meridianjs 0.2.4 → 0.2.7

package/dist/providers/billdesk/adapter.js

@@ -0,0 +1,212 @@
+import { createHmac, randomUUID, timingSafeEqual } from "node:crypto";
+import { ResponseNormalizer } from "../../core/normalizer.js";
+import { MeridianError, SDK_VERSION } from "../../core/types.js";
+import { BilldeskPaginationStrategy } from "./pagination.js";
+const JOSE_CONTENT_TYPE = "application/jose";
+function base64url(input) {
+    return Buffer.from(input).toString("base64url");
+}
+function base64urlDecode(input) {
+    return Buffer.from(input, "base64url");
+}
+/**
+ * BillDesk's payment APIs use JOSE (JWS-HMAC, alg HS256) instead of bearer tokens:
+ * the request/response bodies are wrapped in a compact JWS, and the merchant's
+ * `clientid` travels inside the JWS header rather than as a separate HTTP header.
+ * `BD-Traceid` doubles as the request's idempotency key (BillDesk rejects a repeat
+ * Traceid within the same day) and `BD-Timestamp` is the epoch seconds at send time.
+ *
+ * See: https://docs.billdesk.io/reference/authentications-and-endpoints
+ */
+export class BilldeskAdapter {
+    baseUrl;
+    constructor(baseUrl = "https://api.billdesk.com/") {
+        this.baseUrl = baseUrl;
+    }
+    buildRequest(input) {
+        const { endpoint, options, authToken, baseUrl } = input;
+        const effectiveBaseUrl = baseUrl ?? this.baseUrl;
+        const url = new URL(endpoint, effectiveBaseUrl);
+        if (options.query) {
+            for (const [key, value] of Object.entries(options.query)) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        const [clientId, secretKey] = authToken.token.split("|BD|");
+        const method = options.method ?? "GET";
+        const headers = {
+            Accept: JOSE_CONTENT_TYPE,
+            "User-Agent": `Meridian-SDK/${SDK_VERSION}`,
+            "BD-Timestamp": String(Math.floor(Date.now() / 1000)),
+            "BD-Traceid": (options.idempotencyKey ?? randomUUID())
+                .replace(/[^a-zA-Z0-9]/g, "")
+                .slice(0, 35),
+            ...options.headers,
+        };
+        let body;
+        if (clientId && secretKey) {
+            if (options.body && method !== "GET" && method !== "HEAD") {
+                body = this.signJws(options.body, clientId, secretKey);
+                headers["Content-Type"] = JOSE_CONTENT_TYPE;
+            }
+            else if (method !== "GET" && method !== "HEAD") {
+                body = this.signJws({}, clientId, secretKey);
+                headers["Content-Type"] = JOSE_CONTENT_TYPE;
+            }
+        }
+        const built = { url: url.toString(), method, headers };
+        if (body !== undefined) {
+            built.body = body;
+        }
+        return built;
+    }
+    /** Builds a compact JWS (header.payload.signature, alg=HS256) per BillDesk's JOSE contract. */
+    signJws(payload, clientId, secretKey) {
+        const header = { alg: "HS256", clientid: clientId };
+        const encodedHeader = base64url(JSON.stringify(header));
+        const encodedPayload = base64url(JSON.stringify(payload ?? {}));
+        const signingInput = `${encodedHeader}.${encodedPayload}`;
+        const signature = base64url(createHmac("sha256", secretKey).update(signingInput).digest());
+        return `${signingInput}.${signature}`;
+    }
+    /** Decodes a compact JWS payload segment back into JSON, without verifying the signature. */
+    decodeJwsPayload(token) {
+        const parts = token.split(".");
+        if (parts.length !== 3 || !parts[1])
+            return null;
+        try {
+            return JSON.parse(base64urlDecode(parts[1]).toString("utf-8"));
+        }
+        catch {
+            return null;
+        }
+    }
+    parseResponse(raw) {
+        let body = raw.body;
+        if (typeof body === "string" && body.split(".").length === 3) {
+            const decoded = this.decodeJwsPayload(body);
+            if (decoded !== null) {
+                body = decoded;
+            }
+        }
+        const effectiveRaw = { ...raw, body };
+        const rateLimitInfo = this.rateLimitPolicy(raw.headers);
+        const paginationStrategy = this.paginationStrategy();
+        const paginationInfo = ResponseNormalizer.extractPaginationInfo(effectiveRaw, paginationStrategy);
+        return ResponseNormalizer.normalize(effectiveRaw, "billdesk", rateLimitInfo, paginationInfo, [], "1.0.0");
+    }
+    parseError(raw) {
+        if (raw instanceof Error) {
+            const msg = raw.message.toLowerCase();
+            if (msg.includes("fetch") ||
+                msg.includes("network") ||
+                msg.includes("econnreset") ||
+                msg.includes("etimedout") ||
+                msg.includes("enotfound") ||
+                msg.includes("timeout")) {
+                return this.createMeridianError("network", true, "Network request failed. Check your connection and try again.", { originalError: raw.message });
+            }
+        }
+        if (typeof raw === "object" &&
+            raw !== null &&
+            "status" in raw &&
+            typeof raw.status === "number") {
+            return this.parseHttpError(raw);
+        }
+        return this.createMeridianError("provider", false, "An unexpected error occurred", { raw });
+    }
+    parseHttpError(error) {
+        const { status } = error;
+        let body = error.body;
+        if (typeof body === "string" && body.split(".").length === 3) {
+            const decoded = this.decodeJwsPayload(body);
+            if (decoded !== null) {
+                body = decoded;
+            }
+        }
+        const errorBody = (typeof body === "object" ? body : undefined);
+        const errorMessage = errorBody?.message ?? errorBody?.transaction_error_desc ?? errorBody?.error_code;
+        if (status === 401 || status === 403) {
+            return this.createMeridianError("auth", false, errorMessage ?? "Authentication failed. Check your BillDesk client ID and secret key.", { errorCode: errorBody?.error_code }, undefined, status);
+        }
+        if (status === 404) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Resource not found.", { errorCode: errorBody?.error_code }, undefined, 404);
+        }
+        if (status === 429) {
+            return this.createMeridianError("rate_limit", true, errorMessage ?? "Rate limit exceeded. Please wait before retrying.", { errorCode: errorBody?.error_code }, undefined, 429);
+        }
+        if (status === 400 || status === 409 || status === 422) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", { errorCode: errorBody?.error_code, errorType: errorBody?.error_type }, undefined, status);
+        }
+        if (status >= 500) {
+            return this.createMeridianError("provider", true, errorMessage ?? `BillDesk API returned error ${status}. This may be temporary.`, { status }, undefined, status);
+        }
+        if (status >= 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? `Request failed with status ${status}.`, { status }, undefined, status);
+        }
+        return this.createMeridianError("provider", false, `Unexpected response status ${status}.`, { status }, undefined, status);
+    }
+    async authStrategy(config) {
+        const clientId = config.clientId ?? config.username;
+        const secretKey = config.clientSecret ?? config.apiSecret ?? config.password;
+        if (!clientId || !secretKey) {
+            throw this.createMeridianError("auth", false, "BillDesk authentication requires a client ID and secret key. " +
+                "Set auth.clientId + auth.clientSecret (merchant client ID and HMAC secret key).", {}, undefined, 401);
+        }
+        return { token: `${clientId}|BD|${secretKey}` };
+    }
+    rateLimitPolicy(_headers) {
+        // BillDesk does not publish rate-limit headers; return conservative defaults.
+        return {
+            limit: 60,
+            remaining: 60,
+            reset: new Date(Date.now() + 60_000),
+        };
+    }
+    paginationStrategy() {
+        return new BilldeskPaginationStrategy();
+    }
+    getIdempotencyConfig() {
+        return {
+            defaultSafeOperations: new Set(["GET", "HEAD", "OPTIONS"]),
+            operationOverrides: new Map(),
+        };
+    }
+    /**
+     * Verifies a webhook/LCM notification's JWS-HMAC signature. BillDesk delivers
+     * webhook payloads as compact JWS strings signed with the merchant's secret key;
+     * `signature` is the full `header.payload.signature` string (or just the signature
+     * segment), and `payload` is the raw request body received from BillDesk.
+     */
+    verifyWebhook(payload, signature, secret) {
+        const raw = typeof payload === "string" ? payload : payload.toString("utf-8");
+        const parts = raw.split(".");
+        let signingInput;
+        let providedSignature;
+        if (parts.length === 3 && parts[0] && parts[1]) {
+            signingInput = `${parts[0]}.${parts[1]}`;
+            providedSignature = signature.includes(".")
+                ? (signature.split(".").pop() ?? signature)
+                : signature;
+        }
+        else {
+            signingInput = raw;
+            providedSignature = signature;
+        }
+        const expected = base64url(createHmac("sha256", secret).update(signingInput).digest());
+        try {
+            const a = Buffer.from(expected);
+            const b = Buffer.from(providedSignature);
+            if (a.length !== b.length)
+                return false;
+            return timingSafeEqual(a, b);
+        }
+        catch {
+            return false;
+        }
+    }
+    createMeridianError(category, retryable, message, metadata, retryAfter, status) {
+        return new MeridianError(message, category, "billdesk", retryable, "", metadata, retryAfter, status);
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/providers/billdesk/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/providers/billdesk/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAa9D,OAAO,EAAyB,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAW7D,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAE7C,SAAS,SAAS,CAAC,KAAsB;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAS;IAExB,YAAY,OAAO,GAAG,2BAA2B;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,KAAmB;QAC9B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxD,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhD,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QAED,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QAEvC,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,iBAAiB;YACzB,YAAY,EAAE,gBAAgB,WAAW,EAAE;YAC3C,cAAc,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YACrD,YAAY,EAAE,CAAC,OAAO,CAAC,cAAc,IAAI,UAAU,EAAE,CAAC;iBACnD,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC;iBAC5B,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YACf,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QAEF,IAAI,IAAwB,CAAC;QAC7B,IAAI,QAAQ,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,IAAI,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC1D,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBACvD,OAAO,CAAC,cAAc,CAAC,GAAG,iBAAiB,CAAC;YAC9C,CAAC;iBAAM,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBACjD,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;gBAC7C,OAAO,CAAC,cAAc,CAAC,GAAG,iBAAiB,CAAC;YAC9C,CAAC;QACH,CAAC;QAED,MAAM,KAAK,GAAiB,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,+FAA+F;IACvF,OAAO,CAAC,OAAgB,EAAE,QAAgB,EAAE,SAAiB;QACnE,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACpD,MAAM,aAAa,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAChE,MAAM,YAAY,GAAG,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC;QAC1D,MAAM,SAAS,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3F,OAAO,GAAG,YAAY,IAAI,SAAS,EAAE,CAAC;IACxC,CAAC;IAED,6FAA6F;IACrF,gBAAgB,CAAC,KAAa;QACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,aAAa,CAAC,GAAgB;QAC5B,IAAI,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;QACpB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,GAAG,OAAO,CAAC;YACjB,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAgB,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC;QACnD,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,qBAAqB,CAC7D,YAAY,EACZ,kBAAkB,CACnB,CAAC;QACF,OAAO,kBAAkB,CAAC,SAAS,CACjC,YAAY,EACZ,UAAU,EACV,aAAa,EACb,cAAc,EACd,EAAE,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,GAAY;QACrB,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,CAAC;gBACD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,SAAS,EACT,IAAI,EACJ,8DAA8D,EAC9D,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,QAAQ,IAAI,GAAG;YACf,OAAQ,GAA+B,CAAC,MAAM,KAAK,QAAQ,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACxB,GAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IAEO,cAAc,CAAC,KAItB;QACC,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,IAAI,IAAI,GAAG,KAAK,CAAC,IAA8C,CAAC;QAChE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;gBACrB,IAAI,GAAG,OAA4B,CAAC;YACtC,CAAC;QACH,CAAC;QACD,MAAM,SAAS,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAEjD,CAAC;QACd,MAAM,YAAY,GAChB,SAAS,EAAE,OAAO,IAAI,SAAS,EAAE,sBAAsB,IAAI,SAAS,EAAE,UAAU,CAAC;QAEnF,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,mBAAmB,CAC7B,MAAM,EACN,KAAK,EACL,YAAY,IAAI,sEAAsE,EACtF,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACpC,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,qBAAqB,EACrC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,IAAI,EACJ,YAAY,IAAI,mDAAmD,EACnE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACtE,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,IAAI,EACJ,YAAY,IAAI,+BAA+B,MAAM,0BAA0B,EAC/E,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,8BAA8B,MAAM,GAAG,EACvD,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,KAAK,EACL,8BAA8B,MAAM,GAAG,EACvC,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAkB;QACnC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC;QACpD,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,CAAC;QAE7E,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;YAC5B,MAAM,IAAI,CAAC,mBAAmB,CAC5B,MAAM,EACN,KAAK,EACL,+DAA+D;gBAC7D,iFAAiF,EACnF,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,GAAG,QAAQ,OAAO,SAAS,EAAE,EAAE,CAAC;IAClD,CAAC;IAED,eAAe,CAAC,QAAiB;QAC/B,8EAA8E;QAC9E,OAAO;YACL,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,0BAA0B,EAAE,CAAC;IAC1C,CAAC;IAED,oBAAoB;QAClB,OAAO;YACL,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,kBAAkB,EAAE,IAAI,GAAG,EAA4B;SACxD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,OAAwB,EAAE,SAAiB,EAAE,MAAc;QACvE,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAE7B,IAAI,YAAoB,CAAC;QACzB,IAAI,iBAAyB,CAAC;QAC9B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,YAAY,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACzC,iBAAiB,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACzC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,SAAS,CAAC;gBAC3C,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,GAAG,CAAC;YACnB,iBAAiB,GAAG,SAAS,CAAC;QAChC,CAAC;QAED,MAAM,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YACzC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,QAAmC,EACnC,SAAkB,EAClB,OAAe,EACf,QAAkC,EAClC,UAAiB,EACjB,MAAe;QAEf,OAAO,IAAI,aAAa,CACtB,OAAO,EACP,QAAQ,EACR,UAAU,EACV,SAAS,EACT,EAAE,EACF,QAAQ,EACR,UAAU,EACV,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/providers/billdesk/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/billdesk/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/billdesk/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/providers/billdesk/index.js

@@ -0,0 +1,3 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+//# sourceMappingURL=index.js.map

package/dist/providers/billdesk/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/billdesk/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/providers/billdesk/pagination.d.ts

@@ -0,0 +1,15 @@
+import type { PaginationStrategy, RawResponse, RequestOptions } from "../../core/types.js";
+/**
+ * BillDesk list endpoints (e.g. transaction search) are page-based:
+ * { transactions: [...], page_number: number, total_pages: number }
+ */
+export declare class BilldeskPaginationStrategy implements PaginationStrategy {
+    extractCursor(response: RawResponse): string | null;
+    extractTotal(response: RawResponse): number | null;
+    hasNext(response: RawResponse): boolean;
+    buildNextRequest(endpoint: string, options: RequestOptions, cursor: string): {
+        endpoint: string;
+        options: RequestOptions;
+    };
+}
+//# sourceMappingURL=pagination.d.ts.map

package/dist/providers/billdesk/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../src/providers/billdesk/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAI3F;;;GAGG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,aAAa,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAUnD,YAAY,CAAC,QAAQ,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAUlD,OAAO,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO;IAcvC,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,MAAM,GACb;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE;CAYjD"}

package/dist/providers/billdesk/pagination.js

@@ -0,0 +1,51 @@
+const DEFAULT_PAGE_SIZE = 20;
+/**
+ * BillDesk list endpoints (e.g. transaction search) are page-based:
+ * { transactions: [...], page_number: number, total_pages: number }
+ */
+export class BilldeskPaginationStrategy {
+    extractCursor(response) {
+        if (typeof response.body === "object" && response.body !== null) {
+            const body = response.body;
+            if (typeof body.page_number === "number") {
+                return String(body.page_number + 1);
+            }
+        }
+        return null;
+    }
+    extractTotal(response) {
+        if (typeof response.body === "object" && response.body !== null) {
+            const body = response.body;
+            if (typeof body.total_count === "number") {
+                return body.total_count;
+            }
+        }
+        return null;
+    }
+    hasNext(response) {
+        if (typeof response.body === "object" && response.body !== null) {
+            const body = response.body;
+            if (typeof body.page_number === "number" && typeof body.total_pages === "number") {
+                return body.page_number < body.total_pages;
+            }
+            const items = body.transactions ?? body.data;
+            if (Array.isArray(items)) {
+                return items.length === DEFAULT_PAGE_SIZE;
+            }
+        }
+        return false;
+    }
+    buildNextRequest(endpoint, options, cursor) {
+        return {
+            endpoint,
+            options: {
+                ...options,
+                query: {
+                    ...options.query,
+                    page_number: cursor,
+                },
+            },
+        };
+    }
+}
+//# sourceMappingURL=pagination.js.map

package/dist/providers/billdesk/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../src/providers/billdesk/pagination.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,EAAE,CAAC;AAE7B;;;GAGG;AACH,MAAM,OAAO,0BAA0B;IACrC,aAAa,CAAC,QAAqB;QACjC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA+B,CAAC;YACtD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,MAAM,CAAC,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,QAAqB;QAChC,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA+B,CAAC;YACtD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACzC,OAAO,IAAI,CAAC,WAAW,CAAC;YAC1B,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,QAAqB;QAC3B,IAAI,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YAChE,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA+B,CAAC;YACtD,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBACjF,OAAO,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;YAC7C,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,IAAI,CAAC;YAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzB,OAAO,KAAK,CAAC,MAAM,KAAK,iBAAiB,CAAC;YAC5C,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB,CACd,QAAgB,EAChB,OAAuB,EACvB,MAAc;QAEd,OAAO;YACL,QAAQ;YACR,OAAO,EAAE;gBACP,GAAG,OAAO;gBACV,KAAK,EAAE;oBACL,GAAG,OAAO,CAAC,KAAK;oBAChB,WAAW,EAAE,MAAM;iBACpB;aACF;SACF,CAAC;IACJ,CAAC;CACF"}

package/dist/providers/ccavenue/adapter.d.ts

@@ -0,0 +1,38 @@
+import type { AdapterInput, AuthConfig, AuthToken, BuiltRequest, IdempotencyConfig, NormalizedResponse, PaginationStrategy, ProviderAdapter, RateLimitInfo, RawResponse } from "../../core/types.js";
+import { MeridianError } from "../../core/types.js";
+/** Encrypts a JSON-serializable payload into the hex `enc_request` CCAvenue expects. */
+export declare function ccavenueEncrypt(data: unknown, workingKey: string): string;
+/** Decrypts a hex `enc_response` string back into its plaintext (typically JSON). */
+export declare function ccavenueDecrypt(encHex: string, workingKey: string): string;
+/**
+ * CCAvenue's REST APIs exchange AES-128-CBC encrypted payloads (`enc_request` /
+ * `enc_response`) keyed off a merchant "working key", alongside a plaintext
+ * `access_code` that identifies the registered integration. Because
+ * `parseResponse` doesn't have access to the working key, this adapter passes
+ * `enc_response` through untouched in the normalized data — call the exported
+ * `ccavenueDecrypt` helper (or the adapter's `decryptResponse`) with your
+ * working key to recover the plaintext payload.
+ */
+export declare class CcavenueAdapter implements ProviderAdapter {
+    private baseUrl;
+    constructor(baseUrl?: string);
+    buildRequest(input: AdapterInput): BuiltRequest;
+    /** Decrypts a normalized response's `enc_response` field with the given working key. */
+    decryptResponse(response: NormalizedResponse, workingKey: string): unknown;
+    parseResponse(raw: RawResponse): NormalizedResponse;
+    parseError(raw: unknown): MeridianError;
+    private parseHttpError;
+    authStrategy(config: AuthConfig): Promise<AuthToken>;
+    rateLimitPolicy(_headers: Headers): RateLimitInfo;
+    paginationStrategy(): PaginationStrategy;
+    getIdempotencyConfig(): IdempotencyConfig;
+    /**
+     * CCAvenue server-to-server (S2S) response/webhook payloads carry a plaintext
+     * `enc_resp_hash` / signature derived as HMAC-SHA256 of the encrypted response
+     * body using the working key. `payload` should be the raw `enc_response` (or
+     * full body string) CCAvenue posted, and `secret` the merchant's working key.
+     */
+    verifyWebhook(payload: string | Buffer, signature: string, secret: string): boolean;
+    private createMeridianError;
+}
+//# sourceMappingURL=adapter.d.ts.map

package/dist/providers/ccavenue/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../src/providers/ccavenue/adapter.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,YAAY,EACZ,UAAU,EACV,SAAS,EACT,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,aAAa,EACb,WAAW,EACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAyB,aAAa,EAAe,MAAM,qBAAqB,CAAC;AAgBxF,wFAAwF;AACxF,wBAAgB,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAKzE;AAED,qFAAqF;AACrF,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAK1E;AAED;;;;;;;;GAQG;AACH,qBAAa,eAAgB,YAAW,eAAe;IACrD,OAAO,CAAC,OAAO,CAAS;gBAEZ,OAAO,SAA8B;IAIjD,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY;IAgC/C,wFAAwF;IACxF,eAAe,CAAC,QAAQ,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAU1E,aAAa,CAAC,GAAG,EAAE,WAAW,GAAG,kBAAkB;IAqBnD,UAAU,CAAC,GAAG,EAAE,OAAO,GAAG,aAAa;IAkCvC,OAAO,CAAC,cAAc;IAqFhB,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,SAAS,CAAC;IAmB1D,eAAe,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa;IASjD,kBAAkB,IAAI,kBAAkB;IAIxC,oBAAoB,IAAI,iBAAiB;IAOzC;;;;;OAKG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO;IAanF,OAAO,CAAC,mBAAmB;CAmB5B"}

package/dist/providers/ccavenue/adapter.js

@@ -0,0 +1,181 @@
+import { createCipheriv, createDecipheriv, createHash, createHmac, timingSafeEqual, } from "node:crypto";
+import { ResponseNormalizer } from "../../core/normalizer.js";
+import { MeridianError, SDK_VERSION } from "../../core/types.js";
+import { CcavenuePaginationStrategy } from "./pagination.js";
+// CCAvenue's published integration kit (Crypto.php / Crypto.java) derives a
+// fixed 16-byte AES-128-CBC key/IV pair from the merchant's "working key":
+//   key = MD5(workingKey)            (raw 16-byte digest)
+//   iv  = ASCII bytes "0123456789abcdef" (constant across all merchants)
+const CCAVENUE_IV = Buffer.from("0123456789abcdef", "utf-8");
+/** Encrypts a JSON-serializable payload into the hex `enc_request` CCAvenue expects. */
+export function ccavenueEncrypt(data, workingKey) {
+    const key = createHash("md5").update(workingKey, "utf-8").digest();
+    const cipher = createCipheriv("aes-128-cbc", key, CCAVENUE_IV);
+    const plaintext = typeof data === "string" ? data : JSON.stringify(data);
+    return Buffer.concat([cipher.update(plaintext, "utf-8"), cipher.final()]).toString("hex");
+}
+/** Decrypts a hex `enc_response` string back into its plaintext (typically JSON). */
+export function ccavenueDecrypt(encHex, workingKey) {
+    const key = createHash("md5").update(workingKey, "utf-8").digest();
+    const decipher = createDecipheriv("aes-128-cbc", key, CCAVENUE_IV);
+    const ciphertext = Buffer.from(encHex, "hex");
+    return Buffer.concat([decipher.update(ciphertext), decipher.final()]).toString("utf-8");
+}
+/**
+ * CCAvenue's REST APIs exchange AES-128-CBC encrypted payloads (`enc_request` /
+ * `enc_response`) keyed off a merchant "working key", alongside a plaintext
+ * `access_code` that identifies the registered integration. Because
+ * `parseResponse` doesn't have access to the working key, this adapter passes
+ * `enc_response` through untouched in the normalized data — call the exported
+ * `ccavenueDecrypt` helper (or the adapter's `decryptResponse`) with your
+ * working key to recover the plaintext payload.
+ */
+export class CcavenueAdapter {
+    baseUrl;
+    constructor(baseUrl = "https://api.ccavenue.com/") {
+        this.baseUrl = baseUrl;
+    }
+    buildRequest(input) {
+        const { endpoint, options, authToken, baseUrl } = input;
+        const effectiveBaseUrl = baseUrl ?? this.baseUrl;
+        const url = new URL(endpoint, effectiveBaseUrl);
+        const [accessCode, workingKey] = authToken.token.split("|CCA|");
+        const method = options.method ?? "GET";
+        if (options.query) {
+            for (const [key, value] of Object.entries(options.query)) {
+                url.searchParams.set(key, String(value));
+            }
+        }
+        if (accessCode) {
+            url.searchParams.set("access_code", accessCode);
+        }
+        url.searchParams.set("request_type", "JSON");
+        url.searchParams.set("response_type", "JSON");
+        if (options.body && workingKey) {
+            url.searchParams.set("enc_request", ccavenueEncrypt(options.body, workingKey));
+        }
+        const headers = {
+            "Content-Type": "application/x-www-form-urlencoded",
+            "User-Agent": `Meridian-SDK/${SDK_VERSION}`,
+            ...options.headers,
+        };
+        return { url: url.toString(), method, headers };
+    }
+    /** Decrypts a normalized response's `enc_response` field with the given working key. */
+    decryptResponse(response, workingKey) {
+        const data = response.data;
+        if (!data?.enc_response)
+            return response.data;
+        try {
+            return JSON.parse(ccavenueDecrypt(data.enc_response, workingKey));
+        }
+        catch {
+            return ccavenueDecrypt(data.enc_response, workingKey);
+        }
+    }
+    parseResponse(raw) {
+        const rateLimitInfo = this.rateLimitPolicy(raw.headers);
+        const paginationStrategy = this.paginationStrategy();
+        const paginationInfo = ResponseNormalizer.extractPaginationInfo(raw, paginationStrategy);
+        const warnings = [];
+        if (typeof raw.body === "object" && raw.body !== null && "enc_response" in raw.body) {
+            warnings.push("Response payload is AES-encrypted (enc_response). Decrypt it with your working key " +
+                "via `ccavenueDecrypt(encHex, workingKey)` or `adapter.decryptResponse(response, workingKey)`.");
+        }
+        return ResponseNormalizer.normalize(raw, "ccavenue", rateLimitInfo, paginationInfo, warnings, "1.0.0");
+    }
+    parseError(raw) {
+        if (raw instanceof Error) {
+            const msg = raw.message.toLowerCase();
+            if (msg.includes("fetch") ||
+                msg.includes("network") ||
+                msg.includes("econnreset") ||
+                msg.includes("etimedout") ||
+                msg.includes("enotfound") ||
+                msg.includes("timeout")) {
+                return this.createMeridianError("network", true, "Network request failed. Check your connection and try again.", { originalError: raw.message });
+            }
+        }
+        if (typeof raw === "object" &&
+            raw !== null &&
+            "status" in raw &&
+            typeof raw.status === "number") {
+            return this.parseHttpError(raw);
+        }
+        return this.createMeridianError("provider", false, "An unexpected error occurred", { raw });
+    }
+    parseHttpError(error) {
+        const { status, body } = error;
+        const errorBody = body;
+        const errorMessage = errorBody?.error_desc ?? errorBody?.reason;
+        if (status === 401 || status === 403) {
+            return this.createMeridianError("auth", false, errorMessage ?? "Authentication failed. Check your CCAvenue access code and working key.", { errorCode: errorBody?.error_code }, undefined, status);
+        }
+        if (status === 404) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Resource not found.", { errorCode: errorBody?.error_code }, undefined, 404);
+        }
+        if (status === 429) {
+            return this.createMeridianError("rate_limit", true, errorMessage ?? "Rate limit exceeded. Please wait before retrying.", { errorCode: errorBody?.error_code }, undefined, 429);
+        }
+        if (status === 400 || status === 422) {
+            return this.createMeridianError("validation", false, errorMessage ?? "Request validation failed.", { errorCode: errorBody?.error_code, reason: errorBody?.reason }, undefined, status);
+        }
+        if (status >= 500) {
+            return this.createMeridianError("provider", true, errorMessage ?? `CCAvenue API returned error ${status}. This may be temporary.`, { status }, undefined, status);
+        }
+        if (status >= 400) {
+            return this.createMeridianError("validation", false, errorMessage ?? `Request failed with status ${status}.`, { status }, undefined, status);
+        }
+        return this.createMeridianError("provider", false, `Unexpected response status ${status}.`, { status }, undefined, status);
+    }
+    async authStrategy(config) {
+        const accessCode = config.apiKey ?? config.username;
+        const workingKey = config.apiSecret ?? config.password ?? config.clientSecret;
+        if (!accessCode || !workingKey) {
+            throw this.createMeridianError("auth", false, "CCAvenue authentication requires an access code and working key. " +
+                "Set auth.apiKey (access code) + auth.apiSecret (working key).", {}, undefined, 401);
+        }
+        return { token: `${accessCode}|CCA|${workingKey}` };
+    }
+    rateLimitPolicy(_headers) {
+        // CCAvenue does not publish rate-limit headers; return conservative defaults.
+        return {
+            limit: 60,
+            remaining: 60,
+            reset: new Date(Date.now() + 60_000),
+        };
+    }
+    paginationStrategy() {
+        return new CcavenuePaginationStrategy();
+    }
+    getIdempotencyConfig() {
+        return {
+            defaultSafeOperations: new Set(["GET", "HEAD", "OPTIONS"]),
+            operationOverrides: new Map(),
+        };
+    }
+    /**
+     * CCAvenue server-to-server (S2S) response/webhook payloads carry a plaintext
+     * `enc_resp_hash` / signature derived as HMAC-SHA256 of the encrypted response
+     * body using the working key. `payload` should be the raw `enc_response` (or
+     * full body string) CCAvenue posted, and `secret` the merchant's working key.
+     */
+    verifyWebhook(payload, signature, secret) {
+        const raw = typeof payload === "string" ? payload : payload.toString("utf-8");
+        const expected = createHmac("sha256", secret).update(raw).digest("hex");
+        try {
+            const a = Buffer.from(expected);
+            const b = Buffer.from(signature);
+            if (a.length !== b.length)
+                return false;
+            return timingSafeEqual(a, b);
+        }
+        catch {
+            return false;
+        }
+    }
+    createMeridianError(category, retryable, message, metadata, retryAfter, status) {
+        return new MeridianError(message, category, "ccavenue", retryable, "", metadata, retryAfter, status);
+    }
+}
+//# sourceMappingURL=adapter.js.map

package/dist/providers/ccavenue/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../../src/providers/ccavenue/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,UAAU,EACV,UAAU,EACV,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAa9D,OAAO,EAAyB,aAAa,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAS7D,4EAA4E;AAC5E,2EAA2E;AAC3E,0DAA0D;AAC1D,yEAAyE;AACzE,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,OAAO,CAAC,CAAC;AAE7D,wFAAwF;AACxF,MAAM,UAAU,eAAe,CAAC,IAAa,EAAE,UAAkB;IAC/D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IAC/D,MAAM,SAAS,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,eAAe,CAAC,MAAc,EAAE,UAAkB;IAChE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,MAAM,EAAE,CAAC;IACnE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,aAAa,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC1F,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,CAAS;IAExB,YAAY,OAAO,GAAG,2BAA2B;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,YAAY,CAAC,KAAmB;QAC9B,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;QACxD,MAAM,gBAAgB,GAAG,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC;QACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QAEhD,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG,SAAS,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,KAAK,CAAC;QAEvC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;YAClB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACzD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3C,CAAC;QACH,CAAC;QACD,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;QAClD,CAAC;QACD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QAC7C,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;QAE9C,IAAI,OAAO,CAAC,IAAI,IAAI,UAAU,EAAE,CAAC;YAC/B,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,aAAa,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC;QACjF,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,mCAAmC;YACnD,YAAY,EAAE,gBAAgB,WAAW,EAAE;YAC3C,GAAG,OAAO,CAAC,OAAO;SACnB,CAAC;QAEF,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAClD,CAAC;IAED,wFAAwF;IACxF,eAAe,CAAC,QAA4B,EAAE,UAAkB;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,IAA6C,CAAC;QACpE,IAAI,CAAC,IAAI,EAAE,YAAY;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC;QAC9C,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,eAAe,CAAC,IAAI,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,aAAa,CAAC,GAAgB;QAC5B,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxD,MAAM,kBAAkB,GAAG,IAAI,CAAC,kBAAkB,EAAE,CAAC;QACrD,MAAM,cAAc,GAAG,kBAAkB,CAAC,qBAAqB,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACzF,MAAM,QAAQ,GAAa,EAAE,CAAC;QAC9B,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,cAAc,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACpF,QAAQ,CAAC,IAAI,CACX,qFAAqF;gBACnF,+FAA+F,CAClG,CAAC;QACJ,CAAC;QACD,OAAO,kBAAkB,CAAC,SAAS,CACjC,GAAG,EACH,UAAU,EACV,aAAa,EACb,cAAc,EACd,QAAQ,EACR,OAAO,CACR,CAAC;IACJ,CAAC;IAED,UAAU,CAAC,GAAY;QACrB,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACtC,IACE,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;gBACvB,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC;gBAC1B,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EACvB,CAAC;gBACD,OAAO,IAAI,CAAC,mBAAmB,CAC7B,SAAS,EACT,IAAI,EACJ,8DAA8D,EAC9D,EAAE,aAAa,EAAE,GAAG,CAAC,OAAO,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IACE,OAAO,GAAG,KAAK,QAAQ;YACvB,GAAG,KAAK,IAAI;YACZ,QAAQ,IAAI,GAAG;YACf,OAAQ,GAA+B,CAAC,MAAM,KAAK,QAAQ,EAC3D,CAAC;YACD,OAAO,IAAI,CAAC,cAAc,CACxB,GAAqF,CACtF,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAAC,UAAU,EAAE,KAAK,EAAE,8BAA8B,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9F,CAAC;IAEO,cAAc,CAAC,KAItB;QACC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;QAC/B,MAAM,SAAS,GAAG,IAAqC,CAAC;QACxD,MAAM,YAAY,GAAG,SAAS,EAAE,UAAU,IAAI,SAAS,EAAE,MAAM,CAAC;QAEhE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,mBAAmB,CAC7B,MAAM,EACN,KAAK,EACL,YAAY,IAAI,yEAAyE,EACzF,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACpC,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,qBAAqB,EACrC,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,IAAI,EACJ,YAAY,IAAI,mDAAmD,EACnE,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,EACpC,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,4BAA4B,EAC5C,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAC/D,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,IAAI,EACJ,YAAY,IAAI,+BAA+B,MAAM,0BAA0B,EAC/E,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC,mBAAmB,CAC7B,YAAY,EACZ,KAAK,EACL,YAAY,IAAI,8BAA8B,MAAM,GAAG,EACvD,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC,mBAAmB,CAC7B,UAAU,EACV,KAAK,EACL,8BAA8B,MAAM,GAAG,EACvC,EAAE,MAAM,EAAE,EACV,SAAS,EACT,MAAM,CACP,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAkB;QACnC,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,YAAY,CAAC;QAE9E,IAAI,CAAC,UAAU,IAAI,CAAC,UAAU,EAAE,CAAC;YAC/B,MAAM,IAAI,CAAC,mBAAmB,CAC5B,MAAM,EACN,KAAK,EACL,mEAAmE;gBACjE,+DAA+D,EACjE,EAAE,EACF,SAAS,EACT,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,QAAQ,UAAU,EAAE,EAAE,CAAC;IACtD,CAAC;IAED,eAAe,CAAC,QAAiB;QAC/B,8EAA8E;QAC9E,OAAO;YACL,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,KAAK,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;SACrC,CAAC;IACJ,CAAC;IAED,kBAAkB;QAChB,OAAO,IAAI,0BAA0B,EAAE,CAAC;IAC1C,CAAC;IAED,oBAAoB;QAClB,OAAO;YACL,qBAAqB,EAAE,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;YAC1D,kBAAkB,EAAE,IAAI,GAAG,EAA4B;SACxD,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,OAAwB,EAAE,SAAiB,EAAE,MAAc;QACvE,MAAM,GAAG,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC9E,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACxE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YACxC,OAAO,eAAe,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,mBAAmB,CACzB,QAAmC,EACnC,SAAkB,EAClB,OAAe,EACf,QAAkC,EAClC,UAAiB,EACjB,MAAe;QAEf,OAAO,IAAI,aAAa,CACtB,OAAO,EACP,QAAQ,EACR,UAAU,EACV,SAAS,EACT,EAAE,EACF,QAAQ,EACR,UAAU,EACV,MAAM,CACP,CAAC;IACJ,CAAC;CACF"}

package/dist/providers/ccavenue/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/ccavenue/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/ccavenue/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/providers/ccavenue/index.js

@@ -0,0 +1,3 @@
+export * from "./adapter.js";
+export * from "./pagination.js";
+//# sourceMappingURL=index.js.map

package/dist/providers/ccavenue/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/providers/ccavenue/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/providers/ccavenue/pagination.d.ts

@@ -0,0 +1,16 @@
+import type { PaginationStrategy, RawResponse, RequestOptions } from "../../core/types.js";
+/**
+ * CCAvenue's transaction/order-status APIs are command-driven, single-record
+ * lookups rather than paginated listings — there is no documented cursor or
+ * page convention. This strategy reports "no further pages" for every response.
+ */
+export declare class CcavenuePaginationStrategy implements PaginationStrategy {
+    extractCursor(_response: RawResponse): string | null;
+    extractTotal(_response: RawResponse): number | null;
+    hasNext(_response: RawResponse): boolean;
+    buildNextRequest(endpoint: string, options: RequestOptions, _cursor: string): {
+        endpoint: string;
+        options: RequestOptions;
+    };
+}
+//# sourceMappingURL=pagination.d.ts.map

package/dist/providers/ccavenue/pagination.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.d.ts","sourceRoot":"","sources":["../../../src/providers/ccavenue/pagination.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3F;;;;GAIG;AACH,qBAAa,0BAA2B,YAAW,kBAAkB;IACnE,aAAa,CAAC,SAAS,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAIpD,YAAY,CAAC,SAAS,EAAE,WAAW,GAAG,MAAM,GAAG,IAAI;IAInD,OAAO,CAAC,SAAS,EAAE,WAAW,GAAG,OAAO;IAIxC,gBAAgB,CACd,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,MAAM,GACd;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,cAAc,CAAA;KAAE;CAGjD"}

package/dist/providers/ccavenue/pagination.js

@@ -0,0 +1,20 @@
+/**
+ * CCAvenue's transaction/order-status APIs are command-driven, single-record
+ * lookups rather than paginated listings — there is no documented cursor or
+ * page convention. This strategy reports "no further pages" for every response.
+ */
+export class CcavenuePaginationStrategy {
+    extractCursor(_response) {
+        return null;
+    }
+    extractTotal(_response) {
+        return null;
+    }
+    hasNext(_response) {
+        return false;
+    }
+    buildNextRequest(endpoint, options, _cursor) {
+        return { endpoint, options };
+    }
+}
+//# sourceMappingURL=pagination.js.map

package/dist/providers/ccavenue/pagination.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pagination.js","sourceRoot":"","sources":["../../../src/providers/ccavenue/pagination.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,OAAO,0BAA0B;IACrC,aAAa,CAAC,SAAsB;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,YAAY,CAAC,SAAsB;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,SAAsB;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,gBAAgB,CACd,QAAgB,EAChB,OAAuB,EACvB,OAAe;QAEf,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC/B,CAAC;CACF"}