@profullstack/coinpay 0.8.0 → 0.9.0

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@profullstack/coinpay",
-  "version": "0.8.0",
-  "description": "CoinPay SDK & CLI — Accept cryptocurrency payments (BTC, ETH, SOL, POL, BCH, USDC) with wallet and swap support",
+  "version": "0.9.0",
+  "description": "CoinPay SDK & CLI \u2014 Accept cryptocurrency and card payments (BTC, ETH, SOL, POL, BCH, USDC) with wallet, swap and a live finances dashboard",
   "type": "module",
   "main": "./src/index.js",
   "types": "./src/index.d.ts",
@@ -48,6 +48,16 @@
     },
     "./x402-pay-server": {
       "import": "./src/x402-pay-server.js"
+    },
+    "./taskmarket": {
+      "import": "./src/taskmarket.js"
+    },
+    "./finances": {
+      "import": "./src/finances.js",
+      "types": "./src/finances.d.ts"
+    },
+    "./finances-tui": {
+      "import": "./src/finances-tui.js"
     }
   },
   "files": [
@@ -86,7 +96,12 @@
     "payment-gateway",
     "merchant",
     "bip39",
-    "mnemonic"
+    "mnemonic",
+    "finances",
+    "tui",
+    "dashboard",
+    "plaid",
+    "simplefin"
   ],
   "author": "Profullstack, Inc.",
   "license": "MIT",
@@ -103,16 +118,16 @@
     "node": ">=20.0.0"
   },
   "devDependencies": {
-    "vitest": "^4.1.0",
     "eslint": "^8.57.0",
-    "prettier": "^3.4.1"
+    "prettier": "^3.4.1",
+    "vitest": "^4.1.0"
   },
-  "peerDependencies": {},
   "dependencies": {
-    "@scure/bip39": "^1.4.0",
-    "@scure/bip32": "^1.5.0",
+    "@inquirer/prompts": "^8.3.0",
     "@noble/curves": "^1.6.0",
     "@noble/hashes": "^1.5.0",
-    "@inquirer/prompts": "^8.3.0"
+    "@profullstack/hqtui": "^0.1.11",
+    "@scure/bip32": "^1.5.0",
+    "@scure/bip39": "^1.4.0"
   }
 }

package/src/card-payments.js

@@ -309,13 +309,21 @@ export async function createCardEscrow(client, businessId, amountUSD, descriptio
   // Convert USD to cents
   const amountCents = Math.round(amountUSD * 100);
 
-  return client.request('POST', '/api/stripe/payments/create', {
-    businessId,
-    amount: amountCents,
-    currency: 'usd',
-    description,
-    metadata,
-    escrowMode: true,
+  // `CoinPayClient.request(endpoint, options)` takes TWO arguments. Every call
+  // in this file passed three, in the shape `request(method, path, body)` — so
+  // `endpoint` received 'POST', the URL became `baseUrl + 'POST'`, and `options`
+  // received the path as a string. These calls failed 100% of the time, which
+  // made releasing or refunding a card escrow unreachable through the SDK.
+  return client.request('/api/stripe/payments/create', {
+    method: 'POST',
+    body: JSON.stringify({
+      businessId,
+      amount: amountCents,
+      currency: 'usd',
+      description,
+      metadata,
+      escrowMode: true,
+    }),
   });
 }
 
@@ -346,7 +354,7 @@ export async function listCardEscrows(client, options = {}) {
   const queryString = queryParams.toString();
   const url = `/api/stripe/escrows${queryString ? `?${queryString}` : ''}`;
   
-  return client.request('GET', url);
+  return client.request(url, { method: 'GET' });
 }
 
 /**
@@ -360,8 +368,9 @@ export async function listCardEscrows(client, options = {}) {
  * const result = await releaseCardEscrow(client, 'escrow-123');
  */
 export async function releaseCardEscrow(client, escrowId) {
-  return client.request('POST', '/api/stripe/escrow/release', {
-    escrowId,
+  return client.request('/api/stripe/escrow/release', {
+    method: 'POST',
+    body: JSON.stringify({ escrowId }),
   });
 }
 
@@ -386,9 +395,9 @@ export async function releaseCardEscrow(client, escrowId) {
  * });
  */
 export async function refundCardEscrow(client, escrowId, options = {}) {
-  return client.request('POST', '/api/stripe/escrow/refund', {
-    escrowId,
-    ...options,
+  return client.request('/api/stripe/escrow/refund', {
+    method: 'POST',
+    body: JSON.stringify({ escrowId, ...options }),
   });
 }
 
@@ -404,7 +413,7 @@ export async function refundCardEscrow(client, escrowId, options = {}) {
  * console.log(status.escrow_status); // 'pending', 'released', 'refunded'
  */
 export async function getCardEscrowStatus(client, escrowId) {
-  return client.request('GET', `/api/stripe/transactions/${escrowId}`);
+  return client.request(`/api/stripe/transactions/${escrowId}`, { method: 'GET' });
 }
 
 /**

package/src/client.js

@@ -454,23 +454,61 @@ export class CoinPayClient {
 
   /**
    * Create a new business
+   *
+   * Field names are snake_case because that is what the API reads. This used to
+   * send `webhookUrl`, which POST /api/businesses does not look at -- it reads
+   * `input.webhook_url` -- so every business created through the SDK came back
+   * with a null webhook_url and no webhook secret, silently. The value was
+   * accepted, echoed nowhere, and dropped.
+   *
+   * `category` is required by the API and was not sent at all, so
+   * `coinpay business create` failed outright with "Select a valid business
+   * category" and there was no flag to supply one. Valid slugs live in
+   * src/lib/business/taxonomy.ts.
+   *
    * @param {Object} params - Business parameters
    * @param {string} params.name - Business name
+   * @param {string} params.category - Taxonomy slug; required by the API
+   * @param {string} [params.description]
    * @param {string} [params.webhookUrl] - Webhook URL
+   * @param {string} [params.webhookSecret] - Supply one, or the API generates it
    * @param {Object} [params.walletAddresses] - Wallet addresses by chain
    * @returns {Promise<Object>} Created business
    */
-  async createBusiness({ name, webhookUrl, walletAddresses }) {
+  async createBusiness({
+    name,
+    category,
+    description,
+    webhookUrl,
+    webhookSecret,
+    walletAddresses,
+  }) {
     return this.request('/businesses', {
       method: 'POST',
       body: JSON.stringify({
         name,
-        webhookUrl,
+        category,
+        description,
+        webhook_url: webhookUrl,
+        webhook_secret: webhookSecret,
         walletAddresses,
       }),
     });
   }
 
+  /**
+   * The taxonomy a business may be created with.
+   *
+   * Fetched rather than bundled: a copy inside the SDK goes stale the moment a
+   * category is added, and a stale copy is how "Select a valid business category"
+   * happens a second time.
+   *
+   * @returns {Promise<Object>} { success, categories: [{ slug, label, group, baseRisk }] }
+   */
+  async listBusinessCategories() {
+    return this.request('/businesses/categories', { method: 'GET' });
+  }
+
   /**
    * Update business
    * @param {string} businessId - Business ID