@fire-spark/payments-pagoplux-card 0.13.3 → 0.14.0

package/dist/index.d.ts

@@ -73,9 +73,20 @@ type PagopluxOtpSession = {
   tknky: string;
   tkniv: string;
 };
+/** Bank challenge of a code 103 with 3DS (API de Pago 1.3 §E-F). */
+type PagopluxChallenge = {
+  url: string;
+  method: "GET" | "POST";
+  parameters: {
+    name: string;
+    value: string;
+  }[];
+  version: string | null;
+  transaction_id: string | null;
+};
 /** Answer of the Spark `charge` operation. */
 type PagopluxChargeOutcome = {
-  status: "PAID" | "FAILED" | "PENDING" | "OTP_REQUIRED";
+  status: "PAID" | "FAILED" | "PENDING" | "OTP_REQUIRED" | "THREE_DS_REQUIRED";
   code: number | null;
   description: string | null;
   transaction_id: string | null;
@@ -90,6 +101,13 @@ type PagopluxChargeOutcome = {
   installments: number | null;
   date: string | null;
   otp: PagopluxOtpSession | null;
+  /** Only with `THREE_DS_REQUIRED` (absent from older APIs). */
+  challenge?: PagopluxChallenge | null;
+};
+/** Answer of the Spark `three_ds_result` operation. */
+type PagopluxThreeDsResult = {
+  tender_status: string;
+  outcome: PagopluxChargeOutcome | null;
 };
 //#endregion
 //#region src/crypto.d.ts
@@ -159,7 +177,7 @@ declare const PAGOPLUX_OTP_TRIES = 3;
 declare const PAGOPLUX_CARD_POLICY: Partial<PaymentPolicy>;
 //#endregion
 //#region src/errors.d.ts
-/** API de Pago 1.2 §E, keyed by `code` as returned. */
+/** API de Pago 1.3 §H, keyed by `code` as returned. */
 declare const pagopluxErrors: Readonly<Record<string, import("@fire-spark/payments").PaymentErrorEntry>> & {
   "1": {
     code: "INVALID_CREDENTIALS";
@@ -206,4 +224,4 @@ declare const pagopluxErrors: Readonly<Record<string, import("@fire-spark/paymen
 /** Spark code for a code 2 decline from its message, else `null`. */
 declare const pagopluxDeclineCode: (message: string | null) => "AMBIGUOUS" | "BATCH_CLOSE_REQUIRED" | "CANCELLED_BY_USER" | "CARD_DECLINED" | "EXPIRED_CARD" | "FINANCING_EXPIRED" | "FINANCING_REJECTED" | "FRAUD_SUSPECTED" | "INSUFFICIENT_BALANCE" | "INSUFFICIENT_FUNDS" | "INVALID_CARD" | "INVALID_CREDENTIALS" | "INVALID_PIN" | "INVALID_REQUEST" | "LIMIT_EXCEEDED" | "MANUAL_REVERSAL_REQUIRED" | "NETWORK_ERROR" | "PROVIDER_UNAVAILABLE" | "REVERSAL_NOT_ALLOWED" | "TERMINAL_BUSY" | "TERMINAL_NEEDS_INIT" | "TERMINAL_NOT_CONFIGURED" | "TERMINAL_UNAVAILABLE" | "TIMEOUT" | "TRANSFER_ALREADY_USED" | "TRANSFER_AMOUNT_MISMATCH" | "TRANSFER_NOT_FOUND" | "UNKNOWN" | "USER_TIMEOUT" | "WALLET_EXPIRED" | "WALLET_REJECTED" | null;
 //#endregion
-export { PAGOPLUX_CARD_POLICY, PAGOPLUX_METHOD, PAGOPLUX_OTP_TRIES, PAGOPLUX_PROVIDER, type PagopluxAddressEntry, type PagopluxBuyerEntry, type PagopluxCardCollector, type PagopluxCardEntry, type PagopluxCardForm, type PagopluxCardFormInput, PagopluxCardOptions, type PagopluxChargeOutcome, type PagopluxEncryptedCard, type PagopluxOtpSession, PagopluxRandom, defaultRandom, encryptPagopluxCard, fromBase64, pagopluxAes, pagopluxCardPayments, pagopluxDeclineCode, pagopluxErrors, pagopluxPublicKeyOf, pagopluxRsa, pagopluxSymmetricKey, parsePagopluxPublicKey, toBase64 };
+export { PAGOPLUX_CARD_POLICY, PAGOPLUX_METHOD, PAGOPLUX_OTP_TRIES, PAGOPLUX_PROVIDER, type PagopluxAddressEntry, type PagopluxBuyerEntry, type PagopluxCardCollector, type PagopluxCardEntry, type PagopluxCardForm, type PagopluxCardFormInput, PagopluxCardOptions, type PagopluxChallenge, type PagopluxChargeOutcome, type PagopluxEncryptedCard, type PagopluxOtpSession, PagopluxRandom, type PagopluxThreeDsResult, defaultRandom, encryptPagopluxCard, fromBase64, pagopluxAes, pagopluxCardPayments, pagopluxDeclineCode, pagopluxErrors, pagopluxPublicKeyOf, pagopluxRsa, pagopluxSymmetricKey, parsePagopluxPublicKey, toBase64 };

package/dist/index.js

@@ -181,7 +181,7 @@ const encryptPagopluxCard = (entry, publicKey, random = defaultRandom) => {
 //#region src/errors.ts
 const source = "docs/payments/pagoplux/card.md#11-errores";
 const since = "1.2";
-/** API de Pago 1.2 §E, keyed by `code` as returned. */
+/** API de Pago 1.3 §H, keyed by `code` as returned. */
 const pagopluxErrors = definePaymentErrors({
 	"1": {
 		code: "INVALID_CREDENTIALS",
@@ -427,6 +427,42 @@ const serverError = (ctx, cause) => {
 		attempt
 	});
 };
+/** A UI timeout or an aborted attempt: the orchestrator maps it. */
+var Passthrough = class extends Error {
+	inner;
+	constructor(inner) {
+		super("passthrough");
+		this.inner = inner;
+	}
+};
+const isUserTimeout = (cause) => {
+	return cause instanceof Error && cause.name === "PaymentUserTimeout";
+};
+/**
+* A question to the customer. A template that rejects (closed dialog) is
+* a cancel; a timeout or an aborted attempt goes to the orchestrator.
+*/
+const askUser = async (ctx, call) => {
+	try {
+		return await call();
+	} catch (cause) {
+		if (cause instanceof PaymentError) throw cause;
+		if (isUserTimeout(cause) || ctx.signal.aborted) throw new Passthrough(cause);
+		throw fail("CANCELLED_BY_USER", "The customer closed the prompt");
+	}
+};
+/** Bank pages need a moment to land on the 3DS return after the message. */
+const THREE_DS_READS = 4;
+const THREE_DS_READ_GAP_MS = 1500;
+const wait = (ms, signal) => {
+	return new Promise((resolve) => {
+		const timer = setTimeout(resolve, ms);
+		signal.addEventListener("abort", () => {
+			clearTimeout(timer);
+			resolve();
+		});
+	});
+};
 const failedResult = (ctx, error) => {
 	const m1 = {
 		attempt_reference: ctx.attemptReference,
@@ -488,11 +524,12 @@ const pagopluxCardPayments = (options) => {
 				text: "Código incorrecto, intenta de nuevo",
 				kind: "error"
 			});
-			const code = await ctx.ui.input({
+			const prompt = {
 				label: otpLabel,
 				type: "number",
 				maxLength: 8
-			});
+			};
+			const code = await askUser(ctx, () => ctx.ui.input(prompt));
 			const otp = {
 				...session,
 				code: code.trim()
@@ -514,6 +551,75 @@ const pagopluxCardPayments = (options) => {
 			code: 102
 		} : outcome;
 	};
+	/** Outcome the 3DS return recorded on the tender, if it arrived. */
+	const readThreeDs = async (ctx, reads) => {
+		for (let read = 0; read < reads; read++) {
+			if (read > 0) await wait(THREE_DS_READ_GAP_MS, ctx.signal);
+			if (ctx.signal.aborted) break;
+			const answer = await ctx.server.call("three_ds_result", {});
+			if (answer?.outcome) return answer.outcome;
+		}
+		return null;
+	};
+	/**
+	* Code 103 with a bank page (API de Pago 1.3 §E): the template shows it
+	* (`ui.challenge`); the bank sends the customer to the Fire Spark 3DS
+	* return, which closes the tender on the server; the device then reads
+	* that outcome. Closed before the bank answered: it may have charged.
+	*/
+	const withChallenge = async (ctx, challenge) => {
+		const show = ctx.ui.challenge;
+		if (!show) throw fail("INVALID_REQUEST", "The channel cannot show the 3-D Secure challenge");
+		ctx.ui.message({
+			text: "Verifica el pago con tu banco…",
+			kind: "info"
+		});
+		const c1 = {
+			url: challenge.url,
+			method: challenge.method
+		};
+		const c2 = {
+			parameters: challenge.parameters,
+			version: challenge.version
+		};
+		const input = {
+			...c1,
+			...c2,
+			signal: ctx.signal
+		};
+		const shown = await askUser(ctx, () => show.call(ctx.ui, input)).catch((cause) => {
+			if (cause instanceof Passthrough) throw cause;
+			return { completed: false };
+		});
+		ctx.ui.message({
+			text: "Confirmando pago…",
+			kind: "waiting"
+		});
+		const reads = shown.completed ? THREE_DS_READS : 1;
+		const outcome = await readThreeDs(ctx, reads);
+		if (outcome) return outcome;
+		const pending = {
+			code: 103,
+			description: "3DS challenge without bank answer",
+			transaction_id: challenge.transaction_id
+		};
+		const e1 = {
+			authorization_token: null,
+			amount: null,
+			card: null
+		};
+		const e2 = {
+			installments: null,
+			date: null,
+			otp: null
+		};
+		return {
+			status: "PENDING",
+			...pending,
+			...e1,
+			...e2
+		};
+	};
 	const start = async (ctx) => {
 		const keyPromise = publicKeyFor(ctx);
 		keyPromise.catch(() => void 0);
@@ -550,9 +656,11 @@ const pagopluxCardPayments = (options) => {
 		};
 		try {
 			const first = await charge(ctx, input);
-			const outcome = first.status === "OTP_REQUIRED" ? await withOtp(ctx, input, first) : first;
+			let outcome = first.status === "OTP_REQUIRED" ? await withOtp(ctx, input, first) : first;
+			if (outcome.status === "THREE_DS_REQUIRED" && outcome.challenge) outcome = await withChallenge(ctx, outcome.challenge);
 			return resultOf(ctx, outcome);
 		} catch (cause) {
+			if (cause instanceof Passthrough) throw cause.inner;
 			if (cause instanceof PaymentError) return failedResult(ctx, cause.error);
 			return failedResult(ctx, serverError(ctx, cause));
 		}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fire-spark/payments-pagoplux-card",
-  "version": "0.13.3",
+  "version": "0.14.0",
   "description": "Fire Spark PagoPlux card adapter (API de Pago): card encrypted on the device, charged by Spark, OTP for Diners/Interdin/Discover",
   "type": "module",
   "sideEffects": false,
@@ -18,8 +18,8 @@
   },
   "dependencies": {
     "@noble/ciphers": "^1.3.0",
-    "@fire-spark/payments": "^0.13.3",
-    "@fire-spark/types": "^0.13.3"
+    "@fire-spark/payments": "^0.14.0",
+    "@fire-spark/types": "^0.14.0"
   },
   "devDependencies": {
     "tsdown": "^0.22.14",