@pandait.tech/payment-nuvei 0.1.1 → 0.2.0

package/README.md

@@ -110,6 +110,35 @@ export const POST = createChargeHandler({
 
 Apply the same pattern to the remaining handlers — each one is documented inline with its own `XHandlerDeps` interface.
 
+## Hosting & deployment (3DS callback + Nuvei egress)
+
+This package is **hosting-agnostic by design** — the payment logic doesn't care where it runs. But two parts of the Nuvei flow may need to run *outside your app's request edge* depending on **where you host**, because of how the host's infrastructure (not this package) handles certain traffic:
+
+### 1. The 3DS callback (`termUrl`)
+
+After a 3DS challenge, the **bank's ACS makes an external, cross-origin `POST`** to the `termUrl`. The `termUrl` is built by `createChargeHandler` as:
+
+```
+${cloudFunctionsBaseUrl}/threeDSCallback?orderId=<id>
+```
+
+The callback must: read the `cres` from the POST (form-urlencoded **or** JSON, casing varies by issuer), decode `transStatus` from the base64url CRES payload, persist `threeDSCres` + `threeDSTransStatus` on the order (only while `status === "3ds-pending"`), and return HTML that `postMessage`s `{ type: "3DS_COMPLETE", orderId, transStatus }` to the parent checkout window (no redirect).
+
+| Your host | How to expose the callback |
+|---|---|
+| **Firebase App Hosting / Cloud Run** | App Hosting **returns 403** to the bank's external POST before your code runs (infra-level block). You **must** deploy the callback as a standalone **Cloud Function** with permissive ingress (`cors: true`) and point `cloudFunctionsBaseUrl` at `https://<region>-<project>.cloudfunctions.net`. The package's `create3dsCallbackHandler` (a Next.js route) is **not** usable as `termUrl` here. |
+| **Vercel / Netlify / plain Node / properly-configured Cloud Run** | The Next.js route from `create3dsCallbackHandler` accepts the external POST fine. Mount it at `/api/payment/3ds-callback` and set `cloudFunctionsBaseUrl` to your own origin + that path. |
+
+### 2. Nuvei API egress
+
+Some hosts can't reach Nuvei's API directly. **Cloud Run (App Hosting) returns 500** calling `ccapi.paymentez.com` (egress/TLS incompatibility). Work around it with a tiny proxy (a Cloud Function works) and set the `NUVEI_PROXY_URL` env — the SDK routes through it automatically when present. On hosts without this limitation, leave `NUVEI_PROXY_URL` unset and the SDK calls Nuvei directly.
+
+### Reference implementation
+
+A production-validated implementation of both (`threeDSCallback` + `nuveiProxy`, Firebase Functions v2) lives in `pauhenriques-website/functions/index.js`. The logic is business-agnostic — copy it and point your env vars at the deployed functions.
+
+> **Roadmap (v0.next):** these will ship from the package as framework-neutral handlers (Web-standard `Request → Response`) plus thin runtime adapters (`toCloudFunction`, `toExpress`), so a **single source of truth** can deploy to a Next.js route, a Cloud Function, or any runtime — eliminating the hand-maintained `functions/index.js` duplication. The package will stay **agnostic to hosting and framework**; it remains coupled to **Firebase (Firestore/Auth) as the data layer by design**.
+
 ## UI components — usage
 
 All `/ui` exports are client components (`"use client"`) and expect a Tailwind setup. The components consume CSS variables for theming so the same components work for every white-label client with their own branding.

package/dist/adapters/index.cjs

@@ -0,0 +1,54 @@
+'use strict';
+
+// src/adapters/index.ts
+function buildRequest(req) {
+  const headerList = req.headers ?? {};
+  const host = (Array.isArray(headerList.host) ? headerList.host[0] : headerList.host) || "localhost";
+  const protoHeader = headerList["x-forwarded-proto"] ?? headerList["X-Forwarded-Proto"];
+  const proto = (Array.isArray(protoHeader) ? protoHeader[0] : protoHeader) || "https";
+  const path = req.originalUrl ?? req.url ?? "/";
+  const url = new URL(path, `${proto}://${host}`).toString();
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(headerList)) {
+    if (value === void 0) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) headers.append(key, v);
+    } else {
+      headers.set(key, value);
+    }
+  }
+  const method = (req.method ?? "GET").toUpperCase();
+  let body;
+  if (method !== "GET" && method !== "HEAD") {
+    if (req.rawBody) {
+      body = new TextDecoder().decode(req.rawBody);
+    } else if (req.body !== void 0 && req.body !== null) {
+      body = typeof req.body === "string" ? req.body : JSON.stringify(req.body);
+      if (!headers.has("content-type") && typeof req.body !== "string") {
+        headers.set("content-type", "application/json");
+      }
+    }
+  }
+  return new Request(url, { method, headers, body });
+}
+async function writeResponse(response, res) {
+  res.statusCode = response.status;
+  response.headers.forEach((value, key) => {
+    res.setHeader(key, value);
+  });
+  const buf = new Uint8Array(await response.arrayBuffer());
+  res.end(buf);
+}
+function toExpress(handler) {
+  return async (req, res) => {
+    const request = buildRequest(req);
+    const response = await handler(request);
+    await writeResponse(response, res);
+  };
+}
+var toCloudFunction = toExpress;
+
+exports.toCloudFunction = toCloudFunction;
+exports.toExpress = toExpress;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/adapters/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/index.ts"],"names":[],"mappings":";;;AA2CA,SAAS,aAAa,GAAA,EAA+B;AACnD,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,OAAA,IAAW,EAAC;AACnC,EAAA,MAAM,IAAA,GAAA,CACH,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,GAAI,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA,GAAI,UAAA,CAAW,IAAA,KAClE,WAAA;AACF,EAAA,MAAM,WAAA,GACJ,UAAA,CAAW,mBAAmB,CAAA,IAAK,WAAW,mBAAmB,CAAA;AACnE,EAAA,MAAM,KAAA,GAAA,CACH,MAAM,OAAA,CAAQ,WAAW,IAAI,WAAA,CAAY,CAAC,IAAI,WAAA,KAAgB,OAAA;AACjE,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,WAAA,IAAe,GAAA,CAAI,GAAA,IAAO,GAAA;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,EAAM,CAAA,EAAG,KAAK,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA,CAAE,QAAA,EAAS;AAEzD,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,EAAG;AACrD,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC9C,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAA,CAAU,GAAA,CAAI,MAAA,IAAU,KAAA,EAAO,WAAA,EAAY;AACjD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,MAAA,EAAQ;AACzC,IAAA,IAAI,IAAI,OAAA,EAAS;AAIf,MAAA,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAI,OAAO,CAAA;AAAA,IAC7C,WAAW,GAAA,CAAI,IAAA,KAAS,MAAA,IAAa,GAAA,CAAI,SAAS,IAAA,EAAM;AACtD,MAAA,IAAA,GACE,OAAO,IAAI,IAAA,KAAS,QAAA,GAAW,IAAI,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AACnE,MAAA,IAAI,CAAC,QAAQ,GAAA,CAAI,cAAc,KAAK,OAAO,GAAA,CAAI,SAAS,QAAA,EAAU;AAChE,QAAA,OAAA,CAAQ,GAAA,CAAI,gBAAgB,kBAAkB,CAAA;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,GAAA,EAAK,EAAE,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AACnD;AAEA,eAAe,aAAA,CACb,UACA,GAAA,EACe;AACf,EAAA,GAAA,CAAI,aAAa,QAAA,CAAS,MAAA;AAC1B,EAAA,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAIvC,IAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,EAC1B,CAAC,CAAA;AACD,EAAA,MAAM,MAAM,IAAI,UAAA,CAAW,MAAM,QAAA,CAAS,aAAa,CAAA;AACvD,EAAA,GAAA,CAAI,IAAI,GAAG,CAAA;AACb;AAOO,SAAS,UAAU,OAAA,EAAkC;AAC1D,EAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AACzB,IAAA,MAAM,OAAA,GAAU,aAAa,GAAG,CAAA;AAChC,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAO,CAAA;AACtC,IAAA,MAAM,aAAA,CAAc,UAAU,GAAG,CAAA;AAAA,EACnC,CAAA;AACF;AAOO,IAAM,eAAA,GAAkB","file":"index.cjs","sourcesContent":["// @pandait.tech/payment-nuvei/adapters\n//\n// Runtime adapters that let the package's Web-standard handlers\n// (`(req: Request) => Promise<Response>`) run on Node/Express-style runtimes\n// such as Firebase Cloud Functions v2 (`onRequest`) or Express.\n//\n// Next.js App Router needs NO adapter — its route handlers already receive a\n// `Request` and accept a `Response`, so you export the handler directly:\n//   export const POST = createChargeHandler(deps);\n//\n// Cloud Functions v2 / Express need this bridge because they use the\n// `(req, res)` signature instead of `Request -> Response`:\n//   exports.threeDSCallback = onRequest({ cors: true },\n//     toCloudFunction(create3dsCallbackHandler({ firebase: { db } }).POST));\n\n/** Minimal structural type for a Node/Express-style request. */\nexport interface NodeRequestLike {\n  method?: string;\n  url?: string;\n  originalUrl?: string;\n  headers: Record<string, string | string[] | undefined>;\n  /** Raw request body. Cloud Functions v2 provides this as a Buffer. */\n  rawBody?: Buffer | Uint8Array;\n  /** Parsed body (Express/Functions populate this for JSON/urlencoded). */\n  body?: unknown;\n}\n\n/** Minimal structural type for a Node/Express-style response. */\nexport interface NodeResponseLike {\n  statusCode: number;\n  setHeader(name: string, value: string): void;\n  end(chunk?: string | Uint8Array): void;\n}\n\n/** A Web-standard handler: takes a Fetch `Request`, returns a `Response`. */\nexport type WebHandler = (request: Request) => Promise<Response> | Response;\n\n/** A Node/Express-style handler: `(req, res)`. */\nexport type NodeHandler = (\n  req: NodeRequestLike,\n  res: NodeResponseLike,\n) => Promise<void>;\n\nfunction buildRequest(req: NodeRequestLike): Request {\n  const headerList = req.headers ?? {};\n  const host =\n    (Array.isArray(headerList.host) ? headerList.host[0] : headerList.host) ||\n    \"localhost\";\n  const protoHeader =\n    headerList[\"x-forwarded-proto\"] ?? headerList[\"X-Forwarded-Proto\"];\n  const proto =\n    (Array.isArray(protoHeader) ? protoHeader[0] : protoHeader) || \"https\";\n  const path = req.originalUrl ?? req.url ?? \"/\";\n  const url = new URL(path, `${proto}://${host}`).toString();\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(headerList)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) {\n      for (const v of value) headers.append(key, v);\n    } else {\n      headers.set(key, value);\n    }\n  }\n\n  const method = (req.method ?? \"GET\").toUpperCase();\n  let body: string | undefined;\n  if (method !== \"GET\" && method !== \"HEAD\") {\n    if (req.rawBody) {\n      // Bodies handled by this package are always text (JSON / form-urlencoded);\n      // decoding to a string keeps the original bytes intact and the preserved\n      // content-type header lets Request.json()/.formData()/.text() parse it.\n      body = new TextDecoder().decode(req.rawBody);\n    } else if (req.body !== undefined && req.body !== null) {\n      body =\n        typeof req.body === \"string\" ? req.body : JSON.stringify(req.body);\n      if (!headers.has(\"content-type\") && typeof req.body !== \"string\") {\n        headers.set(\"content-type\", \"application/json\");\n      }\n    }\n  }\n\n  return new Request(url, { method, headers, body });\n}\n\nasync function writeResponse(\n  response: Response,\n  res: NodeResponseLike,\n): Promise<void> {\n  res.statusCode = response.status;\n  response.headers.forEach((value, key) => {\n    // Note: these payment handlers never emit Set-Cookie, so the single-value\n    // Headers.forEach is sufficient. If a future handler sets cookies, switch\n    // to response.headers.getSetCookie() for the Set-Cookie header.\n    res.setHeader(key, value);\n  });\n  const buf = new Uint8Array(await response.arrayBuffer());\n  res.end(buf);\n}\n\n/**\n * Wrap a Web-standard handler so it runs as a Node/Express-style `(req, res)`\n * handler. Works for Express and any runtime with a compatible req/res\n * (Node `http.ServerResponse` exposes `statusCode`/`setHeader`/`end`).\n */\nexport function toExpress(handler: WebHandler): NodeHandler {\n  return async (req, res) => {\n    const request = buildRequest(req);\n    const response = await handler(request);\n    await writeResponse(response, res);\n  };\n}\n\n/**\n * Wrap a Web-standard handler for Firebase Cloud Functions v2 `onRequest`.\n * Identical bridge to {@link toExpress} (Functions v2 req/res are Express-based);\n * provided as a named export for intent at the call site.\n */\nexport const toCloudFunction = toExpress;\n"]}

package/dist/adapters/index.d.cts

@@ -0,0 +1,35 @@
+/** Minimal structural type for a Node/Express-style request. */
+interface NodeRequestLike {
+    method?: string;
+    url?: string;
+    originalUrl?: string;
+    headers: Record<string, string | string[] | undefined>;
+    /** Raw request body. Cloud Functions v2 provides this as a Buffer. */
+    rawBody?: Buffer | Uint8Array;
+    /** Parsed body (Express/Functions populate this for JSON/urlencoded). */
+    body?: unknown;
+}
+/** Minimal structural type for a Node/Express-style response. */
+interface NodeResponseLike {
+    statusCode: number;
+    setHeader(name: string, value: string): void;
+    end(chunk?: string | Uint8Array): void;
+}
+/** A Web-standard handler: takes a Fetch `Request`, returns a `Response`. */
+type WebHandler = (request: Request) => Promise<Response> | Response;
+/** A Node/Express-style handler: `(req, res)`. */
+type NodeHandler = (req: NodeRequestLike, res: NodeResponseLike) => Promise<void>;
+/**
+ * Wrap a Web-standard handler so it runs as a Node/Express-style `(req, res)`
+ * handler. Works for Express and any runtime with a compatible req/res
+ * (Node `http.ServerResponse` exposes `statusCode`/`setHeader`/`end`).
+ */
+declare function toExpress(handler: WebHandler): NodeHandler;
+/**
+ * Wrap a Web-standard handler for Firebase Cloud Functions v2 `onRequest`.
+ * Identical bridge to {@link toExpress} (Functions v2 req/res are Express-based);
+ * provided as a named export for intent at the call site.
+ */
+declare const toCloudFunction: typeof toExpress;
+
+export { type NodeHandler, type NodeRequestLike, type NodeResponseLike, type WebHandler, toCloudFunction, toExpress };

package/dist/adapters/index.d.ts

@@ -0,0 +1,35 @@
+/** Minimal structural type for a Node/Express-style request. */
+interface NodeRequestLike {
+    method?: string;
+    url?: string;
+    originalUrl?: string;
+    headers: Record<string, string | string[] | undefined>;
+    /** Raw request body. Cloud Functions v2 provides this as a Buffer. */
+    rawBody?: Buffer | Uint8Array;
+    /** Parsed body (Express/Functions populate this for JSON/urlencoded). */
+    body?: unknown;
+}
+/** Minimal structural type for a Node/Express-style response. */
+interface NodeResponseLike {
+    statusCode: number;
+    setHeader(name: string, value: string): void;
+    end(chunk?: string | Uint8Array): void;
+}
+/** A Web-standard handler: takes a Fetch `Request`, returns a `Response`. */
+type WebHandler = (request: Request) => Promise<Response> | Response;
+/** A Node/Express-style handler: `(req, res)`. */
+type NodeHandler = (req: NodeRequestLike, res: NodeResponseLike) => Promise<void>;
+/**
+ * Wrap a Web-standard handler so it runs as a Node/Express-style `(req, res)`
+ * handler. Works for Express and any runtime with a compatible req/res
+ * (Node `http.ServerResponse` exposes `statusCode`/`setHeader`/`end`).
+ */
+declare function toExpress(handler: WebHandler): NodeHandler;
+/**
+ * Wrap a Web-standard handler for Firebase Cloud Functions v2 `onRequest`.
+ * Identical bridge to {@link toExpress} (Functions v2 req/res are Express-based);
+ * provided as a named export for intent at the call site.
+ */
+declare const toCloudFunction: typeof toExpress;
+
+export { type NodeHandler, type NodeRequestLike, type NodeResponseLike, type WebHandler, toCloudFunction, toExpress };

package/dist/adapters/index.js

@@ -0,0 +1,51 @@
+// src/adapters/index.ts
+function buildRequest(req) {
+  const headerList = req.headers ?? {};
+  const host = (Array.isArray(headerList.host) ? headerList.host[0] : headerList.host) || "localhost";
+  const protoHeader = headerList["x-forwarded-proto"] ?? headerList["X-Forwarded-Proto"];
+  const proto = (Array.isArray(protoHeader) ? protoHeader[0] : protoHeader) || "https";
+  const path = req.originalUrl ?? req.url ?? "/";
+  const url = new URL(path, `${proto}://${host}`).toString();
+  const headers = new Headers();
+  for (const [key, value] of Object.entries(headerList)) {
+    if (value === void 0) continue;
+    if (Array.isArray(value)) {
+      for (const v of value) headers.append(key, v);
+    } else {
+      headers.set(key, value);
+    }
+  }
+  const method = (req.method ?? "GET").toUpperCase();
+  let body;
+  if (method !== "GET" && method !== "HEAD") {
+    if (req.rawBody) {
+      body = new TextDecoder().decode(req.rawBody);
+    } else if (req.body !== void 0 && req.body !== null) {
+      body = typeof req.body === "string" ? req.body : JSON.stringify(req.body);
+      if (!headers.has("content-type") && typeof req.body !== "string") {
+        headers.set("content-type", "application/json");
+      }
+    }
+  }
+  return new Request(url, { method, headers, body });
+}
+async function writeResponse(response, res) {
+  res.statusCode = response.status;
+  response.headers.forEach((value, key) => {
+    res.setHeader(key, value);
+  });
+  const buf = new Uint8Array(await response.arrayBuffer());
+  res.end(buf);
+}
+function toExpress(handler) {
+  return async (req, res) => {
+    const request = buildRequest(req);
+    const response = await handler(request);
+    await writeResponse(response, res);
+  };
+}
+var toCloudFunction = toExpress;
+
+export { toCloudFunction, toExpress };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/adapters/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/adapters/index.ts"],"names":[],"mappings":";AA2CA,SAAS,aAAa,GAAA,EAA+B;AACnD,EAAA,MAAM,UAAA,GAAa,GAAA,CAAI,OAAA,IAAW,EAAC;AACnC,EAAA,MAAM,IAAA,GAAA,CACH,KAAA,CAAM,OAAA,CAAQ,UAAA,CAAW,IAAI,CAAA,GAAI,UAAA,CAAW,IAAA,CAAK,CAAC,CAAA,GAAI,UAAA,CAAW,IAAA,KAClE,WAAA;AACF,EAAA,MAAM,WAAA,GACJ,UAAA,CAAW,mBAAmB,CAAA,IAAK,WAAW,mBAAmB,CAAA;AACnE,EAAA,MAAM,KAAA,GAAA,CACH,MAAM,OAAA,CAAQ,WAAW,IAAI,WAAA,CAAY,CAAC,IAAI,WAAA,KAAgB,OAAA;AACjE,EAAA,MAAM,IAAA,GAAO,GAAA,CAAI,WAAA,IAAe,GAAA,CAAI,GAAA,IAAO,GAAA;AAC3C,EAAA,MAAM,GAAA,GAAM,IAAI,GAAA,CAAI,IAAA,EAAM,CAAA,EAAG,KAAK,CAAA,GAAA,EAAM,IAAI,CAAA,CAAE,CAAA,CAAE,QAAA,EAAS;AAEzD,EAAA,MAAM,OAAA,GAAU,IAAI,OAAA,EAAQ;AAC5B,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,UAAU,CAAA,EAAG;AACrD,IAAA,IAAI,UAAU,MAAA,EAAW;AACzB,IAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,MAAA,KAAA,MAAW,CAAA,IAAK,KAAA,EAAO,OAAA,CAAQ,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,IAC9C,CAAA,MAAO;AACL,MAAA,OAAA,CAAQ,GAAA,CAAI,KAAK,KAAK,CAAA;AAAA,IACxB;AAAA,EACF;AAEA,EAAA,MAAM,MAAA,GAAA,CAAU,GAAA,CAAI,MAAA,IAAU,KAAA,EAAO,WAAA,EAAY;AACjD,EAAA,IAAI,IAAA;AACJ,EAAA,IAAI,MAAA,KAAW,KAAA,IAAS,MAAA,KAAW,MAAA,EAAQ;AACzC,IAAA,IAAI,IAAI,OAAA,EAAS;AAIf,MAAA,IAAA,GAAO,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,IAAI,OAAO,CAAA;AAAA,IAC7C,WAAW,GAAA,CAAI,IAAA,KAAS,MAAA,IAAa,GAAA,CAAI,SAAS,IAAA,EAAM;AACtD,MAAA,IAAA,GACE,OAAO,IAAI,IAAA,KAAS,QAAA,GAAW,IAAI,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,GAAA,CAAI,IAAI,CAAA;AACnE,MAAA,IAAI,CAAC,QAAQ,GAAA,CAAI,cAAc,KAAK,OAAO,GAAA,CAAI,SAAS,QAAA,EAAU;AAChE,QAAA,OAAA,CAAQ,GAAA,CAAI,gBAAgB,kBAAkB,CAAA;AAAA,MAChD;AAAA,IACF;AAAA,EACF;AAEA,EAAA,OAAO,IAAI,OAAA,CAAQ,GAAA,EAAK,EAAE,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AACnD;AAEA,eAAe,aAAA,CACb,UACA,GAAA,EACe;AACf,EAAA,GAAA,CAAI,aAAa,QAAA,CAAS,MAAA;AAC1B,EAAA,QAAA,CAAS,OAAA,CAAQ,OAAA,CAAQ,CAAC,KAAA,EAAO,GAAA,KAAQ;AAIvC,IAAA,GAAA,CAAI,SAAA,CAAU,KAAK,KAAK,CAAA;AAAA,EAC1B,CAAC,CAAA;AACD,EAAA,MAAM,MAAM,IAAI,UAAA,CAAW,MAAM,QAAA,CAAS,aAAa,CAAA;AACvD,EAAA,GAAA,CAAI,IAAI,GAAG,CAAA;AACb;AAOO,SAAS,UAAU,OAAA,EAAkC;AAC1D,EAAA,OAAO,OAAO,KAAK,GAAA,KAAQ;AACzB,IAAA,MAAM,OAAA,GAAU,aAAa,GAAG,CAAA;AAChC,IAAA,MAAM,QAAA,GAAW,MAAM,OAAA,CAAQ,OAAO,CAAA;AACtC,IAAA,MAAM,aAAA,CAAc,UAAU,GAAG,CAAA;AAAA,EACnC,CAAA;AACF;AAOO,IAAM,eAAA,GAAkB","file":"index.js","sourcesContent":["// @pandait.tech/payment-nuvei/adapters\n//\n// Runtime adapters that let the package's Web-standard handlers\n// (`(req: Request) => Promise<Response>`) run on Node/Express-style runtimes\n// such as Firebase Cloud Functions v2 (`onRequest`) or Express.\n//\n// Next.js App Router needs NO adapter — its route handlers already receive a\n// `Request` and accept a `Response`, so you export the handler directly:\n//   export const POST = createChargeHandler(deps);\n//\n// Cloud Functions v2 / Express need this bridge because they use the\n// `(req, res)` signature instead of `Request -> Response`:\n//   exports.threeDSCallback = onRequest({ cors: true },\n//     toCloudFunction(create3dsCallbackHandler({ firebase: { db } }).POST));\n\n/** Minimal structural type for a Node/Express-style request. */\nexport interface NodeRequestLike {\n  method?: string;\n  url?: string;\n  originalUrl?: string;\n  headers: Record<string, string | string[] | undefined>;\n  /** Raw request body. Cloud Functions v2 provides this as a Buffer. */\n  rawBody?: Buffer | Uint8Array;\n  /** Parsed body (Express/Functions populate this for JSON/urlencoded). */\n  body?: unknown;\n}\n\n/** Minimal structural type for a Node/Express-style response. */\nexport interface NodeResponseLike {\n  statusCode: number;\n  setHeader(name: string, value: string): void;\n  end(chunk?: string | Uint8Array): void;\n}\n\n/** A Web-standard handler: takes a Fetch `Request`, returns a `Response`. */\nexport type WebHandler = (request: Request) => Promise<Response> | Response;\n\n/** A Node/Express-style handler: `(req, res)`. */\nexport type NodeHandler = (\n  req: NodeRequestLike,\n  res: NodeResponseLike,\n) => Promise<void>;\n\nfunction buildRequest(req: NodeRequestLike): Request {\n  const headerList = req.headers ?? {};\n  const host =\n    (Array.isArray(headerList.host) ? headerList.host[0] : headerList.host) ||\n    \"localhost\";\n  const protoHeader =\n    headerList[\"x-forwarded-proto\"] ?? headerList[\"X-Forwarded-Proto\"];\n  const proto =\n    (Array.isArray(protoHeader) ? protoHeader[0] : protoHeader) || \"https\";\n  const path = req.originalUrl ?? req.url ?? \"/\";\n  const url = new URL(path, `${proto}://${host}`).toString();\n\n  const headers = new Headers();\n  for (const [key, value] of Object.entries(headerList)) {\n    if (value === undefined) continue;\n    if (Array.isArray(value)) {\n      for (const v of value) headers.append(key, v);\n    } else {\n      headers.set(key, value);\n    }\n  }\n\n  const method = (req.method ?? \"GET\").toUpperCase();\n  let body: string | undefined;\n  if (method !== \"GET\" && method !== \"HEAD\") {\n    if (req.rawBody) {\n      // Bodies handled by this package are always text (JSON / form-urlencoded);\n      // decoding to a string keeps the original bytes intact and the preserved\n      // content-type header lets Request.json()/.formData()/.text() parse it.\n      body = new TextDecoder().decode(req.rawBody);\n    } else if (req.body !== undefined && req.body !== null) {\n      body =\n        typeof req.body === \"string\" ? req.body : JSON.stringify(req.body);\n      if (!headers.has(\"content-type\") && typeof req.body !== \"string\") {\n        headers.set(\"content-type\", \"application/json\");\n      }\n    }\n  }\n\n  return new Request(url, { method, headers, body });\n}\n\nasync function writeResponse(\n  response: Response,\n  res: NodeResponseLike,\n): Promise<void> {\n  res.statusCode = response.status;\n  response.headers.forEach((value, key) => {\n    // Note: these payment handlers never emit Set-Cookie, so the single-value\n    // Headers.forEach is sufficient. If a future handler sets cookies, switch\n    // to response.headers.getSetCookie() for the Set-Cookie header.\n    res.setHeader(key, value);\n  });\n  const buf = new Uint8Array(await response.arrayBuffer());\n  res.end(buf);\n}\n\n/**\n * Wrap a Web-standard handler so it runs as a Node/Express-style `(req, res)`\n * handler. Works for Express and any runtime with a compatible req/res\n * (Node `http.ServerResponse` exposes `statusCode`/`setHeader`/`end`).\n */\nexport function toExpress(handler: WebHandler): NodeHandler {\n  return async (req, res) => {\n    const request = buildRequest(req);\n    const response = await handler(request);\n    await writeResponse(response, res);\n  };\n}\n\n/**\n * Wrap a Web-standard handler for Firebase Cloud Functions v2 `onRequest`.\n * Identical bridge to {@link toExpress} (Functions v2 req/res are Express-based);\n * provided as a named export for intent at the call site.\n */\nexport const toCloudFunction = toExpress;\n"]}