@bankr/cli 0.3.12 → 0.3.23

package/dist/commands/webhooks.js

@@ -17,6 +17,7 @@ import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { confirm } from "@inquirer/prompts";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 import { getApiUrl, requireApiKey, CLI_USER_AGENT } from "../lib/config.js";
 // ── Config file ─────────────────────────────────────────────────────────
 const CONFIG_FILENAME = "bankr.webhooks.json";
@@ -487,7 +488,7 @@ export async function webhooksDeployCommand(name) {
     }
     catch (err) {
         spin.fail("Deploy failed");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -507,7 +508,9 @@ export async function webhooksListCommand() {
             const status = w.status === "active"
                 ? output.fmt.success("active")
                 : output.fmt.warn(w.status);
-            const mode = w.readOnly ? output.fmt.dim("read-only") : output.fmt.warn("writes");
+            const mode = w.readOnly
+                ? output.fmt.dim("read-only")
+                : output.fmt.warn("writes");
             console.log(`  ${output.fmt.brand(w.name)} ${status}  v${w.version}  ${mode}  ${w.totalInvocations} invocations`);
             if (w.description)
                 output.dim(`    ${w.description}`);
@@ -515,7 +518,7 @@ export async function webhooksListCommand() {
     }
     catch (err) {
         spin.fail("Failed to list webhooks");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -533,7 +536,7 @@ export async function webhooksPauseResumeCommand(name, action) {
     }
     catch (err) {
         spin.fail(`Failed to ${action} ${name}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -556,14 +559,16 @@ export async function webhooksDeleteCommand(name) {
     }
     catch (err) {
         spin.fail(`Failed to delete ${name}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
 export async function webhooksLogsCommand(name) {
     const spin = output.spinner(`Fetching invocations for ${name}...`);
     try {
-        const res = await fetch(`${getApiUrl()}/webhooks/${name}/logs?limit=25`, { headers: authHeaders() });
+        const res = await fetch(`${getApiUrl()}/webhooks/${name}/logs?limit=25`, {
+            headers: authHeaders(),
+        });
         const result = await handleResponse(res);
         spin.stop();
         if (result.logs.length === 0) {
@@ -582,7 +587,7 @@ export async function webhooksLogsCommand(name) {
     }
     catch (err) {
         spin.fail("Failed to fetch logs");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -611,7 +616,7 @@ export async function webhooksEnvSetCommand(keyValue) {
     }
     catch (err) {
         spin.fail(`Failed to set ${key}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -632,7 +637,7 @@ export async function webhooksEnvListCommand() {
     }
     catch (err) {
         spin.fail("Failed to list env vars");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -645,7 +650,7 @@ export async function webhooksEnvUnsetCommand(key) {
     }
     catch (err) {
         spin.fail(`Failed to remove ${key}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }

package/dist/commands/whoami.js

@@ -2,6 +2,7 @@ import { existsSync } from "fs";
 import { getApiKey, getApiUrl, getConfigPath, isCustomApiUrl, } from "../lib/config.js";
 import { getUserInfo } from "../lib/api.js";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 export async function whoamiCommand() {
     const apiKey = getApiKey();
     const apiUrl = getApiUrl();
@@ -35,7 +36,7 @@ export async function whoamiCommand() {
         }
     }
     catch (err) {
-        spin.fail(`Could not reach Bankr API: ${err.message}`);
+        spin.fail(`Could not reach Bankr API: ${getErrorMessage(err)}`);
         return;
     }
     // Fetch user profile info
@@ -69,7 +70,7 @@ export async function whoamiCommand() {
         output.label("Score", `${score}${rankStr}`);
     }
     catch (err) {
-        profileSpin.fail(`Could not fetch account info: ${err.message}`);
+        profileSpin.fail(`Could not fetch account info: ${getErrorMessage(err)}`);
     }
 }
 //# sourceMappingURL=whoami.js.map

package/dist/commands/x402.d.ts

@@ -62,6 +62,9 @@ export declare function x402EnvUnsetCommand(key: string): Promise<void>;
 export declare function x402SchemaCommand(url: string, opts?: {
     raw?: boolean;
 }): Promise<void>;
+export declare function checkAdvertisedPrice(advertisedUsd: number | null, callerCapUsd: number): string | null;
+export declare function parseAdvertisedPrice(price: string, currency: string): number | null;
+export declare function outboundMaxPayment(callerCapUsd: number, advertisedUsd: number | null): number;
 export declare function x402CallCommand(url: string, opts?: {
     method?: string;
     body?: string;

package/dist/commands/x402.js

@@ -20,12 +20,19 @@ import { join } from "node:path";
 import chalk from "chalk";
 import { input, select, confirm } from "@inquirer/prompts";
 import * as output from "../lib/output.js";
+import { getErrorMessage } from "../lib/errors.js";
 import { getApiUrl, requireApiKey, CLI_USER_AGENT } from "../lib/config.js";
 // ── Config file helpers ─────────────────────────────────────────────────
 const CONFIG_FILENAME = "bankr.x402.json";
 function findProjectRoot() {
     return process.cwd();
 }
+// Config values come from user-edited JSON cast without validation, so fields
+// feeding select() defaults are plain strings; narrow them to the offered
+// choices (select's default must match the literal union of choice values).
+function pickDefault(value, allowed) {
+    return allowed.find((v) => v === value);
+}
 function loadConfigFile(projectRoot) {
     const candidates = [
         join(projectRoot, CONFIG_FILENAME),
@@ -237,9 +244,7 @@ export default async function handler(req: Request): Promise<Response> {
     };
     // Add to config
     let config = loadConfigFile(root);
-    if (!config) {
-        config = { services: {} };
-    }
+    config || (config = { services: {} });
     config.services[name] = {
         price: "0.001",
         description: `${name} service`,
@@ -257,9 +262,7 @@ export default async function handler(req: Request): Promise<Response> {
 export async function x402ConfigureCommand(name) {
     const root = findProjectRoot();
     let config = loadConfigFile(root);
-    if (!config) {
-        config = { services: {} };
-    }
+    config || (config = { services: {} });
     const existing = config.services[name] ?? { price: "0.001" };
     const description = await input({
         message: "Service description:",
@@ -272,12 +275,14 @@ export async function x402ConfigureCommand(name) {
         theme: output.bankrTheme,
     });
     const currency = "USDC";
+    const networkDefault = pickDefault(existing.network, ["base"]) ?? "base";
     const network = await select({
         message: "Network:",
         choices: [{ name: "Base", value: "base" }],
-        default: existing.network ?? "base",
+        default: networkDefault,
         theme: output.bankrTheme,
     });
+    const methodDefault = pickDefault(existing.methods?.[0], ["GET", "POST", "*"]) ?? "GET";
     const method = await select({
         message: "HTTP method:",
         choices: [
@@ -285,7 +290,7 @@ export async function x402ConfigureCommand(name) {
             { name: "POST — JSON body", value: "POST" },
             { name: "Any — accept all methods", value: "*" },
         ],
-        default: existing.methods?.[0] ?? "GET",
+        default: methodDefault,
         theme: output.bankrTheme,
     });
     const paymentScheme = await select({
@@ -327,9 +332,7 @@ export async function x402DeployCommand(name) {
     }
     // Load or bootstrap config
     let config = loadConfigFile(root);
-    if (!config) {
-        config = { services: {} };
-    }
+    config || (config = { services: {} });
     // Discover services
     const { readdirSync, statSync } = await import("node:fs");
     const entries = readdirSync(x402Dir);
@@ -422,7 +425,7 @@ export async function x402DeployCommand(name) {
     }
     catch (err) {
         spin.fail("Deploy failed");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -452,7 +455,7 @@ export async function x402ListCommand() {
     }
     catch (err) {
         spin.fail("Failed to list endpoints");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -473,7 +476,7 @@ export async function x402PauseResumeCommand(name, action) {
     }
     catch (err) {
         spin.fail(`Failed to ${action} ${name}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -499,7 +502,7 @@ export async function x402DeleteCommand(name) {
     }
     catch (err) {
         spin.fail(`Failed to delete ${name}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -533,7 +536,7 @@ export async function x402RevenueCommand(name) {
     }
     catch (err) {
         spin.fail("Failed to fetch revenue");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -564,7 +567,7 @@ export async function x402EnvSetCommand(keyValue) {
     }
     catch (err) {
         spin.fail(`Failed to set ${key}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -589,7 +592,7 @@ export async function x402EnvListCommand() {
     }
     catch (err) {
         spin.fail("Failed to list env vars");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -608,7 +611,7 @@ export async function x402EnvUnsetCommand(key) {
     }
     catch (err) {
         spin.fail(`Failed to remove ${key}`);
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -875,7 +878,7 @@ export async function x402SchemaCommand(url, opts = {}) {
     }
     catch (err) {
         spin.fail("Schema lookup failed");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -998,6 +1001,32 @@ async function fetchSchemaForInteractive(url) {
     return null;
 }
 // ── Call ──────────────────────────────────────────────────────────────
+// The caller's --max-payment is the only value ever sent as the payment cap;
+// an endpoint-advertised price may never raise it — fail closed instead.
+// Exported for tests.
+export function checkAdvertisedPrice(advertisedUsd, callerCapUsd) {
+    if (advertisedUsd !== null && advertisedUsd > callerCapUsd) {
+        return `Endpoint requires $${advertisedUsd} but --max-payment is $${callerCapUsd}. Re-run with a higher --max-payment (up to 10) to allow it.`;
+    }
+    return null;
+}
+// Advertised prices that are non-positive, unparseable, or token-denominated
+// (non-USD currency) are treated as unknown: only a USD value can safely feed
+// the USD cap clamp or the fail-closed comparison. Exported for tests.
+export function parseAdvertisedPrice(price, currency) {
+    const upper = currency.toUpperCase();
+    if (upper !== "USDC" && upper !== "USD")
+        return null;
+    const parsed = parseFloat(price);
+    return Number.isFinite(parsed) && parsed > 0 ? parsed : null;
+}
+// The cap we send: never above the caller's --max-payment, and never above the
+// advertised price the user was shown and confirmed. Exported for tests.
+export function outboundMaxPayment(callerCapUsd, advertisedUsd) {
+    return advertisedUsd !== null
+        ? Math.min(advertisedUsd, callerCapUsd)
+        : callerCapUsd;
+}
 export async function x402CallCommand(url, opts = {}) {
     if (!url) {
         output.error("Usage: bankr x402 call <url> [--method POST] [--body '{}']");
@@ -1010,7 +1039,8 @@ export async function x402CallCommand(url, opts = {}) {
         output.error("--max-payment must be between 0 and 10 (USD)");
         process.exit(1);
     }
-    // Interactive mode: fetch schema and prompt for input values
+    // Endpoint-advertised price. Shown at confirm time; the outbound cap is
+    // clamped to min(advertised, caller's maxPaymentUsd) — see outboundMaxPayment.
     let resolvedPrice = null;
     if (opts.interactive) {
         const schema = await fetchSchemaForInteractive(url);
@@ -1024,7 +1054,12 @@ export async function x402CallCommand(url, opts = {}) {
             console.log(`  ${chalk.dim("Price")}  ${chalk.green(`$${schema.price} ${schema.currency}`)}`);
             console.log();
             // Use the endpoint's actual price and preferred method
-            resolvedPrice = parseFloat(schema.price);
+            resolvedPrice = parseAdvertisedPrice(schema.price, schema.currency);
+            const capError = checkAdvertisedPrice(resolvedPrice, maxPaymentUsd);
+            if (capError) {
+                output.error(capError);
+                process.exit(1);
+            }
             if (schema.methods.length > 0) {
                 method = schema.methods.includes("POST") ? "POST" : schema.methods[0];
             }
@@ -1040,7 +1075,7 @@ export async function x402CallCommand(url, opts = {}) {
                         : `${key} ${chalk.dim(`(${typedProp.type}, optional)`)}`;
                     const hint = typedProp.description ?? "";
                     // Enum fields → select prompt
-                    if (typedProp.enum && typedProp.enum.length > 0) {
+                    if (typedProp.enum?.length) {
                         const selected = await select({
                             message: `${label}${hint ? ` — ${chalk.dim(hint)}` : ""}`,
                             choices: typedProp.enum.map((v) => ({
@@ -1097,6 +1132,7 @@ export async function x402CallCommand(url, opts = {}) {
             // No schema available — fallback: prompt for method and body
             output.warn("No schema found for this endpoint. Falling back to manual input.");
             console.log();
+            const manualMethodDefault = pickDefault(method, ["GET", "POST", "PUT", "DELETE"]) ?? "GET";
             method = await select({
                 message: "HTTP method",
                 choices: [
@@ -1105,7 +1141,7 @@ export async function x402CallCommand(url, opts = {}) {
                     { name: "PUT", value: "PUT" },
                     { name: "DELETE", value: "DELETE" },
                 ],
-                default: method,
+                default: manualMethodDefault,
                 theme: output.bankrTheme,
             });
             if (method === "POST" || method === "PUT") {
@@ -1143,13 +1179,22 @@ export async function x402CallCommand(url, opts = {}) {
         }
         console.log();
     }
-    // Non-interactive: probe the endpoint to show the actual price before confirming
-    if (!opts.interactive && !opts.yes && resolvedPrice === null) {
+    // Probe the endpoint to show the actual price before confirming. Skipped in
+    // non-interactive mode, where the confirm is suppressed — --ni matches --yes.
+    if (!opts.interactive &&
+        !opts.yes &&
+        !output.isNonInteractive() &&
+        resolvedPrice === null) {
         const spin = output.spinner("Checking endpoint price...");
         const schema = await fetchSchemaForInteractive(url);
         spin.stop();
         if (schema) {
-            resolvedPrice = parseFloat(schema.price);
+            resolvedPrice = parseAdvertisedPrice(schema.price, schema.currency);
+            const capError = checkAdvertisedPrice(resolvedPrice, maxPaymentUsd);
+            if (capError) {
+                output.error(capError);
+                process.exit(1);
+            }
         }
     }
     if (!opts.yes && !opts.interactive && !output.isNonInteractive()) {
@@ -1184,7 +1229,7 @@ export async function x402CallCommand(url, opts = {}) {
                 url,
                 method,
                 body: requestBody,
-                maxPaymentUsd: resolvedPrice ?? maxPaymentUsd,
+                maxPaymentUsd: outboundMaxPayment(maxPaymentUsd, resolvedPrice),
             }),
         });
         const result = await handleResponse(res);
@@ -1229,7 +1274,7 @@ export async function x402CallCommand(url, opts = {}) {
     }
     catch (err) {
         spin.fail("Call failed");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }
@@ -1276,7 +1321,7 @@ export async function x402SearchCommand(queryParts, opts = {}) {
     }
     catch (err) {
         spin.fail("Search failed");
-        output.error(err instanceof Error ? err.message : String(err));
+        output.error(getErrorMessage(err));
         process.exit(1);
     }
 }

package/dist/lib/api.d.ts

@@ -69,7 +69,11 @@ export declare function getUserInfo(): Promise<UserInfoResponse>;
 export interface TokenBalanceInfo {
     network: string;
     token: {
-        balance: number;
+        /**
+         * Wire shape of `GET /wallet/portfolio`: an exact decimal string.
+         * Coerce with `Number(...)` before arithmetic or comparison.
+         */
+        balance: string;
         balanceUSD: number;
         baseToken: {
             name: string;
@@ -191,11 +195,14 @@ export interface SubmitResponse {
 }
 export declare function submit(request: SubmitRequest): Promise<SubmitResponse>;
 export type FeeRecipientType = "wallet" | "x" | "farcaster" | "ens";
+/** Chains the deploy endpoint accepts (mirrors the API's zod enum). */
+export type LaunchChain = "base" | "robinhood";
 export interface DeployTokenRequest {
     tokenName: string;
     tokenSymbol?: string;
     image?: string;
     description?: string;
+    chain?: LaunchChain;
     tweetUrl?: string;
     websiteUrl?: string;
     feeRecipient?: {
@@ -203,6 +210,11 @@ export interface DeployTokenRequest {
         value: string;
     };
     simulateOnly?: boolean;
+    /** Turn off the default 15% creator vesting (100% of supply sold into the pool). */
+    disableVesting?: boolean;
+    /** Collect all creator fees in the pool's quote token (e.g. WETH) instead of
+     *  a mix of the launched token and the quote token. */
+    quoteOnlyFees?: boolean;
 }
 export interface DeployTokenResponse {
     success: boolean;
@@ -222,6 +234,8 @@ export interface CreatorFeesTokenResult {
     tokenAddress: string;
     name: string;
     symbol: string;
+    /** Launch chain ("base" | "robinhood"); absent on older API versions → base. */
+    chain?: string;
     poolId: string;
     initializer?: string;
     share: string;
@@ -259,6 +273,9 @@ export interface BeneficiaryFeesResponse {
     totalLaunches: number;
     poolsWithShares: number;
     tokens: CreatorFeesTokenResult[];
+    /** Server stopped the scan early — more claimable fees may exist. */
+    truncated?: boolean;
+    scanned?: number;
 }
 export interface DopplerClaimTxResponse {
     to: string;