@cogenta/commerce 0.2.0 → 0.4.3

package/dist/payment/paypal.js

@@ -0,0 +1,583 @@
+import { createVerify } from 'node:crypto';
+import { crc32 } from 'node:zlib';
+import { CogentaError } from '@cogenta/core';
+import { minorUnitExponent } from '../money.js';
+/**
+ * A second real payment driver, proving the same registered-interface
+ * extensibility as `@cogenta/core`'s cache/queue/storage drivers: a shop is
+ * not stuck choosing between Stripe and bank transfer — a third gateway
+ * plugs into the exact same `PaymentDriver` interface (`start`/`fetch`/
+ * `refund`/`verifyEvent`), registers itself once (`registry.ts`), and the
+ * admin payment screen lists it without any change on its side.
+ *
+ * Written against PayPal's REST API (Orders v2 + Payments v2) with `fetch`,
+ * the same choice `stripe.ts` made and for the same reason (R9): the `paypal-
+ * server-sdk` package pulls a full generated client for four calls this
+ * driver makes.
+ *
+ * Two real differences from Stripe shape this file:
+ *
+ * - PayPal has no long-lived secret key. It authenticates with an OAuth2
+ *   client-credentials exchange (`clientId`/`clientSecret` → a bearer token
+ *   that expires), so this driver caches and refreshes a token rather than
+ *   sending one credential on every call.
+ * - There is no single verb that both starts and settles a payment. An order
+ *   is *created*, the shopper *approves* it on PayPal's site, and someone
+ *   must *capture* it before money moves. This interface has no capture verb
+ *   of its own, so `fetch()` — the same call the order store already makes to
+ *   poll a payment after a shopper returns from a redirect — captures an
+ *   approved order the moment it sees one. A second `fetch()` (or the
+ *   confirming webhook) sees `COMPLETED` and does nothing further, because
+ *   PayPal itself refuses a second capture on an already-captured order.
+ */
+/**
+ * PayPal's live REST hostname. Unlike Stripe, sandbox and live are different
+ * hosts (`api-m.sandbox.paypal.com` vs `api-m.paypal.com`) rather than a
+ * prefix on the credential, so — exactly like the local HTTP stub `stripe.ts`
+ * tests point `apiBaseUrl` at — a site testing against PayPal's sandbox sets
+ * `payment.apiBaseUrl` explicitly. This default is the production host only.
+ */
+const DEFAULT_API_BASE_URL = 'https://api-m.paypal.com';
+/** No official window is documented; this matches Stripe's, a defensible middle ground against replay. */
+const SIGNATURE_FRESHNESS_WINDOW_SECONDS = 5 * 60;
+const REQUEST_TIMEOUT_MS = 20_000;
+const AVAILABILITY_TIMEOUT_MS = 3_000;
+/** A cached OAuth2 token is refreshed this long before it actually expires. */
+const TOKEN_REFRESH_SKEW_MS = 30_000;
+/**
+ * `GET /v2/checkout/orders/{id}` statuses, mapped onto this project's six.
+ * `APPROVED` is deliberately absent: `fetch()` never returns it verbatim, it
+ * always attempts a capture first and maps what capture produces instead —
+ * see the file comment.
+ */
+const ORDER_STATUS_MAP = {
+    CREATED: 'pending',
+    SAVED: 'pending',
+    PAYER_ACTION_REQUIRED: 'pending',
+    VOIDED: 'cancelled',
+    COMPLETED: 'paid',
+};
+/** `POST /v2/payments/captures/{id}/refund` statuses, mapped onto the three a `DriverRefundResult` carries. */
+const REFUND_STATUS_MAP = {
+    COMPLETED: 'refunded',
+    PENDING: 'pending',
+    CANCELLED: 'failed',
+    FAILED: 'failed',
+};
+/**
+ * The inbound webhook events this driver understands — every one a statement
+ * about a *capture*, PayPal's event vocabulary for money actually moving.
+ * `CHECKOUT.ORDER.APPROVED` is not here on purpose: approval is not payment,
+ * and mapping it to anything would be exactly the guess Stripe's driver
+ * refuses to make for an unrecognised intent status.
+ */
+const EVENT_TYPE_STATUS = {
+    'PAYMENT.CAPTURE.COMPLETED': 'paid',
+    'PAYMENT.CAPTURE.DENIED': 'failed',
+    'PAYMENT.CAPTURE.REFUNDED': 'refunded',
+    'PAYMENT.CAPTURE.REVERSED': 'refunded',
+};
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : null;
+}
+function asArray(value) {
+    return Array.isArray(value) ? value : null;
+}
+function readString(source, key) {
+    const value = source?.[key];
+    return typeof value === 'string' && value !== '' ? value : null;
+}
+function readPath(source, ...path) {
+    let current = source;
+    for (const key of path.slice(0, -1)) {
+        current = asRecord(current?.[key]);
+    }
+    const last = path[path.length - 1];
+    return last === undefined ? null : readString(current, last);
+}
+function safeJsonParse(text) {
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        return null;
+    }
+}
+/** PayPal's amount is a decimal string in major units, unlike this project's integer minor units everywhere else. */
+function toDecimalAmount(amountMinor, currency) {
+    const exponent = minorUnitExponent(currency);
+    return (amountMinor / 10 ** exponent).toFixed(exponent);
+}
+/** The inverse of `toDecimalAmount`. Null for anything that is not a finite decimal, never a guess. */
+function fromDecimalAmount(value, currency) {
+    const parsed = Number(value);
+    if (!Number.isFinite(parsed))
+        return null;
+    const exponent = minorUnitExponent(currency);
+    return Math.round(parsed * 10 ** exponent);
+}
+/** The `rel: "approve"` link is what the shopper is redirected to. Absent once an order has been captured. */
+function approveLink(order) {
+    for (const entry of asArray(order.links) ?? []) {
+        const link = asRecord(entry);
+        if (link !== null && readString(link, 'rel') === 'approve')
+            return readString(link, 'href');
+    }
+    return null;
+}
+/** The capture id under a captured order — needed to refund, since a refund targets a capture, not an order. */
+function findCaptureId(order) {
+    const unit = asArray(order.purchase_units)?.[0];
+    const captures = asArray(asRecord(asRecord(unit)?.payments)?.captures);
+    const capture = asRecord(captures?.[0]);
+    return readString(capture, 'id');
+}
+function paymentFailed(message, hint, details, cause) {
+    return new CogentaError({
+        code: 'COMMERCE_PAYMENT_FAILED',
+        message,
+        hint,
+        details,
+        ...(cause === undefined ? {} : { cause }),
+    });
+}
+function signatureInvalid(reason) {
+    return new CogentaError({
+        code: 'COMMERCE_PAYMENT_SIGNATURE_INVALID',
+        message: `The PayPal webhook signature was refused: ${reason}.`,
+        hint: 'Check that payment.webhookId matches the webhook shown in the PayPal dashboard, that the raw request body is passed unparsed, and that the clock on this server is correct.',
+        details: { reason },
+    });
+}
+/** Header names arrive however the HTTP server spelled them; PayPal's are lower-case with hyphens. */
+function headerValue(headers, name) {
+    for (const [key, value] of Object.entries(headers)) {
+        if (key.toLowerCase() === name)
+            return value;
+    }
+    return undefined;
+}
+/**
+ * Is this certificate URL one this driver should ever fetch and trust?
+ *
+ * A forged `paypal-cert-url` header pointing at an attacker's own server,
+ * paired with a signature made from the attacker's own key, would otherwise
+ * "verify" against a certificate the attacker controls — the classic webhook-
+ * spoofing vector. Trusted origins are: the exact host this driver is already
+ * talking to (what makes a local test stub, serving both the API and a
+ * fixture certificate, workable — the same escape hatch `apiBaseUrl` already
+ * grants Stripe's tests), or any real PayPal host over HTTPS.
+ */
+function isTrustedCertUrl(certUrl, baseUrl) {
+    let cert;
+    let base;
+    try {
+        cert = new URL(certUrl);
+        base = new URL(baseUrl);
+    }
+    catch {
+        return false;
+    }
+    if (cert.origin === base.origin)
+        return true;
+    return (cert.protocol === 'https:' &&
+        (cert.hostname === 'paypal.com' || cert.hostname.endsWith('.paypal.com')));
+}
+function createPayPalGateway(clientId, clientSecret, baseUrl, webhookId, options) {
+    const now = options.now ?? Date.now;
+    const logger = options.logger;
+    let cachedToken;
+    const certCache = new Map();
+    async function ensureToken() {
+        if (cachedToken !== undefined && cachedToken.expiresAt - TOKEN_REFRESH_SKEW_MS > now()) {
+            return cachedToken.token;
+        }
+        const basic = Buffer.from(`${clientId}:${clientSecret}`, 'utf8').toString('base64');
+        let response;
+        try {
+            response = await fetch(`${baseUrl}/v1/oauth2/token`, {
+                method: 'POST',
+                headers: {
+                    authorization: `Basic ${basic}`,
+                    'content-type': 'application/x-www-form-urlencoded',
+                },
+                body: 'grant_type=client_credentials',
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+        }
+        catch (error) {
+            throw paymentFailed('PayPal could not be reached to obtain an access token.', 'Check outbound network access from this server, and whether PayPal is reporting an incident.', {}, error);
+        }
+        const text = await response.text();
+        const body = asRecord(text === '' ? null : safeJsonParse(text));
+        if (!response.ok) {
+            throw paymentFailed(`PayPal refused the OAuth2 token request with HTTP ${response.status}.`, 'Check that payment.clientId and payment.clientSecret are a valid PayPal REST app pair, and that they match this apiBaseUrl (sandbox credentials do not work against the live host, and vice versa).', { status: response.status });
+        }
+        const token = readString(body, 'access_token');
+        if (token === null) {
+            throw paymentFailed('PayPal answered the token request without an access_token.', 'Retry; if it recurs, check the PayPal REST app configuration.', { received: body === null ? [] : Object.keys(body) });
+        }
+        const expiresIn = typeof body?.expires_in === 'number' ? body.expires_in : 300;
+        cachedToken = { token, expiresAt: now() + expiresIn * 1000 };
+        return token;
+    }
+    async function call(path, init) {
+        const token = await ensureToken();
+        let response;
+        try {
+            response = await fetch(`${baseUrl}${path}`, {
+                method: init.method,
+                headers: {
+                    authorization: `Bearer ${token}`,
+                    ...(init.json === undefined ? {} : { 'content-type': 'application/json' }),
+                },
+                ...(init.json === undefined ? {} : { body: JSON.stringify(init.json) }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+            });
+        }
+        catch (error) {
+            throw paymentFailed(`PayPal could not be reached for ${init.method} ${path}.`, 'Check outbound network access from this server, and whether PayPal is reporting an incident.', { path, method: init.method }, error);
+        }
+        const text = await response.text();
+        const parsed = text === '' ? null : safeJsonParse(text);
+        const body = asRecord(parsed);
+        if (!response.ok) {
+            const issue = readString(asRecord(asArray(body?.details)?.[0]), 'issue');
+            throw paymentFailed(`PayPal refused ${init.method} ${path} with HTTP ${response.status}: ${readString(body, 'message') ?? 'no reason given'}`, 'Check the amount, the currency and the order state in the PayPal dashboard; a 401 means the access token expired or the app credentials are wrong.', {
+                path,
+                method: init.method,
+                status: response.status,
+                // PayPal's own identifiers for the failure. Never the credentials.
+                paypalName: readString(body, 'name'),
+                paypalIssue: issue,
+            });
+        }
+        if (body === null) {
+            throw paymentFailed(`PayPal answered ${init.method} ${path} with something that is not a JSON object.`, 'This is usually a proxy or a captive portal answering instead of PayPal; check payment.apiBaseUrl and the outbound route.', { path, method: init.method, status: response.status });
+        }
+        return body;
+    }
+    function mapOrderStatus(status, externalId) {
+        const mapped = status === null ? undefined : ORDER_STATUS_MAP[status];
+        if (mapped !== undefined)
+            return mapped;
+        logger?.warn('PayPal reported an order status this driver does not know.', {
+            driver: 'paypal',
+            paypalStatus: status,
+            externalId,
+            mappedTo: 'failed',
+        });
+        return 'failed';
+    }
+    function toStartedPayment(order, knownId) {
+        const externalId = readString(order, 'id') ?? knownId ?? null;
+        if (externalId === null) {
+            throw paymentFailed('PayPal returned an order without an id.', 'Retry the payment; if it recurs, check the PayPal API version configured on the account.', { received: Object.keys(order) });
+        }
+        return {
+            externalId,
+            status: mapOrderStatus(readString(order, 'status'), externalId),
+            instructions: approveLink(order),
+        };
+    }
+    /**
+     * Captures an approved order, tolerating the one race this interface
+     * exposes: two concurrent `fetch()` calls (a shopper's browser polling
+     * while a webhook also arrives) can both see `APPROVED` and both attempt a
+     * capture. PayPal accepts the first and refuses the second with
+     * `ORDER_ALREADY_CAPTURED` — refused, not failed, so the true status is
+     * read back with a plain `GET` instead of surfacing that refusal to the
+     * order store.
+     */
+    async function captureOrRefetch(externalId) {
+        try {
+            return await call(`/v2/checkout/orders/${encodeURIComponent(externalId)}/capture`, {
+                method: 'POST',
+            });
+        }
+        catch (error) {
+            const issue = error instanceof CogentaError && typeof error.details?.paypalIssue === 'string'
+                ? error.details.paypalIssue
+                : null;
+            if (issue !== 'ORDER_ALREADY_CAPTURED')
+                throw error;
+            return call(`/v2/checkout/orders/${encodeURIComponent(externalId)}`, { method: 'GET' });
+        }
+    }
+    async function loadCert(certUrl) {
+        const cached = certCache.get(certUrl);
+        if (cached !== undefined)
+            return cached;
+        let response;
+        try {
+            response = await fetch(certUrl, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
+        }
+        catch {
+            throw signatureInvalid(`the certificate at "${certUrl}" could not be fetched`);
+        }
+        if (!response.ok) {
+            throw signatureInvalid(`the certificate endpoint answered HTTP ${response.status}`);
+        }
+        const pem = await response.text();
+        certCache.set(certUrl, pem);
+        return pem;
+    }
+    return {
+        name: 'paypal',
+        settlesOffline: false,
+        start: async (request) => {
+            const order = await call('/v2/checkout/orders', {
+                method: 'POST',
+                json: {
+                    intent: 'CAPTURE',
+                    purchase_units: [
+                        {
+                            reference_id: request.orderReference,
+                            ...(request.description === undefined ? {} : { description: request.description }),
+                            amount: {
+                                currency_code: request.currency.toUpperCase(),
+                                value: toDecimalAmount(request.amountMinor, request.currency),
+                            },
+                        },
+                    ],
+                    ...(request.returnUrl === undefined
+                        ? {}
+                        : {
+                            application_context: {
+                                return_url: request.returnUrl,
+                                cancel_url: request.returnUrl,
+                                user_action: 'PAY_NOW',
+                            },
+                        }),
+                },
+            });
+            return toStartedPayment(order);
+        },
+        /**
+         * Re-reads the order, and — see the file comment — captures it first if
+         * the shopper has approved it but nobody has taken the money yet. This is
+         * the one call in the interface that both starts a network request and
+         * ends up moving funds, which is unusual for a `fetch`; it is unusual
+         * because PayPal's checkout has no other verb this narrow interface could
+         * call it from.
+         */
+        fetch: async (externalId) => {
+            const order = await call(`/v2/checkout/orders/${encodeURIComponent(externalId)}`, {
+                method: 'GET',
+            });
+            if (readString(order, 'status') !== 'APPROVED')
+                return toStartedPayment(order, externalId);
+            return toStartedPayment(await captureOrRefetch(externalId), externalId);
+        },
+        refund: async (request) => {
+            // `externalId` is the order id this driver stores throughout a
+            // payment's life (see the file comment); a refund targets the capture
+            // underneath it, which only exists once the order has settled.
+            const order = await call(`/v2/checkout/orders/${encodeURIComponent(request.externalId)}`, {
+                method: 'GET',
+            });
+            const captureId = findCaptureId(order);
+            if (captureId === null) {
+                throw paymentFailed(`PayPal order ${request.externalId} has not been captured yet, so there is nothing to refund.`, 'A payment can only be refunded once it has settled.', { externalId: request.externalId });
+            }
+            const refund = await call(`/v2/payments/captures/${encodeURIComponent(captureId)}/refund`, {
+                method: 'POST',
+                json: {
+                    amount: {
+                        currency_code: request.currency.toUpperCase(),
+                        value: toDecimalAmount(request.amountMinor, request.currency),
+                    },
+                    ...(request.reason === undefined ? {} : { note_to_payer: request.reason }),
+                },
+            });
+            const status = readString(refund, 'status');
+            const mapped = status === null ? undefined : REFUND_STATUS_MAP[status];
+            if (mapped === undefined) {
+                logger?.warn('PayPal reported a refund status this driver does not know.', {
+                    driver: 'paypal',
+                    paypalStatus: status,
+                    captureId,
+                    mappedTo: 'failed',
+                });
+            }
+            return { externalId: readString(refund, 'id'), status: mapped ?? 'failed' };
+        },
+        verifyEvent: async (payload, headers) => {
+            if (webhookId === undefined || webhookId === '') {
+                throw signatureInvalid('no webhook id is configured for this site');
+            }
+            const transmissionId = headerValue(headers, 'paypal-transmission-id');
+            const transmissionTime = headerValue(headers, 'paypal-transmission-time');
+            const certUrl = headerValue(headers, 'paypal-cert-url');
+            const authAlgo = headerValue(headers, 'paypal-auth-algo');
+            const signature = headerValue(headers, 'paypal-transmission-sig');
+            if (transmissionId === undefined || transmissionId === '') {
+                throw signatureInvalid('no paypal-transmission-id header');
+            }
+            if (transmissionTime === undefined || transmissionTime === '') {
+                throw signatureInvalid('no paypal-transmission-time header');
+            }
+            if (certUrl === undefined || certUrl === '')
+                throw signatureInvalid('no paypal-cert-url header');
+            if (signature === undefined || signature === '') {
+                throw signatureInvalid('no paypal-transmission-sig header');
+            }
+            const transmittedAtMs = Date.parse(transmissionTime);
+            if (Number.isNaN(transmittedAtMs)) {
+                throw signatureInvalid('the paypal-transmission-time header carried no usable timestamp');
+            }
+            // Freshness before authenticity, same reasoning as Stripe's driver: a
+            // captured, genuinely-signed delivery stays genuinely signed forever, so
+            // the window is what stops a replay.
+            const ageSeconds = Math.abs(Math.floor(now() / 1000) - Math.floor(transmittedAtMs / 1000));
+            if (ageSeconds > SIGNATURE_FRESHNESS_WINDOW_SECONDS) {
+                throw signatureInvalid(`the transmission timestamp is ${ageSeconds}s away from now, outside the ${SIGNATURE_FRESHNESS_WINDOW_SECONDS}s window`);
+            }
+            if (!isTrustedCertUrl(certUrl, baseUrl)) {
+                throw signatureInvalid(`the certificate url "${certUrl}" is not a trusted PayPal host`);
+            }
+            const algorithm = authAlgo === undefined || authAlgo.toUpperCase() === 'SHA256WITHRSA' ? 'RSA-SHA256' : null;
+            if (algorithm === null)
+                throw signatureInvalid(`unsupported signing algorithm "${authAlgo}"`);
+            const cert = await loadCert(certUrl);
+            // PayPal's own documented scheme: the CRC32 of the raw body, as the
+            // unsigned decimal integer (never hex) it defines the string as.
+            const crc = (crc32(payload) >>> 0).toString(10);
+            const expectedMessage = `${transmissionId}|${transmissionTime}|${webhookId}|${crc}`;
+            let verified;
+            try {
+                verified = createVerify(algorithm).update(expectedMessage).verify(cert, signature, 'base64');
+            }
+            catch {
+                verified = false;
+            }
+            if (!verified)
+                throw signatureInvalid('the signature did not match the transmitted event');
+            const event = asRecord(safeJsonParse(payload));
+            const type = readString(event, 'event_type');
+            const status = type === null ? undefined : EVENT_TYPE_STATUS[type];
+            if (status === undefined) {
+                throw new CogentaError({
+                    code: 'COMMERCE_PAYMENT_UNSUPPORTED',
+                    message: `This driver has no reading for the PayPal event "${type ?? 'unknown'}".`,
+                    hint: `Narrow the webhook in the PayPal dashboard to ${Object.keys(EVENT_TYPE_STATUS).join(', ')}.`,
+                    details: { eventType: type },
+                });
+            }
+            const resource = asRecord(event?.resource);
+            // A capture event's `resource` is the Capture, not the Order — the
+            // order id this driver stores as `externalId` throughout a payment's
+            // life lives one level down, in `supplementary_data.related_ids`.
+            const orderId = readPath(resource, 'supplementary_data', 'related_ids', 'order_id');
+            if (orderId === null) {
+                throw paymentFailed(`The PayPal event "${type}" carried no order identifier.`, 'Check that the webhook is subscribed to capture events, which carry supplementary_data.related_ids.order_id.', { eventType: type });
+            }
+            const amount = asRecord(resource?.amount);
+            const currency = readString(amount, 'currency_code');
+            const rawAmount = readString(amount, 'value');
+            const amountMinor = currency === null || rawAmount === null ? null : fromDecimalAmount(rawAmount, currency);
+            return {
+                externalId: orderId,
+                // Unlike Stripe's payment intents, a capture webhook carries no
+                // reference back to `purchase_units[].reference_id` — only the order
+                // itself does. Honest null rather than a guess (same discipline as
+                // an unrecognised status mapping to `failed` above, not to `paid`).
+                orderReference: null,
+                status,
+                amountMinor,
+                currency: currency === null ? null : currency.toUpperCase(),
+            };
+        },
+    };
+}
+function hasCredentials(config) {
+    return (config.clientId !== undefined &&
+        config.clientId !== '' &&
+        config.clientSecret !== undefined &&
+        config.clientSecret !== '');
+}
+export function paypalPaymentDriver(options = {}) {
+    let gateway;
+    let probe;
+    const resolveBaseUrl = (config) => (config.apiBaseUrl ?? DEFAULT_API_BASE_URL).replace(/\/+$/, '');
+    async function probeToken(clientId, clientSecret, baseUrl) {
+        try {
+            const response = await fetch(`${baseUrl}/v1/oauth2/token`, {
+                method: 'POST',
+                headers: {
+                    authorization: `Basic ${Buffer.from(`${clientId}:${clientSecret}`, 'utf8').toString('base64')}`,
+                    'content-type': 'application/x-www-form-urlencoded',
+                },
+                body: 'grant_type=client_credentials',
+                signal: AbortSignal.timeout(AVAILABILITY_TIMEOUT_MS),
+            });
+            // The body is drained so the socket is released rather than left open
+            // for the timeout to reap.
+            await response.text();
+            return response.ok;
+        }
+        catch {
+            return false;
+        }
+    }
+    return {
+        name: 'paypal',
+        tier: 'optimal',
+        /**
+         * Does PayPal actually issue a token for this client id/secret pair? Not
+         * "are both fields set?" — same discipline as Stripe's `available()`, and
+         * for the same reason: the registry reads a `false` as "fall through",
+         * so this must never throw and never hang a startup.
+         */
+        available: async (config) => {
+            if (!hasCredentials(config))
+                return false;
+            return probeToken(config.clientId, config.clientSecret, resolveBaseUrl(config));
+        },
+        init: async (config) => {
+            if (!hasCredentials(config)) {
+                throw new CogentaError({
+                    code: 'CONFIG_INVALID',
+                    message: 'The PayPal payment driver needs a client id and a client secret.',
+                    hint: 'Set payment.clientId and payment.clientSecret (or the COGENTA_PAYMENT_PAYPAL_CLIENT_ID / COGENTA_PAYMENT_PAYPAL_CLIENT_SECRET environment variables), or leave payment.driver unset to be paid by bank transfer.',
+                });
+            }
+            const baseUrl = resolveBaseUrl(config);
+            probe = { clientId: config.clientId, clientSecret: config.clientSecret, baseUrl };
+            gateway ??= createPayPalGateway(config.clientId, config.clientSecret, baseUrl, config.webhookId, options);
+            return gateway;
+        },
+        dispose: async () => {
+            // Nothing to close: every call is a one-shot `fetch`; the cached OAuth2
+            // token dies with the gateway closure.
+            gateway = undefined;
+            probe = undefined;
+        },
+        health: async () => {
+            if (probe === undefined) {
+                return { status: 'down', driver: 'paypal', tier: 'optimal', message: 'Not configured.' };
+            }
+            const startedAt = Date.now();
+            const ok = await probeToken(probe.clientId, probe.clientSecret, probe.baseUrl);
+            return ok
+                ? {
+                    status: 'ok',
+                    driver: 'paypal',
+                    tier: 'optimal',
+                    latencyMs: Date.now() - startedAt,
+                    // The credentials are never named, not even partially.
+                    message: 'PayPal answered.',
+                }
+                : {
+                    status: 'down',
+                    driver: 'paypal',
+                    tier: 'optimal',
+                    latencyMs: Date.now() - startedAt,
+                    message: 'PayPal did not answer the OAuth2 token request.',
+                };
+        },
+    };
+}
+//# sourceMappingURL=paypal.js.map

package/dist/payment/paypal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.js","sourceRoot":"","sources":["../../src/payment/paypal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACjC,OAAO,EAAE,YAAY,EAAkC,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAa/C;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAEH;;;;;;GAMG;AACH,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAEvD,0GAA0G;AAC1G,MAAM,kCAAkC,GAAG,CAAC,GAAG,EAAE,CAAA;AAEjD,MAAM,kBAAkB,GAAG,MAAM,CAAA;AACjC,MAAM,uBAAuB,GAAG,KAAK,CAAA;AAErC,+EAA+E;AAC/E,MAAM,qBAAqB,GAAG,MAAM,CAAA;AAEpC;;;;;GAKG;AACH,MAAM,gBAAgB,GAA4C;IAChE,OAAO,EAAE,SAAS;IAClB,KAAK,EAAE,SAAS;IAChB,qBAAqB,EAAE,SAAS;IAChC,MAAM,EAAE,WAAW;IACnB,SAAS,EAAE,MAAM;CAClB,CAAA;AAED,+GAA+G;AAC/G,MAAM,iBAAiB,GAA2D;IAChF,SAAS,EAAE,UAAU;IACrB,OAAO,EAAE,SAAS;IAClB,SAAS,EAAE,QAAQ;IACnB,MAAM,EAAE,QAAQ;CACjB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,iBAAiB,GAA4C;IACjE,2BAA2B,EAAE,MAAM;IACnC,wBAAwB,EAAE,QAAQ;IAClC,0BAA0B,EAAE,UAAU;IACtC,0BAA0B,EAAE,UAAU;CACvC,CAAA;AAQD,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAE,KAA2C;QAC9C,CAAC,CAAC,IAAI,CAAA;AACV,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5C,CAAC;AAED,SAAS,UAAU,CAAC,MAAgD,EAAE,GAAW;IAC/E,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAA;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;AACjE,CAAC;AAED,SAAS,QAAQ,CACf,MAAgD,EAChD,GAAG,IAAuB;IAE1B,IAAI,OAAO,GAA6C,MAAM,CAAA;IAC9D,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,OAAO,GAAG,QAAQ,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,CAAA;IACpC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAClC,OAAO,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AAC9D,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED,qHAAqH;AACrH,SAAS,eAAe,CAAC,WAAmB,EAAE,QAAgB;IAC5D,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC5C,OAAO,CAAC,WAAW,GAAG,EAAE,IAAI,QAAQ,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAA;AACzD,CAAC;AAED,uGAAuG;AACvG,SAAS,iBAAiB,CAAC,KAAa,EAAE,QAAgB;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAA;IACzC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;IAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,QAAQ,CAAC,CAAA;AAC5C,CAAC;AAED,8GAA8G;AAC9G,SAAS,WAAW,CAAC,KAAwC;IAC3D,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAA;QAC5B,IAAI,IAAI,KAAK,IAAI,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,SAAS;YAAE,OAAO,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IAC7F,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,gHAAgH;AAChH,SAAS,aAAa,CAAC,KAAwC;IAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,EAAE,QAAQ,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IACvC,OAAO,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AAClC,CAAC;AAED,SAAS,aAAa,CACpB,OAAe,EACf,IAAY,EACZ,OAA0C,EAC1C,KAAe;IAEf,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,yBAAyB;QAC/B,OAAO;QACP,IAAI;QACJ,OAAO;QACP,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,OAAO,IAAI,YAAY,CAAC;QACtB,IAAI,EAAE,oCAAoC;QAC1C,OAAO,EAAE,6CAA6C,MAAM,GAAG;QAC/D,IAAI,EAAE,6KAA6K;QACnL,OAAO,EAAE,EAAE,MAAM,EAAE;KACpB,CAAC,CAAA;AACJ,CAAC;AAED,sGAAsG;AACtG,SAAS,WAAW,CAAC,OAAyC,EAAE,IAAY;IAC1E,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;IAC9C,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,OAAe,EAAE,OAAe;IACxD,IAAI,IAAS,CAAA;IACb,IAAI,IAAS,CAAA;IACb,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;QACvB,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAA;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAA;IACd,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAC5C,OAAO,CACL,IAAI,CAAC,QAAQ,KAAK,QAAQ;QAC1B,CAAC,IAAI,CAAC,QAAQ,KAAK,YAAY,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAC1E,CAAA;AACH,CAAC;AAED,SAAS,mBAAmB,CAC1B,QAAgB,EAChB,YAAoB,EACpB,OAAe,EACf,SAA6B,EAC7B,OAA4B;IAE5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAA;IAE7B,IAAI,WAA+E,CAAA;IACnF,MAAM,SAAS,GAAG,IAAI,GAAG,EAAkB,CAAA;IAE3C,KAAK,UAAU,WAAW;QACxB,IAAI,WAAW,KAAK,SAAS,IAAI,WAAW,CAAC,SAAS,GAAG,qBAAqB,GAAG,GAAG,EAAE,EAAE,CAAC;YACvF,OAAO,WAAW,CAAC,KAAK,CAAA;QAC1B,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;QACnF,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,kBAAkB,EAAE;gBACnD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,SAAS,KAAK,EAAE;oBAC/B,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,+BAA+B;gBACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,aAAa,CACjB,wDAAwD,EACxD,8FAA8F,EAC9F,EAAE,EACF,KAAK,CACN,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAA;QAC/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,aAAa,CACjB,qDAAqD,QAAQ,CAAC,MAAM,GAAG,EACvE,qMAAqM,EACrM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAC5B,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;QAC9C,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YACnB,MAAM,aAAa,CACjB,4DAA4D,EAC5D,+DAA+D,EAC/D,EAAE,QAAQ,EAAE,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACrD,CAAA;QACH,CAAC;QAED,MAAM,SAAS,GAAG,OAAO,IAAI,EAAE,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAA;QAC9E,WAAW,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,EAAE,CAAA;QAC5D,OAAO,KAAK,CAAA;IACd,CAAC;IAED,KAAK,UAAU,IAAI,CACjB,IAAY,EACZ,IAAkE;QAElE,MAAM,KAAK,GAAG,MAAM,WAAW,EAAE,CAAA;QACjC,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC1C,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,OAAO,EAAE;oBACP,aAAa,EAAE,UAAU,KAAK,EAAE;oBAChC,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;iBAC3E;gBACD,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;aAChD,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,aAAa,CACjB,mCAAmC,IAAI,CAAC,MAAM,IAAI,IAAI,GAAG,EACzD,8FAA8F,EAC9F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,EAC7B,KAAK,CACN,CAAA;QACH,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,MAAM,GAAY,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAA;QAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;QAE7B,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAA;YACxE,MAAM,aAAa,CACjB,kBAAkB,IAAI,CAAC,MAAM,IAAI,IAAI,cAAc,QAAQ,CAAC,MAAM,KAChE,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,iBACjC,EAAE,EACF,oJAAoJ,EACpJ;gBACE,IAAI;gBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,mEAAmE;gBACnE,UAAU,EAAE,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC;gBACpC,WAAW,EAAE,KAAK;aACnB,CACF,CAAA;QACH,CAAC;QAED,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,MAAM,aAAa,CACjB,mBAAmB,IAAI,CAAC,MAAM,IAAI,IAAI,4CAA4C,EAClF,2HAA2H,EAC3H,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CACvD,CAAA;QACH,CAAC;QAED,OAAO,IAAI,CAAA;IACb,CAAC;IAED,SAAS,cAAc,CAAC,MAAqB,EAAE,UAAyB;QACtE,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAA;QACrE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAEvC,MAAM,EAAE,IAAI,CAAC,4DAA4D,EAAE;YACzE,MAAM,EAAE,QAAQ;YAChB,YAAY,EAAE,MAAM;YACpB,UAAU;YACV,QAAQ,EAAE,QAAQ;SACnB,CAAC,CAAA;QACF,OAAO,QAAQ,CAAA;IACjB,CAAC;IAED,SAAS,gBAAgB,CACvB,KAAwC,EACxC,OAAgB;QAEhB,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,OAAO,IAAI,IAAI,CAAA;QAC7D,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,MAAM,aAAa,CACjB,yCAAyC,EACzC,0FAA0F,EAC1F,EAAE,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACjC,CAAA;QACH,CAAC;QAED,OAAO;YACL,UAAU;YACV,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,UAAU,CAAC;YAC/D,YAAY,EAAE,WAAW,CAAC,KAAK,CAAC;SACjC,CAAA;IACH,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,UAAU,gBAAgB,CAAC,UAAkB;QAChD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,uBAAuB,kBAAkB,CAAC,UAAU,CAAC,UAAU,EAAE;gBACjF,MAAM,EAAE,MAAM;aACf,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,KAAK,GACT,KAAK,YAAY,YAAY,IAAI,OAAO,KAAK,CAAC,OAAO,EAAE,WAAW,KAAK,QAAQ;gBAC7E,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW;gBAC3B,CAAC,CAAC,IAAI,CAAA;YACV,IAAI,KAAK,KAAK,wBAAwB;gBAAE,MAAM,KAAK,CAAA;YACnD,OAAO,IAAI,CAAC,uBAAuB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IAED,KAAK,UAAU,QAAQ,CAAC,OAAe;QACrC,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;QACrC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,CAAA;QAEvC,IAAI,QAAkB,CAAA;QACtB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAA;QACtF,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,gBAAgB,CAAC,uBAAuB,OAAO,wBAAwB,CAAC,CAAA;QAChF,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,gBAAgB,CAAC,0CAA0C,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;QACrF,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QACjC,SAAS,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAA;QAC3B,OAAO,GAAG,CAAA;IACZ,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,cAAc,EAAE,KAAK;QAErB,KAAK,EAAE,KAAK,EAAE,OAA4B,EAA2B,EAAE;YACrE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,qBAAqB,EAAE;gBAC9C,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAS;oBACjB,cAAc,EAAE;wBACd;4BACE,YAAY,EAAE,OAAO,CAAC,cAAc;4BACpC,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC;4BAClF,MAAM,EAAE;gCACN,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE;gCAC7C,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC;6BAC9D;yBACF;qBACF;oBACD,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS;wBACjC,CAAC,CAAC,EAAE;wBACJ,CAAC,CAAC;4BACE,mBAAmB,EAAE;gCACnB,UAAU,EAAE,OAAO,CAAC,SAAS;gCAC7B,UAAU,EAAE,OAAO,CAAC,SAAS;gCAC7B,WAAW,EAAE,SAAS;6BACvB;yBACF,CAAC;iBACP;aACF,CAAC,CAAA;YAEF,OAAO,gBAAgB,CAAC,KAAK,CAAC,CAAA;QAChC,CAAC;QAED;;;;;;;WAOG;QACH,KAAK,EAAE,KAAK,EAAE,UAAkB,EAA2B,EAAE;YAC3D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,kBAAkB,CAAC,UAAU,CAAC,EAAE,EAAE;gBAChF,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YACF,IAAI,UAAU,CAAC,KAAK,EAAE,QAAQ,CAAC,KAAK,UAAU;gBAAE,OAAO,gBAAgB,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;YAE1F,OAAO,gBAAgB,CAAC,MAAM,gBAAgB,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;QACzE,CAAC;QAED,MAAM,EAAE,KAAK,EAAE,OAA4B,EAA+B,EAAE;YAC1E,+DAA+D;YAC/D,sEAAsE;YACtE,+DAA+D;YAC/D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,uBAAuB,kBAAkB,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE;gBACxF,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YACF,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,CAAA;YACtC,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;gBACvB,MAAM,aAAa,CACjB,gBAAgB,OAAO,CAAC,UAAU,4DAA4D,EAC9F,qDAAqD,EACrD,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE,CACnC,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,yBAAyB,kBAAkB,CAAC,SAAS,CAAC,SAAS,EAAE;gBACzF,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE;oBACJ,MAAM,EAAE;wBACN,aAAa,EAAE,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE;wBAC7C,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC;qBAC9D;oBACD,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;iBAC3E;aACF,CAAC,CAAA;YAEF,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAA;YAC3C,MAAM,MAAM,GAAG,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;YACtE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,EAAE,IAAI,CAAC,4DAA4D,EAAE;oBACzE,MAAM,EAAE,QAAQ;oBAChB,YAAY,EAAE,MAAM;oBACpB,SAAS;oBACT,QAAQ,EAAE,QAAQ;iBACnB,CAAC,CAAA;YACJ,CAAC;YAED,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,CAAA;QAC7E,CAAC;QAED,WAAW,EAAE,KAAK,EAChB,OAAe,EACf,OAAyC,EAClB,EAAE;YACzB,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,gBAAgB,CAAC,2CAA2C,CAAC,CAAA;YACrE,CAAC;YAED,MAAM,cAAc,GAAG,WAAW,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAA;YACrE,MAAM,gBAAgB,GAAG,WAAW,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAA;YACzE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAA;YACvD,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,EAAE,kBAAkB,CAAC,CAAA;YACzD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAA;YAEjE,IAAI,cAAc,KAAK,SAAS,IAAI,cAAc,KAAK,EAAE,EAAE,CAAC;gBAC1D,MAAM,gBAAgB,CAAC,kCAAkC,CAAC,CAAA;YAC5D,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,EAAE,EAAE,CAAC;gBAC9D,MAAM,gBAAgB,CAAC,oCAAoC,CAAC,CAAA;YAC9D,CAAC;YACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;gBACzC,MAAM,gBAAgB,CAAC,2BAA2B,CAAC,CAAA;YACrD,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBAChD,MAAM,gBAAgB,CAAC,mCAAmC,CAAC,CAAA;YAC7D,CAAC;YAED,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAA;YACpD,IAAI,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,CAAC;gBAClC,MAAM,gBAAgB,CAAC,iEAAiE,CAAC,CAAA;YAC3F,CAAC;YACD,sEAAsE;YACtE,yEAAyE;YACzE,qCAAqC;YACrC,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,CAAA;YAC1F,IAAI,UAAU,GAAG,kCAAkC,EAAE,CAAC;gBACpD,MAAM,gBAAgB,CACpB,iCAAiC,UAAU,gCAAgC,kCAAkC,UAAU,CACxH,CAAA;YACH,CAAC;YAED,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;gBACxC,MAAM,gBAAgB,CAAC,wBAAwB,OAAO,gCAAgC,CAAC,CAAA;YACzF,CAAC;YAED,MAAM,SAAS,GACb,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAA;YAC5F,IAAI,SAAS,KAAK,IAAI;gBAAE,MAAM,gBAAgB,CAAC,kCAAkC,QAAQ,GAAG,CAAC,CAAA;YAE7F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAA;YACpC,oEAAoE;YACpE,iEAAiE;YACjE,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;YAC/C,MAAM,eAAe,GAAG,GAAG,cAAc,IAAI,gBAAgB,IAAI,SAAS,IAAI,GAAG,EAAE,CAAA;YAEnF,IAAI,QAAiB,CAAA;YACrB,IAAI,CAAC;gBACH,QAAQ,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAA;YAC9F,CAAC;YAAC,MAAM,CAAC;gBACP,QAAQ,GAAG,KAAK,CAAA;YAClB,CAAC;YACD,IAAI,CAAC,QAAQ;gBAAE,MAAM,gBAAgB,CAAC,mDAAmD,CAAC,CAAA;YAE1F,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;YAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,EAAE,YAAY,CAAC,CAAA;YAC5C,MAAM,MAAM,GAAG,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAA;YAElE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,8BAA8B;oBACpC,OAAO,EAAE,oDAAoD,IAAI,IAAI,SAAS,IAAI;oBAClF,IAAI,EAAE,iDAAiD,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;oBACnG,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;iBAC7B,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAA;YAC1C,mEAAmE;YACnE,qEAAqE;YACrE,kEAAkE;YAClE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,EAAE,aAAa,EAAE,UAAU,CAAC,CAAA;YACnF,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,MAAM,aAAa,CACjB,qBAAqB,IAAI,gCAAgC,EACzD,8GAA8G,EAC9G,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAA;YACH,CAAC;YAED,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;YACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;YACpD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;YAC7C,MAAM,WAAW,GACf,QAAQ,KAAK,IAAI,IAAI,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,iBAAiB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAA;YAEzF,OAAO;gBACL,UAAU,EAAE,OAAO;gBACnB,gEAAgE;gBAChE,qEAAqE;gBACrE,mEAAmE;gBACnE,oEAAoE;gBACpE,cAAc,EAAE,IAAI;gBACpB,MAAM;gBACN,WAAW;gBACX,QAAQ,EAAE,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;aAC5D,CAAA;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,MAAqB;IAI3C,OAAO,CACL,MAAM,CAAC,QAAQ,KAAK,SAAS;QAC7B,MAAM,CAAC,QAAQ,KAAK,EAAE;QACtB,MAAM,CAAC,YAAY,KAAK,SAAS;QACjC,MAAM,CAAC,YAAY,KAAK,EAAE,CAC3B,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,OAAO,GAAwB,EAAE;IACnE,IAAI,OAAmC,CAAA;IACvC,IAAI,KAES,CAAA;IAEb,MAAM,cAAc,GAAG,CAAC,MAAqB,EAAU,EAAE,CACvD,CAAC,MAAM,CAAC,UAAU,IAAI,oBAAoB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IAEjE,KAAK,UAAU,UAAU,CACvB,QAAgB,EAChB,YAAoB,EACpB,OAAe;QAEf,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,kBAAkB,EAAE;gBACzD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,aAAa,EAAE,SAAS,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,IAAI,YAAY,EAAE,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;oBAC/F,cAAc,EAAE,mCAAmC;iBACpD;gBACD,IAAI,EAAE,+BAA+B;gBACrC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,uBAAuB,CAAC;aACrD,CAAC,CAAA;YACF,sEAAsE;YACtE,2BAA2B;YAC3B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACrB,OAAO,QAAQ,CAAC,EAAE,CAAA;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,QAAQ;QACd,IAAI,EAAE,SAAS;QAEf;;;;;WAKG;QACH,SAAS,EAAE,KAAK,EAAE,MAAqB,EAAoB,EAAE;YAC3D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC;gBAAE,OAAO,KAAK,CAAA;YACzC,OAAO,UAAU,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,YAAY,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC,CAAA;QACjF,CAAC;QAED,IAAI,EAAE,KAAK,EAAE,MAAqB,EAA2B,EAAE;YAC7D,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC5B,MAAM,IAAI,YAAY,CAAC;oBACrB,IAAI,EAAE,gBAAgB;oBACtB,OAAO,EAAE,kEAAkE;oBAC3E,IAAI,EAAE,kNAAkN;iBACzN,CAAC,CAAA;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,CAAA;YACtC,KAAK,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,CAAA;YACjF,OAAO,KAAK,mBAAmB,CAC7B,MAAM,CAAC,QAAQ,EACf,MAAM,CAAC,YAAY,EACnB,OAAO,EACP,MAAM,CAAC,SAAS,EAChB,OAAO,CACR,CAAA;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,OAAO,EAAE,KAAK,IAAmB,EAAE;YACjC,wEAAwE;YACxE,uCAAuC;YACvC,OAAO,GAAG,SAAS,CAAA;YACnB,KAAK,GAAG,SAAS,CAAA;QACnB,CAAC;QAED,MAAM,EAAE,KAAK,IAA2B,EAAE;YACxC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAA;YAC1F,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;YAC5B,MAAM,EAAE,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;YAC9E,OAAO,EAAE;gBACP,CAAC,CAAC;oBACE,MAAM,EAAE,IAAI;oBACZ,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACjC,uDAAuD;oBACvD,OAAO,EAAE,kBAAkB;iBAC5B;gBACH,CAAC,CAAC;oBACE,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,SAAS;oBACf,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS;oBACjC,OAAO,EAAE,iDAAiD;iBAC3D,CAAA;QACP,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/payment/registry.d.ts

@@ -7,17 +7,26 @@ export interface PaymentRegistryOptions {
  * The payment gateways Cogenta ships.
  *
  * Registered in tier order, exactly like cache, queue, storage and database:
- * Stripe is `optimal` and answers only when a key is configured and the API
- * responds; bank transfer is `degraded` and always answers. So a site with no
- * Stripe account does not fail to start and does not fall over at checkout —
- * it takes bank transfers, which is a real way to be paid, not a placeholder.
+ * Stripe and PayPal are both `optimal` and answer only when real credentials
+ * are configured and the gateway's own API accepts them; bank transfer is
+ * `degraded` and always answers. So a site with no gateway account does not
+ * fail to start and does not fall over at checkout — it takes bank transfers,
+ * which is a real way to be paid, not a placeholder.
+ *
+ * This is also the concrete answer to "what if I want a payment method that
+ * isn't Stripe?": `PaymentGateway` (`types.ts`) is a registered interface,
+ * exactly like cache/queue/storage, and PayPal is a second, independent
+ * implementation of it added without touching Stripe, `manual.ts`, the order
+ * store, or the admin payment screen — that screen already renders whatever
+ * `registry.list()` returns, so a third driver appears there for free.
  *
  * The registry's two rules apply here with more force than anywhere else in
- * the project. If the configuration **names** Stripe, a Stripe outage is fatal
+ * the project. If the configuration **names** a driver, its outage is fatal
  * rather than a silent downgrade: quietly switching a shop that expects card
  * payments over to "please make a transfer" would change what customers are
  * asked to do without anybody deciding to. If the configuration names nothing,
- * the fall-through is the point.
+ * the fall-through is the point — Stripe is tried before PayPal only because
+ * it was registered first, not because of any ranking between the two.
  */
 export declare function createPaymentRegistry(options?: PaymentRegistryOptions): DriverRegistry<PaymentGateway, PaymentConfig>;
 //# sourceMappingURL=registry.d.ts.map

package/dist/payment/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/payment/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,cAAc,EAAE,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AAGtF,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC,CAW/C"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/payment/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,cAAc,EAAE,KAAK,MAAM,EAAE,MAAM,eAAe,CAAA;AAItF,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAE/D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CACzB;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,qBAAqB,CACnC,OAAO,GAAE,sBAA2B,GACnC,cAAc,CAAC,cAAc,EAAE,aAAa,CAAC,CAY/C"}