@aeon-ai-pay/aigateway 0.1.4 → 0.1.6

package/CHANGELOG.md

@@ -7,6 +7,46 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [0.1.6] — 2026-05-19
+
+### Changed
+- **`update-check.mjs` is now synchronous / foreground.** A newer published
+  version triggers `npm install -g` + `scripts/postinstall.mjs` *inline*,
+  with `npm`'s own progress streamed to stderr. After the upgrade the CLI
+  emits an envelope with `error.code === "UPDATE_APPLIED"` (and `error.from`
+  / `error.to`) and exits with code 2 **without running the original
+  command**. The caller / agent reruns the command on the new CLI + new
+  SKILL.md.
+- Replaces the previous detached-background upgrade, which could leave the
+  global package half-replaced (`bin/cli.mjs` already updated while
+  `src/commands/*` still old → `ERR_MODULE_NOT_FOUND` on the very next
+  invocation) and could fail silently (e.g. `ENOTEMPTY` on Windows / nvm).
+
+### Added
+- New error code `UPDATE_APPLIED` (exit 2) emitted by `update-check.mjs`
+  after a successful synchronous upgrade.
+- SKILL.md Hard Rules: new clause telling the agent how to react when it
+  sees `error.code === "UPDATE_APPLIED"` (briefly inform the user of the
+  version transition, then rerun the same command).
+
+## [0.1.5] — 2026-05-19
+
+### Changed
+- **Removed all Chinese-language content from source files**. All comments,
+  docstrings, log messages, and SKILL.md guidance are now English-only.
+  `normalizeWalletError` no longer matches CJK error strings from localised
+  wallet apps; those fall through to the generic `WALLET_ERROR` code.
+- SKILL.md's "Wording Discipline" section is now language-neutral: instead
+  of listing Chinese phrasings, it instructs translators to keep the "wallet
+  top-up" verb / noun lexically distinct from the "card face value" verb /
+  noun in every target language.
+
+### Removed
+- `test/create-logic.test.mjs` — stale unit tests inherited from `aicard`
+  that referenced internal functions removed during the merge (e.g.
+  `inlineWalletConnectTopup`, now replaced by `funding.mjs::fundSessionKey`).
+  The file was never published to npm (`test/` is not in `files`).
+
 ## [0.1.4] — 2026-05-19
 
 ### Added
@@ -44,14 +84,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 ## [0.1.2] — 2026-05-19
 
 ### Changed
-- **SKILL.md wording discipline**: `wallet-topup` ask and `create-card` ask now have
-  enforced lexical separation. Step 2 (`wallet-topup`) explicitly says "load USDT
-  **into your session wallet**" / "往**本地钱包**充值 USDT". Step 3a (`create-card`)
-  says "card **face value**" / "**开多少美元的卡** / 卡的面额", and explicitly
-  forbids translating it as "充值". Fixes a UX confusion where a user with a
-  funded wallet would be asked "请问您想充值多少美元到虚拟卡上?" and reasonably
-  wonder if it was another wallet top-up prompt.
-- New "Wording Discipline" section in SKILL.md `## Copy Constraints` to lock this in.
+- **SKILL.md wording discipline**: the `wallet-topup` and `create-card` prompts
+  now enforce strict lexical separation. Step 2 (`wallet-topup`) says "load USDT
+  **into your session wallet**"; Step 3a (`create-card`) says "card
+  **face value**" / "issue a card with how much". When translating to any
+  non-English language, the verb / noun for each concept must remain distinct
+  so users cannot conflate them.
+- New "Wording Discipline" section in SKILL.md `## Copy Constraints` to lock
+  this in.
 
 ## [0.1.1] — 2026-05-19
 

package/bin/cli.mjs

@@ -7,8 +7,9 @@ if (major < 25) {
   process.exit(1);
 }
 
-// WalletConnect v2 SDK 已知缺陷：relay 偶发 null WebSocket 帧导致
-// isJsonRpcPayload 内部 'id' in null 抛 TypeError，不影响业务流程，静默忽略
+// Known WalletConnect v2 SDK quirk: the relay occasionally emits null WebSocket frames,
+// causing `'id' in null` inside isJsonRpcPayload to throw a TypeError. It does not
+// affect business logic, so silently ignore it.
 process.on("uncaughtException", (err) => {
   if (
     err instanceof TypeError &&
@@ -103,45 +104,33 @@ program
     return withdraw(opts);
   });
 
-program
-  .command("create-card")
-  .description("Create a one-time virtual card by paying with USDT on BSC via x402")
-  .requiredOption("--amount <usd>", "Card amount in USD ($0.6 ~ $800)")
-  .option("--app-id <id>", "Merchant app ID", DEFAULT_APP_ID)
-  .option("--topup-amount <usdt>", "USDT top-up amount when balance is insufficient (≥5)")
-  .option("--private-key <key>", "Override EVM private key")
-  .option("--poll", "Auto-poll status after creation", false)
-  .option("--dry-run", "Run all preflight checks but do not sign/transact", false)
-  .action(async (opts) => {
-    const { createCard } = await import("../src/commands/create-card.mjs");
-    return createCard(opts);
-  });
-
-program
-  .command("create-image")
-  .description("Generate an AI image via Skill Boss, paying with USDT on BSC via x402")
-  .requiredOption("--prompt <text>", "Image prompt text")
+// ─── x402 unified paid-call entry ──────────────────────────────────────────
+//   The only paid-call surface: `sb invoke --model <id> --inputs <json|@file>`.
+const sb = program
+  .command("sb")
+  .description("AI tools — invoke any of ~200+ endpoints via x402 (USDT on BSC)");
+
+sb
+  .command("invoke")
+  .description("Invoke any AI tool model (run `aigateway sb tools` first to populate the local catalog)")
+  .requiredOption("--model <id>", "Model id, e.g. replicate/black-forest-labs/flux-schnell")
+  .requiredOption("--inputs <json>", "Inputs as JSON literal or @path/to/file.json")
   .option("--app-id <id>", "Merchant app ID", DEFAULT_APP_ID)
-  .option("--aspect-ratio <ratio>", "Image aspect ratio", "16:9")
-  .option("--output-format <fmt>", "Image format (png/jpeg/webp)", "png")
-  .option("--model <id>", "Model identifier")
-  .option("--output <dir>", "Output directory (default ~/aigateway-images)")
+  .option("--output <dir>", "Output directory for binary downloads (image/video/audio)")
+  .option("--raw", "Skip auto-download and emit the upstream response as-is", false)
   .option("--topup-amount <usdt>", "USDT top-up amount when balance is insufficient (≥5)")
   .option("--private-key <key>", "Override EVM private key")
   .action(async (opts) => {
-    const { createImage } = await import("../src/commands/create-image.mjs");
-    return createImage(opts);
+    const { sbInvokeCommand } = await import("../src/commands/sb-invoke.mjs");
+    return sbInvokeCommand(opts);
   });
 
-program
-  .command("create-card-status")
-  .description("Query the status of a virtual card created via create-card")
-  .requiredOption("--order-no <orderNo>", "Order number returned by create-card")
-  .option("--app-id <id>", "Merchant app ID", DEFAULT_APP_ID)
-  .option("--poll", "Poll until terminal status", false)
+sb
+  .command("tools")
+  .description("Fetch and display the AI tool catalog from the server (no caching, always live)")
   .action(async (opts) => {
-    const { status } = await import("../src/commands/create-card-status.mjs");
-    return status(opts);
+    const { sbTools } = await import("../src/commands/sb-tools.mjs");
+    return sbTools(opts);
   });
 
 program

package/docs/exit-codes.md

@@ -38,8 +38,9 @@ The full set of `error.code` values, grouped by exit code, is defined in [`src/e
 | ---- | ---- |
 | `PAYMENT_TIMEOUT` | WalletConnect / signature request timed out (5 minutes). |
 | `WC_SESSION_EXPIRED` | WalletConnect session dropped mid-flow. |
-| `POLL_TIMEOUT` | `status --poll` exhausted attempts. Card may still be provisioning. |
+| `POLL_TIMEOUT` | `create-card-status --poll` exhausted attempts. Card may still be provisioning. |
 | `TX_TIMEOUT` | On-chain receipt wait exceeded 60 s. |
+| `UPDATE_APPLIED` | The CLI just upgraded itself synchronously to a newer version. The previous command was not executed — the caller (or the agent) must rerun it on the new version. Envelope carries `error.from` / `error.to` showing the version transition. |
 
 ### Exit 3 — Service / Network
 

package/docs/release-process.md

@@ -59,15 +59,17 @@ We follow [SemVer](https://semver.org/):
 
 ## What happens for users after publish
 
-`src/update-check.mjs` runs on every CLI invocation. Within a few seconds of the next `aigateway <cmd>` call by any user, they will:
+`src/update-check.mjs` runs at the start of every CLI invocation. On the **next** `aigateway <cmd>` call by any user with a stale version, they will:
 
-1. See `[update] @aeon-ai-pay/aigateway 0.1.0 → 0.1.1, upgrading in background...` on stderr.
-2. The current command still completes normally.
-3. A detached child process runs `npm install -g @aeon-ai-pay/aigateway@0.1.1` + `node scripts/postinstall.mjs`, which calls `npx skills add ... -g -y --copy`.
-4. The new `SKILL.md` is re-installed into every detected IDE skill folder (Cursor / Claude Code / Codex / Windsurf / Cline / …).
-5. Next invocation uses the new CLI and the new agent reads the new skill.
+1. See `[update] @aeon-ai-pay/aigateway 0.1.0 → 0.1.1, upgrading (foreground)...` on stderr.
+2. **`npm install -g @aeon-ai-pay/aigateway@<latest>` runs synchronously**, with `npm`'s own progress streamed to stderr.
+3. **`scripts/postinstall.mjs` runs synchronously**, calling `npx skills add ... -g -y --copy` to refresh every detected IDE skill folder (Cursor / Claude Code / Codex / Windsurf / Cline / …).
+4. The CLI emits an envelope with `error.code === "UPDATE_APPLIED"` and **exits with code 2** without executing the original command.
+5. The caller (or the agent — `error.code` is stable, agents should match on it) **reruns the original command**, which now executes on the new CLI + new SKILL.md.
 
-Upgrade results land in `~/.aigateway/update.log`.
+Why foreground instead of detached background: a backgrounded `npm install -g` mid-command can leave the global package in a half-replaced state (`bin/cli.mjs` already updated while `src/commands/*` still old, or vice versa), causing `ERR_MODULE_NOT_FOUND` on the very next invocation. Synchronous upgrade keeps the package consistent.
+
+If the upgrade itself fails (network, permissions, `ENOTEMPTY` on Windows / nvm), the failure is logged to stderr and the command continues on the current version — the user is never silently left on a half-installed package.
 
 ## Rolling back
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aeon-ai-pay/aigateway",
-  "version": "0.1.4",
+  "version": "0.1.6",
   "description": "AI Agents discover, invoke, and settle paid LLMs, APIs, and Skills — starting with Skill Boss. No manual key setup. No prepayment. Pay-per-call via x402 or Agent Card.",
   "type": "module",
   "bin": {

package/scripts/postinstall.mjs

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 
 /**
- * npm install -g 后自动安装 skill 到所有已检测的 AI 编码工具
+ * After `npm install -g`, automatically install the skill into every detected AI coding tool.
  *
- * 优先使用 `npx skills add` (Vercel Labs) 统一安装到所有工具
- * 失败时 fallback 到手动复制 Claude Code skills 目录
+ * Prefer `npx skills add` (Vercel Labs) so the skill is registered across all tools at once.
+ * If that fails, fall back to manually copying the skill into the Claude Code skills directory.
  */
 
 import { cpSync, existsSync, mkdirSync } from 'node:fs';
@@ -20,7 +20,7 @@ if (!existsSync(skillSrc)) {
   process.exit(0);
 }
 
-// 尝试用 skills CLI 安装到所有工具
+// Try installing into every tool via the skills CLI
 try {
   execFileSync('npx', ['skills', 'add', skillSrc, '-g', '-y', '--copy'], {
     stdio: 'inherit',
@@ -30,10 +30,10 @@ try {
   console.log('✔ aigateway skill installed via skills CLI (all detected tools)');
   process.exit(0);
 } catch {
-  // skills CLI 不可用或失败，fallback
+  // skills CLI unavailable or failed — fall back
 }
 
-// Fallback: 手动复制到 Claude Code
+// Fallback: copy manually into Claude Code
 const dest = join(homedir(), '.claude', 'skills', 'aigateway');
 mkdirSync(dirname(dest), { recursive: true });
 cpSync(skillSrc, dest, { recursive: true, force: true });