@nordsym/apiclaw 2.1.0 → 2.2.1

package/src/stripe.ts

@@ -1,497 +0,0 @@
-// Stripe integration for APIClaw credit purchases
-import Stripe from 'stripe';
-import { config } from 'dotenv';
-
-// Load environment quietly to avoid polluting MCP stdio output.
-config({ path: '.env.local', quiet: true });
-
-const stripeSecretKey = process.env.STRIPE_SECRET_KEY;
-
-if (!stripeSecretKey) {
-  console.warn('STRIPE_SECRET_KEY not set - Stripe features disabled');
-}
-
-const stripe = stripeSecretKey ? new Stripe(stripeSecretKey) : null;
-
-// Credit packages
-export const CREDIT_PACKAGES = {
-  starter: {
-    id: 'starter',
-    name: 'Starter Pack',
-    amountUsd: 10,
-    credits: 100,
-    bonus: 0,
-    description: '$10 → 100 credits',
-  },
-  growth: {
-    id: 'growth',
-    name: 'Growth Pack',
-    amountUsd: 50,
-    credits: 550,
-    bonus: 50,
-    description: '$50 → 550 credits (10% bonus)',
-  },
-  scale: {
-    id: 'scale',
-    name: 'Scale Pack',
-    amountUsd: 100,
-    credits: 1200,
-    bonus: 200,
-    description: '$100 → 1,200 credits (20% bonus)',
-  },
-} as const;
-
-export type PackageType = keyof typeof CREDIT_PACKAGES;
-
-/**
- * Create a Stripe Checkout Session for credit purchase
- */
-export async function createCheckoutSession(
-  agentId: string,
-  packageType: PackageType,
-  successUrl: string,
-  cancelUrl: string
-): Promise<{ sessionId: string; url: string } | { error: string }> {
-  if (!stripe) {
-    return { error: 'Stripe not configured' };
-  }
-
-  const pkg = CREDIT_PACKAGES[packageType];
-  if (!pkg) {
-    return { error: `Invalid package: ${packageType}` };
-  }
-
-  try {
-    const session = await stripe.checkout.sessions.create({
-      mode: 'payment',
-      payment_method_types: ['card'],
-      line_items: [
-        {
-          price_data: {
-            currency: 'usd',
-            product_data: {
-              name: `APIClaw ${pkg.name}`,
-              description: pkg.description,
-              metadata: {
-                packageType,
-                credits: pkg.credits.toString(),
-              },
-            },
-            unit_amount: pkg.amountUsd * 100, // Stripe uses cents
-          },
-          quantity: 1,
-        },
-      ],
-      metadata: {
-        agentId,
-        packageType,
-        credits: pkg.credits.toString(),
-      },
-      success_url: successUrl,
-      cancel_url: cancelUrl,
-    });
-
-    return {
-      sessionId: session.id,
-      url: session.url!,
-    };
-  } catch (error) {
-    console.error('Stripe checkout error:', error);
-    return {
-      error: error instanceof Error ? error.message : 'Checkout failed',
-    };
-  }
-}
-
-/**
- * Create a Payment Intent for programmatic payment (agent-to-agent)
- */
-export async function createPaymentIntent(
-  agentId: string,
-  packageType: PackageType
-): Promise<
-  | { clientSecret: string; paymentIntentId: string; amount: number }
-  | { error: string }
-> {
-  if (!stripe) {
-    return { error: 'Stripe not configured' };
-  }
-
-  const pkg = CREDIT_PACKAGES[packageType];
-  if (!pkg) {
-    return { error: `Invalid package: ${packageType}` };
-  }
-
-  try {
-    const paymentIntent = await stripe.paymentIntents.create({
-      amount: pkg.amountUsd * 100,
-      currency: 'usd',
-      metadata: {
-        agentId,
-        packageType,
-        credits: pkg.credits.toString(),
-      },
-      automatic_payment_methods: {
-        enabled: true,
-      },
-    });
-
-    return {
-      clientSecret: paymentIntent.client_secret!,
-      paymentIntentId: paymentIntent.id,
-      amount: pkg.amountUsd,
-    };
-  } catch (error) {
-    console.error('Stripe payment intent error:', error);
-    return {
-      error: error instanceof Error ? error.message : 'Payment intent failed',
-    };
-  }
-}
-
-/**
- * Verify Stripe webhook signature
- */
-export function verifyWebhookSignature(
-  payload: string | Buffer,
-  signature: string
-): Stripe.Event | null {
-  if (!stripe) return null;
-
-  const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;
-  if (!webhookSecret) {
-    console.error('STRIPE_WEBHOOK_SECRET not set');
-    return null;
-  }
-
-  try {
-    return stripe.webhooks.constructEvent(payload, signature, webhookSecret);
-  } catch (error) {
-    console.error('Webhook signature verification failed:', error);
-    return null;
-  }
-}
-
-/**
- * Process webhook event and return credit grant info
- */
-export interface CreditGrant {
-  agentId: string;
-  packageType: string;
-  credits: number;
-  amountUsd: number;
-  stripeSessionId?: string;
-  stripePaymentIntentId?: string;
-}
-
-export function processWebhookEvent(event: Stripe.Event): CreditGrant | null {
-  switch (event.type) {
-    case 'checkout.session.completed': {
-      const session = event.data.object as Stripe.Checkout.Session;
-      if (session.payment_status !== 'paid') return null;
-
-      const metadata = session.metadata || {};
-      const agentId = metadata.agentId;
-      const packageType = metadata.packageType as PackageType;
-      const credits = parseInt(metadata.credits || '0', 10);
-
-      if (!agentId || !packageType || !credits) {
-        console.error('Missing metadata in checkout session:', metadata);
-        return null;
-      }
-
-      return {
-        agentId,
-        packageType,
-        credits,
-        amountUsd: (session.amount_total || 0) / 100,
-        stripeSessionId: session.id,
-      };
-    }
-
-    case 'payment_intent.succeeded': {
-      const paymentIntent = event.data.object as Stripe.PaymentIntent;
-      const metadata = paymentIntent.metadata || {};
-      const agentId = metadata.agentId;
-      const packageType = metadata.packageType as PackageType;
-      const credits = parseInt(metadata.credits || '0', 10);
-
-      if (!agentId || !packageType || !credits) {
-        console.error('Missing metadata in payment intent:', metadata);
-        return null;
-      }
-
-      return {
-        agentId,
-        packageType,
-        credits,
-        amountUsd: paymentIntent.amount / 100,
-        stripePaymentIntentId: paymentIntent.id,
-      };
-    }
-
-    default:
-      return null;
-  }
-}
-
-/**
- * Get Stripe instance (for advanced usage)
- */
-export function getStripe(): Stripe | null {
-  return stripe;
-}
-
-// ============================================
-// METERED BILLING (Pay-per-call)
-// ============================================
-
-// Stripe Meter configuration
-export const METERED_BILLING = {
-  meterId: 'mtr_61UFEGojJ0b2awh1441RtJYK3aJTqS9g',
-  eventName: 'api_call',
-  priceId: 'price_1TL038RtJYK3aJTqODoFAiVT', // $0.01/unit metered (cost in cents)
-  productId: 'prod_UJdJXIL3CziTRT',
-  pricePerUnit: 0.01, // $0.01 per unit (1 cent per unit)
-  pricePerCall: 0.002, // Legacy: approximate average cost per call for estimates
-} as const;
-
-/**
- * Report API usage to Stripe Meter
- * Call this after each successful API call
- */
-export async function reportUsage(
-  customerId: string,
-  calls: number = 1,
-  idempotencyKey?: string
-): Promise<{ success: boolean; eventId?: string; error?: string }> {
-  if (!stripe) {
-    return { success: false, error: 'Stripe not configured' };
-  }
-
-  try {
-    // Use Stripe's meter event API
-    const event = await stripe.billing.meterEvents.create({
-      event_name: METERED_BILLING.eventName,
-      payload: {
-        stripe_customer_id: customerId,
-        value: calls.toString(),
-      },
-      timestamp: Math.floor(Date.now() / 1000),
-    }, {
-      idempotencyKey: idempotencyKey || `usage_${customerId}_${Date.now()}_${Math.random()}`,
-    });
-
-    return { success: true, eventId: event.identifier };
-  } catch (error) {
-    console.error('Failed to report usage:', error);
-    return {
-      success: false,
-      error: error instanceof Error ? error.message : 'Usage reporting failed',
-    };
-  }
-}
-
-/**
- * Create or get a customer in Stripe
- */
-export async function getOrCreateCustomer(
-  agentId: string,
-  email?: string
-): Promise<{ customerId: string } | { error: string }> {
-  if (!stripe) {
-    return { error: 'Stripe not configured' };
-  }
-
-  try {
-    // Search for existing customer by agentId
-    const existing = await stripe.customers.search({
-      query: `metadata['agentId']:'${agentId}'`,
-    });
-
-    if (existing.data.length > 0) {
-      return { customerId: existing.data[0].id };
-    }
-
-    // Create new customer
-    const customer = await stripe.customers.create({
-      email: email || `${agentId}@apiclaw.local`,
-      metadata: {
-        agentId,
-        source: 'apiclaw',
-      },
-    });
-
-    return { customerId: customer.id };
-  } catch (error) {
-    console.error('Failed to get/create customer:', error);
-    return {
-      error: error instanceof Error ? error.message : 'Customer creation failed',
-    };
-  }
-}
-
-/**
- * Create a metered subscription for pay-per-call billing
- */
-export async function createMeteredSubscription(
-  customerId: string,
-  paymentMethodId?: string
-): Promise<{ subscriptionId: string; status: string } | { error: string }> {
-  if (!stripe) {
-    return { error: 'Stripe not configured' };
-  }
-
-  try {
-    // If payment method provided, attach it
-    if (paymentMethodId) {
-      await stripe.paymentMethods.attach(paymentMethodId, {
-        customer: customerId,
-      });
-      await stripe.customers.update(customerId, {
-        invoice_settings: {
-          default_payment_method: paymentMethodId,
-        },
-      });
-    }
-
-    // Create subscription with metered price
-    const subscription = await stripe.subscriptions.create({
-      customer: customerId,
-      items: [
-        {
-          price: METERED_BILLING.priceId,
-        },
-      ],
-      payment_behavior: 'default_incomplete',
-      payment_settings: {
-        save_default_payment_method: 'on_subscription',
-      },
-      expand: ['latest_invoice.payment_intent'],
-    });
-
-    return {
-      subscriptionId: subscription.id,
-      status: subscription.status,
-    };
-  } catch (error) {
-    console.error('Failed to create metered subscription:', error);
-    return {
-      error: error instanceof Error ? error.message : 'Subscription creation failed',
-    };
-  }
-}
-
-/**
- * Create a checkout session for metered billing subscription
- */
-export async function createMeteredCheckoutSession(
-  agentId: string,
-  successUrl: string,
-  cancelUrl: string
-): Promise<{ sessionId: string; url: string } | { error: string }> {
-  if (!stripe) {
-    return { error: 'Stripe not configured' };
-  }
-
-  try {
-    const session = await stripe.checkout.sessions.create({
-      mode: 'subscription',
-      payment_method_types: ['card'],
-      line_items: [
-        {
-          price: METERED_BILLING.priceId,
-        },
-      ],
-      metadata: {
-        agentId,
-        billingType: 'metered',
-      },
-      subscription_data: {
-        metadata: {
-          agentId,
-          billingType: 'metered',
-        },
-      },
-      success_url: successUrl,
-      cancel_url: cancelUrl,
-    });
-
-    return {
-      sessionId: session.id,
-      url: session.url!,
-    };
-  } catch (error) {
-    console.error('Metered checkout error:', error);
-    return {
-      error: error instanceof Error ? error.message : 'Checkout failed',
-    };
-  }
-}
-
-/**
- * Get usage summary for a subscription
- */
-export async function getUsageSummary(
-  subscriptionId: string
-): Promise<{ totalCalls: number; totalCost: number; period: { start: number; end: number } } | { error: string }> {
-  if (!stripe) {
-    return { error: 'Stripe not configured' };
-  }
-
-  try {
-    // Get subscription details - use raw API response
-    const subscription = await stripe.subscriptions.retrieve(subscriptionId);
-    const subData = subscription as unknown as {
-      current_period_start: number;
-      current_period_end: number;
-      status: string;
-    };
-
-    // For metered billing with meters, usage is tracked via meter events
-    // The actual usage amount will show up on the invoice at period end
-    // For now, return period info and note that detailed usage is on the Stripe dashboard
-    
-    return {
-      totalCalls: 0, // Usage tracked via meter events, visible in Stripe dashboard
-      totalCost: 0,
-      period: {
-        start: subData.current_period_start || Math.floor(Date.now() / 1000),
-        end: subData.current_period_end || Math.floor(Date.now() / 1000) + 30 * 24 * 3600,
-      },
-    };
-  } catch (error) {
-    console.error('Failed to get usage summary:', error);
-    return {
-      error: error instanceof Error ? error.message : 'Usage summary failed',
-    };
-  }
-}
-
-/**
- * Check if a customer has an active metered subscription
- */
-export async function hasActiveMeteredSubscription(
-  customerId: string
-): Promise<{ active: boolean; subscriptionId?: string }> {
-  if (!stripe) {
-    return { active: false };
-  }
-
-  try {
-    const subscriptions = await stripe.subscriptions.list({
-      customer: customerId,
-      status: 'active',
-      price: METERED_BILLING.priceId,
-    });
-
-    if (subscriptions.data.length > 0) {
-      return { active: true, subscriptionId: subscriptions.data[0].id };
-    }
-
-    return { active: false };
-  } catch (error) {
-    console.error('Failed to check subscription:', error);
-    return { active: false };
-  }
-}

package/src/telemetry.ts

@@ -1,71 +0,0 @@
-/**
- * APIClaw Telemetry - Anonymous usage tracking
- * 
- * Tracks:
- * - Server starts
- * - Search queries (query text only, no PII)
- * - API executions (which APIs are popular)
- * 
- * All data is anonymous. No personal information is collected.
- * Disable with APICLAW_TELEMETRY=false
- */
-
-const TELEMETRY_ENDPOINT = 'https://brilliant-puffin-712.eu-west-1.convex.cloud/api/mutation';
-
-interface TelemetryEvent {
-  type: 'startup' | 'search' | 'execute' | 'discovery';
-  query?: string;
-  apiId?: string;
-  resultCount?: number;
-  responseTimeMs?: number;
-  version?: string;
-  platform?: string;
-  nodeVersion?: string;
-}
-
-const isEnabled = (): boolean => {
-  return process.env.APICLAW_TELEMETRY !== 'false';
-};
-
-const getContext = () => ({
-  version: process.env.npm_package_version || 'unknown',
-  platform: process.platform,
-  nodeVersion: process.version,
-  timestamp: Date.now(),
-});
-
-export const track = async (event: TelemetryEvent): Promise<void> => {
-  if (!isEnabled()) return;
-
-  try {
-    const payload = {
-      ...event,
-      ...getContext(),
-    };
-
-    // Fire and forget - don't block the main flow
-    fetch(TELEMETRY_ENDPOINT, {
-      method: 'POST',
-      headers: { 'Content-Type': 'application/json' },
-      body: JSON.stringify({
-        path: 'telemetry:track',
-        args: { event: payload },
-      }),
-    }).catch(() => {
-      // Silently fail - telemetry should never break the app
-    });
-  } catch {
-    // Silently fail
-  }
-};
-
-export const trackStartup = () => track({ type: 'startup' });
-
-export const trackSearch = (query: string, resultCount: number, responseTimeMs: number) => 
-  track({ type: 'search', query, resultCount, responseTimeMs });
-
-export const trackExecute = (apiId: string, responseTimeMs: number) =>
-  track({ type: 'execute', apiId, responseTimeMs });
-
-export const trackDiscovery = (resultCount: number) =>
-  track({ type: 'discovery', resultCount });

package/src/test.ts

@@ -1,135 +0,0 @@
-#!/usr/bin/env npx tsx
-/**
- * APIClaw End-to-End Test
- * Tests the full flow: credits → purchase → real credentials
- */
-
-import { config } from 'dotenv';
-config({ path: '.env.local' });
-
-import {
-  getAgentCredits,
-  addCredits,
-  purchaseAPIAccess,
-  getBalanceSummary,
-  getProvidersWithRealCredentials,
-} from './credits.js';
-import { hasRealCredentials } from './credentials.js';
-import { CREDIT_PACKAGES, createCheckoutSession, createPaymentIntent } from './stripe.js';
-
-const TEST_AGENT_ID = 'test_agent_001';
-
-function log(msg: string) {
-  console.log(`\n${'='.repeat(60)}\n${msg}\n${'='.repeat(60)}`);
-}
-
-function logResult(label: string, data: unknown) {
-  console.log(`\n[${label}]`);
-  console.log(JSON.stringify(data, null, 2));
-}
-
-async function runTests() {
-  console.log('\n🧪 APIClaw Connected Infrastructure Test\n');
-
-  // Test 1: Check real credentials availability
-  log('TEST 1: Real Credentials Check');
-  const realCredProviders = getProvidersWithRealCredentials();
-  console.log('Providers with real credentials:', realCredProviders);
-  console.log('46elks real:', hasRealCredentials('46elks'));
-  console.log('Twilio real:', hasRealCredentials('twilio'));
-
-  // Test 2: Credit packages
-  log('TEST 2: Credit Packages');
-  logResult('Packages', CREDIT_PACKAGES);
-
-  // Test 3: Add credits to agent
-  log('TEST 3: Add Credits');
-  const initialCredits = getAgentCredits(TEST_AGENT_ID);
-  logResult('Initial balance', initialCredits);
-
-  const afterAdd = addCredits(TEST_AGENT_ID, 50);
-  logResult('After adding $50', afterAdd);
-
-  // Test 4: Check balance summary
-  log('TEST 4: Balance Summary');
-  const summary = getBalanceSummary(TEST_AGENT_ID);
-  logResult('Summary', summary);
-
-  // Test 5: Purchase 46elks access
-  log('TEST 5: Purchase 46elks Access');
-  const purchase46elks = purchaseAPIAccess(TEST_AGENT_ID, '46elks', 10);
-  logResult('46elks Purchase Result', purchase46elks);
-
-  if (purchase46elks.success && purchase46elks.purchase) {
-    console.log('\n🔑 CREDENTIALS RECEIVED:');
-    console.log('  Type:', purchase46elks.purchase.credentials?.type);
-    if (purchase46elks.purchase.credentials?.type === 'basic') {
-      console.log('  Username:', purchase46elks.purchase.credentials?.username);
-      console.log('  Password:', purchase46elks.purchase.credentials?.password?.slice(0, 8) + '...');
-    }
-    console.log('  Real credentials:', hasRealCredentials('46elks'));
-  }
-
-  // Test 6: Purchase Twilio access
-  log('TEST 6: Purchase Twilio Access');
-  const purchaseTwilio = purchaseAPIAccess(TEST_AGENT_ID, 'twilio', 10);
-  logResult('Twilio Purchase Result', purchaseTwilio);
-
-  if (purchaseTwilio.success && purchaseTwilio.purchase) {
-    console.log('\n🔑 CREDENTIALS RECEIVED:');
-    console.log('  Type:', purchaseTwilio.purchase.credentials?.type);
-    if (purchaseTwilio.purchase.credentials?.type === 'basic') {
-      console.log('  Account SID:', purchaseTwilio.purchase.credentials?.username);
-      console.log('  Auth Token:', purchaseTwilio.purchase.credentials?.password?.slice(0, 8) + '...');
-    }
-    console.log('  Real credentials:', hasRealCredentials('twilio'));
-  }
-
-  // Test 7: Final balance
-  log('TEST 7: Final Balance');
-  const finalSummary = getBalanceSummary(TEST_AGENT_ID);
-  logResult('Final Summary', {
-    balance: finalSummary.credits.balance_usd,
-    active_purchases: finalSummary.active_purchases.length,
-    total_spent: finalSummary.total_spent_usd,
-    real_credential_providers: finalSummary.real_credentials_available,
-  });
-
-  // Test 8: Stripe integration (if configured)
-  log('TEST 8: Stripe Integration');
-  if (process.env.STRIPE_SECRET_KEY) {
-    console.log('Stripe is configured!');
-    
-    // Test creating a payment intent
-    const paymentIntent = await createPaymentIntent('test_agent_stripe', 'starter');
-    if ('error' in paymentIntent) {
-      console.log('Payment Intent Error:', paymentIntent.error);
-    } else {
-      console.log('Payment Intent Created:');
-      console.log('  ID:', paymentIntent.paymentIntentId);
-      console.log('  Amount: $' + paymentIntent.amount);
-      console.log('  Client Secret:', paymentIntent.clientSecret.slice(0, 20) + '...');
-    }
-  } else {
-    console.log('Stripe not configured - skipping');
-  }
-
-  // Test 9: Insufficient balance
-  log('TEST 9: Insufficient Balance Check');
-  const insufficientPurchase = purchaseAPIAccess(TEST_AGENT_ID, '46elks', 1000);
-  logResult('Should fail', insufficientPurchase);
-
-  // Summary
-  log('TEST SUMMARY');
-  console.log(`
-✅ Real credentials available for: ${realCredProviders.join(', ') || 'none'}
-✅ Agent can add credits
-✅ Agent can purchase API access
-✅ Real 46elks/Twilio credentials returned when available
-✅ Insufficient balance check works
-${process.env.STRIPE_SECRET_KEY ? '✅ Stripe integration working' : '⚠️  Stripe not configured'}
-  `);
-}
-
-// Run tests
-runTests().catch(console.error);