@obhco/pay 0.0.0-stage → 0.1.0

package/dist/gateways/zarinpal.js

@@ -0,0 +1,312 @@
+import { randomUUID } from "node:crypto";
+import { PaymentProviderError, } from "../types.js";
+export const ZARINPAL_PROVIDER_CODE = "zarinpal";
+export const ZARINPAL_PROVIDER_NAME = "Zarinpal";
+const ZARINPAL_PRODUCTION_HOST = "https://payment.zarinpal.com";
+const ZARINPAL_SANDBOX_HOST = "https://sandbox.zarinpal.com";
+const ZARINPAL_TIMEOUT_MS = 15_000;
+/** Result codes from the Zarinpal v4 payment gateway guide. */
+export const ZARINPAL_RESULT_CODES = {
+    100: { message: "Operation succeeded.", retryable: false },
+    101: { message: "Payment was already verified.", retryable: false },
+    [-9]: { message: "Validation error in the request.", retryable: false },
+    [-10]: {
+        message: "Terminal IP or merchant ID is not valid.",
+        retryable: false,
+    },
+    [-11]: { message: "Merchant ID is not active.", retryable: false },
+    [-12]: {
+        message: "Too many attempts; try again later.",
+        retryable: true,
+    },
+    [-15]: { message: "Merchant terminal is suspended.", retryable: false },
+    [-16]: {
+        message: "Merchant account level is not sufficient.",
+        retryable: false,
+    },
+    [-30]: {
+        message: "Merchant is not allowed floating fee wages.",
+        retryable: false,
+    },
+    [-50]: {
+        message: "Paid amount differs from the verify amount.",
+        retryable: false,
+    },
+    [-51]: { message: "Payment was not successful.", retryable: false },
+    [-52]: { message: "Unexpected Zarinpal error.", retryable: true },
+    [-53]: {
+        message: "This authority does not belong to this merchant.",
+        retryable: false,
+    },
+    [-54]: { message: "Authority is not valid.", retryable: false },
+    [-55]: { message: "Transaction was not found.", retryable: false },
+};
+export function describeZarinpalCode(code, fallback) {
+    if (code !== null && code !== undefined && ZARINPAL_RESULT_CODES[code]) {
+        return ZARINPAL_RESULT_CODES[code].message;
+    }
+    if (fallback && fallback.trim()) {
+        return fallback.trim();
+    }
+    return code !== null && code !== undefined
+        ? `Zarinpal result code ${code}`
+        : "Unspecified gateway response";
+}
+/**
+ * Server env names. `ZARRINPAL_MERCHANT_ID` (double R) is accepted too
+ * because existing deployments were configured with that spelling.
+ */
+function readMerchantId() {
+    return (process.env.ZARINPAL_MERCHANT_ID?.trim() ||
+        process.env.ZARRINPAL_MERCHANT_ID?.trim() ||
+        null);
+}
+/** `ZARINPAL_SANDBOX=true` sends LIVE payments to Zarinpal's sandbox. */
+function isSandbox() {
+    return /^(1|true|yes|on)$/i.test(process.env.ZARINPAL_SANDBOX?.trim() ?? "");
+}
+function readHost() {
+    return isSandbox() ? ZARINPAL_SANDBOX_HOST : ZARINPAL_PRODUCTION_HOST;
+}
+function maskIdentifier(value) {
+    if (!value) {
+        return null;
+    }
+    if (value.length <= 8) {
+        return "****";
+    }
+    return `${value.slice(0, 4)}${"*".repeat(6)}${value.slice(-4)}`;
+}
+export function getZarinpalConfigStatus() {
+    const merchantId = readMerchantId();
+    return {
+        providerCode: ZARINPAL_PROVIDER_CODE,
+        providerName: ZARINPAL_PROVIDER_NAME,
+        host: readHost(),
+        sandbox: isSandbox(),
+        liveConfigured: Boolean(merchantId),
+        merchantIdMasked: maskIdentifier(merchantId),
+    };
+}
+function getMerchantId() {
+    const merchantId = readMerchantId();
+    if (!merchantId) {
+        throw new PaymentProviderError("ZARINPAL_CREDENTIALS_MISSING", "ZARINPAL_MERCHANT_ID is not configured in server environment variables.");
+    }
+    return merchantId;
+}
+async function zarinpalPost(path, body) {
+    const controller = new AbortController();
+    const timeout = setTimeout(() => controller.abort(), ZARINPAL_TIMEOUT_MS);
+    try {
+        const response = await fetch(`${readHost()}${path}`, {
+            method: "POST",
+            headers: {
+                Accept: "application/json",
+                "Content-Type": "application/json",
+            },
+            body: JSON.stringify(body),
+            signal: controller.signal,
+        });
+        const json = (await response
+            .json()
+            .catch(() => null));
+        return { response, json };
+    }
+    finally {
+        clearTimeout(timeout);
+    }
+}
+/** Zarinpal returns `data` or `errors`; the other is an empty array. */
+function readResult(json) {
+    const data = json?.data && !Array.isArray(json.data) ? json.data : null;
+    const errors = json?.errors && !Array.isArray(json.errors) ? json.errors : null;
+    const code = Number(data?.code ?? errors?.code ?? Number.NaN);
+    return {
+        data,
+        code: Number.isNaN(code) ? null : code,
+        message: data?.message ?? errors?.message ?? null,
+    };
+}
+export function getZarinpalStartPayUrl(authority) {
+    return `${readHost()}/pg/StartPay/${encodeURIComponent(authority)}`;
+}
+function readString(value) {
+    return value === undefined || value === null || value === ""
+        ? null
+        : String(value);
+}
+export const zarinpalPaymentAdapter = {
+    code: ZARINPAL_PROVIDER_CODE,
+    descriptor: {
+        code: ZARINPAL_PROVIDER_CODE,
+        name: ZARINPAL_PROVIDER_NAME,
+        displayName: "پرداخت با زرین‌پال",
+        description: "Pays the full amount with any Shetab bank card through the Zarinpal gateway.",
+        kind: "card",
+        requiresCustomerMobile: false,
+        minAmount: "10000",
+    },
+    isConfigured() {
+        return getZarinpalConfigStatus().liveConfigured;
+    },
+    async createCheckoutSession(input) {
+        if (input.currency !== "IRR") {
+            throw new PaymentProviderError("CURRENCY_NOT_SUPPORTED", "OBH sends Zarinpal amounts in IRR only.");
+        }
+        if (!/^[1-9]\d{0,17}$/.test(input.amount) ||
+            BigInt(input.amount) < 10000n) {
+            throw new PaymentProviderError("INVALID_AMOUNT", "Zarinpal requires a whole Rial amount of at least 10,000 R.");
+        }
+        const mobile = input.customerMobile?.trim() || undefined;
+        let result;
+        try {
+            result = await zarinpalPost("/pg/v4/payment/request.json", {
+                merchant_id: getMerchantId(),
+                amount: Number(input.amount),
+                currency: "IRR",
+                description: input.description.slice(0, 500) || input.serviceSlug,
+                callback_url: input.callbackUrl,
+                metadata: {
+                    order_id: input.gatewayOrderId,
+                    ...(mobile ? { mobile } : {}),
+                },
+            });
+        }
+        catch (error) {
+            if (error instanceof PaymentProviderError) {
+                throw error;
+            }
+            throw new PaymentProviderError("ZARINPAL_NETWORK_ERROR", "Could not reach the Zarinpal payment request endpoint.");
+        }
+        const { data, code, message } = readResult(result.json);
+        const description = describeZarinpalCode(code, message);
+        if (code !== 100 || !data?.authority) {
+            throw new PaymentProviderError(`ZARINPAL_RES_${code ?? "UNKNOWN"}`, description, code ?? undefined);
+        }
+        return {
+            providerSessionId: data.authority,
+            providerReference: null,
+            checkoutUrl: getZarinpalStartPayUrl(data.authority),
+            expiresAt: new Date(Date.now() + 15 * 60 * 1000),
+            resultCode: 100,
+            resultMessage: description,
+        };
+    },
+    /**
+     * `payload` is the callback query: `Authority` and `Status` (`OK`/`NOK`).
+     * Verify is only called for `OK`.
+     */
+    async verifyPayment(input) {
+        const payload = input.payload ?? {};
+        const authority = readString(payload.Authority) ?? input.providerSessionId ?? null;
+        const status = readString(payload.Status)?.toUpperCase() ?? null;
+        const base = {
+            adapter: ZARINPAL_PROVIDER_CODE,
+            authority,
+        };
+        const pending = (resultCode, resultMessage) => ({
+            status: "PENDING",
+            providerReference: authority ?? "",
+            traceNumber: null,
+            maskedCardNumber: null,
+            resultCode,
+            resultMessage,
+            verifiedAmount: null,
+            verifiedOrderId: null,
+            verifiedAt: null,
+            failureReason: null,
+            metadata: base,
+        });
+        const failed = (resultCode, reason, extra = {}) => ({
+            status: "FAILED",
+            providerReference: authority ??
+                `fail_${randomUUID().replaceAll("-", "").slice(0, 12)}`,
+            traceNumber: null,
+            maskedCardNumber: null,
+            resultCode,
+            resultMessage: reason,
+            verifiedAmount: null,
+            verifiedOrderId: null,
+            verifiedAt: new Date(),
+            failureReason: reason,
+            metadata: { ...base, ...extra },
+        });
+        if (!status) {
+            return pending(-1, "Awaiting Zarinpal payment result.");
+        }
+        if (status !== "OK") {
+            return failed(-51, "پرداخت زرین‌پال ناموفق بود یا توسط کاربر لغو شد.");
+        }
+        if (!authority) {
+            return failed(-54, "Zarinpal callback is missing Authority.");
+        }
+        if (!input.expectedAmount) {
+            return failed(-9, "Expected amount is required to verify with Zarinpal.");
+        }
+        let result;
+        try {
+            result = await zarinpalPost("/pg/v4/payment/verify.json", {
+                merchant_id: getMerchantId(),
+                amount: Number(input.expectedAmount),
+                authority,
+            });
+        }
+        catch {
+            // A network failure is not proof of failure; keep PENDING and retry.
+            return pending(-52, "Temporary communication failure during Zarinpal verify; retry pending.");
+        }
+        if (!result.json) {
+            return pending(-52, `Zarinpal verify returned non-JSON status ${result.response.status}.`);
+        }
+        const { data, code, message } = readResult(result.json);
+        const description = describeZarinpalCode(code, message);
+        if (result.response.status >= 500 ||
+            code === null ||
+            ZARINPAL_RESULT_CODES[code]?.retryable) {
+            return pending(code ?? -52, description);
+        }
+        if ((code !== 100 && code !== 101) || !data) {
+            return failed(code, description);
+        }
+        const refId = readString(data.ref_id) ?? authority;
+        return {
+            status: "COMPLETED",
+            providerReference: refId,
+            traceNumber: refId,
+            maskedCardNumber: readString(data.card_pan),
+            resultCode: code,
+            resultMessage: description,
+            // Zarinpal verifies against the amount we send; -50 means a mismatch.
+            verifiedAmount: input.expectedAmount,
+            verifiedOrderId: input.gatewayOrderId ?? null,
+            verifiedAt: new Date(),
+            failureReason: null,
+            metadata: {
+                ...base,
+                refId,
+                cardHash: data.card_hash ?? null,
+                feeType: data.fee_type ?? null,
+                fee: data.fee ?? null,
+            },
+        };
+    },
+    parseCallback(payload) {
+        const authority = payload.Authority?.trim() || null;
+        const status = payload.Status?.trim().toUpperCase() ?? "";
+        const succeeded = status === "OK";
+        return {
+            sessionId: authority,
+            gatewayOrderId: null,
+            outcome: succeeded ? "verify" : "failed",
+            resultCode: succeeded ? 100 : -51,
+            resultText: succeeded
+                ? "Zarinpal reported OK; awaiting verify."
+                : "پرداخت زرین‌پال ناموفق بود یا توسط کاربر لغو شد.",
+            providerReference: null,
+            maskedCardNumber: null,
+            payload: { Authority: authority, Status: status },
+        };
+    },
+};
+//# sourceMappingURL=zarinpal.js.map

package/dist/gateways/zarinpal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zarinpal.js","sourceRoot":"","sources":["../../src/gateways/zarinpal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EACL,oBAAoB,GAMrB,MAAM,aAAa,CAAA;AAEpB,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAA;AAChD,MAAM,CAAC,MAAM,sBAAsB,GAAG,UAAU,CAAA;AAEhD,MAAM,wBAAwB,GAAG,8BAA8B,CAAA;AAC/D,MAAM,qBAAqB,GAAG,8BAA8B,CAAA;AAC5D,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAElC,+DAA+D;AAC/D,MAAM,CAAC,MAAM,qBAAqB,GAG9B;IACF,GAAG,EAAE,EAAE,OAAO,EAAE,sBAAsB,EAAE,SAAS,EAAE,KAAK,EAAE;IAC1D,GAAG,EAAE,EAAE,OAAO,EAAE,+BAA+B,EAAE,SAAS,EAAE,KAAK,EAAE;IACnE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,kCAAkC,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,CAAC,CAAC,EAAE,CAAC,EAAE;QACL,OAAO,EAAE,0CAA0C;QACnD,SAAS,EAAE,KAAK;KACjB;IACD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,KAAK,EAAE;IAClE,CAAC,CAAC,EAAE,CAAC,EAAE;QACL,OAAO,EAAE,qCAAqC;QAC9C,SAAS,EAAE,IAAI;KAChB;IACD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,iCAAiC,EAAE,SAAS,EAAE,KAAK,EAAE;IACvE,CAAC,CAAC,EAAE,CAAC,EAAE;QACL,OAAO,EAAE,2CAA2C;QACpD,SAAS,EAAE,KAAK;KACjB;IACD,CAAC,CAAC,EAAE,CAAC,EAAE;QACL,OAAO,EAAE,6CAA6C;QACtD,SAAS,EAAE,KAAK;KACjB;IACD,CAAC,CAAC,EAAE,CAAC,EAAE;QACL,OAAO,EAAE,6CAA6C;QACtD,SAAS,EAAE,KAAK;KACjB;IACD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,6BAA6B,EAAE,SAAS,EAAE,KAAK,EAAE;IACnE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,IAAI,EAAE;IACjE,CAAC,CAAC,EAAE,CAAC,EAAE;QACL,OAAO,EAAE,kDAAkD;QAC3D,SAAS,EAAE,KAAK;KACjB;IACD,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE,SAAS,EAAE,KAAK,EAAE;IAC/D,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,4BAA4B,EAAE,SAAS,EAAE,KAAK,EAAE;CACnE,CAAA;AAED,MAAM,UAAU,oBAAoB,CAClC,IAA+B,EAC/B,QAAwB;IAExB,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACvE,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,OAAO,CAAA;IAC5C,CAAC;IAED,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;QAChC,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,OAAO,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS;QACxC,CAAC,CAAC,wBAAwB,IAAI,EAAE;QAChC,CAAC,CAAC,8BAA8B,CAAA;AACpC,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc;IACrB,OAAO,CACL,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,EAAE;QACxC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,IAAI,EAAE;QACzC,IAAI,CACL,CAAA;AACH,CAAC;AAED,yEAAyE;AACzE,SAAS,SAAS;IAChB,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;AAC9E,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,SAAS,EAAE,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,wBAAwB,CAAA;AACvE,CAAC;AAWD,SAAS,cAAc,CAAC,KAAoB;IAC1C,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO,MAAM,CAAA;IACf,CAAC;IACD,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;AACjE,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;IAEnC,OAAO;QACL,YAAY,EAAE,sBAAsB;QACpC,YAAY,EAAE,sBAAsB;QACpC,IAAI,EAAE,QAAQ,EAAE;QAChB,OAAO,EAAE,SAAS,EAAE;QACpB,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC;QACnC,gBAAgB,EAAE,cAAc,CAAC,UAAU,CAAC;KAC7C,CAAA;AACH,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,UAAU,GAAG,cAAc,EAAE,CAAA;IAEnC,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,oBAAoB,CAC5B,8BAA8B,EAC9B,yEAAyE,CAC1E,CAAA;IACH,CAAC;IAED,OAAO,UAAU,CAAA;AACnB,CAAC;AAkBD,KAAK,UAAU,YAAY,CAAC,IAAY,EAAE,IAAa;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,mBAAmB,CAAC,CAAA;IAEzE,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,EAAE,GAAG,IAAI,EAAE,EAAE;YACnD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,MAAM,EAAE,kBAAkB;gBAC1B,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QACF,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ;aACzB,IAAI,EAAE;aACN,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA4B,CAAA;QAChD,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;IAC3B,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,OAAO,CAAC,CAAA;IACvB,CAAC;AACH,CAAC;AAED,wEAAwE;AACxE,SAAS,UAAU,CAAC,IAA6B;IAC/C,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAA;IACvE,MAAM,MAAM,GACV,IAAI,EAAE,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,IAAI,IAAI,MAAM,EAAE,IAAI,IAAI,MAAM,CAAC,GAAG,CAAC,CAAA;IAE7D,OAAO;QACL,IAAI;QACJ,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI;QACtC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,MAAM,EAAE,OAAO,IAAI,IAAI;KAClD,CAAA;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,GAAG,QAAQ,EAAE,gBAAgB,kBAAkB,CAAC,SAAS,CAAC,EAAE,CAAA;AACrE,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAC1D,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAA0B;IAC3D,IAAI,EAAE,sBAAsB;IAC5B,UAAU,EAAE;QACV,IAAI,EAAE,sBAAsB;QAC5B,IAAI,EAAE,sBAAsB;QAC5B,WAAW,EAAE,oBAAoB;QACjC,WAAW,EACT,8EAA8E;QAChF,IAAI,EAAE,MAAM;QACZ,sBAAsB,EAAE,KAAK;QAC7B,SAAS,EAAE,OAAO;KACnB;IAED,YAAY;QACV,OAAO,uBAAuB,EAAE,CAAC,cAAc,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,qBAAqB,CACzB,KAA2B;QAE3B,IAAI,KAAK,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;YAC7B,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,EACxB,yCAAyC,CAC1C,CAAA;QACH,CAAC;QAED,IACE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YACrC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,MAAM,EAC7B,CAAC;YACD,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,EAChB,6DAA6D,CAC9D,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,cAAc,EAAE,IAAI,EAAE,IAAI,SAAS,CAAA;QACxD,IAAI,MAAgD,CAAA;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC,6BAA6B,EAAE;gBACzD,WAAW,EAAE,aAAa,EAAE;gBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC5B,QAAQ,EAAE,KAAK;gBACf,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,WAAW;gBACjE,YAAY,EAAE,KAAK,CAAC,WAAW;gBAC/B,QAAQ,EAAE;oBACR,QAAQ,EAAE,KAAK,CAAC,cAAc;oBAC9B,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9B;aACF,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,oBAAoB,EAAE,CAAC;gBAC1C,MAAM,KAAK,CAAA;YACb,CAAC;YACD,MAAM,IAAI,oBAAoB,CAC5B,wBAAwB,EACxB,wDAAwD,CACzD,CAAA;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAEvD,IAAI,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,CAAC;YACrC,MAAM,IAAI,oBAAoB,CAC5B,gBAAgB,IAAI,IAAI,SAAS,EAAE,EACnC,WAAW,EACX,IAAI,IAAI,SAAS,CAClB,CAAA;QACH,CAAC;QAED,OAAO;YACL,iBAAiB,EAAE,IAAI,CAAC,SAAS;YACjC,iBAAiB,EAAE,IAAI;YACvB,WAAW,EAAE,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC;YACnD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;YAChD,UAAU,EAAE,GAAG;YACf,aAAa,EAAE,WAAW;SAC3B,CAAA;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CAAC,KAAyB;QAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAA;QACnC,MAAM,SAAS,GACb,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,iBAAiB,IAAI,IAAI,CAAA;QAClE,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAA;QAEhE,MAAM,IAAI,GAAG;YACX,OAAO,EAAE,sBAAsB;YAC/B,SAAS;SACV,CAAA;QAED,MAAM,OAAO,GAAG,CAAC,UAAkB,EAAE,aAAqB,EAAE,EAAE,CAC5D,CAAC;YACC,MAAM,EAAE,SAAS;YACjB,iBAAiB,EAAE,SAAS,IAAI,EAAE;YAClC,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,IAAI;YACtB,UAAU;YACV,aAAa;YACb,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE,IAAI;SACf,CAA+B,CAAA;QAElC,MAAM,MAAM,GAAG,CACb,UAAkB,EAClB,MAAc,EACd,QAAiC,EAAE,EACnC,EAAE,CACF,CAAC;YACC,MAAM,EAAE,QAAQ;YAChB,iBAAiB,EACf,SAAS;gBACT,QAAQ,UAAU,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;YACzD,WAAW,EAAE,IAAI;YACjB,gBAAgB,EAAE,IAAI;YACtB,UAAU;YACV,aAAa,EAAE,MAAM;YACrB,cAAc,EAAE,IAAI;YACpB,eAAe,EAAE,IAAI;YACrB,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,aAAa,EAAE,MAAM;YACrB,QAAQ,EAAE,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,EAAE;SAChC,CAA+B,CAAA;QAElC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,mCAAmC,CAAC,CAAA;QACzD,CAAC;QAED,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,OAAO,MAAM,CAAC,CAAC,EAAE,EAAE,kDAAkD,CAAC,CAAA;QACxE,CAAC;QAED,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,CAAC,EAAE,EAAE,yCAAyC,CAAC,CAAA;QAC/D,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,cAAc,EAAE,CAAC;YAC1B,OAAO,MAAM,CAAC,CAAC,CAAC,EAAE,sDAAsD,CAAC,CAAA;QAC3E,CAAC;QAED,IAAI,MAAgD,CAAA;QACpD,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,YAAY,CAAC,4BAA4B,EAAE;gBACxD,WAAW,EAAE,aAAa,EAAE;gBAC5B,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,cAAc,CAAC;gBACpC,SAAS;aACV,CAAC,CAAA;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,qEAAqE;YACrE,OAAO,OAAO,CACZ,CAAC,EAAE,EACH,wEAAwE,CACzE,CAAA;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACjB,OAAO,OAAO,CACZ,CAAC,EAAE,EACH,4CAA4C,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CACtE,CAAA;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACvD,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAEvD,IACE,MAAM,CAAC,QAAQ,CAAC,MAAM,IAAI,GAAG;YAC7B,IAAI,KAAK,IAAI;YACb,qBAAqB,CAAC,IAAI,CAAC,EAAE,SAAS,EACtC,CAAC;YACD,OAAO,OAAO,CAAC,IAAI,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC,CAAA;QAC1C,CAAC;QAED,IAAI,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5C,OAAO,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAA;QAClC,CAAC;QAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,SAAS,CAAA;QAElD,OAAO;YACL,MAAM,EAAE,WAAW;YACnB,iBAAiB,EAAE,KAAK;YACxB,WAAW,EAAE,KAAK;YAClB,gBAAgB,EAAE,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC3C,UAAU,EAAE,IAAI;YAChB,aAAa,EAAE,WAAW;YAC1B,sEAAsE;YACtE,cAAc,EAAE,KAAK,CAAC,cAAc;YACpC,eAAe,EAAE,KAAK,CAAC,cAAc,IAAI,IAAI;YAC7C,UAAU,EAAE,IAAI,IAAI,EAAE;YACtB,aAAa,EAAE,IAAI;YACnB,QAAQ,EAAE;gBACR,GAAG,IAAI;gBACP,KAAK;gBACL,QAAQ,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI;gBAChC,OAAO,EAAE,IAAI,CAAC,QAAQ,IAAI,IAAI;gBAC9B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI;aACtB;SACF,CAAA;IACH,CAAC;IAED,aAAa,CAAC,OAAO;QACnB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,IAAI,CAAA;QACnD,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,EAAE,CAAA;QACzD,MAAM,SAAS,GAAG,MAAM,KAAK,IAAI,CAAA;QAEjC,OAAO;YACL,SAAS,EAAE,SAAS;YACpB,cAAc,EAAE,IAAI;YACpB,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ;YACxC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;YACjC,UAAU,EAAE,SAAS;gBACnB,CAAC,CAAC,wCAAwC;gBAC1C,CAAC,CAAC,kDAAkD;YACtD,iBAAiB,EAAE,IAAI;YACvB,gBAAgB,EAAE,IAAI;YACtB,OAAO,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE;SAClD,CAAA;IACH,CAAC;CACF,CAAA"}

package/dist/http.d.ts

@@ -0,0 +1,31 @@
+import type { Pay } from "./pay.js";
+import type { PaymentRecord } from "./store.js";
+import type { CheckoutRedirect } from "./types.js";
+/**
+ * Turns a checkout redirect into a web `Response`: a 303 for GET gateways and
+ * a tiny auto-submitting form page for POST gateways (Mellat).
+ */
+export declare function redirectResponse(redirect: CheckoutRedirect): Response;
+/**
+ * Reads a bank callback into a flat string map. Banks use GET queries, form
+ * posts, or JSON; all three are merged, with the body winning over the query.
+ */
+export declare function readCallbackPayload(request: Request): Promise<Record<string, string>>;
+export type CallbackRouteOptions = {
+    /** Where to send the customer when the payment has no `returnUrl`. */
+    fallbackUrl: string;
+    /** Query keys appended to the return URL. Defaults to reference + status. */
+    buildQuery?: (payment: PaymentRecord) => Record<string, string>;
+    /** Called after the result is recorded, before redirecting. */
+    onResult?: (payment: PaymentRecord) => void | Promise<void>;
+};
+/**
+ * Builds a ready-to-export route handler for one gateway's callback. In a
+ * Next.js app: `export const GET = pay.callbackRoute("sadad", { ... })` or,
+ * with a dynamic `[gateway]` segment, `callbackRoute(pay, gateway, options)`.
+ *
+ * The customer is always redirected (303) back to the service; the page they
+ * land on must read the payment from your database, never from the URL.
+ */
+export declare function callbackRoute(pay: Pay, gateway: string, options: CallbackRouteOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AACnC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC/C,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAUlD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,QAAQ,CAuBrE;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAiCjC;AAED,MAAM,MAAM,oBAAoB,GAAG;IACjC,sEAAsE;IACtE,WAAW,EAAE,MAAM,CAAA;IACnB,6EAA6E;IAC7E,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/D,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAC5D,CAAA;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,GAAG,EAAE,GAAG,EACR,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,oBAAoB,IAEf,SAAS,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC,CAkCnD"}

package/dist/http.js

@@ -0,0 +1,101 @@
+function escapeHtml(value) {
+    return value
+        .replaceAll("&", "&")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;")
+        .replaceAll('"', "&quot;");
+}
+/**
+ * Turns a checkout redirect into a web `Response`: a 303 for GET gateways and
+ * a tiny auto-submitting form page for POST gateways (Mellat).
+ */
+export function redirectResponse(redirect) {
+    if (redirect.method === "GET") {
+        return new Response(null, {
+            status: 303,
+            headers: { Location: redirect.url, "Cache-Control": "no-store" },
+        });
+    }
+    const fields = Object.entries(redirect.fields)
+        .map(([name, value]) => `<input type="hidden" name="${escapeHtml(name)}" value="${escapeHtml(value)}">`)
+        .join("");
+    const html = `<!doctype html><html lang="fa" dir="rtl"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>انتقال به درگاه پرداخت</title></head><body style="font-family:sans-serif;text-align:center;padding:3rem"><p>در حال انتقال به درگاه پرداخت…</p><form id="f" method="post" action="${escapeHtml(redirect.url)}">${fields}<noscript><button type="submit">ادامه پرداخت</button></noscript></form><script>document.getElementById("f").submit()</script></body></html>`;
+    return new Response(html, {
+        status: 200,
+        headers: {
+            "Content-Type": "text/html; charset=utf-8",
+            "Cache-Control": "no-store",
+        },
+    });
+}
+/**
+ * Reads a bank callback into a flat string map. Banks use GET queries, form
+ * posts, or JSON; all three are merged, with the body winning over the query.
+ */
+export async function readCallbackPayload(request) {
+    const payload = {};
+    new URL(request.url).searchParams.forEach((value, key) => {
+        payload[key] = value;
+    });
+    if (request.method === "GET" || request.method === "HEAD") {
+        return payload;
+    }
+    const type = request.headers.get("content-type") ?? "";
+    if (type.includes("application/json")) {
+        const body = (await request.json().catch(() => null));
+        for (const [key, value] of Object.entries(body ?? {})) {
+            if (value !== null && value !== undefined) {
+                payload[key] = String(value);
+            }
+        }
+    }
+    else {
+        const form = await request.formData().catch(() => null);
+        form?.forEach((value, key) => {
+            if (typeof value === "string") {
+                payload[key] = value;
+            }
+        });
+    }
+    return payload;
+}
+/**
+ * Builds a ready-to-export route handler for one gateway's callback. In a
+ * Next.js app: `export const GET = pay.callbackRoute("sadad", { ... })` or,
+ * with a dynamic `[gateway]` segment, `callbackRoute(pay, gateway, options)`.
+ *
+ * The customer is always redirected (303) back to the service; the page they
+ * land on must read the payment from your database, never from the URL.
+ */
+export function callbackRoute(pay, gateway, options) {
+    return async (request) => {
+        let target = options.fallbackUrl;
+        try {
+            const payload = await readCallbackPayload(request);
+            const { payment } = await pay.handleCallback(gateway, payload);
+            await options.onResult?.(payment);
+            const url = new URL(payment.returnUrl ?? options.fallbackUrl);
+            const query = options.buildQuery?.(payment) ?? {
+                reference: payment.reference,
+                status: payment.status,
+            };
+            for (const [key, value] of Object.entries(query)) {
+                url.searchParams.set(key, value);
+            }
+            target = url.toString();
+        }
+        catch (error) {
+            const url = new URL(options.fallbackUrl);
+            url.searchParams.set("status", "error");
+            url.searchParams.set("code", error instanceof Error && "code" in error
+                ? String(error.code)
+                : "UNKNOWN");
+            target = url.toString();
+        }
+        return new Response(null, {
+            status: 303,
+            headers: { Location: target, "Cache-Control": "no-store" },
+        });
+    };
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAIA,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,UAAU,CAAC,GAAG,EAAE,OAAO,CAAC;SACxB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC;SACvB,UAAU,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA0B;IACzD,IAAI,QAAQ,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;QAC9B,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,UAAU,EAAE;SACjE,CAAC,CAAA;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC;SAC3C,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,8BAA8B,UAAU,CAAC,IAAI,CAAC,YAAY,UAAU,CAAC,KAAK,CAAC,IAAI,CAClF;SACA,IAAI,CAAC,EAAE,CAAC,CAAA;IACX,MAAM,IAAI,GAAG,mUAAmU,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,MAAM,6IAA6I,CAAA;IAEhgB,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;QACxB,MAAM,EAAE,GAAG;QACX,OAAO,EAAE;YACP,cAAc,EAAE,0BAA0B;YAC1C,eAAe,EAAE,UAAU;SAC5B;KACF,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,OAAgB;IAEhB,MAAM,OAAO,GAA2B,EAAE,CAAA;IAE1C,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvD,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IACtB,CAAC,CAAC,CAAA;IAEF,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;IAEtD,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAG5C,CAAA;QACR,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACtD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC1C,OAAO,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QACvD,IAAI,EAAE,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAC3B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;gBAC9B,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;YACtB,CAAC;QACH,CAAC,CAAC,CAAA;IACJ,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC;AAWD;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,GAAQ,EACR,OAAe,EACf,OAA6B;IAE7B,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,IAAI,MAAM,GAAG,OAAO,CAAC,WAAW,CAAA;QAEhC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,OAAO,CAAC,CAAA;YAClD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,GAAG,CAAC,cAAc,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC9D,MAAM,OAAO,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAA;YAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,WAAW,CAAC,CAAA;YAC7D,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,IAAI;gBAC7C,SAAS,EAAE,OAAO,CAAC,SAAS;gBAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;aACvB,CAAA;YACD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;YAClC,CAAC;YACD,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;YACxC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAA;YACvC,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,MAAM,EACN,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK;gBACvC,CAAC,CAAC,MAAM,CAAE,KAA2B,CAAC,IAAI,CAAC;gBAC3C,CAAC,CAAC,SAAS,CACd,CAAA;YACD,MAAM,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAA;QACzB,CAAC;QAED,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE;YACxB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,UAAU,EAAE;SAC3D,CAAC,CAAA;IACJ,CAAC,CAAA;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,14 @@
+export { createPay, Pay } from "./pay.js";
+export type { CallbackResult, PayConfig, ReconcileSummary, StartedPayment, StartPaymentInput, } from "./pay.js";
+export { isPayError, PayError } from "./errors.js";
+export type { PayErrorCode } from "./errors.js";
+export { callbackRoute, readCallbackPayload, redirectResponse, } from "./http.js";
+export type { CallbackRouteOptions } from "./http.js";
+export { FinanceReporter, toSnapshot } from "./report.js";
+export type { FinanceEvent, PaymentSnapshot, PingResult, ReporterOptions, } from "./report.js";
+export { MemoryPaymentStore } from "./store.js";
+export type { InstallmentInfo, PaymentEnvironment, PaymentPatch, PaymentRecord, PaymentStatus, PaymentStore, } from "./store.js";
+export { digipayPaymentAdapter, mellatPaymentAdapter, sadadPaymentAdapter, zarinpalPaymentAdapter, } from "./gateways/index.js";
+export { PaymentProviderError } from "./types.js";
+export type { CheckoutRedirect, PaymentGatewayAdapter, PaymentGatewayDescriptor, PaymentGatewayKind, } from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AACzC,YAAY,EACV,cAAc,EACd,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,iBAAiB,GAClB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAClD,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,WAAW,CAAA;AAClB,YAAY,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AACrD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACzD,YAAY,EACV,YAAY,EACZ,eAAe,EACf,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAC/C,YAAY,EACV,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,aAAa,EACb,aAAa,EACb,YAAY,GACb,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA;AACjD,YAAY,EACV,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,YAAY,CAAA"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export { createPay, Pay } from "./pay.js";
+export { isPayError, PayError } from "./errors.js";
+export { callbackRoute, readCallbackPayload, redirectResponse, } from "./http.js";
+export { FinanceReporter, toSnapshot } from "./report.js";
+export { MemoryPaymentStore } from "./store.js";
+export { digipayPaymentAdapter, mellatPaymentAdapter, sadadPaymentAdapter, zarinpalPaymentAdapter, } from "./gateways/index.js";
+export { PaymentProviderError } from "./types.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,UAAU,CAAA;AAQzC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAElD,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,WAAW,CAAA;AAElB,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAOzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAA;AAS/C,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAA"}

package/dist/pay.d.ts

@@ -0,0 +1,114 @@
+import { type ReporterOptions } from "./report.js";
+import type { PaymentEnvironment, PaymentRecord, PaymentStore } from "./store.js";
+import { type CheckoutRedirect, type PaymentGatewayAdapter, type PaymentGatewayDescriptor } from "./types.js";
+export type PayConfig = {
+    /** Short stable id of this service, e.g. `afarin`. Sent to gateways. */
+    service: string;
+    store: PaymentStore;
+    /**
+     * Public origin of this service, e.g. `https://afarinai.ir`. The bank
+     * sends customers back to `${baseUrl}${callbackPath}`.
+     */
+    baseUrl: string;
+    /** Callback path template. `{gateway}` is replaced. */
+    callbackPath?: string;
+    /**
+     * Gateways to offer. Defaults to every built-in gateway that has
+     * credentials in the environment.
+     */
+    gateways?: Array<string | PaymentGatewayAdapter>;
+    defaultGateway?: string;
+    /** `live` (default) or `test`. Sent to OBH so reports can separate them. */
+    environment?: PaymentEnvironment;
+    /**
+     * Finance reporting to OBH. Defaults to `OBH_BASE_URL` + `OBH_SERVICE_KEY`
+     * from the environment; pass `false` to turn reporting off.
+     */
+    report?: ReporterOptions | false;
+    /** Minutes before a pending payment with no callback is expired. */
+    pendingTtlMinutes?: number;
+    /** Called when reporting to OBH fails. Payments are never blocked by it. */
+    onReportError?: (error: unknown, payment: PaymentRecord) => void;
+};
+export type StartPaymentInput = {
+    /** Your own order id. One order can have several attempts. */
+    orderId: string;
+    /** Whole Rials, as a digit string or number. */
+    amount: string | number;
+    description: string;
+    gateway?: string;
+    /** Where the customer lands after the callback is processed. */
+    returnUrl?: string;
+    /** Required by installment gateways (Digipay): `09xxxxxxxxx`. */
+    customerMobile?: string;
+    metadata?: Record<string, unknown>;
+};
+export type StartedPayment = {
+    payment: PaymentRecord;
+    /** Send the customer's browser here. */
+    redirect: CheckoutRedirect;
+    /** True when an existing open session for the same order was reused. */
+    reused: boolean;
+};
+export type CallbackResult = {
+    payment: PaymentRecord;
+    /** True when the payment was already final and nothing changed. */
+    replayed: boolean;
+};
+export type ReconcileSummary = {
+    expired: number;
+    reverified: number;
+    reported: number;
+};
+export declare class Pay {
+    readonly store: PaymentStore;
+    private readonly config;
+    private readonly adapters;
+    private readonly reporter;
+    private readonly environment;
+    private readonly pendingTtlMs;
+    constructor(config: PayConfig);
+    private createReporter;
+    /** Gateways this service can offer right now. */
+    listGateways(): Array<PaymentGatewayDescriptor & {
+        isDefault: boolean;
+    }>;
+    /** Checks the OBH credential and connectivity. Throws on failure. */
+    pingObh(): Promise<import("./report.js").PingResult>;
+    private defaultGatewayCode;
+    private getAdapter;
+    private callbackUrl;
+    /**
+     * Opens a payment session at the chosen gateway and returns where to send
+     * the customer. The attempt is stored before the gateway is called so a
+     * fast callback can always find it.
+     */
+    start(input: StartPaymentInput): Promise<StartedPayment>;
+    /**
+     * Processes the request the bank sends the customer back with: finds the
+     * payment, verifies it server-to-server and records the outcome. Safe to
+     * call twice; the second call returns the final payment unchanged.
+     */
+    handleCallback(gateway: string, payload: Record<string, string | null | undefined>): Promise<CallbackResult>;
+    /** Verifies a pending payment with the gateway and records the result. */
+    private verify;
+    private finish;
+    get(reference: string): Promise<PaymentRecord | null>;
+    /**
+     * Verifies a still-pending payment again, now. Use it when the customer
+     * is back (result page, "check again") and the first verify did not come
+     * back with an answer. Only payments whose bank callback arrived are
+     * verified; anything else is returned unchanged.
+     */
+    recheck(reference: string): Promise<PaymentRecord | null>;
+    /**
+     * Housekeeping to run every few minutes (cron, queue, or a scheduled
+     * route): expires abandoned sessions, retries verifies that hit a network
+     * error, and re-sends reports OBH has not acknowledged.
+     */
+    reconcile(limit?: number): Promise<ReconcileSummary>;
+    /** Sends one snapshot to OBH. Returns true when OBH acknowledged it. */
+    private report;
+}
+export declare function createPay(config: PayConfig): Pay;
+//# sourceMappingURL=pay.d.ts.map

package/dist/pay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pay.d.ts","sourceRoot":"","sources":["../src/pay.ts"],"names":[],"mappings":"AASA,OAAO,EAAmB,KAAK,eAAe,EAAE,MAAM,aAAa,CAAA;AACnE,OAAO,KAAK,EAEV,kBAAkB,EAClB,aAAa,EAEb,YAAY,EACb,MAAM,YAAY,CAAA;AACnB,OAAO,EAEL,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC1B,KAAK,wBAAwB,EAC9B,MAAM,YAAY,CAAA;AAWnB,MAAM,MAAM,SAAS,GAAG;IACtB,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,YAAY,CAAA;IACnB;;;OAGG;IACH,OAAO,EAAE,MAAM,CAAA;IACf,uDAAuD;IACvD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;OAGG;IACH,QAAQ,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,CAAA;IAChD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,4EAA4E;IAC5E,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC;;;OAGG;IACH,MAAM,CAAC,EAAE,eAAe,GAAG,KAAK,CAAA;IAChC,oEAAoE;IACpE,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,4EAA4E;IAC5E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,KAAK,IAAI,CAAA;CACjE,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,8DAA8D;IAC9D,OAAO,EAAE,MAAM,CAAA;IACf,gDAAgD;IAChD,MAAM,EAAE,MAAM,GAAG,MAAM,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CACnC,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,aAAa,CAAA;IACtB,wCAAwC;IACxC,QAAQ,EAAE,gBAAgB,CAAA;IAC1B,wEAAwE;IACxE,MAAM,EAAE,OAAO,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,aAAa,CAAA;IACtB,mEAAmE;IACnE,QAAQ,EAAE,OAAO,CAAA;CAClB,CAAA;AAED,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;CACjB,CAAA;AAoBD,qBAAa,GAAG;IACd,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAA;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAW;IAClC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA2C;IACpE,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAwB;IACjD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;gBAEzB,MAAM,EAAE,SAAS;IA+B7B,OAAO,CAAC,cAAc;IActB,iDAAiD;IACjD,YAAY,IAAI,KAAK,CAAC,wBAAwB,GAAG;QAAE,SAAS,EAAE,OAAO,CAAA;KAAE,CAAC;IAUxE,qEAAqE;IAC/D,OAAO;IAUb,OAAO,CAAC,kBAAkB;IAa1B,OAAO,CAAC,UAAU;IAelB,OAAO,CAAC,WAAW;IAMnB;;;;OAIG;IACG,KAAK,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,cAAc,CAAC;IA4J9D;;;;OAIG;IACG,cAAc,CAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,GACjD,OAAO,CAAC,cAAc,CAAC;IA2D1B,0EAA0E;YAC5D,MAAM;YA+DN,MAAM;IAoBd,GAAG,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI3D;;;;;OAKG;IACG,OAAO,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAQ/D;;;;OAIG;IACG,SAAS,CAAC,KAAK,SAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwCvD,wEAAwE;YAC1D,MAAM;CAiBrB;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,SAAS,OAE1C"}