awesome-node-checkout 2.0.0 → 2.1.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC7F,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AAGnG,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAClF,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGhF,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAG3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAGhF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,YAAY,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAGrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,yBAAyB,CAAC;AAG/D,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,yCAAyC,CAAC;AAC7F,YAAY,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,0CAA0C,CAAC;AACnG,YAAY,EAAE,gBAAgB,EAAE,MAAM,yCAAyC,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,MAAM,yCAAyC,CAAC;AAG5E,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,+BAA+B,CAAC;AAClF,YAAY,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AACrE,YAAY,EACV,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,aAAa,EACb,OAAO,EACP,YAAY,EACZ,aAAa,EACb,YAAY,EACZ,mBAAmB,EACnB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACjF,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,YAAY,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAGzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,2CAA2C,CAAC;AAGhF,OAAO,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAC;AACtF,YAAY,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAG3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAGhF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,YAAY,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE/E,OAAO,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAC9D,YAAY,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEzE,OAAO,EAAE,gBAAgB,EAAE,MAAM,wCAAwC,CAAC;AAC1E,YAAY,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAGrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -1,9 +1,14 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ISO_4217_ALPHA3_CODES = exports.SatispayProvider = exports.NexiProvider = exports.PayPalProvider = exports.InMemoryTransactionStore = exports.CheckoutListenerError = exports.CheckoutEventBus = exports.BasePaymentProvider = exports.CheckoutError = exports.CheckoutConfigurator = void 0;
+exports.appendMandateRef = exports.ISO_4217_ALPHA3_CODES = exports.SatispayProvider = exports.NexiProvider = exports.PayPalProvider = exports.InMemoryTransactionStore = exports.CheckoutListenerError = exports.CheckoutEventBus = exports.BasePaymentProvider = exports.CheckoutError = exports.CHARGE_REF_PATTERN = exports.MANDATE_REF_PATTERN = exports.isMandateProvider = exports.CheckoutConfigurator = void 0;
 // ---- Configurator ----------------------------------------------------------
 var checkout_configurator_1 = require("./checkout-configurator");
 Object.defineProperty(exports, "CheckoutConfigurator", { enumerable: true, get: function () { return checkout_configurator_1.CheckoutConfigurator; } });
+var mandate_provider_interface_1 = require("./interfaces/mandate-provider.interface");
+Object.defineProperty(exports, "isMandateProvider", { enumerable: true, get: function () { return mandate_provider_interface_1.isMandateProvider; } });
+var mandate_model_1 = require("./models/mandate.model");
+Object.defineProperty(exports, "MANDATE_REF_PATTERN", { enumerable: true, get: function () { return mandate_model_1.MANDATE_REF_PATTERN; } });
+Object.defineProperty(exports, "CHARGE_REF_PATTERN", { enumerable: true, get: function () { return mandate_model_1.CHARGE_REF_PATTERN; } });
 var errors_1 = require("./models/errors");
 Object.defineProperty(exports, "CheckoutError", { enumerable: true, get: function () { return errors_1.CheckoutError; } });
 // ---- Abstract --------------------------------------------------------------
@@ -26,4 +31,6 @@ Object.defineProperty(exports, "SatispayProvider", { enumerable: true, get: func
 // ---- Utils -----------------------------------------------------------------
 var parsing_util_1 = require("./utils/parsing.util");
 Object.defineProperty(exports, "ISO_4217_ALPHA3_CODES", { enumerable: true, get: function () { return parsing_util_1.ISO_4217_ALPHA3_CODES; } });
+var url_1 = require("./utils/url");
+Object.defineProperty(exports, "appendMandateRef", { enumerable: true, get: function () { return url_1.appendMandateRef; } });
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,+EAA+E;AAC/E,iEAA+D;AAAtD,6HAAA,oBAAoB,OAAA;AAU7B,0CAAgD;AAAvC,uGAAA,aAAa,OAAA;AAGtB,+EAA+E;AAC/E,4FAAgF;AAAvE,qIAAA,mBAAmB,OAAA;AAE5B,+EAA+E;AAC/E,kEAAsF;AAA7E,sHAAA,gBAAgB,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAGhD,+EAA+E;AAC/E,oFAAgF;AAAvE,uIAAA,wBAAwB,OAAA;AAEjC,+EAA+E;AAC/E,sEAAoE;AAA3D,iHAAA,cAAc,OAAA;AAGvB,gEAA8D;AAArD,6GAAA,YAAY,OAAA;AAGrB,4EAA0E;AAAjE,qHAAA,gBAAgB,OAAA;AAGzB,+EAA+E;AAC/E,qDAA6D;AAApD,qHAAA,qBAAqB,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;AAAA,+EAA+E;AAC/E,iEAA+D;AAAtD,6HAAA,oBAAoB,OAAA;AAM7B,sFAA4E;AAAnE,+HAAA,iBAAiB,OAAA;AAoB1B,wDAAiF;AAAxE,oHAAA,mBAAmB,OAAA;AAAE,mHAAA,kBAAkB,OAAA;AAChD,0CAAgD;AAAvC,uGAAA,aAAa,OAAA;AAGtB,+EAA+E;AAC/E,4FAAgF;AAAvE,qIAAA,mBAAmB,OAAA;AAE5B,+EAA+E;AAC/E,kEAAsF;AAA7E,sHAAA,gBAAgB,OAAA;AAAE,2HAAA,qBAAqB,OAAA;AAGhD,+EAA+E;AAC/E,oFAAgF;AAAvE,uIAAA,wBAAwB,OAAA;AAEjC,+EAA+E;AAC/E,sEAAoE;AAA3D,iHAAA,cAAc,OAAA;AAGvB,gEAA8D;AAArD,6GAAA,YAAY,OAAA;AAGrB,4EAA0E;AAAjE,qHAAA,gBAAgB,OAAA;AAGzB,+EAA+E;AAC/E,qDAA6D;AAApD,qHAAA,qBAAqB,OAAA;AAC9B,mCAA+C;AAAtC,uGAAA,gBAAgB,OAAA"}

package/dist/interfaces/mandate-provider.interface.d.ts

@@ -0,0 +1,40 @@
+import { IPaymentProvider } from './payment-provider.interface';
+import { ChargeRequest, ChargeResult, Mandate, MandateCallbackInput, MandatePendingState, MandateRevokeResult, MandateSetupOutcome, MandateSetupRequest, MandateSetupStart, MandateStatusResult } from '../models/mandate.model';
+/**
+ * Optional capability of a payment provider: recurring payments (mandates).
+ *
+ * Implemented next to `IPaymentProvider` (`class X extends BasePaymentProvider implements
+ * IMandateProvider`); `IPaymentProvider` itself is unchanged. Call these methods through
+ * `CheckoutConfigurator`, which validates the inputs and normalizes the outcomes (fail closed).
+ *
+ * Rules for implementers:
+ * - Stateless: everything needed later is in the returned `MandatePendingState` / `Mandate`.
+ * - Identities (contract number, vault id, token id, order id) come from `pending` / `mandate` or
+ *   from authenticated fields, never from query strings or unsigned callback fields.
+ * - `verified: true` only for outcomes authenticated by a MAC/signature checked by the library or
+ *   by an authenticated server-to-server response.
+ * - Timeouts, 5xx, unparseable bodies and merchant-side refusals (401/403/429, auth/MAC errors,
+ *   rate limiting) are `unknown`, never `failed`.
+ * - Append `mandate_ref` to `returnUrl`, `cancelUrl` and `notifyUrl` with `appendMandateRef`.
+ * - Never retry on your own.
+ */
+export interface IMandateProvider {
+    /** Starts a setup (customer present). The setup always includes the first charge. */
+    createMandate(request: MandateSetupRequest): Promise<MandateSetupStart>;
+    /**
+     * Idempotent: may be called twice (redirect + server notification) for the same pending state.
+     * Must also be safe to call again with an empty `input` (`{}`) at any time, including after a
+     * terminal outcome: apps re-run it from a job to resolve a first charge reported `unknown`. Re-read
+     * the setup server-to-server or replay the same idempotency keys; never start a second first
+     * charge. Without a way to re-read, return an unverified, non-terminal outcome.
+     */
+    confirmMandate(pending: MandatePendingState, input: MandateCallbackInput): Promise<MandateSetupOutcome>;
+    /** Merchant-initiated charge (customer absent). Idempotent on `charge.chargeRef`. */
+    chargeMandate(mandate: Mandate, charge: ChargeRequest): Promise<ChargeResult>;
+    /** Re-reads usability from the provider when it can; otherwise returns verified: false. */
+    getMandate(mandate: Mandate): Promise<MandateStatusResult>;
+    revokeMandate(mandate: Mandate): Promise<MandateRevokeResult>;
+}
+/** True when `p` implements all five `IMandateProvider` methods. */
+export declare function isMandateProvider(p: unknown): p is IPaymentProvider & IMandateProvider;
+//# sourceMappingURL=mandate-provider.interface.d.ts.map

package/dist/interfaces/mandate-provider.interface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate-provider.interface.d.ts","sourceRoot":"","sources":["../../src/interfaces/mandate-provider.interface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EACL,aAAa,EACb,YAAY,EACZ,OAAO,EACP,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,yBAAyB,CAAC;AAEjC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,gBAAgB;IAC/B,qFAAqF;IACrF,aAAa,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxE;;;;;;OAMG;IACH,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACxG,qFAAqF;IACrF,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9E,2FAA2F;IAC3F,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;CAC/D;AAUD,oEAAoE;AACpE,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,gBAAgB,GAAG,gBAAgB,CAItF"}

package/dist/interfaces/mandate-provider.interface.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isMandateProvider = isMandateProvider;
+const MANDATE_METHODS = [
+    'createMandate',
+    'confirmMandate',
+    'chargeMandate',
+    'getMandate',
+    'revokeMandate',
+];
+/** True when `p` implements all five `IMandateProvider` methods. */
+function isMandateProvider(p) {
+    if (p === null || (typeof p !== 'object' && typeof p !== 'function'))
+        return false;
+    const candidate = p;
+    return MANDATE_METHODS.every((method) => typeof candidate[method] === 'function');
+}
+//# sourceMappingURL=mandate-provider.interface.js.map

package/dist/interfaces/mandate-provider.interface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate-provider.interface.js","sourceRoot":"","sources":["../../src/interfaces/mandate-provider.interface.ts"],"names":[],"mappings":";;AA2DA,8CAIC;AAbD,MAAM,eAAe,GAAG;IACtB,eAAe;IACf,gBAAgB;IAChB,eAAe;IACf,YAAY;IACZ,eAAe;CACP,CAAC;AAEX,oEAAoE;AACpE,SAAgB,iBAAiB,CAAC,CAAU;IAC1C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IACnF,MAAM,SAAS,GAAG,CAA4B,CAAC;IAC/C,OAAO,eAAe,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,UAAU,CAAC,CAAC;AACpF,CAAC"}

package/dist/models/checkout-config.model.d.ts

@@ -1,3 +1,4 @@
+import type { CheckoutEventName } from '../events/checkout-event-bus';
 /**
  * Global configuration for CheckoutConfigurator.
  */
@@ -8,5 +9,20 @@ export interface CheckoutConfig {
      * @default true
      */
     emitEvents?: boolean;
+    /**
+     * Receives an error raised while emitting an event after a mandate provider call has completed
+     * (`mandate.created`, `mandate.setup_failed` and the first `charge.*` from `confirmMandate`,
+     * `charge.*` from `chargeMandate`, `mandate.revoked` from `revokeMandate`). Usually a
+     * `CheckoutListenerError` (original value in `cause`).
+     *
+     * Those methods never reject because of a listener: money may already have moved, so the
+     * normalized result always reaches the caller and the error comes here instead. When this
+     * hook is not set, the error is logged with `console.error('[awesome-node-checkout]', err)`.
+     * An error thrown by the hook itself is logged and never rejects the method.
+     *
+     * Every other event, `mandate.setup_started` included, still propagates listener errors to the
+     * caller.
+     */
+    onListenerError?: (err: unknown, event: CheckoutEventName) => void | Promise<void>;
 }
 //# sourceMappingURL=checkout-config.model.d.ts.map

package/dist/models/checkout-config.model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"checkout-config.model.d.ts","sourceRoot":"","sources":["../../src/models/checkout-config.model.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB"}
+{"version":3,"file":"checkout-config.model.d.ts","sourceRoot":"","sources":["../../src/models/checkout-config.model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B;;;;OAIG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;;;;;;;;;OAaG;IACH,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,iBAAiB,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpF"}

package/dist/models/errors.d.ts

@@ -1,4 +1,4 @@
-export type CheckoutErrorCode = 'PROVIDER_NOT_FOUND' | 'PROVIDER_ALREADY_REGISTERED' | 'PAYMENT_FAILED' | 'WEBHOOK_NOT_SUPPORTED' | 'REDIRECT_NOT_SUPPORTED' | 'TRANSACTION_NOT_FOUND' | 'INSECURE_CONFIGURATION' | 'INVALID_AMOUNT';
+export type CheckoutErrorCode = 'PROVIDER_NOT_FOUND' | 'PROVIDER_ALREADY_REGISTERED' | 'PAYMENT_FAILED' | 'WEBHOOK_NOT_SUPPORTED' | 'REDIRECT_NOT_SUPPORTED' | 'TRANSACTION_NOT_FOUND' | 'INSECURE_CONFIGURATION' | 'INVALID_AMOUNT' | 'MANDATES_NOT_SUPPORTED' | 'INVALID_MANDATE_REQUEST';
 export declare class CheckoutError extends Error {
     readonly code: CheckoutErrorCode;
     readonly provider?: string | undefined;

package/dist/models/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/models/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,oBAAoB,GACpB,6BAA6B,GAC7B,gBAAgB,GAChB,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,wBAAwB,GACxB,gBAAgB,CAAC;AAErB,qBAAa,aAAc,SAAQ,KAAK;aAGpB,IAAI,EAAE,iBAAiB;aACvB,QAAQ,CAAC,EAAE,MAAM;gBAFjC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,iBAAiB,EACvB,QAAQ,CAAC,EAAE,MAAM,YAAA;CASpC"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/models/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,iBAAiB,GACzB,oBAAoB,GACpB,6BAA6B,GAC7B,gBAAgB,GAChB,uBAAuB,GACvB,wBAAwB,GACxB,uBAAuB,GACvB,wBAAwB,GACxB,gBAAgB,GAChB,wBAAwB,GACxB,yBAAyB,CAAC;AAE9B,qBAAa,aAAc,SAAQ,KAAK;aAGpB,IAAI,EAAE,iBAAiB;aACvB,QAAQ,CAAC,EAAE,MAAM;gBAFjC,OAAO,EAAE,MAAM,EACC,IAAI,EAAE,iBAAiB,EACvB,QAAQ,CAAC,EAAE,MAAM,YAAA;CASpC"}

package/dist/models/errors.js.map

@@ -1 +1 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/models/errors.ts"],"names":[],"mappings":";;;AAUA,MAAa,aAAc,SAAQ,KAAK;IACtC,YACE,OAAe,EACC,IAAuB,EACvB,QAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAmB;QACvB,aAAQ,GAAR,QAAQ,CAAS;QAGjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,qCAAqC;QACrC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF;AAbD,sCAaC"}
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/models/errors.ts"],"names":[],"mappings":";;;AAYA,MAAa,aAAc,SAAQ,KAAK;IACtC,YACE,OAAe,EACC,IAAuB,EACvB,QAAiB;QAEjC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,SAAI,GAAJ,IAAI,CAAmB;QACvB,aAAQ,GAAR,QAAQ,CAAS;QAGjC,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,qCAAqC;QACrC,IAAI,KAAK,CAAC,iBAAiB,EAAE,CAAC;YAC5B,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;CACF;AAbD,sCAaC"}

package/dist/models/mandate.model.d.ts

@@ -0,0 +1,166 @@
+/**
+ * Recurring payments (mandates).
+ *
+ * The library provides mandate primitives only (create, confirm, charge, get, revoke). The app
+ * owns scheduling, retries and dunning, subscription state, prices, VAT and invoices. Every
+ * object below is plain JSON: the app persists it and passes it back later, so a restart or a
+ * second instance loses nothing. The library keeps no mandate state in memory.
+ */
+/** `mandateRef`: 5-30 chars of `A-Z a-z 0-9 _ -` (Nexi `num_contratto` limits). */
+export declare const MANDATE_REF_PATTERN: RegExp;
+/**
+ * `orderId` of a setup and `chargeRef` of a charge: 2-30 chars of `A-Z a-z 0-9 -`, no
+ * underscore (Nexi `codiceTransazione` limits).
+ */
+export declare const CHARGE_REF_PATTERN: RegExp;
+export interface MandateSetupRequest {
+    /** Fresh for EVERY setup attempt (never reuse one after a failed or abandoned setup). /^[A-Za-z0-9_-]{5,30}$/ (Nexi num_contratto limits). */
+    mandateRef: string;
+    /**
+     * Order code of the FIRST charge; also its chargeRef. Fresh for every setup attempt.
+     * /^[A-Za-z0-9-]{2,30}$/ (no underscore: Nexi codiceTransazione). Never pass it to
+     * `chargeMandate`: an `unknown` first charge is resolved by re-running `confirmMandate`.
+     */
+    orderId: string;
+    /** First charge, major units; validated with toMinorUnits(amount, currency). */
+    amount: number;
+    /** ISO 4217 alpha-3. A provider may restrict it (Nexi: EUR only). */
+    currency: string;
+    /** Shown to the payer (PayPal vault description, Satispay reason). 1-127 chars. */
+    description: string;
+    /**
+     * Where the customer comes back after approving. With the Express adapter it must point to
+     * `<mount>/<provider>/mandate/callback`; the provider appends `mandate_ref`.
+     */
+    returnUrl: string;
+    /** Where the customer comes back after cancelling. Same rule as `returnUrl`. */
+    cancelUrl: string;
+    /** Server-to-server notification URL, where supported (Nexi urlpost, Satispay callback_url). */
+    notifyUrl?: string;
+}
+/**
+ * Persist verbatim; pass back to confirmMandate. JSON-serializable. Keep it after a terminal
+ * outcome consumed it while that outcome's `firstCharge` is `unknown`: it is the input of
+ * `confirmMandate(provider, pending, {})`, which resolves the first charge.
+ */
+export interface MandatePendingState {
+    provider: string;
+    mandateRef: string;
+    orderId: string;
+    amount: number;
+    currency: string;
+    /** Provider object created at setup: PayPal order id, Satispay authorization token id, Nexi codTrans. */
+    providerRef: string;
+    /** ISO 8601 */
+    createdAt: string;
+}
+export interface MandateSetupStart {
+    success: boolean;
+    /** Where to send the customer. */
+    approvalUrl?: string;
+    pending?: MandatePendingState;
+    error?: string;
+    raw?: unknown;
+}
+export type MandateStatus = 'active' | 'revoked';
+/** Persist verbatim; pass back to chargeMandate / getMandate / revokeMandate. JSON-serializable. */
+export interface Mandate {
+    provider: string;
+    mandateRef: string;
+    /**
+     * Nexi: num_contratto (= mandateRef). PayPal: vault payment token id. Satispay: authorization
+     * token id. Credential-like: never put it in logs, URLs or events (the library never does).
+     */
+    providerMandateId: string;
+    status: MandateStatus;
+    /** ISO 8601 */
+    createdAt: string;
+    /** Provider-specific extra the provider needs at charge time (e.g. PayPal customer id). Never secrets. */
+    providerData?: Record<string, string>;
+    /** Hints from unsigned fields. Never use for authorization decisions. */
+    unverified?: {
+        cardExpiry?: string;
+        maskedPan?: string;
+        payerEmail?: string;
+    };
+}
+/**
+ * - `succeeded`: the charge was authoritatively accepted (only with `verified: true`).
+ * - `failed`: the charge was authoritatively refused. Counts towards dunning; a retry is a NEW
+ *   charge with a new `chargeRef`.
+ * - `unknown`: timeout, 5xx, unparseable body, merchant-side refusal (401/403/429, auth/MAC
+ *   error, rate limit) or an unauthenticated "success". A `chargeMandate` charge: retry with the
+ *   SAME `chargeRef`. The first charge of a setup (`chargeRef = orderId`): re-run
+ *   `confirmMandate(provider, pending, {})`, never `chargeMandate` with the setup's `orderId`.
+ * - `requires_action`: the provider needs the customer (e.g. PayPal `PAYER_ACTION_REQUIRED`).
+ */
+export type ChargeStatus = 'succeeded' | 'failed' | 'unknown' | 'requires_action';
+export interface ChargeRequest {
+    /** Idempotency key, unique per intended charge, stable across retries. /^[A-Za-z0-9-]{2,30}$/ (no underscore: Nexi codiceTransazione) */
+    chargeRef: string;
+    /** Major units; validated with toMinorUnits(amount, currency). */
+    amount: number;
+    currency: string;
+    description?: string;
+}
+export interface ChargeResult {
+    status: ChargeStatus;
+    /** true only for outcomes authenticated by MAC/signature or authenticated API response. */
+    verified: boolean;
+    chargeRef: string;
+    providerPaymentId?: string;
+    amount?: number;
+    currency?: string;
+    /** Set when the provider says the mandate is no longer usable (revoked, expired, contract KO). */
+    mandateUnusable?: boolean;
+    error?: string;
+    /** Provider decline/error code when available. */
+    providerCode?: string;
+    raw?: unknown;
+}
+export interface MandateSetupOutcome {
+    /** true when the mandate is active (first charge may still have failed: check firstCharge). */
+    success: boolean;
+    verified: boolean;
+    /**
+     * true only when this outcome is final for the pending setup: verified AND either the mandate is
+     * active or the provider authoritatively refused it. Only a terminal outcome may consume the
+     * pending state. A non-terminal outcome (unverified, still pending, network error) must leave it
+     * in place so the genuine callback can still complete the setup.
+     */
+    terminal: boolean;
+    mandate?: Mandate;
+    /**
+     * The first charge (`chargeRef = orderId`). It can be `unknown` on a terminal outcome, even with
+     * `success: true` (e.g. a PayPal capture still `PENDING`, a Satispay first payment that timed
+     * out). Resolve it by keeping the consumed pending state and re-running
+     * `confirmMandate(provider, pending, {})` from a job, never with `chargeMandate` and the setup's
+     * `orderId` (on PayPal that is a new order: a double charge or `DUPLICATE_INVOICE_ID`).
+     */
+    firstCharge: ChargeResult;
+    error?: string;
+    raw?: unknown;
+}
+export interface MandateCallbackInput {
+    query?: Record<string, string>;
+    body?: Record<string, unknown>;
+    headers?: Record<string, string>;
+    context?: {
+        method?: string;
+        path?: string;
+        rawBody?: Buffer | string;
+    };
+}
+/** Result of `getMandate`: `verified: false` when the provider cannot re-read the mandate. */
+export interface MandateStatusResult {
+    status: MandateStatus | 'unknown';
+    verified: boolean;
+    raw?: unknown;
+}
+/** Result of `revokeMandate`. Mark your own copy revoked whatever it says. */
+export interface MandateRevokeResult {
+    revokedAtProvider: boolean;
+    error?: string;
+    raw?: unknown;
+}
+//# sourceMappingURL=mandate.model.d.ts.map

package/dist/models/mandate.model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.model.d.ts","sourceRoot":"","sources":["../../src/models/mandate.model.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,mFAAmF;AACnF,eAAO,MAAM,mBAAmB,QAA0B,CAAC;AAE3D;;;GAGG;AACH,eAAO,MAAM,kBAAkB,QAAyB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,8IAA8I;IAC9I,UAAU,EAAE,MAAM,CAAC;IACnB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,EAAE,MAAM,CAAC;IACjB,mFAAmF;IACnF,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,gGAAgG;IAChG,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,yGAAyG;IACzG,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,kCAAkC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,OAAO,CAAC,EAAE,mBAAmB,CAAC;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEjD,oGAAoG;AACpG,MAAM,WAAW,OAAO;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,MAAM,EAAE,aAAa,CAAC;IACtB,eAAe;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,0GAA0G;IAC1G,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,yEAAyE;IACzE,UAAU,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/E;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,iBAAiB,CAAC;AAElF,MAAM,WAAW,aAAa;IAC5B,yIAAyI;IACzI,SAAS,EAAE,MAAM,CAAC;IAClB,kEAAkE;IAClE,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,YAAY,CAAC;IACrB,2FAA2F;IAC3F,QAAQ,EAAE,OAAO,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kGAAkG;IAClG,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,+FAA+F;IAC/F,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,OAAO,CAAC;IAClB;;;;;OAKG;IACH,QAAQ,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB;;;;;;OAMG;IACH,WAAW,EAAE,YAAY,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,oBAAoB;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,OAAO,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAA;KAAE,CAAC;CACzE;AAED,8FAA8F;AAC9F,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;IAClC,QAAQ,EAAE,OAAO,CAAC;IAClB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,8EAA8E;AAC9E,MAAM,WAAW,mBAAmB;IAClC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,CAAC,EAAE,OAAO,CAAC;CACf"}

package/dist/models/mandate.model.js

@@ -0,0 +1,19 @@
+"use strict";
+/**
+ * Recurring payments (mandates).
+ *
+ * The library provides mandate primitives only (create, confirm, charge, get, revoke). The app
+ * owns scheduling, retries and dunning, subscription state, prices, VAT and invoices. Every
+ * object below is plain JSON: the app persists it and passes it back later, so a restart or a
+ * second instance loses nothing. The library keeps no mandate state in memory.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CHARGE_REF_PATTERN = exports.MANDATE_REF_PATTERN = void 0;
+/** `mandateRef`: 5-30 chars of `A-Z a-z 0-9 _ -` (Nexi `num_contratto` limits). */
+exports.MANDATE_REF_PATTERN = /^[A-Za-z0-9_-]{5,30}$/;
+/**
+ * `orderId` of a setup and `chargeRef` of a charge: 2-30 chars of `A-Z a-z 0-9 -`, no
+ * underscore (Nexi `codiceTransazione` limits).
+ */
+exports.CHARGE_REF_PATTERN = /^[A-Za-z0-9-]{2,30}$/;
+//# sourceMappingURL=mandate.model.js.map

package/dist/models/mandate.model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mandate.model.js","sourceRoot":"","sources":["../../src/models/mandate.model.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;;AAEH,mFAAmF;AACtE,QAAA,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D;;;GAGG;AACU,QAAA,kBAAkB,GAAG,sBAAsB,CAAC"}

package/dist/providers/nexi/nexi.provider.d.ts

@@ -1,6 +1,8 @@
 import { BasePaymentProvider } from '../../abstract/base-payment-provider.abstract';
 import { PaymentRequest } from '../../models/payment-request.model';
 import { PaymentResult, WebhookResult } from '../../models/payment-result.model';
+import { IMandateProvider } from '../../interfaces/mandate-provider.interface';
+import { ChargeRequest, ChargeResult, Mandate, MandateCallbackInput, MandatePendingState, MandateRevokeResult, MandateSetupOutcome, MandateSetupRequest, MandateSetupStart, MandateStatusResult } from '../../models/mandate.model';
 export interface NexiProviderConfig {
     merchantId: string;
     macKey: string;
@@ -8,20 +10,37 @@ export interface NexiProviderConfig {
     group?: string;
     /** @default 'sandbox' */
     environment?: 'sandbox' | 'production';
+    /**
+     * Timeout of the recurring-payment and contract API calls (`pagamentoRicorrente`,
+     * `situazioneOrdine` replay guard, `dettagliContratto`, `cancellaContratto`), in ms.
+     * @default 30000
+     */
+    timeoutMs?: number;
+    /**
+     * Mandates: contract type sent as `tipo_contratto` at setup (`S` scheduled, `U` unscheduled) and
+     * included in the setup MAC. Only needed when the terminal is enabled for both kinds.
+     */
+    contractType?: 'S' | 'U';
 }
 /**
  * Nexi eCommerce provider.
  * Flow: `redirect` — builds a signed checkout URL, redirects the user to Nexi,
  * then handles the POST-back via `handleRedirect`.
  *
+ * Recurring payments (`IMandateProvider`): the setup is a hosted-page first payment that
+ * registers a contract (`num_contratto` = `mandateRef`, `tipo_servizio=paga_multi`,
+ * `tipo_richiesta=PP`); later charges use `pagamentoRicorrente`; `cancellaContratto` revokes.
+ * EUR only. See "Specifiche tecniche di integrazione con il gateway di pagamento XPay" v20.4.
+ *
  * Note: Nexi XPay mandates SHA-1 for MAC computation. This is a requirement of
  * the Nexi API and cannot be changed on the client side.
  */
-export declare class NexiProvider extends BasePaymentProvider {
+export declare class NexiProvider extends BasePaymentProvider implements IMandateProvider {
     private readonly config;
     readonly name = "nexi";
     readonly flow: "redirect";
     private readonly apiUrl;
+    private readonly timeoutMs;
     constructor(config: NexiProviderConfig);
     /**
      * Computes the SHA-1 MAC required by Nexi to authenticate the payment request.
@@ -58,6 +77,57 @@ export declare class NexiProvider extends BasePaymentProvider {
      */
     private verifyResponseMac;
     private safeVerifyResponseMac;
+    /**
+     * Extracts the fields of a hosted-page outcome (redirect query or `urlpost` form). Missing
+     * fields are `''`; `codTrans` falls back to `fallbackCodTrans` when given. `mac` is returned as
+     * is, to be checked with `isValidHexMac`.
+     */
+    private extractOutcomeFields;
+    /** True when the 7-field outcome MAC of `fields` is present and valid (constant time). */
+    private outcomeMacValid;
+    /** Constant-time comparison of a hex MAC against the expected SHA-1 hex digest. */
+    private hexMacEquals;
+    /**
+     * Verifies the standard XPay REST response MAC:
+     * `esito={esito}idOperazione={idOperazione}timeStamp={timeStamp}{macKey}`.
+     */
+    private responseMacValid;
+    /**
+     * MAC policy of the recurring and contract APIs: a present `mac` must be valid whatever the
+     * `esito`; a missing one is tolerated only on `KO` (an error answer may carry none).
+     */
+    private responseAuthentic;
+    /**
+     * Classifies a "Tabella Codici errore API Restful" code (pp. 883-885). A missing or
+     * non-numeric code is `merchant`: without a code nothing says the customer is at fault.
+     */
+    private classifyApiError;
+    /** `errore.codice` / `errore.messaggio` of a response, when present. */
+    private apiError;
+    /**
+     * Computes the MAC of `pagamentoRicorrente` (p. 191). `scadenza` is not sent, so it is in the
+     * string with an empty value, as the manual requires:
+     * `apiKey=…numeroContratto=…codiceTransazione=…importo=…divisa=978scadenza=timeStamp=…{macKey}`.
+     */
+    private generateRecurringMac;
+    /**
+     * POSTs a JSON body to an XPay REST endpoint with the configured timeout. Never throws; the
+     * error never contains the response body.
+     */
+    private postApi;
+    /**
+     * Reads `situazioneOrdine` for `codTrans` (same request as `getPaymentDetails`) and classifies
+     * the raw response, over every report entry for `codTrans`:
+     * - `paid`: some entry shows the money was taken (`NEXI_CHARGED_STATUSES`: paid, partly captured,
+     *   refunded or partly refunded);
+     * - `pending`: otherwise, some entry is in progress (`In Corso`), has an unrecognised `stato`, or
+     *   has none. Fail safe: such a code may still be charged, so it is never reported as refused;
+     * - `refused`: every entry is a clear refusal (`Negato`, `Annullato`, `Non Creato`);
+     * - `absent`: OK with no matching report entry, or KO "not found" 2/13;
+     * - `error`: anything else (HTTP, network, timeout, non-JSON, bad MAC, a missing MAC on OK, no
+     *   `report` array, any other KO).
+     */
+    private lookupTransaction;
     createPayment(request: PaymentRequest): Promise<PaymentResult>;
     /**
      * Validates the POST-back data from Nexi.
@@ -81,5 +151,59 @@ export declare class NexiProvider extends BasePaymentProvider {
      * The outcome MAC is mandatory and verified over all 7 fields to ensure authenticity.
      */
     handleRedirect(query: Record<string, string>): Promise<PaymentResult>;
+    /**
+     * Starts a contract registration: a hosted-page first payment with `num_contratto` =
+     * `mandateRef`, `tipo_servizio=paga_multi`, `tipo_richiesta=PP` (pp. 59-65), charging the first
+     * period. `codTrans` is `orderId`. EUR only. `mandate_ref` is appended to `url`, `url_back` and
+     * `urlpost`.
+     */
+    createMandate(request: MandateSetupRequest): Promise<MandateSetupStart>;
+    /**
+     * Confirms a setup from the hosted-page outcome: the redirect on `url` (GET query) or the
+     * `urlpost` notification (form POST). Pure function of its inputs, hence idempotent.
+     *
+     * - The 7-field outcome MAC must be valid, and the MAC-covered `codTrans`, `importo` and
+     *   `divisa` must match `pending`; otherwise the outcome is unverified and non-terminal (a forged
+     *   callback never consumes the pending state). The unsigned `num_contratto`, when present, must
+     *   be `pending.mandateRef` (and `tipo_servizio` / `tipo_richiesta`, when present, `paga_multi` /
+     *   `PP`); the contract number used is always `pending.mandateRef`.
+     * - `esito=OK` with `num_contratto`: active mandate, first charge `succeeded` (terminal). An OK
+     *   without `num_contratto` is unverified and non-terminal (no contract may exist).
+     * - `esito` `KO`, `ANNULLO` or `ERRORE`: no mandate, first charge `failed` (terminal). Start a
+     *   new setup with a fresh `mandateRef` and `orderId`: a `codTrans` is never reused. This
+     *   requires a terminal that allows a single payment attempt per `codTrans`: on a terminal
+     *   configured for up to 3 attempts (manual, pp. 32-33), a KO then an OK arrive for the same
+     *   `codTrans`, and the OK finds the pending state already consumed.
+     * - Any other `esito` (e.g. a pending one) is unverified and non-terminal: it may still turn OK.
+     *
+     * An empty input (`{}`) has no MAC, so a re-confirm is unverified and non-terminal: Nexi never
+     * reports a terminal outcome with an `unknown` first charge.
+     */
+    confirmMandate(pending: MandatePendingState, input: MandateCallbackInput): Promise<MandateSetupOutcome>;
+    /**
+     * Merchant-initiated charge with `pagamentoRicorrente` (pp. 188-193), EUR only.
+     * `codiceTransazione` is `charge.chargeRef`, so `refundPayment(chargeRef, amount)` refunds it.
+     *
+     * Replay guard: `situazioneOrdine` is read first. A transaction that took the money (paid,
+     * partly captured, refunded or partly refunded) is returned as `succeeded` without charging
+     * again, with its `stato` in `raw`; one that only Nexi refused (`Negato`, `Annullato`,
+     * `Non Creato`) is `failed` (a dunning retry needs a new `chargeRef`: Nexi's own retries of a
+     * code after a KO are not used); one still in progress (`In Corso`) or with an unrecognised
+     * `stato` is `unknown`, and so is a lookup error: nothing is charged. A Nexi "transaction
+     * already present" (9) is re-read.
+     * Merchant-side errors (credentials, MAC, technical) are `unknown`, never `failed`.
+     */
+    chargeMandate(mandate: Mandate, charge: ChargeRequest): Promise<ChargeResult>;
+    /**
+     * Re-reads the contract with `dettagliContratto` (pp. 851-853). `active` when it is listed and
+     * its first payment is not KO; `revoked` when its first payment is KO or Nexi answers "not
+     * found" or "invalid contract"; otherwise `unknown` (unverified).
+     */
+    getMandate(mandate: Mandate): Promise<MandateStatusResult>;
+    /**
+     * Cancels the contract with `cancellaContratto` (pp. 838-840). "Not found" and "invalid
+     * contract" count as revoked: the contract is already gone.
+     */
+    revokeMandate(mandate: Mandate): Promise<MandateRevokeResult>;
 }
 //# sourceMappingURL=nexi.provider.d.ts.map

package/dist/providers/nexi/nexi.provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"nexi.provider.d.ts","sourceRoot":"","sources":["../../../src/providers/nexi/nexi.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AAGpF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAGjF,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;CACxC;AAED;;;;;;;GAOG;AACH,qBAAa,YAAa,SAAQ,mBAAmB;IAMvC,OAAO,CAAC,QAAQ,CAAC,MAAM;IALnC,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEH,MAAM,EAAE,kBAAkB;IAQvD;;;;;OAKG;IACH,OAAO,CAAC,IAAI;IAIZ;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAInB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,qBAAqB;IAiBvB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAmDpE;;;;;;;OAOG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAuE9F;;;OAGG;IACG,aAAa,CACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACpC,OAAO,CAAC,aAAa,CAAC;IAqDnB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA6G5D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA6C/E;;;;OAIG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;CAG5E"}
+{"version":3,"file":"nexi.provider.d.ts","sourceRoot":"","sources":["../../../src/providers/nexi/nexi.provider.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+CAA+C,CAAC;AAGpF,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAGjF,OAAO,EAAE,gBAAgB,EAAE,MAAM,6CAA6C,CAAC;AAC/E,OAAO,EAEL,aAAa,EACb,YAAY,EAEZ,OAAO,EACP,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACpB,MAAM,4BAA4B,CAAC;AAEpC,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,WAAW,CAAC,EAAE,SAAS,GAAG,YAAY,CAAC;IACvC;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,GAAG,GAAG,GAAG,CAAC;CAC1B;AA+DD;;;;;;;;;;;;GAYG;AACH,qBAAa,YAAa,SAAQ,mBAAoB,YAAW,gBAAgB;IAOnE,OAAO,CAAC,QAAQ,CAAC,MAAM;IANnC,QAAQ,CAAC,IAAI,UAAU;IACvB,QAAQ,CAAC,IAAI,EAAG,UAAU,CAAU;IAEpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEN,MAAM,EAAE,kBAAkB;IAYvD;;;;;OAKG;IACH,OAAO,CAAC,IAAI;IAIZ;;;;;OAKG;IACH,OAAO,CAAC,WAAW;IAInB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAIzB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IASzB;;;OAGG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAwBzB,OAAO,CAAC,qBAAqB;IAiB7B;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAsB5B,0FAA0F;IAC1F,OAAO,CAAC,eAAe;IAYvB,mFAAmF;IACnF,OAAO,CAAC,YAAY;IAWpB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAWxB;;;OAGG;IACH,OAAO,CAAC,iBAAiB;IAMzB;;;OAGG;IACH,OAAO,CAAC,gBAAgB;IAaxB,wEAAwE;IACxE,OAAO,CAAC,QAAQ;IAUhB;;;;OAIG;IACH,OAAO,CAAC,oBAAoB;IAa5B;;;OAGG;YACW,OAAO;IA8BrB;;;;;;;;;;;OAWG;YACW,iBAAiB;IAkDzB,aAAa,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,aAAa,CAAC;IAmDpE;;;;;;;OAOG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAiE9F;;;OAGG;IACG,aAAa,CACjB,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC9B,QAAQ,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACpC,OAAO,CAAC,aAAa,CAAC;IAqDnB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA4G5D,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IA6C/E;;;;OAIG;IACG,cAAc,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IAQ3E;;;;;OAKG;IACG,aAAa,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAsD7E;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,cAAc,CAAC,OAAO,EAAE,mBAAmB,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAqG7G;;;;;;;;;;;;OAYG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,YAAY,CAAC;IAiInF;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA4ChE;;;OAGG;IACG,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;CAkCpE"}