BCL Payment Gateway

Use this skill for BCL payment gateway and BCL Pay work.

Read references/bcl-docs.md before giving factual BCL guidance or writing integration code. It contains source URLs, product boundaries, setup flow, portal key guidance, transaction/webhook notes, and known links from docs.bcl.my.

Read references/account-setup.md when user asks how to register, which keys are needed, where credentials come from, or what dashboard setup is required.

Core Workflow

1. Identify surface: BCL Pay setup, Payment Link, QR Terminal, Forms, client info, transactions, webhook, or direct debit.
2. Check whether task is BCL-owned, Bayarcash-linked, or pure Bayarcash API work.
3. Use BCL docs for BCL UI/workflow details; use Bayarcash docs only for raw Bayarcash API fields and checksum/callback specifics.
4. Keep API keys, portal keys, and token values server-side unless BCL docs explicitly show public use.
5. Treat payment status, callbacks, webhooks, and direct debit as high impact. Verify identity, amount, order/reference uniqueness, and idempotency before fulfilment.

Boundary Rules