@rozoai/checkout 0.1.11 → 0.1.14

package/README.md

@@ -40,6 +40,14 @@ prompt and it will mark which coins you can actually afford — then prints a
 deposit address for you to pay from any wallet — **no private key, no environment variable, no
 configuration** — and waits until the invoice is settled.
 
+Paying a **Bitrefill** invoice instead? Create it on Bitrefill with "USDC on
+Base", then pass its id, address and amount (Coinbase payment links and
+Bitrefill invoices are the two supported targets; Stripe is not):
+
+```bash
+npx @rozoai/checkout pay --bitrefill-invoice <id> --to <0x…> --amount 7.90 --expires-at <ISO> --with usdc-stellar
+```
+
 Know your coin already? Skip the question:
 
 ```bash
@@ -108,6 +116,12 @@ the optional `--send` flag signs locally: on Solana it uses the
 encrypted JSON keystore whose passphrase is prompted. A raw key in the
 environment (or a gitignored `.env`) still works for unattended automation.
 
+Distributing this CLI? `--utm-source <label>` (or `ROZO_CHECKOUT_UTM_SOURCE`) is an optional channel label for reporting; no identity, no privilege.
+
+Want ROZO to be able to reach you if a payment needs attention? Add the optional `--email you@example.com` to `pay`.
+
+Need help? Email hi@rozo.ai, or reach us on [X](https://x.com/ROZOai) or [Discord](https://discord.gg/EfWejgTbuU).
+
 <details>
 <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary>
 
@@ -386,6 +400,18 @@ The full list of what this refuses to do, and why, is in
 
 ## Changelog
 
+- **0.1.14**: optional `--email <addr>` on `pay` (and on the create-order
+  scripts) stores a contact email with the order so ROZO can reach you if the
+  payment needs attention. Never required; an invalid address is rejected
+  before any order is created. Support channels (hi@rozo.ai, X, Discord) are
+  shown at order creation and whenever an order is not clean.
+- **0.1.13**: optional `--utm-source <label>` / `ROZO_CHECKOUT_UTM_SOURCE`
+  adds `attribution.utm_source` to created orders so distribution channels can
+  be measured. Invalid values are dropped, never failing an order.
+- **0.1.12**: pay Bitrefill invoices. `pay --bitrefill-invoice <id> --to <0x…>
+  --amount <USDC> --expires-at <ISO>` creates a Rozo exactOut order through
+  mpprouter that delivers the exact USDC on Base straight to the Bitrefill
+  invoice address, payable from Stellar USDC or any supported coin.
 - **0.1.11**: each order now carries `attribution.client`
   (`rozo-checkout-skill/<version>`) so skill-created orders can be told apart
   from the web checkout. Installable as a Claude Code plugin

package/llms.txt

@@ -25,6 +25,10 @@ calls with every safety rule already enforced:
 usdc-ethereum, usdt-polygon, usdc-polygon, usdc-base, usdc-stellar, btc-lightning
 (or raw: --chain 900 --token USDT).
 
+Optional: --email <addr> stores a contact email with the order so ROZO can reach
+the user if the payment needs attention. Ask the user once if they are present;
+never required, proceed without it if they decline or no one is there.
+
 DEFAULT PATH NEEDS NO KEY: `pay` prints a deposit address for the user to pay from
 any wallet. No private key, no environment variable, no configuration. Only the
 optional --send flag signs locally. Its key comes from the first source that
@@ -37,6 +41,22 @@ directory (or --env-file <path>): only ROZO_CHECKOUT_* keys are read from it, it
 is parsed as text and never shell-evaluated, and the real environment wins.
 Key files and .env must be chmod 600 and untracked by git.
 
+## Bitrefill invoices
+
+Also supported: a Bitrefill invoice created with "USDC on Base" (Stripe is not supported).
+No quote step; mpprouter creates an exactOut order paying exactly that amount to the
+Bitrefill address:
+
+  npx @rozoai/checkout pay --bitrefill-invoice <id> --to <0x…> --amount 7.90 --expires-at <ISO> --with usdc-stellar
+
+Router call: POST {MPP}/create-invoice {"provider":"bitrefill","bitrefill":{"invoiceId","address",
+"amount","expiresAt" (required, ≤30 min out)},"source":{"chainId","tokenSymbol"}}. Verify the response echoes the same
+invoiceId/address/amount, and that GET payments/<rozoPaymentId> destination has the same
+chain/token/address/amount (missing = mismatch), before showing the deposit or sending.
+Expiry = the invoice expiry only; refuse to show/send under 2 min. 409 DUPLICATE_INVOICE returns
+the existing rozoPaymentId: resume it. Settled = payment_payout_completed (or completed with a
+payout tx hash). 503 BITREFILL_NOT_CONFIGURED / RETRY_LATER: nothing created, retry later.
+
 ## Local wallet setup for --send (not needed for the default keyless path)
 
 .env keys (only ROZO_CHECKOUT_* are read; real env wins; chmod 600; gitignore):
@@ -101,6 +121,8 @@ private key (EVM and Solana only); every other path is keyless.
      -d '{"url":"https://payments.coinbase.com/payment-links/pl_XXXX",
           "source":{"chainId":"900","tokenSymbol":"USDT"}}'
    -> { ok, reused, linkId, rozoPaymentId, paymentLink, expiresAt, source, ... }
+   Optional "email":"you@example.com" in the body stores a contact email with a
+   newly created order (a malformed value returns 400 INVALID_EMAIL).
    WARNING: if an unexpired order already exists for this link it is REUSED as-is,
    even with a different chain/token than you asked for. Always verify the returned
    source matches your request; abort on mismatch.
@@ -146,4 +168,11 @@ private key (EVM and Solana only); every other path is keyless.
 
 409 = link already used · 410 = link expired · UNSUPPORTED_SOURCE = the response's
 "supported" object lists valid (chainId, tokenSymbol) pairs (Lightning is supported
-but omitted from that list) · RATE_LIMITED = per-IP creation cap, retry later.
+but omitted from that list) · RATE_LIMITED = per-IP creation cap, retry later ·
+INVALID_EMAIL = the optional email is malformed; fix it or omit it.
+
+## Support
+
+If an order is stuck or anything goes wrong: email hi@rozo.ai, X
+https://x.com/ROZOai, Discord https://discord.gg/EfWejgTbuU. Include linkId,
+rozoPaymentId and any tx hash.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rozoai/checkout",
-  "version": "0.1.11",
+  "version": "0.1.14",
   "type": "module",
   "description": "Pay OpenRouter, or any Coinbase invoice, with the crypto you already hold: USDT/USDC on Solana, BNB Chain, Ethereum or Polygon, USDC on Base or Stellar, or BTC over Lightning. No Coinbase account.",
   "license": "MIT",