paybridge 0.5.0 → 0.6.0

package/dist/providers/square.js

@@ -0,0 +1,278 @@
+"use strict";
+/**
+ * Square payment provider
+ * Payment Links API supporting USD, CAD, GBP, AUD, EUR, JPY
+ * @see https://developer.squareup.com/reference/square
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SquareProvider = void 0;
+const crypto = __importStar(require("crypto"));
+const base_1 = require("./base");
+const currency_1 = require("../utils/currency");
+const fetch_1 = require("../utils/fetch");
+class SquareProvider extends base_1.PaymentProvider {
+    constructor(config) {
+        super();
+        this.name = 'square';
+        this.supportedCurrencies = ['USD', 'CAD', 'GBP', 'AUD', 'EUR', 'JPY'];
+        this.accessToken = config.accessToken;
+        this.locationId = config.locationId;
+        this.notificationUrl = config.notificationUrl;
+        this.webhookSecret = config.webhookSecret;
+        this.sandbox = config.sandbox ?? false;
+        this.baseUrl = this.sandbox
+            ? 'https://connect.squareupsandbox.com/v2'
+            : 'https://connect.squareup.com/v2';
+    }
+    async apiRequest(method, path, data) {
+        const url = `${this.baseUrl}${path}`;
+        const response = await (0, fetch_1.timedFetchOrThrow)(url, {
+            method,
+            headers: {
+                Authorization: `Bearer ${this.accessToken}`,
+                'Content-Type': 'application/json',
+                'Square-Version': '2024-09-19',
+            },
+            body: data ? JSON.stringify(data) : undefined,
+        });
+        return (await response.json());
+    }
+    async createPayment(params) {
+        this.validateCurrency(params.currency);
+        const amountInMinorUnits = (0, currency_1.toMinorUnit)(params.amount, params.currency);
+        const requestBody = {
+            idempotency_key: crypto.randomUUID(),
+            quick_pay: {
+                name: params.description || params.reference,
+                price_money: {
+                    amount: amountInMinorUnits,
+                    currency: params.currency,
+                },
+                location_id: this.locationId,
+            },
+            checkout_options: {
+                redirect_url: params.urls.success,
+                ask_for_shipping_address: false,
+            },
+            pre_populated_data: {
+                buyer_email: params.customer.email,
+            },
+        };
+        const response = await this.apiRequest('POST', '/checkout/payment-links', requestBody);
+        const link = response.payment_link;
+        return {
+            id: link.id,
+            checkoutUrl: link.url,
+            status: 'pending',
+            amount: params.amount,
+            currency: params.currency.toUpperCase(),
+            reference: params.reference,
+            provider: 'square',
+            createdAt: link.created_at || new Date().toISOString(),
+            raw: response,
+        };
+    }
+    async createSubscription(_params) {
+        throw new Error('Square subscriptions require multi-step Catalog + Customer + Plan setup; not yet supported by paybridge. Use the Square Subscriptions API directly or choose another provider.');
+    }
+    async getPayment(id) {
+        const linkResponse = await this.apiRequest('GET', `/online-checkout/payment-links/${id}`);
+        const link = linkResponse.payment_link;
+        const orderId = link.order_id;
+        const orderResponse = await this.apiRequest('GET', `/orders/${orderId}`);
+        const order = orderResponse.order;
+        let status = 'pending';
+        if (order.state === 'COMPLETED') {
+            status = 'completed';
+        }
+        else if (order.state === 'CANCELED') {
+            status = 'cancelled';
+        }
+        else if (order.state === 'OPEN') {
+            status = 'pending';
+        }
+        const currency = order.total_money?.currency || 'USD';
+        const amount = order.total_money?.amount ? (0, currency_1.toMajorUnit)(order.total_money.amount, currency) : 0;
+        return {
+            id: link.id,
+            checkoutUrl: link.url || '',
+            status,
+            amount,
+            currency: currency.toUpperCase(),
+            reference: link.id,
+            provider: 'square',
+            createdAt: link.created_at || new Date().toISOString(),
+            raw: { link, order },
+        };
+    }
+    async refund(params) {
+        const currency = 'USD';
+        const amountInMinorUnits = params.amount ? (0, currency_1.toMinorUnit)(params.amount, currency) : undefined;
+        const refundData = {
+            idempotency_key: crypto.randomUUID(),
+            payment_id: params.paymentId,
+            reason: params.reason || 'Refund',
+        };
+        if (amountInMinorUnits !== undefined) {
+            refundData.amount_money = {
+                amount: amountInMinorUnits,
+                currency,
+            };
+        }
+        const response = await this.apiRequest('POST', '/refunds', refundData);
+        const refund = response.refund;
+        const refundCurrency = refund.amount_money?.currency || currency;
+        const refundAmount = refund.amount_money?.amount
+            ? (0, currency_1.toMajorUnit)(refund.amount_money.amount, refundCurrency)
+            : 0;
+        return {
+            id: refund.id,
+            status: refund.status === 'COMPLETED' ? 'completed' : 'pending',
+            amount: refundAmount,
+            currency: refundCurrency.toUpperCase(),
+            paymentId: params.paymentId,
+            createdAt: refund.created_at || new Date().toISOString(),
+            raw: response,
+        };
+    }
+    parseWebhook(body, _headers) {
+        const event = typeof body === 'string' ? JSON.parse(body) : body;
+        const typeMap = {
+            'payment.created': 'payment.completed',
+            'payment.updated': 'payment.pending',
+            'refund.created': 'refund.completed',
+            'refund.updated': 'refund.completed',
+        };
+        let eventType = typeMap[event.type] || 'payment.pending';
+        const data = event.data?.object?.payment || event.data?.object?.refund || {};
+        if (event.type === 'payment.updated' && data.status === 'COMPLETED') {
+            eventType = 'payment.completed';
+        }
+        else if (event.type === 'payment.updated' && data.status === 'FAILED') {
+            eventType = 'payment.failed';
+        }
+        else if (event.type === 'payment.updated' && data.status === 'CANCELED') {
+            eventType = 'payment.cancelled';
+        }
+        let payment;
+        let refund;
+        if (event.type.startsWith('payment.')) {
+            const currency = data.amount_money?.currency || 'USD';
+            let status = 'pending';
+            if (data.status === 'COMPLETED') {
+                status = 'completed';
+            }
+            else if (data.status === 'FAILED') {
+                status = 'failed';
+            }
+            else if (data.status === 'CANCELED') {
+                status = 'cancelled';
+            }
+            payment = {
+                id: data.id,
+                checkoutUrl: '',
+                status,
+                amount: data.amount_money?.amount ? (0, currency_1.toMajorUnit)(data.amount_money.amount, currency) : 0,
+                currency: currency.toUpperCase(),
+                reference: data.id,
+                provider: 'square',
+                createdAt: data.created_at || new Date().toISOString(),
+            };
+        }
+        else if (event.type.startsWith('refund.')) {
+            const currency = data.amount_money?.currency || 'USD';
+            refund = {
+                id: data.id,
+                status: data.status === 'COMPLETED' ? 'completed' : 'pending',
+                amount: data.amount_money?.amount ? (0, currency_1.toMajorUnit)(data.amount_money.amount, currency) : 0,
+                currency: currency.toUpperCase(),
+                paymentId: data.payment_id || '',
+                createdAt: data.created_at || new Date().toISOString(),
+            };
+        }
+        return {
+            type: eventType,
+            payment,
+            refund,
+            raw: event,
+        };
+    }
+    /**
+     * Verify webhook signature using Square's HMAC-SHA256 scheme.
+     *
+     * Square signs the concatenation of: notificationUrl + rawBody
+     * TODO(verify): Confirm Square's current signing scheme matches this implementation.
+     */
+    verifyWebhook(body, headers) {
+        if (!this.webhookSecret || !this.notificationUrl) {
+            return false;
+        }
+        const signature = headers?.['x-square-hmacsha256-signature'];
+        if (!signature) {
+            return false;
+        }
+        const rawBody = typeof body === 'string' ? body : body.toString('utf8');
+        const signedString = `${this.notificationUrl}${rawBody}`;
+        const computedSig = crypto
+            .createHmac('sha256', this.webhookSecret)
+            .update(signedString)
+            .digest('base64');
+        try {
+            const computedBuffer = Buffer.from(computedSig, 'base64');
+            const expectedBuffer = Buffer.from(signature, 'base64');
+            if (computedBuffer.length !== expectedBuffer.length) {
+                return false;
+            }
+            return crypto.timingSafeEqual(computedBuffer, expectedBuffer);
+        }
+        catch {
+            return false;
+        }
+    }
+    getCapabilities() {
+        return {
+            fees: {
+                fixed: 0.10,
+                percent: 2.6,
+                currency: 'USD',
+            },
+            currencies: this.supportedCurrencies,
+            country: 'US',
+            avgLatencyMs: 400,
+        };
+    }
+}
+exports.SquareProvider = SquareProvider;

package/dist/types.d.ts

@@ -1,7 +1,7 @@
 /**
  * PayBridge — Unified payment SDK types
  */
-export type Provider = 'softycomp' | 'yoco' | 'ozow' | 'payfast' | 'paystack' | 'stripe' | 'peach' | 'flutterwave' | 'adyen' | 'mercadopago' | 'razorpay';
+export type Provider = 'softycomp' | 'yoco' | 'ozow' | 'payfast' | 'paystack' | 'stripe' | 'peach' | 'flutterwave' | 'adyen' | 'mercadopago' | 'razorpay' | 'mollie' | 'square' | 'pesapal';
 export type PaymentStatus = 'pending' | 'completed' | 'failed' | 'cancelled' | 'refunded';
 export type SubscriptionInterval = 'weekly' | 'monthly' | 'yearly';
 export type Currency = 'ZAR' | 'USD' | 'EUR' | 'GBP' | 'NGN' | 'KES' | 'UGX' | 'GHS' | string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "paybridge",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "One API for fiat + crypto payments. Multi-provider routing, automatic failover, MoonPay on/off-ramp. SA-first, global-ready.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -33,7 +33,13 @@
     "mercadopago",
     "razorpay",
     "india",
-    "latam"
+    "latam",
+    "mollie",
+    "square",
+    "pesapal",
+    "transak",
+    "ramp",
+    "east-africa"
   ],
   "author": "Kobie Wentzel",
   "license": "MIT",