@commercejs/payment-tap 0.1.0

package/dist/__tests__/tap-provider.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=tap-provider.test.d.ts.map

package/dist/__tests__/tap-provider.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tap-provider.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/tap-provider.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/tap-provider.test.js

@@ -0,0 +1,259 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import { TapPaymentProvider } from '../tap-provider.js';
+// ---------------------------------------------------------------------------
+// Helpers
+// ---------------------------------------------------------------------------
+function makeTapCharge(overrides = {}) {
+    return {
+        id: 'chg_test_abc123',
+        status: 'INITIATED',
+        amount: 99.99,
+        currency: 'SAR',
+        threeDSecure: true,
+        source: { id: 'src_card', type: 'CARD_NOT_PRESENT' },
+        transaction: {
+            url: 'https://tap.company/3ds/abc123',
+            created: '2026-02-09T12:00:00Z',
+        },
+        redirect: { url: 'https://store.com/checkout/confirm' },
+        created: '2026-02-09T12:00:00Z',
+        ...overrides,
+    };
+}
+function mockFetchResponse(data, status = 200) {
+    return vi.fn().mockResolvedValue({
+        ok: status >= 200 && status < 300,
+        status,
+        json: () => Promise.resolve(data),
+        text: () => Promise.resolve(JSON.stringify(data)),
+    });
+}
+// ---------------------------------------------------------------------------
+// Tests
+// ---------------------------------------------------------------------------
+describe('TapPaymentProvider', () => {
+    let provider;
+    beforeEach(() => {
+        provider = new TapPaymentProvider({
+            secretKey: 'sk_test_xxx',
+            webhookSecret: 'whsec_test',
+        });
+    });
+    // ---- Constructor -------------------------------------------------------
+    describe('constructor', () => {
+        it('sets id and name', () => {
+            expect(provider.id).toBe('tap');
+            expect(provider.name).toBe('Tap Payments');
+        });
+    });
+    // ---- createSession ----------------------------------------------------
+    describe('createSession', () => {
+        it('creates a charge and returns a PaymentSession with redirectUrl', async () => {
+            const charge = makeTapCharge();
+            globalThis.fetch = mockFetchResponse(charge);
+            const session = await provider.createSession({
+                amount: 99.99,
+                currency: 'SAR',
+                sourceToken: 'tok_test_123',
+                returnUrl: 'https://store.com/checkout/confirm',
+            });
+            expect(session.id).toBe('chg_test_abc123');
+            expect(session.providerId).toBe('tap');
+            expect(session.status).toBe('pending');
+            expect(session.amount).toBe(99.99);
+            expect(session.currency).toBe('SAR');
+            expect(session.redirectUrl).toBe('https://tap.company/3ds/abc123');
+            // Verify correct API call
+            expect(globalThis.fetch).toHaveBeenCalledWith('https://api.tap.company/v2/charges', expect.objectContaining({
+                method: 'POST',
+                headers: expect.objectContaining({
+                    'Authorization': 'Bearer sk_test_xxx',
+                }),
+            }));
+        });
+        it('passes orderId as reference.order', async () => {
+            const charge = makeTapCharge();
+            globalThis.fetch = mockFetchResponse(charge);
+            await provider.createSession({
+                amount: 50,
+                currency: 'SAR',
+                orderId: 'order-123',
+                returnUrl: 'https://store.com/confirm',
+            });
+            const callBody = JSON.parse(globalThis.fetch.mock.calls[0][1].body);
+            expect(callBody.reference).toEqual({ order: 'order-123' });
+        });
+        it('uses src_all when no sourceToken is provided', async () => {
+            const charge = makeTapCharge();
+            globalThis.fetch = mockFetchResponse(charge);
+            await provider.createSession({
+                amount: 10,
+                currency: 'SAR',
+                returnUrl: 'https://store.com/confirm',
+            });
+            const callBody = JSON.parse(globalThis.fetch.mock.calls[0][1].body);
+            expect(callBody.source).toEqual({ id: 'src_all' });
+        });
+        it('throws on Tap API error', async () => {
+            globalThis.fetch = mockFetchResponse({ error: 'invalid' }, 400);
+            await expect(provider.createSession({ amount: 10, currency: 'SAR' })).rejects.toThrow('Tap API error (400)');
+        });
+    });
+    // ---- confirmSession ---------------------------------------------------
+    describe('confirmSession', () => {
+        it('re-fetches charge to get final status after 3DS', async () => {
+            const captured = makeTapCharge({ status: 'CAPTURED' });
+            globalThis.fetch = mockFetchResponse(captured);
+            const session = await provider.confirmSession('chg_test_abc123');
+            expect(session.status).toBe('captured');
+            expect(globalThis.fetch).toHaveBeenCalledWith('https://api.tap.company/v2/charges/chg_test_abc123', expect.objectContaining({ method: 'GET' }));
+        });
+    });
+    // ---- getSession -------------------------------------------------------
+    describe('getSession', () => {
+        it('fetches charge by ID', async () => {
+            const charge = makeTapCharge({ status: 'IN_PROGRESS' });
+            globalThis.fetch = mockFetchResponse(charge);
+            const session = await provider.getSession('chg_test_abc123');
+            expect(session.status).toBe('processing');
+            expect(session.id).toBe('chg_test_abc123');
+        });
+    });
+    // ---- refund -----------------------------------------------------------
+    describe('refund', () => {
+        it('creates a refund and returns updated session', async () => {
+            const fetchMock = vi.fn()
+                // First call: getSession to get current amount/currency
+                .mockResolvedValueOnce({
+                ok: true, status: 200,
+                json: () => Promise.resolve(makeTapCharge({ status: 'CAPTURED' })),
+                text: () => Promise.resolve(''),
+            })
+                // Second call: POST /refunds
+                .mockResolvedValueOnce({
+                ok: true, status: 200,
+                json: () => Promise.resolve({ id: 'ref_123', status: 'REFUNDED' }),
+                text: () => Promise.resolve(''),
+            })
+                // Third call: getSession to get updated status
+                .mockResolvedValueOnce({
+                ok: true, status: 200,
+                json: () => Promise.resolve(makeTapCharge({ status: 'REFUNDED' })),
+                text: () => Promise.resolve(''),
+            });
+            globalThis.fetch = fetchMock;
+            const session = await provider.refund({
+                sessionId: 'chg_test_abc123',
+                reason: 'requested_by_customer',
+            });
+            expect(session.status).toBe('refunded');
+            expect(fetchMock).toHaveBeenCalledTimes(3);
+            // Verify refund POST body
+            const refundCall = fetchMock.mock.calls[1];
+            expect(refundCall[0]).toBe('https://api.tap.company/v2/refunds');
+            const refundBody = JSON.parse(refundCall[1].body);
+            expect(refundBody.charge_id).toBe('chg_test_abc123');
+            expect(refundBody.amount).toBe(99.99); // full refund
+        });
+        it('supports partial refund with explicit amount', async () => {
+            const fetchMock = vi.fn()
+                .mockResolvedValueOnce({
+                ok: true, status: 200,
+                json: () => Promise.resolve(makeTapCharge({ status: 'CAPTURED' })),
+                text: () => Promise.resolve(''),
+            })
+                .mockResolvedValueOnce({
+                ok: true, status: 200,
+                json: () => Promise.resolve({ id: 'ref_456', status: 'REFUNDED' }),
+                text: () => Promise.resolve(''),
+            })
+                .mockResolvedValueOnce({
+                ok: true, status: 200,
+                json: () => Promise.resolve(makeTapCharge({ status: 'CAPTURED' })),
+                text: () => Promise.resolve(''),
+            });
+            globalThis.fetch = fetchMock;
+            await provider.refund({
+                sessionId: 'chg_test_abc123',
+                amount: 25.00,
+            });
+            const refundBody = JSON.parse(fetchMock.mock.calls[1][1].body);
+            expect(refundBody.amount).toBe(25.00);
+        });
+    });
+    // ---- Status mapping ---------------------------------------------------
+    describe('status mapping', () => {
+        const cases = [
+            ['INITIATED', 'pending'],
+            ['IN_PROGRESS', 'processing'],
+            ['CAPTURED', 'captured'],
+            ['FAILED', 'failed'],
+            ['DECLINED', 'failed'],
+            ['RESTRICTED', 'failed'],
+            ['VOID', 'cancelled'],
+            ['CANCELLED', 'cancelled'],
+            ['TIMEDOUT', 'cancelled'],
+            ['ABANDONED', 'cancelled'],
+            ['REFUNDED', 'refunded'],
+        ];
+        it.each(cases)('maps Tap "%s" → "%s"', async (tapStatus, expected) => {
+            const charge = makeTapCharge({ status: tapStatus });
+            globalThis.fetch = mockFetchResponse(charge);
+            const session = await provider.getSession('chg_test_abc123');
+            expect(session.status).toBe(expected);
+        });
+    });
+    // ---- cancelSession ----------------------------------------------------
+    describe('cancelSession', () => {
+        it('returns current session state', async () => {
+            const charge = makeTapCharge({ status: 'CANCELLED' });
+            globalThis.fetch = mockFetchResponse(charge);
+            const session = await provider.cancelSession('chg_test_abc123');
+            expect(session.status).toBe('cancelled');
+        });
+    });
+    // ---- verifyWebhook ----------------------------------------------------
+    describe('verifyWebhook', () => {
+        it('throws on invalid hashstring', async () => {
+            const payload = JSON.stringify({
+                id: 'chg_test_abc123',
+                amount: 99.99,
+                currency: 'SAR',
+                status: 'CAPTURED',
+                reference: { gateway: 'gw_ref', payment: 'pay_ref' },
+                transaction: { created: '2026-02-09T12:00:00Z' },
+            });
+            await expect(provider.verifyWebhook(payload, 'invalid_sig')).rejects.toThrow('invalid webhook hashstring');
+        });
+        it('returns parsed event on valid hashstring', async () => {
+            const event = {
+                id: 'chg_test_abc123',
+                amount: 99.99,
+                currency: 'SAR',
+                status: 'CAPTURED',
+                reference: { gateway: 'gw_ref', payment: 'pay_ref' },
+                transaction: { created: '2026-02-09T12:00:00Z' },
+            };
+            const payload = JSON.stringify(event);
+            // Build the hashstring the same way the implementation does
+            const toBeHashed = `x_id${event.id}` +
+                `x_amount${event.amount}` +
+                `x_currency${event.currency}` +
+                `x_gateway_reference${event.reference.gateway}` +
+                `x_payment_reference${event.reference.payment}` +
+                `x_status${event.status}` +
+                `x_created${event.transaction.created}`;
+            // HMAC with secretKey (not webhookSecret — matches implementation)
+            const encoder = new TextEncoder();
+            const key = await globalThis.crypto.subtle.importKey('raw', encoder.encode('sk_test_xxx'), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+            const sig = await globalThis.crypto.subtle.sign('HMAC', key, encoder.encode(toBeHashed));
+            const validSignature = Array.from(new Uint8Array(sig))
+                .map(b => b.toString(16).padStart(2, '0'))
+                .join('');
+            const result = await provider.verifyWebhook(payload, validSignature);
+            expect(result.type).toBe('payment.captured');
+            expect(result.sessionId).toBe('chg_test_abc123');
+        });
+    });
+});
+//# sourceMappingURL=tap-provider.test.js.map

package/dist/__tests__/tap-provider.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tap-provider.test.js","sourceRoot":"","sources":["../../src/__tests__/tap-provider.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAA;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AAGvD,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E,SAAS,aAAa,CAAC,YAAmC,EAAE;IAC1D,OAAO;QACL,EAAE,EAAE,iBAAiB;QACrB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,KAAK;QACb,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,IAAI;QAClB,MAAM,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,kBAAkB,EAAE;QACpD,WAAW,EAAE;YACX,GAAG,EAAE,gCAAgC;YACrC,OAAO,EAAE,sBAAsB;SAChC;QACD,QAAQ,EAAE,EAAE,GAAG,EAAE,oCAAoC,EAAE;QACvD,OAAO,EAAE,sBAAsB;QAC/B,GAAG,SAAS;KACb,CAAA;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG;IACpD,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC;QAC/B,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QACjC,MAAM;QACN,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC;QACjC,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;KAClD,CAAC,CAAA;AACJ,CAAC;AAED,8EAA8E;AAC9E,QAAQ;AACR,8EAA8E;AAE9E,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,IAAI,QAA4B,CAAA;IAEhC,UAAU,CAAC,GAAG,EAAE;QACd,QAAQ,GAAG,IAAI,kBAAkB,CAAC;YAChC,SAAS,EAAE,aAAa;YACxB,aAAa,EAAE,YAAY;SAC5B,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,2EAA2E;IAE3E,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,kBAAkB,EAAE,GAAG,EAAE;YAC1B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAC/B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,gEAAgE,EAAE,KAAK,IAAI,EAAE;YAC9E,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;YAC9B,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC;gBAC3C,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,cAAc;gBAC3B,SAAS,EAAE,oCAAoC;aAChD,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YAC1C,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACtC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YAClC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAA;YAElE,0BAA0B;YAC1B,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAC3C,oCAAoC,EACpC,MAAM,CAAC,gBAAgB,CAAC;gBACtB,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,MAAM,CAAC,gBAAgB,CAAC;oBAC/B,eAAe,EAAE,oBAAoB;iBACtC,CAAC;aACH,CAAC,CACH,CAAA;QACH,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;YAC9B,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,QAAQ,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,KAAK;gBACf,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,2BAA2B;aACvC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,UAAU,CAAC,KAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACjG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;QAC5D,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAA;YAC9B,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,QAAQ,CAAC,aAAa,CAAC;gBAC3B,MAAM,EAAE,EAAE;gBACV,QAAQ,EAAE,KAAK;gBACf,SAAS,EAAE,2BAA2B;aACvC,CAAC,CAAA;YAEF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAE,UAAU,CAAC,KAAkC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACjG,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAA;QACpD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;YACvC,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,GAAG,CAAC,CAAA;YAE/D,MAAM,MAAM,CACV,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CACxD,CAAC,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;YAC/D,MAAM,QAAQ,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;YACtD,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAA;YAE9C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAA;YAEhE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACvC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAC3C,oDAAoD,EACpD,MAAM,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAC3C,CAAA;QACH,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;QAC1B,EAAE,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;YACpC,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAA;YACvD,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;YAE5D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;YACzC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC5C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;QACtB,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE;gBACvB,wDAAwD;iBACvD,qBAAqB,CAAC;gBACrB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;gBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;aAChC,CAAC;gBACF,6BAA6B;iBAC5B,qBAAqB,CAAC;gBACrB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;gBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBAClE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;aAChC,CAAC;gBACF,+CAA+C;iBAC9C,qBAAqB,CAAC;gBACrB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;gBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;aAChC,CAAC,CAAA;YAEJ,UAAU,CAAC,KAAK,GAAG,SAAS,CAAA;YAE5B,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACpC,SAAS,EAAE,iBAAiB;gBAC5B,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAA;YAEF,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YACvC,MAAM,CAAC,SAAS,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAA;YAE1C,0BAA0B;YAC1B,MAAM,UAAU,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAC1C,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,oCAAoC,CAAC,CAAA;YAChE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YACjD,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;YACpD,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA,CAAC,cAAc;QACtD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,8CAA8C,EAAE,KAAK,IAAI,EAAE;YAC5D,MAAM,SAAS,GAAG,EAAE,CAAC,EAAE,EAAE;iBACtB,qBAAqB,CAAC;gBACrB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;gBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;aAChC,CAAC;iBACD,qBAAqB,CAAC;gBACrB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;gBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;gBAClE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;aAChC,CAAC;iBACD,qBAAqB,CAAC;gBACrB,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG;gBACrB,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;gBAClE,IAAI,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;aAChC,CAAC,CAAA;YAEJ,UAAU,CAAC,KAAK,GAAG,SAAS,CAAA;YAE5B,MAAM,QAAQ,CAAC,MAAM,CAAC;gBACpB,SAAS,EAAE,iBAAiB;gBAC5B,MAAM,EAAE,KAAK;aACd,CAAC,CAAA;YAEF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;YAC9D,MAAM,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;QAC9B,MAAM,KAAK,GAA4B;YACrC,CAAC,WAAW,EAAE,SAAS,CAAC;YACxB,CAAC,aAAa,EAAE,YAAY,CAAC;YAC7B,CAAC,UAAU,EAAE,UAAU,CAAC;YACxB,CAAC,QAAQ,EAAE,QAAQ,CAAC;YACpB,CAAC,UAAU,EAAE,QAAQ,CAAC;YACtB,CAAC,YAAY,EAAE,QAAQ,CAAC;YACxB,CAAC,MAAM,EAAE,WAAW,CAAC;YACrB,CAAC,WAAW,EAAE,WAAW,CAAC;YAC1B,CAAC,UAAU,EAAE,WAAW,CAAC;YACzB,CAAC,WAAW,EAAE,WAAW,CAAC;YAC1B,CAAC,UAAU,EAAE,UAAU,CAAC;SACzB,CAAA;QAED,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,sBAAsB,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,EAAE;YACnE,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,SAAmC,EAAE,CAAC,CAAA;YAC7E,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAA;YAC5D,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACvC,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,+BAA+B,EAAE,KAAK,IAAI,EAAE;YAC7C,MAAM,MAAM,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAA;YACrD,UAAU,CAAC,KAAK,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAA;YAE5C,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAc,CAAC,iBAAiB,CAAC,CAAA;YAChE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;QAC1C,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;IAEF,0EAA0E;IAE1E,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;YAC5C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC;gBAC7B,EAAE,EAAE,iBAAiB;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;gBACpD,WAAW,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;aACjD,CAAC,CAAA;YAEF,MAAM,MAAM,CACV,QAAQ,CAAC,aAAc,CAAC,OAAO,EAAE,aAAa,CAAC,CAChD,CAAC,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAA;QACjD,CAAC,CAAC,CAAA;QAEF,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;YACxD,MAAM,KAAK,GAAG;gBACZ,EAAE,EAAE,iBAAiB;gBACrB,MAAM,EAAE,KAAK;gBACb,QAAQ,EAAE,KAAK;gBACf,MAAM,EAAE,UAAU;gBAClB,SAAS,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE;gBACpD,WAAW,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE;aACjD,CAAA;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;YAErC,4DAA4D;YAC5D,MAAM,UAAU,GACd,OAAO,KAAK,CAAC,EAAE,EAAE;gBACjB,WAAW,KAAK,CAAC,MAAM,EAAE;gBACzB,aAAa,KAAK,CAAC,QAAQ,EAAE;gBAC7B,sBAAsB,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE;gBAC/C,sBAAsB,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE;gBAC/C,WAAW,KAAK,CAAC,MAAM,EAAE;gBACzB,YAAY,KAAK,CAAC,WAAW,CAAC,OAAO,EAAE,CAAA;YAEzC,mEAAmE;YACnE,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;YACjC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAClD,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC,EAC7B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;YACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;YACxF,MAAM,cAAc,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;iBACnD,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;iBACzC,IAAI,CAAC,EAAE,CAAC,CAAA;YAEX,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,aAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAA;YAErE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;YAC5C,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAClD,CAAC,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { TapPaymentProvider } from './tap-provider.js';
+export type { TapConfig, TapRawCharge, TapChargeStatus, TapRawRefund } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACtD,YAAY,EAAE,SAAS,EAAE,YAAY,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,5 @@
+// ---------------------------------------------------------------------------
+// @commercejs/payment-tap — Tap Payments provider for CommerceJS
+// ---------------------------------------------------------------------------
+export { TapPaymentProvider } from './tap-provider.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,iEAAiE;AACjE,8EAA8E;AAE9E,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA"}

package/dist/tap-provider.d.ts

@@ -0,0 +1,42 @@
+import type { PaymentProvider, PaymentSession, CreatePaymentSessionInput, RefundInput, PaymentWebhookEvent } from '@commercejs/types';
+import type { TapConfig } from './types.js';
+/**
+ * Tap Payments provider — redirect-based, PCI-free.
+ *
+ * @example
+ * ```ts
+ * const tap = new TapPaymentProvider({ secretKey: 'sk_test_...' })
+ *
+ * // 1. Create charge with token from goSell.js
+ * const session = await tap.createSession({
+ *   amount: 99.99,
+ *   currency: 'SAR',
+ *   sourceToken: 'tok_xxx',
+ *   returnUrl: 'https://store.com/checkout/confirm',
+ * })
+ *
+ * // 2. Redirect customer to session.redirectUrl for 3DS
+ *
+ * // 3. After redirect, confirm the payment
+ * const confirmed = await tap.confirmSession(session.id)
+ * // confirmed.status === 'captured'
+ * ```
+ */
+export declare class TapPaymentProvider implements PaymentProvider {
+    readonly id = "tap";
+    readonly name = "Tap Payments";
+    private readonly secretKey;
+    private readonly baseUrl;
+    private readonly webhookSecret;
+    constructor(config: TapConfig);
+    createSession(input: CreatePaymentSessionInput): Promise<PaymentSession>;
+    confirmSession(sessionId: string): Promise<PaymentSession>;
+    getSession(sessionId: string): Promise<PaymentSession>;
+    refund(input: RefundInput): Promise<PaymentSession>;
+    cancelSession(sessionId: string): Promise<PaymentSession>;
+    verifyWebhook(payload: string | Uint8Array, signature: string): Promise<PaymentWebhookEvent>;
+    /** Map Tap charge status to a webhook event type */
+    private mapChargeStatusToEventType;
+    private request;
+}
+//# sourceMappingURL=tap-provider.d.ts.map

package/dist/tap-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tap-provider.d.ts","sourceRoot":"","sources":["../src/tap-provider.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EAEd,yBAAyB,EACzB,WAAW,EACX,mBAAmB,EACpB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,KAAK,EAAE,SAAS,EAAiC,MAAM,YAAY,CAAA;AAgD1E;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,qBAAa,kBAAmB,YAAW,eAAe;IACxD,QAAQ,CAAC,EAAE,SAAQ;IACnB,QAAQ,CAAC,IAAI,kBAAiB;IAE9B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAQ;IAChC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAe;gBAEjC,MAAM,EAAE,SAAS;IAUvB,aAAa,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;IA+BxE,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAK1D,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAKtD,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,cAAc,CAAC;IAmBnD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC;IAOzD,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA6DlG,oDAAoD;IACpD,OAAO,CAAC,0BAA0B;YAmBpB,OAAO;CAqBtB"}

package/dist/tap-provider.js

@@ -0,0 +1,230 @@
+// ---------------------------------------------------------------------------
+// TapPaymentProvider — Tap Payments gateway (redirect-based, PCI-free)
+// ---------------------------------------------------------------------------
+//
+// Flow: tokenize client-side (goSell.js) → create charge server-side →
+//       redirect for 3DS → confirm after redirect → done.
+//
+// Tap auto-captures charges, so captureSession is not implemented.
+// ---------------------------------------------------------------------------
+const TAP_API_BASE = 'https://api.tap.company/v2';
+/** Map Tap charge status → PaymentSessionStatus */
+function mapTapStatus(status) {
+    switch (status) {
+        case 'INITIATED':
+            return 'pending';
+        case 'IN_PROGRESS':
+            return 'processing';
+        case 'CAPTURED':
+            return 'captured';
+        case 'VOID':
+        case 'CANCELLED':
+        case 'TIMEDOUT':
+        case 'ABANDONED':
+            return 'cancelled';
+        case 'FAILED':
+        case 'DECLINED':
+        case 'RESTRICTED':
+            return 'failed';
+        case 'REFUNDED':
+            return 'refunded';
+        default:
+            return 'pending';
+    }
+}
+/** Build a PaymentSession from a Tap charge */
+function chargeToSession(charge, providerId) {
+    return {
+        id: charge.id,
+        providerId,
+        status: mapTapStatus(charge.status),
+        amount: charge.amount,
+        currency: charge.currency,
+        providerData: {
+            tapChargeId: charge.id,
+            tapStatus: charge.status,
+            source: charge.source,
+            reference: charge.reference,
+        },
+        redirectUrl: charge.transaction?.url ?? null,
+        createdAt: charge.created ?? new Date().toISOString(),
+    };
+}
+/**
+ * Tap Payments provider — redirect-based, PCI-free.
+ *
+ * @example
+ * ```ts
+ * const tap = new TapPaymentProvider({ secretKey: 'sk_test_...' })
+ *
+ * // 1. Create charge with token from goSell.js
+ * const session = await tap.createSession({
+ *   amount: 99.99,
+ *   currency: 'SAR',
+ *   sourceToken: 'tok_xxx',
+ *   returnUrl: 'https://store.com/checkout/confirm',
+ * })
+ *
+ * // 2. Redirect customer to session.redirectUrl for 3DS
+ *
+ * // 3. After redirect, confirm the payment
+ * const confirmed = await tap.confirmSession(session.id)
+ * // confirmed.status === 'captured'
+ * ```
+ */
+export class TapPaymentProvider {
+    id = 'tap';
+    name = 'Tap Payments';
+    secretKey;
+    baseUrl;
+    webhookSecret;
+    constructor(config) {
+        this.secretKey = config.secretKey;
+        this.baseUrl = config.baseUrl ?? TAP_API_BASE;
+        this.webhookSecret = config.webhookSecret ?? null;
+    }
+    // ---------------------------------------------------------------------------
+    // Core methods (required by PaymentProvider)
+    // ---------------------------------------------------------------------------
+    async createSession(input) {
+        const body = {
+            amount: input.amount,
+            currency: input.currency,
+            threeDSecure: true,
+            source: { id: input.sourceToken ?? 'src_all' },
+            redirect: { url: input.returnUrl ?? '' },
+            ...(input.orderId ? { reference: { order: input.orderId } } : {}),
+            ...(input.customerId ? { customer: { id: input.customerId } } : {}),
+            // Include customer details if provided (and no customerId)
+            ...(!input.customerId && input.customer
+                ? {
+                    customer: {
+                        first_name: input.customer.firstName ?? '',
+                        last_name: input.customer.lastName ?? '',
+                        email: input.customer.email ?? '',
+                        phone: input.customer.phone
+                            ? { country_code: '966', number: input.customer.phone.replace(/^\+?966\s?/, '') }
+                            : undefined,
+                    },
+                }
+                : {}),
+            ...(input.metadata ? { metadata: input.metadata } : {}),
+            // Tap sends charge results to this URL asynchronously
+            ...(input.webhookUrl ? { post: { url: input.webhookUrl } } : {}),
+        };
+        const charge = await this.request('POST', '/charges', body);
+        return chargeToSession(charge, this.id);
+    }
+    async confirmSession(sessionId) {
+        // After 3DS redirect, re-fetch the charge to get the final status
+        return this.getSession(sessionId);
+    }
+    async getSession(sessionId) {
+        const charge = await this.request('GET', `/charges/${sessionId}`);
+        return chargeToSession(charge, this.id);
+    }
+    async refund(input) {
+        // First get the current charge to know the amount/currency
+        const current = await this.getSession(input.sessionId);
+        await this.request('POST', '/refunds', {
+            charge_id: input.sessionId,
+            amount: input.amount ?? current.amount,
+            currency: current.currency,
+            reason: input.reason ?? 'requested_by_customer',
+        });
+        // Re-fetch to get updated status
+        return this.getSession(input.sessionId);
+    }
+    // ---------------------------------------------------------------------------
+    // Optional methods
+    // ---------------------------------------------------------------------------
+    async cancelSession(sessionId) {
+        // Tap doesn't have a dedicated cancel endpoint.
+        // For authorized (not captured) transactions, we could void.
+        // For now, re-fetch and return current state.
+        return this.getSession(sessionId);
+    }
+    async verifyWebhook(payload, signature) {
+        // Tap's webhook verification uses a "hashstring" — NOT raw body HMAC.
+        // The hashstring is built by concatenating specific fields from the charge
+        // body with x_ prefixes, then HMAC-SHA256'd with the secret API key.
+        //
+        // Format for charges/authorizes:
+        //   x_id{id}x_amount{amount}x_currency{currency}x_gateway_reference{ref}
+        //   x_payment_reference{ref}x_status{status}x_created{created}
+        //
+        // See: https://developers.tap.company/docs/webhook#validate-the-webhook-hashstring
+        const bodyStr = typeof payload === 'string' ? payload : new TextDecoder().decode(payload);
+        const event = JSON.parse(bodyStr);
+        // Extract fields for hashstring
+        const id = event.id ?? '';
+        const amount = event.amount ?? '';
+        const currency = event.currency ?? '';
+        const gatewayRef = event.reference?.gateway ?? '';
+        const paymentRef = event.reference?.payment ?? '';
+        const status = event.status ?? '';
+        const created = event.transaction?.created ?? '';
+        // Build the hashstring input
+        const toBeHashed = `x_id${id}` +
+            `x_amount${amount}` +
+            `x_currency${currency}` +
+            `x_gateway_reference${gatewayRef}` +
+            `x_payment_reference${paymentRef}` +
+            `x_status${status}` +
+            `x_created${created}`;
+        // HMAC-SHA256 with the secret API key
+        const encoder = new TextEncoder();
+        const key = await globalThis.crypto.subtle.importKey('raw', encoder.encode(this.secretKey), { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']);
+        const sig = await globalThis.crypto.subtle.sign('HMAC', key, encoder.encode(toBeHashed));
+        const computed = Array.from(new Uint8Array(sig))
+            .map(b => b.toString(16).padStart(2, '0'))
+            .join('');
+        if (computed !== signature) {
+            throw new Error('TapPaymentProvider: invalid webhook hashstring');
+        }
+        // Map Tap status to a normalized event type
+        const eventType = this.mapChargeStatusToEventType(event.status);
+        return {
+            type: eventType,
+            sessionId: String(event.id ?? ''),
+            data: event,
+        };
+    }
+    /** Map Tap charge status to a webhook event type */
+    mapChargeStatusToEventType(status) {
+        switch (status) {
+            case 'CAPTURED': return 'payment.captured';
+            case 'FAILED':
+            case 'DECLINED':
+            case 'RESTRICTED': return 'payment.failed';
+            case 'VOID':
+            case 'CANCELLED': return 'payment.cancelled';
+            case 'REFUNDED': return 'payment.refunded';
+            case 'TIMEDOUT':
+            case 'ABANDONED': return 'payment.expired';
+            default: return 'payment.updated';
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // HTTP helper
+    // ---------------------------------------------------------------------------
+    async request(method, path, body) {
+        const url = `${this.baseUrl}${path}`;
+        const headers = {
+            'Authorization': `Bearer ${this.secretKey}`,
+            'Content-Type': 'application/json',
+            'Accept': 'application/json',
+        };
+        const res = await fetch(url, {
+            method,
+            headers,
+            ...(body ? { body: JSON.stringify(body) } : {}),
+        });
+        if (!res.ok) {
+            const errorBody = await res.text();
+            throw new Error(`Tap API error (${res.status}): ${errorBody}`);
+        }
+        return res.json();
+    }
+}
+//# sourceMappingURL=tap-provider.js.map

package/dist/tap-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tap-provider.js","sourceRoot":"","sources":["../src/tap-provider.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,uEAAuE;AACvE,8EAA8E;AAC9E,EAAE;AACF,uEAAuE;AACvE,0DAA0D;AAC1D,EAAE;AACF,mEAAmE;AACnE,8EAA8E;AAa9E,MAAM,YAAY,GAAG,4BAA4B,CAAA;AAEjD,mDAAmD;AACnD,SAAS,YAAY,CAAC,MAAuB;IAC3C,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,SAAS,CAAA;QAClB,KAAK,aAAa;YAChB,OAAO,YAAY,CAAA;QACrB,KAAK,UAAU;YACb,OAAO,UAAU,CAAA;QACnB,KAAK,MAAM,CAAC;QACZ,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC;QAChB,KAAK,WAAW;YACd,OAAO,WAAW,CAAA;QACpB,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,QAAQ,CAAA;QACjB,KAAK,UAAU;YACb,OAAO,UAAU,CAAA;QACnB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED,+CAA+C;AAC/C,SAAS,eAAe,CAAC,MAAoB,EAAE,UAAkB;IAC/D,OAAO;QACL,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,UAAU;QACV,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,YAAY,EAAE;YACZ,WAAW,EAAE,MAAM,CAAC,EAAE;YACtB,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B;QACD,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,IAAI;QAC5C,SAAS,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACtD,CAAA;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,OAAO,kBAAkB;IACpB,EAAE,GAAG,KAAK,CAAA;IACV,IAAI,GAAG,cAAc,CAAA;IAEb,SAAS,CAAQ;IACjB,OAAO,CAAQ;IACf,aAAa,CAAe;IAE7C,YAAY,MAAiB;QAC3B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAA;QACjC,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,YAAY,CAAA;QAC7C,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,IAAI,CAAA;IACnD,CAAC;IAED,8EAA8E;IAC9E,6CAA6C;IAC7C,8EAA8E;IAE9E,KAAK,CAAC,aAAa,CAAC,KAAgC;QAClD,MAAM,IAAI,GAA4B;YACpC,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE;YAC9C,QAAQ,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,IAAI,EAAE,EAAE;YACxC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,2DAA2D;YAC3D,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,QAAQ;gBACrC,CAAC,CAAC;oBACE,QAAQ,EAAE;wBACR,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE;wBAC1C,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,EAAE;wBACxC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE;wBACjC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK;4BACzB,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,EAAE;4BACjF,CAAC,CAAC,SAAS;qBACd;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,sDAAsD;YACtD,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjE,CAAA;QAED,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAe,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAA;QACzE,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,kEAAkE;QAClE,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAe,KAAK,EAAE,YAAY,SAAS,EAAE,CAAC,CAAA;QAC/E,OAAO,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC,CAAA;IACzC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAkB;QAC7B,2DAA2D;QAC3D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;QAEtD,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE;YACrC,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,OAAO,CAAC,MAAM;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,uBAAuB;SAChD,CAAC,CAAA;QAEF,iCAAiC;QACjC,OAAO,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;IACzC,CAAC;IAED,8EAA8E;IAC9E,mBAAmB;IACnB,8EAA8E;IAE9E,KAAK,CAAC,aAAa,CAAC,SAAiB;QACnC,gDAAgD;QAChD,6DAA6D;QAC7D,8CAA8C;QAC9C,OAAO,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;IACnC,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAA4B,EAAE,SAAiB;QACjE,sEAAsE;QACtE,2EAA2E;QAC3E,qEAAqE;QACrE,EAAE;QACF,iCAAiC;QACjC,yEAAyE;QACzE,+DAA+D;QAC/D,EAAE;QACF,mFAAmF;QAEnF,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;QACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAEjC,gCAAgC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,EAAE,CAAA;QACzB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA;QACjC,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE,CAAA;QACrC,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAA;QACjD,MAAM,UAAU,GAAG,KAAK,CAAC,SAAS,EAAE,OAAO,IAAI,EAAE,CAAA;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAA;QACjC,MAAM,OAAO,GAAG,KAAK,CAAC,WAAW,EAAE,OAAO,IAAI,EAAE,CAAA;QAEhD,6BAA6B;QAC7B,MAAM,UAAU,GACd,OAAO,EAAE,EAAE;YACX,WAAW,MAAM,EAAE;YACnB,aAAa,QAAQ,EAAE;YACvB,sBAAsB,UAAU,EAAE;YAClC,sBAAsB,UAAU,EAAE;YAClC,WAAW,MAAM,EAAE;YACnB,YAAY,OAAO,EAAE,CAAA;QAEvB,sCAAsC;QACtC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;QACjC,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAClD,KAAK,EACL,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAC9B,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EACjC,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAA;QACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAA;QACxF,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;aAC7C,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;aACzC,IAAI,CAAC,EAAE,CAAC,CAAA;QAEX,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAA;QACnE,CAAC;QAED,4CAA4C;QAC5C,MAAM,SAAS,GAAG,IAAI,CAAC,0BAA0B,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;QAE/D,OAAO;YACL,IAAI,EAAE,SAAS;YACf,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,CAAC;YACjC,IAAI,EAAE,KAAK;SACZ,CAAA;IACH,CAAC;IAED,oDAAoD;IAC5C,0BAA0B,CAAC,MAAuB;QACxD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,UAAU,CAAC,CAAC,OAAO,kBAAkB,CAAA;YAC1C,KAAK,QAAQ,CAAC;YACd,KAAK,UAAU,CAAC;YAChB,KAAK,YAAY,CAAC,CAAC,OAAO,gBAAgB,CAAA;YAC1C,KAAK,MAAM,CAAC;YACZ,KAAK,WAAW,CAAC,CAAC,OAAO,mBAAmB,CAAA;YAC5C,KAAK,UAAU,CAAC,CAAC,OAAO,kBAAkB,CAAA;YAC1C,KAAK,UAAU,CAAC;YAChB,KAAK,WAAW,CAAC,CAAC,OAAO,iBAAiB,CAAA;YAC1C,OAAO,CAAC,CAAC,OAAO,iBAAiB,CAAA;QACnC,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,cAAc;IACd,8EAA8E;IAEtE,KAAK,CAAC,OAAO,CAAI,MAAc,EAAE,IAAY,EAAE,IAAc;QACnE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,CAAA;QACpC,MAAM,OAAO,GAA2B;YACtC,eAAe,EAAE,UAAU,IAAI,CAAC,SAAS,EAAE;YAC3C,cAAc,EAAE,kBAAkB;YAClC,QAAQ,EAAE,kBAAkB;SAC7B,CAAA;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO;YACP,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAA;QAEF,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;YAClC,MAAM,IAAI,KAAK,CAAC,kBAAkB,GAAG,CAAC,MAAM,MAAM,SAAS,EAAE,CAAC,CAAA;QAChE,CAAC;QAED,OAAO,GAAG,CAAC,IAAI,EAAgB,CAAA;IACjC,CAAC;CACF"}

package/dist/types.d.ts

@@ -0,0 +1,60 @@
+/** Configuration for TapPaymentProvider */
+export interface TapConfig {
+    /** Tap secret API key (sk_test_... or sk_live_...) */
+    secretKey: string;
+    /** Tap webhook secret for signature verification (optional) */
+    webhookSecret?: string;
+    /** Use live mode (defaults to auto-detect from key prefix) */
+    liveMode?: boolean;
+    /** API base URL override (for testing) */
+    baseUrl?: string;
+}
+/** Tap charge object (subset of fields we use) */
+export interface TapRawCharge {
+    id: string;
+    status: TapChargeStatus;
+    amount: number;
+    currency: string;
+    threeDSecure: boolean;
+    description?: string;
+    reference?: {
+        transaction?: string;
+        order?: string;
+    };
+    transaction?: {
+        url?: string;
+        created?: string;
+        authorization_id?: string;
+    };
+    redirect?: {
+        status?: string;
+        url?: string;
+    };
+    source?: {
+        id: string;
+        type: string;
+        payment_method?: string;
+        payment_type?: string;
+    };
+    customer?: {
+        id?: string;
+        first_name?: string;
+        last_name?: string;
+        email?: string;
+    };
+    metadata?: Record<string, unknown>;
+    created: string;
+}
+/** Known Tap charge status values */
+export type TapChargeStatus = 'INITIATED' | 'IN_PROGRESS' | 'ABANDONED' | 'CAPTURED' | 'VOID' | 'CANCELLED' | 'FAILED' | 'DECLINED' | 'RESTRICTED' | 'REFUNDED' | 'TIMEDOUT';
+/** Tap refund response */
+export interface TapRawRefund {
+    id: string;
+    status: string;
+    amount: number;
+    currency: string;
+    charge_id: string;
+    reason?: string;
+    created: string;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAIA,2CAA2C;AAC3C,MAAM,WAAW,SAAS;IACxB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAA;IACjB,+DAA+D;IAC/D,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAID,kDAAkD;AAClD,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,eAAe,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,OAAO,CAAA;IACrB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE;QACV,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,WAAW,CAAC,EAAE;QACZ,GAAG,CAAC,EAAE,MAAM,CAAA;QACZ,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,gBAAgB,CAAC,EAAE,MAAM,CAAA;KAC1B,CAAA;IACD,QAAQ,CAAC,EAAE;QACT,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,GAAG,CAAC,EAAE,MAAM,CAAA;KACb,CAAA;IACD,MAAM,CAAC,EAAE;QACP,EAAE,EAAE,MAAM,CAAA;QACV,IAAI,EAAE,MAAM,CAAA;QACZ,cAAc,CAAC,EAAE,MAAM,CAAA;QACvB,YAAY,CAAC,EAAE,MAAM,CAAA;KACtB,CAAA;IACD,QAAQ,CAAC,EAAE;QACT,EAAE,CAAC,EAAE,MAAM,CAAA;QACX,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,SAAS,CAAC,EAAE,MAAM,CAAA;QAClB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAA;IACD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,qCAAqC;AACrC,MAAM,MAAM,eAAe,GACvB,WAAW,GACX,aAAa,GACb,WAAW,GACX,UAAU,GACV,MAAM,GACN,WAAW,GACX,QAAQ,GACR,UAAU,GACV,YAAY,GACZ,UAAU,GACV,UAAU,CAAA;AAEd,0BAA0B;AAC1B,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB"}

package/dist/types.js

@@ -0,0 +1,5 @@
+// ---------------------------------------------------------------------------
+// Tap Payments — config and raw API response types
+// ---------------------------------------------------------------------------
+export {};
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,mDAAmD;AACnD,8EAA8E"}

package/package.json

@@ -0,0 +1,32 @@
+{
+  "name": "@commercejs/payment-tap",
+  "version": "0.1.0",
+  "description": "Tap Payments provider for CommerceJS — redirect-based, PCI-free",
+  "license": "MIT",
+  "type": "module",
+  "main": "./dist/index.js",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@commercejs/types": "0.1.0"
+  },
+  "devDependencies": {
+    "typescript": "^5.7.0",
+    "vitest": "^4.0.0"
+  },
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "clean": "rm -rf dist"
+  }
+}