Fix MoonPay "Send with Edge" sell link

[j0ntz]

CHANGELOG

Does this branch warrant an entry to the CHANGELOG?

• Yes
• No

Dependencies

none

Requirements

If you have made any visual changes to the GUI. Make sure you have:

• Tested on iOS device
• Tested on Android device
• Tested on small-screen device (iPod Touch)
• Tested on large-screen device (tablet)

Description

Asana task

Asana: https://app.asana.com/1/9976422036640/project/1207384676342554/task/1209649066660320

Fixes the MoonPay "Send with Edge" sell link. When a user starts a MoonPay sell order but has not completed the crypto deposit, MoonPay shows a "complete payment" button (in their email and in the buy.moonpay.com/trade_history page) that reflects back the deposit redirect URL our app hands MoonPay. That button dead-ended on a static "Redirecting to Payment..." page, so the user could not finish the deposit (the reported lead case is an XRP sell that also needs a destination tag).

Root cause (regression analysis). The redirect URL we pass to MoonPay is RETURN_URL_PAYMENT in src/plugins/gui/providers/common.ts. It has been https://edge.app/redirect/payment/ since it was introduced (Oct 2023); it was never a deep.edge.app value, so this is not a value regression. The apex edge.app host is not claimed as a universal link on iOS (ios/edge/edge.entitlements) or Android (AndroidManifest.xml) - only deep.edge.app, dl.edge.app, and return.edge.app are. The constant was designed as an in-app webview interception sentinel (uri.startsWith(RETURN_URL_PAYMENT)), which works in-app but cannot open the app from an external click. The buy redirects already use deep.edge.app; only the sell payment redirect used the unclaimed apex.

Fix.

• Point RETURN_URL_PAYMENT at the claimed deep.edge.app host, matching the buy redirects. In-app interception is host-agnostic (prefix startsWith), so the existing webview flows (MoonPay and Paybis, ramp and legacy) are unaffected.
• Parse the redirect/payment deep link into a new paymentRedirect link type and route it to the Send scene, resolving the wallet from the base currency code and pre-filling the deposit address, amount, and destination tag/memo (via uniqueIdentifier). Both the deep.edge.app and legacy edge.app hosts are parsed.

No new user-facing strings; reuses the existing Send scene and wallet picker.

Testing.

• Unit tests for the parser (real-world MoonPay URL, XRP with destination tag, deep.edge.app host, and missing-param browser fallback).
• verify-repo.sh (eslint + jest) passes; tsc clean.
• Driven on the iOS simulator: firing edge://redirect/payment/?baseCurrencyCode=btc&baseCurrencyAmount=0.001&depositWalletAddress=bc1q... opens the wallet picker (all BTC wallets) and then the Send scene pre-filled with the deposit address and 0.001 BTC. Screenshots below. The slider is not confirmed (no broadcast).

---

Note

Medium Risk
Changes fiat ramp redirect URLs and deep-link routing into Send with pre-filled amounts and memos; mistakes could mis-route deposits or break in-flight sell orders, though legacy URL matching and strict param validation reduce exposure.

Overview
Fixes MoonPay "Send with Edge" (and similar ramp sell) links that dead-ended outside the app by moving provider redirect URLs to the claimed deep.edge.app host and teaching the app to handle /redirect/payment/ end-to-end.

Redirect URLs in common.ts now default to https://deep.edge.app/redirect/... (payment, success, fail, cancel). A shared isReturnUrl matcher accepts both that host and legacy https://edge.app/redirect/... so in-WebView interceptors (MoonPay, Paybis, Banxa; GUI + ramp plugins) still catch orders created before the switch.

Deep links: DeepLinkParser adds paymentRedirect parsing (with validation for blank/invalid amount and memo) and treats success/fail/cancel as no-op app opens. DeepLinkingActions handles paymentRedirect by resolving wallets from the provider currency symbol (native + custom tokens), then opening Send with deposit address, converted amount, and destination tag.

Tests cover parser cases and isReturnUrl; CHANGELOG updated.

^{Reviewed by Cursor Bugbot for commit fd3bad0. Bugbot is set up for automated code reviews on this repo. Configure here.}

[j0ntz]

📸 Test evidence (iOS sim)

agent proof 1209649066660320 01 wallet picker

agent proof 1209649066660320 02 send prefilled

Captured by the agent's in-app test run (build-and-test).

[claude]

Claude Code Review

Claude Code Review is paused for this repository. To reconnect it, an admin of this repository's GitHub organization (or the account owner, for personal repositories) who can also manage your Claude organization's Code Review settings needs to re-link GitHub in Code Review settings. This is a one-time step.

_{Tip: disable this comment in your organization's Code Review settings.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a654892. Configure here.}

[j0ntz]

📸 Test evidence — payment-redirect deep link drives a populated Send scene (on-sim, slot UDID 15772779), plus cancel redirect no-ops with no error

agent proof 1209649066660320 01 payment send scene populated

agent proof 1209649066660320 02 wallet picker eth

agent proof 1209649066660320 03 cancel noop no error

Captured by the agent's in-app test run (build-and-test).