@paybox-sh/sdk 2.3.0 → 2.4.0

package/dist/cli.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 import {
   PayboxClient,
+  PayboxError,
   appBaseFrom,
   configDir,
   configFile,
@@ -13,11 +14,10 @@ import {
   pendingFundingToolResponse,
   refreshTokens,
   saveConfig
-} from "./chunk-YTHYNUMM.js";
+} from "./chunk-ACNRTJGL.js";
 
 // src/cli.ts
-import { spawnSync } from "node:child_process";
-import { readFileSync, rmSync } from "node:fs";
+import { readFileSync as readFileSync2, rmSync as rmSync2 } from "node:fs";
 import { createRequire } from "node:module";
 import { Command } from "commander";
 
@@ -420,12 +420,150 @@ async function pairSigningKey(opts) {
   throw new Error("timed out waiting for you to pick the number in PayBox");
 }
 
+// src/self-update.ts
+import { spawnSync } from "node:child_process";
+import { closeSync, mkdirSync, openSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { constants } from "node:os";
+import { isAbsolute, join, relative } from "node:path";
+var PKG = "@paybox-sh/sdk";
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var LOCK_STALE_MS = 10 * 60 * 1e3;
+var NPM_TIMEOUT_MS = 2 * 60 * 1e3;
+var SEMVER = /^\d+\.\d+\.\d+$/;
+var NO_AUTO_UPDATE = /* @__PURE__ */ new Set(["version", "update", "uninstall"]);
+function isNewer(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0; i < 3; i++) {
+    const x = pa[i] ?? 0;
+    const y = pb[i] ?? 0;
+    if (x !== y) return x > y;
+  }
+  return false;
+}
+function registry() {
+  return (process.env.PAYBOX_UPDATE_REGISTRY || "https://registry.npmjs.org").replace(/\/+$/, "");
+}
+async function latestVersion() {
+  try {
+    const res = await fetch(`${registry()}/${PKG}/latest`, { signal: AbortSignal.timeout(3e3) });
+    if (!res.ok) return void 0;
+    const { version } = await res.json();
+    return typeof version === "string" && SEMVER.test(version) ? version : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function installArgs(version) {
+  const pinned = `${registry()}/`;
+  return ["install", "-g", `${PKG}@${version}`, "--registry", pinned, `--@paybox-sh:registry=${pinned}`];
+}
+function npm(args, stdio) {
+  const background = stdio === "pipe";
+  const env = Object.fromEntries(
+    Object.entries(process.env).filter(([key]) => !(background && /^npm_config_.*registry$/i.test(key)))
+  );
+  const options = {
+    stdio,
+    encoding: "utf8",
+    timeout: background ? NPM_TIMEOUT_MS : void 0,
+    cwd: background ? configDir() : void 0
+  };
+  if (process.platform !== "win32") return spawnSync("npm", args, { ...options, env });
+  return spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", "npm", ...args], {
+    ...options,
+    env: { ...env, NoDefaultCurrentDirectoryInExePath: "1" }
+  });
+}
+function available(latest, current) {
+  return `PayBox CLI v${latest} is available (this is v${current}). Run \`paybox update\`.`;
+}
+function globalCli() {
+  const root = npm(["root", "-g"], "pipe");
+  if (root.status !== 0 || !process.argv[1]) return void 0;
+  const pkgDir = join(root.stdout.trim(), PKG);
+  try {
+    const rel = relative(realpathSync(pkgDir), realpathSync(process.argv[1]));
+    return rel && !rel.startsWith("..") && !isAbsolute(rel) ? join(pkgDir, "dist", "cli.js") : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function unlock(lock) {
+  try {
+    rmSync(lock, { force: true });
+  } catch {
+  }
+}
+function startCheck(dir) {
+  const cache = join(dir, "update-check.json");
+  const lock = join(dir, "update.lock");
+  try {
+    const age = Date.now() - JSON.parse(readFileSync(cache, "utf8")).checkedAt;
+    if (age >= 0 && age < DAY_MS) return false;
+  } catch {
+  }
+  try {
+    mkdirSync(dir, { recursive: true, mode: 448 });
+    closeSync(openSync(lock, "wx"));
+  } catch {
+    try {
+      if (Date.now() - statSync(lock).mtimeMs > LOCK_STALE_MS) unlock(lock);
+    } catch {
+    }
+    return false;
+  }
+  try {
+    writeFileSync(cache, JSON.stringify({ checkedAt: Date.now() }));
+    return true;
+  } catch {
+    unlock(lock);
+    return false;
+  }
+}
+async function install(current) {
+  const latest = await latestVersion();
+  if (!latest || !isNewer(latest, current)) return void 0;
+  const cli = latest.split(".")[0] === current.split(".")[0] ? globalCli() : void 0;
+  if (!cli) {
+    console.error(available(latest, current));
+    return void 0;
+  }
+  if (npm(installArgs(latest), "pipe").status !== 0) {
+    console.error(`Could not update PayBox CLI to v${latest}; continuing with v${current}. Run \`paybox update\` to see why.`);
+    return void 0;
+  }
+  return { cli, latest };
+}
+async function autoUpdate(command, current) {
+  if (NO_AUTO_UPDATE.has(command) || process.env.PAYBOX_NO_AUTO_UPDATE === "1") return;
+  const updated = process.env.PAYBOX_AUTO_UPDATED;
+  if (updated) {
+    if (isNewer(updated, current)) console.error(available(updated, current));
+    return;
+  }
+  const dir = configDir();
+  if (!startCheck(dir)) return;
+  let next;
+  try {
+    next = await install(current);
+  } finally {
+    unlock(join(dir, "update.lock"));
+  }
+  if (!next) return;
+  console.error(`Updated PayBox CLI v${current} \u2192 v${next.latest}.`);
+  const child = spawnSync(process.execPath, [next.cli, ...process.argv.slice(2)], {
+    stdio: "inherit",
+    env: { ...process.env, PAYBOX_AUTO_UPDATED: next.latest }
+  });
+  process.exit(child.status ?? (child.signal ? 128 + constants.signals[child.signal] : 1));
+}
+
 // src/cli.ts
 var DEFAULT_BASE_URL = "https://api.paybox.sh";
-var PKG = "@paybox-sh/sdk";
 var VERSION = createRequire(import.meta.url)("../package.json").version;
 var program = new Command();
-program.name("paybox").description("PayBox agent CLI \u2014 vaulted cards, wallets, and secrets for agents").version(VERSION).option("--base-url <url>", "API origin (default https://api.paybox.sh or stored)").option("--json", "machine-readable JSON output");
+program.name("paybox").description("PayBox agent CLI \u2014 vaulted cards, wallets, and secrets for agents").version(VERSION).option("--base-url <url>", "API origin (default https://api.paybox.sh or stored)").option("--json", "machine-readable JSON output").hook("preAction", (_, command) => autoUpdate(command.name(), VERSION));
 function jsonMode() {
   return Boolean(program.opts().json);
 }
@@ -447,7 +585,7 @@ function client() {
   return PayboxClient.fromConfig({ baseUrl: program.opts().baseUrl });
 }
 function readIntent(value) {
-  const raw = value.startsWith("@") ? readFileSync(value.slice(1), "utf8") : value;
+  const raw = value.startsWith("@") ? readFileSync2(value.slice(1), "utf8") : value;
   return JSON.parse(raw);
 }
 function readObject(value) {
@@ -486,22 +624,13 @@ function uuid(value, what, hint) {
   if (UUID.test(value)) return value;
   throw new Error(`${what}: got ${JSON.stringify(value)}. ${hint}`);
 }
-function isNewer(a, b) {
-  const pa = a.split(".").map(Number);
-  const pb = b.split(".").map(Number);
-  for (let i = 0; i < 3; i++) {
-    const x = pa[i] ?? 0;
-    const y = pb[i] ?? 0;
-    if (x !== y) return x > y;
-  }
-  return false;
-}
 async function run(fn) {
   try {
     await fn();
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);
-    if (jsonMode()) console.log(JSON.stringify({ error: message }, null, 2));
+    const reason = err instanceof PayboxError ? err.reason : void 0;
+    if (jsonMode()) console.log(JSON.stringify({ error: message, reason }, null, 2));
     else console.error(message);
     process.exitCode = 1;
   }
@@ -773,12 +902,7 @@ program.command("request <id>").description("Poll a request's status").option("-
 );
 program.command("version").description("Show the installed CLI version (and whether an update is available)").action(
   () => run(async () => {
-    let latest;
-    try {
-      const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`);
-      if (res.ok) latest = (await res.json()).version;
-    } catch {
-    }
+    const latest = await latestVersion();
     const updateAvailable = Boolean(latest && isNewer(latest, VERSION));
     if (jsonMode()) {
       emit({
@@ -797,13 +921,13 @@ program.command("version").description("Show the installed CLI version (and whet
 );
 program.command("update").description("Update the globally-installed paybox CLI to the latest version").option("--print", "print the update command instead of running it").action(
   (opts) => run(async () => {
-    const args = ["install", "-g", `${PKG}@latest`];
+    const args = installArgs("latest");
     if (opts.print) {
       console.log(`npm ${args.join(" ")}`);
       return;
     }
     console.error(`Updating ${PKG} (npm ${args.join(" ")})\u2026`);
-    const r = spawnSync("npm", args, { stdio: "inherit" });
+    const r = npm(args, "inherit");
     if (r.status !== 0) {
       console.error(
         `
@@ -816,7 +940,7 @@ If this isn't a global install: run \`pnpm up ${PKG}\` in your project, or use \
 program.command("uninstall").description("Remove stored PayBox credentials/config (and show how to remove the CLI)").action(
   () => run(async () => {
     const dir = configDir();
-    rmSync(dir, { recursive: true, force: true });
+    rmSync2(dir, { recursive: true, force: true });
     console.error(`Removed stored config at ${dir}.`);
     console.error(
       `The CLI binary is managed by npm \u2014 remove it with: