@rentaltide/cli 0.3.0 → 0.4.0

package/dist/commands/coverage.js

@@ -93,10 +93,16 @@ async function create() {
     const supportEmail = existing?.supportEmail || (await ask('Support email:'));
     const countries = existing?.countries?.length
         ? existing.countries
-        : (await ask('Licensed countries (ISO, comma separated):')).split(',').map((c) => c.trim().toUpperCase()).filter(Boolean);
+        : (await ask('Licensed countries (ISO, comma separated):'))
+            .split(',')
+            .map((c) => c.trim().toUpperCase())
+            .filter(Boolean);
     const currencies = existing?.currencies?.length
         ? existing.currencies
-        : (await ask('Currencies (ISO, comma separated):')).split(',').map((c) => c.trim().toUpperCase()).filter(Boolean);
+        : (await ask('Currencies (ISO, comma separated):'))
+            .split(',')
+            .map((c) => c.trim().toUpperCase())
+            .filter(Boolean);
     if (!name || !baseUrl)
         fail('A name and a base URL are required.');
     if (!baseUrl.startsWith('https://')) {

package/dist/index.js

@@ -16,7 +16,7 @@ import { webhook } from './commands/webhook.js';
 import { open } from './commands/open.js';
 import { coverage } from './commands/coverage.js';
 import { bold, dim, say } from './ui.js';
-const VERSION = '0.3.0';
+const VERSION = '0.4.0';
 function usage() {
     say(`${bold('rentaltide')} ${dim(VERSION)} — build apps for RentalTide`);
     say();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rentaltide/cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "description": "Build RentalTide apps and coverage offerings: scaffold, run against your sandbox, push config, and test an underwriter the way RentalTide calls it.",
   "license": "MIT",
   "author": "RentalTide Inc.",

package/templates/underwriter/README.md

@@ -1,8 +1,12 @@
 # **APP_NAME**
 
-A RentalTide coverage underwriter. Six endpoints, no dependencies.
+A RentalTide coverage underwriter, built on
+[`@rentaltide/underwriter`](https://www.npmjs.com/package/@rentaltide/underwriter).
+The SDK verifies signatures, routes calls, checks what you return and makes
+`/bind` idempotent — `server.mjs` is underwriting and nothing else.
 
 ```bash
+npm install
 export SIGNING_SECRET=whsec_...       # shown once when you created the offering
 npm run dev                           # http://localhost:8787
 
@@ -25,8 +29,9 @@ rentaltide coverage status            # what is still missing before review
 rentaltide coverage submit
 ```
 
-- `server.mjs` — your underwriting. Replace the pricing and the questions; keep
-  the signature check.
+- `server.mjs` — your underwriting. Replace the pricing and the questions.
+- Before selling a real policy, give `createUnderwriter` a `store` so bound
+  policies survive a restart; see the SDK README.
 - `rentaltide.coverage.json` — base URL, licensed countries, currencies, quote
   timeout. `push` applies it, `pull` brings it back.
 

package/templates/underwriter/package.json

@@ -5,5 +5,8 @@
   "scripts": {
     "start": "node server.mjs",
     "dev": "node --watch server.mjs"
+  },
+  "dependencies": {
+    "@rentaltide/underwriter": "^0.1.0"
   }
 }

package/templates/underwriter/server.mjs

@@ -1,221 +1,109 @@
 /**
  * __APP_NAME__ — a RentalTide coverage underwriter.
  *
- * Six endpoints. RentalTide calls you; you never call a renter, never render a
- * page, and never see a card number.
+ * RentalTide calls you. You never call a renter, never render a page, and never
+ * see a card number. The SDK verifies the signature, routes the call, checks
+ * what you return, and makes /bind idempotent — so everything below is
+ * underwriting and nothing else.
  *
- *   POST /quote       a boat and a time, no renter identity  → a price
- *   POST /schema      your underwriting questions            → a field list
- *   POST /requote     the answers                            → the final price
- *   POST /bind        AFTER payment succeeds                 → a policy
- *   POST /reschedule  the booking's dates moved              → does it stand
- *   POST /cancel      cancelled or refunded                  → void it
- *
- * Plain Node, no dependencies, so nothing here is hidden behind a framework.
- * Replace the pricing and the questions; keep the signature check exactly as it
- * is — it is the only thing standing between your policies and anyone on the
- * internet.
- *
- * Run it:   npm start
+ * Run it:   npm run dev
  * Test it:  rentaltide coverage test --url http://localhost:8787
  */
 
-import http from 'node:http';
 import crypto from 'node:crypto';
+import { createUnderwriter, decline, NO_QUOTE } from '@rentaltide/underwriter';
 
-const PORT = Number(process.env.PORT || 8787);
-const SECRET = process.env.SIGNING_SECRET || '';
-const SCHEMA_VERSION = '2026-09-01';
-
-if (!SECRET) {
-  console.error('Set SIGNING_SECRET — the secret RentalTide showed you once, at creation.');
-  process.exit(1);
-}
-
-/** Policies in memory. Use your real book of business here. */
-const policies = new Map();
-
-const round2 = (n) => Math.round((Number(n) || 0) * 100) / 100;
-
-/**
- * Verify the signature the way RentalTide sends it.
- *
- * Timing-safe, and a stale timestamp is refused: a replayed bind is a second
- * policy on somebody else's booking.
- */
-function verify(headers, rawBody) {
-  const signature = headers['x-rentaltide-signature'] || '';
-  const timestamp = headers['x-rentaltide-timestamp'] || '';
-  if (!signature || !timestamp) return false;
+const rentaltide = createUnderwriter({
+  // Shown once when you created the offering. `rentaltide coverage create`
+  // saved a copy to ~/.rentaltide; put it here too.
+  secret: process.env.SIGNING_SECRET,
 
-  const age = Date.now() - new Date(timestamp).getTime();
-  if (!Number.isFinite(age) || Math.abs(age) > 5 * 60_000) return false;
-
-  const expected =
-    'v1=' + crypto.createHmac('sha256', SECRET).update(`${timestamp}.${rawBody}`).digest('hex');
-  const a = Buffer.from(signature);
-  const b = Buffer.from(expected);
-  return a.length === b.length && crypto.timingSafeEqual(a, b);
-}
-
-// ── Your underwriting ───────────────────────────────────────────────────────
+  // Memory by default, which forgets on restart. Point this at your own
+  // database before you sell a real policy: a retry after a restart would
+  // otherwise issue a SECOND policy on the same booking.
+  // store: { get: (quoteId) => …, set: (quoteId, policy) => … },
+});
 
 const BASE_RATE = 0.065;
 const FLOOR = 12;
 const MINIMUM_BOOKING = 50;
 
-function priceFor({ bookingSubtotal, days }) {
-  return round2(Math.max(bookingSubtotal * BASE_RATE, FLOOR) + Math.max(0, days - 1) * 3);
-}
-
-const QUESTIONS = {
-  version: SCHEMA_VERSION,
-  fields: [
-    {
-      id: 'date_of_birth',
-      label: 'Date of birth',
-      type: 'date',
-      required: true,
-      notBefore: '1920-01-01',
-      minAgeYears: 18,
-    },
-    { id: 'boating_licence', label: 'Boating licence number', type: 'text', required: false },
-    {
-      id: 'prior_claims_3y',
-      label: 'Any claims in the last 3 years?',
-      type: 'checkbox',
-      required: false,
-    },
-  ],
-};
-
-// ── Handlers ────────────────────────────────────────────────────────────────
-
-const routes = {
-  '/quote': (body) => {
-    const subtotal = Number(body.bookingSubtotal) || 0;
-    const days = Number(body.days) || 1;
-
-    // Decline a risk you do not want rather than pricing it at zero. No card
-    // renders and the booking proceeds without you.
-    if (subtotal < MINIMUM_BOOKING) return { error: 'below_minimum' };
+rentaltide
+  /**
+   * A boat and a time, no renter identity. Answer inside your quote timeout
+   * (default 800ms) or no card renders and the booking proceeds without you.
+   */
+  .quote(({ bookingSubtotal, days, currency }) => {
+    // Decline a risk you do not want rather than pricing it at zero.
+    if (bookingSubtotal < MINIMUM_BOOKING) return NO_QUOTE;
 
     return {
-      // Anything you can price the same cart from twice.
-      quoteId: `q_${crypto.randomBytes(12).toString('hex')}`,
-      expiresAt: new Date(Date.now() + 30 * 60_000).toISOString(),
-      // A JSON number. "44.50" is rejected.
-      premium: priceFor({ bookingSubtotal: subtotal, days }),
-      currency: body.currency || 'USD',
-      coverageLimit: 25000,
-      // A reducing effect MUST carry a value, or it renders to the renter as a
-      // saving and then changes nothing at hold time.
+      quoteId: `q_${crypto.randomBytes(8).toString('hex')}`,
+      premium: Math.max(bookingSubtotal * BASE_RATE, FLOOR) + Math.max(0, days - 1) * 3,
+      currency,
+      coverageLimit: 25_000,
       depositEffect: 'reduce_to',
       depositEffectValue: 500,
       displayName: '__APP_NAME__',
       shortDescription: 'Covers hull damage up to $25,000. Drops your deposit to $500.',
       terms: 'Excess $500 per incident. Operator must be 18 or over.',
-      questionSchemaVersion: SCHEMA_VERSION,
+      questionSchemaVersion: '2026-09-01',
     };
-  },
-
-  '/schema': () => QUESTIONS,
-
-  '/requote': (body) => {
-    const answers = body.answers || {};
-    const quoteId = String(body.quoteId || '');
-
+  })
+
+  /** Your underwriting questions. RentalTide draws them in its own checkout. */
+  .schema(() => ({
+    version: '2026-09-01',
+    fields: [
+      {
+        id: 'date_of_birth',
+        label: 'Date of birth',
+        type: 'date',
+        required: true,
+        minAgeYears: 18,
+      },
+      { id: 'boating_licence', label: 'Boating licence number', type: 'text' },
+      { id: 'prior_claims_3y', label: 'Any claims in the last 3 years?', type: 'checkbox' },
+    ],
+  }))
+
+  /** The answers, and your final price. A decline is a normal outcome. */
+  .requote(({ basePremium = FLOOR, answers }) => {
     const dob = answers.date_of_birth ? new Date(String(answers.date_of_birth)) : null;
-    if (dob && !Number.isNaN(dob.getTime())) {
-      const years = (Date.now() - dob.getTime()) / (365.25 * 86_400_000);
-      // A decline is a normal outcome, and a 200. An error here drops the
-      // coverage without telling the renter why.
-      if (years < 18) {
-        return { quoteId, decision: 'declined', declineReason: 'Operator must be 18 or over.' };
-      }
+    if (dob && (Date.now() - dob.getTime()) / (365.25 * 86_400_000) < 18) {
+      return decline('Operator must be 18 or over.');
     }
 
-    const base = Number(body.basePremium) || FLOOR;
-    const premium = answers.prior_claims_3y === true ? round2(base * 1.4) : base;
-
+    // A higher price than the estimate means RentalTide asks the renter to
+    // accept it before charging. Lower proceeds silently.
     return {
-      quoteId,
       decision: 'accepted',
-      premium,
-      finalUntil: new Date(Date.now() + 30 * 60_000).toISOString(),
+      premium: answers.prior_claims_3y === true ? basePremium * 1.4 : basePremium,
     };
-  },
-
-  '/bind': (body) => {
-    const quoteId = String(body.quoteId || '');
-
-    // Idempotent on quoteId. RentalTide retries on a timeout or a 5xx, and a
-    // retry that writes a second policy bills a renter twice for one booking.
-    const existing = policies.get(quoteId);
-    if (existing) return existing;
+  })
 
+  /** Only after payment succeeded. The only call carrying renter identity. */
+  .bind(({ quoteId, bookingReference, renter }) => {
+    console.log(`binding ${quoteId} for ${bookingReference} — ${renter.email}`);
     const policyId = `POL-${crypto.randomBytes(4).toString('hex').toUpperCase()}`;
-    const policy = {
+    return {
       policyId,
       documentUrl: `https://example.com/policies/${policyId}.pdf`, // https, always
       effectiveAt: new Date().toISOString(),
-      expiresAt: null,
     };
-    policies.set(quoteId, policy);
-    console.log(`bound ${policyId} for booking ${body.bookingReference}`);
-    return policy;
-  },
-
-  '/reschedule': (body) => {
-    // The booking moved after you bound it. Say whether the policy still
-    // stands; you cannot reprice here, because the renter has already paid.
-    console.log(`policy ${body.policyId} moved to ${body.startsAt}`);
+  })
+
+  /**
+   * The booking's dates moved after you bound it. Not a requote — the renter
+   * has already paid — so the only question is whether the policy still stands.
+   */
+  .reschedule(({ policyId, startsAt, endsAt }) => {
+    console.log(`policy ${policyId} now runs ${startsAt} → ${endsAt}`);
     return { decision: 'accepted' };
-  },
-
-  '/cancel': (body) => {
-    for (const [quoteId, policy] of policies.entries()) {
-      if (policy.policyId === body.policyId) policies.delete(quoteId);
-    }
-    return { cancelled: true };
-  },
-};
-
-// ── Wiring ──────────────────────────────────────────────────────────────────
-
-const server = http.createServer((req, res) => {
-  const path = (req.url || '/').split('?')[0].replace(/\/+$/, '') || '/';
-  const send = (status, body) => {
-    res.writeHead(status, { 'content-type': 'application/json' });
-    res.end(JSON.stringify(body));
-  };
-
-  if (req.method === 'GET') {
-    return send(200, path === '/schema' ? QUESTIONS : { ok: true, service: '__APP_SLUG__' });
-  }
-  if (req.method !== 'POST' || !routes[path]) return send(404, { error: 'not_found' });
+  })
 
-  let raw = '';
-  req.on('data', (chunk) => {
-    raw += chunk;
-    // Nobody sends a megabyte of quote.
-    if (raw.length > 1_000_000) req.destroy();
+  .cancel(({ policyId, reason }) => {
+    console.log(`cancelling ${policyId}: ${reason}`);
   });
-  req.on('end', () => {
-    if (!verify(req.headers, raw)) return send(401, { error: 'bad_signature' });
-    let body;
-    try {
-      body = raw ? JSON.parse(raw) : {};
-    } catch {
-      return send(400, { error: 'bad_json' });
-    }
-    try {
-      send(200, routes[path](body));
-    } catch (err) {
-      console.error(err);
-      send(500, { error: 'internal' });
-    }
-  });
-});
 
-server.listen(PORT, () => console.log(`__APP_NAME__ listening on http://localhost:${PORT}`));
+rentaltide.listen(Number(process.env.PORT) || 8787);