@crediblemark/buayar 0.8.6 → 0.8.7

package/README.md

@@ -10,7 +10,7 @@
 
 ## 🇬🇧 English
 
-**`@crediblemark/buayar`** is a **Unified Payment Gateway SDK** for Node.js and TypeScript, supporting **19 payment providers** (10 Indonesian + 9 International) through a single, consistent API.
+**`@crediblemark/buayar`** is a **Unified Payment Gateway SDK** for Node.js and TypeScript, supporting **20 payment providers** (11 Indonesian + 9 International) through a single, consistent API.
 
 > 💡 **Zero-Code PG Switcher:** Switch your active payment provider — e.g. from Midtrans to Stripe — **without changing a single line in your controller or service layer**. Just update the credentials in your `.env` file.
 
@@ -28,7 +28,7 @@
 
 ### 📦 Supported Providers
 
-#### 🇮🇩 Indonesian (10)
+#### 🇮🇩 Indonesian (11)
 
 | Provider | Status | Redirect | Direct API | Webhook | Client |
 |---|:---:|:---:|:---:|:---:|:---:|
@@ -42,6 +42,7 @@
 | Finpay | - | ✅ | ✅ | HMAC-SHA512 | `FinpayClient` |
 | Nicepay | - | ✅ | ✅ | SHA-256 | `NicepayClient` |
 | OY! Bisnis | - | ✅ | ✅ | Header Auth | `OyClient` |
+| [SumoPod](docs/sumopod.md) | Tested | ✅ Payments v1 | ✅ QRIS API | Svix / Token | `SumopodClient` |
 
 #### 🌍 International (9)
 
@@ -61,7 +62,7 @@
 
 #### Universal (Recommended)
 ```env
-# (optional) Active provider: any of the 19 supported names
+# (optional) Active provider: any of the 20 supported names
 # If empty, the provider is AUTO-DETECTED from filled credentials.
 BUAYAR_PROVIDER=midtrans
 
@@ -84,7 +85,7 @@ Check what a provider actually supports — no docs digging:
 ```ts
 import { buayar } from "@crediblemark/buayar";
 
-buayar.listProviders();                    // all 19 registered providers
+buayar.listProviders();                    // all 20 registered providers
 buayar.detectProviderFromEnv(process.env); // guess active provider from .env
 buayar.detectProviderFromPayload(payload); // guess provider from webhook payload
 buayar.getCapabilities("duitku");
@@ -118,6 +119,7 @@ You don't need provider-specific variable names. Simply use unified **`BUAYAR_*`
 | **PayU** | `payu` | MD5 Key | POS ID | POS ID |
 | **Braintree** | `braintree` | Private Key | Merchant ID | Public Key |
 | **2Checkout** | `twocheckout` | Secret Key | Merchant Code | Secret Word (`BUAYAR_WEBHOOK_SECRET`) |
+| **[SumoPod](docs/sumopod.md)** | `sumopod` | API Key (`X-Api-Key`) | *(not needed)* | Webhook Secret / Token (`BUAYAR_WEBHOOK_SECRET`) |
 
 ### 📖 Usage
 
@@ -204,7 +206,7 @@ BUAYAR_WEBHOOK_SECRET=whsec_...
 
 ## 🇮🇩 Bahasa Indonesia
 
-**`@crediblemark/buayar`** adalah **Unified Payment Gateway SDK** untuk Node.js dan TypeScript yang mendukung **19 payment provider** (10 Indonesia + 9 Internasional) melalui satu arsitektur API yang seragam.
+**`@crediblemark/buayar`** adalah **Unified Payment Gateway SDK** untuk Node.js dan TypeScript yang mendukung **20 payment provider** (11 Indonesia + 9 Internasional) melalui satu arsitektur API yang seragam.
 
 > 💡 **Zero-Code PG Switcher:** Berganti provider payment gateway (misal dari Midtrans ke Duitku atau sebaliknya) **tanpa perlu merombak kode controller/service aplikasi**. Cukup ubah kredensial di file `.env`!
 
@@ -222,7 +224,7 @@ BUAYAR_WEBHOOK_SECRET=whsec_...
 
 ### 📦 Provider yang Didukung
 
-#### 🇮🇩 Lokal Indonesia (10)
+#### 🇮🇩 Lokal Indonesia (11)
 
 * **Midtrans** — Snap API (Redirect/Popup) & Core API Direct Charge. Verifikasi SHA-512. `MidtransClient`.
 * **Duitku** — Redirect Checkout & Direct Inquiry API. Verifikasi MD5. `DuitkuClient` (Disbursement, Inquiry Rekening, Saldo).
@@ -234,6 +236,7 @@ BUAYAR_WEBHOOK_SECRET=whsec_...
 * **Finpay** — Payment Initiate & Direct API. HMAC-SHA512. `FinpayClient`.
 * **Nicepay** — Order Regist & One-Step API. SHA-256 merchantToken. `NicepayClient`.
 * **OY! Bisnis** — Payment Checkout v2 & Direct VA/QRIS. Header Auth. `OyClient` (Inquiry, Saldo, Disbursement).
+* **SumoPod** `[Tested]` — Payment Link API v1 & QRIS. Verifikasi Svix HMAC-SHA256 / X-Webhook-Token. `SumopodClient`. *Lihat [panduan lengkap SumoPod](docs/sumopod.md)*.
 
 #### 🌍 Internasional (9)
 
@@ -251,7 +254,7 @@ BUAYAR_WEBHOOK_SECRET=whsec_...
 
 #### Universal (Direkomendasikan)
 ```env
-# (opsional) Provider aktif (19 pilihan). Bila kosong, AUTO-DIDETEKSI
+# (opsional) Provider aktif (20 pilihan). Bila kosong, AUTO-DIDETEKSI
 # dari kredensial yang terisi. Set var ini sama untuk semua provider.
 BUAYAR_PROVIDER=midtrans
 
@@ -292,6 +295,7 @@ Anda **tidak perlu** membuat nama variabel khusus per provider. Cukup gunakan se
 | **PayU** | `payu` | MD5 Key | POS ID | POS ID |
 | **Braintree** | `braintree` | Private Key | Merchant ID | Public Key |
 | **2Checkout** | `twocheckout` | Secret Key | Merchant Code | Secret Word (`BUAYAR_WEBHOOK_SECRET`) |
+| **[SumoPod](docs/sumopod.md)** | `sumopod` | API Key (`X-Api-Key`) | *(tidak perlu)* | Webhook Secret (`BUAYAR_WEBHOOK_SECRET`) / Token (`BUAYAR_WEBHOOK_TOKEN`) |
 
 ### 📖 Panduan Penggunaan
 

package/dist/cli/index.js

@@ -37,7 +37,7 @@ var DOT_ENV_TEMPLATE = `# \u2500\u2500 @crediblemark/buayar \xB7 Konfigurasi \u2
 # (opsional) Nama provider aktif. Bila dikosongkan, otomatis dideteksi.
 # midtrans | duitku | ipaymu | xendit | doku | prismalink | faspay | finpay
 # nicepay | oy | stripe | paypal | adyen | checkoutcom | razorpay | square
-# payu | braintree | twocheckout
+# payu | braintree | twocheckout | sumopod
 # BUAYAR_PROVIDER=midtrans
 
 # Kredensial Universal \u2014 dipetakan otomatis sesuai provider aktif.
@@ -100,6 +100,9 @@ BUAYAR_RETURN_URL=http://localhost:3000/payment/success
 # TWOCHECKOUT_MERCHANT_CODE=
 # TWOCHECKOUT_SECRET_KEY=
 # TWOCHECKOUT_SECRET_WORD=
+# SUMOPOD_API_KEY=
+# SUMOPOD_WEBHOOK_SECRET=
+# SUMOPOD_WEBHOOK_TOKEN=
 `;
 var CONFIG_TEMPLATE = `// src/payment/buayar.ts
 // Inisialisasi Buayar \u2014 baca otomatis dari process.env (.env)
@@ -365,7 +368,8 @@ var PROVIDERS = [
   "square",
   "payu",
   "braintree",
-  "twocheckout"
+  "twocheckout",
+  "sumopod"
 ];
 var FRAMEWORKS = ["express", "hono", "nextjs"];
 function getRouteTemplate(framework) {
@@ -484,7 +488,7 @@ function printScaffoldSummary(result) {
 }
 
 // src/cli/index.ts
-var VERSION = "0.8.6";
+var VERSION = "0.8.7";
 function parseArgs(argv) {
   const flags = [];
   const rest = [];

package/dist/index.d.mts

@@ -625,6 +625,15 @@ declare class TwoCheckoutProvider extends BasePaymentProvider {
     checkTransaction(params: CheckTransactionParams, config: ProviderConfig): Promise<CheckTransactionResult>;
 }
 
+declare class SumopodProvider extends BasePaymentProvider {
+    readonly name = "sumopod";
+    private getBaseUrl;
+    createInvoice(params: CreateInvoiceParams, config: ProviderConfig): Promise<InvoiceResponse>;
+    verifyCallback(body: any, config: ProviderConfig): Promise<VerifyCallbackResult>;
+    getPaymentMethods(params: GetPaymentMethodsParams, config: ProviderConfig): Promise<GetPaymentMethodsResult>;
+    checkTransaction(params: CheckTransactionParams, config: ProviderConfig): Promise<CheckTransactionResult>;
+}
+
 interface DuitkuDisbursementParams {
     bankCode: string;
     bankAccount: string;
@@ -1180,6 +1189,49 @@ declare class TwoCheckoutClient {
     listOrders(page?: number, limit?: number): Promise<any>;
 }
 
+interface SumopodCreatePaymentParams {
+    order_id: string;
+    amount: number;
+    currency?: string;
+    expires_in_hours?: number;
+    success_return_url?: string;
+    cancel_return_url?: string;
+    payment_method_type_code?: string;
+    [key: string]: any;
+}
+interface SumopodPaymentResponse {
+    payment_id: string;
+    order_id: string;
+    amount: number;
+    fee?: number;
+    net_amount?: number;
+    payment_link_url: string;
+    status: string;
+    expires_at?: string;
+    [key: string]: any;
+}
+declare class SumopodClient {
+    private apiKey;
+    private baseUrl;
+    constructor(config: ProviderConfig | {
+        apiKey?: string;
+        customBaseUrl?: string;
+        sandbox?: boolean;
+    });
+    /**
+     * HTTP request helper dengan header autentikasi X-Api-Key SumoPod
+     */
+    request(method: "GET" | "POST", endpoint: string, body?: any): Promise<any>;
+    /**
+     * Buat payment link / sesi pembayaran baru di SumoPod
+     */
+    createPayment(params: SumopodCreatePaymentParams): Promise<SumopodPaymentResponse>;
+    /**
+     * Ambil detail status pembayaran berdasarkan ID pembayaran
+     */
+    getPayment(paymentId: string): Promise<SumopodPaymentResponse>;
+}
+
 declare class PaymentManager {
     private providers;
     constructor();
@@ -1223,6 +1275,8 @@ declare class PaymentManager {
     getBraintreeClient(config: ProviderConfig): BraintreeClient;
     getTwoCheckoutProvider(): TwoCheckoutProvider;
     getTwoCheckoutClient(config: ProviderConfig): TwoCheckoutClient;
+    getSumopodProvider(): SumopodProvider;
+    getSumopodClient(config: ProviderConfig): SumopodClient;
     createInvoice(providerName: string, params: CreateInvoiceParams, config: ProviderConfig): Promise<InvoiceResponse>;
     verifyCallback(providerName: string, body: any, config: ProviderConfig): Promise<VerifyCallbackResult>;
     getPaymentMethods(providerName: string, params: GetPaymentMethodsParams, config: ProviderConfig): Promise<GetPaymentMethodsResult>;
@@ -1293,9 +1347,9 @@ declare function resolveConfigFromEnv(customConfig?: BuayarConfig): BuayarConfig
  * Antarmuka tingkat tinggi untuk membuat transaksi, query channel pembayaran,
  * pengecekan status, dan verifikasi webhook universal tanpa perlu rombak kode.
  *
- * Mendukung 19 Payment Gateway: Midtrans, Duitku, iPaymu, Xendit, DOKU, PrismaLink,
+ * Mendukung 20 Payment Gateway: Midtrans, Duitku, iPaymu, Xendit, DOKU, PrismaLink,
  * Faspay, Finpay, Nicepay, OY! Bisnis, Stripe, PayPal, Adyen, Checkout.com,
- * Razorpay, Square, PayU, Braintree, 2Checkout/Verifone.
+ * Razorpay, Square, PayU, Braintree, 2Checkout/Verifone, SumoPod.
  */
 declare class Buayar {
     private manager;
@@ -1424,6 +1478,7 @@ declare class Buayar {
     getPayuClient(configOverride?: Partial<ProviderConfig>): PayuClient;
     getBraintreeClient(configOverride?: Partial<ProviderConfig>): BraintreeClient;
     getTwoCheckoutClient(configOverride?: Partial<ProviderConfig>): TwoCheckoutClient;
+    getSumopodClient(configOverride?: Partial<ProviderConfig>): SumopodClient;
 }
 declare const buayar: Buayar;
 
@@ -1554,6 +1609,18 @@ declare function toOyPaymentMethod(code?: string): {
  * Ubah method code apapun ke format Stripe
  */
 declare function toStripePaymentMethod(code?: string): string | undefined;
+/**
+ * Mapping dari Canonical Payment Method ke kode SumoPod
+ */
+declare const CANONICAL_TO_SUMOPOD: Record<string, string>;
+/**
+ * Mapping dari kode SumoPod ke Canonical Payment Method
+ */
+declare const SUMOPOD_TO_CANONICAL: Record<string, string>;
+/**
+ * Ubah method code apapun ke format SumoPod
+ */
+declare function toSumopodPaymentMethod(code?: string): string | undefined;
 /**
  * Ubah method code apapun ke format canonical standar Buayar
  */
@@ -1796,6 +1863,33 @@ declare function generateOyHeaders(username: string, apiKey: string): Record<str
  */
 declare function verifyOyWebhook(headers: Record<string, string | string[] | undefined>, expectedUsername: string): boolean;
 
+/**
+ * Memverifikasi signature webhook Svix dari SumoPod.
+ *
+ * SumoPod menyertakan tiga header HTTP:
+ * - `svix-id`: ID unik pesan webhook
+ * - `svix-timestamp`: Unix timestamp (detik) saat webhook dikirim
+ * - `svix-signature`: Satu atau lebih signature "v1,<base64>" dipisahkan spasi
+ *
+ * @param secret Secret signing dari tab Settings (dimulai dengan "whsec_")
+ * @param svixId Nilai header `svix-id`
+ * @param svixTimestamp Nilai header `svix-timestamp`
+ * @param svixSignature Nilai header `svix-signature`
+ * @param rawBody Request body mentah / unparsed string
+ * @param toleranceSeconds Toleransi replay attack dalam detik (default 300 detik = 5 menit). Set 0 untuk nonaktifkan.
+ */
+declare function verifySumopodSvixSignature(secret: string, svixId: string, svixTimestamp: string, svixSignature: string, rawBody: string, toleranceSeconds?: number): boolean;
+/**
+ * Memverifikasi header `x-webhook-token` SumoPod secara timing-safe.
+ *
+ * Alternatif yang lebih sederhana dari verifikasi signature HMAC:
+ * bandingkan token proyek langsung dengan header `x-webhook-token`.
+ *
+ * @param expectedToken Token rahasia webhook (mis. "whtok_...")
+ * @param receivedToken Nilai header `x-webhook-token` yang diterima
+ */
+declare function verifySumopodToken(expectedToken: string, receivedToken: string): boolean;
+
 /**
  * Serializer helper untuk format URL-encoded form data Stripe
  * Mendukung nested object dan array seperti line_items[0][price_data][unit_amount]
@@ -1983,4 +2077,4 @@ declare function safeCompare(a: string, b: string): boolean;
  */
 declare function getPaymentMethodCategory(code: string, name?: string): "Virtual Account" | "QRIS" | "E-Wallet" | "Retail / Gerai" | "Kartu Kredit" | "Paylater / Cicilan" | "Lainnya";
 
-export { AdyenClient, AdyenProvider, BasePaymentProvider, BraintreeClient, BraintreeProvider, Buayar, type BuayarConfig, CANONICAL_TO_DOKU, CANONICAL_TO_DUITKU, CANONICAL_TO_FASPAY, CANONICAL_TO_FINPAY, CANONICAL_TO_IPAYMU, CANONICAL_TO_MIDTRANS, CANONICAL_TO_NICEPAY, CANONICAL_TO_OY, CANONICAL_TO_PRISMALINK, CANONICAL_TO_STRIPE, CANONICAL_TO_XENDIT, CORE_API_METHODS, type CanonicalPaymentMethod, type CheckBalanceResult, type CheckTransactionParams, type CheckTransactionResult, CheckoutComClient, CheckoutComProvider, type CreateInvoiceParams, type CustomerDetails, DUITKU_TO_CANONICAL, type DisburseParams, type DisburseResult, DokuClient, DokuProvider, DuitkuClient, type DuitkuDisbursementParams, DuitkuProvider, type EWalletResponse, FaspayClient, FaspayProvider, FinpayClient, FinpayProvider, type GetPaymentMethodDescriptorsResult, type GetPaymentMethodsParams, type GetPaymentMethodsResult, type InvoiceResponse, IpaymuClient, IpaymuProvider, MIDTRANS_PROBE_PAYLOADS, MIDTRANS_STATIC_METHODS, type MandiriBillInfo, MidtransClient, MidtransProvider, NicepayClient, NicepayProvider, OyClient, OyProvider, PaymentManager, type PaymentMethod, type PaymentMethodDescriptor, type PaymentMethodDescriptorType, type PaymentMethodItem, type PaymentMode, PaypalClient, PaypalProvider, PayuClient, PayuProvider, PrismalinkClient, PrismalinkProvider, type ProviderCapability, type ProviderConfig, type ProviderDescriptor, ProviderRegistry, type QrisResponse, RazorpayClient, RazorpayProvider, type RefundParams, type RefundResult, SnapApiError, SnapClient, type SnapClientOptions, SquareClient, SquareProvider, StripeClient, StripeProvider, TwoCheckoutClient, TwoCheckoutProvider, type VerifyCallbackResult, type VirtualAccountResponse, XenditClient, type XenditDisbursementParams, XenditProvider, buayar, buildBraintreeBasicAuth, buildCoreChargePayload, buildDefaultDescriptors, buildIpaymuCallbackString, buildPaymentMethodDescriptor, buildPaymentMethodDescriptors, buildPaypalBasicAuth, buildPayuBasicAuth, buildRazorpayBasicAuth, buildTwoCheckoutAuth, formatNicepayTimestamp, generateDokuHeaders, generateFaspaySignature, generateFinpaySignature, generateIpaymuSignature, generateNicepayToken, generateOyHeaders, generatePrismalinkSignature, generateSnapAsymmetricSignature, generateSnapSymmetricSignature, getDuitkuInquirySignatures, getDuitkuPaymentMethodsSignature, getDuitkuStatusSignatures, getPaymentMethodCategory, getXenditAuthHeader, hmacSha256, mapCategoryToDescriptorType, md5, minifyJson, normalizeIpaymuCallback, parseCoreChargeResponse, paymentManager, providerRegistry, resolveConfigFromEnv, safeCompare, serializePaypalParams, serializeStripeParams, sha256, sha256Hex, sha512, snapErrorHint, snapExternalId, snapTimestamp, snapUtcTimestamp, toCanonicalPaymentMethod, toDokuPaymentMethod, toDuitkuPaymentMethod, toFaspayPaymentMethod, toFinpayPaymentMethod, toIpaymuPaymentMethod, toNicepayPaymentMethod, toOyPaymentMethod, toPrismalinkPaymentMethod, toStripePaymentMethod, toXenditPaymentMethod, verifyAdyenWebhook, verifyBraintreeWebhook, verifyCheckoutComWebhook, verifyDokuWebhookSignature, verifyDuitkuCallbackSignature, verifyFaspaySignature, verifyFinpaySignature, verifyIpaymuCallback, verifyIpaymuCallbackSignature, verifyNicepayWebhook, verifyOyWebhook, verifyPaypalWebhookSimple, verifyPayuWebhook, verifyPrismalinkSignature, verifyRazorpayWebhook, verifySnapWebhookSignature, verifySquareWebhook, verifyStripeWebhook, verifyTwoCheckoutWebhook, verifyXenditWebhookToken };
+export { AdyenClient, AdyenProvider, BasePaymentProvider, BraintreeClient, BraintreeProvider, Buayar, type BuayarConfig, CANONICAL_TO_DOKU, CANONICAL_TO_DUITKU, CANONICAL_TO_FASPAY, CANONICAL_TO_FINPAY, CANONICAL_TO_IPAYMU, CANONICAL_TO_MIDTRANS, CANONICAL_TO_NICEPAY, CANONICAL_TO_OY, CANONICAL_TO_PRISMALINK, CANONICAL_TO_STRIPE, CANONICAL_TO_SUMOPOD, CANONICAL_TO_XENDIT, CORE_API_METHODS, type CanonicalPaymentMethod, type CheckBalanceResult, type CheckTransactionParams, type CheckTransactionResult, CheckoutComClient, CheckoutComProvider, type CreateInvoiceParams, type CustomerDetails, DUITKU_TO_CANONICAL, type DisburseParams, type DisburseResult, DokuClient, DokuProvider, DuitkuClient, type DuitkuDisbursementParams, DuitkuProvider, type EWalletResponse, FaspayClient, FaspayProvider, FinpayClient, FinpayProvider, type GetPaymentMethodDescriptorsResult, type GetPaymentMethodsParams, type GetPaymentMethodsResult, type InvoiceResponse, IpaymuClient, IpaymuProvider, MIDTRANS_PROBE_PAYLOADS, MIDTRANS_STATIC_METHODS, type MandiriBillInfo, MidtransClient, MidtransProvider, NicepayClient, NicepayProvider, OyClient, OyProvider, PaymentManager, type PaymentMethod, type PaymentMethodDescriptor, type PaymentMethodDescriptorType, type PaymentMethodItem, type PaymentMode, PaypalClient, PaypalProvider, PayuClient, PayuProvider, PrismalinkClient, PrismalinkProvider, type ProviderCapability, type ProviderConfig, type ProviderDescriptor, ProviderRegistry, type QrisResponse, RazorpayClient, RazorpayProvider, type RefundParams, type RefundResult, SUMOPOD_TO_CANONICAL, SnapApiError, SnapClient, type SnapClientOptions, SquareClient, SquareProvider, StripeClient, StripeProvider, SumopodClient, type SumopodCreatePaymentParams, type SumopodPaymentResponse, SumopodProvider, TwoCheckoutClient, TwoCheckoutProvider, type VerifyCallbackResult, type VirtualAccountResponse, XenditClient, type XenditDisbursementParams, XenditProvider, buayar, buildBraintreeBasicAuth, buildCoreChargePayload, buildDefaultDescriptors, buildIpaymuCallbackString, buildPaymentMethodDescriptor, buildPaymentMethodDescriptors, buildPaypalBasicAuth, buildPayuBasicAuth, buildRazorpayBasicAuth, buildTwoCheckoutAuth, formatNicepayTimestamp, generateDokuHeaders, generateFaspaySignature, generateFinpaySignature, generateIpaymuSignature, generateNicepayToken, generateOyHeaders, generatePrismalinkSignature, generateSnapAsymmetricSignature, generateSnapSymmetricSignature, getDuitkuInquirySignatures, getDuitkuPaymentMethodsSignature, getDuitkuStatusSignatures, getPaymentMethodCategory, getXenditAuthHeader, hmacSha256, mapCategoryToDescriptorType, md5, minifyJson, normalizeIpaymuCallback, parseCoreChargeResponse, paymentManager, providerRegistry, resolveConfigFromEnv, safeCompare, serializePaypalParams, serializeStripeParams, sha256, sha256Hex, sha512, snapErrorHint, snapExternalId, snapTimestamp, snapUtcTimestamp, toCanonicalPaymentMethod, toDokuPaymentMethod, toDuitkuPaymentMethod, toFaspayPaymentMethod, toFinpayPaymentMethod, toIpaymuPaymentMethod, toNicepayPaymentMethod, toOyPaymentMethod, toPrismalinkPaymentMethod, toStripePaymentMethod, toSumopodPaymentMethod, toXenditPaymentMethod, verifyAdyenWebhook, verifyBraintreeWebhook, verifyCheckoutComWebhook, verifyDokuWebhookSignature, verifyDuitkuCallbackSignature, verifyFaspaySignature, verifyFinpaySignature, verifyIpaymuCallback, verifyIpaymuCallbackSignature, verifyNicepayWebhook, verifyOyWebhook, verifyPaypalWebhookSimple, verifyPayuWebhook, verifyPrismalinkSignature, verifyRazorpayWebhook, verifySnapWebhookSignature, verifySquareWebhook, verifyStripeWebhook, verifySumopodSvixSignature, verifySumopodToken, verifyTwoCheckoutWebhook, verifyXenditWebhookToken };

package/dist/index.d.ts

@@ -625,6 +625,15 @@ declare class TwoCheckoutProvider extends BasePaymentProvider {
     checkTransaction(params: CheckTransactionParams, config: ProviderConfig): Promise<CheckTransactionResult>;
 }
 
+declare class SumopodProvider extends BasePaymentProvider {
+    readonly name = "sumopod";
+    private getBaseUrl;
+    createInvoice(params: CreateInvoiceParams, config: ProviderConfig): Promise<InvoiceResponse>;
+    verifyCallback(body: any, config: ProviderConfig): Promise<VerifyCallbackResult>;
+    getPaymentMethods(params: GetPaymentMethodsParams, config: ProviderConfig): Promise<GetPaymentMethodsResult>;
+    checkTransaction(params: CheckTransactionParams, config: ProviderConfig): Promise<CheckTransactionResult>;
+}
+
 interface DuitkuDisbursementParams {
     bankCode: string;
     bankAccount: string;
@@ -1180,6 +1189,49 @@ declare class TwoCheckoutClient {
     listOrders(page?: number, limit?: number): Promise<any>;
 }
 
+interface SumopodCreatePaymentParams {
+    order_id: string;
+    amount: number;
+    currency?: string;
+    expires_in_hours?: number;
+    success_return_url?: string;
+    cancel_return_url?: string;
+    payment_method_type_code?: string;
+    [key: string]: any;
+}
+interface SumopodPaymentResponse {
+    payment_id: string;
+    order_id: string;
+    amount: number;
+    fee?: number;
+    net_amount?: number;
+    payment_link_url: string;
+    status: string;
+    expires_at?: string;
+    [key: string]: any;
+}
+declare class SumopodClient {
+    private apiKey;
+    private baseUrl;
+    constructor(config: ProviderConfig | {
+        apiKey?: string;
+        customBaseUrl?: string;
+        sandbox?: boolean;
+    });
+    /**
+     * HTTP request helper dengan header autentikasi X-Api-Key SumoPod
+     */
+    request(method: "GET" | "POST", endpoint: string, body?: any): Promise<any>;
+    /**
+     * Buat payment link / sesi pembayaran baru di SumoPod
+     */
+    createPayment(params: SumopodCreatePaymentParams): Promise<SumopodPaymentResponse>;
+    /**
+     * Ambil detail status pembayaran berdasarkan ID pembayaran
+     */
+    getPayment(paymentId: string): Promise<SumopodPaymentResponse>;
+}
+
 declare class PaymentManager {
     private providers;
     constructor();
@@ -1223,6 +1275,8 @@ declare class PaymentManager {
     getBraintreeClient(config: ProviderConfig): BraintreeClient;
     getTwoCheckoutProvider(): TwoCheckoutProvider;
     getTwoCheckoutClient(config: ProviderConfig): TwoCheckoutClient;
+    getSumopodProvider(): SumopodProvider;
+    getSumopodClient(config: ProviderConfig): SumopodClient;
     createInvoice(providerName: string, params: CreateInvoiceParams, config: ProviderConfig): Promise<InvoiceResponse>;
     verifyCallback(providerName: string, body: any, config: ProviderConfig): Promise<VerifyCallbackResult>;
     getPaymentMethods(providerName: string, params: GetPaymentMethodsParams, config: ProviderConfig): Promise<GetPaymentMethodsResult>;
@@ -1293,9 +1347,9 @@ declare function resolveConfigFromEnv(customConfig?: BuayarConfig): BuayarConfig
  * Antarmuka tingkat tinggi untuk membuat transaksi, query channel pembayaran,
  * pengecekan status, dan verifikasi webhook universal tanpa perlu rombak kode.
  *
- * Mendukung 19 Payment Gateway: Midtrans, Duitku, iPaymu, Xendit, DOKU, PrismaLink,
+ * Mendukung 20 Payment Gateway: Midtrans, Duitku, iPaymu, Xendit, DOKU, PrismaLink,
  * Faspay, Finpay, Nicepay, OY! Bisnis, Stripe, PayPal, Adyen, Checkout.com,
- * Razorpay, Square, PayU, Braintree, 2Checkout/Verifone.
+ * Razorpay, Square, PayU, Braintree, 2Checkout/Verifone, SumoPod.
  */
 declare class Buayar {
     private manager;
@@ -1424,6 +1478,7 @@ declare class Buayar {
     getPayuClient(configOverride?: Partial<ProviderConfig>): PayuClient;
     getBraintreeClient(configOverride?: Partial<ProviderConfig>): BraintreeClient;
     getTwoCheckoutClient(configOverride?: Partial<ProviderConfig>): TwoCheckoutClient;
+    getSumopodClient(configOverride?: Partial<ProviderConfig>): SumopodClient;
 }
 declare const buayar: Buayar;
 
@@ -1554,6 +1609,18 @@ declare function toOyPaymentMethod(code?: string): {
  * Ubah method code apapun ke format Stripe
  */
 declare function toStripePaymentMethod(code?: string): string | undefined;
+/**
+ * Mapping dari Canonical Payment Method ke kode SumoPod
+ */
+declare const CANONICAL_TO_SUMOPOD: Record<string, string>;
+/**
+ * Mapping dari kode SumoPod ke Canonical Payment Method
+ */
+declare const SUMOPOD_TO_CANONICAL: Record<string, string>;
+/**
+ * Ubah method code apapun ke format SumoPod
+ */
+declare function toSumopodPaymentMethod(code?: string): string | undefined;
 /**
  * Ubah method code apapun ke format canonical standar Buayar
  */
@@ -1796,6 +1863,33 @@ declare function generateOyHeaders(username: string, apiKey: string): Record<str
  */
 declare function verifyOyWebhook(headers: Record<string, string | string[] | undefined>, expectedUsername: string): boolean;
 
+/**
+ * Memverifikasi signature webhook Svix dari SumoPod.
+ *
+ * SumoPod menyertakan tiga header HTTP:
+ * - `svix-id`: ID unik pesan webhook
+ * - `svix-timestamp`: Unix timestamp (detik) saat webhook dikirim
+ * - `svix-signature`: Satu atau lebih signature "v1,<base64>" dipisahkan spasi
+ *
+ * @param secret Secret signing dari tab Settings (dimulai dengan "whsec_")
+ * @param svixId Nilai header `svix-id`
+ * @param svixTimestamp Nilai header `svix-timestamp`
+ * @param svixSignature Nilai header `svix-signature`
+ * @param rawBody Request body mentah / unparsed string
+ * @param toleranceSeconds Toleransi replay attack dalam detik (default 300 detik = 5 menit). Set 0 untuk nonaktifkan.
+ */
+declare function verifySumopodSvixSignature(secret: string, svixId: string, svixTimestamp: string, svixSignature: string, rawBody: string, toleranceSeconds?: number): boolean;
+/**
+ * Memverifikasi header `x-webhook-token` SumoPod secara timing-safe.
+ *
+ * Alternatif yang lebih sederhana dari verifikasi signature HMAC:
+ * bandingkan token proyek langsung dengan header `x-webhook-token`.
+ *
+ * @param expectedToken Token rahasia webhook (mis. "whtok_...")
+ * @param receivedToken Nilai header `x-webhook-token` yang diterima
+ */
+declare function verifySumopodToken(expectedToken: string, receivedToken: string): boolean;
+
 /**
  * Serializer helper untuk format URL-encoded form data Stripe
  * Mendukung nested object dan array seperti line_items[0][price_data][unit_amount]
@@ -1983,4 +2077,4 @@ declare function safeCompare(a: string, b: string): boolean;
  */
 declare function getPaymentMethodCategory(code: string, name?: string): "Virtual Account" | "QRIS" | "E-Wallet" | "Retail / Gerai" | "Kartu Kredit" | "Paylater / Cicilan" | "Lainnya";
 
-export { AdyenClient, AdyenProvider, BasePaymentProvider, BraintreeClient, BraintreeProvider, Buayar, type BuayarConfig, CANONICAL_TO_DOKU, CANONICAL_TO_DUITKU, CANONICAL_TO_FASPAY, CANONICAL_TO_FINPAY, CANONICAL_TO_IPAYMU, CANONICAL_TO_MIDTRANS, CANONICAL_TO_NICEPAY, CANONICAL_TO_OY, CANONICAL_TO_PRISMALINK, CANONICAL_TO_STRIPE, CANONICAL_TO_XENDIT, CORE_API_METHODS, type CanonicalPaymentMethod, type CheckBalanceResult, type CheckTransactionParams, type CheckTransactionResult, CheckoutComClient, CheckoutComProvider, type CreateInvoiceParams, type CustomerDetails, DUITKU_TO_CANONICAL, type DisburseParams, type DisburseResult, DokuClient, DokuProvider, DuitkuClient, type DuitkuDisbursementParams, DuitkuProvider, type EWalletResponse, FaspayClient, FaspayProvider, FinpayClient, FinpayProvider, type GetPaymentMethodDescriptorsResult, type GetPaymentMethodsParams, type GetPaymentMethodsResult, type InvoiceResponse, IpaymuClient, IpaymuProvider, MIDTRANS_PROBE_PAYLOADS, MIDTRANS_STATIC_METHODS, type MandiriBillInfo, MidtransClient, MidtransProvider, NicepayClient, NicepayProvider, OyClient, OyProvider, PaymentManager, type PaymentMethod, type PaymentMethodDescriptor, type PaymentMethodDescriptorType, type PaymentMethodItem, type PaymentMode, PaypalClient, PaypalProvider, PayuClient, PayuProvider, PrismalinkClient, PrismalinkProvider, type ProviderCapability, type ProviderConfig, type ProviderDescriptor, ProviderRegistry, type QrisResponse, RazorpayClient, RazorpayProvider, type RefundParams, type RefundResult, SnapApiError, SnapClient, type SnapClientOptions, SquareClient, SquareProvider, StripeClient, StripeProvider, TwoCheckoutClient, TwoCheckoutProvider, type VerifyCallbackResult, type VirtualAccountResponse, XenditClient, type XenditDisbursementParams, XenditProvider, buayar, buildBraintreeBasicAuth, buildCoreChargePayload, buildDefaultDescriptors, buildIpaymuCallbackString, buildPaymentMethodDescriptor, buildPaymentMethodDescriptors, buildPaypalBasicAuth, buildPayuBasicAuth, buildRazorpayBasicAuth, buildTwoCheckoutAuth, formatNicepayTimestamp, generateDokuHeaders, generateFaspaySignature, generateFinpaySignature, generateIpaymuSignature, generateNicepayToken, generateOyHeaders, generatePrismalinkSignature, generateSnapAsymmetricSignature, generateSnapSymmetricSignature, getDuitkuInquirySignatures, getDuitkuPaymentMethodsSignature, getDuitkuStatusSignatures, getPaymentMethodCategory, getXenditAuthHeader, hmacSha256, mapCategoryToDescriptorType, md5, minifyJson, normalizeIpaymuCallback, parseCoreChargeResponse, paymentManager, providerRegistry, resolveConfigFromEnv, safeCompare, serializePaypalParams, serializeStripeParams, sha256, sha256Hex, sha512, snapErrorHint, snapExternalId, snapTimestamp, snapUtcTimestamp, toCanonicalPaymentMethod, toDokuPaymentMethod, toDuitkuPaymentMethod, toFaspayPaymentMethod, toFinpayPaymentMethod, toIpaymuPaymentMethod, toNicepayPaymentMethod, toOyPaymentMethod, toPrismalinkPaymentMethod, toStripePaymentMethod, toXenditPaymentMethod, verifyAdyenWebhook, verifyBraintreeWebhook, verifyCheckoutComWebhook, verifyDokuWebhookSignature, verifyDuitkuCallbackSignature, verifyFaspaySignature, verifyFinpaySignature, verifyIpaymuCallback, verifyIpaymuCallbackSignature, verifyNicepayWebhook, verifyOyWebhook, verifyPaypalWebhookSimple, verifyPayuWebhook, verifyPrismalinkSignature, verifyRazorpayWebhook, verifySnapWebhookSignature, verifySquareWebhook, verifyStripeWebhook, verifyTwoCheckoutWebhook, verifyXenditWebhookToken };
+export { AdyenClient, AdyenProvider, BasePaymentProvider, BraintreeClient, BraintreeProvider, Buayar, type BuayarConfig, CANONICAL_TO_DOKU, CANONICAL_TO_DUITKU, CANONICAL_TO_FASPAY, CANONICAL_TO_FINPAY, CANONICAL_TO_IPAYMU, CANONICAL_TO_MIDTRANS, CANONICAL_TO_NICEPAY, CANONICAL_TO_OY, CANONICAL_TO_PRISMALINK, CANONICAL_TO_STRIPE, CANONICAL_TO_SUMOPOD, CANONICAL_TO_XENDIT, CORE_API_METHODS, type CanonicalPaymentMethod, type CheckBalanceResult, type CheckTransactionParams, type CheckTransactionResult, CheckoutComClient, CheckoutComProvider, type CreateInvoiceParams, type CustomerDetails, DUITKU_TO_CANONICAL, type DisburseParams, type DisburseResult, DokuClient, DokuProvider, DuitkuClient, type DuitkuDisbursementParams, DuitkuProvider, type EWalletResponse, FaspayClient, FaspayProvider, FinpayClient, FinpayProvider, type GetPaymentMethodDescriptorsResult, type GetPaymentMethodsParams, type GetPaymentMethodsResult, type InvoiceResponse, IpaymuClient, IpaymuProvider, MIDTRANS_PROBE_PAYLOADS, MIDTRANS_STATIC_METHODS, type MandiriBillInfo, MidtransClient, MidtransProvider, NicepayClient, NicepayProvider, OyClient, OyProvider, PaymentManager, type PaymentMethod, type PaymentMethodDescriptor, type PaymentMethodDescriptorType, type PaymentMethodItem, type PaymentMode, PaypalClient, PaypalProvider, PayuClient, PayuProvider, PrismalinkClient, PrismalinkProvider, type ProviderCapability, type ProviderConfig, type ProviderDescriptor, ProviderRegistry, type QrisResponse, RazorpayClient, RazorpayProvider, type RefundParams, type RefundResult, SUMOPOD_TO_CANONICAL, SnapApiError, SnapClient, type SnapClientOptions, SquareClient, SquareProvider, StripeClient, StripeProvider, SumopodClient, type SumopodCreatePaymentParams, type SumopodPaymentResponse, SumopodProvider, TwoCheckoutClient, TwoCheckoutProvider, type VerifyCallbackResult, type VirtualAccountResponse, XenditClient, type XenditDisbursementParams, XenditProvider, buayar, buildBraintreeBasicAuth, buildCoreChargePayload, buildDefaultDescriptors, buildIpaymuCallbackString, buildPaymentMethodDescriptor, buildPaymentMethodDescriptors, buildPaypalBasicAuth, buildPayuBasicAuth, buildRazorpayBasicAuth, buildTwoCheckoutAuth, formatNicepayTimestamp, generateDokuHeaders, generateFaspaySignature, generateFinpaySignature, generateIpaymuSignature, generateNicepayToken, generateOyHeaders, generatePrismalinkSignature, generateSnapAsymmetricSignature, generateSnapSymmetricSignature, getDuitkuInquirySignatures, getDuitkuPaymentMethodsSignature, getDuitkuStatusSignatures, getPaymentMethodCategory, getXenditAuthHeader, hmacSha256, mapCategoryToDescriptorType, md5, minifyJson, normalizeIpaymuCallback, parseCoreChargeResponse, paymentManager, providerRegistry, resolveConfigFromEnv, safeCompare, serializePaypalParams, serializeStripeParams, sha256, sha256Hex, sha512, snapErrorHint, snapExternalId, snapTimestamp, snapUtcTimestamp, toCanonicalPaymentMethod, toDokuPaymentMethod, toDuitkuPaymentMethod, toFaspayPaymentMethod, toFinpayPaymentMethod, toIpaymuPaymentMethod, toNicepayPaymentMethod, toOyPaymentMethod, toPrismalinkPaymentMethod, toStripePaymentMethod, toSumopodPaymentMethod, toXenditPaymentMethod, verifyAdyenWebhook, verifyBraintreeWebhook, verifyCheckoutComWebhook, verifyDokuWebhookSignature, verifyDuitkuCallbackSignature, verifyFaspaySignature, verifyFinpaySignature, verifyIpaymuCallback, verifyIpaymuCallbackSignature, verifyNicepayWebhook, verifyOyWebhook, verifyPaypalWebhookSimple, verifyPayuWebhook, verifyPrismalinkSignature, verifyRazorpayWebhook, verifySnapWebhookSignature, verifySquareWebhook, verifyStripeWebhook, verifySumopodSvixSignature, verifySumopodToken, verifyTwoCheckoutWebhook, verifyXenditWebhookToken };