pepay 0.7.0

package/README.md

@@ -0,0 +1,50 @@
+# Pepay SDK
+
+Pepay API wrapper for Node.js and browsers.
+
+## Requirements
+- Node.js 18+ for server integrations
+- Evergreen browsers for client integrations (session token flows)
+
+## Install
+```bash
+npm install pepay
+```
+
+```bash
+yarn add pepay
+```
+
+```bash
+pnpm add pepay
+```
+
+## Usage
+```ts
+import { Pepay } from 'pepay';
+
+const pepay = new Pepay({
+  apiKey: process.env.PEPAY_API_KEY,
+  baseUrl: 'https://api-beta.pepay.io',
+  environment: 'devnet'
+});
+
+const invoice = await pepay.invoices.create({
+  amount_usd: 49.99,
+  description: 'Starter plan'
+});
+
+console.log(invoice);
+```
+
+## Authentication
+- `apiKey` -> `x-api-key` (merchant scope)
+- `commerceApiKey` -> `x-commerce-api-key` (commerce scope)
+- `userAccessToken` -> `User-Authorization` (commerce user routes)
+- `sessionToken` + `signature` -> `x-session-token` + `x-signature` (payor/session)
+
+## Browser safety
+Server API keys are blocked by default in browsers. Use session tokens or ws tokens for client apps.
+
+## Support
+Email `contact@pepay.io` for access or onboarding help.

package/dist/cjs/client.cjs

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Pepay = void 0;
+const http_js_1 = require("./http.js");
+const config_js_1 = require("./config.js");
+const invoices_js_1 = require("./resources/invoices.js");
+const tokens_js_1 = require("./resources/tokens.js");
+const commerce_js_1 = require("./resources/commerce.js");
+const events_js_1 = require("./resources/events.js");
+const wsResource_js_1 = require("./ws/wsResource.js");
+const access_js_1 = require("./resources/access.js");
+const wallets_js_1 = require("./resources/wallets.js");
+const settlement_js_1 = require("./resources/settlement.js");
+const paymentSessions_js_1 = require("./resources/paymentSessions.js");
+const apiKeys_js_1 = require("./resources/apiKeys.js");
+class Pepay {
+    constructor(config) {
+        this.configState = (0, config_js_1.resolveConfig)(config);
+        this.http = new http_js_1.PepayHttpClient(this.configState);
+        this.invoices = new invoices_js_1.InvoicesResource(this.http);
+        this.tokens = new tokens_js_1.TokensResource(this.http);
+        this.commerce = new commerce_js_1.CommerceResource(this.http);
+        this.events = new events_js_1.EventsResource(this.http);
+        this.ws = new wsResource_js_1.WsResource(this.http, this.configState);
+        this.access = new access_js_1.AccessResource(this.http);
+        this.wallets = new wallets_js_1.WalletsResource(this.http);
+        this.settlement = new settlement_js_1.SettlementResource(this.http);
+        this.paymentSessions = new paymentSessions_js_1.PaymentSessionsResource(this.http);
+        this.apiKeys = new apiKeys_js_1.ApiKeysResource(this.http);
+    }
+    config(update) {
+        this.configState = (0, config_js_1.resolveConfig)({ ...this.configState, ...update });
+        this.http.updateConfig(this.configState);
+        this.ws.updateConfig(this.configState);
+    }
+    withAuth(auth) {
+        return new Pepay({ ...this.configState, ...auth });
+    }
+    getConfig() {
+        return { ...this.configState };
+    }
+}
+exports.Pepay = Pepay;
+//# sourceMappingURL=client.js.map

package/dist/cjs/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/client.ts"],"names":[],"mappings":";;;AAAA,uCAA4C;AAC5C,2CAA4C;AAE5C,yDAA2D;AAC3D,qDAAuD;AACvD,yDAA2D;AAC3D,qDAAuD;AACvD,sDAAgD;AAChD,qDAAuD;AACvD,uDAAyD;AACzD,6DAA+D;AAC/D,uEAAyE;AACzE,uDAAyD;AAEzD,MAAa,KAAK;IAehB,YAAY,MAAyB;QACnC,IAAI,CAAC,WAAW,GAAG,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI,GAAG,IAAI,yBAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,GAAG,IAAI,8BAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,QAAQ,GAAG,IAAI,8BAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,EAAE,GAAG,IAAI,0BAAU,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACtD,IAAI,CAAC,MAAM,GAAG,IAAI,0BAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,GAAG,IAAI,4BAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,UAAU,GAAG,IAAI,kCAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,IAAI,CAAC,eAAe,GAAG,IAAI,4CAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9D,IAAI,CAAC,OAAO,GAAG,IAAI,4BAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,CAAC,MAAkC;QACvC,IAAI,CAAC,WAAW,GAAG,IAAA,yBAAa,EAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzC,CAAC;IAED,QAAQ,CAAC,IAAqB;QAC5B,OAAO,IAAI,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,SAAS;QACP,OAAO,EAAE,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,CAAC;CACF;AA3CD,sBA2CC"}

package/dist/cjs/config.cjs

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEFAULT_RETRYABLE_STATUS_CODES = exports.DEFAULT_WS_IDLE_TIMEOUT_MS = exports.DEFAULT_WS_HEARTBEAT_MS = exports.DEFAULT_MAX_RETRIES = exports.DEFAULT_TIMEOUT_MS = void 0;
+exports.resolveConfig = resolveConfig;
+const utils_js_1 = require("./utils.js");
+exports.DEFAULT_TIMEOUT_MS = 30000;
+exports.DEFAULT_MAX_RETRIES = 2;
+exports.DEFAULT_WS_HEARTBEAT_MS = 30000;
+exports.DEFAULT_WS_IDLE_TIMEOUT_MS = 120000;
+exports.DEFAULT_RETRYABLE_STATUS_CODES = [500, 503];
+function resolveConfig(input) {
+    const envBaseUrl = typeof process !== 'undefined' ? process.env.PEPAY_API_URL || process.env.API_BASE_URL : undefined;
+    const envEnvironment = typeof process !== 'undefined' ? process.env.PEPAY_ENVIRONMENT : undefined;
+    const envTimeout = typeof process !== 'undefined' ? process.env.PEPAY_TIMEOUT_MS : undefined;
+    const envRetries = typeof process !== 'undefined' ? process.env.PEPAY_MAX_RETRIES : undefined;
+    const envRetryMaxElapsed = typeof process !== 'undefined' ? process.env.PEPAY_RETRY_MAX_ELAPSED_MS : undefined;
+    const envTelemetry = typeof process !== 'undefined' ? process.env.PEPAY_TELEMETRY : undefined;
+    const envRetryable = typeof process !== 'undefined' ? process.env.PEPAY_RETRYABLE_STATUS_CODES : undefined;
+    const envWsBase = typeof process !== 'undefined' ? process.env.PEPAY_WS_BASE_URL : undefined;
+    const envWsHeartbeat = typeof process !== 'undefined' ? process.env.PEPAY_WS_HEARTBEAT_MS : undefined;
+    const envWsIdle = typeof process !== 'undefined' ? process.env.PEPAY_WS_IDLE_TIMEOUT_MS : undefined;
+    const baseUrl = input.baseUrl || envBaseUrl || utils_js_1.DEFAULT_BASE_URL;
+    const websocketBaseUrl = input.websocketBaseUrl || envWsBase || (0, utils_js_1.toWebSocketBaseUrl)(baseUrl);
+    const timeoutMs = input.timeoutMs ?? (envTimeout ? Number(envTimeout) : undefined) ?? exports.DEFAULT_TIMEOUT_MS;
+    const maxRetries = input.maxRetries ?? (envRetries ? Number(envRetries) : undefined) ?? exports.DEFAULT_MAX_RETRIES;
+    const retryMaxElapsedMs = input.retryMaxElapsedMs ?? (envRetryMaxElapsed ? Number(envRetryMaxElapsed) : undefined);
+    const telemetry = input.telemetry ?? (envTelemetry ? envTelemetry === 'true' : false);
+    const wsHeartbeatMs = input.wsHeartbeatMs ?? (envWsHeartbeat ? Number(envWsHeartbeat) : undefined) ?? exports.DEFAULT_WS_HEARTBEAT_MS;
+    const wsIdleTimeoutMs = input.wsIdleTimeoutMs ?? (envWsIdle ? Number(envWsIdle) : undefined) ?? exports.DEFAULT_WS_IDLE_TIMEOUT_MS;
+    const retryableStatusCodes = input.retryableStatusCodes
+        ?? (envRetryable
+            ? envRetryable
+                .split(',')
+                .map((value) => Number(value.trim()))
+                .filter((value) => Number.isFinite(value) && value > 0)
+            : undefined)
+        ?? exports.DEFAULT_RETRYABLE_STATUS_CODES;
+    const normalized = {
+        ...input,
+        baseUrl,
+        websocketBaseUrl,
+        environment: input.environment || envEnvironment || undefined,
+        timeoutMs,
+        maxRetries,
+        retryMaxElapsedMs,
+        telemetry,
+        wsHeartbeatMs,
+        wsIdleTimeoutMs,
+        wsPingMessage: input.wsPingMessage,
+        retryableStatusCodes
+    };
+    if ((0, utils_js_1.isBrowserRuntime)() && !normalized.allowServerKeysInBrowser) {
+        if (normalized.apiKey || normalized.commerceApiKey) {
+            throw new Error('Server API keys are not allowed in browser runtime. Use session tokens or ws_token for client-side integrations.');
+        }
+    }
+    return normalized;
+}
+//# sourceMappingURL=config.js.map

package/dist/cjs/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/config.ts"],"names":[],"mappings":";;;AASA,sCAoDC;AA5DD,yCAAoF;AAEvE,QAAA,kBAAkB,GAAG,KAAM,CAAC;AAC5B,QAAA,mBAAmB,GAAG,CAAC,CAAC;AACxB,QAAA,uBAAuB,GAAG,KAAM,CAAC;AACjC,QAAA,0BAA0B,GAAG,MAAO,CAAC;AACrC,QAAA,8BAA8B,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;AAEzD,SAAgB,aAAa,CAAC,KAAwB;IACpD,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IACtH,MAAM,cAAc,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,UAAU,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,kBAAkB,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,MAAM,YAAY,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9F,MAAM,YAAY,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3G,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7F,MAAM,cAAc,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;IACtG,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,SAAS,CAAC;IAEpG,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,UAAU,IAAI,2BAAgB,CAAC;IAChE,MAAM,gBAAgB,GAAG,KAAK,CAAC,gBAAgB,IAAI,SAAS,IAAI,IAAA,6BAAkB,EAAC,OAAO,CAAC,CAAC;IAE5F,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,0BAAkB,CAAC;IACzG,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,2BAAmB,CAAC;IAC5G,MAAM,iBAAiB,GAAG,KAAK,CAAC,iBAAiB,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACnH,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACtF,MAAM,aAAa,GAAG,KAAK,CAAC,aAAa,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,+BAAuB,CAAC;IAC9H,MAAM,eAAe,GAAG,KAAK,CAAC,eAAe,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,kCAA0B,CAAC;IAC3H,MAAM,oBAAoB,GAAG,KAAK,CAAC,oBAAoB;WAClD,CAAC,YAAY;YACd,CAAC,CAAC,YAAY;iBACX,KAAK,CAAC,GAAG,CAAC;iBACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;iBACpC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC;YACzD,CAAC,CAAC,SAAS,CAAC;WACX,sCAA8B,CAAC;IAEpC,MAAM,UAAU,GAAsB;QACpC,GAAG,KAAK;QACR,OAAO;QACP,gBAAgB;QAChB,WAAW,EAAE,KAAK,CAAC,WAAW,IAAK,cAAmD,IAAI,SAAS;QACnG,SAAS;QACT,UAAU;QACV,iBAAiB;QACjB,SAAS;QACT,aAAa;QACb,eAAe;QACf,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,oBAAoB;KACrB,CAAC;IAEF,IAAI,IAAA,2BAAgB,GAAE,IAAI,CAAC,UAAU,CAAC,wBAAwB,EAAE,CAAC;QAC/D,IAAI,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,cAAc,EAAE,CAAC;YACnD,MAAM,IAAI,KAAK,CAAC,kHAAkH,CAAC,CAAC;QACtI,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/cjs/errors.cjs

@@ -0,0 +1,69 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PepayPollingTimeoutError = exports.PepayHttpError = exports.PepayCircuitBreakerError = exports.PepayInvalidCursorError = exports.PepayValidationError = exports.PepayRateLimitError = exports.PepayAuthError = exports.PepayError = void 0;
+class PepayError extends Error {
+    constructor(message, options) {
+        super(message);
+        this.name = 'PepayError';
+        this.code = options?.code;
+        this.status = options?.status;
+        this.details = options?.details;
+        this.requestId = options?.requestId;
+        this.idempotencyKey = options?.idempotencyKey;
+    }
+}
+exports.PepayError = PepayError;
+class PepayAuthError extends PepayError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayAuthError';
+    }
+}
+exports.PepayAuthError = PepayAuthError;
+class PepayRateLimitError extends PepayError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayRateLimitError';
+        this.retryAfter = options?.retryAfter;
+    }
+}
+exports.PepayRateLimitError = PepayRateLimitError;
+class PepayValidationError extends PepayError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayValidationError';
+    }
+}
+exports.PepayValidationError = PepayValidationError;
+class PepayInvalidCursorError extends PepayValidationError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayInvalidCursorError';
+    }
+}
+exports.PepayInvalidCursorError = PepayInvalidCursorError;
+class PepayCircuitBreakerError extends PepayError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayCircuitBreakerError';
+        this.state = options?.state;
+        this.openUntil = options?.openUntil;
+        this.failureCount = options?.failureCount;
+    }
+}
+exports.PepayCircuitBreakerError = PepayCircuitBreakerError;
+class PepayHttpError extends PepayError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayHttpError';
+    }
+}
+exports.PepayHttpError = PepayHttpError;
+class PepayPollingTimeoutError extends PepayError {
+    constructor(message, options) {
+        super(message, options);
+        this.name = 'PepayPollingTimeoutError';
+    }
+}
+exports.PepayPollingTimeoutError = PepayPollingTimeoutError;
+//# sourceMappingURL=errors.js.map

package/dist/cjs/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/errors.ts"],"names":[],"mappings":";;;AAAA,MAAa,UAAW,SAAQ,KAAK;IAOnC,YAAY,OAAe,EAAE,OAM5B;QACC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;QACzB,IAAI,CAAC,IAAI,GAAG,OAAO,EAAE,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,OAAO,EAAE,MAAM,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,OAAO,EAAE,OAAO,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;QACpC,IAAI,CAAC,cAAc,GAAG,OAAO,EAAE,cAAc,CAAC;IAChD,CAAC;CACF;AAtBD,gCAsBC;AAED,MAAa,cAAe,SAAQ,UAAU;IAC5C,YAAY,OAAe,EAAE,OAA+D;QAC1F,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED,MAAa,mBAAoB,SAAQ,UAAU;IAGjD,YAAY,OAAe,EAAE,OAAoF;QAC/G,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,CAAC,UAAU,GAAG,OAAO,EAAE,UAAU,CAAC;IACxC,CAAC;CACF;AARD,kDAQC;AAED,MAAa,oBAAqB,SAAQ,UAAU;IAClD,YAAY,OAAe,EAAE,OAA+D;QAC1F,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AALD,oDAKC;AAED,MAAa,uBAAwB,SAAQ,oBAAoB;IAC/D,YAAY,OAAe,EAAE,OAA+D;QAC1F,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAED,MAAa,wBAAyB,SAAQ,UAAU;IAKtD,YAAY,OAAe,EAAE,OAA0H;QACrJ,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;QACvC,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAC5B,IAAI,CAAC,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;QACpC,IAAI,CAAC,YAAY,GAAG,OAAO,EAAE,YAAY,CAAC;IAC5C,CAAC;CACF;AAZD,4DAYC;AAED,MAAa,cAAe,SAAQ,UAAU;IAC5C,YAAY,OAAe,EAAE,OAA4G;QACvI,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC/B,CAAC;CACF;AALD,wCAKC;AAED,MAAa,wBAAyB,SAAQ,UAAU;IACtD,YAAY,OAAe,EAAE,OAA8C;QACzE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,0BAA0B,CAAC;IACzC,CAAC;CACF;AALD,4DAKC"}

package/dist/cjs/http.cjs

@@ -0,0 +1,422 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PepayHttpClient = void 0;
+const errors_js_1 = require("./errors.js");
+const utils_js_1 = require("./utils.js");
+class PepayHttpClient {
+    constructor(config) {
+        this.config = config;
+        this.circuitState = {
+            state: 'closed',
+            failureCount: 0,
+            successCount: 0,
+            halfOpenInFlight: 0
+        };
+    }
+    updateConfig(config) {
+        this.config = config;
+    }
+    async request(method, path, options = {}) {
+        const url = (0, utils_js_1.joinUrl)(this.config.baseUrl || '', path) + (0, utils_js_1.buildQuery)(options.query);
+        const headers = this.buildHeaders(method, options);
+        const startedAt = Date.now();
+        const body = options && 'body' in options ? options.body : undefined;
+        const payload = body !== undefined ? JSON.stringify(body) : undefined;
+        const retries = options.retries ?? this.config.maxRetries ?? 0;
+        const timeoutMs = options.timeoutMs ?? this.config.timeoutMs ?? 30000;
+        const retryMaxElapsedMs = options.retryMaxElapsedMs ?? this.config.retryMaxElapsedMs;
+        let attempt = 0;
+        while (true) {
+            this.assertCircuitState();
+            const controller = typeof AbortController !== 'undefined' ? new AbortController() : undefined;
+            if (controller && options.signal) {
+                if (options.signal.aborted) {
+                    controller.abort();
+                }
+                else {
+                    options.signal.addEventListener('abort', () => controller.abort(), { once: true });
+                }
+            }
+            const timeout = controller ? setTimeout(() => controller.abort(), timeoutMs) : undefined;
+            const isHalfOpenAttempt = this.circuitState.state === 'half_open';
+            if (isHalfOpenAttempt) {
+                const halfOpenMax = this.getCircuitConfig()?.halfOpenMaxRequests ?? 1;
+                if (this.circuitState.halfOpenInFlight >= halfOpenMax) {
+                    throw new errors_js_1.PepayCircuitBreakerError('Circuit breaker is half-open; waiting for trial request to complete.', {
+                        code: 'CIRCUIT_BREAKER_OPEN',
+                        status: 503,
+                        state: this.circuitState.state,
+                        openUntil: this.circuitState.openUntil,
+                        failureCount: this.circuitState.failureCount
+                    });
+                }
+                this.circuitState.halfOpenInFlight += 1;
+            }
+            try {
+                this.config.onRequest?.({
+                    method,
+                    url,
+                    headers: redactHeaders(headers),
+                    attempt,
+                    idempotencyKey: headers['Idempotency-Key']
+                });
+                const requestInit = {
+                    method,
+                    headers,
+                    body: payload,
+                    signal: controller?.signal
+                };
+                if (this.config.dispatcher) {
+                    requestInit.dispatcher = this.config.dispatcher;
+                }
+                if (this.config.httpAgent) {
+                    requestInit.agent = this.config.httpAgent;
+                }
+                const response = await (this.config.fetch || fetch)(url, requestInit);
+                if (timeout)
+                    clearTimeout(timeout);
+                this.config.onResponse?.({
+                    method,
+                    url,
+                    status: response.status,
+                    headers: redactHeaders(headers),
+                    attempt,
+                    durationMs: Date.now() - startedAt
+                });
+                if (response.ok) {
+                    this.onCircuitSuccess();
+                    if (response.status === 204)
+                        return undefined;
+                    const contentType = response.headers.get('content-type') || '';
+                    if (contentType.includes('application/json')) {
+                        return (await response.json());
+                    }
+                    const text = await response.text();
+                    return text;
+                }
+                const retryAfterHeader = response.headers.get('retry-after');
+                const retryAfter = retryAfterHeader ? Number(retryAfterHeader) : undefined;
+                const requestId = response.headers.get('x-request-id') || response.headers.get('request-id') || undefined;
+                const errorPayload = await this.parseError(response);
+                const code = typeof errorPayload?.code === 'string' ? errorPayload.code : undefined;
+                const message = (typeof errorPayload?.message === 'string' && errorPayload.message) ||
+                    (typeof errorPayload?.error === 'string' && errorPayload.error) ||
+                    response.statusText ||
+                    'Request failed';
+                if (response.status === 401 || response.status === 403) {
+                    throw new errors_js_1.PepayAuthError(message, { code, status: response.status, details: errorPayload });
+                }
+                if (response.status === 400) {
+                    if (code === 'INVALID_CURSOR') {
+                        throw new errors_js_1.PepayInvalidCursorError(message, { code, status: response.status, details: errorPayload });
+                    }
+                    throw new errors_js_1.PepayValidationError(message, { code, status: response.status, details: errorPayload });
+                }
+                if (response.status === 429) {
+                    throw new errors_js_1.PepayRateLimitError(message, { code, status: response.status, details: errorPayload, retryAfter });
+                }
+                throw new errors_js_1.PepayHttpError(message, {
+                    code,
+                    status: response.status,
+                    details: errorPayload,
+                    requestId,
+                    idempotencyKey: headers['Idempotency-Key']
+                });
+            }
+            catch (error) {
+                this.onCircuitFailure(error);
+                if (timeout)
+                    clearTimeout(timeout);
+                const isAbort = error instanceof Error && error.name === 'AbortError';
+                const isPepayError = error instanceof errors_js_1.PepayHttpError || error instanceof errors_js_1.PepayAuthError || error instanceof errors_js_1.PepayValidationError || error instanceof errors_js_1.PepayRateLimitError;
+                const elapsedMs = Date.now() - startedAt;
+                if (retryMaxElapsedMs !== undefined && elapsedMs >= retryMaxElapsedMs) {
+                    this.config.onError?.({
+                        method,
+                        url,
+                        headers: redactHeaders(headers),
+                        attempt,
+                        error,
+                        elapsedMs,
+                        willRetry: false
+                    });
+                    throw error;
+                }
+                if (isPepayError && error instanceof errors_js_1.PepayRateLimitError && attempt < retries) {
+                    this.config.onError?.({
+                        method,
+                        url,
+                        headers: redactHeaders(headers),
+                        attempt,
+                        error,
+                        elapsedMs,
+                        willRetry: true
+                    });
+                    const delay = (0, utils_js_1.getRetryDelay)(attempt, this.config.retry, error.retryAfter);
+                    await (0, utils_js_1.sleep)(delay);
+                    attempt += 1;
+                    continue;
+                }
+                if (isPepayError && error instanceof errors_js_1.PepayHttpError && error.status && this.isRetryableStatus(error.status) && attempt < retries) {
+                    this.config.onError?.({
+                        method,
+                        url,
+                        headers: redactHeaders(headers),
+                        attempt,
+                        error,
+                        elapsedMs,
+                        willRetry: true
+                    });
+                    const delay = (0, utils_js_1.getRetryDelay)(attempt, this.config.retry, undefined);
+                    await (0, utils_js_1.sleep)(delay);
+                    attempt += 1;
+                    continue;
+                }
+                if (!isPepayError && (isAbort || attempt < retries)) {
+                    this.config.onError?.({
+                        method,
+                        url,
+                        headers: redactHeaders(headers),
+                        attempt,
+                        error,
+                        elapsedMs,
+                        willRetry: true
+                    });
+                    const delay = (0, utils_js_1.getRetryDelay)(attempt, this.config.retry, undefined);
+                    await (0, utils_js_1.sleep)(delay);
+                    attempt += 1;
+                    continue;
+                }
+                this.config.onError?.({
+                    method,
+                    url,
+                    headers: redactHeaders(headers),
+                    attempt,
+                    error,
+                    elapsedMs,
+                    willRetry: false
+                });
+                throw error;
+            }
+            finally {
+                if (isHalfOpenAttempt) {
+                    this.circuitState.halfOpenInFlight = Math.max(0, this.circuitState.halfOpenInFlight - 1);
+                }
+            }
+        }
+    }
+    buildHeaders(method, options) {
+        const headers = {
+            'Content-Type': 'application/json',
+            ...this.config.defaultHeaders,
+            ...options.headers
+        };
+        const auth = { ...this.config, ...options.auth };
+        const authScope = options.authScope;
+        const hasMerchantKey = Boolean(auth.apiKey);
+        const hasCommerceKey = Boolean(auth.commerceApiKey);
+        const hasAlternateAuth = Boolean(auth.bearerToken || auth.userAccessToken || auth.sessionToken || auth.signature);
+        this.applyScopedApiKey(headers, auth, authScope, {
+            hasMerchantKey,
+            hasCommerceKey,
+            hasAlternateAuth
+        });
+        if (auth.bearerToken)
+            headers['Authorization'] = `Bearer ${auth.bearerToken}`;
+        if (auth.userAccessToken) {
+            headers['User-Authorization'] = auth.userAccessToken.startsWith('Bearer ')
+                ? auth.userAccessToken
+                : `Bearer ${auth.userAccessToken}`;
+        }
+        if (auth.sessionToken)
+            headers['x-session-token'] = auth.sessionToken;
+        if (auth.signature)
+            headers['x-signature'] = auth.signature;
+        if (this.config.apiVersion)
+            headers['X-Pepay-API-Version'] = this.config.apiVersion;
+        if (this.config.telemetry)
+            headers['X-Pepay-Telemetry'] = '1';
+        const appInfo = this.config.appInfo;
+        if (appInfo) {
+            headers['X-Pepay-Client-Info'] = (0, utils_js_1.stripUndefined)({
+                name: appInfo.name,
+                version: appInfo.version,
+                url: appInfo.url
+            }).name ? JSON.stringify((0, utils_js_1.stripUndefined)({ name: appInfo.name, version: appInfo.version, url: appInfo.url })) : '';
+        }
+        if (this.config.userAgent) {
+            headers['X-Pepay-User-Agent'] = this.config.userAgent;
+        }
+        if (['POST', 'PUT', 'PATCH'].includes(method.toUpperCase())) {
+            if (!headers['Idempotency-Key']) {
+                headers['Idempotency-Key'] = options.idempotencyKey || (0, utils_js_1.generateIdempotencyKey)();
+            }
+        }
+        return headers;
+    }
+    async parseError(response) {
+        const contentType = response.headers.get('content-type') || '';
+        if (contentType.includes('application/json')) {
+            try {
+                return (await response.json());
+            }
+            catch {
+                return null;
+            }
+        }
+        return null;
+    }
+    isRetryableStatus(status) {
+        const retryable = this.config.retryableStatusCodes || [];
+        return retryable.includes(status);
+    }
+    applyScopedApiKey(headers, auth, authScope, flags) {
+        if (authScope === 'merchant') {
+            if (flags.hasMerchantKey) {
+                headers['x-api-key'] = auth.apiKey;
+                return;
+            }
+            if (flags.hasCommerceKey && !flags.hasAlternateAuth) {
+                throw new errors_js_1.PepayValidationError('Merchant API key required for this endpoint.', {
+                    code: 'AUTH_REQUIRED',
+                    status: 400,
+                    details: { requiredScope: 'merchant' }
+                });
+            }
+            return;
+        }
+        if (authScope === 'commerce') {
+            if (flags.hasCommerceKey) {
+                headers['x-commerce-api-key'] = auth.commerceApiKey;
+                return;
+            }
+            if (flags.hasMerchantKey && !flags.hasAlternateAuth) {
+                throw new errors_js_1.PepayValidationError('Commerce API key required for this endpoint.', {
+                    code: 'AUTH_REQUIRED',
+                    status: 400,
+                    details: { requiredScope: 'commerce' }
+                });
+            }
+            return;
+        }
+        if (flags.hasMerchantKey) {
+            headers['x-api-key'] = auth.apiKey;
+            return;
+        }
+        if (flags.hasCommerceKey) {
+            headers['x-commerce-api-key'] = auth.commerceApiKey;
+        }
+    }
+    getCircuitConfig() {
+        return this.config.circuitBreaker;
+    }
+    assertCircuitState() {
+        const cfg = this.getCircuitConfig();
+        if (!isCircuitBreakerEnabled(cfg))
+            return;
+        const now = Date.now();
+        const state = this.circuitState;
+        if (state.state === 'open') {
+            if (state.openUntil && now >= state.openUntil) {
+                state.state = 'half_open';
+                state.failureCount = 0;
+                state.successCount = 0;
+                state.openUntil = undefined;
+                state.halfOpenInFlight = 0;
+                cfg?.onStateChange?.({ state: state.state, failureCount: state.failureCount, successCount: state.successCount });
+                return;
+            }
+            throw new errors_js_1.PepayCircuitBreakerError('Circuit breaker is open; requests are paused. Try again later or adjust circuitBreaker config.', {
+                code: 'CIRCUIT_BREAKER_OPEN',
+                status: 503,
+                state: state.state,
+                openUntil: state.openUntil,
+                failureCount: state.failureCount
+            });
+        }
+    }
+    onCircuitSuccess() {
+        const cfg = this.getCircuitConfig();
+        if (!isCircuitBreakerEnabled(cfg))
+            return;
+        const state = this.circuitState;
+        if (state.state === 'half_open') {
+            state.successCount += 1;
+            const threshold = cfg?.successThreshold ?? 1;
+            if (state.successCount >= threshold) {
+                state.state = 'closed';
+                state.failureCount = 0;
+                state.successCount = 0;
+                state.openUntil = undefined;
+                state.halfOpenInFlight = 0;
+                cfg?.onStateChange?.({ state: state.state, failureCount: state.failureCount, successCount: state.successCount });
+            }
+            return;
+        }
+        state.failureCount = 0;
+    }
+    onCircuitFailure(error) {
+        const cfg = this.getCircuitConfig();
+        if (!isCircuitBreakerEnabled(cfg))
+            return;
+        const shouldTrip = cfg?.shouldTrip || defaultShouldTrip;
+        if (!shouldTrip(error))
+            return;
+        const state = this.circuitState;
+        state.failureCount += 1;
+        if (state.state === 'half_open') {
+            this.openCircuit(cfg);
+            return;
+        }
+        const threshold = cfg?.failureThreshold ?? 5;
+        if (state.failureCount >= threshold) {
+            this.openCircuit(cfg);
+        }
+    }
+    openCircuit(cfg) {
+        const state = this.circuitState;
+        state.state = 'open';
+        state.successCount = 0;
+        state.halfOpenInFlight = 0;
+        const resetTimeout = cfg?.resetTimeoutMs ?? 30000;
+        state.openUntil = Date.now() + resetTimeout;
+        cfg?.onStateChange?.({ state: state.state, failureCount: state.failureCount, successCount: state.successCount, openUntil: state.openUntil });
+    }
+}
+exports.PepayHttpClient = PepayHttpClient;
+function redactHeaders(headers) {
+    const redacted = {};
+    const sensitive = new Set([
+        'authorization',
+        'user-authorization',
+        'x-api-key',
+        'x-commerce-api-key',
+        'x-session-token',
+        'x-signature'
+    ]);
+    for (const [key, value] of Object.entries(headers)) {
+        if (sensitive.has(key.toLowerCase())) {
+            redacted[key] = '[REDACTED]';
+        }
+        else {
+            redacted[key] = value;
+        }
+    }
+    return redacted;
+}
+function isCircuitBreakerEnabled(config) {
+    return Boolean(config?.enabled);
+}
+function defaultShouldTrip(error) {
+    if (error instanceof Error && error.name === 'AbortError')
+        return false;
+    if (error instanceof errors_js_1.PepayRateLimitError)
+        return false;
+    if (error instanceof errors_js_1.PepayAuthError || error instanceof errors_js_1.PepayValidationError || error instanceof errors_js_1.PepayInvalidCursorError)
+        return false;
+    if (error instanceof errors_js_1.PepayHttpError) {
+        return Boolean(error.status && error.status >= 500);
+    }
+    return true;
+}
+//# sourceMappingURL=http.js.map