@pagci/node 0.1.0

package/dist/esm/client.js

@@ -0,0 +1,145 @@
+import { NodeCryptoProvider } from './crypto/NodeCryptoProvider.js';
+import { NodeHttpClient } from './net/NodeHttpClient.js';
+import { RequestSender } from './requestSender.js';
+import { DEFAULT_RETRY_CONFIG } from './retry.js';
+import { SignatureVerificationError } from './errors.js';
+// ── Resource classes ─────────────────────────────────────────────────
+import { PaymentsResource } from './resources/payments.js';
+import { WithdrawalsResource } from './resources/withdrawals.js';
+import { DebtsResource } from './resources/debts.js';
+import { BalanceResource } from './resources/balance.js';
+import { WebhookEndpointsResource } from './resources/webhookEndpoints.js';
+import { TokensResource } from './resources/tokens.js';
+// ── Client ───────────────────────────────────────────────────────────
+const DEFAULT_BASE_URL = 'https://api.pagci.com';
+const DEFAULT_TIMEOUT = 30_000;
+/**
+ * Main entry point for the PAGCI Node.js SDK.
+ *
+ * ```ts
+ * const pagci = new Pagci('sk_live_...');
+ * const payment = await pagci.payments.create({ ... });
+ * ```
+ */
+export class Pagci {
+    _sender;
+    _crypto;
+    // ── Lazy resource singletons (Square / Fern pattern) ─────────────
+    _payments;
+    get payments() {
+        return (this._payments ??= new PaymentsResource(this._sender));
+    }
+    _withdrawals;
+    get withdrawals() {
+        return (this._withdrawals ??= new WithdrawalsResource(this._sender));
+    }
+    _debts;
+    get debts() {
+        return (this._debts ??= new DebtsResource(this._sender));
+    }
+    _balance;
+    get balance() {
+        return (this._balance ??= new BalanceResource(this._sender));
+    }
+    _webhookEndpoints;
+    get webhookEndpoints() {
+        return (this._webhookEndpoints ??= new WebhookEndpointsResource(this._sender));
+    }
+    _tokens;
+    get tokens() {
+        return (this._tokens ??= new TokensResource(this._sender));
+    }
+    // ── Webhook verification (utility, not a REST resource) ──────────
+    get webhooks() {
+        const crypto = this._crypto;
+        return {
+            /**
+             * Verify webhook signature and return the parsed event (sync).
+             *
+             * @param rawBody  - The raw request body as a string.
+             * @param signature - Value of the `X-Webhook-Signature` header.
+             * @param secret   - Your webhook signing secret (`whsec_...`).
+             * @param tolerance - Max age of the event in seconds (default 300 = 5 min).
+             */
+            constructEvent(rawBody, signature, secret, tolerance = 300) {
+                return verifyAndParse(crypto, rawBody, signature, secret, tolerance);
+            },
+            /**
+             * Async variant of constructEvent (for future WebCrypto compat).
+             */
+            async constructEventAsync(rawBody, signature, secret, tolerance = 300) {
+                // Parse header parts first (sync)
+                const { timestamp, sig } = parseSignatureHeader(signature);
+                // Verify age
+                assertTimestampWithinTolerance(timestamp, tolerance);
+                // Async HMAC
+                const expectedSig = await crypto.computeHmacSha256Async(secret, `${timestamp}.${rawBody}`);
+                if (!crypto.timingSafeEqual(sig, expectedSig)) {
+                    throw new SignatureVerificationError('Webhook signature verification failed');
+                }
+                return {
+                    payload: JSON.parse(rawBody),
+                    signature: sig,
+                    timestamp,
+                };
+            },
+        };
+    }
+    // ── Constructor ──────────────────────────────────────────────────
+    constructor(apiKey, config) {
+        if (!apiKey || typeof apiKey !== 'string') {
+            throw new Error('API key is required. Pass it as the first argument: new Pagci("sk_live_...")');
+        }
+        const baseUrl = (config?.baseUrl ?? DEFAULT_BASE_URL).replace(/\/+$/, '');
+        const timeout = config?.timeout ?? DEFAULT_TIMEOUT;
+        const maxRetries = config?.maxRetries ?? DEFAULT_RETRY_CONFIG.maxRetries;
+        const httpClient = new NodeHttpClient(config?.httpAgent);
+        this._crypto = new NodeCryptoProvider();
+        this._sender = new RequestSender(apiKey, baseUrl, httpClient, { ...DEFAULT_RETRY_CONFIG, maxRetries }, timeout);
+    }
+}
+// ── Webhook verification internals ───────────────────────────────────
+/**
+ * Expected header format: `t=<unix_timestamp>,v1=<hex_signature>`
+ */
+function parseSignatureHeader(header) {
+    const parts = header.split(',');
+    let timestamp = '';
+    let sig = '';
+    for (const part of parts) {
+        const [key, value] = part.split('=', 2);
+        if (key === 't')
+            timestamp = value ?? '';
+        if (key === 'v1')
+            sig = value ?? '';
+    }
+    if (!timestamp || !sig) {
+        throw new SignatureVerificationError('Invalid webhook signature header format. Expected "t=<timestamp>,v1=<signature>".');
+    }
+    return { timestamp, sig };
+}
+function assertTimestampWithinTolerance(timestamp, toleranceSeconds) {
+    const ts = Number(timestamp);
+    if (Number.isNaN(ts)) {
+        throw new SignatureVerificationError('Invalid timestamp in webhook signature header.');
+    }
+    const age = Math.abs(Math.floor(Date.now() / 1000) - ts);
+    if (age > toleranceSeconds) {
+        throw new SignatureVerificationError(`Webhook timestamp too old (${age}s > ${toleranceSeconds}s tolerance). ` +
+            'This may indicate a replay attack.');
+    }
+}
+function verifyAndParse(crypto, rawBody, signatureHeader, secret, tolerance) {
+    const { timestamp, sig } = parseSignatureHeader(signatureHeader);
+    assertTimestampWithinTolerance(timestamp, tolerance);
+    const expectedSig = crypto.computeHmacSha256(secret, `${timestamp}.${rawBody}`);
+    if (!crypto.timingSafeEqual(sig, expectedSig)) {
+        throw new SignatureVerificationError('Webhook signature verification failed');
+    }
+    return {
+        payload: JSON.parse(rawBody),
+        signature: sig,
+        timestamp,
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/esm/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAEpE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AAEzD,wEAAwE;AACxE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AA0BvD,wEAAwE;AAExE,MAAM,gBAAgB,GAAG,uBAAuB,CAAC;AACjD,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B;;;;;;;GAOG;AACH,MAAM,OAAO,KAAK;IACC,OAAO,CAAgB;IACvB,OAAO,CAAiB;IAEzC,oEAAoE;IAE5D,SAAS,CAAoB;IACrC,IAAI,QAAQ;QACV,OAAO,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,CAAC;IAEO,YAAY,CAAuB;IAC3C,IAAI,WAAW;QACb,OAAO,CAAC,IAAI,CAAC,YAAY,KAAK,IAAI,mBAAmB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,MAAM,CAAiB;IAC/B,IAAI,KAAK;QACP,OAAO,CAAC,IAAI,CAAC,MAAM,KAAK,IAAI,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,CAAC;IAEO,QAAQ,CAAmB;IACnC,IAAI,OAAO;QACT,OAAO,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;IAEO,iBAAiB,CAA4B;IACrD,IAAI,gBAAgB;QAClB,OAAO,CAAC,IAAI,CAAC,iBAAiB,KAAK,IAAI,wBAAwB,CAC7D,IAAI,CAAC,OAAO,CACb,CAAC,CAAC;IACL,CAAC;IAEO,OAAO,CAAkB;IACjC,IAAI,MAAM;QACR,OAAO,CAAC,IAAI,CAAC,OAAO,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;IAC7D,CAAC;IAED,oEAAoE;IAEpE,IAAI,QAAQ;QACV,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC;QAE5B,OAAO;YACL;;;;;;;eAOG;YACH,cAAc,CACZ,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,SAAS,GAAG,GAAG;gBAEf,OAAO,cAAc,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YACvE,CAAC;YAED;;eAEG;YACH,KAAK,CAAC,mBAAmB,CACvB,OAAe,EACf,SAAiB,EACjB,MAAc,EACd,SAAS,GAAG,GAAG;gBAEf,kCAAkC;gBAClC,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAC;gBAE3D,aAAa;gBACb,8BAA8B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;gBAErD,aAAa;gBACb,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC,sBAAsB,CACrD,MAAM,EACN,GAAG,SAAS,IAAI,OAAO,EAAE,CAC1B,CAAC;gBAEF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;oBAC9C,MAAM,IAAI,0BAA0B,CAClC,uCAAuC,CACxC,CAAC;gBACJ,CAAC;gBAED,OAAO;oBACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;oBAC5B,SAAS,EAAE,GAAG;oBACd,SAAS;iBACV,CAAC;YACJ,CAAC;SACF,CAAC;IACJ,CAAC;IAED,oEAAoE;IAEpE,YAAY,MAAc,EAAE,MAAoB;QAC9C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,MAAM,IAAI,KAAK,CACb,8EAA8E,CAC/E,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,gBAAgB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC1E,MAAM,OAAO,GAAG,MAAM,EAAE,OAAO,IAAI,eAAe,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,EAAE,UAAU,IAAI,oBAAoB,CAAC,UAAU,CAAC;QAEzE,MAAM,UAAU,GAAe,IAAI,cAAc,CAC/C,MAAM,EAAE,SAAsB,CAC/B,CAAC;QACF,IAAI,CAAC,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC;QAExC,IAAI,CAAC,OAAO,GAAG,IAAI,aAAa,CAC9B,MAAM,EACN,OAAO,EACP,UAAU,EACV,EAAE,GAAG,oBAAoB,EAAE,UAAU,EAAE,EACvC,OAAO,CACR,CAAC;IACJ,CAAC;CACF;AAED,wEAAwE;AAExE;;GAEG;AACH,SAAS,oBAAoB,CAAC,MAAc;IAI1C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChC,IAAI,SAAS,GAAG,EAAE,CAAC;IACnB,IAAI,GAAG,GAAG,EAAE,CAAC;IAEb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACxC,IAAI,GAAG,KAAK,GAAG;YAAE,SAAS,GAAG,KAAK,IAAI,EAAE,CAAC;QACzC,IAAI,GAAG,KAAK,IAAI;YAAE,GAAG,GAAG,KAAK,IAAI,EAAE,CAAC;IACtC,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,0BAA0B,CAClC,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;AAC5B,CAAC;AAED,SAAS,8BAA8B,CACrC,SAAiB,EACjB,gBAAwB;IAExB,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,0BAA0B,CAClC,gDAAgD,CACjD,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IACzD,IAAI,GAAG,GAAG,gBAAgB,EAAE,CAAC;QAC3B,MAAM,IAAI,0BAA0B,CAClC,8BAA8B,GAAG,OAAO,gBAAgB,gBAAgB;YACtE,oCAAoC,CACvC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CACrB,MAAsB,EACtB,OAAe,EACf,eAAuB,EACvB,MAAc,EACd,SAAiB;IAEjB,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;IAEjE,8BAA8B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAErD,MAAM,WAAW,GAAG,MAAM,CAAC,iBAAiB,CAC1C,MAAM,EACN,GAAG,SAAS,IAAI,OAAO,EAAE,CAC1B,CAAC;IAEF,IAAI,CAAC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,0BAA0B,CAClC,uCAAuC,CACxC,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;QAC5B,SAAS,EAAE,GAAG;QACd,SAAS;KACV,CAAC;AACJ,CAAC"}

package/dist/esm/crypto/CryptoProvider.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Abstract interface for cryptographic operations.
+ * Allows swapping implementations (Node.js native, WebCrypto, etc.)
+ * without changing consuming code.
+ */
+export interface CryptoProvider {
+    /**
+     * Compute HMAC-SHA256 synchronously.
+     * @returns hex-encoded digest
+     */
+    computeHmacSha256(key: string, data: string): string;
+    /**
+     * Compute HMAC-SHA256 asynchronously.
+     * Identical result to sync variant — exists for API consistency
+     * and future WebCrypto compatibility (SubtleCrypto is async-only).
+     * @returns hex-encoded digest
+     */
+    computeHmacSha256Async(key: string, data: string): Promise<string>;
+    /**
+     * Constant-time string comparison to prevent timing attacks.
+     * Both strings MUST be compared in their entirety regardless of length.
+     */
+    timingSafeEqual(a: string, b: string): boolean;
+}
+//# sourceMappingURL=CryptoProvider.d.ts.map

package/dist/esm/crypto/CryptoProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoProvider.d.ts","sourceRoot":"","sources":["../../../src/crypto/CryptoProvider.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B;;;OAGG;IACH,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC;IAErD;;;;;OAKG;IACH,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAEnE;;;OAGG;IACH,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAChD"}

package/dist/esm/crypto/CryptoProvider.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=CryptoProvider.js.map

package/dist/esm/crypto/CryptoProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CryptoProvider.js","sourceRoot":"","sources":["../../../src/crypto/CryptoProvider.ts"],"names":[],"mappings":""}

package/dist/esm/crypto/NodeCryptoProvider.d.ts

@@ -0,0 +1,16 @@
+import type { CryptoProvider } from './CryptoProvider.js';
+/**
+ * Node.js native implementation of CryptoProvider using `node:crypto`.
+ * Zero runtime dependencies — uses only built-in modules.
+ */
+export declare class NodeCryptoProvider implements CryptoProvider {
+    computeHmacSha256(key: string, data: string): string;
+    computeHmacSha256Async(key: string, data: string): Promise<string>;
+    /**
+     * Constant-time comparison. If lengths differ, we still compare
+     * fixed-size HMAC digests of both strings to avoid leaking length
+     * information through timing.
+     */
+    timingSafeEqual(a: string, b: string): boolean;
+}
+//# sourceMappingURL=NodeCryptoProvider.d.ts.map

package/dist/esm/crypto/NodeCryptoProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCryptoProvider.d.ts","sourceRoot":"","sources":["../../../src/crypto/NodeCryptoProvider.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;GAGG;AACH,qBAAa,kBAAmB,YAAW,cAAc;IACvD,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM;IAIpD,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlE;;;;OAIG;IACH,eAAe,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO;CAe/C"}

package/dist/esm/crypto/NodeCryptoProvider.js

@@ -0,0 +1,32 @@
+import { createHmac, timingSafeEqual as cryptoTimingSafeEqual } from 'node:crypto';
+/**
+ * Node.js native implementation of CryptoProvider using `node:crypto`.
+ * Zero runtime dependencies — uses only built-in modules.
+ */
+export class NodeCryptoProvider {
+    computeHmacSha256(key, data) {
+        return createHmac('sha256', key).update(data, 'utf8').digest('hex');
+    }
+    computeHmacSha256Async(key, data) {
+        return Promise.resolve(this.computeHmacSha256(key, data));
+    }
+    /**
+     * Constant-time comparison. If lengths differ, we still compare
+     * fixed-size HMAC digests of both strings to avoid leaking length
+     * information through timing.
+     */
+    timingSafeEqual(a, b) {
+        const bufA = Buffer.from(a, 'utf8');
+        const bufB = Buffer.from(b, 'utf8');
+        if (bufA.length !== bufB.length) {
+            // Derive fixed-size digests so the comparison always runs
+            // in constant time, even with different-length inputs.
+            const hmacA = createHmac('sha256', 'len-guard').update(bufA).digest();
+            const hmacB = createHmac('sha256', 'len-guard').update(bufB).digest();
+            cryptoTimingSafeEqual(hmacA, hmacB);
+            return false;
+        }
+        return cryptoTimingSafeEqual(bufA, bufB);
+    }
+}
+//# sourceMappingURL=NodeCryptoProvider.js.map

package/dist/esm/crypto/NodeCryptoProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"NodeCryptoProvider.js","sourceRoot":"","sources":["../../../src/crypto/NodeCryptoProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,IAAI,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAGnF;;;GAGG;AACH,MAAM,OAAO,kBAAkB;IAC7B,iBAAiB,CAAC,GAAW,EAAE,IAAY;QACzC,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACtE,CAAC;IAED,sBAAsB,CAAC,GAAW,EAAE,IAAY;QAC9C,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,CAAS,EAAE,CAAS;QAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAEpC,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC;YAChC,0DAA0D;YAC1D,uDAAuD;YACvD,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACtE,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;YACtE,qBAAqB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACpC,OAAO,KAAK,CAAC;QACf,CAAC;QAED,OAAO,qBAAqB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;CACF"}

package/dist/esm/errors.d.ts

@@ -0,0 +1,91 @@
+/**
+ * Base error for every error surfaced by the PAGCI SDK.
+ * Mirrors the RFC 9457 Problem Details structure returned by the API.
+ */
+export declare class PagciError extends Error {
+    /** RFC 9457 `type` URI identifying the error category. */
+    readonly type: string;
+    /** RFC 9457 human-readable title. */
+    readonly title: string;
+    /** HTTP status code (0 for network-level errors). */
+    readonly status: number;
+    /** Machine-readable error code (e.g. "invalid_amount"). */
+    readonly code: string;
+    /** Field that triggered the error, if applicable. */
+    readonly field?: string;
+    /** Server-assigned request ID for support correlation. */
+    readonly requestId?: string;
+    /** Raw deserialized response body for debugging. */
+    readonly rawResponse?: unknown;
+    constructor(params: {
+        message: string;
+        type?: string;
+        title?: string;
+        status: number;
+        code?: string;
+        field?: string;
+        requestId?: string;
+        rawResponse?: unknown;
+    });
+}
+/** 401 — Missing or invalid API key. */
+export declare class AuthenticationError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 403 — Valid credentials but insufficient permissions. */
+export declare class ForbiddenError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 404 — Resource not found. */
+export declare class NotFoundError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 400 — Validation failure (bad input). */
+export declare class ValidationError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 409 — Conflict (e.g. duplicate idempotency key with different params). */
+export declare class ConflictError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 422 — Business rule violation (e.g. insufficient wallet balance). */
+export declare class InsufficientBalanceError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 429 — Rate limit exceeded. */
+export declare class RateLimitError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** 500+ — Unexpected server error. */
+export declare class ApiError extends PagciError {
+    constructor(params: ConstructorParameters<typeof PagciError>[0]);
+}
+/** Network-level failure (ECONNRESET, ECONNREFUSED, etc.). */
+export declare class ConnectionError extends PagciError {
+    constructor(message: string, cause?: Error);
+}
+/** Request exceeded the configured timeout. */
+export declare class TimeoutError extends PagciError {
+    constructor(timeout: number);
+}
+/** Webhook signature verification failed — reject the payload. */
+export declare class SignatureVerificationError extends PagciError {
+    constructor(message: string);
+}
+/**
+ * Build the appropriate PagciError subclass from an HTTP response.
+ *
+ * The response body is expected to follow RFC 9457 Problem Details:
+ * ```json
+ * {
+ *   "type": "https://api.pagci.com/errors/validation",
+ *   "title": "Validation Error",
+ *   "status": 400,
+ *   "detail": "amount must be positive",
+ *   "code": "invalid_amount",
+ *   "field": "amount"
+ * }
+ * ```
+ */
+export declare function errorFromResponse(status: number, body: unknown, headers: Record<string, string>): PagciError;
+//# sourceMappingURL=errors.d.ts.map

package/dist/esm/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAEA;;;GAGG;AACH,qBAAa,UAAW,SAAQ,KAAK;IACnC,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qCAAqC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,qDAAqD;IACrD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,0DAA0D;IAC1D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oDAAoD;IACpD,QAAQ,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC;gBAEnB,MAAM,EAAE;QAClB,OAAO,EAAE,MAAM,CAAC;QAChB,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,WAAW,CAAC,EAAE,OAAO,CAAC;KACvB;CAcF;AAID,wCAAwC;AACxC,qBAAa,mBAAoB,SAAQ,UAAU;gBACrC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,4DAA4D;AAC5D,qBAAa,cAAe,SAAQ,UAAU;gBAChC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,gCAAgC;AAChC,qBAAa,aAAc,SAAQ,UAAU;gBAC/B,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,4CAA4C;AAC5C,qBAAa,eAAgB,SAAQ,UAAU;gBACjC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,6EAA6E;AAC7E,qBAAa,aAAc,SAAQ,UAAU;gBAC/B,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,wEAAwE;AACxE,qBAAa,wBAAyB,SAAQ,UAAU;gBAC1C,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,iCAAiC;AACjC,qBAAa,cAAe,SAAQ,UAAU;gBAChC,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,sCAAsC;AACtC,qBAAa,QAAS,SAAQ,UAAU;gBAC1B,MAAM,EAAE,qBAAqB,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;CAGhE;AAED,8DAA8D;AAC9D,qBAAa,eAAgB,SAAQ,UAAU;gBACjC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAI3C;AAED,+CAA+C;AAC/C,qBAAa,YAAa,SAAQ,UAAU;gBAC9B,OAAO,EAAE,MAAM;CAO5B;AAED,kEAAkE;AAClE,qBAAa,0BAA2B,SAAQ,UAAU;gBAC5C,OAAO,EAAE,MAAM;CAG5B;AAeD;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,UAAU,CA2BZ"}

package/dist/esm/errors.js

@@ -0,0 +1,155 @@
+// ── Base error ───────────────────────────────────────────────────────
+/**
+ * Base error for every error surfaced by the PAGCI SDK.
+ * Mirrors the RFC 9457 Problem Details structure returned by the API.
+ */
+export class PagciError extends Error {
+    /** RFC 9457 `type` URI identifying the error category. */
+    type;
+    /** RFC 9457 human-readable title. */
+    title;
+    /** HTTP status code (0 for network-level errors). */
+    status;
+    /** Machine-readable error code (e.g. "invalid_amount"). */
+    code;
+    /** Field that triggered the error, if applicable. */
+    field;
+    /** Server-assigned request ID for support correlation. */
+    requestId;
+    /** Raw deserialized response body for debugging. */
+    rawResponse;
+    constructor(params) {
+        super(params.message);
+        this.name = this.constructor.name;
+        this.type = params.type ?? 'about:blank';
+        this.title = params.title ?? params.message;
+        this.status = params.status;
+        this.code = params.code ?? 'unknown';
+        this.field = params.field;
+        this.requestId = params.requestId;
+        this.rawResponse = params.rawResponse;
+        // Maintain proper prototype chain for instanceof checks
+        Object.setPrototypeOf(this, new.target.prototype);
+    }
+}
+// ── HTTP-status subclasses ───────────────────────────────────────────
+/** 401 — Missing or invalid API key. */
+export class AuthenticationError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 403 — Valid credentials but insufficient permissions. */
+export class ForbiddenError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 404 — Resource not found. */
+export class NotFoundError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 400 — Validation failure (bad input). */
+export class ValidationError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 409 — Conflict (e.g. duplicate idempotency key with different params). */
+export class ConflictError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 422 — Business rule violation (e.g. insufficient wallet balance). */
+export class InsufficientBalanceError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 429 — Rate limit exceeded. */
+export class RateLimitError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** 500+ — Unexpected server error. */
+export class ApiError extends PagciError {
+    constructor(params) {
+        super(params);
+    }
+}
+/** Network-level failure (ECONNRESET, ECONNREFUSED, etc.). */
+export class ConnectionError extends PagciError {
+    constructor(message, cause) {
+        super({ message, status: 0, code: 'connection_error' });
+        if (cause)
+            this.cause = cause;
+    }
+}
+/** Request exceeded the configured timeout. */
+export class TimeoutError extends PagciError {
+    constructor(timeout) {
+        super({
+            message: `Request timed out after ${timeout}ms`,
+            status: 0,
+            code: 'timeout',
+        });
+    }
+}
+/** Webhook signature verification failed — reject the payload. */
+export class SignatureVerificationError extends PagciError {
+    constructor(message) {
+        super({ message, status: 0, code: 'signature_verification_failed' });
+    }
+}
+// ── Factory ──────────────────────────────────────────────────────────
+/** Status → PagciError subclass mapping. */
+const STATUS_MAP = {
+    400: ValidationError,
+    401: AuthenticationError,
+    403: ForbiddenError,
+    404: NotFoundError,
+    409: ConflictError,
+    422: InsufficientBalanceError,
+    429: RateLimitError,
+};
+/**
+ * Build the appropriate PagciError subclass from an HTTP response.
+ *
+ * The response body is expected to follow RFC 9457 Problem Details:
+ * ```json
+ * {
+ *   "type": "https://api.pagci.com/errors/validation",
+ *   "title": "Validation Error",
+ *   "status": 400,
+ *   "detail": "amount must be positive",
+ *   "code": "invalid_amount",
+ *   "field": "amount"
+ * }
+ * ```
+ */
+export function errorFromResponse(status, body, headers) {
+    // Parse RFC 9457 fields (defensive — body may not be an object)
+    const obj = (typeof body === 'object' && body !== null ? body : {});
+    const message = typeof obj['detail'] === 'string'
+        ? obj['detail']
+        : typeof obj['message'] === 'string'
+            ? obj['message']
+            : `Request failed with status ${status}`;
+    const params = {
+        message,
+        type: typeof obj['type'] === 'string' ? obj['type'] : undefined,
+        title: typeof obj['title'] === 'string' ? obj['title'] : undefined,
+        status,
+        code: typeof obj['code'] === 'string' ? obj['code'] : undefined,
+        field: typeof obj['field'] === 'string' ? obj['field'] : undefined,
+        requestId: headers['x-request-id'] ?? undefined,
+        rawResponse: body,
+    };
+    const ErrorClass = STATUS_MAP[status] ?? ApiError;
+    return new ErrorClass(params);
+}
+//# sourceMappingURL=errors.js.map

package/dist/esm/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":"AAAA,wEAAwE;AAExE;;;GAGG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IACnC,0DAA0D;IACjD,IAAI,CAAS;IACtB,qCAAqC;IAC5B,KAAK,CAAS;IACvB,qDAAqD;IAC5C,MAAM,CAAS;IACxB,2DAA2D;IAClD,IAAI,CAAS;IACtB,qDAAqD;IAC5C,KAAK,CAAU;IACxB,0DAA0D;IACjD,SAAS,CAAU;IAC5B,oDAAoD;IAC3C,WAAW,CAAW;IAE/B,YAAY,MASX;QACC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,aAAa,CAAC;QACzC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,OAAO,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;QACrC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;QAEtC,wDAAwD;QACxD,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAED,wEAAwE;AAExE,wCAAwC;AACxC,MAAM,OAAO,mBAAoB,SAAQ,UAAU;IACjD,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,4DAA4D;AAC5D,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,gCAAgC;AAChC,MAAM,OAAO,aAAc,SAAQ,UAAU;IAC3C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,4CAA4C;AAC5C,MAAM,OAAO,eAAgB,SAAQ,UAAU;IAC7C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,6EAA6E;AAC7E,MAAM,OAAO,aAAc,SAAQ,UAAU;IAC3C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,wEAAwE;AACxE,MAAM,OAAO,wBAAyB,SAAQ,UAAU;IACtD,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,iCAAiC;AACjC,MAAM,OAAO,cAAe,SAAQ,UAAU;IAC5C,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,sCAAsC;AACtC,MAAM,OAAO,QAAS,SAAQ,UAAU;IACtC,YAAY,MAAmD;QAC7D,KAAK,CAAC,MAAM,CAAC,CAAC;IAChB,CAAC;CACF;AAED,8DAA8D;AAC9D,MAAM,OAAO,eAAgB,SAAQ,UAAU;IAC7C,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACxD,IAAI,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IAChC,CAAC;CACF;AAED,+CAA+C;AAC/C,MAAM,OAAO,YAAa,SAAQ,UAAU;IAC1C,YAAY,OAAe;QACzB,KAAK,CAAC;YACJ,OAAO,EAAE,2BAA2B,OAAO,IAAI;YAC/C,MAAM,EAAE,CAAC;YACT,IAAI,EAAE,SAAS;SAChB,CAAC,CAAC;IACL,CAAC;CACF;AAED,kEAAkE;AAClE,MAAM,OAAO,0BAA2B,SAAQ,UAAU;IACxD,YAAY,OAAe;QACzB,KAAK,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACvE,CAAC;CACF;AAED,wEAAwE;AAExE,4CAA4C;AAC5C,MAAM,UAAU,GAAsC;IACpD,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,mBAAmB;IACxB,GAAG,EAAE,cAAc;IACnB,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,aAAa;IAClB,GAAG,EAAE,wBAAwB;IAC7B,GAAG,EAAE,cAAc;CACpB,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAc,EACd,IAAa,EACb,OAA+B;IAE/B,gEAAgE;IAChE,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAGjE,CAAC;IAEF,MAAM,OAAO,GACX,OAAO,GAAG,CAAC,QAAQ,CAAC,KAAK,QAAQ;QAC/B,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC;QACf,CAAC,CAAC,OAAO,GAAG,CAAC,SAAS,CAAC,KAAK,QAAQ;YAClC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC;YAChB,CAAC,CAAC,8BAA8B,MAAM,EAAE,CAAC;IAE/C,MAAM,MAAM,GAAG;QACb,OAAO;QACP,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,MAAM;QACN,IAAI,EAAE,OAAO,GAAG,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC/D,KAAK,EAAE,OAAO,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS;QAClE,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,SAAS;QAC/C,WAAW,EAAE,IAAI;KAClB,CAAC;IAEF,MAAM,UAAU,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC;IAClD,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC"}

package/dist/esm/idempotency.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Generate a unique, timestamp-sortable idempotency key.
+ *
+ * Format: `idem_{base36_timestamp_8}{base36_random_18}` (32 chars total)
+ *
+ * The timestamp prefix (ms since epoch in base-36, zero-padded to 8 chars)
+ * ensures keys sort chronologically. The random suffix (12 random bytes
+ * encoded as base-36, truncated to 18 chars) ensures uniqueness.
+ *
+ * This key must be generated ONCE per logical create() call and reused
+ * across retries of that same call.
+ */
+export declare function generateIdempotencyKey(): string;
+//# sourceMappingURL=idempotency.d.ts.map

package/dist/esm/idempotency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.d.ts","sourceRoot":"","sources":["../../src/idempotency.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,MAAM,CAU/C"}

package/dist/esm/idempotency.js

@@ -0,0 +1,23 @@
+import { randomBytes } from 'node:crypto';
+/**
+ * Generate a unique, timestamp-sortable idempotency key.
+ *
+ * Format: `idem_{base36_timestamp_8}{base36_random_18}` (32 chars total)
+ *
+ * The timestamp prefix (ms since epoch in base-36, zero-padded to 8 chars)
+ * ensures keys sort chronologically. The random suffix (12 random bytes
+ * encoded as base-36, truncated to 18 chars) ensures uniqueness.
+ *
+ * This key must be generated ONCE per logical create() call and reused
+ * across retries of that same call.
+ */
+export function generateIdempotencyKey() {
+    // Timestamp component: milliseconds since epoch in base-36
+    const ts = Date.now().toString(36).padStart(8, '0');
+    // Random component: 12 bytes → base-36 string → first 18 chars
+    const rand = randomBytes(12)
+        .reduce((acc, byte) => acc + byte.toString(36).padStart(2, '0'), '')
+        .slice(0, 18);
+    return `idem_${ts}${rand}`;
+}
+//# sourceMappingURL=idempotency.js.map

package/dist/esm/idempotency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotency.js","sourceRoot":"","sources":["../../src/idempotency.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB;IACpC,2DAA2D;IAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAEpD,+DAA+D;IAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,EAAE,CAAC;SACzB,MAAM,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC;SACnE,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhB,OAAO,QAAQ,EAAE,GAAG,IAAI,EAAE,CAAC;AAC7B,CAAC"}

package/dist/esm/index.d.ts

@@ -0,0 +1,20 @@
+export { Pagci } from './client.js';
+export type { PagciConfig, WebhookEvent } from './client.js';
+export { PagciError, AuthenticationError, ForbiddenError, NotFoundError, ValidationError, ConflictError, InsufficientBalanceError, RateLimitError, ApiError, ConnectionError, TimeoutError, SignatureVerificationError, errorFromResponse, } from './errors.js';
+export type { ApiResponse, RequestOptions, ResponseMeta } from './requestSender.js';
+export type { RetryConfig } from './retry.js';
+export type { CryptoProvider } from './crypto/CryptoProvider.js';
+export { NodeCryptoProvider } from './crypto/NodeCryptoProvider.js';
+export type { HttpClient, HttpClientResponse } from './net/HttpClient.js';
+export { NodeHttpClient } from './net/NodeHttpClient.js';
+export { generateIdempotencyKey } from './idempotency.js';
+export { Page } from './pagination.js';
+export { PaymentsResource } from './resources/payments.js';
+export { WithdrawalsResource } from './resources/withdrawals.js';
+export { DebtsResource } from './resources/debts.js';
+export { BalanceResource } from './resources/balance.js';
+export { WebhookEndpointsResource } from './resources/webhookEndpoints.js';
+export { TokensResource } from './resources/tokens.js';
+export type { Owner, CompactOwner, Customer, Item, ListMeta, ListResponse, StatusResponse, MessageResponse, Payer, Bank, RefundEntry, DeductionEntry, HistoryEvent, KYCValidation, PaymentConfig, QRConfig, QRLogoConfig, QRForegroundConfig, QRModuleConfig, QRBadgeConfig, RecipientView, LiquidatorView, Payment, PaymentCompact, StatusCount, RecipientParams, CreatePaymentParams, RefundRecipientEntry, RefundParams, RefundDistEntry, RefundResponse, PaymentListParams, ReceiverBank, Receiver, WithdrawalLiquidator, Withdrawal, CreateWithdrawalResponse, CreateWithdrawalParams, WithdrawalListParams, Balance, TotalBalance, WalletListParams, WebhookEnvelope, WebhookEndpoint, WebhookEndpointsListResponse, WebhookEndpointInput, RegisterWebhooksParams, WebhookDelivery, WebhookDeliveryListResponse, WebhookTestParams, WebhookTestResponse, WebhookDeliveryListParams, CreateDebtParams, CreateDebtResponse, DebtListItem, DebtListResponse, DebtListParams, CreateAccessTokenParams, CreateAccessTokenResponse, CreateAPIKeyParams, CreateAPIKeyResponse, UpdateTokenScopesParams, } from './types/index.js';
+export { ErrorCode, WebhookEventType } from './types/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/esm/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AACpC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAG7D,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,eAAe,EACf,aAAa,EACb,wBAAwB,EACxB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAGrB,YAAY,EAAE,WAAW,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAGpF,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAG9C,YAAY,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAGpE,YAAY,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAGzD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAG1D,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAGvC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAGvD,YAAY,EACV,KAAK,EACL,YAAY,EACZ,QAAQ,EACR,IAAI,EACJ,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,eAAe,EACf,KAAK,EACL,IAAI,EACJ,WAAW,EACX,cAAc,EACd,YAAY,EACZ,aAAa,EACb,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,kBAAkB,EAClB,cAAc,EACd,aAAa,EACb,aAAa,EACb,cAAc,EACd,OAAO,EACP,cAAc,EACd,WAAW,EACX,eAAe,EACf,mBAAmB,EACnB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EACf,cAAc,EACd,iBAAiB,EACjB,YAAY,EACZ,QAAQ,EACR,oBAAoB,EACpB,UAAU,EACV,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,OAAO,EACP,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,4BAA4B,EAC5B,oBAAoB,EACpB,sBAAsB,EACtB,eAAe,EACf,2BAA2B,EAC3B,iBAAiB,EACjB,mBAAmB,EACnB,yBAAyB,EACzB,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,gBAAgB,EAChB,cAAc,EACd,uBAAuB,EACvB,yBAAyB,EACzB,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/esm/index.js

@@ -0,0 +1,19 @@
+// ── Main client ──────────────────────────────────────────────────────
+export { Pagci } from './client.js';
+// ── Errors ───────────────────────────────────────────────────────────
+export { PagciError, AuthenticationError, ForbiddenError, NotFoundError, ValidationError, ConflictError, InsufficientBalanceError, RateLimitError, ApiError, ConnectionError, TimeoutError, SignatureVerificationError, errorFromResponse, } from './errors.js';
+export { NodeCryptoProvider } from './crypto/NodeCryptoProvider.js';
+export { NodeHttpClient } from './net/NodeHttpClient.js';
+// ── Utilities ────────────────────────────────────────────────────────
+export { generateIdempotencyKey } from './idempotency.js';
+// ── Pagination ──────────────────────────────────────────────────────
+export { Page } from './pagination.js';
+// ── Resource classes ────────────────────────────────────────────────
+export { PaymentsResource } from './resources/payments.js';
+export { WithdrawalsResource } from './resources/withdrawals.js';
+export { DebtsResource } from './resources/debts.js';
+export { BalanceResource } from './resources/balance.js';
+export { WebhookEndpointsResource } from './resources/webhookEndpoints.js';
+export { TokensResource } from './resources/tokens.js';
+export { ErrorCode, WebhookEventType } from './types/index.js';
+//# sourceMappingURL=index.js.map

package/dist/esm/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAGpC,wEAAwE;AACxE,OAAO,EACL,UAAU,EACV,mBAAmB,EACnB,cAAc,EACd,aAAa,EACb,eAAe,EACf,aAAa,EACb,wBAAwB,EACxB,cAAc,EACd,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,0BAA0B,EAC1B,iBAAiB,GAClB,MAAM,aAAa,CAAC;AAUrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,gCAAgC,CAAC;AAIpE,OAAO,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAEzD,wEAAwE;AACxE,OAAO,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAE1D,uEAAuE;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,iBAAiB,CAAC;AAEvC,uEAAuE;AACvE,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAmEvD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC"}

package/dist/esm/net/HttpClient.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Raw HTTP response returned by any HttpClient implementation.
+ * Headers keys are always lowercased for consistent access.
+ */
+export interface HttpClientResponse {
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+}
+/**
+ * Abstract HTTP client interface.
+ * Implementations can use node:https, fetch, undici, etc.
+ */
+export interface HttpClient {
+    request(method: string, url: string, headers: Record<string, string>, body?: string, timeout?: number): Promise<HttpClientResponse>;
+}
+//# sourceMappingURL=HttpClient.d.ts.map

package/dist/esm/net/HttpClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpClient.d.ts","sourceRoot":"","sources":["../../../src/net/HttpClient.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,UAAU;IACzB,OAAO,CACL,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/B,IAAI,CAAC,EAAE,MAAM,EACb,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC"}

package/dist/esm/net/HttpClient.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=HttpClient.js.map