@momorail/paydunya 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Momorail contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/dist/index.d.ts

@@ -0,0 +1,114 @@
+import { IdempotencyStore, PaymentProvider, ProviderCapabilities, CollectionInput, ProviderCallOptions, Transaction, DisbursementInput, TransactionRef, RawWebhook, WebhookEvent } from '@momorail/core';
+
+type PaydunyaMode = 'live' | 'test';
+interface PaydunyaOptions {
+    /** PAYDUNYA-MASTER-KEY — also the value hashed to verify the IPN. */
+    masterKey: string;
+    /** PAYDUNYA-PRIVATE-KEY. */
+    privateKey: string;
+    /** PAYDUNYA-TOKEN. */
+    token: string;
+    /** Store name PayDunya shows on the hosted invoice. */
+    storeName: string;
+    /** `'live'` (default) or `'test'` — selects the sandbox base URL and PAYDUNYA-MODE. */
+    mode?: PaydunyaMode;
+    /** Fallback IPN URL when a collection doesn't set `callbackUrl`. */
+    callbackUrl?: string;
+    /** Fallback success redirect. */
+    returnUrl?: string;
+    /** Fallback cancel redirect. */
+    cancelUrl?: string;
+    /** Override the API base URL (e.g. a mock in tests). */
+    baseUrl?: string;
+    /** Per-request timeout in ms. Default 15000. */
+    timeoutMs?: number;
+    /** Injectable fetch implementation. Default the global `fetch`. */
+    fetch?: typeof fetch;
+    /** Where the adapter remembers created transactions. Default: in-memory, per process. */
+    idempotencyStore?: IdempotencyStore;
+}
+/**
+ * PayDunya adapter (HTTP/JSON checkout). Implements collection via a hosted
+ * checkout invoice, status via `confirm/{token}`, and IPN verification.
+ * Disbursement uses PayDunya's separate PUSH API and is a later milestone.
+ *
+ * PayDunya can only look a transaction up by its **invoice token**, so the
+ * adapter keeps a per-instance cache from `reference` to the created
+ * `Transaction`, and also stashes the caller's `reference` in the invoice's
+ * `custom_data` so `confirm` and the IPN echo it back even across processes.
+ */
+declare class PaydunyaProvider implements PaymentProvider {
+    #private;
+    readonly id = "paydunya";
+    constructor(options: PaydunyaOptions);
+    capabilities(): ProviderCapabilities;
+    collection(input: CollectionInput, options?: ProviderCallOptions): Promise<Transaction>;
+    disbursement(input: DisbursementInput, options?: ProviderCallOptions): Promise<Transaction>;
+    getTransaction(ref: TransactionRef, options?: ProviderCallOptions): Promise<Transaction>;
+    parseWebhook(raw: RawWebhook): Promise<WebhookEvent>;
+}
+
+/**
+ * Raw PayDunya HTTP/JSON API shapes. Only the fields Momorail reads are modelled;
+ * the untouched payload is always returned on `Transaction.providerRaw`.
+ *
+ * @see https://developers.paydunya.com/doc/EN/http_json
+ */
+/** `POST /checkout-invoice/create` */
+interface PaydunyaCreateResponse {
+    /** `"00"` on success. */
+    response_code: string;
+    /** On success, the checkout URL; on failure, a message (often in French). */
+    response_text: string;
+    description?: string;
+    token?: string;
+    invoice_url?: string;
+}
+interface PaydunyaCustomer {
+    name?: string;
+    phone?: string;
+    email?: string;
+}
+/** `GET /checkout-invoice/confirm/{token}` */
+interface PaydunyaConfirmResponse {
+    response_code: string;
+    response_text?: string;
+    /** `completed` | `pending` | `cancelled` | `failed` (also seen `canceled` / `fail`). */
+    status?: string;
+    invoice?: {
+        token?: string;
+        total_amount?: number | string;
+        description?: string;
+    };
+    customer?: PaydunyaCustomer;
+    custom_data?: Record<string, unknown>;
+    receipt_url?: string;
+}
+/**
+ * IPN body fields, flattened. PayDunya POSTs `application/x-www-form-urlencoded`
+ * with bracketed keys, e.g. `data[invoice][token]`, `data[status]`, `data[hash]`.
+ */
+type PaydunyaIpnFields = Record<string, string | undefined>;
+
+/**
+ * Parse a PayDunya IPN body. PayDunya POSTs `application/x-www-form-urlencoded`
+ * with bracketed keys (`data[invoice][token]`, `data[status]`, `data[hash]`, …).
+ * The keys are kept flat and verbatim.
+ */
+declare function parseIpnBody(body: string | Uint8Array | Record<string, unknown>): PaydunyaIpnFields;
+/** PayDunya's IPN hash is `sha512(masterKey)` — a static digest of your Master Key. */
+declare function paydunyaIpnHash(masterKey: string): string;
+/** Read a bracketed IPN field regardless of surrounding whitespace. */
+declare function ipnField(fields: PaydunyaIpnFields, key: string): string | undefined;
+/**
+ * Verify a PayDunya IPN. Returns the parsed fields on success; throws
+ * {@link WebhookVerificationError} when `data[hash]` is missing or does not equal
+ * `sha512(masterKey)`.
+ *
+ * NOTE: this proves the notification came from an actor holding your Master Key —
+ * it does not sign the payload. Momorail therefore re-queries the invoice for the
+ * authoritative status rather than trusting `data[status]`.
+ */
+declare function verifyPaydunyaIpn(body: string | Uint8Array | Record<string, unknown>, masterKey: string): PaydunyaIpnFields;
+
+export { type PaydunyaConfirmResponse, type PaydunyaCreateResponse, type PaydunyaIpnFields, type PaydunyaMode, type PaydunyaOptions, PaydunyaProvider, ipnField, parseIpnBody, paydunyaIpnHash, verifyPaydunyaIpn };

package/dist/index.js

@@ -0,0 +1,483 @@
+// src/provider.ts
+import {
+  IdempotencyCache,
+  MemoryIdempotencyStore,
+  ValidationError,
+  isOperator,
+  webhookEventTypeForStatus
+} from "@momorail/core";
+
+// src/http.ts
+import { ProviderUnavailableError, RateLimitError } from "@momorail/core";
+
+// src/mapping.ts
+import {
+  AuthError,
+  MomorailError,
+  TransactionNotFoundError
+} from "@momorail/core";
+var PROVIDER_ID = "paydunya";
+var OK = "00";
+var AUTH_HINT = /cl[eé]s?|api[\s-]?key|authenticat|non autoris|unauthor/i;
+var NOT_FOUND_HINT = /introuvable|invalide|not[\s_]*found|no such|inexistant/i;
+function mapConfirmStatus(res) {
+  switch (res.status?.toLowerCase()) {
+    case "completed":
+      return "succeeded";
+    case "pending":
+      return "processing";
+    case "cancelled":
+    case "canceled":
+      return "cancelled";
+    case "failed":
+    case "fail":
+      return "failed";
+    default:
+      return res.response_code === OK ? "processing" : "unknown";
+  }
+}
+function mapDisburseStatus(status, responseCode) {
+  switch (status?.toLowerCase()) {
+    case "completed":
+    case "success":
+    case "successful":
+      return "succeeded";
+    case "pending":
+    case "processing":
+    case "sent":
+      return "processing";
+    case "failed":
+    case "cancelled":
+    case "rejected":
+      return "failed";
+    default:
+      return responseCode === OK ? "processing" : "unknown";
+  }
+}
+function mapFailureReason(res) {
+  const text = `${res.response_text ?? ""}`.toLowerCase();
+  if (/solde|insufficient|fund/.test(text)) return "insufficient_funds";
+  if (/annul|cancel/.test(text)) return "user_declined";
+  if (/expir/.test(text)) return "timeout";
+  return "other";
+}
+function paydunyaError(responseCode, message, providerRaw) {
+  const opts = { provider: PROVIDER_ID, providerRaw };
+  if (AUTH_HINT.test(message)) {
+    return new AuthError(`PayDunya rejected the credentials (${responseCode}: ${message})`, opts);
+  }
+  if (NOT_FOUND_HINT.test(message)) {
+    return new TransactionNotFoundError(
+      `PayDunya has no such invoice (${responseCode}: ${message})`,
+      opts
+    );
+  }
+  return new MomorailError(`PayDunya error (${responseCode}: ${message})`, "provider_error", opts);
+}
+function isOk(responseCode) {
+  return responseCode === OK;
+}
+
+// src/http.ts
+var HttpClient = class {
+  #baseUrl;
+  #timeoutMs;
+  #fetch;
+  #authHeaders;
+  constructor(options) {
+    this.#baseUrl = options.baseUrl.replace(/\/$/, "");
+    this.#timeoutMs = options.timeoutMs;
+    this.#fetch = options.fetch;
+    this.#authHeaders = options.authHeaders;
+  }
+  postJson(path, body, signal) {
+    return this.#request("POST", path, body, signal);
+  }
+  getJson(path, signal) {
+    return this.#request("GET", path, void 0, signal);
+  }
+  async #request(method, path, body, signal) {
+    const timeout = AbortSignal.timeout(this.#timeoutMs);
+    const composite = signal ? AbortSignal.any([signal, timeout]) : timeout;
+    const headers = { accept: "application/json", ...this.#authHeaders };
+    if (method === "POST") headers["content-type"] = "application/json";
+    let response;
+    try {
+      response = await this.#fetch(`${this.#baseUrl}${path}`, {
+        method,
+        headers,
+        body: method === "POST" ? JSON.stringify(body) : void 0,
+        signal: composite
+      });
+    } catch (cause) {
+      if (signal?.aborted) throw cause;
+      throw new ProviderUnavailableError("PayDunya request failed to complete", {
+        provider: PROVIDER_ID,
+        cause
+      });
+    }
+    if (response.status === 429) {
+      throw new RateLimitError("PayDunya throttled the request", { provider: PROVIDER_ID });
+    }
+    const raw = await response.text();
+    let parsed;
+    try {
+      parsed = raw ? JSON.parse(raw) : {};
+    } catch (cause) {
+      throw new ProviderUnavailableError("PayDunya returned a non-JSON response", {
+        provider: PROVIDER_ID,
+        providerRaw: raw,
+        cause
+      });
+    }
+    if (response.status >= 500) {
+      throw new ProviderUnavailableError(`PayDunya responded ${response.status}`, {
+        provider: PROVIDER_ID,
+        providerRaw: parsed
+      });
+    }
+    return parsed;
+  }
+};
+
+// src/webhook.ts
+import { createHash, timingSafeEqual } from "crypto";
+import { WebhookVerificationError } from "@momorail/core";
+function parseIpnBody(body) {
+  if (typeof body === "string" || body instanceof Uint8Array) {
+    const raw = typeof body === "string" ? body : new TextDecoder().decode(body);
+    return Object.fromEntries(new URLSearchParams(raw).entries());
+  }
+  const out = {};
+  for (const [key, value] of Object.entries(body)) {
+    if (value != null) out[key] = String(value);
+  }
+  return out;
+}
+function paydunyaIpnHash(masterKey) {
+  return createHash("sha512").update(masterKey, "utf8").digest("hex");
+}
+function safeEqualHex(a, b) {
+  if (a.length !== b.length || a.length === 0) return false;
+  try {
+    return timingSafeEqual(Buffer.from(a, "hex"), Buffer.from(b, "hex"));
+  } catch {
+    return false;
+  }
+}
+function ipnField(fields, key) {
+  return fields[key] ?? fields[key.replace(/\s+/g, "")];
+}
+function verifyPaydunyaIpn(body, masterKey) {
+  const fields = parseIpnBody(body);
+  const received = ipnField(fields, "data[hash]");
+  if (!received) {
+    throw new WebhookVerificationError("PayDunya IPN is missing data[hash]", {
+      provider: PROVIDER_ID
+    });
+  }
+  if (!safeEqualHex(received.toLowerCase(), paydunyaIpnHash(masterKey))) {
+    throw new WebhookVerificationError("PayDunya IPN hash does not match the Master Key", {
+      provider: PROVIDER_ID
+    });
+  }
+  return fields;
+}
+
+// src/provider.ts
+var BASE_URL = {
+  live: "https://app.paydunya.com/api/v1",
+  test: "https://app.paydunya.com/sandbox-api/v1"
+};
+var DEFAULT_TIMEOUT_MS = 15e3;
+var REFERENCE_KEY = "momorail_reference";
+var CALLING_CODES = [
+  "221",
+  "225",
+  "223",
+  "226",
+  "229",
+  "228",
+  "227",
+  "237",
+  "242",
+  "243",
+  "235",
+  "241",
+  "245"
+];
+var WITHDRAW_MODE = {
+  orange_sn: "orange-money-senegal",
+  free_sn: "free-money-senegal",
+  wave_sn: "wave-senegal",
+  expresso_sn: "expresso-senegal",
+  orange_ci: "orange-money-ci",
+  mtn_ci: "mtn-ci",
+  moov_ci: "moov-ci",
+  wave_ci: "wave-ci",
+  orange_ml: "orange-money-mali",
+  moov_ml: "moov-mali",
+  orange_bf: "orange-money-burkina",
+  moov_bf: "moov-burkina",
+  mtn_bj: "mtn-benin",
+  moov_bj: "moov-benin"
+};
+var CAPABILITIES = {
+  collection: true,
+  disbursement: true,
+  // PayDunya confirms an invoice by its token only — there is no lookup by our reference.
+  lookupByReference: false,
+  hostedCheckout: true,
+  operators: [
+    "orange_sn",
+    "free_sn",
+    "wave_sn",
+    "expresso_sn",
+    "orange_ci",
+    "mtn_ci",
+    "moov_ci",
+    "wave_ci",
+    "orange_ml",
+    "moov_ml",
+    "orange_bf",
+    "moov_bf",
+    "mtn_bj",
+    "moov_bj"
+  ],
+  currencies: ["XOF"]
+};
+var PaydunyaProvider = class {
+  id = PROVIDER_ID;
+  #masterKey;
+  #storeName;
+  #callbackUrl;
+  #returnUrl;
+  #cancelUrl;
+  #http;
+  #cache;
+  constructor(options) {
+    for (const key of ["masterKey", "privateKey", "token", "storeName"]) {
+      if (!options[key]?.trim()) {
+        throw new ValidationError(`PaydunyaProvider requires a non-empty "${key}"`);
+      }
+    }
+    const mode = options.mode ?? "live";
+    this.#masterKey = options.masterKey;
+    this.#storeName = options.storeName;
+    this.#callbackUrl = options.callbackUrl;
+    this.#returnUrl = options.returnUrl;
+    this.#cancelUrl = options.cancelUrl;
+    this.#cache = new IdempotencyCache(
+      options.idempotencyStore ?? new MemoryIdempotencyStore(),
+      this.id
+    );
+    this.#http = new HttpClient({
+      baseUrl: options.baseUrl ?? BASE_URL[mode],
+      timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,
+      fetch: options.fetch ?? globalThis.fetch,
+      authHeaders: {
+        "PAYDUNYA-MASTER-KEY": options.masterKey,
+        "PAYDUNYA-PRIVATE-KEY": options.privateKey,
+        "PAYDUNYA-TOKEN": options.token,
+        "PAYDUNYA-MODE": mode
+      }
+    });
+  }
+  capabilities() {
+    return CAPABILITIES;
+  }
+  async collection(input, options) {
+    if (input.customer.operator !== void 0 && !isOperator(input.customer.operator)) {
+      throw new ValidationError(`Unknown operator: ${input.customer.operator}`, {
+        provider: this.id
+      });
+    }
+    const cached = await this.#cache.byReference(input.reference);
+    if (cached) return structuredClone(cached);
+    const callbackUrl = input.callbackUrl ?? this.#callbackUrl;
+    if (!callbackUrl) {
+      throw new ValidationError(
+        "PayDunya needs an IPN URL: pass collection input.callbackUrl or set PaydunyaOptions.callbackUrl",
+        { provider: this.id }
+      );
+    }
+    const body = {
+      invoice: {
+        total_amount: input.amount.amount,
+        description: input.description ?? `Payment ${input.reference}`
+      },
+      store: { name: this.#storeName },
+      actions: pruneUndefined({
+        callback_url: callbackUrl,
+        return_url: input.returnUrl ?? this.#returnUrl,
+        cancel_url: input.cancelUrl ?? this.#cancelUrl
+      }),
+      custom_data: { [REFERENCE_KEY]: input.reference, ...input.metadata }
+    };
+    const res = await this.#http.postJson(
+      "/checkout-invoice/create",
+      body,
+      options?.signal
+    );
+    if (!isOk(res.response_code) || !res.token) {
+      throw paydunyaError(res.response_code, res.response_text, res);
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const txn = {
+      provider: this.id,
+      id: res.token,
+      reference: input.reference,
+      type: "collection",
+      status: "pending",
+      amount: input.amount,
+      operator: input.customer.operator,
+      customer: input.customer,
+      checkoutUrl: res.invoice_url ?? (isUrl(res.response_text) ? res.response_text : void 0),
+      providerRaw: res,
+      createdAt: now,
+      updatedAt: now
+    };
+    await this.#cache.remember(txn);
+    return structuredClone(txn);
+  }
+  async disbursement(input, options) {
+    const operator = input.recipient.operator;
+    if (!operator || !isOperator(operator)) {
+      throw new ValidationError("PayDunya disbursement needs recipient.operator", {
+        provider: this.id
+      });
+    }
+    const mode = WITHDRAW_MODE[operator];
+    if (!mode) {
+      throw new ValidationError(`PayDunya has no withdraw mode for operator "${operator}"`, {
+        provider: this.id
+      });
+    }
+    const cached = await this.#cache.byReference(input.reference);
+    if (cached) return structuredClone(cached);
+    const alias = localNumber(input.recipient.phone);
+    const get = await this.#http.postJson(
+      "/disburse/get-invoice",
+      { account_alias: alias, amount: input.amount.amount, withdraw_mode: mode },
+      options?.signal
+    );
+    if (!isOk(get.response_code) || !get.disburse_token) {
+      throw paydunyaError(get.response_code, get.response_text ?? "get-invoice failed", get);
+    }
+    const submit = await this.#http.postJson(
+      "/disburse/submit-invoice",
+      { disburse_invoice: get.disburse_token, disburse_id: input.reference },
+      options?.signal
+    );
+    const desc = typeof submit.description === "object" ? submit.description : void 0;
+    const status = mapDisburseStatus(desc?.status, submit.response_code);
+    if (status === "unknown") {
+      throw paydunyaError(
+        submit.response_code,
+        submit.response_text ?? "submit-invoice failed",
+        submit
+      );
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const txn = {
+      provider: this.id,
+      id: desc?.provider_ref ?? input.reference,
+      reference: input.reference,
+      type: "disbursement",
+      status,
+      amount: input.amount,
+      operator,
+      customer: input.recipient,
+      failureReason: status === "failed" ? "other" : void 0,
+      providerRaw: { get, submit },
+      createdAt: now,
+      updatedAt: now
+    };
+    await this.#cache.remember(txn);
+    return structuredClone(txn);
+  }
+  async getTransaction(ref, options) {
+    const known = (ref.id ? await this.#cache.byId(ref.id) : void 0) ?? (ref.reference ? await this.#cache.byReference(ref.reference) : void 0);
+    if (known?.type === "disbursement") {
+      return structuredClone(known);
+    }
+    const token = ref.id ?? known?.id;
+    if (!token) {
+      throw new ValidationError(
+        "PayDunya looks a transaction up by its invoice token (the provider id); this reference is not known to this instance",
+        { provider: this.id }
+      );
+    }
+    const res = await this.#http.getJson(
+      `/checkout-invoice/confirm/${encodeURIComponent(token)}`,
+      options?.signal
+    );
+    const status = mapConfirmStatus(res);
+    if (!isOk(res.response_code) && status === "unknown") {
+      throw paydunyaError(res.response_code, res.response_text ?? "unknown invoice", res);
+    }
+    const echoed = res.custom_data?.[REFERENCE_KEY];
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    const txn = {
+      provider: this.id,
+      id: token,
+      reference: (typeof echoed === "string" ? echoed : void 0) ?? known?.reference ?? ref.reference ?? token,
+      type: "collection",
+      status,
+      amount: known?.amount ?? coerceAmount(res.invoice?.total_amount),
+      operator: known?.operator,
+      customer: known?.customer,
+      checkoutUrl: known?.checkoutUrl,
+      failureReason: status === "failed" ? mapFailureReason(res) : void 0,
+      providerRaw: res,
+      createdAt: known?.createdAt ?? now,
+      updatedAt: now
+    };
+    await this.#cache.remember(txn);
+    return structuredClone(txn);
+  }
+  async parseWebhook(raw) {
+    const fields = verifyPaydunyaIpn(raw.body, this.#masterKey);
+    const token = ipnField(fields, "data[invoice][token]");
+    if (!token) {
+      throw new ValidationError("PayDunya IPN is missing data[invoice][token]", {
+        provider: this.id
+      });
+    }
+    const transaction = await this.getTransaction({ id: token });
+    return {
+      type: webhookEventTypeForStatus(transaction.status),
+      transaction,
+      providerRaw: fields
+    };
+  }
+};
+function isUrl(value) {
+  return typeof value === "string" && /^https?:\/\//i.test(value);
+}
+function localNumber(phone) {
+  const digits = phone.replace(/[^\d]/g, "");
+  for (const code of CALLING_CODES) {
+    if (digits.startsWith(code)) return digits.slice(code.length);
+  }
+  return digits;
+}
+function coerceAmount(raw) {
+  const amount = typeof raw === "string" ? Number.parseInt(raw, 10) : raw ?? 0;
+  return { amount: Number.isFinite(amount) ? Math.trunc(amount) : 0, currency: "XOF" };
+}
+function pruneUndefined(obj) {
+  const out = {};
+  for (const [key, value] of Object.entries(obj)) {
+    if (value !== void 0) out[key] = value;
+  }
+  return out;
+}
+export {
+  PaydunyaProvider,
+  ipnField,
+  parseIpnBody,
+  paydunyaIpnHash,
+  verifyPaydunyaIpn
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.ts","../src/http.ts","../src/mapping.ts","../src/webhook.ts"],"sourcesContent":["import {\n  type CollectionInput,\n  type DisbursementInput,\n  IdempotencyCache,\n  type IdempotencyStore,\n  MemoryIdempotencyStore,\n  MomorailError,\n  type Money,\n  type Operator,\n  type PaymentProvider,\n  type ProviderCallOptions,\n  type ProviderCapabilities,\n  type RawWebhook,\n  type Transaction,\n  type TransactionRef,\n  ValidationError,\n  type WebhookEvent,\n  isOperator,\n  webhookEventTypeForStatus,\n} from '@momorail/core';\nimport { HttpClient } from './http.js';\nimport {\n  PROVIDER_ID,\n  isOk,\n  mapConfirmStatus,\n  mapDisburseStatus,\n  mapFailureReason,\n  paydunyaError,\n} from './mapping.js';\nimport type {\n  PaydunyaConfirmResponse,\n  PaydunyaCreateResponse,\n  PaydunyaDisburseGetResponse,\n  PaydunyaDisburseSubmitResponse,\n} from './types.js';\nimport { ipnField, verifyPaydunyaIpn } from './webhook.js';\n\nconst BASE_URL: Record<PaydunyaMode, string> = {\n  live: 'https://app.paydunya.com/api/v1',\n  test: 'https://app.paydunya.com/sandbox-api/v1',\n};\nconst DEFAULT_TIMEOUT_MS = 15_000;\nconst REFERENCE_KEY = 'momorail_reference';\n\n/** West/Central African calling codes, longest first, for stripping an E.164 number. */\nconst CALLING_CODES = [\n  '221',\n  '225',\n  '223',\n  '226',\n  '229',\n  '228',\n  '227',\n  '237',\n  '242',\n  '243',\n  '235',\n  '241',\n  '245',\n];\n\n/** Momorail operator → PayDunya `withdraw_mode`. */\nconst WITHDRAW_MODE: Partial<Record<Operator, string>> = {\n  orange_sn: 'orange-money-senegal',\n  free_sn: 'free-money-senegal',\n  wave_sn: 'wave-senegal',\n  expresso_sn: 'expresso-senegal',\n  orange_ci: 'orange-money-ci',\n  mtn_ci: 'mtn-ci',\n  moov_ci: 'moov-ci',\n  wave_ci: 'wave-ci',\n  orange_ml: 'orange-money-mali',\n  moov_ml: 'moov-mali',\n  orange_bf: 'orange-money-burkina',\n  moov_bf: 'moov-burkina',\n  mtn_bj: 'mtn-benin',\n  moov_bj: 'moov-benin',\n};\n\nexport type PaydunyaMode = 'live' | 'test';\n\nexport interface PaydunyaOptions {\n  /** PAYDUNYA-MASTER-KEY — also the value hashed to verify the IPN. */\n  masterKey: string;\n  /** PAYDUNYA-PRIVATE-KEY. */\n  privateKey: string;\n  /** PAYDUNYA-TOKEN. */\n  token: string;\n  /** Store name PayDunya shows on the hosted invoice. */\n  storeName: string;\n  /** `'live'` (default) or `'test'` — selects the sandbox base URL and PAYDUNYA-MODE. */\n  mode?: PaydunyaMode;\n  /** Fallback IPN URL when a collection doesn't set `callbackUrl`. */\n  callbackUrl?: string;\n  /** Fallback success redirect. */\n  returnUrl?: string;\n  /** Fallback cancel redirect. */\n  cancelUrl?: string;\n  /** Override the API base URL (e.g. a mock in tests). */\n  baseUrl?: string;\n  /** Per-request timeout in ms. Default 15000. */\n  timeoutMs?: number;\n  /** Injectable fetch implementation. Default the global `fetch`. */\n  fetch?: typeof fetch;\n  /** Where the adapter remembers created transactions. Default: in-memory, per process. */\n  idempotencyStore?: IdempotencyStore;\n}\n\nconst CAPABILITIES: ProviderCapabilities = {\n  collection: true,\n  disbursement: true,\n  // PayDunya confirms an invoice by its token only — there is no lookup by our reference.\n  lookupByReference: false,\n  hostedCheckout: true,\n  operators: [\n    'orange_sn',\n    'free_sn',\n    'wave_sn',\n    'expresso_sn',\n    'orange_ci',\n    'mtn_ci',\n    'moov_ci',\n    'wave_ci',\n    'orange_ml',\n    'moov_ml',\n    'orange_bf',\n    'moov_bf',\n    'mtn_bj',\n    'moov_bj',\n  ],\n  currencies: ['XOF'],\n};\n\n/**\n * PayDunya adapter (HTTP/JSON checkout). Implements collection via a hosted\n * checkout invoice, status via `confirm/{token}`, and IPN verification.\n * Disbursement uses PayDunya's separate PUSH API and is a later milestone.\n *\n * PayDunya can only look a transaction up by its **invoice token**, so the\n * adapter keeps a per-instance cache from `reference` to the created\n * `Transaction`, and also stashes the caller's `reference` in the invoice's\n * `custom_data` so `confirm` and the IPN echo it back even across processes.\n */\nexport class PaydunyaProvider implements PaymentProvider {\n  readonly id = PROVIDER_ID;\n\n  readonly #masterKey: string;\n  readonly #storeName: string;\n  readonly #callbackUrl: string | undefined;\n  readonly #returnUrl: string | undefined;\n  readonly #cancelUrl: string | undefined;\n  readonly #http: HttpClient;\n  readonly #cache: IdempotencyCache;\n\n  constructor(options: PaydunyaOptions) {\n    for (const key of ['masterKey', 'privateKey', 'token', 'storeName'] as const) {\n      if (!options[key]?.trim()) {\n        throw new ValidationError(`PaydunyaProvider requires a non-empty \"${key}\"`);\n      }\n    }\n    const mode: PaydunyaMode = options.mode ?? 'live';\n    this.#masterKey = options.masterKey;\n    this.#storeName = options.storeName;\n    this.#callbackUrl = options.callbackUrl;\n    this.#returnUrl = options.returnUrl;\n    this.#cancelUrl = options.cancelUrl;\n    this.#cache = new IdempotencyCache(\n      options.idempotencyStore ?? new MemoryIdempotencyStore(),\n      this.id,\n    );\n    this.#http = new HttpClient({\n      baseUrl: options.baseUrl ?? BASE_URL[mode],\n      timeoutMs: options.timeoutMs ?? DEFAULT_TIMEOUT_MS,\n      fetch: options.fetch ?? globalThis.fetch,\n      authHeaders: {\n        'PAYDUNYA-MASTER-KEY': options.masterKey,\n        'PAYDUNYA-PRIVATE-KEY': options.privateKey,\n        'PAYDUNYA-TOKEN': options.token,\n        'PAYDUNYA-MODE': mode,\n      },\n    });\n  }\n\n  capabilities(): ProviderCapabilities {\n    return CAPABILITIES;\n  }\n\n  async collection(input: CollectionInput, options?: ProviderCallOptions): Promise<Transaction> {\n    if (input.customer.operator !== undefined && !isOperator(input.customer.operator)) {\n      throw new ValidationError(`Unknown operator: ${input.customer.operator}`, {\n        provider: this.id,\n      });\n    }\n\n    const cached = await this.#cache.byReference(input.reference);\n    if (cached) return structuredClone(cached);\n\n    const callbackUrl = input.callbackUrl ?? this.#callbackUrl;\n    if (!callbackUrl) {\n      throw new ValidationError(\n        'PayDunya needs an IPN URL: pass collection input.callbackUrl or set PaydunyaOptions.callbackUrl',\n        { provider: this.id },\n      );\n    }\n\n    const body = {\n      invoice: {\n        total_amount: input.amount.amount,\n        description: input.description ?? `Payment ${input.reference}`,\n      },\n      store: { name: this.#storeName },\n      actions: pruneUndefined({\n        callback_url: callbackUrl,\n        return_url: input.returnUrl ?? this.#returnUrl,\n        cancel_url: input.cancelUrl ?? this.#cancelUrl,\n      }),\n      custom_data: { [REFERENCE_KEY]: input.reference, ...input.metadata },\n    };\n\n    const res = await this.#http.postJson<PaydunyaCreateResponse>(\n      '/checkout-invoice/create',\n      body,\n      options?.signal,\n    );\n    if (!isOk(res.response_code) || !res.token) {\n      throw paydunyaError(res.response_code, res.response_text, res);\n    }\n\n    const now = new Date().toISOString();\n    const txn: Transaction = {\n      provider: this.id,\n      id: res.token,\n      reference: input.reference,\n      type: 'collection',\n      status: 'pending',\n      amount: input.amount,\n      operator: input.customer.operator,\n      customer: input.customer,\n      checkoutUrl: res.invoice_url ?? (isUrl(res.response_text) ? res.response_text : undefined),\n      providerRaw: res,\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    await this.#cache.remember(txn);\n    return structuredClone(txn);\n  }\n\n  async disbursement(\n    input: DisbursementInput,\n    options?: ProviderCallOptions,\n  ): Promise<Transaction> {\n    const operator = input.recipient.operator;\n    if (!operator || !isOperator(operator)) {\n      throw new ValidationError('PayDunya disbursement needs recipient.operator', {\n        provider: this.id,\n      });\n    }\n    const mode = WITHDRAW_MODE[operator];\n    if (!mode) {\n      throw new ValidationError(`PayDunya has no withdraw mode for operator \"${operator}\"`, {\n        provider: this.id,\n      });\n    }\n\n    const cached = await this.#cache.byReference(input.reference);\n    if (cached) return structuredClone(cached);\n\n    const alias = localNumber(input.recipient.phone);\n    const get = await this.#http.postJson<PaydunyaDisburseGetResponse>(\n      '/disburse/get-invoice',\n      { account_alias: alias, amount: input.amount.amount, withdraw_mode: mode },\n      options?.signal,\n    );\n    if (!isOk(get.response_code) || !get.disburse_token) {\n      throw paydunyaError(get.response_code, get.response_text ?? 'get-invoice failed', get);\n    }\n\n    const submit = await this.#http.postJson<PaydunyaDisburseSubmitResponse>(\n      '/disburse/submit-invoice',\n      { disburse_invoice: get.disburse_token, disburse_id: input.reference },\n      options?.signal,\n    );\n    const desc = typeof submit.description === 'object' ? submit.description : undefined;\n    const status = mapDisburseStatus(desc?.status, submit.response_code);\n    if (status === 'unknown') {\n      throw paydunyaError(\n        submit.response_code,\n        submit.response_text ?? 'submit-invoice failed',\n        submit,\n      );\n    }\n\n    const now = new Date().toISOString();\n    const txn: Transaction = {\n      provider: this.id,\n      id: desc?.provider_ref ?? input.reference,\n      reference: input.reference,\n      type: 'disbursement',\n      status,\n      amount: input.amount,\n      operator,\n      customer: input.recipient,\n      failureReason: status === 'failed' ? 'other' : undefined,\n      providerRaw: { get, submit },\n      createdAt: now,\n      updatedAt: now,\n    };\n\n    await this.#cache.remember(txn);\n    return structuredClone(txn);\n  }\n\n  async getTransaction(ref: TransactionRef, options?: ProviderCallOptions): Promise<Transaction> {\n    const known =\n      (ref.id ? await this.#cache.byId(ref.id) : undefined) ??\n      (ref.reference ? await this.#cache.byReference(ref.reference) : undefined);\n\n    if (known?.type === 'disbursement') {\n      // PayDunya exposes no public disburse status endpoint; the submit response\n      // is the last authoritative state. Callers poll it via reconcile().\n      return structuredClone(known);\n    }\n\n    const token = ref.id ?? known?.id;\n    if (!token) {\n      throw new ValidationError(\n        'PayDunya looks a transaction up by its invoice token (the provider id); this reference is not known to this instance',\n        { provider: this.id },\n      );\n    }\n\n    const res = await this.#http.getJson<PaydunyaConfirmResponse>(\n      `/checkout-invoice/confirm/${encodeURIComponent(token)}`,\n      options?.signal,\n    );\n\n    const status = mapConfirmStatus(res);\n    if (!isOk(res.response_code) && status === 'unknown') {\n      throw paydunyaError(res.response_code, res.response_text ?? 'unknown invoice', res);\n    }\n\n    const echoed = res.custom_data?.[REFERENCE_KEY];\n    const now = new Date().toISOString();\n    const txn: Transaction = {\n      provider: this.id,\n      id: token,\n      reference:\n        (typeof echoed === 'string' ? echoed : undefined) ??\n        known?.reference ??\n        ref.reference ??\n        token,\n      type: 'collection',\n      status,\n      amount: known?.amount ?? coerceAmount(res.invoice?.total_amount),\n      operator: known?.operator,\n      customer: known?.customer,\n      checkoutUrl: known?.checkoutUrl,\n      failureReason: status === 'failed' ? mapFailureReason(res) : undefined,\n      providerRaw: res,\n      createdAt: known?.createdAt ?? now,\n      updatedAt: now,\n    };\n\n    await this.#cache.remember(txn);\n    return structuredClone(txn);\n  }\n\n  async parseWebhook(raw: RawWebhook): Promise<WebhookEvent> {\n    const fields = verifyPaydunyaIpn(raw.body, this.#masterKey);\n    const token = ipnField(fields, 'data[invoice][token]');\n    if (!token) {\n      throw new ValidationError('PayDunya IPN is missing data[invoice][token]', {\n        provider: this.id,\n      });\n    }\n\n    const transaction = await this.getTransaction({ id: token });\n    return {\n      type: webhookEventTypeForStatus(transaction.status),\n      transaction,\n      providerRaw: fields,\n    };\n  }\n}\n\nfunction isUrl(value: string | undefined): value is string {\n  return typeof value === 'string' && /^https?:\\/\\//i.test(value);\n}\n\n/** Strip a leading `+` and a known country calling code from an E.164 number. */\nfunction localNumber(phone: string): string {\n  const digits = phone.replace(/[^\\d]/g, '');\n  for (const code of CALLING_CODES) {\n    if (digits.startsWith(code)) return digits.slice(code.length);\n  }\n  return digits;\n}\n\nfunction coerceAmount(raw: number | string | undefined): Money {\n  const amount = typeof raw === 'string' ? Number.parseInt(raw, 10) : (raw ?? 0);\n  return { amount: Number.isFinite(amount) ? Math.trunc(amount) : 0, currency: 'XOF' };\n}\n\nfunction pruneUndefined<T extends Record<string, unknown>>(obj: T): { [K in keyof T]: T[K] } {\n  const out = {} as { [K in keyof T]: T[K] };\n  for (const [key, value] of Object.entries(obj)) {\n    if (value !== undefined) out[key as keyof T] = value as T[keyof T];\n  }\n  return out;\n}\n","import { ProviderUnavailableError, RateLimitError } from '@momorail/core';\nimport { PROVIDER_ID } from './mapping.js';\n\nexport type FetchLike = typeof fetch;\n\nexport interface HttpClientOptions {\n  baseUrl: string;\n  timeoutMs: number;\n  fetch: FetchLike;\n  /** Sent on every request: PAYDUNYA-MASTER-KEY / -PRIVATE-KEY / -TOKEN, and PAYDUNYA-MODE. */\n  authHeaders: Record<string, string>;\n}\n\n/**\n * Minimal JSON helper for PayDunya's HTTP/JSON API: attaches the PAYDUNYA-* auth\n * headers, merges abort signals, enforces a timeout, and maps transport-level\n * failures onto `MomorailError`s.\n */\nexport class HttpClient {\n  readonly #baseUrl: string;\n  readonly #timeoutMs: number;\n  readonly #fetch: FetchLike;\n  readonly #authHeaders: Record<string, string>;\n\n  constructor(options: HttpClientOptions) {\n    this.#baseUrl = options.baseUrl.replace(/\\/$/, '');\n    this.#timeoutMs = options.timeoutMs;\n    this.#fetch = options.fetch;\n    this.#authHeaders = options.authHeaders;\n  }\n\n  postJson<T>(path: string, body: unknown, signal?: AbortSignal): Promise<T> {\n    return this.#request<T>('POST', path, body, signal);\n  }\n\n  getJson<T>(path: string, signal?: AbortSignal): Promise<T> {\n    return this.#request<T>('GET', path, undefined, signal);\n  }\n\n  async #request<T>(\n    method: 'GET' | 'POST',\n    path: string,\n    body: unknown,\n    signal?: AbortSignal,\n  ): Promise<T> {\n    const timeout = AbortSignal.timeout(this.#timeoutMs);\n    const composite = signal ? AbortSignal.any([signal, timeout]) : timeout;\n\n    const headers: Record<string, string> = { accept: 'application/json', ...this.#authHeaders };\n    if (method === 'POST') headers['content-type'] = 'application/json';\n\n    let response: Response;\n    try {\n      response = await this.#fetch(`${this.#baseUrl}${path}`, {\n        method,\n        headers,\n        body: method === 'POST' ? JSON.stringify(body) : undefined,\n        signal: composite,\n      });\n    } catch (cause) {\n      if (signal?.aborted) throw cause;\n      throw new ProviderUnavailableError('PayDunya request failed to complete', {\n        provider: PROVIDER_ID,\n        cause,\n      });\n    }\n\n    if (response.status === 429) {\n      throw new RateLimitError('PayDunya throttled the request', { provider: PROVIDER_ID });\n    }\n\n    const raw = await response.text();\n    let parsed: unknown;\n    try {\n      parsed = raw ? JSON.parse(raw) : {};\n    } catch (cause) {\n      throw new ProviderUnavailableError('PayDunya returned a non-JSON response', {\n        provider: PROVIDER_ID,\n        providerRaw: raw,\n        cause,\n      });\n    }\n\n    if (response.status >= 500) {\n      throw new ProviderUnavailableError(`PayDunya responded ${response.status}`, {\n        provider: PROVIDER_ID,\n        providerRaw: parsed,\n      });\n    }\n\n    return parsed as T;\n  }\n}\n","import {\n  AuthError,\n  type FailureReason,\n  MomorailError,\n  TransactionNotFoundError,\n  type TransactionStatus,\n} from '@momorail/core';\nimport type { PaydunyaConfirmResponse } from './types.js';\n\nexport const PROVIDER_ID = 'paydunya';\n\nconst OK = '00';\nconst AUTH_HINT = /cl[eé]s?|api[\\s-]?key|authenticat|non autoris|unauthor/i;\nconst NOT_FOUND_HINT = /introuvable|invalide|not[\\s_]*found|no such|inexistant/i;\n\n/** Map a PayDunya `status` string onto a Momorail status. */\nexport function mapConfirmStatus(res: PaydunyaConfirmResponse): TransactionStatus {\n  switch (res.status?.toLowerCase()) {\n    case 'completed':\n      return 'succeeded';\n    case 'pending':\n      return 'processing';\n    case 'cancelled':\n    case 'canceled':\n      return 'cancelled';\n    case 'failed':\n    case 'fail':\n      return 'failed';\n    default:\n      return res.response_code === OK ? 'processing' : 'unknown';\n  }\n}\n\n/** Map a PayDunya disburse status onto a Momorail status. */\nexport function mapDisburseStatus(\n  status: string | undefined,\n  responseCode: string,\n): TransactionStatus {\n  switch (status?.toLowerCase()) {\n    case 'completed':\n    case 'success':\n    case 'successful':\n      return 'succeeded';\n    case 'pending':\n    case 'processing':\n    case 'sent':\n      return 'processing';\n    case 'failed':\n    case 'cancelled':\n    case 'rejected':\n      return 'failed';\n    default:\n      return responseCode === OK ? 'processing' : 'unknown';\n  }\n}\n\nexport function mapFailureReason(res: PaydunyaConfirmResponse): FailureReason {\n  const text = `${res.response_text ?? ''}`.toLowerCase();\n  if (/solde|insufficient|fund/.test(text)) return 'insufficient_funds';\n  if (/annul|cancel/.test(text)) return 'user_declined';\n  if (/expir/.test(text)) return 'timeout';\n  return 'other';\n}\n\n/**\n * PayDunya usually returns HTTP 200 with `response_code !== \"00\"` and a message\n * in `response_text`. Translate that (or an HTTP status) into a `MomorailError`.\n */\nexport function paydunyaError(\n  responseCode: string,\n  message: string,\n  providerRaw: unknown,\n): MomorailError {\n  const opts = { provider: PROVIDER_ID, providerRaw } as const;\n\n  if (AUTH_HINT.test(message)) {\n    return new AuthError(`PayDunya rejected the credentials (${responseCode}: ${message})`, opts);\n  }\n  if (NOT_FOUND_HINT.test(message)) {\n    return new TransactionNotFoundError(\n      `PayDunya has no such invoice (${responseCode}: ${message})`,\n      opts,\n    );\n  }\n  return new MomorailError(`PayDunya error (${responseCode}: ${message})`, 'provider_error', opts);\n}\n\nexport function isOk(responseCode: string): boolean {\n  return responseCode === OK;\n}\n","import { createHash, timingSafeEqual } from 'node:crypto';\nimport { WebhookVerificationError } from '@momorail/core';\nimport { PROVIDER_ID } from './mapping.js';\nimport type { PaydunyaIpnFields } from './types.js';\n\n/**\n * Parse a PayDunya IPN body. PayDunya POSTs `application/x-www-form-urlencoded`\n * with bracketed keys (`data[invoice][token]`, `data[status]`, `data[hash]`, …).\n * The keys are kept flat and verbatim.\n */\nexport function parseIpnBody(\n  body: string | Uint8Array | Record<string, unknown>,\n): PaydunyaIpnFields {\n  if (typeof body === 'string' || body instanceof Uint8Array) {\n    const raw = typeof body === 'string' ? body : new TextDecoder().decode(body);\n    return Object.fromEntries(new URLSearchParams(raw).entries());\n  }\n  const out: PaydunyaIpnFields = {};\n  for (const [key, value] of Object.entries(body)) {\n    if (value != null) out[key] = String(value);\n  }\n  return out;\n}\n\n/** PayDunya's IPN hash is `sha512(masterKey)` — a static digest of your Master Key. */\nexport function paydunyaIpnHash(masterKey: string): string {\n  return createHash('sha512').update(masterKey, 'utf8').digest('hex');\n}\n\nfunction safeEqualHex(a: string, b: string): boolean {\n  if (a.length !== b.length || a.length === 0) return false;\n  try {\n    return timingSafeEqual(Buffer.from(a, 'hex'), Buffer.from(b, 'hex'));\n  } catch {\n    return false;\n  }\n}\n\n/** Read a bracketed IPN field regardless of surrounding whitespace. */\nexport function ipnField(fields: PaydunyaIpnFields, key: string): string | undefined {\n  return fields[key] ?? fields[key.replace(/\\s+/g, '')];\n}\n\n/**\n * Verify a PayDunya IPN. Returns the parsed fields on success; throws\n * {@link WebhookVerificationError} when `data[hash]` is missing or does not equal\n * `sha512(masterKey)`.\n *\n * NOTE: this proves the notification came from an actor holding your Master Key —\n * it does not sign the payload. Momorail therefore re-queries the invoice for the\n * authoritative status rather than trusting `data[status]`.\n */\nexport function verifyPaydunyaIpn(\n  body: string | Uint8Array | Record<string, unknown>,\n  masterKey: string,\n): PaydunyaIpnFields {\n  const fields = parseIpnBody(body);\n  const received = ipnField(fields, 'data[hash]');\n  if (!received) {\n    throw new WebhookVerificationError('PayDunya IPN is missing data[hash]', {\n      provider: PROVIDER_ID,\n    });\n  }\n  if (!safeEqualHex(received.toLowerCase(), paydunyaIpnHash(masterKey))) {\n    throw new WebhookVerificationError('PayDunya IPN hash does not match the Master Key', {\n      provider: PROVIDER_ID,\n    });\n  }\n  return fields;\n}\n"],"mappings":";AAAA;AAAA,EAGE;AAAA,EAEA;AAAA,EAUA;AAAA,EAEA;AAAA,EACA;AAAA,OACK;;;ACnBP,SAAS,0BAA0B,sBAAsB;;;ACAzD;AAAA,EACE;AAAA,EAEA;AAAA,EACA;AAAA,OAEK;AAGA,IAAM,cAAc;AAE3B,IAAM,KAAK;AACX,IAAM,YAAY;AAClB,IAAM,iBAAiB;AAGhB,SAAS,iBAAiB,KAAiD;AAChF,UAAQ,IAAI,QAAQ,YAAY,GAAG;AAAA,IACjC,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO,IAAI,kBAAkB,KAAK,eAAe;AAAA,EACrD;AACF;AAGO,SAAS,kBACd,QACA,cACmB;AACnB,UAAQ,QAAQ,YAAY,GAAG;AAAA,IAC7B,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT,KAAK;AAAA,IACL,KAAK;AAAA,IACL,KAAK;AACH,aAAO;AAAA,IACT;AACE,aAAO,iBAAiB,KAAK,eAAe;AAAA,EAChD;AACF;AAEO,SAAS,iBAAiB,KAA6C;AAC5E,QAAM,OAAO,GAAG,IAAI,iBAAiB,EAAE,GAAG,YAAY;AACtD,MAAI,0BAA0B,KAAK,IAAI,EAAG,QAAO;AACjD,MAAI,eAAe,KAAK,IAAI,EAAG,QAAO;AACtC,MAAI,QAAQ,KAAK,IAAI,EAAG,QAAO;AAC/B,SAAO;AACT;AAMO,SAAS,cACd,cACA,SACA,aACe;AACf,QAAM,OAAO,EAAE,UAAU,aAAa,YAAY;AAElD,MAAI,UAAU,KAAK,OAAO,GAAG;AAC3B,WAAO,IAAI,UAAU,sCAAsC,YAAY,KAAK,OAAO,KAAK,IAAI;AAAA,EAC9F;AACA,MAAI,eAAe,KAAK,OAAO,GAAG;AAChC,WAAO,IAAI;AAAA,MACT,iCAAiC,YAAY,KAAK,OAAO;AAAA,MACzD;AAAA,IACF;AAAA,EACF;AACA,SAAO,IAAI,cAAc,mBAAmB,YAAY,KAAK,OAAO,KAAK,kBAAkB,IAAI;AACjG;AAEO,SAAS,KAAK,cAA+B;AAClD,SAAO,iBAAiB;AAC1B;;;ADvEO,IAAM,aAAN,MAAiB;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,SAA4B;AACtC,SAAK,WAAW,QAAQ,QAAQ,QAAQ,OAAO,EAAE;AACjD,SAAK,aAAa,QAAQ;AAC1B,SAAK,SAAS,QAAQ;AACtB,SAAK,eAAe,QAAQ;AAAA,EAC9B;AAAA,EAEA,SAAY,MAAc,MAAe,QAAkC;AACzE,WAAO,KAAK,SAAY,QAAQ,MAAM,MAAM,MAAM;AAAA,EACpD;AAAA,EAEA,QAAW,MAAc,QAAkC;AACzD,WAAO,KAAK,SAAY,OAAO,MAAM,QAAW,MAAM;AAAA,EACxD;AAAA,EAEA,MAAM,SACJ,QACA,MACA,MACA,QACY;AACZ,UAAM,UAAU,YAAY,QAAQ,KAAK,UAAU;AACnD,UAAM,YAAY,SAAS,YAAY,IAAI,CAAC,QAAQ,OAAO,CAAC,IAAI;AAEhE,UAAM,UAAkC,EAAE,QAAQ,oBAAoB,GAAG,KAAK,aAAa;AAC3F,QAAI,WAAW,OAAQ,SAAQ,cAAc,IAAI;AAEjD,QAAI;AACJ,QAAI;AACF,iBAAW,MAAM,KAAK,OAAO,GAAG,KAAK,QAAQ,GAAG,IAAI,IAAI;AAAA,QACtD;AAAA,QACA;AAAA,QACA,MAAM,WAAW,SAAS,KAAK,UAAU,IAAI,IAAI;AAAA,QACjD,QAAQ;AAAA,MACV,CAAC;AAAA,IACH,SAAS,OAAO;AACd,UAAI,QAAQ,QAAS,OAAM;AAC3B,YAAM,IAAI,yBAAyB,uCAAuC;AAAA,QACxE,UAAU;AAAA,QACV;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,SAAS,WAAW,KAAK;AAC3B,YAAM,IAAI,eAAe,kCAAkC,EAAE,UAAU,YAAY,CAAC;AAAA,IACtF;AAEA,UAAM,MAAM,MAAM,SAAS,KAAK;AAChC,QAAI;AACJ,QAAI;AACF,eAAS,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;AAAA,IACpC,SAAS,OAAO;AACd,YAAM,IAAI,yBAAyB,yCAAyC;AAAA,QAC1E,UAAU;AAAA,QACV,aAAa;AAAA,QACb;AAAA,MACF,CAAC;AAAA,IACH;AAEA,QAAI,SAAS,UAAU,KAAK;AAC1B,YAAM,IAAI,yBAAyB,sBAAsB,SAAS,MAAM,IAAI;AAAA,QAC1E,UAAU;AAAA,QACV,aAAa;AAAA,MACf,CAAC;AAAA,IACH;AAEA,WAAO;AAAA,EACT;AACF;;;AE5FA,SAAS,YAAY,uBAAuB;AAC5C,SAAS,gCAAgC;AASlC,SAAS,aACd,MACmB;AACnB,MAAI,OAAO,SAAS,YAAY,gBAAgB,YAAY;AAC1D,UAAM,MAAM,OAAO,SAAS,WAAW,OAAO,IAAI,YAAY,EAAE,OAAO,IAAI;AAC3E,WAAO,OAAO,YAAY,IAAI,gBAAgB,GAAG,EAAE,QAAQ,CAAC;AAAA,EAC9D;AACA,QAAM,MAAyB,CAAC;AAChC,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,IAAI,GAAG;AAC/C,QAAI,SAAS,KAAM,KAAI,GAAG,IAAI,OAAO,KAAK;AAAA,EAC5C;AACA,SAAO;AACT;AAGO,SAAS,gBAAgB,WAA2B;AACzD,SAAO,WAAW,QAAQ,EAAE,OAAO,WAAW,MAAM,EAAE,OAAO,KAAK;AACpE;AAEA,SAAS,aAAa,GAAW,GAAoB;AACnD,MAAI,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAG,QAAO;AACpD,MAAI;AACF,WAAO,gBAAgB,OAAO,KAAK,GAAG,KAAK,GAAG,OAAO,KAAK,GAAG,KAAK,CAAC;AAAA,EACrE,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,SAAS,QAA2B,KAAiC;AACnF,SAAO,OAAO,GAAG,KAAK,OAAO,IAAI,QAAQ,QAAQ,EAAE,CAAC;AACtD;AAWO,SAAS,kBACd,MACA,WACmB;AACnB,QAAM,SAAS,aAAa,IAAI;AAChC,QAAM,WAAW,SAAS,QAAQ,YAAY;AAC9C,MAAI,CAAC,UAAU;AACb,UAAM,IAAI,yBAAyB,sCAAsC;AAAA,MACvE,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,MAAI,CAAC,aAAa,SAAS,YAAY,GAAG,gBAAgB,SAAS,CAAC,GAAG;AACrE,UAAM,IAAI,yBAAyB,mDAAmD;AAAA,MACpF,UAAU;AAAA,IACZ,CAAC;AAAA,EACH;AACA,SAAO;AACT;;;AHhCA,IAAM,WAAyC;AAAA,EAC7C,MAAM;AAAA,EACN,MAAM;AACR;AACA,IAAM,qBAAqB;AAC3B,IAAM,gBAAgB;AAGtB,IAAM,gBAAgB;AAAA,EACpB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,gBAAmD;AAAA,EACvD,WAAW;AAAA,EACX,SAAS;AAAA,EACT,SAAS;AAAA,EACT,aAAa;AAAA,EACb,WAAW;AAAA,EACX,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,WAAW;AAAA,EACX,SAAS;AAAA,EACT,QAAQ;AAAA,EACR,SAAS;AACX;AA+BA,IAAM,eAAqC;AAAA,EACzC,YAAY;AAAA,EACZ,cAAc;AAAA;AAAA,EAEd,mBAAmB;AAAA,EACnB,gBAAgB;AAAA,EAChB,WAAW;AAAA,IACT;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,YAAY,CAAC,KAAK;AACpB;AAYO,IAAM,mBAAN,MAAkD;AAAA,EAC9C,KAAK;AAAA,EAEL;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EAET,YAAY,SAA0B;AACpC,eAAW,OAAO,CAAC,aAAa,cAAc,SAAS,WAAW,GAAY;AAC5E,UAAI,CAAC,QAAQ,GAAG,GAAG,KAAK,GAAG;AACzB,cAAM,IAAI,gBAAgB,0CAA0C,GAAG,GAAG;AAAA,MAC5E;AAAA,IACF;AACA,UAAM,OAAqB,QAAQ,QAAQ;AAC3C,SAAK,aAAa,QAAQ;AAC1B,SAAK,aAAa,QAAQ;AAC1B,SAAK,eAAe,QAAQ;AAC5B,SAAK,aAAa,QAAQ;AAC1B,SAAK,aAAa,QAAQ;AAC1B,SAAK,SAAS,IAAI;AAAA,MAChB,QAAQ,oBAAoB,IAAI,uBAAuB;AAAA,MACvD,KAAK;AAAA,IACP;AACA,SAAK,QAAQ,IAAI,WAAW;AAAA,MAC1B,SAAS,QAAQ,WAAW,SAAS,IAAI;AAAA,MACzC,WAAW,QAAQ,aAAa;AAAA,MAChC,OAAO,QAAQ,SAAS,WAAW;AAAA,MACnC,aAAa;AAAA,QACX,uBAAuB,QAAQ;AAAA,QAC/B,wBAAwB,QAAQ;AAAA,QAChC,kBAAkB,QAAQ;AAAA,QAC1B,iBAAiB;AAAA,MACnB;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,eAAqC;AACnC,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,WAAW,OAAwB,SAAqD;AAC5F,QAAI,MAAM,SAAS,aAAa,UAAa,CAAC,WAAW,MAAM,SAAS,QAAQ,GAAG;AACjF,YAAM,IAAI,gBAAgB,qBAAqB,MAAM,SAAS,QAAQ,IAAI;AAAA,QACxE,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,YAAY,MAAM,SAAS;AAC5D,QAAI,OAAQ,QAAO,gBAAgB,MAAM;AAEzC,UAAM,cAAc,MAAM,eAAe,KAAK;AAC9C,QAAI,CAAC,aAAa;AAChB,YAAM,IAAI;AAAA,QACR;AAAA,QACA,EAAE,UAAU,KAAK,GAAG;AAAA,MACtB;AAAA,IACF;AAEA,UAAM,OAAO;AAAA,MACX,SAAS;AAAA,QACP,cAAc,MAAM,OAAO;AAAA,QAC3B,aAAa,MAAM,eAAe,WAAW,MAAM,SAAS;AAAA,MAC9D;AAAA,MACA,OAAO,EAAE,MAAM,KAAK,WAAW;AAAA,MAC/B,SAAS,eAAe;AAAA,QACtB,cAAc;AAAA,QACd,YAAY,MAAM,aAAa,KAAK;AAAA,QACpC,YAAY,MAAM,aAAa,KAAK;AAAA,MACtC,CAAC;AAAA,MACD,aAAa,EAAE,CAAC,aAAa,GAAG,MAAM,WAAW,GAAG,MAAM,SAAS;AAAA,IACrE;AAEA,UAAM,MAAM,MAAM,KAAK,MAAM;AAAA,MAC3B;AAAA,MACA;AAAA,MACA,SAAS;AAAA,IACX;AACA,QAAI,CAAC,KAAK,IAAI,aAAa,KAAK,CAAC,IAAI,OAAO;AAC1C,YAAM,cAAc,IAAI,eAAe,IAAI,eAAe,GAAG;AAAA,IAC/D;AAEA,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAAmB;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,IAAI,IAAI;AAAA,MACR,WAAW,MAAM;AAAA,MACjB,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,QAAQ,MAAM;AAAA,MACd,UAAU,MAAM,SAAS;AAAA,MACzB,UAAU,MAAM;AAAA,MAChB,aAAa,IAAI,gBAAgB,MAAM,IAAI,aAAa,IAAI,IAAI,gBAAgB;AAAA,MAChF,aAAa;AAAA,MACb,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAEA,UAAM,KAAK,OAAO,SAAS,GAAG;AAC9B,WAAO,gBAAgB,GAAG;AAAA,EAC5B;AAAA,EAEA,MAAM,aACJ,OACA,SACsB;AACtB,UAAM,WAAW,MAAM,UAAU;AACjC,QAAI,CAAC,YAAY,CAAC,WAAW,QAAQ,GAAG;AACtC,YAAM,IAAI,gBAAgB,kDAAkD;AAAA,QAC1E,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AACA,UAAM,OAAO,cAAc,QAAQ;AACnC,QAAI,CAAC,MAAM;AACT,YAAM,IAAI,gBAAgB,+CAA+C,QAAQ,KAAK;AAAA,QACpF,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAEA,UAAM,SAAS,MAAM,KAAK,OAAO,YAAY,MAAM,SAAS;AAC5D,QAAI,OAAQ,QAAO,gBAAgB,MAAM;AAEzC,UAAM,QAAQ,YAAY,MAAM,UAAU,KAAK;AAC/C,UAAM,MAAM,MAAM,KAAK,MAAM;AAAA,MAC3B;AAAA,MACA,EAAE,eAAe,OAAO,QAAQ,MAAM,OAAO,QAAQ,eAAe,KAAK;AAAA,MACzE,SAAS;AAAA,IACX;AACA,QAAI,CAAC,KAAK,IAAI,aAAa,KAAK,CAAC,IAAI,gBAAgB;AACnD,YAAM,cAAc,IAAI,eAAe,IAAI,iBAAiB,sBAAsB,GAAG;AAAA,IACvF;AAEA,UAAM,SAAS,MAAM,KAAK,MAAM;AAAA,MAC9B;AAAA,MACA,EAAE,kBAAkB,IAAI,gBAAgB,aAAa,MAAM,UAAU;AAAA,MACrE,SAAS;AAAA,IACX;AACA,UAAM,OAAO,OAAO,OAAO,gBAAgB,WAAW,OAAO,cAAc;AAC3E,UAAM,SAAS,kBAAkB,MAAM,QAAQ,OAAO,aAAa;AACnE,QAAI,WAAW,WAAW;AACxB,YAAM;AAAA,QACJ,OAAO;AAAA,QACP,OAAO,iBAAiB;AAAA,QACxB;AAAA,MACF;AAAA,IACF;AAEA,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAAmB;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,IAAI,MAAM,gBAAgB,MAAM;AAAA,MAChC,WAAW,MAAM;AAAA,MACjB,MAAM;AAAA,MACN;AAAA,MACA,QAAQ,MAAM;AAAA,MACd;AAAA,MACA,UAAU,MAAM;AAAA,MAChB,eAAe,WAAW,WAAW,UAAU;AAAA,MAC/C,aAAa,EAAE,KAAK,OAAO;AAAA,MAC3B,WAAW;AAAA,MACX,WAAW;AAAA,IACb;AAEA,UAAM,KAAK,OAAO,SAAS,GAAG;AAC9B,WAAO,gBAAgB,GAAG;AAAA,EAC5B;AAAA,EAEA,MAAM,eAAe,KAAqB,SAAqD;AAC7F,UAAM,SACH,IAAI,KAAK,MAAM,KAAK,OAAO,KAAK,IAAI,EAAE,IAAI,YAC1C,IAAI,YAAY,MAAM,KAAK,OAAO,YAAY,IAAI,SAAS,IAAI;AAElE,QAAI,OAAO,SAAS,gBAAgB;AAGlC,aAAO,gBAAgB,KAAK;AAAA,IAC9B;AAEA,UAAM,QAAQ,IAAI,MAAM,OAAO;AAC/B,QAAI,CAAC,OAAO;AACV,YAAM,IAAI;AAAA,QACR;AAAA,QACA,EAAE,UAAU,KAAK,GAAG;AAAA,MACtB;AAAA,IACF;AAEA,UAAM,MAAM,MAAM,KAAK,MAAM;AAAA,MAC3B,6BAA6B,mBAAmB,KAAK,CAAC;AAAA,MACtD,SAAS;AAAA,IACX;AAEA,UAAM,SAAS,iBAAiB,GAAG;AACnC,QAAI,CAAC,KAAK,IAAI,aAAa,KAAK,WAAW,WAAW;AACpD,YAAM,cAAc,IAAI,eAAe,IAAI,iBAAiB,mBAAmB,GAAG;AAAA,IACpF;AAEA,UAAM,SAAS,IAAI,cAAc,aAAa;AAC9C,UAAM,OAAM,oBAAI,KAAK,GAAE,YAAY;AACnC,UAAM,MAAmB;AAAA,MACvB,UAAU,KAAK;AAAA,MACf,IAAI;AAAA,MACJ,YACG,OAAO,WAAW,WAAW,SAAS,WACvC,OAAO,aACP,IAAI,aACJ;AAAA,MACF,MAAM;AAAA,MACN;AAAA,MACA,QAAQ,OAAO,UAAU,aAAa,IAAI,SAAS,YAAY;AAAA,MAC/D,UAAU,OAAO;AAAA,MACjB,UAAU,OAAO;AAAA,MACjB,aAAa,OAAO;AAAA,MACpB,eAAe,WAAW,WAAW,iBAAiB,GAAG,IAAI;AAAA,MAC7D,aAAa;AAAA,MACb,WAAW,OAAO,aAAa;AAAA,MAC/B,WAAW;AAAA,IACb;AAEA,UAAM,KAAK,OAAO,SAAS,GAAG;AAC9B,WAAO,gBAAgB,GAAG;AAAA,EAC5B;AAAA,EAEA,MAAM,aAAa,KAAwC;AACzD,UAAM,SAAS,kBAAkB,IAAI,MAAM,KAAK,UAAU;AAC1D,UAAM,QAAQ,SAAS,QAAQ,sBAAsB;AACrD,QAAI,CAAC,OAAO;AACV,YAAM,IAAI,gBAAgB,gDAAgD;AAAA,QACxE,UAAU,KAAK;AAAA,MACjB,CAAC;AAAA,IACH;AAEA,UAAM,cAAc,MAAM,KAAK,eAAe,EAAE,IAAI,MAAM,CAAC;AAC3D,WAAO;AAAA,MACL,MAAM,0BAA0B,YAAY,MAAM;AAAA,MAClD;AAAA,MACA,aAAa;AAAA,IACf;AAAA,EACF;AACF;AAEA,SAAS,MAAM,OAA4C;AACzD,SAAO,OAAO,UAAU,YAAY,gBAAgB,KAAK,KAAK;AAChE;AAGA,SAAS,YAAY,OAAuB;AAC1C,QAAM,SAAS,MAAM,QAAQ,UAAU,EAAE;AACzC,aAAW,QAAQ,eAAe;AAChC,QAAI,OAAO,WAAW,IAAI,EAAG,QAAO,OAAO,MAAM,KAAK,MAAM;AAAA,EAC9D;AACA,SAAO;AACT;AAEA,SAAS,aAAa,KAAyC;AAC7D,QAAM,SAAS,OAAO,QAAQ,WAAW,OAAO,SAAS,KAAK,EAAE,IAAK,OAAO;AAC5E,SAAO,EAAE,QAAQ,OAAO,SAAS,MAAM,IAAI,KAAK,MAAM,MAAM,IAAI,GAAG,UAAU,MAAM;AACrF;AAEA,SAAS,eAAkD,KAAkC;AAC3F,QAAM,MAAM,CAAC;AACb,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,GAAG,GAAG;AAC9C,QAAI,UAAU,OAAW,KAAI,GAAc,IAAI;AAAA,EACjD;AACA,SAAO;AACT;","names":[]}

package/package.json

@@ -0,0 +1,58 @@
+{
+  "name": "@momorail/paydunya",
+  "version": "0.1.0",
+  "type": "module",
+  "description": "PayDunya adapter for Momorail (checkout invoice, status, IPN verification)",
+  "keywords": [
+    "mobile-money",
+    "payments",
+    "west-africa",
+    "africa",
+    "orange-money",
+    "mtn-momo",
+    "wave",
+    "xof",
+    "byo-keys",
+    "typescript",
+    "paydunya",
+    "adapter"
+  ],
+  "license": "MIT",
+  "author": "Boukymen <boukymen@gmail.com>",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Boukymen/momorail.git",
+    "directory": "packages/paydunya"
+  },
+  "homepage": "https://github.com/Boukymen/momorail/tree/main/packages/paydunya#readme",
+  "bugs": "https://github.com/Boukymen/momorail/issues",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "dependencies": {
+    "@momorail/core": "0.1.0"
+  },
+  "devDependencies": {
+    "msw": "^2.7.0",
+    "tsup": "^8.3.5",
+    "typescript": "^5.7.2",
+    "vitest": "^2.1.8",
+    "@momorail/conformance": "0.1.0"
+  },
+  "scripts": {
+    "build": "tsup",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}