awesome-node-checkout 1.0.1 → 1.0.2

package/dist/providers/paypal/paypal.provider.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PayPalProvider = void 0;
+const paypal_server_sdk_1 = require("@paypal/paypal-server-sdk");
+const base_payment_provider_abstract_1 = require("../../abstract/base-payment-provider.abstract");
+/**
+ * PayPal Checkout provider.
+ * Flow: `redirect` — creates an order, redirects the user to PayPal,
+ * then captures the payment on return via `handleRedirect`.
+ */
+class PayPalProvider extends base_payment_provider_abstract_1.BasePaymentProvider {
+    constructor(config) {
+        super();
+        this.config = config;
+        this.name = 'paypal';
+        this.flow = 'redirect';
+        const { clientId, clientSecret, environment = 'sandbox' } = config;
+        this.client = new paypal_server_sdk_1.Client({
+            clientCredentialsAuthCredentials: {
+                oAuthClientId: clientId,
+                oAuthClientSecret: clientSecret,
+            },
+            environment: environment === 'live' ? paypal_server_sdk_1.Environment.Production : paypal_server_sdk_1.Environment.Sandbox,
+            logging: {
+                logLevel: paypal_server_sdk_1.LogLevel.Error,
+            },
+        });
+        this.ordersController = new paypal_server_sdk_1.OrdersController(this.client);
+        this.paymentsController = new paypal_server_sdk_1.PaymentsController(this.client);
+    }
+    async createPayment(request) {
+        try {
+            const { result: order } = await this.ordersController.createOrder({
+                body: {
+                    intent: 'CAPTURE',
+                    purchaseUnits: [
+                        {
+                            amount: {
+                                currencyCode: request.currency,
+                                value: request.amount.toFixed(2),
+                            },
+                            description: request.description,
+                        },
+                    ],
+                    paymentSource: {
+                        paypal: {
+                            experienceContext: {
+                                returnUrl: request.returnUrl,
+                                cancelUrl: request.cancelUrl,
+                            },
+                        },
+                    },
+                },
+                prefer: 'return=representation',
+            });
+            const approvalUrl = order.links?.find((l) => l.rel === 'payer-action' || l.rel === 'approve')?.href;
+            return {
+                success: true,
+                paymentId: order.id,
+                approvalUrl,
+                status: order.status,
+                raw: order,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to create PayPal payment');
+        }
+    }
+    async executePayment(paymentId) {
+        try {
+            const { result: order } = await this.ordersController.captureOrder({
+                id: paymentId,
+                body: {},
+            });
+            return {
+                success: order.status === 'COMPLETED',
+                paymentId: order.id,
+                status: order.status,
+                raw: order,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to execute PayPal payment');
+        }
+    }
+    async getPaymentDetails(paymentId) {
+        try {
+            const { result: order } = await this.ordersController.getOrder({
+                id: paymentId,
+            });
+            return {
+                success: true,
+                paymentId: order.id,
+                status: order.status,
+                raw: order,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to get PayPal payment details');
+        }
+    }
+    async refundPayment(paymentId, amount) {
+        try {
+            // Retrieve order to find the capture ID and currency
+            const { result: order } = await this.ordersController.getOrder({ id: paymentId });
+            // The PayPal SDK types nested objects as `any`; extract with explicit guards
+            const purchaseUnit = Array.isArray(order?.purchaseUnits)
+                ? order.purchaseUnits[0]
+                : undefined;
+            const captureId = Array.isArray(purchaseUnit?.payments?.captures) && purchaseUnit.payments.captures.length > 0
+                ? String(purchaseUnit.payments.captures[0].id)
+                : undefined;
+            if (!captureId) {
+                return {
+                    success: false,
+                    error: 'No capture found for this order. Ensure the payment has been captured before refunding.',
+                    paymentId,
+                    status: 'REFUND_FAILED',
+                };
+            }
+            const refundBody = {};
+            if (amount !== undefined) {
+                const currencyCode = typeof purchaseUnit?.amount?.currencyCode === 'string'
+                    ? purchaseUnit.amount.currencyCode
+                    : undefined;
+                if (!currencyCode) {
+                    return {
+                        success: false,
+                        error: 'Cannot determine currency code from order. Refund a specific amount is not possible.',
+                        paymentId,
+                        status: 'REFUND_FAILED',
+                    };
+                }
+                refundBody['amount'] = { value: amount.toFixed(2), currencyCode };
+            }
+            const { result: refund } = await this.paymentsController.refundCapturedPayment({
+                captureId,
+                body: refundBody,
+            });
+            return {
+                success: refund?.status === 'COMPLETED',
+                paymentId: String(refund?.id ?? ''),
+                status: String(refund?.status ?? ''),
+                raw: refund,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to refund PayPal payment');
+        }
+    }
+    /**
+     * Handles the redirect from PayPal after the user approves the payment.
+     * PayPal appends `token` (order ID) and `PayerID` to the returnUrl.
+     */
+    async handleRedirect(query) {
+        const paymentId = query['token'];
+        if (!paymentId) {
+            return {
+                success: false,
+                error: 'Missing token in PayPal redirect query',
+            };
+        }
+        return this.executePayment(paymentId);
+    }
+}
+exports.PayPalProvider = PayPalProvider;
+//# sourceMappingURL=paypal.provider.js.map

package/dist/providers/paypal/paypal.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paypal.provider.js","sourceRoot":"","sources":["../../../src/providers/paypal/paypal.provider.ts"],"names":[],"mappings":";;;AAAA,iEAMmC;AACnC,kGAAoF;AAWpF;;;;GAIG;AACH,MAAa,cAAe,SAAQ,oDAAmB;IAQrD,YAA6B,MAA4B;QACvD,KAAK,EAAE,CAAC;QADmB,WAAM,GAAN,MAAM,CAAsB;QAPhD,SAAI,GAAG,QAAQ,CAAC;QAChB,SAAI,GAAG,UAAmB,CAAC;QAQlC,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,GAAG,SAAS,EAAE,GAAG,MAAM,CAAC;QAEnE,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAM,CAAC;YACvB,gCAAgC,EAAE;gBAChC,aAAa,EAAE,QAAQ;gBACvB,iBAAiB,EAAE,YAAY;aAChC;YACD,WAAW,EACT,WAAW,KAAK,MAAM,CAAC,CAAC,CAAC,+BAAW,CAAC,UAAU,CAAC,CAAC,CAAC,+BAAW,CAAC,OAAO;YACvE,OAAO,EAAE;gBACP,QAAQ,EAAE,4BAAQ,CAAC,KAAK;aACzB;SACF,CAAC,CAAC;QAEH,IAAI,CAAC,gBAAgB,GAAG,IAAI,oCAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1D,IAAI,CAAC,kBAAkB,GAAG,IAAI,sCAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,OAAuB;QACzC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC;gBAChE,IAAI,EAAE;oBACJ,MAAM,EAAE,SAAgB;oBACxB,aAAa,EAAE;wBACb;4BACE,MAAM,EAAE;gCACN,YAAY,EAAE,OAAO,CAAC,QAAQ;gCAC9B,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;6BACjC;4BACD,WAAW,EAAE,OAAO,CAAC,WAAW;yBACjC;qBACF;oBACD,aAAa,EAAE;wBACb,MAAM,EAAE;4BACN,iBAAiB,EAAE;gCACjB,SAAS,EAAE,OAAO,CAAC,SAAS;gCAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;6BAC7B;yBACF;qBACF;iBACF;gBACD,MAAM,EAAE,uBAAuB;aAChC,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,CACnC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,cAAc,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS,CAC5D,EAAE,IAAI,CAAC;YAER,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,EAAY;gBAC7B,WAAW;gBACX,MAAM,EAAE,KAAK,CAAC,MAAgB;gBAC9B,GAAG,EAAE,KAAK;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,YAAY,CAAC;gBACjE,EAAE,EAAE,SAAS;gBACb,IAAI,EAAE,EAAE;aACT,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,KAAK,CAAC,MAAM,KAAK,WAAW;gBACrC,SAAS,EAAE,KAAK,CAAC,EAAY;gBAC7B,MAAM,EAAE,KAAK,CAAC,MAAgB;gBAC9B,GAAG,EAAE,KAAK;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,kCAAkC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC;gBAC7D,EAAE,EAAE,SAAS;aACd,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,KAAK,CAAC,EAAY;gBAC7B,MAAM,EAAE,KAAK,CAAC,MAAgB;gBAC9B,GAAG,EAAE,KAAK;aACX,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,sCAAsC,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,MAAe;QACpD,IAAI,CAAC;YACH,qDAAqD;YACrD,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC;YAElF,6EAA6E;YAC7E,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAE,KAAa,EAAE,aAAa,CAAC;gBAC/D,CAAC,CAAE,KAAa,CAAC,aAAa,CAAC,CAAC,CAAC;gBACjC,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,SAAS,GACb,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAC1F,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,CAAC,CAAC,SAAS,CAAC;YAEhB,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,OAAO;oBACL,OAAO,EAAE,KAAK;oBACd,KAAK,EAAE,yFAAyF;oBAChG,SAAS;oBACT,MAAM,EAAE,eAAe;iBACxB,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAA4B,EAAE,CAAC;YAC/C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,YAAY,GAAG,OAAO,YAAY,EAAE,MAAM,EAAE,YAAY,KAAK,QAAQ;oBACzE,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,YAAY;oBAClC,CAAC,CAAC,SAAS,CAAC;gBACd,IAAI,CAAC,YAAY,EAAE,CAAC;oBAClB,OAAO;wBACL,OAAO,EAAE,KAAK;wBACd,KAAK,EAAE,sFAAsF;wBAC7F,SAAS;wBACT,MAAM,EAAE,eAAe;qBACxB,CAAC;gBACJ,CAAC;gBACD,UAAU,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;YACpE,CAAC;YAED,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,qBAAqB,CAAC;gBAC7E,SAAS;gBACT,IAAI,EAAE,UAAiB;aACxB,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAG,MAAc,EAAE,MAAM,KAAK,WAAW;gBAChD,SAAS,EAAE,MAAM,CAAE,MAAc,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC5C,MAAM,EAAE,MAAM,CAAE,MAAc,EAAE,MAAM,IAAI,EAAE,CAAC;gBAC7C,GAAG,EAAE,MAAM;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,iCAAiC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,KAA6B;QAChD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,wCAAwC;aAChD,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IACxC,CAAC;CACF;AA9KD,wCA8KC"}

package/dist/providers/satispay/satispay.provider.d.ts

@@ -0,0 +1,79 @@
+import { BasePaymentProvider } from '../../abstract/base-payment-provider.abstract';
+import { PaymentRequest } from '../../models/payment-request.model';
+import { PaymentResult, WebhookResult } from '../../models/payment-result.model';
+import { ITransactionStore } from '../../interfaces/transaction-store.interface';
+export interface SatispayProviderConfig {
+    keyId: string;
+    /**
+     * RSA private key in PEM format (string content, not a file path).
+     * Load with: `fs.readFileSync('private.pem', 'utf8')`
+     */
+    privateKey: string;
+    /**
+     * Satispay RSA public key in PEM format, used to verify incoming webhook
+     * HTTP Signatures. Obtain it by calling GET /g_business/v1/consumers/{keyId}
+     * on Satispay's API for the keyId present in the webhook Authorization header.
+     * When provided, every inbound webhook whose signature cannot be verified is
+     * rejected before any business logic is executed.
+     */
+    webhookPublicKey?: string;
+    /** @default 'sandbox' */
+    environment?: 'sandbox' | 'production';
+    /**
+     * Base URL of the host application.
+     * Used to build the `callback_url` sent to Satispay.
+     * Example: 'https://myapp.com'
+     */
+    serverUrl?: string;
+    /**
+     * Custom transaction store for correlating webhooks with orders.
+     * Defaults to InMemoryTransactionStore.
+     * Use a persistent store (Redis, DB) in multi-instance deployments.
+     */
+    transactionStore?: ITransactionStore;
+}
+/**
+ * Satispay Business API provider.
+ * Flow: `webhook` — creates a MATCH_CODE payment, user pays via Satispay app,
+ * Satispay calls the `callback_url` webhook, which is correlated to the order
+ * via the `ITransactionStore`. The redirect is then verified via `handleRedirect`.
+ */
+export declare class SatispayProvider extends BasePaymentProvider {
+    private readonly config;
+    readonly name = "satispay";
+    readonly flow: "webhook";
+    private readonly apiUrl;
+    private readonly transactionStore;
+    constructor(config: SatispayProviderConfig);
+    private buildSignatureHeaders;
+    /**
+     * Verifies the HTTP Signature in an inbound Satispay webhook request.
+     * Satispay signs webhooks with their own RSA private key; we verify using
+     * the corresponding public key supplied in `config.webhookPublicKey`.
+     *
+     * Returns `true` if the signature is valid, `false` otherwise.
+     * If no `webhookPublicKey` is configured the check is skipped and `true`
+     * is returned — callers should treat this as an unverified state.
+     */
+    private verifyWebhookSignature;
+    private request;
+    createPayment(request: PaymentRequest): Promise<PaymentResult>;
+    /** For Satispay, execute is equivalent to a status check */
+    executePayment(paymentId: string): Promise<PaymentResult>;
+    getPaymentDetails(paymentId: string): Promise<PaymentResult>;
+    refundPayment(paymentId: string, amount?: number): Promise<PaymentResult>;
+    /**
+     * Handles the async webhook notification from Satispay.
+     * Satispay calls this URL with `payment_id` (the Satispay payment UUID).
+     * The HTTP Signature in the Authorization header is verified against
+     * `config.webhookPublicKey` (when configured) before processing.
+     * We then confirm the payment status via an authenticated API call.
+     */
+    handleWebhook(body: Record<string, unknown>, headers: Record<string, string>): Promise<WebhookResult>;
+    /**
+     * Handles the redirect back to the merchant app after the Satispay flow.
+     * Looks up the transaction by `order_id` in the store, then verifies status.
+     */
+    handleRedirect(query: Record<string, string>): Promise<PaymentResult>;
+}
+//# sourceMappingURL=satispay.provider.d.ts.map

package/dist/providers/satispay/satispay.provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"satispay.provider.d.ts","sourceRoot":"","sources":["../../../src/providers/satispay/satispay.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AACpF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AACjF,OAAO,EAAE,iBAAiB,EAAE,MAAM,8CAA8C,CAAC;AAGjF,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,yBAAyB;IACzB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IACvC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,iBAAiB,CAAC;CACtC;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,mBAAmB;IAO3C,OAAO,CAAC,QAAQ,CAAC,MAAM;IANnC,QAAQ,CAAC,IAAI,cAAc;IAC3B,QAAQ,CAAC,IAAI,EAAG,SAAS,CAAU;IAEnC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAoB;gBAExB,MAAM,EAAE,sBAAsB;IAsB3D,OAAO,CAAC,qBAAqB;IAmC7B;;;;;;;;OAQG;IACH,OAAO,CAAC,sBAAsB;YAgEhB,OAAO;IAsBf,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAyCpE,4DAA4D;IACtD,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAIzD,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAc5D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAmB/E;;;;;;OAMG;IACG,aAAa,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAwB3G;;;OAGG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;CA4B5E"}

package/dist/providers/satispay/satispay.provider.js

@@ -0,0 +1,301 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SatispayProvider = void 0;
+const crypto = __importStar(require("crypto"));
+const base_payment_provider_abstract_1 = require("../../abstract/base-payment-provider.abstract");
+const in_memory_transaction_store_1 = require("../../stores/in-memory-transaction.store");
+/**
+ * Satispay Business API provider.
+ * Flow: `webhook` — creates a MATCH_CODE payment, user pays via Satispay app,
+ * Satispay calls the `callback_url` webhook, which is correlated to the order
+ * via the `ITransactionStore`. The redirect is then verified via `handleRedirect`.
+ */
+class SatispayProvider extends base_payment_provider_abstract_1.BasePaymentProvider {
+    constructor(config) {
+        super();
+        this.config = config;
+        this.name = 'satispay';
+        this.flow = 'webhook';
+        this.apiUrl =
+            config.environment === 'production'
+                ? 'https://authservices.satispay.com/g_business/v1'
+                : 'https://staging.authservices.satispay.com/g_business/v1';
+        this.transactionStore = config.transactionStore ?? new in_memory_transaction_store_1.InMemoryTransactionStore();
+        if (!config.webhookPublicKey) {
+            console.warn('[SatispayProvider] webhookPublicKey is not configured: ' +
+                'incoming webhook signatures will NOT be verified. ' +
+                'Anyone who knows the webhook URL can send fake payment notifications. ' +
+                'Set webhookPublicKey in SatispayProviderConfig before deploying to production.');
+        }
+    }
+    // ---------------------------------------------------------------------------
+    // Authentication
+    // ---------------------------------------------------------------------------
+    buildSignatureHeaders(method, path, host, body) {
+        const bodyString = body ? JSON.stringify(body) : '';
+        const digest = 'SHA-256=' + crypto.createHash('sha256').update(bodyString).digest('base64');
+        const date = new Date().toUTCString();
+        const requestTarget = `${method.toLowerCase()} ${path}`;
+        const message = `(request-target): ${requestTarget}\n` +
+            `host: ${host}\n` +
+            `date: ${date}\n` +
+            `digest: ${digest}`;
+        const sign = crypto.createSign('RSA-SHA256');
+        sign.update(message);
+        const signature = sign.sign(this.config.privateKey, 'base64');
+        const authorization = `Signature keyId="${this.config.keyId}", algorithm="rsa-sha256", ` +
+            `headers="(request-target) host date digest", signature="${signature}"`;
+        return {
+            'Content-Type': 'application/json',
+            'Host': host,
+            'Date': date,
+            'Digest': digest,
+            'Authorization': authorization,
+        };
+    }
+    /**
+     * Verifies the HTTP Signature in an inbound Satispay webhook request.
+     * Satispay signs webhooks with their own RSA private key; we verify using
+     * the corresponding public key supplied in `config.webhookPublicKey`.
+     *
+     * Returns `true` if the signature is valid, `false` otherwise.
+     * If no `webhookPublicKey` is configured the check is skipped and `true`
+     * is returned — callers should treat this as an unverified state.
+     */
+    verifyWebhookSignature(body, headers) {
+        if (!this.config.webhookPublicKey) {
+            return true; // verification skipped — no public key configured
+        }
+        try {
+            const authHeader = headers['authorization'] ?? headers['Authorization'];
+            if (!authHeader)
+                return false;
+            // Parse the Signature params from the Authorization header.
+            // Format: Signature keyId="...", algorithm="...", headers="...", signature="..."
+            // Use indexOf-based parsing to avoid ReDoS-prone regexes on untrusted input.
+            const sigParams = {};
+            const schemePrefix = 'Signature ';
+            const paramStr = authHeader.startsWith(schemePrefix)
+                ? authHeader.slice(schemePrefix.length)
+                : authHeader;
+            for (const part of paramStr.split(',')) {
+                const eqIdx = part.indexOf('="');
+                if (eqIdx === -1)
+                    continue;
+                const key = part.slice(0, eqIdx).trim();
+                const valueStart = eqIdx + 2;
+                const valueEnd = part.lastIndexOf('"');
+                if (valueEnd <= valueStart)
+                    continue;
+                const value = part.slice(valueStart, valueEnd);
+                if (key)
+                    sigParams[key] = value;
+            }
+            const { signature, headers: signedHeaders = '(request-target) host date digest' } = sigParams;
+            if (!signature)
+                return false;
+            // Reconstruct the signed message from the incoming headers
+            const headerNames = signedHeaders.split(' ');
+            const bodyString = body ? JSON.stringify(body) : '';
+            const digest = 'SHA-256=' + crypto.createHash('sha256').update(bodyString).digest('base64');
+            const parts = [];
+            for (const name of headerNames) {
+                if (name === 'digest') {
+                    parts.push(`digest: ${digest}`);
+                }
+                else {
+                    const value = headers[name] ??
+                        headers[name.toLowerCase()] ??
+                        headers[name.toUpperCase()];
+                    if (value === undefined)
+                        return false;
+                    parts.push(`${name}: ${value}`);
+                }
+            }
+            const message = parts.join('\n');
+            const verify = crypto.createVerify('RSA-SHA256');
+            verify.update(message);
+            return verify.verify(this.config.webhookPublicKey, signature, 'base64');
+        }
+        catch {
+            return false;
+        }
+    }
+    async request(method, url, body) {
+        const parsed = new URL(url);
+        const headers = this.buildSignatureHeaders(method, parsed.pathname, parsed.host, body);
+        const response = await fetch(url, {
+            method,
+            headers,
+            body: body ? JSON.stringify(body) : undefined,
+        });
+        const text = await response.text();
+        if (!response.ok) {
+            throw new Error(`Satispay API ${response.status}: ${text}`);
+        }
+        return JSON.parse(text);
+    }
+    // ---------------------------------------------------------------------------
+    // IPaymentProvider implementation
+    // ---------------------------------------------------------------------------
+    async createPayment(request) {
+        try {
+            const orderId = request.orderId ?? `ORD-${Date.now()}`;
+            const baseUrl = this.config.serverUrl ?? '';
+            // Satispay replaces {uuid} at runtime with the actual payment ID
+            const callbackUrl = `${baseUrl}/checkout/satispay/webhook?order_id=${orderId}&payment_id={uuid}`;
+            const body = {
+                flow: 'MATCH_CODE',
+                amount_unit: Math.round(request.amount * 100),
+                currency: request.currency,
+                external_code: orderId,
+                callback_url: callbackUrl,
+                redirect_url: request.returnUrl,
+                metadata: request.metadata,
+            };
+            const payment = await this.request('POST', `${this.apiUrl}/payments`, body);
+            // Persist the mapping orderId → paymentId for later webhook correlation
+            await this.transactionStore.save(orderId, {
+                provider: 'satispay',
+                orderId,
+                paymentId: payment['id'],
+                createdAt: new Date().toISOString(),
+            });
+            return {
+                success: true,
+                paymentId: payment['id'],
+                approvalUrl: (payment['redirect_url'] ?? payment['url_checkout']),
+                status: payment['status'],
+                raw: payment,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to create Satispay payment');
+        }
+    }
+    /** For Satispay, execute is equivalent to a status check */
+    async executePayment(paymentId) {
+        return this.getPaymentDetails(paymentId);
+    }
+    async getPaymentDetails(paymentId) {
+        try {
+            const payment = await this.request('GET', `${this.apiUrl}/payments/${paymentId}`);
+            return {
+                success: true,
+                paymentId: payment['id'],
+                status: payment['status'],
+                raw: payment,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to get Satispay payment details');
+        }
+    }
+    async refundPayment(paymentId, amount) {
+        try {
+            const body = amount ? { amount_unit: Math.round(amount * 100) } : {};
+            const refund = await this.request('POST', `${this.apiUrl}/payments/${paymentId}/refunds`, body);
+            return {
+                success: true,
+                paymentId: refund['id'],
+                status: refund['status'],
+                raw: refund,
+            };
+        }
+        catch (error) {
+            return this.errorResult(error, 'Failed to refund Satispay payment');
+        }
+    }
+    /**
+     * Handles the async webhook notification from Satispay.
+     * Satispay calls this URL with `payment_id` (the Satispay payment UUID).
+     * The HTTP Signature in the Authorization header is verified against
+     * `config.webhookPublicKey` (when configured) before processing.
+     * We then confirm the payment status via an authenticated API call.
+     */
+    async handleWebhook(body, headers) {
+        if (!this.verifyWebhookSignature(body, headers)) {
+            return { success: false, error: 'Webhook signature verification failed' };
+        }
+        const paymentId = body['payment_id'] ?? body['id'];
+        if (!paymentId) {
+            return { success: false, error: 'Missing payment_id in webhook body' };
+        }
+        try {
+            const payment = await this.request('GET', `${this.apiUrl}/payments/${paymentId}`);
+            return {
+                success: payment['status'] === 'ACCEPTED',
+                paymentId: payment['id'],
+                status: payment['status'],
+                raw: payment,
+            };
+        }
+        catch (error) {
+            const msg = error instanceof Error ? error.message : 'Webhook handling failed';
+            return { success: false, paymentId, error: msg };
+        }
+    }
+    /**
+     * Handles the redirect back to the merchant app after the Satispay flow.
+     * Looks up the transaction by `order_id` in the store, then verifies status.
+     */
+    async handleRedirect(query) {
+        const orderId = query['order_id'];
+        if (!orderId) {
+            return { success: false, error: 'Missing order_id in redirect query' };
+        }
+        const transaction = await this.transactionStore.get(orderId);
+        if (!transaction?.paymentId) {
+            return {
+                success: false,
+                error: `Transaction not found for order '${orderId}'. ` +
+                    'Ensure the webhook was received before the redirect.',
+            };
+        }
+        const details = await this.getPaymentDetails(transaction.paymentId);
+        if (details.success && details.status === 'ACCEPTED') {
+            await this.transactionStore.delete(orderId);
+        }
+        return {
+            success: details.success && details.status === 'ACCEPTED',
+            paymentId: details.paymentId,
+            status: details.status,
+            raw: details.raw,
+        };
+    }
+}
+exports.SatispayProvider = SatispayProvider;
+//# sourceMappingURL=satispay.provider.js.map

package/dist/providers/satispay/satispay.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"satispay.provider.js","sourceRoot":"","sources":["../../../src/providers/satispay/satispay.provider.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,+CAAiC;AACjC,kGAAoF;AAIpF,0FAAoF;AAiCpF;;;;;GAKG;AACH,MAAa,gBAAiB,SAAQ,oDAAmB;IAOvD,YAA6B,MAA8B;QACzD,KAAK,EAAE,CAAC;QADmB,WAAM,GAAN,MAAM,CAAwB;QANlD,SAAI,GAAG,UAAU,CAAC;QAClB,SAAI,GAAG,SAAkB,CAAC;QAOjC,IAAI,CAAC,MAAM;YACT,MAAM,CAAC,WAAW,KAAK,YAAY;gBACjC,CAAC,CAAC,iDAAiD;gBACnD,CAAC,CAAC,yDAAyD,CAAC;QAChE,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,IAAI,sDAAwB,EAAE,CAAC;QAElF,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAC7B,OAAO,CAAC,IAAI,CACV,yDAAyD;gBACzD,oDAAoD;gBACpD,wEAAwE;gBACxE,gFAAgF,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,iBAAiB;IACjB,8EAA8E;IAEtE,qBAAqB,CAC3B,MAAc,EACd,IAAY,EACZ,IAAY,EACZ,IAAc;QAEd,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GACV,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/E,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,aAAa,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC;QAExD,MAAM,OAAO,GACX,qBAAqB,aAAa,IAAI;YACtC,SAAS,IAAI,IAAI;YACjB,SAAS,IAAI,IAAI;YACjB,WAAW,MAAM,EAAE,CAAC;QAEtB,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACrB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;QAE9D,MAAM,aAAa,GACjB,oBAAoB,IAAI,CAAC,MAAM,CAAC,KAAK,6BAA6B;YAClE,2DAA2D,SAAS,GAAG,CAAC;QAE1E,OAAO;YACL,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;YACZ,QAAQ,EAAE,MAAM;YAChB,eAAe,EAAE,aAAa;SAC/B,CAAC;IACJ,CAAC;IAED;;;;;;;;OAQG;IACK,sBAAsB,CAC5B,IAAa,EACb,OAA+B;QAE/B,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;YAClC,OAAO,IAAI,CAAC,CAAC,kDAAkD;QACjE,CAAC;QAED,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,eAAe,CAAC,CAAC;YACxE,IAAI,CAAC,UAAU;gBAAE,OAAO,KAAK,CAAC;YAE9B,4DAA4D;YAC5D,iFAAiF;YACjF,6EAA6E;YAC7E,MAAM,SAAS,GAA2B,EAAE,CAAC;YAC7C,MAAM,YAAY,GAAG,YAAY,CAAC;YAClC,MAAM,QAAQ,GAAG,UAAU,CAAC,UAAU,CAAC,YAAY,CAAC;gBAClD,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC;gBACvC,CAAC,CAAC,UAAU,CAAC;YAEf,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;gBACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,KAAK,KAAK,CAAC,CAAC;oBAAE,SAAS;gBAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,MAAM,UAAU,GAAG,KAAK,GAAG,CAAC,CAAC;gBAC7B,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;gBACvC,IAAI,QAAQ,IAAI,UAAU;oBAAE,SAAS;gBACrC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;gBAC/C,IAAI,GAAG;oBAAE,SAAS,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YAClC,CAAC;YAED,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,GAAG,mCAAmC,EAAE,GAAG,SAAS,CAAC;YAC9F,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YAE7B,2DAA2D;YAC3D,MAAM,WAAW,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,MAAM,MAAM,GACV,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YAE/E,MAAM,KAAK,GAAa,EAAE,CAAC;YAC3B,KAAK,MAAM,IAAI,IAAI,WAAW,EAAE,CAAC;gBAC/B,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;oBACtB,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,EAAE,CAAC,CAAC;gBAClC,CAAC;qBAAM,CAAC;oBACN,MAAM,KAAK,GACT,OAAO,CAAC,IAAI,CAAC;wBACb,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;wBAC3B,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC9B,IAAI,KAAK,KAAK,SAAS;wBAAE,OAAO,KAAK,CAAC;oBACtC,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC;gBAClC,CAAC;YACH,CAAC;YACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAEjC,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACjD,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvB,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,OAAO,CAA8B,MAAc,EAAE,GAAW,EAAE,IAAc;QAC5F,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;QAEH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,KAAK,CAAC,gBAAgB,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAED,8EAA8E;IAC9E,kCAAkC;IAClC,8EAA8E;IAE9E,KAAK,CAAC,aAAa,CAAC,OAAuB;QACzC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACvD,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;YAE5C,iEAAiE;YACjE,MAAM,WAAW,GACf,GAAG,OAAO,uCAAuC,OAAO,oBAAoB,CAAC;YAE/E,MAAM,IAAI,GAAG;gBACX,IAAI,EAAE,YAAY;gBAClB,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,GAAG,CAAC;gBAC7C,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,aAAa,EAAE,OAAO;gBACtB,YAAY,EAAE,WAAW;gBACzB,YAAY,EAAE,OAAO,CAAC,SAAS;gBAC/B,QAAQ,EAAE,OAAO,CAAC,QAAQ;aAC3B,CAAC;YAEF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,WAAW,EAAE,IAAI,CAAC,CAAC;YAErG,wEAAwE;YACxE,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,EAAE;gBACxC,QAAQ,EAAE,UAAU;gBACpB,OAAO;gBACP,SAAS,EAAE,OAAO,CAAC,IAAI,CAAW;gBAClC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;YAEH,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,OAAO,CAAC,IAAI,CAAW;gBAClC,WAAW,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,CAAC,CAAuB;gBACvF,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAW;gBACnC,GAAG,EAAE,OAAO;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED,4DAA4D;IAC5D,KAAK,CAAC,cAAc,CAAC,SAAiB;QACpC,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,SAAiB;QACvC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,aAAa,SAAS,EAAE,CAAC,CAAC;YAC3G,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,OAAO,CAAC,IAAI,CAAW;gBAClC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAW;gBACnC,GAAG,EAAE,OAAO;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,wCAAwC,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,KAAK,CAAC,aAAa,CAAC,SAAiB,EAAE,MAAe;QACpD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAC/B,MAAM,EACN,GAAG,IAAI,CAAC,MAAM,aAAa,SAAS,UAAU,EAC9C,IAAI,CACL,CAAC;YACF,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,MAAM,CAAC,IAAI,CAAW;gBACjC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAW;gBAClC,GAAG,EAAE,MAAM;aACZ,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;QACtE,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CAAC,IAA6B,EAAE,OAA+B;QAChF,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;YAChD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;QAC5E,CAAC;QAED,MAAM,SAAS,GACZ,IAAI,CAAC,YAAY,CAAwB,IAAK,IAAI,CAAC,IAAI,CAAwB,CAAC;QACnF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAA0B,KAAK,EAAE,GAAG,IAAI,CAAC,MAAM,aAAa,SAAS,EAAE,CAAC,CAAC;YAC3G,OAAO;gBACL,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK,UAAU;gBACzC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAW;gBAClC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAW;gBACnC,GAAG,EAAE,OAAO;aACb,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,yBAAyB,CAAC;YAC/E,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,cAAc,CAAC,KAA6B;QAChD,MAAM,OAAO,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAClC,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC;QACzE,CAAC;QAED,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7D,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;YAC5B,OAAO;gBACL,OAAO,EAAE,KAAK;gBACd,KAAK,EAAE,oCAAoC,OAAO,KAAK;oBACrD,sDAAsD;aACzD,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;QAEpE,IAAI,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YACrD,MAAM,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAED,OAAO;YACL,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,UAAU;YACzD,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC;IACJ,CAAC;CACF;AA7SD,4CA6SC"}

package/dist/stores/in-memory-transaction.store.d.ts

@@ -0,0 +1,17 @@
+import { ITransactionStore, TransactionData } from '../interfaces/transaction-store.interface';
+/**
+ * Built-in in-memory transaction store.
+ * Suitable for development and single-process deployments.
+ *
+ * For production multi-instance deployments, implement `ITransactionStore`
+ * backed by Redis, PostgreSQL, MongoDB, etc.
+ */
+export declare class InMemoryTransactionStore implements ITransactionStore {
+    private readonly store;
+    save(key: string, data: TransactionData): Promise<void>;
+    get(key: string): Promise<TransactionData | null>;
+    delete(key: string): Promise<void>;
+    /** Returns the number of stored transactions (useful for testing) */
+    get size(): number;
+}
+//# sourceMappingURL=in-memory-transaction.store.d.ts.map

package/dist/stores/in-memory-transaction.store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-transaction.store.d.ts","sourceRoot":"","sources":["../../src/stores/in-memory-transaction.store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,2CAA2C,CAAC;AAE/F;;;;;;GAMG;AACH,qBAAa,wBAAyB,YAAW,iBAAiB;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA2C;IAE3D,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAIvD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC;IAIjD,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxC,qEAAqE;IACrE,IAAI,IAAI,IAAI,MAAM,CAEjB;CACF"}

package/dist/stores/in-memory-transaction.store.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.InMemoryTransactionStore = void 0;
+/**
+ * Built-in in-memory transaction store.
+ * Suitable for development and single-process deployments.
+ *
+ * For production multi-instance deployments, implement `ITransactionStore`
+ * backed by Redis, PostgreSQL, MongoDB, etc.
+ */
+class InMemoryTransactionStore {
+    constructor() {
+        this.store = new Map();
+    }
+    async save(key, data) {
+        this.store.set(key, { ...data });
+    }
+    async get(key) {
+        return this.store.get(key) ?? null;
+    }
+    async delete(key) {
+        this.store.delete(key);
+    }
+    /** Returns the number of stored transactions (useful for testing) */
+    get size() {
+        return this.store.size;
+    }
+}
+exports.InMemoryTransactionStore = InMemoryTransactionStore;
+//# sourceMappingURL=in-memory-transaction.store.js.map

package/dist/stores/in-memory-transaction.store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"in-memory-transaction.store.js","sourceRoot":"","sources":["../../src/stores/in-memory-transaction.store.ts"],"names":[],"mappings":";;;AAEA;;;;;;GAMG;AACH,MAAa,wBAAwB;IAArC;QACmB,UAAK,GAAiC,IAAI,GAAG,EAAE,CAAC;IAkBnE,CAAC;IAhBC,KAAK,CAAC,IAAI,CAAC,GAAW,EAAE,IAAqB;QAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,CAAC;IAED,qEAAqE;IACrE,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAnBD,4DAmBC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "awesome-node-checkout",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Framework-agnostic payment checkout library for Node.js",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -45,4 +45,4 @@
   "dependencies": {
     "@paypal/paypal-server-sdk": "^2.2.0"
   }
-}
+}