@clawcard/cli 0.2.0 → 1.0.1

package/bin/setup.mjs

@@ -1,218 +0,0 @@
-#!/usr/bin/env node
-
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
-import { join } from "path";
-import { homedir } from "os";
-
-const OPENCLAW_DIR = join(homedir(), ".openclaw");
-const SKILLS_DIR = join(OPENCLAW_DIR, "skills", "clawcard");
-const SKILL_PATH = join(SKILLS_DIR, "SKILL.md");
-
-const DEFAULT_BASE_URL = "https://www.clawcard.sh";
-
-const SKILL_MD = `---
-name: clawcard
-description: Email, SMS, virtual cards, and credential vault for autonomous agents
-metadata: {"openclaw":{"primaryEnv":"CLAWCARD_API_KEY","emoji":"\\ud83d\\udd11"}}
----
-
-You have access to ClawCard — a platform that gives you a real email address, phone number, virtual debit cards, and an encrypted credential vault.
-
-**Authentication:** All requests use your API key as a Bearer token.
-
-## Getting Started
-
-Base URL: $CLAWCARD_BASE_URL (default: https://www.clawcard.sh)
-Auth header: Authorization: Bearer $CLAWCARD_API_KEY
-
-**Step 1: Discover your identity.** Call GET /api/me first — it returns your keyId, email, phone, and budget. Use the keyId for all other endpoints.
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" $CLAWCARD_BASE_URL/api/me
-
-Response: { "keyId": "agt_...", "name": "...", "email": "...", "phone": "...", "spendLimitCents": ... }
-
-## Endpoints
-
-Use the keyId from /api/me as KEY_ID in all endpoints below.
-
-### Identity
-
-**Get full identity details:**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" $CLAWCARD_BASE_URL/api/agents/KEY_ID
-
-### Email
-
-**Read inbox:**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" "$CLAWCARD_BASE_URL/api/agents/KEY_ID/emails?limit=20"
-
-**Send email:**
-
-curl -X POST -H "Authorization: Bearer $CLAWCARD_API_KEY" -H "Content-Type: application/json" \\
-  -d '{"to":"recipient@example.com","subject":"Hello","body":"Message text"}' \\
-  $CLAWCARD_BASE_URL/api/agents/KEY_ID/emails/send
-
-### SMS (inbound only)
-
-Each key gets a dedicated phone number for receiving SMS (e.g. verification codes). Outbound SMS is not currently supported.
-
-**Read received messages:**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" "$CLAWCARD_BASE_URL/api/agents/KEY_ID/sms?limit=20"
-
-### Virtual Cards
-
-**IMPORTANT: Before creating a card, always ask the user which card type they want.** Explain the two options:
-
-1. **single_use** — Closes automatically after one successful transaction. Use for one-time purchases (buying a domain, paying an invoice, a single checkout).
-2. **merchant_locked** — Locks to the first merchant that charges it and allows multiple charges from that merchant. Use for subscriptions or recurring payments (hosting, SaaS tools, any service paid monthly).
-
-**Tip:** Merchant-locked cards are more efficient for recurring services since they only use one card from the monthly limit. Single-use cards are safer for one-off purchases since they can't be charged again.
-
-**List cards (check for existing open cards before creating new ones):**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" $CLAWCARD_BASE_URL/api/agents/KEY_ID/cards
-
-Response includes all cards with their type, status, and spend limit. Look for cards with status "open" — especially merchant_locked cards which can be reused for the same merchant.
-
-**IMPORTANT:** Before creating a new card, always check if there's an existing open merchant_locked card for the same merchant. Reusing a merchant-locked card doesn't count against the monthly card limit.
-
-**Create a card (returns PAN, CVV, expiry):**
-
-curl -X POST -H "Authorization: Bearer $CLAWCARD_API_KEY" -H "Content-Type: application/json" \\
-  -d '{"amountCents":1000,"memo":"Hosting payment","type":"single_use"}' \\
-  $CLAWCARD_BASE_URL/api/agents/KEY_ID/cards
-
-The "type" field is required. Must be "single_use" or "merchant_locked".
-
-**Get card details (PAN, CVV, expiry — use this for existing open cards too):**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" $CLAWCARD_BASE_URL/api/agents/KEY_ID/cards/CARD_ID
-
-Use this to retrieve the full card number, CVV, and expiry of any open card. This is how you reuse a merchant_locked card for repeat purchases at the same merchant.
-
-**Close a card:**
-
-curl -X PATCH -H "Authorization: Bearer $CLAWCARD_API_KEY" -H "Content-Type: application/json" \\
-  -d '{"action":"close"}' \\
-  $CLAWCARD_BASE_URL/api/agents/KEY_ID/cards/CARD_ID
-
-### Credentials Vault
-
-**Store a credential:**
-
-curl -X POST -H "Authorization: Bearer $CLAWCARD_API_KEY" -H "Content-Type: application/json" \\
-  -d '{"service":"aws","key":"access_key","value":"AKIA..."}' \\
-  $CLAWCARD_BASE_URL/api/agents/KEY_ID/credentials
-
-**Retrieve a credential:**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" $CLAWCARD_BASE_URL/api/agents/KEY_ID/credentials/SERVICE/KEY
-
-### Budget
-
-**Check remaining budget:**
-
-curl -H "Authorization: Bearer $CLAWCARD_API_KEY" $CLAWCARD_BASE_URL/api/agents/KEY_ID/budget
-
-**Allocate budget (moves funds from account balance to this key):**
-
-curl -X POST -H "Authorization: Bearer $CLAWCARD_API_KEY" -H "Content-Type: application/json" \\
-  -d '{"amountCents":1000}' \\
-  $CLAWCARD_BASE_URL/api/agents/KEY_ID/budget
-`;
-
-// ── Helpers ──────────────────────────────────────────────────────
-
-function log(msg) {
-  console.log(`  ${msg}`);
-}
-
-function success(msg) {
-  console.log(`  \x1b[32m✓\x1b[0m ${msg}`);
-}
-
-function warn(msg) {
-  console.log(`  \x1b[33m!\x1b[0m ${msg}`);
-}
-
-function error(msg) {
-  console.error(`  \x1b[31m✗\x1b[0m ${msg}`);
-}
-
-// ── Main ─────────────────────────────────────────────────────────
-
-const args = process.argv.slice(2);
-const apiKey = args[0];
-const baseUrl = args[1] || DEFAULT_BASE_URL;
-
-console.log();
-console.log("  \x1b[1m🦞 ClawCard Setup\x1b[0m");
-console.log();
-
-if (!apiKey || apiKey.startsWith("-")) {
-  log("Usage: npx clawcard <API_KEY> [BASE_URL]");
-  log("");
-  log("Example:");
-  log("  npx clawcard ak_live_abc123...");
-  log("  npx clawcard ak_live_abc123... http://localhost:3000");
-  console.log();
-  process.exit(1);
-}
-
-if (!apiKey.startsWith("ak_live_")) {
-  warn("API key doesn't start with 'ak_live_' — are you sure this is correct?");
-}
-
-// Check OpenClaw is installed
-if (!existsSync(OPENCLAW_DIR)) {
-  error("OpenClaw directory not found at ~/.openclaw");
-  log("Install OpenClaw first: https://openclaw.dev");
-  console.log();
-  process.exit(1);
-}
-
-// 1. Write skill file
-mkdirSync(SKILLS_DIR, { recursive: true });
-writeFileSync(SKILL_PATH, SKILL_MD);
-success(`Skill written to ${SKILL_PATH}`);
-
-// 2. Write env vars to ~/.openclaw/.env
-const ENV_PATH = join(OPENCLAW_DIR, ".env");
-let envContent = "";
-try {
-  envContent = readFileSync(ENV_PATH, "utf-8");
-} catch {
-  // .env doesn't exist yet, that's fine
-}
-
-// Update or append each var
-const envVars = {
-  CLAWCARD_API_KEY: apiKey,
-  CLAWCARD_BASE_URL: baseUrl,
-};
-
-for (const [key, value] of Object.entries(envVars)) {
-  const regex = new RegExp(`^${key}=.*$`, "m");
-  if (regex.test(envContent)) {
-    envContent = envContent.replace(regex, `${key}=${value}`);
-  } else {
-    envContent = envContent.trimEnd() + `\n${key}=${value}\n`;
-  }
-}
-
-writeFileSync(ENV_PATH, envContent);
-success(`Credentials written to ${ENV_PATH}`);
-
-// 3. Done
-console.log();
-log("\x1b[1mSetup complete!\x1b[0m Your agent now has access to:");
-log("  📧 Email inbox");
-log("  📱 Phone number & SMS");
-log("  💳 Virtual debit cards");
-log("  🔐 Encrypted credential vault");
-console.log();
-log("Tell your agent to \x1b[1m\"refresh skills\"\x1b[0m or restart the gateway.");
-log("Then try: \x1b[36m\"Use ClawCard to check your identity\"\x1b[0m");
-console.log();