@vonpay/checkout-cli 0.8.0 → 0.10.0

package/dist/utils/forward-to.d.ts

@@ -1,5 +1,7 @@
 /**
- * URL validation for `vonpay checkout listen --forward-to`.
+ * URL validation for `vonpay checkout listen --forward-to` and
+ * `vonpay checkout trigger --url` (same policy since 0.8.1; the flag names in
+ * messages are passed in).
  *
  * Default posture: loopback-only. Refuses any URL whose hostname is not
  * one of the IPv4/IPv6 loopback aliases. This protects against the
@@ -30,5 +32,7 @@ export type ForwardToVerdict = {
  */
 export declare function validateForwardTo(raw: string, opts: {
     allowTunnel: boolean;
+    flag?: string;
+    tunnelFlag?: string;
 }): ForwardToVerdict;
 //# sourceMappingURL=forward-to.d.ts.map

package/dist/utils/forward-to.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"forward-to.d.ts","sourceRoot":"","sources":["../../src/utils/forward-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAmBH,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,GAC7B,gBAAgB,CA6ClB"}
+{"version":3,"file":"forward-to.d.ts","sourceRoot":"","sources":["../../src/utils/forward-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAmBH,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,GAC7D;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAElC;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE;IAAE,WAAW,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAE,GACjE,gBAAgB,CA+ClB"}

package/dist/utils/forward-to.js

@@ -1,5 +1,7 @@
 /**
- * URL validation for `vonpay checkout listen --forward-to`.
+ * URL validation for `vonpay checkout listen --forward-to` and
+ * `vonpay checkout trigger --url` (same policy since 0.8.1; the flag names in
+ * messages are passed in).
  *
  * Default posture: loopback-only. Refuses any URL whose hostname is not
  * one of the IPv4/IPv6 loopback aliases. This protects against the
@@ -36,8 +38,10 @@ const LOOPBACK_HOSTS = new Set([
  * (the CLI surfaces `reason` to stderr and exits non-zero).
  */
 export function validateForwardTo(raw, opts) {
+    const flag = opts.flag ?? "--forward-to";
+    const tunnelFlag = opts.tunnelFlag ?? "--forward-to-tunnel";
     if (typeof raw !== "string" || raw.length === 0) {
-        return { ok: false, reason: "--forward-to URL is required" };
+        return { ok: false, reason: `${flag} URL is required` };
     }
     let url;
     try {
@@ -46,13 +50,13 @@ export function validateForwardTo(raw, opts) {
     catch {
         return {
             ok: false,
-            reason: `--forward-to is not a parseable URL: ${truncate(raw)}`,
+            reason: `${flag} is not a parseable URL: ${truncate(raw)}`,
         };
     }
     if (url.protocol !== "http:" && url.protocol !== "https:") {
         return {
             ok: false,
-            reason: `--forward-to scheme must be http or https; got ${url.protocol}`,
+            reason: `${flag} scheme must be http or https; got ${url.protocol}`,
         };
     }
     const host = normalizeHost(url.hostname);
@@ -60,8 +64,8 @@ export function validateForwardTo(raw, opts) {
     if (!isLoopback && !opts.allowTunnel) {
         return {
             ok: false,
-            reason: `--forward-to refuses non-loopback hosts by default (got ${url.hostname}). ` +
-                `Re-run with --forward-to-tunnel if forwarding through ngrok / Cloudflare Tunnel / etc.`,
+            reason: `${flag} refuses non-loopback hosts by default (got ${url.hostname}). ` +
+                `Re-run with ${tunnelFlag} if forwarding through ngrok / Cloudflare Tunnel / etc.`,
         };
     }
     // `0.0.0.0` is treated as loopback for dev convenience, but it's a

package/dist/utils/forward-to.js.map

@@ -1 +1 @@
-{"version":3,"file":"forward-to.js","sourceRoot":"","sources":["../../src/utils/forward-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,SAAS,EAAE,sEAAsE;IACjF,KAAK;IACL,uEAAuE;IACvE,uEAAuE;IACvE,4BAA4B;IAC5B,OAAO;IACP,0DAA0D;IAC1D,kEAAkE;IAClE,6DAA6D;IAC7D,wBAAwB;IACxB,kBAAkB;IAClB,eAAe;CAChB,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,IAA8B;IAE9B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,wCAAwC,QAAQ,CAAC,GAAG,CAAC,EAAE;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,kDAAkD,GAAG,CAAC,QAAQ,EAAE;SACzE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,2DAA2D,GAAG,CAAC,QAAQ,KAAK;gBAC5E,wFAAwF;SAC3F,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,0CAA0C;IAC1C,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,gNAAgN;QAClN,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,mEAAmE;IACnE,8BAA8B;IAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AACvD,CAAC"}
+{"version":3,"file":"forward-to.js","sourceRoot":"","sources":["../../src/utils/forward-to.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,SAAS,EAAE,sEAAsE;IACjF,KAAK;IACL,uEAAuE;IACvE,uEAAuE;IACvE,4BAA4B;IAC5B,OAAO;IACP,0DAA0D;IAC1D,kEAAkE;IAClE,6DAA6D;IAC7D,wBAAwB;IACxB,kBAAkB;IAClB,eAAe;CAChB,CAAC,CAAC;AAMH;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,GAAW,EACX,IAAkE;IAElE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,cAAc,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,qBAAqB,CAAC;IAC5D,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,IAAI,kBAAkB,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,IAAI,4BAA4B,QAAQ,CAAC,GAAG,CAAC,EAAE;SAC3D,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC1D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,GAAG,IAAI,sCAAsC,GAAG,CAAC,QAAQ,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,MAAM,UAAU,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAE5C,IAAI,CAAC,UAAU,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACrC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EACJ,GAAG,IAAI,+CAA+C,GAAG,CAAC,QAAQ,KAAK;gBACvE,eAAe,UAAU,yDAAyD;SACrF,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,oEAAoE;IACpE,qEAAqE;IACrE,mEAAmE;IACnE,0CAA0C;IAC1C,MAAM,OAAO,GACX,IAAI,KAAK,SAAS;QAChB,CAAC,CAAC,gNAAgN;QAClN,CAAC,CAAC,SAAS,CAAC;IAEhB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB;IACrC,mEAAmE;IACnE,8BAA8B;IAC9B,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACvD,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,QAAQ,CAAC,WAAW,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS;IACzB,OAAO,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC;AACvD,CAAC"}

package/dist/utils/json-errors.d.ts

@@ -0,0 +1,16 @@
+export declare function setJsonErrors(enabled: boolean): void;
+export declare function jsonErrorsEnabled(): boolean;
+/**
+ * One error, as one JSON line, on stderr. stdout is left alone: under
+ * `--json` it carries the command's RESULT, and a script reading stdout must
+ * never be handed an error it could parse as a result. The exit code (1) is
+ * what says the command failed.
+ */
+export declare function printJsonError(obj: Record<string, unknown>): void;
+/**
+ * Print an error the CLI caught itself and exit 1: `json` under `--json`,
+ * otherwise `text` exactly as given. Callers pass already-redacted values;
+ * `exitWithCliError` in `errors.ts` does that for a message.
+ */
+export declare function emitCliError(json: Record<string, unknown>, text: string): never;
+//# sourceMappingURL=json-errors.d.ts.map

package/dist/utils/json-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-errors.d.ts","sourceRoot":"","sources":["../../src/utils/json-errors.ts"],"names":[],"mappings":"AAcA,wBAAgB,aAAa,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAEpD;AAED,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAEjE;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,KAAK,CAI/E"}

package/dist/utils/json-errors.js

@@ -0,0 +1,41 @@
+/**
+ * Whether errors in this run are printed as JSON, and the one place they are
+ * written. Deliberately a leaf module (no imports) so the lowest-level code —
+ * `config.ts`'s `requireApiKey` — can use it without pulling in the SDK. The
+ * error formatting itself lives in `errors.ts`.
+ *
+ * Set once per run, before the command's action, from that command's own
+ * `--json` flag — by the `preAction` hook in `commands/checkout.ts`. A process
+ * runs one command, so a process-wide setting is the honest scope, and it
+ * reaches the checks that fail before any request is sent (no key, the
+ * live-key gate) without threading the flag through each of them.
+ */
+let jsonErrors = false;
+export function setJsonErrors(enabled) {
+    jsonErrors = enabled;
+}
+export function jsonErrorsEnabled() {
+    return jsonErrors;
+}
+/**
+ * One error, as one JSON line, on stderr. stdout is left alone: under
+ * `--json` it carries the command's RESULT, and a script reading stdout must
+ * never be handed an error it could parse as a result. The exit code (1) is
+ * what says the command failed.
+ */
+export function printJsonError(obj) {
+    console.error(JSON.stringify(obj));
+}
+/**
+ * Print an error the CLI caught itself and exit 1: `json` under `--json`,
+ * otherwise `text` exactly as given. Callers pass already-redacted values;
+ * `exitWithCliError` in `errors.ts` does that for a message.
+ */
+export function emitCliError(json, text) {
+    if (jsonErrors)
+        printJsonError(json);
+    else
+        console.error(text);
+    return process.exit(1);
+}
+//# sourceMappingURL=json-errors.js.map

package/dist/utils/json-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-errors.js","sourceRoot":"","sources":["../../src/utils/json-errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,MAAM,UAAU,aAAa,CAAC,OAAgB;IAC5C,UAAU,GAAG,OAAO,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,GAA4B;IACzD,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,YAAY,CAAC,IAA6B,EAAE,IAAY;IACtE,IAAI,UAAU;QAAE,cAAc,CAAC,IAAI,CAAC,CAAC;;QAChC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzB,CAAC"}

package/dist/utils/live-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"live-key.d.ts","sourceRoot":"","sources":["../../src/utils/live-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAKlD,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,SAAoB,GAC9B,IAAI,CAgBN;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOlE"}
+{"version":3,"file":"live-key.d.ts","sourceRoot":"","sources":["../../src/utils/live-key.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAMlD,OAAO,EAAE,SAAS,EAAE,CAAC;AAErB,MAAM,WAAW,YAAY;IAC3B,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,YAAY,EAClB,SAAS,EAAE,MAAM,EACjB,WAAW,SAAoB,GAC9B,IAAI,CAYN;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOlE"}

package/dist/utils/live-key.js

@@ -1,5 +1,6 @@
 import chalk from "chalk";
 import { isLiveKey } from "@vonpay/checkout-node";
+import { exitWithCliError } from "./errors.js";
 // The ONE definition of "live key", owned by the SDK (3.0.0+). Re-exported so
 // existing imports of `isLiveKey` from this module keep working; do not
 // re-implement the prefix check here.
@@ -25,8 +26,8 @@ export function requireLiveConfirmation(key, opts, operation, consequence = "is
         console.warn(chalk.yellow(`Live key in use — ${operation} ${consequence}. Proceeding because --confirm-live was passed.`));
         return;
     }
-    console.error(chalk.red(`Refusing to ${operation} with a live key. Pass --confirm-live to acknowledge this is intentional.`));
-    process.exit(1);
+    const message = `Refusing to ${operation} with a live key. Pass --confirm-live to acknowledge this is intentional.`;
+    exitWithCliError(message, chalk.red(message));
 }
 export function warnLiveSecretFlag(key, flag) {
     if (!isLiveKey(key))

package/dist/utils/live-key.js.map

@@ -1 +1 @@
-{"version":3,"file":"live-key.js","sourceRoot":"","sources":["../../src/utils/live-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,8EAA8E;AAC9E,wEAAwE;AACxE,sCAAsC;AACtC,OAAO,EAAE,SAAS,EAAE,CAAC;AAMrB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,IAAkB,EAClB,SAAiB,EACjB,WAAW,GAAG,iBAAiB;IAE/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,qBAAqB,SAAS,IAAI,WAAW,iDAAiD,CAC/F,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,KAAK,CACX,KAAK,CAAC,GAAG,CACP,eAAe,SAAS,2EAA2E,CACpG,CACF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAY;IAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,oBAAoB,IAAI,mJAAmJ,CAC5K,CACF,CAAC;AACJ,CAAC"}
+{"version":3,"file":"live-key.js","sourceRoot":"","sources":["../../src/utils/live-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,8EAA8E;AAC9E,wEAAwE;AACxE,sCAAsC;AACtC,OAAO,EAAE,SAAS,EAAE,CAAC;AAMrB;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAW,EACX,IAAkB,EAClB,SAAiB,EACjB,WAAW,GAAG,iBAAiB;IAE/B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,qBAAqB,SAAS,IAAI,WAAW,iDAAiD,CAC/F,CACF,CAAC;QACF,OAAO;IACT,CAAC;IACD,MAAM,OAAO,GAAG,eAAe,SAAS,2EAA2E,CAAC;IACpH,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAY;IAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC;QAAE,OAAO;IAC5B,OAAO,CAAC,IAAI,CACV,KAAK,CAAC,MAAM,CACV,oBAAoB,IAAI,mJAAmJ,CAC5K,CACF,CAAC;AACJ,CAAC"}

package/dist/utils/spinner.d.ts

@@ -0,0 +1,15 @@
+import { type Ora } from "ora";
+/**
+ * Start the progress spinner for a command — silent under `--json`.
+ *
+ * ⛔ When stderr is not a terminal (a script, a CI step) ora does not animate:
+ * it prints its text once, as `- Capturing payment intent...`, to stderr. Under
+ * `--json` that put a non-JSON line in front of the JSON error, so stderr did
+ * not parse. `doctor` already silenced its spinner under `--json` for the same
+ * reason; every command now does. Without `--json` nothing changes.
+ *
+ * Reads the per-run `--json` setting made by the `preAction` hook in
+ * `commands/checkout.ts`, which runs before any command's action.
+ */
+export declare function startSpinner(text: string): Ora;
+//# sourceMappingURL=spinner.d.ts.map

package/dist/utils/spinner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spinner.d.ts","sourceRoot":"","sources":["../../src/utils/spinner.ts"],"names":[],"mappings":"AAAA,OAAY,EAAE,KAAK,GAAG,EAAE,MAAM,KAAK,CAAC;AAGpC;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,GAAG,CAE9C"}

package/dist/utils/spinner.js

@@ -0,0 +1,18 @@
+import ora from "ora";
+import { jsonErrorsEnabled } from "./json-errors.js";
+/**
+ * Start the progress spinner for a command — silent under `--json`.
+ *
+ * ⛔ When stderr is not a terminal (a script, a CI step) ora does not animate:
+ * it prints its text once, as `- Capturing payment intent...`, to stderr. Under
+ * `--json` that put a non-JSON line in front of the JSON error, so stderr did
+ * not parse. `doctor` already silenced its spinner under `--json` for the same
+ * reason; every command now does. Without `--json` nothing changes.
+ *
+ * Reads the per-run `--json` setting made by the `preAction` hook in
+ * `commands/checkout.ts`, which runs before any command's action.
+ */
+export function startSpinner(text) {
+    return ora({ text, isSilent: jsonErrorsEnabled() }).start();
+}
+//# sourceMappingURL=spinner.js.map

package/dist/utils/spinner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spinner.js","sourceRoot":"","sources":["../../src/utils/spinner.ts"],"names":[],"mappings":"AAAA,OAAO,GAAiB,MAAM,KAAK,CAAC;AACpC,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAAC,IAAY;IACvC,OAAO,GAAG,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,iBAAiB,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAC9D,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vonpay/checkout-cli",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "Von Payments CLI — developer tools for checkout integration",
   "license": "MIT",
   "type": "module",
@@ -15,7 +15,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@vonpay/checkout-node": "^3.0.0",
+    "@vonpay/checkout-node": "^3.3.0",
     "commander": "^13.0.0",
     "chalk": "^5.4.0",
     "ora": "^8.2.0"