manza 1.0.0__tar.gz

manza-1.0.0/.gitignore

@@ -0,0 +1,18 @@
+__pycache__/
+*.py[cod]
+*$py.class
+*.egg-info/
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+.venv/
+venv/
+dist/
+build/
+.coverage
+htmlcov/
+.env
+tests/fixtures/cassettes/
+cassettes-v*.tar.gz
+.tox/
+.python-version.local

manza-1.0.0/CHANGELOG.md

@@ -0,0 +1,84 @@
+# Changelog
+
+All notable changes to `manza` (formerly `zazu-sdk`) are documented here.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [Unreleased]
+
+### Added
+
+- `ManzaConflictError` (409), the 10th error class. A duplicate
+  `client_reference` on a transfer draft raises it with `payment_id`
+  naming the existing draft. 400 now maps to `ManzaValidationError`
+  (lists return 400 for a malformed `limit`/`cursor`).
+- `TransferDrafts.authorize(id, authorization_id, signature)` and
+  `decline(id, authorization_id, reason=None)` for machine-authorized
+  transfers. A blank signature raises `ManzaArgumentError` locally, because
+  the API would count it as a failed attempt.
+- `TransferDrafts.create` documents the new optional `client_reference`;
+  responses carry `client_reference` and `authorization`.
+- `manza.transfer_authorization` with `signature_input`, `sign` and
+  `payee_for`, the HMAC-SHA256 signer for authorization challenges, tested
+  with the fixed vector shared across SDKs.
+- `Beneficiaries.create`, `list_external_accounts`, `get_external_account`
+  and `create_external_account`.
+- `PayeeTrustRequests` (`client.payee_trust_requests`) with
+  `create(external_account_ids)` and `get(id)`.
+- Docs for new pass-through fields: checkout session `customer_name`,
+  `collect_billing_address`, `billing_address`, `settled_at`, `transaction`
+  and the `clearing` status; payment link billing fields; customer
+  `registration_number` / `vat_number` (and MA-only `tax_id` / `ice_number`).
+
+### Changed
+
+- **Renamed from `zazu-sdk` to `manza`** (1.0.0 under the new name; see the
+  migration guide below). The package, import, classes, User-Agent and
+  environment variables all move from Zazu to Manza.
+- The version header is now `Manza-Version` (the API accepts both).
+- User-Agent is `manza-python/<version>` (was `zazu-sdk/<version>`).
+- Cassettes are fetched from `getmanza/manza-ruby`, pinned to `v1.0.0`.
+- The replay placeholders are `<MANZA_API_KEY>` / `<MANZA_VERSION>` and the
+  fixture variables are `MANZA_FIXTURE_*` (no fallback, dev-only).
+- Default base URL is now `https://ma.manza.finance` (Morocco production;
+  South Africa is `https://za.manza.finance`). Cassettes are recorded against
+  `https://ma.manza.dev`.
+- Request bodies are serialized compactly (no spaces after `,` and `:`), the
+  same bytes the Ruby SDK sends.
+- Replay harness: one cassette per test, with optional exact and
+  signature-less body matching for the new cassettes.
+
+### Deprecated
+
+- `ZAZU_API_KEY`, `ZAZU_BASE_URL`, `ZAZU_API_VERSION` and `ZAZU_TIMEOUT` still
+  work for all of 1.x. `MANZA_*` wins when both are set; the legacy name emits
+  one `FutureWarning` per variable per process.
+
+### Migrating from `zazu-sdk` 0.x
+
+| Before | After |
+|---|---|
+| `pip install zazu-sdk` | `pip install manza` |
+| `from zazu_sdk import Zazu` | `from manza import Manza` |
+| `ZazuError`, `ZazuValidationError`, ... (every `Zazu*` class) | `ManzaError`, `ManzaValidationError`, ... |
+| `zazu_sdk.transfer_authorization` | `manza.transfer_authorization` |
+| `ZAZU_API_KEY` / `ZAZU_BASE_URL` / `ZAZU_API_VERSION` / `ZAZU_TIMEOUT` | `MANZA_API_KEY` / `MANZA_BASE_URL` / `MANZA_API_VERSION` / `MANZA_TIMEOUT` |
+| `Zazu-Version` header | `Manza-Version` |
+| repo `getzazu/zazu-python` | `getmanza/manza-python` |
+
+## [0.2.1]
+
+Version alignment: the whole SDK family now releases in lockstep with zazu-ruby. No functional changes since [0.1.0].
+
+## [0.1.0]
+
+Initial release.
+
+### Added
+
+- Sync `Zazu` client built on `httpx`
+- Resource modules: `accounts`, `beneficiaries`, `checkout_sessions`, `customers`, `entity`, `invoices`, `payment_links`, `transfer_drafts`, `webhook_endpoints`
+- Cursor-based `Page` with `auto_paging_iter()`
+- Nine-class error hierarchy mirroring `zazu-ruby`
+- Cassette-replay test harness driven by the Ruby SDK's release tarball

manza-1.0.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Manza
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

manza-1.0.0/PKG-INFO

@@ -0,0 +1,190 @@
+Metadata-Version: 2.5
+Name: manza
+Version: 1.0.0
+Summary: Python SDK for the Manza API.
+Project-URL: Homepage, https://github.com/getmanza/manza-python
+Project-URL: Documentation, https://github.com/getmanza/manza-python#readme
+Project-URL: Repository, https://github.com/getmanza/manza-python
+Project-URL: Issues, https://github.com/getmanza/manza-python/issues
+Project-URL: Changelog, https://github.com/getmanza/manza-python/blob/main/CHANGELOG.md
+Author-email: Manza <hello@get-manza.com>
+License-Expression: MIT
+License-File: LICENSE
+Keywords: api,fintech,manza,morocco,sdk
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Topic :: Software Development :: Libraries :: Python Modules
+Classifier: Typing :: Typed
+Requires-Python: >=3.11
+Requires-Dist: httpx>=0.27
+Provides-Extra: dev
+Requires-Dist: mypy>=1.11; extra == 'dev'
+Requires-Dist: pytest-vcr>=1.0.2; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.7; extra == 'dev'
+Requires-Dist: vcrpy>=6; extra == 'dev'
+Description-Content-Type: text/markdown
+
+# manza
+
+Python SDK for the [Manza API](https://ma.manza.finance).
+
+## Install
+
+```bash
+pip install manza
+```
+
+Requires Python 3.11+.
+
+## Quick start
+
+```python
+from manza import Manza
+
+client = Manza(api_key="sk_live_...")
+
+client.entity.get()
+client.accounts.list(currency_code="MAD")
+client.customers.list(q="Acme")
+client.customers.create(
+    customer_type="business",
+    company_name="Acme Corp",
+    email="billing@acme.com",
+)
+
+client.invoices.list()
+client.payment_links.cancel(payment_link_id)
+client.webhook_endpoints.list()
+
+client.checkout_sessions.create(
+    account_id=account_id,
+    amount="100.00",
+    success_url="https://example.com/ok",
+    cancel_url="https://example.com/cancel",
+)
+client.checkout_sessions.get(session_id)
+```
+
+The client picks up `MANZA_API_KEY`, `MANZA_BASE_URL`, `MANZA_API_VERSION`, and
+`MANZA_TIMEOUT` from the environment if you don't pass them. The old `ZAZU_*`
+names still work for all of 1.x and emit a one-time `FutureWarning`.
+
+### Hosts
+
+The default base URL is `https://ma.manza.finance` (Morocco). For South Africa:
+
+```python
+client = Manza(api_key="sk_live_...", base_url="https://za.manza.finance")
+```
+
+The replay tests run against the staging host `https://ma.manza.dev`.
+
+## Beneficiaries and trusted payees
+
+```python
+beneficiary = client.beneficiaries.create(
+    beneficiary_type="business",  # "individual" | "business"
+    company_name="Acme Corp",
+    email="ap@acme.com",
+).body
+
+account = client.beneficiaries.create_external_account(
+    beneficiary["id"], account_number="..."  # bank_identifier is required in ZA only
+).body
+client.beneficiaries.list_external_accounts(beneficiary["id"])  # Page
+client.beneficiaries.get_external_account(beneficiary["id"], account["id"])
+
+# Ask for the account to be trusted; a member approves it in the app.
+request = client.payee_trust_requests.create([account["id"]]).body
+client.payee_trust_requests.get(request["id"])
+```
+
+## Transfers and machine authorization
+
+```python
+draft = client.transfer_drafts.create(
+    account_id=account_id,
+    beneficiary_id=beneficiary_id,
+    amount="150.00",
+    client_reference="po_1",  # unique per entity, at most 128 characters
+).body
+```
+
+A duplicate `client_reference` raises `ManzaConflictError` with `payment_id`
+naming the existing draft. A draft inside the entity's machine-authorization
+envelope is sent to the enrolled authorizer as a
+`payment.authorization_requested` webhook. Answer it with a different API key
+holding `transfers:authorize`, signing with `manza.transfer_authorization`:
+
+```python
+from manza import transfer_authorization as ta
+
+signature_input = ta.signature_input(
+    payment_id=draft["id"],
+    nonce=nonce,  # from the webhook
+    amount=draft["amount"],  # the API's decimal string, verbatim
+    currency_code=draft["currency_code"],
+    account_id=draft["account_id"],
+    payee=ta.payee_for(external_account_id=draft["external_account_id"]),
+    client_reference=draft["client_reference"],
+)
+signature = ta.sign(signing_secret, signature_input)  # lowercase hex HMAC-SHA256
+
+authorizer.transfer_drafts.authorize(draft["id"], authorization_id, signature)
+# or: authorizer.transfer_drafts.decline(draft["id"], authorization_id, "reason")
+```
+
+`payee_for` takes exactly one of `external_account_id` / `destination_account_id`.
+A blank signature raises `ManzaArgumentError` before any request is made.
+
+## Pagination
+
+List endpoints return a `Page`. Iterate one page or chase cursors:
+
+```python
+page = client.invoices.list(limit=25)
+for invoice in page:
+    ...
+
+# All items, automatic cursor chasing:
+for invoice in client.invoices.list().auto_paging_iter():
+    ...
+```
+
+## Errors
+
+Ten concrete subclasses; discriminate with `isinstance`. `ManzaValidationError`
+covers 400 and 422, `ManzaConflictError` covers 409 and exposes `payment_id`:
+
+```python
+from manza import (
+    ManzaValidationError,
+    ManzaRateLimitError,
+    ManzaNotFoundError,
+)
+
+try:
+    client.invoices.get("nope")
+except ManzaNotFoundError as err:
+    print(err.status, err.request_id, err.body)
+except ManzaRateLimitError as err:
+    print("retry after", err.retry_after, "seconds")
+```
+
+## Cross-SDK contract
+
+`manza` is one of several Manza SDKs that all replay cassettes recorded by
+the canonical [`manza-ruby`](https://github.com/getmanza/manza-ruby) SDK against
+staging (`ma.manza.dev`). The wire format is snake_case JSON; request and response shapes match
+across Ruby, TypeScript, Python, Go, and Rust.
+
+## License
+
+MIT.

manza-1.0.0/README.md

@@ -0,0 +1,157 @@
+# manza
+
+Python SDK for the [Manza API](https://ma.manza.finance).
+
+## Install
+
+```bash
+pip install manza
+```
+
+Requires Python 3.11+.
+
+## Quick start
+
+```python
+from manza import Manza
+
+client = Manza(api_key="sk_live_...")
+
+client.entity.get()
+client.accounts.list(currency_code="MAD")
+client.customers.list(q="Acme")
+client.customers.create(
+    customer_type="business",
+    company_name="Acme Corp",
+    email="billing@acme.com",
+)
+
+client.invoices.list()
+client.payment_links.cancel(payment_link_id)
+client.webhook_endpoints.list()
+
+client.checkout_sessions.create(
+    account_id=account_id,
+    amount="100.00",
+    success_url="https://example.com/ok",
+    cancel_url="https://example.com/cancel",
+)
+client.checkout_sessions.get(session_id)
+```
+
+The client picks up `MANZA_API_KEY`, `MANZA_BASE_URL`, `MANZA_API_VERSION`, and
+`MANZA_TIMEOUT` from the environment if you don't pass them. The old `ZAZU_*`
+names still work for all of 1.x and emit a one-time `FutureWarning`.
+
+### Hosts
+
+The default base URL is `https://ma.manza.finance` (Morocco). For South Africa:
+
+```python
+client = Manza(api_key="sk_live_...", base_url="https://za.manza.finance")
+```
+
+The replay tests run against the staging host `https://ma.manza.dev`.
+
+## Beneficiaries and trusted payees
+
+```python
+beneficiary = client.beneficiaries.create(
+    beneficiary_type="business",  # "individual" | "business"
+    company_name="Acme Corp",
+    email="ap@acme.com",
+).body
+
+account = client.beneficiaries.create_external_account(
+    beneficiary["id"], account_number="..."  # bank_identifier is required in ZA only
+).body
+client.beneficiaries.list_external_accounts(beneficiary["id"])  # Page
+client.beneficiaries.get_external_account(beneficiary["id"], account["id"])
+
+# Ask for the account to be trusted; a member approves it in the app.
+request = client.payee_trust_requests.create([account["id"]]).body
+client.payee_trust_requests.get(request["id"])
+```
+
+## Transfers and machine authorization
+
+```python
+draft = client.transfer_drafts.create(
+    account_id=account_id,
+    beneficiary_id=beneficiary_id,
+    amount="150.00",
+    client_reference="po_1",  # unique per entity, at most 128 characters
+).body
+```
+
+A duplicate `client_reference` raises `ManzaConflictError` with `payment_id`
+naming the existing draft. A draft inside the entity's machine-authorization
+envelope is sent to the enrolled authorizer as a
+`payment.authorization_requested` webhook. Answer it with a different API key
+holding `transfers:authorize`, signing with `manza.transfer_authorization`:
+
+```python
+from manza import transfer_authorization as ta
+
+signature_input = ta.signature_input(
+    payment_id=draft["id"],
+    nonce=nonce,  # from the webhook
+    amount=draft["amount"],  # the API's decimal string, verbatim
+    currency_code=draft["currency_code"],
+    account_id=draft["account_id"],
+    payee=ta.payee_for(external_account_id=draft["external_account_id"]),
+    client_reference=draft["client_reference"],
+)
+signature = ta.sign(signing_secret, signature_input)  # lowercase hex HMAC-SHA256
+
+authorizer.transfer_drafts.authorize(draft["id"], authorization_id, signature)
+# or: authorizer.transfer_drafts.decline(draft["id"], authorization_id, "reason")
+```
+
+`payee_for` takes exactly one of `external_account_id` / `destination_account_id`.
+A blank signature raises `ManzaArgumentError` before any request is made.
+
+## Pagination
+
+List endpoints return a `Page`. Iterate one page or chase cursors:
+
+```python
+page = client.invoices.list(limit=25)
+for invoice in page:
+    ...
+
+# All items, automatic cursor chasing:
+for invoice in client.invoices.list().auto_paging_iter():
+    ...
+```
+
+## Errors
+
+Ten concrete subclasses; discriminate with `isinstance`. `ManzaValidationError`
+covers 400 and 422, `ManzaConflictError` covers 409 and exposes `payment_id`:
+
+```python
+from manza import (
+    ManzaValidationError,
+    ManzaRateLimitError,
+    ManzaNotFoundError,
+)
+
+try:
+    client.invoices.get("nope")
+except ManzaNotFoundError as err:
+    print(err.status, err.request_id, err.body)
+except ManzaRateLimitError as err:
+    print("retry after", err.retry_after, "seconds")
+```
+
+## Cross-SDK contract
+
+`manza` is one of several Manza SDKs that all replay cassettes recorded by
+the canonical [`manza-ruby`](https://github.com/getmanza/manza-ruby) SDK against
+staging (`ma.manza.dev`). The wire format is snake_case JSON; request and response shapes match
+across Ruby, TypeScript, Python, Go, and Rust.
+
+## License
+
+MIT.

manza-1.0.0/pyproject.toml

@@ -0,0 +1,91 @@
+[build-system]
+requires = ["hatchling"]
+build-backend = "hatchling.build"
+
+[project]
+name = "manza"
+description = "Python SDK for the Manza API."
+readme = "README.md"
+license = "MIT"
+license-files = ["LICENSE"]
+requires-python = ">=3.11"
+authors = [{ name = "Manza", email = "hello@get-manza.com" }]
+keywords = ["manza", "sdk", "api", "fintech", "morocco"]
+classifiers = [
+  "Development Status :: 4 - Beta",
+  "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
+  "Operating System :: OS Independent",
+  "Programming Language :: Python :: 3",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
+  "Programming Language :: Python :: 3.13",
+  "Topic :: Software Development :: Libraries :: Python Modules",
+  "Typing :: Typed",
+]
+dynamic = ["version"]
+dependencies = ["httpx>=0.27"]
+
+[project.optional-dependencies]
+dev = [
+  "pytest>=8",
+  "pytest-vcr>=1.0.2",
+  "vcrpy>=6",
+  "ruff>=0.7",
+  "mypy>=1.11",
+]
+
+[project.urls]
+Homepage = "https://github.com/getmanza/manza-python"
+Documentation = "https://github.com/getmanza/manza-python#readme"
+Repository = "https://github.com/getmanza/manza-python"
+Issues = "https://github.com/getmanza/manza-python/issues"
+Changelog = "https://github.com/getmanza/manza-python/blob/main/CHANGELOG.md"
+
+[tool.hatch.version]
+path = "src/manza/_version.py"
+
+[tool.hatch.build.targets.wheel]
+packages = ["src/manza"]
+
+[tool.hatch.build.targets.sdist]
+include = ["src/manza", "README.md", "CHANGELOG.md", "LICENSE"]
+
+[tool.pytest.ini_options]
+testpaths = ["tests"]
+addopts = "-ra"
+filterwarnings = ["error"]
+
+[tool.ruff]
+line-length = 100
+target-version = "py311"
+src = ["src", "tests"]
+
+[tool.ruff.lint]
+select = [
+  "E", "F", "W",   # pycodestyle / pyflakes
+  "I",             # isort
+  "B",             # bugbear
+  "UP",            # pyupgrade
+  "PL",            # pylint subset
+  "RUF",           # ruff-specific
+  "SIM",           # simplify
+  "TCH",           # type-checking imports
+]
+ignore = [
+  "PLR0913",  # too many args — SDK methods accept many kwargs by design
+  "PLR0911",  # too many returns — error-status dispatch is naturally a switch
+  "PLR2004",  # magic-value comparison — fine for HTTP status codes
+  "TC001",    # move application imports under TYPE_CHECKING — many are used at runtime
+  "TC002",    # move third-party imports under TYPE_CHECKING — same reason
+  "TC003",    # move stdlib imports under TYPE_CHECKING — same reason
+  "UP037",    # remove quotes from annotations — needed for `Self`-style forward refs
+]
+
+[tool.ruff.lint.per-file-ignores]
+"tests/**" = ["PLR2004"]
+
+[tool.mypy]
+python_version = "3.11"
+strict = true
+files = ["src/manza"]

manza-1.0.0/src/manza/__init__.py

@@ -0,0 +1,63 @@
+"""Manza Python SDK. Mirrors lib/manza.rb."""
+
+from . import transfer_authorization
+from ._version import __version__
+from .client import Manza
+from .errors import (
+    ManzaArgumentError,
+    ManzaAuthenticationError,
+    ManzaConfigurationError,
+    ManzaConflictError,
+    ManzaConnectionError,
+    ManzaError,
+    ManzaForbiddenError,
+    ManzaNotFoundError,
+    ManzaRateLimitError,
+    ManzaServerError,
+    ManzaValidationError,
+)
+from .page import MAX_PER_PAGE, Page
+from .resources.accounts import Accounts
+from .resources.beneficiaries import Beneficiaries
+from .resources.checkout_sessions import CheckoutSessions
+from .resources.customers import Customers
+from .resources.entity import Entity
+from .resources.invoices import Invoices
+from .resources.payee_trust_requests import PayeeTrustRequests
+from .resources.payment_links import PaymentLinks
+from .resources.transfer_drafts import TransferDrafts
+from .resources.webhook_endpoints import WebhookEndpoints
+from .response import ManzaResponse
+
+VERSION = __version__
+
+__all__ = [
+    "MAX_PER_PAGE",
+    "VERSION",
+    "Accounts",
+    "Beneficiaries",
+    "CheckoutSessions",
+    "Customers",
+    "Entity",
+    "Invoices",
+    "Manza",
+    "ManzaArgumentError",
+    "ManzaAuthenticationError",
+    "ManzaConfigurationError",
+    "ManzaConflictError",
+    "ManzaConnectionError",
+    "ManzaError",
+    "ManzaForbiddenError",
+    "ManzaNotFoundError",
+    "ManzaRateLimitError",
+    "ManzaResponse",
+    "ManzaServerError",
+    "ManzaValidationError",
+    "Page",
+    "PayeeTrustRequests",
+    "PaymentLinks",
+    "TransferDrafts",
+    "WebhookEndpoints",
+    "__version__",
+    "transfer_authorization",
+]

manza-1.0.0/src/manza/_env.py

@@ -0,0 +1,39 @@
+"""Environment lookup: `MANZA_<NAME>` first, then the legacy `ZAZU_<NAME>`.
+
+The legacy name still works for all of 1.x and warns once per variable."""
+
+from __future__ import annotations
+
+import os
+import threading
+import warnings
+
+_warned: set[str] = set()
+_lock = threading.Lock()
+
+
+def get(name: str) -> str | None:
+    """Return `MANZA_<name>`, else `ZAZU_<name>` (warning once), else None."""
+    value = os.getenv(f"MANZA_{name}")
+    if value is not None:
+        return value
+    legacy = f"ZAZU_{name}"
+    value = os.getenv(legacy)
+    if value:
+        with _lock:
+            first = legacy not in _warned
+            _warned.add(legacy)
+        if first:
+            warnings.warn(
+                f"{legacy} is deprecated; set MANZA_{name} instead. "
+                "The ZAZU_* fallback will be removed in 2.0.",
+                FutureWarning,
+                stacklevel=3,
+            )
+        return value
+    return None
+
+
+def reset_warnings() -> None:
+    """Forget which legacy variables already warned (for tests)."""
+    _warned.clear()

manza-1.0.0/src/manza/_version.py

@@ -0,0 +1 @@
+__version__ = "1.0.0"