@maxkabechani/mtn-momo-sdk 0.2.2 → 1.0.0

package/lib/cjs/remittance.d.ts

@@ -1,7 +1,7 @@
-import type { HttpClient } from "./httpClient";
-import type { Balance, BasicUserInfo, BcAuthorizeRequest, BcAuthorizeResponse, CashTransfer, CashTransferRequest, ConsentKycResponse, OAuth2TokenRequest, OAuth2TokenResponse } from "./common";
-import { PartyIdType } from "./common";
-import type { Config } from "./common";
+import type { HttpClient } from "./httpClient.js";
+import type { Balance, BasicUserInfo, BcAuthorizeRequest, BcAuthorizeResponse, CashTransfer, CashTransferRequest, ConsentKycResponse, OAuth2TokenRequest, OAuth2TokenResponse } from "./common.js";
+import { PartyIdType } from "./common.js";
+import type { Config } from "./common.js";
 /**
  * Remittance product for cross-border money transfers with optional OAuth2 consent flows
  */
@@ -53,7 +53,7 @@ export default class Remittance {
      * Requires prior OAuth2 user consent/login flow to obtain authorization
      * @returns A promise that resolves to the user's information and KYC consent details
      */
-    getUserInfoWithConsent(): Promise<ConsentKycResponse>;
+    getUserInfoWithConsent(consentToken: string): Promise<ConsentKycResponse>;
     /**
      * Request Biometric Consent (BC) authorization.
      * This initiates the BC authorization flow for enhanced security.

package/lib/cjs/remittance.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"remittance.d.ts","sourceRoot":"","sources":["../../src/remittance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EAGpB,MAAM,UAAU,CAAC;AAClB,OAAO,EAAqB,WAAW,EAAE,MAAM,UAAU,CAAC;AAG1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAIvC;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,UAAU;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM;IAK9C;;;;OAIG;IACG,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA6B7D;;;;OAIG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAahE;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAMpC;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,WAAgC,GAC5C,OAAO,CAAC,OAAO,CAAC;IAcnB;;;;;;OAMG;IACI,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAQhE;;;;;OAKG;IACI,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM/D;;;;OAIG;IACI,sBAAsB,IAAI,OAAO,CAAC,kBAAkB,CAAC;IAM5D;;;;;;OAMG;IACI,WAAW,CAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IA2B/B;;;;;;OAMG;IACI,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA6BlE;;;;;OAKG;IACI,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAYlE;;;;;OAKG;IACI,cAAc,CACnB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;CAahC"}
+{"version":3,"file":"remittance.d.ts","sourceRoot":"","sources":["../../src/remittance.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,KAAK,EACV,OAAO,EACP,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,YAAY,EACZ,mBAAmB,EACnB,kBAAkB,EAClB,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,WAAW,EAAqB,MAAM,aAAa,CAAC;AAG7D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAW1C;;GAEG;AACH,MAAM,CAAC,OAAO,OAAO,UAAU;IAC7B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;IACpC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;gBAEpB,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM;IAK9C;;;;OAIG;IACG,QAAQ,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8B7D;;;;OAIG;IACG,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAahE;;;OAGG;IACG,UAAU,IAAI,OAAO,CAAC,OAAO,CAAC;IAMpC;;;;;OAKG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,WAAgC,GAC5C,OAAO,CAAC,OAAO,CAAC;IAqBnB;;;;;;OAMG;IACI,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IAShE;;;;;OAKG;IACI,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQ/D;;;;OAIG;IACI,sBAAsB,CAC3B,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,kBAAkB,CAAC;IAW9B;;;;;;OAMG;IACI,WAAW,CAChB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;IA2B/B;;;;;;OAMG;IACI,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,MAAM,CAAC;IA8BlE;;;;;OAKG;IACI,eAAe,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;IAclE;;;;;OAKG;IACI,cAAc,CACnB,OAAO,EAAE,kBAAkB,GAC1B,OAAO,CAAC,mBAAmB,CAAC;CAehC"}

package/lib/cjs/remittance.js

@@ -1,9 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const common_1 = require("./common");
-const errors_1 = require("./errors");
-const auth_1 = require("./auth");
-const uuid_1 = require("uuid");
+const common_js_1 = require("./common.js");
+const auth_js_1 = require("./auth.js");
+const errors_js_1 = require("./errors.js");
+const security_js_1 = require("./security.js");
+const validate_js_1 = require("./validate.js");
 /**
  * Remittance product for cross-border money transfers with optional OAuth2 consent flows
  */
@@ -18,7 +19,8 @@ class Remittance {
      * @returns A promise that resolves to the financial transaction ID (referenceId)
      */
     async transfer(request) {
-        const referenceId = (0, uuid_1.v4)();
+        await (0, validate_js_1.validateCashTransferRequest)(request);
+        const referenceId = (0, security_js_1.resolveReferenceId)(request.referenceId);
         await this.client.post(`/remittance/v1_0/transfer`, {
             amount: request.amount,
             currency: request.currency,
@@ -46,10 +48,10 @@ class Remittance {
      * @returns A promise that resolves to the transfer details and status
      */
     async getTransaction(referenceId) {
-        const response = await this.client.get(`/remittance/v1_0/transfer/${referenceId}`);
+        const response = await this.client.get(`/remittance/v1_0/transfer/${(0, security_js_1.pathUuid)(referenceId)}`);
         const transaction = response.data;
-        if (transaction.status === common_1.TransactionStatus.FAILED) {
-            return Promise.reject((0, errors_1.getTransactionError)(transaction));
+        if (transaction.status === common_js_1.TransactionStatus.FAILED) {
+            return Promise.reject((0, errors_js_1.getTransactionError)(transaction));
         }
         return transaction;
     }
@@ -68,13 +70,18 @@ class Remittance {
      * @param partyIdType - The type of ID (MSISDN, EMAIL, or PARTY_CODE)
      * @returns A promise that resolves to true if the beneficiary is active, false otherwise
      */
-    async isPayerActive(partyId, partyIdType = common_1.PartyIdType.MSISDN) {
+    async isPayerActive(partyId, partyIdType = common_js_1.PartyIdType.MSISDN) {
+        const safeType = (0, security_js_1.pathPartyType)(partyIdType);
+        const safeId = (0, security_js_1.pathPartyId)(safeType, partyId);
         try {
-            const response = await this.client.get(`/remittance/v1_0/accountholder/${partyIdType}/${partyId}/active`);
-            return response.status === 200;
+            const response = await this.client.get(`/remittance/v1_0/accountholder/${safeType}/${safeId}/active`);
+            return response.data?.result === true;
         }
         catch (error) {
-            if (error.response?.status === 404) {
+            if (error &&
+                typeof error === "object" &&
+                "status" in error &&
+                error.status === 404) {
                 return false;
             }
             throw error;
@@ -88,8 +95,9 @@ class Remittance {
      * @returns A promise that resolves to the basic user information
      */
     getBasicUserInfo(partyId) {
+        const safeId = (0, security_js_1.pathPartyId)(common_js_1.PartyIdType.MSISDN, partyId);
         return this.client
-            .get(`/remittance/v1_0/accountholder/MSISDN/${partyId}/basicuserinfo`)
+            .get(`/remittance/v1_0/accountholder/MSISDN/${safeId}/basicuserinfo`)
             .then((response) => response.data);
     }
     /**
@@ -100,7 +108,7 @@ class Remittance {
      */
     getBalanceInCurrency(currency) {
         return this.client
-            .get(`/remittance/v1_0/account/balance/${currency}`)
+            .get(`/remittance/v1_0/account/balance/${(0, security_js_1.pathCurrency)(currency)}`)
             .then((response) => response.data);
     }
     /**
@@ -108,9 +116,14 @@ class Remittance {
      * Requires prior OAuth2 user consent/login flow to obtain authorization
      * @returns A promise that resolves to the user's information and KYC consent details
      */
-    getUserInfoWithConsent() {
+    getUserInfoWithConsent(consentToken) {
+        (0, security_js_1.validateAccessToken)(consentToken);
         return this.client
-            .get(`/remittance/oauth2/v1_0/userinfo`)
+            .get("/remittance/oauth2/v1_0/userinfo", {
+            headers: {
+                Authorization: `Bearer ${consentToken}`,
+            },
+        })
             .then((response) => response.data);
     }
     /**
@@ -134,7 +147,7 @@ class Remittance {
         if (request.scope_instruction) {
             params.append("scope_instruction", request.scope_instruction);
         }
-        const basicAuthToken = (0, auth_1.createBasicAuthToken)(this.config);
+        const basicAuthToken = (0, auth_js_1.createBasicAuthToken)(this.config);
         return this.client
             .post("/remittance/v1_0/bc-authorize", params, {
             headers: {
@@ -152,27 +165,29 @@ class Remittance {
      * @returns A promise that resolves to the reference ID
      */
     cashTransfer(request) {
-        const referenceId = (0, uuid_1.v4)();
-        return this.client
-            .post("/remittance/v2_0/cashtransfer", {
-            amount: request.amount,
-            currency: request.currency,
-            externalId: request.externalId,
-            payee: request.payee,
-            originatingCountry: request.originatingCountry,
-            originalAmount: request.originalAmount,
-            originalCurrency: request.originalCurrency,
-            payerMessage: request.payerMessage,
-            payeeNote: request.payeeNote,
-        }, {
-            headers: {
-                "X-Reference-Id": referenceId,
-                ...(request.callbackUrl
-                    ? { "X-Callback-Url": request.callbackUrl }
-                    : {}),
-            },
-        })
-            .then(() => referenceId);
+        return (0, validate_js_1.validateCashTransferRequest)(request).then(() => {
+            const referenceId = (0, security_js_1.resolveReferenceId)(request.referenceId);
+            return this.client
+                .post("/remittance/v2_0/cashtransfer", {
+                amount: request.amount,
+                currency: request.currency,
+                externalId: request.externalId,
+                payee: request.payee,
+                originatingCountry: request.originatingCountry,
+                originalAmount: request.originalAmount,
+                originalCurrency: request.originalCurrency,
+                payerMessage: request.payerMessage,
+                payeeNote: request.payeeNote,
+            }, {
+                headers: {
+                    "X-Reference-Id": referenceId,
+                    ...(request.callbackUrl
+                        ? { "X-Callback-Url": request.callbackUrl }
+                        : {}),
+                },
+            })
+                .then(() => referenceId);
+        });
     }
     /**
      * Get the details and status of a cash transfer (V2).
@@ -182,11 +197,11 @@ class Remittance {
      */
     getCashTransfer(referenceId) {
         return this.client
-            .get(`/remittance/v2_0/cashtransfer/${referenceId}`)
+            .get(`/remittance/v2_0/cashtransfer/${(0, security_js_1.pathUuid)(referenceId)}`)
             .then((response) => response.data)
             .then((transfer) => {
-            if (transfer.status === common_1.TransactionStatus.FAILED) {
-                return Promise.reject((0, errors_1.getTransactionError)(transfer));
+            if (transfer.status === common_js_1.TransactionStatus.FAILED) {
+                return Promise.reject((0, errors_js_1.getTransactionError)(transfer));
             }
             return transfer;
         });
@@ -201,9 +216,11 @@ class Remittance {
         const params = new URLSearchParams();
         params.append("grant_type", request.grant_type);
         params.append("auth_req_id", request.auth_req_id);
+        const basicAuthToken = (0, auth_js_1.createBasicAuthToken)(this.config);
         return this.client
             .post("/remittance/oauth2/token/", params, {
             headers: {
+                Authorization: `Basic ${basicAuthToken}`,
                 "Content-Type": "application/x-www-form-urlencoded",
             },
         })

package/lib/cjs/remittance.js.map

@@ -1 +1 @@
-{"version":3,"file":"remittance.js","sourceRoot":"","sources":["../../src/remittance.ts"],"names":[],"mappings":";;AAeA,qCAA0D;AAC1D,qCAA6D;AAC7D,iCAA8C;AAG9C,+BAAkC;AAElC;;GAEG;AACH,MAAqB,UAAU;IAI7B,YAAY,MAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA4B;QACzC,MAAM,WAAW,GAAG,IAAA,SAAI,GAAE,CAAC;QAC3B,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,2BAA2B,EAC3B;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,EACD;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,WAAW;gBAC7B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,OAAO,CAAC,WAAW;oBACrB,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE;oBAC3C,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CACF,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,6BAA6B,WAAW,EAAE,CAC3C,CAAC;QAEF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;QAClC,IAAI,WAAW,CAAC,MAAM,KAAK,0BAAiB,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAA,4BAAmB,EAAC,WAAW,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAU,kCAAkC,CAAC;aAChD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,cAA2B,oBAAW,CAAC,MAAM;QAE7C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,kCAAkC,WAAW,IAAI,OAAO,SAAS,CAClE,CAAC;YACF,OAAO,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC;QACjC,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,CAAC,QAAQ,EAAE,MAAM,KAAK,GAAG,EAAE,CAAC;gBACnC,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,gBAAgB,CAAC,OAAe;QACrC,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CACF,yCAAyC,OAAO,gBAAgB,CACjE;aACA,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACI,oBAAoB,CAAC,QAAgB;QAC1C,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAU,oCAAoC,QAAQ,EAAE,CAAC;aAC5D,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACI,sBAAsB;QAC3B,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAqB,kCAAkC,CAAC;aAC3D,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,WAAW,CAChB,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,cAAc,GAAW,IAAA,2BAAoB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CAAsB,+BAA+B,EAAE,MAAM,EAAE;YAClE,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,cAAc,EAAE;gBACxC,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC;aACD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,YAAY,CAAC,OAA4B;QAC9C,MAAM,WAAW,GAAG,IAAA,SAAI,GAAE,CAAC;QAE3B,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CACH,+BAA+B,EAC/B;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,EACD;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,WAAW;gBAC7B,GAAG,CAAC,OAAO,CAAC,WAAW;oBACrB,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE;oBAC3C,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CACF;aACA,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACI,eAAe,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAe,iCAAiC,WAAW,EAAE,CAAC;aACjE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;aACjC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,0BAAiB,CAAC,MAAM,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAA,4BAAmB,EAAC,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACI,cAAc,CACnB,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAElD,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CAAsB,2BAA2B,EAAE,MAAM,EAAE;YAC9D,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC;aACD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AAnPD,6BAmPC"}
+{"version":3,"file":"remittance.js","sourceRoot":"","sources":["../../src/remittance.ts"],"names":[],"mappings":";;AAaA,2CAA6D;AAC7D,uCAAiD;AACjD,2CAAkD;AAElD,+CAOuB;AACvB,+CAA4D;AAE5D;;GAEG;AACH,MAAqB,UAAU;IAI7B,YAAY,MAAkB,EAAE,MAAc;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ,CAAC,OAA4B;QACzC,MAAM,IAAA,yCAA2B,EAAC,OAAO,CAAC,CAAC;QAC3C,MAAM,WAAW,GAAG,IAAA,gCAAkB,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CACpB,2BAA2B,EAC3B;YACE,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;YAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;YAC9C,cAAc,EAAE,OAAO,CAAC,cAAc;YACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;YAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,EACD;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,WAAW;gBAC7B,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,OAAO,CAAC,WAAW;oBACrB,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE;oBAC3C,CAAC,CAAC,EAAE,CAAC;aACR;SACF,CACF,CAAC;QAEF,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACtC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,6BAA6B,IAAA,sBAAQ,EAAC,WAAW,CAAC,EAAE,CACrD,CAAC;QAEF,MAAM,WAAW,GAAG,QAAQ,CAAC,IAAI,CAAC;QAClC,IAAI,WAAW,CAAC,MAAM,KAAK,6BAAiB,CAAC,MAAM,EAAE,CAAC;YACpD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAA,+BAAmB,EAAC,WAAW,CAAC,CAAC,CAAC;QAC1D,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU;QACd,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAU,kCAAkC,CAAC;aAChD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,cAA2B,uBAAW,CAAC,MAAM;QAE7C,MAAM,QAAQ,GAAG,IAAA,2BAAa,EAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CACpC,kCAAkC,QAAQ,IAAI,MAAM,SAAS,CAC9D,CAAC;YACF,OAAO,QAAQ,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QACxC,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IACE,KAAK;gBACL,OAAO,KAAK,KAAK,QAAQ;gBACzB,QAAQ,IAAI,KAAK;gBACjB,KAAK,CAAC,MAAM,KAAK,GAAG,EACpB,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACI,gBAAgB,CAAC,OAAe;QACrC,MAAM,MAAM,GAAG,IAAA,yBAAW,EAAC,uBAAW,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CACF,yCAAyC,MAAM,gBAAgB,CAChE;aACA,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;OAKG;IACI,oBAAoB,CAAC,QAAgB;QAC1C,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CACF,oCAAoC,IAAA,0BAAY,EAAC,QAAQ,CAAC,EAAE,CAC7D;aACA,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;OAIG;IACI,sBAAsB,CAC3B,YAAoB;QAEpB,IAAA,iCAAmB,EAAC,YAAY,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAqB,kCAAkC,EAAE;YAC3D,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,YAAY,EAAE;aACxC;SACF,CAAC;aACD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,WAAW,CAChB,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAC7B,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,OAAO,CAAC,yBAAyB,EAAE,CAAC;YACtC,MAAM,CAAC,MAAM,CAAC,2BAA2B,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,cAAc,GAAW,IAAA,8BAAoB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjE,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CAAsB,+BAA+B,EAAE,MAAM,EAAE;YAClE,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,cAAc,EAAE;gBACxC,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC;aACD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;;;;OAMG;IACI,YAAY,CAAC,OAA4B;QAC9C,OAAO,IAAA,yCAA2B,EAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;YACpD,MAAM,WAAW,GAAG,IAAA,gCAAkB,EAAC,OAAO,CAAC,WAAW,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC,MAAM;iBACf,IAAI,CACL,+BAA+B,EAC/B;gBACE,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,QAAQ,EAAE,OAAO,CAAC,QAAQ;gBAC1B,UAAU,EAAE,OAAO,CAAC,UAAU;gBAC9B,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;gBAC9C,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,YAAY,EAAE,OAAO,CAAC,YAAY;gBAClC,SAAS,EAAE,OAAO,CAAC,SAAS;aAC7B,EACD;gBACE,OAAO,EAAE;oBACP,gBAAgB,EAAE,WAAW;oBAC7B,GAAG,CAAC,OAAO,CAAC,WAAW;wBACrB,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,WAAW,EAAE;wBAC3C,CAAC,CAAC,EAAE,CAAC;iBACR;aACF,CACA;iBACA,IAAI,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,CAAC;QAC7B,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;OAKG;IACI,eAAe,CAAC,WAAmB;QACxC,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CACF,iCAAiC,IAAA,sBAAQ,EAAC,WAAW,CAAC,EAAE,CACzD;aACA,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;aACjC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE;YACjB,IAAI,QAAQ,CAAC,MAAM,KAAK,6BAAiB,CAAC,MAAM,EAAE,CAAC;gBACjD,OAAO,OAAO,CAAC,MAAM,CAAC,IAAA,+BAAmB,EAAC,QAAQ,CAAC,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC,CAAC,CAAC;IACP,CAAC;IAED;;;;;OAKG;IACI,cAAc,CACnB,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAChD,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,CAAC;QAElD,MAAM,cAAc,GAAG,IAAA,8BAAoB,EAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CAAsB,2BAA2B,EAAE,MAAM,EAAE;YAC9D,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,cAAc,EAAE;gBACxC,cAAc,EAAE,mCAAmC;aACpD;SACF,CAAC;aACD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AA1QD,6BA0QC"}

package/lib/cjs/security.d.ts

@@ -0,0 +1,32 @@
+import { Environment, PartyIdType } from "./common.js";
+import type { GlobalConfig, Party } from "./common.js";
+export declare const DEFAULT_TIMEOUT_MS = 30000;
+export declare const DEFAULT_MAX_RESPONSE_BYTES: number;
+export declare const MAX_TIMEOUT_MS = 120000;
+export declare const MAX_RESPONSE_BYTES: number;
+export interface FinancialOperationOptions {
+    /**
+     * Stable MTN resource identifier for this logical financial operation.
+     *
+     * Production callers that may retry must generate and persist this value
+     * before the first request, then reuse it for every retry.
+     */
+    referenceId?: string;
+}
+export declare function generateReferenceId(): string;
+export declare function requireUuidV4(value: unknown, name?: string): string;
+export declare function resolveReferenceId(referenceId?: string): string;
+export declare function pathUuid(value: unknown, name?: string): string;
+export declare function pathCurrency(value: unknown): string;
+export declare function pathPartyType(value: unknown): PartyIdType;
+export declare function pathPartyId(type: PartyIdType, value: unknown): string;
+export declare function validateParty(party: Party | undefined, name: string): void;
+export declare function encodeStrictPathSegment(value: unknown, name: string): string;
+export declare function validateFinancialAmount(amount: unknown, name?: string): asserts amount is string;
+export declare function validateCurrency(currency: unknown): asserts currency is string;
+export declare function validateAccessToken(token: unknown, name?: string): asserts token is string;
+export declare function normalizeBaseUrl(baseUrl: string, environment: Environment): string;
+export declare function validateGlobalSecurityConfig(config: GlobalConfig): void;
+export declare function redactSensitiveText(value: string): string;
+export declare function redactUrl(value: string): string;
+//# sourceMappingURL=security.d.ts.map

package/lib/cjs/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../src/security.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAYvD,eAAO,MAAM,kBAAkB,QAAS,CAAC;AACzC,eAAO,MAAM,0BAA0B,QAAc,CAAC;AACtD,eAAO,MAAM,cAAc,SAAU,CAAC;AACtC,eAAO,MAAM,kBAAkB,QAAmB,CAAC;AAEnD,MAAM,WAAW,yBAAyB;IACxC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAgB,GAAG,MAAM,CAQ1E;AAED,wBAAgB,kBAAkB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAI/D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,SAAgB,GAAG,MAAM,CAErE;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQnD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CASzD;AAED,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,CAgBrE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAY1E;AAED,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,GACX,MAAM,CAyCR;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,OAAO,EACf,IAAI,SAAW,GACd,OAAO,CAAC,MAAM,IAAI,MAAM,CAU1B;AAED,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,OAAO,GAChB,OAAO,CAAC,QAAQ,IAAI,MAAM,CAE5B;AAED,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,OAAO,EACd,IAAI,SAAiB,GACpB,OAAO,CAAC,KAAK,IAAI,MAAM,CASzB;AAED,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,WAAW,GACvB,MAAM,CAiCR;AAED,wBAAgB,4BAA4B,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI,CAiCvE;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAQzD;AA6BD,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAe/C"}

package/lib/cjs/security.js

@@ -0,0 +1,253 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_RESPONSE_BYTES = exports.MAX_TIMEOUT_MS = exports.DEFAULT_MAX_RESPONSE_BYTES = exports.DEFAULT_TIMEOUT_MS = void 0;
+exports.generateReferenceId = generateReferenceId;
+exports.requireUuidV4 = requireUuidV4;
+exports.resolveReferenceId = resolveReferenceId;
+exports.pathUuid = pathUuid;
+exports.pathCurrency = pathCurrency;
+exports.pathPartyType = pathPartyType;
+exports.pathPartyId = pathPartyId;
+exports.validateParty = validateParty;
+exports.encodeStrictPathSegment = encodeStrictPathSegment;
+exports.validateFinancialAmount = validateFinancialAmount;
+exports.validateCurrency = validateCurrency;
+exports.validateAccessToken = validateAccessToken;
+exports.normalizeBaseUrl = normalizeBaseUrl;
+exports.validateGlobalSecurityConfig = validateGlobalSecurityConfig;
+exports.redactSensitiveText = redactSensitiveText;
+exports.redactUrl = redactUrl;
+const uuid_1 = require("uuid");
+const common_js_1 = require("./common.js");
+const UUID_V4 = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const POSITIVE_DECIMAL = /^(?:0|[1-9]\d*)(?:\.\d+)?$/;
+const CURRENCY = /^[A-Z]{3}$/;
+const MSISDN = /^\+?[0-9]{5,15}$/;
+const EMAIL = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+const CONTROL_CHARACTER = /[\u0000-\u001f\u007f]/;
+const FORBIDDEN_PATH_CHARACTER = /[\/\\?#]/;
+const ENCODED_PATH_SEPARATOR = /%(?:2f|5c)/i;
+exports.DEFAULT_TIMEOUT_MS = 30000;
+exports.DEFAULT_MAX_RESPONSE_BYTES = 1024 * 1024;
+exports.MAX_TIMEOUT_MS = 120000;
+exports.MAX_RESPONSE_BYTES = 10 * 1024 * 1024;
+function generateReferenceId() {
+    return (0, uuid_1.v4)();
+}
+function requireUuidV4(value, name = "referenceId") {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError(`${name} is required`);
+    }
+    if (!UUID_V4.test(value)) {
+        throw new TypeError(`${name} must be a valid uuid v4`);
+    }
+    return value;
+}
+function resolveReferenceId(referenceId) {
+    return referenceId === undefined
+        ? generateReferenceId()
+        : requireUuidV4(referenceId);
+}
+function pathUuid(value, name = "referenceId") {
+    return encodeURIComponent(requireUuidV4(value, name));
+}
+function pathCurrency(value) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError("currency is required");
+    }
+    if (!CURRENCY.test(value)) {
+        throw new TypeError("currency must be a 3-letter uppercase ISO 4217 code");
+    }
+    return value;
+}
+function pathPartyType(value) {
+    if (value !== common_js_1.PartyIdType.MSISDN &&
+        value !== common_js_1.PartyIdType.EMAIL &&
+        value !== common_js_1.PartyIdType.PARTY_CODE) {
+        throw new TypeError("partyIdType must be MSISDN, EMAIL, or PARTY_CODE");
+    }
+    return value;
+}
+function pathPartyId(type, value) {
+    if (typeof value !== "string" || value.length === 0) {
+        throw new TypeError("partyId is required");
+    }
+    if (type === common_js_1.PartyIdType.MSISDN && !MSISDN.test(value)) {
+        throw new TypeError("MSISDN partyId must contain 5 to 15 digits");
+    }
+    if (type === common_js_1.PartyIdType.EMAIL && !EMAIL.test(value)) {
+        throw new TypeError("EMAIL partyId must be a valid email address");
+    }
+    if (type === common_js_1.PartyIdType.PARTY_CODE) {
+        requireUuidV4(value, "PARTY_CODE partyId");
+    }
+    return encodeStrictPathSegment(value, "partyId");
+}
+function validateParty(party, name) {
+    if (!party) {
+        throw new TypeError(`${name} is required`);
+    }
+    if (typeof party.partyId !== "string" || party.partyId.length === 0) {
+        throw new TypeError(`${name}.partyId is required`);
+    }
+    if (!party.partyIdType) {
+        throw new TypeError(`${name}.partyIdType is required`);
+    }
+    const type = pathPartyType(party.partyIdType);
+    pathPartyId(type, party.partyId);
+}
+function encodeStrictPathSegment(value, name) {
+    if (typeof value !== "string" &&
+        typeof value !== "number" &&
+        typeof value !== "bigint") {
+        throw new TypeError(`${name} must be a supported primitive`);
+    }
+    const segment = String(value);
+    if (!segment) {
+        throw new TypeError(`${name} is required`);
+    }
+    if (CONTROL_CHARACTER.test(segment)) {
+        throw new TypeError(`${name} contains control characters`);
+    }
+    if (segment === "." ||
+        segment === ".." ||
+        FORBIDDEN_PATH_CHARACTER.test(segment) ||
+        ENCODED_PATH_SEPARATOR.test(segment)) {
+        throw new TypeError(`${name} contains unsafe path characters`);
+    }
+    let decoded = segment;
+    try {
+        decoded = decodeURIComponent(segment);
+    }
+    catch {
+        throw new TypeError(`${name} contains invalid percent encoding`);
+    }
+    if (decoded === "." ||
+        decoded === ".." ||
+        FORBIDDEN_PATH_CHARACTER.test(decoded) ||
+        CONTROL_CHARACTER.test(decoded)) {
+        throw new TypeError(`${name} contains unsafe path characters`);
+    }
+    return encodeURIComponent(segment);
+}
+function validateFinancialAmount(amount, name = "amount") {
+    if (typeof amount !== "string" || amount.length === 0) {
+        throw new TypeError(`${name} is required`);
+    }
+    if (!POSITIVE_DECIMAL.test(amount)) {
+        throw new TypeError(`${name} must be a number`);
+    }
+    if (/^0+(?:\.0+)?$/.test(amount)) {
+        throw new TypeError(`${name} must be greater than zero`);
+    }
+}
+function validateCurrency(currency) {
+    pathCurrency(currency);
+}
+function validateAccessToken(token, name = "consentToken") {
+    if (typeof token !== "string" ||
+        token.length === 0 ||
+        /\s/.test(token) ||
+        CONTROL_CHARACTER.test(token)) {
+        throw new TypeError(`${name} must be a non-empty bearer token`);
+    }
+}
+function normalizeBaseUrl(baseUrl, environment) {
+    let url;
+    try {
+        url = new URL(baseUrl);
+    }
+    catch {
+        throw new TypeError("baseUrl must be a valid absolute URL");
+    }
+    if (url.username || url.password) {
+        throw new TypeError("baseUrl must not contain embedded credentials");
+    }
+    if (url.search || url.hash) {
+        throw new TypeError("baseUrl must not contain a query string or fragment");
+    }
+    const loopback = url.hostname === "127.0.0.1" ||
+        url.hostname === "localhost" ||
+        url.hostname === "::1" ||
+        url.hostname === "[::1]";
+    const testLoopback = environment === common_js_1.Environment.SANDBOX &&
+        process.env.NODE_ENV === "test" &&
+        loopback &&
+        url.protocol === "http:";
+    if (url.protocol !== "https:" && !testLoopback) {
+        const scope = environment === common_js_1.Environment.PRODUCTION ? "production " : "";
+        throw new TypeError(`${scope}baseUrl must use https`);
+    }
+    return url.toString().replace(/\/+$/, "");
+}
+function validateGlobalSecurityConfig(config) {
+    const environment = config.environment ?? common_js_1.Environment.SANDBOX;
+    if (environment !== common_js_1.Environment.SANDBOX &&
+        environment !== common_js_1.Environment.PRODUCTION) {
+        throw new TypeError("environment must be sandbox or production");
+    }
+    const baseUrl = config.baseUrl ?? "https://sandbox.momodeveloper.mtn.com";
+    normalizeBaseUrl(baseUrl, environment);
+    if (config.timeoutMs !== undefined &&
+        (!Number.isInteger(config.timeoutMs) ||
+            config.timeoutMs <= 0 ||
+            config.timeoutMs > exports.MAX_TIMEOUT_MS)) {
+        throw new TypeError(`timeoutMs must be an integer between 1 and ${exports.MAX_TIMEOUT_MS}`);
+    }
+    if (config.maxResponseBytes !== undefined &&
+        (!Number.isInteger(config.maxResponseBytes) ||
+            config.maxResponseBytes < 1024 ||
+            config.maxResponseBytes > exports.MAX_RESPONSE_BYTES)) {
+        throw new TypeError(`maxResponseBytes must be an integer between 1024 and ${exports.MAX_RESPONSE_BYTES}`);
+    }
+}
+function redactSensitiveText(value) {
+    return value
+        .replace(/\b(Basic|Bearer)\s+\S+/gi, "$1 [redacted]")
+        .replace(/\b[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}\b/gi, "[redacted]")
+        .replace(/\+?\d{7,15}/g, "[redacted]");
+}
+const SAFE_PATH_PARTS = new Set([
+    "",
+    "collection",
+    "disbursement",
+    "remittance",
+    "v1_0",
+    "v2_0",
+    "oauth2",
+    "token",
+    "requesttopay",
+    "requesttowithdraw",
+    "transfer",
+    "cashtransfer",
+    "deposit",
+    "refund",
+    "account",
+    "balance",
+    "accountholder",
+    "active",
+    "basicuserinfo",
+    "userinfo",
+    "bc-authorize",
+    "deliverynotification",
+    "apiuser",
+    "apikey",
+]);
+function redactUrl(value) {
+    try {
+        const url = new URL(value);
+        url.username = "";
+        url.password = "";
+        url.search = "";
+        url.hash = "";
+        url.pathname = url.pathname
+            .split("/")
+            .map((part) => (SAFE_PATH_PARTS.has(part) ? part : "[redacted]"))
+            .join("/");
+        return url.toString();
+    }
+    catch {
+        return "[invalid-url]";
+    }
+}
+//# sourceMappingURL=security.js.map

package/lib/cjs/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/security.ts"],"names":[],"mappings":";;;AA8BA,kDAEC;AAED,sCAQC;AAED,gDAIC;AAED,4BAEC;AAED,oCAQC;AAED,sCASC;AAED,kCAgBC;AAED,sCAYC;AAED,0DA4CC;AAED,0DAaC;AAED,4CAIC;AAED,kDAYC;AAED,4CAoCC;AAED,oEAiCC;AAED,kDAQC;AA6BD,8BAeC;AAzTD,+BAAkC;AAElC,2CAAuD;AAGvD,MAAM,OAAO,GACX,wEAAwE,CAAC;AAC3E,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AACtD,MAAM,QAAQ,GAAG,YAAY,CAAC;AAC9B,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAClC,MAAM,KAAK,GAAG,4BAA4B,CAAC;AAC3C,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AAClD,MAAM,wBAAwB,GAAG,UAAU,CAAC;AAC5C,MAAM,sBAAsB,GAAG,aAAa,CAAC;AAEhC,QAAA,kBAAkB,GAAG,KAAM,CAAC;AAC5B,QAAA,0BAA0B,GAAG,IAAI,GAAG,IAAI,CAAC;AACzC,QAAA,cAAc,GAAG,MAAO,CAAC;AACzB,QAAA,kBAAkB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAYnD,SAAgB,mBAAmB;IACjC,OAAO,IAAA,SAAI,GAAE,CAAC;AAChB,CAAC;AAED,SAAgB,aAAa,CAAC,KAAc,EAAE,IAAI,GAAG,aAAa;IAChE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACzD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,kBAAkB,CAAC,WAAoB;IACrD,OAAO,WAAW,KAAK,SAAS;QAC9B,CAAC,CAAC,mBAAmB,EAAE;QACvB,CAAC,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;AACjC,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAc,EAAE,IAAI,GAAG,aAAa;IAC3D,OAAO,kBAAkB,CAAC,aAAa,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;AACxD,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,sBAAsB,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,KAAc;IAC1C,IACE,KAAK,KAAK,uBAAW,CAAC,MAAM;QAC5B,KAAK,KAAK,uBAAW,CAAC,KAAK;QAC3B,KAAK,KAAK,uBAAW,CAAC,UAAU,EAChC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,WAAW,CAAC,IAAiB,EAAE,KAAc;IAC3D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,SAAS,CAAC,qBAAqB,CAAC,CAAC;IAC7C,CAAC;IAED,IAAI,IAAI,KAAK,uBAAW,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,MAAM,IAAI,SAAS,CAAC,4CAA4C,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,IAAI,KAAK,uBAAW,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,IAAI,KAAK,uBAAW,CAAC,UAAU,EAAE,CAAC;QACpC,aAAa,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,uBAAuB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;AACnD,CAAC;AAED,SAAgB,aAAa,CAAC,KAAwB,EAAE,IAAY;IAClE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpE,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,sBAAsB,CAAC,CAAC;IACrD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAC;IACzD,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC9C,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;AACnC,CAAC;AAED,SAAgB,uBAAuB,CACrC,KAAc,EACd,IAAY;IAEZ,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ,EACzB,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,gCAAgC,CAAC,CAAC;IAC/D,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAC;IAC7D,CAAC;IACD,IACE,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,IAAI;QAChB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,OAAO,GAAG,OAAO,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACxC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,oCAAoC,CAAC,CAAC;IACnE,CAAC;IACD,IACE,OAAO,KAAK,GAAG;QACf,OAAO,KAAK,IAAI;QAChB,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QACtC,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,EAC/B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC;IACjE,CAAC;IAED,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;AACrC,CAAC;AAED,SAAgB,uBAAuB,CACrC,MAAe,EACf,IAAI,GAAG,QAAQ;IAEf,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,cAAc,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,mBAAmB,CAAC,CAAC;IAClD,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,4BAA4B,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAC9B,QAAiB;IAEjB,YAAY,CAAC,QAAQ,CAAC,CAAC;AACzB,CAAC;AAED,SAAgB,mBAAmB,CACjC,KAAc,EACd,IAAI,GAAG,cAAc;IAErB,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,KAAK,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC;QAChB,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAC7B,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,mCAAmC,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAgB,gBAAgB,CAC9B,OAAe,EACf,WAAwB;IAExB,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,SAAS,CAAC,sCAAsC,CAAC,CAAC;IAC9D,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QAC3B,MAAM,IAAI,SAAS,CAAC,qDAAqD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GACZ,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,GAAG,CAAC,QAAQ,KAAK,WAAW;QAC5B,GAAG,CAAC,QAAQ,KAAK,KAAK;QACtB,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3B,MAAM,YAAY,GAChB,WAAW,KAAK,uBAAW,CAAC,OAAO;QACnC,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM;QAC/B,QAAQ;QACR,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;IAE3B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,KAAK,GACT,WAAW,KAAK,uBAAW,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,MAAM,IAAI,SAAS,CAAC,GAAG,KAAK,wBAAwB,CAAC,CAAC;IACxD,CAAC;IAED,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAC5C,CAAC;AAED,SAAgB,4BAA4B,CAAC,MAAoB;IAC/D,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,IAAI,uBAAW,CAAC,OAAO,CAAC;IAC9D,IACE,WAAW,KAAK,uBAAW,CAAC,OAAO;QACnC,WAAW,KAAK,uBAAW,CAAC,UAAU,EACtC,CAAC;QACD,MAAM,IAAI,SAAS,CAAC,2CAA2C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,OAAO,GACX,MAAM,CAAC,OAAO,IAAI,uCAAuC,CAAC;IAC5D,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IAEvC,IACE,MAAM,CAAC,SAAS,KAAK,SAAS;QAC9B,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC;YAClC,MAAM,CAAC,SAAS,IAAI,CAAC;YACrB,MAAM,CAAC,SAAS,GAAG,sBAAc,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,8CAA8C,sBAAc,EAAE,CAC/D,CAAC;IACJ,CAAC;IAED,IACE,MAAM,CAAC,gBAAgB,KAAK,SAAS;QACrC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACzC,MAAM,CAAC,gBAAgB,GAAG,IAAI;YAC9B,MAAM,CAAC,gBAAgB,GAAG,0BAAkB,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,SAAS,CACjB,wDAAwD,0BAAkB,EAAE,CAC7E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CAAC,KAAa;IAC/C,OAAO,KAAK;SACT,OAAO,CAAC,0BAA0B,EAAE,eAAe,CAAC;SACpD,OAAO,CACN,oEAAoE,EACpE,YAAY,CACb;SACA,OAAO,CAAC,cAAc,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,MAAM,eAAe,GAAG,IAAI,GAAG,CAAC;IAC9B,EAAE;IACF,YAAY;IACZ,cAAc;IACd,YAAY;IACZ,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,cAAc;IACd,mBAAmB;IACnB,UAAU;IACV,cAAc;IACd,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,eAAe;IACf,QAAQ;IACR,eAAe;IACf,UAAU;IACV,cAAc;IACd,sBAAsB;IACtB,SAAS;IACT,QAAQ;CACT,CAAC,CAAC;AAEH,SAAgB,SAAS,CAAC,KAAa;IACrC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,QAAQ,GAAG,EAAE,CAAC;QAClB,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC;QAChB,GAAG,CAAC,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ;aACxB,KAAK,CAAC,GAAG,CAAC;aACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC;aAChE,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}

package/lib/cjs/users.d.ts

@@ -1,8 +1,9 @@
-import type { HttpClient } from "./httpClient";
-import type { ApiUserInfo, Credentials } from "./common";
+import type { HttpClient } from "./httpClient.js";
+import { Environment, type ApiUserInfo, type Credentials } from "./common.js";
 export default class Users {
     private client;
-    constructor(client: HttpClient);
+    private environment;
+    constructor(client: HttpClient, environment?: Environment);
     /**
      * Used to create an API user in the sandbox target environment
      * @param host The provider callback host
@@ -18,5 +19,6 @@ export default class Users {
      * @param referenceId API user reference id (X-Reference-Id used at creation)
      */
     getApiUser(referenceId: string): Promise<ApiUserInfo>;
+    private assertSandbox;
 }
 //# sourceMappingURL=users.d.ts.map

package/lib/cjs/users.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AAEzD,MAAM,CAAC,OAAO,OAAO,KAAK;IACxB,OAAO,CAAC,MAAM,CAAa;gBAEf,MAAM,EAAE,UAAU;IAI9B;;;OAGG;IACI,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAe5C;;;OAGG;IACI,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAMlD;;;OAGG;IACI,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAK7D"}
+{"version":3,"file":"users.d.ts","sourceRoot":"","sources":["../../src/users.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAElD,OAAO,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAO9E,MAAM,CAAC,OAAO,OAAO,KAAK;IACxB,OAAO,CAAC,MAAM,CAAa;IAC3B,OAAO,CAAC,WAAW,CAAc;gBAG/B,MAAM,EAAE,UAAU,EAClB,WAAW,GAAE,WAAiC;IAMhD;;;OAGG;IACI,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAiB5C;;;OAGG;IACI,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAOlD;;;OAGG;IACI,UAAU,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;IAO5D,OAAO,CAAC,aAAa;CAKtB"}

package/lib/cjs/users.js

@@ -1,18 +1,22 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-const uuid_1 = require("uuid");
+const common_js_1 = require("./common.js");
+const security_js_1 = require("./security.js");
 class Users {
-    constructor(client) {
+    constructor(client, environment = common_js_1.Environment.SANDBOX) {
         this.client = client;
+        this.environment = environment;
     }
     /**
      * Used to create an API user in the sandbox target environment
      * @param host The provider callback host
      */
     create(host) {
-        const userId = (0, uuid_1.v4)();
+        this.assertSandbox();
+        const safeHost = (0, security_js_1.encodeStrictPathSegment)(host, "host");
+        const userId = (0, security_js_1.generateReferenceId)();
         return this.client
-            .post("/v1_0/apiuser", { providerCallbackHost: host }, {
+            .post("/v1_0/apiuser", { providerCallbackHost: decodeURIComponent(safeHost) }, {
             headers: {
                 "X-Reference-Id": userId,
             },
@@ -24,8 +28,9 @@ class Users {
      * @param userId
      */
     login(userId) {
+        this.assertSandbox();
         return this.client
-            .post(`/v1_0/apiuser/${userId}/apikey`)
+            .post(`/v1_0/apiuser/${(0, security_js_1.pathUuid)(userId, "userId")}/apikey`)
             .then((response) => response.data);
     }
     /**
@@ -33,10 +38,16 @@ class Users {
      * @param referenceId API user reference id (X-Reference-Id used at creation)
      */
     getApiUser(referenceId) {
+        this.assertSandbox();
         return this.client
-            .get(`/v1_0/apiuser/${referenceId}`)
+            .get(`/v1_0/apiuser/${(0, security_js_1.pathUuid)(referenceId)}`)
             .then((response) => response.data);
     }
+    assertSandbox() {
+        if (this.environment !== common_js_1.Environment.SANDBOX) {
+            throw new Error("API user provisioning is only available in sandbox");
+        }
+    }
 }
 exports.default = Users;
 //# sourceMappingURL=users.js.map

package/lib/cjs/users.js.map

@@ -1 +1 @@
-{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/users.ts"],"names":[],"mappings":";;AACA,+BAAkC;AAIlC,MAAqB,KAAK;IAGxB,YAAY,MAAkB;QAC5B,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,IAAY;QACxB,MAAM,MAAM,GAAW,IAAA,SAAI,GAAE,CAAC;QAC9B,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CACH,eAAe,EACf,EAAE,oBAAoB,EAAE,IAAI,EAAE,EAC9B;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,MAAM;aACzB;SACF,CACF;aACA,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAc;QACzB,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CAAc,iBAAiB,MAAM,SAAS,CAAC;aACnD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACI,UAAU,CAAC,WAAmB;QACnC,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAc,iBAAiB,WAAW,EAAE,CAAC;aAChD,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;CACF;AA7CD,wBA6CC"}
+{"version":3,"file":"users.js","sourceRoot":"","sources":["../../src/users.ts"],"names":[],"mappings":";;AAEA,2CAA8E;AAC9E,+CAIuB;AAEvB,MAAqB,KAAK;IAIxB,YACE,MAAkB,EAClB,cAA2B,uBAAW,CAAC,OAAO;QAE9C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED;;;OAGG;IACI,MAAM,CAAC,IAAY;QACxB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,MAAM,QAAQ,GAAG,IAAA,qCAAuB,EAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,IAAA,iCAAmB,GAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CACH,eAAe,EACf,EAAE,oBAAoB,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE,EACtD;YACE,OAAO,EAAE;gBACP,gBAAgB,EAAE,MAAM;aACzB;SACF,CACF;aACA,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IAED;;;OAGG;IACI,KAAK,CAAC,MAAc;QACzB,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,MAAM;aACf,IAAI,CAAc,iBAAiB,IAAA,sBAAQ,EAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC;aACvE,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACI,UAAU,CAAC,WAAmB;QACnC,IAAI,CAAC,aAAa,EAAE,CAAC;QACrB,OAAO,IAAI,CAAC,MAAM;aACf,GAAG,CAAc,iBAAiB,IAAA,sBAAQ,EAAC,WAAW,CAAC,EAAE,CAAC;aAC1D,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,CAAC;IAEO,aAAa;QACnB,IAAI,IAAI,CAAC,WAAW,KAAK,uBAAW,CAAC,OAAO,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;IACH,CAAC;CACF;AA5DD,wBA4DC"}