@pagci/node 0.1.0

package/dist/cjs/client.d.ts

@@ -0,0 +1,65 @@
+import { PaymentsResource } from './resources/payments.js';
+import { WithdrawalsResource } from './resources/withdrawals.js';
+import { DebtsResource } from './resources/debts.js';
+import { BalanceResource } from './resources/balance.js';
+import { WebhookEndpointsResource } from './resources/webhookEndpoints.js';
+import { TokensResource } from './resources/tokens.js';
+export interface PagciConfig {
+    /** API base URL (default: 'https://api.pagci.com'). */
+    baseUrl?: string;
+    /** Maximum automatic retries on transient failures (default: 2). */
+    maxRetries?: number;
+    /** Default request timeout in ms (default: 30 000). */
+    timeout?: number;
+    /** Custom HTTP agent (e.g. for proxies or custom TLS). */
+    httpAgent?: unknown;
+}
+export interface WebhookEvent {
+    /** Verified, parsed webhook payload. */
+    payload: unknown;
+    /** Signature header value. */
+    signature: string;
+    /** Timestamp from the webhook header. */
+    timestamp: string;
+}
+/**
+ * Main entry point for the PAGCI Node.js SDK.
+ *
+ * ```ts
+ * const pagci = new Pagci('sk_live_...');
+ * const payment = await pagci.payments.create({ ... });
+ * ```
+ */
+export declare class Pagci {
+    private readonly _sender;
+    private readonly _crypto;
+    private _payments?;
+    get payments(): PaymentsResource;
+    private _withdrawals?;
+    get withdrawals(): WithdrawalsResource;
+    private _debts?;
+    get debts(): DebtsResource;
+    private _balance?;
+    get balance(): BalanceResource;
+    private _webhookEndpoints?;
+    get webhookEndpoints(): WebhookEndpointsResource;
+    private _tokens?;
+    get tokens(): TokensResource;
+    get webhooks(): {
+        /**
+         * Verify webhook signature and return the parsed event (sync).
+         *
+         * @param rawBody  - The raw request body as a string.
+         * @param signature - Value of the `X-Webhook-Signature` header.
+         * @param secret   - Your webhook signing secret (`whsec_...`).
+         * @param tolerance - Max age of the event in seconds (default 300 = 5 min).
+         */
+        constructEvent(rawBody: string, signature: string, secret: string, tolerance?: number): WebhookEvent;
+        /**
+         * Async variant of constructEvent (for future WebCrypto compat).
+         */
+        constructEventAsync(rawBody: string, signature: string, secret: string, tolerance?: number): Promise<WebhookEvent>;
+    };
+    constructor(apiKey: string, config?: PagciConfig);
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/cjs/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAIvD,MAAM,WAAW,WAAW;IAC1B,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAID,MAAM,WAAW,YAAY;IAC3B,wCAAwC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;CACnB;AAOD;;;;;;;GAOG;AACH,qBAAa,KAAK;IAChB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;IAIzC,OAAO,CAAC,SAAS,CAAC,CAAmB;IACrC,IAAI,QAAQ,IAAI,gBAAgB,CAE/B;IAED,OAAO,CAAC,YAAY,CAAC,CAAsB;IAC3C,IAAI,WAAW,IAAI,mBAAmB,CAErC;IAED,OAAO,CAAC,MAAM,CAAC,CAAgB;IAC/B,IAAI,KAAK,IAAI,aAAa,CAEzB;IAED,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,IAAI,OAAO,IAAI,eAAe,CAE7B;IAED,OAAO,CAAC,iBAAiB,CAAC,CAA2B;IACrD,IAAI,gBAAgB,IAAI,wBAAwB,CAI/C;IAED,OAAO,CAAC,OAAO,CAAC,CAAiB;IACjC,IAAI,MAAM,IAAI,cAAc,CAE3B;IAID,IAAI,QAAQ;QAIR;;;;;;;WAOG;gCAEQ,MAAM,aACJ,MAAM,UACT,MAAM,uBAEb,YAAY;QAIf;;WAEG;qCAEQ,MAAM,aACJ,MAAM,UACT,MAAM,uBAEb,OAAO,CAAC,YAAY,CAAC;MA0B3B;gBAIW,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW;CAwBjD"}

package/dist/cjs/client.js

@@ -0,0 +1,149 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Pagci = void 0;
+const NodeCryptoProvider_js_1 = require("./crypto/NodeCryptoProvider.js");
+const NodeHttpClient_js_1 = require("./net/NodeHttpClient.js");
+const requestSender_js_1 = require("./requestSender.js");
+const retry_js_1 = require("./retry.js");
+const errors_js_1 = require("./errors.js");
+// ── Resource classes ─────────────────────────────────────────────────
+const payments_js_1 = require("./resources/payments.js");
+const withdrawals_js_1 = require("./resources/withdrawals.js");
+const debts_js_1 = require("./resources/debts.js");
+const balance_js_1 = require("./resources/balance.js");
+const webhookEndpoints_js_1 = require("./resources/webhookEndpoints.js");
+const tokens_js_1 = require("./resources/tokens.js");
+// ── Client ───────────────────────────────────────────────────────────
+const DEFAULT_BASE_URL = 'https://api.pagci.com';
+const DEFAULT_TIMEOUT = 30_000;
+/**
+ * Main entry point for the PAGCI Node.js SDK.
+ *
+ * ```ts
+ * const pagci = new Pagci('sk_live_...');
+ * const payment = await pagci.payments.create({ ... });
+ * ```
+ */
+class Pagci {
+    _sender;
+    _crypto;
+    // ── Lazy resource singletons (Square / Fern pattern) ─────────────
+    _payments;
+    get payments() {
+        return (this._payments ??= new payments_js_1.PaymentsResource(this._sender));
+    }
+    _withdrawals;
+    get withdrawals() {
+        return (this._withdrawals ??= new withdrawals_js_1.WithdrawalsResource(this._sender));
+    }
+    _debts;
+    get debts() {
+        return (this._debts ??= new debts_js_1.DebtsResource(this._sender));
+    }
+    _balance;
+    get balance() {
+        return (this._balance ??= new balance_js_1.BalanceResource(this._sender));
+    }
+    _webhookEndpoints;
+    get webhookEndpoints() {
+        return (this._webhookEndpoints ??= new webhookEndpoints_js_1.WebhookEndpointsResource(this._sender));
+    }
+    _tokens;
+    get tokens() {
+        return (this._tokens ??= new tokens_js_1.TokensResource(this._sender));
+    }
+    // ── Webhook verification (utility, not a REST resource) ──────────
+    get webhooks() {
+        const crypto = this._crypto;
+        return {
+            /**
+             * Verify webhook signature and return the parsed event (sync).
+             *
+             * @param rawBody  - The raw request body as a string.
+             * @param signature - Value of the `X-Webhook-Signature` header.
+             * @param secret   - Your webhook signing secret (`whsec_...`).
+             * @param tolerance - Max age of the event in seconds (default 300 = 5 min).
+             */
+            constructEvent(rawBody, signature, secret, tolerance = 300) {
+                return verifyAndParse(crypto, rawBody, signature, secret, tolerance);
+            },
+            /**
+             * Async variant of constructEvent (for future WebCrypto compat).
+             */
+            async constructEventAsync(rawBody, signature, secret, tolerance = 300) {
+                // Parse header parts first (sync)
+                const { timestamp, sig } = parseSignatureHeader(signature);
+                // Verify age
+                assertTimestampWithinTolerance(timestamp, tolerance);
+                // Async HMAC
+                const expectedSig = await crypto.computeHmacSha256Async(secret, `${timestamp}.${rawBody}`);
+                if (!crypto.timingSafeEqual(sig, expectedSig)) {
+                    throw new errors_js_1.SignatureVerificationError('Webhook signature verification failed');
+                }
+                return {
+                    payload: JSON.parse(rawBody),
+                    signature: sig,
+                    timestamp,
+                };
+            },
+        };
+    }
+    // ── Constructor ──────────────────────────────────────────────────
+    constructor(apiKey, config) {
+        if (!apiKey || typeof apiKey !== 'string') {
+            throw new Error('API key is required. Pass it as the first argument: new Pagci("sk_live_...")');
+        }
+        const baseUrl = (config?.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, '');
+        const timeout = config?.timeout ?? DEFAULT_TIMEOUT;
+        const maxRetries = config?.maxRetries ?? retry_js_1.DEFAULT_RETRY_CONFIG.maxRetries;
+        const httpClient = new NodeHttpClient_js_1.NodeHttpClient(config?.httpAgent);
+        this._crypto = new NodeCryptoProvider_js_1.NodeCryptoProvider();
+        this._sender = new requestSender_js_1.RequestSender(apiKey, baseUrl, httpClient, { ...retry_js_1.DEFAULT_RETRY_CONFIG, maxRetries }, timeout);
+    }
+}
+exports.Pagci = Pagci;
+// ── Webhook verification internals ───────────────────────────────────
+/**
+ * Expected header format: `t=<unix_timestamp>,v1=<hex_signature>`
+ */
+function parseSignatureHeader(header) {
+    const parts = header.split(',');
+    let timestamp = '';
+    let sig = '';
+    for (const part of parts) {
+        const [key, value] = part.split('=', 2);
+        if (key === 't')
+            timestamp = value ?? '';
+        if (key === 'v1')
+            sig = value ?? '';
+    }
+    if (!timestamp || !sig) {
+        throw new errors_js_1.SignatureVerificationError('Invalid webhook signature header format. Expected "t=<timestamp>,v1=<signature>".');
+    }
+    return { timestamp, sig };
+}
+function assertTimestampWithinTolerance(timestamp, toleranceSeconds) {
+    const ts = Number(timestamp);
+    if (Number.isNaN(ts)) {
+        throw new errors_js_1.SignatureVerificationError('Invalid timestamp in webhook signature header.');
+    }
+    const age = Math.abs(Math.floor(Date.now() / 1000) - ts);
+    if (age > toleranceSeconds) {
+        throw new errors_js_1.SignatureVerificationError(`Webhook timestamp too old (${age}s > ${toleranceSeconds}s tolerance). ` +
+            'This may indicate a replay attack.');
+    }
+}
+function verifyAndParse(crypto, rawBody, signatureHeader, secret, tolerance) {
+    const { timestamp, sig } = parseSignatureHeader(signatureHeader);
+    assertTimestampWithinTolerance(timestamp, tolerance);
+    const expectedSig = crypto.computeHmacSha256(secret, `${timestamp}.${rawBody}`);
+    if (!crypto.timingSafeEqual(sig, expectedSig)) {
+        throw new errors_js_1.SignatureVerificationError('Webhook signature verification failed');
+    }
+    return {
+        payload: JSON.parse(rawBody),
+        signature: sig,
+        timestamp,
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/cjs/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":";;;AACA,0EAAoE;AAEpE,+DAAyD;AACzD,yDAAmD;AACnD,yCAAkD;AAClD,2CAAyD;AAEzD,wEAAwE;AACxE,yDAA2D;AAC3D,+DAAiE;AACjE,mDAAqD;AACrD,uDAAyD;AACzD,yEAA2E;AAC3E,qDAAuD;AA0BvD,wEAAwE;AAExE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAa,KAAK;IACC,OAAO,CAAgB;IACvB,OAAO,CAAiB;IAEzC,oEAAoE;IAE5D,SAAS,CAAoB;IACrC,IAAI,QAAQ;QACV,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,8BAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IAEO,YAAY,CAAuB;IAC3C,IAAI,WAAW;QACb,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,oCAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,MAAM,CAAiB;IAC/B,IAAI,KAAK;QACP,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,wBAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,QAAQ,CAAmB;IACnC,IAAI,OAAO;QACT,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,4BAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,iBAAiB,CAA4B;IACrD,IAAI,gBAAgB;QAClB,OAAO,CAAC,IAAI,CAAC,iBAAiB,KAAK,IAAI,8CAAwB,CAC7D,IAAI,CAAC,OAAO,CACb,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAkB;IACjC,IAAI,MAAM;QACR,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,0BAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,oEAAoE;IAEpE,IAAI,QAAQ;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5B,OAAO;YACL;;;;;;;eAOG;YACH,cAAc,CACZ,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,SAAS,GAAG,GAAG;gBAEf,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAED;;eAEG;YACH,KAAK,CAAC,mBAAmB,CACvB,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,SAAS,GAAG,GAAG;gBAEf,kCAAkC;gBAClC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;gBAE3D,aAAa;gBACb,8BAA8B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAErD,aAAa;gBACb,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,sBAAsB,CACrD,MAAM,EACN,GAAG,SAAS,IAAI,OAAO,EAAE,CAC1B,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,sCAA0B,CAClC,uCAAuC,CACxC,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC5B,SAAS,EAAE,GAAG;oBACd,SAAS;iBACV,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;IAED,oEAAoE;IAEpE,YAAY,MAAc,EAAE,MAAoB;QAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,+BAAoB,CAAC,UAAU,CAAC;QAEzE,MAAM,UAAU,GAAe,IAAI,kCAAc,CAC/C,MAAM,EAAE,SAAsB,CAC/B,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,0CAAkB,EAAE,CAAC;QAExC,IAAI,CAAC,OAAO,GAAG,IAAI,gCAAa,CAC9B,MAAM,EACN,OAAO,EACP,UAAU,EACV,EAAE,GAAG,+BAAoB,EAAE,UAAU,EAAE,EACvC,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AA3HD,sBA2HC;AAED,wEAAwE;AAExE;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAc;IAI1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;QACzC,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,sCAA0B,CAClC,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,8BAA8B,CACrC,SAAiB,EACjB,gBAAwB;IAExB,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,sCAA0B,CAClC,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC3B,MAAM,IAAI,sCAA0B,CAClC,8BAA8B,GAAG,OAAO,gBAAgB,gBAAgB;YACtE,oCAAoC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAAsB,EACtB,OAAe,EACf,eAAuB,EACvB,MAAc,EACd,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAEjE,8BAA8B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAErD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAC1C,MAAM,EACN,GAAG,SAAS,IAAI,OAAO,EAAE,CAC1B,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,sCAA0B,CAClC,uCAAuC,CACxC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,SAAS,EAAE,GAAG;QACd,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/cjs/crypto/CryptoProvider.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Abstract interface for cryptographic operations.
+ * Allows swapping implementations (Node.js native, WebCrypto, etc.)
+ * without changing consuming code.
+ */
+export interface CryptoProvider {
+    /**
+     * Compute HMAC-SHA256 synchronously.
+     * @returns hex-encoded digest
+     */
+    computeHmacSha256(key: string, data: string): string;
+    /**
+     * Compute HMAC-SHA256 asynchronously.
+     * Identical result to sync variant — exists for API consistency
+     * and future WebCrypto compatibility (SubtleCrypto is async-only).
+     * @returns hex-encoded digest
+     */
+    computeHmacSha256Async(key: string, data: string): Promise<string>;
+    /**
+     * Constant-time string comparison to prevent timing attacks.
+     * Both strings MUST be compared in their entirety regardless of length.
+     */
+    timingSafeEqual(a: string, b: string): boolean;
+}
+//# sourceMappingURL=CryptoProvider.d.ts.map

package/dist/cjs/crypto/CryptoProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoProvider.d.ts","sourceRoot":"","sources":["../../../src/crypto/CryptoProvider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAErD;;;;;OAKG;IACH,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnE;;;OAGG;IACH,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAChD"}

package/dist/cjs/crypto/CryptoProvider.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=CryptoProvider.js.map

package/dist/cjs/crypto/CryptoProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoProvider.js","sourceRoot":"","sources":["../../../src/crypto/CryptoProvider.ts"],"names":[],"mappings":""}

package/dist/cjs/crypto/NodeCryptoProvider.d.ts

@@ -0,0 +1,16 @@
+import type { CryptoProvider } from './CryptoProvider.js';
+/**
+ * Node.js native implementation of CryptoProvider using `node:crypto`.
+ * Zero runtime dependencies — uses only built-in modules.
+ */
+export declare class NodeCryptoProvider implements CryptoProvider {
+    computeHmacSha256(key: string, data: string): string;
+    computeHmacSha256Async(key: string, data: string): Promise<string>;
+    /**
+     * Constant-time comparison. If lengths differ, we still compare
+     * fixed-size HMAC digests of both strings to avoid leaking length
+     * information through timing.
+     */
+    timingSafeEqual(a: string, b: string): boolean;
+}
+//# sourceMappingURL=NodeCryptoProvider.d.ts.map

package/dist/cjs/crypto/NodeCryptoProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCryptoProvider.d.ts","sourceRoot":"","sources":["../../../src/crypto/NodeCryptoProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAIpD,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlE;;;;OAIG;IACH,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO;CAe/C"}

package/dist/cjs/crypto/NodeCryptoProvider.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NodeCryptoProvider = void 0;
+const node_crypto_1 = require("node:crypto");
+/**
+ * Node.js native implementation of CryptoProvider using `node:crypto`.
+ * Zero runtime dependencies — uses only built-in modules.
+ */
+class NodeCryptoProvider {
+    computeHmacSha256(key, data) {
+        return (0, node_crypto_1.createHmac)('sha256', key).update(data, 'utf8').digest('hex');
+    }
+    computeHmacSha256Async(key, data) {
+        return Promise.resolve(this.computeHmacSha256(key, data));
+    }
+    /**
+     * Constant-time comparison. If lengths differ, we still compare
+     * fixed-size HMAC digests of both strings to avoid leaking length
+     * information through timing.
+     */
+    timingSafeEqual(a, b) {
+        const bufA = Buffer.from(a, 'utf8');
+        const bufB = Buffer.from(b, 'utf8');
+        if (bufA.length !== bufB.length) {
+            // Derive fixed-size digests so the comparison always runs
+            // in constant time, even with different-length inputs.
+            const hmacA = (0, node_crypto_1.createHmac)('sha256', 'len-guard').update(bufA).digest();
+            const hmacB = (0, node_crypto_1.createHmac)('sha256', 'len-guard').update(bufB).digest();
+            (0, node_crypto_1.timingSafeEqual)(hmacA, hmacB);
+            return false;
+        }
+        return (0, node_crypto_1.timingSafeEqual)(bufA, bufB);
+    }
+}
+exports.NodeCryptoProvider = NodeCryptoProvider;
+//# sourceMappingURL=NodeCryptoProvider.js.map

package/dist/cjs/crypto/NodeCryptoProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCryptoProvider.js","sourceRoot":"","sources":["../../../src/crypto/NodeCryptoProvider.ts"],"names":[],"mappings":";;;AAAA,6CAAmF;AAGnF;;;GAGG;AACH,MAAa,kBAAkB;IAC7B,iBAAiB,CAAC,GAAW,EAAE,IAAY;QACzC,OAAO,IAAA,wBAAU,EAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,sBAAsB,CAAC,GAAW,EAAE,IAAY;QAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,CAAS,EAAE,CAAS;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,0DAA0D;YAC1D,uDAAuD;YACvD,MAAM,KAAK,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,IAAA,wBAAU,EAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACtE,IAAA,6BAAqB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,IAAA,6BAAqB,EAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF;AA7BD,gDA6BC"}

package/dist/cjs/errors.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Base error for every error surfaced by the PAGCI SDK.
+ * Mirrors the RFC 9457 Problem Details structure returned by the API.
+ */
+export declare class PagciError extends Error {
+    /** RFC 9457 `type` URI identifying the error category. */
+    readonly type: string;
+    /** RFC 9457 human-readable title. */
+    readonly title: string;
+    /** HTTP status code (0 for network-level errors). */
+    readonly status: number;
+    /** Machine-readable error code (e.g. "invalid_amount"). */
+    readonly code: string;
+    /** Field that triggered the error, if applicable. */
+    readonly field?: string;
+    /** Server-assigned request ID for support correlation. */
+    readonly requestId?: string;
+    /** Raw deserialized response body for debugging. */
+    readonly rawResponse?: unknown;
+    constructor(params: {
+        message: string;
+        type?: string;
+        title?: string;
+        status: number;
+        code?: string;
+        field?: string;
+        requestId?: string;
+        rawResponse?: unknown;
+    });
+}
+/** 401 — Missing or invalid API key. */
+export declare class AuthenticationError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 403 — Valid credentials but insufficient permissions. */
+export declare class ForbiddenError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 404 — Resource not found. */
+export declare class NotFoundError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 400 — Validation failure (bad input). */
+export declare class ValidationError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 409 — Conflict (e.g. duplicate idempotency key with different params). */
+export declare class ConflictError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 422 — Business rule violation (e.g. insufficient wallet balance). */
+export declare class InsufficientBalanceError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 429 — Rate limit exceeded. */
+export declare class RateLimitError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 500+ — Unexpected server error. */
+export declare class ApiError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** Network-level failure (ECONNRESET, ECONNREFUSED, etc.). */
+export declare class ConnectionError extends PagciError {
+    constructor(message: string, cause?: Error);
+}
+/** Request exceeded the configured timeout. */
+export declare class TimeoutError extends PagciError {
+    constructor(timeout: number);
+}
+/** Webhook signature verification failed — reject the payload. */
+export declare class SignatureVerificationError extends PagciError {
+    constructor(message: string);
+}
+/**
+ * Build the appropriate PagciError subclass from an HTTP response.
+ *
+ * The response body is expected to follow RFC 9457 Problem Details:
+ * ```json
+ * {
+ *   "type": "https://api.pagci.com/errors/validation",
+ *   "title": "Validation Error",
+ *   "status": 400,
+ *   "detail": "amount must be positive",
+ *   "code": "invalid_amount",
+ *   "field": "amount"
+ * }
+ * ```
+ */
+export declare function errorFromResponse(status: number, body: unknown, headers: Record<string, string>): PagciError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/cjs/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;gBAEnB,MAAM,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB;CAcF;AAID,wCAAwC;AACxC,qBAAa,mBAAoB,SAAQ,UAAU;gBACrC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,4DAA4D;AAC5D,qBAAa,cAAe,SAAQ,UAAU;gBAChC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,gCAAgC;AAChC,qBAAa,aAAc,SAAQ,UAAU;gBAC/B,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,4CAA4C;AAC5C,qBAAa,eAAgB,SAAQ,UAAU;gBACjC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,UAAU;gBAC/B,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,wEAAwE;AACxE,qBAAa,wBAAyB,SAAQ,UAAU;gBAC1C,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,iCAAiC;AACjC,qBAAa,cAAe,SAAQ,UAAU;gBAChC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,sCAAsC;AACtC,qBAAa,QAAS,SAAQ,UAAU;gBAC1B,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,8DAA8D;AAC9D,qBAAa,eAAgB,SAAQ,UAAU;gBACjC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAI3C;AAED,+CAA+C;AAC/C,qBAAa,YAAa,SAAQ,UAAU;gBAC9B,OAAO,EAAE,MAAM;CAO5B;AAED,kEAAkE;AAClE,qBAAa,0BAA2B,SAAQ,UAAU;gBAC5C,OAAO,EAAE,MAAM;CAG5B;AAeD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,UAAU,CA2BZ"}

package/dist/cjs/errors.js

@@ -0,0 +1,171 @@
+"use strict";
+// ── Base error ───────────────────────────────────────────────────────
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SignatureVerificationError = exports.TimeoutError = exports.ConnectionError = exports.ApiError = exports.RateLimitError = exports.InsufficientBalanceError = exports.ConflictError = exports.ValidationError = exports.NotFoundError = exports.ForbiddenError = exports.AuthenticationError = exports.PagciError = void 0;
+exports.errorFromResponse = errorFromResponse;
+/**
+ * Base error for every error surfaced by the PAGCI SDK.
+ * Mirrors the RFC 9457 Problem Details structure returned by the API.
+ */
+class PagciError extends Error {
+    /** RFC 9457 `type` URI identifying the error category. */
+    type;
+    /** RFC 9457 human-readable title. */
+    title;
+    /** HTTP status code (0 for network-level errors). */
+    status;
+    /** Machine-readable error code (e.g. "invalid_amount"). */
+    code;
+    /** Field that triggered the error, if applicable. */
+    field;
+    /** Server-assigned request ID for support correlation. */
+    requestId;
+    /** Raw deserialized response body for debugging. */
+    rawResponse;
+    constructor(params) {
+        super(params.message);
+        this.name = this.constructor.name;
+        this.type = params.type ?? 'about:blank';
+        this.title = params.title ?? params.message;
+        this.status = params.status;
+        this.code = params.code ?? 'unknown';
+        this.field = params.field;
+        this.requestId = params.requestId;
+        this.rawResponse = params.rawResponse;
+        // Maintain proper prototype chain for instanceof checks
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+exports.PagciError = PagciError;
+// ── HTTP-status subclasses ───────────────────────────────────────────
+/** 401 — Missing or invalid API key. */
+class AuthenticationError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.AuthenticationError = AuthenticationError;
+/** 403 — Valid credentials but insufficient permissions. */
+class ForbiddenError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.ForbiddenError = ForbiddenError;
+/** 404 — Resource not found. */
+class NotFoundError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.NotFoundError = NotFoundError;
+/** 400 — Validation failure (bad input). */
+class ValidationError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.ValidationError = ValidationError;
+/** 409 — Conflict (e.g. duplicate idempotency key with different params). */
+class ConflictError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.ConflictError = ConflictError;
+/** 422 — Business rule violation (e.g. insufficient wallet balance). */
+class InsufficientBalanceError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.InsufficientBalanceError = InsufficientBalanceError;
+/** 429 — Rate limit exceeded. */
+class RateLimitError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.RateLimitError = RateLimitError;
+/** 500+ — Unexpected server error. */
+class ApiError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+exports.ApiError = ApiError;
+/** Network-level failure (ECONNRESET, ECONNREFUSED, etc.). */
+class ConnectionError extends PagciError {
+    constructor(message, cause) {
+        super({ message, status: 0, code: 'connection_error' });
+        if (cause)
+            this.cause = cause;
+    }
+}
+exports.ConnectionError = ConnectionError;
+/** Request exceeded the configured timeout. */
+class TimeoutError extends PagciError {
+    constructor(timeout) {
+        super({
+            message: `Request timed out after ${timeout}ms`,
+            status: 0,
+            code: 'timeout',
+        });
+    }
+}
+exports.TimeoutError = TimeoutError;
+/** Webhook signature verification failed — reject the payload. */
+class SignatureVerificationError extends PagciError {
+    constructor(message) {
+        super({ message, status: 0, code: 'signature_verification_failed' });
+    }
+}
+exports.SignatureVerificationError = SignatureVerificationError;
+// ── Factory ──────────────────────────────────────────────────────────
+/** Status → PagciError subclass mapping. */
+const STATUS_MAP = {
+    400: ValidationError,
+    401: AuthenticationError,
+    403: ForbiddenError,
+    404: NotFoundError,
+    409: ConflictError,
+    422: InsufficientBalanceError,
+    429: RateLimitError,
+};
+/**
+ * Build the appropriate PagciError subclass from an HTTP response.
+ *
+ * The response body is expected to follow RFC 9457 Problem Details:
+ * ```json
+ * {
+ *   "type": "https://api.pagci.com/errors/validation",
+ *   "title": "Validation Error",
+ *   "status": 400,
+ *   "detail": "amount must be positive",
+ *   "code": "invalid_amount",
+ *   "field": "amount"
+ * }
+ * ```
+ */
+function errorFromResponse(status, body, headers) {
+    // Parse RFC 9457 fields (defensive — body may not be an object)
+    const obj = (typeof body === 'object' && body !== null ? body : {});
+    const message = typeof obj['detail'] === 'string'
+        ? obj['detail']
+        : typeof obj['message'] === 'string'
+            ? obj['message']
+            : `Request failed with status ${status}`;
+    const params = {
+        message,
+        type: typeof obj['type'] === 'string' ? obj['type'] : undefined,
+        title: typeof obj['title'] === 'string' ? obj['title'] : undefined,
+        status,
+        code: typeof obj['code'] === 'string' ? obj['code'] : undefined,
+        field: typeof obj['field'] === 'string' ? obj['field'] : undefined,
+        requestId: headers['x-request-id'] ?? undefined,
+        rawResponse: body,
+    };
+    const ErrorClass = STATUS_MAP[status] ?? ApiError;
+    return new ErrorClass(params);
+}
+//# sourceMappingURL=errors.js.map

package/dist/cjs/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":";AAAA,wEAAwE;;;AA+JxE,8CA+BC;AA5LD;;;GAGG;AACH,MAAa,UAAW,SAAQ,KAAK;IACnC,0DAA0D;IACjD,IAAI,CAAS;IACtB,qCAAqC;IAC5B,KAAK,CAAS;IACvB,qDAAqD;IAC5C,MAAM,CAAS;IACxB,2DAA2D;IAClD,IAAI,CAAS;IACtB,qDAAqD;IAC5C,KAAK,CAAU;IACxB,0DAA0D;IACjD,SAAS,CAAU;IAC5B,oDAAoD;IAC3C,WAAW,CAAW;IAE/B,YAAY,MASX;QACC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAEtC,wDAAwD;QACxD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAvCD,gCAuCC;AAED,wEAAwE;AAExE,wCAAwC;AACxC,MAAa,mBAAoB,SAAQ,UAAU;IACjD,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,kDAIC;AAED,4DAA4D;AAC5D,MAAa,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,wCAIC;AAED,gCAAgC;AAChC,MAAa,aAAc,SAAQ,UAAU;IAC3C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,sCAIC;AAED,4CAA4C;AAC5C,MAAa,eAAgB,SAAQ,UAAU;IAC7C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,0CAIC;AAED,6EAA6E;AAC7E,MAAa,aAAc,SAAQ,UAAU;IAC3C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,sCAIC;AAED,wEAAwE;AACxE,MAAa,wBAAyB,SAAQ,UAAU;IACtD,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,4DAIC;AAED,iCAAiC;AACjC,MAAa,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,wCAIC;AAED,sCAAsC;AACtC,MAAa,QAAS,SAAQ,UAAU;IACtC,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAJD,4BAIC;AAED,8DAA8D;AAC9D,MAAa,eAAgB,SAAQ,UAAU;IAC7C,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAChC,CAAC;CACF;AALD,0CAKC;AAED,+CAA+C;AAC/C,MAAa,YAAa,SAAQ,UAAU;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC;YACJ,OAAO,EAAE,2BAA2B,OAAO,IAAI;YAC/C,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;CACF;AARD,oCAQC;AAED,kEAAkE;AAClE,MAAa,0BAA2B,SAAQ,UAAU;IACxD,YAAY,OAAe;QACzB,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACvE,CAAC;CACF;AAJD,gEAIC;AAED,wEAAwE;AAExE,4CAA4C;AAC5C,MAAM,UAAU,GAAsC;IACpD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,cAAc;CACpB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,SAAgB,iBAAiB,CAC/B,MAAc,EACd,IAAa,EACb,OAA+B;IAE/B,gEAAgE;IAChE,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAGjE,CAAC;IAEF,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACf,CAAC,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ;YAClC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YAChB,CAAC,CAAC,8BAA8B,MAAM,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAG;QACb,OAAO;QACP,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM;QACN,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,SAAS;QAC/C,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;IAClD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/dist/cjs/idempotency.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generate a unique, timestamp-sortable idempotency key.
+ *
+ * Format: `idem_{base36_timestamp_8}{base36_random_18}` (32 chars total)
+ *
+ * The timestamp prefix (ms since epoch in base-36, zero-padded to 8 chars)
+ * ensures keys sort chronologically. The random suffix (12 random bytes
+ * encoded as base-36, truncated to 18 chars) ensures uniqueness.
+ *
+ * This key must be generated ONCE per logical create() call and reused
+ * across retries of that same call.
+ */
+export declare function generateIdempotencyKey(): string;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/cjs/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/idempotency.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAU/C"}

package/dist/cjs/idempotency.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateIdempotencyKey = generateIdempotencyKey;
+const node_crypto_1 = require("node:crypto");
+/**
+ * Generate a unique, timestamp-sortable idempotency key.
+ *
+ * Format: `idem_{base36_timestamp_8}{base36_random_18}` (32 chars total)
+ *
+ * The timestamp prefix (ms since epoch in base-36, zero-padded to 8 chars)
+ * ensures keys sort chronologically. The random suffix (12 random bytes
+ * encoded as base-36, truncated to 18 chars) ensures uniqueness.
+ *
+ * This key must be generated ONCE per logical create() call and reused
+ * across retries of that same call.
+ */
+function generateIdempotencyKey() {
+    // Timestamp component: milliseconds since epoch in base-36
+    const ts = Date.now().toString(36).padStart(8, '0');
+    // Random component: 12 bytes → base-36 string → first 18 chars
+    const rand = (0, node_crypto_1.randomBytes)(12)
+        .reduce((acc, byte) => acc + byte.toString(36).padStart(2, '0'), '')
+        .slice(0, 18);
+    return `idem_${ts}${rand}`;
+}
+//# sourceMappingURL=idempotency.js.map