@fanth/paymentic-sdk 0.1.0

package/LICENSE

@@ -0,0 +1,7 @@
+Copyright 2026 Fanth
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -0,0 +1,57 @@
+# @fanth/paymentic-sdk
+
+TypeScript SDK for the [Paymentic REST API](https://docs.paymentic.com/api/v1.2/payment-api/paymentic-payment-api).
+
+## Install
+
+```bash
+npm install @fanth/paymentic-sdk
+```
+
+With [pnpm](https://pnpm.io/):
+
+```bash
+pnpm add @fanth/paymentic-sdk
+```
+
+## Usage
+
+See examples in [examples](./examples) directory.
+
+```ts
+import { PaymenticClient } from "@fanth/paymentic-sdk";
+
+const client = new PaymenticClient({
+    pointId: "...",
+    apiToken: "...",
+    signatureKey: "...",
+    sandbox: true,
+});
+
+const transaction = await client.createTransaction({
+    amount: "1000",
+    currency: "PLN",
+    title: "Order #1",
+});
+```
+
+### Webhook notifications
+
+Use `parseWebhook` to verify and parse incoming Paymentic webhook calls. It checks the `X-Paymentic-Signature` header against the raw body and throws `PaymenticInvalidSignatureError` if it's missing or invalid.
+
+```ts
+// e.g. a Next.js route handler / any Request-based HTTP framework
+export async function POST(request: Request) {
+    const notification = await client.parseWebhook(request);
+
+    if (notification.event === "PAYMENT.TRANSACTION_STATUS_CHANGED" && notification.status === "PAID") {
+        // mark the order as paid
+    }
+
+    return new Response(null, { status: 200 });
+}
+```
+
+> Note: `parseWebhook` reads the body via `request.text()`, so pass it the raw `Request` before any other code consumes the body.
+
+> Note: Not all endpoints are implemented yet. If you need an endpoint that is not implemented, feel free to open up a pull request :)

package/dist/client.d.ts

@@ -0,0 +1,24 @@
+import type { PaymenticCreateTransactionRequest, PaymenticCreateTransactionResponse, PaymenticWebhookNotification } from "./types.js";
+export interface PaymenticConfig {
+    pointId: string;
+    apiToken: string;
+    signatureKey: string;
+    sandbox: boolean;
+}
+export declare class PaymenticInvalidSignatureError extends Error {
+    constructor();
+}
+export declare class PaymenticClient {
+    private readonly config;
+    private readonly api;
+    private readonly baseUrl;
+    constructor(config: PaymenticConfig);
+    createTransaction(body: PaymenticCreateTransactionRequest): Promise<PaymenticCreateTransactionResponse>;
+    private isValidSignature;
+    /**
+     * Verifies and parses an incoming Paymentic webhook request.
+     * Throws PaymenticInvalidSignatureError if the signature does not match.
+     */
+    parseWebhook(request: Request): Promise<PaymenticWebhookNotification>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACR,iCAAiC,EACjC,kCAAkC,EAElC,4BAA4B,EAC/B,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,eAAe;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,OAAO,CAAC;CACpB;AAED,qBAAa,8BAA+B,SAAQ,KAAK;IACrD,cAEC;CACJ;AAED,qBAAa,eAAe;IAIZ,OAAO,CAAC,QAAQ,CAAC,MAAM;IAHnC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IAEjC,YAA6B,MAAM,EAAE,eAAe,EAenD;IAEK,iBAAiB,CAAC,IAAI,EAAE,iCAAiC,GAAG,OAAO,CAAC,kCAAkC,CAAC,CAM5G;IAED,OAAO,CAAC,gBAAgB;IAexB;;;OAGG;IACG,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,4BAA4B,CAAC,CAgB1E;CACJ"}

package/dist/client.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=client.test.d.ts.map

package/dist/client.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.test.d.ts","sourceRoot":"","sources":["../src/client.test.ts"],"names":[],"mappings":""}

package/dist/index.cjs

@@ -0,0 +1,107 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/index.ts
+var index_exports = {};
+__export(index_exports, {
+  PaymenticClient: () => PaymenticClient,
+  PaymenticInvalidSignatureError: () => PaymenticInvalidSignatureError
+});
+module.exports = __toCommonJS(index_exports);
+
+// src/client.ts
+var import_axios = __toESM(require("axios"), 1);
+var import_crypto = __toESM(require("crypto"), 1);
+var PaymenticInvalidSignatureError = class extends Error {
+  constructor() {
+    super("Invalid Paymentic webhook signature");
+  }
+};
+var PaymenticClient = class {
+  constructor(config) {
+    this.config = config;
+    this.baseUrl = this.config.sandbox ? "https://api.sandbox.paymentic.com/v1_2" : "https://api.paymentic.com/v1_2";
+    this.api = import_axios.default.create({
+      baseURL: this.baseUrl,
+      headers: {
+        Authorization: `Bearer ${this.config.apiToken}`
+      }
+    });
+    this.api.interceptors.response.use(
+      (response) => response,
+      (error) => {
+        console.error({ message: "Paymentic API error", errorResponse: error.response?.data });
+        throw error;
+      }
+    );
+  }
+  config;
+  api;
+  baseUrl;
+  async createTransaction(body) {
+    const response = await this.api.post(
+      `/payment/points/${this.config.pointId}/transactions`,
+      body
+    );
+    return response.data;
+  }
+  isValidSignature(payload, signature) {
+    const expected = import_crypto.default.createHmac("sha512", this.config.signatureKey).update(payload, "utf8").digest("base64");
+    const expectedBuffer = Buffer.from(expected);
+    const signatureBuffer = Buffer.from(signature);
+    if (expectedBuffer.length !== signatureBuffer.length) {
+      return false;
+    }
+    return import_crypto.default.timingSafeEqual(expectedBuffer, signatureBuffer);
+  }
+  /**
+   * Verifies and parses an incoming Paymentic webhook request.
+   * Throws PaymenticInvalidSignatureError if the signature does not match.
+   */
+  async parseWebhook(request) {
+    const event = request.headers.get("x-paymentic-event");
+    const notificationId = request.headers.get("x-paymentic-notification-id") ?? "";
+    const time = request.headers.get("x-paymentic-time") ?? "";
+    const signature = request.headers.get("x-paymentic-signature") ?? "";
+    const version = (request.headers.get("user-agent") ?? "").split("/")[1] ?? "";
+    const rawBody = await request.text();
+    const signaturePayload = `${event}|${version}|${rawBody}|${notificationId}|${time}`;
+    if (!this.isValidSignature(signaturePayload, signature)) {
+      throw new PaymenticInvalidSignatureError();
+    }
+    const body = JSON.parse(rawBody);
+    return { ...body, event, notificationId, time };
+  }
+};
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PaymenticClient,
+  PaymenticInvalidSignatureError
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts","../src/client.ts"],"sourcesContent":["export * from \"./client.js\";\nexport * from \"./types.js\";\n","import axios, { AxiosError, type AxiosInstance } from \"axios\";\nimport crypto from \"crypto\";\nimport type {\n    PaymenticCreateTransactionRequest,\n    PaymenticCreateTransactionResponse,\n    PaymenticWebhookEvent,\n    PaymenticWebhookNotification,\n} from \"./types.js\";\n\nexport interface PaymenticConfig {\n    pointId: string;\n    apiToken: string;\n    signatureKey: string;\n    sandbox: boolean;\n}\n\nexport class PaymenticInvalidSignatureError extends Error {\n    constructor() {\n        super(\"Invalid Paymentic webhook signature\");\n    }\n}\n\nexport class PaymenticClient {\n    private readonly api: AxiosInstance;\n    private readonly baseUrl: string;\n\n    constructor(private readonly config: PaymenticConfig) {\n        this.baseUrl = this.config.sandbox ? \"https://api.sandbox.paymentic.com/v1_2\" : \"https://api.paymentic.com/v1_2\";\n        this.api = axios.create({\n            baseURL: this.baseUrl,\n            headers: {\n                Authorization: `Bearer ${this.config.apiToken}`,\n            },\n        });\n        this.api.interceptors.response.use(\n            (response) => response,\n            (error: AxiosError) => {\n                console.error({ message: \"Paymentic API error\", errorResponse: error.response?.data });\n                throw error;\n            }\n        );\n    }\n\n    async createTransaction(body: PaymenticCreateTransactionRequest): Promise<PaymenticCreateTransactionResponse> {\n        const response = await this.api.post<PaymenticCreateTransactionResponse>(\n            `/payment/points/${this.config.pointId}/transactions`,\n            body\n        );\n        return response.data;\n    }\n\n    private isValidSignature(payload: string, signature: string): boolean {\n        // in php: base64_encode(hash_hmac('sha512', $payload, $signatureKey, true));\n        const expected = crypto.createHmac(\"sha512\", this.config.signatureKey).update(payload, \"utf8\").digest(\"base64\");\n\n        const expectedBuffer = Buffer.from(expected);\n        const signatureBuffer = Buffer.from(signature);\n\n        // Length check guards timingSafeEqual, which throws on mismatched lengths\n        if (expectedBuffer.length !== signatureBuffer.length) {\n            return false;\n        }\n\n        return crypto.timingSafeEqual(expectedBuffer, signatureBuffer);\n    }\n\n    /**\n     * Verifies and parses an incoming Paymentic webhook request.\n     * Throws PaymenticInvalidSignatureError if the signature does not match.\n     */\n    async parseWebhook(request: Request): Promise<PaymenticWebhookNotification> {\n        const event = request.headers.get(\"x-paymentic-event\") as PaymenticWebhookEvent;\n        const notificationId = request.headers.get(\"x-paymentic-notification-id\") ?? \"\";\n        const time = request.headers.get(\"x-paymentic-time\") ?? \"\";\n        const signature = request.headers.get(\"x-paymentic-signature\") ?? \"\";\n        // User-Agent is \"Paymentic/<version>\", e.g. \"Paymentic/1.1\"\n        const version = (request.headers.get(\"user-agent\") ?? \"\").split(\"/\")[1] ?? \"\";\n\n        const rawBody = await request.text();\n        const signaturePayload = `${event}|${version}|${rawBody}|${notificationId}|${time}`;\n        if (!this.isValidSignature(signaturePayload, signature)) {\n            throw new PaymenticInvalidSignatureError();\n        }\n\n        const body = JSON.parse(rawBody);\n        return { ...body, event, notificationId, time };\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAAsD;AACtD,oBAAmB;AAeZ,IAAM,iCAAN,cAA6C,MAAM;AAAA,EACtD,cAAc;AACV,UAAM,qCAAqC;AAAA,EAC/C;AACJ;AAEO,IAAM,kBAAN,MAAsB;AAAA,EAIzB,YAA6B,QAAyB;AAAzB;AACzB,SAAK,UAAU,KAAK,OAAO,UAAU,2CAA2C;AAChF,SAAK,MAAM,aAAAA,QAAM,OAAO;AAAA,MACpB,SAAS,KAAK;AAAA,MACd,SAAS;AAAA,QACL,eAAe,UAAU,KAAK,OAAO,QAAQ;AAAA,MACjD;AAAA,IACJ,CAAC;AACD,SAAK,IAAI,aAAa,SAAS;AAAA,MAC3B,CAAC,aAAa;AAAA,MACd,CAAC,UAAsB;AACnB,gBAAQ,MAAM,EAAE,SAAS,uBAAuB,eAAe,MAAM,UAAU,KAAK,CAAC;AACrF,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA,EAf6B;AAAA,EAHZ;AAAA,EACA;AAAA,EAmBjB,MAAM,kBAAkB,MAAsF;AAC1G,UAAM,WAAW,MAAM,KAAK,IAAI;AAAA,MAC5B,mBAAmB,KAAK,OAAO,OAAO;AAAA,MACtC;AAAA,IACJ;AACA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEQ,iBAAiB,SAAiB,WAA4B;AAElE,UAAM,WAAW,cAAAC,QAAO,WAAW,UAAU,KAAK,OAAO,YAAY,EAAE,OAAO,SAAS,MAAM,EAAE,OAAO,QAAQ;AAE9G,UAAM,iBAAiB,OAAO,KAAK,QAAQ;AAC3C,UAAM,kBAAkB,OAAO,KAAK,SAAS;AAG7C,QAAI,eAAe,WAAW,gBAAgB,QAAQ;AAClD,aAAO;AAAA,IACX;AAEA,WAAO,cAAAA,QAAO,gBAAgB,gBAAgB,eAAe;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,SAAyD;AACxE,UAAM,QAAQ,QAAQ,QAAQ,IAAI,mBAAmB;AACrD,UAAM,iBAAiB,QAAQ,QAAQ,IAAI,6BAA6B,KAAK;AAC7E,UAAM,OAAO,QAAQ,QAAQ,IAAI,kBAAkB,KAAK;AACxD,UAAM,YAAY,QAAQ,QAAQ,IAAI,uBAAuB,KAAK;AAElE,UAAM,WAAW,QAAQ,QAAQ,IAAI,YAAY,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAE3E,UAAM,UAAU,MAAM,QAAQ,KAAK;AACnC,UAAM,mBAAmB,GAAG,KAAK,IAAI,OAAO,IAAI,OAAO,IAAI,cAAc,IAAI,IAAI;AACjF,QAAI,CAAC,KAAK,iBAAiB,kBAAkB,SAAS,GAAG;AACrD,YAAM,IAAI,+BAA+B;AAAA,IAC7C;AAEA,UAAM,OAAO,KAAK,MAAM,OAAO;AAC/B,WAAO,EAAE,GAAG,MAAM,OAAO,gBAAgB,KAAK;AAAA,EAClD;AACJ;","names":["axios","crypto"]}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./client.js";
+export * from "./types.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,69 @@
+// src/client.ts
+import axios from "axios";
+import crypto from "crypto";
+var PaymenticInvalidSignatureError = class extends Error {
+  constructor() {
+    super("Invalid Paymentic webhook signature");
+  }
+};
+var PaymenticClient = class {
+  constructor(config) {
+    this.config = config;
+    this.baseUrl = this.config.sandbox ? "https://api.sandbox.paymentic.com/v1_2" : "https://api.paymentic.com/v1_2";
+    this.api = axios.create({
+      baseURL: this.baseUrl,
+      headers: {
+        Authorization: `Bearer ${this.config.apiToken}`
+      }
+    });
+    this.api.interceptors.response.use(
+      (response) => response,
+      (error) => {
+        console.error({ message: "Paymentic API error", errorResponse: error.response?.data });
+        throw error;
+      }
+    );
+  }
+  config;
+  api;
+  baseUrl;
+  async createTransaction(body) {
+    const response = await this.api.post(
+      `/payment/points/${this.config.pointId}/transactions`,
+      body
+    );
+    return response.data;
+  }
+  isValidSignature(payload, signature) {
+    const expected = crypto.createHmac("sha512", this.config.signatureKey).update(payload, "utf8").digest("base64");
+    const expectedBuffer = Buffer.from(expected);
+    const signatureBuffer = Buffer.from(signature);
+    if (expectedBuffer.length !== signatureBuffer.length) {
+      return false;
+    }
+    return crypto.timingSafeEqual(expectedBuffer, signatureBuffer);
+  }
+  /**
+   * Verifies and parses an incoming Paymentic webhook request.
+   * Throws PaymenticInvalidSignatureError if the signature does not match.
+   */
+  async parseWebhook(request) {
+    const event = request.headers.get("x-paymentic-event");
+    const notificationId = request.headers.get("x-paymentic-notification-id") ?? "";
+    const time = request.headers.get("x-paymentic-time") ?? "";
+    const signature = request.headers.get("x-paymentic-signature") ?? "";
+    const version = (request.headers.get("user-agent") ?? "").split("/")[1] ?? "";
+    const rawBody = await request.text();
+    const signaturePayload = `${event}|${version}|${rawBody}|${notificationId}|${time}`;
+    if (!this.isValidSignature(signaturePayload, signature)) {
+      throw new PaymenticInvalidSignatureError();
+    }
+    const body = JSON.parse(rawBody);
+    return { ...body, event, notificationId, time };
+  }
+};
+export {
+  PaymenticClient,
+  PaymenticInvalidSignatureError
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client.ts"],"sourcesContent":["import axios, { AxiosError, type AxiosInstance } from \"axios\";\nimport crypto from \"crypto\";\nimport type {\n    PaymenticCreateTransactionRequest,\n    PaymenticCreateTransactionResponse,\n    PaymenticWebhookEvent,\n    PaymenticWebhookNotification,\n} from \"./types.js\";\n\nexport interface PaymenticConfig {\n    pointId: string;\n    apiToken: string;\n    signatureKey: string;\n    sandbox: boolean;\n}\n\nexport class PaymenticInvalidSignatureError extends Error {\n    constructor() {\n        super(\"Invalid Paymentic webhook signature\");\n    }\n}\n\nexport class PaymenticClient {\n    private readonly api: AxiosInstance;\n    private readonly baseUrl: string;\n\n    constructor(private readonly config: PaymenticConfig) {\n        this.baseUrl = this.config.sandbox ? \"https://api.sandbox.paymentic.com/v1_2\" : \"https://api.paymentic.com/v1_2\";\n        this.api = axios.create({\n            baseURL: this.baseUrl,\n            headers: {\n                Authorization: `Bearer ${this.config.apiToken}`,\n            },\n        });\n        this.api.interceptors.response.use(\n            (response) => response,\n            (error: AxiosError) => {\n                console.error({ message: \"Paymentic API error\", errorResponse: error.response?.data });\n                throw error;\n            }\n        );\n    }\n\n    async createTransaction(body: PaymenticCreateTransactionRequest): Promise<PaymenticCreateTransactionResponse> {\n        const response = await this.api.post<PaymenticCreateTransactionResponse>(\n            `/payment/points/${this.config.pointId}/transactions`,\n            body\n        );\n        return response.data;\n    }\n\n    private isValidSignature(payload: string, signature: string): boolean {\n        // in php: base64_encode(hash_hmac('sha512', $payload, $signatureKey, true));\n        const expected = crypto.createHmac(\"sha512\", this.config.signatureKey).update(payload, \"utf8\").digest(\"base64\");\n\n        const expectedBuffer = Buffer.from(expected);\n        const signatureBuffer = Buffer.from(signature);\n\n        // Length check guards timingSafeEqual, which throws on mismatched lengths\n        if (expectedBuffer.length !== signatureBuffer.length) {\n            return false;\n        }\n\n        return crypto.timingSafeEqual(expectedBuffer, signatureBuffer);\n    }\n\n    /**\n     * Verifies and parses an incoming Paymentic webhook request.\n     * Throws PaymenticInvalidSignatureError if the signature does not match.\n     */\n    async parseWebhook(request: Request): Promise<PaymenticWebhookNotification> {\n        const event = request.headers.get(\"x-paymentic-event\") as PaymenticWebhookEvent;\n        const notificationId = request.headers.get(\"x-paymentic-notification-id\") ?? \"\";\n        const time = request.headers.get(\"x-paymentic-time\") ?? \"\";\n        const signature = request.headers.get(\"x-paymentic-signature\") ?? \"\";\n        // User-Agent is \"Paymentic/<version>\", e.g. \"Paymentic/1.1\"\n        const version = (request.headers.get(\"user-agent\") ?? \"\").split(\"/\")[1] ?? \"\";\n\n        const rawBody = await request.text();\n        const signaturePayload = `${event}|${version}|${rawBody}|${notificationId}|${time}`;\n        if (!this.isValidSignature(signaturePayload, signature)) {\n            throw new PaymenticInvalidSignatureError();\n        }\n\n        const body = JSON.parse(rawBody);\n        return { ...body, event, notificationId, time };\n    }\n}\n"],"mappings":";AAAA,OAAO,WAA+C;AACtD,OAAO,YAAY;AAeZ,IAAM,iCAAN,cAA6C,MAAM;AAAA,EACtD,cAAc;AACV,UAAM,qCAAqC;AAAA,EAC/C;AACJ;AAEO,IAAM,kBAAN,MAAsB;AAAA,EAIzB,YAA6B,QAAyB;AAAzB;AACzB,SAAK,UAAU,KAAK,OAAO,UAAU,2CAA2C;AAChF,SAAK,MAAM,MAAM,OAAO;AAAA,MACpB,SAAS,KAAK;AAAA,MACd,SAAS;AAAA,QACL,eAAe,UAAU,KAAK,OAAO,QAAQ;AAAA,MACjD;AAAA,IACJ,CAAC;AACD,SAAK,IAAI,aAAa,SAAS;AAAA,MAC3B,CAAC,aAAa;AAAA,MACd,CAAC,UAAsB;AACnB,gBAAQ,MAAM,EAAE,SAAS,uBAAuB,eAAe,MAAM,UAAU,KAAK,CAAC;AACrF,cAAM;AAAA,MACV;AAAA,IACJ;AAAA,EACJ;AAAA,EAf6B;AAAA,EAHZ;AAAA,EACA;AAAA,EAmBjB,MAAM,kBAAkB,MAAsF;AAC1G,UAAM,WAAW,MAAM,KAAK,IAAI;AAAA,MAC5B,mBAAmB,KAAK,OAAO,OAAO;AAAA,MACtC;AAAA,IACJ;AACA,WAAO,SAAS;AAAA,EACpB;AAAA,EAEQ,iBAAiB,SAAiB,WAA4B;AAElE,UAAM,WAAW,OAAO,WAAW,UAAU,KAAK,OAAO,YAAY,EAAE,OAAO,SAAS,MAAM,EAAE,OAAO,QAAQ;AAE9G,UAAM,iBAAiB,OAAO,KAAK,QAAQ;AAC3C,UAAM,kBAAkB,OAAO,KAAK,SAAS;AAG7C,QAAI,eAAe,WAAW,gBAAgB,QAAQ;AAClD,aAAO;AAAA,IACX;AAEA,WAAO,OAAO,gBAAgB,gBAAgB,eAAe;AAAA,EACjE;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,aAAa,SAAyD;AACxE,UAAM,QAAQ,QAAQ,QAAQ,IAAI,mBAAmB;AACrD,UAAM,iBAAiB,QAAQ,QAAQ,IAAI,6BAA6B,KAAK;AAC7E,UAAM,OAAO,QAAQ,QAAQ,IAAI,kBAAkB,KAAK;AACxD,UAAM,YAAY,QAAQ,QAAQ,IAAI,uBAAuB,KAAK;AAElE,UAAM,WAAW,QAAQ,QAAQ,IAAI,YAAY,KAAK,IAAI,MAAM,GAAG,EAAE,CAAC,KAAK;AAE3E,UAAM,UAAU,MAAM,QAAQ,KAAK;AACnC,UAAM,mBAAmB,GAAG,KAAK,IAAI,OAAO,IAAI,OAAO,IAAI,cAAc,IAAI,IAAI;AACjF,QAAI,CAAC,KAAK,iBAAiB,kBAAkB,SAAS,GAAG;AACrD,YAAM,IAAI,+BAA+B;AAAA,IAC7C;AAEA,UAAM,OAAO,KAAK,MAAM,OAAO;AAC/B,WAAO,EAAE,GAAG,MAAM,OAAO,gBAAgB,KAAK;AAAA,EAClD;AACJ;","names":[]}

package/dist/types.d.ts

@@ -0,0 +1,148 @@
+export interface PaymenticCreateTransactionRequest {
+    /** Amount in minor precision with up to 2 decimals */
+    amount: string;
+    /** ISO 4217 3-letter currency code. Defaults to PLN when omitted. */
+    currency?: "PLN" | "EUR" | null;
+    title: string;
+    description?: string | null;
+    externalReferenceId?: string | null;
+    redirect?: {
+        success?: string | null;
+        failure?: string | null;
+    } | null;
+    customer?: {
+        name?: string | null;
+        email?: string | null;
+        emailVerified?: boolean | null;
+        phone?: string | null;
+        phoneVerified?: boolean | null;
+        /** ISO 3166-1 alpha-2 */
+        country?: string | null;
+        /** ISO 639-1 alpha-2 */
+        locale?: string | null;
+        ip?: string | null;
+        userAgent?: string | null;
+        fingerprint?: string | null;
+    } | null;
+    order?: {
+        id?: string | null;
+        shippingMethod?: "VIRTUAL" | "TRACKED_DELIVERY" | "UNTRACKED_DELIVERY" | "IN_STORE_PICKUP" | "PARCEL_PICKUP" | "LOCKER_PICKUP" | "HYBRID" | "OTHER" | null;
+        trackingNumber?: string | null;
+        customerType?: "B2B" | "B2C" | null;
+    } | null;
+    billingAddress?: {
+        firstName?: string | null;
+        lastName?: string | null;
+        street?: string | null;
+        buildingNumber?: string | null;
+        flat?: string | null;
+        city?: string | null;
+        region?: string | null;
+        postalCode?: string | null;
+        state?: string | null;
+        /** ISO-3166-1 alpha-2 */
+        country?: string | null;
+        company?: string | null;
+    } | null;
+    shippingAddress?: {
+        firstName?: string | null;
+        lastName?: string | null;
+        street?: string | null;
+        buildingNumber?: string | null;
+        flat?: string | null;
+        city?: string | null;
+        region?: string | null;
+        postalCode?: string | null;
+        state?: string | null;
+        /** ISO-3166-1 alpha-2 */
+        country?: string | null;
+        company?: string | null;
+    } | null;
+    cart?: {
+        name?: string | null;
+        quantity?: number | null;
+        unitPrice?: string | null;
+        type?: "PRODUCT" | "SHIPPING" | "DISCOUNT" | "SURCHARGE" | "GIFT_CARD" | null;
+        productType?: "PHYSICAL" | "DIGITAL" | "SERVICE" | "VIRTUAL" | null;
+        sku?: string | null;
+    }[] | null;
+    paymentMethod?: "BLIK" | "PBL" | "BNPL" | "CARD" | "MOBILE_WALLET" | null;
+    paymentChannel?: string | null;
+    /**
+     * Whitelist of payment methods (optionally narrowed to a specific channel) that the gateway will present to the customer.
+     * Cannot be combined with hiddenPaymentMethods, paymentMethod or paymentChannel.
+     * When paymentChannel is null, all channels of that method are allowed.
+     */
+    allowedPaymentMethods?: {
+        paymentMethod: "BLIK" | "PBL" | "BNPL" | "CARD" | "MW" | "PAYSAFE";
+        paymentChannel?: string | null;
+    }[] | null;
+    /**
+     * List of payment methods (optionally narrowed to a specific channel) that the gateway will hide from the customer.
+     * Cannot be combined with allowedPaymentMethods, paymentMethod or paymentChannel.
+     * When paymentChannel is null, all channels of that method are hidden.
+     */
+    hiddenPaymentMethods?: {
+        paymentMethod: "BLIK" | "PBL" | "BNPL" | "CARD" | "MW" | "PAYSAFE";
+        paymentChannel?: string | null;
+    }[] | null;
+    /** If true, store customer payment instrument for recurring transactions. */
+    createRegistration?: boolean | null;
+    whitelabel?: boolean | null;
+    autoCapture?: boolean | null;
+    expiresAt?: string | null;
+}
+export interface PaymenticCreateTransactionResponse {
+    /** Transaction ID */
+    id: string;
+    /** Transaction URL */
+    redirectUrl: string;
+    whitelabel?: object | null;
+}
+interface PaymenticWebhookEnvelope {
+    /** From the X-Paymentic-Notification-Id header, use for idempotency */
+    notificationId: string;
+    /** From the X-Paymentic-Time header */
+    time: string;
+}
+export interface PaymenticTransactionStatusChangedNotification extends PaymenticWebhookEnvelope {
+    event: "PAYMENT.TRANSACTION_STATUS_CHANGED";
+    transactionId: string;
+    pointId: string;
+    status: "CREATED" | "PENDING" | "PAID" | "CANCELED" | "EXPIRED" | "FAILED";
+    amount: string;
+    currency: "PLN" | "EUR";
+    commission?: string | null;
+    externalReferenceId?: string | null;
+    paymentMethod?: "BLIK" | "PBL" | "BNPL" | "CARD" | "MOBILE_WALLET" | null;
+    paymentChannel?: string | null;
+}
+export interface PaymenticBlikAliasStatusChangedNotification extends PaymenticWebhookEnvelope {
+    event: "PAYMENT.BLIK_ALIAS_STATUS_CHANGED";
+    aliasId: string;
+    pointId: string;
+    status: "CREATED" | "ACTIVE" | "UNREGISTERED" | "EXPIRED";
+    type: "UID" | "PAYID";
+    value: string;
+    expiresAt?: string | null;
+}
+export interface PaymenticRefundStatusChangedNotification extends PaymenticWebhookEnvelope {
+    event: "PAYMENT.REFUND_STATUS_CHANGED";
+    refundId: string;
+    transactionId: string;
+    pointId: string;
+    status: "CREATED" | "ACCEPTED" | "PENDING" | "DONE" | "REJECTED" | "CANCELLED";
+    amount: string;
+    externalReferenceId?: string | null;
+}
+export interface PaymenticTransactionBlikStatusChangedNotification extends PaymenticWebhookEnvelope {
+    event: "PAYMENT.TRANSACTION_BLIK_STATUS_CHANGED";
+    transactionId: string;
+    actionId: string;
+    externalStatus: "BLIK_AUTHORIZED" | "BLIK_CUSTOMER_DECLINED" | "BLIK_SYSTEM_DECLINED" | "BLIK_INSUFFICIENT_FUNDS" | "BLIK_TIMEOUT" | "BLIK_CUSTOMER_LIMIT";
+    externalId: string;
+}
+export type PaymenticWebhookNotification = PaymenticTransactionStatusChangedNotification | PaymenticBlikAliasStatusChangedNotification | PaymenticRefundStatusChangedNotification | PaymenticTransactionBlikStatusChangedNotification;
+export type PaymenticWebhookEvent = PaymenticWebhookNotification["event"];
+export {};
+//# sourceMappingURL=types.d.ts.map

package/dist/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iCAAiC;IAC9C,sDAAsD;IACtD,MAAM,EAAE,MAAM,CAAC;IACf,qEAAqE;IACrE,QAAQ,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,EAAE;QACP,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,IAAI,CAAC;IACT,QAAQ,CAAC,EAAE;QACP,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAC/B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,aAAa,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;QAC/B,yBAAyB;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,wBAAwB;QACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC/B,GAAG,IAAI,CAAC;IACT,KAAK,CAAC,EAAE;QACJ,EAAE,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACnB,cAAc,CAAC,EACT,SAAS,GACT,kBAAkB,GAClB,oBAAoB,GACpB,iBAAiB,GACjB,eAAe,GACf,eAAe,GACf,QAAQ,GACR,OAAO,GACP,IAAI,CAAC;QACX,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,YAAY,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,IAAI,CAAC;KACvC,GAAG,IAAI,CAAC;IACT,cAAc,CAAC,EAAE;QACb,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,yBAAyB;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,IAAI,CAAC;IACT,eAAe,CAAC,EAAE;QACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC/B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACvB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC3B,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACtB,yBAAyB;QACzB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC3B,GAAG,IAAI,CAAC;IACT,IAAI,CAAC,EACC;QACI,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,IAAI,CAAC,EAAE,SAAS,GAAG,UAAU,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,IAAI,CAAC;QAC9E,WAAW,CAAC,EAAE,UAAU,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG,IAAI,CAAC;QACpE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KACvB,EAAE,GACH,IAAI,CAAC;IACX,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IAC1E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B;;;;OAIG;IACH,qBAAqB,CAAC,EAChB;QACI,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QACnE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,EAAE,GACH,IAAI,CAAC;IACX;;;;OAIG;IACH,oBAAoB,CAAC,EACf;QACI,aAAa,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;QACnE,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAClC,EAAE,GACH,IAAI,CAAC;IACX,6EAA6E;IAC7E,kBAAkB,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACpC,UAAU,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IAC7B,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,kCAAkC;IAC/C,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,sBAAsB;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED,UAAU,wBAAwB;IAC9B,uEAAuE;IACvE,cAAc,EAAE,MAAM,CAAC;IACvB,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,6CAA8C,SAAQ,wBAAwB;IAC3F,KAAK,EAAE,oCAAoC,CAAC;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAAC;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,KAAK,GAAG,KAAK,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,aAAa,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,eAAe,GAAG,IAAI,CAAC;IAC1E,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,MAAM,WAAW,2CAA4C,SAAQ,wBAAwB;IACzF,KAAK,EAAE,mCAAmC,CAAC;IAC3C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,cAAc,GAAG,SAAS,CAAC;IAC1D,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,wCAAyC,SAAQ,wBAAwB;IACtF,KAAK,EAAE,+BAA+B,CAAC;IACvC,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,WAAW,CAAC;IAC/E,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvC;AAED,MAAM,WAAW,iDAAkD,SAAQ,wBAAwB;IAC/F,KAAK,EAAE,yCAAyC,CAAC;IACjD,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EACR,iBAAiB,GACjB,wBAAwB,GACxB,sBAAsB,GACtB,yBAAyB,GACzB,cAAc,GACd,qBAAqB,CAAC;IAC5B,UAAU,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,4BAA4B,GAClC,6CAA6C,GAC7C,2CAA2C,GAC3C,wCAAwC,GACxC,iDAAiD,CAAC;AAExD,MAAM,MAAM,qBAAqB,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC"}

package/package.json

@@ -0,0 +1,52 @@
+{
+  "name": "@fanth/paymentic-sdk",
+  "version": "0.1.0",
+  "description": "TypeScript SDK for the Paymentic REST API",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/fanthpl/paymentic-sdk.git"
+  },
+  "license": "ISC",
+  "devDependencies": {
+    "@types/node": "^26.1.1",
+    "cross-env": "^10.1.0",
+    "dotenv": "^17.4.2",
+    "prettier": "^3.9.6",
+    "tsup": "^8.5.1",
+    "tsx": "^4.23.1",
+    "typescript": "^7.0.2"
+  },
+  "dependencies": {
+    "axios": "^1.18.1"
+  },
+  "scripts": {
+    "build": "tsup && tsc --emitDeclarationOnly",
+    "type-check": "tsc --noEmit",
+    "prod": "cross-env NODE_ENV=production tsx .",
+    "dev": "tsx .",
+    "test": "tsx src/client.test.ts"
+  }
+}