||!/^\d{6}$/.test(code))fail('original_phone_code_required'); const c=challenge;current(c,600000);if(monotonicNow()-c.challengeStarted<0||monotonicNow()-c.challengeStarted>=600000)fail('phone_code_expired'); const l=latch();if(c.uid!==l.uid||c.user!==l.user||c.generation!==l.generation||c.epoch!==l.epoch)fail('phone_account_changed_or_request_expired'); await l.user.reload();current(l);const linked=ownPhone(l,c.phoneNumber,true),credential=authSdk.PhoneAuthProvider.credential(c.verificationId,code); if(!linked){current(l);const result=await authSdk.linkWithCredential(l.user,credential);current(l);if(result?.user?.uid!==l.uid)fail('phone_account_changed_or_request_expired');await l.user.reload();current(l);ownPhone(l,c.phoneNumber,false);} // Linking alone does not assert a signed phone-primary event. Reauthenticate // the SAME user, then require the real SDK ID-token claim and original server // verifier. An expired/reused code may fail; there is no sign-in fallback. current(l);const authStartMono=monotonicNow();let authStarted=clock();const result=await authSdk.reauthenticateWithCredential(l.user,credential);current(l);if(result?.user?.uid!==l.uid)fail('phone_account_changed_or_request_expired'); await l.user.reload();current(l);const token=await l.user.getIdTokenResult(true);current(l);if(clockAuthority){if(typeof readBootstrap!=='function')off();const started=monotonicNow(),proof=await readBootstrap();current(l);clockAuthority.accept(proof,{uid:l.uid,generation:l.generation,started,finished:monotonicNow()});authStarted=clockAuthority.lowerAt(authStartMono);}verified=tokenFrame(l,token,c.phoneNumber,authStarted);revision=null;challenge=null;releaseVerifier();return Object.freeze({state:'phone_verified',uid:l.uid}); });} function revisionCurrent(r,v){if(!r)fail('original_session_revision_expired');const l=signedCurrent(v),elapsed=monotonicNow()-r.requestStarted;if(r.uid!==l.uid||r.generation!==l.generation||r.epoch!==epoch||elapsed<0||elapsed>=30000||monotonicNow()-r.acceptedAtMono<0||monotonicNow()-r.acceptedAtMono>=r.remainingMs||clock()=r.expiresAtMs)fail('original_session_revision_expired');return l;} async function readRevision(){return exclusive(async()=>{ if(attempt)fail('recover_original_session_result_first');const l=signedCurrent(verified);if(typeof readBootstrap!=='function')off(); const r=await readBootstrap();current(l);signedCurrent(verified); if(!exact(r,['uid','expectedRevision','observedAtMs','expiresAtMs'])||r.uid!==l.uid||!Number.isSafeInteger(r.expectedRevision)||r.expectedRevision<0||r.expectedRevision>=Number.MAX_SAFE_INTEGER||![r.observedAtMs,r.expiresAtMs].every(positive)||r.observedAtMs>clock()||r.expiresAtMs<=clock()||r.expiresAtMs<=r.observedAtMs||r.expiresAtMs-r.observedAtMs>30000)fail('original_session_revision_unconfirmed'); const remainingMs=Math.min(r.expiresAtMs-clock(),r.expiresAtMs-r.observedAtMs-current(l));if(remainingMs<=0)fail('original_session_revision_expired'); revision={...r,generation:l.generation,epoch,requestStarted:l.started,acceptedAtMono:monotonicNow(),remainingMs};return Object.freeze({state:'ready_to_confirm_session'}); });} async function confirmSession({explicitSessionConsent=false}={}){return exclusive(async()=>{ if(attempt)fail('recover_original_session_result_first');if(explicitSessionConsent!==true||!revision)fail('current_session_confirmation_required'); const v=verified,r=revision,l=revisionCurrent(r,v);attempt={uid:l.uid,user:l.user,generation:l.generation,epoch,expectedRevision:r.expectedRevision,authAtMs:v.authAtMs};revision=null; const assertOriginalDispatch=()=>{current(l);revisionCurrent(r,v);}; try{await client.bootstrapAfterPhoneVerification({uid:l.uid,phoneVerificationCompleted:true},attempt.expectedRevision,{assertOriginalDispatch});current(l);revisionCurrent(r,v);attempt=null;completed=true;return Object.freeze({state:'session_confirmed',uid:l.uid});} catch{fail('original_session_result_unconfirmed_recovery_required');} });} async function recoverSession(){return exclusive(async()=>{ const l=signedCurrent(verified),a=attempt;if(!a||a.uid!==l.uid||a.user!==l.user||a.generation!==l.generation||a.epoch!==epoch||a.authAtMs!==verified.authAtMs)fail('original_session_recovery_scope_required'); const assertOriginalDispatch=()=>{current(l);signedCurrent(verified);}; try{await client.recoverSession(a.expectedRevision,{assertOriginalDispatch});current(l);attempt=null;completed=true;return Object.freeze({state:'session_confirmed',uid:l.uid});} catch{fail('original_session_result_still_unconfirmed');} });} function cancel(){epoch++;completed=false;challenge=null;verified=null;revision=null;releaseVerifier();client.invalidate?.();} function releaseAfterConfirmedSession(){if(completed!==true||attempt)fail('original_session_completion_required');signedCurrent(verified);epoch++;challenge=null;verified=null;revision=null;releaseVerifier();disposed=true;} return Object.freeze({enabled:true,requestCode,confirmCode,readRevision,confirmSession,recoverSession,cancel,releaseAfterConfirmedSession,dispose:()=>{cancel();disposed=true;}}); } // The exact proposed operation is deliberately OFF until Root accepts and // captures the current original read-callable host. AppCheck is produced and // consumed by the ORIGINAL Firebase SDK/framework, never by browser flags. function createOriginalSessionBootstrapSdkReader({enabled=false,auth,functions,httpsCallable,currentScope, monotonicNow=()=>performance.now()}={}){ if(enabled!==true)return null; if(auth?.app!==functions?.app||auth?.app?.options?.projectId!==PROJECT||auth.app.options.appId!==APP||functions.region!=='us-central1'||typeof httpsCallable!=='function'||typeof currentScope!=='function')fail('original_session_reader_sdk_required'); const read=httpsCallable(functions,'readMarketplaceCurrentSession',{timeout:30000,limitedUseAppCheckTokens:true}); return async()=>{const user=auth.currentUser,s=currentScope(),started=monotonicNow();const check=()=>{const n=currentScope(),elapsed=monotonicNow()-started;if(!uid(user?.uid)||auth.currentUser!==user||s?.active!==true||n?.active!==true||n.generation!==s.generation||elapsed<0||elapsed>=30000)fail('phone_account_changed_or_request_expired');};check();await user.getIdToken(true);check();const result=await read({payload:{operation:'readSessionBootstrap'}});check();return structuredClone(result.data);}; } // Pasteable UI callback for the existing secure-session button. SMS and writes // start ONLY on these explicit controls; constructing/rendering sends nothing. function showOriginalMarketplacePhoneSession({root,auth,user,authSdk,functions,httpsCallable,client,currentScope, bootstrapReadReady=false,doc=root?.ownerDocument,pageWindow=globalThis.window, clockAuthority=null,clock=Date.now,monotonicNow=()=>performance.now()}={}){ if(!root?.appendChild||!doc?.createElement||auth.currentUser!==user||typeof authSdk?.RecaptchaVerifier!=='function'||typeof authSdk?.onAuthStateChanged!=='function')fail('original_phone_ui_binding_required'); const generation=currentScope()?.generation; const section=doc.createElement('dialog');section.id='autolinkpro-phone-dialog';section.setAttribute('aria-label','Phone Verification');section.setAttribute('aria-modal','true');const backdrop=doc.createElement('div');backdrop.className='autolinkpro-phone-backdrop';backdrop.setAttribute('aria-hidden','true'); const element=(tag,text='')=>{const e=doc.createElement(tag);e.textContent=text;section.appendChild(e);return e;}; element('h3','Phone Verification'); element('p','Use the phone linked to this Marketplace account. A verification text is sent only when you choose Send code.'); const status=element('p','No payment will be taken.'),phone=element('input');phone.type='tel';phone.autocomplete='tel';phone.setAttribute('aria-label','Phone including country code');phone.placeholder='+61';phone.value=user.phoneNumber??'';phone.readOnly=!!user.phoneNumber; const consentLabel=element('label'),consent=doc.createElement('input');consent.type='checkbox';consentLabel.appendChild(consent);const consentText=doc.createElement('span');consentText.textContent=' Verify my phone and continue to Account payments.';consentLabel.appendChild(consentText); const button=text=>{const b=element('button',text);b.type='button';b.style.cssText='background:#1565c0;color:white;border:0;border-radius:6px;padding:10px 14px;margin:6px 6px 6px 0';return b;}; const send=button('Send code'),code=element('input');code.type='text';code.inputMode='numeric';code.autocomplete='one-time-code';code.maxLength=6;code.setAttribute('aria-label','Six-digit verification code');code.disabled=true; const verify=button('Verify code'),read=button('Check current secure session'),confirm=button('Confirm secure session'),recover=button('Check unconfirmed result'),cancel=button('Cancel');verify.disabled=true;read.disabled=true;confirm.disabled=true;recover.disabled=true;read.hidden=true;confirm.hidden=true;recover.hidden=true; const recaptcha=element('div');recaptcha.setAttribute('aria-label','Phone verification security check'); const readBootstrap=createOriginalSessionBootstrapSdkReader({enabled:bootstrapReadReady===true,auth,functions,httpsCallable,currentScope,monotonicNow}); const bridge=createOriginalMarketplacePhoneSessionBridge({enabled:true,auth,authSdk,client,currentScope,readBootstrap, createApplicationVerifier:a=>createCancelablePhoneVerifier({authSdk,auth:a,container:recaptcha,pageWindow}),clockAuthority,clock,monotonicNow}); const removers=[];let settled=false,inFlight=false,unknown=false,unsubscribe=()=>{}; const owned=()=>!settled&&auth.currentUser===user&¤tScope()?.active===true&¤tScope()?.generation===generation; const lock=v=>{send.disabled=v||unknown;phone.disabled=v||unknown;consent.disabled=v||unknown;code.disabled=v||code.disabled;verify.disabled=v||verify.disabled;read.disabled=v||read.disabled;confirm.disabled=v||confirm.disabled;recover.disabled=v||!unknown;}; let resolve,reject;const result=new Promise((yes,no)=>{resolve=yes;reject=no;}); function finish(error){if(settled)return;settled=true;let failure=error;try{if(error)bridge.dispose();else bridge.releaseAfterConfirmedSession();}catch{bridge.dispose();failure='original_session_completion_unconfirmed';}unsubscribe();removers.forEach(f=>f());phone.value='';code.value='';consent.checked=false;if(section.open)section.close();section.remove();backdrop.remove();failure?reject(Error(failure)):resolve({uid:user.uid,sessionConfirmed:true});} async function run(fn,onSuccess){if(inFlight||!owned())return;inFlight=true;lock(true);try{const r=await fn();if(!owned()){finish('original_account_changed');return;}onSuccess(r);}catch(e){if(!owned()){finish('original_account_changed');return;}const c=e?.code??''; if(c==='original_session_result_unconfirmed_recovery_required'||c==='original_session_result_still_unconfirmed'){unknown=true;send.disabled=true;code.disabled=true;verify.disabled=true;read.disabled=true;confirm.disabled=true;recover.disabled=false;recover.hidden=false;status.textContent='Account verification is still being confirmed. Check the saved result; it will not be submitted again.';} else if(c==='original_phone_session_binding_required'){status.textContent='Phone verified. The existing secure-session reader is being connected. No payment will be taken.';read.disabled=false;} else{const safe=/^(phone_proof_[a-z_]+|phone_[a-z_]+|original_[a-z_]+|use_original_linked_phone|fresh_original_phone_event_required|genuine_signed_phone_event_required|auth\/[a-z-]+|functions\/[a-z-]+)$/.test(c)?c:'verification_not_confirmed';status.setAttribute('data-verification-result',safe);status.textContent=c==='auth/invalid-verification-code'?'The code could not be verified. Check the code or request a new one.':c==='auth/code-expired'||c==='phone_code_expired'?'That code has expired. Please request a new code.':'Phone Verification could not complete. Please request a new code.';if(!unknown){send.disabled=false;code.disabled=false;verify.disabled=false;read.disabled=true;confirm.disabled=true;}} }finally{inFlight=false;if(!settled){send.disabled=unknown;phone.disabled=unknown;consent.disabled=unknown;recover.disabled=!unknown;}}} const listen=(target,event,fn)=>{target.addEventListener(event,fn);removers.push(()=>target.removeEventListener(event,fn));}; listen(send,'click',()=>run(()=>{status.removeAttribute('data-verification-result');status.textContent='Complete the security check to send a code.';recaptcha.hidden=false;return bridge.requestCode({phoneNumber:phone.value.trim(),explicitSmsConsent:consent.checked===true});},()=>{recaptcha.hidden=true;status.textContent='Enter the verification code sent to your phone.';code.disabled=false;verify.disabled=false;read.disabled=true;confirm.disabled=true;})); listen(verify,'click',()=>run(async()=>{if(consent.checked!==true)throw Error('current_session_confirmation_required');await bridge.confirmCode(code.value.trim());code.value='';status.textContent='Checking your Marketplace account…';await bridge.readRevision();return bridge.confirmSession({explicitSessionConsent:true});},()=>finish())); listen(read,'click',()=>run(()=>bridge.readRevision(),()=>{read.disabled=false;confirm.disabled=false;status.textContent='Current account checked. Confirm this secure session to read your account records.';})); listen(confirm,'click',()=>run(()=>bridge.confirmSession({explicitSessionConsent:true}),()=>finish())); listen(recover,'click',()=>run(()=>bridge.recoverSession(),()=>finish())); listen(cancel,'click',()=>finish('phone_verification_cancelled')); listen(section,'cancel',event=>{event.preventDefault();finish('phone_verification_cancelled');}); listen(doc,'keydown',event=>{if(event.key==='Escape'){event.preventDefault();finish('phone_verification_cancelled');}}); listen(doc,'visibilitychange',()=>{if(doc.visibilityState==='hidden')finish('phone_verification_paused');}); listen(pageWindow,'pagehide',()=>finish('phone_verification_paused')); doc.body.appendChild(backdrop);root.appendChild(section);section.show(); unsubscribe=authSdk.onAuthStateChanged(auth,()=>{if(!owned())finish('original_account_changed');}); if(settled)unsubscribe(); return result; } return Object.freeze({showOriginalMarketplacePhoneSession});})(); function createOriginalAccountTermsClient({auth,functions,httpsCallable,currentScope,monotonicNow=()=>performance.now(),cryptoApi=globalThis.crypto}={}){ const fail=code=>{throw Object.assign(Error(code),{code});}; if(auth?.app!==functions?.app||auth?.app?.options?.projectId!=='autolink-pro-app'||auth.app.options.appId!=='1:468551753895:web:cb9939ec64f3d72c727b82'||functions.region!=='us-central1')fail('original_account_terms_sdk_required'); // These existing Gen1 legal routes use the normal SDK context. Single-use // App Check consumption belongs to the separate protected payment host. const options={timeout:30000},getTerms=httpsCallable(functions,'getMarketplaceAccountTerms',options),acceptTerms=httpsCallable(functions,'acceptMarketplaceAccountTerms',options),owned=new WeakMap(); function latch(){const user=auth.currentUser,scope=currentScope();if(!user?.uid||user.emailVerified!==true||scope?.active!==true)fail('original_signed_in_account_required');return{user,uid:user.uid,generation:scope.generation,started:monotonicNow()};} function current(l){const scope=currentScope(),elapsed=monotonicNow()-l.started;if(auth.currentUser!==l.user||auth.currentUser.uid!==l.uid||scope?.active!==true||scope.generation!==l.generation||elapsed<0||elapsed>=30000)fail('original_account_changed');} async function invoke(call,payload,l){current(l);await l.user.getIdToken(true);current(l);const result=await call(structuredClone(payload));current(l);return structuredClone(result.data);} async function read(){ const l=latch(),r=await invoke(getTerms,{},l); if(!r||Object.keys(r).sort().join('|')!=='effectiveAt|text|textHash|version'||!/^marketplace-account-v[1-9][0-9]*$/.test(r.version)||typeof r.text!=='string'||r.text.length<100||r.text.length>131072||!/^[a-f0-9]{64}$/.test(r.textHash)||!Number.isFinite(Date.parse(r.effectiveAt)))fail('original_published_account_terms_required'); const bytes=await cryptoApi.subtle.digest('SHA-256',new TextEncoder().encode(r.text));current(l); if([...new Uint8Array(bytes)].map(n=>n.toString(16).padStart(2,'0')).join('')!==r.textHash)fail('original_published_account_terms_changed'); const terms=Object.freeze(r);owned.set(terms,{user:l.user,uid:l.uid,generation:l.generation});return terms; } async function accept(terms,explicitConsent){ const l=latch(),prepared=owned.get(terms);if(explicitConsent!==true||!prepared||prepared.user!==l.user||prepared.uid!==l.uid||prepared.generation!==l.generation)fail('original_explicit_account_terms_required'); const r=await invoke(acceptTerms,{operation:'acceptOwnAccountTerms',scopeActorUid:l.uid,version:terms.version,textHash:terms.textHash,accepted:true},l); if(!r||Object.keys(r).sort().join('|')!=='acceptedAt|version'||r.version!==terms.version||typeof r.acceptedAt!=='string'||!Number.isFinite(Date.parse(r.acceptedAt)))fail('original_account_terms_acceptance_unconfirmed');return r; } return Object.freeze({read,accept}); } // Only the customer presses the unchecked legal acceptance control. Rendering, // sign-in, phone verification and opening this window never accept terms. function showOriginalAccountTerms({root,client,onAccepted=async()=>{},onClosed=()=>{}}={}){ const doc=root.ownerDocument,dialog=doc.createElement('dialog');dialog.id='autolinkpro-account-terms-dialog';dialog.setAttribute('aria-label','Marketplace account setup'); const add=(tag,text='')=>{const e=doc.createElement(tag);e.textContent=text;dialog.appendChild(e);return e;}; add('h2','Complete Marketplace account setup');const status=add('p','Loading the current Marketplace account terms...'),text=add('pre');text.className='autolinkpro-account-terms-text'; const label=add('label'),checkbox=doc.createElement('input');checkbox.type='checkbox';checkbox.disabled=true;label.appendChild(checkbox);const consent=doc.createElement('span');consent.textContent=' I have read and agree to the Marketplace account terms above.';label.appendChild(consent); const accept=add('button','Accept and continue');accept.type='button';accept.disabled=true;const close=add('button','Close');close.type='button'; let terms=null,busy=false,alive=true; function finish(){if(!alive)return;alive=false;if(dialog.open)dialog.close();dialog.remove();onClosed();} close.addEventListener('click',finish);dialog.addEventListener('cancel',event=>{event.preventDefault();finish();}); checkbox.addEventListener('change',()=>{accept.disabled=busy||!terms||!checkbox.checked;}); accept.addEventListener('click',async()=>{ if(!alive||busy||!terms||checkbox.checked!==true)return;busy=true;accept.disabled=true;checkbox.disabled=true;status.textContent='Saving your Marketplace account setup...'; try{await client.accept(terms,true);if(!alive)return;finish();await onAccepted();} catch(error){if(alive){ if(error?.code==='functions/failed-precondition'){ try{const current=await client.read();if(!alive)return;if(current.version!==terms.version||current.textHash!==terms.textHash){terms=current;text.textContent=current.text;checkbox.checked=false;status.textContent='The account terms changed. Please read the current terms and agree again.';}else status.textContent='Account setup is not yet confirmed. You can retry this same setup.';} catch{if(alive)status.textContent='Account setup could not be confirmed. Close this window and review the current terms again.';} }else status.textContent='Account setup is not yet confirmed. You can retry this same setup.'; busy=false;checkbox.disabled=false;accept.disabled=!checkbox.checked; }} }); doc.body.appendChild(dialog);dialog.showModal(); void(async()=>{try{terms=await client.read();if(alive){text.textContent=terms.text;status.textContent='Please review these account terms before continuing.';checkbox.disabled=false;}} catch(error){if(alive){status.setAttribute('data-account-terms-read-result',/^(functions\/[a-z-]+|auth\/[a-z-]+|appCheck\/[a-z-]+|original_[a-z_]+)$/.test(error?.code??'')?error.code:'account_terms_read_unconfirmed');status.setAttribute('data-account-terms-error-class',/^[A-Za-z]{1,40}$/.test(error?.name??'')?error.name:'Unavailable');status.setAttribute('data-account-terms-error-kind',/TextEncoder/.test(error?.message??'')?'text_encoder':/structuredClone/.test(error?.message??'')?'clone':/crypto|subtle/.test(error?.message??'')?'digest':/not defined/.test(error?.message??'')?'undefined_name':/not a function/.test(error?.message??'')?'function_required':'unclassified');status.textContent='The current Marketplace account terms could not load. Please close this window and try again.';}}})(); return Object.freeze({dispose:finish}); } function createOriginalCreditCheckoutPage({root,pageWindow,clock,currentScope,readClient,selectedSubscription,wait=ms=>new Promise(resolve=>setTimeout(resolve,ms))}={}){ const status=root.querySelector('#account-payment-status'),amount=root.querySelector('#marketplace-credit-amount'),consent=root.querySelector('#marketplace-credit-consent'); const fail=()=>{throw Error('original_credit_checkout_page_required');}; if(!status||!amount||!consent||typeof clock!=='function'||typeof currentScope!=='function'||typeof readClient!=='function'||typeof selectedSubscription!=='function')fail(); let epoch=0,returned=false; const frame=()=>{const scope=currentScope(),client=readClient();if(scope?.active!==true||!client)fail();return{generation:scope.generation,client,epoch};}; const current=f=>{const scope=currentScope();return scope?.active===true&&scope.generation===f.generation&&readClient()===f.client&&epoch===f.epoch;}; const amountMinor=()=>{const text=amount.value;if(!/^(0|[1-9][0-9]{0,6})(?:\.[0-9]{1,2})?$/.test(text))return null;const[d,c='']=text.split('.');return Number(d)*100+Number(c.padEnd(2,'0'));}; function confirmedQuote(q){ frame();return selectedSubscription()===null&&consent.checked===true&&q?.currency==='AUD'&&Number.isSafeInteger(q.amountMinor)&&q.amountMinor>=500&&q.amountMinor<=100000&&amountMinor()===q.amountMinor&&Number.isSafeInteger(q.expiresAtMs)&&clock(){ const ORIGINAL_PROJECT='autolink-pro-app',ORIGINAL_APP='1:468551753895:web:cb9939ec64f3d72c727b82'; const hold=()=>{throw Error('original_marketplace_website_binding_required');}; function verifiedSnippetConfiguration(input,origin){ if(input?.enabled!==true)return null; if(!['https://www.autolinkpro.com.au','https://autolinkpro.com.au'].includes(origin)||input.publicConfigurationVerified!==true||input.firebase?.projectId!==ORIGINAL_PROJECT||input.firebase.appId!==ORIGINAL_APP||typeof input.firebase.apiKey!=='string'||!input.firebase.apiKey||typeof input.firebase.authDomain!=='string'||!input.firebase.authDomain||typeof input.sdkVersion!=='string'||!/^\d+\.\d+\.\d+$/.test(input.sdkVersion)||!['recaptcha_v3','recaptcha_enterprise'].includes(input.appCheckProvider)||typeof input.appCheckSiteKey!=='string'||!/^[A-Za-z0-9_-]{20,200}$/.test(input.appCheckSiteKey))hold(); const allowed=['apiKey','authDomain','projectId','storageBucket','messagingSenderId','appId','measurementId']; if(Object.keys(input.firebase).some(k=>!allowed.includes(k)))hold(); return structuredClone(input); } // Lifecycle is private to this rendered snippet, not a server session epoch. // onAuthStateChanged owns account turnover. The existing adapter still obtains // every server observation through the original verified SDK/session issuer. function connectOriginalAccountPaymentsPage({root,auth,authSdk,functions,httpsCallable, createClient,bindPanel,readReady=false,resumeReadReady=false,originalPhoneSessionBridge=null, doc=root?.ownerDocument,pageWindow=globalThis.window}={}){ if(!root?.querySelector||typeof authSdk?.onAuthStateChanged!=='function'||typeof authSdk?.signInWithEmailAndPassword!=='function'||typeof authSdk?.signOut!=='function'||typeof createClient!=='function'||typeof bindPanel!=='function')hold(); const e=id=>{const found=root.querySelector('#'+id);if(!found)hold();return found;}; const status=e('account-payment-status'),email=e('marketplace-login-email'),password=e('marketplace-login-password'),login=e('marketplace-email-sign-in'),logout=e('marketplace-sign-out'),verify=e('marketplace-verify-session'); const balance=e('marketplace-cleared-credit'),plan=e('marketplace-current-plan'),history=e('marketplace-payment-history'),pending=e('marketplace-pending-payments'); const accountButtons=['marketplace-account-sign-in','marketplace-manage-subscription','marketplace-add-credit','marketplace-refresh-payment'].map(e),amount=e('marketplace-credit-amount'),consent=e('marketplace-credit-consent'); let generation=0,active=false,disposed=false,client=null,panel=null,authUser=null,authBusy=false,termsDialog=null,resumeBusy=false; const currentScope=()=>({generation,active:active&&!disposed&&doc.visibilityState!=='hidden'}); const clockAuthority=createOriginalServerClock({currentScope}); const termsClient=createOriginalAccountTermsClient({auth,functions,httpsCallable,currentScope}); const creditCheckout=true?createOriginalCreditCheckoutPage({root,pageWindow,clock:clockAuthority.now,currentScope,readClient:()=>client,selectedSubscription:()=>subscriptionPicker.selected(root)}):Object.freeze({confirmedQuote:()=>false,openApproval:()=>hold(),reconcileReturn:async()=>{},invalidate(){}}); function authControls(){const locked=authBusy||resumeBusy||disposed||doc.visibilityState==='hidden',signedIn=!!auth.currentUser;email.disabled=locked;password.disabled=locked;login.disabled=locked;logout.disabled=locked||!signedIn;e('marketplace-login-fields').hidden=signedIn;login.hidden=signedIn;logout.hidden=!signedIn;verify.hidden=!signedIn||!active||!!panel;const identity=e('marketplace-account-identity');identity.hidden=!signedIn;identity.textContent=signedIn?'Signed in as '+(auth.currentUser.email??'Marketplace member'):'';const setup=e('marketplace-account-terms');setup.hidden=!signedIn||e('marketplace-account-summary').hidden===false;setup.disabled=locked||!active;e('marketplace-manage-subscription').disabled=locked;amount.disabled=locked;consent.disabled=locked;} function clearAccount(message){ creditCheckout.invalidate(); generation++;active=false;resumeBusy=false;termsDialog?.dispose();termsDialog=null;accountSummary.clear(root);clockAuthority.reset();panel?.dispose();panel=null;client?.invalidate();client=null; balance.textContent='Your confirmed credit balance will appear here.';subscriptionPicker.renderCurrent(root); history.replaceChildren();e('marketplace-payment-history-title').hidden=true;pending.replaceChildren();amount.value='';paymentPreferences.refresh(root);consent.checked=false;password.value='';email.value='';email.disabled=true;password.disabled=true; accountButtons.forEach(b=>b.disabled=true);amount.disabled=true;consent.disabled=true;verify.disabled=true;status.textContent=message; } function observe(user){ clearAccount(user?'Signed in to Marketplace. Complete Phone Verification to view your subscriptions and credit.':'Sign in to your existing Marketplace account.');authUser=user??null; authControls(); if(!user||disposed||doc.visibilityState==='hidden')return; if(user.emailVerified!==true){status.textContent='Verify your email in your existing Marketplace account, then sign in again.';return;} active=true; client=createClient({enabled:true,creditEnabled:true,subscriptionsEnabled:false,auth,functions,httpsCallable,currentScope,clockAuthority,resumeReadEnabled:resumeReadReady,clock:clockAuthority.now}); verify.disabled=false;authControls();if(resumeReadReady)void resumeSession(); } async function resumeSession(){ if(disposed||!active||!client||resumeBusy||auth.currentUser!==authUser)return; const user=authUser,g=generation,ownedClient=client;resumeBusy=true;verify.disabled=true;authControls(); try{await ownedClient.resumeEstablishedSession();if(disposed||!active||g!==generation||auth.currentUser!==user||client!==ownedClient)return; if(readReady){panel=bindPanel({root,client:ownedClient,clock:clockAuthority.now,enabled:true,creditEnabled:true,subscriptionsEnabled:false,openApproval:creditCheckout.openApproval,confirmServerQuote:creditCheckout.confirmedQuote,signInOriginal:async()=>{if(auth.currentUser!==user||generation!==g)hold();}});await panel.refresh();if(panel)await creditCheckout.reconcileReturn(()=>panel.refresh());} }catch{if(!disposed&&g===generation&&auth.currentUser===user)status.textContent='Complete Phone Verification to load your account details.';} finally{if(!disposed&&g===generation){resumeBusy=false;verify.disabled=!!panel;authControls();}} } async function secureSession(){ if(disposed||!active||!client||auth.currentUser!==authUser)return; const user=authUser,g=generation,ownedClient=client; verify.disabled=true; if(typeof originalPhoneSessionBridge!=='function'){ status.textContent='Secure session verification is being connected. No payment will be taken.';return; } try{ // This ORIGINAL callback must use genuine phone/MFA SDK evidence and the // original own-account CAS. No expectedRevision0 or UI success is invented. await originalPhoneSessionBridge({auth,user,client:ownedClient,currentScope,clockAuthority,clock:clockAuthority.now}); if(disposed||!active||g!==generation||auth.currentUser!==user||client!==ownedClient)return; await ownedClient.refresh(); if(disposed||!active||g!==generation||auth.currentUser!==user||client!==ownedClient)return; if(readReady!==true){status.textContent='Signed in securely. Account records are being connected; payments remain off.';return;} panel=bindPanel({root,client:ownedClient,clock:clockAuthority.now,enabled:true,creditEnabled:true,subscriptionsEnabled:false, openApproval:creditCheckout.openApproval,confirmServerQuote:creditCheckout.confirmedQuote,signInOriginal:async()=>{if(auth.currentUser!==user||generation!==g)hold();}}); await panel.refresh();await creditCheckout.reconcileReturn(()=>panel.refresh());authControls(); }catch{if(!disposed&&g===generation){const creditPreference=amount.value;clearAccount('Phone Verification was not completed.');if(auth.currentUser===user&&user.emailVerified===true&&doc.visibilityState!=='hidden'){active=true;authUser=user;amount.value=creditPreference;paymentPreferences.refresh(root);client=createClient({enabled:true,creditEnabled:true,subscriptionsEnabled:false,auth,functions,httpsCallable,currentScope,clockAuthority,resumeReadEnabled:resumeReadReady,clock:clockAuthority.now});verify.disabled=false;status.textContent='Phone Verification was not completed. Choose Phone Verification to try again.';}authControls();}} } async function signIn(){ if(authBusy||disposed)return;const loginEmail=email.value.trim(),loginPassword=password.value; if(!loginEmail||!loginPassword){status.textContent='Enter the email and password for your existing Marketplace account.';return;} clearAccount('Signing in to your existing Marketplace account…');authBusy=true;login.disabled=true; try{const signedIn=await authSdk.signInWithEmailAndPassword(auth,loginEmail,loginPassword);if(!disposed){if(!signedIn?.user||auth.currentUser!==signedIn.user)hold();observe(signedIn.user);}}catch{if(!disposed)status.textContent='Sign-in was not confirmed. Use your existing Marketplace sign-in or phone verification.';} finally{authBusy=false;if(!disposed){authControls();password.value='';}} } async function signOut(){ if(disposed)return; // Clear data synchronously BEFORE the awaited SDK logout. A failed logout // cannot leave the prior account's money/history on screen. authBusy=true;clearAccount('Signing out…');authUser=null;authControls(); try{await authSdk.signOut(auth);if(!disposed)status.textContent='Signed out. Sign in to your existing Marketplace account.';} catch{if(!disposed)status.textContent='Account details have been cleared. Sign-out is not yet confirmed.';} finally{authBusy=false;if(!disposed)authControls();} } const listen=(target,type,fn)=>{target.addEventListener(type,fn);return ()=>target.removeEventListener(type,fn);}; const cleanup=[listen(login,'click',signIn),listen(logout,'click',signOut),listen(verify,'click',secureSession), listen(e('marketplace-account-terms'),'click',()=>{if(disposed||!active||termsDialog)return;termsDialog=showOriginalAccountTerms({root,client:termsClient,onClosed:()=>{termsDialog=null;},onAccepted:async()=>{if(panel){await panel.refresh();authControls();}else status.textContent='Marketplace account setup completed. Choose Phone Verification to load account details.';}});}), listen(doc,'visibilitychange',()=>{if(doc.visibilityState==='hidden')clearAccount('Account details are paused while this page is hidden.');else observe(auth.currentUser);}), listen(pageWindow,'pagehide',()=>clearAccount('Account details cleared.')), listen(pageWindow,'pageshow',()=>observe(auth.currentUser))]; const unsubscribe=authSdk.onAuthStateChanged(auth,user=>{if(!disposed)observe(user);}); return Object.freeze({currentScope,secureSession,dispose:()=>{if(disposed)return;clearAccount('Account details cleared.');disposed=true;unsubscribe();cleanup.forEach(f=>f());login.disabled=true;logout.disabled=true;verify.disabled=true;}}); } async function bootWordPressAccountPayments({root,input,adapter,panel,pageWindow=globalThis.window, loadModule=url=>import(url),phoneBridge=null}={}){ const status=root?.querySelector?.('#account-payment-status'); if(!status)hold();let configuration; try{configuration=verifiedSnippetConfiguration(input,pageWindow.location.origin);}catch{status.textContent='The original Marketplace connection is not yet verified. No payment will be taken.';return null;} if(!configuration){status.textContent='Sign in to add credit to your Marketplace account.';return null;} try{ const prefix='https://www.gstatic.com/firebasejs/'+configuration.sdkVersion+'/'; const [appSdk,authSdk,functionsSdk,appCheckSdk]=await Promise.all(['firebase-app.js','firebase-auth.js','firebase-functions.js','firebase-app-check.js'].map(n=>loadModule(prefix+n))); const apps=appSdk.getApps(),same=apps.filter(a=>a.options?.projectId===ORIGINAL_PROJECT&&a.options.appId===ORIGINAL_APP); if(apps.length>0&&same.length!==1)hold(); const app=same[0]??appSdk.initializeApp(configuration.firebase); if(app.options.projectId!==ORIGINAL_PROJECT||app.options.appId!==ORIGINAL_APP)hold(); if(Object.keys(configuration.firebase).some(k=>app.options[k]!==configuration.firebase[k]))hold(); const provider=configuration.appCheckProvider==='recaptcha_enterprise'?new appCheckSdk.ReCaptchaEnterpriseProvider(configuration.appCheckSiteKey):new appCheckSdk.ReCaptchaV3Provider(configuration.appCheckSiteKey); if(configuration.reuseVerifiedExistingAppCheck===true)appCheckSdk.getAppCheck(app);else appCheckSdk.initializeAppCheck(app,{provider,isTokenAutoRefreshEnabled:true}); const auth=authSdk.getAuth(app),functions=functionsSdk.getFunctions(app,'us-central1'); // Only a separately manager-bound ORIGINAL phone/session callback is read. // This bundle defines no fake callback, selector storage, token URL or identity. const bridge=configuration.phoneSessionBootstrapReady===true&&typeof phoneBridge==='function'?args=>phoneBridge({...args,root,authSdk,functions,httpsCallable:functionsSdk.httpsCallable,bootstrapReadReady:true,pageWindow}):null; return connectOriginalAccountPaymentsPage({root,auth,authSdk,functions,httpsCallable:functionsSdk.httpsCallable, createClient:adapter.createMarketplaceWebsiteAccountPayments,bindPanel:panel.bindAccountPaymentsPanel,readReady:configuration.accountReadReady===true,resumeReadReady:configuration.sessionResumeReadReady===true,originalPhoneSessionBridge:bridge,pageWindow}); }catch{status.textContent='The original Marketplace sign-in connection is not yet confirmed. No payment will be taken.';return null;} } return Object.freeze({bootWordPressAccountPayments});})(); // Public preferences are an estimate only. The existing payment service must // issue the complete matching quote before either financial button is enabled. const paymentPreferences=(()=>{ const states=new WeakMap(),money=n=>'$'+(n/100).toFixed(2); function creditMinor(value){ if(value==='')return 0; if(typeof value!=='string'||!/^(0|[1-9][0-9]{0,6})(?:\.[0-9]{1,2})?$/.test(value))return null; const [whole,fraction='']=value.split('.'),minor=Number(whole)*100+Number(fraction.padEnd(2,'0')); return Number.isSafeInteger(minor)?minor:null; } function refresh(root){ const state=states.get(root);if(!state)return; const amount=creditMinor(state.input.value.trim()),plan=state.selection(),monthly=plan?.monthlyMinor??0; const valid=amount!==null&&Number.isSafeInteger(monthly)&&monthly>=0; state.total.textContent=valid?'To pay Total '+money(monthly+amount):'Enter a valid credit amount'; const parts=[];if(monthly>0)parts.push(plan.name+': '+money(monthly)+' per month');if(amount>0)parts.push('Account credit: '+money(amount)+' once'); state.details.textContent=parts.join(' + ');state.details.hidden=parts.length===0; } function mount(root,selection){ if(states.has(root))return; const input=root.querySelector('#marketplace-credit-amount'),total=root.querySelector('#marketplace-payment-total'),details=root.querySelector('#marketplace-payment-breakdown'); states.set(root,{input,total,details,selection});input.addEventListener('input',()=>refresh(root));refresh(root); } return Object.freeze({mount,refresh,creditMinor}); })(); // Only the already-authenticated, protected same-account read calls render. // A selection, missing record, PayPal return or UI event cannot assert a balance. const accountSummary=(()=>{ const date=ms=>new Intl.DateTimeFormat('en-AU',{day:'numeric',month:'short',year:'numeric',timeZone:'Australia/Sydney'}).format(ms); function view(reply,now=Date.now()){ const subscription=reply?.subscription,wallet=reply?.wallet; let plan='Subscription details unavailable',due='',credit='Credit balance unavailable'; if(subscription?.confirmed===true){ const known={business_starter:'Business Starter',business_growth:'Business Growth',business_pro:'Business Pro',provider_solo:'Service Provider Solo',provider_team:'Service Provider Team',provider_pro:'Service Provider Pro',additional_warehouse_or_ground_crew:'Additional warehouse or Ground Crew account',employ_me:'Employ Me',workforce_hub:'Workforce Hub'}; const name=known[subscription.planKey];if(name)plan='Current subscription: '+name+' ('+String(subscription.status??'').toLowerCase()+')'; if(subscription.providerCurrentConfirmed===true&&Number.isSafeInteger(subscription.nextPaymentDueMs)&&subscription.nextPaymentDueMs>0){ const days=Math.ceil((subscription.nextPaymentDueMs-now)/86400000); due='Next payment: '+date(subscription.nextPaymentDueMs)+(subscription.nextPaymentDueState==='overdue'?' (overdue)':days>0?' (in '+days+' '+(days===1?'day':'days')+')':days===0?' (due today)':' (overdue)'); }else if(Number.isSafeInteger(subscription.paidThroughMs)&&subscription.paidThroughMs>0){ due='Paid until '+date(subscription.paidThroughMs)+'. Next payment date is being confirmed.'; }else due='Next payment date is being confirmed.'; }else if(subscription?.status==='not_subscribed'&&subscription.pending===false)plan='No current subscription'; else if(subscription?.pending===true)plan='Subscription payment is being confirmed'; if(wallet?.confirmed===true&&Number.isSafeInteger(wallet.availableMinor)&&wallet.availableMinor>=0)credit='Account credit: $'+(wallet.availableMinor/100).toFixed(2); return {plan,due,credit}; } function clear(root){ const box=root.querySelector('#marketplace-account-summary');box.hidden=true; for(const id of ['marketplace-account-current-subscription','marketplace-account-next-payment','marketplace-account-credit'])root.querySelector('#'+id).textContent=''; } function render(root,reply,now){ const value=view(reply,now);root.querySelector('#marketplace-account-summary').hidden=false; root.querySelector('#marketplace-account-current-subscription').textContent=value.plan; const due=root.querySelector('#marketplace-account-next-payment');due.textContent=value.due;due.hidden=!value.due; root.querySelector('#marketplace-account-credit').textContent=value.credit; } return Object.freeze({render,clear,view}); })(); // Selection is a public plan preference, never a paid subscription or entitlement. const subscriptionPicker=(()=>{ const plans=Object.freeze([ {key:'consumer',name:'Personal Marketplace account',monthlyMinor:0}, {key:'casual',name:'Casual seller',monthlyMinor:0}, {key:'business_starter',name:'Business Starter',monthlyMinor:4900}, {key:'business_growth',name:'Business Growth',monthlyMinor:9900}, {key:'business_pro',name:'Business Pro',monthlyMinor:19900}, {key:'provider_solo',name:'Service Provider Solo',monthlyMinor:2900}, {key:'provider_team',name:'Service Provider Team',monthlyMinor:7900}, {key:'provider_pro',name:'Service Provider Pro',monthlyMinor:14900}, {key:'additional_warehouse_or_ground_crew',name:'Additional warehouse or Ground Crew account',monthlyMinor:500}, {key:'employ_me',name:'Employ Me',monthlyMinor:1990}, {key:'workforce_hub',name:'Workforce Hub',monthlyMinor:4990}, {key:'delivery_haulage_driver',name:'Delivery and haulage driver',monthlyMinor:0} ].filter(plan=>plan.monthlyMinor>0)); const states=new WeakMap(); const money=n=>'A$'+(n/100).toFixed(2); function display(root,subscription=null){ const line=root.querySelector('#marketplace-current-plan'),state=states.get(root); if(!line)return; const current=subscription?.confirmed===true?plans.find(p=>p.key===subscription.planKey):null; if(current){line.hidden=false;line.textContent='Current subscription: '+current.name+' - '+String(subscription.status??'').toLowerCase();return;} const selected=plans.find(p=>p.key===state?.selected); line.hidden=!selected;line.textContent=selected?'Selected subscription: '+selected.name+(selected.monthlyMinor?' - '+money(selected.monthlyMinor)+' per month':' - Free'):''; } function mount(root,onSelection=()=>{}){ if(states.has(root))return; const button=root.querySelector('#marketplace-manage-subscription');if(!button)return; const state={selected:null,dialog:null};states.set(root,state); button.addEventListener('click',()=>{ if(state.dialog)return; const doc=root.ownerDocument,dialog=doc.createElement('dialog');dialog.id='autolinkpro-subscription-dialog';dialog.setAttribute('aria-label','Choose your subscription');state.dialog=dialog; const heading=doc.createElement('h2');heading.textContent='Choose your subscription';dialog.appendChild(heading); const availability=doc.createElement('p');availability.textContent='Subscription payments are being connected. You can add account credit now.';dialog.appendChild(availability); const list=doc.createElement('div');list.className='autolinkpro-plan-choices';dialog.appendChild(list); const close=()=>{dialog.close();dialog.remove();state.dialog=null;}; for(const plan of plans){ const choice=doc.createElement('button');choice.type='button';choice.textContent=plan.name+' - '+(plan.monthlyMinor?money(plan.monthlyMinor)+' per month':'Free'); choice.addEventListener('click',()=>{state.selected=plan.key;display(root);close();onSelection();});list.appendChild(choice); } const clear=doc.createElement('button');clear.type='button';clear.textContent='Add credit only';clear.addEventListener('click',()=>{state.selected=null;display(root);close();onSelection();});dialog.appendChild(clear); const cancel=doc.createElement('button');cancel.type='button';cancel.textContent='Close';cancel.addEventListener('click',close);dialog.appendChild(cancel); dialog.addEventListener('cancel',event=>{event.preventDefault();close();});doc.body.appendChild(dialog);dialog.showModal(); }); display(root);button.disabled=false; } const selected=root=>{const plan=plans.find(p=>p.key===states.get(root)?.selected);return plan?Object.freeze({...plan}):null;}; return Object.freeze({mount,renderCurrent:display,selected}); })(); const root=document.getElementById('marketplace-account-payments'); const configuration=document.getElementById('autolinkpro-original-app-config'); if(root&&configuration){paymentPreferences.mount(root,()=>subscriptionPicker.selected(root));subscriptionPicker.mount(root,()=>{paymentPreferences.refresh(root);root.dispatchEvent(new Event('account-payment-preference-changed'));});let input;try{input=JSON.parse(configuration.textContent);}catch{root.querySelector('#account-payment-status').textContent='The original Marketplace configuration is not yet confirmed. No payment will be taken.';}if(input)void bootstrap.bootWordPressAccountPayments({root,input,adapter,panel,phoneBridge:originalPhone.showOriginalMarketplacePhoneSession});}

Account payments

Subscriptions

Add credit

Payment history