@orcarail/node 1.0.1

package/dist/index.js

@@ -0,0 +1,389 @@
+import { createHmac, timingSafeEqual } from 'crypto';
+
+// src/errors.ts
+var OrcaRailError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "OrcaRailError";
+    Error.captureStackTrace(this, this.constructor);
+  }
+};
+var OrcaRailAPIError = class extends OrcaRailError {
+  /**
+   * HTTP status code
+   */
+  statusCode;
+  /**
+   * Error type from the API response
+   */
+  type;
+  /**
+   * Additional error details from the API
+   */
+  details;
+  constructor(message, statusCode, type, details) {
+    super(message);
+    this.name = "OrcaRailAPIError";
+    this.statusCode = statusCode;
+    this.type = type;
+    this.details = details;
+  }
+};
+var OrcaRailAuthenticationError = class extends OrcaRailAPIError {
+  constructor(message = "Authentication failed. Please check your API key and secret.") {
+    super(message, 401, "authentication_error");
+    this.name = "OrcaRailAuthenticationError";
+  }
+};
+var OrcaRailSignatureVerificationError = class extends OrcaRailError {
+  /**
+   * The signature that was provided
+   */
+  signature;
+  constructor(message = "Webhook signature verification failed", signature) {
+    super(message);
+    this.name = "OrcaRailSignatureVerificationError";
+    this.signature = signature || "";
+  }
+};
+
+// src/client.ts
+var DEFAULT_BASE_URL = "https://api.orcarail.com/api/v1";
+var DEFAULT_TIMEOUT = 3e4;
+var SDK_VERSION = "1.0.0";
+var HttpClient = class {
+  apiKey;
+  apiSecret;
+  baseUrl;
+  timeout;
+  constructor(apiKey, apiSecret, config) {
+    if (!apiKey || !apiSecret) {
+      throw new OrcaRailError("API key and secret are required");
+    }
+    this.apiKey = apiKey;
+    this.apiSecret = apiSecret;
+    this.baseUrl = config?.baseUrl || DEFAULT_BASE_URL;
+    this.timeout = config?.timeout || DEFAULT_TIMEOUT;
+  }
+  /**
+   * Create Basic Auth header from API key and secret
+   */
+  getAuthHeader() {
+    const credentials = Buffer.from(`${this.apiKey}:${this.apiSecret}`).toString(
+      "base64"
+    );
+    return `Basic ${credentials}`;
+  }
+  /**
+   * Build full URL from path
+   */
+  buildUrl(path) {
+    const cleanPath = path.startsWith("/") ? path.slice(1) : path;
+    return `${this.baseUrl}/${cleanPath}`;
+  }
+  /**
+   * Make an HTTP request with timeout and error handling
+   */
+  async request(method, path, body, requireAuth = true) {
+    const url = this.buildUrl(path);
+    const headers = {
+      "Content-Type": "application/json",
+      "User-Agent": `orcarail-node/${SDK_VERSION}`
+    };
+    if (requireAuth) {
+      headers["Authorization"] = this.getAuthHeader();
+    }
+    const options = {
+      method,
+      headers
+    };
+    if (body) {
+      options.body = JSON.stringify(body);
+    }
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), this.timeout);
+    options.signal = controller.signal;
+    try {
+      const response = await fetch(url, options);
+      clearTimeout(timeoutId);
+      let responseData;
+      const contentType = response.headers.get("content-type");
+      if (contentType && contentType.includes("application/json")) {
+        responseData = await response.json();
+      } else {
+        responseData = await response.text();
+      }
+      if (!response.ok) {
+        const errorMessage = typeof responseData === "object" && responseData !== null && "message" in responseData ? String(responseData.message) : `API request failed with status ${response.status}`;
+        const errorType = typeof responseData === "object" && responseData !== null && "error" in responseData ? String(responseData.error) : void 0;
+        if (response.status === 401) {
+          throw new OrcaRailAuthenticationError(errorMessage);
+        }
+        throw new OrcaRailAPIError(
+          errorMessage,
+          response.status,
+          errorType,
+          responseData
+        );
+      }
+      return responseData;
+    } catch (error) {
+      clearTimeout(timeoutId);
+      if (error instanceof OrcaRailError) {
+        throw error;
+      }
+      if (error instanceof Error) {
+        if (error.name === "AbortError") {
+          throw new OrcaRailError(
+            `Request timeout after ${this.timeout}ms`
+          );
+        }
+        throw new OrcaRailError(`Request failed: ${error.message}`);
+      }
+      throw new OrcaRailError("An unknown error occurred");
+    }
+  }
+  /**
+   * GET request
+   */
+  async get(path, requireAuth = true) {
+    return this.request("GET", path, void 0, requireAuth);
+  }
+  /**
+   * POST request
+   */
+  async post(path, body, requireAuth = true) {
+    return this.request("POST", path, body, requireAuth);
+  }
+  /**
+   * PATCH request
+   */
+  async patch(path, body, requireAuth = true) {
+    return this.request("PATCH", path, body, requireAuth);
+  }
+  /**
+   * PUT request
+   */
+  async put(path, body, requireAuth = true) {
+    return this.request("PUT", path, body, requireAuth);
+  }
+  /**
+   * DELETE request
+   */
+  async delete(path, requireAuth = true) {
+    return this.request("DELETE", path, void 0, requireAuth);
+  }
+};
+
+// src/resources/checkout.ts
+var Checkout = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /**
+   * Get checkout details by slug
+   *
+   * @param slug - Checkout slug from the payment link URL
+   * @returns Checkout details including payment intent
+   */
+  async get(slug) {
+    const path = `checkout/${encodeURIComponent(slug)}`;
+    return this.client.get(path, true);
+  }
+  /**
+   * Cancel payment intent by checkout slug
+   *
+   * @param slug - Checkout slug from the payment link URL
+   * @returns The canceled payment intent and optional cancel_url for redirect
+   */
+  async cancel(slug) {
+    const path = `checkout/${encodeURIComponent(slug)}/cancel`;
+    return this.client.post(path, {}, true);
+  }
+};
+
+// src/resources/payment-intents.ts
+var PaymentIntents = class {
+  client;
+  constructor(client) {
+    this.client = client;
+  }
+  /**
+   * Create a new Payment Intent
+   *
+   * @param params - Payment Intent creation parameters
+   * @returns The created Payment Intent
+   */
+  async create(params) {
+    const requestBody = {
+      ...params,
+      payment_method_types: params.payment_method_types && params.payment_method_types.length > 0 ? params.payment_method_types : ["crypto"]
+    };
+    return this.client.post(
+      "payment_intents",
+      requestBody,
+      true
+    );
+  }
+  /**
+   * Retrieve a Payment Intent by ID
+   *
+   * @param id - Payment Intent ID (e.g., "pi_1234567890")
+   * @returns The Payment Intent
+   */
+  async retrieve(id) {
+    const cleanId = id.startsWith("pi_") ? id : `pi_${id}`;
+    const path = `payment_intents/${cleanId}`;
+    return this.client.get(path, true);
+  }
+  /**
+   * Cancel a Payment Intent (API: POST /payment_intents/:id/cancel).
+   * Use when the user is redirected to your cancel_url (e.g. https://yourapp.com/cancel?payment_intent=pi_20)
+   * and you want to mark the intent as canceled on the backend.
+   *
+   * @param id - Payment Intent ID (e.g. "pi_20" or "20")
+   * @returns The canceled Payment Intent
+   *
+   * @example
+   * // When user lands on https://localhost:3001/cancel?payment_intent=pi_20
+   * const intent = await orcarail.paymentIntents.cancel('pi_20');
+   */
+  async cancel(id) {
+    const cleanId = id.startsWith("pi_") ? id : `pi_${id}`;
+    const path = `payment_intents/${cleanId}/cancel`;
+    return this.client.post(path, {}, true);
+  }
+  /**
+   * Confirm a Payment Intent (API: POST /payment_intents/:id/confirm).
+   * Redirects the customer to the hosted checkout page.
+   *
+   * @param id - Payment Intent ID (e.g. "pi_20" or "20")
+   * @param params - Confirmation parameters including client_secret and return_url
+   * @returns The confirmed Payment Intent
+   *
+   * @example
+   * const intent = await orcarail.paymentIntents.confirm('pi_20', {
+   *   client_secret: intent.client_secret,
+   *   return_url: 'https://yourapp.com/return',
+   * });
+   */
+  async confirm(id, params) {
+    const cleanId = id.startsWith("pi_") ? id : `pi_${id}`;
+    const path = `payment_intents/${cleanId}/confirm`;
+    return this.client.post(path, params, false);
+  }
+  /**
+   * Complete a Payment Intent (API: POST /payment_intents/:id/complete).
+   * Sets the intent to processing and fires the payment_intent.processing webhook.
+   * Use when the user is redirected to your success/return URL (e.g. https://yourapp.com/success?payment_intent=pi_34).
+   *
+   * @param id - Payment Intent ID (e.g. "pi_34" or "34")
+   * @returns The updated Payment Intent (status processing)
+   *
+   * @example
+   * // When user lands on https://localhost:3001/success?payment_intent=pi_34
+   * const intent = await orcarail.paymentIntents.complete('pi_34');
+   */
+  async complete(id) {
+    const cleanId = id.startsWith("pi_") ? id : `pi_${id}`;
+    const path = `payment_intents/${cleanId}/complete`;
+    return this.client.post(path, {}, true);
+  }
+  /**
+   * Update a Payment Intent
+   *
+   * @param id - Payment Intent ID
+   * @param params - Update parameters (all optional)
+   * @returns The updated Payment Intent
+   */
+  async update(id, params) {
+    const cleanId = id.startsWith("pi_") ? id : `pi_${id}`;
+    const path = `payment_intents/${cleanId}`;
+    return this.client.patch(path, params, true);
+  }
+};
+var Webhooks = class {
+  /**
+   * Verify webhook signature
+   *
+   * @param rawBody - Raw request body (string or Buffer)
+   * @param signature - Signature from x-webhook-signature header
+   * @param secret - Webhook secret (API key's secretHash)
+   * @returns True if signature is valid, false otherwise
+   */
+  verifySignature(rawBody, signature, secret) {
+    if (!signature || !secret) {
+      return false;
+    }
+    const bodyString = typeof rawBody === "string" ? rawBody : rawBody.toString("utf8");
+    const expectedSignature = createHmac("sha256", secret).update(bodyString).digest("hex");
+    const signatureBuffer = Buffer.from(signature, "hex");
+    const expectedBuffer = Buffer.from(expectedSignature, "hex");
+    if (signatureBuffer.length !== expectedBuffer.length) {
+      return false;
+    }
+    return timingSafeEqual(signatureBuffer, expectedBuffer);
+  }
+  /**
+   * Construct and verify a webhook event from raw body and signature
+   *
+   * @param rawBody - Raw request body (string or Buffer)
+   * @param signature - Signature from x-webhook-signature header
+   * @param secret - Webhook secret (API key's secretHash)
+   * @returns Parsed webhook event
+   * @throws OrcaRailSignatureVerificationError if signature is invalid
+   */
+  constructEvent(rawBody, signature, secret) {
+    if (!this.verifySignature(rawBody, signature, secret)) {
+      throw new OrcaRailSignatureVerificationError(
+        "Webhook signature verification failed. The signature does not match the expected signature.",
+        signature
+      );
+    }
+    const bodyString = typeof rawBody === "string" ? rawBody : rawBody.toString("utf8");
+    try {
+      const event = JSON.parse(bodyString);
+      return event;
+    } catch (error) {
+      throw new OrcaRailSignatureVerificationError(
+        `Failed to parse webhook body: ${error instanceof Error ? error.message : "Unknown error"}`
+      );
+    }
+  }
+};
+
+// src/index.ts
+var OrcaRail = class {
+  /**
+   * Payment Intents resource
+   */
+  paymentIntents;
+  /**
+   * Checkout resource (slug-based get/cancel)
+   */
+  checkout;
+  /**
+   * Webhooks utilities
+   */
+  webhooks;
+  client;
+  /**
+   * Create a new OrcaRail client instance
+   *
+   * @param apiKey - Your OrcaRail API key (e.g., "ak_live_xxx")
+   * @param apiSecret - Your OrcaRail API secret (e.g., "sk_live_xxx")
+   * @param config - Optional configuration
+   */
+  constructor(apiKey, apiSecret, config) {
+    this.client = new HttpClient(apiKey, apiSecret, config);
+    this.paymentIntents = new PaymentIntents(this.client);
+    this.checkout = new Checkout(this.client);
+    this.webhooks = new Webhooks();
+  }
+};
+var index_default = OrcaRail;
+
+export { OrcaRail, OrcaRailAPIError, OrcaRailAuthenticationError, OrcaRailError, OrcaRailSignatureVerificationError, index_default as default };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/client.ts","../src/resources/checkout.ts","../src/resources/payment-intents.ts","../src/webhooks.ts","../src/index.ts"],"names":[],"mappings":";;;AAGO,IAAM,aAAA,GAAN,cAA4B,KAAA,CAAM;AAAA,EACvC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,eAAA;AACZ,IAAA,KAAA,CAAM,iBAAA,CAAkB,IAAA,EAAM,IAAA,CAAK,WAAW,CAAA;AAAA,EAChD;AACF;AAKO,IAAM,gBAAA,GAAN,cAA+B,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA,EAIlC,UAAA;AAAA;AAAA;AAAA;AAAA,EAKA,IAAA;AAAA;AAAA;AAAA;AAAA,EAKA,OAAA;AAAA,EAEhB,WAAA,CACE,OAAA,EACA,UAAA,EACA,IAAA,EACA,OAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AACZ,IAAA,IAAA,CAAK,UAAA,GAAa,UAAA;AAClB,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AACZ,IAAA,IAAA,CAAK,OAAA,GAAU,OAAA;AAAA,EACjB;AACF;AAKO,IAAM,2BAAA,GAAN,cAA0C,gBAAA,CAAiB;AAAA,EAChE,WAAA,CAAY,UAAkB,8DAAA,EAAgE;AAC5F,IAAA,KAAA,CAAM,OAAA,EAAS,KAAK,sBAAsB,CAAA;AAC1C,IAAA,IAAA,CAAK,IAAA,GAAO,6BAAA;AAAA,EACd;AACF;AAKO,IAAM,kCAAA,GAAN,cAAiD,aAAA,CAAc;AAAA;AAAA;AAAA;AAAA,EAIpD,SAAA;AAAA,EAEhB,WAAA,CACE,OAAA,GAAkB,uCAAA,EAClB,SAAA,EACA;AACA,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,oCAAA;AACZ,IAAA,IAAA,CAAK,YAAY,SAAA,IAAa,EAAA;AAAA,EAChC;AACF;;;AChEA,IAAM,gBAAA,GAAmB,iCAAA;AACzB,IAAM,eAAA,GAAkB,GAAA;AACxB,IAAM,WAAA,GAAc,OAAA;AAKb,IAAM,aAAN,MAAiB;AAAA,EACL,MAAA;AAAA,EACA,SAAA;AAAA,EACA,OAAA;AAAA,EACA,OAAA;AAAA,EAEjB,WAAA,CAAY,MAAA,EAAgB,SAAA,EAAmB,MAAA,EAAyB;AACtE,IAAA,IAAI,CAAC,MAAA,IAAU,CAAC,SAAA,EAAW;AACzB,MAAA,MAAM,IAAI,cAAc,iCAAiC,CAAA;AAAA,IAC3D;AAEA,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,gBAAA;AAClC,IAAA,IAAA,CAAK,OAAA,GAAU,QAAQ,OAAA,IAAW,eAAA;AAAA,EACpC;AAAA;AAAA;AAAA;AAAA,EAKQ,aAAA,GAAwB;AAC9B,IAAA,MAAM,WAAA,GAAc,MAAA,CAAO,IAAA,CAAK,CAAA,EAAG,IAAA,CAAK,MAAM,CAAA,CAAA,EAAI,IAAA,CAAK,SAAS,CAAA,CAAE,CAAA,CAAE,QAAA;AAAA,MAClE;AAAA,KACF;AACA,IAAA,OAAO,SAAS,WAAW,CAAA,CAAA;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKQ,SAAS,IAAA,EAAsB;AAErC,IAAA,MAAM,SAAA,GAAY,KAAK,UAAA,CAAW,GAAG,IAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,GAAI,IAAA;AACzD,IAAA,OAAO,CAAA,EAAG,IAAA,CAAK,OAAO,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA;AAAA,EACrC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,OAAA,CACZ,MAAA,EACA,IAAA,EACA,IAAA,EACA,cAAuB,IAAA,EACX;AACZ,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA;AAC9B,IAAA,MAAM,OAAA,GAAkC;AAAA,MACtC,cAAA,EAAgB,kBAAA;AAAA,MAChB,YAAA,EAAc,iBAAiB,WAAW,CAAA;AAAA,KAC5C;AAEA,IAAA,IAAI,WAAA,EAAa;AACf,MAAA,OAAA,CAAQ,eAAe,CAAA,GAAI,IAAA,CAAK,aAAA,EAAc;AAAA,IAChD;AAEA,IAAA,MAAM,OAAA,GAAuB;AAAA,MAC3B,MAAA;AAAA,MACA;AAAA,KACF;AAEA,IAAA,IAAI,IAAA,EAAM;AACR,MAAA,OAAA,CAAQ,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAI,CAAA;AAAA,IACpC;AAGA,IAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,IAAA,MAAM,YAAY,UAAA,CAAW,MAAM,WAAW,KAAA,EAAM,EAAG,KAAK,OAAO,CAAA;AACnE,IAAA,OAAA,CAAQ,SAAS,UAAA,CAAW,MAAA;AAE5B,IAAA,IAAI;AACF,MAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,OAAO,CAAA;AACzC,MAAA,YAAA,CAAa,SAAS,CAAA;AAGtB,MAAA,IAAI,YAAA;AACJ,MAAA,MAAM,WAAA,GAAc,QAAA,CAAS,OAAA,CAAQ,GAAA,CAAI,cAAc,CAAA;AACvD,MAAA,IAAI,WAAA,IAAe,WAAA,CAAY,QAAA,CAAS,kBAAkB,CAAA,EAAG;AAC3D,QAAA,YAAA,GAAe,MAAM,SAAS,IAAA,EAAK;AAAA,MACrC,CAAA,MAAO;AACL,QAAA,YAAA,GAAe,MAAM,SAAS,IAAA,EAAK;AAAA,MACrC;AAGA,MAAA,IAAI,CAAC,SAAS,EAAA,EAAI;AAChB,QAAA,MAAM,YAAA,GACJ,OAAO,YAAA,KAAiB,QAAA,IACxB,iBAAiB,IAAA,IACjB,SAAA,IAAa,YAAA,GACT,MAAA,CAAQ,YAAA,CAAsC,OAAO,CAAA,GACrD,CAAA,+BAAA,EAAkC,SAAS,MAAM,CAAA,CAAA;AAEvD,QAAA,MAAM,SAAA,GACJ,OAAO,YAAA,KAAiB,QAAA,IACxB,YAAA,KAAiB,IAAA,IACjB,OAAA,IAAW,YAAA,GACP,MAAA,CAAQ,YAAA,CAAoC,KAAK,CAAA,GACjD,KAAA,CAAA;AAEN,QAAA,IAAI,QAAA,CAAS,WAAW,GAAA,EAAK;AAC3B,UAAA,MAAM,IAAI,4BAA4B,YAAY,CAAA;AAAA,QACpD;AAEA,QAAA,MAAM,IAAI,gBAAA;AAAA,UACR,YAAA;AAAA,UACA,QAAA,CAAS,MAAA;AAAA,UACT,SAAA;AAAA,UACA;AAAA,SACF;AAAA,MACF;AAEA,MAAA,OAAO,YAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,YAAA,CAAa,SAAS,CAAA;AAEtB,MAAA,IAAI,iBAAiB,aAAA,EAAe;AAClC,QAAA,MAAM,KAAA;AAAA,MACR;AAEA,MAAA,IAAI,iBAAiB,KAAA,EAAO;AAC1B,QAAA,IAAI,KAAA,CAAM,SAAS,YAAA,EAAc;AAC/B,UAAA,MAAM,IAAI,aAAA;AAAA,YACR,CAAA,sBAAA,EAAyB,KAAK,OAAO,CAAA,EAAA;AAAA,WACvC;AAAA,QACF;AACA,QAAA,MAAM,IAAI,aAAA,CAAc,CAAA,gBAAA,EAAmB,KAAA,CAAM,OAAO,CAAA,CAAE,CAAA;AAAA,MAC5D;AAEA,MAAA,MAAM,IAAI,cAAc,2BAA2B,CAAA;AAAA,IACrD;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,GAAA,CAAO,IAAA,EAAc,WAAA,GAAuB,IAAA,EAAkB;AACzE,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,QAAW,WAAW,CAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,IAAA,CACX,IAAA,EACA,IAAA,EACA,cAAuB,IAAA,EACX;AACZ,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,MAAA,EAAQ,IAAA,EAAM,MAAM,WAAW,CAAA;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,KAAA,CACX,IAAA,EACA,IAAA,EACA,cAAuB,IAAA,EACX;AACZ,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,OAAA,EAAS,IAAA,EAAM,MAAM,WAAW,CAAA;AAAA,EACzD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,GAAA,CACX,IAAA,EACA,IAAA,EACA,cAAuB,IAAA,EACX;AACZ,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,KAAA,EAAO,IAAA,EAAM,MAAM,WAAW,CAAA;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA,EAKA,MAAa,MAAA,CACX,IAAA,EACA,WAAA,GAAuB,IAAA,EACX;AACZ,IAAA,OAAO,IAAA,CAAK,OAAA,CAAW,QAAA,EAAU,IAAA,EAAM,QAAW,WAAW,CAAA;AAAA,EAC/D;AACF,CAAA;;;AC5LO,IAAM,WAAN,MAAe;AAAA,EACH,MAAA;AAAA,EAEjB,YAAY,MAAA,EAAoB;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,IAAI,IAAA,EAAgE;AAC/E,IAAA,MAAM,IAAA,GAAO,CAAA,SAAA,EAAY,kBAAA,CAAmB,IAAI,CAAC,CAAA,CAAA;AACjD,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAA6C,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5E;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,OAAO,IAAA,EAAgE;AAClF,IAAA,MAAM,IAAA,GAAO,CAAA,SAAA,EAAY,kBAAA,CAAmB,IAAI,CAAC,CAAA,OAAA,CAAA;AACjD,IAAA,OAAO,KAAK,MAAA,CAAO,IAAA,CAA8C,IAAA,EAAM,IAAI,IAAI,CAAA;AAAA,EACjF;AACF,CAAA;;;ACvBO,IAAM,iBAAN,MAAqB;AAAA,EACT,MAAA;AAAA,EAEjB,YAAY,MAAA,EAAoB;AAC9B,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,OACX,MAAA,EACwB;AAExB,IAAA,MAAM,WAAA,GAAc;AAAA,MAClB,GAAG,MAAA;AAAA,MACH,oBAAA,EACE,MAAA,CAAO,oBAAA,IAAwB,MAAA,CAAO,oBAAA,CAAqB,SAAS,CAAA,GAChE,MAAA,CAAO,oBAAA,GACP,CAAC,QAAQ;AAAA,KACjB;AAEA,IAAA,OAAO,KAAK,MAAA,CAAO,IAAA;AAAA,MACjB,iBAAA;AAAA,MACA,WAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAa,SAAS,EAAA,EAAoC;AACxD,IAAA,MAAM,UAAU,EAAA,CAAG,UAAA,CAAW,KAAK,CAAA,GAAI,EAAA,GAAK,MAAM,EAAE,CAAA,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,mBAAmB,OAAO,CAAA,CAAA;AAEvC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,GAAA,CAAmB,IAAA,EAAM,IAAI,CAAA;AAAA,EAClD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAa,OAAO,EAAA,EAAoC;AACtD,IAAA,MAAM,UAAU,EAAA,CAAG,UAAA,CAAW,KAAK,CAAA,GAAI,EAAA,GAAK,MAAM,EAAE,CAAA,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,mBAAmB,OAAO,CAAA,OAAA,CAAA;AAEvC,IAAA,OAAO,KAAK,MAAA,CAAO,IAAA,CAAoB,IAAA,EAAM,IAAI,IAAI,CAAA;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAgBA,MAAa,OAAA,CACX,EAAA,EACA,MAAA,EACwB;AACxB,IAAA,MAAM,UAAU,EAAA,CAAG,UAAA,CAAW,KAAK,CAAA,GAAI,EAAA,GAAK,MAAM,EAAE,CAAA,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,mBAAmB,OAAO,CAAA,QAAA,CAAA;AAEvC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,IAAA,CAAoB,IAAA,EAAM,QAAQ,KAAK,CAAA;AAAA,EAC5D;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAcA,MAAa,SAAS,EAAA,EAAoC;AACxD,IAAA,MAAM,UAAU,EAAA,CAAG,UAAA,CAAW,KAAK,CAAA,GAAI,EAAA,GAAK,MAAM,EAAE,CAAA,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,mBAAmB,OAAO,CAAA,SAAA,CAAA;AAEvC,IAAA,OAAO,KAAK,MAAA,CAAO,IAAA,CAAoB,IAAA,EAAM,IAAI,IAAI,CAAA;AAAA,EACvD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,MAAa,MAAA,CACX,EAAA,EACA,MAAA,EACwB;AACxB,IAAA,MAAM,UAAU,EAAA,CAAG,UAAA,CAAW,KAAK,CAAA,GAAI,EAAA,GAAK,MAAM,EAAE,CAAA,CAAA;AACpD,IAAA,MAAM,IAAA,GAAO,mBAAmB,OAAO,CAAA,CAAA;AAEvC,IAAA,OAAO,IAAA,CAAK,MAAA,CAAO,KAAA,CAAqB,IAAA,EAAM,QAAQ,IAAI,CAAA;AAAA,EAC5D;AACF,CAAA;AC/HO,IAAM,WAAN,MAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASb,eAAA,CACL,OAAA,EACA,SAAA,EACA,MAAA,EACS;AACT,IAAA,IAAI,CAAC,SAAA,IAAa,CAAC,MAAA,EAAQ;AACzB,MAAA,OAAO,KAAA;AAAA,IACT;AAGA,IAAA,MAAM,aACJ,OAAO,OAAA,KAAY,WAAW,OAAA,GAAU,OAAA,CAAQ,SAAS,MAAM,CAAA;AAGjE,IAAA,MAAM,iBAAA,GAAoB,WAAW,QAAA,EAAU,MAAM,EAClD,MAAA,CAAO,UAAU,CAAA,CACjB,MAAA,CAAO,KAAK,CAAA;AAGf,IAAA,MAAM,eAAA,GAAkB,MAAA,CAAO,IAAA,CAAK,SAAA,EAAW,KAAK,CAAA;AACpD,IAAA,MAAM,cAAA,GAAiB,MAAA,CAAO,IAAA,CAAK,iBAAA,EAAmB,KAAK,CAAA;AAG3D,IAAA,IAAI,eAAA,CAAgB,MAAA,KAAW,cAAA,CAAe,MAAA,EAAQ;AACpD,MAAA,OAAO,KAAA;AAAA,IACT;AAEA,IAAA,OAAO,eAAA,CAAgB,iBAAiB,cAAc,CAAA;AAAA,EACxD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWO,cAAA,CACL,OAAA,EACA,SAAA,EACA,MAAA,EACc;AACd,IAAA,IAAI,CAAC,IAAA,CAAK,eAAA,CAAgB,OAAA,EAAS,SAAA,EAAW,MAAM,CAAA,EAAG;AACrD,MAAA,MAAM,IAAI,kCAAA;AAAA,QACR,6FAAA;AAAA,QACA;AAAA,OACF;AAAA,IACF;AAGA,IAAA,MAAM,aACJ,OAAO,OAAA,KAAY,WAAW,OAAA,GAAU,OAAA,CAAQ,SAAS,MAAM,CAAA;AAEjE,IAAA,IAAI;AACF,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,UAAU,CAAA;AACnC,MAAA,OAAO,KAAA;AAAA,IACT,SAAS,KAAA,EAAO;AACd,MAAA,MAAM,IAAI,kCAAA;AAAA,QACR,CAAA,8BAAA,EAAiC,KAAA,YAAiB,KAAA,GAAQ,KAAA,CAAM,UAAU,eAAe,CAAA;AAAA,OAC3F;AAAA,IACF;AAAA,EACF;AACF,CAAA;;;AChCO,IAAM,WAAN,MAAe;AAAA;AAAA;AAAA;AAAA,EAIJ,cAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA;AAAA;AAAA;AAAA;AAAA,EAKA,QAAA;AAAA,EAEC,MAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASjB,WAAA,CACE,MAAA,EACA,SAAA,EACA,MAAA,EACA;AACA,IAAA,IAAA,CAAK,MAAA,GAAS,IAAI,UAAA,CAAW,MAAA,EAAQ,WAAW,MAAM,CAAA;AACtD,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAI,cAAA,CAAe,IAAA,CAAK,MAAM,CAAA;AACpD,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,CAAS,IAAA,CAAK,MAAM,CAAA;AACxC,IAAA,IAAA,CAAK,QAAA,GAAW,IAAI,QAAA,EAAS;AAAA,EAC/B;AACF;AAEA,IAAO,aAAA,GAAQ","file":"index.js","sourcesContent":["/**\n * Base error class for all OrcaRail errors\n */\nexport class OrcaRailError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'OrcaRailError';\n    Error.captureStackTrace(this, this.constructor);\n  }\n}\n\n/**\n * Error thrown when the API returns a non-2xx status code\n */\nexport class OrcaRailAPIError extends OrcaRailError {\n  /**\n   * HTTP status code\n   */\n  public readonly statusCode: number;\n\n  /**\n   * Error type from the API response\n   */\n  public readonly type?: string;\n\n  /**\n   * Additional error details from the API\n   */\n  public readonly details?: unknown;\n\n  constructor(\n    message: string,\n    statusCode: number,\n    type?: string,\n    details?: unknown\n  ) {\n    super(message);\n    this.name = 'OrcaRailAPIError';\n    this.statusCode = statusCode;\n    this.type = type;\n    this.details = details;\n  }\n}\n\n/**\n * Error thrown when authentication fails (401)\n */\nexport class OrcaRailAuthenticationError extends OrcaRailAPIError {\n  constructor(message: string = 'Authentication failed. Please check your API key and secret.') {\n    super(message, 401, 'authentication_error');\n    this.name = 'OrcaRailAuthenticationError';\n  }\n}\n\n/**\n * Error thrown when webhook signature verification fails\n */\nexport class OrcaRailSignatureVerificationError extends OrcaRailError {\n  /**\n   * The signature that was provided\n   */\n  public readonly signature: string;\n\n  constructor(\n    message: string = 'Webhook signature verification failed',\n    signature?: string\n  ) {\n    super(message);\n    this.name = 'OrcaRailSignatureVerificationError';\n    this.signature = signature || '';\n  }\n}\n","import {\n  OrcaRailAPIError,\n  OrcaRailAuthenticationError,\n  OrcaRailError,\n} from './errors';\nimport type { OrcaRailConfig } from './types';\n\nconst DEFAULT_BASE_URL = 'https://api.orcarail.com/api/v1';\nconst DEFAULT_TIMEOUT = 30000;\nconst SDK_VERSION = '1.0.0';\n\n/**\n * HTTP client for making requests to the OrcaRail API\n */\nexport class HttpClient {\n  private readonly apiKey: string;\n  private readonly apiSecret: string;\n  private readonly baseUrl: string;\n  private readonly timeout: number;\n\n  constructor(apiKey: string, apiSecret: string, config?: OrcaRailConfig) {\n    if (!apiKey || !apiSecret) {\n      throw new OrcaRailError('API key and secret are required');\n    }\n\n    this.apiKey = apiKey;\n    this.apiSecret = apiSecret;\n    this.baseUrl = config?.baseUrl || DEFAULT_BASE_URL;\n    this.timeout = config?.timeout || DEFAULT_TIMEOUT;\n  }\n\n  /**\n   * Create Basic Auth header from API key and secret\n   */\n  private getAuthHeader(): string {\n    const credentials = Buffer.from(`${this.apiKey}:${this.apiSecret}`).toString(\n      'base64'\n    );\n    return `Basic ${credentials}`;\n  }\n\n  /**\n   * Build full URL from path\n   */\n  private buildUrl(path: string): string {\n    // Remove leading slash if present\n    const cleanPath = path.startsWith('/') ? path.slice(1) : path;\n    return `${this.baseUrl}/${cleanPath}`;\n  }\n\n  /**\n   * Make an HTTP request with timeout and error handling\n   */\n  private async request<T>(\n    method: string,\n    path: string,\n    body?: unknown,\n    requireAuth: boolean = true\n  ): Promise<T> {\n    const url = this.buildUrl(path);\n    const headers: Record<string, string> = {\n      'Content-Type': 'application/json',\n      'User-Agent': `orcarail-node/${SDK_VERSION}`,\n    };\n\n    if (requireAuth) {\n      headers['Authorization'] = this.getAuthHeader();\n    }\n\n    const options: RequestInit = {\n      method,\n      headers,\n    };\n\n    if (body) {\n      options.body = JSON.stringify(body);\n    }\n\n    // Create AbortController for timeout\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), this.timeout);\n    options.signal = controller.signal;\n\n    try {\n      const response = await fetch(url, options);\n      clearTimeout(timeoutId);\n\n      // Parse response body\n      let responseData: unknown;\n      const contentType = response.headers.get('content-type');\n      if (contentType && contentType.includes('application/json')) {\n        responseData = await response.json();\n      } else {\n        responseData = await response.text();\n      }\n\n      // Handle non-2xx responses\n      if (!response.ok) {\n        const errorMessage =\n          typeof responseData === 'object' &&\n          responseData !== null &&\n          'message' in responseData\n            ? String((responseData as { message: unknown }).message)\n            : `API request failed with status ${response.status}`;\n\n        const errorType =\n          typeof responseData === 'object' &&\n          responseData !== null &&\n          'error' in responseData\n            ? String((responseData as { error: unknown }).error)\n            : undefined;\n\n        if (response.status === 401) {\n          throw new OrcaRailAuthenticationError(errorMessage);\n        }\n\n        throw new OrcaRailAPIError(\n          errorMessage,\n          response.status,\n          errorType,\n          responseData\n        );\n      }\n\n      return responseData as T;\n    } catch (error) {\n      clearTimeout(timeoutId);\n\n      if (error instanceof OrcaRailError) {\n        throw error;\n      }\n\n      if (error instanceof Error) {\n        if (error.name === 'AbortError') {\n          throw new OrcaRailError(\n            `Request timeout after ${this.timeout}ms`\n          );\n        }\n        throw new OrcaRailError(`Request failed: ${error.message}`);\n      }\n\n      throw new OrcaRailError('An unknown error occurred');\n    }\n  }\n\n  /**\n   * GET request\n   */\n  public async get<T>(path: string, requireAuth: boolean = true): Promise<T> {\n    return this.request<T>('GET', path, undefined, requireAuth);\n  }\n\n  /**\n   * POST request\n   */\n  public async post<T>(\n    path: string,\n    body?: unknown,\n    requireAuth: boolean = true\n  ): Promise<T> {\n    return this.request<T>('POST', path, body, requireAuth);\n  }\n\n  /**\n   * PATCH request\n   */\n  public async patch<T>(\n    path: string,\n    body?: unknown,\n    requireAuth: boolean = true\n  ): Promise<T> {\n    return this.request<T>('PATCH', path, body, requireAuth);\n  }\n\n  /**\n   * PUT request\n   */\n  public async put<T>(\n    path: string,\n    body?: unknown,\n    requireAuth: boolean = true\n  ): Promise<T> {\n    return this.request<T>('PUT', path, body, requireAuth);\n  }\n\n  /**\n   * DELETE request\n   */\n  public async delete<T>(\n    path: string,\n    requireAuth: boolean = true\n  ): Promise<T> {\n    return this.request<T>('DELETE', path, undefined, requireAuth);\n  }\n}\n","import { HttpClient } from '../client';\nimport type { PaymentIntent } from '../types';\n\n/**\n * Checkout resource for slug-based checkout flows (public endpoints)\n */\nexport class Checkout {\n  private readonly client: HttpClient;\n\n  constructor(client: HttpClient) {\n    this.client = client;\n  }\n\n  /**\n   * Get checkout details by slug\n   *\n   * @param slug - Checkout slug from the payment link URL\n   * @returns Checkout details including payment intent\n   */\n  public async get(slug: string): Promise<PaymentIntent & Record<string, unknown>> {\n    const path = `checkout/${encodeURIComponent(slug)}`;\n    return this.client.get<PaymentIntent & Record<string, unknown>>(path, true);\n  }\n\n  /**\n   * Cancel payment intent by checkout slug\n   *\n   * @param slug - Checkout slug from the payment link URL\n   * @returns The canceled payment intent and optional cancel_url for redirect\n   */\n  public async cancel(slug: string): Promise<PaymentIntent & { cancel_url?: string }> {\n    const path = `checkout/${encodeURIComponent(slug)}/cancel`;\n    return this.client.post<PaymentIntent & { cancel_url?: string }>(path, {}, true);\n  }\n}\n","import { HttpClient } from '../client';\nimport type {\n  PaymentIntent,\n  PaymentIntentConfirmParams,\n  PaymentIntentCreateParams,\n  PaymentIntentUpdateParams,\n} from '../types';\n\n/**\n * Payment Intents resource for managing payment intents\n */\nexport class PaymentIntents {\n  private readonly client: HttpClient;\n\n  constructor(client: HttpClient) {\n    this.client = client;\n  }\n\n  /**\n   * Create a new Payment Intent\n   *\n   * @param params - Payment Intent creation parameters\n   * @returns The created Payment Intent\n   */\n  public async create(\n    params: PaymentIntentCreateParams\n  ): Promise<PaymentIntent> {\n    // Ensure payment_method_types defaults to ['crypto'] if empty\n    const requestBody = {\n      ...params,\n      payment_method_types:\n        params.payment_method_types && params.payment_method_types.length > 0\n          ? params.payment_method_types\n          : ['crypto'],\n    };\n\n    return this.client.post<PaymentIntent>(\n      'payment_intents',\n      requestBody,\n      true\n    );\n  }\n\n  /**\n   * Retrieve a Payment Intent by ID\n   *\n   * @param id - Payment Intent ID (e.g., \"pi_1234567890\")\n   * @returns The Payment Intent\n   */\n  public async retrieve(id: string): Promise<PaymentIntent> {\n    const cleanId = id.startsWith('pi_') ? id : `pi_${id}`;\n    const path = `payment_intents/${cleanId}`;\n\n    return this.client.get<PaymentIntent>(path, true);\n  }\n\n  /**\n   * Cancel a Payment Intent (API: POST /payment_intents/:id/cancel).\n   * Use when the user is redirected to your cancel_url (e.g. https://yourapp.com/cancel?payment_intent=pi_20)\n   * and you want to mark the intent as canceled on the backend.\n   *\n   * @param id - Payment Intent ID (e.g. \"pi_20\" or \"20\")\n   * @returns The canceled Payment Intent\n   *\n   * @example\n   * // When user lands on https://localhost:3001/cancel?payment_intent=pi_20\n   * const intent = await orcarail.paymentIntents.cancel('pi_20');\n   */\n  public async cancel(id: string): Promise<PaymentIntent> {\n    const cleanId = id.startsWith('pi_') ? id : `pi_${id}`;\n    const path = `payment_intents/${cleanId}/cancel`;\n\n    return this.client.post<PaymentIntent>(path, {}, true);\n  }\n\n  /**\n   * Confirm a Payment Intent (API: POST /payment_intents/:id/confirm).\n   * Redirects the customer to the hosted checkout page.\n   *\n   * @param id - Payment Intent ID (e.g. \"pi_20\" or \"20\")\n   * @param params - Confirmation parameters including client_secret and return_url\n   * @returns The confirmed Payment Intent\n   *\n   * @example\n   * const intent = await orcarail.paymentIntents.confirm('pi_20', {\n   *   client_secret: intent.client_secret,\n   *   return_url: 'https://yourapp.com/return',\n   * });\n   */\n  public async confirm(\n    id: string,\n    params: PaymentIntentConfirmParams\n  ): Promise<PaymentIntent> {\n    const cleanId = id.startsWith('pi_') ? id : `pi_${id}`;\n    const path = `payment_intents/${cleanId}/confirm`;\n\n    return this.client.post<PaymentIntent>(path, params, false);\n  }\n\n  /**\n   * Complete a Payment Intent (API: POST /payment_intents/:id/complete).\n   * Sets the intent to processing and fires the payment_intent.processing webhook.\n   * Use when the user is redirected to your success/return URL (e.g. https://yourapp.com/success?payment_intent=pi_34).\n   *\n   * @param id - Payment Intent ID (e.g. \"pi_34\" or \"34\")\n   * @returns The updated Payment Intent (status processing)\n   *\n   * @example\n   * // When user lands on https://localhost:3001/success?payment_intent=pi_34\n   * const intent = await orcarail.paymentIntents.complete('pi_34');\n   */\n  public async complete(id: string): Promise<PaymentIntent> {\n    const cleanId = id.startsWith('pi_') ? id : `pi_${id}`;\n    const path = `payment_intents/${cleanId}/complete`;\n\n    return this.client.post<PaymentIntent>(path, {}, true);\n  }\n\n  /**\n   * Update a Payment Intent\n   *\n   * @param id - Payment Intent ID\n   * @param params - Update parameters (all optional)\n   * @returns The updated Payment Intent\n   */\n  public async update(\n    id: string,\n    params: PaymentIntentUpdateParams\n  ): Promise<PaymentIntent> {\n    const cleanId = id.startsWith('pi_') ? id : `pi_${id}`;\n    const path = `payment_intents/${cleanId}`;\n\n    return this.client.patch<PaymentIntent>(path, params, true);\n  }\n}\n","import { createHmac, timingSafeEqual } from 'crypto';\nimport { OrcaRailSignatureVerificationError } from './errors';\nimport type { WebhookEvent } from './types';\n\n/**\n * Webhook utilities for verifying webhook signatures\n */\nexport class Webhooks {\n  /**\n   * Verify webhook signature\n   *\n   * @param rawBody - Raw request body (string or Buffer)\n   * @param signature - Signature from x-webhook-signature header\n   * @param secret - Webhook secret (API key's secretHash)\n   * @returns True if signature is valid, false otherwise\n   */\n  public verifySignature(\n    rawBody: string | Buffer,\n    signature: string,\n    secret: string\n  ): boolean {\n    if (!signature || !secret) {\n      return false;\n    }\n\n    // Convert rawBody to string if it's a Buffer\n    const bodyString =\n      typeof rawBody === 'string' ? rawBody : rawBody.toString('utf8');\n\n    // Compute expected signature\n    const expectedSignature = createHmac('sha256', secret)\n      .update(bodyString)\n      .digest('hex');\n\n    // Compare signatures using timing-safe comparison\n    const signatureBuffer = Buffer.from(signature, 'hex');\n    const expectedBuffer = Buffer.from(expectedSignature, 'hex');\n\n    // Length check first (prevents timing attacks)\n    if (signatureBuffer.length !== expectedBuffer.length) {\n      return false;\n    }\n\n    return timingSafeEqual(signatureBuffer, expectedBuffer);\n  }\n\n  /**\n   * Construct and verify a webhook event from raw body and signature\n   *\n   * @param rawBody - Raw request body (string or Buffer)\n   * @param signature - Signature from x-webhook-signature header\n   * @param secret - Webhook secret (API key's secretHash)\n   * @returns Parsed webhook event\n   * @throws OrcaRailSignatureVerificationError if signature is invalid\n   */\n  public constructEvent(\n    rawBody: string | Buffer,\n    signature: string,\n    secret: string\n  ): WebhookEvent {\n    if (!this.verifySignature(rawBody, signature, secret)) {\n      throw new OrcaRailSignatureVerificationError(\n        'Webhook signature verification failed. The signature does not match the expected signature.',\n        signature\n      );\n    }\n\n    // Parse JSON body\n    const bodyString =\n      typeof rawBody === 'string' ? rawBody : rawBody.toString('utf8');\n\n    try {\n      const event = JSON.parse(bodyString) as WebhookEvent;\n      return event;\n    } catch (error) {\n      throw new OrcaRailSignatureVerificationError(\n        `Failed to parse webhook body: ${error instanceof Error ? error.message : 'Unknown error'}`\n      );\n    }\n  }\n}\n","import { HttpClient } from './client';\nimport { Checkout } from './resources/checkout';\nimport { PaymentIntents } from './resources/payment-intents';\nimport { Webhooks } from './webhooks';\nimport type { OrcaRailConfig } from './types';\n\n// Re-export all types\nexport type {\n  OrcaRailConfig,\n  PaymentIntent,\n  PaymentIntentCreateParams,\n  PaymentIntentUpdateParams,\n  PaymentIntentConfirmParams,\n  PaymentLink,\n  LatestTransaction,\n  WebhookEvent,\n  WebhookEventType,\n  WebhookEventData,\n} from './types';\n\n// Re-export all errors\nexport {\n  OrcaRailError,\n  OrcaRailAPIError,\n  OrcaRailAuthenticationError,\n  OrcaRailSignatureVerificationError,\n} from './errors';\n\n/**\n * OrcaRail Node.js SDK\n *\n * @example\n * ```typescript\n * import OrcaRail from '@orcarail/node';\n *\n * const orcarail = new OrcaRail('ak_live_xxx', 'sk_live_xxx');\n *\n * // Create a payment intent\n * const intent = await orcarail.paymentIntents.create({\n *   amount: '100.00',\n *   currency: 'usd',\n *   payment_method_types: ['crypto'],\n *   tokenId: 1,\n *   networkId: 1,\n *   return_url: 'https://merchant.example.com/return',\n * });\n * ```\n */\nexport class OrcaRail {\n  /**\n   * Payment Intents resource\n   */\n  public readonly paymentIntents: PaymentIntents;\n\n  /**\n   * Checkout resource (slug-based get/cancel)\n   */\n  public readonly checkout: Checkout;\n\n  /**\n   * Webhooks utilities\n   */\n  public readonly webhooks: Webhooks;\n\n  private readonly client: HttpClient;\n\n  /**\n   * Create a new OrcaRail client instance\n   *\n   * @param apiKey - Your OrcaRail API key (e.g., \"ak_live_xxx\")\n   * @param apiSecret - Your OrcaRail API secret (e.g., \"sk_live_xxx\")\n   * @param config - Optional configuration\n   */\n  constructor(\n    apiKey: string,\n    apiSecret: string,\n    config?: OrcaRailConfig\n  ) {\n    this.client = new HttpClient(apiKey, apiSecret, config);\n    this.paymentIntents = new PaymentIntents(this.client);\n    this.checkout = new Checkout(this.client);\n    this.webhooks = new Webhooks();\n  }\n}\n\nexport default OrcaRail;\n"]}

package/package.json

@@ -0,0 +1,82 @@
+{
+  "name": "@orcarail/node",
+  "version": "1.0.1",
+  "description": "Official Node.js SDK for OrcaRail - Accept crypto payments with Payment Intents",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "dev": "tsup --watch",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src tests --ext .ts",
+    "format": "prettier --write \"src/**/*.ts\" \"tests/**/*.ts\"",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "orcarail",
+    "crypto",
+    "payments",
+    "payment-intents",
+    "webhooks",
+    "blockchain",
+    "stablecoin"
+  ],
+  "author": "OrcaRail",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/orcarail/orcarail-node.git"
+  },
+  "bugs": {
+    "url": "https://github.com/orcarail/orcarail-node/issues"
+  },
+  "homepage": "https://github.com/orcarail/orcarail-node#readme",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@typescript-eslint/eslint-plugin": "^6.0.0",
+    "@typescript-eslint/parser": "^6.0.0",
+    "eslint": "^8.0.0",
+    "prettier": "^3.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.0.0",
+    "vitest": "^1.0.0"
+  },
+  "peerDependencies": {
+    "@types/express": "^4.17.0",
+    "@types/node": "^18.0.0"
+  },
+  "peerDependenciesMeta": {
+    "@types/express": {
+      "optional": true
+    },
+    "@types/node": {
+      "optional": true
+    }
+  }
+}