@prakashacharya/vendure-plugin-nepal-payments 0.1.0

package/dist/providers/khalti.provider.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.KhaltiProvider = void 0;
+exports.mapKhaltiStatus = mapKhaltiStatus;
+const http_client_1 = require("./http-client");
+class KhaltiProvider {
+    constructor(options, http = new http_client_1.PaymentHttpClient()) {
+        this.options = options;
+        this.http = http;
+        this.code = 'khalti';
+        this.baseUrl = options.environment === 'production'
+            ? 'https://khalti.com/api/v2'
+            : 'https://dev.khalti.com/api/v2';
+    }
+    async initiate(input) {
+        const response = await this.http.request(`${this.baseUrl}/epayment/initiate/`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({
+                return_url: input.returnUrl,
+                website_url: this.options.websiteUrl,
+                amount: input.amount,
+                purchase_order_id: input.attemptId,
+                purchase_order_name: `Order ${input.orderCode}`,
+                customer_info: input.customer,
+            }),
+        });
+        if (!response.pidx || !response.payment_url) {
+            throw new Error('Khalti initiation response is missing pidx or payment_url');
+        }
+        return {
+            providerReference: response.pidx,
+            redirectUrl: response.payment_url,
+            expiresAt: response.expires_at ? new Date(response.expires_at) : undefined,
+            raw: response,
+        };
+    }
+    async verify(input) {
+        if (!input.providerReference)
+            throw new Error('Khalti verification requires pidx');
+        const response = await this.http.request(`${this.baseUrl}/epayment/lookup/`, {
+            method: 'POST',
+            headers: this.headers(),
+            body: JSON.stringify({ pidx: input.providerReference }),
+        });
+        if (response.pidx !== input.providerReference) {
+            throw new Error('Khalti lookup reference does not match the payment attempt');
+        }
+        return {
+            providerReference: response.pidx,
+            transactionId: response.transaction_id ?? undefined,
+            amount: response.total_amount,
+            status: mapKhaltiStatus(response.status),
+            raw: response,
+        };
+    }
+    async refund(input) {
+        const base = this.options.environment === 'production' ? 'https://khalti.com/api' : 'https://dev.khalti.com/api';
+        const body = {};
+        if (input.amount != null)
+            body.amount = input.amount;
+        if (input.mobile)
+            body.mobile = input.mobile;
+        const response = await this.http.request(`${base}/merchant-transaction/${encodeURIComponent(input.transactionId)}/refund/`, { method: 'POST', headers: this.headers(), body: JSON.stringify(body) });
+        return { status: 'settled', transactionId: input.transactionId, raw: response };
+    }
+    headers() {
+        return {
+            Authorization: `Key ${this.options.secretKey}`,
+            'Content-Type': 'application/json',
+            Accept: 'application/json',
+        };
+    }
+}
+exports.KhaltiProvider = KhaltiProvider;
+function mapKhaltiStatus(status) {
+    switch (status.trim().toLowerCase()) {
+        case 'completed': return 'settled';
+        case 'pending':
+        case 'initiated': return 'pending';
+        case 'refunded': return 'refunded';
+        case 'partially refunded': return 'partially-refunded';
+        case 'expired': return 'expired';
+        case 'user canceled':
+        case 'cancelled':
+        case 'canceled': return 'cancelled';
+        case 'failed': return 'failed';
+        default: return 'unknown';
+    }
+}
+//# sourceMappingURL=khalti.provider.js.map

package/dist/providers/khalti.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"khalti.provider.js","sourceRoot":"","sources":["../../src/providers/khalti.provider.ts"],"names":[],"mappings":";;;AAwGA,0CAcC;AA5GD,+CAAkD;AAiBlD,MAAa,cAAc;IAIzB,YACmB,OAA4B,EAC5B,OAAO,IAAI,+BAAiB,EAAE;QAD9B,YAAO,GAAP,OAAO,CAAqB;QAC5B,SAAI,GAAJ,IAAI,CAA0B;QALxC,SAAI,GAAG,QAAiB,CAAC;QAOhC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,WAAW,KAAK,YAAY;YACjD,CAAC,CAAC,2BAA2B;YAC7B,CAAC,CAAC,+BAA+B,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAA2B;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAyB,GAAG,IAAI,CAAC,OAAO,qBAAqB,EAAE;YACrG,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,WAAW,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;gBACpC,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,iBAAiB,EAAE,KAAK,CAAC,SAAS;gBAClC,mBAAmB,EAAE,SAAS,KAAK,CAAC,SAAS,EAAE;gBAC/C,aAAa,EAAE,KAAK,CAAC,QAAQ;aAC9B,CAAC;SACH,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAC/E,CAAC;QACD,OAAO;YACL,iBAAiB,EAAE,QAAQ,CAAC,IAAI;YAChC,WAAW,EAAE,QAAQ,CAAC,WAAW;YACjC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;YAC1E,GAAG,EAAE,QAAQ;SACd,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAyB;QACpC,IAAI,CAAC,KAAK,CAAC,iBAAiB;YAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACnF,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAuB,GAAG,IAAI,CAAC,OAAO,mBAAmB,EAAE;YACjG,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;YACvB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,iBAAiB,EAAE,CAAC;SACxD,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,OAAO;YACL,iBAAiB,EAAE,QAAQ,CAAC,IAAI;YAChC,aAAa,EAAE,QAAQ,CAAC,cAAc,IAAI,SAAS;YACnD,MAAM,EAAE,QAAQ,CAAC,YAAY;YAC7B,MAAM,EAAE,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC;YACxC,GAAG,EAAE,QAAQ;SACd,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,KAAyB;QACpC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,KAAK,YAAY,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,4BAA4B,CAAC;QACjH,MAAM,IAAI,GAAoC,EAAE,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QACrD,IAAI,KAAK,CAAC,MAAM;YAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;QAC7C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CACtC,GAAG,IAAI,yBAAyB,kBAAkB,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,EACjF,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CACxE,CAAC;QACF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,CAAC,aAAa,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IAClF,CAAC;IAEO,OAAO;QACb,OAAO;YACL,aAAa,EAAE,OAAO,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE;YAC9C,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;CACF;AA3ED,wCA2EC;AAED,SAAgB,eAAe,CAAC,MAAc;IAC5C,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;QACpC,KAAK,WAAW,CAAC,CAAC,OAAO,SAAkB,CAAC;QAC5C,KAAK,SAAS,CAAC;QACf,KAAK,WAAW,CAAC,CAAC,OAAO,SAAkB,CAAC;QAC5C,KAAK,UAAU,CAAC,CAAC,OAAO,UAAmB,CAAC;QAC5C,KAAK,oBAAoB,CAAC,CAAC,OAAO,oBAA6B,CAAC;QAChE,KAAK,SAAS,CAAC,CAAC,OAAO,SAAkB,CAAC;QAC1C,KAAK,eAAe,CAAC;QACrB,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU,CAAC,CAAC,OAAO,WAAoB,CAAC;QAC7C,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAiB,CAAC;QACxC,OAAO,CAAC,CAAC,OAAO,SAAkB,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/providers/provider-error.d.ts

@@ -0,0 +1,5 @@
+export declare class PaymentProviderError extends Error {
+    readonly statusCode?: number | undefined;
+    readonly response?: unknown | undefined;
+    constructor(message: string, statusCode?: number | undefined, response?: unknown | undefined);
+}

package/dist/providers/provider-error.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaymentProviderError = void 0;
+class PaymentProviderError extends Error {
+    constructor(message, statusCode, response) {
+        super(message);
+        this.statusCode = statusCode;
+        this.response = response;
+        this.name = 'PaymentProviderError';
+    }
+}
+exports.PaymentProviderError = PaymentProviderError;
+//# sourceMappingURL=provider-error.js.map

package/dist/providers/provider-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-error.js","sourceRoot":"","sources":["../../src/providers/provider-error.ts"],"names":[],"mappings":";;;AAAA,MAAa,oBAAqB,SAAQ,KAAK;IAC7C,YACE,OAAe,EACN,UAAmB,EACnB,QAAkB;QAE3B,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,eAAU,GAAV,UAAU,CAAS;QACnB,aAAQ,GAAR,QAAQ,CAAU;QAG3B,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AATD,oDASC"}

package/dist/providers/provider.factory.d.ts

@@ -0,0 +1,2 @@
+import type { NepalPaymentProvider, NepalPaymentProviderCode } from '../types';
+export declare function createProvider(code: NepalPaymentProviderCode): NepalPaymentProvider;

package/dist/providers/provider.factory.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createProvider = createProvider;
+const config_1 = require("../config");
+const esewa_provider_1 = require("./esewa.provider");
+const khalti_provider_1 = require("./khalti.provider");
+function createProvider(code) {
+    const options = (0, config_1.getPluginOptions)();
+    if (code === 'khalti' && options.khalti)
+        return new khalti_provider_1.KhaltiProvider(options.khalti);
+    if (code === 'esewa' && options.esewa)
+        return new esewa_provider_1.EsewaProvider(options.esewa);
+    if (code === 'fonepay') {
+        throw new Error('Fonepay is not enabled until merchant-specific API documentation is configured');
+    }
+    throw new Error(`Payment provider "${code}" is not configured`);
+}
+//# sourceMappingURL=provider.factory.js.map

package/dist/providers/provider.factory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.factory.js","sourceRoot":"","sources":["../../src/providers/provider.factory.ts"],"names":[],"mappings":";;AAKA,wCAQC;AAbD,sCAA6C;AAE7C,qDAAiD;AACjD,uDAAmD;AAEnD,SAAgB,cAAc,CAAC,IAA8B;IAC3D,MAAM,OAAO,GAAG,IAAA,yBAAgB,GAAE,CAAC;IACnC,IAAI,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM;QAAE,OAAO,IAAI,gCAAc,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IACnF,IAAI,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,KAAK;QAAE,OAAO,IAAI,8BAAa,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/E,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,gFAAgF,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,qBAAqB,CAAC,CAAC;AAClE,CAAC"}

package/dist/providers/sanitize-provider-data.d.ts

@@ -0,0 +1,4 @@
+/** @internal */
+export declare function sanitizeProviderData(value: unknown, depth?: number): unknown;
+/** @internal */
+export declare function sanitizedProviderRecord(value: unknown): Record<string, unknown> | null;

package/dist/providers/sanitize-provider-data.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeProviderData = sanitizeProviderData;
+exports.sanitizedProviderRecord = sanitizedProviderRecord;
+const SENSITIVE_KEY = /(?:authorization|secret|api.?key|password|passcode|pin|otp|token|mobile|phone|email|customer|signature|signed.?data|payment.?url|redirect.?url)/i;
+const MAX_DEPTH = 5;
+const MAX_ARRAY_ITEMS = 50;
+const MAX_STRING_LENGTH = 500;
+/** @internal */
+function sanitizeProviderData(value, depth = 0) {
+    if (depth > MAX_DEPTH)
+        return '[MAX_DEPTH]';
+    if (value == null || typeof value === 'number' || typeof value === 'boolean')
+        return value;
+    if (typeof value === 'string') {
+        return value.length > MAX_STRING_LENGTH ? `${value.slice(0, MAX_STRING_LENGTH)}…` : value;
+    }
+    if (Array.isArray(value)) {
+        return value.slice(0, MAX_ARRAY_ITEMS).map(item => sanitizeProviderData(item, depth + 1));
+    }
+    if (typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value).map(([key, item]) => [
+            key,
+            SENSITIVE_KEY.test(key) ? '[REDACTED]' : sanitizeProviderData(item, depth + 1),
+        ]));
+    }
+    return String(value).slice(0, MAX_STRING_LENGTH);
+}
+/** @internal */
+function sanitizedProviderRecord(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return null;
+    return sanitizeProviderData(value);
+}
+//# sourceMappingURL=sanitize-provider-data.js.map

package/dist/providers/sanitize-provider-data.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sanitize-provider-data.js","sourceRoot":"","sources":["../../src/providers/sanitize-provider-data.ts"],"names":[],"mappings":";;AAMA,oDAgBC;AAGD,0DAGC;AA5BD,MAAM,aAAa,GAAG,kJAAkJ,CAAC;AACzK,MAAM,SAAS,GAAG,CAAC,CAAC;AACpB,MAAM,eAAe,GAAG,EAAE,CAAC;AAC3B,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,gBAAgB;AAChB,SAAgB,oBAAoB,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5D,IAAI,KAAK,GAAG,SAAS;QAAE,OAAO,aAAa,CAAC;IAC5C,IAAI,KAAK,IAAI,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5F,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC;YAC9F,GAAG;YACH,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC;SAC/E,CAAC,CAAC,CAAC;IACN,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;AACnD,CAAC;AAED,gBAAgB;AAChB,SAAgB,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7E,OAAO,oBAAoB,CAAC,KAAK,CAA4B,CAAC;AAChE,CAAC"}

package/dist/providers/signing.d.ts

@@ -0,0 +1,9 @@
+export declare function hmacSha256Base64(message: string, secret: string): string;
+export declare function secureStringEqual(left: string, right: string): boolean;
+export declare function signSettlementProof(input: {
+    provider: string;
+    attemptId: string;
+    orderId: string;
+    amount: number;
+    providerReference: string;
+}, secret: string): string;

package/dist/providers/signing.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.hmacSha256Base64 = hmacSha256Base64;
+exports.secureStringEqual = secureStringEqual;
+exports.signSettlementProof = signSettlementProof;
+const node_crypto_1 = require("node:crypto");
+function hmacSha256Base64(message, secret) {
+    return (0, node_crypto_1.createHmac)('sha256', secret).update(message, 'utf8').digest('base64');
+}
+function secureStringEqual(left, right) {
+    const a = Buffer.from(left, 'utf8');
+    const b = Buffer.from(right, 'utf8');
+    return a.length === b.length && (0, node_crypto_1.timingSafeEqual)(a, b);
+}
+function signSettlementProof(input, secret) {
+    return hmacSha256Base64([input.provider, input.attemptId, input.orderId, input.amount, input.providerReference].join('|'), secret);
+}
+//# sourceMappingURL=signing.js.map

package/dist/providers/signing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.js","sourceRoot":"","sources":["../../src/providers/signing.ts"],"names":[],"mappings":";;AAEA,4CAEC;AAED,8CAIC;AAED,kDAWC;AAvBD,6CAA0D;AAE1D,SAAgB,gBAAgB,CAAC,OAAe,EAAE,MAAc;IAC9D,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,SAAgB,iBAAiB,CAAC,IAAY,EAAE,KAAa;IAC3D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,IAAI,IAAA,6BAAe,EAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAMnC,EAAE,MAAc;IACf,OAAO,gBAAgB,CACrB,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EACjG,MAAM,CACP,CAAC;AACJ,CAAC"}

package/dist/services/payment-orchestrator.service.d.ts

@@ -0,0 +1,18 @@
+import { ActiveOrderService, OrderService, PaymentMethodService, RequestContext, RequestContextService, TransactionalConnection } from '@vendure/core';
+import { NepalPaymentAttempt } from '../entities/payment-attempt.entity';
+import type { NepalPaymentProviderCode, PaymentInitiation } from '../types';
+export interface InitiatedPayment extends PaymentInitiation {
+    attemptId: string;
+    provider: NepalPaymentProviderCode;
+    status: string;
+}
+export declare class PaymentOrchestratorService {
+    private readonly connection;
+    private readonly activeOrderService;
+    private readonly orderService;
+    private readonly paymentMethodService;
+    private readonly requestContextService;
+    constructor(connection: TransactionalConnection, activeOrderService: ActiveOrderService, orderService: OrderService, paymentMethodService: PaymentMethodService, requestContextService: RequestContextService);
+    initiate(ctx: RequestContext, providerCode: NepalPaymentProviderCode): Promise<InitiatedPayment>;
+    processCallback(providerCode: NepalPaymentProviderCode, attemptId: string, callbackPayload: Record<string, unknown>): Promise<NepalPaymentAttempt>;
+}

package/dist/services/payment-orchestrator.service.js

@@ -0,0 +1,188 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaymentOrchestratorService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const node_crypto_1 = require("node:crypto");
+const typeorm_1 = require("typeorm");
+const config_1 = require("../config");
+const payment_attempt_entity_1 = require("../entities/payment-attempt.entity");
+const provider_factory_1 = require("../providers/provider.factory");
+const sanitize_provider_data_1 = require("../providers/sanitize-provider-data");
+const signing_1 = require("../providers/signing");
+let PaymentOrchestratorService = class PaymentOrchestratorService {
+    constructor(connection, activeOrderService, orderService, paymentMethodService, requestContextService) {
+        this.connection = connection;
+        this.activeOrderService = activeOrderService;
+        this.orderService = orderService;
+        this.paymentMethodService = paymentMethodService;
+        this.requestContextService = requestContextService;
+    }
+    async initiate(ctx, providerCode) {
+        const order = await this.activeOrderService.getActiveOrder(ctx, undefined);
+        if (!order)
+            throw new Error('No active order exists');
+        if (order.state !== 'ArrangingPayment') {
+            throw new Error(`Order must be in ArrangingPayment, but is in ${order.state}`);
+        }
+        if (order.currencyCode !== 'NPR')
+            throw new Error('Nepal payment providers require NPR');
+        const repository = this.connection.getRepository(ctx, payment_attempt_entity_1.NepalPaymentAttempt);
+        const existing = await repository.findOne({
+            where: {
+                orderId: String(order.id),
+                provider: providerCode,
+                status: (0, typeorm_1.In)(['initiated', 'pending']),
+            },
+            order: { createdAt: 'DESC' },
+        });
+        if (existing && (!existing.expiresAt || existing.expiresAt > new Date())) {
+            throw new Error(`An active ${providerCode} payment attempt already exists: ${existing.id}`);
+        }
+        const attemptId = (0, node_crypto_1.randomUUID)();
+        const options = (0, config_1.getPluginOptions)();
+        const providerOptions = options[providerCode];
+        const paymentMethodCode = providerOptions?.paymentMethodCode ?? config_1.defaultPaymentMethodCodes[providerCode];
+        const provider = (0, provider_factory_1.createProvider)(providerCode);
+        const eligibleMethods = await this.paymentMethodService.getEligiblePaymentMethods(ctx, order);
+        if (!eligibleMethods.some(method => method.code === paymentMethodCode)) {
+            throw new Error(`Payment method "${paymentMethodCode}" is not eligible for this order`);
+        }
+        const attempt = repository.create({
+            orderId: String(order.id),
+            orderCode: order.code,
+            channelId: String(ctx.channelId),
+            channelToken: ctx.channel.token,
+            provider: providerCode,
+            paymentMethodCode,
+            merchantReference: attemptId,
+            providerReference: null,
+            amount: order.totalWithTax,
+            currencyCode: order.currencyCode,
+            status: 'initiated',
+            idempotencyKey: `${providerCode}:${attemptId}`,
+            expiresAt: undefined,
+            verifiedAt: undefined,
+            providerTransactionId: null,
+            vendurePaymentId: null,
+            providerResponse: null,
+        });
+        await repository.save(attempt);
+        try {
+            const initiation = await provider.initiate({
+                attemptId,
+                orderId: order.id,
+                orderCode: order.code,
+                amount: order.totalWithTax,
+                currencyCode: order.currencyCode,
+                returnUrl: `${options.publicServerUrl.replace(/\/$/, '')}/nepal-payments/callback/${providerCode}/${attemptId}`,
+                customer: order.customer ? {
+                    name: `${order.customer.firstName} ${order.customer.lastName}`.trim(),
+                    email: order.customer.emailAddress,
+                    phone: order.customer.phoneNumber,
+                } : undefined,
+            });
+            attempt.providerReference = initiation.providerReference;
+            attempt.expiresAt = initiation.expiresAt;
+            attempt.providerResponse = (0, sanitize_provider_data_1.sanitizedProviderRecord)(initiation.raw);
+            await repository.save(attempt);
+            return { ...initiation, attemptId, provider: providerCode, status: attempt.status };
+        }
+        catch (error) {
+            attempt.status = 'failed';
+            attempt.providerResponse = { error: error instanceof Error ? error.message : 'Initiation failed' };
+            await repository.save(attempt);
+            throw error;
+        }
+    }
+    async processCallback(providerCode, attemptId, callbackPayload) {
+        const rawRepository = this.connection.rawConnection.getRepository(payment_attempt_entity_1.NepalPaymentAttempt);
+        let attempt = await rawRepository.findOne({ where: { merchantReference: attemptId, provider: providerCode } });
+        if (!attempt)
+            throw new Error('Payment attempt was not found');
+        if (attempt.status === 'settled' || attempt.status === 'refunded' || attempt.status === 'partially-refunded') {
+            return attempt;
+        }
+        const claim = await rawRepository.createQueryBuilder()
+            .update(payment_attempt_entity_1.NepalPaymentAttempt)
+            .set({ status: 'verifying' })
+            .where('id = :id', { id: attempt.id })
+            .andWhere('status IN (:...statuses)', { statuses: ['initiated', 'pending', 'unknown', 'failed'] })
+            .execute();
+        if (!claim.affected) {
+            return (await rawRepository.findOneByOrFail({ id: attempt.id }));
+        }
+        try {
+            const verified = await (0, provider_factory_1.createProvider)(providerCode).verify({
+                merchantReference: attempt.merchantReference,
+                providerReference: attempt.providerReference ?? undefined,
+                amount: attempt.amount,
+                callbackPayload,
+            });
+            if (verified.amount !== attempt.amount) {
+                throw new Error('Verified payment amount does not match the payment attempt');
+            }
+            attempt.status = verified.status;
+            attempt.providerTransactionId = verified.transactionId ?? null;
+            attempt.providerResponse = (0, sanitize_provider_data_1.sanitizedProviderRecord)(verified.raw);
+            if (verified.status !== 'settled') {
+                await rawRepository.save(attempt);
+                return attempt;
+            }
+            const ctx = await this.requestContextService.create({
+                apiType: 'shop',
+                channelOrToken: attempt.channelToken,
+                activeOrderId: attempt.orderId,
+            });
+            const proof = (0, signing_1.signSettlementProof)({
+                provider: providerCode,
+                attemptId: attempt.merchantReference,
+                orderId: attempt.orderId,
+                amount: attempt.amount,
+                providerReference: attempt.providerReference ?? verified.providerReference ?? '',
+            }, (0, config_1.getPluginOptions)().internalSigningSecret);
+            const result = await this.orderService.addPaymentToOrder(ctx, attempt.orderId, {
+                method: attempt.paymentMethodCode,
+                metadata: {
+                    attemptId: attempt.merchantReference,
+                    providerReference: attempt.providerReference ?? verified.providerReference,
+                    proof,
+                },
+            });
+            if ((0, core_1.isGraphQlErrorResult)(result)) {
+                throw new Error(result.message);
+            }
+            attempt.status = 'settled';
+            attempt.verifiedAt = new Date();
+            const payment = result.payments?.find(item => item.metadata?.public?.attemptId === attempt.merchantReference);
+            attempt.vendurePaymentId = payment ? String(payment.id) : null;
+            await rawRepository.save(attempt);
+            return attempt;
+        }
+        catch (error) {
+            attempt.status = 'pending';
+            attempt.providerResponse = { error: error instanceof Error ? error.message : 'Callback processing failed' };
+            await rawRepository.save(attempt);
+            throw error;
+        }
+    }
+};
+exports.PaymentOrchestratorService = PaymentOrchestratorService;
+exports.PaymentOrchestratorService = PaymentOrchestratorService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.TransactionalConnection,
+        core_1.ActiveOrderService,
+        core_1.OrderService,
+        core_1.PaymentMethodService,
+        core_1.RequestContextService])
+], PaymentOrchestratorService);
+//# sourceMappingURL=payment-orchestrator.service.js.map

package/dist/services/payment-orchestrator.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payment-orchestrator.service.js","sourceRoot":"","sources":["../../src/services/payment-orchestrator.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,wCAQuB;AACvB,6CAAyC;AACzC,qCAA6B;AAC7B,sCAAwE;AACxE,+EAAyE;AACzE,oEAA+D;AAC/D,gFAA8E;AAC9E,kDAA2D;AAUpD,IAAM,0BAA0B,GAAhC,MAAM,0BAA0B;IACrC,YACmB,UAAmC,EACnC,kBAAsC,EACtC,YAA0B,EAC1B,oBAA0C,EAC1C,qBAA4C;QAJ5C,eAAU,GAAV,UAAU,CAAyB;QACnC,uBAAkB,GAAlB,kBAAkB,CAAoB;QACtC,iBAAY,GAAZ,YAAY,CAAc;QAC1B,yBAAoB,GAApB,oBAAoB,CAAsB;QAC1C,0BAAqB,GAArB,qBAAqB,CAAuB;IAC5D,CAAC;IAEJ,KAAK,CAAC,QAAQ,CAAC,GAAmB,EAAE,YAAsC;QACxE,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,KAAK,KAAK,kBAAkB,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,CAAC;QACD,IAAI,KAAK,CAAC,YAAY,KAAK,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QAEzF,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,4CAAmB,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,OAAO,CAAC;YACxC,KAAK,EAAE;gBACL,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,QAAQ,EAAE,YAAY;gBACtB,MAAM,EAAE,IAAA,YAAE,EAAC,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;aACrC;YACD,KAAK,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;SAC7B,CAAC,CAAC;QACH,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,IAAI,KAAK,CAAC,aAAa,YAAY,oCAAoC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAC9F,CAAC;QAED,MAAM,SAAS,GAAG,IAAA,wBAAU,GAAE,CAAC;QAC/B,MAAM,OAAO,GAAG,IAAA,yBAAgB,GAAE,CAAC;QACnC,MAAM,eAAe,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,iBAAiB,GAAG,eAAe,EAAE,iBAAiB,IAAI,kCAAyB,CAAC,YAAY,CAAC,CAAC;QACxG,MAAM,QAAQ,GAAG,IAAA,iCAAc,EAAC,YAAY,CAAC,CAAC;QAC9C,MAAM,eAAe,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,yBAAyB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC9F,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,mBAAmB,iBAAiB,kCAAkC,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC;YAChC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,SAAS,EAAE,KAAK,CAAC,IAAI;YACrB,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC;YAChC,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK;YAC/B,QAAQ,EAAE,YAAY;YACtB,iBAAiB;YACjB,iBAAiB,EAAE,SAAS;YAC5B,iBAAiB,EAAE,IAAI;YACvB,MAAM,EAAE,KAAK,CAAC,YAAY;YAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,MAAM,EAAE,WAAW;YACnB,cAAc,EAAE,GAAG,YAAY,IAAI,SAAS,EAAE;YAC9C,SAAS,EAAE,SAAS;YACpB,UAAU,EAAE,SAAS;YACrB,qBAAqB,EAAE,IAAI;YAC3B,gBAAgB,EAAE,IAAI;YACtB,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;QACH,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC;gBACzC,SAAS;gBACT,OAAO,EAAE,KAAK,CAAC,EAAE;gBACjB,SAAS,EAAE,KAAK,CAAC,IAAI;gBACrB,MAAM,EAAE,KAAK,CAAC,YAAY;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,SAAS,EAAE,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,4BAA4B,YAAY,IAAI,SAAS,EAAE;gBAC/G,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACzB,IAAI,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE;oBACrE,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY;oBAClC,KAAK,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW;iBAClC,CAAC,CAAC,CAAC,SAAS;aACd,CAAC,CAAC;YACH,OAAO,CAAC,iBAAiB,GAAG,UAAU,CAAC,iBAAiB,CAAC;YACzD,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;YACzC,OAAO,CAAC,gBAAgB,GAAG,IAAA,gDAAuB,EAAC,UAAU,CAAC,GAAG,CAAC,CAAC;YACnE,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,OAAO,EAAE,GAAG,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;QACtF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC;YAC1B,OAAO,CAAC,gBAAgB,GAAG,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAAC;YACnG,MAAM,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,eAAe,CACnB,YAAsC,EACtC,SAAiB,EACjB,eAAwC;QAExC,MAAM,aAAa,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,aAAa,CAAC,4CAAmB,CAAC,CAAC;QACvF,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,iBAAiB,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,CAAC,CAAC;QAC/G,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QAC/D,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,IAAI,OAAO,CAAC,MAAM,KAAK,oBAAoB,EAAE,CAAC;YAC7G,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,kBAAkB,EAAE;aACnD,MAAM,CAAC,4CAAmB,CAAC;aAC3B,GAAG,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;aAC5B,KAAK,CAAC,UAAU,EAAE,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;aACrC,QAAQ,CAAC,0BAA0B,EAAE,EAAE,QAAQ,EAAE,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,CAAC;aACjG,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,CAAC,MAAM,aAAa,CAAC,eAAe,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACnE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAA,iCAAc,EAAC,YAAY,CAAC,CAAC,MAAM,CAAC;gBACzD,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;gBAC5C,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,SAAS;gBACzD,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,eAAe;aAChB,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;gBACvC,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;YAChF,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,OAAO,CAAC,qBAAqB,GAAG,QAAQ,CAAC,aAAa,IAAI,IAAI,CAAC;YAC/D,OAAO,CAAC,gBAAgB,GAAG,IAAA,gDAAuB,EAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACjE,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBAClC,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;gBAClC,OAAO,OAAO,CAAC;YACjB,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;gBAClD,OAAO,EAAE,MAAM;gBACf,cAAc,EAAE,OAAO,CAAC,YAAY;gBACpC,aAAa,EAAE,OAAO,CAAC,OAAO;aAC/B,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,IAAA,6BAAmB,EAAC;gBAChC,QAAQ,EAAE,YAAY;gBACtB,SAAS,EAAE,OAAO,CAAC,iBAAiB;gBACpC,OAAO,EAAE,OAAO,CAAC,OAAO;gBACxB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB,IAAI,EAAE;aACjF,EAAE,IAAA,yBAAgB,GAAE,CAAC,qBAAqB,CAAC,CAAC;YAC7C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,iBAAiB,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE;gBAC7E,MAAM,EAAE,OAAO,CAAC,iBAAiB;gBACjC,QAAQ,EAAE;oBACR,SAAS,EAAE,OAAO,CAAC,iBAAiB;oBACpC,iBAAiB,EAAE,OAAO,CAAC,iBAAiB,IAAI,QAAQ,CAAC,iBAAiB;oBAC1E,KAAK;iBACN;aACF,CAAC,CAAC;YACH,IAAI,IAAA,2BAAoB,EAAC,MAAM,CAAC,EAAE,CAAC;gBACjC,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YACD,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC;YAChC,MAAM,OAAO,GAAG,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;YAC9G,OAAO,CAAC,gBAAgB,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC/D,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;YAC3B,OAAO,CAAC,gBAAgB,GAAG,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,4BAA4B,EAAE,CAAC;YAC5G,MAAM,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YAClC,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAA;AAnKY,gEAA0B;qCAA1B,0BAA0B;IADtC,IAAA,mBAAU,GAAE;qCAGoB,8BAAuB;QACf,yBAAkB;QACxB,mBAAY;QACJ,2BAAoB;QACnB,4BAAqB;GANpD,0BAA0B,CAmKtC"}

package/dist/services/reconciliation.service.d.ts

@@ -0,0 +1,11 @@
+import { RequestContext, TransactionalConnection } from '@vendure/core';
+import { PaymentOrchestratorService } from './payment-orchestrator.service';
+export declare class ReconciliationService {
+    private readonly connection;
+    private readonly orchestrator;
+    constructor(connection: TransactionalConnection, orchestrator: PaymentOrchestratorService);
+    reconcile(ctx: RequestContext, limit?: number): Promise<{
+        checked: number;
+        settled: number;
+    }>;
+}

package/dist/services/reconciliation.service.js

@@ -0,0 +1,55 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReconciliationService = void 0;
+const common_1 = require("@nestjs/common");
+const core_1 = require("@vendure/core");
+const typeorm_1 = require("typeorm");
+const payment_attempt_entity_1 = require("../entities/payment-attempt.entity");
+const payment_orchestrator_service_1 = require("./payment-orchestrator.service");
+let ReconciliationService = class ReconciliationService {
+    constructor(connection, orchestrator) {
+        this.connection = connection;
+        this.orchestrator = orchestrator;
+    }
+    async reconcile(ctx, limit = 50) {
+        const repository = this.connection.getRepository(ctx, payment_attempt_entity_1.NepalPaymentAttempt);
+        const staleBefore = new Date(Date.now() - 5 * 60_000);
+        await repository.update({ status: 'verifying', updatedAt: (0, typeorm_1.LessThan)(staleBefore) }, { status: 'pending' });
+        const attempts = await repository.find({
+            where: {
+                status: (0, typeorm_1.In)(['initiated', 'pending', 'unknown']),
+                updatedAt: (0, typeorm_1.LessThan)(new Date(Date.now() - 30_000)),
+            },
+            order: { updatedAt: 'ASC' },
+            take: Math.max(1, Math.min(limit, 200)),
+        });
+        let settled = 0;
+        for (const attempt of attempts) {
+            try {
+                const result = await this.orchestrator.processCallback(attempt.provider, attempt.merchantReference, {});
+                if (result.status === 'settled')
+                    settled += 1;
+            }
+            catch {
+                // A future run will retry attempts that remain pending.
+            }
+        }
+        return { checked: attempts.length, settled };
+    }
+};
+exports.ReconciliationService = ReconciliationService;
+exports.ReconciliationService = ReconciliationService = __decorate([
+    (0, common_1.Injectable)(),
+    __metadata("design:paramtypes", [core_1.TransactionalConnection,
+        payment_orchestrator_service_1.PaymentOrchestratorService])
+], ReconciliationService);
+//# sourceMappingURL=reconciliation.service.js.map

package/dist/services/reconciliation.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.service.js","sourceRoot":"","sources":["../../src/services/reconciliation.service.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,2CAA4C;AAC5C,wCAAwE;AACxE,qCAAuC;AACvC,+EAAyE;AACzE,iFAA4E;AAGrE,IAAM,qBAAqB,GAA3B,MAAM,qBAAqB;IAChC,YACmB,UAAmC,EACnC,YAAwC;QADxC,eAAU,GAAV,UAAU,CAAyB;QACnC,iBAAY,GAAZ,YAAY,CAA4B;IACxD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,GAAmB,EAAE,KAAK,GAAG,EAAE;QAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,GAAG,EAAE,4CAAmB,CAAC,CAAC;QAC3E,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QACtD,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,IAAA,kBAAQ,EAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC1G,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC;YACrC,KAAK,EAAE;gBACL,MAAM,EAAE,IAAA,YAAE,EAAC,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAC/C,SAAS,EAAE,IAAA,kBAAQ,EAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;aACnD;YACD,KAAK,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;YAC3B,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;SACxC,CAAC,CAAC;QACH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,eAAe,CAAC,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;gBACxG,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;oBAAE,OAAO,IAAI,CAAC,CAAC;YAChD,CAAC;YAAC,MAAM,CAAC;gBACP,wDAAwD;YAC1D,CAAC;QACH,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/C,CAAC;CACF,CAAA;AA7BY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;qCAGoB,8BAAuB;QACrB,yDAA0B;GAHhD,qBAAqB,CA6BjC"}

package/dist/services/reconciliation.task.d.ts

@@ -0,0 +1,2 @@
+import { ScheduledTask } from '@vendure/core';
+export declare const reconcileNepalPaymentsTask: ScheduledTask<Record<string, any>>;

package/dist/services/reconciliation.task.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reconcileNepalPaymentsTask = void 0;
+const core_1 = require("@vendure/core");
+const reconciliation_service_1 = require("./reconciliation.service");
+exports.reconcileNepalPaymentsTask = new core_1.ScheduledTask({
+    id: 'reconcile-nepal-payments',
+    description: 'Verify pending Khalti and eSewa payment attempts',
+    schedule: '*/5 * * * *',
+    preventOverlap: true,
+    timeout: '4m',
+    execute: ({ injector, scheduledContext }) => injector.get(reconciliation_service_1.ReconciliationService).reconcile(scheduledContext),
+});
+//# sourceMappingURL=reconciliation.task.js.map

package/dist/services/reconciliation.task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reconciliation.task.js","sourceRoot":"","sources":["../../src/services/reconciliation.task.ts"],"names":[],"mappings":";;;AAAA,wCAA8C;AAC9C,qEAAiE;AAEpD,QAAA,0BAA0B,GAAG,IAAI,oBAAa,CAAC;IAC1D,EAAE,EAAE,0BAA0B;IAC9B,WAAW,EAAE,kDAAkD;IAC/D,QAAQ,EAAE,aAAa;IACvB,cAAc,EAAE,IAAI;IACpB,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAC1C,QAAQ,CAAC,GAAG,CAAC,8CAAqB,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC;CAClE,CAAC,CAAC"}

package/dist/types.d.ts

@@ -0,0 +1,76 @@
+import type { CurrencyCode, ID } from '@vendure/core';
+export declare const NEPAL_PAYMENT_PROVIDERS: readonly ["khalti", "esewa", "fonepay"];
+/** Provider identifiers used by the shared adapter layer. */
+export type NepalPaymentProviderCode = (typeof NEPAL_PAYMENT_PROVIDERS)[number];
+export declare const PAYMENT_ATTEMPT_STATUSES: readonly ["initiated", "pending", "settled", "failed", "cancelled", "expired", "partially-refunded", "refunded", "unknown"];
+/** Conservative normalized payment states shared across providers. */
+export type PaymentAttemptStatus = (typeof PAYMENT_ATTEMPT_STATUSES)[number];
+/** Optional customer fields accepted by provider initiation APIs. */
+export interface CustomerDetails {
+    name?: string;
+    email?: string;
+    phone?: string;
+}
+/** Provider-neutral initiation input created from the active Vendure order. */
+export interface InitiatePaymentInput {
+    attemptId: string;
+    orderId: ID;
+    orderCode: string;
+    amount: number;
+    currencyCode: CurrencyCode;
+    returnUrl: string;
+    customer?: CustomerDetails;
+}
+/** Provider-neutral redirect, QR, or signed-form initiation result. */
+export interface PaymentInitiation {
+    providerReference: string;
+    redirectUrl?: string;
+    qrPayload?: string;
+    form?: {
+        action: string;
+        fields: Array<{
+            name: string;
+            value: string;
+        }>;
+    };
+    expiresAt?: Date;
+    raw?: unknown;
+}
+/** Input used for a trusted server-to-server payment verification. */
+export interface VerifyPaymentInput {
+    merchantReference: string;
+    providerReference?: string;
+    amount: number;
+    callbackPayload?: Record<string, unknown>;
+}
+/** Normalized result of a provider status lookup. */
+export interface VerifiedPayment {
+    providerReference?: string;
+    transactionId?: string;
+    amount: number;
+    status: PaymentAttemptStatus;
+    raw?: unknown;
+}
+/** Provider-neutral refund request. */
+export interface RefundPaymentInput {
+    transactionId: string;
+    amount?: number;
+    mobile?: string;
+}
+/** Normalized result of a provider refund request. */
+export interface RefundResult {
+    transactionId?: string;
+    status: 'settled' | 'pending' | 'failed';
+    raw?: unknown;
+}
+/**
+ * Contract implemented by Nepalese payment provider adapters.
+ *
+ * This interface is exported for experimentation but may evolve before 1.0.
+ */
+export interface NepalPaymentProvider {
+    readonly code: NepalPaymentProviderCode;
+    initiate(input: InitiatePaymentInput): Promise<PaymentInitiation>;
+    verify(input: VerifyPaymentInput): Promise<VerifiedPayment>;
+    refund?(input: RefundPaymentInput): Promise<RefundResult>;
+}