# config/services.yaml
services:
  PalPluss\PalPluss:
    arguments:
      $apiKey: '%env(PALPLUSS_API_KEY)%'

// src/Controller/PaymentController.php
namespace App\Controller;

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\JsonResponse;
use Symfony\Component\Routing\Attribute\Route;
use PalPluss\PalPluss;
use PalPluss\Http\Errors\PalPlussApiError;

class PaymentController extends AbstractController
{
    public function __construct(private readonly PalPluss $palpluss) {}

    #[Route('/api/pay', methods: ['POST'])]
    public function initiatePayment(Request $request): JsonResponse
    {
        $body = json_decode($request->getContent(), true);

        try {
            $tx = $this->palpluss->stkPush(
                amount: $body['amount'],
                phone:  $body['phone'],
                accountReference: $body['reference'] ?? '',
                callbackUrl: $this->generateUrl(
                    'webhook_palpluss',
                    referenceType: \Symfony\Component\Routing\Generator\UrlGeneratorInterface::ABSOLUTE_URL
                ),
            );

            return $this->json([
                'transaction_id' => $tx['transactionId'],
                'status'         => $tx['status'],
            ]);
        } catch (PalPlussApiError $e) {
            return $this->json(
                ['error' => $e->getMessage(), 'code' => $e->errorCode],
                $e->httpStatus,
            );
        }
    }
}

// src/Controller/WebhookController.php
namespace App\Controller;

use Symfony\Bundle\FrameworkBundle\Controller\AbstractController;
use Symfony\Component\HttpFoundation\Request;
use Symfony\Component\HttpFoundation\Response;
use Symfony\Component\Routing\Attribute\Route;
use PalPluss\Webhooks;

class WebhookController extends AbstractController
{
    #[Route('/webhooks/palpluss', name: 'webhook_palpluss', methods: ['POST'])]
    public function handlePalPluss(Request $request): Response
    {
        try {
            $payload = Webhooks::parsePayload($request->getContent());
        } catch (\InvalidArgumentException) {
            return new Response('Invalid payload', Response::HTTP_BAD_REQUEST);
        }

        $eventType   = $payload['event_type'];
        $transaction = $payload['transaction'];

        if ($eventType === 'transaction.success') {
            // fulfil order
        } elseif ($eventType === 'transaction.failed') {
            // notify customer
        }

        return new Response('', Response::HTTP_OK);
    }
}

<?php
// index.php
require_once __DIR__ . '/vendor/autoload.php';

use PalPluss\PalPluss;
use PalPluss\Webhooks;
use PalPluss\Http\Errors\PalPlussApiError;
use PalPluss\Http\Errors\RateLimitError;

$palpluss = new PalPluss(apiKey: $_ENV['PALPLUSS_API_KEY'] ?? getenv('PALPLUSS_API_KEY'));

$path   = parse_url($_SERVER['REQUEST_URI'], PHP_URL_PATH);
$method = $_SERVER['REQUEST_METHOD'];

// POST /pay
if ($method === 'POST' && $path === '/pay') {
    $body = json_decode(file_get_contents('php://input'), true);

    try {
        $tx = $palpluss->stkPush(
            amount: (float) $body['amount'],
            phone:  $body['phone'],
            accountReference: $body['reference'] ?? '',
            callbackUrl: 'https://yourapp.com/webhooks/palpluss',
        );

        header('Content-Type: application/json');
        echo json_encode(['transaction_id' => $tx['transactionId'], 'status' => $tx['status']]);
    } catch (RateLimitError $e) {
        http_response_code(429);
        header("Retry-After: {$e->retryAfter}");
        echo json_encode(['error' => 'Rate limited', 'retry_after' => $e->retryAfter]);
    } catch (PalPlussApiError $e) {
        http_response_code($e->httpStatus);
        echo json_encode(['error' => $e->getMessage(), 'code' => $e->errorCode]);
    }
    exit;
}

// POST /webhooks/palpluss
if ($method === 'POST' && $path === '/webhooks/palpluss') {
    $raw = file_get_contents('php://input');

    try {
        $payload = Webhooks::parsePayload($raw);
    } catch (\InvalidArgumentException $e) {
        http_response_code(400);
        echo json_encode(['error' => 'Invalid payload']);
        exit;
    }

    http_response_code(200);
    echo json_encode(['received' => true]);

    // Process after sending response
    fastcgi_finish_request(); // only on PHP-FPM

    $eventType   = $payload['event_type'];
    $transaction = $payload['transaction'];

    if ($eventType === 'transaction.success') {
        // fulfil order
    }
    exit;
}

http_response_code(404);
echo json_encode(['error' => 'Not found']);