@pandait.tech/payment-deuna 1.0.0 → 2.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.cjs +7 -5
- package/dist/index.cjs.map +1 -1
- package/dist/index.d.cts +70 -7
- package/dist/index.d.ts +70 -7
- package/dist/index.js +7 -5
- package/dist/index.js.map +1 -1
- package/package.json +2 -2
package/dist/index.cjs
CHANGED
|
@@ -50,7 +50,6 @@ function toConfirmResult(s) {
|
|
|
50
50
|
return { status: "pending" };
|
|
51
51
|
}
|
|
52
52
|
function toDeUnaPaymentMethod(client, opts) {
|
|
53
|
-
const processed = opts?.processedRefs ?? /* @__PURE__ */ new Set();
|
|
54
53
|
return {
|
|
55
54
|
id: "deuna",
|
|
56
55
|
label: "DeUna (wallet QR \xB7 Banco Pichincha)",
|
|
@@ -72,14 +71,17 @@ function toDeUnaPaymentMethod(client, opts) {
|
|
|
72
71
|
if (opts?.onConfirm) return opts.onConfirm(ref);
|
|
73
72
|
return toConfirmResult(await client.getStatus(ref));
|
|
74
73
|
},
|
|
74
|
+
// El estado se consulta SIEMPRE, a propósito: DeUna no firma webhooks de entrada
|
|
75
|
+
// (el clientSecret es un header de salida hacia su API, no verificación de entrada),
|
|
76
|
+
// así que el status del payload no es de fiar (cualquiera que conozca la URL podría
|
|
77
|
+
// enviar "pagado"). La decisión sale siempre de client.getStatus(orderId); también
|
|
78
|
+
// cubre el webhook repetido con estado revertido (pagado → expirado).
|
|
75
79
|
async handleWebhook(payload) {
|
|
76
80
|
const p = payload;
|
|
77
81
|
const orderId = p?.orderRef;
|
|
78
82
|
if (!orderId) return { handled: false };
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
if (status !== PAID_STATUS) return { handled: false };
|
|
82
|
-
processed.add(orderId);
|
|
83
|
+
const status = (await client.getStatus(orderId)).status;
|
|
84
|
+
if (status !== PAID_STATUS) return { handled: false, orderId };
|
|
83
85
|
return { handled: true, orderId };
|
|
84
86
|
}
|
|
85
87
|
};
|
package/dist/index.cjs.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../src/client.ts","../src/adapter.ts"],"names":[],"mappings":";;;AAuDO,SAAS,kBAAkB,MAAA,EAAkC;AAClE,EAAA,MAAM,IAAA,GAAO,OAAO,OAAA,IAAW,yBAAA;AAC/B,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,eAAe,MAAA,CAAO,QAAA;AAAA,IACtB,mBAAmB,MAAA,CAAO,YAAA;AAAA,IAC1B,cAAA,EAAgB;AAAA,GAClB;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,OAAA,CAAQ,MAAA,EAAQ,IAAA,GAAO,IAAA,EAAM;AACjC,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,iBAAA,CAAA,EAAqB;AAAA,QAClD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,UAAU,MAAA,CAAO,QAAA;AAAA,UACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,QAAA,EAAU,KAAA;AAAA,UACV,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,QAAA;AAAA,UAC1C,IAAA;AAAA,UACA,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,WAAW,MAAA,CAAO;AAAA,SACnB;AAAA,OACF,CAAA;AACD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MACxD;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB,CAAA;AAAA,IAEA,MAAM,UAAU,QAAA,EAAU;AACxB,MAAA,MAAM,MAAM,CAAA,EAAG,IAAI,CAAA,0BAAA,EAA6B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAC5E,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAA;AACvD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MAC1D;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB;AAAA,GACF;AACF;;;ACzEA,IAAM,WAAA,GAAc,MAAA;AAEpB,SAAS,gBAAgB,CAAA,EAAqC;AAC5D,EAAA,IAAI,CAAA,CAAE,WAAW,WAAA,EAAa,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,aAAA,EAAe,CAAA,CAAE,aAAA,EAAc;AACtF,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,MAAA,KAAW,SAAA;AACxC,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAO,CAAA,CAAE,OAAA,IAAW,EAAE,MAAA,EAAO;AAC1D,EAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAC7B;
|
|
1
|
+
{"version":3,"sources":["../src/client.ts","../src/adapter.ts"],"names":[],"mappings":";;;AAuDO,SAAS,kBAAkB,MAAA,EAAkC;AAClE,EAAA,MAAM,IAAA,GAAO,OAAO,OAAA,IAAW,yBAAA;AAC/B,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,eAAe,MAAA,CAAO,QAAA;AAAA,IACtB,mBAAmB,MAAA,CAAO,YAAA;AAAA,IAC1B,cAAA,EAAgB;AAAA,GAClB;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,OAAA,CAAQ,MAAA,EAAQ,IAAA,GAAO,IAAA,EAAM;AACjC,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,iBAAA,CAAA,EAAqB;AAAA,QAClD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,UAAU,MAAA,CAAO,QAAA;AAAA,UACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,QAAA,EAAU,KAAA;AAAA,UACV,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,QAAA;AAAA,UAC1C,IAAA;AAAA,UACA,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,WAAW,MAAA,CAAO;AAAA,SACnB;AAAA,OACF,CAAA;AACD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MACxD;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB,CAAA;AAAA,IAEA,MAAM,UAAU,QAAA,EAAU;AACxB,MAAA,MAAM,MAAM,CAAA,EAAG,IAAI,CAAA,0BAAA,EAA6B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAC5E,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAA;AACvD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MAC1D;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB;AAAA,GACF;AACF;;;ACzEA,IAAM,WAAA,GAAc,MAAA;AAEpB,SAAS,gBAAgB,CAAA,EAAqC;AAC5D,EAAA,IAAI,CAAA,CAAE,WAAW,WAAA,EAAa,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,aAAA,EAAe,CAAA,CAAE,aAAA,EAAc;AACtF,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,MAAA,KAAW,SAAA;AACxC,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAO,CAAA,CAAE,OAAA,IAAW,EAAE,MAAA,EAAO;AAC1D,EAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAC7B;AAcO,SAAS,oBAAA,CACd,QACA,IAAA,EACe;AACf,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,KAAA,EAAO,wCAAA;AAAA,IAEP,MAAM,QAAQ,KAAA,EAAgD;AAC5D,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,OAAA,CAAQ;AAAA,QAClC,UAAU,KAAA,CAAM,EAAA;AAAA,QAChB,QAAQ,KAAA,CAAM,KAAA;AAAA,QACd,WAAA,EAAa,CAAA,MAAA,EAAS,KAAA,CAAM,EAAE,CAAA;AAAA,OAC/B,CAAA;AAED,MAAA,OAAO;AAAA,QACL,WAAW,MAAA,CAAO,SAAA;AAAA,QAClB,YAAY,MAAA,CAAO,UAAA;AAAA,QACnB,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,eAAe,MAAA,CAAO,aAAA;AAAA,QACtB,SAAS,KAAA,CAAM;AAAA,OACjB;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,QAAQ,GAAA,EAAqC;AACjD,MAAA,IAAI,IAAA,EAAM,SAAA,EAAW,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAC9C,MAAA,OAAO,eAAA,CAAgB,MAAM,MAAA,CAAO,SAAA,CAAU,GAAG,CAAC,CAAA;AAAA,IACpD,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,cAAc,OAAA,EAA0C;AAC5D,MAAA,MAAM,CAAA,GAAI,OAAA;AACV,MAAA,MAAM,UAAU,CAAA,EAAG,QAAA;AACnB,MAAA,IAAI,CAAC,OAAA,EAAS,OAAO,EAAE,SAAS,KAAA,EAAM;AAEtC,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,SAAA,CAAU,OAAO,CAAA,EAAG,MAAA;AAEjD,MAAA,IAAI,WAAW,WAAA,EAAa,OAAO,EAAE,OAAA,EAAS,OAAO,OAAA,EAAQ;AAE7D,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAQ;AAAA,IAClC;AAAA,GACF;AACF","file":"index.cjs","sourcesContent":["// DeUna (Banco Pichincha) — cliente HTTP mínimo\n// Wallet QR: genera QR dinámico o link de pago y consulta estado del cobro.\n\nexport interface DeUnaConfig {\n /** Client ID del comercio (DEUNA_CLIENT_ID). */\n clientId: string;\n /** Client Secret del comercio (DEUNA_CLIENT_SECRET). */\n clientSecret: string;\n /** URL a la que DeUna notificará el resultado del pago (webhook). */\n webhookUrl: string;\n /** URL de retorno después del pago (para link/código). */\n returnUrl: string;\n /** ponytail: base URL sobreescribible para tests/staging. */\n baseUrl?: string;\n}\n\nexport interface PrepareParams {\n /** Referencia única de la orden. */\n orderRef: string;\n /** Monto total en la moneda del comercio (USD). */\n amount: number;\n /** Descripción del pedido (aparece en la pantalla del wallet). */\n description?: string;\n}\n\n/** Modos de cobro que DeUna soporta. */\nexport type DeUnaPrepareMode = \"qr\" | \"link\" | \"code\";\n\nexport interface PrepareResponse {\n /** Payload del QR dinámico (string para que la UI genere la imagen). */\n qrPayload?: string;\n /** Link de pago (alternativa al QR). */\n paymentUrl?: string;\n /** Código único de 6 dígitos. */\n paymentCode?: string;\n /** ID interno de la transacción en DeUna. */\n transactionId: string;\n}\n\nexport interface TransactionStatus {\n transactionId: string;\n orderRef: string;\n /** \"PAID\" | \"PENDING\" | \"FAILED\" | \"EXPIRED\" */\n status: string;\n authorizationCode?: string;\n message?: string;\n}\n\nexport interface DeUnaClient {\n /** Genera un QR dinámico (y opcionalmente link/código) para cobrar la orden. */\n prepare(params: PrepareParams, mode?: DeUnaPrepareMode): Promise<PrepareResponse>;\n /** Consulta el estado actual de la transacción por orderRef. */\n getStatus(orderRef: string): Promise<TransactionStatus>;\n}\n\nexport function createDeUnaClient(config: DeUnaConfig): DeUnaClient {\n const base = config.baseUrl ?? \"https://api.deuna.io/v1\";\n const headers = {\n \"X-Client-Id\": config.clientId,\n \"X-Client-Secret\": config.clientSecret,\n \"Content-Type\": \"application/json\",\n };\n\n return {\n async prepare(params, mode = \"qr\") {\n const res = await fetch(`${base}/payments/prepare`, {\n method: \"POST\",\n headers,\n body: JSON.stringify({\n orderRef: params.orderRef,\n amount: params.amount,\n currency: \"USD\",\n description: params.description ?? params.orderRef,\n mode,\n webhookUrl: config.webhookUrl,\n returnUrl: config.returnUrl,\n }),\n });\n if (!res.ok) {\n const text = await res.text().catch(() => \"\");\n throw new Error(`DeUna prepare ${res.status}: ${text}`);\n }\n return res.json() as Promise<PrepareResponse>;\n },\n\n async getStatus(orderRef) {\n const url = `${base}/payments/status?orderRef=${encodeURIComponent(orderRef)}`;\n const res = await fetch(url, { method: \"GET\", headers });\n if (!res.ok) {\n const text = await res.text().catch(() => \"\");\n throw new Error(`DeUna getStatus ${res.status}: ${text}`);\n }\n return res.json() as Promise<TransactionStatus>;\n },\n };\n}\n","// Tipos estructuralmente compatibles con payment-core (sin importarlo — evita ciclo).\nimport type { Order } from \"@pandait.tech/commerce-core\";\nimport type { DeUnaClient, TransactionStatus } from \"./client.js\";\n\ninterface ConfirmResult {\n status: \"paid\" | \"pending\" | \"failed\" | \"challenge\";\n transactionId?: string;\n redirectUrl?: string;\n error?: string;\n}\ninterface WebhookResult {\n handled: boolean;\n orderId?: string;\n}\ninterface PaymentMethod {\n id: string;\n label: string;\n prepare(order: Order): Promise<Record<string, unknown>>;\n confirm(ref: string): Promise<ConfirmResult>;\n handleWebhook(payload: unknown): Promise<WebhookResult>;\n}\n\nconst PAID_STATUS = \"PAID\";\n\nfunction toConfirmResult(s: TransactionStatus): ConfirmResult {\n if (s.status === PAID_STATUS) return { status: \"paid\", transactionId: s.transactionId };\n if (s.status === \"FAILED\" || s.status === \"EXPIRED\")\n return { status: \"failed\", error: s.message ?? s.status };\n return { status: \"pending\" };\n}\n\nexport interface DeUnaWebhookPayload {\n orderRef?: string;\n transactionId?: string;\n status?: string;\n authorizationCode?: string;\n}\n\nexport interface DeUnaPaymentMethodOpts {\n /** Override de confirm para entornos sin acceso directo a la API (tests, staging). */\n onConfirm?: (ref: string) => Promise<ConfirmResult>;\n}\n\nexport function toDeUnaPaymentMethod(\n client: DeUnaClient,\n opts?: DeUnaPaymentMethodOpts,\n): PaymentMethod {\n return {\n id: \"deuna\",\n label: \"DeUna (wallet QR · Banco Pichincha)\",\n\n async prepare(order: Order): Promise<Record<string, unknown>> {\n const result = await client.prepare({\n orderRef: order.id,\n amount: order.total,\n description: `Orden ${order.id}`,\n });\n // Devuelve el payload/string del QR — la UI genera la imagen (ponytail: no generar aquí).\n return {\n qrPayload: result.qrPayload,\n paymentUrl: result.paymentUrl,\n paymentCode: result.paymentCode,\n transactionId: result.transactionId,\n orderId: order.id,\n };\n },\n\n async confirm(ref: string): Promise<ConfirmResult> {\n if (opts?.onConfirm) return opts.onConfirm(ref);\n return toConfirmResult(await client.getStatus(ref));\n },\n\n // El estado se consulta SIEMPRE, a propósito: DeUna no firma webhooks de entrada\n // (el clientSecret es un header de salida hacia su API, no verificación de entrada),\n // así que el status del payload no es de fiar (cualquiera que conozca la URL podría\n // enviar \"pagado\"). La decisión sale siempre de client.getStatus(orderId); también\n // cubre el webhook repetido con estado revertido (pagado → expirado).\n async handleWebhook(payload: unknown): Promise<WebhookResult> {\n const p = payload as DeUnaWebhookPayload | null;\n const orderId = p?.orderRef;\n if (!orderId) return { handled: false };\n\n const status = (await client.getStatus(orderId)).status;\n\n if (status !== PAID_STATUS) return { handled: false, orderId };\n\n return { handled: true, orderId };\n },\n };\n}\n"]}
|
package/dist/index.d.cts
CHANGED
|
@@ -1,5 +1,3 @@
|
|
|
1
|
-
import { Order } from '@pandait.tech/commerce-core';
|
|
2
|
-
|
|
3
1
|
interface DeUnaConfig {
|
|
4
2
|
/** Client ID del comercio (DEUNA_CLIENT_ID). */
|
|
5
3
|
clientId: string;
|
|
@@ -48,6 +46,76 @@ interface DeUnaClient {
|
|
|
48
46
|
}
|
|
49
47
|
declare function createDeUnaClient(config: DeUnaConfig): DeUnaClient;
|
|
50
48
|
|
|
49
|
+
interface FirestoreTimestamp {
|
|
50
|
+
toMillis(): number;
|
|
51
|
+
toDate(): Date;
|
|
52
|
+
seconds: number;
|
|
53
|
+
nanoseconds: number;
|
|
54
|
+
}
|
|
55
|
+
|
|
56
|
+
/** Shipping address captured at checkout and stored on the order. */
|
|
57
|
+
interface ShippingAddress {
|
|
58
|
+
fullName: string;
|
|
59
|
+
phone: string;
|
|
60
|
+
address: string;
|
|
61
|
+
city: string;
|
|
62
|
+
province: string;
|
|
63
|
+
postalCode: string;
|
|
64
|
+
country: string;
|
|
65
|
+
}
|
|
66
|
+
/** Buyer details captured for guest (unauthenticated) checkout. */
|
|
67
|
+
interface GuestInfo {
|
|
68
|
+
firstName: string;
|
|
69
|
+
lastName: string;
|
|
70
|
+
idNumber: string;
|
|
71
|
+
email: string;
|
|
72
|
+
phone: string;
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
type PromotionType = "percentage" | "fixed_amount" | "free_shipping";
|
|
76
|
+
|
|
77
|
+
type OrderStatus = "pending" | "processing"
|
|
78
|
+
/** Bank-transfer orders awaiting the customer's payment proof. */
|
|
79
|
+
| "awaiting_payment_proof" | "paid" | "shipped" | "delivered" | "cancelled" | "failed" | "refunded"
|
|
80
|
+
/** Intermediate Nuvei 3DS / OTP states (see @pandait.tech/payment-nuvei). */
|
|
81
|
+
| "3ds-pending" | "otp-pending";
|
|
82
|
+
interface OrderItem {
|
|
83
|
+
productId: string;
|
|
84
|
+
name: string;
|
|
85
|
+
price: number;
|
|
86
|
+
quantity: number;
|
|
87
|
+
/** Set when the purchased unit is a specific variant. */
|
|
88
|
+
variantSku?: string;
|
|
89
|
+
variantName?: string;
|
|
90
|
+
image?: string;
|
|
91
|
+
}
|
|
92
|
+
interface Order {
|
|
93
|
+
id: string;
|
|
94
|
+
userId: string;
|
|
95
|
+
items: OrderItem[];
|
|
96
|
+
subtotal: number;
|
|
97
|
+
vat: number;
|
|
98
|
+
shipping: number;
|
|
99
|
+
total: number;
|
|
100
|
+
status: OrderStatus;
|
|
101
|
+
/** Eligible payment method id, e.g. "nuvei" | "bank-transfer". */
|
|
102
|
+
paymentMethod?: string;
|
|
103
|
+
paymentToken?: string;
|
|
104
|
+
paymentTransactionId?: string;
|
|
105
|
+
authorizationCode?: string;
|
|
106
|
+
cardBrand?: string;
|
|
107
|
+
cardLast4?: string;
|
|
108
|
+
shippingAddress: ShippingAddress;
|
|
109
|
+
discount?: number;
|
|
110
|
+
couponCode?: string;
|
|
111
|
+
promotionId?: string;
|
|
112
|
+
discountType?: PromotionType;
|
|
113
|
+
/** Present for guest (unauthenticated) checkout. */
|
|
114
|
+
guestInfo?: GuestInfo;
|
|
115
|
+
createdAt: FirestoreTimestamp;
|
|
116
|
+
updatedAt: FirestoreTimestamp;
|
|
117
|
+
}
|
|
118
|
+
|
|
51
119
|
interface ConfirmResult {
|
|
52
120
|
status: "paid" | "pending" | "failed" | "challenge";
|
|
53
121
|
transactionId?: string;
|
|
@@ -72,11 +140,6 @@ interface DeUnaWebhookPayload {
|
|
|
72
140
|
authorizationCode?: string;
|
|
73
141
|
}
|
|
74
142
|
interface DeUnaPaymentMethodOpts {
|
|
75
|
-
/**
|
|
76
|
-
* Set inyectable para idempotencia de webhooks.
|
|
77
|
-
* ponytail: en memoria por defecto; reemplaza con persistencia en DB para multi-instancia.
|
|
78
|
-
*/
|
|
79
|
-
processedRefs?: Set<string>;
|
|
80
143
|
/** Override de confirm para entornos sin acceso directo a la API (tests, staging). */
|
|
81
144
|
onConfirm?: (ref: string) => Promise<ConfirmResult>;
|
|
82
145
|
}
|
package/dist/index.d.ts
CHANGED
|
@@ -1,5 +1,3 @@
|
|
|
1
|
-
import { Order } from '@pandait.tech/commerce-core';
|
|
2
|
-
|
|
3
1
|
interface DeUnaConfig {
|
|
4
2
|
/** Client ID del comercio (DEUNA_CLIENT_ID). */
|
|
5
3
|
clientId: string;
|
|
@@ -48,6 +46,76 @@ interface DeUnaClient {
|
|
|
48
46
|
}
|
|
49
47
|
declare function createDeUnaClient(config: DeUnaConfig): DeUnaClient;
|
|
50
48
|
|
|
49
|
+
interface FirestoreTimestamp {
|
|
50
|
+
toMillis(): number;
|
|
51
|
+
toDate(): Date;
|
|
52
|
+
seconds: number;
|
|
53
|
+
nanoseconds: number;
|
|
54
|
+
}
|
|
55
|
+
|
|
56
|
+
/** Shipping address captured at checkout and stored on the order. */
|
|
57
|
+
interface ShippingAddress {
|
|
58
|
+
fullName: string;
|
|
59
|
+
phone: string;
|
|
60
|
+
address: string;
|
|
61
|
+
city: string;
|
|
62
|
+
province: string;
|
|
63
|
+
postalCode: string;
|
|
64
|
+
country: string;
|
|
65
|
+
}
|
|
66
|
+
/** Buyer details captured for guest (unauthenticated) checkout. */
|
|
67
|
+
interface GuestInfo {
|
|
68
|
+
firstName: string;
|
|
69
|
+
lastName: string;
|
|
70
|
+
idNumber: string;
|
|
71
|
+
email: string;
|
|
72
|
+
phone: string;
|
|
73
|
+
}
|
|
74
|
+
|
|
75
|
+
type PromotionType = "percentage" | "fixed_amount" | "free_shipping";
|
|
76
|
+
|
|
77
|
+
type OrderStatus = "pending" | "processing"
|
|
78
|
+
/** Bank-transfer orders awaiting the customer's payment proof. */
|
|
79
|
+
| "awaiting_payment_proof" | "paid" | "shipped" | "delivered" | "cancelled" | "failed" | "refunded"
|
|
80
|
+
/** Intermediate Nuvei 3DS / OTP states (see @pandait.tech/payment-nuvei). */
|
|
81
|
+
| "3ds-pending" | "otp-pending";
|
|
82
|
+
interface OrderItem {
|
|
83
|
+
productId: string;
|
|
84
|
+
name: string;
|
|
85
|
+
price: number;
|
|
86
|
+
quantity: number;
|
|
87
|
+
/** Set when the purchased unit is a specific variant. */
|
|
88
|
+
variantSku?: string;
|
|
89
|
+
variantName?: string;
|
|
90
|
+
image?: string;
|
|
91
|
+
}
|
|
92
|
+
interface Order {
|
|
93
|
+
id: string;
|
|
94
|
+
userId: string;
|
|
95
|
+
items: OrderItem[];
|
|
96
|
+
subtotal: number;
|
|
97
|
+
vat: number;
|
|
98
|
+
shipping: number;
|
|
99
|
+
total: number;
|
|
100
|
+
status: OrderStatus;
|
|
101
|
+
/** Eligible payment method id, e.g. "nuvei" | "bank-transfer". */
|
|
102
|
+
paymentMethod?: string;
|
|
103
|
+
paymentToken?: string;
|
|
104
|
+
paymentTransactionId?: string;
|
|
105
|
+
authorizationCode?: string;
|
|
106
|
+
cardBrand?: string;
|
|
107
|
+
cardLast4?: string;
|
|
108
|
+
shippingAddress: ShippingAddress;
|
|
109
|
+
discount?: number;
|
|
110
|
+
couponCode?: string;
|
|
111
|
+
promotionId?: string;
|
|
112
|
+
discountType?: PromotionType;
|
|
113
|
+
/** Present for guest (unauthenticated) checkout. */
|
|
114
|
+
guestInfo?: GuestInfo;
|
|
115
|
+
createdAt: FirestoreTimestamp;
|
|
116
|
+
updatedAt: FirestoreTimestamp;
|
|
117
|
+
}
|
|
118
|
+
|
|
51
119
|
interface ConfirmResult {
|
|
52
120
|
status: "paid" | "pending" | "failed" | "challenge";
|
|
53
121
|
transactionId?: string;
|
|
@@ -72,11 +140,6 @@ interface DeUnaWebhookPayload {
|
|
|
72
140
|
authorizationCode?: string;
|
|
73
141
|
}
|
|
74
142
|
interface DeUnaPaymentMethodOpts {
|
|
75
|
-
/**
|
|
76
|
-
* Set inyectable para idempotencia de webhooks.
|
|
77
|
-
* ponytail: en memoria por defecto; reemplaza con persistencia en DB para multi-instancia.
|
|
78
|
-
*/
|
|
79
|
-
processedRefs?: Set<string>;
|
|
80
143
|
/** Override de confirm para entornos sin acceso directo a la API (tests, staging). */
|
|
81
144
|
onConfirm?: (ref: string) => Promise<ConfirmResult>;
|
|
82
145
|
}
|
package/dist/index.js
CHANGED
|
@@ -48,7 +48,6 @@ function toConfirmResult(s) {
|
|
|
48
48
|
return { status: "pending" };
|
|
49
49
|
}
|
|
50
50
|
function toDeUnaPaymentMethod(client, opts) {
|
|
51
|
-
const processed = opts?.processedRefs ?? /* @__PURE__ */ new Set();
|
|
52
51
|
return {
|
|
53
52
|
id: "deuna",
|
|
54
53
|
label: "DeUna (wallet QR \xB7 Banco Pichincha)",
|
|
@@ -70,14 +69,17 @@ function toDeUnaPaymentMethod(client, opts) {
|
|
|
70
69
|
if (opts?.onConfirm) return opts.onConfirm(ref);
|
|
71
70
|
return toConfirmResult(await client.getStatus(ref));
|
|
72
71
|
},
|
|
72
|
+
// El estado se consulta SIEMPRE, a propósito: DeUna no firma webhooks de entrada
|
|
73
|
+
// (el clientSecret es un header de salida hacia su API, no verificación de entrada),
|
|
74
|
+
// así que el status del payload no es de fiar (cualquiera que conozca la URL podría
|
|
75
|
+
// enviar "pagado"). La decisión sale siempre de client.getStatus(orderId); también
|
|
76
|
+
// cubre el webhook repetido con estado revertido (pagado → expirado).
|
|
73
77
|
async handleWebhook(payload) {
|
|
74
78
|
const p = payload;
|
|
75
79
|
const orderId = p?.orderRef;
|
|
76
80
|
if (!orderId) return { handled: false };
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
if (status !== PAID_STATUS) return { handled: false };
|
|
80
|
-
processed.add(orderId);
|
|
81
|
+
const status = (await client.getStatus(orderId)).status;
|
|
82
|
+
if (status !== PAID_STATUS) return { handled: false, orderId };
|
|
81
83
|
return { handled: true, orderId };
|
|
82
84
|
}
|
|
83
85
|
};
|
package/dist/index.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"sources":["../src/client.ts","../src/adapter.ts"],"names":[],"mappings":";AAuDO,SAAS,kBAAkB,MAAA,EAAkC;AAClE,EAAA,MAAM,IAAA,GAAO,OAAO,OAAA,IAAW,yBAAA;AAC/B,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,eAAe,MAAA,CAAO,QAAA;AAAA,IACtB,mBAAmB,MAAA,CAAO,YAAA;AAAA,IAC1B,cAAA,EAAgB;AAAA,GAClB;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,OAAA,CAAQ,MAAA,EAAQ,IAAA,GAAO,IAAA,EAAM;AACjC,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,iBAAA,CAAA,EAAqB;AAAA,QAClD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,UAAU,MAAA,CAAO,QAAA;AAAA,UACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,QAAA,EAAU,KAAA;AAAA,UACV,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,QAAA;AAAA,UAC1C,IAAA;AAAA,UACA,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,WAAW,MAAA,CAAO;AAAA,SACnB;AAAA,OACF,CAAA;AACD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MACxD;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB,CAAA;AAAA,IAEA,MAAM,UAAU,QAAA,EAAU;AACxB,MAAA,MAAM,MAAM,CAAA,EAAG,IAAI,CAAA,0BAAA,EAA6B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAC5E,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAA;AACvD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MAC1D;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB;AAAA,GACF;AACF;;;ACzEA,IAAM,WAAA,GAAc,MAAA;AAEpB,SAAS,gBAAgB,CAAA,EAAqC;AAC5D,EAAA,IAAI,CAAA,CAAE,WAAW,WAAA,EAAa,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,aAAA,EAAe,CAAA,CAAE,aAAA,EAAc;AACtF,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,MAAA,KAAW,SAAA;AACxC,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAO,CAAA,CAAE,OAAA,IAAW,EAAE,MAAA,EAAO;AAC1D,EAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAC7B;
|
|
1
|
+
{"version":3,"sources":["../src/client.ts","../src/adapter.ts"],"names":[],"mappings":";AAuDO,SAAS,kBAAkB,MAAA,EAAkC;AAClE,EAAA,MAAM,IAAA,GAAO,OAAO,OAAA,IAAW,yBAAA;AAC/B,EAAA,MAAM,OAAA,GAAU;AAAA,IACd,eAAe,MAAA,CAAO,QAAA;AAAA,IACtB,mBAAmB,MAAA,CAAO,YAAA;AAAA,IAC1B,cAAA,EAAgB;AAAA,GAClB;AAEA,EAAA,OAAO;AAAA,IACL,MAAM,OAAA,CAAQ,MAAA,EAAQ,IAAA,GAAO,IAAA,EAAM;AACjC,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,CAAA,EAAG,IAAI,CAAA,iBAAA,CAAA,EAAqB;AAAA,QAClD,MAAA,EAAQ,MAAA;AAAA,QACR,OAAA;AAAA,QACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,UACnB,UAAU,MAAA,CAAO,QAAA;AAAA,UACjB,QAAQ,MAAA,CAAO,MAAA;AAAA,UACf,QAAA,EAAU,KAAA;AAAA,UACV,WAAA,EAAa,MAAA,CAAO,WAAA,IAAe,MAAA,CAAO,QAAA;AAAA,UAC1C,IAAA;AAAA,UACA,YAAY,MAAA,CAAO,UAAA;AAAA,UACnB,WAAW,MAAA,CAAO;AAAA,SACnB;AAAA,OACF,CAAA;AACD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MACxD;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB,CAAA;AAAA,IAEA,MAAM,UAAU,QAAA,EAAU;AACxB,MAAA,MAAM,MAAM,CAAA,EAAG,IAAI,CAAA,0BAAA,EAA6B,kBAAA,CAAmB,QAAQ,CAAC,CAAA,CAAA;AAC5E,MAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,SAAS,CAAA;AACvD,MAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,QAAA,MAAM,OAAO,MAAM,GAAA,CAAI,MAAK,CAAE,KAAA,CAAM,MAAM,EAAE,CAAA;AAC5C,QAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gBAAA,EAAmB,IAAI,MAAM,CAAA,EAAA,EAAK,IAAI,CAAA,CAAE,CAAA;AAAA,MAC1D;AACA,MAAA,OAAO,IAAI,IAAA,EAAK;AAAA,IAClB;AAAA,GACF;AACF;;;ACzEA,IAAM,WAAA,GAAc,MAAA;AAEpB,SAAS,gBAAgB,CAAA,EAAqC;AAC5D,EAAA,IAAI,CAAA,CAAE,WAAW,WAAA,EAAa,OAAO,EAAE,MAAA,EAAQ,MAAA,EAAQ,aAAA,EAAe,CAAA,CAAE,aAAA,EAAc;AACtF,EAAA,IAAI,CAAA,CAAE,MAAA,KAAW,QAAA,IAAY,CAAA,CAAE,MAAA,KAAW,SAAA;AACxC,IAAA,OAAO,EAAE,MAAA,EAAQ,QAAA,EAAU,OAAO,CAAA,CAAE,OAAA,IAAW,EAAE,MAAA,EAAO;AAC1D,EAAA,OAAO,EAAE,QAAQ,SAAA,EAAU;AAC7B;AAcO,SAAS,oBAAA,CACd,QACA,IAAA,EACe;AACf,EAAA,OAAO;AAAA,IACL,EAAA,EAAI,OAAA;AAAA,IACJ,KAAA,EAAO,wCAAA;AAAA,IAEP,MAAM,QAAQ,KAAA,EAAgD;AAC5D,MAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,OAAA,CAAQ;AAAA,QAClC,UAAU,KAAA,CAAM,EAAA;AAAA,QAChB,QAAQ,KAAA,CAAM,KAAA;AAAA,QACd,WAAA,EAAa,CAAA,MAAA,EAAS,KAAA,CAAM,EAAE,CAAA;AAAA,OAC/B,CAAA;AAED,MAAA,OAAO;AAAA,QACL,WAAW,MAAA,CAAO,SAAA;AAAA,QAClB,YAAY,MAAA,CAAO,UAAA;AAAA,QACnB,aAAa,MAAA,CAAO,WAAA;AAAA,QACpB,eAAe,MAAA,CAAO,aAAA;AAAA,QACtB,SAAS,KAAA,CAAM;AAAA,OACjB;AAAA,IACF,CAAA;AAAA,IAEA,MAAM,QAAQ,GAAA,EAAqC;AACjD,MAAA,IAAI,IAAA,EAAM,SAAA,EAAW,OAAO,IAAA,CAAK,UAAU,GAAG,CAAA;AAC9C,MAAA,OAAO,eAAA,CAAgB,MAAM,MAAA,CAAO,SAAA,CAAU,GAAG,CAAC,CAAA;AAAA,IACpD,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAOA,MAAM,cAAc,OAAA,EAA0C;AAC5D,MAAA,MAAM,CAAA,GAAI,OAAA;AACV,MAAA,MAAM,UAAU,CAAA,EAAG,QAAA;AACnB,MAAA,IAAI,CAAC,OAAA,EAAS,OAAO,EAAE,SAAS,KAAA,EAAM;AAEtC,MAAA,MAAM,MAAA,GAAA,CAAU,MAAM,MAAA,CAAO,SAAA,CAAU,OAAO,CAAA,EAAG,MAAA;AAEjD,MAAA,IAAI,WAAW,WAAA,EAAa,OAAO,EAAE,OAAA,EAAS,OAAO,OAAA,EAAQ;AAE7D,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,OAAA,EAAQ;AAAA,IAClC;AAAA,GACF;AACF","file":"index.js","sourcesContent":["// DeUna (Banco Pichincha) — cliente HTTP mínimo\n// Wallet QR: genera QR dinámico o link de pago y consulta estado del cobro.\n\nexport interface DeUnaConfig {\n /** Client ID del comercio (DEUNA_CLIENT_ID). */\n clientId: string;\n /** Client Secret del comercio (DEUNA_CLIENT_SECRET). */\n clientSecret: string;\n /** URL a la que DeUna notificará el resultado del pago (webhook). */\n webhookUrl: string;\n /** URL de retorno después del pago (para link/código). */\n returnUrl: string;\n /** ponytail: base URL sobreescribible para tests/staging. */\n baseUrl?: string;\n}\n\nexport interface PrepareParams {\n /** Referencia única de la orden. */\n orderRef: string;\n /** Monto total en la moneda del comercio (USD). */\n amount: number;\n /** Descripción del pedido (aparece en la pantalla del wallet). */\n description?: string;\n}\n\n/** Modos de cobro que DeUna soporta. */\nexport type DeUnaPrepareMode = \"qr\" | \"link\" | \"code\";\n\nexport interface PrepareResponse {\n /** Payload del QR dinámico (string para que la UI genere la imagen). */\n qrPayload?: string;\n /** Link de pago (alternativa al QR). */\n paymentUrl?: string;\n /** Código único de 6 dígitos. */\n paymentCode?: string;\n /** ID interno de la transacción en DeUna. */\n transactionId: string;\n}\n\nexport interface TransactionStatus {\n transactionId: string;\n orderRef: string;\n /** \"PAID\" | \"PENDING\" | \"FAILED\" | \"EXPIRED\" */\n status: string;\n authorizationCode?: string;\n message?: string;\n}\n\nexport interface DeUnaClient {\n /** Genera un QR dinámico (y opcionalmente link/código) para cobrar la orden. */\n prepare(params: PrepareParams, mode?: DeUnaPrepareMode): Promise<PrepareResponse>;\n /** Consulta el estado actual de la transacción por orderRef. */\n getStatus(orderRef: string): Promise<TransactionStatus>;\n}\n\nexport function createDeUnaClient(config: DeUnaConfig): DeUnaClient {\n const base = config.baseUrl ?? \"https://api.deuna.io/v1\";\n const headers = {\n \"X-Client-Id\": config.clientId,\n \"X-Client-Secret\": config.clientSecret,\n \"Content-Type\": \"application/json\",\n };\n\n return {\n async prepare(params, mode = \"qr\") {\n const res = await fetch(`${base}/payments/prepare`, {\n method: \"POST\",\n headers,\n body: JSON.stringify({\n orderRef: params.orderRef,\n amount: params.amount,\n currency: \"USD\",\n description: params.description ?? params.orderRef,\n mode,\n webhookUrl: config.webhookUrl,\n returnUrl: config.returnUrl,\n }),\n });\n if (!res.ok) {\n const text = await res.text().catch(() => \"\");\n throw new Error(`DeUna prepare ${res.status}: ${text}`);\n }\n return res.json() as Promise<PrepareResponse>;\n },\n\n async getStatus(orderRef) {\n const url = `${base}/payments/status?orderRef=${encodeURIComponent(orderRef)}`;\n const res = await fetch(url, { method: \"GET\", headers });\n if (!res.ok) {\n const text = await res.text().catch(() => \"\");\n throw new Error(`DeUna getStatus ${res.status}: ${text}`);\n }\n return res.json() as Promise<TransactionStatus>;\n },\n };\n}\n","// Tipos estructuralmente compatibles con payment-core (sin importarlo — evita ciclo).\nimport type { Order } from \"@pandait.tech/commerce-core\";\nimport type { DeUnaClient, TransactionStatus } from \"./client.js\";\n\ninterface ConfirmResult {\n status: \"paid\" | \"pending\" | \"failed\" | \"challenge\";\n transactionId?: string;\n redirectUrl?: string;\n error?: string;\n}\ninterface WebhookResult {\n handled: boolean;\n orderId?: string;\n}\ninterface PaymentMethod {\n id: string;\n label: string;\n prepare(order: Order): Promise<Record<string, unknown>>;\n confirm(ref: string): Promise<ConfirmResult>;\n handleWebhook(payload: unknown): Promise<WebhookResult>;\n}\n\nconst PAID_STATUS = \"PAID\";\n\nfunction toConfirmResult(s: TransactionStatus): ConfirmResult {\n if (s.status === PAID_STATUS) return { status: \"paid\", transactionId: s.transactionId };\n if (s.status === \"FAILED\" || s.status === \"EXPIRED\")\n return { status: \"failed\", error: s.message ?? s.status };\n return { status: \"pending\" };\n}\n\nexport interface DeUnaWebhookPayload {\n orderRef?: string;\n transactionId?: string;\n status?: string;\n authorizationCode?: string;\n}\n\nexport interface DeUnaPaymentMethodOpts {\n /** Override de confirm para entornos sin acceso directo a la API (tests, staging). */\n onConfirm?: (ref: string) => Promise<ConfirmResult>;\n}\n\nexport function toDeUnaPaymentMethod(\n client: DeUnaClient,\n opts?: DeUnaPaymentMethodOpts,\n): PaymentMethod {\n return {\n id: \"deuna\",\n label: \"DeUna (wallet QR · Banco Pichincha)\",\n\n async prepare(order: Order): Promise<Record<string, unknown>> {\n const result = await client.prepare({\n orderRef: order.id,\n amount: order.total,\n description: `Orden ${order.id}`,\n });\n // Devuelve el payload/string del QR — la UI genera la imagen (ponytail: no generar aquí).\n return {\n qrPayload: result.qrPayload,\n paymentUrl: result.paymentUrl,\n paymentCode: result.paymentCode,\n transactionId: result.transactionId,\n orderId: order.id,\n };\n },\n\n async confirm(ref: string): Promise<ConfirmResult> {\n if (opts?.onConfirm) return opts.onConfirm(ref);\n return toConfirmResult(await client.getStatus(ref));\n },\n\n // El estado se consulta SIEMPRE, a propósito: DeUna no firma webhooks de entrada\n // (el clientSecret es un header de salida hacia su API, no verificación de entrada),\n // así que el status del payload no es de fiar (cualquiera que conozca la URL podría\n // enviar \"pagado\"). La decisión sale siempre de client.getStatus(orderId); también\n // cubre el webhook repetido con estado revertido (pagado → expirado).\n async handleWebhook(payload: unknown): Promise<WebhookResult> {\n const p = payload as DeUnaWebhookPayload | null;\n const orderId = p?.orderRef;\n if (!orderId) return { handled: false };\n\n const status = (await client.getStatus(orderId)).status;\n\n if (status !== PAID_STATUS) return { handled: false, orderId };\n\n return { handled: true, orderId };\n },\n };\n}\n"]}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pandait.tech/payment-deuna",
|
|
3
|
-
"version": "
|
|
3
|
+
"version": "2.0.0",
|
|
4
4
|
"description": "DeUna (Banco Pichincha) wallet QR payment adapter for panda-commerce-kit. Implements PaymentMethod via QR dinámico, link de pago y código único.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"private": false,
|
|
@@ -45,7 +45,7 @@
|
|
|
45
45
|
"tsup": "^8.3.0",
|
|
46
46
|
"typescript": "^5.6.3",
|
|
47
47
|
"vitest": "^4.1.7",
|
|
48
|
-
"@pandait.tech/commerce-core": "0.
|
|
48
|
+
"@pandait.tech/commerce-core": "0.1.0"
|
|
49
49
|
},
|
|
50
50
|
"scripts": {
|
|
51
51
|
"build": "tsup",
|