@paymos/sdk 1.0.0 → 2.0.3

package/dist/index.js

@@ -1,6 +1,37 @@
 // src/index.ts
 import { randomUUID } from "crypto";
 
+// src/wire.ts
+function toWire(value) {
+  return mapKeys(value, (key) => key.replace(/[A-Z]/g, (letter) => `_${letter.toLowerCase()}`));
+}
+function fromWire(value) {
+  return mapKeys(value, (key) => key.replace(/_([a-z0-9])/g, (_, letter) => letter.toUpperCase()));
+}
+function mapKeys(value, rename) {
+  if (Array.isArray(value)) return value.map((item) => mapKeys(item, rename));
+  if (!isPlainObject(value)) return value;
+  const mapped = {};
+  for (const [key, item] of Object.entries(value)) {
+    const mappedKey = rename(key);
+    if (Object.hasOwn(mapped, mappedKey)) {
+      throw new TypeError(`Duplicate Paymos field after case conversion: ${mappedKey}`);
+    }
+    Object.defineProperty(mapped, mappedKey, {
+      value: mapKeys(item, rename),
+      enumerable: true,
+      configurable: true,
+      writable: true
+    });
+  }
+  return mapped;
+}
+function isPlainObject(value) {
+  if (value === null || typeof value !== "object") return false;
+  const prototype = Object.getPrototypeOf(value);
+  return prototype === Object.prototype || prototype === null;
+}
+
 // src/errors.ts
 var PaymosError = class extends Error {
   constructor(message, options) {
@@ -20,8 +51,8 @@ var ApiError = class extends PaymosError {
   headers;
   problem;
   constructor(status, body, headers) {
-    const problem = parseProblem(body);
-    const detail = problem?.detail ?? problem?.errors?.[0]?.message ?? problem?.code ?? problem?.title;
+    const problem = parseProblem(status, body);
+    const detail = problem?.detail || problem?.code || problem?.title;
     super(`Paymos API ${status}: ${detail || body || "empty response"}`);
     this.status = status;
     this.body = body;
@@ -29,10 +60,10 @@ var ApiError = class extends PaymosError {
     this.problem = problem;
   }
   get code() {
-    return this.problem?.errors?.[0]?.code ?? this.problem?.code ?? "";
+    return this.problem?.code ?? "";
   }
   get field() {
-    return this.problem?.errors?.[0]?.field ?? this.problem?.field ?? null;
+    return this.problem?.field ?? null;
   }
   get errors() {
     return this.problem?.errors ?? [];
@@ -72,11 +103,13 @@ function apiErrorFromResponse(status, body, headers) {
   if (status >= 500) return new ServerError(status, body, headers);
   return new ApiError(status, body, headers);
 }
-function parseProblem(body) {
+function parseProblem(status, body) {
   if (!body) return null;
   try {
     const parsed = JSON.parse(body);
-    return parsed !== null && typeof parsed === "object" ? parsed : null;
+    if (parsed === null || typeof parsed !== "object") return null;
+    const problem = fromWire(parsed);
+    return typeof problem.type === "string" && typeof problem.title === "string" && typeof problem.status === "number" && Number.isInteger(problem.status) && problem.status === status && typeof problem.detail === "string" && typeof problem.code === "string" ? problem : null;
   } catch {
     return null;
   }
@@ -127,7 +160,7 @@ function rfc3986(value) {
 }
 
 // src/version.ts
-var SDK_VERSION = "1.0.0";
+var SDK_VERSION = "2.0.3";
 
 // src/http.ts
 var HttpClient = class {
@@ -136,7 +169,7 @@ var HttpClient = class {
     this.options = normalizeOptions(options);
   }
   async request(method, path, payload, query = "") {
-    const body = payload === void 0 ? "" : JSON.stringify(payload);
+    const body = payload === void 0 ? "" : JSON.stringify(toWire(payload));
     const url = `${this.options.baseUrl}${path}${query}`;
     let attempt = 0;
     while (true) {
@@ -178,6 +211,7 @@ var HttpClient = class {
       }
       if (shouldRetry(method, response.status) && attempt < this.options.maxRetries) {
         const retryAfter = retryAfterMs(response.headers.get("retry-after"));
+        await response.body?.cancel();
         await sleep(Math.max(backoff(this.options.baseDelayMs, ++attempt), retryAfter ?? 0));
         continue;
       }
@@ -185,7 +219,7 @@ var HttpClient = class {
       if (!response.ok) throw apiErrorFromResponse(response.status, responseBody, response.headers);
       if (responseBody === "") return {};
       try {
-        return JSON.parse(responseBody);
+        return fromWire(JSON.parse(responseBody));
       } catch (error) {
         throw new PaymosError("Paymos API returned invalid JSON.", { cause: error });
       }
@@ -263,7 +297,7 @@ var InvoicesResource = class {
     return this.http.request("GET", `/v1/invoices/${encodePathSegment(invoiceId)}`);
   }
   list(params = {}) {
-    return this.http.request("GET", "/v1/invoices", void 0, buildQuery(params));
+    return this.http.request("GET", "/v1/invoices", void 0, buildQuery(toWire(params)));
   }
   async *iterate(params = {}, maxPages = 100) {
     assertMaxPages(maxPages);
@@ -271,7 +305,7 @@ var InvoicesResource = class {
     for (let pageNumber = 0; pageNumber < maxPages; pageNumber += 1) {
       const page = await this.list(cursor === void 0 ? params : { ...params, cursor });
       yield* page.items;
-      const next = page.next_cursor || void 0;
+      const next = page.nextCursor || void 0;
       if (next === void 0) return;
       if (next === cursor) throw new Error("Paymos API returned the same pagination cursor twice.");
       cursor = next;
@@ -302,7 +336,7 @@ var WithdrawalsResource = class {
     return this.http.request("GET", `/v1/withdrawals/${encodePathSegment(withdrawalId)}`);
   }
   list(params = {}) {
-    return this.http.request("GET", "/v1/withdrawals", void 0, buildQuery(params));
+    return this.http.request("GET", "/v1/withdrawals", void 0, buildQuery(toWire(params)));
   }
   async *iterate(params = {}, maxPages = 100) {
     assertMaxPages(maxPages);
@@ -310,7 +344,7 @@ var WithdrawalsResource = class {
     for (let pageNumber = 0; pageNumber < maxPages; pageNumber += 1) {
       const page = await this.list(cursor === void 0 ? params : { ...params, cursor });
       yield* page.items;
-      const next = page.next_cursor || void 0;
+      const next = page.nextCursor || void 0;
       if (next === void 0) return;
       if (next === cursor) throw new Error("Paymos API returned the same pagination cursor twice.");
       cursor = next;
@@ -396,8 +430,11 @@ var WebhookVerifier = class {
   constructEvent(signatureHeader, rawBody, now = Math.floor(Date.now() / 1e3)) {
     this.assertValid(signatureHeader, rawBody, now);
     try {
-      return JSON.parse(rawBody.toString());
+      const event = fromWire(JSON.parse(rawBody.toString()));
+      assertEventEnvelope(event);
+      return event;
     } catch (error) {
+      if (error instanceof TypeError) throw error;
       throw new TypeError("Webhook payload is not valid JSON.", { cause: error });
     }
   }
@@ -405,16 +442,39 @@ var WebhookVerifier = class {
 function parseHeader(header) {
   if (typeof header !== "string") return null;
   let timestamp;
+  let timestampCount = 0;
   const signatures = [];
   for (const part of header.split(",")) {
     const separator = part.indexOf("=");
     if (separator < 1) continue;
     const key = part.slice(0, separator).trim();
     const value = part.slice(separator + 1).trim();
-    if (key === "t" && /^\d+$/.test(value)) timestamp = Number(value);
+    if (key === "t" && /^\d+$/.test(value)) {
+      timestamp = Number(value);
+      timestampCount += 1;
+    }
     if (key === "v1" && value !== "") signatures.push(value);
   }
-  return timestamp === void 0 || signatures.length === 0 ? null : { timestamp, signatures };
+  return timestamp === void 0 || timestampCount !== 1 || !Number.isSafeInteger(timestamp) || signatures.length === 0 ? null : { timestamp, signatures };
+}
+function assertEventEnvelope(value) {
+  if (value === null || typeof value !== "object") throw new TypeError("Webhook payload must be an object.");
+  const event = value;
+  if (typeof event.eventId !== "string" || event.eventId.trim() === "") {
+    throw new TypeError("Webhook eventId must be a non-empty string.");
+  }
+  if (typeof event.eventType !== "string" || event.eventType.trim() === "") {
+    throw new TypeError("Webhook eventType must be a non-empty string.");
+  }
+  if (!Number.isSafeInteger(event.version) || event.version < 1) {
+    throw new TypeError("Webhook version must be a positive integer.");
+  }
+  if (!Number.isSafeInteger(event.occurredAt) || event.occurredAt < 0) {
+    throw new TypeError("Webhook occurredAt must be a non-negative Unix timestamp.");
+  }
+  if (event.data === null || typeof event.data !== "object") {
+    throw new TypeError("Webhook data must be an object.");
+  }
 }
 
 // src/index.ts

package/package.json

@@ -1,64 +1,69 @@
-{
-  "name": "@paymos/sdk",
-  "version": "1.0.0",
-  "description": "Official TypeScript and JavaScript SDK for the Paymos Merchant API",
-  "keywords": [
-    "paymos",
-    "payments",
-    "stablecoins",
-    "usdt",
-    "usdc",
-    "crypto",
-    "sdk"
-  ],
-  "homepage": "https://paymos.io/docs/quick-start",
-  "bugs": "https://github.com/Paymos-labs/typescript-sdk/issues",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/Paymos-labs/typescript-sdk.git"
-  },
-  "license": "MIT",
-  "author": "Paymos Labs <support@paymos.io>",
-  "type": "module",
-  "main": "./dist/index.cjs",
-  "module": "./dist/index.js",
-  "types": "./dist/index.d.ts",
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "import": "./dist/index.js",
-      "require": "./dist/index.cjs"
-    }
-  },
-  "files": [
-    "dist",
-    "README.md",
-    "LICENSE",
-    "CHANGELOG.md"
-  ],
-  "sideEffects": false,
-  "engines": {
-    "node": ">=22.12"
-  },
-  "scripts": {
-    "build": "tsup src/index.ts --format esm,cjs --dts --clean",
-    "check": "tsc --noEmit",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "prepack": "npm run check && npm test && npm run build"
-  },
-  "devDependencies": {
-    "@types/node": "^22.10.0",
-    "@vitest/coverage-v8": "^3.2.0",
-    "tsup": "^8.5.0",
-    "typescript": "^5.8.0",
-    "vitest": "^3.2.0"
-  },
-  "overrides": {
-    "esbuild": "0.28.1"
-  },
-  "publishConfig": {
-    "access": "public",
-    "provenance": true
-  }
-}
+{
+  "name": "@paymos/sdk",
+  "version": "2.0.3",
+  "description": "Official TypeScript and JavaScript SDK for the Paymos Merchant API",
+  "keywords": [
+    "paymos",
+    "payments",
+    "stablecoins",
+    "usdt",
+    "usdc",
+    "crypto",
+    "sdk"
+  ],
+  "homepage": "https://paymos.io/docs/server-sdks",
+  "bugs": "https://github.com/Paymos-labs/typescript-sdk/issues",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Paymos-labs/typescript-sdk.git"
+  },
+  "license": "MIT",
+  "author": "Paymos Labs <support@paymos.io>",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE",
+    "CHANGELOG.md"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=22.12"
+  },
+  "scripts": {
+    "build": "tsup src/index.ts --format esm,cjs --dts --clean",
+    "check": "tsc --noEmit",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage",
+    "prepack": "npm run check && npm test && npm run build"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "@vitest/coverage-v8": "^3.2.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.8.0",
+    "vitest": "^3.2.0"
+  },
+  "overrides": {
+    "esbuild": "0.28.1"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  }
+}