Call bindCard()
      │
      ▼
Display a loading dialog (the SDK initializes automatically and validates accessToken)
      │
      ├── accessToken validation fails ──► invoke onTokenInvalid (terminal callback); end the flow
      │
      ▼ Validation succeeds
Display the card-binding screen (the user enters payment-card details)
      │
      ├── Binding fails ──► display a Toast and remain on the card-binding screen to retry; invoke onBindFailure when the user exits (terminal callback)
      │
      ▼ Binding succeeds
Display the successful-binding screen
      │
      ▼  The user taps Done / Back
Invoke onBindSuccess (terminal callback); end the flow

implementation fileTree(dir: 'libs', include: ['*.jar', '*.aar'])

// Official libraries
implementation "androidx.core:core-ktx:1.13.1"
implementation "androidx.appcompat:appcompat:1.7.0"
implementation "com.google.android.material:material:1.10.0"
implementation "androidx.constraintlayout:constraintlayout:2.1.4"
implementation "androidx.activity:activity:1.8.1"
implementation "androidx.activity:activity-ktx:1.8.1"
implementation "androidx.lifecycle:lifecycle-viewmodel-ktx:2.8.7"
implementation "androidx.lifecycle:lifecycle-livedata-ktx:2.8.7"
implementation "androidx.lifecycle:lifecycle-runtime-ktx:2.8.7"

// Third-party libraries
implementation("com.squareup.okhttp3:okhttp:4.12.0")
implementation("com.squareup.okhttp3:logging-interceptor:4.12.0")
implementation("com.squareup.retrofit2:retrofit:2.9.0")
implementation("com.squareup.retrofit2:converter-gson:2.9.0")
implementation 'com.google.code.gson:gson:2.13.2'

// Dependencies required by the internal Risk SDK
implementation "com.github.fingerprintjs:fingerprint-android:2.2.0"
implementation 'com.forter.mobile:fortersdk:3.0.10'
implementation("com.checkout:checkout-sdk-event-logger-android:1.0.1")
implementation("com.fingerprint.android:pro:2.10.0")

dependencyResolutionManagement {
    repositoriesMode.set(RepositoriesMode.FAIL_ON_PROJECT_REPOS)
    repositories {
        google()
        mavenCentral()
        // Configure the repositories:
        maven { url 'https://jitpack.io' }
        maven { // Forter repository
            url "https://mobile-sdks.forter.com/android"
            credentials {
                username "forter-android-sdk"
                password "HvYumAfjVQYQFyoGsmNAefGdR84Esqig"
            }
        }
        maven { url = uri("https://maven.fpregistry.io/releases") } // Checkout repository
    }
}

buildFeatures {
    viewBinding = true // Enable ViewBinding
}

compileOptions {
    sourceCompatibility JavaVersion.VERSION_11
    targetCompatibility JavaVersion.VERSION_11
}
kotlinOptions {
    jvmTarget = '11'
}

<uses-permission android:name="android.permission.ACCESS_NETWORK_STATE" />
<uses-permission android:name="android.permission.INTERNET" />

# for OkHttp
# JSR 305 annotations are for embedding nullability information.
-dontwarn javax.annotation.**

# Animal Sniffer compileOnly dependency to ensure APIs are compatible with older versions of Java.
-dontwarn org.codehaus.mojo.animal_sniffer.*

# OkHttp platform used only on JVM and when Conscrypt and other security providers are available.
# May be used with robolectric or deliberate use of Bouncy Castle on Android
-dontwarn okhttp3.internal.platform.**
-dontwarn org.conscrypt.**
-dontwarn org.bouncycastle.**

# for Retrofit
# Retrofit does reflection on generic parameters. InnerClasses is required to use Signature and
# EnclosingMethod is required to use InnerClasses.
-keepattributes Signature, InnerClasses, EnclosingMethod

# Retrofit does reflection on method and parameter annotations.
-keepattributes RuntimeVisibleAnnotations, RuntimeVisibleParameterAnnotations

# Keep annotation default values (e.g., retrofit2.http.Field.encoded).
-keepattributes AnnotationDefault

# Retain service method parameters when optimizing.
-keepclassmembers,allowshrinking,allowobfuscation interface * {
    @retrofit2.http.* <methods>;
}

# Ignore annotation used for build tooling.
-dontwarn org.codehaus.mojo.animal_sniffer.IgnoreJRERequirement

# Ignore JSR 305 annotations for embedding nullability information.
-dontwarn javax.annotation.**

# Guarded by a NoClassDefFoundError try/catch and only used when on the classpath.
-dontwarn kotlin.Unit

# Top-level functions that can only be used by Kotlin.
-dontwarn retrofit2.KotlinExtensions
-dontwarn retrofit2.KotlinExtensions$*

# With R8 full mode, it sees no subtypes of Retrofit interfaces since they are created with a Proxy
# and replaces all potential values with null. Explicitly keeping the interfaces prevents this.
-if interface * { @retrofit2.http.* <methods>; }
-keep,allowobfuscation interface <1>

# Keep inherited services.
-if interface * { @retrofit2.http.* <methods>; }
-keep,allowobfuscation interface * extends <1>

# With R8 full mode generic signatures are stripped for classes that are not
# kept. Suspend functions are wrapped in continuations where the type argument
# is used.
-keep,allowoptimization,allowshrinking,allowobfuscation class kotlin.coroutines.Continuation

# R8 full mode strips generic signatures from return types if not kept.
-if interface * { @retrofit2.http.* public *** *(...); }
-keep,allowoptimization,allowshrinking,allowobfuscation class <3>

# With R8 full mode generic signatures are stripped for classes that are not kept.
-keep,allowoptimization,allowshrinking,allowobfuscation class retrofit2.Response

OslPayBindCardSDK.bindCard(
    // For development and testing, pass OslPayBindCardSDK.ENVIRONMENT_SANDBOX;
    // For production, pass OslPayBindCardSDK.ENVIRONMENT_PROD;
    // OslPayBindCardSDK.ENVIRONMENT_TEST is for internal testing and is not externally accessible.
    environment = OslPayBindCardSDK.ENVIRONMENT_SANDBOX,
    activity = this,                 // FragmentActivity; required
    accessToken = accessToken,       // User-identity validation token; required and single-use
    language = Language.LANGUAGE_EN, // Optional; defaults to the app's current language
    businessType = BusinessType.BUY, // Optional; defaults to BUY
    suppressedErrorCodes = null,     // Optional; list of error codes to suppress
    suppressErrors = null,           // Optional; whether to suppress all error codes
    onTokenInvalid = { errorCode, errorMessage ->
        // accessToken validation failure callback (terminal)
    },
    onBindSuccess = { cardId ->
        // Card-binding success callback (terminal)
    },
    onBindFailure = { errorCode, errorMessage ->
        // Card-binding failure callback (terminal)
    },
    onToastShow = { errorCode, errorMessage ->
        // Immediate callback for a suppressed error; handle the error in your app
    },
)