@bayarkit/testing 0.0.0-stage → 0.1.0

package/dist/fakes/gkash.js

@@ -0,0 +1,193 @@
+/**
+ * A fake Gkash API (host-to-host checkout `POST /api/payment/form` + `POST /api/payment/query`), built from the
+ * official documentation (doc.gkash.my), the official WooCommerce plugin and the gkashmy SDKs — see
+ * gateways/gkash/spec.md. NOT yet measured against the staging host (api-staging.pay.asia): when someone does, change
+ * this file first so it answers like the real thing, then the adapter.
+ *
+ * Where the docs are silent this fake picks one shape and says so (marked ASSUMED below); the adapter must not depend on
+ * those shapes beyond "an error is an error".
+ */
+import { createHash } from 'node:crypto';
+import { createServer } from 'node:http';
+import { flip } from './types.js';
+/**
+ * Gkash's online-API signature, written independently of the adapter (spec §4.1/§4.2): the `;`-joined parts, the
+ * WHOLE string upper-cased (key included), SHA-512, lowercase hex.
+ */
+const sign = (parts) => createHash('sha512').update(parts.join(';').toUpperCase()).digest('hex');
+/** "10.50" → "1050", "0.10" → "010": two decimals, dot removed, leading zero kept (spec §4.1). */
+const amt = (ringgit) => Number(ringgit).toFixed(2).replace('.', '');
+/** The id the adapter hands out is `<cartid>:<amount in sen>`; the fake keeps payments by cart id. */
+const cartOf = (id) => id.replace(/:\d+$/, '');
+export async function startFakeGkash(opts) {
+    let n = 0;
+    const payments = new Map();
+    const requests = [];
+    let origin = '';
+    const server = createServer((req, res) => {
+        let raw = '';
+        req.on('data', (d) => {
+            raw += d;
+        });
+        req.on('end', () => {
+            const contentType = req.headers['content-type'];
+            let body = {};
+            try {
+                const j = raw ? JSON.parse(raw) : {};
+                if (j && typeof j === 'object' && !Array.isArray(j))
+                    body = j;
+            }
+            catch { }
+            const path = req.url ?? '';
+            requests.push({ method: req.method ?? '', path, body, contentType, headers: req.headers });
+            const send = (status, o) => {
+                res.writeHead(status, { 'content-type': 'application/json' });
+                res.end(JSON.stringify(o));
+            };
+            // ASSUMED: the docs publish no error body or HTTP status for refused requests.
+            const error = (status, message) => send(status, { message });
+            const s = (k) => (body[k] == null ? '' : String(body[k]));
+            if (req.method === 'POST' && path === '/api/payment/form') {
+                if (!contentType?.includes('application/json'))
+                    return error(415, 'Unsupported content type');
+                // DOC says 1.5.5; the official plugin and every SDK send 1.5.0 (spec C1). Both are accepted here.
+                if (!['1.5.0', '1.5.5'].includes(s('version')))
+                    return error(400, 'Invalid version');
+                if (s('CID') !== opts.cid)
+                    return error(400, 'Invalid merchant');
+                const cartid = s('v_cartid');
+                if (!/^[A-Za-z0-9._-]+$/.test(cartid))
+                    return error(400, 'Invalid cart id');
+                if (s('v_currency') !== 'MYR')
+                    return error(400, 'Only supports MYR');
+                if (!/^\d+\.\d{2}$/.test(s('v_amount')) || Number(s('v_amount')) <= 0)
+                    return error(400, 'Invalid amount');
+                const expected = sign([opts.signatureKey, opts.cid, cartid, amt(s('v_amount')), 'MYR']);
+                if (s('signature') !== expected)
+                    return error(400, 'Invalid signature');
+                // ASSUMED: what Gkash does with a reused cart id is undocumented; the fake refuses it (the plugin's comment
+                // says "Gkash requires a unique cart id per request").
+                if (payments.has(cartid))
+                    return error(400, 'Duplicate cart id');
+                n += 1;
+                const p = {
+                    poid: `M161-PO-${String(n).padStart(6, '0')}`,
+                    cartid,
+                    amount: s('v_amount'),
+                    currency: 'MYR',
+                    status: '11 - Pending',
+                    description: '',
+                };
+                payments.set(cartid, p);
+                // DOC v2 checkout-session response; its signature uses the callback formula with `11 - PENDING` (C8).
+                return send(200, {
+                    status: p.status,
+                    cid: opts.cid,
+                    poId: p.poid,
+                    cartId: p.cartid,
+                    amount: p.amount,
+                    currency: p.currency,
+                    signature: sign([
+                        opts.signatureKey,
+                        opts.cid,
+                        p.poid,
+                        p.cartid,
+                        amt(p.amount),
+                        p.currency,
+                        p.status,
+                    ]),
+                    redirect: { url: `${origin}/pay/${p.poid}` },
+                });
+            }
+            if (req.method === 'POST' && path === '/api/payment/query') {
+                if (s('version') !== '1.3.0')
+                    return error(400, 'Invalid version');
+                if (s('CID') !== opts.cid)
+                    return error(400, 'Invalid merchant');
+                const expected = sign([opts.signatureKey, opts.cid, s('cartid'), amt(s('amount')), s('currency')]);
+                if (s('signature') !== expected)
+                    return error(400, 'Invalid signature');
+                const p = payments.get(s('cartid'));
+                // ASSUMED: the answer for an unknown cart id is undocumented.
+                if (!p)
+                    return error(404, 'Transaction not found');
+                // DOC query-transaction-status: unsigned, no paid time; refund fields present (values ASSUMED empty).
+                return send(200, {
+                    CID: opts.cid,
+                    POID: p.poid,
+                    status: p.status,
+                    cartid: p.cartid,
+                    currency: p.currency,
+                    amount: p.amount,
+                    description: p.description,
+                    PaymentType: '',
+                    refundstatus: '',
+                    refundamount: '',
+                    refunddate: '',
+                });
+            }
+            error(404, 'Not found');
+        });
+    });
+    await new Promise((r) => server.listen(0, '127.0.0.1', r));
+    origin = `http://127.0.0.1:${server.address().port}`;
+    const payment = (id) => {
+        const p = payments.get(cartOf(id));
+        if (!p)
+            throw new Error(`fake Gkash: no payment ${id}`);
+        return p;
+    };
+    return {
+        url: origin,
+        requests,
+        markPaid(id) {
+            const p = payment(id);
+            p.status = '88 - Transferred';
+            p.description = '00 - Approved';
+        },
+        setStatus(id, status) {
+            payment(id).status = status;
+        },
+        callbackFor(id, override = {}) {
+            const p = payment(id);
+            // Form fields exactly as Gkash posts them (spec §5). It claims success even before markPaid (a replayed or
+            // forged-with-a-leaked-key callback); the fake's own record stays as it is.
+            const fields = {
+                CID: opts.cid,
+                POID: p.poid,
+                status: '88 - Transferred',
+                cartid: p.cartid,
+                currency: p.currency,
+                amount: p.amount,
+                description: '00 - Approved',
+                ...override,
+            };
+            const { signature, ...rest } = fields;
+            const posted = {
+                ...rest,
+                signature: signature ??
+                    sign([
+                        opts.signatureKey,
+                        rest.CID ?? '',
+                        rest.POID ?? '',
+                        rest.cartid ?? '',
+                        amt(rest.amount ?? ''),
+                        rest.currency ?? '',
+                        rest.status ?? '',
+                    ]),
+            };
+            return {
+                fields: posted,
+                rawBody: new URLSearchParams(posted).toString(),
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            };
+        },
+        tamper: (cb) => {
+            const fields = { ...cb.fields, signature: flip(cb.fields.signature ?? '') };
+            // The body must say what the fields say: a real tampered POST carries the altered value in its bytes too.
+            return { ...cb, fields, rawBody: cb.rawBody ? new URLSearchParams(fields).toString() : '' };
+        },
+        close: () => new Promise((r) => server.close(() => r())),
+    };
+}
+//# sourceMappingURL=gkash.js.map

package/dist/fakes/gkash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gkash.js","sourceRoot":"","sources":["../../src/fakes/gkash.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAA;AAEnF,OAAO,EAAoB,IAAI,EAAE,MAAM,YAAY,CAAA;AAEnD;;;GAGG;AACH,MAAM,IAAI,GAAG,CAAC,KAAe,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAE1G,kGAAkG;AAClG,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AAyB5E,sGAAsG;AACtG,MAAM,MAAM,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAA;AAEtD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAA2C;IAC9E,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAC3C,MAAM,QAAQ,GAA0B,EAAE,CAAA;IAC1C,IAAI,MAAM,GAAG,EAAE,CAAA;IAEf,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACnB,GAAG,IAAI,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YAC/C,IAAI,IAAI,GAA4B,EAAE,CAAA;YACtC,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBACpC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;oBAAE,IAAI,GAAG,CAAC,CAAA;YAC/D,CAAC;YAAC,MAAM,CAAC,CAAA,CAAC;YACV,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,IAAI,EAAE,CAAA;YAC1B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YAC1F,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,CAAU,EAAE,EAAE;gBAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5B,CAAC,CAAA;YACD,+EAA+E;YAC/E,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,OAAe,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;YAC5E,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;YAEjE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;gBAC1D,IAAI,CAAC,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAA;gBAC7F,kGAAkG;gBAClG,IAAI,CAAC,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;gBACpF,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;gBAChE,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,CAAA;gBAC5B,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;gBAC3E,IAAI,CAAC,CAAC,YAAY,CAAC,KAAK,KAAK;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;gBACrE,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC;oBACnE,OAAO,KAAK,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAA;gBACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAA;gBACvF,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;gBACvE,4GAA4G;gBAC5G,uDAAuD;gBACvD,IAAI,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;gBAChE,CAAC,IAAI,CAAC,CAAA;gBACN,MAAM,CAAC,GAAY;oBACjB,IAAI,EAAE,WAAW,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE;oBAC7C,MAAM;oBACN,MAAM,EAAE,CAAC,CAAC,UAAU,CAAC;oBACrB,QAAQ,EAAE,KAAK;oBACf,MAAM,EAAE,cAAc;oBACtB,WAAW,EAAE,EAAE;iBAChB,CAAA;gBACD,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;gBACvB,sGAAsG;gBACtG,OAAO,IAAI,CAAC,GAAG,EAAE;oBACf,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,SAAS,EAAE,IAAI,CAAC;wBACd,IAAI,CAAC,YAAY;wBACjB,IAAI,CAAC,GAAG;wBACR,CAAC,CAAC,IAAI;wBACN,CAAC,CAAC,MAAM;wBACR,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;wBACb,CAAC,CAAC,QAAQ;wBACV,CAAC,CAAC,MAAM;qBACT,CAAC;oBACF,QAAQ,EAAE,EAAE,GAAG,EAAE,GAAG,MAAM,QAAQ,CAAC,CAAC,IAAI,EAAE,EAAE;iBAC7C,CAAC,CAAA;YACJ,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAC3D,IAAI,CAAC,CAAC,SAAS,CAAC,KAAK,OAAO;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAA;gBAClE,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,GAAG;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAA;gBAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAA;gBAClG,IAAI,CAAC,CAAC,WAAW,CAAC,KAAK,QAAQ;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAA;gBACvE,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;gBACnC,8DAA8D;gBAC9D,IAAI,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAA;gBAClD,sGAAsG;gBACtG,OAAO,IAAI,CAAC,GAAG,EAAE;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;oBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;oBAChB,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,WAAW,EAAE,EAAE;oBACf,YAAY,EAAE,EAAE;oBAChB,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;iBACf,CAAC,CAAA;YACJ,CAAC;YACD,KAAK,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;QACzB,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAA;IAErE,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QAClC,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAA;QACvD,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,OAAO;QACL,GAAG,EAAE,MAAM;QACX,QAAQ;QACR,QAAQ,CAAC,EAAE;YACT,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;YACrB,CAAC,CAAC,MAAM,GAAG,kBAAkB,CAAA;YAC7B,CAAC,CAAC,WAAW,GAAG,eAAe,CAAA;QACjC,CAAC;QACD,SAAS,CAAC,EAAE,EAAE,MAAM;YAClB,OAAO,CAAC,EAAE,CAAC,CAAC,MAAM,GAAG,MAAM,CAAA;QAC7B,CAAC;QACD,WAAW,CAAC,EAAE,EAAE,QAAQ,GAAG,EAAE;YAC3B,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;YACrB,2GAA2G;YAC3G,4EAA4E;YAC5E,MAAM,MAAM,GAA2B;gBACrC,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,kBAAkB;gBAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,QAAQ,EAAE,CAAC,CAAC,QAAQ;gBACpB,MAAM,EAAE,CAAC,CAAC,MAAM;gBAChB,WAAW,EAAE,eAAe;gBAC5B,GAAG,QAAQ;aACZ,CAAA;YACD,MAAM,EAAE,SAAS,EAAE,GAAG,IAAI,EAAE,GAAG,MAAM,CAAA;YACrC,MAAM,MAAM,GAAG;gBACb,GAAG,IAAI;gBACP,SAAS,EACP,SAAS;oBACT,IAAI,CAAC;wBACH,IAAI,CAAC,YAAY;wBACjB,IAAI,CAAC,GAAG,IAAI,EAAE;wBACd,IAAI,CAAC,IAAI,IAAI,EAAE;wBACf,IAAI,CAAC,MAAM,IAAI,EAAE;wBACjB,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;wBACtB,IAAI,CAAC,QAAQ,IAAI,EAAE;wBACnB,IAAI,CAAC,MAAM,IAAI,EAAE;qBAClB,CAAC;aACL,CAAA;YACD,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;gBAC/C,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;aACjE,CAAA;QACH,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE;YACb,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAA;YAC3E,0GAA0G;YAC1G,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;QAC7F,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/D,CAAA;AACH,CAAC"}

package/dist/fakes/hitpay.d.ts

@@ -0,0 +1,36 @@
+import type { CallbackInput } from '@bayarkit/core';
+import { type FakeGateway } from './types.js';
+type PaymentRequest = Record<string, unknown> & {
+    id: string;
+    status: string;
+    amount: string;
+    currency: string;
+    payments: Record<string, unknown>[];
+};
+export interface FakeHitPay extends FakeGateway {
+    requests: {
+        method: string;
+        path: string;
+        /** Body fields as received (form or JSON); repeated form keys (`payment_methods[]`) joined with `,`. */
+        body: Record<string, unknown>;
+        contentType: string | undefined;
+        headers: Record<string, string | string[] | undefined>;
+    }[];
+    /** The fake's own record (what `GET /v1/payment-requests/{id}` answers). */
+    paymentRequest(id: string): PaymentRequest | undefined;
+    /** The legacy per-request `webhook` form POST, signed with the API salt (`hmac` field). */
+    formCallbackFor(id: string, override?: Record<string, string>): CallbackInput;
+}
+/** Event webhook signature, written independently of the adapter: hex HMAC-SHA256(webhook salt, raw body bytes). */
+export declare function hitpayEventSignature(webhookSalt: string, rawBody: string): string;
+/** Legacy `hmac`: every field except `hmac`, keys sorted, `${key}${value}` joined with nothing (PHP SDK ksort+implode). */
+export declare function hitpayFormSignature(apiSalt: string, fields: Record<string, string>): string;
+export declare function startFakeHitPay(opts: {
+    apiKey: string;
+    /** API-key salt (Developers page): signs the legacy form callback. */
+    apiSalt: string;
+    /** Per-webhook-endpoint salt: signs event webhooks. */
+    webhookSalt: string;
+}): Promise<FakeHitPay>;
+export {};
+//# sourceMappingURL=hitpay.d.ts.map

package/dist/fakes/hitpay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hitpay.d.ts","sourceRoot":"","sources":["../../src/fakes/hitpay.ts"],"names":[],"mappings":"AAyBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EAAE,KAAK,WAAW,EAAQ,MAAM,YAAY,CAAA;AAEnD,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAC9C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;CACpC,CAAA;AAED,MAAM,WAAW,UAAW,SAAQ,WAAW;IAC7C,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,wGAAwG;QACxG,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAC7B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;QAC/B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;KACvD,EAAE,CAAA;IACH,4EAA4E;IAC5E,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IACtD,2FAA2F;IAC3F,eAAe,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,aAAa,CAAA;CAC9E;AAED,oHAAoH;AACpH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEjF;AAED,2HAA2H;AAC3H,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,CAO3F;AASD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,OAAO,EAAE,MAAM,CAAA;IACf,uDAAuD;IACvD,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CA4LtB"}

package/dist/fakes/hitpay.js

@@ -0,0 +1,233 @@
+/**
+ * A fake HitPay API (Payment Requests), built from the official docs in `gateways/hitpay/spec.md` (not yet measured
+ * against the HitPay sandbox). When someone measures the sandbox, change this file first so it answers like the real
+ * thing, then the adapter.
+ *
+ * What it checks, and where each rule comes from (spec sections in brackets):
+ * - auth: `X-BUSINESS-API-KEY` must be the configured key AND `X-Requested-With: XMLHttpRequest` must be present; the
+ *   docs list a missing header as a cause of "Invalid Business API Key" [§1]. ASSUMED: that error is HTTP 401;
+ * - create accepts BOTH form-urlencoded (guide + PHP SDK) and JSON (OpenAPI) bodies [§2, §6.4]; `currency` is required,
+ *   and `amount` too (the guide says mandatory, the OpenAPI optional: the fake takes the stricter side); `amount` is in
+ *   major units, 0.3 to 999999999.99, else 422 with the documented message [§2];
+ * - amounts come back as strings in major units (`"10.50"`); timestamps without an offset [§2, §3];
+ * - unknown request id → 404 `{"message":"No query results for model [App\\Business\\PaymentRequest] <id>"}` [§3];
+ * - callbacks, two schemes [§4]:
+ *   - `callbackFor` = the event webhook: JSON body, `Hitpay-Signature` = hex HMAC-SHA256(webhook salt, RAW body).
+ *     ASSUMED: the body escapes `/` as `\/` (PHP `json_encode` default), so a handler that re-serialises the parsed
+ *     JSON gets different bytes and the signature fails, as it can on a real webhook [§6.3];
+ *   - `formCallbackFor` = the legacy per-request `webhook` form POST: `hmac` = hex HMAC-SHA256(API salt, every field
+ *     except `hmac`, sorted by key, `key+value` concatenated without separators, empty values included) [§4].
+ * ASSUMED (no source): the create response is HTTP 201; the checkout URL path; the shape of `payments[]` beyond the
+ * documented status/amount/fees strings.
+ */
+import { createHmac, randomUUID } from 'node:crypto';
+import { createServer } from 'node:http';
+import { flip } from './types.js';
+/** Event webhook signature, written independently of the adapter: hex HMAC-SHA256(webhook salt, raw body bytes). */
+export function hitpayEventSignature(webhookSalt, rawBody) {
+    return createHmac('sha256', webhookSalt).update(rawBody, 'utf8').digest('hex');
+}
+/** Legacy `hmac`: every field except `hmac`, keys sorted, `${key}${value}` joined with nothing (PHP SDK ksort+implode). */
+export function hitpayFormSignature(apiSalt, fields) {
+    const keys = Object.keys(fields)
+        .filter((k) => k !== 'hmac')
+        .sort();
+    return createHmac('sha256', apiSalt)
+        .update(keys.map((k) => `${k}${fields[k] ?? ''}`).join(''), 'utf8')
+        .digest('hex');
+}
+const pad = (n) => String(n).padStart(2, '0');
+/** `2025-07-03T02:18:49`: no offset, as in the docs. ASSUMED local time UTC+8 (refund example). */
+const stamp = () => {
+    const d = new Date(Date.now() + 8 * 3600_000);
+    return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())}T${pad(d.getUTCHours())}:${pad(d.getUTCMinutes())}:${pad(d.getUTCSeconds())}`;
+};
+export async function startFakeHitPay(opts) {
+    const store = new Map();
+    const requests = [];
+    const server = createServer((req, res) => {
+        let raw = '';
+        req.on('data', (d) => {
+            raw += d;
+        });
+        req.on('end', () => {
+            const contentType = req.headers['content-type'];
+            let body = {};
+            if (contentType?.includes('application/json')) {
+                try {
+                    const j = raw ? JSON.parse(raw) : {};
+                    if (j && typeof j === 'object' && !Array.isArray(j))
+                        body = j;
+                }
+                catch { }
+            }
+            else {
+                const form = new URLSearchParams(raw);
+                for (const k of new Set(form.keys()))
+                    body[k] = form.getAll(k).join(',');
+            }
+            const path = (req.url ?? '').split('?')[0] ?? '';
+            requests.push({ method: req.method ?? '', path, body, contentType, headers: req.headers });
+            const send = (status, o) => {
+                res.writeHead(status, { 'content-type': 'application/json' });
+                res.end(JSON.stringify(o));
+            };
+            if (req.headers['x-business-api-key'] !== opts.apiKey ||
+                req.headers['x-requested-with'] !== 'XMLHttpRequest') {
+                return send(401, { message: 'Invalid Business API Key' });
+            }
+            if (req.method === 'POST' && path === '/v1/payment-requests') {
+                const errors = {};
+                const s = (k) => (body[k] == null ? '' : String(body[k]).trim());
+                if (!s('currency'))
+                    errors.currency = ['The currency field is required.'];
+                else if (s('currency').length > 3)
+                    errors.currency = ['The currency may not be greater than 3 characters.'];
+                const amount = Number(s('amount'));
+                if (!s('amount'))
+                    errors.amount = ['The amount field is required.'];
+                else if (!Number.isFinite(amount) || amount < 0.3 || amount > 999999999.99)
+                    errors.amount = ['The amount must be between 0.3 and 999999999.99.'];
+                if (s('reference_number').length > 255)
+                    errors.reference_number = ['The reference number may not be greater than 255 characters.'];
+                if (s('purpose').length > 255)
+                    errors.purpose = ['The purpose may not be greater than 255 characters.'];
+                const first = Object.values(errors)[0];
+                if (first)
+                    return send(422, { message: first[0], errors });
+                const id = randomUUID();
+                const now = stamp();
+                const pr = {
+                    id,
+                    name: s('name') || null,
+                    email: s('email') || null,
+                    phone: s('phone') || null,
+                    amount: amount.toFixed(2),
+                    currency: s('currency'),
+                    status: 'pending',
+                    purpose: s('purpose') || null,
+                    reference_number: s('reference_number') || null,
+                    payment_methods: s('payment_methods[]') ? s('payment_methods[]').split(',') : ['card'],
+                    url: `https://securecheckout.sandbox.hit-pay.com/payment-request/@fake/${id}/checkout`,
+                    redirect_url: s('redirect_url') || null,
+                    webhook: s('webhook') || null,
+                    send_sms: false,
+                    send_email: false,
+                    allow_repeated_payments: false,
+                    expiry_date: null,
+                    created_at: now,
+                    updated_at: now,
+                    payments: [],
+                };
+                store.set(id, pr);
+                const { payments: _omit, ...created } = pr;
+                return send(201, created);
+            }
+            const one = /^\/v1\/payment-requests\/([^/]+)$/.exec(path);
+            if (one && req.method === 'GET') {
+                const pr = store.get(one[1] ?? '');
+                if (!pr)
+                    return send(404, {
+                        message: `No query results for model [App\\Business\\PaymentRequest] ${one[1]}`,
+                    });
+                return send(200, pr);
+            }
+            send(404, { message: 'Not Found' });
+        });
+    });
+    await new Promise((r) => server.listen(0, '127.0.0.1', r));
+    const url = `http://127.0.0.1:${server.address().port}`;
+    const get = (id) => {
+        const pr = store.get(id);
+        if (!pr)
+            throw new Error(`fake HitPay: no payment request ${id}`);
+        return pr;
+    };
+    /** The charge id a payment would carry; the record itself stays unpaid until markPaid. */
+    const chargeIds = new Map();
+    const chargeId = (id) => {
+        let c = chargeIds.get(id);
+        if (!c) {
+            c = randomUUID();
+            chargeIds.set(id, c);
+        }
+        return c;
+    };
+    return {
+        url,
+        requests,
+        paymentRequest: (id) => store.get(id),
+        markPaid(id) {
+            const pr = get(id);
+            const now = stamp();
+            pr.status = 'completed';
+            pr.updated_at = now;
+            pr.payments = [
+                {
+                    id: chargeId(id),
+                    quantity: 1,
+                    status: 'succeeded',
+                    buyer_name: pr.name,
+                    buyer_email: pr.email,
+                    currency: pr.currency,
+                    amount: pr.amount,
+                    refunded_amount: '0.00',
+                    payment_type: 'card',
+                    fees: '0.50',
+                    created_at: now,
+                    updated_at: now,
+                },
+            ];
+        },
+        /**
+         * The event webhook (`payment_request.completed`) claiming payment, even before `markPaid` (the fake's record
+         * stays unpaid). `override` changes body fields before signing.
+         */
+        callbackFor(id, override = {}) {
+            const pr = get(id);
+            const { payments: _omit, ...shown } = pr;
+            const event = { ...shown, status: 'completed', updated_at: stamp(), ...override };
+            const rawBody = JSON.stringify(event).replaceAll('/', '\\/');
+            return {
+                fields: {},
+                rawBody,
+                headers: {
+                    'content-type': 'application/json',
+                    'user-agent': 'HitPay v2.0',
+                    'hitpay-event-type': 'completed',
+                    'hitpay-event-object': 'payment_request',
+                    'hitpay-signature': hitpayEventSignature(opts.webhookSalt, rawBody),
+                },
+            };
+        },
+        formCallbackFor(id, override = {}) {
+            const pr = get(id);
+            const fields = {
+                payment_id: chargeId(id),
+                payment_request_id: pr.id,
+                reference_number: String(pr.reference_number ?? ''),
+                phone: String(pr.phone ?? ''),
+                amount: pr.amount,
+                currency: pr.currency,
+                status: 'completed',
+                ...override,
+            };
+            const { hmac, ...signed } = fields;
+            const posted = { ...signed, hmac: hmac ?? hitpayFormSignature(opts.apiSalt, signed) };
+            return {
+                fields: posted,
+                rawBody: new URLSearchParams(posted).toString(),
+                headers: { 'content-type': 'application/x-www-form-urlencoded' },
+            };
+        },
+        tamper(cb) {
+            if (cb.headers['hitpay-signature'] !== undefined) {
+                return { ...cb, headers: { ...cb.headers, 'hitpay-signature': flip(cb.headers['hitpay-signature']) } };
+            }
+            const fields = { ...cb.fields, hmac: flip(cb.fields.hmac ?? '') };
+            return { ...cb, fields, rawBody: new URLSearchParams(fields).toString() };
+        },
+        close: () => new Promise((r) => server.close(() => r())),
+    };
+}
+//# sourceMappingURL=hitpay.js.map

package/dist/fakes/hitpay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hitpay.js","sourceRoot":"","sources":["../../src/fakes/hitpay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACpD,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAA;AAGnF,OAAO,EAAoB,IAAI,EAAE,MAAM,YAAY,CAAA;AAyBnD,oHAAoH;AACpH,MAAM,UAAU,oBAAoB,CAAC,WAAmB,EAAE,OAAe;IACvE,OAAO,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,2HAA2H;AAC3H,MAAM,UAAU,mBAAmB,CAAC,OAAe,EAAE,MAA8B;IACjF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;SAC7B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,MAAM,CAAC;SAC3B,IAAI,EAAE,CAAA;IACT,OAAO,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC;SACjC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;SAClE,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACrD,mGAAmG;AACnG,MAAM,KAAK,GAAG,GAAG,EAAE;IACjB,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAA;IAC7C,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,EAAE,CAAC,EAAE,CAAA;AAC/J,CAAC,CAAA;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAMrC;IACC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA0B,CAAA;IAC/C,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAE3C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACnB,GAAG,IAAI,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,WAAW,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;YAC/C,IAAI,IAAI,GAA4B,EAAE,CAAA;YACtC,IAAI,WAAW,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;gBAC9C,IAAI,CAAC;oBACH,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;oBACpC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;wBAAE,IAAI,GAAG,CAAC,CAAA;gBAC/D,CAAC;gBAAC,MAAM,CAAC,CAAA,CAAC;YACZ,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAA;gBACrC,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YAC1E,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YAC1F,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,CAAU,EAAE,EAAE;gBAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5B,CAAC,CAAA;YAED,IACE,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,KAAK,IAAI,CAAC,MAAM;gBACjD,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,gBAAgB,EACpD,CAAC;gBACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC,CAAA;YAC3D,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,sBAAsB,EAAE,CAAC;gBAC7D,MAAM,MAAM,GAA6B,EAAE,CAAA;gBAC3C,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACxE,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;oBAAE,MAAM,CAAC,QAAQ,GAAG,CAAC,iCAAiC,CAAC,CAAA;qBACpE,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;oBAC/B,MAAM,CAAC,QAAQ,GAAG,CAAC,oDAAoD,CAAC,CAAA;gBAC1E,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAA;gBAClC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;oBAAE,MAAM,CAAC,MAAM,GAAG,CAAC,+BAA+B,CAAC,CAAA;qBAC9D,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,GAAG,GAAG,IAAI,MAAM,GAAG,YAAY;oBACxE,MAAM,CAAC,MAAM,GAAG,CAAC,kDAAkD,CAAC,CAAA;gBACtE,IAAI,CAAC,CAAC,kBAAkB,CAAC,CAAC,MAAM,GAAG,GAAG;oBACpC,MAAM,CAAC,gBAAgB,GAAG,CAAC,8DAA8D,CAAC,CAAA;gBAC5F,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,GAAG;oBAC3B,MAAM,CAAC,OAAO,GAAG,CAAC,qDAAqD,CAAC,CAAA;gBAC1E,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;gBACtC,IAAI,KAAK;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAA;gBAE1D,MAAM,EAAE,GAAG,UAAU,EAAE,CAAA;gBACvB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;gBACnB,MAAM,EAAE,GAAmB;oBACzB,EAAE;oBACF,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI;oBACvB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI;oBACzB,KAAK,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI;oBACzB,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;oBACzB,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;oBACvB,MAAM,EAAE,SAAS;oBACjB,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI;oBAC7B,gBAAgB,EAAE,CAAC,CAAC,kBAAkB,CAAC,IAAI,IAAI;oBAC/C,eAAe,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;oBACtF,GAAG,EAAE,oEAAoE,EAAE,WAAW;oBACtF,YAAY,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI;oBACvC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,IAAI;oBAC7B,QAAQ,EAAE,KAAK;oBACf,UAAU,EAAE,KAAK;oBACjB,uBAAuB,EAAE,KAAK;oBAC9B,WAAW,EAAE,IAAI;oBACjB,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;oBACf,QAAQ,EAAE,EAAE;iBACb,CAAA;gBACD,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC,CAAA;gBACjB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,CAAA;gBAC1C,OAAO,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;YAC3B,CAAC;YAED,MAAM,GAAG,GAAG,mCAAmC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC1D,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;gBAChC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBAClC,IAAI,CAAC,EAAE;oBACL,OAAO,IAAI,CAAC,GAAG,EAAE;wBACf,OAAO,EAAE,8DAA8D,GAAG,CAAC,CAAC,CAAC,EAAE;qBAChF,CAAC,CAAA;gBACJ,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;YACtB,CAAC;YACD,IAAI,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAA;QACrC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAA;IAExE,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE;QACzB,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACxB,IAAI,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,EAAE,EAAE,CAAC,CAAA;QACjE,OAAO,EAAE,CAAA;IACX,CAAC,CAAA;IACD,0FAA0F;IAC1F,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC3C,MAAM,QAAQ,GAAG,CAAC,EAAU,EAAE,EAAE;QAC9B,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC,EAAE,CAAC;YACP,CAAC,GAAG,UAAU,EAAE,CAAA;YAChB,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;QACtB,CAAC;QACD,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,OAAO;QACL,GAAG;QACH,QAAQ;QACR,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,QAAQ,CAAC,EAAE;YACT,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,CAAA;YAClB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAA;YACnB,EAAE,CAAC,MAAM,GAAG,WAAW,CAAA;YACvB,EAAE,CAAC,UAAU,GAAG,GAAG,CAAA;YACnB,EAAE,CAAC,QAAQ,GAAG;gBACZ;oBACE,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;oBAChB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,WAAW;oBACnB,UAAU,EAAE,EAAE,CAAC,IAAI;oBACnB,WAAW,EAAE,EAAE,CAAC,KAAK;oBACrB,QAAQ,EAAE,EAAE,CAAC,QAAQ;oBACrB,MAAM,EAAE,EAAE,CAAC,MAAM;oBACjB,eAAe,EAAE,MAAM;oBACvB,YAAY,EAAE,MAAM;oBACpB,IAAI,EAAE,MAAM;oBACZ,UAAU,EAAE,GAAG;oBACf,UAAU,EAAE,GAAG;iBAChB;aACF,CAAA;QACH,CAAC;QACD;;;WAGG;QACH,WAAW,CAAC,EAAE,EAAE,QAAQ,GAAG,EAAE;YAC3B,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,CAAA;YAClB,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,CAAA;YACxC,MAAM,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAA;YACjF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAC5D,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,YAAY,EAAE,aAAa;oBAC3B,mBAAmB,EAAE,WAAW;oBAChC,qBAAqB,EAAE,iBAAiB;oBACxC,kBAAkB,EAAE,oBAAoB,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,CAAC;iBACpE;aACF,CAAA;QACH,CAAC;QACD,eAAe,CAAC,EAAE,EAAE,QAAQ,GAAG,EAAE;YAC/B,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC,CAAA;YAClB,MAAM,MAAM,GAA2B;gBACrC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACxB,kBAAkB,EAAE,EAAE,CAAC,EAAE;gBACzB,gBAAgB,EAAE,MAAM,CAAC,EAAE,CAAC,gBAAgB,IAAI,EAAE,CAAC;gBACnD,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;gBAC7B,MAAM,EAAE,EAAE,CAAC,MAAM;gBACjB,QAAQ,EAAE,EAAE,CAAC,QAAQ;gBACrB,MAAM,EAAE,WAAW;gBACnB,GAAG,QAAQ;aACZ,CAAA;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,MAAM,CAAA;YAClC,MAAM,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAA;YACrF,OAAO;gBACL,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;gBAC/C,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;aACjE,CAAA;QACH,CAAC;QACD,MAAM,CAAC,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjD,OAAO,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,kBAAkB,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,EAAE,EAAE,CAAA;YACxG,CAAC;YACD,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAA;YACjE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,eAAe,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAA;QAC3E,CAAC;QACD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/D,CAAA;AACH,CAAC"}

package/dist/fakes/ipay88.d.ts

@@ -0,0 +1,16 @@
+import { type FakeGateway } from './types.js';
+export interface FakeIPay88 extends FakeGateway {
+    /** Every request received: method, path, and the form/query parameters. */
+    requests: {
+        method: string;
+        path: string;
+        params: Record<string, string>;
+    }[];
+    /** Record a failed payment (re-query answers `Payment fail`). */
+    markFailed(id: string): void;
+}
+export declare function startFakeIPay88(opts: {
+    merchantCode: string;
+    merchantKey: string;
+}): Promise<FakeIPay88>;
+//# sourceMappingURL=ipay88.d.ts.map

package/dist/fakes/ipay88.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ipay88.d.ts","sourceRoot":"","sources":["../../src/fakes/ipay88.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAE,KAAK,WAAW,EAAQ,MAAM,YAAY,CAAA;AA4BnD,MAAM,WAAW,UAAW,SAAQ,WAAW;IAC7C,2EAA2E;IAC3E,QAAQ,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;KAAE,EAAE,CAAA;IAC5E,iEAAiE;IACjE,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;CAC7B;AAoBD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,YAAY,EAAE,MAAM,CAAA;IACpB,WAAW,EAAE,MAAM,CAAA;CACpB,GAAG,OAAO,CAAC,UAAU,CAAC,CA6ItB"}