myxl-core 1.0.1 → 1.0.2

package/dist/client.js

@@ -258,7 +258,6 @@ async function getTransactionHistory({ idToken }) {
     is_enterprise: false,
     lang: "en"
   };
-  console.log("Fetching transaction history...");
   const res = await sendApiRequest(path, payload, idToken, "POST");
   return res.data.list;
 }

package/dist/index.js

@@ -284,16 +284,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {
@@ -551,7 +550,6 @@ async function getTransactionHistory({ idToken }) {
     is_enterprise: false,
     lang: "en"
   };
-  console.log("Fetching transaction history...");
   const res = await sendApiRequest(path, payload, idToken, "POST");
   return res.data.list;
 }
@@ -867,7 +865,6 @@ async function getPackage({
     is_upsell_pdp: false,
     package_variant_code: packageVariantCode
   };
-  console.log("Fetching package...");
   const response = await sendApiRequest(path, payload, idToken, "POST");
   return response.data;
 }
@@ -908,10 +905,9 @@ async function getAddons({
     lang: "en",
     package_option_code: packageOptionCode
   };
-  console.log("Fetching addons...");
   const res = await sendApiRequest(path, rawPayload, idToken, "POST");
   if (!("data" in res)) {
-    console.log("Error getting addons:", res.error ?? "Unknown error");
+    console.error("Error getting addons:", res.error ?? "Unknown error");
     return null;
   }
   return res.data;
@@ -921,9 +917,11 @@ var exports_payments = {};
 __export(exports_payments, {
   payQrisWithDecoy: () => payQrisWithDecoy,
   payQrisDecoyV2: () => payQrisDecoyV2,
+  payQrisDecoy: () => payQrisDecoy,
   payQris: () => payQris,
   payPulsaWithDecoy: () => payPulsaWithDecoy,
   payPulsaDecoyV2: () => payPulsaDecoyV2,
+  payPulsaDecoy: () => payPulsaDecoy,
   payPulsa: () => payPulsa,
   payEwallet: () => payEwallet
 });
@@ -1361,7 +1359,6 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   if (result.status === "SUCCESS") {
     return result;
   }
-  console.log(JSON.stringify(result, null, 2));
   if (result.message.includes("Bizz-err.Amount.Total")) {
     const match = result.message.match(/=\s*(\d+)/);
     result = await settle(Number(match ? match[1] : 0));
@@ -1371,8 +1368,27 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   }
   return result;
 }
+async function payPulsaDecoy(idToken, accessToken, pkg, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payPulsaWithDecoy(idToken, accessToken, pkg, false, decoyItem);
+}
 // src/payments/pulsa-decoy-v2.ts
-async function payPulsaDecoyV2(idToken, accessToken, pkg, decoyItem) {
+async function payPulsaDecoyV2(idToken, accessToken, pkg, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
   await payPulsaWithDecoy(idToken, accessToken, pkg, true, decoyItem);
 }
 // src/payments/qris-decoy.ts
@@ -1403,9 +1419,28 @@ async function payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, deco
   }
   return result;
 }
+async function payQrisDecoy(idToken, accessToken, pkg, overwriteAmount, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, decoyItem);
+}
 // src/payments/qris-decoy-v2.ts
-async function payQrisDecoyV2(idToken, accessToken, pkg, overwriteAmount) {
-  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, {});
+async function payQrisDecoyV2(idToken, accessToken, pkg, overwriteAmount, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, decoyItem);
 }
 // src/payments/qris.ts
 init_utils();
@@ -1506,12 +1541,83 @@ var exports_decoy = {};
 __export(exports_decoy, {
   getDecoyName: () => getDecoyName,
   getDecoyData: () => getDecoyData,
-  decoyExists: () => decoyExists
+  fetchDecoy: () => fetchDecoy,
+  decoyIsExits: () => decoyIsExits
 });
-var PRIO_SUBSCRIPTIONS = ["PRIORITAS", "PRIOHYBRID", "GO"];
+// src/data/decoys.json
+var decoys_default = {
+  prio: {
+    balance: {
+      family_name: "PRIO PASS",
+      family_code: "2512b72a-a3cd-4c70-a736-132cf2c1f0c0",
+      is_enterprise: null,
+      migration_type: null,
+      variant_code: "cff298bd-8ec8-4696-b689-12407d36be15",
+      option_name: "PRIO PASS 30 days",
+      order: 1,
+      price: 999000
+    },
+    qris: {
+      family_name: "Conference",
+      family_code: "5dab52d5-6f02-4678-b72f-088396ceb113",
+      is_enterprise: true,
+      migration_type: "PRIOH_TO_PRIO",
+      variant_code: "bf84ad5b-87e9-4769-9bd2-2359535c05e4",
+      option_name: "Conference 2GB",
+      order: 1,
+      price: 2000
+    },
+    qris0: {
+      family_name: "Conference",
+      family_code: "5dab52d5-6f02-4678-b72f-088396ceb113",
+      is_enterprise: true,
+      migration_type: "PRIOH_TO_PRIO",
+      variant_code: "bf84ad5b-87e9-4769-9bd2-2359535c05e4",
+      option_name: "Conference 2GB",
+      order: 1,
+      price: 2000
+    }
+  },
+  default: {
+    balance: {
+      family_name: "XL PASS",
+      family_code: "b0a20d74-0c54-4e3b-8f3f-01e7482e50bf",
+      is_enterprise: true,
+      migration_type: "NONE",
+      variant_code: "719d093f-6f8d-46a4-8390-6a0003a172ea",
+      option_name: "XL PASS 30 days",
+      order: 1,
+      price: 889750
+    },
+    qris: {
+      family_name: "",
+      family_code: "580c1f94-7dc4-416e-96f6-8faf26567516",
+      is_enterprise: false,
+      migration_type: "NONE",
+      variant_code: "b50f954a-696e-46d0-8700-8e4d38521525",
+      option_name: "",
+      order: 27,
+      price: 1000
+    },
+    qris0: {
+      family_name: "Kuota Aplikasi BIZ 2GB",
+      family_code: "c6f2cd72-8b21-420a-b8d5-e0186afe5be6",
+      is_enterprise: true,
+      migration_type: "NONE",
+      variant_code: "b7cf278e-c989-4760-8a26-0a20c1a47a40",
+      option_name: "Vidio 2GB",
+      order: 11,
+      price: 0
+    }
+  }
+};
+
+// src/lib/decoy.ts
+var needPrioDecoys = ["PRIORITAS", "PRIOHYBRID", "GO"];
 var getDecoyName = (paymentMethod) => {
   switch (paymentMethod) {
     case "BALANCE_DECOY" /* PulsaDecoy */:
+      return "balance";
     case "BALANCE_DECOY_V2" /* PulsaDecoyV2 */:
       return "balance";
     case "QRIS_DECOY" /* QRISDecoy */:
@@ -1522,7 +1628,7 @@ var getDecoyName = (paymentMethod) => {
       return "balance";
   }
 };
-var decoyExists = (paymentMethod) => {
+var decoyIsExits = (paymentMethod) => {
   return [
     "BALANCE_DECOY" /* PulsaDecoy */,
     "BALANCE_DECOY_V2" /* PulsaDecoyV2 */,
@@ -1530,14 +1636,31 @@ var decoyExists = (paymentMethod) => {
     "QRIS_DECOY_V2" /* QRISDecoyV2 */
   ].includes(paymentMethod);
 };
+var decoyMap = decoys_default;
 var getDecoyData = ({
   subscriptionType,
-  decoyType,
-  decoyMap
+  decoy
 }) => {
-  const isPrio = PRIO_SUBSCRIPTIONS.includes(subscriptionType);
+  const isPrio = needPrioDecoys.includes(subscriptionType);
   const group = isPrio ? "prio" : "default";
-  return decoyMap[group][decoyType];
+  return decoyMap[group][decoy];
+};
+var fetchDecoy = async ({
+  idToken,
+  decoynName,
+  subscriptionType
+}) => {
+  const decoyData = getDecoyData({
+    decoy: decoynName,
+    subscriptionType
+  });
+  const data = await exports_package.getPackageByOrderId({
+    idToken,
+    order: decoyData.order,
+    packageFamilyCode: decoyData.family_code,
+    packageVariantCode: decoyData.variant_code
+  });
+  return data;
 };
 export {
   exports_verification as Verification,

package/dist/lib/decoy.d.ts

@@ -1,3 +1,4 @@
+import { Package } from '..';
 export type DecoyType = 'balance' | 'qris' | 'qris0';
 export type DecoyDataType = {
     family_name: string;
@@ -9,13 +10,14 @@ export type DecoyDataType = {
     order: number;
     price: number;
 };
-type DecoyGroup = 'prio' | 'default';
-type DecoyMap = Record<DecoyGroup, Record<DecoyType, DecoyDataType>>;
 export declare const getDecoyName: (paymentMethod: string) => DecoyType;
-export declare const decoyExists: (paymentMethod: string) => boolean;
-export declare const getDecoyData: ({ subscriptionType, decoyType, decoyMap, }: {
+export declare const decoyIsExits: (paymentMethod: string) => boolean;
+export declare const getDecoyData: ({ subscriptionType, decoy, }: {
     subscriptionType: string;
-    decoyType: DecoyType;
-    decoyMap: DecoyMap;
+    decoy: DecoyType;
 }) => DecoyDataType;
-export {};
+export declare const fetchDecoy: ({ idToken, decoynName, subscriptionType, }: {
+    idToken: string;
+    decoynName: DecoyType;
+    subscriptionType: string;
+}) => Promise<Package.PackageDetailData>;

package/dist/lib/decoy.js

@@ -1,9 +1,542 @@
 // @bun
+var __defProp = Object.defineProperty;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+function __accessProp(key) {
+  return this[key];
+}
+var __toCommonJS = (from) => {
+  var entry = (__moduleCache ??= new WeakMap).get(from), desc;
+  if (entry)
+    return entry;
+  entry = __defProp({}, "__esModule", { value: true });
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (var key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(entry, key))
+        __defProp(entry, key, {
+          get: __accessProp.bind(from, key),
+          enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+        });
+  }
+  __moduleCache.set(from, entry);
+  return entry;
+};
+var __moduleCache;
+var __returnValue = (v) => v;
+function __exportSetter(name, newValue) {
+  this[name] = __returnValue.bind(null, newValue);
+}
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, {
+      get: all[name],
+      enumerable: true,
+      configurable: true,
+      set: __exportSetter.bind(all, name)
+    });
+};
+var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
+
+// src/lib/encrypt-helper.ts
+var exports_encrypt_helper = {};
+__export(exports_encrypt_helper, {
+  makeXSignaturePayment: () => makeXSignaturePayment,
+  makeXSignatureLoyalty: () => makeXSignatureLoyalty,
+  makeXSignatureBountyAllotment: () => makeXSignatureBountyAllotment,
+  makeXSignatureBounty: () => makeXSignatureBounty,
+  makeXSignatureBasic: () => makeXSignatureBasic,
+  makeXSignature: () => makeXSignature,
+  makeAxApiSignature: () => makeAxApiSignature,
+  encryptXData: () => encryptXData,
+  encryptEncryptedField: () => encryptEncryptedField,
+  decryptXData: () => decryptXData,
+  decryptEncryptedField: () => decryptEncryptedField
+});
+import crypto from "crypto";
+function pkcs7Pad(buf, blockSize = 16) {
+  const pad = blockSize - buf.length % blockSize;
+  const padBuf = Buffer.alloc(pad, pad);
+  return Buffer.concat([buf, padBuf]);
+}
+function pkcs7Unpad(buf) {
+  const pad = buf[buf.length - 1] ?? 16;
+  if (pad < 1 || pad > 16)
+    throw new Error("Invalid PKCS7 padding");
+  return buf.slice(0, buf.length - pad);
+}
+function deriveIv(xtimeMs) {
+  const sha = crypto.createHash("sha256").update(String(xtimeMs)).digest("hex");
+  return Buffer.from(sha.slice(0, 16), "ascii");
+}
+function urlsafeB64Encode(buf) {
+  return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_");
+}
+function urlsafeB64Decode(s) {
+  const b64 = s.replace(/-/g, "+").replace(/_/g, "/");
+  const padded = b64 + "=".repeat((4 - b64.length % 4) % 4);
+  return Buffer.from(padded, "base64");
+}
+function encryptXData(plaintext, xtimeMs) {
+  const key = Buffer.from(XDATA_KEY, "ascii");
+  const iv = deriveIv(xtimeMs);
+  const padded = pkcs7Pad(Buffer.from(plaintext, "utf-8"));
+  const cipher = crypto.createCipheriv("aes-256-cbc", key, iv);
+  cipher.setAutoPadding(false);
+  const ct = Buffer.concat([cipher.update(padded), cipher.final()]);
+  return urlsafeB64Encode(ct);
+}
+function decryptXData(xdata, xtimeMs) {
+  const key = Buffer.from(XDATA_KEY, "ascii");
+  const iv = deriveIv(xtimeMs);
+  const ct = urlsafeB64Decode(xdata);
+  const decipher = crypto.createDecipheriv("aes-256-cbc", key, iv);
+  decipher.setAutoPadding(false);
+  const pt = Buffer.concat([decipher.update(ct), decipher.final()]);
+  return pkcs7Unpad(pt).toString("utf-8");
+}
+function makeXSignature(idToken, method, path, sigTimeSec) {
+  const keyStr = `${X_API_BASE_SECRET};${idToken};${method};${path};${sigTimeSec}`;
+  const msg = `${idToken};${sigTimeSec};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignaturePayment(accessToken, sigTimeSec, packageCode, tokenPayment, paymentMethod, paymentFor, path) {
+  const keyStr = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`;
+  const msg = `${accessToken};${tokenPayment};${sigTimeSec};${paymentFor};${paymentMethod};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureBounty(accessToken, sigTimeSec, packageCode, tokenPayment) {
+  const path = "api/v8/personalization/bounties-exchange";
+  const keyStr = `${X_API_BASE_SECRET};${accessToken};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`;
+  const msg = `${accessToken};${tokenPayment};${sigTimeSec};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureLoyalty(sigTimeSec, packageCode, tokenConfirmation, path) {
+  const keyStr = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;POST;${path};${sigTimeSec}`;
+  const msg = `${tokenConfirmation};${sigTimeSec};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureBountyAllotment(sigTimeSec, packageCode, tokenConfirmation, path, destinationMsisdn) {
+  const keyStr = `${X_API_BASE_SECRET};${sigTimeSec}#ae-hei_9Tee6he+Ik3Gais5=;${destinationMsisdn};POST;${path};${sigTimeSec}`;
+  const msg = `${tokenConfirmation};${sigTimeSec};${destinationMsisdn};${packageCode};`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeXSignatureBasic(method, path, sigTimeSec) {
+  const keyStr = `${X_API_BASE_SECRET};${method};${path};${sigTimeSec}`;
+  const msg = `${sigTimeSec};en;`;
+  return crypto.createHmac("sha512", keyStr).update(msg).digest("hex");
+}
+function makeAxApiSignature(tsForSign, contact, code, contactType) {
+  const preimage = `${tsForSign}password${contactType}${contact}${code}openid`;
+  const digest = crypto.createHmac("sha256", Buffer.from(AX_API_SIG_KEY, "ascii")).update(preimage).digest();
+  return digest.toString("base64");
+}
+function decryptEncryptedField(encryptedB64) {
+  const ivAscii = encryptedB64.slice(-16);
+  const b64Part = encryptedB64.slice(0, -16);
+  const key = Buffer.from(ENCRYPTED_FIELD_KEY, "ascii");
+  const iv = Buffer.from(ivAscii, "ascii");
+  const ct = urlsafeB64Decode(b64Part);
+  const decipher = crypto.createDecipheriv("aes-128-cbc", key, iv);
+  decipher.setAutoPadding(false);
+  const pt = Buffer.concat([decipher.update(ct), decipher.final()]);
+  return pkcs7Unpad(pt).toString("utf-8");
+}
+function encryptEncryptedField(plaintext) {
+  const key = Buffer.from(ENCRYPTED_FIELD_KEY, "ascii");
+  const ivHex = crypto.randomBytes(8).toString("hex");
+  const iv = Buffer.from(ivHex, "ascii");
+  const padded = pkcs7Pad(Buffer.from(plaintext, "utf-8"));
+  const cipher = crypto.createCipheriv("aes-128-cbc", key, iv);
+  cipher.setAutoPadding(false);
+  const ct = Buffer.concat([cipher.update(padded), cipher.final()]);
+  return urlsafeB64Encode(ct) + ivHex;
+}
+var init_encrypt_helper = __esm(() => {
+  init_config();
+});
+
+// src/encrypt.ts
+function encryptSignXData(method, path, idToken, payload) {
+  const plainBody = JSON.stringify(payload);
+  const xtime = Date.now();
+  const xdata = encryptXData(plainBody, xtime);
+  const sigTimeSec = Math.floor(xtime / 1000);
+  const xSignature = makeXSignature(idToken, method, path, sigTimeSec);
+  return {
+    x_signature: xSignature,
+    encrypted_body: { xdata, xtime }
+  };
+}
+async function decryptXData2(xdata, xtimeMs) {
+  const { decryptXData: _decrypt } = (init_encrypt_helper(), __toCommonJS(exports_encrypt_helper));
+  return JSON.parse(_decrypt(xdata, xtimeMs));
+}
+var init_encrypt = __esm(() => {
+  init_config();
+  init_encrypt_helper();
+  init_encrypt_helper();
+});
+
+// src/lib/utils.ts
+import axios from "axios";
+import { v4 as uuidv4 } from "uuid";
+import { DateTime } from "luxon";
+function javaLikeTimestamp(dt = DateTime.now()) {
+  return dt.toMillis().toString();
+}
+async function sendApiRequest(path, payloadDict, idToken, method = "POST") {
+  const encryptedPayload = encryptSignXData(method, path, idToken, payloadDict);
+  const xtime = Number(encryptedPayload.encrypted_body.xtime);
+  const sigTimeSec = Math.floor(xtime / 1000);
+  const body = encryptedPayload.encrypted_body;
+  const x_sig = encryptedPayload.x_signature;
+  const headers = {
+    host: BASE_API_URL.replace(/^https?:\/\//, ""),
+    "content-type": "application/json; charset=utf-8",
+    "user-agent": UA,
+    "x-api-key": API_KEY,
+    authorization: `Bearer ${idToken}`,
+    "x-hv": "v3",
+    "x-signature-time": String(sigTimeSec),
+    "x-signature": x_sig,
+    "x-request-id": uuidv4(),
+    "x-request-at": javaLikeTimestamp(),
+    "x-version-app": X_APP_VERSION
+  };
+  const url = `${BASE_API_URL.replace(/\/$/, "")}/${path.replace(/^\//, "")}`;
+  const resp = await axios.post(url, body, {
+    headers,
+    timeout: 30000
+  });
+  const respData = resp.data;
+  const decryptedXData = await decryptXData2(respData.xdata, respData.xtime);
+  if (decryptedXData.status === "FAILED") {
+    throw new Error(JSON.stringify(decryptedXData));
+  }
+  return decryptedXData;
+}
+function unseal(getter, fallback) {
+  try {
+    const hex = getter();
+    if (!hex || typeof __SEED__ === "undefined")
+      return fallback;
+    const seed = Buffer.from(__SEED__, "hex");
+    const data = Buffer.from(hex, "hex");
+    return Buffer.from(data.map((b, i) => b ^ seed[i % seed.length])).toString("utf8");
+  } catch {
+    return fallback;
+  }
+}
+var init_utils = __esm(() => {
+  init_config();
+  init_encrypt();
+});
+
+// src/config.ts
+var BASE_API_URL, BASE_CIAM_URL, BASIC_AUTH, AX_FP_KEY, UA, API_KEY, ENCRYPTED_FIELD_KEY, XDATA_KEY, AX_API_SIG_KEY, X_API_BASE_SECRET, CIRCLE_MSISDN_KEY, X_APP_VERSION = "8.9.0";
+var init_config = __esm(() => {
+  init_utils();
+  BASE_API_URL = unseal(() => __E_BASE_API_URL__, "https://api.myxl.xlaxiata.co.id");
+  BASE_CIAM_URL = unseal(() => __E_BASE_CIAM_URL__, "https://gede.ciam.xlaxiata.co.id");
+  BASIC_AUTH = unseal(() => __E_BASIC_AUTH__, "OWZjOTdlZDEtNmEzMC00OGQ1LTk1MTYtNjBjNTNjZTNhMTM1OllEV21GNExKajlYSUt3UW56eTJlMmxiMHRKUWIyOW8z");
+  AX_FP_KEY = unseal(() => __E_AX_FP_KEY__, "18b4d589826af50241177961590e6693");
+  UA = unseal(() => __E_UA__, "myXL / 8.9.0(1202); com.android.vending; (samsung; SM-N935F; SDK 33; Android 13)");
+  API_KEY = unseal(() => __E_API_KEY__, "vT8tINqHaOxXbGE7eOWAhA==");
+  ENCRYPTED_FIELD_KEY = unseal(() => __E_ENCRYPTED_FIELD_KEY__, "5dccbf08920a5527");
+  XDATA_KEY = unseal(() => __E_XDATA_KEY__, "5dccbf08920a5527b99e222789c34bb7");
+  AX_API_SIG_KEY = unseal(() => __E_AX_API_SIG_KEY__, "18b4d589826af50241177961590e6693");
+  X_API_BASE_SECRET = unseal(() => __E_X_API_BASE_SECRET__, "mU1Y4n1vBjf3M7tMnRkFU08mVyUJHed8B5En3EAniu1mXLixeuASmBmKnkyzVziOye7rG5nIekMdthensbQMcOJ6SLnrkGyfXALD7mrBC6vuWv6G01pmD3XlU5rT7Tzx");
+  CIRCLE_MSISDN_KEY = unseal(() => __E_CIRCLE_MSISDN_KEY__, "5dccbf08920a5527");
+});
+// src/data/decoys.json
+var decoys_default = {
+  prio: {
+    balance: {
+      family_name: "PRIO PASS",
+      family_code: "2512b72a-a3cd-4c70-a736-132cf2c1f0c0",
+      is_enterprise: null,
+      migration_type: null,
+      variant_code: "cff298bd-8ec8-4696-b689-12407d36be15",
+      option_name: "PRIO PASS 30 days",
+      order: 1,
+      price: 999000
+    },
+    qris: {
+      family_name: "Conference",
+      family_code: "5dab52d5-6f02-4678-b72f-088396ceb113",
+      is_enterprise: true,
+      migration_type: "PRIOH_TO_PRIO",
+      variant_code: "bf84ad5b-87e9-4769-9bd2-2359535c05e4",
+      option_name: "Conference 2GB",
+      order: 1,
+      price: 2000
+    },
+    qris0: {
+      family_name: "Conference",
+      family_code: "5dab52d5-6f02-4678-b72f-088396ceb113",
+      is_enterprise: true,
+      migration_type: "PRIOH_TO_PRIO",
+      variant_code: "bf84ad5b-87e9-4769-9bd2-2359535c05e4",
+      option_name: "Conference 2GB",
+      order: 1,
+      price: 2000
+    }
+  },
+  default: {
+    balance: {
+      family_name: "XL PASS",
+      family_code: "b0a20d74-0c54-4e3b-8f3f-01e7482e50bf",
+      is_enterprise: true,
+      migration_type: "NONE",
+      variant_code: "719d093f-6f8d-46a4-8390-6a0003a172ea",
+      option_name: "XL PASS 30 days",
+      order: 1,
+      price: 889750
+    },
+    qris: {
+      family_name: "",
+      family_code: "580c1f94-7dc4-416e-96f6-8faf26567516",
+      is_enterprise: false,
+      migration_type: "NONE",
+      variant_code: "b50f954a-696e-46d0-8700-8e4d38521525",
+      option_name: "",
+      order: 27,
+      price: 1000
+    },
+    qris0: {
+      family_name: "Kuota Aplikasi BIZ 2GB",
+      family_code: "c6f2cd72-8b21-420a-b8d5-e0186afe5be6",
+      is_enterprise: true,
+      migration_type: "NONE",
+      variant_code: "b7cf278e-c989-4760-8a26-0a20c1a47a40",
+      option_name: "Vidio 2GB",
+      order: 11,
+      price: 0
+    }
+  }
+};
+
+// src/auth.ts
+init_config();
+init_utils();
+import axios2 from "axios";
+import { v4 as uuidv42 } from "uuid";
+import { DateTime as DateTime2, FixedOffsetZone } from "luxon";
+init_encrypt();
+// src/ciam.ts
+init_config();
+init_utils();
+import axios3 from "axios";
+import { DateTime as DateTime3, FixedOffsetZone as FixedOffsetZone2 } from "luxon";
+import { v4 as uuidv43 } from "uuid";
+// src/client.ts
+init_utils();
+
+// src/index.ts
+init_config();
+
+// src/device.ts
+init_config();
+
+// src/index.ts
+init_encrypt();
+
+// src/family.ts
+init_utils();
+async function getFamily(idToken, familyCode, isEnterprise, migrationType) {
+  let isEnterpriseList = [false, true];
+  let migrationTypeList = [
+    "NONE",
+    "PRE_TO_PRIOH",
+    "PRIOH_TO_PRIO",
+    "PRIO_TO_PRIOH"
+  ];
+  if (typeof isEnterprise !== "undefined") {
+    isEnterpriseList = [isEnterprise];
+  }
+  if (typeof migrationType !== "undefined") {
+    migrationTypeList = [migrationType];
+  }
+  const path = "api/v8/xl-stores/options/list";
+  const comboList = [];
+  for (const mt of migrationTypeList) {
+    for (const ie of isEnterpriseList) {
+      comboList.push({ ie, mt });
+    }
+  }
+  const requests = comboList.map(({ ie, mt }) => {
+    const payloadDict = {
+      is_show_tagging_tab: true,
+      is_dedicated_event: true,
+      is_transaction_routine: false,
+      migration_type: mt,
+      package_family_code: familyCode,
+      is_autobuy: false,
+      is_enterprise: ie,
+      is_pdlp: true,
+      referral_code: "",
+      is_migration: false,
+      lang: "en"
+    };
+    return sendApiRequest(path, payloadDict, idToken, "POST").then((res) => ({
+      res,
+      ie,
+      mt
+    })).catch((e) => {
+      return { res: null, ie, mt, error: e };
+    });
+  });
+  const results = await Promise.all(requests);
+  for (const { res, ie, mt } of results) {
+    if (res && res["status"] === "SUCCESS") {
+      const familyName = res.data?.package_family?.name ?? "";
+      if (familyName !== "") {
+        console.log(`Success with is_enterprise=${ie}, migration_type=${mt}. Family name: ${familyName}`);
+        return res.data;
+      }
+    }
+  }
+  return null;
+}
+// src/family-plan.ts
+init_utils();
+// src/notification.ts
+init_utils();
+// src/package.ts
+var exports_package = {};
+__export(exports_package, {
+  getPackageByOrderId: () => getPackageByOrderId,
+  getPackage: () => getPackage,
+  getAddons: () => getAddons
+});
+init_utils();
+async function getPackage({
+  idToken,
+  packageOptionCode,
+  packageFamilyCode = "",
+  packageVariantCode = ""
+}) {
+  const path = "api/v8/xl-stores/options/detail";
+  const payload = {
+    is_transaction_routine: false,
+    migration_type: "NONE",
+    package_family_code: packageFamilyCode,
+    family_role_hub: "",
+    is_autobuy: false,
+    is_enterprise: false,
+    is_shareable: false,
+    is_migration: false,
+    lang: "en",
+    package_option_code: packageOptionCode,
+    is_upsell_pdp: false,
+    package_variant_code: packageVariantCode
+  };
+  const response = await sendApiRequest(path, payload, idToken, "POST");
+  return response.data;
+}
+async function getPackageByOrderId({
+  idToken,
+  packageFamilyCode,
+  packageVariantCode,
+  order,
+  isEnterprise,
+  migrationType
+}) {
+  const xpackages = await getFamily(idToken, packageFamilyCode, isEnterprise, migrationType);
+  if (!xpackages) {
+    throw new Error("Data tidak ditemukan untuk family code yang diberikan.");
+  }
+  const findVariant = xpackages.package_variants.find((v) => v.package_variant_code === packageVariantCode);
+  if (!findVariant) {
+    throw new Error(`Package variant with code ${packageVariantCode} not found in family ${packageFamilyCode}`);
+  }
+  const findPackageOption = findVariant.package_options.find((x) => x.order === order);
+  if (!findPackageOption) {
+    throw new Error(`Package option with order ${order} not found in variant ${findVariant.package_variant_code}`);
+  }
+  const data = await getPackage({
+    idToken,
+    packageOptionCode: findPackageOption.package_option_code
+  });
+  data.package_option.package_option_code = findPackageOption.package_option_code;
+  return data;
+}
+async function getAddons({
+  idToken,
+  packageOptionCode
+}) {
+  const path = "api/v8/xl-stores/options/addons-pinky-box";
+  const rawPayload = {
+    is_enterprise: false,
+    lang: "en",
+    package_option_code: packageOptionCode
+  };
+  const res = await sendApiRequest(path, rawPayload, idToken, "POST");
+  if (!("data" in res)) {
+    console.error("Error getting addons:", res.error ?? "Unknown error");
+    return null;
+  }
+  return res.data;
+}
+// src/lib/payment.ts
+init_utils();
+
+// src/payments/ewallet.ts
+init_utils();
+
+// src/payments/method/balance.ts
+init_encrypt();
+init_utils();
+init_config();
+import axios4 from "axios";
+import { v4 as uuidv44 } from "uuid";
+import { DateTime as DateTime4 } from "luxon";
+// src/payments/method/ewallet.ts
+init_encrypt();
+init_utils();
+init_config();
+import axios5 from "axios";
+import { v4 as uuidv45 } from "uuid";
+import { DateTime as DateTime5 } from "luxon";
+// src/payments/method/qris.ts
+init_encrypt();
+init_utils();
+init_config();
+import axios6 from "axios";
+import { v4 as uuidv46 } from "uuid";
+import { DateTime as DateTime6 } from "luxon";
+// src/payments/ewallet.ts
+var providerOptions = [
+  { value: "DANA" /* DANA */, label: "DANA" },
+  { value: "SHOPEEPAY" /* ShopeePay */, label: "ShopeePay" },
+  { value: "GOPAY" /* GoPay */, label: "GoPay" },
+  { value: "OVO" /* OVO */, label: "OVO" }
+];
+// src/payments/pulsa.ts
+init_utils();
+// src/payments/pulsa-decoy.ts
+init_utils();
+// src/payments/qris.ts
+init_utils();
+// src/profile.ts
+init_utils();
+
+// src/index.ts
+init_utils();
+
+// src/verification.ts
+init_utils();
+
+// src/index.ts
+init_encrypt_helper();
+
 // src/lib/decoy.ts
-var PRIO_SUBSCRIPTIONS = ["PRIORITAS", "PRIOHYBRID", "GO"];
+var needPrioDecoys = ["PRIORITAS", "PRIOHYBRID", "GO"];
 var getDecoyName = (paymentMethod) => {
   switch (paymentMethod) {
     case "BALANCE_DECOY" /* PulsaDecoy */:
+      return "balance";
     case "BALANCE_DECOY_V2" /* PulsaDecoyV2 */:
       return "balance";
     case "QRIS_DECOY" /* QRISDecoy */:
@@ -14,7 +547,7 @@ var getDecoyName = (paymentMethod) => {
       return "balance";
   }
 };
-var decoyExists = (paymentMethod) => {
+var decoyIsExits = (paymentMethod) => {
   return [
     "BALANCE_DECOY" /* PulsaDecoy */,
     "BALANCE_DECOY_V2" /* PulsaDecoyV2 */,
@@ -22,17 +555,35 @@ var decoyExists = (paymentMethod) => {
     "QRIS_DECOY_V2" /* QRISDecoyV2 */
   ].includes(paymentMethod);
 };
+var decoyMap = decoys_default;
 var getDecoyData = ({
   subscriptionType,
-  decoyType,
-  decoyMap
+  decoy
 }) => {
-  const isPrio = PRIO_SUBSCRIPTIONS.includes(subscriptionType);
+  const isPrio = needPrioDecoys.includes(subscriptionType);
   const group = isPrio ? "prio" : "default";
-  return decoyMap[group][decoyType];
+  return decoyMap[group][decoy];
+};
+var fetchDecoy = async ({
+  idToken,
+  decoynName,
+  subscriptionType
+}) => {
+  const decoyData = getDecoyData({
+    decoy: decoynName,
+    subscriptionType
+  });
+  const data = await exports_package.getPackageByOrderId({
+    idToken,
+    order: decoyData.order,
+    packageFamilyCode: decoyData.family_code,
+    packageVariantCode: decoyData.variant_code
+  });
+  return data;
 };
 export {
   getDecoyName,
   getDecoyData,
-  decoyExists
+  fetchDecoy,
+  decoyIsExits
 };

package/dist/lib/utils.js

@@ -250,16 +250,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {

package/dist/package.js

@@ -331,7 +331,6 @@ async function getPackage({
     is_upsell_pdp: false,
     package_variant_code: packageVariantCode
   };
-  console.log("Fetching package...");
   const response = await sendApiRequest(path, payload, idToken, "POST");
   return response.data;
 }
@@ -372,10 +371,9 @@ async function getAddons({
     lang: "en",
     package_option_code: packageOptionCode
   };
-  console.log("Fetching addons...");
   const res = await sendApiRequest(path, rawPayload, idToken, "POST");
   if (!("data" in res)) {
-    console.log("Error getting addons:", res.error ?? "Unknown error");
+    console.error("Error getting addons:", res.error ?? "Unknown error");
     return null;
   }
   return res.data;

package/dist/payments/ewallet.js

@@ -240,16 +240,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {

package/dist/payments/index.js

@@ -261,16 +261,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {
@@ -724,7 +723,6 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   if (result.status === "SUCCESS") {
     return result;
   }
-  console.log(JSON.stringify(result, null, 2));
   if (result.message.includes("Bizz-err.Amount.Total")) {
     const match = result.message.match(/=\s*(\d+)/);
     result = await settle(Number(match ? match[1] : 0));
@@ -734,8 +732,27 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   }
   return result;
 }
+async function payPulsaDecoy(idToken, accessToken, pkg, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payPulsaWithDecoy(idToken, accessToken, pkg, false, decoyItem);
+}
 // src/payments/pulsa-decoy-v2.ts
-async function payPulsaDecoyV2(idToken, accessToken, pkg, decoyItem) {
+async function payPulsaDecoyV2(idToken, accessToken, pkg, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
   await payPulsaWithDecoy(idToken, accessToken, pkg, true, decoyItem);
 }
 // src/payments/qris-decoy.ts
@@ -766,9 +783,28 @@ async function payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, deco
   }
   return result;
 }
+async function payQrisDecoy(idToken, accessToken, pkg, overwriteAmount, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, decoyItem);
+}
 // src/payments/qris-decoy-v2.ts
-async function payQrisDecoyV2(idToken, accessToken, pkg, overwriteAmount) {
-  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, {});
+async function payQrisDecoyV2(idToken, accessToken, pkg, overwriteAmount, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, decoyItem);
 }
 // src/payments/qris.ts
 init_utils();
@@ -800,9 +836,11 @@ async function payQris(idToken, accessToken, pkg, overwriteAmount) {
 export {
   payQrisWithDecoy,
   payQrisDecoyV2,
+  payQrisDecoy,
   payQris,
   payPulsaWithDecoy,
   payPulsaDecoyV2,
+  payPulsaDecoy,
   payPulsa,
   payEwallet
 };

package/dist/payments/method/ewallet.js

@@ -83,16 +83,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {

package/dist/payments/method/index.js

@@ -83,16 +83,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {

package/dist/payments/method/qris.js

@@ -83,16 +83,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {

package/dist/payments/pulsa-decoy-v2.d.ts

@@ -1,3 +1,2 @@
-import type { Item } from "./../lib/payment";
 import type { PackageDetailData } from "./../package";
-export declare function payPulsaDecoyV2(idToken: string, accessToken: string, pkg: PackageDetailData, decoyItem: Item): Promise<void>;
+export declare function payPulsaDecoyV2(idToken: string, accessToken: string, pkg: PackageDetailData, decoyPkg: PackageDetailData): Promise<void>;

package/dist/payments/pulsa-decoy-v2.js

@@ -449,7 +449,6 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   if (result.status === "SUCCESS") {
     return result;
   }
-  console.log(JSON.stringify(result, null, 2));
   if (result.message.includes("Bizz-err.Amount.Total")) {
     const match = result.message.match(/=\s*(\d+)/);
     result = await settle(Number(match ? match[1] : 0));
@@ -461,7 +460,15 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
 }
 
 // src/payments/pulsa-decoy-v2.ts
-async function payPulsaDecoyV2(idToken, accessToken, pkg, decoyItem) {
+async function payPulsaDecoyV2(idToken, accessToken, pkg, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
   await payPulsaWithDecoy(idToken, accessToken, pkg, true, decoyItem);
 }
 export {

package/dist/payments/pulsa-decoy.d.ts

@@ -5,3 +5,4 @@ import type { PackageDetailData } from "./../package";
  * @param useDecoyToken - v2 mode: use decoy's token_confirmation + paymentTargetsMethodsOption
  */
 export declare function payPulsaWithDecoy(idToken: string, accessToken: string, pkg: PackageDetailData, useDecoyToken: boolean | undefined, decoyItem: Item): Promise<import("./../lib/payment").SettlementSuccess | import("./../lib/payment").SettlementError>;
+export declare function payPulsaDecoy(idToken: string, accessToken: string, pkg: PackageDetailData, decoyPkg: PackageDetailData): Promise<void>;

package/dist/payments/pulsa-decoy.js

@@ -449,7 +449,6 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   if (result.status === "SUCCESS") {
     return result;
   }
-  console.log(JSON.stringify(result, null, 2));
   if (result.message.includes("Bizz-err.Amount.Total")) {
     const match = result.message.match(/=\s*(\d+)/);
     result = await settle(Number(match ? match[1] : 0));
@@ -459,6 +458,18 @@ async function payPulsaWithDecoy(idToken, accessToken, pkg, useDecoyToken = fals
   }
   return result;
 }
+async function payPulsaDecoy(idToken, accessToken, pkg, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payPulsaWithDecoy(idToken, accessToken, pkg, false, decoyItem);
+}
 export {
-  payPulsaWithDecoy
+  payPulsaWithDecoy,
+  payPulsaDecoy
 };

package/dist/payments/qris-decoy-v2.d.ts

@@ -1,2 +1,2 @@
 import type { PackageDetailData } from "./../package";
-export declare function payQrisDecoyV2(idToken: string, accessToken: string, pkg: PackageDetailData, overwriteAmount: number | null): Promise<void>;
+export declare function payQrisDecoyV2(idToken: string, accessToken: string, pkg: PackageDetailData, overwriteAmount: number | null, decoyPkg: PackageDetailData): Promise<void>;

package/dist/payments/qris-decoy-v2.js

@@ -240,16 +240,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {
@@ -434,8 +433,16 @@ async function payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, deco
 }
 
 // src/payments/qris-decoy-v2.ts
-async function payQrisDecoyV2(idToken, accessToken, pkg, overwriteAmount) {
-  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, {});
+async function payQrisDecoyV2(idToken, accessToken, pkg, overwriteAmount, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, decoyItem);
 }
 export {
   payQrisDecoyV2

package/dist/payments/qris-decoy.d.ts

@@ -2,3 +2,4 @@ import { type Item } from "./../lib/payment";
 import type { PackageDetailData } from "./../package";
 /** Shared QRIS + Decoy logic. Other controllers import this directly with custom decoy IDs. */
 export declare function payQrisWithDecoy(idToken: string, accessToken: string, pkg: PackageDetailData, overwriteAmount: number | null, decoyItem: Item): Promise<import("./../lib/payment").TransactionDetail | import("./../lib/payment").SettlementError>;
+export declare function payQrisDecoy(idToken: string, accessToken: string, pkg: PackageDetailData, overwriteAmount: number | null, decoyPkg: PackageDetailData): Promise<void>;

package/dist/payments/qris-decoy.js

@@ -240,16 +240,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {
@@ -432,6 +431,18 @@ async function payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, deco
   }
   return result;
 }
+async function payQrisDecoy(idToken, accessToken, pkg, overwriteAmount, decoyPkg) {
+  const decoyItem = {
+    item_name: decoyPkg.package_option.name,
+    item_code: decoyPkg.package_option.package_option_code,
+    item_price: decoyPkg.package_option.price,
+    product_type: decoyPkg.package_option.product_type,
+    token_confirmation: decoyPkg.token_confirmation,
+    tax: 0
+  };
+  await payQrisWithDecoy(idToken, accessToken, pkg, overwriteAmount, decoyItem);
+}
 export {
-  payQrisWithDecoy
+  payQrisWithDecoy,
+  payQrisDecoy
 };

package/dist/payments/qris.js

@@ -240,16 +240,15 @@ async function interceptPage(idToken, optionCode, isEnterprise = false) {
     lang: "en",
     package_option_code: optionCode
   };
-  console.log("Fetching intercept page...");
   try {
     const res = await sendApiRequest(path, rawPayload, idToken, "POST");
     if ("status" in res) {
       console.log(`Intercept status: ${res["status"]}`);
     } else {
-      console.log("Intercept error");
+      console.error("Intercept error");
     }
   } catch (err) {
-    console.log("Intercept error", err);
+    console.error("Intercept error", err);
   }
 }
 function unseal(getter, fallback) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "myxl-core",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "MyXL API client — auth, payments, family, packages",
   "type": "module",
   "main": "dist/index.js",