@waffo/waffo-node 2.5.0 → 2.5.1

package/README.md

@@ -1,6 +1,6 @@
 # Waffo Node.js SDK
 
-<!-- Synced with waffo-sdk/README.md @ commit d483eba -->
+<!-- Synced with waffo-sdk/README.md @ commit c23c86f -->
 
 **English** | [中文](README_CN.md)
 
@@ -10,6 +10,12 @@
 
 Official Node.js/TypeScript SDK for [Waffo Payment Platform](https://www.waffo.com), providing one-stop global payment solutions for AI products, SaaS services, and more.
 
+## Latest Release Highlights
+
+- **Subscription update API**: Added `subscription().update()` with `amount`, `trialPeriodAmount`, and `scheduledAmounts` support.
+- **Scheduled amount coverage**: Added `scheduledAmounts` fields across subscription create, change, update, and inquiry product info types.
+- **E2E and contract hardening**: Added subscription update E2E coverage, auto-injected `captureRequestedAt` for `order.capture()`, and expanded nested schema field validation.
+
 ## Introduction
 
 ### Core Features
@@ -30,6 +36,7 @@ Official Node.js/TypeScript SDK for [Waffo Payment Platform](https://www.waffo.c
 
 ## Table of Contents
 
+- [Latest Release Highlights](#latest-release-highlights)
 - [Requirements](#requirements)
 - [Installation](#installation)
 - [Quick Start](#quick-start)
@@ -1287,7 +1294,7 @@ Error codes are classified by first letter:
 | `S0004` | Response Signature Verification Failed | `ApiResponse.error()` | Check Waffo public key config, contact Waffo |
 | `S0005` | Request Serialization Failed | `ApiResponse.error()` | Check request parameter format |
 | `S0006` | SDK Unknown Error | `ApiResponse.error()` | Check logs, contact technical support |
-| `S0007` | Invalid Private Key | `WaffoError` | Check if private key is valid Base64 encoded PKCS8 format |
+| `S0007` | Invalid Private Key | `WaffoError` | Check if private key is valid Base64 PKCS8 DER or unencrypted PKCS8 PEM format |
 
 > **Important**: `S0001` and `E0001` (returned by server) indicate **unknown status**. Do not close order directly! Should call query API or wait for webhook to confirm actual status.
 
@@ -1421,4 +1428,3 @@ npm run test:vectors
 ## License
 
 MIT License - See [LICENSE](LICENSE) file for details.
-

package/dist/index.d.mts

@@ -119,7 +119,7 @@ interface WaffoLogger {
 interface WaffoConfig {
     /** API key provided by Waffo */
     apiKey: string;
-    /** Merchant's private key for signing requests (Base64 encoded PKCS8) */
+    /** Merchant's private key for signing requests (Base64 PKCS8 DER or unencrypted PKCS8 PEM) */
     privateKey: string;
     /** Waffo's public key for verifying responses (Base64 encoded X509) */
     waffoPublicKey: string;
@@ -504,9 +504,11 @@ interface ProductInfo {
 interface SubscriptionUserInfo {
     userId: string;
     userEmail: string;
+    userTerminal?: string;
     userPhone?: string;
     userFirstName?: string;
     userLastName?: string;
+    userCreatedAt?: string;
     userCountryCode?: string;
     userBrowserIp?: string;
     userAgent?: string;
@@ -519,12 +521,23 @@ interface SubscriptionPaymentInfo {
     productName: string;
     payMethodType?: string;
     payMethodName?: string;
+    payMethodProperties?: string;
+    payMethodUserAccountType?: string;
+    payMethodUserAccountNo?: string;
+    payMethodUserAccessToken?: string;
+    cashierLanguage?: string;
+    cashierAppearance?: string;
     [key: string]: unknown;
 }
 /**
  * Address information for subscription.
  */
 interface SubscriptionAddressInfo {
+    address?: string;
+    city?: string;
+    region?: string;
+    postcode?: string;
+    addressCountryCode?: string;
     shippingAddress?: {
         country?: string;
         state?: string;
@@ -549,6 +562,14 @@ interface SubscriptionAddressInfo {
  * Risk data for subscription.
  */
 interface SubscriptionRiskData {
+    userType?: string;
+    userCategory?: string;
+    userLegalName?: string;
+    userDisplayName?: string;
+    userRegistrationIp?: string;
+    userLastSeenIp?: string;
+    userIsNew?: string;
+    userIsFirstPurchase?: string;
     deviceType?: string;
     deviceId?: string;
     deviceTokenId?: string;
@@ -1543,7 +1564,16 @@ interface PaymentInfo {
     payMethodType?: string;
     payMethodName?: string;
     payMethodProperties?: string;
+    payMethodResponse?: string;
+    userPaymentAccessToken?: string;
+    payMethodUserAccountNo?: string;
+    payMethodUserAccountType?: string;
+    payOption?: string;
+    cashierLanguage?: string;
+    cashierAppearance?: string;
+    payMethodCountry?: string;
     captureMode?: string;
+    merchantInitiatedMode?: string;
     [key: string]: unknown;
 }
 /**
@@ -2019,7 +2049,6 @@ interface InquiryMerchantConfigData {
  */
 interface InquiryPayMethodConfigParams {
     merchantId: string;
-    payMethodType?: string;
     [key: string]: unknown;
 }
 /**
@@ -2027,21 +2056,33 @@ interface InquiryPayMethodConfigParams {
  */
 interface InquiryPayMethodConfigData {
     merchantId?: string;
-    payMethods?: PayMethodInfo[];
+    payMethodDetails?: PayMethodDetail[];
     [key: string]: unknown;
 }
 /**
- * Pay method information.
+ * Pay method detail.
  */
-interface PayMethodInfo {
-    payMethodType?: string;
+interface PayMethodDetail {
+    productName?: string;
     payMethodName?: string;
-    payMethodStatus?: string;
-    supportedCurrencies?: string[];
-    minAmount?: string;
-    maxAmount?: string;
+    country?: string;
+    currentStatus?: string;
+    fixedMaintenanceRules?: FixedMaintenanceRule[];
+    fixedMaintenanceTimezone?: string;
     [key: string]: unknown;
 }
+/**
+ * Fixed maintenance rule for a payment method.
+ */
+interface FixedMaintenanceRule {
+    startRule?: string;
+    endRule?: string;
+    [key: string]: unknown;
+}
+/**
+ * @deprecated Use PayMethodDetail.
+ */
+type PayMethodInfo = PayMethodDetail;
 
 /**
  * Merchant config resource for querying merchant configuration.
@@ -2085,8 +2126,8 @@ declare class MerchantConfigResource extends BaseResource {
  *
  * if (response.isSuccess()) {
  *   const data = response.getData();
- *   data?.payMethods?.forEach(method => {
- *     console.log(`${method.payMethodName}: ${method.payMethodStatus}`);
+ *   data?.payMethodDetails?.forEach(method => {
+ *     console.log(`${method.payMethodName}: ${method.currentStatus}`);
  *   });
  * }
  * ```
@@ -2347,7 +2388,7 @@ declare class WaffoUnknownStatusError extends Error {
  * Result of key pair generation.
  */
 interface KeyPairResult {
-    /** Base64 encoded PKCS8 private key */
+    /** Base64 encoded PKCS8 DER private key */
     privateKey: string;
     /** Base64 encoded X509 public key */
     publicKey: string;
@@ -2356,16 +2397,16 @@ interface KeyPairResult {
  * Signs data using RSA-SHA256.
  *
  * @param data - The data to sign (UTF-8 string)
- * @param base64PrivateKey - Base64 encoded PKCS8 private key
+ * @param privateKeyInput - Base64 encoded PKCS8 DER private key or unencrypted PKCS8 PEM private key
  * @returns Base64 encoded signature
- * @throws WaffoError if signing fails (S0003)
+ * @throws WaffoError if the private key is invalid (S0007) or signing fails (S0003)
  *
  * @example
  * ```typescript
  * const signature = sign('{"amount":"100.00"}', privateKey);
  * ```
  */
-declare function sign(data: string, base64PrivateKey: string): string;
+declare function sign(data: string, privateKeyInput: string): string;
 /**
  * Verifies a signature using RSA-SHA256.
  *
@@ -2384,12 +2425,12 @@ declare function sign(data: string, base64PrivateKey: string): string;
  */
 declare function verify(data: string, base64Signature: string, base64PublicKey: string): boolean;
 /**
- * Validates a Base64 encoded PKCS8 private key.
+ * Validates a Base64 encoded PKCS8 DER private key or unencrypted PKCS8 PEM private key.
  *
  * This method attempts to parse the key to ensure it's a valid RSA private key.
  * Use this at startup to fail fast if the private key is invalid.
  *
- * @param base64PrivateKey - Base64 encoded PKCS8 private key
+ * @param base64PrivateKey - Base64 encoded PKCS8 DER private key or unencrypted PKCS8 PEM private key
  * @throws WaffoError if the key is invalid (S0007)
  *
  * @example
@@ -2440,4 +2481,4 @@ declare const RsaUtils: {
     generateKeyPair: typeof generateKeyPair;
 };
 
-export { type AddressInfo, ApiResponse, type BaseNotification, type CancelOrderData, type CancelOrderParams, type CancelSubscriptionData, type CancelSubscriptionParams, type CaptureOrderData, type CaptureOrderParams, type CardInfo, type CreateOrderData, type CreateOrderParams, type CreateSubscriptionData, type CreateSubscriptionParams, Environment, EnvironmentBaseUrl, type GoodsInfo, type HttpRequest, type HttpResponse, type HttpTransport, type InquiryMerchantConfigData, type InquiryMerchantConfigParams, type InquiryOrderData, type InquiryOrderParams, type InquiryPayMethodConfigData, type InquiryPayMethodConfigParams, type InquiryRefundData, type InquiryRefundParams, type InquirySubscriptionData, type InquirySubscriptionParams, type ManageSubscriptionData, type ManageSubscriptionParams, MerchantConfigResource, type MerchantInfo, OrderResource, type OrderStatus, PayMethodConfigResource, type PayMethodInfo, type PaymentInfo, type PaymentNotification, type PaymentNotificationResult, type PeriodType, type ProductInfo, type RefundNotification, type RefundNotificationResult, type RefundOrderData, type RefundOrderParams, RefundResource, type RefundStatus$1 as RefundStatus, type RefundUserInfo, type RequestOptions, type RiskData, RsaUtils, type SubscriptionChangeData, type SubscriptionChangeInquiryData, type SubscriptionChangeInquiryParams, type SubscriptionChangeParams, type SubscriptionChangeProductInfo, type SubscriptionChangeStatus, type SubscriptionInfo, type SubscriptionManageAction, type SubscriptionMerchantInfo, type SubscriptionNotificationResult, type SubscriptionPaymentDetail, type SubscriptionPaymentInfo, type SubscriptionPeriodChangedNotification, SubscriptionResource, type SubscriptionScheduledAmount, type SubscriptionStatus, type SubscriptionStatusNotification, type SubscriptionUpdateProductInfo, type SubscriptionUserInfo, type UpdateSubscriptionData, type UpdateSubscriptionParams, type UserInfo, Waffo, type WaffoConfig, WaffoConfigDefaults, WaffoError, WaffoErrorCode, WaffoHttpClient, type WaffoLogger, WaffoUnknownStatusError, WebhookEventType, WebhookHandler, type WebhookResult };
+export { type AddressInfo, ApiResponse, type BaseNotification, type CancelOrderData, type CancelOrderParams, type CancelSubscriptionData, type CancelSubscriptionParams, type CaptureOrderData, type CaptureOrderParams, type CardInfo, type CreateOrderData, type CreateOrderParams, type CreateSubscriptionData, type CreateSubscriptionParams, Environment, EnvironmentBaseUrl, type FixedMaintenanceRule, type GoodsInfo, type HttpRequest, type HttpResponse, type HttpTransport, type InquiryMerchantConfigData, type InquiryMerchantConfigParams, type InquiryOrderData, type InquiryOrderParams, type InquiryPayMethodConfigData, type InquiryPayMethodConfigParams, type InquiryRefundData, type InquiryRefundParams, type InquirySubscriptionData, type InquirySubscriptionParams, type ManageSubscriptionData, type ManageSubscriptionParams, MerchantConfigResource, type MerchantInfo, OrderResource, type OrderStatus, PayMethodConfigResource, type PayMethodDetail, type PayMethodInfo, type PaymentInfo, type PaymentNotification, type PaymentNotificationResult, type PeriodType, type ProductInfo, type RefundNotification, type RefundNotificationResult, type RefundOrderData, type RefundOrderParams, RefundResource, type RefundStatus$1 as RefundStatus, type RefundUserInfo, type RequestOptions, type RiskData, RsaUtils, type SubscriptionChangeData, type SubscriptionChangeInquiryData, type SubscriptionChangeInquiryParams, type SubscriptionChangeParams, type SubscriptionChangeProductInfo, type SubscriptionChangeStatus, type SubscriptionInfo, type SubscriptionManageAction, type SubscriptionMerchantInfo, type SubscriptionNotificationResult, type SubscriptionPaymentDetail, type SubscriptionPaymentInfo, type SubscriptionPeriodChangedNotification, SubscriptionResource, type SubscriptionScheduledAmount, type SubscriptionStatus, type SubscriptionStatusNotification, type SubscriptionUpdateProductInfo, type SubscriptionUserInfo, type UpdateSubscriptionData, type UpdateSubscriptionParams, type UserInfo, Waffo, type WaffoConfig, WaffoConfigDefaults, WaffoError, WaffoErrorCode, WaffoHttpClient, type WaffoLogger, WaffoUnknownStatusError, WebhookEventType, WebhookHandler, type WebhookResult };

package/dist/index.d.ts

@@ -119,7 +119,7 @@ interface WaffoLogger {
 interface WaffoConfig {
     /** API key provided by Waffo */
     apiKey: string;
-    /** Merchant's private key for signing requests (Base64 encoded PKCS8) */
+    /** Merchant's private key for signing requests (Base64 PKCS8 DER or unencrypted PKCS8 PEM) */
     privateKey: string;
     /** Waffo's public key for verifying responses (Base64 encoded X509) */
     waffoPublicKey: string;
@@ -504,9 +504,11 @@ interface ProductInfo {
 interface SubscriptionUserInfo {
     userId: string;
     userEmail: string;
+    userTerminal?: string;
     userPhone?: string;
     userFirstName?: string;
     userLastName?: string;
+    userCreatedAt?: string;
     userCountryCode?: string;
     userBrowserIp?: string;
     userAgent?: string;
@@ -519,12 +521,23 @@ interface SubscriptionPaymentInfo {
     productName: string;
     payMethodType?: string;
     payMethodName?: string;
+    payMethodProperties?: string;
+    payMethodUserAccountType?: string;
+    payMethodUserAccountNo?: string;
+    payMethodUserAccessToken?: string;
+    cashierLanguage?: string;
+    cashierAppearance?: string;
     [key: string]: unknown;
 }
 /**
  * Address information for subscription.
  */
 interface SubscriptionAddressInfo {
+    address?: string;
+    city?: string;
+    region?: string;
+    postcode?: string;
+    addressCountryCode?: string;
     shippingAddress?: {
         country?: string;
         state?: string;
@@ -549,6 +562,14 @@ interface SubscriptionAddressInfo {
  * Risk data for subscription.
  */
 interface SubscriptionRiskData {
+    userType?: string;
+    userCategory?: string;
+    userLegalName?: string;
+    userDisplayName?: string;
+    userRegistrationIp?: string;
+    userLastSeenIp?: string;
+    userIsNew?: string;
+    userIsFirstPurchase?: string;
     deviceType?: string;
     deviceId?: string;
     deviceTokenId?: string;
@@ -1543,7 +1564,16 @@ interface PaymentInfo {
     payMethodType?: string;
     payMethodName?: string;
     payMethodProperties?: string;
+    payMethodResponse?: string;
+    userPaymentAccessToken?: string;
+    payMethodUserAccountNo?: string;
+    payMethodUserAccountType?: string;
+    payOption?: string;
+    cashierLanguage?: string;
+    cashierAppearance?: string;
+    payMethodCountry?: string;
     captureMode?: string;
+    merchantInitiatedMode?: string;
     [key: string]: unknown;
 }
 /**
@@ -2019,7 +2049,6 @@ interface InquiryMerchantConfigData {
  */
 interface InquiryPayMethodConfigParams {
     merchantId: string;
-    payMethodType?: string;
     [key: string]: unknown;
 }
 /**
@@ -2027,21 +2056,33 @@ interface InquiryPayMethodConfigParams {
  */
 interface InquiryPayMethodConfigData {
     merchantId?: string;
-    payMethods?: PayMethodInfo[];
+    payMethodDetails?: PayMethodDetail[];
     [key: string]: unknown;
 }
 /**
- * Pay method information.
+ * Pay method detail.
  */
-interface PayMethodInfo {
-    payMethodType?: string;
+interface PayMethodDetail {
+    productName?: string;
     payMethodName?: string;
-    payMethodStatus?: string;
-    supportedCurrencies?: string[];
-    minAmount?: string;
-    maxAmount?: string;
+    country?: string;
+    currentStatus?: string;
+    fixedMaintenanceRules?: FixedMaintenanceRule[];
+    fixedMaintenanceTimezone?: string;
     [key: string]: unknown;
 }
+/**
+ * Fixed maintenance rule for a payment method.
+ */
+interface FixedMaintenanceRule {
+    startRule?: string;
+    endRule?: string;
+    [key: string]: unknown;
+}
+/**
+ * @deprecated Use PayMethodDetail.
+ */
+type PayMethodInfo = PayMethodDetail;
 
 /**
  * Merchant config resource for querying merchant configuration.
@@ -2085,8 +2126,8 @@ declare class MerchantConfigResource extends BaseResource {
  *
  * if (response.isSuccess()) {
  *   const data = response.getData();
- *   data?.payMethods?.forEach(method => {
- *     console.log(`${method.payMethodName}: ${method.payMethodStatus}`);
+ *   data?.payMethodDetails?.forEach(method => {
+ *     console.log(`${method.payMethodName}: ${method.currentStatus}`);
  *   });
  * }
  * ```
@@ -2347,7 +2388,7 @@ declare class WaffoUnknownStatusError extends Error {
  * Result of key pair generation.
  */
 interface KeyPairResult {
-    /** Base64 encoded PKCS8 private key */
+    /** Base64 encoded PKCS8 DER private key */
     privateKey: string;
     /** Base64 encoded X509 public key */
     publicKey: string;
@@ -2356,16 +2397,16 @@ interface KeyPairResult {
  * Signs data using RSA-SHA256.
  *
  * @param data - The data to sign (UTF-8 string)
- * @param base64PrivateKey - Base64 encoded PKCS8 private key
+ * @param privateKeyInput - Base64 encoded PKCS8 DER private key or unencrypted PKCS8 PEM private key
  * @returns Base64 encoded signature
- * @throws WaffoError if signing fails (S0003)
+ * @throws WaffoError if the private key is invalid (S0007) or signing fails (S0003)
  *
  * @example
  * ```typescript
  * const signature = sign('{"amount":"100.00"}', privateKey);
  * ```
  */
-declare function sign(data: string, base64PrivateKey: string): string;
+declare function sign(data: string, privateKeyInput: string): string;
 /**
  * Verifies a signature using RSA-SHA256.
  *
@@ -2384,12 +2425,12 @@ declare function sign(data: string, base64PrivateKey: string): string;
  */
 declare function verify(data: string, base64Signature: string, base64PublicKey: string): boolean;
 /**
- * Validates a Base64 encoded PKCS8 private key.
+ * Validates a Base64 encoded PKCS8 DER private key or unencrypted PKCS8 PEM private key.
  *
  * This method attempts to parse the key to ensure it's a valid RSA private key.
  * Use this at startup to fail fast if the private key is invalid.
  *
- * @param base64PrivateKey - Base64 encoded PKCS8 private key
+ * @param base64PrivateKey - Base64 encoded PKCS8 DER private key or unencrypted PKCS8 PEM private key
  * @throws WaffoError if the key is invalid (S0007)
  *
  * @example
@@ -2440,4 +2481,4 @@ declare const RsaUtils: {
     generateKeyPair: typeof generateKeyPair;
 };
 
-export { type AddressInfo, ApiResponse, type BaseNotification, type CancelOrderData, type CancelOrderParams, type CancelSubscriptionData, type CancelSubscriptionParams, type CaptureOrderData, type CaptureOrderParams, type CardInfo, type CreateOrderData, type CreateOrderParams, type CreateSubscriptionData, type CreateSubscriptionParams, Environment, EnvironmentBaseUrl, type GoodsInfo, type HttpRequest, type HttpResponse, type HttpTransport, type InquiryMerchantConfigData, type InquiryMerchantConfigParams, type InquiryOrderData, type InquiryOrderParams, type InquiryPayMethodConfigData, type InquiryPayMethodConfigParams, type InquiryRefundData, type InquiryRefundParams, type InquirySubscriptionData, type InquirySubscriptionParams, type ManageSubscriptionData, type ManageSubscriptionParams, MerchantConfigResource, type MerchantInfo, OrderResource, type OrderStatus, PayMethodConfigResource, type PayMethodInfo, type PaymentInfo, type PaymentNotification, type PaymentNotificationResult, type PeriodType, type ProductInfo, type RefundNotification, type RefundNotificationResult, type RefundOrderData, type RefundOrderParams, RefundResource, type RefundStatus$1 as RefundStatus, type RefundUserInfo, type RequestOptions, type RiskData, RsaUtils, type SubscriptionChangeData, type SubscriptionChangeInquiryData, type SubscriptionChangeInquiryParams, type SubscriptionChangeParams, type SubscriptionChangeProductInfo, type SubscriptionChangeStatus, type SubscriptionInfo, type SubscriptionManageAction, type SubscriptionMerchantInfo, type SubscriptionNotificationResult, type SubscriptionPaymentDetail, type SubscriptionPaymentInfo, type SubscriptionPeriodChangedNotification, SubscriptionResource, type SubscriptionScheduledAmount, type SubscriptionStatus, type SubscriptionStatusNotification, type SubscriptionUpdateProductInfo, type SubscriptionUserInfo, type UpdateSubscriptionData, type UpdateSubscriptionParams, type UserInfo, Waffo, type WaffoConfig, WaffoConfigDefaults, WaffoError, WaffoErrorCode, WaffoHttpClient, type WaffoLogger, WaffoUnknownStatusError, WebhookEventType, WebhookHandler, type WebhookResult };
+export { type AddressInfo, ApiResponse, type BaseNotification, type CancelOrderData, type CancelOrderParams, type CancelSubscriptionData, type CancelSubscriptionParams, type CaptureOrderData, type CaptureOrderParams, type CardInfo, type CreateOrderData, type CreateOrderParams, type CreateSubscriptionData, type CreateSubscriptionParams, Environment, EnvironmentBaseUrl, type FixedMaintenanceRule, type GoodsInfo, type HttpRequest, type HttpResponse, type HttpTransport, type InquiryMerchantConfigData, type InquiryMerchantConfigParams, type InquiryOrderData, type InquiryOrderParams, type InquiryPayMethodConfigData, type InquiryPayMethodConfigParams, type InquiryRefundData, type InquiryRefundParams, type InquirySubscriptionData, type InquirySubscriptionParams, type ManageSubscriptionData, type ManageSubscriptionParams, MerchantConfigResource, type MerchantInfo, OrderResource, type OrderStatus, PayMethodConfigResource, type PayMethodDetail, type PayMethodInfo, type PaymentInfo, type PaymentNotification, type PaymentNotificationResult, type PeriodType, type ProductInfo, type RefundNotification, type RefundNotificationResult, type RefundOrderData, type RefundOrderParams, RefundResource, type RefundStatus$1 as RefundStatus, type RefundUserInfo, type RequestOptions, type RiskData, RsaUtils, type SubscriptionChangeData, type SubscriptionChangeInquiryData, type SubscriptionChangeInquiryParams, type SubscriptionChangeParams, type SubscriptionChangeProductInfo, type SubscriptionChangeStatus, type SubscriptionInfo, type SubscriptionManageAction, type SubscriptionMerchantInfo, type SubscriptionNotificationResult, type SubscriptionPaymentDetail, type SubscriptionPaymentInfo, type SubscriptionPeriodChangedNotification, SubscriptionResource, type SubscriptionScheduledAmount, type SubscriptionStatus, type SubscriptionStatusNotification, type SubscriptionUpdateProductInfo, type SubscriptionUserInfo, type UpdateSubscriptionData, type UpdateSubscriptionParams, type UserInfo, Waffo, type WaffoConfig, WaffoConfigDefaults, WaffoError, WaffoErrorCode, WaffoHttpClient, type WaffoLogger, WaffoUnknownStatusError, WebhookEventType, WebhookHandler, type WebhookResult };

package/dist/index.js

@@ -114,18 +114,18 @@ var WaffoUnknownStatusError = class _WaffoUnknownStatusError extends Error {
 // src/utils/rsa-utils.ts
 var ALGORITHM = "RSA-SHA256";
 var KEY_SIZE = 2048;
-function sign(data, base64PrivateKey) {
+var PKCS8_PEM_HEADER = "-----BEGIN PRIVATE KEY-----";
+var PEM_HEADER_PREFIX = "-----BEGIN ";
+var INVALID_PRIVATE_KEY_FORMAT_MESSAGE = "Invalid private key format. Please provide an unencrypted PKCS#8 private key.";
+function sign(data, privateKeyInput) {
   try {
-    const privateKeyBuffer = Buffer.from(base64PrivateKey, "base64");
+    const privateKey = parsePrivateKey(privateKeyInput);
     const signer = crypto__namespace.createSign(ALGORITHM);
     signer.update(data, "utf8");
-    const signature = signer.sign({
-      key: privateKeyBuffer,
-      format: "der",
-      type: "pkcs8"
-    });
+    const signature = signer.sign(privateKey);
     return signature.toString("base64");
   } catch (error) {
+    if (error instanceof WaffoError) throw error;
     throw new WaffoError(
       WaffoErrorCode.SIGN_FAILED,
       `Failed to sign data: ${error instanceof Error ? error.message : String(error)}`,
@@ -159,29 +159,43 @@ function validatePrivateKey(base64PrivateKey) {
     );
   }
   try {
-    const keyBuffer = Buffer.from(base64PrivateKey, "base64");
-    crypto__namespace.createPrivateKey({
-      key: keyBuffer,
-      format: "der",
-      type: "pkcs8"
-    });
+    parsePrivateKey(base64PrivateKey);
   } catch (error) {
     if (error instanceof WaffoError) throw error;
-    const message = error instanceof Error ? error.message : String(error);
-    if (message.includes("bad base64")) {
-      throw new WaffoError(
-        WaffoErrorCode.INVALID_PRIVATE_KEY,
-        "Invalid private key: not valid Base64 encoding",
-        error instanceof Error ? error : void 0
-      );
+    throw new WaffoError(
+      WaffoErrorCode.INVALID_PRIVATE_KEY,
+      INVALID_PRIVATE_KEY_FORMAT_MESSAGE,
+      error instanceof Error ? error : void 0
+    );
+  }
+}
+function parsePrivateKey(privateKeyInput) {
+  try {
+    const trimmed = privateKeyInput.trim();
+    const key = trimmed.startsWith(PKCS8_PEM_HEADER) ? crypto__namespace.createPrivateKey(trimmed) : parseDerPrivateKey(trimmed);
+    if (key.asymmetricKeyType !== "rsa") {
+      throw new Error("private key is not RSA");
     }
+    return key;
+  } catch (error) {
+    if (error instanceof WaffoError) throw error;
     throw new WaffoError(
       WaffoErrorCode.INVALID_PRIVATE_KEY,
-      `Invalid private key: ${message}`,
+      INVALID_PRIVATE_KEY_FORMAT_MESSAGE,
       error instanceof Error ? error : void 0
     );
   }
 }
+function parseDerPrivateKey(trimmedPrivateKey) {
+  if (trimmedPrivateKey.startsWith(PEM_HEADER_PREFIX)) {
+    throw new Error("unsupported PEM private key");
+  }
+  return crypto__namespace.createPrivateKey({
+    key: Buffer.from(trimmedPrivateKey, "base64"),
+    format: "der",
+    type: "pkcs8"
+  });
+}
 function validatePublicKey(base64PublicKey) {
   if (!base64PublicKey || base64PublicKey.trim() === "") {
     throw new WaffoError(
@@ -463,7 +477,7 @@ var HEADER_SDK_VERSION = "x-sdk-version";
 var HEADER_CONTENT_TYPE = "content-type";
 var CONTENT_TYPE_JSON = "application/json";
 var API_VERSION = "1.0.0";
-var SDK_VERSION = "waffo-node/2.5.0";
+var SDK_VERSION = "waffo-node/2.5.1";
 var WaffoHttpClient = class {
   baseUrl;
   apiKey;
@@ -475,6 +489,8 @@ var WaffoHttpClient = class {
   logger;
   httpTransport;
   constructor(config) {
+    RsaUtils.validatePrivateKey(config.privateKey);
+    RsaUtils.validatePublicKey(config.waffoPublicKey);
     this.baseUrl = EnvironmentBaseUrl[config.environment];
     this.apiKey = config.apiKey;
     this.privateKey = config.privateKey;
@@ -613,7 +629,7 @@ var WaffoHttpClient = class {
   isNetworkError(error) {
     if (!(error instanceof Error)) return false;
     const message = error.message.toLowerCase();
-    return error.name === "AbortError" || message.includes("timeout") || message.includes("econnrefused") || message.includes("enotfound") || message.includes("network") || message.includes("socket") || message.includes("connection");
+    return error.name === "AbortError" || message.includes("timeout") || message.includes("econnrefused") || message.includes("enotfound") || message.includes("fetch failed") || message.includes("network") || message.includes("socket") || message.includes("connection");
   }
 };
 
@@ -1172,8 +1188,8 @@ var Waffo = class _Waffo {
    * @param config - SDK configuration
    */
   constructor(config) {
-    this.config = config;
-    this.httpClient = new WaffoHttpClient(config);
+    this.config = createWaffoConfig(config);
+    this.httpClient = new WaffoHttpClient(this.config);
   }
   /**
    * Creates a Waffo SDK instance from environment variables.