@oneaddress/setup 1.1.3 → 1.1.5

package/dist/index.js

@@ -835,8 +835,9 @@ var _R = ["\u2588\u2588\u2588\u2588\u2588\u2588 ", "\u2588\u2588   \u2588\u2588"
 var _S = [" \u2588\u2588\u2588\u2588\u2588\u2588", "\u2588\u2588     ", "\u2588\u2588     ", " \u2588\u2588\u2588\u2588\u2588 ", "     \u2588\u2588", "     \u2588\u2588", "\u2588\u2588\u2588\u2588\u2588\u2588 "];
 var ONE_ROWS = Array.from({ length: 7 }, (_2, i) => [_O[i], _N[i], _E[i]].join(" "));
 var ADDR_ROWS = Array.from({ length: 7 }, (_2, i) => [_A[i], _D2[i], _D2[i], _R[i], _E[i], _S[i], _S[i]].join(" "));
+var WIZARD_VERSION = true ? "1.1.5" : "?";
 function printHeader() {
-  const BAR_LEN = 86;
+  const BAR_LEN = 85;
   const TOP_BAR = fn("\u250C") + dm("\u2500".repeat(BAR_LEN)) + fn("\u2510");
   const BOT_BAR = fn("\u2514") + dm("\u2500".repeat(BAR_LEN)) + fn("\u2518");
   const SIDE = dm("\u2502");
@@ -845,13 +846,13 @@ function printHeader() {
   console.log(` ${SIDE}${" ".repeat(BAR_LEN)}${SIDE}`);
   for (let i = 0; i < 7; i++) {
     const line = wb(ONE_ROWS[i]) + "   " + ab(ADDR_ROWS[i]);
-    console.log(`  ${SIDE}  ${line}  ${SIDE}`);
+    console.log(` ${SIDE}  ${line}  ${SIDE}`);
   }
-  console.log(`  ${SIDE}  ${fn("\u2591".repeat(81))}  ${SIDE}`);
+  console.log(` ${SIDE}  ${fn("\u2591".repeat(81))}  ${SIDE}`);
   console.log(` ${SIDE}${" ".repeat(BAR_LEN)}${SIDE}`);
   const wizard = mi("Partner Setup Wizard");
-  const version = fn("v2  \xB7  partners.oneaddress.io");
-  const tagLine = `  ${wizard}    ${version}`;
+  const ver = fn(`v${WIZARD_VERSION}  \xB7  partners.oneaddress.io`);
+  const tagLine = `  ${wizard}    ${ver}`;
   const padLen = BAR_LEN - 4 - stripAnsi(tagLine).length;
   console.log(` ${SIDE}  ${tagLine}${" ".repeat(Math.max(0, padLen))}  ${SIDE}`);
   console.log(` ${SIDE}${" ".repeat(BAR_LEN)}${SIDE}`);
@@ -926,27 +927,81 @@ dist/
   },
   "devDependencies": {
     "@types/express": "^4.17.0",
-    "@types/node":    "^20.0.0",
+    "@types/node":    "^22.5.0",
     "tsup":           "^8.0.0",
     "tsx":            "^4.0.0",
     "typescript":     "^5.0.0"
   },
-  "engines": { "node": ">=18" }
+  "engines": { "node": ">=22.5" }
 }
+`
+    },
+    {
+      name: "src/db.ts",
+      content: `/**
+ * SQLite database \u2014 initialised automatically on first run.
+ *
+ * Uses the Node.js built-in \`node:sqlite\` module (available in Node 22.5+).
+ * No extra packages or native compilation required.
+ *
+ * Two tables:
+ *   addresses       \u2014 one row per customer, holds their latest address
+ *   address_history \u2014 append-only audit trail of every change
+ *
+ * The database file lives at DB_PATH (default: data.db in the project root).
+ * Change the location with the DB_PATH environment variable.
+ */
+import { DatabaseSync } from 'node:sqlite';
+import { join } from 'node:path';
+
+const DB_PATH = process.env.DB_PATH ?? join(process.cwd(), 'data.db');
+
+const db = new DatabaseSync(DB_PATH);
+
+// WAL mode \u2014 better performance for concurrent reads
+db.exec("PRAGMA journal_mode = WAL");
+
+db.exec(\`
+  CREATE TABLE IF NOT EXISTS addresses (
+    email       TEXT PRIMARY KEY,
+    name        TEXT NOT NULL DEFAULT '',
+    address     TEXT NOT NULL DEFAULT '{}',
+    dispatch_id TEXT,
+    updated_at  TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+
+  CREATE TABLE IF NOT EXISTS address_history (
+    id          INTEGER PRIMARY KEY AUTOINCREMENT,
+    email       TEXT NOT NULL,
+    name        TEXT NOT NULL DEFAULT '',
+    address     TEXT NOT NULL DEFAULT '{}',
+    dispatch_id TEXT,
+    recorded_at TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+\`);
+
+console.log(\`[db] SQLite database ready \u2192 \${DB_PATH}\`);
+
+export default db;
 `
     },
     {
       name: "src/store.ts",
       content: `/**
  * \u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557
- * \u2551  src/store.ts  \u2014  YOUR DATABASE INTEGRATION LIVES HERE          \u2551
+ * \u2551  src/store.ts  \u2014  DATABASE INTEGRATION                          \u2551
+ * \u2551                                                                  \u2551
+ * \u2551  Uses Node.js built-in SQLite (node:sqlite) \u2014 no install        \u2551
+ * \u2551  or native compilation needed. Requires Node.js 22.5+.          \u2551
+ * \u2551  The database file is created automatically as data.db           \u2551
  * \u2551                                                                  \u2551
- * \u2551  Implement the two functions below using whatever database,      \u2551
- * \u2551  ORM, or API your organisation already uses.                     \u2551
- * \u2551  server.ts calls them after verifying and decrypting each event  \u2551
+ * \u2551  To use a different database (Postgres, MySQL, etc.):            \u2551
+ * \u2551  Replace the db calls in saveAddress and verifyAddress below.    \u2551
+ * \u2551  server.ts calls these after verifying and decrypting each event \u2551
  * \u2551  \u2014 the protocol layer is handled for you, never touch it.        \u2551
  * \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D
  */
+import db from './db.js';
 
 export type Address = Record<string, unknown>;
 
@@ -960,47 +1015,34 @@ export type VerifyResult = 'match' | 'mismatch' | 'not_found';
 /**
  * Called when a consumer updates their address (address.updated event).
  *
- * The \`address\` object is already decrypted \u2014 fields vary by country but
- * typically include: street, suburb, state, postcode, country.
- *
- * Persist this to your database (update the customer's address record,
- * publish to a queue, call an internal API \u2014 whatever your system needs).
+ * Upserts the address into the \`addresses\` table and appends a row
+ * to \`address_history\` for the audit trail.
  */
 export async function saveAddress(customer: Customer, address: Address): Promise<void> {
-  // \u2500\u2500\u2500 TODO: implement \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  //
-  // Examples:
-  //
-  //   Prisma:
-  //     await prisma.customer.update({
-  //       where:  { email: customer.email },
-  //       data:   { address: JSON.stringify(address) },
-  //     });
-  //
-  //   Postgres.js:
-  //     await sql\`
-  //       UPDATE customers SET address = \${sql.json(address)}
-  //       WHERE email = \${customer.email}
-  //     \`;
-  //
-  //   HTTP / CRM:
-  //     await fetch('https://your-crm.internal/addresses', {
-  //       method: 'PUT',
-  //       body: JSON.stringify({ email: customer.email, address }),
-  //     });
-  //
-  // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-
-  console.log('[store] saveAddress \u2014 implement this function to persist the address');
-  console.log('[store] customer:', customer.email);
-  console.log('[store] address: ', JSON.stringify(address));
+  const addressJson = JSON.stringify(address);
+
+  db.prepare(\`
+    INSERT INTO addresses (email, name, address, updated_at)
+    VALUES ($email, $name, $address, datetime('now'))
+    ON CONFLICT(email) DO UPDATE SET
+      name       = excluded.name,
+      address    = excluded.address,
+      updated_at = excluded.updated_at
+  \`).run({ email: customer.email, name: customer.name, address: addressJson });
+
+  db.prepare(\`
+    INSERT INTO address_history (email, name, address, recorded_at)
+    VALUES ($email, $name, $address, datetime('now'))
+  \`).run({ email: customer.email, name: customer.name, address: addressJson });
+
+  console.log(\`[store] Saved address for \${customer.email}:\`, address);
 }
 
 /**
  * Called during an address verification check (address.verify event).
  *
- * The \`address\` object is already decrypted. Compare it against whatever
- * you have on file for this customer and return the appropriate result.
+ * Looks up the customer by email and compares the incoming (decrypted)
+ * address against what is stored in the database.
  *
  * Return values:
  *   'match'     \u2014 the address matches your records exactly
@@ -1008,19 +1050,20 @@ export async function saveAddress(customer: Customer, address: Address): Promise
  *   'not_found' \u2014 you have no record for this customer at all
  */
 export async function verifyAddress(customer: Customer, address: Address): Promise<VerifyResult> {
-  // \u2500\u2500\u2500 TODO: implement \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-  //
-  // Example:
-  //   const record = await prisma.customer.findUnique({ where: { email: customer.email } });
-  //   if (!record) return 'not_found';
-  //   const stored = JSON.parse(record.address ?? '{}') as Address;
-  //   const match  = Object.entries(address).every(([k, v]) => stored[k] === v);
-  //   return match ? 'match' : 'mismatch';
-  //
-  // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
-
-  console.log('[store] verifyAddress \u2014 returning stub "match". Implement this function.');
-  return 'match';
+  const row = db.prepare(\`SELECT address FROM addresses WHERE email = ?\`)
+    .get(customer.email) as { address: string } | undefined;
+
+  if (!row) {
+    console.log(\`[store] verifyAddress \u2192 not_found (\${customer.email} has no record)\`);
+    return 'not_found';
+  }
+
+  const stored  = JSON.parse(row.address) as Address;
+  const isMatch = Object.entries(address).every(([k, v]) => stored[k] === v);
+  const result  = isMatch ? 'match' : 'mismatch';
+
+  console.log(\`[store] verifyAddress \u2192 \${result} for \${customer.email}\`);
+  return result;
 }
 `
     },
@@ -1210,26 +1253,39 @@ npm run dev          # hot-reload via tsx
 Webhook endpoint: \`POST http://localhost:3001/webhook\`
 Health check:     \`GET  http://localhost:3001/health\`
 
+A SQLite database (\`data.db\`) is created automatically the first time the server starts.
+To view it, open \`data.db\` with any SQLite client (e.g. [DB Browser for SQLite](https://sqlitebrowser.org/)).
+
 ## Architecture
 
 | File | Role |
 |------|------|
 | \`src/server.ts\` | **Protocol layer \u2014 do not edit.** HMAC verification, timestamp replay protection, ECDH decryption, deduplication. |
-| \`src/store.ts\`  | **Your integration \u2014 implement this.** Two functions called after every event. Wire up your database, ORM, or internal API here. |
-
-## Implementing src/store.ts
+| \`src/db.ts\`     | **SQLite setup.** Opens (or creates) \`data.db\` and defines the schema. Change \`DB_PATH\` env var to move the file. |
+| \`src/store.ts\`  | **Your integration.** \`saveAddress\` and \`verifyAddress\` \u2014 wired to SQLite out of the box. Swap for Postgres/MySQL/etc. when ready. |
 
-After running the wizard, open \`src/store.ts\` and implement:
+## Database tables
 
-\`\`\`typescript
-// Called on address.updated \u2014 persist the decrypted address
-async function saveAddress(customer, address): Promise<void>
+\`\`\`sql
+-- Current address per customer (upserted on every address.updated event)
+addresses(email, name, address JSON, updated_at)
 
-// Called on address.verify \u2014 return 'match' | 'mismatch' | 'not_found'
-async function verifyAddress(customer, address): Promise<VerifyResult>
+-- Full history of every address change (append-only audit trail)
+address_history(id, email, name, address JSON, recorded_at)
 \`\`\`
 
-The file has commented examples for Prisma, Postgres.js, and plain HTTP calls.
+## Swapping to a production database
+
+Open \`src/store.ts\` and replace the \`db\` calls with your ORM/driver of choice:
+
+\`\`\`typescript
+// Prisma example:
+await prisma.customer.upsert({
+  where:  { email: customer.email },
+  update: { address: JSON.stringify(address) },
+  create: { email: customer.email, name: customer.name, address: JSON.stringify(address) },
+});
+\`\`\`
 
 ## Events
 
@@ -3058,9 +3114,8 @@ function stopServer() {
   if (serverProcess) {
     try {
       if (process.platform === "win32" && serverProcess.pid) {
-        (0, import_node_child_process2.spawn)("taskkill", ["/F", "/T", "/PID", String(serverProcess.pid)], {
-          stdio: "ignore",
-          detached: true
+        (0, import_node_child_process2.spawnSync)("taskkill", ["/F", "/T", "/PID", String(serverProcess.pid)], {
+          stdio: "ignore"
         });
       } else {
         serverProcess.kill("SIGTERM");
@@ -3334,7 +3389,7 @@ function validatePkcs8Pem(pem) {
 }
 async function main() {
   printHeader();
-  we("OneAddress Partner Setup  \u2014  v2");
+  we("OneAddress Partner Setup");
   v2.info("We will:");
   v2.info("  1. Collect your credentials from the Partner Portal");
   v2.info("  2. Scaffold a working webhook server for your platform");
@@ -3529,9 +3584,9 @@ async function main() {
     `Files in:     ${outDir}`
   ].join("\n");
   const nextSteps = [
-    "1. Open src/store.ts and wire up saveAddress() + verifyAddress() to your database",
-    "2. Update your address at app.oneaddress.io to trigger a live address.updated event",
-    "3. For production: deploy to a permanent server and update the webhook URL in the portal",
+    "1. Trigger a live event: update your address at app.oneaddress.io\n   \u2192 src/store.ts will save it to data.db automatically",
+    "2. View your database: open data.db with DB Browser for SQLite\n   (free download at sqlitebrowser.org)",
+    "3. For production: swap src/store.ts for your real database (Postgres, MySQL, etc.)\n   then deploy and update the webhook URL in the portal",
     "4. Questions? partners.oneaddress.io  or  partners@oneaddress.io"
   ].join("\n\n");
   ye(summary, "Setup summary");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@oneaddress/setup",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "Interactive setup wizard for OneAddress partner webhook integrations",
   "main": "dist/index.js",
   "bin": {