@momorail/pawapay 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Momorail contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,118 @@
+import { IdempotencyStore, PaymentProvider, ProviderCapabilities, CollectionInput, ProviderCallOptions, Transaction, DisbursementInput, TransactionRef, RawWebhook, WebhookEvent, Operator } from '@momorail/core';
+
+type PawapayMode = 'live' | 'sandbox';
+interface PawapayOptions {
+    /** pawaPay API token (JWT) — sent as `Authorization: Bearer <token>`. */
+    apiToken: string;
+    /** `'sandbox'` (default) or `'live'` — selects the base URL. */
+    mode?: PawapayMode;
+    /** Override the API base URL (tests). */
+    baseUrl?: string;
+    /** Per-request timeout in ms. Default 15000. */
+    timeoutMs?: number;
+    /** Injectable fetch implementation. Default the global `fetch`. */
+    fetch?: typeof fetch;
+    /** Id generator for `depositId` / `payoutId` (UUID v4). Default `crypto.randomUUID`. */
+    generateId?: () => string;
+    /** Where the adapter remembers created transactions. Default: in-memory, per process. */
+    idempotencyStore?: IdempotencyStore;
+}
+/**
+ * pawaPay adapter — direct mobile-money deposits and payouts across Sub-Saharan
+ * Africa. The API is asynchronous: `POST /v2/deposits` returns `ACCEPTED` and the
+ * transaction stays `processing` until a callback or a `GET` poll reports
+ * `COMPLETED` / `FAILED`. The customer approves the deposit via their operator's
+ * own prompt, so there is no `checkoutUrl`.
+ *
+ * pawaPay ids are merchant-generated UUIDs, so the adapter mints a `depositId` /
+ * `payoutId`, uses it as `Transaction.id`, keeps a `reference → Transaction`
+ * cache, and sets `clientReferenceId` + `metadata` so the caller reference is
+ * recoverable across processes.
+ */
+declare class PawapayProvider implements PaymentProvider {
+    #private;
+    readonly id = "pawapay";
+    constructor(options: PawapayOptions);
+    capabilities(): ProviderCapabilities;
+    collection(input: CollectionInput, options?: ProviderCallOptions): Promise<Transaction>;
+    disbursement(input: DisbursementInput, options?: ProviderCallOptions): Promise<Transaction>;
+    getTransaction(ref: TransactionRef, options?: ProviderCallOptions): Promise<Transaction>;
+    parseWebhook(raw: RawWebhook): Promise<WebhookEvent>;
+}
+
+/**
+ * Raw pawaPay v2 Merchant API shapes. Only the fields Momorail reads are
+ * modelled; the untouched payload is always returned on `Transaction.providerRaw`.
+ *
+ * @see https://docs.pawapay.io/v2/api-reference
+ */
+interface PawapayFailureReason {
+    failureCode?: string;
+    failureMessage?: string;
+}
+interface PawapayMmoAccount {
+    type: 'MMO';
+    accountDetails: {
+        phoneNumber: string;
+        provider: string;
+    };
+}
+/** Synchronous response to `POST /v2/deposits` and `POST /v2/payouts`. */
+interface PawapayAcceptResponse {
+    depositId?: string;
+    payoutId?: string;
+    /** `ACCEPTED` | `REJECTED` | `DUPLICATE_IGNORED` */
+    status: string;
+    created?: string;
+    failureReason?: PawapayFailureReason;
+}
+/** `GET /v2/deposits/{depositId}` / `GET /v2/payouts/{payoutId}`. */
+interface PawapayTransactionResponse {
+    depositId?: string;
+    payoutId?: string;
+    /** `ACCEPTED` | `PROCESSING` | `IN_RECONCILIATION` | `COMPLETED` | `FAILED` */
+    status: string;
+    amount?: string;
+    currency?: string;
+    payer?: PawapayMmoAccount;
+    recipient?: PawapayMmoAccount;
+    customerMessage?: string;
+    clientReferenceId?: string;
+    providerTransactionId?: string;
+    created?: string;
+    failureReason?: PawapayFailureReason;
+    metadata?: Array<Record<string, unknown>>;
+}
+
+/**
+ * Momorail operator → pawaPay `provider` code. pawaPay scopes providers by
+ * ISO-3166 alpha-3 country. Confirm the exact codes for your markets against
+ * pawaPay's `GET /v2/active-conf`.
+ */
+declare const PAWAPAY_PROVIDER: Partial<Record<Operator, string>>;
+
+/**
+ * pawaPay signs callbacks with RFC-9421 HTTP Message Signatures using an
+ * asymmetric key (ECDSA / RSASSA-PSS). Full verification needs the public key
+ * from pawaPay's Public Keys endpoint and an RFC-9421 implementation — a planned
+ * follow-up.
+ *
+ * What this adapter checks today is the `Content-Digest` header: a SHA-256 /
+ * SHA-512 hash of the raw body. It proves the body was not altered in transit,
+ * and the adapter then re-fetches the authoritative status from the API, so a
+ * forged callback only triggers a status re-check.
+ */
+declare function verifyContentDigest(headers: Record<string, string | string[] | undefined>, rawBody: string): void;
+interface PawapayCallback {
+    depositId?: string;
+    payoutId?: string;
+    refundId?: string;
+    status?: string;
+    [key: string]: unknown;
+}
+declare function parseCallbackBody(body: string | Uint8Array | Record<string, unknown>): {
+    fields: PawapayCallback;
+    raw: string;
+};
+
+export { PAWAPAY_PROVIDER, type PawapayAcceptResponse, type PawapayCallback, type PawapayMode, type PawapayOptions, PawapayProvider, type PawapayTransactionResponse, parseCallbackBody, verifyContentDigest };

package/dist/index.js

@@ -0,0 +1,384 @@
+// src/provider.ts
+import {
+  IdempotencyCache,
+  MemoryIdempotencyStore,
+  ValidationError,
+  isOperator,
+  webhookEventTypeForStatus
+} from "@momorail/core";
+
+// src/http.ts
+import {
+  AuthError,
+  ProviderUnavailableError,
+  RateLimitError,
+  TransactionNotFoundError
+} from "@momorail/core";
+var PROVIDER_ID = "pawapay";
+var SANDBOX_BASE_URL = "https://api.sandbox.pawapay.io";
+var PRODUCTION_BASE_URL = "https://api.pawapay.io";
+var HttpClient = class {
+  #baseUrl;
+  #timeoutMs;
+  #fetch;
+  #apiToken;
+  constructor(options) {
+    this.#baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.#timeoutMs = options.timeoutMs;
+    this.#fetch = options.fetch;
+    this.#apiToken = options.apiToken;
+  }
+  postJson(path, body, signal) {
+    return this.#request("POST", path, body, signal);
+  }
+  getJson(path, signal) {
+    return this.#request("GET", path, void 0, signal);
+  }
+  async #request(method, path, body, signal) {
+    const timeout = AbortSignal.timeout(this.#timeoutMs);
+    const composite = signal ? AbortSignal.any([signal, timeout]) : timeout;
+    const headers = {
+      accept: "application/json",
+      authorization: `Bearer ${this.#apiToken}`
+    };
+    if (method === "POST") headers["content-type"] = "application/json";
+    let response;
+    try {
+      response = await this.#fetch(`${this.#baseUrl}${path}`, {
+        method,
+        headers,
+        body: method === "POST" ? JSON.stringify(body) : void 0,
+        signal: composite
+      });
+    } catch (cause) {
+      if (signal?.aborted) throw cause;
+      throw new ProviderUnavailableError("pawaPay request failed to complete", {
+        provider: PROVIDER_ID,
+        cause
+      });
+    }
+    if (response.status === 401 || response.status === 403) {
+      throw new AuthError(`pawaPay rejected the API token (${response.status})`, {
+        provider: PROVIDER_ID
+      });
+    }
+    if (response.status === 404) {
+      throw new TransactionNotFoundError("pawaPay has no such transaction", {
+        provider: PROVIDER_ID
+      });
+    }
+    if (response.status === 429) {
+      throw new RateLimitError("pawaPay throttled the request", { provider: PROVIDER_ID });
+    }
+    const raw = await response.text();
+    let parsed;
+    try {
+      parsed = raw ? JSON.parse(raw) : {};
+    } catch (cause) {
+      throw new ProviderUnavailableError("pawaPay returned a non-JSON response", {
+        provider: PROVIDER_ID,
+        providerRaw: raw,
+        cause
+      });
+    }
+    if (response.status >= 500) {
+      throw new ProviderUnavailableError(`pawaPay responded ${response.status}`, {
+        provider: PROVIDER_ID,
+        providerRaw: parsed
+      });
+    }
+    return parsed;
+  }
+};
+
+// src/mapping.ts
+import {
+  MomorailError,
+  ProviderUnavailableError as ProviderUnavailableError2
+} from "@momorail/core";
+var PAWAPAY_PROVIDER = {
+  orange_ci: "ORANGE_CIV",
+  mtn_ci: "MTN_MOMO_CIV",
+  moov_ci: "MOOV_CIV",
+  wave_ci: "WAVE_CIV",
+  orange_sn: "ORANGE_SEN",
+  free_sn: "FREE_SEN",
+  wave_sn: "WAVE_SEN",
+  orange_ml: "ORANGE_MLI",
+  moov_ml: "MOOV_MLI",
+  orange_bf: "ORANGE_BFA",
+  moov_bf: "MOOV_BFA",
+  mtn_bj: "MTN_MOMO_BEN",
+  moov_bj: "MOOV_BEN",
+  orange_ne: "ORANGE_NER",
+  moov_ne: "MOOV_NER",
+  moov_tg: "MOOV_TGO",
+  togocom_tg: "TOGOCOM_TGO",
+  orange_cd: "ORANGE_COD",
+  airtel_cd: "AIRTEL_COD",
+  vodacom_cd: "VODACOM_COD"
+};
+function mapTransactionStatus(status) {
+  switch (status?.toUpperCase()) {
+    case "COMPLETED":
+      return "succeeded";
+    case "FAILED":
+      return "failed";
+    case "ACCEPTED":
+    case "PROCESSING":
+    case "IN_RECONCILIATION":
+      return "processing";
+    default:
+      return "unknown";
+  }
+}
+var FAILURE_REASONS = {
+  INSUFFICIENT_BALANCE: "insufficient_funds",
+  PAYER_LIMIT_REACHED: "limit_exceeded",
+  RECIPIENT_LIMIT_REACHED: "limit_exceeded",
+  PAYER_NOT_FOUND: "invalid_number",
+  RECIPIENT_NOT_FOUND: "invalid_number",
+  INVALID_PAYER_FORMAT: "invalid_number",
+  UNSPECIFIED_FAILURE: "provider_error",
+  PROVIDER_TEMPORARILY_UNAVAILABLE: "provider_error",
+  PAYER_DECLINED: "user_declined",
+  USER_CANCELLED: "user_declined",
+  TRANSACTION_TIMED_OUT: "timeout"
+};
+function mapFailureReason(reason) {
+  return FAILURE_REASONS[reason?.failureCode ?? ""] ?? "other";
+}
+function rejectedError(res) {
+  const code = res.failureReason?.failureCode ?? "REJECTED";
+  const message = res.failureReason?.failureMessage ?? "pawaPay rejected the request";
+  if (/UNAVAILABLE|TEMPORARILY/.test(code)) {
+    return new ProviderUnavailableError2(`pawaPay is unavailable (${code}: ${message})`, {
+      provider: PROVIDER_ID,
+      providerRaw: res
+    });
+  }
+  return new MomorailError(`pawaPay rejected the request (${code}: ${message})`, "provider_error", {
+    provider: PROVIDER_ID,
+    providerRaw: res
+  });
+}
+
+// src/webhook.ts
+import { createHash } from "crypto";
+import { WebhookVerificationError } from "@momorail/core";
+function verifyContentDigest(headers, rawBody) {
+  const header = headerValue(headers, "content-digest");
+  if (!header) return;
+  const match = /(sha-256|sha-512)=:([A-Za-z0-9+/=]+):/i.exec(header);
+  if (!match) {
+    throw new WebhookVerificationError("Unparseable Content-Digest on pawaPay callback", {
+      provider: PROVIDER_ID
+    });
+  }
+  const algo = match[1]?.toLowerCase() === "sha-512" ? "sha512" : "sha256";
+  const expected = createHash(algo).update(rawBody, "utf8").digest("base64");
+  if (match[2] !== expected) {
+    throw new WebhookVerificationError("pawaPay callback body does not match its Content-Digest", {
+      provider: PROVIDER_ID
+    });
+  }
+}
+function parseCallbackBody(body) {
+  if (typeof body === "string") {
+    return { fields: JSON.parse(body || "{}"), raw: body };
+  }
+  if (body instanceof Uint8Array) {
+    const raw = new TextDecoder().decode(body);
+    return { fields: JSON.parse(raw || "{}"), raw };
+  }
+  return { fields: body, raw: JSON.stringify(body) };
+}
+function headerValue(headers, name) {
+  const found = headers[name] ?? headers[name.toLowerCase()] ?? Object.entries(headers).find(([k]) => k.toLowerCase() === name.toLowerCase())?.[1];
+  return Array.isArray(found) ? found[0] : found;
+}
+
+// src/provider.ts
+var DEFAULT_TIMEOUT_MS = 15e3;
+var REFERENCE_KEY = "momorailReference";
+var CAPABILITIES = {
+  collection: true,
+  disbursement: true,
+  // pawaPay looks a transaction up by the merchant-generated deposit/payout id.
+  lookupByReference: false,
+  // Direct deposits push a prompt to the customer's phone — no hosted page.
+  hostedCheckout: false,
+  operators: Object.keys(PAWAPAY_PROVIDER),
+  currencies: ["XOF"]
+};
+var PawapayProvider = class {
+  id = PROVIDER_ID;
+  #http;
+  #generateId;
+  #cache;
+  constructor(options) {
+    if (!options.apiToken?.trim()) {
+      throw new ValidationError('PawapayProvider requires a non-empty "apiToken"');
+    }
+    const mode = options.mode ?? "sandbox";
+    this.#generateId = options.generateId ?? (() => crypto.randomUUID());
+    this.#cache = new IdempotencyCache(
+      options.idempotencyStore ?? new MemoryIdempotencyStore(),
+      this.id
+    );
+    this.#http = new HttpClient({
+      baseUrl: options.baseUrl ?? (mode === "live" ? PRODUCTION_BASE_URL : SANDBOX_BASE_URL),
+      timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+      fetch: options.fetch ?? globalThis.fetch,
+      apiToken: options.apiToken
+    });
+  }
+  capabilities() {
+    return CAPABILITIES;
+  }
+  async collection(input, options) {
+    return this.#initiate("collection", input, input.customer, options);
+  }
+  async disbursement(input, options) {
+    return this.#initiate("disbursement", input, input.recipient, options);
+  }
+  async getTransaction(ref, options) {
+    const known = (ref.id ? await this.#cache.byId(ref.id) : void 0) ?? (ref.reference ? await this.#cache.byReference(ref.reference) : void 0);
+    const id = ref.id ?? known?.id;
+    if (!id) {
+      throw new ValidationError(
+        "pawaPay looks a transaction up by its deposit/payout id (the provider id); this reference is not known to this instance",
+        { provider: this.id }
+      );
+    }
+    const type = known?.type ?? "collection";
+    const path = type === "disbursement" ? `/v2/payouts/${id}` : `/v2/deposits/${id}`;
+    const res = await this.#http.getJson(path, options?.signal);
+    return await this.#toTransaction(type, res, { known, id });
+  }
+  async parseWebhook(raw) {
+    const { fields, raw: rawBody } = parseCallbackBody(raw.body);
+    verifyContentDigest(raw.headers, rawBody);
+    const depositId = fields.depositId;
+    const payoutId = fields.payoutId;
+    const id = depositId ?? payoutId;
+    if (!id) {
+      throw new ValidationError("pawaPay callback carries neither a depositId nor a payoutId", {
+        provider: this.id
+      });
+    }
+    const known = await this.#cache.byId(id);
+    const type = payoutId ? "disbursement" : "collection";
+    const path = type === "disbursement" ? `/v2/payouts/${id}` : `/v2/deposits/${id}`;
+    const res = await this.#http.getJson(path);
+    const transaction = await this.#toTransaction(type, res, { known, id });
+    return {
+      type: webhookEventTypeForStatus(transaction.status),
+      transaction,
+      providerRaw: fields
+    };
+  }
+  async #initiate(type, input, party, options) {
+    const operator = party.operator;
+    if (!operator || !isOperator(operator)) {
+      throw new ValidationError(`pawaPay ${type} needs a known operator`, { provider: this.id });
+    }
+    const providerCode = PAWAPAY_PROVIDER[operator];
+    if (!providerCode) {
+      throw new ValidationError(`pawaPay has no provider code for operator "${operator}"`, {
+        provider: this.id
+      });
+    }
+    const cached = await this.#cache.byReference(input.reference);
+    if (cached) return structuredClone(cached);
+    const id = this.#generateId();
+    const account = {
+      type: "MMO",
+      accountDetails: { phoneNumber: party.phone.replace(/\D/g, ""), provider: providerCode }
+    };
+    const body = {
+      [type === "disbursement" ? "payoutId" : "depositId"]: id,
+      amount: String(input.amount.amount),
+      currency: input.amount.currency,
+      [type === "disbursement" ? "recipient" : "payer"]: account,
+      customerMessage: customerMessage(input.description),
+      clientReferenceId: input.reference,
+      metadata: [
+        { [REFERENCE_KEY]: input.reference },
+        ...Object.entries(input.metadata ?? {}).map(([k, v]) => ({ [k]: v }))
+      ]
+    };
+    const path = type === "disbursement" ? "/v2/payouts" : "/v2/deposits";
+    const res = await this.#http.postJson(path, body, options?.signal);
+    if (res.status === "REJECTED") throw rejectedError(res);
+    if (res.status === "DUPLICATE_IGNORED") {
+      const fetched = await this.#http.getJson(
+        `${path}/${id}`,
+        options?.signal
+      );
+      return await this.#toTransaction(type, fetched, { id, input, operator, party });
+    }
+    const now = res.created ?? (/* @__PURE__ */ new Date()).toISOString();
+    const txn = {
+      provider: this.id,
+      id,
+      reference: input.reference,
+      type,
+      status: "processing",
+      amount: input.amount,
+      operator,
+      customer: party,
+      providerRaw: res,
+      createdAt: now,
+      updatedAt: now
+    };
+    await this.#cache.remember(txn);
+    return structuredClone(txn);
+  }
+  async #toTransaction(type, res, ctx) {
+    const status = mapTransactionStatus(res.status);
+    const echoed = metadataReference(res.metadata) ?? res.clientReferenceId;
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const txn = {
+      provider: this.id,
+      id: ctx.id,
+      reference: echoed ?? ctx.known?.reference ?? ctx.input?.reference ?? ctx.id,
+      type,
+      status,
+      amount: ctx.known?.amount ?? ctx.input?.amount ?? coerceAmount(res.amount, res.currency),
+      operator: ctx.known?.operator ?? ctx.operator,
+      customer: ctx.known?.customer ?? ctx.party,
+      failureReason: status === "failed" ? mapFailureReason(res.failureReason) : void 0,
+      providerRaw: res,
+      createdAt: ctx.known?.createdAt ?? res.created ?? now,
+      updatedAt: now
+    };
+    await this.#cache.remember(txn);
+    return structuredClone(txn);
+  }
+};
+function customerMessage(description) {
+  const cleaned = (description ?? "Payment").replace(/[^a-zA-Z0-9]/g, "");
+  return cleaned.length >= 4 ? cleaned.slice(0, 22) : "Payment";
+}
+function metadataReference(metadata) {
+  for (const entry of metadata ?? []) {
+    const value = entry[REFERENCE_KEY];
+    if (typeof value === "string") return value;
+  }
+  return void 0;
+}
+function coerceAmount(raw, currency) {
+  const amount = raw ? Number.parseInt(raw, 10) : 0;
+  return {
+    amount: Number.isFinite(amount) ? amount : 0,
+    currency: currency === "XAF" ? "XAF" : "XOF"
+  };
+}
+export {
+  PAWAPAY_PROVIDER,
+  PawapayProvider,
+  parseCallbackBody,
+  verifyContentDigest
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.ts","../src/http.ts","../src/mapping.ts","../src/webhook.ts"],"sourcesContent":["import {\n  type CollectionInput,\n  type DisbursementInput,\n  IdempotencyCache,\n  type IdempotencyStore,\n  MemoryIdempotencyStore,\n  type Money,\n  type Operator,\n  type Party,\n  type PaymentProvider,\n  type ProviderCallOptions,\n  type ProviderCapabilities,\n  type RawWebhook,\n  type Transaction,\n  type TransactionRef,\n  type TransactionType,\n  ValidationError,\n  type WebhookEvent,\n  isOperator,\n  webhookEventTypeForStatus,\n} from '@momorail/core';\nimport { HttpClient, PRODUCTION_BASE_URL, PROVIDER_ID, SANDBOX_BASE_URL } from './http.js';\nimport {\n  PAWAPAY_PROVIDER,\n  mapFailureReason,\n  mapTransactionStatus,\n  rejectedError,\n} from './mapping.js';\nimport type {\n  PawapayAcceptResponse,\n  PawapayMmoAccount,\n  PawapayTransactionResponse,\n} from './types.js';\nimport { parseCallbackBody, verifyContentDigest } from './webhook.js';\n\nconst DEFAULT_TIMEOUT_MS = 15_000;\nconst REFERENCE_KEY = 'momorailReference';\n\nexport type PawapayMode = 'live' | 'sandbox';\n\nexport interface PawapayOptions {\n  /** pawaPay API token (JWT) — sent as `Authorization: Bearer <token>`. */\n  apiToken: string;\n  /** `'sandbox'` (default) or `'live'` — selects the base URL. */\n  mode?: PawapayMode;\n  /** Override the API base URL (tests). */\n  baseUrl?: string;\n  /** Per-request timeout in ms. Default 15000. */\n  timeoutMs?: number;\n  /** Injectable fetch implementation. Default the global `fetch`. */\n  fetch?: typeof fetch;\n  /** Id generator for `depositId` / `payoutId` (UUID v4). Default `crypto.randomUUID`. */\n  generateId?: () => string;\n  /** Where the adapter remembers created transactions. Default: in-memory, per process. */\n  idempotencyStore?: IdempotencyStore;\n}\n\nconst CAPABILITIES: ProviderCapabilities = {\n  collection: true,\n  disbursement: true,\n  // pawaPay looks a transaction up by the merchant-generated deposit/payout id.\n  lookupByReference: false,\n  // Direct deposits push a prompt to the customer's phone — no hosted page.\n  hostedCheckout: false,\n  operators: Object.keys(PAWAPAY_PROVIDER) as Operator[],\n  currencies: ['XOF'],\n};\n\n/**\n * pawaPay adapter — direct mobile-money deposits and payouts across Sub-Saharan\n * Africa. The API is asynchronous: `POST /v2/deposits` returns `ACCEPTED` and the\n * transaction stays `processing` until a callback or a `GET` poll reports\n * `COMPLETED` / `FAILED`. The customer approves the deposit via their operator's\n * own prompt, so there is no `checkoutUrl`.\n *\n * pawaPay ids are merchant-generated UUIDs, so the adapter mints a `depositId` /\n * `payoutId`, uses it as `Transaction.id`, keeps a `reference → Transaction`\n * cache, and sets `clientReferenceId` + `metadata` so the caller reference is\n * recoverable across processes.\n */\nexport class PawapayProvider implements PaymentProvider {\n  readonly id = PROVIDER_ID;\n\n  readonly #http: HttpClient;\n  readonly #generateId: () => string;\n  readonly #cache: IdempotencyCache;\n\n  constructor(options: PawapayOptions) {\n    if (!options.apiToken?.trim()) {\n      throw new ValidationError('PawapayProvider requires a non-empty \"apiToken\"');\n    }\n    const mode: PawapayMode = options.mode ?? 'sandbox';\n    this.#generateId = options.generateId ?? (() => crypto.randomUUID());\n    this.#cache = new IdempotencyCache(\n      options.idempotencyStore ?? new MemoryIdempotencyStore(),\n      this.id,\n    );\n    this.#http = new HttpClient({\n      baseUrl: options.baseUrl ?? (mode === 'live' ? PRODUCTION_BASE_URL : SANDBOX_BASE_URL),\n      timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      fetch: options.fetch ?? globalThis.fetch,\n      apiToken: options.apiToken,\n    });\n  }\n\n  capabilities(): ProviderCapabilities {\n    return CAPABILITIES;\n  }\n\n  async collection(input: CollectionInput, options?: ProviderCallOptions): Promise<Transaction> {\n    return this.#initiate('collection', input, input.customer, options);\n  }\n\n  async disbursement(\n    input: DisbursementInput,\n    options?: ProviderCallOptions,\n  ): Promise<Transaction> {\n    return this.#initiate('disbursement', input, input.recipient, options);\n  }\n\n  async getTransaction(ref: TransactionRef, options?: ProviderCallOptions): Promise<Transaction> {\n    const known =\n      (ref.id ? await this.#cache.byId(ref.id) : undefined) ??\n      (ref.reference ? await this.#cache.byReference(ref.reference) : undefined);\n\n    const id = ref.id ?? known?.id;\n    if (!id) {\n      throw new ValidationError(\n        'pawaPay looks a transaction up by its deposit/payout id (the provider id); this reference is not known to this instance',\n        { provider: this.id },\n      );\n    }\n\n    const type: TransactionType = known?.type ?? 'collection';\n    const path = type === 'disbursement' ? `/v2/payouts/${id}` : `/v2/deposits/${id}`;\n    const res = await this.#http.getJson<PawapayTransactionResponse>(path, options?.signal);\n\n    return await this.#toTransaction(type, res, { known, id });\n  }\n\n  async parseWebhook(raw: RawWebhook): Promise<WebhookEvent> {\n    const { fields, raw: rawBody } = parseCallbackBody(raw.body);\n    verifyContentDigest(raw.headers, rawBody);\n\n    const depositId = fields.depositId;\n    const payoutId = fields.payoutId;\n    const id = depositId ?? payoutId;\n    if (!id) {\n      throw new ValidationError('pawaPay callback carries neither a depositId nor a payoutId', {\n        provider: this.id,\n      });\n    }\n\n    const known = await this.#cache.byId(id);\n    const type: TransactionType = payoutId ? 'disbursement' : 'collection';\n    const path = type === 'disbursement' ? `/v2/payouts/${id}` : `/v2/deposits/${id}`;\n    const res = await this.#http.getJson<PawapayTransactionResponse>(path);\n    const transaction = await this.#toTransaction(type, res, { known, id });\n\n    return {\n      type: webhookEventTypeForStatus(transaction.status),\n      transaction,\n      providerRaw: fields,\n    };\n  }\n\n  async #initiate(\n    type: TransactionType,\n    input: CollectionInput | DisbursementInput,\n    party: Party,\n    options?: ProviderCallOptions,\n  ): Promise<Transaction> {\n    const operator = party.operator;\n    if (!operator || !isOperator(operator)) {\n      throw new ValidationError(`pawaPay ${type} needs a known operator`, { provider: this.id });\n    }\n    const providerCode = PAWAPAY_PROVIDER[operator];\n    if (!providerCode) {\n      throw new ValidationError(`pawaPay has no provider code for operator \"${operator}\"`, {\n        provider: this.id,\n      });\n    }\n\n    const cached = await this.#cache.byReference(input.reference);\n    if (cached) return structuredClone(cached);\n\n    const id = this.#generateId();\n    const account: PawapayMmoAccount = {\n      type: 'MMO',\n      accountDetails: { phoneNumber: party.phone.replace(/\\D/g, ''), provider: providerCode },\n    };\n    const body = {\n      [type === 'disbursement' ? 'payoutId' : 'depositId']: id,\n      amount: String(input.amount.amount),\n      currency: input.amount.currency,\n      [type === 'disbursement' ? 'recipient' : 'payer']: account,\n      customerMessage: customerMessage(input.description),\n      clientReferenceId: input.reference,\n      metadata: [\n        { [REFERENCE_KEY]: input.reference },\n        ...Object.entries(input.metadata ?? {}).map(([k, v]) => ({ [k]: v })),\n      ],\n    };\n\n    const path = type === 'disbursement' ? '/v2/payouts' : '/v2/deposits';\n    const res = await this.#http.postJson<PawapayAcceptResponse>(path, body, options?.signal);\n\n    if (res.status === 'REJECTED') throw rejectedError(res);\n    if (res.status === 'DUPLICATE_IGNORED') {\n      const fetched = await this.#http.getJson<PawapayTransactionResponse>(\n        `${path}/${id}`,\n        options?.signal,\n      );\n      return await this.#toTransaction(type, fetched, { id, input, operator, party });\n    }\n\n    // ACCEPTED — the transaction is now processing.\n    const now = res.created ?? new Date().toISOString();\n    const txn: Transaction = {\n      provider: this.id,\n      id,\n      reference: input.reference,\n      type,\n      status: 'processing',\n      amount: input.amount,\n      operator,\n      customer: party,\n      providerRaw: res,\n      createdAt: now,\n      updatedAt: now,\n    };\n    await this.#cache.remember(txn);\n    return structuredClone(txn);\n  }\n\n  async #toTransaction(\n    type: TransactionType,\n    res: PawapayTransactionResponse,\n    ctx: {\n      known?: Transaction;\n      id: string;\n      input?: CollectionInput | DisbursementInput;\n      operator?: Transaction['operator'];\n      party?: Party;\n    },\n  ): Promise<Transaction> {\n    const status = mapTransactionStatus(res.status);\n    const echoed = metadataReference(res.metadata) ?? res.clientReferenceId;\n    const now = new Date().toISOString();\n\n    const txn: Transaction = {\n      provider: this.id,\n      id: ctx.id,\n      reference: echoed ?? ctx.known?.reference ?? ctx.input?.reference ?? ctx.id,\n      type,\n      status,\n      amount: ctx.known?.amount ?? ctx.input?.amount ?? coerceAmount(res.amount, res.currency),\n      operator: ctx.known?.operator ?? ctx.operator,\n      customer: ctx.known?.customer ?? ctx.party,\n      failureReason: status === 'failed' ? mapFailureReason(res.failureReason) : undefined,\n      providerRaw: res,\n      createdAt: ctx.known?.createdAt ?? res.created ?? now,\n      updatedAt: now,\n    };\n    await this.#cache.remember(txn);\n    return structuredClone(txn);\n  }\n}\n\nfunction customerMessage(description: string | undefined): string {\n  const cleaned = (description ?? 'Payment').replace(/[^a-zA-Z0-9]/g, '');\n  return cleaned.length >= 4 ? cleaned.slice(0, 22) : 'Payment';\n}\n\nfunction metadataReference(\n  metadata: Array<Record<string, unknown>> | undefined,\n): string | undefined {\n  for (const entry of metadata ?? []) {\n    const value = entry[REFERENCE_KEY];\n    if (typeof value === 'string') return value;\n  }\n  return undefined;\n}\n\nfunction coerceAmount(raw: string | undefined, currency: string | undefined): Money {\n  const amount = raw ? Number.parseInt(raw, 10) : 0;\n  return {\n    amount: Number.isFinite(amount) ? amount : 0,\n    currency: currency === 'XAF' ? 'XAF' : 'XOF',\n  };\n}\n","import {\n  AuthError,\n  ProviderUnavailableError,\n  RateLimitError,\n  TransactionNotFoundError,\n} from '@momorail/core';\n\nexport const PROVIDER_ID = 'pawapay';\nexport const SANDBOX_BASE_URL = 'https://api.sandbox.pawapay.io';\nexport const PRODUCTION_BASE_URL = 'https://api.pawapay.io';\n\nexport type FetchLike = typeof fetch;\n\nexport interface HttpClientOptions {\n  baseUrl: string;\n  timeoutMs: number;\n  fetch: FetchLike;\n  apiToken: string;\n}\n\n/** JSON helper for the pawaPay v2 API: Bearer auth, timeout, and error mapping. */\nexport class HttpClient {\n  readonly #baseUrl: string;\n  readonly #timeoutMs: number;\n  readonly #fetch: FetchLike;\n  readonly #apiToken: string;\n\n  constructor(options: HttpClientOptions) {\n    this.#baseUrl = options.baseUrl.replace(/\\/$/, '');\n    this.#timeoutMs = options.timeoutMs;\n    this.#fetch = options.fetch;\n    this.#apiToken = options.apiToken;\n  }\n\n  postJson<T>(path: string, body: unknown, signal?: AbortSignal): Promise<T> {\n    return this.#request<T>('POST', path, body, signal);\n  }\n\n  getJson<T>(path: string, signal?: AbortSignal): Promise<T> {\n    return this.#request<T>('GET', path, undefined, signal);\n  }\n\n  async #request<T>(\n    method: 'GET' | 'POST',\n    path: string,\n    body: unknown,\n    signal?: AbortSignal,\n  ): Promise<T> {\n    const timeout = AbortSignal.timeout(this.#timeoutMs);\n    const composite = signal ? AbortSignal.any([signal, timeout]) : timeout;\n\n    const headers: Record<string, string> = {\n      accept: 'application/json',\n      authorization: `Bearer ${this.#apiToken}`,\n    };\n    if (method === 'POST') headers['content-type'] = 'application/json';\n\n    let response: Response;\n    try {\n      response = await this.#fetch(`${this.#baseUrl}${path}`, {\n        method,\n        headers,\n        body: method === 'POST' ? JSON.stringify(body) : undefined,\n        signal: composite,\n      });\n    } catch (cause) {\n      if (signal?.aborted) throw cause;\n      throw new ProviderUnavailableError('pawaPay request failed to complete', {\n        provider: PROVIDER_ID,\n        cause,\n      });\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      throw new AuthError(`pawaPay rejected the API token (${response.status})`, {\n        provider: PROVIDER_ID,\n      });\n    }\n    if (response.status === 404) {\n      throw new TransactionNotFoundError('pawaPay has no such transaction', {\n        provider: PROVIDER_ID,\n      });\n    }\n    if (response.status === 429) {\n      throw new RateLimitError('pawaPay throttled the request', { provider: PROVIDER_ID });\n    }\n\n    const raw = await response.text();\n    let parsed: unknown;\n    try {\n      parsed = raw ? JSON.parse(raw) : {};\n    } catch (cause) {\n      throw new ProviderUnavailableError('pawaPay returned a non-JSON response', {\n        provider: PROVIDER_ID,\n        providerRaw: raw,\n        cause,\n      });\n    }\n\n    if (response.status >= 500) {\n      throw new ProviderUnavailableError(`pawaPay responded ${response.status}`, {\n        provider: PROVIDER_ID,\n        providerRaw: parsed,\n      });\n    }\n\n    return parsed as T;\n  }\n}\n","import {\n  type FailureReason,\n  MomorailError,\n  type Operator,\n  ProviderUnavailableError,\n  type TransactionStatus,\n} from '@momorail/core';\nimport { PROVIDER_ID } from './http.js';\nimport type { PawapayAcceptResponse, PawapayFailureReason } from './types.js';\n\n/**\n * Momorail operator → pawaPay `provider` code. pawaPay scopes providers by\n * ISO-3166 alpha-3 country. Confirm the exact codes for your markets against\n * pawaPay's `GET /v2/active-conf`.\n */\nexport const PAWAPAY_PROVIDER: Partial<Record<Operator, string>> = {\n  orange_ci: 'ORANGE_CIV',\n  mtn_ci: 'MTN_MOMO_CIV',\n  moov_ci: 'MOOV_CIV',\n  wave_ci: 'WAVE_CIV',\n  orange_sn: 'ORANGE_SEN',\n  free_sn: 'FREE_SEN',\n  wave_sn: 'WAVE_SEN',\n  orange_ml: 'ORANGE_MLI',\n  moov_ml: 'MOOV_MLI',\n  orange_bf: 'ORANGE_BFA',\n  moov_bf: 'MOOV_BFA',\n  mtn_bj: 'MTN_MOMO_BEN',\n  moov_bj: 'MOOV_BEN',\n  orange_ne: 'ORANGE_NER',\n  moov_ne: 'MOOV_NER',\n  moov_tg: 'MOOV_TGO',\n  togocom_tg: 'TOGOCOM_TGO',\n  orange_cd: 'ORANGE_COD',\n  airtel_cd: 'AIRTEL_COD',\n  vodacom_cd: 'VODACOM_COD',\n};\n\n/** Map a pawaPay transaction status (from `GET`) onto a Momorail status. */\nexport function mapTransactionStatus(status: string | undefined): TransactionStatus {\n  switch (status?.toUpperCase()) {\n    case 'COMPLETED':\n      return 'succeeded';\n    case 'FAILED':\n      return 'failed';\n    case 'ACCEPTED':\n    case 'PROCESSING':\n    case 'IN_RECONCILIATION':\n      return 'processing';\n    default:\n      return 'unknown';\n  }\n}\n\nconst FAILURE_REASONS: Record<string, FailureReason> = {\n  INSUFFICIENT_BALANCE: 'insufficient_funds',\n  PAYER_LIMIT_REACHED: 'limit_exceeded',\n  RECIPIENT_LIMIT_REACHED: 'limit_exceeded',\n  PAYER_NOT_FOUND: 'invalid_number',\n  RECIPIENT_NOT_FOUND: 'invalid_number',\n  INVALID_PAYER_FORMAT: 'invalid_number',\n  UNSPECIFIED_FAILURE: 'provider_error',\n  PROVIDER_TEMPORARILY_UNAVAILABLE: 'provider_error',\n  PAYER_DECLINED: 'user_declined',\n  USER_CANCELLED: 'user_declined',\n  TRANSACTION_TIMED_OUT: 'timeout',\n};\n\nexport function mapFailureReason(reason: PawapayFailureReason | undefined): FailureReason {\n  return FAILURE_REASONS[reason?.failureCode ?? ''] ?? 'other';\n}\n\n/** Turn a synchronous `REJECTED` response into the matching `MomorailError`. */\nexport function rejectedError(res: PawapayAcceptResponse): MomorailError {\n  const code = res.failureReason?.failureCode ?? 'REJECTED';\n  const message = res.failureReason?.failureMessage ?? 'pawaPay rejected the request';\n  if (/UNAVAILABLE|TEMPORARILY/.test(code)) {\n    return new ProviderUnavailableError(`pawaPay is unavailable (${code}: ${message})`, {\n      provider: PROVIDER_ID,\n      providerRaw: res,\n    });\n  }\n  return new MomorailError(`pawaPay rejected the request (${code}: ${message})`, 'provider_error', {\n    provider: PROVIDER_ID,\n    providerRaw: res,\n  });\n}\n","import { createHash } from 'node:crypto';\nimport { WebhookVerificationError } from '@momorail/core';\nimport { PROVIDER_ID } from './http.js';\n\n/**\n * pawaPay signs callbacks with RFC-9421 HTTP Message Signatures using an\n * asymmetric key (ECDSA / RSASSA-PSS). Full verification needs the public key\n * from pawaPay's Public Keys endpoint and an RFC-9421 implementation — a planned\n * follow-up.\n *\n * What this adapter checks today is the `Content-Digest` header: a SHA-256 /\n * SHA-512 hash of the raw body. It proves the body was not altered in transit,\n * and the adapter then re-fetches the authoritative status from the API, so a\n * forged callback only triggers a status re-check.\n */\nexport function verifyContentDigest(\n  headers: Record<string, string | string[] | undefined>,\n  rawBody: string,\n): void {\n  const header = headerValue(headers, 'content-digest');\n  if (!header) return; // absent — nothing to check; status is re-fetched anyway\n\n  // Format: `sha-256=:<base64>:` (possibly multiple, comma-separated)\n  const match = /(sha-256|sha-512)=:([A-Za-z0-9+/=]+):/i.exec(header);\n  if (!match) {\n    throw new WebhookVerificationError('Unparseable Content-Digest on pawaPay callback', {\n      provider: PROVIDER_ID,\n    });\n  }\n  const algo = match[1]?.toLowerCase() === 'sha-512' ? 'sha512' : 'sha256';\n  const expected = createHash(algo).update(rawBody, 'utf8').digest('base64');\n  if (match[2] !== expected) {\n    throw new WebhookVerificationError('pawaPay callback body does not match its Content-Digest', {\n      provider: PROVIDER_ID,\n    });\n  }\n}\n\nexport interface PawapayCallback {\n  depositId?: string;\n  payoutId?: string;\n  refundId?: string;\n  status?: string;\n  [key: string]: unknown;\n}\n\nexport function parseCallbackBody(body: string | Uint8Array | Record<string, unknown>): {\n  fields: PawapayCallback;\n  raw: string;\n} {\n  if (typeof body === 'string') {\n    return { fields: JSON.parse(body || '{}') as PawapayCallback, raw: body };\n  }\n  if (body instanceof Uint8Array) {\n    const raw = new TextDecoder().decode(body);\n    return { fields: JSON.parse(raw || '{}') as PawapayCallback, raw };\n  }\n  return { fields: body as PawapayCallback, raw: JSON.stringify(body) };\n}\n\nfunction headerValue(\n  headers: Record<string, string | string[] | undefined>,\n  name: string,\n): string | undefined {\n  const found =\n    headers[name] ??\n    headers[name.toLowerCase()] ??\n    Object.entries(headers).find(([k]) => k.toLowerCase() === name.toLowerCase())?.[1];\n  return Array.isArray(found) ? found[0] : found;\n}\n"],"mappings":";AAAA;AAAA,EAGE;AAAA,EAEA;AAAA,EAWA;AAAA,EAEA;AAAA,EACA;AAAA,OACK;;;ACpBP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AAEA,IAAM,cAAc;AACpB,IAAM,mBAAmB;AACzB,IAAM,sBAAsB;AAY5B,IAAM,aAAN,MAAiB;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,SAA4B;AACtC,SAAK,WAAW,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AACjD,SAAK,aAAa,QAAQ;AAC1B,SAAK,SAAS,QAAQ;AACtB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AAAA,EAEA,SAAY,MAAc,MAAe,QAAkC;AACzE,WAAO,KAAK,SAAY,QAAQ,MAAM,MAAM,MAAM;AAAA,EACpD;AAAA,EAEA,QAAW,MAAc,QAAkC;AACzD,WAAO,KAAK,SAAY,OAAO,MAAM,QAAW,MAAM;AAAA,EACxD;AAAA,EAEA,MAAM,SACJ,QACA,MACA,MACA,QACY;AACZ,UAAM,UAAU,YAAY,QAAQ,KAAK,UAAU;AACnD,UAAM,YAAY,SAAS,YAAY,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI;AAEhE,UAAM,UAAkC;AAAA,MACtC,QAAQ;AAAA,MACR,eAAe,UAAU,KAAK,SAAS;AAAA,IACzC;AACA,QAAI,WAAW,OAAQ,SAAQ,cAAc,IAAI;AAEjD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,KAAK,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,IAAI;AAAA,QACtD;AAAA,QACA;AAAA,QACA,MAAM,WAAW,SAAS,KAAK,UAAU,IAAI,IAAI;AAAA,QACjD,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,QAAQ,QAAS,OAAM;AAC3B,YAAM,IAAI,yBAAyB,sCAAsC;AAAA,QACvE,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,SAAS,WAAW,OAAO,SAAS,WAAW,KAAK;AACtD,YAAM,IAAI,UAAU,mCAAmC,SAAS,MAAM,KAAK;AAAA,QACzE,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,yBAAyB,mCAAmC;AAAA,QACpE,UAAU;AAAA,MACZ,CAAC;AAAA,IACH;AACA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,eAAe,iCAAiC,EAAE,UAAU,YAAY,CAAC;AAAA,IACrF;AAEA,UAAM,MAAM,MAAM,SAAS,KAAK;AAChC,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA,IACpC,SAAS,OAAO;AACd,YAAM,IAAI,yBAAyB,wCAAwC;AAAA,QACzE,UAAU;AAAA,QACV,aAAa;AAAA,QACb;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,SAAS,UAAU,KAAK;AAC1B,YAAM,IAAI,yBAAyB,qBAAqB,SAAS,MAAM,IAAI;AAAA,QACzE,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AACF;;;AC5GA;AAAA,EAEE;AAAA,EAEA,4BAAAA;AAAA,OAEK;AASA,IAAM,mBAAsD;AAAA,EACjE,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,YAAY;AAAA,EACZ,WAAW;AAAA,EACX,WAAW;AAAA,EACX,YAAY;AACd;AAGO,SAAS,qBAAqB,QAA+C;AAClF,UAAQ,QAAQ,YAAY,GAAG;AAAA,IAC7B,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO;AAAA,EACX;AACF;AAEA,IAAM,kBAAiD;AAAA,EACrD,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,yBAAyB;AAAA,EACzB,iBAAiB;AAAA,EACjB,qBAAqB;AAAA,EACrB,sBAAsB;AAAA,EACtB,qBAAqB;AAAA,EACrB,kCAAkC;AAAA,EAClC,gBAAgB;AAAA,EAChB,gBAAgB;AAAA,EAChB,uBAAuB;AACzB;AAEO,SAAS,iBAAiB,QAAyD;AACxF,SAAO,gBAAgB,QAAQ,eAAe,EAAE,KAAK;AACvD;AAGO,SAAS,cAAc,KAA2C;AACvE,QAAM,OAAO,IAAI,eAAe,eAAe;AAC/C,QAAM,UAAU,IAAI,eAAe,kBAAkB;AACrD,MAAI,0BAA0B,KAAK,IAAI,GAAG;AACxC,WAAO,IAAIC,0BAAyB,2BAA2B,IAAI,KAAK,OAAO,KAAK;AAAA,MAClF,UAAU;AAAA,MACV,aAAa;AAAA,IACf,CAAC;AAAA,EACH;AACA,SAAO,IAAI,cAAc,iCAAiC,IAAI,KAAK,OAAO,KAAK,kBAAkB;AAAA,IAC/F,UAAU;AAAA,IACV,aAAa;AAAA,EACf,CAAC;AACH;;;ACtFA,SAAS,kBAAkB;AAC3B,SAAS,gCAAgC;AAclC,SAAS,oBACd,SACA,SACM;AACN,QAAM,SAAS,YAAY,SAAS,gBAAgB;AACpD,MAAI,CAAC,OAAQ;AAGb,QAAM,QAAQ,yCAAyC,KAAK,MAAM;AAClE,MAAI,CAAC,OAAO;AACV,UAAM,IAAI,yBAAyB,kDAAkD;AAAA,MACnF,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,QAAM,OAAO,MAAM,CAAC,GAAG,YAAY,MAAM,YAAY,WAAW;AAChE,QAAM,WAAW,WAAW,IAAI,EAAE,OAAO,SAAS,MAAM,EAAE,OAAO,QAAQ;AACzE,MAAI,MAAM,CAAC,MAAM,UAAU;AACzB,UAAM,IAAI,yBAAyB,2DAA2D;AAAA,MAC5F,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACF;AAUO,SAAS,kBAAkB,MAGhC;AACA,MAAI,OAAO,SAAS,UAAU;AAC5B,WAAO,EAAE,QAAQ,KAAK,MAAM,QAAQ,IAAI,GAAsB,KAAK,KAAK;AAAA,EAC1E;AACA,MAAI,gBAAgB,YAAY;AAC9B,UAAM,MAAM,IAAI,YAAY,EAAE,OAAO,IAAI;AACzC,WAAO,EAAE,QAAQ,KAAK,MAAM,OAAO,IAAI,GAAsB,IAAI;AAAA,EACnE;AACA,SAAO,EAAE,QAAQ,MAAyB,KAAK,KAAK,UAAU,IAAI,EAAE;AACtE;AAEA,SAAS,YACP,SACA,MACoB;AACpB,QAAM,QACJ,QAAQ,IAAI,KACZ,QAAQ,KAAK,YAAY,CAAC,KAC1B,OAAO,QAAQ,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,YAAY,MAAM,KAAK,YAAY,CAAC,IAAI,CAAC;AACnF,SAAO,MAAM,QAAQ,KAAK,IAAI,MAAM,CAAC,IAAI;AAC3C;;;AHlCA,IAAM,qBAAqB;AAC3B,IAAM,gBAAgB;AAqBtB,IAAM,eAAqC;AAAA,EACzC,YAAY;AAAA,EACZ,cAAc;AAAA;AAAA,EAEd,mBAAmB;AAAA;AAAA,EAEnB,gBAAgB;AAAA,EAChB,WAAW,OAAO,KAAK,gBAAgB;AAAA,EACvC,YAAY,CAAC,KAAK;AACpB;AAcO,IAAM,kBAAN,MAAiD;AAAA,EAC7C,KAAK;AAAA,EAEL;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,SAAyB;AACnC,QAAI,CAAC,QAAQ,UAAU,KAAK,GAAG;AAC7B,YAAM,IAAI,gBAAgB,iDAAiD;AAAA,IAC7E;AACA,UAAM,OAAoB,QAAQ,QAAQ;AAC1C,SAAK,cAAc,QAAQ,eAAe,MAAM,OAAO,WAAW;AAClE,SAAK,SAAS,IAAI;AAAA,MAChB,QAAQ,oBAAoB,IAAI,uBAAuB;AAAA,MACvD,KAAK;AAAA,IACP;AACA,SAAK,QAAQ,IAAI,WAAW;AAAA,MAC1B,SAAS,QAAQ,YAAY,SAAS,SAAS,sBAAsB;AAAA,MACrE,WAAW,QAAQ,aAAa;AAAA,MAChC,OAAO,QAAQ,SAAS,WAAW;AAAA,MACnC,UAAU,QAAQ;AAAA,IACpB,CAAC;AAAA,EACH;AAAA,EAEA,eAAqC;AACnC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,OAAwB,SAAqD;AAC5F,WAAO,KAAK,UAAU,cAAc,OAAO,MAAM,UAAU,OAAO;AAAA,EACpE;AAAA,EAEA,MAAM,aACJ,OACA,SACsB;AACtB,WAAO,KAAK,UAAU,gBAAgB,OAAO,MAAM,WAAW,OAAO;AAAA,EACvE;AAAA,EAEA,MAAM,eAAe,KAAqB,SAAqD;AAC7F,UAAM,SACH,IAAI,KAAK,MAAM,KAAK,OAAO,KAAK,IAAI,EAAE,IAAI,YAC1C,IAAI,YAAY,MAAM,KAAK,OAAO,YAAY,IAAI,SAAS,IAAI;AAElE,UAAM,KAAK,IAAI,MAAM,OAAO;AAC5B,QAAI,CAAC,IAAI;AACP,YAAM,IAAI;AAAA,QACR;AAAA,QACA,EAAE,UAAU,KAAK,GAAG;AAAA,MACtB;AAAA,IACF;AAEA,UAAM,OAAwB,OAAO,QAAQ;AAC7C,UAAM,OAAO,SAAS,iBAAiB,eAAe,EAAE,KAAK,gBAAgB,EAAE;AAC/E,UAAM,MAAM,MAAM,KAAK,MAAM,QAAoC,MAAM,SAAS,MAAM;AAEtF,WAAO,MAAM,KAAK,eAAe,MAAM,KAAK,EAAE,OAAO,GAAG,CAAC;AAAA,EAC3D;AAAA,EAEA,MAAM,aAAa,KAAwC;AACzD,UAAM,EAAE,QAAQ,KAAK,QAAQ,IAAI,kBAAkB,IAAI,IAAI;AAC3D,wBAAoB,IAAI,SAAS,OAAO;AAExC,UAAM,YAAY,OAAO;AACzB,UAAM,WAAW,OAAO;AACxB,UAAM,KAAK,aAAa;AACxB,QAAI,CAAC,IAAI;AACP,YAAM,IAAI,gBAAgB,+DAA+D;AAAA,QACvF,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAEA,UAAM,QAAQ,MAAM,KAAK,OAAO,KAAK,EAAE;AACvC,UAAM,OAAwB,WAAW,iBAAiB;AAC1D,UAAM,OAAO,SAAS,iBAAiB,eAAe,EAAE,KAAK,gBAAgB,EAAE;AAC/E,UAAM,MAAM,MAAM,KAAK,MAAM,QAAoC,IAAI;AACrE,UAAM,cAAc,MAAM,KAAK,eAAe,MAAM,KAAK,EAAE,OAAO,GAAG,CAAC;AAEtE,WAAO;AAAA,MACL,MAAM,0BAA0B,YAAY,MAAM;AAAA,MAClD;AAAA,MACA,aAAa;AAAA,IACf;AAAA,EACF;AAAA,EAEA,MAAM,UACJ,MACA,OACA,OACA,SACsB;AACtB,UAAM,WAAW,MAAM;AACvB,QAAI,CAAC,YAAY,CAAC,WAAW,QAAQ,GAAG;AACtC,YAAM,IAAI,gBAAgB,WAAW,IAAI,2BAA2B,EAAE,UAAU,KAAK,GAAG,CAAC;AAAA,IAC3F;AACA,UAAM,eAAe,iBAAiB,QAAQ;AAC9C,QAAI,CAAC,cAAc;AACjB,YAAM,IAAI,gBAAgB,8CAA8C,QAAQ,KAAK;AAAA,QACnF,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,YAAY,MAAM,SAAS;AAC5D,QAAI,OAAQ,QAAO,gBAAgB,MAAM;AAEzC,UAAM,KAAK,KAAK,YAAY;AAC5B,UAAM,UAA6B;AAAA,MACjC,MAAM;AAAA,MACN,gBAAgB,EAAE,aAAa,MAAM,MAAM,QAAQ,OAAO,EAAE,GAAG,UAAU,aAAa;AAAA,IACxF;AACA,UAAM,OAAO;AAAA,MACX,CAAC,SAAS,iBAAiB,aAAa,WAAW,GAAG;AAAA,MACtD,QAAQ,OAAO,MAAM,OAAO,MAAM;AAAA,MAClC,UAAU,MAAM,OAAO;AAAA,MACvB,CAAC,SAAS,iBAAiB,cAAc,OAAO,GAAG;AAAA,MACnD,iBAAiB,gBAAgB,MAAM,WAAW;AAAA,MAClD,mBAAmB,MAAM;AAAA,MACzB,UAAU;AAAA,QACR,EAAE,CAAC,aAAa,GAAG,MAAM,UAAU;AAAA,QACnC,GAAG,OAAO,QAAQ,MAAM,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE;AAAA,MACtE;AAAA,IACF;AAEA,UAAM,OAAO,SAAS,iBAAiB,gBAAgB;AACvD,UAAM,MAAM,MAAM,KAAK,MAAM,SAAgC,MAAM,MAAM,SAAS,MAAM;AAExF,QAAI,IAAI,WAAW,WAAY,OAAM,cAAc,GAAG;AACtD,QAAI,IAAI,WAAW,qBAAqB;AACtC,YAAM,UAAU,MAAM,KAAK,MAAM;AAAA,QAC/B,GAAG,IAAI,IAAI,EAAE;AAAA,QACb,SAAS;AAAA,MACX;AACA,aAAO,MAAM,KAAK,eAAe,MAAM,SAAS,EAAE,IAAI,OAAO,UAAU,MAAM,CAAC;AAAA,IAChF;AAGA,UAAM,MAAM,IAAI,YAAW,oBAAI,KAAK,GAAE,YAAY;AAClD,UAAM,MAAmB;AAAA,MACvB,UAAU,KAAK;AAAA,MACf;AAAA,MACA,WAAW,MAAM;AAAA,MACjB;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,UAAU;AAAA,MACV,aAAa;AAAA,MACb,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AACA,UAAM,KAAK,OAAO,SAAS,GAAG;AAC9B,WAAO,gBAAgB,GAAG;AAAA,EAC5B;AAAA,EAEA,MAAM,eACJ,MACA,KACA,KAOsB;AACtB,UAAM,SAAS,qBAAqB,IAAI,MAAM;AAC9C,UAAM,SAAS,kBAAkB,IAAI,QAAQ,KAAK,IAAI;AACtD,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AAEnC,UAAM,MAAmB;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,IAAI,IAAI;AAAA,MACR,WAAW,UAAU,IAAI,OAAO,aAAa,IAAI,OAAO,aAAa,IAAI;AAAA,MACzE;AAAA,MACA;AAAA,MACA,QAAQ,IAAI,OAAO,UAAU,IAAI,OAAO,UAAU,aAAa,IAAI,QAAQ,IAAI,QAAQ;AAAA,MACvF,UAAU,IAAI,OAAO,YAAY,IAAI;AAAA,MACrC,UAAU,IAAI,OAAO,YAAY,IAAI;AAAA,MACrC,eAAe,WAAW,WAAW,iBAAiB,IAAI,aAAa,IAAI;AAAA,MAC3E,aAAa;AAAA,MACb,WAAW,IAAI,OAAO,aAAa,IAAI,WAAW;AAAA,MAClD,WAAW;AAAA,IACb;AACA,UAAM,KAAK,OAAO,SAAS,GAAG;AAC9B,WAAO,gBAAgB,GAAG;AAAA,EAC5B;AACF;AAEA,SAAS,gBAAgB,aAAyC;AAChE,QAAM,WAAW,eAAe,WAAW,QAAQ,iBAAiB,EAAE;AACtE,SAAO,QAAQ,UAAU,IAAI,QAAQ,MAAM,GAAG,EAAE,IAAI;AACtD;AAEA,SAAS,kBACP,UACoB;AACpB,aAAW,SAAS,YAAY,CAAC,GAAG;AAClC,UAAM,QAAQ,MAAM,aAAa;AACjC,QAAI,OAAO,UAAU,SAAU,QAAO;AAAA,EACxC;AACA,SAAO;AACT;AAEA,SAAS,aAAa,KAAyB,UAAqC;AAClF,QAAM,SAAS,MAAM,OAAO,SAAS,KAAK,EAAE,IAAI;AAChD,SAAO;AAAA,IACL,QAAQ,OAAO,SAAS,MAAM,IAAI,SAAS;AAAA,IAC3C,UAAU,aAAa,QAAQ,QAAQ;AAAA,EACzC;AACF;","names":["ProviderUnavailableError","ProviderUnavailableError"]}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@momorail/pawapay",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "pawaPay adapter for Momorail (deposits, payouts, callbacks) across Sub-Saharan Africa",
+  "keywords": [
+    "mobile-money",
+    "payments",
+    "west-africa",
+    "africa",
+    "orange-money",
+    "mtn-momo",
+    "wave",
+    "xof",
+    "byo-keys",
+    "typescript",
+    "pawapay",
+    "adapter"
+  ],
+  "license": "MIT",
+  "author": "Boukymen <boukymen@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Boukymen/momorail.git",
+    "directory": "packages/pawapay"
+  },
+  "homepage": "https://github.com/Boukymen/momorail/tree/main/packages/pawapay#readme",
+  "bugs": "https://github.com/Boukymen/momorail/issues",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@momorail/core": "0.1.0"
+  },
+  "devDependencies": {
+    "msw": "^2.7.0",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8",
+    "@momorail/conformance": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}