@rozoai/checkout 0.1.7 → 0.1.11

package/README.md

@@ -2,11 +2,34 @@
 
 **English** | [简体中文](docs/README.zh.md) | [日本語](docs/README.ja.md) | [Español](docs/README.es.md)
 
-Pay an **OpenRouter Coinbase Payment Link** with a coin that link cannot take
-directly — BTC over Lightning, or USDT/USDC on Solana, BNB Chain, Ethereum,
-Polygon, Base or Stellar. A Coinbase Payment Link only accepts USDC on Base;
-this routes the coin you actually hold through a bridge, and a funder wallet
-settles the invoice for you. No account, no API key, no browser.
+### When your agent needs to pay OpenRouter (or any Coinbase invoice) with the crypto you already hold
+
+OpenRouter crypto top-ups and other Coinbase-hosted invoices settle in USDC on
+Base. This skill pays them from whatever you hold instead, and it does three
+things the official path cannot:
+
+- **Pay from the chain you are already on.** USDT or USDC on Solana, BNB Chain,
+  Ethereum or Polygon, USDC on Base or Stellar, or BTC over Lightning. Coinbase's
+  own direct pay takes USDC on Base.
+- **No Coinbase account.** Pay the deposit address from any wallet or straight
+  from an exchange withdrawal. No sign-up, no API key, no browser.
+- **Scriptable.** OpenRouter's crypto credits API (`POST /api/v1/credits/coinbase`)
+  now returns `410 Gone`, so top-ups can no longer be automated there. Once you
+  have the payment link, paying it is one command an agent or a cron job can
+  run: without a terminal it stops for confirmation, so an unattended caller
+  reviews the quote and then passes `--yes`.
+
+Merchants we have been paid through so far: **OpenRouter, Venice.ai, Porkbun
+and Alchemy**. Any `payments.coinbase.com` link is quoted the same way.
+
+Before you pay, know two things:
+
+- **The fee is in the live quote.** You pay the full invoice, no discount and no
+  markup on it; the bridge and network fee is added to the deposit amount, which
+  is shown in the order summary before the deposit address is released. Send
+  exactly that amount, nothing more is charged.
+- **Crypto payments to OpenRouter are never refundable.** That is OpenRouter's
+  policy, not ours; check the credit amount before you send.
 
 ```bash
 npx @rozoai/checkout pay <coinbase-link>
@@ -33,7 +56,7 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 | Base | `usdc-base` | `8453` | 6 decimals |
 | Solana | `usdt-solana` `usdc-solana` | `900` | SPL; native SOL not supported |
 | Stellar | `usdc-stellar` | `1500` | `MEMO_TEXT` memo required — shown in the deposit block |
-| Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11; amounts in satoshis |
+| Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11; amounts in satoshis. Any wallet that can pay an invoice works, including Cashu/ecash wallets — the mint melts your ecash into the Lightning payment. |
 
 Native gas coins (SOL, BNB, ETH, MATIC) and on-chain BTC are not accepted.
 
@@ -52,13 +75,31 @@ already hold and pay from wherever it already lives.
   address plus `receiverMemo`, so whatever you send from — exchange or wallet —
   must let you set a memo. Omit it and the payment is lost.
 - **Lightning pays an invoice, not an address.** Scan or paste
-  `deposit.lnInvoice`; there is no address to send to.
+  `deposit.lnInvoice`; there is no address to send to. A Cashu/ecash wallet
+  works here too — paying the invoice melts the ecash on your behalf, and this
+  route settles against ROZO's own Lightning node rather than a third-party
+  swap, so no special handling is needed on our side.
 - **Only `--send` needs a private key**, read from `ROZO_CHECKOUT_EVM_KEY` or
   `ROZO_CHECKOUT_SOL_KEY`, and it covers EVM chains and Solana only. Everything
   else is keyless.
 
 ## Use it from your agent
 
+Install it as a skill, or just run the CLI:
+
+```text
+# Claude Code
+/plugin marketplace add RozoAI/rozo-checkout-skill
+/plugin install rozo-checkout@rozo
+
+# OpenClaw / ClawHub
+clawhub install rozo-checkout
+
+# Any agent that can run a shell: review the quote, then pay unattended
+npx @rozoai/checkout quote <coinbase-link>
+npx @rozoai/checkout pay <coinbase-link> --with usdt-solana --yes
+```
+
 The payload is the same everywhere: the one-liner above, or point the agent at
 [llms.txt](llms.txt). Agents and scripts should always pass `--with` — the
 picker only appears on a terminal, and there is deliberately no default coin. **Paying from your own wallet never needs a key.** Only
@@ -70,6 +111,8 @@ environment (or a gitignored `.env`) still works for unattended automation.
 <details>
 <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary>
 
+You very likely do not need any of this: the default path needs no key, and for Stellar the `stellar-agent-wallet` skill sends with its own key handling — this `.env` setup is only for unattended EVM/Solana automation with a dedicated low-balance hot wallet.
+
 **None of this is needed for the default path.** Paying from your own wallet
 needs no key and no configuration, and works with wallets that can never be
 used here — including hardware wallets and exchange accounts.
@@ -269,7 +312,7 @@ Stellar and Lightning are Mode A only.
 <summary><b>Terminal — no agent at all</b> — run the scripts step by step</summary>
 
 Drive each step yourself. The bundles are self-contained; nothing to install
-beyond Node 18+.
+beyond Node 20.18+.
 
 ```bash
 git clone https://github.com/RozoAI/rozo-checkout-skill && cd rozo-checkout-skill
@@ -343,6 +386,12 @@ The full list of what this refuses to do, and why, is in
 
 ## Changelog
 
+- **0.1.11**: each order now carries `attribution.client`
+  (`rozo-checkout-skill/<version>`) so skill-created orders can be told apart
+  from the web checkout. Installable as a Claude Code plugin
+  (`/plugin marketplace add RozoAI/rozo-checkout-skill`). README and skill
+  description rewritten around paying Coinbase invoices from the crypto you
+  already hold.
 - **0.1.3** — fixes found by the first real payment. The built bundles no
   longer crash with `__filename is not defined` on Node 22+ (the esbuild banner
   now shims `__filename`/`__dirname` as well as `require`, and every bundle is
@@ -367,3 +416,7 @@ The full list of what this refuses to do, and why, is in
 ## License
 
 MIT.
+
+## Secret scanning
+
+Enable the local gitleaks pre-commit hook once per clone: `brew install gitleaks pre-commit && pre-commit install` (config in `.pre-commit-config.yaml`). CI also runs a report-only scan in `.github/workflows/secret-scan.yml`.

package/docs/QUICKSTART.es.md

@@ -224,6 +224,8 @@ Un archivo de claves o un `.env` no debe ser legible por otros usuarios
 <details>
 <summary><b>Configurar una billetera local para <code>--send</code></b> — plantilla .env y pasos de exportación por billetera</summary>
 
+Muy probablemente no necesites nada de esto: la ruta por defecto no requiere ninguna clave, y para Stellar la skill `stellar-agent-wallet` envía con su propio manejo de claves — esta configuración `.env` es solo para automatización desatendida en EVM/Solana con una billetera caliente dedicada de saldo bajo.
+
 **Nada de esto hace falta para la ruta por defecto.** Pagar desde la propia
 billetera no necesita clave ni configuración, y funciona con billeteras que aquí
 nunca se pueden usar, incluidas las de hardware y las cuentas de exchange.

package/docs/QUICKSTART.ja.md

@@ -202,6 +202,8 @@ ROZO_CHECKOUT_EVM_KEYSTORE=~/wallets/hot.json \
 <details>
 <summary><b><code>--send</code> 用のローカルウォレット設定</b> — .env テンプレートとウォレット別の書き出し手順</summary>
 
+おそらくこれらは一切不要です。既定の経路に鍵は不要で、Stellar なら `stellar-agent-wallet` スキルが独自の鍵管理で送金します — この `.env` 設定は、残高を低く抑えた専用ホットウォレットによる EVM/Solana の無人自動化専用です。
+
 **既定の経路ではここに書かれたものは一切不要です。** 自分のウォレットから支払う場合、
 鍵も設定も要りません。しかもここでは決して使えないウォレット — ハードウェアウォレットや
 取引所アカウントを含む — でも支払えます。

package/docs/QUICKSTART.md

@@ -217,6 +217,8 @@ not be tracked by git. Both are refused rather than warned about.
 <details>
 <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary>
 
+You very likely do not need any of this: the default path needs no key, and for Stellar the `stellar-agent-wallet` skill sends with its own key handling — this `.env` setup is only for unattended EVM/Solana automation with a dedicated low-balance hot wallet.
+
 **None of this is needed for the default path.** Paying from your own wallet
 needs no key and no configuration, and works with wallets that can never be
 used here — including hardware wallets and exchange accounts.

package/docs/QUICKSTART.zh.md

@@ -185,6 +185,8 @@ ROZO_CHECKOUT_EVM_KEYSTORE=~/wallets/hot.json \
 <details>
 <summary><b>为 <code>--send</code> 配置本地钱包</b> —— .env 模板与各钱包导出步骤</summary>
 
+你很可能完全不需要这些：默认路径不需要任何私钥；Stellar 来源可用 `stellar-agent-wallet` skill，它有自己的密钥管理来完成发送 —— 这份 `.env` 配置只用于无人值守的 EVM/Solana 自动化，且应使用余额很低的专用热钱包。
+
 **默认路径不需要这里的任何东西。** 用你自己的钱包付款既不需要私钥也不需要任何配置，
 而且支持那些在这里根本用不了的钱包 —— 包括硬件钱包和交易所账户。
 

package/docs/README.es.md

@@ -239,6 +239,8 @@ Billetera: cualquier billetera, **sin clave**. Solo `--send` la necesita: firma
 <details>
 <summary><b>Configurar una billetera local para <code>--send</code></b> — plantilla .env y pasos de exportación por billetera</summary>
 
+Muy probablemente no necesites nada de esto: la ruta por defecto no requiere ninguna clave, y para Stellar la skill `stellar-agent-wallet` envía con su propio manejo de claves — esta configuración `.env` es solo para automatización desatendida en EVM/Solana con una billetera caliente dedicada de saldo bajo.
+
 **Nada de esto hace falta para la ruta por defecto.** Pagar desde la propia
 billetera no necesita clave ni configuración, y funciona con billeteras que aquí
 nunca se pueden usar, incluidas las de hardware y las cuentas de exchange.

package/docs/README.ja.md

@@ -232,6 +232,8 @@ https://checkout.rozo.ai/llms.txt を自分のコンテキストに読み込み
 <details>
 <summary><b><code>--send</code> 用のローカルウォレット設定</b> — .env テンプレートとウォレット別の書き出し手順</summary>
 
+おそらくこれらは一切不要です。既定の経路に鍵は不要で、Stellar なら `stellar-agent-wallet` スキルが独自の鍵管理で送金します — この `.env` 設定は、残高を低く抑えた専用ホットウォレットによる EVM/Solana の無人自動化専用です。
+
 **既定の経路ではここに書かれたものは一切不要です。** 自分のウォレットから支払う場合、
 鍵も設定も要りません。しかもここでは決して使えないウォレット — ハードウェアウォレットや
 取引所アカウントを含む — でも支払えます。

package/docs/README.zh.md

@@ -214,6 +214,8 @@ node scripts/dist/status.js --rozo-payment-id <uuid> --watch
 <details>
 <summary><b>为 <code>--send</code> 配置本地钱包</b> —— .env 模板与各钱包导出步骤</summary>
 
+你很可能完全不需要这些：默认路径不需要任何私钥；Stellar 来源可用 `stellar-agent-wallet` skill，它有自己的密钥管理来完成发送 —— 这份 `.env` 配置只用于无人值守的 EVM/Solana 自动化，且应使用余额很低的专用热钱包。
+
 **默认路径不需要这里的任何东西。** 用你自己的钱包付款既不需要私钥也不需要任何配置，
 而且支持那些在这里根本用不了的钱包 —— 包括硬件钱包和交易所账户。
 

package/docs/review-history.md

@@ -0,0 +1,77 @@
+# Review history
+
+[← back to the README](../README.md) · [Safety design](safety.md)
+
+This tool moves other people's money. It was reviewed adversarially before it
+was written, again after it was written, and again after the first real payment.
+This page is the record of that.
+
+## Design review — 3 rounds, before any code existed
+
+The design was written as a plan document and reviewed by an independent model
+with a standing instruction to hunt for anything that could lose funds. No code
+was written until the plan passed with no P0 findings.
+
+| Round | Verdict |
+|---|---|
+| 1 | 6 P0, 7 P1, 2 P2 — plan revised |
+| 2 | still had P0s: several round-1 fixes were incomplete, plus one new P0 — plan revised again |
+| 3 | no P0 — implementation began |
+
+The P0s were about the plan being wrong regarding the payment rails, not about
+style. Among them: the reuse rule was mis-stated (an existing order is reused
+whenever it is merely unexpired, not only when it is unpaid); the binding
+confirmation was placed before the deposit details existed, so it could not
+bind them; and the payment link could be consumed by another payer between the
+quote and the signature, which needed a re-check immediately before paying.
+
+## Code review — 2 rounds, after implementation
+
+| Round | Verdict |
+|---|---|
+| 1 | 8 P0, 10 P1, 5 P2 |
+| 2 | 20 of 23 resolved; 3 residual findings, then fixed |
+
+The round-1 P0s were the interesting ones, and each is now a real code path
+with its own error code and tests:
+
+- the confirmation gate and the `--send` opt-in were documented but not
+  actually enforced
+- the send-once claim was a check-then-act race that two concurrent processes
+  could both pass
+- an unreadable `amountReceived` was treated as "no money received" rather than
+  as money
+- the post-create comparison ignored security-critical fields when they were
+  simply absent
+- payability was not re-proved immediately before signing, and incomplete
+  upstream state read as payable
+- deposit instructions were not validated for completeness before being shown
+- provider errors could leak credential-bearing URLs
+- the tracked-secret check failed open when it could not consult git
+
+## First real payment
+
+A live payment then settled in about a minute — and surfaced four more defects,
+all fixed in 0.1.3:
+
+- the built bundles crashed on newer Node because the bundler's CommonJS shim
+  was incomplete; it had never been caught because only `--help` was ever run
+  against a built bundle. The test suite now executes every bundle.
+- the Stellar memo type was not stated anywhere, and sending that memo with the
+  wrong type loses the payment. It is `MEMO_TEXT`, and the deposit block now
+  says so.
+- reusing an existing unpaid order, and asking for a coin that differs from it,
+  both read as errors rather than as the ordinary situations they are
+- nothing showed how long an order had left, and a real payment nearly missed
+  its window
+
+## What this means for a reader
+
+Every finding above is closed, and the behaviours they produced are covered by
+the test suite, which runs entirely offline against recorded fixtures. The full
+list of what this tool refuses to do, and why, is in
+[docs/safety.md](safety.md).
+
+The detailed review transcripts are kept internally; they quote source from
+private repositories and so are not published here. The findings themselves are
+summarised above in full — nothing material is omitted.

package/docs/security-audit-notes.md

@@ -0,0 +1,30 @@
+# Security-audit notes for scanners and reviewers
+
+What automated scans flag in this skill, and why each pattern is present.
+
+## `env_credential_access` — environment variable read + network send
+
+Real and by design, in exactly two places: `send-evm.js` reads
+`ROZO_CHECKOUT_EVM_KEY` (or an encrypted keystore) and `send-sol.js` reads
+`ROZO_CHECKOUT_SOL_KEY`, to sign a transfer the user has already confirmed
+twice (`--confirm` on the order, `--send` on the send). That is the entire
+optional hot-wallet mode ("Mode B" in SKILL.md); the default mode never
+touches a key. Mitigations, all enforced in code, not prose:
+
+- keys come from the environment or a named file only — never argv, never
+  printed, scrubbed from every output object (`forget()` in `lib/keys.mjs`);
+- a `.env` is only read from the working directory, this tool's own
+  `~/.rozo-checkout/.env`, or a path the user names with `--env-file`; a
+  generic `~/.env` is never read;
+- sends refuse if any `.env` here is git-tracked, refuse over the $1,100
+  per-payment cap, re-verify chain id and token decimals against the RPC, and
+  record the send locally before broadcast so the same order cannot pay twice.
+
+## `dangerous_exec` — subprocess execution
+
+Removed in 0.1.9. Earlier versions shelled out to `git rev-parse` /
+`git ls-files` for one purpose: refusing to use hot-wallet keys from a
+directory whose `.env` is git-tracked. The check now reads `.git/index`
+directly (`lib/keys.mjs`), so the published bundle contains no
+`child_process` usage at all. The fail-closed contract is unchanged — an
+unparseable index refuses rather than assumes.

package/llms.txt

@@ -1,8 +1,10 @@
 # rozo-checkout
 
-> Pay an OpenRouter Coinbase Payment Link (payments.coinbase.com/payment-links/pl_* or
-> /payment-sessions/paymentSession_*) with BTC over Lightning, or USDT/USDC on Solana,
-> BNB Chain, Ethereum, Polygon, Base, or Stellar. Public HTTP endpoints, no API key.
+> When your agent needs to pay OpenRouter (or any Coinbase invoice) with the crypto you
+> already hold. Pays a Coinbase Payment Link (payments.coinbase.com/payment-links/pl_* or
+> /payment-sessions/paymentSession_*) with BTC over Lightning, USDT/USDC on Solana,
+> BNB Chain, Ethereum or Polygon, or USDC on Base or Stellar. No Coinbase account, public HTTP
+> endpoints, no API key. Crypto payments to OpenRouter are never refundable.
 > The payer funds a one-time deposit address; a bridge and a funder wallet settle the
 > Coinbase link automatically. No discount: you pay the invoice amount, plus the
 > deposit normally carries a small bridge/source-chain fee on top.

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@rozoai/checkout",
-  "version": "0.1.7",
+  "version": "0.1.11",
   "type": "module",
-  "description": "Pay an OpenRouter Coinbase Payment Link with BTC Lightning, or USDT/USDC on Solana, BNB Chain, Ethereum, Polygon, Base or Stellar.",
+  "description": "Pay OpenRouter, or any Coinbase invoice, with the crypto you already hold: USDT/USDC on Solana, BNB Chain, Ethereum or Polygon, USDC on Base or Stellar, or BTC over Lightning. No Coinbase account.",
   "license": "MIT",
   "author": "Rozo AI",
   "homepage": "https://github.com/RozoAI/rozo-checkout-skill#readme",
@@ -15,13 +15,29 @@
   },
   "keywords": [
     "openrouter",
+    "openrouter-credits",
     "coinbase",
-    "x402",
-    "lightning",
-    "solana",
-    "usdt",
+    "coinbase-payment-link",
     "usdc",
-    "crypto-payments"
+    "usdt",
+    "solana",
+    "bnb-chain",
+    "ethereum",
+    "polygon",
+    "base",
+    "stellar",
+    "lightning",
+    "bitcoin",
+    "crypto-payments",
+    "agent",
+    "ai-agent",
+    "agent-skill",
+    "claude-skill",
+    "claude-code",
+    "payments",
+    "cli",
+    "mcp-free",
+    "x402"
   ],
   "bin": {
     "rozo-checkout": "scripts/dist/cli.js"
@@ -35,7 +51,7 @@
     "LICENSE"
   ],
   "engines": {
-    "node": ">=18"
+    "node": ">=20.18.0"
   },
   "publishConfig": {
     "access": "public"
@@ -47,9 +63,13 @@
     "prepack": "npm run build"
   },
   "devDependencies": {
-    "@solana/spl-token": "^0.4.9",
     "@solana/web3.js": "^1.95.0",
     "esbuild": "^0.28.2",
     "viem": "^2.21.0"
+  },
+  "overrides": {
+    "jayson": {
+      "uuid": "^11.1.1"
+    }
   }
 }