@misiki/gocommerce-connector 0.31.0 → 0.32.0

package/dist/services/index.cjs

@@ -2196,9 +2196,9 @@ var CheckoutService = class extends BaseService {
   }
   // The family's other gateway flows. GoCommerce's Stripe is a Payment
   // Element (a client secret, not a hosted page) — `checkout('stripe')` returns
-  // that secret for a storefront that mounts the element. Cashfree, PhonePe and
-  // Affirm are not engine gateways at all. paymentMethodService never offers
-  // these codes, so they are reached only by a storefront that hard-codes one.
+  // that secret for a storefront that mounts the element. PhonePe and Affirm are
+  // not engine gateways at all. paymentMethodService never offers these codes,
+  // so they are reached only by a storefront that hard-codes one.
   async checkoutStripe() {
     throw unsupported(
       "checkoutStripe",
@@ -2210,18 +2210,18 @@ var CheckoutService = class extends BaseService {
   }
   /**
    * The storefront's generic redirect flow, which it reaches through the code
-   * `PAYPAL`. The engine has no PayPal gateway; paymentMethodService puts the
-   * store's first hosted-page gateway — Adyen, Paddle, Lemon Squeezy, Creem,
-   * Hyperswitch or RevenueCat — under that code, with its own name and a
-   * neutral icon, because this is the one storefront flow that sends a shopper
-   * to a URL and back. The shopper returns to the success page; the gateway's
-   * webhook tells the engine the order is paid.
+   * `PAYPAL`. paymentMethodService puts the store's first hosted-page gateway
+   * — PayPal, Adyen, Paddle, Lemon Squeezy, Creem, Hyperswitch or RevenueCat —
+   * under that code, with its own name and a neutral icon, because this is the
+   * one storefront flow that sends a shopper to a URL and back. The shopper
+   * returns to the success page; the gateway's webhook tells the engine the
+   * order is paid. PayPal's webhook is also what captures the approved payment.
    */
   async checkoutPaypal({ cartId, origin } = {}) {
     const gateway = await this.redirectGateway();
     if (!gateway) throw unsupported("checkoutPaypal", "this store has no hosted-page payment gateway switched on");
     const id2 = cartId || storedCartId() || "";
-    const back = origin ? `${origin.replace(/\/+$/, "")}/checkout/success?cart_id=${encodeURIComponent(id2)}` : void 0;
+    const back = origin ? successUrl(origin, id2) : void 0;
     const result = await this.place(gateway, id2, back ? { return_url: back } : {});
     const url = result.payment.client_data?.url;
     if (!url) throw new GoCommerceError("The payment page did not open. Please try again.", 502);
@@ -2237,11 +2237,40 @@ var CheckoutService = class extends BaseService {
   } = {}) {
     return { order_no: order_no ?? null, status: "processing" };
   }
-  async checkoutCashfree() {
-    throw unsupported("checkoutCashfree", "the engine has no Cashfree gateway");
+  /**
+   * Cashfree's JavaScript checkout. The engine has already created the Cashfree
+   * order; this hands the storefront the session its modal opens. `order_no` is
+   * the store's number, which the storefront prefers over `order_id`, Cashfree's.
+   *
+   * The return URL is for the one case the modal cannot open, an in-app browser,
+   * when Cashfree sends the shopper back to it instead. Only https is sent: every
+   * Cashfree example is, and a plain-http dev origin should not risk the order.
+   */
+  async checkoutCashfree({ cartId, origin } = {}) {
+    const { id: id2, extras, address } = await this.storedCheckout(cartId);
+    if (!extras.phone && !address.phone) throw new GoCommerceError("Add a phone number to pay with Cashfree.", 400);
+    const result = await this.place("cashfree", id2, origin?.startsWith("https:") ? { return_url: successUrl(origin, id2) } : {});
+    const data = result.payment.client_data ?? {};
+    if (result.payment.kind !== "client_action" || !data.payment_session_id) {
+      throw new GoCommerceError("The payment page did not open. Please try again.", 502);
+    }
+    cashfreeEnvironment = data.environment;
+    return {
+      order_no: result.order.number,
+      payment_session_id: data.payment_session_id,
+      order_id: data.order_id,
+      environment: data.environment
+    };
   }
-  async captureCashfreePayment() {
-    throw unsupported("captureCashfreePayment", "the engine has no Cashfree gateway");
+  /**
+   * Nothing to capture: the signed webhook tells the engine the order is paid.
+   * The storefront calls this on the server, after Cashfree's modal resolves
+   * with any outcome, so it can neither claim the payment nor, without the
+   * browser's order token, check it. Answering sends the shopper to the success
+   * page; throwing would call a payment that may have gone through failed.
+   */
+  async captureCashfreePayment({ order_no } = {}) {
+    return { order_no: order_no ?? null, status: "processing" };
   }
   async checkoutPhonepe() {
     throw unsupported("checkoutPhonepe", "the engine has no PhonePe gateway");
@@ -2307,7 +2336,7 @@ var CheckoutService = class extends BaseService {
   }
   /**
    * What checkout would charge for the cart now, by the storefront's method
-   * code (`COD`, `RAZORPAY`, `PAYPAL`) or none yet (D185). Null until the
+   * code (`COD`, `RAZORPAY`, `CASHFREE`, `PAYPAL`) or none yet (D185). Null until the
    * address step has stored an address, and null from an engine before D185.
    *
    * A refusal is checkout's own: the same GoCommerceError, with the same
@@ -2315,7 +2344,7 @@ var CheckoutService = class extends BaseService {
    */
   async getQuote({ cartId, method = "" } = {}) {
     const id2 = cartId || storedCartId();
-    if (!id2 || !cartExtras(id2).shippingAddress) return null;
+    if (!id2 || !cartExtras(id2).shippingAddress || cartExtras(id2).attempt?.placed) return null;
     const { extras, email, address } = await this.storedCheckout(id2);
     const code = method.toLowerCase() === "paypal" ? await this.redirectGateway() : method.toLowerCase();
     try {
@@ -2376,6 +2405,11 @@ var CheckoutService = class extends BaseService {
    * key resumes that order, and without one the shopper is stuck. A changed
    * request — a different address, a different method — gets a new key, since
    * the engine refuses a key replayed with a different body.
+   *
+   * A gateway's modal keeps the key after the order is placed, along with exactly
+   * what placed it. The cart is converted by then, so a shopper who closes the
+   * window can pay again only under this key, and the engine then reopens the same
+   * gateway order rather than risk a second charge on a new one (D232).
    */
   async place(code, cartId, extra = {}) {
     const { id: id2, extras, email, address, currency } = await this.storedCheckout(cartId);
@@ -2392,23 +2426,27 @@ var CheckoutService = class extends BaseService {
     const serialised = JSON.stringify(body);
     const retry = extras.attempt?.body === `${code}:${serialised}`;
     const key = retry ? extras.attempt.key : newKey();
+    const placed = retry ? extras.attempt?.placed : void 0;
     const meta = retry ? extras.attempt?.meta : metaBrowser();
     const attribution = retry ? extras.attempt?.attribution : landingAttribution();
-    saveCartExtras(id2, {
-      attempt: { key, body: `${code}:${serialised}`, ...meta ? { meta } : {}, ...attribution ? { attribution } : {} }
-    });
+    if (!placed) {
+      saveCartExtras(id2, {
+        attempt: { key, body: `${code}:${serialised}`, ...meta ? { meta } : {}, ...attribution ? { attribution } : {} }
+      });
+    }
     const metadata = {
       ...extra.metadata,
       ...meta ? { meta_capi: meta } : {},
       ...attribution ? { attribution } : {}
     };
     const expected = this.expected.get(id2);
+    const sent = placed ?? {
+      ...Object.keys(metadata).length ? { ...body, metadata } : body,
+      ...expected ? { quoted_total_minor: toMinor(expected.total, currency) } : {}
+    };
     const result = await this.data(`/api/checkout/${encodeURIComponent(code)}`, {
       method: "POST",
-      body: {
-        ...Object.keys(metadata).length ? { ...body, metadata } : body,
-        ...expected ? { quoted_total_minor: toMinor(expected.total, currency) } : {}
-      },
+      body: sent,
       headers: { "Idempotency-Key": key }
     }).catch((err) => {
       if (keyAlreadyUsed(err)) {
@@ -2435,11 +2473,18 @@ var CheckoutService = class extends BaseService {
         }).catch(() => void 0);
       }
     }
-    saveCartExtras(id2, { attempt: null });
+    const reopenable = result.payment.kind === "client_action";
+    saveCartExtras(id2, { attempt: reopenable ? { key, body: `${code}:${serialised}`, placed: sent } : null });
+    if (reopenable && result.order.payment_status === "paid") {
+      throw new GoCommerceError(`Order ${result.order.number} is already paid, so there is nothing more to pay.`, 409, "already_paid");
+    }
     return result;
   }
 };
-var REDIRECT_GATEWAYS = /* @__PURE__ */ new Set(["adyen", "paddle", "lemonsqueezy", "creem", "hyperswitch", "revenuecat"]);
+var REDIRECT_GATEWAYS = /* @__PURE__ */ new Set(["paypal", "adyen", "paddle", "lemonsqueezy", "creem", "hyperswitch", "revenuecat"]);
+var cashfreeEnvironment;
+var cashfreeIsTest = () => cashfreeEnvironment === "sandbox";
+var successUrl = (origin, cartId) => `${origin.replace(/\/+$/, "")}/checkout/success?cart_id=${encodeURIComponent(cartId)}`;
 var unsupported = (method, why) => new NotSupportedError("CheckoutService", method, why);
 function keyAlreadyUsed(err) {
   return err instanceof GoCommerceError && err.status === 400 && err.message.includes("Idempotency-Key was already used");
@@ -2466,7 +2511,8 @@ var checkoutService = new CheckoutService();
 // src/services/payment-method-service.ts
 var DRIVABLE = {
   cod: { code: "COD", img: "/payment/cod.svg" },
-  razorpay: { code: "RAZORPAY" }
+  razorpay: { code: "RAZORPAY" },
+  cashfree: { code: "CASHFREE", img: "/payment/card.svg" }
 };
 var reported2 = /* @__PURE__ */ new Set();
 var PaymentMethodService = class extends BaseService {
@@ -2475,7 +2521,12 @@ var PaymentMethodService = class extends BaseService {
     const options = await this.facts.checkoutOptions();
     const methods = options.methods ?? [];
     const redirect = methods.find((m) => REDIRECT_GATEWAYS.has(m.code))?.code;
-    const drive = (code) => DRIVABLE[code] ?? (code === redirect ? { code: "PAYPAL", img: "/payment/card.svg" } : void 0);
+    const drive = (code) => {
+      if (code === "cashfree" && options.currency !== "INR") return void 0;
+      if (DRIVABLE[code]) return DRIVABLE[code];
+      if (code === redirect) return { code: "PAYPAL", img: "/payment/card.svg" };
+      return REDIRECT_GATEWAYS.has(code) ? { code: code.toUpperCase(), img: "/payment/card.svg" } : void 0;
+    };
     const data = methods.filter((m) => {
       if (drive(m.code)) return true;
       if (!reported2.has(m.code)) {
@@ -2485,19 +2536,24 @@ var PaymentMethodService = class extends BaseService {
         );
       }
       return false;
-    }).map((m, i) => ({
-      id: m.code,
-      code: drive(m.code).code,
-      engineCode: m.code,
-      name: m.name,
-      title: m.name,
-      description: "",
-      img: drive(m.code).img ?? null,
-      fee: toMajor(m.fee),
-      rank: i,
-      active: true,
-      isActive: true
-    }));
+    }).map((m, i) => {
+      const method = {
+        id: m.code,
+        code: drive(m.code).code,
+        engineCode: m.code,
+        name: m.name,
+        title: m.name,
+        description: "",
+        img: drive(m.code).img ?? null,
+        fee: toMajor(m.fee),
+        rank: i,
+        active: true,
+        isActive: true
+      };
+      if (REDIRECT_GATEWAYS.has(m.code) && m.code !== redirect) Object.assign(method, { redirects: true });
+      if (m.code === "cashfree") Object.defineProperty(method, "isTest", { get: cashfreeIsTest, enumerable: true });
+      return method;
+    });
     return { data, count: data.length, pageSize: data.length, noOfPage: 1, page: 1 };
   }
 };
@@ -4326,6 +4382,7 @@ exports.b2bService = b2bService;
 exports.bannerService = bannerService;
 exports.blogService = blogService;
 exports.cartService = cartService;
+exports.cashfreeIsTest = cashfreeIsTest;
 exports.categoryService = categoryService;
 exports.chatService = chatService;
 exports.checkoutService = checkoutService;