@bayarkit/testing 0.0.0 → 0.2.0

package/dist/fakes/stripe.js

@@ -0,0 +1,243 @@
+/**
+ * A fake Stripe API (Checkout Sessions only), built from the official docs in `gateways/stripe/spec.md` and checked
+ * against test mode 27 Oct 2026 (Malaysian account): the shapes it serves matched; one completed event per paid
+ * session, FPX included; a failed FPX payment sends no Checkout event. Change this file first when Stripe changes.
+ *
+ * What it checks, and where each rule comes from (spec sections in brackets):
+ * - auth: `Authorization: Bearer <key>` or Basic `<key>:` with the configured `sk_test_` key, else 401 [§1];
+ * - bodies are form-encoded with bracket keys; responses JSON; errors `{ error: { type, message, code? } }` [§1];
+ * - `Stripe-Version` is REQUIRED here. Real Stripe falls back to the account default [§1]; the fake is stricter on
+ *   purpose so a test proves the adapter always pins the version;
+ * - under `2026-09-30.endive`, any `payment_method_types` key → 400, as the endive changelog states [§2.3];
+ * - `expires_at` must be 30 min to 24 h after creation; default 24 h [§2.1]; minimum charge 200 sen (MYR) [§5];
+ * - `Idempotency-Key`: same key + same params → the same session; same key + other params → error [§2.5];
+ * - webhooks: `Stripe-Signature: t=<unix>,v1=<hex HMAC-SHA256(whsec, "<t>.<raw body>")>` [§4].
+ */
+import { createHmac, randomBytes } from 'node:crypto';
+import { createServer } from 'node:http';
+import { flip } from './types.js';
+export const ENDIVE = '2026-09-30.endive';
+/** `t=<t>,v1=<hex>` exactly as Stripe builds it: HMAC-SHA256 over `${t}.${rawBody}`, key = the full `whsec_…` string. */
+export function stripeSignature(webhookSecret, rawBody, t) {
+    return `t=${t},v1=${createHmac('sha256', webhookSecret).update(`${t}.${rawBody}`, 'utf8').digest('hex')}`;
+}
+const randomId = (prefix) => `${prefix}${randomBytes(12).toString('hex')}`;
+export async function startFakeStripe(opts) {
+    const sessions = new Map();
+    const versions = new Map();
+    const idempotent = new Map();
+    const requests = [];
+    const now = () => Math.floor(Date.now() / 1000);
+    const authorised = (header) => {
+        if (!header)
+            return false;
+        if (header === `Bearer ${opts.secretKey}`)
+            return true;
+        const basic = /^Basic (.+)$/.exec(header)?.[1];
+        return !!basic && Buffer.from(basic, 'base64').toString('utf8') === `${opts.secretKey}:`;
+    };
+    const server = createServer((req, res) => {
+        let raw = '';
+        req.on('data', (d) => {
+            raw += d;
+        });
+        req.on('end', () => {
+            const form = new URLSearchParams(raw);
+            const keys = [...form.keys()];
+            const body = {};
+            for (const k of new Set(keys))
+                body[k] = form.getAll(k).join(',');
+            const path = (req.url ?? '').split('?')[0] ?? '';
+            requests.push({ method: req.method ?? '', path, body, keys, headers: req.headers });
+            const send = (status, o) => {
+                res.writeHead(status, { 'content-type': 'application/json' });
+                res.end(JSON.stringify(o));
+            };
+            const fail = (status, type, message, extra = {}) => send(status, { error: { type, message, ...extra } });
+            if (!authorised(req.headers.authorization)) {
+                return fail(401, 'invalid_request_error', 'Invalid API Key provided.');
+            }
+            const version = req.headers['stripe-version'];
+            if (typeof version !== 'string' || !version) {
+                return fail(400, 'invalid_request_error', 'fake Stripe: send a Stripe-Version header (pin the API version).');
+            }
+            if (req.method === 'POST' && path === '/v1/checkout/sessions') {
+                if (version === ENDIVE && keys.some((k) => k.startsWith('payment_method_types'))) {
+                    return fail(400, 'invalid_request_error', 'You can no longer pass `payment_method_types` when you create a Checkout Session.', { param: 'payment_method_types' });
+                }
+                const key = req.headers['idempotency-key'];
+                const idemKey = typeof key === 'string' && key ? key : '';
+                if (idemKey.length > 255)
+                    return fail(400, 'invalid_request_error', 'Idempotency-Key is too long.');
+                const params = JSON.stringify(keys.map((k) => [k, form.getAll(k)]));
+                const saved = idemKey ? idempotent.get(idemKey) : undefined;
+                if (saved) {
+                    if (saved.params !== params) {
+                        return fail(400, 'idempotency_error', 'Keys for idempotent requests can only be used with the same parameters they were first used with.');
+                    }
+                    return send(saved.status, saved.body);
+                }
+                const result = create(body, version);
+                // Validation failures are not saved (spec §2.5), so the caller can fix and retry with the same key.
+                if (idemKey && result.status === 200)
+                    idempotent.set(idemKey, { params, status: result.status, body: result.body });
+                return send(result.status, result.body);
+            }
+            const get = /^\/v1\/checkout\/sessions\/([A-Za-z0-9_]+)$/.exec(path);
+            if (req.method === 'GET' && get) {
+                const s = sessions.get(get[1] ?? '');
+                if (!s)
+                    return missing(get[1] ?? '');
+                return send(200, s);
+            }
+            const expire = /^\/v1\/checkout\/sessions\/([A-Za-z0-9_]+)\/expire$/.exec(path);
+            if (req.method === 'POST' && expire) {
+                const s = sessions.get(expire[1] ?? '');
+                if (!s)
+                    return missing(expire[1] ?? '');
+                if (s.status !== 'open') {
+                    return fail(400, 'invalid_request_error', `Only Checkout Sessions with a status of open can be expired.`);
+                }
+                s.status = 'expired';
+                s.url = null;
+                return send(200, s);
+            }
+            return fail(404, 'invalid_request_error', `Unrecognized request URL (${req.method}: ${path}).`);
+            function missing(id) {
+                return fail(404, 'invalid_request_error', `No such checkout.session: '${id}'`, {
+                    code: 'resource_missing',
+                });
+            }
+        });
+    });
+    function create(body, version) {
+        const bad = (message, param) => ({
+            status: 400,
+            body: { error: { type: 'invalid_request_error', message, ...(param ? { param } : {}) } },
+        });
+        if (body.mode !== 'payment')
+            return bad('Missing or unsupported mode.', 'mode');
+        const currency = body['line_items[0][price_data][currency]'];
+        const unit = body['line_items[0][price_data][unit_amount]'] ?? '';
+        const name = body['line_items[0][price_data][product_data][name]'];
+        const quantity = body['line_items[0][quantity]'] ?? '';
+        if (currency !== 'myr')
+            return bad('This fake only speaks MYR (myr).', 'line_items[0][price_data][currency]');
+        if (!/^\d+$/.test(unit))
+            return bad('Invalid integer: unit_amount', 'line_items[0][price_data][unit_amount]');
+        if (!name)
+            return bad('Missing required param: product_data[name].', 'line_items[0][price_data][product_data][name]');
+        if (!/^[1-9]\d*$/.test(quantity))
+            return bad('Invalid integer: quantity', 'line_items[0][quantity]');
+        if (!body.success_url)
+            return bad('Missing required param: success_url.', 'success_url');
+        const amountTotal = Number(unit) * Number(quantity);
+        if (amountTotal < 200)
+            return bad('The Checkout Session total must be at least RM2.00 (200 sen).', 'line_items');
+        const created = now();
+        let expiresAt = created + 86_400;
+        if (body.expires_at !== undefined) {
+            const e = Number(body.expires_at);
+            if (!Number.isInteger(e) || e - created < 1800 || e - created > 86_400) {
+                return bad('expires_at must be between 30 minutes and 24 hours after creation.', 'expires_at');
+            }
+            expiresAt = e;
+        }
+        if ((body.client_reference_id ?? '').length > 200)
+            return bad('client_reference_id is too long.');
+        const allowed = body['allowed_payment_method_types[]']?.split(',');
+        const legacy = body['payment_method_types[]']?.split(',');
+        const id = randomId('cs_test_');
+        const session = {
+            id,
+            object: 'checkout.session',
+            amount_total: amountTotal,
+            cancel_url: body.cancel_url ?? null,
+            client_reference_id: body.client_reference_id ?? null,
+            created,
+            currency: 'myr',
+            customer_email: body.customer_email ?? null,
+            expires_at: expiresAt,
+            livemode: false,
+            metadata: {},
+            mode: 'payment',
+            payment_intent: null,
+            payment_method_types: allowed ?? legacy ?? ['card'],
+            payment_status: 'unpaid',
+            status: 'open',
+            success_url: body.success_url,
+            ui_mode: 'hosted_page',
+            url: `https://checkout.stripe.com/c/pay/${id}#fake`,
+        };
+        sessions.set(id, session);
+        versions.set(id, version);
+        return { status: 200, body: session };
+    }
+    await new Promise((r) => server.listen(0, '127.0.0.1', r));
+    const url = `http://127.0.0.1:${server.address().port}`;
+    const session = (id) => {
+        const s = sessions.get(id);
+        if (!s)
+            throw new Error(`fake Stripe: no checkout session ${id}`);
+        return s;
+    };
+    return {
+        url,
+        requests,
+        session: (id) => sessions.get(id),
+        markPaid(id) {
+            const s = session(id);
+            s.status = 'complete';
+            s.payment_status = 'paid';
+            s.payment_intent ??= randomId('pi_');
+            s.url = null;
+        },
+        /**
+         * A `checkout.session.completed` event claiming payment (even before `markPaid`; the fake's record stays unpaid).
+         * `override` changes fields of `data.object` before signing; the key `type` changes the event type instead.
+         */
+        callbackFor(id, override = {}) {
+            const { type, ...fields } = override;
+            const s = session(id);
+            const event = {
+                id: randomId('evt_'),
+                object: 'event',
+                api_version: versions.get(id) ?? ENDIVE,
+                created: now(),
+                data: {
+                    object: {
+                        ...s,
+                        status: 'complete',
+                        payment_status: 'paid',
+                        payment_intent: s.payment_intent ?? randomId('pi_'),
+                        url: null,
+                        ...fields,
+                    },
+                },
+                livemode: false,
+                pending_webhooks: 1,
+                request: { id: null, idempotency_key: null },
+                type: type ?? 'checkout.session.completed',
+            };
+            // Indented, so a handler that re-serialises the parsed JSON gets different bytes and the signature fails.
+            const rawBody = JSON.stringify(event, null, 2);
+            return {
+                fields: {},
+                rawBody,
+                headers: {
+                    'content-type': 'application/json',
+                    'stripe-signature': stripeSignature(opts.webhookSecret, rawBody, now()),
+                },
+            };
+        },
+        tamper: (cb) => ({
+            ...cb,
+            headers: {
+                ...cb.headers,
+                'stripe-signature': (cb.headers['stripe-signature'] ?? '').replace(/v1=([0-9a-f]+)/, (_m, hex) => `v1=${flip(hex)}`),
+            },
+        }),
+        close: () => new Promise((r) => server.close(() => r())),
+    };
+}
+//# sourceMappingURL=stripe.js.map

package/dist/fakes/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../src/fakes/stripe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAA;AAEnF,OAAO,EAAoB,IAAI,EAAE,MAAM,YAAY,CAAA;AAEnD,MAAM,CAAC,MAAM,MAAM,GAAG,mBAAmB,CAAA;AAkBzC,yHAAyH;AACzH,MAAM,UAAU,eAAe,CAAC,aAAqB,EAAE,OAAe,EAAE,CAAS;IAC/E,OAAO,KAAK,CAAC,OAAO,UAAU,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAA;AAC3G,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,GAAG,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;AAElF,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,IAGrC;IACC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAmB,CAAA;IAC3C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAA;IAC1C,MAAM,UAAU,GAAG,IAAI,GAAG,EAA6D,CAAA;IACvF,MAAM,QAAQ,GAA2B,EAAE,CAAA;IAC3C,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IAE/C,MAAM,UAAU,GAAG,CAAC,MAA0B,EAAE,EAAE;QAChD,IAAI,CAAC,MAAM;YAAE,OAAO,KAAK,CAAA;QACzB,IAAI,MAAM,KAAK,UAAU,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,IAAI,CAAA;QACtD,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;QAC9C,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,SAAS,GAAG,CAAA;IAC1F,CAAC,CAAA;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,GAAG,GAAG,EAAE,CAAA;QACZ,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACnB,GAAG,IAAI,CAAC,CAAA;QACV,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,CAAA;YACrC,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAA;YAC7B,MAAM,IAAI,GAA2B,EAAE,CAAA;YACvC,KAAK,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,CAAC;gBAAE,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;YACjE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;YAChD,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAA;YACnF,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,CAAU,EAAE,EAAE;gBAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAC7D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAC5B,CAAC,CAAA;YACD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,IAAY,EAAE,OAAe,EAAE,KAAK,GAA2B,EAAE,EAAE,EAAE,CACjG,IAAI,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,EAAE,CAAC,CAAA;YAEtD,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC3C,OAAO,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,2BAA2B,CAAC,CAAA;YACxE,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;YAC7C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC5C,OAAO,IAAI,CACT,GAAG,EACH,uBAAuB,EACvB,kEAAkE,CACnE,CAAA;YACH,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,IAAI,KAAK,uBAAuB,EAAE,CAAC;gBAC9D,IAAI,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC;oBACjF,OAAO,IAAI,CACT,GAAG,EACH,uBAAuB,EACvB,mFAAmF,EACnF,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAClC,CAAA;gBACH,CAAC;gBACD,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;gBAC1C,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAA;gBACzD,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;oBAAE,OAAO,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,8BAA8B,CAAC,CAAA;gBACnG,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBACnE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;gBAC3D,IAAI,KAAK,EAAE,CAAC;oBACV,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;wBAC5B,OAAO,IAAI,CACT,GAAG,EACH,mBAAmB,EACnB,mGAAmG,CACpG,CAAA;oBACH,CAAC;oBACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAA;gBACvC,CAAC;gBACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;gBACpC,oGAAoG;gBACpG,IAAI,OAAO,IAAI,MAAM,CAAC,MAAM,KAAK,GAAG;oBAClC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,CAAA;gBAC/E,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAA;YACzC,CAAC;YAED,MAAM,GAAG,GAAG,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACpE,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC;gBAChC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpC,IAAI,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACpC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACrB,CAAC;YACD,MAAM,MAAM,GAAG,qDAAqD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YAC/E,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,MAAM,EAAE,CAAC;gBACpC,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACvC,IAAI,CAAC,CAAC;oBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;gBACvC,IAAI,CAAC,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;oBACxB,OAAO,IAAI,CACT,GAAG,EACH,uBAAuB,EACvB,8DAA8D,CAC/D,CAAA;gBACH,CAAC;gBACD,CAAC,CAAC,MAAM,GAAG,SAAS,CAAA;gBACpB,CAAC,CAAC,GAAG,GAAG,IAAI,CAAA;gBACZ,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;YACrB,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,6BAA6B,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,CAAC,CAAA;YAE/F,SAAS,OAAO,CAAC,EAAU;gBACzB,OAAO,IAAI,CAAC,GAAG,EAAE,uBAAuB,EAAE,8BAA8B,EAAE,GAAG,EAAE;oBAC7E,IAAI,EAAE,kBAAkB;iBACzB,CAAC,CAAA;YACJ,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,SAAS,MAAM,CAAC,IAA4B,EAAE,OAAe;QAC3D,MAAM,GAAG,GAAG,CAAC,OAAe,EAAE,KAAc,EAAE,EAAE,CAAC,CAAC;YAChD,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;SACzF,CAAC,CAAA;QACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,CAAA;QAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,qCAAqC,CAAC,CAAA;QAC5D,MAAM,IAAI,GAAG,IAAI,CAAC,wCAAwC,CAAC,IAAI,EAAE,CAAA;QACjE,MAAM,IAAI,GAAG,IAAI,CAAC,+CAA+C,CAAC,CAAA;QAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAA;QACtD,IAAI,QAAQ,KAAK,KAAK;YACpB,OAAO,GAAG,CAAC,kCAAkC,EAAE,qCAAqC,CAAC,CAAA;QACvF,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YACrB,OAAO,GAAG,CAAC,8BAA8B,EAAE,wCAAwC,CAAC,CAAA;QACtF,IAAI,CAAC,IAAI;YACP,OAAO,GAAG,CACR,6CAA6C,EAC7C,+CAA+C,CAChD,CAAA;QACH,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,GAAG,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,CAAA;QACpG,IAAI,CAAC,IAAI,CAAC,WAAW;YAAE,OAAO,GAAG,CAAC,sCAAsC,EAAE,aAAa,CAAC,CAAA;QACxF,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAA;QACnD,IAAI,WAAW,GAAG,GAAG;YACnB,OAAO,GAAG,CAAC,+DAA+D,EAAE,YAAY,CAAC,CAAA;QAC3F,MAAM,OAAO,GAAG,GAAG,EAAE,CAAA;QACrB,IAAI,SAAS,GAAG,OAAO,GAAG,MAAM,CAAA;QAChC,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACjC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,OAAO,GAAG,MAAM,EAAE,CAAC;gBACvE,OAAO,GAAG,CAAC,oEAAoE,EAAE,YAAY,CAAC,CAAA;YAChG,CAAC;YACD,SAAS,GAAG,CAAC,CAAA;QACf,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,GAAG;YAAE,OAAO,GAAG,CAAC,kCAAkC,CAAC,CAAA;QACjG,MAAM,OAAO,GAAG,IAAI,CAAC,gCAAgC,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;QAClE,MAAM,MAAM,GAAG,IAAI,CAAC,wBAAwB,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,CAAA;QACzD,MAAM,EAAE,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAA;QAC/B,MAAM,OAAO,GAAY;YACvB,EAAE;YACF,MAAM,EAAE,kBAAkB;YAC1B,YAAY,EAAE,WAAW;YACzB,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,IAAI;YACnC,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,IAAI;YACrD,OAAO;YACP,QAAQ,EAAE,KAAK;YACf,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;YAC3C,UAAU,EAAE,SAAS;YACrB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,EAAE;YACZ,IAAI,EAAE,SAAS;YACf,cAAc,EAAE,IAAI;YACpB,oBAAoB,EAAE,OAAO,IAAI,MAAM,IAAI,CAAC,MAAM,CAAC;YACnD,cAAc,EAAE,QAAQ;YACxB,MAAM,EAAE,MAAM;YACd,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,aAAa;YACtB,GAAG,EAAE,qCAAqC,EAAE,OAAO;SACpD,CAAA;QACD,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAA;QACzB,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;IACvC,CAAC;IAED,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAA;IAExE,MAAM,OAAO,GAAG,CAAC,EAAU,EAAE,EAAE;QAC7B,MAAM,CAAC,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;QAC1B,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,EAAE,EAAE,CAAC,CAAA;QACjE,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,OAAO;QACL,GAAG;QACH,QAAQ;QACR,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE;YACT,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;YACrB,CAAC,CAAC,MAAM,GAAG,UAAU,CAAA;YACrB,CAAC,CAAC,cAAc,GAAG,MAAM,CAAA;YACzB,CAAC,CAAC,cAAc,KAAK,QAAQ,CAAC,KAAK,CAAC,CAAA;YACpC,CAAC,CAAC,GAAG,GAAG,IAAI,CAAA;QACd,CAAC;QACD;;;WAGG;QACH,WAAW,CAAC,EAAE,EAAE,QAAQ,GAAG,EAAE;YAC3B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,GAAG,QAAQ,CAAA;YACpC,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,CAAC,CAAA;YACrB,MAAM,KAAK,GAAG;gBACZ,EAAE,EAAE,QAAQ,CAAC,MAAM,CAAC;gBACpB,MAAM,EAAE,OAAO;gBACf,WAAW,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,MAAM;gBACvC,OAAO,EAAE,GAAG,EAAE;gBACd,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,GAAG,CAAC;wBACJ,MAAM,EAAE,UAAU;wBAClB,cAAc,EAAE,MAAM;wBACtB,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,QAAQ,CAAC,KAAK,CAAC;wBACnD,GAAG,EAAE,IAAI;wBACT,GAAG,MAAM;qBACV;iBACF;gBACD,QAAQ,EAAE,KAAK;gBACf,gBAAgB,EAAE,CAAC;gBACnB,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE;gBAC5C,IAAI,EAAE,IAAI,IAAI,4BAA4B;aAC3C,CAAA;YACD,0GAA0G;YAC1G,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YAC9C,OAAO;gBACL,MAAM,EAAE,EAAE;gBACV,OAAO;gBACP,OAAO,EAAE;oBACP,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,eAAe,CAAC,IAAI,CAAC,aAAa,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;iBACxE;aACF,CAAA;QACH,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;YACf,GAAG,EAAE;YACL,OAAO,EAAE;gBACP,GAAG,EAAE,CAAC,OAAO;gBACb,kBAAkB,EAAE,CAAC,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAChE,gBAAgB,EAChB,CAAC,EAAE,EAAE,GAAW,EAAE,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,EAAE,CACvC;aACF;SACF,CAAC;QACF,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/D,CAAA;AACH,CAAC"}

package/dist/fakes/toyyibpay.d.ts

@@ -0,0 +1,14 @@
+import { type FakeGateway } from './types.js';
+export interface FakeToyyibPay extends FakeGateway {
+    /** Every request received, for assertions (fields as posted). */
+    requests: {
+        path: string;
+        fields: Record<string, string>;
+        contentType: string | undefined;
+    }[];
+}
+export declare function startFakeToyyibPay(opts: {
+    secretKey: string;
+    categoryCode: string;
+}): Promise<FakeToyyibPay>;
+//# sourceMappingURL=toyyibpay.d.ts.map

package/dist/fakes/toyyibpay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"toyyibpay.d.ts","sourceRoot":"","sources":["../../src/fakes/toyyibpay.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,KAAK,WAAW,EAAQ,MAAM,YAAY,CAAA;AAQnD,MAAM,WAAW,aAAc,SAAQ,WAAW;IAChD,iEAAiE;IACjE,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,EAAE,CAAA;CAC9F;AAED,wBAAsB,kBAAkB,CAAC,IAAI,EAAE;IAC7C,SAAS,EAAE,MAAM,CAAA;IACjB,YAAY,EAAE,MAAM,CAAA;CACrB,GAAG,OAAO,CAAC,aAAa,CAAC,CAoHzB"}

package/dist/fakes/toyyibpay.js

@@ -0,0 +1,130 @@
+/**
+ * A fake toyyibPay that answers in the shapes MEASURED on the sandbox (10 October 2026), not the documented ones:
+ * leading tabs + text/html, "No data found!" for a bill without transactions, bracketed error codes, `{CategoryName}`.
+ * A fake written from the docs passed bugs that were live in production twice in one day; keep this one honest.
+ */
+import { createHash } from 'node:crypto';
+import { createServer } from 'node:http';
+import { flip } from './types.js';
+/**
+ * Fields getBillTransactions empties without the bill owner's userSecretKey. Measured on the sandbox 27 Oct 2026: the
+ * payer fields only. The API reference (23 Oct) also lists split, settlement and fee fields; the sandbox kept those.
+ */
+const OWNER_ONLY = ['billTo', 'billEmail', 'billPhone'];
+export async function startFakeToyyibPay(opts) {
+    let n = 0;
+    const bills = new Map();
+    const requests = [];
+    const server = createServer((req, res) => {
+        let body = '';
+        req.on('data', (d) => {
+            body += d;
+        });
+        req.on('end', () => {
+            const fields = Object.fromEntries(new URLSearchParams(body));
+            const path = (req.url ?? '').replace('/index.php/api/', '');
+            requests.push({ path, fields, contentType: req.headers['content-type'] });
+            const text = (t) => {
+                res.writeHead(200, { 'content-type': 'text/html; charset=UTF-8' });
+                res.end(`\t\t\t\t${t}`);
+            };
+            const json = (o) => text(JSON.stringify(o));
+            if (path === 'createBill') {
+                if (fields.userSecretKey !== opts.secretKey)
+                    return text('[KEY-DID-NOT-EXIST-OR-USER-IS-NOT-ACTIVE]');
+                if (fields.categoryCode !== opts.categoryCode)
+                    return text('[CATEGORY-NOT-MATCH]');
+                if (fields.billPayorInfo === '1' && !fields.billEmail) {
+                    return json({ status: 'error', msg: 'billEmail parameter is empty' });
+                }
+                // Message measured; envelope assumed to match the billEmail error above.
+                if (Number(fields.billAmount) < 100)
+                    return json({ status: 'error', msg: 'billAmount should more than RM1.00' });
+                const code = `fk${++n}tp`;
+                bills.set(code, { fields, txs: [], inactive: false });
+                return json([{ BillCode: code }]);
+            }
+            if (path === 'getBillTransactions') {
+                // Measured on the sandbox 27 Oct 2026 (one paid bill, three requests): without userSecretKey the payer fields
+                // come back empty; with a key that is not the owner's the answer is `No data found!`, the same text as a bill
+                // with no transactions.
+                const bill = bills.get(fields.billCode ?? '');
+                if (fields.userSecretKey !== undefined && fields.userSecretKey !== opts.secretKey)
+                    return text('No data found!');
+                if (!bill?.txs.length)
+                    return text('No data found!');
+                if (fields.userSecretKey === opts.secretKey)
+                    return json(bill.txs);
+                return json(bill.txs.map((t) => ({ ...t, ...Object.fromEntries(OWNER_ONLY.map((k) => [k, ''])) })));
+            }
+            if (path === 'inactiveBill') {
+                const bill = bills.get(fields.billCode ?? '');
+                if (fields.secretKey !== opts.secretKey || !bill)
+                    return json({ status: 'error', result: 'Invalid Secret Key!' });
+                if (bill.inactive)
+                    return json({ status: 'failed', result: 'Bill is inactive' });
+                bill.inactive = true;
+                return json({ status: 'success', result: 'Bill status changed to inactive' });
+            }
+            if (path === 'getCategoryDetails') {
+                if (fields.userSecretKey === opts.secretKey && fields.categoryCode === opts.categoryCode) {
+                    return json({ CategoryName: 'Fake category', categoryDescription: 'x', categoryStatus: '1' });
+                }
+                return text('');
+            }
+            res.writeHead(404);
+            res.end();
+        });
+    });
+    await new Promise((r) => server.listen(0, '127.0.0.1', r));
+    const url = `http://127.0.0.1:${server.address().port}`;
+    const bill = (code) => {
+        const b = bills.get(code);
+        if (!b)
+            throw new Error(`fake toyyibPay: no bill ${code}`);
+        return b;
+    };
+    return {
+        url,
+        requests,
+        markPaid(code) {
+            const b = bill(code);
+            // Shape of a real test-bank payment: the docs sample plus transactionCharge/chargeOn (measured).
+            b.txs.push({
+                billName: b.fields.billName ?? '',
+                billStatus: '0',
+                billpaymentStatus: '1',
+                billpaymentChannel: 'FPX',
+                billpaymentAmount: (Number(b.fields.billAmount) / 100).toFixed(2),
+                billpaymentInvoiceNo: `TP${Date.now()}${b.txs.length}`,
+                billPaymentDate: '10-10-2026 10:50:07',
+                billExternalReferenceNo: b.fields.billExternalReferenceNo ?? '',
+                transactionCharge: '1.00',
+                chargeOn: 'Amount',
+            });
+        },
+        callbackFor(code, override = {}) {
+            const b = bill(code);
+            const fields = {
+                refno: `TP${code}`,
+                status: '1',
+                reason: 'Approved',
+                billcode: code,
+                order_id: b.fields.billExternalReferenceNo ?? '',
+                amount: (Number(b.fields.billAmount) / 100).toFixed(2),
+                status_id: '1',
+                msg: 'ok',
+                transaction_id: `TP${code}`,
+                ...override,
+            };
+            const hash = createHash('md5')
+                .update(`${opts.secretKey}${fields.status}${fields.order_id}${fields.refno}ok`)
+                .digest('hex');
+            // Measured: toyyibPay posts this as multipart/form-data; the signature is the `hash` field.
+            return { fields: { ...fields, hash: override.hash ?? hash }, rawBody: '', headers: {} };
+        },
+        tamper: (cb) => ({ ...cb, fields: { ...cb.fields, hash: flip(cb.fields.hash ?? '') } }),
+        close: () => new Promise((r) => server.close(() => r())),
+    };
+}
+//# sourceMappingURL=toyyibpay.js.map

package/dist/fakes/toyyibpay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"toyyibpay.js","sourceRoot":"","sources":["../../src/fakes/toyyibpay.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAA;AAEnF,OAAO,EAAoB,IAAI,EAAE,MAAM,YAAY,CAAA;AAEnD;;;GAGG;AACH,MAAM,UAAU,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;AAOvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAGxC;IACC,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,MAAM,KAAK,GAAG,IAAI,GAAG,EAGlB,CAAA;IACH,MAAM,QAAQ,GAA8B,EAAE,CAAA;IAE9C,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,IAAI,IAAI,GAAG,EAAE,CAAA;QACb,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE;YACnB,IAAI,IAAI,CAAC,CAAA;QACX,CAAC,CAAC,CAAA;QACF,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAA;YAC5D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAA;YAC3D,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAA;YACzE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE;gBACzB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAA;gBAClE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC,CAAA;YACzB,CAAC,CAAA;YACD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAA;YAEpD,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;gBAC1B,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS;oBAAE,OAAO,IAAI,CAAC,2CAA2C,CAAC,CAAA;gBACrG,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY;oBAAE,OAAO,IAAI,CAAC,sBAAsB,CAAC,CAAA;gBAClF,IAAI,MAAM,CAAC,aAAa,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC;oBACtD,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,8BAA8B,EAAE,CAAC,CAAA;gBACvE,CAAC;gBACD,yEAAyE;gBACzE,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG;oBACjC,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,oCAAoC,EAAE,CAAC,CAAA;gBAC7E,MAAM,IAAI,GAAG,KAAK,EAAE,CAAC,IAAI,CAAA;gBACzB,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAA;gBACrD,OAAO,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAA;YACnC,CAAC;YACD,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;gBACnC,8GAA8G;gBAC9G,8GAA8G;gBAC9G,wBAAwB;gBACxB,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;gBAC7C,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS;oBAC/E,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAA;gBAC/B,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAA;gBACpD,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS;oBAAE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;gBAClE,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YACrG,CAAC;YACD,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;gBAC5B,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;gBAC7C,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI;oBAC9C,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC,CAAA;gBACjE,IAAI,IAAI,CAAC,QAAQ;oBAAE,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC,CAAA;gBAChF,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAA;gBACpB,OAAO,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,iCAAiC,EAAE,CAAC,CAAA;YAC/E,CAAC;YACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAClC,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;oBACzF,OAAO,IAAI,CAAC,EAAE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAA;gBAC/F,CAAC;gBACD,OAAO,IAAI,CAAC,EAAE,CAAC,CAAA;YACjB,CAAC;YACD,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;YAClB,GAAG,CAAC,GAAG,EAAE,CAAA;QACX,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IACF,MAAM,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,CAAA;IAChE,MAAM,GAAG,GAAG,oBAAqB,MAAM,CAAC,OAAO,EAAkB,CAAC,IAAI,EAAE,CAAA;IAExE,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE;QAC5B,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;QACzB,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,IAAI,EAAE,CAAC,CAAA;QAC1D,OAAO,CAAC,CAAA;IACV,CAAC,CAAA;IAED,OAAO;QACL,GAAG;QACH,QAAQ;QACR,QAAQ,CAAC,IAAI;YACX,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;YACpB,iGAAiG;YACjG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;gBACT,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE;gBACjC,UAAU,EAAE,GAAG;gBACf,iBAAiB,EAAE,GAAG;gBACtB,kBAAkB,EAAE,KAAK;gBACzB,iBAAiB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACjE,oBAAoB,EAAE,KAAK,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE;gBACtD,eAAe,EAAE,qBAAqB;gBACtC,uBAAuB,EAAE,CAAC,CAAC,MAAM,CAAC,uBAAuB,IAAI,EAAE;gBAC/D,iBAAiB,EAAE,MAAM;gBACzB,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAA;QACJ,CAAC;QACD,WAAW,CAAC,IAAI,EAAE,QAAQ,GAAG,EAAE;YAC7B,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAA;YACpB,MAAM,MAAM,GAA2B;gBACrC,KAAK,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,EAAE,GAAG;gBACX,MAAM,EAAE,UAAU;gBAClB,QAAQ,EAAE,IAAI;gBACd,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,uBAAuB,IAAI,EAAE;gBAChD,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;gBACtD,SAAS,EAAE,GAAG;gBACd,GAAG,EAAE,IAAI;gBACT,cAAc,EAAE,KAAK,IAAI,EAAE;gBAC3B,GAAG,QAAQ;aACZ,CAAA;YACD,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC;iBAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,KAAK,IAAI,CAAC;iBAC9E,MAAM,CAAC,KAAK,CAAC,CAAA;YAChB,4FAA4F;YAC5F,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAA;QACzF,CAAC;QACD,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC;QACvF,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;KAC/D,CAAA;AACH,CAAC"}

package/dist/fakes/types.d.ts

@@ -0,0 +1,19 @@
+import type { CallbackInput } from '@bayarkit/core';
+/** What every fake gateway lets a test do, so one conformance suite can drive any adapter. */
+export interface FakeGateway {
+    /** Base URL to pass as the adapter's `baseUrl`. */
+    url: string;
+    /** Record a successful payment for the payment created with this id. */
+    markPaid(id: string): void;
+    /**
+     * The callback exactly as the gateway would deliver it for this payment, correctly signed. It claims success even
+     * before `markPaid` (a replayed or forged-with-a-leaked-key callback); `override` changes fields BEFORE signing.
+     */
+    callbackFor(id: string, override?: Record<string, string>): CallbackInput;
+    /** The same callback with its signature altered (wherever this gateway keeps it: a field or a header). */
+    tamper(callback: CallbackInput): CallbackInput;
+    close(): Promise<void>;
+}
+/** Flip the first character of a hex/base64 signature. */
+export declare const flip: (s: string) => string;
+//# sourceMappingURL=types.d.ts.map

package/dist/fakes/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/fakes/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEnD,8FAA8F;AAC9F,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,GAAG,EAAE,MAAM,CAAA;IACX,wEAAwE;IACxE,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B;;;OAGG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,aAAa,CAAA;IACzE,0GAA0G;IAC1G,MAAM,CAAC,QAAQ,EAAE,aAAa,GAAG,aAAa,CAAA;IAC9C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,0DAA0D;AAC1D,eAAO,MAAM,IAAI,MAAO,MAAM,KAAG,MAAyD,CAAA"}

package/dist/fakes/types.js

@@ -0,0 +1,3 @@
+/** Flip the first character of a hex/base64 signature. */
+export const flip = (s) => s.replace(/^./, (c) => (c === 'a' ? 'b' : 'a'));
+//# sourceMappingURL=types.js.map

package/dist/fakes/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/fakes/types.ts"],"names":[],"mappings":"AAkBA,0DAA0D;AAC1D,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAA"}

package/dist/fakes/xendit.d.ts

@@ -0,0 +1,36 @@
+import { type FakeGateway } from './types.js';
+export declare const XENDIT_API_VERSION = "2024-11-11";
+type Session = Record<string, unknown> & {
+    payment_session_id: string;
+    status: string;
+};
+type PaymentRequest = Record<string, unknown> & {
+    payment_request_id: string;
+    status: string;
+};
+export interface FakeXendit extends FakeGateway {
+    requests: {
+        method: string;
+        path: string;
+        body: Record<string, unknown> | null;
+        headers: Record<string, string | string[] | undefined>;
+    }[];
+    /** The fake's own record of a session (what `GET /sessions/{id}` answers). */
+    session(id: string): Session | undefined;
+    /** The fake's own record of a payment request (what `GET /v3/payment_requests/{id}` answers). */
+    paymentRequest(id: string): PaymentRequest | undefined;
+    /** Move an ACTIVE session to `EXPIRED` (what Xendit does when `expires_at` passes). */
+    expire(id: string): void;
+    /**
+     * A `payment.capture` webhook for this session's payment, claiming `SUCCEEDED` even before `markPaid` (then the
+     * fake's payment request stays `REQUIRES_ACTION`). `override` changes fields of `data`; the key `event` changes the
+     * event name instead.
+     */
+    paymentCallbackFor(sessionId: string, override?: Record<string, unknown>): ReturnType<FakeGateway['callbackFor']>;
+}
+export declare function startFakeXendit(opts: {
+    secretKey: string;
+    callbackToken: string;
+}): Promise<FakeXendit>;
+export {};
+//# sourceMappingURL=xendit.d.ts.map

package/dist/fakes/xendit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xendit.d.ts","sourceRoot":"","sources":["../../src/fakes/xendit.ts"],"names":[],"mappings":"AA8BA,OAAO,EAAE,KAAK,WAAW,EAAQ,MAAM,YAAY,CAAA;AAEnD,eAAO,MAAM,kBAAkB,eAAe,CAAA;AAE9C,KAAK,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AACvF,KAAK,cAAc,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IAAE,kBAAkB,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9F,MAAM,WAAW,UAAW,SAAQ,WAAW;IAC7C,QAAQ,EAAE;QACR,MAAM,EAAE,MAAM,CAAA;QACd,IAAI,EAAE,MAAM,CAAA;QACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;QACpC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,CAAA;KACvD,EAAE,CAAA;IACH,8EAA8E;IAC9E,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,GAAG,SAAS,CAAA;IACxC,iGAAiG;IACjG,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAA;IACtD,uFAAuF;IACvF,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB;;;;OAIG;IACH,kBAAkB,CAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GACjC,UAAU,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAA;CAC1C;AAKD,wBAAsB,eAAe,CAAC,IAAI,EAAE;IAC1C,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;CACtB,GAAG,OAAO,CAAC,UAAU,CAAC,CAwQtB"}