gamemoney 6.0.0 → 7.0.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2018 Maxim Makarov
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -4,17 +4,21 @@
 
 Full API documentation [here](https://cp.gmpays.com/apidoc)
 
-## Installation 
+## Installation
+
 ```sh
 $ npm install gamemoney
 ```
 
+The package is ESM-only (there is no CommonJS build) and has no runtime dependencies. It requires Node.js `>=22.12.0`, where ES modules can also be loaded with `require()`.
+
 ## Usage
 
 ### Initialization
+
 ```typescript
-import fs from 'fs'
-import GameMoney from 'gamemoney'
+import fs from 'node:fs'
+import { GameMoney } from 'gamemoney'
 
 const gm = new GameMoney({
 	project: 42,
@@ -23,7 +27,7 @@ const gm = new GameMoney({
 	// Optional. But to make checkouts must be specified
 	rsaPrivateKey: {
 		key: fs.readFileSync('./private.pem').toString(),
-		passphrase: '123' // Optional
+		passphrase: '123', // Optional
 	},
 
 	// OR:
@@ -31,8 +35,64 @@ const gm = new GameMoney({
 	// 	process.env.GM_RSA_PRIVATE_KEY ?? '',
 	// 	'base64',
 	// )
+
+	// Optional. API host from the project settings. Default: https://paygate.gamemoney.com
+	apiUrl: 'https://paygate.gamemoney.com',
+
+	// Optional. GameMoney certificate or public key from the project settings,
+	// used to verify signatures of responses and notifications.
+	// Default: the certificate bundled with the package
+	gameMoneyPublicKey: fs.readFileSync('./gm.crt'),
+
+	// Optional. Request timeout in milliseconds. Default: no timeout
+	timeout: 30_000,
 })
 ```
 
+From CommonJS code, via Node's built-in [`require(esm)`](https://nodejs.org/api/modules.html#loading-ecmascript-modules-using-require):
+
+```javascript
+const { GameMoney, verifyRsaSignature } = require('gamemoney')
+```
+
+### Errors
+
+- `GameMoneyError`: GameMoney responded with `"state": "error"`, the error text is in `message`.
+- `GameMoneyHttpError`: GameMoney responded with a non-2xx HTTP status, available in `status`.
+- `TimeoutError`: the request did not complete within `timeout`. GameMoney may still process it, so check the operation status (for example, with `getCheckoutStatus`) before retrying.
+- `Error` with `Response signature mismatch` or `Wrong rand parameter`: the response failed verification and must not be trusted.
+
+### Notifications
+
+GameMoney resends payment and payout notifications for 24 hours until the project responds with `{"success": "true"}`:
+
+```typescript
+if (!gm.verifyRsaSignature(notification)) {
+	response.send({ success: 'error', error: 'signature mismatch' })
+	return
+}
+
+response.send({ success: 'true' })
+```
+
+Transfer notifications are answered with the created invoice signed with HMAC, see [the example](https://github.com/gamemoney-ps/gamemoney-node-sdk/tree/master/src/examples/transfer/callback.ts).
+
+### Signatures
+
+`parametersToString`, `generateHmacSignature`, `generateRsaSignature` and `verifyRsaSignature` implement the [GameMoney signature algorithm](https://cp.gmpays.com/apidoc#sign_general) and are exported for custom integrations and tests, for example to sign responses of a GameMoney mock.
+
+### Other API methods
+
+Any API method can be called with a signed request:
+
+```typescript
+const response = await gm.request('exchange/rate', { from: 'USD', to: 'RUB' })
+```
+
 ### Examples
-See examples in [src/examples](https://github.com/gamemoney-ps/gamemoney-node-sdk/tree/master/src/examples) directory
+
+See examples in [src/examples](https://github.com/gamemoney-ps/gamemoney-node-sdk/tree/master/src/examples) directory. They read the credentials from `GAMEMONEY_PROJECT_ID`, `GAMEMONEY_HMAC_PRIVATE_KEY` and `GAMEMONEY_RSA_PRIVATE_KEY` (base64) and can be run directly:
+
+```sh
+$ node --env-file=.env src/examples/statistics/balance.ts
+```

package/dist/certificate.d.ts

@@ -0,0 +1 @@
+export declare const gameMoneyCertificate = "-----BEGIN CERTIFICATE-----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\n61gqP9VPE2AVVwKypWOJidMxMZ03n4+MlyTbz3mnBXL9\n-----END CERTIFICATE-----\n";

package/{certs/gm.crt → dist/certificate.js}

@@ -1,4 +1,4 @@
------BEGIN CERTIFICATE-----
+export const gameMoneyCertificate = `-----BEGIN CERTIFICATE-----
 MIID3TCCAsWgAwIBAgIJANtAJ3UMiGLZMA0GCSqGSIb3DQEBCwUAMIGEMQswCQYD
 VQQGEwJDUjERMA8GA1UECAwIU2FuIEpvc2UxEjAQBgNVBAcMCVNhbnRhIEFuYTET
 MBEGA1UECgwKSUJTIFMuUi5MLjEeMBwGA1UEAwwVY2hlY2tpbi5nYW1lbW9uZXku
@@ -21,3 +21,4 @@ gWjEZAlmwQcnilZ6ZUhhn+0yHFbCoX8fETH/sZlofZOnN8EkETyqyfThIpTX41XH
 geivrSfScNQH1mWJuE0DXMobNrhyJpxHRJwXXQyck6TiDM8OETki4PBzjKk/Gsyc
 61gqP9VPE2AVVwKypWOJidMxMZ03n4+MlyTbz3mnBXL9
 -----END CERTIFICATE-----
+`;

package/{index.d.ts → dist/index.d.ts}

@@ -1,8 +1,10 @@
-import { type RsaKey, type HmacKey } from './utils.js';
-export declare enum SignType {
-    'HMAC' = "HMAC",
-    'RSA' = "RSA"
-}
+import { type RsaKey, type RsaPublicKey, type HmacKey } from './utils.ts';
+export { generateHmacSignature, generateRsaSignature, parametersToString, verifyRsaSignature, } from './utils.ts';
+export declare const SignType: {
+    readonly HMAC: 'HMAC';
+    readonly RSA: 'RSA';
+};
+export type SignType = (typeof SignType)[keyof typeof SignType];
 export type GenericRequest = {
     [key: string]: any;
     rand?: string;
@@ -21,9 +23,12 @@ export type Config = {
     rsaPrivateKey?: RsaKey;
     hmacPrivateKey: HmacKey;
     project: number;
+    apiUrl?: string;
+    gameMoneyPublicKey?: RsaPublicKey;
+    timeout?: number;
 };
 export type CreateInvoiceRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     type: string;
     user: string;
     ip: string;
@@ -40,6 +45,8 @@ export type CreateInvoiceRequest = {
     return_mode?: 'skip';
     recurring?: 'yes';
     recurrent_token?: string;
+    payment_token?: string;
+    theme?: 'dark' | 'light';
 };
 export type CreateInvoiceResponse = {
     invoice: number;
@@ -47,11 +54,11 @@ export type CreateInvoiceResponse = {
     data: string;
 };
 export type GetInvoiceStatusRequestWithProjectInvoiceId = {
-    [key: string]: any;
+    [key: string]: unknown;
     invoice: number;
 };
 export type GetInvoiceStatusRequestWithGamemoneyInvoiceId = {
-    [key: string]: any;
+    [key: string]: unknown;
     project_invoice: string;
 };
 export type GetInvoiceStatusRequest = GetInvoiceStatusRequestWithProjectInvoiceId | GetInvoiceStatusRequestWithGamemoneyInvoiceId;
@@ -77,7 +84,7 @@ export type GetInvoiceStatusResponse = {
     txid?: string;
 };
 export type GetInvoiceListRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     start: string;
     finish: string;
     status?: InvoiceStatus;
@@ -86,7 +93,14 @@ export type GetInvoiceListResponse = {
     list: GetInvoiceStatusResponse[];
     is_limit_exceeded: 'yes' | 'no';
 };
-export type GetCardSessionStatusRequest = Record<string, any> & ({
+export type AddTokenInvoiceRequest = {
+    [key: string]: unknown;
+    user: string;
+};
+export type AddTokenInvoiceResponse = {
+    token: string;
+};
+export type GetCardSessionStatusRequest = Record<string, unknown> & ({
     invoice: string;
 } | {
     project_invoice: string;
@@ -102,11 +116,11 @@ export type FinishCardSessionStatusResponse = {
 };
 export type GetCardSessionStatusResponse = WaitOrDeclineCardSessionStatusResponse | FinishCardSessionStatusResponse;
 export type CancelCheckoutRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     projectId: string;
 };
 export type GetCheckoutStatusRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     projectId: string;
 };
 export type Refund = {
@@ -136,7 +150,7 @@ export type GetCheckoutStatusResponse = {
     txid?: string;
 };
 export type GetCheckoutListRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     start: string;
     finish: string;
 };
@@ -145,7 +159,7 @@ export type GetCheckoutListResponse = {
     is_limit_exceeded: 'yes' | 'no';
 };
 export type CreateCheckoutRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     projectId: string;
     user: string;
     ip: string;
@@ -157,30 +171,52 @@ export type CreateCheckoutRequest = {
     userCurrency?: string;
     prepareToken?: string;
 };
+export type PrepareCheckoutRequest = Record<string, unknown> & {
+    type: string;
+    wallet?: string;
+    currency?: string;
+    userCurrency?: string;
+} & ({
+    amount: number;
+} | {
+    paid_amount: number;
+});
+export type PrepareCheckoutResponse = {
+    amount: number;
+    net_amount: number;
+    paid_amount: number;
+    currency_project: string;
+    currency_user: string;
+    token?: string;
+    rate?: number;
+    expire?: number;
+};
 export type AddCardRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     user: string;
     redirect: string;
+    language?: string;
+    theme?: 'dark' | 'light';
 };
 export type AddCardResponse = {
     url: string;
 };
 export type AddTokenCardRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     user: string;
 };
 export type AddTokenCardResponse = {
     token: string;
 };
 export type GetCardListRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     user: string;
 };
 export type GetCardListResponse = {
     pans: string[];
 };
 export type GetCardFullListRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     user: string;
 };
 export type GetCardFullListResponse = {
@@ -189,16 +225,17 @@ export type GetCardFullListResponse = {
         expire_month: string;
         expire_year: string;
         cardholder: string;
+        country?: string;
     }>;
 };
 export type DeleteCardRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     user: string;
     pan: string;
 };
 export type PrepareExchangeRequest = {
-    [key: string]: any;
-    externalId: string;
+    [key: string]: unknown;
+    externalId?: string;
     minAmount: number;
     maxAmount: number;
     from: string;
@@ -212,12 +249,12 @@ export type PrepareExchangeResponse = {
     exchanged_amount_to: number;
 };
 export type ConvertExchangeRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     id: number;
     amount: number;
 };
 export type FastConvertExchangeRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     amount: number;
     from: string;
     to: string;
@@ -227,7 +264,7 @@ export type FastConvertExchangeResponse = {
     rate: number;
 };
 export type GetExchangeRateRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     from: string;
     to: string;
 };
@@ -236,7 +273,7 @@ export type GetExchangeRateResponse = {
     sell: number;
 };
 export type GetExchangeInfoRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     minAmount: number;
     maxAmount: number;
     from: string;
@@ -250,7 +287,7 @@ export type GetExchangeInfoResponse = {
     exchanged_amount_to: number;
 };
 export type GetExchangeStatusRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     id?: number;
     externalId?: string;
 };
@@ -264,7 +301,7 @@ export type GetExchangeStatusResponse = {
     status: string;
 };
 export type GetBalanceStatisticsRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     currency: string;
 };
 export type GetBalanceStatisticsResponse = {
@@ -278,7 +315,7 @@ export type GetBalanceStatisticsResponse = {
     contract_balance: number;
 };
 export type GetDaysBalanceStatisticsRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     currency: string;
     start: string;
     finish: string;
@@ -309,7 +346,7 @@ export type GetPayTypesStatisticsResponse = {
     checkout: PaySystem[];
 };
 export type CreateTerminalRequest = {
-    [key: string]: any;
+    [key: string]: unknown;
     user: string;
     amount?: number;
     comment?: string;
@@ -319,8 +356,13 @@ export type CreateTerminalRequest = {
     currency?: string;
     use_user_select_currency?: 'yes' | 'no';
     language?: string;
+    return_mode?: 'skip';
+    recurring?: 'yes';
     terminal_allow_methods?: string[];
     terminal_disable_methods?: string[];
+    terminal_livetime?: number;
+    terminal_country?: string;
+    terminal_theme?: 'dark' | 'light';
 };
 export type CreateTerminalResponse = {
     url: string;
@@ -375,6 +417,7 @@ export type TransferNotification = {
     currency: string;
     user: string;
     type: string;
+    project: number;
     ip: string;
     time: number;
     comment: string;
@@ -384,23 +427,32 @@ type Payload = Record<string, unknown>;
 export declare class GameMoneyError extends Error {
     constructor(message: string);
 }
-export default class GameMoney {
+export declare class GameMoneyHttpError extends Error {
+    readonly status: number;
+    constructor(status: number, statusText: string);
+}
+export declare class GameMoney {
     private readonly config;
-    private readonly got;
     constructor(config: Config);
     request<T extends GenericResponse>(url: string, payload?: Payload, signType?: SignType): Promise<T>;
-    generateHmacSignature(body: any): string;
-    verifyRsaSignature(body: any): boolean;
+    generateHmacSignature(body: Record<string, unknown>): string;
+    verifyRsaSignature(body: unknown): boolean;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_insert_api) */
     createInvoice(body: CreateInvoiceRequest): Promise<CreateInvoiceResponse & GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_status) */
     getInvoiceStatus(body: GetInvoiceStatusRequest): Promise<GetInvoiceStatusResponse & GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_list) */
     getInvoiceList(body: GetInvoiceListRequest): Promise<GetInvoiceListResponse & GenericResponse>;
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_add_token) */
+    addTokenInvoice(body: AddTokenInvoiceRequest): Promise<AddTokenInvoiceResponse & GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_session_status) */
     getCardSessionStatus(body: GetCardSessionStatusRequest): Promise<GetCardSessionStatusResponse & GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_insert) */
     createCheckout(body: CreateCheckoutRequest): Promise<GenericResponse>;
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_prepare) */
+    prepareCheckout(body: PrepareCheckoutRequest): Promise<PrepareCheckoutResponse & GenericResponse>;
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_check) */
+    checkCheckout(body: CreateCheckoutRequest): Promise<GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_cancel) */
     cancelCheckout(body: CancelCheckoutRequest): Promise<GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_status) */
@@ -415,7 +467,7 @@ export default class GameMoney {
     getCardList(body: GetCardListRequest): Promise<GetCardListResponse & GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_fulllist) */
     getCardFullList(body: GetCardFullListRequest): Promise<GetCardFullListResponse & GenericResponse>;
-    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_list) */
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_delete) */
     deleteCard(body: DeleteCardRequest): Promise<GenericResponse>;
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#exchange_prepare) */
     prepareExchange(body: PrepareExchangeRequest): Promise<PrepareExchangeResponse & GenericResponse>;
@@ -438,4 +490,4 @@ export default class GameMoney {
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_api_terminal) */
     createTerminal(body: CreateTerminalRequest): Promise<CreateTerminalResponse & GenericResponse>;
 }
-export {};
+export default GameMoney;

package/{index.js → dist/index.js}

@@ -1,34 +1,36 @@
-import got from 'got';
-import { generateRsaSignature, generateHmacSignature, getRandomString, verifyRsaSignature, } from './utils.js';
-export var SignType;
-(function (SignType) {
-    SignType["HMAC"] = "HMAC";
-    SignType["RSA"] = "RSA";
-})(SignType || (SignType = {}));
+import { generateRsaSignature, generateHmacSignature, getRandomString, stringifyForm, verifyRsaSignature, } from './utils.js';
+export { generateHmacSignature, generateRsaSignature, parametersToString, verifyRsaSignature, } from './utils.js';
+export const SignType = {
+    HMAC: 'HMAC',
+    RSA: 'RSA',
+};
 export class GameMoneyError extends Error {
     constructor(message) {
         super(message);
         this.name = 'GameMoneyError';
     }
 }
-export default class GameMoney {
+export class GameMoneyHttpError extends Error {
+    status;
+    constructor(status, statusText) {
+        super(`Response code ${status} (${statusText})`);
+        this.name = 'GameMoneyHttpError';
+        this.status = status;
+    }
+}
+export class GameMoney {
     config;
-    got = got.extend({
-        prefixUrl: 'https://paygate.gamemoney.com',
-        responseType: 'json',
-    });
     constructor(config) {
         this.config = config;
-        this.config = config;
     }
     async request(url, payload = {}, signType = SignType.HMAC) {
         const form = {
-            rand: getRandomString(20),
-            project: this.config.project,
             ...payload,
+            project: payload.project ?? this.config.project,
+            rand: payload.rand ?? getRandomString(20),
         };
         if (signType === SignType.RSA) {
-            if (!this.config.rsaPrivateKey) {
+            if (this.config.rsaPrivateKey === undefined) {
                 throw new Error("To make requests with RSA sign type, 'rsaPrivateKey' must be provided");
             }
             form.signature = generateRsaSignature(form, this.config.rsaPrivateKey);
@@ -36,12 +38,22 @@ export default class GameMoney {
         else {
             form.signature = generateHmacSignature(form, this.config.hmacPrivateKey);
         }
-        const response = await this.got.post({
-            url,
-            form,
-            resolveBodyOnly: true,
+        const httpResponse = await fetch(new URL(url, this.config.apiUrl ?? 'https://paygate.gamemoney.com'), {
+            method: 'POST',
+            headers: {
+                accept: 'application/json',
+                'content-type': 'application/x-www-form-urlencoded',
+            },
+            body: stringifyForm(form),
+            signal: this.config.timeout === undefined
+                ? null
+                : AbortSignal.timeout(this.config.timeout),
         });
-        if (!verifyRsaSignature(response)) {
+        if (!httpResponse.ok) {
+            throw new GameMoneyHttpError(httpResponse.status, httpResponse.statusText);
+        }
+        const response = (await httpResponse.json());
+        if (!verifyRsaSignature(response, this.config.gameMoneyPublicKey)) {
             throw new Error('Response signature mismatch');
         }
         if (form.rand !== response.rand) {
@@ -56,7 +68,7 @@ export default class GameMoney {
         return generateHmacSignature(body, this.config.hmacPrivateKey);
     }
     verifyRsaSignature(body) {
-        return verifyRsaSignature(body);
+        return verifyRsaSignature(body, this.config.gameMoneyPublicKey);
     }
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_insert_api) */
     async createInvoice(body) {
@@ -70,6 +82,10 @@ export default class GameMoney {
     async getInvoiceList(body) {
         return this.request('invoice/list', body);
     }
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#invoice_add_token) */
+    async addTokenInvoice(body) {
+        return this.request('invoice/addtoken', body);
+    }
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_session_status) */
     async getCardSessionStatus(body) {
         return this.request('invoice/cardsession/status', body);
@@ -78,6 +94,14 @@ export default class GameMoney {
     async createCheckout(body) {
         return this.request('checkout/insert', body, SignType.RSA);
     }
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_prepare) */
+    async prepareCheckout(body) {
+        return this.request('checkout/prepare', body);
+    }
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_check) */
+    async checkCheckout(body) {
+        return this.request('checkout/check', body, SignType.RSA);
+    }
     /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#checkout_cancel) */
     async cancelCheckout(body) {
         return this.request('checkout/cancel', body);
@@ -106,7 +130,7 @@ export default class GameMoney {
     async getCardFullList(body) {
         return this.request('card/fulllist', body);
     }
-    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_list) */
+    /** For more details and usage information see [docs](https://cp.gmpays.com/apidoc#card_delete) */
     async deleteCard(body) {
         return this.request('card/delete', body);
     }
@@ -151,3 +175,4 @@ export default class GameMoney {
         return this.request('terminal/create', body);
     }
 }
+export default GameMoney;

package/{utils.d.ts → dist/utils.d.ts}

@@ -1,16 +1,17 @@
-/// <reference types="node" resolution-mode="require"/>
 import crypto from 'node:crypto';
 export type RsaKey = Parameters<crypto.Sign['sign']>[0];
+export type RsaPublicKey = Parameters<crypto.Verify['verify']>[0];
 export type HmacKey = Parameters<typeof crypto.createHmac>[1];
 type JsonPrimitive = number | number[] | string | string[] | undefined | null;
 type Json = {
     [key: string]: Json | JsonPrimitive;
 };
-type Body = {
-    signature: string;
-} & Json;
+type FormValue = string | number | boolean | bigint | undefined | null | FormValue[] | {
+    [key: string]: FormValue;
+};
 export declare function parametersToString(body: Json): string;
-export declare function verifyRsaSignature(body: Body): boolean;
+export declare function stringifyForm(form: Record<string, FormValue>): string;
+export declare function verifyRsaSignature(body: unknown, publicKey?: RsaPublicKey): boolean;
 export declare function generateRsaSignature(body: Json, key: RsaKey): string;
 export declare function generateHmacSignature(body: Json, key: HmacKey): string;
 export declare function getRandomString(length: number): string;

package/dist/utils.js

@@ -0,0 +1,77 @@
+import crypto from 'node:crypto';
+import { gameMoneyCertificate } from './certificate.js';
+export function parametersToString(body) {
+    let parametersString = '';
+    const keys = Object.keys(body).sort();
+    if (Array.isArray(body)) {
+        keys.sort((a, b) => Number(a) - Number(b));
+    }
+    for (const key of keys) {
+        let value = body[key];
+        if (key === 'signature') {
+            continue;
+        }
+        if (value === null || value === undefined) {
+            value = '';
+        }
+        if (typeof value === 'object' && value !== null) {
+            value = parametersToString(value);
+        }
+        parametersString += `${key}:${value};`;
+    }
+    return parametersString;
+}
+// Wire format of gamemoney@3 (request + qs): RFC 3986 escaping, nested values as `key[index]=value`
+function encodeFormComponent(value) {
+    return encodeURIComponent(value).replaceAll(/[!'()*]/g, (char) => `%${char.codePointAt(0).toString(16).toUpperCase()}`);
+}
+function appendFormValue(pairs, key, value) {
+    if (value === undefined) {
+        return;
+    }
+    if (typeof value === 'object' && value !== null) {
+        for (const [nestedKey, nestedValue] of Object.entries(value)) {
+            appendFormValue(pairs, `${key}[${nestedKey}]`, nestedValue);
+        }
+        return;
+    }
+    pairs.push(`${encodeFormComponent(key)}=${encodeFormComponent(value === null ? '' : String(value))}`);
+}
+export function stringifyForm(form) {
+    const pairs = [];
+    for (const [key, value] of Object.entries(form)) {
+        appendFormValue(pairs, key, value);
+    }
+    return pairs.join('&');
+}
+export function verifyRsaSignature(body, publicKey = gameMoneyCertificate) {
+    if (typeof body !== 'object' ||
+        body === null ||
+        !('signature' in body) ||
+        typeof body.signature !== 'string' ||
+        body.signature === '') {
+        return false;
+    }
+    return crypto
+        .createVerify('RSA-SHA256')
+        .update(parametersToString(body), 'utf8')
+        .verify(publicKey, body.signature, 'base64');
+}
+export function generateRsaSignature(body, key) {
+    return crypto
+        .createSign('RSA-SHA256')
+        .update(parametersToString(body), 'utf8')
+        .sign(key, 'base64');
+}
+export function generateHmacSignature(body, key) {
+    return crypto
+        .createHmac('sha256', key)
+        .update(parametersToString(body), 'utf8')
+        .digest('hex');
+}
+export function getRandomString(length) {
+    return crypto
+        .randomBytes(Math.ceil(length / 2))
+        .toString('hex')
+        .slice(0, length);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "gamemoney",
-	"version": "6.0.0",
+	"version": "7.0.0",
 	"description": "GameMoney API wrapper for Node.js",
 	"keywords": [
 		"gamemoney",
@@ -11,75 +11,66 @@
 	"homepage": "https://github.com/gamemoney-ps/gamemoney-node-sdk#readme",
 	"bugs": {
 		"url": "https://github.com/gamemoney-ps/gamemoney-node-sdk/issues",
-		"email": "maxpain177@gmail.com"
+		"email": "maxpain@linux.com"
 	},
 	"author": {
-		"name": "Maxim Makarov",
-		"email": "maxpain177@gmail.com",
-		"url": "https://maxpain.pro"
+		"name": "Max Makarov",
+		"email": "maxpain@linux.com"
 	},
 	"license": "MIT",
 	"repository": {
 		"type": "git",
-		"url": "https://github.com/gamemoney-ps/gamemoney-node-sdk"
+		"url": "git+https://github.com/gamemoney-ps/gamemoney-node-sdk.git"
 	},
 	"type": "module",
 	"exports": {
 		".": {
-			"import": "./index.js",
-			"types": "./index.d.ts"
+			"types": "./dist/index.d.ts",
+			"default": "./dist/index.js"
+		},
+		"./package.json": "./package.json"
+	},
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
+	"files": [
+		"dist"
+	],
+	"sideEffects": false,
+	"engines": {
+		"node": ">=22.12.0"
+	},
+	"devEngines": {
+		"runtime": {
+			"name": "node",
+			"version": ">=22.22.1",
+			"onFail": "error"
 		}
 	},
 	"scripts": {
-		"prebuild": "rm -rf .build",
-		"build": "tsc",
-		"postbuild": "cp -r package*.json .npmignore ./src/certs README.md .build",
-		"test": "NODE_OPTIONS=--experimental-vm-modules jest",
-		"lint": "xo",
-		"lint:fix": "xo --fix"
+		"build": "rm -rf dist && tsc -p tsconfig.build.json",
+		"typecheck": "tsc",
+		"test": "node --test 'src/**/*.test.ts'",
+		"lint": "oxlint && oxfmt --check",
+		"lint:fix": "oxlint --fix && oxfmt",
+		"prepublishOnly": "npm run lint && npm run typecheck && npm test",
+		"prepack": "npm run build",
+		"prepare": "husky"
 	},
 	"lint-staged": {
-		"*.ts": "xo"
+		"*.ts": "oxlint",
+		"*": "oxfmt --check --no-error-on-unmatched-pattern"
 	},
-	"jest": {
-		"testMatch": [
-			"**/*.test.ts"
-		],
-		"preset": "ts-jest/presets/default-esm",
-		"globals": {
-			"ts-jest": {
-				"useESM": true
-			}
-		},
-		"moduleNameMapper": {
-			"^(\\.{1,2}/.*)\\.js$": "$1"
-		},
-		"maxConcurrency": 50
-	},
-	"xo": {
-		"extends": "@onmoon",
-		"prettier": true
-	},
-	"prettier": "@onmoon/prettier-config",
 	"devDependencies": {
-		"@onmoon/eslint-config": "^1.0.12",
-		"@onmoon/prettier-config": "^1.0.2",
-		"@onmoon/tsconfigs": "^3.0.0",
-		"@types/body-parser": "^1.19.2",
-		"@types/express": "^4.17.17",
-		"@types/jest": "^29.5.2",
-		"@types/node": "^20.4.0",
-		"@types/uuid": "^9.0.2",
-		"body-parser": "^1.20.2",
-		"express": "^4.18.2",
-		"husky": "^8.0.3",
-		"lint-staged": "^13.2.3",
-		"ts-jest": "^29.1.1",
-		"typescript": "^5.1.6",
-		"uuid": "^9.0.0",
-		"xo": "^0.54.2"
-	},
-	"dependencies": {
-		"got": "^12.6.1"
+		"@types/body-parser": "^1.19.6",
+		"@types/express": "^5.0.6",
+		"@types/node": "^22.20.5",
+		"body-parser": "^2.4.0",
+		"express": "^5.3.0",
+		"husky": "^9.1.7",
+		"lint-staged": "^17.6.0",
+		"oxfmt": "^0.74.0",
+		"oxlint": "^1.89.0",
+		"oxlint-tsgolint": "^7.0.2005",
+		"typescript": "^7.0.2"
 	}
-}
+}

package/utils.js

@@ -1,51 +0,0 @@
-import { URL } from 'node:url';
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-const publicCert = fs
-    .readFileSync(new URL('certs/gm.crt', import.meta.url))
-    .toString();
-export function parametersToString(body) {
-    let parametersString = '';
-    const keys = Object.keys(body).sort();
-    if (Array.isArray(body)) {
-        keys.sort((a, b) => Number(a) - Number(b));
-    }
-    for (const key of keys) {
-        let value = body[key];
-        if (key === 'signature') {
-            continue;
-        }
-        if (value === null || value === undefined) {
-            value = '';
-        }
-        if (typeof value === 'object' && value !== null) {
-            value = parametersToString(value);
-        }
-        parametersString += `${key}:${value};`;
-    }
-    return parametersString;
-}
-export function verifyRsaSignature(body) {
-    return crypto
-        .createVerify('RSA-SHA256')
-        .update(parametersToString(body), 'utf8')
-        .verify(publicCert, body.signature, 'base64');
-}
-export function generateRsaSignature(body, key) {
-    return crypto
-        .createSign('RSA-SHA256')
-        .update(parametersToString(body), 'utf8')
-        .sign(key, 'base64');
-}
-export function generateHmacSignature(body, key) {
-    return crypto
-        .createHmac('sha256', key)
-        .update(parametersToString(body), 'utf8')
-        .digest('hex');
-}
-export function getRandomString(length) {
-    return crypto
-        .randomBytes(Math.ceil(length / 2))
-        .toString('hex')
-        .slice(0, length);
-}