better-auth-mercadopago 0.1.9 → 0.2.0

package/dist/client.d.ts

@@ -0,0 +1,88 @@
+import type { BetterFetch, BetterFetchOption } from "better-auth/client";
+import type { mercadoPagoPlugin } from "./index";
+import type { CreatePaymentParams, CreatePaymentResponse, CreatePreapprovalPlanParams, CreatePreapprovalPlanResponse, CreateSubscriptionParams, CreateSubscriptionResponse, MercadoPagoCustomerRecord, MercadoPagoPaymentRecord, MercadoPagoPreapprovalPlanRecord, MercadoPagoSubscriptionRecord, OAuthTokenResponse, OAuthUrlResponse } from "./types";
+export interface MercadoPagoClientActions {
+    /**
+     * Get or create a Mercado Pago customer for the authenticated user
+     */
+    getOrCreateCustomer: (data?: {
+        email?: string;
+        firstName?: string;
+        lastName?: string;
+    }, fetchOptions?: BetterFetchOption) => Promise<{
+        customer: MercadoPagoCustomerRecord;
+    }>;
+    /**
+     * Create a payment and get checkout URL
+     */
+    createPayment: (data: CreatePaymentParams, fetchOptions?: BetterFetchOption) => Promise<CreatePaymentResponse>;
+    /**
+     * Create a marketplace payment with automatic split
+     */
+    createMarketplacePayment: (data: CreatePaymentParams, fetchOptions?: BetterFetchOption) => Promise<CreatePaymentResponse>;
+    /**
+     * Create a subscription with recurring payments
+     */
+    createSubscription: (data: CreateSubscriptionParams, fetchOptions?: BetterFetchOption) => Promise<CreateSubscriptionResponse>;
+    /**
+     * Cancel a subscription
+     */
+    cancelSubscription: (data: {
+        subscriptionId: string;
+    }, fetchOptions?: BetterFetchOption) => Promise<{
+        success: boolean;
+    }>;
+    /**
+     * Create a reusable preapproval plan (subscription template)
+     */
+    createPreapprovalPlan: (data: CreatePreapprovalPlanParams, fetchOptions?: BetterFetchOption) => Promise<CreatePreapprovalPlanResponse>;
+    /**
+     * List all preapproval plans
+     */
+    listPreapprovalPlans: (fetchOptions?: BetterFetchOption) => Promise<{
+        plans: MercadoPagoPreapprovalPlanRecord[];
+    }>;
+    /**
+     * Get payment by ID
+     */
+    getPayment: (paymentId: string, fetchOptions?: BetterFetchOption) => Promise<{
+        payment: MercadoPagoPaymentRecord;
+    }>;
+    /**
+     * List all payments for the authenticated user
+     */
+    listPayments: (params?: {
+        limit?: number;
+        offset?: number;
+    }, fetchOptions?: BetterFetchOption) => Promise<{
+        payments: MercadoPagoPaymentRecord[];
+    }>;
+    /**
+     * List all subscriptions for the authenticated user
+     */
+    listSubscriptions: (fetchOptions?: BetterFetchOption) => Promise<{
+        subscriptions: MercadoPagoSubscriptionRecord[];
+    }>;
+    /**
+     * Get OAuth authorization URL for marketplace sellers
+     */
+    getOAuthUrl: (params: {
+        redirectUri: string;
+    }, fetchOptions?: BetterFetchOption) => Promise<OAuthUrlResponse>;
+    /**
+     * Exchange OAuth code for access token
+     */
+    exchangeOAuthCode: (data: {
+        code: string;
+        redirectUri: string;
+    }, fetchOptions?: BetterFetchOption) => Promise<OAuthTokenResponse>;
+}
+type mercadopagoPlugin = typeof mercadoPagoPlugin;
+export type MercadoPagoClient = MercadoPagoClientActions;
+export declare const mercadoPagoClientPlugin: () => {
+    id: "mercadopago";
+    $InferServerPlugin: ReturnType<mercadopagoPlugin>;
+    getActions: ($fetch: BetterFetch) => MercadoPagoClientActions;
+};
+export {};
+//# sourceMappingURL=client.d.ts.map

package/dist/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEX,WAAW,EACX,iBAAiB,EACjB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EACX,mBAAmB,EACnB,qBAAqB,EACrB,2BAA2B,EAC3B,6BAA6B,EAC7B,wBAAwB,EACxB,0BAA0B,EAC1B,yBAAyB,EACzB,wBAAwB,EACxB,gCAAgC,EAChC,6BAA6B,EAC7B,kBAAkB,EAClB,gBAAgB,EAChB,MAAM,SAAS,CAAC;AAEjB,MAAM,WAAW,wBAAwB;IACxC;;OAEG;IACH,mBAAmB,EAAE,CACpB,IAAI,CAAC,EAAE;QACN,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;KAClB,EACD,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC;QAAE,QAAQ,EAAE,yBAAyB,CAAA;KAAE,CAAC,CAAC;IAEtD;;OAEG;IACH,aAAa,EAAE,CACd,IAAI,EAAE,mBAAmB,EACzB,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAEpC;;OAEG;IACH,wBAAwB,EAAE,CACzB,IAAI,EAAE,mBAAmB,EACzB,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAEpC;;OAEG;IACH,kBAAkB,EAAE,CACnB,IAAI,EAAE,wBAAwB,EAC9B,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAEzC;;OAEG;IACH,kBAAkB,EAAE,CACnB,IAAI,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,EAChC,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAA;KAAE,CAAC,CAAC;IAEnC;;OAEG;IACH,qBAAqB,EAAE,CACtB,IAAI,EAAE,2BAA2B,EACjC,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC,6BAA6B,CAAC,CAAC;IAE5C;;OAEG;IACH,oBAAoB,EAAE,CACrB,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC;QAAE,KAAK,EAAE,gCAAgC,EAAE,CAAA;KAAE,CAAC,CAAC;IAE5D;;OAEG;IACH,UAAU,EAAE,CACX,SAAS,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,wBAAwB,CAAA;KAAE,CAAC,CAAC;IAEpD;;OAEG;IACH,YAAY,EAAE,CACb,MAAM,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,EAC5C,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC;QAAE,QAAQ,EAAE,wBAAwB,EAAE,CAAA;KAAE,CAAC,CAAC;IAEvD;;OAEG;IACH,iBAAiB,EAAE,CAClB,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC;QAAE,aAAa,EAAE,6BAA6B,EAAE,CAAA;KAAE,CAAC,CAAC;IAEjE;;OAEG;IACH,WAAW,EAAE,CACZ,MAAM,EAAE;QAAE,WAAW,EAAE,MAAM,CAAA;KAAE,EAC/B,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE/B;;OAEG;IACH,iBAAiB,EAAE,CAClB,IAAI,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAC3C,YAAY,CAAC,EAAE,iBAAiB,KAC5B,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjC;AAED,KAAK,iBAAiB,GAAG,OAAO,iBAAiB,CAAC;AAGlD,MAAM,MAAM,iBAAiB,GAAG,wBAAwB,CAAC;AAEzD,eAAO,MAAM,uBAAuB;;wBAGR,UAAU,CAAC,iBAAiB,CAAC;yBAElC,WAAW,KAAG,wBAAwB;CAyT5D,CAAC"}

package/dist/client.js

@@ -0,0 +1,271 @@
+export const mercadoPagoClientPlugin = () => {
+    return {
+        id: "mercadopago",
+        $InferServerPlugin: {},
+        getActions: ($fetch) => ({
+            /**
+             * Get or create a Mercado Pago customer for the authenticated user
+             */
+            getOrCreateCustomer: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/customer", {
+                    method: "POST",
+                    body: data || {},
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Create a payment and get checkout URL
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.createPayment({
+             *   items: [{
+             *     title: "Premium Plan",
+             *     quantity: 1,
+             *     unitPrice: 99.90,
+             *     currencyId: "ARS"
+             *   }]
+             * });
+             *
+             * // Redirect user to checkout
+             * window.location.href = data.checkoutUrl;
+             * ```
+             */
+            createPayment: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/payment/create", {
+                    method: "POST",
+                    body: data,
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Create a marketplace payment with automatic split
+             *
+             * You need to have the seller's MP User ID (collector_id) which they get
+             * after authorizing your app via OAuth.
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.createPayment({
+             *   items: [{
+             *     title: "Product from Seller",
+             *     quantity: 1,
+             *     unitPrice: 100
+             *   }],
+             *   marketplace: {
+             *     collectorId: "123456789", // Seller's MP User ID
+             *     applicationFeePercentage: 10 // Platform keeps 10%
+             *   }
+             * });
+             * ```
+             */
+            createMarketplacePayment: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/payment/create", {
+                    method: "POST",
+                    body: data,
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Create a subscription with recurring payments
+             *
+             * Supports two modes:
+             * 1. With preapproval plan (reusable): Pass preapprovalPlanId
+             * 2. Direct subscription (one-off): Pass reason + autoRecurring
+             *
+             * @example With plan
+             * ```ts
+             * const { data } = await authClient.mercadoPago.createSubscription({
+             *   preapprovalPlanId: "plan_abc123"
+             * });
+             * ```
+             *
+             * @example Direct (without plan)
+             * ```ts
+             * const { data } = await authClient.mercadoPago.createSubscription({
+             *   reason: "Premium Monthly Plan",
+             *   autoRecurring: {
+             *     frequency: 1,
+             *     frequencyType: "months",
+             *     transactionAmount: 99.90,
+             *     currencyId: "ARS"
+             *   }
+             * });
+             * ```
+             */
+            createSubscription: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/subscription/create", {
+                    method: "POST",
+                    body: data,
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Cancel a subscription
+             *
+             * @example
+             * ```ts
+             * await authClient.mercadoPago.cancelSubscription({
+             *   subscriptionId: "sub_123"
+             * });
+             * ```
+             */
+            cancelSubscription: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/subscription/cancel", {
+                    method: "POST",
+                    body: data,
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Create a reusable preapproval plan (subscription template)
+             *
+             * Plans can be reused for multiple subscriptions. Create once,
+             * use many times with createSubscription({ preapprovalPlanId })
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.createPreapprovalPlan({
+             *   reason: "Premium Monthly",
+             *   autoRecurring: {
+             *     frequency: 1,
+             *     frequencyType: "months",
+             *     transactionAmount: 99.90,
+             *     freeTrial: {
+             *       frequency: 7,
+             *       frequencyType: "days"
+             *     }
+             *   },
+             *   repetitions: 12 // 12 months, omit for infinite
+             * });
+             *
+             * // Use the plan
+             * const planId = data.plan.mercadoPagoPlanId;
+             * ```
+             */
+            createPreapprovalPlan: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/plan/create", {
+                    method: "POST",
+                    body: data,
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * List all preapproval plans
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.listPreapprovalPlans();
+             *
+             * data.plans.forEach(plan => {
+             *   console.log(plan.reason); // "Premium Monthly"
+             *   console.log(plan.transactionAmount); // 99.90
+             * });
+             * ```
+             */
+            listPreapprovalPlans: async (fetchOptions) => {
+                return await $fetch("/mercado-pago/plans", {
+                    method: "GET",
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Get payment by ID
+             */
+            getPayment: async (paymentId, fetchOptions) => {
+                return await $fetch(`/mercado-pago/payment/${paymentId}`, {
+                    method: "GET",
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * List all payments for the authenticated user
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.listPayments({
+             *   limit: 20,
+             *   offset: 0
+             * });
+             * ```
+             */
+            listPayments: async (params, fetchOptions) => {
+                const query = new URLSearchParams();
+                if (params?.limit)
+                    query.set("limit", params.limit.toString());
+                if (params?.offset)
+                    query.set("offset", params.offset.toString());
+                return await $fetch(`/mercado-pago/payments?${query.toString()}`, {
+                    method: "GET",
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * List all subscriptions for the authenticated user
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.listSubscriptions();
+             * ```
+             */
+            listSubscriptions: async (fetchOptions) => {
+                return await $fetch(`/mercado-pago/subscriptions`, {
+                    method: "GET",
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Get OAuth authorization URL for marketplace sellers
+             *
+             * This is Step 1 of OAuth flow. Redirect the seller to this URL so they
+             * can authorize your app to process payments on their behalf.
+             *
+             * @example
+             * ```ts
+             * const { data } = await authClient.mercadoPago.getOAuthUrl({
+             *   redirectUri: "https://myapp.com/oauth/callback"
+             * });
+             *
+             * // Redirect seller to authorize
+             * window.location.href = data.authUrl;
+             * ```
+             */
+            getOAuthUrl: async (params, fetchOptions) => {
+                const query = new URLSearchParams();
+                query.set("redirectUri", params.redirectUri);
+                return await $fetch(`/mercado-pago/oauth/authorize?${query.toString()}`, {
+                    method: "GET",
+                    ...fetchOptions,
+                });
+            },
+            /**
+             * Exchange OAuth code for access token
+             *
+             * This is Step 2 of OAuth flow. After the seller authorizes and MP redirects
+             * them back with a code, exchange that code for an access token.
+             *
+             * @example
+             * ```ts
+             * // In your /oauth/callback page:
+             * const code = new URLSearchParams(window.location.search).get("code");
+             *
+             * const { data } = await authClient.mercadoPago.exchangeOAuthCode({
+             *   code,
+             *   redirectUri: "https://myapp.com/oauth/callback"
+             * });
+             *
+             * // Now you have the seller's MP User ID
+             * console.log(data.oauthToken.mercadoPagoUserId);
+             * ```
+             */
+            exchangeOAuthCode: async (data, fetchOptions) => {
+                return await $fetch("/mercado-pago/oauth/callback", {
+                    method: "POST",
+                    body: data,
+                    ...fetchOptions,
+                });
+            },
+        }),
+    };
+};
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AA8HA,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,EAAE;IAC3C,OAAO;QACN,EAAE,EAAE,aAAa;QACjB,kBAAkB,EAAE,EAAmC;QAEvD,UAAU,EAAE,CAAC,MAAmB,EAA4B,EAAE,CAAC,CAAC;YAC/D;;eAEG;YACH,mBAAmB,EAAE,KAAK,EACzB,IAIC,EACD,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,wBAAwB,EAAE;oBAC7C,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI,IAAI,EAAE;oBAChB,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;;;;;;;;eAiBG;YACH,aAAa,EAAE,KAAK,EACnB,IAAyB,EACzB,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,8BAA8B,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;;;;;;;;;;;eAoBG;YACH,wBAAwB,EAAE,KAAK,EAC9B,IAAyB,EACzB,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,8BAA8B,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;;;;;;;;;;;;;;;;;eA0BG;YACH,kBAAkB,EAAE,KAAK,EACxB,IAA8B,EAC9B,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,mCAAmC,EAAE;oBACxD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;eASG;YACH,kBAAkB,EAAE,KAAK,EACxB,IAAgC,EAChC,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,mCAAmC,EAAE;oBACxD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;;;;;;;;;;;;;;;;eAyBG;YACH,qBAAqB,EAAE,KAAK,EAC3B,IAAiC,EACjC,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,2BAA2B,EAAE;oBAChD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;;;eAYG;YACH,oBAAoB,EAAE,KAAK,EAAE,YAAgC,EAAE,EAAE;gBAChE,OAAO,MAAM,MAAM,CAAC,qBAAqB,EAAE;oBAC1C,MAAM,EAAE,KAAK;oBACb,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;eAEG;YACH,UAAU,EAAE,KAAK,EAChB,SAAiB,EACjB,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,yBAAyB,SAAS,EAAE,EAAE;oBACzD,MAAM,EAAE,KAAK;oBACb,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;eAUG;YACH,YAAY,EAAE,KAAK,EAClB,MAA4C,EAC5C,YAAgC,EAC/B,EAAE;gBACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;gBACpC,IAAI,MAAM,EAAE,KAAK;oBAAE,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC/D,IAAI,MAAM,EAAE,MAAM;oBAAE,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAElE,OAAO,MAAM,MAAM,CAAC,0BAA0B,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE;oBACjE,MAAM,EAAE,KAAK;oBACb,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;eAOG;YACH,iBAAiB,EAAE,KAAK,EAAE,YAAgC,EAAE,EAAE;gBAC7D,OAAO,MAAM,MAAM,CAAC,6BAA6B,EAAE;oBAClD,MAAM,EAAE,KAAK;oBACb,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;YAED;;;;;;;;;;;;;;;eAeG;YACH,WAAW,EAAE,KAAK,EACjB,MAA+B,EAC/B,YAAgC,EAC/B,EAAE;gBACH,MAAM,KAAK,GAAG,IAAI,eAAe,EAAE,CAAC;gBACpC,KAAK,CAAC,GAAG,CAAC,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;gBAE7C,OAAO,MAAM,MAAM,CAClB,iCAAiC,KAAK,CAAC,QAAQ,EAAE,EAAE,EACnD;oBACC,MAAM,EAAE,KAAK;oBACb,GAAG,YAAY;iBACf,CACD,CAAC;YACH,CAAC;YAED;;;;;;;;;;;;;;;;;;;eAmBG;YACH,iBAAiB,EAAE,KAAK,EACvB,IAA2C,EAC3C,YAAgC,EAC/B,EAAE;gBACH,OAAO,MAAM,MAAM,CAAC,8BAA8B,EAAE;oBACnD,MAAM,EAAE,MAAM;oBACd,IAAI,EAAE,IAAI;oBACV,GAAG,YAAY;iBACf,CAAC,CAAC;YACJ,CAAC;SACD,CAAC;KAC+B,CAAC;AACpC,CAAC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { mercadoPagoClientPlugin } from "./client";
+export { mercadoPagoPlugin } from "./server";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/dist/index.js

@@ -0,0 +1,3 @@
+export { mercadoPagoClientPlugin } from "./client";
+export { mercadoPagoPlugin } from "./server";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,UAAU,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC"}

package/dist/security.d.ts

@@ -0,0 +1,103 @@
+import { APIError } from "better-auth/api";
+/**
+ * Verify Mercado Pago webhook signature
+ * https://www.mercadopago.com/developers/en/docs/subscriptions/additional-content/security/signature
+ */
+export declare function verifyWebhookSignature(params: {
+    xSignature: string | null;
+    xRequestId: string | null;
+    dataId: string;
+    secret: string;
+}): boolean;
+/**
+ * Rate limiting store (in-memory, use Redis in production)
+ */
+declare class RateLimiter {
+    private attempts;
+    check(key: string, maxAttempts: number, windowMs: number): boolean;
+    cleanup(): void;
+}
+export declare const rateLimiter: RateLimiter;
+/**
+ * Validate payment amount to prevent manipulation
+ */
+export declare function validatePaymentAmount(requestedAmount: number, mpPaymentAmount: number, tolerance?: number): boolean;
+/**
+ * Sanitize metadata to prevent injection attacks
+ */
+export declare function sanitizeMetadata(metadata: Record<string, any>): Record<string, any>;
+/**
+ * Validate callback URL to prevent open redirects
+ */
+export declare function validateCallbackUrl(url: string, allowedDomains: string[]): boolean;
+/**
+ * Idempotency key validation
+ */
+export declare function validateIdempotencyKey(key: string): boolean;
+/**
+ * Prevent timing attacks on webhook validation
+ */
+export declare function secureCompare(a: string, b: string): boolean;
+/**
+ * Error codes mapping
+ */
+export declare const MercadoPagoErrorCodes: {
+    readonly INVALID_API_KEY: "invalid_api_key";
+    readonly UNAUTHORIZED: "unauthorized";
+    readonly INSUFFICIENT_FUNDS: "cc_rejected_insufficient_amount";
+    readonly INVALID_CARD: "cc_rejected_bad_filled_card_number";
+    readonly CARD_DISABLED: "cc_rejected_card_disabled";
+    readonly MAX_ATTEMPTS: "cc_rejected_max_attempts";
+    readonly DUPLICATED_PAYMENT: "cc_rejected_duplicated_payment";
+    readonly SUBSCRIPTION_NOT_FOUND: "subscription_not_found";
+    readonly SUBSCRIPTION_ALREADY_CANCELLED: "subscription_already_cancelled";
+    readonly INVALID_PARAMETER: "invalid_parameter";
+    readonly RESOURCE_NOT_FOUND: "resource_not_found";
+    readonly INTERNAL_SERVER_ERROR: "internal_server_error";
+};
+/**
+ * Custom error class for Mercado Pago errors
+ */
+export declare class MercadoPagoError extends Error {
+    code: string;
+    message: string;
+    statusCode: number;
+    details?: any | undefined;
+    constructor(code: string, message: string, statusCode?: number, details?: any | undefined);
+    toAPIError(): APIError;
+}
+/**
+ * Handle Mercado Pago API errors
+ */ export declare function handleMercadoPagoError(error: any): never;
+/**
+ * Webhook event types validation
+ */
+export declare const VALID_WEBHOOK_TOPICS: readonly ["payment", "merchant_order", "subscription_preapproval", "subscription_preapproval_plan", "subscription_authorized_payment", "point_integration_wh", "topic_claims_integration_wh", "topic_merchant_order_wh", "delivery_cancellation"];
+export type WebhookTopic = (typeof VALID_WEBHOOK_TOPICS)[number];
+export declare function isValidWebhookTopic(topic: string): topic is WebhookTopic;
+/**
+ * Idempotency store (in-memory, use Redis in production)
+ */
+declare class IdempotencyStore {
+    private store;
+    get(key: string): any | null;
+    set(key: string, result: any, ttlMs?: number): void;
+    cleanup(): void;
+}
+export declare const idempotencyStore: IdempotencyStore;
+/**
+ * CSRF token validation
+ */
+export declare function validateCSRFToken(token: string, expectedToken: string): boolean;
+/**
+ * Input validation helpers
+ */
+export declare const ValidationRules: {
+    email: (email: string) => boolean;
+    amount: (amount: number) => boolean;
+    currency: (currency: string) => boolean;
+    frequency: (frequency: number) => boolean;
+    userId: (userId: string) => boolean;
+};
+export {};
+//# sourceMappingURL=security.d.ts.map

package/dist/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../src/security.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAE3C;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE;IAC9C,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CACf,GAAG,OAAO,CA2BV;AAED;;GAEG;AACH,cAAM,WAAW;IAChB,OAAO,CAAC,QAAQ,CAA8D;IAE9E,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAoBlE,OAAO;CAQP;AAED,eAAO,MAAM,WAAW,aAAoB,CAAC;AAK7C;;GAEG;AACH,wBAAgB,qBAAqB,CACpC,eAAe,EAAE,MAAM,EACvB,eAAe,EAAE,MAAM,EACvB,SAAS,GAAE,MAAa,GACtB,OAAO,CAGT;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAE/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAE3B,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAsBrB;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAClC,GAAG,EAAE,MAAM,EACX,cAAc,EAAE,MAAM,EAAE,GACtB,OAAO,CAsBT;AAED;;GAEG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAO3D;AAED;;GAEG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAU3D;AAED;;GAEG;AACH,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;CAoBxB,CAAC;AAEX;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IAElC,IAAI,EAAE,MAAM;IACH,OAAO,EAAE,MAAM;IACxB,UAAU,EAAE,MAAM;IAElB,OAAO,CAAC,EAAE,GAAG;gBAJb,IAAI,EAAE,MAAM,EACH,OAAO,EAAE,MAAM,EACxB,UAAU,GAAE,MAAY,EAExB,OAAO,CAAC,EAAE,GAAG,YAAA;IAMrB,UAAU,IAAI,QAAQ;CAuEtB;AAED;;GAEG,CACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,GAAG,GAAG,KAAK,CAcxD;AAED;;GAEG;AACH,eAAO,MAAM,oBAAoB,mPAUvB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,KAAK,IAAI,YAAY,CAExE;AAED;;GAEG;AACH,cAAM,gBAAgB;IAErB,OAAO,CAAC,KAAK,CAA8D;IAG3E,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,GAAG,IAAI;IAU5B,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,GAAE,MAA4B;IAOjE,OAAO;CAQP;AAED,eAAO,MAAM,gBAAgB,kBAAyB,CAAC;AAKvD;;GAEG;AACH,wBAAgB,iBAAiB,CAChC,KAAK,EAAE,MAAM,EACb,aAAa,EAAE,MAAM,GACnB,OAAO,CAET;AAED;;GAEG;AACH,eAAO,MAAM,eAAe;mBACZ,MAAM,KAAG,OAAO;qBAKd,MAAM,KAAG,OAAO;yBAIZ,MAAM,KAAG,OAAO;2BAcd,MAAM,KAAG,OAAO;qBAItB,MAAM,KAAG,OAAO;CAIjC,CAAC"}