@lacspace/connectips 1.0.0

package/LICENSE

@@ -0,0 +1,51 @@
+Lacspace Free Licence
+Version 1.0, August 2026
+
+Copyright (c) 2026 Lacspace
+
+PREAMBLE
+
+This software is published by Lacspace under the Lacspace Free Licence — a free,
+permissive licence that lets you use this software for any purpose, including in
+commercial products and services, at no cost. It grants the same freedoms as
+common permissive open-source licences; the only condition is that this notice
+travels with the software. The canonical, always-current text of this licence is
+maintained at https://lacspace.com/licenses/lacspace-free-1.0
+
+GRANT OF RIGHTS
+
+Permission is hereby granted, free of charge, to any person or organisation
+obtaining a copy of this software and its associated documentation and data files
+(the "Software"), to deal in the Software without restriction, including without
+limitation the rights to use, copy, modify, merge, publish, distribute,
+sublicense, and/or sell copies of the Software, and to permit persons to whom the
+Software is furnished to do so, subject to the conditions below. These rights are
+granted for any purpose, personal or commercial, and are perpetual, worldwide,
+non-exclusive, and royalty-free.
+
+CONDITIONS
+
+The above copyright notice, this permission notice, and the name of this licence
+("Lacspace Free Licence") shall be included in all copies or substantial portions
+of the Software.
+
+TRADEMARKS
+
+This licence does not grant permission to use the trade names, trademarks, service
+marks, logos, or product names of Lacspace, except as required to reproduce the
+notice above or to describe the origin of the Software in a truthful manner.
+
+DISCLAIMER OF WARRANTY AND LIMITATION OF LIABILITY
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY, WHETHER IN
+AN ACTION OF CONTRACT, TORT, OR OTHERWISE, ARISING FROM, OUT OF, OR IN CONNECTION
+WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+---
+
+The Lacspace Free Licence is a source-available, permissive licence and is not (as
+of this version) an OSI-approved licence. In substance it grants the same freedoms
+as the MIT Licence. Learn more at https://lacspace.com/licenses

package/README.md

@@ -0,0 +1,114 @@
+<div align="center">
+
+# @lacspace/connectips
+
+**Connect IPS (Nepal) merchant integration over Web Crypto — RSA-signed redirect tokens + server-to-server transaction validation.**
+
+[![npm version](https://img.shields.io/npm/v/@lacspace/connectips?color=%2316a34a&label=npm)](https://www.npmjs.com/package/@lacspace/connectips)
+[![install size](https://packagephobia.com/badge?p=@lacspace/connectips)](https://packagephobia.com/result?p=@lacspace/connectips)
+[![minzipped](https://img.shields.io/bundlephobia/minzip/@lacspace/connectips?label=minzip)](https://bundlephobia.com/package/@lacspace/connectips)
+[![types](https://img.shields.io/badge/types-included-blue)](https://www.npmjs.com/package/@lacspace/connectips)
+[![license](https://img.shields.io/npm/l/@lacspace/connectips?color=green)](https://github.com/lacspace/npm-packages/blob/main/LICENSE)
+
+</div>
+
+> [Connect IPS](https://www.connectips.com/) is Nepal's inter-bank payment gateway (operated by NCHL). Integrating it means building an exact `KEY=VALUE,…,TOKEN=TOKEN` message, signing it with your merchant **RSA private key** (RSA-SHA256), redirecting the payer, and later validating the transaction server-to-server. This package does all of that correctly.
+
+- 🔐 **RSA-SHA256** (RSASSA-PKCS1-v1_5) signing straight from a **PKCS#8 PEM** private key
+- 🧾 Canonical token message built for you — no fragile string concatenation
+- 🔁 `buildForm()` for the redirect and `validateTxn()` for the callback check
+- 🛡️ Built on **Web Crypto** (`globalThis.crypto.subtle`) — never hand-rolled cryptography
+- ⚡ Isomorphic — Node 20+, edge runtimes & browsers · 📦 ESM + CJS · fully typed · **zero dependencies**
+
+## Install
+
+```bash
+npm install @lacspace/connectips      # or pnpm add / yarn add / bun add
+```
+
+## Redirect the payer
+
+```ts
+import { buildForm } from "@lacspace/connectips";
+
+const form = await buildForm(
+  {
+    MERCHANTID: "123",
+    APPID: "APP123",
+    APPNAME: "lacspace-shop",
+    TXNID: "TXN001",
+    TXNDATE: "05-09-2026",
+    TXNCRNCY: "NPR",
+    TXNAMT: 100000, // paisa
+    REFERENCEID: "REF001",
+    REMARKS: "order-1",
+    PARTICULARS: "order-1",
+  },
+  { privateKeyPem: process.env.CONNECTIPS_PRIVATE_KEY_PEM!, env: "prod" },
+);
+
+// Render an auto-submitting form:
+// <form action={form.action} method="POST">
+//   {Object.entries(form.fields).map(([k, v]) => <input type="hidden" name={k} value={v} />)}
+// </form>
+```
+
+`form.fields` is your transaction params plus a base64 `TOKEN` (the RSA-SHA256 signature over the canonical message ending in the literal `TOKEN=TOKEN`).
+
+## Validate the transaction (server-to-server)
+
+```ts
+import { validateTxn } from "@lacspace/connectips";
+
+const result = await validateTxn(
+  { merchantId: "123", appId: "APP123", referenceId: "REF001", txnAmt: 100000 },
+  {
+    user: process.env.CONNECTIPS_API_USER!,
+    password: process.env.CONNECTIPS_API_PASSWORD!,
+    privateKeyPem: process.env.CONNECTIPS_PRIVATE_KEY_PEM!,
+    env: "prod",
+  },
+);
+// POSTs { merchantId, appId, referenceId, txnAmt, token } with a Basic-auth header
+```
+
+The validation `token` signs `MERCHANTID=…,APPID=…,REFERENCEID=…,TXNAMT=…`.
+
+## Just the token
+
+```ts
+import { signToken } from "@lacspace/connectips";
+
+const token = await signToken(params, privateKeyPem); // base64 RSA-SHA256 signature
+```
+
+## API
+
+| Export | Description |
+| --- | --- |
+| `signToken(params, privateKeyPem)` | Base64 RSA-SHA256 signature of the canonical redirect message. |
+| `buildForm(params, { privateKeyPem, env? })` | `{ action, method: "POST", fields }` — params + signed `TOKEN`. |
+| `validateTxn(params, { user, password, privateKeyPem, env?, fetch? })` | POSTs the validation payload with Basic auth; returns the parsed response. |
+| `verifyToken(message, signatureB64, publicKeyPem)` | Verify an RSA-SHA256 signature against an SPKI PEM public key. |
+| `LOGIN_URL`, `VALIDATE_URL` | `{ test, prod }` endpoint maps. |
+
+`env` defaults to `"test"` (UAT). All signing uses your PKCS#8 PEM private key; all HTTP goes through the global `fetch` (injectable for tests).
+
+## Security notes
+
+- Keep your **RSA private key** on the server only — never ship it to the browser.
+- The signed message must match Connect IPS's expected field order exactly; this package builds it for you.
+
+---
+
+## The Lacspace Developer Platform
+
+`@lacspace/connectips` is part of **63+ zero-dependency, isomorphic TypeScript packages**. Explore the ecosystem:
+
+- 🗂️ **All packages** — https://developer.lacspace.com/packages
+- 🧭 **Developer handbook** — https://developer.lacspace.com/handbook
+- 🧪 **Live playground** — https://developer.lacspace.com/playground
+- 🖥️ **Finished app templates** — https://templates.lacspace.com
+- 🚀 **Scaffold a full app** — `npm create lacspace-app@latest`
+
+Free under the **[Lacspace Free Licence](https://lacspace.com/licenses/lacspace-free-1.0)** — a permissive, free-to-use licence.

package/dist/index.cjs

@@ -0,0 +1,139 @@
+'use strict';
+
+// src/index.ts
+var LOGIN_URL = {
+  test: "https://uat.connectips.com/connectipswebgw/loginpage",
+  prod: "https://login.connectips.com/connectipswebgw/loginpage"
+};
+var VALIDATE_URL = {
+  test: "https://uat.connectips.com/connectipswebws/api/creditor/validatetxn",
+  prod: "https://login.connectips.com/connectipswebws/api/creditor/validatetxn"
+};
+var enc = new TextEncoder();
+function bytesToBase64(bytes) {
+  let bin = "";
+  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);
+  return btoa(bin);
+}
+function base64ToBytes(b64) {
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function pemToBytes(pem, label) {
+  const body = pem.replace(`-----BEGIN ${label}-----`, "").replace(`-----END ${label}-----`, "").replace(/\s+/g, "");
+  return base64ToBytes(body);
+}
+async function importPrivateKey(pem) {
+  const der = pemToBytes(pem, "PRIVATE KEY");
+  return crypto.subtle.importKey(
+    "pkcs8",
+    der,
+    { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+}
+async function importPublicKey(pem) {
+  const der = pemToBytes(pem, "PUBLIC KEY");
+  return crypto.subtle.importKey(
+    "spki",
+    der,
+    { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+    false,
+    ["verify"]
+  );
+}
+async function signMessage(message, privateKeyPem) {
+  const key = await importPrivateKey(privateKeyPem);
+  const sig = await crypto.subtle.sign("RSASSA-PKCS1-v1_5", key, enc.encode(message));
+  return bytesToBase64(new Uint8Array(sig));
+}
+function tokenMessage(p) {
+  return [
+    `MERCHANTID=${p.MERCHANTID}`,
+    `APPID=${p.APPID}`,
+    `APPNAME=${p.APPNAME}`,
+    `TXNID=${p.TXNID}`,
+    `TXNDATE=${p.TXNDATE}`,
+    `TXNCRNCY=${p.TXNCRNCY}`,
+    `TXNAMT=${p.TXNAMT}`,
+    `REFERENCEID=${p.REFERENCEID}`,
+    `REMARKS=${p.REMARKS}`,
+    `PARTICULARS=${p.PARTICULARS}`,
+    `TOKEN=TOKEN`
+  ].join(",");
+}
+async function signToken(params, privateKeyPem) {
+  return signMessage(tokenMessage(params), privateKeyPem);
+}
+async function buildForm(params, opts) {
+  const token = await signToken(params, opts.privateKeyPem);
+  const fields = {
+    MERCHANTID: String(params.MERCHANTID),
+    APPID: String(params.APPID),
+    APPNAME: String(params.APPNAME),
+    TXNID: String(params.TXNID),
+    TXNDATE: String(params.TXNDATE),
+    TXNCRNCY: String(params.TXNCRNCY),
+    TXNAMT: String(params.TXNAMT),
+    REFERENCEID: String(params.REFERENCEID),
+    REMARKS: String(params.REMARKS),
+    PARTICULARS: String(params.PARTICULARS),
+    TOKEN: token
+  };
+  return { action: LOGIN_URL[opts.env ?? "test"], method: "POST", fields };
+}
+function validateMessage(p) {
+  return [
+    `MERCHANTID=${p.merchantId}`,
+    `APPID=${p.appId}`,
+    `REFERENCEID=${p.referenceId}`,
+    `TXNAMT=${p.txnAmt}`
+  ].join(",");
+}
+async function validateTxn(params, opts) {
+  const token = await signMessage(validateMessage(params), opts.privateKeyPem);
+  const doFetch = opts.fetch ?? fetch;
+  const basic = bytesToBase64(enc.encode(`${opts.user}:${opts.password}`));
+  const res = await doFetch(VALIDATE_URL[opts.env ?? "test"], {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Basic ${basic}`
+    },
+    body: JSON.stringify({
+      merchantId: params.merchantId,
+      appId: params.appId,
+      referenceId: params.referenceId,
+      txnAmt: params.txnAmt,
+      token
+    })
+  });
+  const text = await res.text();
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+async function verifyToken(message, signatureB64, publicKeyPem) {
+  const key = await importPublicKey(publicKeyPem);
+  const sig = base64ToBytes(signatureB64);
+  return crypto.subtle.verify(
+    "RSASSA-PKCS1-v1_5",
+    key,
+    sig,
+    enc.encode(message)
+  );
+}
+
+exports.LOGIN_URL = LOGIN_URL;
+exports.VALIDATE_URL = VALIDATE_URL;
+exports.buildForm = buildForm;
+exports.signToken = signToken;
+exports.validateTxn = validateTxn;
+exports.verifyToken = verifyToken;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";;;AA2BO,IAAM,SAAA,GAAiC;AAAA,EAC5C,IAAA,EAAM,sDAAA;AAAA,EACN,IAAA,EAAM;AACR;AAGO,IAAM,YAAA,GAAoC;AAAA,EAC/C,IAAA,EAAM,qEAAA;AAAA,EACN,IAAA,EAAM;AACR;AAMA,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAE5B,SAAS,cAAc,KAAA,EAA2B;AAChD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,IAAO,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAE,CAAA;AAC3E,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAEA,SAAS,cAAc,GAAA,EAAyB;AAC9C,EAAA,MAAM,GAAA,GAAM,KAAK,GAAG,CAAA;AACpB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,UAAA,CAAW,KAAa,KAAA,EAA2B;AAC1D,EAAA,MAAM,OAAO,GAAA,CACV,OAAA,CAAQ,CAAA,WAAA,EAAc,KAAK,SAAS,EAAE,CAAA,CACtC,OAAA,CAAQ,CAAA,SAAA,EAAY,KAAK,CAAA,KAAA,CAAA,EAAS,EAAE,CAAA,CACpC,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACrB,EAAA,OAAO,cAAc,IAAI,CAAA;AAC3B;AAGA,eAAe,iBAAiB,GAAA,EAAiC;AAC/D,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,GAAA,EAAK,aAAa,CAAA;AACzC,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,OAAA;AAAA,IACA,GAAA;AAAA,IACA,EAAE,IAAA,EAAM,mBAAA,EAAqB,IAAA,EAAM,SAAA,EAAU;AAAA,IAC7C,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACF;AAGA,eAAe,gBAAgB,GAAA,EAAiC;AAC9D,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,GAAA,EAAK,YAAY,CAAA;AACxC,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,MAAA;AAAA,IACA,GAAA;AAAA,IACA,EAAE,IAAA,EAAM,mBAAA,EAAqB,IAAA,EAAM,SAAA,EAAU;AAAA,IAC7C,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACF;AAGA,eAAe,WAAA,CAAY,SAAiB,aAAA,EAAwC;AAClF,EAAA,MAAM,GAAA,GAAM,MAAM,gBAAA,CAAiB,aAAa,CAAA;AAChD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,qBAAqB,GAAA,EAAK,GAAA,CAAI,MAAA,CAAO,OAAO,CAAC,CAAA;AAClF,EAAA,OAAO,aAAA,CAAc,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;AAqBA,SAAS,aAAa,CAAA,EAAwB;AAC5C,EAAA,OAAO;AAAA,IACL,CAAA,WAAA,EAAc,EAAE,UAAU,CAAA,CAAA;AAAA,IAC1B,CAAA,MAAA,EAAS,EAAE,KAAK,CAAA,CAAA;AAAA,IAChB,CAAA,QAAA,EAAW,EAAE,OAAO,CAAA,CAAA;AAAA,IACpB,CAAA,MAAA,EAAS,EAAE,KAAK,CAAA,CAAA;AAAA,IAChB,CAAA,QAAA,EAAW,EAAE,OAAO,CAAA,CAAA;AAAA,IACpB,CAAA,SAAA,EAAY,EAAE,QAAQ,CAAA,CAAA;AAAA,IACtB,CAAA,OAAA,EAAU,EAAE,MAAM,CAAA,CAAA;AAAA,IAClB,CAAA,YAAA,EAAe,EAAE,WAAW,CAAA,CAAA;AAAA,IAC5B,CAAA,QAAA,EAAW,EAAE,OAAO,CAAA,CAAA;AAAA,IACpB,CAAA,YAAA,EAAe,EAAE,WAAW,CAAA,CAAA;AAAA,IAC5B,CAAA,WAAA;AAAA,GACF,CAAE,KAAK,GAAG,CAAA;AACZ;AAeA,eAAsB,SAAA,CAAU,QAAqB,aAAA,EAAwC;AAC3F,EAAA,OAAO,WAAA,CAAY,YAAA,CAAa,MAAM,CAAA,EAAG,aAAa,CAAA;AACxD;AA6BA,eAAsB,SAAA,CAAU,QAAqB,IAAA,EAA+C;AAClG,EAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,MAAA,EAAQ,KAAK,aAAa,CAAA;AACxD,EAAA,MAAM,MAAA,GAAiC;AAAA,IACrC,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA;AAAA,IACpC,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1B,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,IAC9B,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1B,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,IAC9B,QAAA,EAAU,MAAA,CAAO,MAAA,CAAO,QAAQ,CAAA;AAAA,IAChC,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,IAC5B,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,WAAW,CAAA;AAAA,IACtC,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,IAC9B,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,WAAW,CAAA;AAAA,IACtC,KAAA,EAAO;AAAA,GACT;AACA,EAAA,OAAO,EAAE,QAAQ,SAAA,CAAU,IAAA,CAAK,OAAO,MAAM,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AACzE;AA2BA,SAAS,gBAAgB,CAAA,EAA2B;AAClD,EAAA,OAAO;AAAA,IACL,CAAA,WAAA,EAAc,EAAE,UAAU,CAAA,CAAA;AAAA,IAC1B,CAAA,MAAA,EAAS,EAAE,KAAK,CAAA,CAAA;AAAA,IAChB,CAAA,YAAA,EAAe,EAAE,WAAW,CAAA,CAAA;AAAA,IAC5B,CAAA,OAAA,EAAU,EAAE,MAAM,CAAA;AAAA,GACpB,CAAE,KAAK,GAAG,CAAA;AACZ;AAaA,eAAsB,WAAA,CAAY,QAAwB,IAAA,EAAyC;AACjG,EAAA,MAAM,QAAQ,MAAM,WAAA,CAAY,gBAAgB,MAAM,CAAA,EAAG,KAAK,aAAa,CAAA;AAC3E,EAAA,MAAM,OAAA,GAAU,KAAK,KAAA,IAAS,KAAA;AAC9B,EAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,GAAA,CAAI,MAAA,CAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,QAAQ,CAAA,CAAE,CAAC,CAAA;AACvE,EAAA,MAAM,MAAM,MAAM,OAAA,CAAQ,aAAa,IAAA,CAAK,GAAA,IAAO,MAAM,CAAA,EAAG;AAAA,IAC1D,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,SAAS,KAAK,CAAA;AAAA,KAC/B;AAAA,IACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,MACnB,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf;AAAA,KACD;AAAA,GACF,CAAA;AACD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAUA,eAAsB,WAAA,CACpB,OAAA,EACA,YAAA,EACA,YAAA,EACkB;AAClB,EAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,YAAY,CAAA;AAC9C,EAAA,MAAM,GAAA,GAAM,cAAc,YAAY,CAAA;AACtC,EAAA,OAAO,OAAO,MAAA,CAAO,MAAA;AAAA,IACnB,mBAAA;AAAA,IACA,GAAA;AAAA,IACA,GAAA;AAAA,IACA,GAAA,CAAI,OAAO,OAAO;AAAA,GACpB;AACF","file":"index.cjs","sourcesContent":["/**\n * @lacspace/connectips\n *\n * Connect IPS (Nepal) merchant integration over Web Crypto. Connect IPS is the\n * inter-bank payment gateway operated by Nepal Clearing House (NCHL): the\n * merchant redirects the payer to the Connect IPS login page with a\n * digitally-signed transaction token, and later validates the completed\n * transaction server-to-server.\n *\n * This package handles the awkward parts correctly:\n *\n *   1. Building the canonical `KEY=VALUE,…,TOKEN=TOKEN` message string.\n *   2. Signing it with the merchant's RSA private key using RSA-SHA256\n *      (RSASSA-PKCS1-v1_5) — imported straight from a PKCS#8 PEM.\n *   3. Emitting the redirect form and calling the validate-txn API.\n *\n * Zero dependencies. Isomorphic: Node 20+, edge runtimes and browsers — all\n * cryptography goes through `globalThis.crypto.subtle`, never hand-rolled.\n */\n\n/* ------------------------------------------------------------------ *\n * Endpoints\n * ------------------------------------------------------------------ */\n\nexport type Env = \"test\" | \"prod\";\n\n/** Connect IPS gateway login (redirect) pages, by environment. */\nexport const LOGIN_URL: Record<Env, string> = {\n  test: \"https://uat.connectips.com/connectipswebgw/loginpage\",\n  prod: \"https://login.connectips.com/connectipswebgw/loginpage\",\n};\n\n/** Connect IPS transaction-validation API endpoints, by environment. */\nexport const VALIDATE_URL: Record<Env, string> = {\n  test: \"https://uat.connectips.com/connectipswebws/api/creditor/validatetxn\",\n  prod: \"https://login.connectips.com/connectipswebws/api/creditor/validatetxn\",\n};\n\n/* ------------------------------------------------------------------ *\n * Base64 + PEM helpers (isomorphic, zero-dep)\n * ------------------------------------------------------------------ */\n\nconst enc = new TextEncoder();\n\nfunction bytesToBase64(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]!);\n  return btoa(bin);\n}\n\nfunction base64ToBytes(b64: string): Uint8Array {\n  const bin = atob(b64);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  return out;\n}\n\n/** Strip the PEM armour + whitespace and base64-decode the DER body. */\nfunction pemToBytes(pem: string, label: string): Uint8Array {\n  const body = pem\n    .replace(`-----BEGIN ${label}-----`, \"\")\n    .replace(`-----END ${label}-----`, \"\")\n    .replace(/\\s+/g, \"\");\n  return base64ToBytes(body);\n}\n\n/** Import a PKCS#8 PEM RSA private key for RSASSA-PKCS1-v1_5 / SHA-256 signing. */\nasync function importPrivateKey(pem: string): Promise<CryptoKey> {\n  const der = pemToBytes(pem, \"PRIVATE KEY\");\n  return crypto.subtle.importKey(\n    \"pkcs8\",\n    der as unknown as ArrayBuffer,\n    { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n}\n\n/** Import an SPKI PEM RSA public key for RSASSA-PKCS1-v1_5 / SHA-256 verification. */\nasync function importPublicKey(pem: string): Promise<CryptoKey> {\n  const der = pemToBytes(pem, \"PUBLIC KEY\");\n  return crypto.subtle.importKey(\n    \"spki\",\n    der as unknown as ArrayBuffer,\n    { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n    false,\n    [\"verify\"],\n  );\n}\n\n/** Sign a message with the merchant RSA private key → base64 signature. */\nasync function signMessage(message: string, privateKeyPem: string): Promise<string> {\n  const key = await importPrivateKey(privateKeyPem);\n  const sig = await crypto.subtle.sign(\"RSASSA-PKCS1-v1_5\", key, enc.encode(message));\n  return bytesToBase64(new Uint8Array(sig));\n}\n\n/* ------------------------------------------------------------------ *\n * Token signing\n * ------------------------------------------------------------------ */\n\n/** The transaction parameters that go into the redirect token, in order. */\nexport interface TokenParams {\n  MERCHANTID: string;\n  APPID: string;\n  APPNAME: string;\n  TXNID: string;\n  TXNDATE: string;\n  TXNCRNCY: string;\n  TXNAMT: string | number;\n  REFERENCEID: string;\n  REMARKS: string;\n  PARTICULARS: string;\n}\n\n/** Build the canonical token message: `KEY=VALUE,…,TOKEN=TOKEN`. */\nfunction tokenMessage(p: TokenParams): string {\n  return [\n    `MERCHANTID=${p.MERCHANTID}`,\n    `APPID=${p.APPID}`,\n    `APPNAME=${p.APPNAME}`,\n    `TXNID=${p.TXNID}`,\n    `TXNDATE=${p.TXNDATE}`,\n    `TXNCRNCY=${p.TXNCRNCY}`,\n    `TXNAMT=${p.TXNAMT}`,\n    `REFERENCEID=${p.REFERENCEID}`,\n    `REMARKS=${p.REMARKS}`,\n    `PARTICULARS=${p.PARTICULARS}`,\n    `TOKEN=TOKEN`,\n  ].join(\",\");\n}\n\n/**\n * Sign a Connect IPS transaction token with the merchant RSA private key.\n * Builds the canonical `KEY=VALUE,…,TOKEN=TOKEN` message, signs it with\n * RSA-SHA256, and returns the base64 signature to send as the `TOKEN` field.\n *\n * @example\n * const token = await signToken(\n *   { MERCHANTID: \"123\", APPID: \"APP\", APPNAME: \"shop\", TXNID: \"T1\",\n *     TXNDATE: \"05-09-2026\", TXNCRNCY: \"NPR\", TXNAMT: 1000,\n *     REFERENCEID: \"R1\", REMARKS: \"order\", PARTICULARS: \"order\" },\n *   process.env.CONNECTIPS_PRIVATE_KEY_PEM!,\n * );\n */\nexport async function signToken(params: TokenParams, privateKeyPem: string): Promise<string> {\n  return signMessage(tokenMessage(params), privateKeyPem);\n}\n\n/* ------------------------------------------------------------------ *\n * Redirect form\n * ------------------------------------------------------------------ */\n\nexport interface BuildFormOptions {\n  privateKeyPem: string;\n  /** Which gateway to target. Default \"test\" (UAT). */\n  env?: Env;\n}\n\nexport interface RedirectForm {\n  /** The Connect IPS login page URL to POST to. */\n  action: string;\n  method: \"POST\";\n  /** The transaction params plus the signed `TOKEN`. */\n  fields: Record<string, string>;\n}\n\n/**\n * Build the auto-submitting redirect form for Connect IPS. Returns the gateway\n * `action` URL and the `fields` (the transaction params plus the signed\n * `TOKEN`) to render as hidden inputs and POST to the login page.\n *\n * @example\n * const form = await buildForm(params, { privateKeyPem, env: \"prod\" });\n * // render <form action={form.action} method=\"POST\"> … {form.fields} … </form>\n */\nexport async function buildForm(params: TokenParams, opts: BuildFormOptions): Promise<RedirectForm> {\n  const token = await signToken(params, opts.privateKeyPem);\n  const fields: Record<string, string> = {\n    MERCHANTID: String(params.MERCHANTID),\n    APPID: String(params.APPID),\n    APPNAME: String(params.APPNAME),\n    TXNID: String(params.TXNID),\n    TXNDATE: String(params.TXNDATE),\n    TXNCRNCY: String(params.TXNCRNCY),\n    TXNAMT: String(params.TXNAMT),\n    REFERENCEID: String(params.REFERENCEID),\n    REMARKS: String(params.REMARKS),\n    PARTICULARS: String(params.PARTICULARS),\n    TOKEN: token,\n  };\n  return { action: LOGIN_URL[opts.env ?? \"test\"], method: \"POST\", fields };\n}\n\n/* ------------------------------------------------------------------ *\n * Transaction validation (server-to-server)\n * ------------------------------------------------------------------ */\n\nexport interface ValidateParams {\n  merchantId: string;\n  appId: string;\n  referenceId: string;\n  txnAmt: string | number;\n}\n\nexport interface ValidateOptions {\n  /** Connect IPS creditor API username. */\n  user: string;\n  /** Connect IPS creditor API password. */\n  password: string;\n  /** Merchant RSA private key PEM (PKCS#8) used to sign the validation token. */\n  privateKeyPem: string;\n  /** Which gateway to target. Default \"test\" (UAT). */\n  env?: Env;\n  /** Inject a `fetch` implementation (defaults to the global `fetch`). */\n  fetch?: typeof fetch;\n}\n\n/** Canonical validation message: `MERCHANTID=…,APPID=…,REFERENCEID=…,TXNAMT=…`. */\nfunction validateMessage(p: ValidateParams): string {\n  return [\n    `MERCHANTID=${p.merchantId}`,\n    `APPID=${p.appId}`,\n    `REFERENCEID=${p.referenceId}`,\n    `TXNAMT=${p.txnAmt}`,\n  ].join(\",\");\n}\n\n/**\n * Validate a completed Connect IPS transaction, server-to-server. Signs the\n * canonical validation message with the merchant RSA private key and POSTs the\n * JSON payload (with a Basic-auth header) to the validate-txn API.\n *\n * @example\n * const result = await validateTxn(\n *   { merchantId: \"123\", appId: \"APP\", referenceId: \"R1\", txnAmt: 1000 },\n *   { user, password, privateKeyPem, env: \"prod\" },\n * );\n */\nexport async function validateTxn(params: ValidateParams, opts: ValidateOptions): Promise<unknown> {\n  const token = await signMessage(validateMessage(params), opts.privateKeyPem);\n  const doFetch = opts.fetch ?? fetch;\n  const basic = bytesToBase64(enc.encode(`${opts.user}:${opts.password}`));\n  const res = await doFetch(VALIDATE_URL[opts.env ?? \"test\"], {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Basic ${basic}`,\n    },\n    body: JSON.stringify({\n      merchantId: params.merchantId,\n      appId: params.appId,\n      referenceId: params.referenceId,\n      txnAmt: params.txnAmt,\n      token,\n    }),\n  });\n  const text = await res.text();\n  try {\n    return JSON.parse(text);\n  } catch {\n    return text;\n  }\n}\n\n/* ------------------------------------------------------------------ *\n * Verification helper\n * ------------------------------------------------------------------ */\n\n/**\n * Verify an RSA-SHA256 signature (base64) against a message using an SPKI PEM\n * public key. Useful for tests and for verifying Connect IPS callbacks.\n */\nexport async function verifyToken(\n  message: string,\n  signatureB64: string,\n  publicKeyPem: string,\n): Promise<boolean> {\n  const key = await importPublicKey(publicKeyPem);\n  const sig = base64ToBytes(signatureB64);\n  return crypto.subtle.verify(\n    \"RSASSA-PKCS1-v1_5\",\n    key,\n    sig as unknown as ArrayBuffer,\n    enc.encode(message),\n  );\n}\n"]}

package/dist/index.d.cts

@@ -0,0 +1,110 @@
+/**
+ * @lacspace/connectips
+ *
+ * Connect IPS (Nepal) merchant integration over Web Crypto. Connect IPS is the
+ * inter-bank payment gateway operated by Nepal Clearing House (NCHL): the
+ * merchant redirects the payer to the Connect IPS login page with a
+ * digitally-signed transaction token, and later validates the completed
+ * transaction server-to-server.
+ *
+ * This package handles the awkward parts correctly:
+ *
+ *   1. Building the canonical `KEY=VALUE,…,TOKEN=TOKEN` message string.
+ *   2. Signing it with the merchant's RSA private key using RSA-SHA256
+ *      (RSASSA-PKCS1-v1_5) — imported straight from a PKCS#8 PEM.
+ *   3. Emitting the redirect form and calling the validate-txn API.
+ *
+ * Zero dependencies. Isomorphic: Node 20+, edge runtimes and browsers — all
+ * cryptography goes through `globalThis.crypto.subtle`, never hand-rolled.
+ */
+type Env = "test" | "prod";
+/** Connect IPS gateway login (redirect) pages, by environment. */
+declare const LOGIN_URL: Record<Env, string>;
+/** Connect IPS transaction-validation API endpoints, by environment. */
+declare const VALIDATE_URL: Record<Env, string>;
+/** The transaction parameters that go into the redirect token, in order. */
+interface TokenParams {
+    MERCHANTID: string;
+    APPID: string;
+    APPNAME: string;
+    TXNID: string;
+    TXNDATE: string;
+    TXNCRNCY: string;
+    TXNAMT: string | number;
+    REFERENCEID: string;
+    REMARKS: string;
+    PARTICULARS: string;
+}
+/**
+ * Sign a Connect IPS transaction token with the merchant RSA private key.
+ * Builds the canonical `KEY=VALUE,…,TOKEN=TOKEN` message, signs it with
+ * RSA-SHA256, and returns the base64 signature to send as the `TOKEN` field.
+ *
+ * @example
+ * const token = await signToken(
+ *   { MERCHANTID: "123", APPID: "APP", APPNAME: "shop", TXNID: "T1",
+ *     TXNDATE: "05-09-2026", TXNCRNCY: "NPR", TXNAMT: 1000,
+ *     REFERENCEID: "R1", REMARKS: "order", PARTICULARS: "order" },
+ *   process.env.CONNECTIPS_PRIVATE_KEY_PEM!,
+ * );
+ */
+declare function signToken(params: TokenParams, privateKeyPem: string): Promise<string>;
+interface BuildFormOptions {
+    privateKeyPem: string;
+    /** Which gateway to target. Default "test" (UAT). */
+    env?: Env;
+}
+interface RedirectForm {
+    /** The Connect IPS login page URL to POST to. */
+    action: string;
+    method: "POST";
+    /** The transaction params plus the signed `TOKEN`. */
+    fields: Record<string, string>;
+}
+/**
+ * Build the auto-submitting redirect form for Connect IPS. Returns the gateway
+ * `action` URL and the `fields` (the transaction params plus the signed
+ * `TOKEN`) to render as hidden inputs and POST to the login page.
+ *
+ * @example
+ * const form = await buildForm(params, { privateKeyPem, env: "prod" });
+ * // render <form action={form.action} method="POST"> … {form.fields} … </form>
+ */
+declare function buildForm(params: TokenParams, opts: BuildFormOptions): Promise<RedirectForm>;
+interface ValidateParams {
+    merchantId: string;
+    appId: string;
+    referenceId: string;
+    txnAmt: string | number;
+}
+interface ValidateOptions {
+    /** Connect IPS creditor API username. */
+    user: string;
+    /** Connect IPS creditor API password. */
+    password: string;
+    /** Merchant RSA private key PEM (PKCS#8) used to sign the validation token. */
+    privateKeyPem: string;
+    /** Which gateway to target. Default "test" (UAT). */
+    env?: Env;
+    /** Inject a `fetch` implementation (defaults to the global `fetch`). */
+    fetch?: typeof fetch;
+}
+/**
+ * Validate a completed Connect IPS transaction, server-to-server. Signs the
+ * canonical validation message with the merchant RSA private key and POSTs the
+ * JSON payload (with a Basic-auth header) to the validate-txn API.
+ *
+ * @example
+ * const result = await validateTxn(
+ *   { merchantId: "123", appId: "APP", referenceId: "R1", txnAmt: 1000 },
+ *   { user, password, privateKeyPem, env: "prod" },
+ * );
+ */
+declare function validateTxn(params: ValidateParams, opts: ValidateOptions): Promise<unknown>;
+/**
+ * Verify an RSA-SHA256 signature (base64) against a message using an SPKI PEM
+ * public key. Useful for tests and for verifying Connect IPS callbacks.
+ */
+declare function verifyToken(message: string, signatureB64: string, publicKeyPem: string): Promise<boolean>;
+
+export { type BuildFormOptions, type Env, LOGIN_URL, type RedirectForm, type TokenParams, VALIDATE_URL, type ValidateOptions, type ValidateParams, buildForm, signToken, validateTxn, verifyToken };

package/dist/index.d.ts

@@ -0,0 +1,110 @@
+/**
+ * @lacspace/connectips
+ *
+ * Connect IPS (Nepal) merchant integration over Web Crypto. Connect IPS is the
+ * inter-bank payment gateway operated by Nepal Clearing House (NCHL): the
+ * merchant redirects the payer to the Connect IPS login page with a
+ * digitally-signed transaction token, and later validates the completed
+ * transaction server-to-server.
+ *
+ * This package handles the awkward parts correctly:
+ *
+ *   1. Building the canonical `KEY=VALUE,…,TOKEN=TOKEN` message string.
+ *   2. Signing it with the merchant's RSA private key using RSA-SHA256
+ *      (RSASSA-PKCS1-v1_5) — imported straight from a PKCS#8 PEM.
+ *   3. Emitting the redirect form and calling the validate-txn API.
+ *
+ * Zero dependencies. Isomorphic: Node 20+, edge runtimes and browsers — all
+ * cryptography goes through `globalThis.crypto.subtle`, never hand-rolled.
+ */
+type Env = "test" | "prod";
+/** Connect IPS gateway login (redirect) pages, by environment. */
+declare const LOGIN_URL: Record<Env, string>;
+/** Connect IPS transaction-validation API endpoints, by environment. */
+declare const VALIDATE_URL: Record<Env, string>;
+/** The transaction parameters that go into the redirect token, in order. */
+interface TokenParams {
+    MERCHANTID: string;
+    APPID: string;
+    APPNAME: string;
+    TXNID: string;
+    TXNDATE: string;
+    TXNCRNCY: string;
+    TXNAMT: string | number;
+    REFERENCEID: string;
+    REMARKS: string;
+    PARTICULARS: string;
+}
+/**
+ * Sign a Connect IPS transaction token with the merchant RSA private key.
+ * Builds the canonical `KEY=VALUE,…,TOKEN=TOKEN` message, signs it with
+ * RSA-SHA256, and returns the base64 signature to send as the `TOKEN` field.
+ *
+ * @example
+ * const token = await signToken(
+ *   { MERCHANTID: "123", APPID: "APP", APPNAME: "shop", TXNID: "T1",
+ *     TXNDATE: "05-09-2026", TXNCRNCY: "NPR", TXNAMT: 1000,
+ *     REFERENCEID: "R1", REMARKS: "order", PARTICULARS: "order" },
+ *   process.env.CONNECTIPS_PRIVATE_KEY_PEM!,
+ * );
+ */
+declare function signToken(params: TokenParams, privateKeyPem: string): Promise<string>;
+interface BuildFormOptions {
+    privateKeyPem: string;
+    /** Which gateway to target. Default "test" (UAT). */
+    env?: Env;
+}
+interface RedirectForm {
+    /** The Connect IPS login page URL to POST to. */
+    action: string;
+    method: "POST";
+    /** The transaction params plus the signed `TOKEN`. */
+    fields: Record<string, string>;
+}
+/**
+ * Build the auto-submitting redirect form for Connect IPS. Returns the gateway
+ * `action` URL and the `fields` (the transaction params plus the signed
+ * `TOKEN`) to render as hidden inputs and POST to the login page.
+ *
+ * @example
+ * const form = await buildForm(params, { privateKeyPem, env: "prod" });
+ * // render <form action={form.action} method="POST"> … {form.fields} … </form>
+ */
+declare function buildForm(params: TokenParams, opts: BuildFormOptions): Promise<RedirectForm>;
+interface ValidateParams {
+    merchantId: string;
+    appId: string;
+    referenceId: string;
+    txnAmt: string | number;
+}
+interface ValidateOptions {
+    /** Connect IPS creditor API username. */
+    user: string;
+    /** Connect IPS creditor API password. */
+    password: string;
+    /** Merchant RSA private key PEM (PKCS#8) used to sign the validation token. */
+    privateKeyPem: string;
+    /** Which gateway to target. Default "test" (UAT). */
+    env?: Env;
+    /** Inject a `fetch` implementation (defaults to the global `fetch`). */
+    fetch?: typeof fetch;
+}
+/**
+ * Validate a completed Connect IPS transaction, server-to-server. Signs the
+ * canonical validation message with the merchant RSA private key and POSTs the
+ * JSON payload (with a Basic-auth header) to the validate-txn API.
+ *
+ * @example
+ * const result = await validateTxn(
+ *   { merchantId: "123", appId: "APP", referenceId: "R1", txnAmt: 1000 },
+ *   { user, password, privateKeyPem, env: "prod" },
+ * );
+ */
+declare function validateTxn(params: ValidateParams, opts: ValidateOptions): Promise<unknown>;
+/**
+ * Verify an RSA-SHA256 signature (base64) against a message using an SPKI PEM
+ * public key. Useful for tests and for verifying Connect IPS callbacks.
+ */
+declare function verifyToken(message: string, signatureB64: string, publicKeyPem: string): Promise<boolean>;
+
+export { type BuildFormOptions, type Env, LOGIN_URL, type RedirectForm, type TokenParams, VALIDATE_URL, type ValidateOptions, type ValidateParams, buildForm, signToken, validateTxn, verifyToken };

package/dist/index.js

@@ -0,0 +1,132 @@
+// src/index.ts
+var LOGIN_URL = {
+  test: "https://uat.connectips.com/connectipswebgw/loginpage",
+  prod: "https://login.connectips.com/connectipswebgw/loginpage"
+};
+var VALIDATE_URL = {
+  test: "https://uat.connectips.com/connectipswebws/api/creditor/validatetxn",
+  prod: "https://login.connectips.com/connectipswebws/api/creditor/validatetxn"
+};
+var enc = new TextEncoder();
+function bytesToBase64(bytes) {
+  let bin = "";
+  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]);
+  return btoa(bin);
+}
+function base64ToBytes(b64) {
+  const bin = atob(b64);
+  const out = new Uint8Array(bin.length);
+  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+  return out;
+}
+function pemToBytes(pem, label) {
+  const body = pem.replace(`-----BEGIN ${label}-----`, "").replace(`-----END ${label}-----`, "").replace(/\s+/g, "");
+  return base64ToBytes(body);
+}
+async function importPrivateKey(pem) {
+  const der = pemToBytes(pem, "PRIVATE KEY");
+  return crypto.subtle.importKey(
+    "pkcs8",
+    der,
+    { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+}
+async function importPublicKey(pem) {
+  const der = pemToBytes(pem, "PUBLIC KEY");
+  return crypto.subtle.importKey(
+    "spki",
+    der,
+    { name: "RSASSA-PKCS1-v1_5", hash: "SHA-256" },
+    false,
+    ["verify"]
+  );
+}
+async function signMessage(message, privateKeyPem) {
+  const key = await importPrivateKey(privateKeyPem);
+  const sig = await crypto.subtle.sign("RSASSA-PKCS1-v1_5", key, enc.encode(message));
+  return bytesToBase64(new Uint8Array(sig));
+}
+function tokenMessage(p) {
+  return [
+    `MERCHANTID=${p.MERCHANTID}`,
+    `APPID=${p.APPID}`,
+    `APPNAME=${p.APPNAME}`,
+    `TXNID=${p.TXNID}`,
+    `TXNDATE=${p.TXNDATE}`,
+    `TXNCRNCY=${p.TXNCRNCY}`,
+    `TXNAMT=${p.TXNAMT}`,
+    `REFERENCEID=${p.REFERENCEID}`,
+    `REMARKS=${p.REMARKS}`,
+    `PARTICULARS=${p.PARTICULARS}`,
+    `TOKEN=TOKEN`
+  ].join(",");
+}
+async function signToken(params, privateKeyPem) {
+  return signMessage(tokenMessage(params), privateKeyPem);
+}
+async function buildForm(params, opts) {
+  const token = await signToken(params, opts.privateKeyPem);
+  const fields = {
+    MERCHANTID: String(params.MERCHANTID),
+    APPID: String(params.APPID),
+    APPNAME: String(params.APPNAME),
+    TXNID: String(params.TXNID),
+    TXNDATE: String(params.TXNDATE),
+    TXNCRNCY: String(params.TXNCRNCY),
+    TXNAMT: String(params.TXNAMT),
+    REFERENCEID: String(params.REFERENCEID),
+    REMARKS: String(params.REMARKS),
+    PARTICULARS: String(params.PARTICULARS),
+    TOKEN: token
+  };
+  return { action: LOGIN_URL[opts.env ?? "test"], method: "POST", fields };
+}
+function validateMessage(p) {
+  return [
+    `MERCHANTID=${p.merchantId}`,
+    `APPID=${p.appId}`,
+    `REFERENCEID=${p.referenceId}`,
+    `TXNAMT=${p.txnAmt}`
+  ].join(",");
+}
+async function validateTxn(params, opts) {
+  const token = await signMessage(validateMessage(params), opts.privateKeyPem);
+  const doFetch = opts.fetch ?? fetch;
+  const basic = bytesToBase64(enc.encode(`${opts.user}:${opts.password}`));
+  const res = await doFetch(VALIDATE_URL[opts.env ?? "test"], {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      Authorization: `Basic ${basic}`
+    },
+    body: JSON.stringify({
+      merchantId: params.merchantId,
+      appId: params.appId,
+      referenceId: params.referenceId,
+      txnAmt: params.txnAmt,
+      token
+    })
+  });
+  const text = await res.text();
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+async function verifyToken(message, signatureB64, publicKeyPem) {
+  const key = await importPublicKey(publicKeyPem);
+  const sig = base64ToBytes(signatureB64);
+  return crypto.subtle.verify(
+    "RSASSA-PKCS1-v1_5",
+    key,
+    sig,
+    enc.encode(message)
+  );
+}
+
+export { LOGIN_URL, VALIDATE_URL, buildForm, signToken, validateTxn, verifyToken };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"names":[],"mappings":";AA2BO,IAAM,SAAA,GAAiC;AAAA,EAC5C,IAAA,EAAM,sDAAA;AAAA,EACN,IAAA,EAAM;AACR;AAGO,IAAM,YAAA,GAAoC;AAAA,EAC/C,IAAA,EAAM,qEAAA;AAAA,EACN,IAAA,EAAM;AACR;AAMA,IAAM,GAAA,GAAM,IAAI,WAAA,EAAY;AAE5B,SAAS,cAAc,KAAA,EAA2B;AAChD,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,KAAA,CAAM,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,IAAO,MAAA,CAAO,YAAA,CAAa,KAAA,CAAM,CAAC,CAAE,CAAA;AAC3E,EAAA,OAAO,KAAK,GAAG,CAAA;AACjB;AAEA,SAAS,cAAc,GAAA,EAAyB;AAC9C,EAAA,MAAM,GAAA,GAAM,KAAK,GAAG,CAAA;AACpB,EAAA,MAAM,GAAA,GAAM,IAAI,UAAA,CAAW,GAAA,CAAI,MAAM,CAAA;AACrC,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,GAAA,CAAI,MAAA,EAAQ,CAAA,EAAA,EAAK,GAAA,CAAI,CAAC,CAAA,GAAI,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA;AAC9D,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,UAAA,CAAW,KAAa,KAAA,EAA2B;AAC1D,EAAA,MAAM,OAAO,GAAA,CACV,OAAA,CAAQ,CAAA,WAAA,EAAc,KAAK,SAAS,EAAE,CAAA,CACtC,OAAA,CAAQ,CAAA,SAAA,EAAY,KAAK,CAAA,KAAA,CAAA,EAAS,EAAE,CAAA,CACpC,OAAA,CAAQ,QAAQ,EAAE,CAAA;AACrB,EAAA,OAAO,cAAc,IAAI,CAAA;AAC3B;AAGA,eAAe,iBAAiB,GAAA,EAAiC;AAC/D,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,GAAA,EAAK,aAAa,CAAA;AACzC,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,OAAA;AAAA,IACA,GAAA;AAAA,IACA,EAAE,IAAA,EAAM,mBAAA,EAAqB,IAAA,EAAM,SAAA,EAAU;AAAA,IAC7C,KAAA;AAAA,IACA,CAAC,MAAM;AAAA,GACT;AACF;AAGA,eAAe,gBAAgB,GAAA,EAAiC;AAC9D,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,GAAA,EAAK,YAAY,CAAA;AACxC,EAAA,OAAO,OAAO,MAAA,CAAO,SAAA;AAAA,IACnB,MAAA;AAAA,IACA,GAAA;AAAA,IACA,EAAE,IAAA,EAAM,mBAAA,EAAqB,IAAA,EAAM,SAAA,EAAU;AAAA,IAC7C,KAAA;AAAA,IACA,CAAC,QAAQ;AAAA,GACX;AACF;AAGA,eAAe,WAAA,CAAY,SAAiB,aAAA,EAAwC;AAClF,EAAA,MAAM,GAAA,GAAM,MAAM,gBAAA,CAAiB,aAAa,CAAA;AAChD,EAAA,MAAM,GAAA,GAAM,MAAM,MAAA,CAAO,MAAA,CAAO,IAAA,CAAK,qBAAqB,GAAA,EAAK,GAAA,CAAI,MAAA,CAAO,OAAO,CAAC,CAAA;AAClF,EAAA,OAAO,aAAA,CAAc,IAAI,UAAA,CAAW,GAAG,CAAC,CAAA;AAC1C;AAqBA,SAAS,aAAa,CAAA,EAAwB;AAC5C,EAAA,OAAO;AAAA,IACL,CAAA,WAAA,EAAc,EAAE,UAAU,CAAA,CAAA;AAAA,IAC1B,CAAA,MAAA,EAAS,EAAE,KAAK,CAAA,CAAA;AAAA,IAChB,CAAA,QAAA,EAAW,EAAE,OAAO,CAAA,CAAA;AAAA,IACpB,CAAA,MAAA,EAAS,EAAE,KAAK,CAAA,CAAA;AAAA,IAChB,CAAA,QAAA,EAAW,EAAE,OAAO,CAAA,CAAA;AAAA,IACpB,CAAA,SAAA,EAAY,EAAE,QAAQ,CAAA,CAAA;AAAA,IACtB,CAAA,OAAA,EAAU,EAAE,MAAM,CAAA,CAAA;AAAA,IAClB,CAAA,YAAA,EAAe,EAAE,WAAW,CAAA,CAAA;AAAA,IAC5B,CAAA,QAAA,EAAW,EAAE,OAAO,CAAA,CAAA;AAAA,IACpB,CAAA,YAAA,EAAe,EAAE,WAAW,CAAA,CAAA;AAAA,IAC5B,CAAA,WAAA;AAAA,GACF,CAAE,KAAK,GAAG,CAAA;AACZ;AAeA,eAAsB,SAAA,CAAU,QAAqB,aAAA,EAAwC;AAC3F,EAAA,OAAO,WAAA,CAAY,YAAA,CAAa,MAAM,CAAA,EAAG,aAAa,CAAA;AACxD;AA6BA,eAAsB,SAAA,CAAU,QAAqB,IAAA,EAA+C;AAClG,EAAA,MAAM,KAAA,GAAQ,MAAM,SAAA,CAAU,MAAA,EAAQ,KAAK,aAAa,CAAA;AACxD,EAAA,MAAM,MAAA,GAAiC;AAAA,IACrC,UAAA,EAAY,MAAA,CAAO,MAAA,CAAO,UAAU,CAAA;AAAA,IACpC,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1B,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,IAC9B,KAAA,EAAO,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA;AAAA,IAC1B,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,IAC9B,QAAA,EAAU,MAAA,CAAO,MAAA,CAAO,QAAQ,CAAA;AAAA,IAChC,MAAA,EAAQ,MAAA,CAAO,MAAA,CAAO,MAAM,CAAA;AAAA,IAC5B,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,WAAW,CAAA;AAAA,IACtC,OAAA,EAAS,MAAA,CAAO,MAAA,CAAO,OAAO,CAAA;AAAA,IAC9B,WAAA,EAAa,MAAA,CAAO,MAAA,CAAO,WAAW,CAAA;AAAA,IACtC,KAAA,EAAO;AAAA,GACT;AACA,EAAA,OAAO,EAAE,QAAQ,SAAA,CAAU,IAAA,CAAK,OAAO,MAAM,CAAA,EAAG,MAAA,EAAQ,MAAA,EAAQ,MAAA,EAAO;AACzE;AA2BA,SAAS,gBAAgB,CAAA,EAA2B;AAClD,EAAA,OAAO;AAAA,IACL,CAAA,WAAA,EAAc,EAAE,UAAU,CAAA,CAAA;AAAA,IAC1B,CAAA,MAAA,EAAS,EAAE,KAAK,CAAA,CAAA;AAAA,IAChB,CAAA,YAAA,EAAe,EAAE,WAAW,CAAA,CAAA;AAAA,IAC5B,CAAA,OAAA,EAAU,EAAE,MAAM,CAAA;AAAA,GACpB,CAAE,KAAK,GAAG,CAAA;AACZ;AAaA,eAAsB,WAAA,CAAY,QAAwB,IAAA,EAAyC;AACjG,EAAA,MAAM,QAAQ,MAAM,WAAA,CAAY,gBAAgB,MAAM,CAAA,EAAG,KAAK,aAAa,CAAA;AAC3E,EAAA,MAAM,OAAA,GAAU,KAAK,KAAA,IAAS,KAAA;AAC9B,EAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,GAAA,CAAI,MAAA,CAAO,CAAA,EAAG,IAAA,CAAK,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,QAAQ,CAAA,CAAE,CAAC,CAAA;AACvE,EAAA,MAAM,MAAM,MAAM,OAAA,CAAQ,aAAa,IAAA,CAAK,GAAA,IAAO,MAAM,CAAA,EAAG;AAAA,IAC1D,MAAA,EAAQ,MAAA;AAAA,IACR,OAAA,EAAS;AAAA,MACP,cAAA,EAAgB,kBAAA;AAAA,MAChB,aAAA,EAAe,SAAS,KAAK,CAAA;AAAA,KAC/B;AAAA,IACA,IAAA,EAAM,KAAK,SAAA,CAAU;AAAA,MACnB,YAAY,MAAA,CAAO,UAAA;AAAA,MACnB,OAAO,MAAA,CAAO,KAAA;AAAA,MACd,aAAa,MAAA,CAAO,WAAA;AAAA,MACpB,QAAQ,MAAA,CAAO,MAAA;AAAA,MACf;AAAA,KACD;AAAA,GACF,CAAA;AACD,EAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK;AAC5B,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,EACxB,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;AAUA,eAAsB,WAAA,CACpB,OAAA,EACA,YAAA,EACA,YAAA,EACkB;AAClB,EAAA,MAAM,GAAA,GAAM,MAAM,eAAA,CAAgB,YAAY,CAAA;AAC9C,EAAA,MAAM,GAAA,GAAM,cAAc,YAAY,CAAA;AACtC,EAAA,OAAO,OAAO,MAAA,CAAO,MAAA;AAAA,IACnB,mBAAA;AAAA,IACA,GAAA;AAAA,IACA,GAAA;AAAA,IACA,GAAA,CAAI,OAAO,OAAO;AAAA,GACpB;AACF","file":"index.js","sourcesContent":["/**\n * @lacspace/connectips\n *\n * Connect IPS (Nepal) merchant integration over Web Crypto. Connect IPS is the\n * inter-bank payment gateway operated by Nepal Clearing House (NCHL): the\n * merchant redirects the payer to the Connect IPS login page with a\n * digitally-signed transaction token, and later validates the completed\n * transaction server-to-server.\n *\n * This package handles the awkward parts correctly:\n *\n *   1. Building the canonical `KEY=VALUE,…,TOKEN=TOKEN` message string.\n *   2. Signing it with the merchant's RSA private key using RSA-SHA256\n *      (RSASSA-PKCS1-v1_5) — imported straight from a PKCS#8 PEM.\n *   3. Emitting the redirect form and calling the validate-txn API.\n *\n * Zero dependencies. Isomorphic: Node 20+, edge runtimes and browsers — all\n * cryptography goes through `globalThis.crypto.subtle`, never hand-rolled.\n */\n\n/* ------------------------------------------------------------------ *\n * Endpoints\n * ------------------------------------------------------------------ */\n\nexport type Env = \"test\" | \"prod\";\n\n/** Connect IPS gateway login (redirect) pages, by environment. */\nexport const LOGIN_URL: Record<Env, string> = {\n  test: \"https://uat.connectips.com/connectipswebgw/loginpage\",\n  prod: \"https://login.connectips.com/connectipswebgw/loginpage\",\n};\n\n/** Connect IPS transaction-validation API endpoints, by environment. */\nexport const VALIDATE_URL: Record<Env, string> = {\n  test: \"https://uat.connectips.com/connectipswebws/api/creditor/validatetxn\",\n  prod: \"https://login.connectips.com/connectipswebws/api/creditor/validatetxn\",\n};\n\n/* ------------------------------------------------------------------ *\n * Base64 + PEM helpers (isomorphic, zero-dep)\n * ------------------------------------------------------------------ */\n\nconst enc = new TextEncoder();\n\nfunction bytesToBase64(bytes: Uint8Array): string {\n  let bin = \"\";\n  for (let i = 0; i < bytes.length; i++) bin += String.fromCharCode(bytes[i]!);\n  return btoa(bin);\n}\n\nfunction base64ToBytes(b64: string): Uint8Array {\n  const bin = atob(b64);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  return out;\n}\n\n/** Strip the PEM armour + whitespace and base64-decode the DER body. */\nfunction pemToBytes(pem: string, label: string): Uint8Array {\n  const body = pem\n    .replace(`-----BEGIN ${label}-----`, \"\")\n    .replace(`-----END ${label}-----`, \"\")\n    .replace(/\\s+/g, \"\");\n  return base64ToBytes(body);\n}\n\n/** Import a PKCS#8 PEM RSA private key for RSASSA-PKCS1-v1_5 / SHA-256 signing. */\nasync function importPrivateKey(pem: string): Promise<CryptoKey> {\n  const der = pemToBytes(pem, \"PRIVATE KEY\");\n  return crypto.subtle.importKey(\n    \"pkcs8\",\n    der as unknown as ArrayBuffer,\n    { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n    false,\n    [\"sign\"],\n  );\n}\n\n/** Import an SPKI PEM RSA public key for RSASSA-PKCS1-v1_5 / SHA-256 verification. */\nasync function importPublicKey(pem: string): Promise<CryptoKey> {\n  const der = pemToBytes(pem, \"PUBLIC KEY\");\n  return crypto.subtle.importKey(\n    \"spki\",\n    der as unknown as ArrayBuffer,\n    { name: \"RSASSA-PKCS1-v1_5\", hash: \"SHA-256\" },\n    false,\n    [\"verify\"],\n  );\n}\n\n/** Sign a message with the merchant RSA private key → base64 signature. */\nasync function signMessage(message: string, privateKeyPem: string): Promise<string> {\n  const key = await importPrivateKey(privateKeyPem);\n  const sig = await crypto.subtle.sign(\"RSASSA-PKCS1-v1_5\", key, enc.encode(message));\n  return bytesToBase64(new Uint8Array(sig));\n}\n\n/* ------------------------------------------------------------------ *\n * Token signing\n * ------------------------------------------------------------------ */\n\n/** The transaction parameters that go into the redirect token, in order. */\nexport interface TokenParams {\n  MERCHANTID: string;\n  APPID: string;\n  APPNAME: string;\n  TXNID: string;\n  TXNDATE: string;\n  TXNCRNCY: string;\n  TXNAMT: string | number;\n  REFERENCEID: string;\n  REMARKS: string;\n  PARTICULARS: string;\n}\n\n/** Build the canonical token message: `KEY=VALUE,…,TOKEN=TOKEN`. */\nfunction tokenMessage(p: TokenParams): string {\n  return [\n    `MERCHANTID=${p.MERCHANTID}`,\n    `APPID=${p.APPID}`,\n    `APPNAME=${p.APPNAME}`,\n    `TXNID=${p.TXNID}`,\n    `TXNDATE=${p.TXNDATE}`,\n    `TXNCRNCY=${p.TXNCRNCY}`,\n    `TXNAMT=${p.TXNAMT}`,\n    `REFERENCEID=${p.REFERENCEID}`,\n    `REMARKS=${p.REMARKS}`,\n    `PARTICULARS=${p.PARTICULARS}`,\n    `TOKEN=TOKEN`,\n  ].join(\",\");\n}\n\n/**\n * Sign a Connect IPS transaction token with the merchant RSA private key.\n * Builds the canonical `KEY=VALUE,…,TOKEN=TOKEN` message, signs it with\n * RSA-SHA256, and returns the base64 signature to send as the `TOKEN` field.\n *\n * @example\n * const token = await signToken(\n *   { MERCHANTID: \"123\", APPID: \"APP\", APPNAME: \"shop\", TXNID: \"T1\",\n *     TXNDATE: \"05-09-2026\", TXNCRNCY: \"NPR\", TXNAMT: 1000,\n *     REFERENCEID: \"R1\", REMARKS: \"order\", PARTICULARS: \"order\" },\n *   process.env.CONNECTIPS_PRIVATE_KEY_PEM!,\n * );\n */\nexport async function signToken(params: TokenParams, privateKeyPem: string): Promise<string> {\n  return signMessage(tokenMessage(params), privateKeyPem);\n}\n\n/* ------------------------------------------------------------------ *\n * Redirect form\n * ------------------------------------------------------------------ */\n\nexport interface BuildFormOptions {\n  privateKeyPem: string;\n  /** Which gateway to target. Default \"test\" (UAT). */\n  env?: Env;\n}\n\nexport interface RedirectForm {\n  /** The Connect IPS login page URL to POST to. */\n  action: string;\n  method: \"POST\";\n  /** The transaction params plus the signed `TOKEN`. */\n  fields: Record<string, string>;\n}\n\n/**\n * Build the auto-submitting redirect form for Connect IPS. Returns the gateway\n * `action` URL and the `fields` (the transaction params plus the signed\n * `TOKEN`) to render as hidden inputs and POST to the login page.\n *\n * @example\n * const form = await buildForm(params, { privateKeyPem, env: \"prod\" });\n * // render <form action={form.action} method=\"POST\"> … {form.fields} … </form>\n */\nexport async function buildForm(params: TokenParams, opts: BuildFormOptions): Promise<RedirectForm> {\n  const token = await signToken(params, opts.privateKeyPem);\n  const fields: Record<string, string> = {\n    MERCHANTID: String(params.MERCHANTID),\n    APPID: String(params.APPID),\n    APPNAME: String(params.APPNAME),\n    TXNID: String(params.TXNID),\n    TXNDATE: String(params.TXNDATE),\n    TXNCRNCY: String(params.TXNCRNCY),\n    TXNAMT: String(params.TXNAMT),\n    REFERENCEID: String(params.REFERENCEID),\n    REMARKS: String(params.REMARKS),\n    PARTICULARS: String(params.PARTICULARS),\n    TOKEN: token,\n  };\n  return { action: LOGIN_URL[opts.env ?? \"test\"], method: \"POST\", fields };\n}\n\n/* ------------------------------------------------------------------ *\n * Transaction validation (server-to-server)\n * ------------------------------------------------------------------ */\n\nexport interface ValidateParams {\n  merchantId: string;\n  appId: string;\n  referenceId: string;\n  txnAmt: string | number;\n}\n\nexport interface ValidateOptions {\n  /** Connect IPS creditor API username. */\n  user: string;\n  /** Connect IPS creditor API password. */\n  password: string;\n  /** Merchant RSA private key PEM (PKCS#8) used to sign the validation token. */\n  privateKeyPem: string;\n  /** Which gateway to target. Default \"test\" (UAT). */\n  env?: Env;\n  /** Inject a `fetch` implementation (defaults to the global `fetch`). */\n  fetch?: typeof fetch;\n}\n\n/** Canonical validation message: `MERCHANTID=…,APPID=…,REFERENCEID=…,TXNAMT=…`. */\nfunction validateMessage(p: ValidateParams): string {\n  return [\n    `MERCHANTID=${p.merchantId}`,\n    `APPID=${p.appId}`,\n    `REFERENCEID=${p.referenceId}`,\n    `TXNAMT=${p.txnAmt}`,\n  ].join(\",\");\n}\n\n/**\n * Validate a completed Connect IPS transaction, server-to-server. Signs the\n * canonical validation message with the merchant RSA private key and POSTs the\n * JSON payload (with a Basic-auth header) to the validate-txn API.\n *\n * @example\n * const result = await validateTxn(\n *   { merchantId: \"123\", appId: \"APP\", referenceId: \"R1\", txnAmt: 1000 },\n *   { user, password, privateKeyPem, env: \"prod\" },\n * );\n */\nexport async function validateTxn(params: ValidateParams, opts: ValidateOptions): Promise<unknown> {\n  const token = await signMessage(validateMessage(params), opts.privateKeyPem);\n  const doFetch = opts.fetch ?? fetch;\n  const basic = bytesToBase64(enc.encode(`${opts.user}:${opts.password}`));\n  const res = await doFetch(VALIDATE_URL[opts.env ?? \"test\"], {\n    method: \"POST\",\n    headers: {\n      \"Content-Type\": \"application/json\",\n      Authorization: `Basic ${basic}`,\n    },\n    body: JSON.stringify({\n      merchantId: params.merchantId,\n      appId: params.appId,\n      referenceId: params.referenceId,\n      txnAmt: params.txnAmt,\n      token,\n    }),\n  });\n  const text = await res.text();\n  try {\n    return JSON.parse(text);\n  } catch {\n    return text;\n  }\n}\n\n/* ------------------------------------------------------------------ *\n * Verification helper\n * ------------------------------------------------------------------ */\n\n/**\n * Verify an RSA-SHA256 signature (base64) against a message using an SPKI PEM\n * public key. Useful for tests and for verifying Connect IPS callbacks.\n */\nexport async function verifyToken(\n  message: string,\n  signatureB64: string,\n  publicKeyPem: string,\n): Promise<boolean> {\n  const key = await importPublicKey(publicKeyPem);\n  const sig = base64ToBytes(signatureB64);\n  return crypto.subtle.verify(\n    \"RSASSA-PKCS1-v1_5\",\n    key,\n    sig as unknown as ArrayBuffer,\n    enc.encode(message),\n  );\n}\n"]}

package/package.json

@@ -0,0 +1,61 @@
+{
+  "name": "@lacspace/connectips",
+  "version": "1.0.0",
+  "description": "Connect IPS (Nepal) merchant integration over Web Crypto — sign the redirect transaction token with your RSA private key and validate transactions server-to-server. Zero-dep, isomorphic (Node, edge, browser).",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist"
+  ],
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsup",
+    "prepublishOnly": "npm run build"
+  },
+  "keywords": [
+    "connectips",
+    "connect-ips",
+    "nepal",
+    "payment",
+    "payment-gateway",
+    "nchl",
+    "rsa",
+    "rsa-sha256",
+    "web-crypto",
+    "isomorphic",
+    "edge",
+    "typescript"
+  ],
+  "author": "Lacspace <contact@lacspace.com>",
+  "license": "SEE LICENSE IN LICENSE",
+  "homepage": "https://developer.lacspace.com/packages/connectips",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/lacspace/npm-packages.git",
+    "directory": "connectips"
+  },
+  "bugs": {
+    "url": "https://github.com/lacspace/npm-packages/issues"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "dependencies": {},
+  "publishConfig": {
+    "access": "public"
+  }
+}