@laranex/myanmar-payments 4.0.0-dev.4 → 4.0.0-dev.6

package/dist/cjs/kbz-pay/kbz-pay.js

@@ -13,17 +13,17 @@ const validate_js_1 = require("../core/validate.js");
 const values_js_1 = require("../core/values.js");
 const signer_js_1 = require("./signer.js");
 /**
- * KBZ Pay credentials and endpoints. A missing credential throws a `ConfigurationError`.
+ * KBZ Pay credentials and endpoints. A missing setting throws a `ConfigurationError`. The URLs
+ * default to production; UAT and production issue separate credentials.
  */
 class KbzPayConfig {
-    static SANDBOX_API_URL = 'http://api-uat.kbzpay.com/payment/gateway/uat';
     static PRODUCTION_API_URL = 'https://api.kbzpay.com/payment/gateway';
-    static SANDBOX_PWA_URL = 'https://static.kbzpay.com/pgw/uat/pwa/#/';
     static PRODUCTION_PWA_URL = 'https://wap.kbzpay.com/pgw/pwa/#/';
     appId;
     appKey;
     merchantCode;
-    sandbox;
+    /** Seconds before the default HTTP client gives up on a request. */
+    timeoutSeconds;
     /** The API base URL in use. */
     apiUrl;
     /** The PWA checkout URL in use, always ending in `/`. */
@@ -32,22 +32,20 @@ class KbzPayConfig {
         this.appId = (0, env_js_1.requireSetting)('kbz_pay', 'app_id', options.appId);
         this.appKey = (0, env_js_1.requireSetting)('kbz_pay', 'app_key', options.appKey);
         this.merchantCode = (0, env_js_1.requireSetting)('kbz_pay', 'merchant_code', options.merchantCode);
-        this.sandbox = (0, env_js_1.parseSandbox)(options.sandbox);
-        this.apiUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.apiUrl) ??
-            (this.sandbox ? KbzPayConfig.SANDBOX_API_URL : KbzPayConfig.PRODUCTION_API_URL));
-        this.pwaUrl = `${(0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.pwaUrl) ??
-            (this.sandbox ? KbzPayConfig.SANDBOX_PWA_URL : KbzPayConfig.PRODUCTION_PWA_URL))}/`;
+        this.timeoutSeconds = (0, env_js_1.requireSeconds)('kbz_pay', 'timeout_in_seconds', options.timeoutSeconds);
+        this.apiUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.apiUrl) ?? KbzPayConfig.PRODUCTION_API_URL);
+        this.pwaUrl = `${(0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.pwaUrl) ?? KbzPayConfig.PRODUCTION_PWA_URL)}/`;
     }
     /**
-     * Reads `KBZ_PAY_APP_ID`, `KBZ_PAY_APP_KEY`, `KBZ_PAY_MERCHANT_CODE`, `KBZ_PAY_SANDBOX`,
-     * `KBZ_PAY_BASE_URL` and `KBZ_PAY_PWA_BASE_REDIRECT_URL`.
+     * Reads `KBZ_PAY_APP_ID`, `KBZ_PAY_APP_KEY`, `KBZ_PAY_MERCHANT_CODE`,
+     * `MYANMAR_PAYMENTS_HTTP_TIMEOUT`, `KBZ_PAY_BASE_URL` and `KBZ_PAY_PWA_BASE_REDIRECT_URL`.
      */
     static fromEnv(env = (0, env_js_1.defaultEnv)()) {
         return new KbzPayConfig({
             appId: (0, env_js_1.envFirst)(env, 'KBZ_PAY_APP_ID'),
             appKey: (0, env_js_1.envFirst)(env, 'KBZ_PAY_APP_KEY'),
             merchantCode: (0, env_js_1.envFirst)(env, 'KBZ_PAY_MERCHANT_CODE'),
-            sandbox: (0, env_js_1.envSandbox)(env, 'KBZ_PAY_SANDBOX'),
+            timeoutSeconds: (0, env_js_1.envFirst)(env, env_js_1.HTTP_TIMEOUT_VARIABLE),
             apiUrl: (0, env_js_1.envFirst)(env, 'KBZ_PAY_BASE_URL'),
             pwaUrl: (0, env_js_1.envFirst)(env, 'KBZ_PAY_PWA_BASE_REDIRECT_URL'),
         });
@@ -76,7 +74,7 @@ class KbzPay {
     constructor(config, options = {}) {
         this.config = config instanceof KbzPayConfig ? config : new KbzPayConfig(config);
         this.signer = new signer_js_1.KbzPaySigner(this.config.appKey);
-        this.transport = new http_js_1.Transport((0, http_js_1.httpClientFrom)(options));
+        this.transport = new http_js_1.Transport((0, http_js_1.httpClientFrom)(options, this.config.timeoutSeconds));
     }
     /** A gateway configured from the `KBZ_PAY_*` environment variables. */
     static fromEnv(env = (0, env_js_1.defaultEnv)(), options = {}) {

package/dist/cjs/wave-money/wave-money.d.ts

@@ -11,41 +11,40 @@ export interface WaveMoneyConfigOptions {
     secretKey: string;
     /** Your business name, shown on Wave's payment page. */
     merchantName: string;
-    /** How long the customer has to pay, in seconds (default 300). */
-    timeToLiveSeconds?: number | undefined;
+    /** How long the customer has to pay, in seconds: a whole number greater than 0 (or its text). */
+    timeToLiveSeconds: number | string;
     /**
-     * Use the test environment (default `true`).
-     * Text is read like a `*_SANDBOX` variable: `false`, `0`, `f`, `no` or `off` select production.
+     * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
+     * (or its text). A client you pass keeps its own timeout.
      */
-    sandbox?: boolean | string | undefined;
-    /** Overrides the API base URL. */
+    timeoutSeconds: number | string;
+    /** Overrides the API base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
     /** Overrides the host the customer is redirected to. Wave serves it without the API port. */
     authenticateUrl?: string | undefined;
 }
 /**
- * Wave Money credentials and endpoints. A missing credential throws a `ConfigurationError`.
+ * Wave Money credentials and endpoints. A missing setting throws a `ConfigurationError`. The URLs
+ * default to production.
  */
 export declare class WaveMoneyConfig {
-    static readonly SANDBOX_URL = "https://preprodpayments.wavemoney.io:8107";
     static readonly PRODUCTION_URL = "https://payments.wavemoney.io";
-    static readonly SANDBOX_AUTHENTICATE_URL = "https://preprodpayments.wavemoney.io";
     static readonly PRODUCTION_AUTHENTICATE_URL = "https://payments.wavemoney.io";
-    static readonly DEFAULT_TIME_TO_LIVE_SECONDS = 300;
     readonly merchantId: string;
     readonly secretKey: string;
     readonly merchantName: string;
     /** Seconds the customer has to pay. */
     readonly timeToLiveSeconds: number;
-    readonly sandbox: boolean;
+    /** Seconds before the default HTTP client gives up on a request. */
+    readonly timeoutSeconds: number;
     /** The API base URL in use. */
     readonly baseUrl: string;
     /** The host the customer is redirected to. */
     readonly authenticateUrl: string;
     constructor(options: WaveMoneyConfigOptions);
     /**
-     * Reads `WAVE_MONEY_MERCHANT_ID`, `WAVE_MONEY_SECRET_KEY`, `WAVE_MONEY_MERCHANT_NAME` (falling back
-     * to `APP_NAME`), `WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS`, `WAVE_MONEY_SANDBOX`, `WAVE_MONEY_BASE_URL`
+     * Reads `WAVE_MONEY_MERCHANT_ID`, `WAVE_MONEY_SECRET_KEY`, `WAVE_MONEY_MERCHANT_NAME`,
+     * `WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT`, `WAVE_MONEY_BASE_URL`
      * and `WAVE_MONEY_AUTHENTICATE_URL`.
      */
     static fromEnv(env?: EnvSource): WaveMoneyConfig;

package/dist/cjs/wave-money/wave-money.js

@@ -13,20 +13,19 @@ const status_js_1 = require("../core/status.js");
 const validate_js_1 = require("../core/validate.js");
 const values_js_1 = require("../core/values.js");
 /**
- * Wave Money credentials and endpoints. A missing credential throws a `ConfigurationError`.
+ * Wave Money credentials and endpoints. A missing setting throws a `ConfigurationError`. The URLs
+ * default to production.
  */
 class WaveMoneyConfig {
-    static SANDBOX_URL = 'https://preprodpayments.wavemoney.io:8107';
     static PRODUCTION_URL = 'https://payments.wavemoney.io';
-    static SANDBOX_AUTHENTICATE_URL = 'https://preprodpayments.wavemoney.io';
     static PRODUCTION_AUTHENTICATE_URL = 'https://payments.wavemoney.io';
-    static DEFAULT_TIME_TO_LIVE_SECONDS = 300;
     merchantId;
     secretKey;
     merchantName;
     /** Seconds the customer has to pay. */
     timeToLiveSeconds;
-    sandbox;
+    /** Seconds before the default HTTP client gives up on a request. */
+    timeoutSeconds;
     /** The API base URL in use. */
     baseUrl;
     /** The host the customer is redirected to. */
@@ -35,31 +34,23 @@ class WaveMoneyConfig {
         this.merchantId = (0, env_js_1.requireSetting)('wave_money', 'merchant_id', options.merchantId);
         this.secretKey = (0, env_js_1.requireSetting)('wave_money', 'secret_key', options.secretKey);
         this.merchantName = (0, env_js_1.requireSetting)('wave_money', 'merchant_name', options.merchantName);
-        const ttl = options.timeToLiveSeconds;
-        this.timeToLiveSeconds =
-            ttl !== undefined && Number.isInteger(ttl) && ttl > 0
-                ? ttl
-                : WaveMoneyConfig.DEFAULT_TIME_TO_LIVE_SECONDS;
-        this.sandbox = (0, env_js_1.parseSandbox)(options.sandbox);
-        this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ??
-            (this.sandbox ? WaveMoneyConfig.SANDBOX_URL : WaveMoneyConfig.PRODUCTION_URL));
-        this.authenticateUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.authenticateUrl) ??
-            (this.sandbox
-                ? WaveMoneyConfig.SANDBOX_AUTHENTICATE_URL
-                : WaveMoneyConfig.PRODUCTION_AUTHENTICATE_URL));
+        this.timeToLiveSeconds = (0, env_js_1.requireSeconds)('wave_money', 'time_to_live_in_seconds', options.timeToLiveSeconds);
+        this.timeoutSeconds = (0, env_js_1.requireSeconds)('wave_money', 'timeout_in_seconds', options.timeoutSeconds);
+        this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ?? WaveMoneyConfig.PRODUCTION_URL);
+        this.authenticateUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.authenticateUrl) ?? WaveMoneyConfig.PRODUCTION_AUTHENTICATE_URL);
     }
     /**
-     * Reads `WAVE_MONEY_MERCHANT_ID`, `WAVE_MONEY_SECRET_KEY`, `WAVE_MONEY_MERCHANT_NAME` (falling back
-     * to `APP_NAME`), `WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS`, `WAVE_MONEY_SANDBOX`, `WAVE_MONEY_BASE_URL`
+     * Reads `WAVE_MONEY_MERCHANT_ID`, `WAVE_MONEY_SECRET_KEY`, `WAVE_MONEY_MERCHANT_NAME`,
+     * `WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT`, `WAVE_MONEY_BASE_URL`
      * and `WAVE_MONEY_AUTHENTICATE_URL`.
      */
     static fromEnv(env = (0, env_js_1.defaultEnv)()) {
         return new WaveMoneyConfig({
             merchantId: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_MERCHANT_ID'),
             secretKey: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_SECRET_KEY'),
-            merchantName: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_MERCHANT_NAME', 'APP_NAME'),
-            timeToLiveSeconds: (0, env_js_1.envInt)(env, 'WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS'),
-            sandbox: (0, env_js_1.envSandbox)(env, 'WAVE_MONEY_SANDBOX'),
+            merchantName: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_MERCHANT_NAME'),
+            timeToLiveSeconds: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS'),
+            timeoutSeconds: (0, env_js_1.envFirst)(env, env_js_1.HTTP_TIMEOUT_VARIABLE),
             baseUrl: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_BASE_URL'),
             authenticateUrl: (0, env_js_1.envFirst)(env, 'WAVE_MONEY_AUTHENTICATE_URL'),
         });
@@ -98,7 +89,7 @@ class WaveMoney {
     transport;
     constructor(config, options = {}) {
         this.config = config instanceof WaveMoneyConfig ? config : new WaveMoneyConfig(config);
-        this.transport = new http_js_1.Transport((0, http_js_1.httpClientFrom)(options));
+        this.transport = new http_js_1.Transport((0, http_js_1.httpClientFrom)(options, this.config.timeoutSeconds));
     }
     /** A gateway configured from the `WAVE_MONEY_*` environment variables. */
     static fromEnv(env = (0, env_js_1.defaultEnv)(), options = {}) {

package/dist/cjs/yoma-mmqr/yoma-mmqr.d.ts

@@ -16,38 +16,38 @@ export interface YomaMmqrConfigOptions {
     webhookHashKey: string;
     /** The secret you shared with Yoma; when set, callbacks must carry it in `X-Webhook-Secret`. */
     webhookSecret?: string | undefined;
+    /** The `{version}` segment of the API paths, e.g. `v1rc`. */
+    apiVersion: string;
     /**
-     * Use the UAT payment hub (default `true`).
-     * Text is read like a `*_SANDBOX` variable: `false`, `0`, `f`, `no` or `off` select production.
+     * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
+     * (or its text). A client you pass keeps its own timeout.
      */
-    sandbox?: boolean | string | undefined;
-    /** Overrides the API base URL. */
+    timeoutSeconds: number | string;
+    /** Overrides the API base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
-    /** The `{version}` segment of the API paths (default `v1rc`). */
-    apiVersion?: string | undefined;
 }
 /**
- * Yoma MMQR credentials and endpoints. A missing credential throws a `ConfigurationError`.
+ * Yoma MMQR credentials and endpoints. A missing setting throws a `ConfigurationError`. The URL
+ * defaults to production.
  */
 export declare class YomaMmqrConfig {
-    static readonly SANDBOX_URL = "https://devapi.yomabank.net";
     static readonly PRODUCTION_URL = "https://paymenthubapi.yomabank.com";
-    static readonly DEFAULT_API_VERSION = "v1rc";
     readonly merchantId: string;
     readonly clientId: string;
     readonly clientSecret: string;
     readonly webhookHashKey: string;
     readonly webhookSecret: string | undefined;
-    readonly sandbox: boolean;
+    /** The `{version}` segment of the API paths. */
+    readonly apiVersion: string;
+    /** Seconds before the default HTTP client gives up on a request. */
+    readonly timeoutSeconds: number;
     /** The base URL in use. */
     readonly baseUrl: string;
-    /** The API version in use. */
-    readonly apiVersion: string;
     constructor(options: YomaMmqrConfigOptions);
     /**
      * Reads `YOMA_MMQR_MERCHANT_ID`, `YOMA_MMQR_CLIENT_ID`, `YOMA_MMQR_CLIENT_SECRET`,
-     * `YOMA_MMQR_WEBHOOK_HASHKEY`, `YOMA_MMQR_WEBHOOK_SECRET`, `YOMA_MMQR_SANDBOX`,
-     * `YOMA_MMQR_BASE_URL` and `YOMA_MMQR_API_VERSION`.
+     * `YOMA_MMQR_WEBHOOK_HASHKEY`, `YOMA_MMQR_API_VERSION`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT`,
+     * `YOMA_MMQR_WEBHOOK_SECRET` and `YOMA_MMQR_BASE_URL`.
      */
     static fromEnv(env?: EnvSource): YomaMmqrConfig;
 }

package/dist/cjs/yoma-mmqr/yoma-mmqr.js

@@ -13,37 +13,36 @@ const status_js_1 = require("../core/status.js");
 const validate_js_1 = require("../core/validate.js");
 const values_js_1 = require("../core/values.js");
 /**
- * Yoma MMQR credentials and endpoints. A missing credential throws a `ConfigurationError`.
+ * Yoma MMQR credentials and endpoints. A missing setting throws a `ConfigurationError`. The URL
+ * defaults to production.
  */
 class YomaMmqrConfig {
-    static SANDBOX_URL = 'https://devapi.yomabank.net';
     static PRODUCTION_URL = 'https://paymenthubapi.yomabank.com';
-    static DEFAULT_API_VERSION = 'v1rc';
     merchantId;
     clientId;
     clientSecret;
     webhookHashKey;
     webhookSecret;
-    sandbox;
+    /** The `{version}` segment of the API paths. */
+    apiVersion;
+    /** Seconds before the default HTTP client gives up on a request. */
+    timeoutSeconds;
     /** The base URL in use. */
     baseUrl;
-    /** The API version in use. */
-    apiVersion;
     constructor(options) {
         this.merchantId = (0, env_js_1.requireSetting)('yoma_mmqr', 'merchant_id', options.merchantId);
         this.clientId = (0, env_js_1.requireSetting)('yoma_mmqr', 'client_id', options.clientId);
         this.clientSecret = (0, env_js_1.requireSetting)('yoma_mmqr', 'client_secret', options.clientSecret);
         this.webhookHashKey = (0, env_js_1.requireSetting)('yoma_mmqr', 'webhook_hashkey', options.webhookHashKey);
+        this.apiVersion = (0, env_js_1.requireSetting)('yoma_mmqr', 'api_version', options.apiVersion);
+        this.timeoutSeconds = (0, env_js_1.requireSeconds)('yoma_mmqr', 'timeout_in_seconds', options.timeoutSeconds);
         this.webhookSecret = (0, env_js_1.optionalSetting)(options.webhookSecret);
-        this.sandbox = (0, env_js_1.parseSandbox)(options.sandbox);
-        this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ??
-            (this.sandbox ? YomaMmqrConfig.SANDBOX_URL : YomaMmqrConfig.PRODUCTION_URL));
-        this.apiVersion = (0, env_js_1.optionalSetting)(options.apiVersion) ?? YomaMmqrConfig.DEFAULT_API_VERSION;
+        this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ?? YomaMmqrConfig.PRODUCTION_URL);
     }
     /**
      * Reads `YOMA_MMQR_MERCHANT_ID`, `YOMA_MMQR_CLIENT_ID`, `YOMA_MMQR_CLIENT_SECRET`,
-     * `YOMA_MMQR_WEBHOOK_HASHKEY`, `YOMA_MMQR_WEBHOOK_SECRET`, `YOMA_MMQR_SANDBOX`,
-     * `YOMA_MMQR_BASE_URL` and `YOMA_MMQR_API_VERSION`.
+     * `YOMA_MMQR_WEBHOOK_HASHKEY`, `YOMA_MMQR_API_VERSION`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT`,
+     * `YOMA_MMQR_WEBHOOK_SECRET` and `YOMA_MMQR_BASE_URL`.
      */
     static fromEnv(env = (0, env_js_1.defaultEnv)()) {
         return new YomaMmqrConfig({
@@ -51,10 +50,10 @@ class YomaMmqrConfig {
             clientId: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_CLIENT_ID'),
             clientSecret: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_CLIENT_SECRET'),
             webhookHashKey: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_WEBHOOK_HASHKEY'),
+            apiVersion: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_API_VERSION'),
+            timeoutSeconds: (0, env_js_1.envFirst)(env, env_js_1.HTTP_TIMEOUT_VARIABLE),
             webhookSecret: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_WEBHOOK_SECRET'),
-            sandbox: (0, env_js_1.envSandbox)(env, 'YOMA_MMQR_SANDBOX'),
             baseUrl: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_BASE_URL'),
-            apiVersion: (0, env_js_1.envFirst)(env, 'YOMA_MMQR_API_VERSION'),
         });
     }
 }
@@ -79,7 +78,7 @@ class YomaMmqr {
     pendingToken;
     constructor(config, options = {}) {
         this.config = config instanceof YomaMmqrConfig ? config : new YomaMmqrConfig(config);
-        this.transport = new http_js_1.Transport((0, http_js_1.httpClientFrom)(options));
+        this.transport = new http_js_1.Transport((0, http_js_1.httpClientFrom)(options, this.config.timeoutSeconds));
         this.cache = options.tokenCache ?? new cache_js_1.MemoryTokenCache();
     }
     /** A gateway configured from the `YOMA_MMQR_*` environment variables. */

package/dist/esm/aya-pay/aya-pay.d.ts

@@ -10,29 +10,29 @@ export interface AyaPayConfigOptions {
     /** The secret that signs requests and verifies callbacks. */
     appSecret: string;
     /**
-     * Use the UAT environment (default `true`).
-     * Text is read like a `*_SANDBOX` variable: `false`, `0`, `f`, `no` or `off` select production.
+     * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
+     * (or its text). A client you pass keeps its own timeout.
      */
-    sandbox?: boolean | string | undefined;
-    /** Overrides the gateway base URL. */
+    timeoutSeconds: number | string;
+    /** Overrides the gateway base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
 }
 /**
- * AYA Payment Gateway (APG) credentials and endpoints. A missing credential throws a
- * `ConfigurationError`.
+ * AYA Payment Gateway (APG) credentials and endpoints. A missing setting throws a
+ * `ConfigurationError`. The URL defaults to production.
  */
 export declare class AyaPayConfig {
-    static readonly SANDBOX_URL = "https://uat-pgw.ayainnovation.com";
     static readonly PRODUCTION_URL = "https://pgw.ayainnovation.com";
     readonly appKey: string;
     readonly appSecret: string;
-    readonly sandbox: boolean;
+    /** Seconds before the default HTTP client gives up on a request. */
+    readonly timeoutSeconds: number;
     /** The base URL in use. */
     readonly baseUrl: string;
     constructor(options: AyaPayConfigOptions);
     /**
-     * Reads `AYA_PAY_APP_KEY`, `AYA_PAY_APP_SECRET`, `AYA_PAY_SANDBOX` and `AYA_PAY_BASE_URL`, falling
-     * back to the `AYA_PGW_*` names.
+     * Reads `AYA_PAY_APP_KEY`, `AYA_PAY_APP_SECRET`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT` and
+     * `AYA_PAY_BASE_URL`, falling back to the `AYA_PGW_*` names.
      */
     static fromEnv(env?: EnvSource): AyaPayConfig;
 }

package/dist/esm/aya-pay/aya-pay.js

@@ -1,7 +1,7 @@
 import {} from '../core/amount.js';
 import { CallbackRequest, losslessInput, losslessQueryInput, PaymentCallback, PaymentStatusResult, } from '../core/callback.js';
 import { decodeBase64, hmacSha256Hex, safeEqual } from '../core/crypto.js';
-import { defaultEnv, envFirst, envSandbox, parseSandbox, optionalSetting, requireSetting, trimUrl, } from '../core/env.js';
+import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSeconds, requireSetting, trimUrl, } from '../core/env.js';
 import { ApiError, SignatureVerificationError } from '../core/errors.js';
 import { httpClientFrom, Transport, } from '../core/http.js';
 import { isLosslessObject, parseJsonObject, toPlainObject, } from '../core/json.js';
@@ -10,33 +10,32 @@ import { resolveStatus } from '../core/status.js';
 import { toAmount, Validator } from '../core/validate.js';
 import { get, isNested, object, optional, scalarString, trimmed } from '../core/values.js';
 /**
- * AYA Payment Gateway (APG) credentials and endpoints. A missing credential throws a
- * `ConfigurationError`.
+ * AYA Payment Gateway (APG) credentials and endpoints. A missing setting throws a
+ * `ConfigurationError`. The URL defaults to production.
  */
 export class AyaPayConfig {
-    static SANDBOX_URL = 'https://uat-pgw.ayainnovation.com';
     static PRODUCTION_URL = 'https://pgw.ayainnovation.com';
     appKey;
     appSecret;
-    sandbox;
+    /** Seconds before the default HTTP client gives up on a request. */
+    timeoutSeconds;
     /** The base URL in use. */
     baseUrl;
     constructor(options) {
         this.appKey = requireSetting('aya_pay', 'app_key', options.appKey);
         this.appSecret = requireSetting('aya_pay', 'app_secret', options.appSecret);
-        this.sandbox = parseSandbox(options.sandbox);
-        this.baseUrl = trimUrl(optionalSetting(options.baseUrl) ??
-            (this.sandbox ? AyaPayConfig.SANDBOX_URL : AyaPayConfig.PRODUCTION_URL));
+        this.timeoutSeconds = requireSeconds('aya_pay', 'timeout_in_seconds', options.timeoutSeconds);
+        this.baseUrl = trimUrl(optionalSetting(options.baseUrl) ?? AyaPayConfig.PRODUCTION_URL);
     }
     /**
-     * Reads `AYA_PAY_APP_KEY`, `AYA_PAY_APP_SECRET`, `AYA_PAY_SANDBOX` and `AYA_PAY_BASE_URL`, falling
-     * back to the `AYA_PGW_*` names.
+     * Reads `AYA_PAY_APP_KEY`, `AYA_PAY_APP_SECRET`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT` and
+     * `AYA_PAY_BASE_URL`, falling back to the `AYA_PGW_*` names.
      */
     static fromEnv(env = defaultEnv()) {
         return new AyaPayConfig({
             appKey: envFirst(env, 'AYA_PAY_APP_KEY', 'AYA_PGW_APP_KEY'),
             appSecret: envFirst(env, 'AYA_PAY_APP_SECRET', 'AYA_PGW_APP_SECRET'),
-            sandbox: envSandbox(env, 'AYA_PAY_SANDBOX'),
+            timeoutSeconds: envFirst(env, HTTP_TIMEOUT_VARIABLE),
             baseUrl: envFirst(env, 'AYA_PAY_BASE_URL', 'AYA_PGW_BASE_URL'),
         });
     }
@@ -119,7 +118,7 @@ export class AyaPay {
     transport;
     constructor(config, options = {}) {
         this.config = config instanceof AyaPayConfig ? config : new AyaPayConfig(config);
-        this.transport = new Transport(httpClientFrom(options));
+        this.transport = new Transport(httpClientFrom(options, this.config.timeoutSeconds));
     }
     /** A gateway configured from the `AYA_PAY_*` (or `AYA_PGW_*`) environment variables. */
     static fromEnv(env = defaultEnv(), options = {}) {

package/dist/esm/core/env.d.ts

@@ -3,21 +3,14 @@ export type EnvSource = Readonly<Record<string, string | undefined>>;
 /** The first non-empty value among `keys`, trimmed, or `''`. @internal */
 export declare function envFirst(env: EnvSource, ...keys: string[]): string;
 /**
- * Reads a `*_SANDBOX` variable. Only `false`, `0`, `f`, `no` and `off` (any case) select
- * production; unset or unrecognized values mean sandbox.
+ * A required whole number of seconds: an integer greater than 0, or text such as `'300'`. Unset
+ * or blank throws the missing {@link ConfigurationError}; anything else throws the invalid one.
  *
  * @internal
  */
-export declare function envSandbox(env: EnvSource, key: string): boolean;
-/**
- * A `sandbox` setting: booleans as is, text parsed like a `*_SANDBOX` variable (`false`, `0`, `f`,
- * `no` and `off` in any case select production; anything else means sandbox), unset means sandbox.
- *
- * @internal
- */
-export declare function parseSandbox(value: boolean | string | undefined | null): boolean;
-/** An integer variable, or `undefined` when unset or not an integer. @internal */
-export declare function envInt(env: EnvSource, key: string): number | undefined;
+export declare function requireSeconds(gateway: string, key: string, value: unknown): number;
+/** The variable holding the HTTP timeout of every gateway that calls an API. @internal */
+export declare const HTTP_TIMEOUT_VARIABLE = "MYANMAR_PAYMENTS_HTTP_TIMEOUT";
 /** The trimmed value, or throws a {@link ConfigurationError} naming `key`. @internal */
 export declare function requireSetting(gateway: string, key: string, value: unknown): string;
 /** A trimmed optional string, `undefined` when blank. @internal */

package/dist/esm/core/env.js

@@ -10,31 +10,29 @@ export function envFirst(env, ...keys) {
     return '';
 }
 /**
- * Reads a `*_SANDBOX` variable. Only `false`, `0`, `f`, `no` and `off` (any case) select
- * production; unset or unrecognized values mean sandbox.
+ * A required whole number of seconds: an integer greater than 0, or text such as `'300'`. Unset
+ * or blank throws the missing {@link ConfigurationError}; anything else throws the invalid one.
  *
  * @internal
  */
-export function envSandbox(env, key) {
-    return parseSandbox(env[key] ?? '');
-}
-/**
- * A `sandbox` setting: booleans as is, text parsed like a `*_SANDBOX` variable (`false`, `0`, `f`,
- * `no` and `off` in any case select production; anything else means sandbox), unset means sandbox.
- *
- * @internal
- */
-export function parseSandbox(value) {
-    if (typeof value === 'boolean') {
-        return value;
+export function requireSeconds(gateway, key, value) {
+    if (value === undefined || value === null || (typeof value === 'string' && value.trim() === '')) {
+        throw new ConfigurationError(gateway, key);
     }
-    return !['false', '0', 'f', 'no', 'off'].includes((value ?? '').trim().toLowerCase());
-}
-/** An integer variable, or `undefined` when unset or not an integer. @internal */
-export function envInt(env, key) {
-    const value = env[key]?.trim() ?? '';
-    return /^[+-]?\d+$/.test(value) ? Number.parseInt(value, 10) : undefined;
+    let seconds;
+    if (typeof value === 'number' && Number.isSafeInteger(value)) {
+        seconds = value;
+    }
+    else if (typeof value === 'string' && /^[+-]?\d+$/.test(value.trim())) {
+        seconds = Number.parseInt(value.trim(), 10);
+    }
+    if (seconds === undefined || !Number.isSafeInteger(seconds) || seconds <= 0) {
+        throw new ConfigurationError(gateway, key, true);
+    }
+    return seconds;
 }
+/** The variable holding the HTTP timeout of every gateway that calls an API. @internal */
+export const HTTP_TIMEOUT_VARIABLE = 'MYANMAR_PAYMENTS_HTTP_TIMEOUT';
 /** The trimmed value, or throws a {@link ConfigurationError} naming `key`. @internal */
 export function requireSetting(gateway, key, value) {
     if (typeof value !== 'string' || value.trim() === '') {

package/dist/esm/core/errors.d.ts

@@ -45,12 +45,17 @@ export declare class SignatureVerificationError extends PaymentError {
     constructor(message: string, raw?: Record<string, unknown>);
 }
 /**
- * Thrown when a gateway is missing a credential or setting it needs.
+ * Thrown when a gateway is missing a credential or setting it needs, or a whole-number setting
+ * is not a whole number greater than 0.
  */
 export declare class ConfigurationError extends PaymentError {
     /** The gateway, e.g. `kbz_pay`. */
     readonly gateway: string;
-    /** The missing setting, e.g. `app_key`. */
+    /** The missing or invalid setting, e.g. `app_key`. */
     readonly key: string;
-    constructor(gateway: string, key: string);
+    /**
+     * @param invalid `true` when the setting is set but is not a whole number greater than 0;
+     *   `false` (the default) when it is missing.
+     */
+    constructor(gateway: string, key: string, invalid?: boolean);
 }

package/dist/esm/core/errors.js

@@ -55,15 +55,22 @@ export class SignatureVerificationError extends PaymentError {
     }
 }
 /**
- * Thrown when a gateway is missing a credential or setting it needs.
+ * Thrown when a gateway is missing a credential or setting it needs, or a whole-number setting
+ * is not a whole number greater than 0.
  */
 export class ConfigurationError extends PaymentError {
     /** The gateway, e.g. `kbz_pay`. */
     gateway;
-    /** The missing setting, e.g. `app_key`. */
+    /** The missing or invalid setting, e.g. `app_key`. */
     key;
-    constructor(gateway, key) {
-        super(`The ${gateway} configuration is missing [${key}].`);
+    /**
+     * @param invalid `true` when the setting is set but is not a whole number greater than 0;
+     *   `false` (the default) when it is missing.
+     */
+    constructor(gateway, key, invalid = false) {
+        super(invalid
+            ? `The ${gateway} configuration [${key}] must be a whole number greater than 0.`
+            : `The ${gateway} configuration is missing [${key}].`);
         this.gateway = gateway;
         this.key = key;
     }

package/dist/esm/core/http.d.ts

@@ -27,29 +27,28 @@ export type FetchFunction = (input: string, init: RequestInit) => Promise<Respon
 export interface FetchHttpClientOptions {
     /** The `fetch` to call; defaults to the global `fetch`. */
     fetch?: FetchFunction | undefined;
-    /** Milliseconds before a request is aborted; defaults to 30000. `0` disables the timeout. */
-    timeoutMs?: number | undefined;
+    /** Milliseconds before a request is aborted. `0` disables the timeout. */
+    timeoutMs: number;
 }
-/** The default request timeout: 30 seconds. */
-export declare const DEFAULT_TIMEOUT_MS = 30000;
 /**
- * The default {@link HttpClient}: the global `fetch` (or the one you pass) with a 30 second
- * timeout.
+ * The default {@link HttpClient}: the global `fetch` (or the one you pass) with the timeout you
+ * give it. Gateways build one with their `timeoutSeconds` setting when you pass no client.
  */
 export declare class FetchHttpClient implements HttpClient {
     private readonly fetchFunction;
     private readonly timeoutMs;
-    constructor(options?: FetchHttpClientOptions);
+    constructor(options: FetchHttpClientOptions);
     send(request: HttpRequest): Promise<HttpResponse>;
 }
 /** Options every gateway that calls an API accepts. */
 export interface GatewayOptions {
-    /** Sends the requests. Takes precedence over `fetch` and `timeoutMs`. */
+    /**
+     * Sends the requests, with its own timeout. Takes precedence over `fetch`. Without one, the
+     * gateway uses a {@link FetchHttpClient} with the config's `timeoutSeconds`.
+     */
     httpClient?: HttpClient | undefined;
     /** The `fetch` the default client calls, e.g. a mocked one in tests. */
     fetch?: FetchFunction | undefined;
-    /** Milliseconds before the default client aborts a request; defaults to 30000. */
-    timeoutMs?: number | undefined;
 }
 /** Per-call options of every network method. */
 export interface RequestOptions {
@@ -57,7 +56,7 @@ export interface RequestOptions {
     signal?: AbortSignal | undefined;
 }
 /** @internal */
-export declare function httpClientFrom(options?: GatewayOptions): HttpClient;
+export declare function httpClientFrom(options: GatewayOptions, timeoutSeconds: number): HttpClient;
 /** A decoded gateway response. @internal */
 export declare class GatewayResponse {
     readonly status: number;

package/dist/esm/core/http.js

@@ -1,17 +1,15 @@
 import { ApiError, PaymentError } from './errors.js';
 import { parseJsonObject } from './json.js';
-/** The default request timeout: 30 seconds. */
-export const DEFAULT_TIMEOUT_MS = 30_000;
 /**
- * The default {@link HttpClient}: the global `fetch` (or the one you pass) with a 30 second
- * timeout.
+ * The default {@link HttpClient}: the global `fetch` (or the one you pass) with the timeout you
+ * give it. Gateways build one with their `timeoutSeconds` setting when you pass no client.
  */
 export class FetchHttpClient {
     fetchFunction;
     timeoutMs;
-    constructor(options = {}) {
+    constructor(options) {
         this.fetchFunction = options.fetch;
-        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.timeoutMs = options.timeoutMs;
     }
     async send(request) {
         const fetchFunction = this.fetchFunction ?? globalThis.fetch;
@@ -38,9 +36,9 @@ export class FetchHttpClient {
     }
 }
 /** @internal */
-export function httpClientFrom(options = {}) {
+export function httpClientFrom(options, timeoutSeconds) {
     return (options.httpClient ??
-        new FetchHttpClient({ fetch: options.fetch, timeoutMs: options.timeoutMs }));
+        new FetchHttpClient({ fetch: options.fetch, timeoutMs: timeoutSeconds * 1000 }));
 }
 /** A decoded gateway response. @internal */
 export class GatewayResponse {