@getalby/cli 0.8.0 → 0.9.0

package/build/commands/fetch.js

@@ -23,6 +23,29 @@ function parseMaxAmountSats(value) {
     }
     return sats;
 }
+/**
+ * Parse and validate the `--credentials` JSON. It must be an object with string
+ * `header` and `value` fields, matching the reusable credential emitted in a
+ * previous fetch's `payment.credentials`. Rejects anything else so a malformed
+ * credential fails loudly instead of being silently ignored by the fetch helper.
+ */
+function parseCredentials(value) {
+    let parsed;
+    try {
+        parsed = JSON.parse(value);
+    }
+    catch {
+        throw new InvalidArgumentError("--credentials must be valid JSON (e.g. '{\"header\":\"Authorization\",\"value\":\"L402 ...\"}')");
+    }
+    if (typeof parsed !== "object" ||
+        parsed === null ||
+        typeof parsed.header !== "string" ||
+        typeof parsed.value !== "string") {
+        throw new InvalidArgumentError('--credentials must be a JSON object with string "header" and "value" fields');
+    }
+    const { header, value: headerValue } = parsed;
+    return { header, value: headerValue };
+}
 export function registerFetch402Command(program) {
     program
         .command("fetch")
@@ -36,8 +59,15 @@ export function registerFetch402Command(program) {
         .option("--currency <code>", "Denomination of --max-amount — currently must be BTC")
         .option("--unit <sats|BTC>", "Sub-unit of --max-amount — currently must be sats")
         .option("--network <name>", "Rail for --max-amount — currently must be lightning")
+        .option("--credentials <json>", "Reusable payment credential from a previous fetch " +
+        '(JSON: {"header":"...","value":"..."}). When set, the request is ' +
+        "authorized with it and never pays again — use it to authorize " +
+        "follow-up requests (e.g. polling) without re-paying.")
         .addHelpText("after", "\nExample:\n" +
-        '  $ npx @getalby/cli fetch "https://example.com/api" --max-amount 1000 --currency BTC --unit sats --network lightning\n')
+        '  $ npx @getalby/cli fetch "https://example.com/api" --max-amount 1000 --currency BTC --unit sats --network lightning\n' +
+        "\nA successful response includes a `payment` object with the fees paid and a\n" +
+        "reusable `credentials` value. Reuse it to avoid paying again:\n" +
+        '  $ npx @getalby/cli fetch "https://example.com/api" --credentials \'{"header":"Authorization","value":"L402 ..."}\'\n')
         .action(async (url, options) => {
         await handleError(async () => {
             // A cap must state its denomination, like every other amount. For now
@@ -67,6 +97,9 @@ export function registerFetch402Command(program) {
                 // --unit is restricted to sats above, so --max-amount is already the
                 // sats cap. When omitted, the tool applies its default.
                 maxAmountSats: options.maxAmount,
+                credentials: options.credentials
+                    ? parseCredentials(options.credentials)
+                    : undefined,
             });
             output(result);
         });

package/build/index.js

@@ -40,7 +40,7 @@ program
     "    $ npx @getalby/cli pay alice@getalby.com --amount 100 --currency BTC --unit sats --network lightning\n" +
     "    $ npx @getalby/cli pay alice@getalby.com --amount 5 --currency USD --network lightning\n" +
     '    $ npx @getalby/cli receive --amount 2100 --currency BTC --unit sats --network lightning --description "Coffee"')
-    .version("0.8.0")
+    .version("0.9.0")
     .configureHelp({ showGlobalOptions: true })
     .option("-w, --wallet-name <name>", "Use a named wallet's connection secret (~/.alby-cli/connection-secret-<name>.key)")
     .option("-c, --connection-secret <string>", "NWC connection secret (nostr+walletconnect://...) or path to file containing it (preferred)")

package/build/tools/lightning/fetch.js

@@ -1,4 +1,4 @@
-import { fetch402 as fetch402Lib } from "@getalby/lightning-tools/402";
+import { fetch402 as fetch402Lib, } from "@getalby/lightning-tools/402";
 const DEFAULT_MAX_AMOUNT_SATS = 5000;
 export async function fetch402(client, params) {
     const method = params.method?.toUpperCase();
@@ -7,10 +7,15 @@ export async function fetch402(client, params) {
     };
     if (method && method !== "GET" && method !== "HEAD") {
         requestOptions.body = params.body;
-        requestOptions.headers = {
-            "Content-Type": "application/json",
-            ...params.headers,
-        };
+        // A body is always passed as JSON, so default the Content-Type. The agent
+        // isn't required to set the header itself but might do so anyway, so only
+        // add our default when it's absent to avoid a duplicate Content-Type.
+        const headers = { ...params.headers };
+        const hasContentType = Object.keys(headers).some((key) => key.toLowerCase() === "content-type");
+        if (!hasContentType) {
+            headers["Content-Type"] = "application/json";
+        }
+        requestOptions.headers = headers;
     }
     else if (params.headers) {
         requestOptions.headers = params.headers;
@@ -19,6 +24,7 @@ export async function fetch402(client, params) {
     const result = await fetch402Lib(params.url, requestOptions, {
         wallet: client,
         maxAmount: maxAmountSats,
+        credentials: params.credentials,
     });
     const responseContent = await result.text();
     if (!result.ok) {
@@ -26,5 +32,11 @@ export async function fetch402(client, params) {
     }
     return {
         content: responseContent,
+        // Payment metadata attached by the 402 helper: whether a payment was made,
+        // the amount, routing fees (feesPaid, in millisatoshis), and the reusable
+        // credential. Pass `credentials` back via --credentials on a follow-up
+        // request to authorize it without paying again. Absent when no 402 payment
+        // was involved (e.g. an already-open resource).
+        payment: result.payment,
     };
 }

package/package.json

@@ -2,7 +2,7 @@
   "name": "@getalby/cli",
   "description": "CLI for Nostr Wallet Connect (NIP-47) with a few additional useful lightning tools",
   "repository": "https://github.com/getAlby/cli.git",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "main": "build/index.js",
   "bin": {
@@ -36,8 +36,8 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@getalby/lightning-tools": "^8.1.1",
-    "@getalby/sdk": "^8.0.1",
+    "@getalby/lightning-tools": "^8.2.0",
+    "@getalby/sdk": "^8.0.3",
     "@lendasat/lendaswap-sdk-pure": "^0.2.38",
     "@noble/hashes": "^2.0.1",
     "commander": "^14.0.3",