Transactions

{
  "id": "txn_6720f9e8d7c6b5a4f3e2",
  "object": "transaction",
  "type": "deposit",
  "state": "completed",
  "status": "DEPOSIT_COMPLETED",
  "status_message": "Deposit completed",
  "connection_id": "con_6720f1a2b3c4d5e6f7a8",
  "country": "KE",
  "currency": "KES",
  "operator": "mpesa",
  "amount": 1000,
  "amount_usd": 7.52,
  "phone_number": "2547•••678",
  "customer_action": null,
  "terminal": true,
  "created_at": "2026-11-03T09:00:00.000Z",
  "updated_at": "2026-11-03T09:01:12.000Z"
}

GET /api/v2/transactions/{id}

curl https://deriapi.site/api/v2/transactions/txn_6720f9e8d7c6b5a4f3e2 \
  -H "Authorization: Bearer $DERIPAY_API_KEY"

GET /api/v2/transactions

curl "https://deriapi.site/api/v2/transactions?connection_id=con_6720f1a2b3c4d5e6f7a8&state=processing&limit=50" \
  -H "Authorization: Bearer $DERIPAY_API_KEY"

{
  "success": true,
  "data": {
    "items": [{ "id": "txn_6720f9e8d7c6b5a4f3e2", "object": "transaction", "...": "..." }],
    "total": 1,
    "next_cursor": null
  }
}

GET /api/v2/transactions/{id}/events
Accept: text/event-stream

curl --no-buffer https://deriapi.site/api/v2/transactions/txn_6720f9e8d7c6b5a4f3e2/events \
  -H "Authorization: Bearer $DERIPAY_API_KEY" \
  -H "Accept: text/event-stream"

const DERIPAY = "https://deriapi.site/api/v2";

export async function GET(request: Request, { params }: { params: Promise<{ id: string }> }) {
  const { id } = await params;

  // Your own check: does the signed-in user own this transaction?
  if (!(await userOwnsTransaction(request, id))) {
    return new Response("Not found", { status: 404 });
  }

  const upstream = await fetch(`${DERIPAY}/transactions/${encodeURIComponent(id)}/events`, {
    headers: {
      Authorization: `Bearer ${process.env.DERIPAY_API_KEY}`,
      Accept: "text/event-stream",
    },
    signal: request.signal,
  });

  if (!upstream.ok || !upstream.body) {
    return new Response("Live status unavailable", { status: 502 });
  }

  return new Response(upstream.body, {
    headers: {
      "Content-Type": "text/event-stream; charset=utf-8",
      "Cache-Control": "no-store, no-transform",
      "X-Accel-Buffering": "no",
    },
  });
}

declare function userOwnsTransaction(request: Request, transactionId: string): Promise<boolean>;

const es = new EventSource(`/api/cashier/transactions/${transactionId}/events`);
es.addEventListener("status", (e) => render(JSON.parse((e as MessageEvent).data)));
es.addEventListener("complete", (e) => {
  render(JSON.parse((e as MessageEvent).data));
  es.close();
});
es.addEventListener("error", () => {
  // Network drop or an `error` event: fall back to polling your backend.
});

async function waitForFinal(id: string): Promise<any> {
  for (let attempt = 0; attempt < 40; attempt++) {
    const res = await fetch(`https://deriapi.site/api/v2/transactions/${id}/events`, {
      headers: { Authorization: `Bearer ${process.env.DERIPAY_API_KEY}`, Accept: "text/event-stream" },
    });
    if (!res.ok || !res.body) throw new Error(`stream failed: ${res.status}`);

    const reader = res.body.pipeThrough(new TextDecoderStream()).getReader();
    let buffer = "";
    for (;;) {
      const { value, done } = await reader.read();
      if (done) break;
      buffer += value;
      let sep: number;
      while ((sep = buffer.indexOf("\n\n")) !== -1) {
        const block = buffer.slice(0, sep);
        buffer = buffer.slice(sep + 2);
        const event = /^event: (.+)$/m.exec(block)?.[1];
        const data = /^data: (.+)$/m.exec(block)?.[1];
        if (event === "complete" && data) return JSON.parse(data);
        if (event === "error") throw new Error(data || "stream error");
      }
    }
    await new Promise((r) => setTimeout(r, Math.min(1000 * (attempt + 1), 5000)));
  }
  throw new Error("still not final");
}