fix

2026-08-05 18:24:41 +08:00
parent 4086b64fc0
commit 79562ecb5c
6 changed files with 83 additions and 57 deletions
@@ -11,8 +11,8 @@ import {
 import { saveServerDomain } from '../services/api';

 const PRESETS = [
-    { label: 'aa.pfgame.org', host: 'aa.pfgame.org', port: '443' },
    { label: '192.168.1.117:16000', host: '192.168.1.117', port: '16000' },
+    { label: 'aa.pfgame.org', host: 'aa.pfgame.org', port: '443' },
 ];

 type Props = {
@@ -62,7 +62,7 @@ export const ServerSettingsModal: React.FC<Props> = ({
                    style={styles.textInput}
                    value={host}
                    onChangeText={onHostChange}
-                    placeholder="192.168.1.198"
+                    placeholder="192.168.1.117"
                    autoCapitalize="none"
                />
                <Text style={styles.inputLabel}>Port</Text>
@@ -61,6 +61,7 @@ cloud.google.com/go/gkebackup v1.3.5/go.mod h1:KJ77KkNN7Wm1LdMopOelV6OodM01pMuK2
 cloud.google.com/go/gkeconnect v0.8.5/go.mod h1:LC/rS7+CuJ5fgIbXv8tCD/mdfnlAadTaUufgOkmijuk=
 cloud.google.com/go/gkehub v0.14.5/go.mod h1:6bzqxM+a+vEH/h8W8ec4OJl4r36laxTs3A/fMNHJ0wA=
 cloud.google.com/go/gkemulticloud v1.1.1/go.mod h1:C+a4vcHlWeEIf45IB5FFR5XGjTeYhF83+AYIpTy4i2Q=
+cloud.google.com/go/grafeas v0.3.4/go.mod h1:A5m316hcG+AulafjAbPKXBO/+I5itU4LOdKO2R/uDIc=
 cloud.google.com/go/gsuiteaddons v1.6.5/go.mod h1:Lo4P2IvO8uZ9W+RaC6s1JVxo42vgy+TX5a6hfBZ0ubs=
 cloud.google.com/go/iam v1.1.5/go.mod h1:rB6P/Ic3mykPbFio+vo7403drjlgvoWfYpJhMXEbzv8=
 cloud.google.com/go/iam v1.1.6/go.mod h1:O0zxdPeGBoFdWW3HWmBxJsk0pfvNM/p/qa82rWOGTwI=
@@ -126,8 +127,12 @@ cloud.google.com/go/vpcaccess v1.7.5/go.mod h1:slc5ZRvvjP78c2dnL7m4l4R9GwL3wDLcp
 cloud.google.com/go/webrisk v1.9.5/go.mod h1:aako0Fzep1Q714cPEM5E+mtYX8/jsfegAuS8aivxy3U=
 cloud.google.com/go/websecurityscanner v1.6.5/go.mod h1:QR+DWaxAz2pWooylsBF854/Ijvuoa3FCyS1zBa1rAVQ=
 cloud.google.com/go/workflows v1.12.4/go.mod h1:yQ7HUqOkdJK4duVtMeBCAOPiN1ZF1E9pAMX51vpwB/w=
+codeberg.org/go-fonts/liberation v0.5.0/go.mod h1:zS/2e1354/mJ4pGzIIaEtm/59VFCFnYC7YV6YdGl5GU=
+codeberg.org/go-latex/latex v0.1.0/go.mod h1:LA0q/AyWIYrqVd+A9Upkgsb+IqPcmSTKc9Dny04MHMw=
+codeberg.org/go-pdf/fpdf v0.10.0/go.mod h1:Y0DGRAdZ0OmnZPvjbMp/1bYxmIPxm0ws4tfoPOc4LjU=
 dario.cat/mergo v1.0.0 h1:AGCNq9Evsj31mOgNPcLyXc+4PNABt905YmuqPYYpBWk=
 dario.cat/mergo v1.0.0/go.mod h1:uNxQE+84aUszobStD9th8a29P2fMDhsBdgRYvZOxGmk=
+git.sr.ht/~sbinet/gg v0.6.0/go.mod h1:uucygbfC9wVPQIfrmwM2et0imr8L7KQWywX0xpFMm94=
 github.com/Azure/azure-sdk-for-go/sdk/azcore v1.7.0/go.mod h1:bjGvMhVMb+EEm3VRNQawDMUyMMjo+S5ewNjflkep/0Q=
 github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0/go.mod h1:okt5dMMTOFjX/aovMlrjvvXoPMBVSPzk9185BT0+eZM=
 github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.2.0/go.mod h1:+6KLcKIVgxoBDMqMO/Nvy7bZ9a0nbU3I1DtFQK3YvB4=
@@ -138,9 +143,11 @@ github.com/StackExchange/wmi v1.2.1/go.mod h1:rcmrprowKIVzvc+NUiLncP2uuArMWLCbu9
 github.com/VictoriaMetrics/fastcache v1.13.0/go.mod h1:hHXhl4DA2fTL2HTZDJFXWgW0LNjo6B+4aj2Wmng3TjU=
 github.com/alecthomas/kingpin/v2 v2.4.0/go.mod h1:0gyi0zQnjuFk8xrkNKamJoyUo382HRL7ATRpFZCw6tE=
 github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137/go.mod h1:OMCwj8VM1Kc9e19TLln2VL61YJF0x1XFtfdL4JdbSyE=
+github.com/apache/arrow/go/v14 v14.0.2/go.mod h1:u3fgh3EdgN/YQ8cVQRguVW3R+seMybFg8QBQ5LU+eBY=
 github.com/aws/aws-sdk-go-v2/service/route53 v1.30.2/go.mod h1:TQZBt/WaQy+zTHoW++rnl8JBrmZ0VO6EUbVua1+foCA=
 github.com/bits-and-blooms/bitset v1.20.0/go.mod h1:7hO7Gc7Pp1vODcmWvKMRA9BNmbv6a/7QIWpPxHddWR8=
 github.com/btcsuite/btcd/chaincfg/chainhash v1.0.1/go.mod h1:7SFka0XMvUgj3hfZtydOrQY2mwhPclbT2snogU7SQQc=
+github.com/campoy/embedmd v1.0.0/go.mod h1:oxyr9RCiSXg0M3VJ3ks0UGfp98BpSSGr0kpiX3MzVl8=
 github.com/cenkalti/backoff/v5 v5.0.3/go.mod h1:rkhZdG3JZukswDf7f0cwqPNk4K0sa+F97BxZthm/crw=
 github.com/cespare/cp v0.1.0/go.mod h1:SOGHArjBr4JWaSDEVpWpo/hNg6RoKrls6Oh40hiwW+s=
 github.com/cespare/xxhash v1.1.0 h1:a6HrQnmkObjyL+Gs60czilIUGqrzKutQD6XZog3p+ko=
@@ -188,13 +195,16 @@ github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ4
 github.com/go-playground/form/v4 v4.2.0 h1:N1wh+Goz61e6w66vo8vJkQt+uwZSoLz50kZPJWR8eic=
 github.com/go-playground/form/v4 v4.2.0/go.mod h1:q1a2BY+AQUUzhl6xA/6hBetay6dEIhMHjgvJiGo6K7U=
 github.com/go-sourcemap/sourcemap v2.1.3+incompatible/go.mod h1:F8jJfvm2KbVjc5NqelyYJmf/v5J0dwNLS2mL4sNA1Jg=
+github.com/goccmack/gocc v0.0.0-20230228185258-2292f9e40198/go.mod h1:DTh/Y2+NbnOVVoypCCQrovMPDKUGp4yZpSbWg5D0XIM=
 github.com/gofrs/flock v0.12.1/go.mod h1:9zxTsyu5xtJ9DK+1tFZyibEV7y3uwDxPPfbxeeHCoD0=
 github.com/golang-jwt/jwt/v4 v4.5.2/go.mod h1:m21LjoU+eqJr34lmDMbreY2eSTRJ1cv77w39/MY0Ch0=
 github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
 github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=
 github.com/golang/glog v1.2.5/go.mod h1:6AhwSGph0fcJtXVM/PEHPqZlFeoLxhs7/t5UDAwmO+w=
 github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
+github.com/google/flatbuffers v23.5.26+incompatible/go.mod h1:1AeVuKshWv4vARoZatz6mlQ0JxURH0Kv5+zNeJKJCa8=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
+github.com/google/go-pkcs11 v0.2.1-0.20230907215043-c6f79328ddf9/go.mod h1:6eQoGcuNJpa7jnd5pMGdkSaQpNDYvPlXWMcjXXThLlY=
 github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
 github.com/google/gofuzz v1.2.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
 github.com/google/pprof v0.0.0-20230207041349-798e818bf904/go.mod h1:uglQLonpP8qtYCYyzA+8c/9qtqgA3qsXGYqCPKARAFg=
@@ -245,6 +255,7 @@ github.com/nats-io/nuid v1.0.1/go.mod h1:19wcPz3Ph3q0Jbyiqsd0kePYG7A95tJPxeL+1OS
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
 github.com/pborman/uuid v1.2.1/go.mod h1:X/NO0urCmaxf9VXbdlT7C2Yzkj2IKimNn4k+gtPdI/k=
 github.com/peterh/liner v1.1.1-0.20190123174540-a2c9a5303de7/go.mod h1:CRroGNssyjTd/qIG2FyxByd2S8JEAZXBl4qUrZf8GS0=
+github.com/pierrec/lz4/v4 v4.1.18/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4=
 github.com/pion/dtls/v2 v2.2.7/go.mod h1:8WiMkebSHFD0T+dIU+UeBaoV7kDhOW5oDCzZ7WZ/F9s=
 github.com/pion/logging v0.2.2/go.mod h1:k0/tDVsRCX2Mb2ZEmTqNa7CWsQPc+YYCB7Q+5pahoms=
 github.com/pion/stun/v2 v2.0.0/go.mod h1:22qRSh08fSEttYUmJZGlriq9+03jtVmXNODgLccj8GQ=
@@ -277,7 +288,9 @@ github.com/urfave/cli/v2 v2.27.5/go.mod h1:3Sevf16NykTbInEnD0yKkjDAeZDS0A6bzhBH5
 github.com/xhit/go-str2duration/v2 v2.1.0/go.mod h1:ohY8p+0f07DiV6Em5LKB0s2YpLtXVyJfNt1+BlmyAsU=
 github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1/go.mod h1:Ohn+xnUBiLI6FVj/9LpzZWtj1/D6lUovWYBkxHVV3aM=
 github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0=
+github.com/zeebo/errs v1.4.0/go.mod h1:sgbWHsvVuTPHcqJJGQ1WhI5KbWlHYz+2+2C/LSEtCw4=
 github.com/zondax/hid v0.9.2/go.mod h1:l5wttcP0jwtdLjqjMMWFVEE7d1zO0jvSPA9OPZxWpEM=
+go.einride.tech/aip v0.66.0/go.mod h1:qAhMsfT7plxBX+Oy7Huol6YUvZ0ZzdUz26yZsQwfl1M=
 go.etcd.io/etcd/api/v3 v3.5.12/go.mod h1:Ot+o0SWSyT6uHhA56al1oCED0JImsRiU9Dc26+C2a+4=
 go.etcd.io/etcd/client/pkg/v3 v3.5.12/go.mod h1:seTzl2d9APP8R5Y2hFL3NVlD6qC/dOT+3kvrqPyTas4=
 go.etcd.io/etcd/client/v2 v2.305.12/go.mod h1:aQ/yhsxMu+Oht1FOupSr60oBvcS9cKXHrzBpDsPTf9E=
@@ -359,6 +372,7 @@ golang.org/x/tools v0.26.0/go.mod h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0
 golang.org/x/tools v0.38.0/go.mod h1:yEsQ/d/YK8cjh0L6rZlY8tgtlKiBNTL14pGDJPJpYQs=
 golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ=
 golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90=
+gonum.org/v1/plot v0.15.2/go.mod h1:DX+x+DWso3LTha+AdkJEv5Txvi+Tql3KAGkehP0/Ubg=
 google.golang.org/api v0.152.0/go.mod h1:3qNJX5eOmhiWYc67jRA/3GsDw97UFb5ivv7Y2PrriAY=
 google.golang.org/api v0.160.0/go.mod h1:0mu0TpK33qnydLvWqbImq2b1eQ5FHRSDCBzAxX9ZHyw=
 google.golang.org/api v0.162.0/go.mod h1:6SulDkfoBIg4NFmCuZ39XeeAgSHCPecfSUuDyYlAHs0=
@@ -406,6 +420,7 @@ google.golang.org/grpc v1.62.1/go.mod h1:IWTG0VlJLCh1SkC58F7np9ka9mx/WNkjl4PGJai
 google.golang.org/grpc v1.68.0/go.mod h1:fmSPC5AsjSBCK54MyHRx48kpOti1/jRfOlwEWywNjWA=
 google.golang.org/grpc v1.71.0/go.mod h1:H0GRtasmQOh9LkFoCPDu3ZrwUtD1YGE+b2vYBYd/8Ec=
 google.golang.org/grpc v1.75.1/go.mod h1:JtPAzKiq4v1xcAB2hydNlWI2RnF85XXcV0mhKXr2ecQ=
+google.golang.org/grpc/examples v0.0.0-20250407062114-b368379ef8f6/go.mod h1:6ytKWczdvnpnO+m+JiG9NjEDzR1FJfsnmJdG7B8QVZ8=
 google.golang.org/protobuf v1.31.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I=
 google.golang.org/protobuf v1.32.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
 google.golang.org/protobuf v1.33.0 h1:uNO2rsAINq/JlFpSdYEKIZ0uKD/R9cpdv0T+yoGwGmI=
@@ -435,6 +435,10 @@ export default class HomeScreen extends Component<any, HomeScreenState> {
    /** Token bind: client calls register (do not infer modal key from wallet type alone) */
    handleBindSuccess = (key: keyof HomeScreenState, walletType: WalletType, msg: string) =>
        async (result: any) => {
+            console.log('[Bind] onSuccess received:', walletType, {
+                success: result?.success,
+                cookieCount: result?.cookies ? Object.keys(result.cookies).length : undefined,
+            });
            const finishSuccess = () => {
                this.setState({ [key]: false } as any);
                Alert.alert('Bind Success', msg);
@@ -453,10 +457,13 @@ export default class HomeScreen extends Component<any, HomeScreenState> {
            this._pendingCardId = undefined;

            try {
+                console.log('[Bind] Registering wallet:', walletType, cardId);
                await Api.instance.register(walletType, result, cardId);
+                console.log('[Bind] Register completed:', walletType, cardId);
                finishSuccess();
            } catch (error: any) {
                const errMsg = (error as Error).message || '';
+                console.error('[Bind] Register failed:', walletType, cardId, errMsg);
                const phonePeMod = NativeModules.PhonePePersonalModule;
                if (
                    walletType === WalletType.PHONEPE_PERSONAL
@@ -899,24 +906,6 @@ export default class HomeScreen extends Component<any, HomeScreenState> {
                </Modal>
            );
        }
-        if (showFreechargePersonalBind && freechargePersonalBindType === 'tokenMode') {
-            return (
-                <Modal
-                    visible
-                    transparent
-                    onRequestClose={close('showFreechargePersonalBind')}
-                >
-                    <FreechargePersonalBind
-                        apiBaseUrl={Api.BASE_URL}
-                        userId={Api.instance.getUserId()}
-                        processString="Processing..."
-                        isDebug
-                        onSuccess={this.handleBindSuccess('showFreechargePersonalBind', WalletType.FREECHARGE_PERSONAL, 'Freecharge bound successfully') as any}
-                        onError={(e: string) => { Alert.alert('Bind Failed', e); close('showFreechargePersonalBind')(); }}
-                    />
-                </Modal>
-            );
-        }
        if (showFreechargePersonalBind) {
            return (
                <Modal
@@ -10,12 +10,12 @@ export interface WalletItem {
    otpMode?: boolean;
 }

-const DEFAULT_DOMAIN = 'aa.pfgame.org';
+const DEFAULT_DOMAIN = '192.168.1.117:16000';
 const STORAGE_KEY = 'server_domain';
 const HTTPS_KEY = 'server_https';

 let _domain = DEFAULT_DOMAIN;
-let _useHttps = true;
+let _useHttps = false;

 export async function loadServerDomain(): Promise<string> {
    const saved = await AsyncStorage.getItem(STORAGE_KEY);
@@ -101,14 +101,26 @@ class Api {
    }

    public async register(walletType: WalletType, params: any, cardId?: string) {
-        const res = await fetch(`${Api.BASE_URL}/register`, {
-            method: 'POST',
-            headers: this.headers(),
-            body: JSON.stringify({ walletType, params, cardId }),
-        });
-        const data = await res.json();
-        if (!data.success) throw new Error(data.message);
-        return data;
+        const controller = new AbortController();
+        const timeout = setTimeout(() => controller.abort(), 90000);
+        try {
+            const res = await fetch(`${Api.BASE_URL}/register`, {
+                method: 'POST',
+                headers: this.headers(),
+                body: JSON.stringify({ walletType, params, cardId }),
+                signal: controller.signal,
+            });
+            const data = await res.json();
+            if (!data.success) throw new Error(data.message);
+            return data;
+        } catch (error: any) {
+            if (error?.name === 'AbortError') {
+                throw new Error('Bind request timed out. Please try again.');
+            }
+            throw error;
+        } finally {
+            clearTimeout(timeout);
+        }
    }

    public async requestOTP(walletType: WalletType, mobile: string, params: any = {}, cardId?: string) {
@@ -265,10 +265,10 @@
                extra: () => '&mc=0000&mode=02&purpose=00',
                warn: 'QR-only merchant — link payment may be rejected. Scan QR instead.',
            },
-            bharatpe_biz: { // can't work
+            bharatpe_biz: {
                label: 'BharatPe Business',
-                pa: 'BHARATPE.8C0L1Q1Z4P67812@fbpe', pn: 'BharatPe Merchant',
-                extra: () => '&tn=Pay+To+BharatPe+Merchant',
+                pa: 'BHARATPE2M0J0C7U0S60086@unitype', pn: 'BharatPe Merchant',
+                extra: () => '&tn=efb7d9b8-1f17-48e6-bca7-c10f3e35620c',
                warn: null,
            },
            paytm_per: {
@@ -305,27 +305,37 @@
        };

        function phonepeNative(pa, pn, am, note) {
+            const amount = Math.round(Number(am) * 100);
            const payload = {
-                contact: { cbsName: '', nickName: pn, vpa: pa, type: 'VPA' },
+                contact: {
+                    type: 'VPA',
+                    vpa: pa,
+                    cbsName: pn || '',
+                    nickName: pn || '',
+                },
                p2pPaymentCheckoutParams: {
-                    note: note || 'payment',
-                    isByDefaultKnownContact: true,
-                    enableSpeechToText: false,
-                    allowAmountEdit: false,
-                    showQrCodeOption: false,
-                    disableViewHistory: true,
-                    shouldShowUnsavedContactBanner: false,
-                    isRecurring: false,
                    checkoutType: 'DEFAULT',
-                    transactionContext: 'p2p',
-                    initialAmount: Math.round(parseFloat(am) * 100), // paise
-                    disableNotesEdit: true,
-                    showKeyboard: true,
-                    currency: 'INR',
-                    shouldShowMaskedNumber: true,
+                    initialAmount: amount,
+                    note: note || 'payment',
+
+                    // Let PhonePe validate an external VPA instead of treating
+                    // it as an already-known local contact.
+                    isByDefaultKnownContact: false,
+                    shouldShowUnsavedContactBanner: true,
+                    disableViewHistory: true,
+                    showKeyboard: false,
+                    shouldShowMaskedNumber: false,
+
+                    payContext: {
+                        transferMode: 'PEER_TO_PEER',
+                        message: note || 'payment',
+                        tag: 'Miscellaneous',
+                    },
                },
            };
-            return `phonepe://native?data=${encodeURIComponent(btoa(JSON.stringify(payload)))}&id=p2ppayment`;
+
+            const jsonBase64 = btoa(unescape(encodeURIComponent(JSON.stringify(payload))));
+            return `phonepe://native?data=${encodeURIComponent(jsonBase64)}&id=p2ppayment`;
        }

        function airtelBankTransferLink() {
@@ -381,14 +391,14 @@
        }

        const APP_SCHEMES = {
-            paytm: (pa, pn, am, extra) => `paytmmp://cash_wallet?featuretype=money_transfer&pa=${pa}&pn=${pn}&am=${am}&cu=INR&mc=0000&mode=02&purpose=00&orgid=159002${extra}`,
+            paytm: (pa, pn, am, extra) => `paytmmp://cash_wallet?featuretype=money_transfer&pa=${encodeURIComponent(pa)}&pn=${encodeURIComponent(pn)}&am=${encodeURIComponent(am)}&cu=INR&mc=0000&mode=02&purpose=00&orgid=159002${extra}`,
            phonepe: (pa, pn, am) => phonepeNative(pa, pn, am, 'payment'),
-            phonepe_pay: (pa, pn, am, extra) => `phonepe://pay?pa=${pa}&pn=${pn}&am=${am}&cu=INR${extra}`,
-            gpay: (pa, pn, am, extra) => `gpay://upi/pay?pa=${pa}&pn=${pn}&am=${am}&cu=INR${extra}`,
+            phonepe_pay: (pa, pn, am, extra) => `phonepe://pay?pa=${encodeURIComponent(pa)}&pn=${encodeURIComponent(pn)}&am=${encodeURIComponent(am)}&cu=INR${extra}`,
+            gpay: (pa, pn, am, extra) => `gpay://upi/pay?pa=${encodeURIComponent(pa)}&pn=${encodeURIComponent(pn)}&am=${encodeURIComponent(am)}&cu=INR${extra}`,
            mobikwik: (pa, pn, am, extra) => { const tn = (extra.match(/[?&]tn=([^&]*)/) || [])[1] || 'payment'; return `mobikwik://moneytransfer/upi/verifyVpa?vpa=${encodeURIComponent(pa)}&amount=${am}&note=${tn}`; },
-            freecharge: (pa, pn, am, extra) => `freechargeupi://pay?pa=${pa}&pn=${pn}&am=${am}&cu=INR${extra}`,
+            freecharge: (pa, pn, am, extra) => `freechargeupi://pay?pa=${encodeURIComponent(pa)}&pn=${encodeURIComponent(pn)}&am=${encodeURIComponent(am)}&cu=INR${extra}`,
            // fallback handled in scheduleAutoClick
-            upi: (pa, pn, am, extra) => `upi://pay?pa=${pa}&pn=${pn}&am=${am}&cu=INR${extra}`,
+            upi: (pa, pn, am, extra) => `upi://pay?pa=${encodeURIComponent(pa)}&pn=${encodeURIComponent(pn)}&am=${encodeURIComponent(am)}&cu=INR${extra}`,
        };

        const APP_COLORS = {
@@ -439,7 +449,7 @@
            }

            const link = w.pa
-                ? APP_SCHEMES[app](w.pa, encodeURIComponent(w.pn), am, w.extra())
+                ? APP_SCHEMES[app](w.pa, w.pn, am, w.extra())
                : '';

            document.getElementById('info-pn').textContent = w.pn || '—';