v1.0.0-beta.4

v1.0.0-beta.4

v1.0.0-beta.3

1.0.0-beta.3 (2026-06-30)

Bug Fixes

• payments: Deduplicate callback replays (a874fc4)
• payments: Ignore invalid callback fingerprints (9987ec9)
• payments: Reject invalid money amounts (b09c273)
• payments: Unify money quantization (d32ecea)
• http: Sign callback result links (f898a54)
• payments: Randomize merchant identifiers (4330903)
• payments: Guard idempotent retry replays (9dc4757)
• refunds: Lock transaction before refunding (37bb093)
• transactions: Lock updates before diffing (aa32ad2)
• status: Scope portal credentials per merchant (508976f)
• database: Guard automatic migrations (b6f49db)
• driver: Validate production gateway URL (353d7be)
• security: Harden payload encryption at rest (9ab8b21)
• database: Derive transaction amounts from cents (790b013)
• security: Require callback identity fields (7461608)
• gitignore: Ignore local secret files (3d3af33)
• status: Surface transport failures (2364fc1)
• database: Bound transaction history queries (a882042)
• http: Harden payment input validation (3389d0c)
• database: Import knex via default export so ESM bundle loads (4865563)
• payments: Cap merchantRef/merchantSession at SISP 15-char limit (a4207b3)
• payments: Use unbiased randomInt for identifier entropy (80d4ecf)
• payments: Fail transaction and emit payment:failed on invalid callback fingerprint (9a617f7)

Code Refactoring

• architecture: Restructure into hexagonal layers (790b94d)

Features

• http: Support frontendResultUrl to hand callbacks back to a SPA (1c20ad3)
• database: Add Transaction.list() for paginated transaction listing (fb904e4)
• payments: Cancel transaction and emit event on UserCancelled callback (44f1621)
• http: Add JSON payment-intent endpoint for SPAs (ff880e1)

v1.0.0-beta.2

1.0.0-beta.2 (2026-06-20)

Bug Fixes

• payments: Add SISP payment intents (070e5d3)
• payments: Harden idempotent retry attempts (2b97910)
• payments: Handle retry attempt races (64a196e)
• config: Normalize boolean flags (389ec64)

v1.0.0-beta.1

1.0.0-beta.1 (2026-06-14)

Bug Fixes

• tooling: Exclude SVG assets from biome, enable parameter decorators, apply pending formatting (ee06c2e)
• http: Rate limit the refund route and replace the email regex with a linear validator (b25f2e2)
• sandbox: Use unbiased randomInt for fake gateway token generation (dc37b82)

Code Refactoring

• db: Rename repositories directory to models mirroring the Laravel package layout (9c22a1e)
• db: Drop the Repository suffix from model classes and expose them as sisp.models (778706c)

Features

• support: Port SispAmount thousandths parsing and reference generators (f7dfd17)
• config: Mirror config/sisp.php keys with defaults and credentials resolver (3fb9511)
• fingerprints: Port token, payment, callback, and refund fingerprints with PHP golden vectors (ddf53a9)
• enums: Port statuses, transaction codes, and message types with generated translations (34ed216)
• db: Add knex bootstrap with bundled migrations and idempotent auto-migrate (b87293c)
• db: Add repositories with AES-256-GCM payload encryption and transaction change logs (58532c5)
• events: Add typed emitter with isolated listener failures (17d1ab3)
• drivers: Add SispManager with production and sandbox drivers plus extend hook (63897ed)
• pipelines: Add PaymentBuilder, request payload action, and payment pipeline with guards (80d013e)
• pipelines: Add callback pipeline with fingerprint validation and reconciliation (c9a077b)
• sandbox: Add fake gateway payload builder with signed callbacks (450e2dc)
• http: Add core handlers with payment validation, callback flow, and country catalog (5158190)
• core: Add createSisp facade and Express adapter with sandbox E2E coverage (705e47a)
• support: Add HMAC signed expiring URLs keyed from appKey (aa24aca)
• actions: Add cancel flow with signed route and transaction:cancelled event (a5b5594)
• actions: Add retry flow with signed expiring URLs and session rotation (f4af720)
• builders: Add RefundBuilder with signed reversal requests and local balance tracking (6789488)
• drivers: Add transaction-status client with reconciliation and reconcilePending (6004e9b)
• core: Add forCredentials multi-merchant scoping through ScopedSisp (698ae56)
• cli: Add sisp binary with migrate and reconcile-pending commands (f1a532c)
• fastify: Add Fastify adapter reusing the core handlers (a68172b)
• nest: Add SispModule dynamic module with controller over the core handlers (000ef12)