paybridge 0.3.1 → 0.5.0

package/dist/providers/razorpay.js

@@ -0,0 +1,328 @@
+"use strict";
+/**
+ * Razorpay payment provider
+ * Leading payment gateway for India
+ * @see https://razorpay.com/docs/api
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RazorpayProvider = void 0;
+const crypto = __importStar(require("crypto"));
+const base_1 = require("./base");
+const currency_1 = require("../utils/currency");
+const fetch_1 = require("../utils/fetch");
+class RazorpayProvider extends base_1.PaymentProvider {
+    constructor(config) {
+        super();
+        this.name = 'razorpay';
+        this.supportedCurrencies = ['INR', 'USD', 'EUR', 'GBP', 'SGD', 'AED', 'AUD'];
+        this.baseUrl = 'https://api.razorpay.com/v1';
+        this.keyId = config.keyId;
+        this.keySecret = config.keySecret;
+        this.webhookSecret = config.webhookSecret;
+        this.sandbox = config.sandbox ?? this.keyId.startsWith('rzp_test_');
+    }
+    async apiRequest(method, path, data) {
+        const url = `${this.baseUrl}${path}`;
+        const authString = Buffer.from(`${this.keyId}:${this.keySecret}`).toString('base64');
+        const response = await (0, fetch_1.timedFetch)(url, {
+            method,
+            headers: {
+                Authorization: `Basic ${authString}`,
+                'Content-Type': 'application/json',
+            },
+            body: data ? JSON.stringify(data) : undefined,
+        });
+        const json = await response.json();
+        if (!response.ok) {
+            const message = json.error?.description || `Razorpay API error (${method} ${path}): ${response.status}`;
+            throw new Error(message);
+        }
+        return json;
+    }
+    async createPayment(params) {
+        this.validateCurrency(params.currency);
+        const amountInMinorUnits = (0, currency_1.toMinorUnit)(params.amount, params.currency);
+        const orderData = {
+            amount: amountInMinorUnits,
+            currency: params.currency,
+            receipt: params.reference,
+            notes: {
+                reference: params.reference,
+                customerEmail: params.customer.email,
+                ...(params.metadata || {}),
+            },
+        };
+        const order = await this.apiRequest('POST', '/orders', orderData);
+        const checkoutUrl = `https://api.razorpay.com/v1/checkout/embedded?key_id=${this.keyId}&order_id=${order.id}`;
+        return {
+            id: order.id,
+            checkoutUrl,
+            status: 'pending',
+            amount: (0, currency_1.toMajorUnit)(order.amount, params.currency),
+            currency: order.currency,
+            reference: params.reference,
+            provider: 'razorpay',
+            createdAt: new Date(order.created_at * 1000).toISOString(),
+            raw: order,
+        };
+    }
+    async createSubscription(params) {
+        this.validateCurrency(params.currency);
+        const amountInMinorUnits = (0, currency_1.toMinorUnit)(params.amount, params.currency);
+        const intervalMap = {
+            weekly: 'weekly',
+            monthly: 'monthly',
+            yearly: 'yearly',
+        };
+        const planData = {
+            period: intervalMap[params.interval],
+            interval: 1,
+            item: {
+                name: params.description || params.reference,
+                amount: amountInMinorUnits,
+                currency: params.currency,
+            },
+        };
+        const plan = await this.apiRequest('POST', '/plans', planData);
+        const subscriptionData = {
+            plan_id: plan.id,
+            total_count: 12,
+            customer_notify: 1,
+            notes: {
+                reference: params.reference,
+                ...(params.metadata || {}),
+            },
+        };
+        const subscription = await this.apiRequest('POST', '/subscriptions', subscriptionData);
+        const checkoutUrl = `https://api.razorpay.com/v1/checkout/embedded?key_id=${this.keyId}&subscription_id=${subscription.id}`;
+        return {
+            id: subscription.id,
+            checkoutUrl,
+            status: 'pending',
+            amount: (0, currency_1.toMajorUnit)(subscription.plan_id ? amountInMinorUnits : 0, params.currency),
+            currency: params.currency,
+            interval: params.interval,
+            reference: params.reference,
+            provider: 'razorpay',
+            startsAt: params.startDate,
+            createdAt: new Date(subscription.created_at * 1000).toISOString(),
+            raw: subscription,
+        };
+    }
+    async getPayment(id) {
+        const paymentsResponse = await this.apiRequest('GET', `/orders/${id}/payments`);
+        if (!paymentsResponse.items || paymentsResponse.items.length === 0) {
+            const order = await this.apiRequest('GET', `/orders/${id}`);
+            const currency = order.currency || 'INR';
+            return {
+                id: order.id,
+                checkoutUrl: '',
+                status: 'pending',
+                amount: (0, currency_1.toMajorUnit)(order.amount || 0, currency),
+                currency,
+                reference: order.receipt || id,
+                provider: 'razorpay',
+                createdAt: new Date(order.created_at * 1000).toISOString(),
+                raw: order,
+            };
+        }
+        const payment = paymentsResponse.items[0];
+        const currency = payment.currency || 'INR';
+        let status = 'pending';
+        if (payment.status === 'captured') {
+            status = 'completed';
+        }
+        else if (payment.status === 'authorized') {
+            status = 'pending';
+        }
+        else if (payment.status === 'failed') {
+            status = 'failed';
+        }
+        else if (payment.status === 'refunded') {
+            status = 'refunded';
+        }
+        return {
+            id: payment.id,
+            checkoutUrl: '',
+            status,
+            amount: (0, currency_1.toMajorUnit)(payment.amount || 0, currency),
+            currency,
+            reference: payment.notes?.reference || payment.order_id || id,
+            provider: 'razorpay',
+            createdAt: new Date(payment.created_at * 1000).toISOString(),
+            raw: paymentsResponse,
+        };
+    }
+    async refund(params) {
+        let paymentId = params.paymentId;
+        if (paymentId.startsWith('order_')) {
+            const paymentsResponse = await this.apiRequest('GET', `/orders/${paymentId}/payments`);
+            if (paymentsResponse.items && paymentsResponse.items.length > 0) {
+                paymentId = paymentsResponse.items[0].id;
+            }
+            else {
+                throw new Error('Order has no payments to refund');
+            }
+        }
+        const refundData = {
+            speed: 'normal',
+        };
+        if (params.amount !== undefined) {
+            refundData.amount = (0, currency_1.toMinorUnit)(params.amount, 'INR');
+        }
+        if (params.reason) {
+            refundData.notes = { reason: params.reason };
+        }
+        const response = await this.apiRequest('POST', `/payments/${paymentId}/refund`, refundData);
+        const currency = response.currency || 'INR';
+        return {
+            id: response.id,
+            status: response.status === 'processed' ? 'completed' : 'pending',
+            amount: (0, currency_1.toMajorUnit)(response.amount || 0, currency),
+            currency,
+            paymentId: params.paymentId,
+            createdAt: new Date(response.created_at * 1000).toISOString(),
+            raw: response,
+        };
+    }
+    parseWebhook(body, _headers) {
+        const event = typeof body === 'string' ? JSON.parse(body) : body;
+        const typeMap = {
+            'payment.captured': 'payment.completed',
+            'payment.failed': 'payment.failed',
+            'subscription.activated': 'subscription.created',
+            'subscription.cancelled': 'subscription.cancelled',
+            'refund.created': 'refund.completed',
+            'refund.processed': 'refund.completed',
+        };
+        const eventType = typeMap[event.event] || 'payment.pending';
+        const data = event.payload?.payment?.entity || event.payload?.subscription?.entity || event.payload?.refund?.entity || {};
+        let payment;
+        let subscription;
+        let refund;
+        if (event.event.startsWith('payment.')) {
+            const currency = (data.currency || 'INR').toUpperCase();
+            let status = 'pending';
+            if (event.event === 'payment.captured') {
+                status = 'completed';
+            }
+            else if (event.event === 'payment.failed') {
+                status = 'failed';
+            }
+            payment = {
+                id: data.id || '',
+                checkoutUrl: '',
+                status,
+                amount: (0, currency_1.toMajorUnit)(data.amount || 0, currency),
+                currency,
+                reference: data.order_id || data.id || '',
+                provider: 'razorpay',
+                createdAt: new Date((data.created_at || Date.now() / 1000) * 1000).toISOString(),
+            };
+        }
+        else if (event.event.startsWith('subscription.')) {
+            const currency = 'INR';
+            subscription = {
+                id: data.id || '',
+                checkoutUrl: '',
+                status: event.event === 'subscription.cancelled' ? 'cancelled' : 'active',
+                amount: (0, currency_1.toMajorUnit)(data.plan_id?.amount || 0, currency),
+                currency,
+                interval: 'monthly',
+                reference: data.notes?.reference || data.id || '',
+                provider: 'razorpay',
+                createdAt: new Date((data.created_at || Date.now() / 1000) * 1000).toISOString(),
+            };
+        }
+        else if (event.event.startsWith('refund.')) {
+            const currency = (data.currency || 'INR').toUpperCase();
+            refund = {
+                id: data.id || '',
+                status: event.event === 'refund.processed' ? 'completed' : 'pending',
+                amount: (0, currency_1.toMajorUnit)(data.amount || 0, currency),
+                currency,
+                paymentId: data.payment_id || '',
+                createdAt: new Date((data.created_at || Date.now() / 1000) * 1000).toISOString(),
+            };
+        }
+        return {
+            type: eventType,
+            payment,
+            subscription,
+            refund,
+            raw: event,
+        };
+    }
+    /**
+     * Verify Razorpay webhook signature using HMAC-SHA256.
+     * Note: Razorpay does not include timestamp in webhook signature (no replay protection).
+     */
+    verifyWebhook(body, headers) {
+        if (!this.webhookSecret) {
+            return false;
+        }
+        const signature = headers?.['x-razorpay-signature'] || headers?.['X-Razorpay-Signature'];
+        if (!signature) {
+            return false;
+        }
+        const rawBody = typeof body === 'string' ? body : body.toString('utf8');
+        const computedSig = crypto.createHmac('sha256', this.webhookSecret).update(rawBody, 'utf8').digest('hex');
+        try {
+            const computedBuffer = Buffer.from(computedSig, 'hex');
+            const expectedBuffer = Buffer.from(signature, 'hex');
+            if (computedBuffer.length !== expectedBuffer.length) {
+                return false;
+            }
+            return crypto.timingSafeEqual(computedBuffer, expectedBuffer);
+        }
+        catch {
+            return false;
+        }
+    }
+    getCapabilities() {
+        return {
+            fees: {
+                fixed: 0,
+                percent: 2.0,
+                currency: 'INR',
+            },
+            currencies: this.supportedCurrencies,
+            country: 'IN',
+            avgLatencyMs: 500,
+        };
+    }
+}
+exports.RazorpayProvider = RazorpayProvider;

package/dist/router-events.d.ts

@@ -0,0 +1,16 @@
+import { EventEmitter } from 'node:events';
+export type RouterEventType = 'attempt.start' | 'attempt.success' | 'attempt.failure' | 'attempt.rate_limited' | 'attempt.timeout' | 'circuit.opened' | 'circuit.half_opened' | 'circuit.closed' | 'webhook.duplicate' | 'request.success' | 'request.failure';
+export interface RouterEvent {
+    type: RouterEventType;
+    provider?: string;
+    operation?: 'createPayment' | 'createSubscription' | 'getPayment' | 'refund' | 'parseWebhook' | 'createOnRamp' | 'createOffRamp' | 'getQuote' | 'getRamp';
+    reference?: string;
+    durationMs?: number;
+    errorCode?: string;
+    errorMessage?: string;
+    attempt?: number;
+    timestamp: string;
+}
+export declare class RouterEventEmitter extends EventEmitter {
+    emitEvent(event: RouterEvent): void;
+}

package/dist/router-events.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RouterEventEmitter = void 0;
+const node_events_1 = require("node:events");
+class RouterEventEmitter extends node_events_1.EventEmitter {
+    emitEvent(event) {
+        this.emit(event.type, event);
+        this.emit('*', event);
+    }
+}
+exports.RouterEventEmitter = RouterEventEmitter;

package/dist/router.d.ts

@@ -5,6 +5,9 @@ import { PayBridge } from './index';
 import { CreatePaymentParams, PaymentResult, CreateSubscriptionParams, SubscriptionResult, RefundParams, RefundResult, WebhookEvent, Provider } from './types';
 import { RoutingStrategy, FallbackConfig } from './routing-types';
 import type { IdempotencyStore } from './webhook-idempotency-store';
+import { RouterEventEmitter } from './router-events';
+import type { LedgerStore } from './ledger';
+import type { TracerLike } from './tracer';
 export declare class WebhookDuplicateError extends Error {
     readonly name = "WebhookDuplicateError";
     readonly eventId: string;
@@ -21,13 +24,18 @@ export interface PayBridgeRouterConfig {
     fallback?: FallbackConfig;
     circuitBreakerStore?: import('./circuit-breaker-store').CircuitBreakerStore;
     idempotencyStore?: IdempotencyStore;
+    ledger?: LedgerStore;
+    tracer?: TracerLike;
 }
 export declare class PayBridgeRouter {
+    readonly events: RouterEventEmitter;
     private providers;
     private strategy;
     private fallback;
     private circuitBreakers;
     private idempotencyStore?;
+    private ledger?;
+    private tracer;
     private rrIndex;
     private config;
     constructor(config: PayBridgeRouterConfig);
@@ -39,4 +47,5 @@ export declare class PayBridgeRouter {
     verifyWebhook(body: any, headers: any, providerName: Provider): boolean;
     private filterProviders;
     private sleep;
+    private recordLedgerEntry;
 }