@laranex/myanmar-payments 4.0.0-dev.6 → 4.0.0-dev.8

package/CHANGELOG.md

@@ -22,8 +22,8 @@ Initial release. The version number matches the other Laranex Myanmar payments p
 - Requires Node.js 20 or higher.
 
 ### Changed since the pre-releases
-- No sandbox switch: the sandbox setting (`sandbox`) and the `*_SANDBOX` variables are removed, and every gateway defaults to its production endpoints. Every other setting is required: the HTTP timeout (`timeout_in_seconds`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT`) for every gateway that calls an API, Wave Money's `time_to_live_in_seconds` and `merchant_name` (no `APP_NAME` fallback), Yoma MMQR's `api_version`, and CyberSource's `currency`, `locale` and `transactionType` on each payment. A missing setting throws the configuration error naming it; a time setting that is not a whole number greater than 0 throws `The <gateway> configuration [<key>] must be a whole number greater than 0.` Upgrading: delete `*_SANDBOX`; to keep testing against UAT, set the URL overrides to the UAT URLs listed in the docs; set the newly required settings.
-  - In Node: config options `timeoutSeconds` (KBZ Pay, Wave Money, AYA Pay, Yoma MMQR), `timeToLiveSeconds` and `apiVersion` are required and take a whole number or its text; the `SANDBOX_*`, `DEFAULT_TIME_TO_LIVE_SECONDS` and `DEFAULT_API_VERSION` constants are removed. `GatewayOptions.timeoutMs` (so also the `MyanmarPayments` option) and `DEFAULT_TIMEOUT_MS` are removed; `FetchHttpClient` requires `timeoutMs`. `ConfigurationError` takes a third `invalid` argument for the whole-number message.
+- No sandbox switch: the sandbox setting (`sandbox`) and the `*_SANDBOX` variables are removed, and every gateway defaults to its production endpoints. The HTTP timeout (`timeout_in_seconds`, `MYANMAR_PAYMENTS_HTTP_TIMEOUT`) of every gateway that calls an API is optional and defaults to 30 seconds. Every other setting is required: Wave Money's `time_to_live_in_seconds` and `merchant_name` (no `APP_NAME` fallback), Yoma MMQR's `api_version`, and CyberSource's `currency`, `locale` and `transactionType` on each payment. A missing setting throws the configuration error naming it; a time setting that is not a whole number greater than 0 throws `The <gateway> configuration [<key>] must be a whole number greater than 0.` Upgrading: delete `*_SANDBOX`; to keep testing against UAT, set the URL overrides to the UAT URLs listed in the docs; set the newly required settings.
+  - In Node: config options `timeToLiveSeconds` and `apiVersion` are required and take a whole number or its text; `timeoutSeconds` (KBZ Pay, Wave Money, AYA Pay, Yoma MMQR) is optional, takes a whole number or its text and defaults to the new `DEFAULT_TIMEOUT_SECONDS` (30) when unset or blank; the `SANDBOX_*`, `DEFAULT_TIME_TO_LIVE_SECONDS` and `DEFAULT_API_VERSION` constants are removed. `GatewayOptions.timeoutMs` (so also the `MyanmarPayments` option) and `DEFAULT_TIMEOUT_MS` are removed; `FetchHttpClient` requires `timeoutMs`. `ConfigurationError` takes a third `invalid` argument for the whole-number message.
 - `PaymentStatus.Cancelled` is renamed to `PaymentStatus.Canceled` and its value from `'cancelled'` to `'canceled'` (American English), with no alias. Code or stored statuses from the `v4.0.0-dev` pre-releases need the new name; gateway status literals such as Wave Money's `PAYMENT_REQUEST_CANCELLED` are unchanged.
 - Callback values that are JSON numbers are kept as their exact text, as strings, in `raw`, `parsedBody()`, `input()`, `queryInput()` and the `raw` of errors (`1000.50` is `'1000.50'`, not `1000.5`), like the PHP SDK.
 - A nested value (object or array) in a signed or hashed callback field now fails verification: KBZ Pay (any callback field), Wave Money (the hashed fields), AYA Pay (the signed payload fields) and Yoma MMQR (`status`). Before, KBZ Pay skipped it, Wave Money hashed it as `null` and AYA Pay signed it as empty.
@@ -31,3 +31,4 @@ Initial release. The version number matches the other Laranex Myanmar payments p
 - Yoma MMQR caches its access token under `myanmar-payments.yoma-mmqr.token.<sha256 of base URL and client id>` (was `node-myanmar-payments.…`), the same key as the PHP, Go and Python SDKs, and reads `expires_in` from its leading digits.
 - `Amount.equals()` compares by value, ignoring leading zeros too (`'01000'` equals `Amount.kyat(1000)`); text that is not plain digits with an optional fraction is never equal.
 - `CallbackRequest.rawBody` holds the exact bytes received (a string body is encoded as UTF-8), next to `body` as text, like Python's `raw_body` and Go's `Body`.
+- `WaveMoneyPaymentData` takes optional `merchantName` and `timeToLiveSeconds`, which override the configured `merchantName` and `timeToLiveSeconds` for one payment (request hash included); a blank `merchantName` or a `timeToLiveSeconds` that is not a whole number greater than 0 throws `InvalidPaymentDataError`, like the PHP SDK.

package/dist/cjs/aya-pay/aya-pay.d.ts

@@ -11,9 +11,10 @@ export interface AyaPayConfigOptions {
     appSecret: string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the gateway base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
 }

package/dist/cjs/aya-pay/aya-pay.js

@@ -26,7 +26,7 @@ class AyaPayConfig {
     constructor(options) {
         this.appKey = (0, env_js_1.requireSetting)('aya_pay', 'app_key', options.appKey);
         this.appSecret = (0, env_js_1.requireSetting)('aya_pay', 'app_secret', options.appSecret);
-        this.timeoutSeconds = (0, env_js_1.requireSeconds)('aya_pay', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = (0, env_js_1.resolveTimeout)('aya_pay', options.timeoutSeconds);
         this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ?? AyaPayConfig.PRODUCTION_URL);
     }
     /**

package/dist/cjs/core/env.d.ts

@@ -11,6 +11,15 @@ export declare function envFirst(env: EnvSource, ...keys: string[]): string;
 export declare function requireSeconds(gateway: string, key: string, value: unknown): number;
 /** The variable holding the HTTP timeout of every gateway that calls an API. @internal */
 export declare const HTTP_TIMEOUT_VARIABLE = "MYANMAR_PAYMENTS_HTTP_TIMEOUT";
+/** Seconds before the default HTTP client gives up on a request when no timeout is configured. */
+export declare const DEFAULT_TIMEOUT_SECONDS = 30;
+/**
+ * The HTTP timeout in seconds: {@link DEFAULT_TIMEOUT_SECONDS} when unset or blank, otherwise a
+ * whole number greater than 0 (or its text), or the invalid {@link ConfigurationError}.
+ *
+ * @internal
+ */
+export declare function resolveTimeout(gateway: string, value: unknown): number;
 /** The trimmed value, or throws a {@link ConfigurationError} naming `key`. @internal */
 export declare function requireSetting(gateway: string, key: string, value: unknown): string;
 /** A trimmed optional string, `undefined` when blank. @internal */

package/dist/cjs/core/env.js

@@ -1,8 +1,9 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.HTTP_TIMEOUT_VARIABLE = void 0;
+exports.DEFAULT_TIMEOUT_SECONDS = exports.HTTP_TIMEOUT_VARIABLE = void 0;
 exports.envFirst = envFirst;
 exports.requireSeconds = requireSeconds;
+exports.resolveTimeout = resolveTimeout;
 exports.requireSetting = requireSetting;
 exports.optionalSetting = optionalSetting;
 exports.trimUrl = trimUrl;
@@ -42,6 +43,20 @@ function requireSeconds(gateway, key, value) {
 }
 /** The variable holding the HTTP timeout of every gateway that calls an API. @internal */
 exports.HTTP_TIMEOUT_VARIABLE = 'MYANMAR_PAYMENTS_HTTP_TIMEOUT';
+/** Seconds before the default HTTP client gives up on a request when no timeout is configured. */
+exports.DEFAULT_TIMEOUT_SECONDS = 30;
+/**
+ * The HTTP timeout in seconds: {@link DEFAULT_TIMEOUT_SECONDS} when unset or blank, otherwise a
+ * whole number greater than 0 (or its text), or the invalid {@link ConfigurationError}.
+ *
+ * @internal
+ */
+function resolveTimeout(gateway, value) {
+    if (value === undefined || value === null || (typeof value === 'string' && value.trim() === '')) {
+        return exports.DEFAULT_TIMEOUT_SECONDS;
+    }
+    return requireSeconds(gateway, 'timeout_in_seconds', value);
+}
 /** The trimmed value, or throws a {@link ConfigurationError} naming `key`. @internal */
 function requireSetting(gateway, key, value) {
     if (typeof value !== 'string' || value.trim() === '') {

package/dist/cjs/core/index.d.ts

@@ -1,7 +1,7 @@
 export { Amount, type AmountInput } from './amount.js';
 export { MemoryTokenCache, type TokenCache } from './cache.js';
 export { Acknowledgement, CallbackRequest, PaymentCallback, PaymentStatusResult, type AcknowledgementInit, type BodyInput, type CallbackRequestInit, type HeadersInput, type NodeRequestLike, type PaymentCallbackInit, type PaymentStatusResultInit, type QueryInput, type ServerResponseLike, type WebRequestLike, } from './callback.js';
-export type { EnvSource } from './env.js';
+export { DEFAULT_TIMEOUT_SECONDS, type EnvSource } from './env.js';
 export { ApiError, ConfigurationError, InvalidPaymentDataError, PaymentError, SignatureVerificationError, } from './errors.js';
 export { FetchHttpClient, type FetchFunction, type FetchHttpClientOptions, type GatewayOptions, type HttpClient, type HttpRequest, type HttpResponse, type RequestOptions, } from './http.js';
 export { AppPayment, FormPayment, QrPayment, RedirectPayment, type FormField, type PaymentResult, } from './results.js';

package/dist/cjs/core/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveStatus = exports.PaymentStatus = exports.PaymentFlow = exports.RedirectPayment = exports.QrPayment = exports.FormPayment = exports.AppPayment = exports.FetchHttpClient = exports.SignatureVerificationError = exports.PaymentError = exports.InvalidPaymentDataError = exports.ConfigurationError = exports.ApiError = exports.PaymentStatusResult = exports.PaymentCallback = exports.CallbackRequest = exports.Acknowledgement = exports.MemoryTokenCache = exports.Amount = void 0;
+exports.resolveStatus = exports.PaymentStatus = exports.PaymentFlow = exports.RedirectPayment = exports.QrPayment = exports.FormPayment = exports.AppPayment = exports.FetchHttpClient = exports.SignatureVerificationError = exports.PaymentError = exports.InvalidPaymentDataError = exports.ConfigurationError = exports.ApiError = exports.DEFAULT_TIMEOUT_SECONDS = exports.PaymentStatusResult = exports.PaymentCallback = exports.CallbackRequest = exports.Acknowledgement = exports.MemoryTokenCache = exports.Amount = void 0;
 var amount_js_1 = require("./amount.js");
 Object.defineProperty(exports, "Amount", { enumerable: true, get: function () { return amount_js_1.Amount; } });
 var cache_js_1 = require("./cache.js");
@@ -10,6 +10,8 @@ Object.defineProperty(exports, "Acknowledgement", { enumerable: true, get: funct
 Object.defineProperty(exports, "CallbackRequest", { enumerable: true, get: function () { return callback_js_1.CallbackRequest; } });
 Object.defineProperty(exports, "PaymentCallback", { enumerable: true, get: function () { return callback_js_1.PaymentCallback; } });
 Object.defineProperty(exports, "PaymentStatusResult", { enumerable: true, get: function () { return callback_js_1.PaymentStatusResult; } });
+var env_js_1 = require("./env.js");
+Object.defineProperty(exports, "DEFAULT_TIMEOUT_SECONDS", { enumerable: true, get: function () { return env_js_1.DEFAULT_TIMEOUT_SECONDS; } });
 var errors_js_1 = require("./errors.js");
 Object.defineProperty(exports, "ApiError", { enumerable: true, get: function () { return errors_js_1.ApiError; } });
 Object.defineProperty(exports, "ConfigurationError", { enumerable: true, get: function () { return errors_js_1.ConfigurationError; } });

package/dist/cjs/kbz-pay/kbz-pay.d.ts

@@ -14,9 +14,10 @@ export interface KbzPayConfigOptions {
     merchantCode: string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the API base URL, e.g. to point at UAT or go through a proxy. */
     apiUrl?: string | undefined;
     /** Overrides the PWA checkout URL. A trailing `#` or `#/` is normalized to `#/`. */

package/dist/cjs/kbz-pay/kbz-pay.js

@@ -32,7 +32,7 @@ class KbzPayConfig {
         this.appId = (0, env_js_1.requireSetting)('kbz_pay', 'app_id', options.appId);
         this.appKey = (0, env_js_1.requireSetting)('kbz_pay', 'app_key', options.appKey);
         this.merchantCode = (0, env_js_1.requireSetting)('kbz_pay', 'merchant_code', options.merchantCode);
-        this.timeoutSeconds = (0, env_js_1.requireSeconds)('kbz_pay', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = (0, env_js_1.resolveTimeout)('kbz_pay', options.timeoutSeconds);
         this.apiUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.apiUrl) ?? KbzPayConfig.PRODUCTION_API_URL);
         this.pwaUrl = `${(0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.pwaUrl) ?? KbzPayConfig.PRODUCTION_PWA_URL)}/`;
     }

package/dist/cjs/wave-money/wave-money.d.ts

@@ -15,9 +15,10 @@ export interface WaveMoneyConfigOptions {
     timeToLiveSeconds: number | string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the API base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
     /** Overrides the host the customer is redirected to. Wave serves it without the API port. */
@@ -78,6 +79,16 @@ export interface WaveMoneyPaymentData {
      * this.
      */
     merchantReferenceId?: string | undefined;
+    /**
+     * The business name shown on Wave's page for this payment. Defaults to the configured
+     * `merchantName` when unset.
+     */
+    merchantName?: string | null | undefined;
+    /**
+     * How long the customer has to pay this payment, in seconds: a whole number greater than 0.
+     * Defaults to the configured `timeToLiveSeconds` when unset.
+     */
+    timeToLiveSeconds?: number | null | undefined;
 }
 /**
  * Wave Money (WavePay payment gateway): redirect payments and callbacks. Wave has no status API,

package/dist/cjs/wave-money/wave-money.js

@@ -35,7 +35,7 @@ class WaveMoneyConfig {
         this.secretKey = (0, env_js_1.requireSetting)('wave_money', 'secret_key', options.secretKey);
         this.merchantName = (0, env_js_1.requireSetting)('wave_money', 'merchant_name', options.merchantName);
         this.timeToLiveSeconds = (0, env_js_1.requireSeconds)('wave_money', 'time_to_live_in_seconds', options.timeToLiveSeconds);
-        this.timeoutSeconds = (0, env_js_1.requireSeconds)('wave_money', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = (0, env_js_1.resolveTimeout)('wave_money', options.timeoutSeconds);
         this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ?? WaveMoneyConfig.PRODUCTION_URL);
         this.authenticateUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.authenticateUrl) ?? WaveMoneyConfig.PRODUCTION_AUTHENTICATE_URL);
     }
@@ -127,7 +127,11 @@ class WaveMoney {
             .url('returnUrl', data.returnUrl)
             .required('description', data.description)
             .when(items.length === 0, 'items', 'The items field must have at least one item.')
-            .string('merchantReferenceId', data.merchantReferenceId);
+            .string('merchantReferenceId', data.merchantReferenceId)
+            .string('merchantName', data.merchantName)
+            .when(typeof data.merchantName === 'string' && data.merchantName.trim() === '', 'merchantName', 'The merchantName field is required.')
+            .when(isSet(data.timeToLiveSeconds) && !Number.isInteger(data.timeToLiveSeconds), 'timeToLiveSeconds', 'The timeToLiveSeconds field must be an integer.')
+            .when(isSet(data.timeToLiveSeconds) && data.timeToLiveSeconds < 1, 'timeToLiveSeconds', 'The timeToLiveSeconds field must be greater than 0.');
         items.forEach((item, index) => {
             validator
                 .required(`items.${index}.name`, item?.name)
@@ -153,7 +157,7 @@ class WaveMoney {
             data.merchantReferenceId = (0, crypto_js_1.randomHex)();
         }
         const amount = WaveMoney.resolvedAmount(data).toString();
-        const ttl = String(this.config.timeToLiveSeconds);
+        const ttl = String(data.timeToLiveSeconds ?? this.config.timeToLiveSeconds);
         // Wave documents items as [{"name": "...", "amount": 1000}] with a numeric amount; the amount
         // text is written as a JSON number without passing through a float.
         const items = `[${data.items
@@ -168,7 +172,7 @@ class WaveMoney {
             backend_result_url: data.callbackUrl,
             amount,
             payment_description: data.description,
-            merchant_name: this.config.merchantName,
+            merchant_name: data.merchantName ?? this.config.merchantName,
             items,
             hash: this.hash([
                 ttl,
@@ -226,6 +230,9 @@ class WaveMoney {
     }
 }
 exports.WaveMoney = WaveMoney;
+function isSet(value) {
+    return value !== undefined && value !== null;
+}
 function errorMessage(body) {
     const errors = body.errors;
     if ((0, json_js_1.isLosslessObject)(errors)) {

package/dist/cjs/yoma-mmqr/yoma-mmqr.d.ts

@@ -20,9 +20,10 @@ export interface YomaMmqrConfigOptions {
     apiVersion: string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the API base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
 }

package/dist/cjs/yoma-mmqr/yoma-mmqr.js

@@ -35,7 +35,7 @@ class YomaMmqrConfig {
         this.clientSecret = (0, env_js_1.requireSetting)('yoma_mmqr', 'client_secret', options.clientSecret);
         this.webhookHashKey = (0, env_js_1.requireSetting)('yoma_mmqr', 'webhook_hashkey', options.webhookHashKey);
         this.apiVersion = (0, env_js_1.requireSetting)('yoma_mmqr', 'api_version', options.apiVersion);
-        this.timeoutSeconds = (0, env_js_1.requireSeconds)('yoma_mmqr', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = (0, env_js_1.resolveTimeout)('yoma_mmqr', options.timeoutSeconds);
         this.webhookSecret = (0, env_js_1.optionalSetting)(options.webhookSecret);
         this.baseUrl = (0, env_js_1.trimUrl)((0, env_js_1.optionalSetting)(options.baseUrl) ?? YomaMmqrConfig.PRODUCTION_URL);
     }

package/dist/esm/aya-pay/aya-pay.d.ts

@@ -11,9 +11,10 @@ export interface AyaPayConfigOptions {
     appSecret: string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the gateway base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
 }

package/dist/esm/aya-pay/aya-pay.js

@@ -1,7 +1,7 @@
 import {} from '../core/amount.js';
 import { CallbackRequest, losslessInput, losslessQueryInput, PaymentCallback, PaymentStatusResult, } from '../core/callback.js';
 import { decodeBase64, hmacSha256Hex, safeEqual } from '../core/crypto.js';
-import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSeconds, requireSetting, trimUrl, } from '../core/env.js';
+import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSetting, resolveTimeout, trimUrl, } from '../core/env.js';
 import { ApiError, SignatureVerificationError } from '../core/errors.js';
 import { httpClientFrom, Transport, } from '../core/http.js';
 import { isLosslessObject, parseJsonObject, toPlainObject, } from '../core/json.js';
@@ -24,7 +24,7 @@ export class AyaPayConfig {
     constructor(options) {
         this.appKey = requireSetting('aya_pay', 'app_key', options.appKey);
         this.appSecret = requireSetting('aya_pay', 'app_secret', options.appSecret);
-        this.timeoutSeconds = requireSeconds('aya_pay', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = resolveTimeout('aya_pay', options.timeoutSeconds);
         this.baseUrl = trimUrl(optionalSetting(options.baseUrl) ?? AyaPayConfig.PRODUCTION_URL);
     }
     /**

package/dist/esm/core/env.d.ts

@@ -11,6 +11,15 @@ export declare function envFirst(env: EnvSource, ...keys: string[]): string;
 export declare function requireSeconds(gateway: string, key: string, value: unknown): number;
 /** The variable holding the HTTP timeout of every gateway that calls an API. @internal */
 export declare const HTTP_TIMEOUT_VARIABLE = "MYANMAR_PAYMENTS_HTTP_TIMEOUT";
+/** Seconds before the default HTTP client gives up on a request when no timeout is configured. */
+export declare const DEFAULT_TIMEOUT_SECONDS = 30;
+/**
+ * The HTTP timeout in seconds: {@link DEFAULT_TIMEOUT_SECONDS} when unset or blank, otherwise a
+ * whole number greater than 0 (or its text), or the invalid {@link ConfigurationError}.
+ *
+ * @internal
+ */
+export declare function resolveTimeout(gateway: string, value: unknown): number;
 /** The trimmed value, or throws a {@link ConfigurationError} naming `key`. @internal */
 export declare function requireSetting(gateway: string, key: string, value: unknown): string;
 /** A trimmed optional string, `undefined` when blank. @internal */

package/dist/esm/core/env.js

@@ -33,6 +33,20 @@ export function requireSeconds(gateway, key, value) {
 }
 /** The variable holding the HTTP timeout of every gateway that calls an API. @internal */
 export const HTTP_TIMEOUT_VARIABLE = 'MYANMAR_PAYMENTS_HTTP_TIMEOUT';
+/** Seconds before the default HTTP client gives up on a request when no timeout is configured. */
+export const DEFAULT_TIMEOUT_SECONDS = 30;
+/**
+ * The HTTP timeout in seconds: {@link DEFAULT_TIMEOUT_SECONDS} when unset or blank, otherwise a
+ * whole number greater than 0 (or its text), or the invalid {@link ConfigurationError}.
+ *
+ * @internal
+ */
+export function resolveTimeout(gateway, value) {
+    if (value === undefined || value === null || (typeof value === 'string' && value.trim() === '')) {
+        return DEFAULT_TIMEOUT_SECONDS;
+    }
+    return requireSeconds(gateway, 'timeout_in_seconds', value);
+}
 /** The trimmed value, or throws a {@link ConfigurationError} naming `key`. @internal */
 export function requireSetting(gateway, key, value) {
     if (typeof value !== 'string' || value.trim() === '') {

package/dist/esm/core/index.d.ts

@@ -1,7 +1,7 @@
 export { Amount, type AmountInput } from './amount.js';
 export { MemoryTokenCache, type TokenCache } from './cache.js';
 export { Acknowledgement, CallbackRequest, PaymentCallback, PaymentStatusResult, type AcknowledgementInit, type BodyInput, type CallbackRequestInit, type HeadersInput, type NodeRequestLike, type PaymentCallbackInit, type PaymentStatusResultInit, type QueryInput, type ServerResponseLike, type WebRequestLike, } from './callback.js';
-export type { EnvSource } from './env.js';
+export { DEFAULT_TIMEOUT_SECONDS, type EnvSource } from './env.js';
 export { ApiError, ConfigurationError, InvalidPaymentDataError, PaymentError, SignatureVerificationError, } from './errors.js';
 export { FetchHttpClient, type FetchFunction, type FetchHttpClientOptions, type GatewayOptions, type HttpClient, type HttpRequest, type HttpResponse, type RequestOptions, } from './http.js';
 export { AppPayment, FormPayment, QrPayment, RedirectPayment, type FormField, type PaymentResult, } from './results.js';

package/dist/esm/core/index.js

@@ -1,6 +1,7 @@
 export { Amount } from './amount.js';
 export { MemoryTokenCache } from './cache.js';
 export { Acknowledgement, CallbackRequest, PaymentCallback, PaymentStatusResult, } from './callback.js';
+export { DEFAULT_TIMEOUT_SECONDS } from './env.js';
 export { ApiError, ConfigurationError, InvalidPaymentDataError, PaymentError, SignatureVerificationError, } from './errors.js';
 export { FetchHttpClient, } from './http.js';
 export { AppPayment, FormPayment, QrPayment, RedirectPayment, } from './results.js';

package/dist/esm/kbz-pay/kbz-pay.d.ts

@@ -14,9 +14,10 @@ export interface KbzPayConfigOptions {
     merchantCode: string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the API base URL, e.g. to point at UAT or go through a proxy. */
     apiUrl?: string | undefined;
     /** Overrides the PWA checkout URL. A trailing `#` or `#/` is normalized to `#/`. */

package/dist/esm/kbz-pay/kbz-pay.js

@@ -1,7 +1,7 @@
 import {} from '../core/amount.js';
 import { Acknowledgement, CallbackRequest, losslessBody, PaymentCallback, PaymentStatusResult, } from '../core/callback.js';
 import { queryEscape, randomHex } from '../core/crypto.js';
-import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSeconds, requireSetting, trimUrl, } from '../core/env.js';
+import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSetting, resolveTimeout, trimUrl, } from '../core/env.js';
 import { ApiError, SignatureVerificationError } from '../core/errors.js';
 import { httpClientFrom, Transport, } from '../core/http.js';
 import { toPlainObject } from '../core/json.js';
@@ -30,7 +30,7 @@ export class KbzPayConfig {
         this.appId = requireSetting('kbz_pay', 'app_id', options.appId);
         this.appKey = requireSetting('kbz_pay', 'app_key', options.appKey);
         this.merchantCode = requireSetting('kbz_pay', 'merchant_code', options.merchantCode);
-        this.timeoutSeconds = requireSeconds('kbz_pay', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = resolveTimeout('kbz_pay', options.timeoutSeconds);
         this.apiUrl = trimUrl(optionalSetting(options.apiUrl) ?? KbzPayConfig.PRODUCTION_API_URL);
         this.pwaUrl = `${trimUrl(optionalSetting(options.pwaUrl) ?? KbzPayConfig.PRODUCTION_PWA_URL)}/`;
     }

package/dist/esm/wave-money/wave-money.d.ts

@@ -15,9 +15,10 @@ export interface WaveMoneyConfigOptions {
     timeToLiveSeconds: number | string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the API base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
     /** Overrides the host the customer is redirected to. Wave serves it without the API port. */
@@ -78,6 +79,16 @@ export interface WaveMoneyPaymentData {
      * this.
      */
     merchantReferenceId?: string | undefined;
+    /**
+     * The business name shown on Wave's page for this payment. Defaults to the configured
+     * `merchantName` when unset.
+     */
+    merchantName?: string | null | undefined;
+    /**
+     * How long the customer has to pay this payment, in seconds: a whole number greater than 0.
+     * Defaults to the configured `timeToLiveSeconds` when unset.
+     */
+    timeToLiveSeconds?: number | null | undefined;
 }
 /**
  * Wave Money (WavePay payment gateway): redirect payments and callbacks. Wave has no status API,

package/dist/esm/wave-money/wave-money.js

@@ -1,7 +1,7 @@
 import { Amount } from '../core/amount.js';
 import { CallbackRequest, losslessBody, PaymentCallback } from '../core/callback.js';
 import { hmacSha256Hex, queryEscape, randomHex, safeEqual } from '../core/crypto.js';
-import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSeconds, requireSetting, trimUrl, } from '../core/env.js';
+import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSeconds, requireSetting, resolveTimeout, trimUrl, } from '../core/env.js';
 import { ApiError, SignatureVerificationError } from '../core/errors.js';
 import { httpClientFrom, Transport, } from '../core/http.js';
 import { isLosslessObject, toPlainObject } from '../core/json.js';
@@ -32,7 +32,7 @@ export class WaveMoneyConfig {
         this.secretKey = requireSetting('wave_money', 'secret_key', options.secretKey);
         this.merchantName = requireSetting('wave_money', 'merchant_name', options.merchantName);
         this.timeToLiveSeconds = requireSeconds('wave_money', 'time_to_live_in_seconds', options.timeToLiveSeconds);
-        this.timeoutSeconds = requireSeconds('wave_money', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = resolveTimeout('wave_money', options.timeoutSeconds);
         this.baseUrl = trimUrl(optionalSetting(options.baseUrl) ?? WaveMoneyConfig.PRODUCTION_URL);
         this.authenticateUrl = trimUrl(optionalSetting(options.authenticateUrl) ?? WaveMoneyConfig.PRODUCTION_AUTHENTICATE_URL);
     }
@@ -123,7 +123,11 @@ export class WaveMoney {
             .url('returnUrl', data.returnUrl)
             .required('description', data.description)
             .when(items.length === 0, 'items', 'The items field must have at least one item.')
-            .string('merchantReferenceId', data.merchantReferenceId);
+            .string('merchantReferenceId', data.merchantReferenceId)
+            .string('merchantName', data.merchantName)
+            .when(typeof data.merchantName === 'string' && data.merchantName.trim() === '', 'merchantName', 'The merchantName field is required.')
+            .when(isSet(data.timeToLiveSeconds) && !Number.isInteger(data.timeToLiveSeconds), 'timeToLiveSeconds', 'The timeToLiveSeconds field must be an integer.')
+            .when(isSet(data.timeToLiveSeconds) && data.timeToLiveSeconds < 1, 'timeToLiveSeconds', 'The timeToLiveSeconds field must be greater than 0.');
         items.forEach((item, index) => {
             validator
                 .required(`items.${index}.name`, item?.name)
@@ -149,7 +153,7 @@ export class WaveMoney {
             data.merchantReferenceId = randomHex();
         }
         const amount = WaveMoney.resolvedAmount(data).toString();
-        const ttl = String(this.config.timeToLiveSeconds);
+        const ttl = String(data.timeToLiveSeconds ?? this.config.timeToLiveSeconds);
         // Wave documents items as [{"name": "...", "amount": 1000}] with a numeric amount; the amount
         // text is written as a JSON number without passing through a float.
         const items = `[${data.items
@@ -164,7 +168,7 @@ export class WaveMoney {
             backend_result_url: data.callbackUrl,
             amount,
             payment_description: data.description,
-            merchant_name: this.config.merchantName,
+            merchant_name: data.merchantName ?? this.config.merchantName,
             items,
             hash: this.hash([
                 ttl,
@@ -221,6 +225,9 @@ export class WaveMoney {
         return hmacSha256Hex(this.config.secretKey, parts.join(''));
     }
 }
+function isSet(value) {
+    return value !== undefined && value !== null;
+}
 function errorMessage(body) {
     const errors = body.errors;
     if (isLosslessObject(errors)) {

package/dist/esm/yoma-mmqr/yoma-mmqr.d.ts

@@ -20,9 +20,10 @@ export interface YomaMmqrConfigOptions {
     apiVersion: string;
     /**
      * Seconds before the default HTTP client gives up on a request, a whole number greater than 0
-     * (or its text). A client you pass keeps its own timeout.
+     * (or its text). Defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`) when unset or blank. A
+     * client you pass keeps its own timeout.
      */
-    timeoutSeconds: number | string;
+    timeoutSeconds?: number | string | null | undefined;
     /** Overrides the API base URL, e.g. to point at UAT. */
     baseUrl?: string | undefined;
 }

package/dist/esm/yoma-mmqr/yoma-mmqr.js

@@ -2,7 +2,7 @@ import {} from '../core/amount.js';
 import { MemoryTokenCache } from '../core/cache.js';
 import { CallbackRequest, losslessBody, PaymentCallback, PaymentStatusResult, } from '../core/callback.js';
 import { hmacSha256Hex, safeEqual, sha256Hex } from '../core/crypto.js';
-import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSeconds, requireSetting, trimUrl, } from '../core/env.js';
+import { defaultEnv, envFirst, HTTP_TIMEOUT_VARIABLE, optionalSetting, requireSetting, resolveTimeout, trimUrl, } from '../core/env.js';
 import { ApiError, SignatureVerificationError } from '../core/errors.js';
 import { httpClientFrom, Transport, } from '../core/http.js';
 import { toPlainObject } from '../core/json.js';
@@ -33,7 +33,7 @@ export class YomaMmqrConfig {
         this.clientSecret = requireSetting('yoma_mmqr', 'client_secret', options.clientSecret);
         this.webhookHashKey = requireSetting('yoma_mmqr', 'webhook_hashkey', options.webhookHashKey);
         this.apiVersion = requireSetting('yoma_mmqr', 'api_version', options.apiVersion);
-        this.timeoutSeconds = requireSeconds('yoma_mmqr', 'timeout_in_seconds', options.timeoutSeconds);
+        this.timeoutSeconds = resolveTimeout('yoma_mmqr', options.timeoutSeconds);
         this.webhookSecret = optionalSetting(options.webhookSecret);
         this.baseUrl = trimUrl(optionalSetting(options.baseUrl) ?? YomaMmqrConfig.PRODUCTION_URL);
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@laranex/myanmar-payments",
-  "version": "4.0.0-dev.6",
+  "version": "4.0.0-dev.8",
   "description": "Node.js SDK for Myanmar payment gateways: KBZ Pay, Wave Money, AYA Pay, Yoma MMQR and CyberSource. Typed requests and results, exact amounts, no runtime dependencies.",
   "keywords": [
     "laranex",

package/skills/node-myanmar-payments/SKILL.md

@@ -23,7 +23,7 @@ Requires Node.js 20+ and has no runtime dependencies (global `fetch`, `node:cryp
 
 ## Configure
 
-`MyanmarPayments.fromEnv(process.env)` reads `KBZ_PAY_*`, `WAVE_MONEY_*`, `AYA_PAY_*` (or `AYA_PGW_*`), `YOMA_MMQR_*` and `CYBER_SOURCE_*` plus `MYANMAR_PAYMENTS_HTTP_TIMEOUT` (the same variables as the PHP, Go and Python SDKs). Every gateway defaults to its production URLs; to test against UAT, set the URL overrides (`KBZ_PAY_BASE_URL`, `KBZ_PAY_PWA_BASE_REDIRECT_URL`, `WAVE_MONEY_BASE_URL`, `WAVE_MONEY_AUTHENTICATE_URL`, `AYA_PAY_BASE_URL`, `YOMA_MMQR_BASE_URL`, `CYBER_SOURCE_BASE_URL`) to the gateway's UAT URLs. Every other setting is required, with no defaults: credentials, `timeoutSeconds` (seconds, for every gateway except CyberSource), Wave's `merchantName` and `timeToLiveSeconds`, and Yoma's `apiVersion` (e.g. `v1rc`).
+`MyanmarPayments.fromEnv(process.env)` reads `KBZ_PAY_*`, `WAVE_MONEY_*`, `AYA_PAY_*` (or `AYA_PGW_*`), `YOMA_MMQR_*` and `CYBER_SOURCE_*` plus `MYANMAR_PAYMENTS_HTTP_TIMEOUT` (the same variables as the PHP, Go and Python SDKs). Every gateway defaults to its production URLs; to test against UAT, set the URL overrides (`KBZ_PAY_BASE_URL`, `KBZ_PAY_PWA_BASE_REDIRECT_URL`, `WAVE_MONEY_BASE_URL`, `WAVE_MONEY_AUTHENTICATE_URL`, `AYA_PAY_BASE_URL`, `YOMA_MMQR_BASE_URL`, `CYBER_SOURCE_BASE_URL`) to the gateway's UAT URLs. The HTTP timeout `timeoutSeconds` / `MYANMAR_PAYMENTS_HTTP_TIMEOUT` (seconds, for every gateway except CyberSource) is optional and defaults to 30 (`DEFAULT_TIMEOUT_SECONDS`); an explicit value must be a whole number greater than 0. Every other setting is required, with no defaults: credentials, Wave's `merchantName` and `timeToLiveSeconds`, and Yoma's `apiVersion` (e.g. `v1rc`).
 
 ```ts
 import { MyanmarPayments } from '@laranex/myanmar-payments';
@@ -32,8 +32,8 @@ const payments = MyanmarPayments.fromEnv(process.env); // create once, share acr
 const kbz = payments.kbzPay(); // also waveMoney(), ayaPay(), yomaMmqr(), cyberSource()
 ```
 
-- Or build one gateway: `new KbzPay(new KbzPayConfig({ appId, appKey, merchantCode, timeoutSeconds: 30 }))`, `KbzPay.fromEnv()` or `new KbzPay(KbzPayConfig.fromEnv(process.env))`.
-- Or pass the settings directly: gateways and `new MyanmarPayments({ kbzPay: { appId, appKey, merchantCode, timeoutSeconds } })` take config objects or plain option objects; whole-number settings also take text such as `'30'`.
+- Or build one gateway: `new KbzPay(new KbzPayConfig({ appId, appKey, merchantCode }))`, `KbzPay.fromEnv()` or `new KbzPay(KbzPayConfig.fromEnv(process.env))`.
+- Or pass the settings directly: gateways and `new MyanmarPayments({ kbzPay: { appId, appKey, merchantCode } })` take config objects or plain option objects; whole-number settings also take text such as `'30'`.
 - Options (second argument): `{ httpClient, fetch }`. Without `httpClient`, the gateway uses `fetch` with the config's `timeoutSeconds`; a client you pass keeps its own timeout. Yoma and the facade also take `tokenCache` (any `TokenCache`, default `MemoryTokenCache`; back it with Redis when you run several processes).
 - A missing setting throws `ConfigurationError` (`gateway`, `key`); a time setting that is not a whole number greater than 0 throws it too.
 
@@ -58,7 +58,7 @@ const payment = await kbz.pwa({
 res.writeHead(302, { Location: payment.url }).end();
 ```
 
-- `RedirectPayment` (`url`) from `kbz.pwa(data)` and `wave.initiate(data)`. Wave fills `data.merchantReferenceId` when empty; store it.
+- `RedirectPayment` (`url`) from `kbz.pwa(data)` and `wave.initiate(data)`. Wave fills `data.merchantReferenceId` when empty; store it. Pass `merchantName` or `timeToLiveSeconds` in Wave's payment data to override the configured `WAVE_MONEY_MERCHANT_NAME` or `WAVE_MONEY_TIME_TO_LIVE_IN_SECONDS` for that one payment (the settings stay required).
 - `FormPayment` from `aya.initiate(data)` and `cyberSource.initiate(data)` (no network call): send `payment.toHtml()` as an auto-submitting page, or render `action`, `fields` and `enctype` yourself.
 - `QrPayment` from `kbz.qr(data)` (encode `qrString`) and `yoma.initiate(data)` (`qrImageDataUri()`, `expiresAt`, `reference`). A Yoma QR lives `YomaMmqr.QR_LIFETIME_SECONDS` (120); renew it with `yoma.renewQr(orderId)`.
 - `AppPayment` from `kbz.app(data)`: `res.json(payment)` sends `orderId`, `orderInfo`, `sign` and `signType` to your mobile app.