@itpay/cli 0.2.0 → 0.2.1

package/lib/env.js

@@ -5,7 +5,8 @@ import crypto from "node:crypto";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 
-export const DEFAULT_API_BASE = process.env.ITPAY_API_BASE || process.env.ITPAY_CORE_API_BASE || process.env.ITPAY_CORE_BASE_URL || "https://dev.api.itpay.ai";
+export const OFFICIAL_API_BASE = "https://dev.api.itpay.ai";
+export const DEFAULT_API_BASE = process.env.ITPAY_API_BASE || process.env.ITPAY_CORE_API_BASE || process.env.ITPAY_CORE_BASE_URL || OFFICIAL_API_BASE;
 export const CONFIG_DIR = path.join(os.homedir(), ".itp");
 export const CONFIG_PATH = path.join(CONFIG_DIR, "config.json");
 export const STATE_PATH = path.join(CONFIG_DIR, "state.json");
@@ -150,7 +151,12 @@ function normalizePurchaseFlags(flags, required = false) {
 }
 
 function apiBase(flags = {}, config = readConfig()) {
-  return (flags.api_base || config.api_base || DEFAULT_API_BASE).replace(/\/$/, "");
+  return (flags.api_base || configuredApiBase(config) || DEFAULT_API_BASE).replace(/\/$/, "");
+}
+
+function configuredApiBase(config = readConfig()) {
+  const base = String(config.api_base || "").replace(/\/$/, "");
+  return base && base !== "https://sandbox.itpay.ai" ? base : "";
 }
 
 function readConfig() {
@@ -710,4 +716,4 @@ function safeErrorMessage(error) {
     .replace(/sk-[A-Za-z0-9_-]+/g, "sk-****");
 }
 
-export { csvValues, booleanFlag, intFlag, splitCSV, queryString, appendURLQuery, positional, positionalArgs, stripInternalBuyerFields, apiTimeoutMs, parseFlags, normalizePurchaseFlags, apiBase, readConfig, packageVersion, writeConfig, readState, writeState, runPath, readRun, listRuns, writeRun, mergeRun, updateRun, updateCurrentRun, prepareSetupRun, withStateLock, readCredentials, writeCredentials, writeJSON0600, writeSessionCredentials, storeSessionCredential, readSessionToken, deleteSessionCredential, sanitizeAuthResponse, storeGrantCredential, readGrantCredential, deleteGrantCredential, grantSecretRef, detectNativeCredentialStore, writeNativeSecret, shouldUseNativeCredentialStore, readNativeSecret, deleteNativeSecret, commandExists, processIsRunning, ensureConfigDir, readText, readJSON, writeJSONWithBackup, writeTextWithBackup, fileMode, replaceManagedBlock, escapeRegExp, escapeTomlString, currentExecutable, quoteShell, output, outputError, maskSecret, cryptoRandom, sleep, cliCommand, shellQuote, safeErrorMessage };
+export { csvValues, booleanFlag, intFlag, splitCSV, queryString, appendURLQuery, positional, positionalArgs, stripInternalBuyerFields, apiTimeoutMs, parseFlags, normalizePurchaseFlags, apiBase, configuredApiBase, readConfig, packageVersion, writeConfig, readState, writeState, runPath, readRun, listRuns, writeRun, mergeRun, updateRun, updateCurrentRun, prepareSetupRun, withStateLock, readCredentials, writeCredentials, writeJSON0600, writeSessionCredentials, storeSessionCredential, readSessionToken, deleteSessionCredential, sanitizeAuthResponse, storeGrantCredential, readGrantCredential, deleteGrantCredential, grantSecretRef, detectNativeCredentialStore, writeNativeSecret, shouldUseNativeCredentialStore, readNativeSecret, deleteNativeSecret, commandExists, processIsRunning, ensureConfigDir, readText, readJSON, writeJSONWithBackup, writeTextWithBackup, fileMode, replaceManagedBlock, escapeRegExp, escapeTomlString, currentExecutable, quoteShell, output, outputError, maskSecret, cryptoRandom, sleep, cliCommand, shellQuote, safeErrorMessage };

package/lib/http.js

@@ -1,4 +1,4 @@
-import { apiBase, apiTimeoutMs, cryptoRandom, readConfig, readCredentials, readSessionToken, readState, safeErrorMessage, writeState } from "./env.js";
+import { DEFAULT_API_BASE, apiBase, apiTimeoutMs, configuredApiBase, cryptoRandom, readConfig, readCredentials, readSessionToken, readState, safeErrorMessage, writeState } from "./env.js";
 
 async function coreApi(pathname, options = {}, flags = {}) {
   const headers = { "Content-Type": "application/json" };
@@ -96,7 +96,7 @@ function coreURL(pathname, flags = {}) {
 }
 
 function coreApiBase(flags = {}, config = readConfig()) {
-  const base = flags.api_base || flags.core_api_base || process.env.ITPAY_API_BASE || process.env.ITPAY_CORE_API_BASE || process.env.ITPAY_CORE_BASE_URL || config.api_base || "https://dev.api.itpay.ai";
+  const base = flags.api_base || flags.core_api_base || configuredApiBase(config) || DEFAULT_API_BASE;
   return String(base).replace(/\/$/, "");
 }
 

package/lib/runtime.js

@@ -1146,7 +1146,7 @@ async function doctor(flags) {
   const grantCredential = grantId ? readGrantCredential(grantId) : null;
   output({
     itp_version: VERSION,
-    api_base: config.api_base || apiBase(flags),
+    api_base: apiBase(flags),
     account_id: config.account_id || null,
     device_id: config.device_id || null,
     authenticated: Boolean(readSessionToken(credentials)),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itpay/cli",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "description": "ItPay CLI, buyer skill, and agent-readable docs for agent-native commerce.",
   "type": "module",
   "bin": {