agentspend 0.1.8 → 0.1.10

package/dist/commands/card.js

@@ -12,6 +12,7 @@ const CARD_FILE = (0, node_path_1.join)(CONFIG_DIR, "card.json");
 const API_BASE = process.env.AGENTSPEND_API_URL ?? "https://api.agentspend.co";
 async function ensureConfigDir() {
     await (0, promises_1.mkdir)(CONFIG_DIR, { recursive: true });
+    await (0, promises_1.chmod)(CONFIG_DIR, 0o700);
 }
 function openUrl(url) {
     const cmd = node_process_1.platform === "darwin" ? "open" : node_process_1.platform === "win32" ? "start" : "xdg-open";
@@ -144,47 +145,31 @@ function registerCardCommands(program) {
     });
     card
         .command("configure")
-        .description("Set up or reconfigure your card — opens the configuration page in your browser")
+        .description("Get configuration URL to set up or reconfigure your card")
         .action(async () => {
         try {
             // Check if card.json exists — reconfigure flow
             const cardData = await readCardFile();
             if (cardData) {
                 const result = await requestConfigure(cardData.card_id, cardData.card_secret);
-                console.log("Opened configuration page in browser.");
-                openUrl(result.configure_url);
+                console.log(`Configuration URL: ${result.configure_url}`);
+                console.log();
+                console.log("Open this URL in your browser to reconfigure (change weekly limit, swap card, or remove).");
                 return;
             }
             // First-time setup flow
             const result = await createCard();
-            console.log(`Setup ID: ${result.setup_id}`);
-            console.log(`Opening configuration page in browser...`);
-            openUrl(result.setup_url);
             await ensureConfigDir();
             await (0, promises_1.writeFile)(SETUP_FILE, JSON.stringify({ setup_id: result.setup_id }, null, 2));
-            console.log("Waiting for setup to complete...");
-            while (true) {
-                await sleep(3000);
-                const status = await getSetupStatus(result.setup_id);
-                if (status.status === "ready") {
-                    console.log(`Card is ready!`);
-                    if (status.card_id) {
-                        await (0, promises_1.writeFile)(CARD_FILE, JSON.stringify({
-                            card_id: status.card_id,
-                            card_secret: status.card_secret,
-                        }, null, 2));
-                        console.log(`Card ID saved to ${CARD_FILE}`);
-                    }
-                    // Clean up setup file
-                    await (0, promises_1.unlink)(SETUP_FILE).catch(() => { });
-                    break;
-                }
-                if (status.status === "expired" || status.status === "failed") {
-                    await (0, promises_1.unlink)(SETUP_FILE).catch(() => { });
-                    throw new Error(`Setup ${status.status}. Please try again.`);
-                }
-                process.stdout.write(".");
-            }
+            await (0, promises_1.chmod)(SETUP_FILE, 0o600);
+            console.log(`Configuration URL: ${result.setup_url}`);
+            console.log(`Expires: ${result.expires_at}`);
+            console.log();
+            console.log("Complete setup in your browser:");
+            console.log("  1. Set your weekly spending limit");
+            console.log("  2. Add your card via Stripe");
+            console.log();
+            console.log("Then run 'agentspend card status' to verify completion.");
         }
         catch (err) {
             console.error(`\nError: ${err instanceof Error ? err.message : err}`);

package/dist/commands/wallet.js

@@ -8,6 +8,7 @@ const CONFIG_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), ".agentspend"
 const WALLET_FILE = (0, node_path_1.join)(CONFIG_DIR, "wallet.json");
 async function ensureConfigDir() {
     await (0, promises_1.mkdir)(CONFIG_DIR, { recursive: true });
+    await (0, promises_1.chmod)(CONFIG_DIR, 0o700);
 }
 async function readWalletConfig() {
     try {
@@ -49,7 +50,9 @@ function registerWalletCommands(program) {
                 private_key: privateKey,
             };
             await (0, promises_1.writeFile)(WALLET_FILE, JSON.stringify(config, null, 2));
+            await (0, promises_1.chmod)(WALLET_FILE, 0o600);
             console.log(`Wallet created. Address: ${account.address} — Fund it with USDC on Base.`);
+            console.log(`Private key saved to ${WALLET_FILE} (owner-only permissions). Keep this file secure.`);
         }
         catch (err) {
             console.error(`Error: ${err instanceof Error ? err.message : err}`);

package/package.json

@@ -1,11 +1,16 @@
 {
   "name": "agentspend",
-  "version": "0.1.8",
+  "version": "0.1.10",
   "description": "CLI for AgentSpend — manage cards and crypto wallets for AI agent payments",
+  "homepage": "https://github.com/jpbonch/agentspend",
+  "license": "MIT",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/jpbonch/agentspend.git"
   },
+  "engines": {
+    "node": ">=18"
+  },
   "bin": {
     "agentspend": "dist/index.js"
   },

package/src/commands/card.ts

@@ -1,5 +1,5 @@
 import { Command } from "commander";
-import { readFile, writeFile, mkdir, unlink } from "node:fs/promises";
+import { readFile, writeFile, mkdir, unlink, chmod } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { exec } from "node:child_process";
@@ -42,6 +42,7 @@ const API_BASE = process.env.AGENTSPEND_API_URL ?? "https://api.agentspend.co";
 
 async function ensureConfigDir(): Promise<void> {
   await mkdir(CONFIG_DIR, { recursive: true });
+  await chmod(CONFIG_DIR, 0o700);
 }
 
 function openUrl(url: string): void {
@@ -194,53 +195,33 @@ export function registerCardCommands(program: Command): void {
 
   card
     .command("configure")
-    .description("Set up or reconfigure your card — opens the configuration page in your browser")
+    .description("Get configuration URL to set up or reconfigure your card")
     .action(async () => {
       try {
         // Check if card.json exists — reconfigure flow
         const cardData = await readCardFile();
         if (cardData) {
           const result = await requestConfigure(cardData.card_id, cardData.card_secret);
-          console.log("Opened configuration page in browser.");
-          openUrl(result.configure_url);
+          console.log(`Configuration URL: ${result.configure_url}`);
+          console.log();
+          console.log("Open this URL in your browser to reconfigure (change weekly limit, swap card, or remove).");
           return;
         }
 
         // First-time setup flow
         const result = await createCard();
-        console.log(`Setup ID: ${result.setup_id}`);
-        console.log(`Opening configuration page in browser...`);
-        openUrl(result.setup_url);
-
         await ensureConfigDir();
         await writeFile(SETUP_FILE, JSON.stringify({ setup_id: result.setup_id }, null, 2));
-
-        console.log("Waiting for setup to complete...");
-        while (true) {
-          await sleep(3000);
-          const status = await getSetupStatus(result.setup_id);
-
-          if (status.status === "ready") {
-            console.log(`Card is ready!`);
-            if (status.card_id) {
-              await writeFile(CARD_FILE, JSON.stringify({
-                card_id: status.card_id,
-                card_secret: status.card_secret,
-              }, null, 2));
-              console.log(`Card ID saved to ${CARD_FILE}`);
-            }
-            // Clean up setup file
-            await unlink(SETUP_FILE).catch(() => {});
-            break;
-          }
-
-          if (status.status === "expired" || status.status === "failed") {
-            await unlink(SETUP_FILE).catch(() => {});
-            throw new Error(`Setup ${status.status}. Please try again.`);
-          }
-
-          process.stdout.write(".");
-        }
+        await chmod(SETUP_FILE, 0o600);
+
+        console.log(`Configuration URL: ${result.setup_url}`);
+        console.log(`Expires: ${result.expires_at}`);
+        console.log();
+        console.log("Complete setup in your browser:");
+        console.log("  1. Set your weekly spending limit");
+        console.log("  2. Add your card via Stripe");
+        console.log();
+        console.log("Then run 'agentspend card status' to verify completion.");
       } catch (err: unknown) {
         console.error(`\nError: ${err instanceof Error ? err.message : err}`);
         process.exit(1);

package/src/commands/wallet.ts

@@ -1,5 +1,5 @@
 import { Command } from "commander";
-import { readFile, writeFile, mkdir } from "node:fs/promises";
+import { readFile, writeFile, mkdir, chmod } from "node:fs/promises";
 import { homedir } from "node:os";
 import { join } from "node:path";
 
@@ -8,6 +8,7 @@ const WALLET_FILE = join(CONFIG_DIR, "wallet.json");
 
 async function ensureConfigDir(): Promise<void> {
   await mkdir(CONFIG_DIR, { recursive: true });
+  await chmod(CONFIG_DIR, 0o700);
 }
 
 interface WalletConfig {
@@ -61,8 +62,10 @@ export function registerWalletCommands(program: Command): void {
         };
 
         await writeFile(WALLET_FILE, JSON.stringify(config, null, 2));
+        await chmod(WALLET_FILE, 0o600);
 
         console.log(`Wallet created. Address: ${account.address} — Fund it with USDC on Base.`);
+        console.log(`Private key saved to ${WALLET_FILE} (owner-only permissions). Keep this file secure.`);
       } catch (err: unknown) {
         console.error(`Error: ${err instanceof Error ? err.message : err}`);
         process.exit(1);