myxl-core 1.0.0

package/dist/lib/decoy.d.ts

@@ -0,0 +1,17 @@
+export type DecoyType = 'balance' | 'qris' | 'qris0';
+export type DecoyDataType = {
+    family_name: string;
+    family_code: string;
+    is_enterprise: boolean | null;
+    migration_type: string | null;
+    variant_code: string;
+    option_name: string;
+    order: number;
+    price: number;
+};
+export declare const getDecoyName: (paymentMethod: string) => DecoyType;
+export declare const decoyIsExits: (paymentMethod: string) => boolean;
+export declare const getDecoyData: ({ subscriptionType, decoy, }: {
+    subscriptionType: string;
+    decoy: DecoyType;
+}) => DecoyDataType;

package/dist/lib/decoy.js

@@ -0,0 +1,117 @@
+// @bun
+// src/data/decoys/decoy-default-balance.json
+var decoy_default_balance_default = {
+  family_name: "XL PASS",
+  family_code: "b0a20d74-0c54-4e3b-8f3f-01e7482e50bf",
+  is_enterprise: true,
+  migration_type: "NONE",
+  variant_code: "719d093f-6f8d-46a4-8390-6a0003a172ea",
+  option_name: "XL PASS 30 days",
+  order: 1,
+  price: 889750
+};
+// src/data/decoys/decoy-default-qris.json
+var decoy_default_qris_default = {
+  family_name: "",
+  family_code: "580c1f94-7dc4-416e-96f6-8faf26567516",
+  is_enterprise: false,
+  migration_type: "NONE",
+  variant_code: "b50f954a-696e-46d0-8700-8e4d38521525",
+  option_name: "",
+  order: 27,
+  price: 1000
+};
+// src/data/decoys/decoy-default-qris0.json
+var decoy_default_qris0_default = {
+  family_name: "Kuota Aplikasi BIZ 2GB",
+  family_code: "c6f2cd72-8b21-420a-b8d5-e0186afe5be6",
+  is_enterprise: true,
+  migration_type: "NONE",
+  variant_code: "b7cf278e-c989-4760-8a26-0a20c1a47a40",
+  option_name: "Vidio 2GB",
+  order: 11,
+  price: 0
+};
+// src/data/decoys/decoy-prio-balance.json
+var decoy_prio_balance_default = {
+  family_name: "PRIO PASS",
+  family_code: "2512b72a-a3cd-4c70-a736-132cf2c1f0c0",
+  is_enterprise: null,
+  migration_type: null,
+  variant_code: "cff298bd-8ec8-4696-b689-12407d36be15",
+  option_name: "PRIO PASS 30 days",
+  order: 1,
+  price: 999000
+};
+// src/data/decoys/decoy-prio-qris.json
+var decoy_prio_qris_default = {
+  family_name: "Conference",
+  family_code: "5dab52d5-6f02-4678-b72f-088396ceb113",
+  is_enterprise: true,
+  migration_type: "PRIOH_TO_PRIO",
+  variant_code: "bf84ad5b-87e9-4769-9bd2-2359535c05e4",
+  option_name: "Conference 2GB",
+  order: 1,
+  price: 2000
+};
+// src/data/decoys/decoy-prio-qris0.json
+var decoy_prio_qris0_default = {
+  family_name: "Conference",
+  family_code: "5dab52d5-6f02-4678-b72f-088396ceb113",
+  is_enterprise: true,
+  migration_type: "PRIOH_TO_PRIO",
+  variant_code: "bf84ad5b-87e9-4769-9bd2-2359535c05e4",
+  option_name: "Conference 2GB",
+  order: 1,
+  price: 2000
+};
+
+// src/lib/decoy.ts
+var needPrioDecoys = ["PRIORITAS", "PRIOHYBRID", "GO"];
+var getDecoyName = (paymentMethod) => {
+  switch (paymentMethod) {
+    case "BALANCE_DECOY" /* PulsaDecoy */:
+      return "balance";
+    case "BALANCE_DECOY_V2" /* PulsaDecoyV2 */:
+      return "balance";
+    case "QRIS_DECOY" /* QRISDecoy */:
+      return "qris";
+    case "QRIS_DECOY_V2" /* QRISDecoyV2 */:
+      return "qris0";
+    default:
+      return "balance";
+  }
+};
+var decoyIsExits = (paymentMethod) => {
+  return [
+    "BALANCE_DECOY" /* PulsaDecoy */,
+    "BALANCE_DECOY_V2" /* PulsaDecoyV2 */,
+    "QRIS_DECOY" /* QRISDecoy */,
+    "QRIS_DECOY_V2" /* QRISDecoyV2 */
+  ].includes(paymentMethod);
+};
+var decoyMap = {
+  prio: {
+    balance: decoy_prio_balance_default,
+    qris: decoy_prio_qris_default,
+    qris0: decoy_prio_qris0_default
+  },
+  default: {
+    balance: decoy_default_balance_default,
+    qris: decoy_default_qris_default,
+    qris0: decoy_default_qris0_default
+  }
+};
+var getDecoyData = ({
+  subscriptionType,
+  decoy
+}) => {
+  const isPrio = needPrioDecoys.includes(subscriptionType);
+  const group = isPrio ? "prio" : "default";
+  return decoyMap[group][decoy];
+};
+export {
+  getDecoyName,
+  getDecoyData,
+  decoyIsExits
+};

package/dist/lib/encrypt-helper.d.ts

@@ -0,0 +1,71 @@
+/**
+ * encrypt-helper.ts
+ *
+ * Pure TypeScript port of xldor/encrypt_helper.py
+ * Uses Node.js built-in `crypto` — no external HTTP call needed.
+ *
+ * Algorithms used:
+ *  - AES-CBC (128-bit key from hex string → 16 bytes)   for xdata / field encryption
+ *  - HMAC-SHA512  for x-signature variants
+ *  - HMAC-SHA256  for ax-api-signature
+ *  - SHA-256 hash to derive IV from timestamp
+ */
+/**
+ * Encrypt a plaintext string with AES-128-CBC.
+ * Key = XDATA_KEY (16-char ASCII string → 16 bytes)
+ * IV  = first 16 chars of SHA256(xtime_ms) as ASCII bytes
+ *
+ * Returns URL-safe base64 ciphertext (no padding chars).
+ */
+export declare function encryptXData(plaintext: string, xtimeMs: number): string;
+/**
+ * Decrypt URL-safe base64 xdata with AES-128-CBC.
+ * Returns plaintext string.
+ */
+export declare function decryptXData(xdata: string, xtimeMs: number): string;
+/**
+ * Generate x-signature for API requests.
+ * key  = `${X_API_BASE_SECRET};${idToken};${method};${path};${sigTimeSec}`
+ * msg  = `${idToken};${sigTimeSec};`
+ */
+export declare function makeXSignature(idToken: string, method: string, path: string, sigTimeSec: number): string;
+/**
+ * Generate x-signature for payment requests.
+ * key  = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`
+ * msg  = `${accessToken};${tokenPayment};${sigTimeSec};${paymentFor};${paymentMethod};${packageCode};`
+ */
+export declare function makeXSignaturePayment(accessToken: string, sigTimeSec: number, packageCode: string, tokenPayment: string, paymentMethod: string, paymentFor: string, path: string): string;
+/**
+ * Generate x-signature for bounty redemption.
+ */
+export declare function makeXSignatureBounty(accessToken: string, sigTimeSec: number, packageCode: string, tokenPayment: string): string;
+/**
+ * Generate x-signature for loyalty/allotment.
+ */
+export declare function makeXSignatureLoyalty(sigTimeSec: number, packageCode: string, tokenConfirmation: string, path: string): string;
+/**
+ * Generate x-signature for bounty allotment (with destination MSISDN).
+ */
+export declare function makeXSignatureBountyAllotment(sigTimeSec: number, packageCode: string, tokenConfirmation: string, path: string, destinationMsisdn: string): string;
+/**
+ * Basic x-signature (no token, for unauthenticated requests).
+ * key  = `${X_API_BASE_SECRET};${method};${path};${sigTimeSec}`
+ * msg  = `${sigTimeSec};en;`
+ */
+export declare function makeXSignatureBasic(method: string, path: string, sigTimeSec: number): string;
+/**
+ * Generate Ax-Api-Signature header value.
+ * pre-image = `${tsForSign}password${contactType}${contact}${code}openid`
+ * Returns standard base64 (not URL-safe).
+ */
+export declare function makeAxApiSignature(tsForSign: string, contact: string, code: string, contactType: string): string;
+/**
+ * Decrypt a circle-MSISDN / encrypted-field value.
+ * Format: urlsafe_b64(ciphertext) + iv_hex16 (last 16 ASCII chars)
+ */
+export declare function decryptEncryptedField(encryptedB64: string): string;
+/**
+ * Encrypt a plaintext string as an encrypted field.
+ * Returns: urlsafe_b64(ciphertext) + iv_hex16
+ */
+export declare function encryptEncryptedField(plaintext: string): string;

package/dist/lib/encrypt-helper.js

@@ -0,0 +1,166 @@
+// @bun
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/encrypt.ts
+var init_encrypt = __esm(() => {
+  init_config();
+  init_encrypt_helper();
+  init_encrypt_helper();
+});
+
+// src/lib/utils.ts
+import axios from "axios";
+import { v4 as uuidv4 } from "uuid";
+import { DateTime } from "luxon";
+function unseal(getter, fallback) {
+  try {
+    const hex = getter();
+    if (!hex || typeof __SEED__ === "undefined")
+      return fallback;
+    const seed = Buffer.from(__SEED__, "hex");
+    const data = Buffer.from(hex, "hex");
+    return Buffer.from(data.map((b, i) => b ^ seed[i % seed.length])).toString("utf8");
+  } catch {
+    return fallback;
+  }
+}
+var init_utils = __esm(() => {
+  init_config();
+  init_encrypt();
+});
+
+// src/config.ts
+var BASE_API_URL, BASE_CIAM_URL, BASIC_AUTH, AX_FP_KEY, UA, API_KEY, ENCRYPTED_FIELD_KEY, XDATA_KEY, AX_API_SIG_KEY, X_API_BASE_SECRET, CIRCLE_MSISDN_KEY;
+var init_config = __esm(() => {
+  init_utils();
+  BASE_API_URL = unseal(() => __E_BASE_API_URL__, "https://api.myxl.xlaxiata.co.id");
+  BASE_CIAM_URL = unseal(() => __E_BASE_CIAM_URL__, "https://gede.ciam.xlaxiata.co.id");
+  BASIC_AUTH = unseal(() => __E_BASIC_AUTH__, "OWZjOTdlZDEtNmEzMC00OGQ1LTk1MTYtNjBjNTNjZTNhMTM1OllEV21GNExKajlYSUt3UW56eTJlMmxiMHRKUWIyOW8z");
+  AX_FP_KEY = unseal(() => __E_AX_FP_KEY__, "18b4d589826af50241177961590e6693");
+  UA = unseal(() => __E_UA__, "myXL / 8.9.0(1202); com.android.vending; (samsung; SM-N935F; SDK 33; Android 13)");
+  API_KEY = unseal(() => __E_API_KEY__, "vT8tINqHaOxXbGE7eOWAhA==");
+  ENCRYPTED_FIELD_KEY = unseal(() => __E_ENCRYPTED_FIELD_KEY__, "5dccbf08920a5527");
+  XDATA_KEY = unseal(() => __E_XDATA_KEY__, "5dccbf08920a5527b99e222789c34bb7");
+  AX_API_SIG_KEY = unseal(() => __E_AX_API_SIG_KEY__, "18b4d589826af50241177961590e6693");
+  X_API_BASE_SECRET = unseal(() => __E_X_API_BASE_SECRET__, "mU1Y4n1vBjf3M7tMnRkFU08mVyUJHed8B5En3EAniu1mXLixeuASmBmKnkyzVziOye7rG5nIekMdthensbQMcOJ6SLnrkGyfXALD7mrBC6vuWv6G01pmD3XlU5rT7Tzx");
+  CIRCLE_MSISDN_KEY = unseal(() => __E_CIRCLE_MSISDN_KEY__, "5dccbf08920a5527");
+});
+
+// src/lib/encrypt-helper.ts
+import crypto from "crypto";
+function pkcs7Pad(buf, blockSize = 16) {
+  const pad = blockSize - buf.length % blockSize;
+  const padBuf = Buffer.alloc(pad, pad);
+  return Buffer.concat([buf, padBuf]);
+}
+function pkcs7Unpad(buf) {
+  const pad = buf[buf.length - 1] ?? 16;
+  if (pad < 1 || pad > 16)
+    throw new Error("Invalid PKCS7 padding");
+  return buf.slice(0, buf.length - pad);
+}
+function deriveIv(xtimeMs) {
+  const sha = crypto.createHash("sha256").update(String(xtimeMs)).digest("hex");
+  return Buffer.from(sha.slice(0, 16), "ascii");
+}
+function urlsafeB64Encode(buf) {
+  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function urlsafeB64Decode(s) {
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+  return Buffer.from(padded, "base64");
+}
+function encryptXData(plaintext, xtimeMs) {
+  const key = Buffer.from(XDATA_KEY, "ascii");
+  const iv = deriveIv(xtimeMs);
+  const padded = pkcs7Pad(Buffer.from(plaintext, "utf-8"));
+  const cipher = crypto.createCipheriv("aes-256-cbc", key, iv);
+  cipher.setAutoPadding(false);
+  const ct = Buffer.concat([cipher.update(padded), cipher.final()]);
+  return urlsafeB64Encode(ct);
+}
+function decryptXData2(xdata, xtimeMs) {
+  const key = Buffer.from(XDATA_KEY, "ascii");
+  const iv = deriveIv(xtimeMs);
+  const ct = urlsafeB64Decode(xdata);
+  const decipher = crypto.createDecipheriv("aes-256-cbc", key, iv);
+  decipher.setAutoPadding(false);
+  const pt = Buffer.concat([decipher.update(ct), decipher.final()]);
+  return pkcs7Unpad(pt).toString("utf-8");
+}
+function makeXSignature(idToken, method, path, sigTimeSec) {
+  const keyStr = `${X_API_BASE_SECRET};${idToken};${method};${path};${sigTimeSec}`;
+  const msg = `${idToken};${sigTimeSec};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignaturePayment(accessToken, sigTimeSec, packageCode, tokenPayment, paymentMethod, paymentFor, path) {
+  const keyStr = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`;
+  const msg = `${accessToken};${tokenPayment};${sigTimeSec};${paymentFor};${paymentMethod};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureBounty(accessToken, sigTimeSec, packageCode, tokenPayment) {
+  const path = "api/v8/personalization/bounties-exchange";
+  const keyStr = `${X_API_BASE_SECRET};${accessToken};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`;
+  const msg = `${accessToken};${tokenPayment};${sigTimeSec};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureLoyalty(sigTimeSec, packageCode, tokenConfirmation, path) {
+  const keyStr = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`;
+  const msg = `${tokenConfirmation};${sigTimeSec};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureBountyAllotment(sigTimeSec, packageCode, tokenConfirmation, path, destinationMsisdn) {
+  const keyStr = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;${destinationMsisdn};POST;${path};${sigTimeSec}`;
+  const msg = `${tokenConfirmation};${sigTimeSec};${destinationMsisdn};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureBasic(method, path, sigTimeSec) {
+  const keyStr = `${X_API_BASE_SECRET};${method};${path};${sigTimeSec}`;
+  const msg = `${sigTimeSec};en;`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeAxApiSignature(tsForSign, contact, code, contactType) {
+  const preimage = `${tsForSign}password${contactType}${contact}${code}openid`;
+  const digest = crypto.createHmac("sha256", Buffer.from(AX_API_SIG_KEY, "ascii")).update(preimage).digest();
+  return digest.toString("base64");
+}
+function decryptEncryptedField(encryptedB64) {
+  const ivAscii = encryptedB64.slice(-16);
+  const b64Part = encryptedB64.slice(0, -16);
+  const key = Buffer.from(ENCRYPTED_FIELD_KEY, "ascii");
+  const iv = Buffer.from(ivAscii, "ascii");
+  const ct = urlsafeB64Decode(b64Part);
+  const decipher = crypto.createDecipheriv("aes-128-cbc", key, iv);
+  decipher.setAutoPadding(false);
+  const pt = Buffer.concat([decipher.update(ct), decipher.final()]);
+  return pkcs7Unpad(pt).toString("utf-8");
+}
+function encryptEncryptedField(plaintext) {
+  const key = Buffer.from(ENCRYPTED_FIELD_KEY, "ascii");
+  const ivHex = crypto.randomBytes(8).toString("hex");
+  const iv = Buffer.from(ivHex, "ascii");
+  const padded = pkcs7Pad(Buffer.from(plaintext, "utf-8"));
+  const cipher = crypto.createCipheriv("aes-128-cbc", key, iv);
+  cipher.setAutoPadding(false);
+  const ct = Buffer.concat([cipher.update(padded), cipher.final()]);
+  return urlsafeB64Encode(ct) + ivHex;
+}
+var init_encrypt_helper = __esm(() => {
+  init_config();
+});
+init_encrypt_helper();
+
+export {
+  makeXSignaturePayment,
+  makeXSignatureLoyalty,
+  makeXSignatureBountyAllotment,
+  makeXSignatureBounty,
+  makeXSignatureBasic,
+  makeXSignature,
+  makeAxApiSignature,
+  encryptXData,
+  encryptEncryptedField,
+  decryptXData2 as decryptXData,
+  decryptEncryptedField
+};

package/dist/lib/payment.d.ts

@@ -0,0 +1,116 @@
+export type Item = {
+    item_code: string;
+    product_type: string;
+    item_price: number;
+    item_name: string;
+    tax: number;
+    token_confirmation: string;
+};
+type GetTransactionDetailProps = {
+    idToken: string;
+    transactionId: string;
+};
+type AdditionalData = {
+    akrab_m2m_group_id: string;
+    balance_type: string;
+    benefit_type: string;
+    cashtag: string;
+    combo_details: any[];
+    discount_promo: number;
+    discount_recurring: number;
+    has_bonus: boolean;
+    is_akrab_m2m: boolean;
+    is_family_plan: boolean;
+    is_referral_finalized: boolean;
+    is_spend_limit: boolean;
+    is_spend_limit_temporary: boolean;
+    is_switch_plan: boolean;
+    migration_type: string;
+    mission_id: string;
+    original_price: number;
+    quota_bonus: number;
+    spend_limit_amount: number;
+    tax: number;
+    ticket_number: string;
+};
+export type TransactionDetail = {
+    additional_data: AdditionalData;
+    can_refund: boolean;
+    can_trigger_rating: boolean;
+    deeplink_url: string;
+    details: {
+        amount: number;
+        name: string;
+        tax: number;
+    };
+    expired_at: number;
+    failure_reason: string;
+    formated_date: string;
+    have_offer: boolean;
+    is_myxl_wallet: boolean;
+    payment_for: string;
+    payment_id: string;
+    payment_with: string;
+    price: string;
+    qr_code: string;
+    remaining_time: number;
+    status: string;
+    timestamp: number;
+    title: string;
+    total_discount: number;
+    total_tax: number;
+    virtual_account_number: string;
+};
+export type SettlementProps = {
+    idToken: string;
+    accessToken: string;
+    item: Item;
+    items: Item[];
+    paymentFor: string;
+    tokenConfirmation: string;
+    topup_number?: string;
+    stage_token?: string;
+    overwriteAmount: number | null;
+    paymentTargetsMethodsOption?: string;
+    walletNumber?: string;
+};
+export type SettlementDetail = {
+    amount: number;
+    campaign_id: string;
+    code: string;
+    name: string;
+    status: string;
+    tax: number;
+};
+export type Settlement = {
+    can_trigger_rating: boolean;
+    deeplink: string;
+    details: SettlementDetail[];
+    have_offer: boolean;
+    is_myxl_wallet: boolean;
+    migration_type: string;
+    payment_method: string;
+    points_gained: number;
+    ticket_number: string;
+    total_amount: number;
+    total_discount: number;
+    total_fee: number;
+    total_tax: number;
+    transaction_code: string;
+};
+export type SettlementSucceess = {
+    code: string;
+    status: "SUCCESS";
+    data: Settlement;
+};
+export type SettlementError = {
+    code: string;
+    status: "FAILED";
+    code_detail: string;
+    description: string;
+    message: string;
+    title: string;
+};
+export type SettlementResponse = SettlementSucceess | SettlementError;
+export declare function getTransactionDetail({ idToken, transactionId }: GetTransactionDetailProps): Promise<TransactionDetail>;
+export {};