arispay 0.1.4 → 0.1.7

package/dist/cli.js

@@ -110,75 +110,69 @@ ${bold("Get started")}
     }
   }
 }
-async function collectAndTokenizeCard(client, userId) {
-  console.log(`
-  ${dim("Enter your card details below. They are sent directly to Fiserv for")}`);
-  console.log(`  ${dim("tokenization \u2014 ArisPay never sees or stores your full card number.")}
-`);
-  const cardNumber = await promptSecret(`  Card number: `);
-  if (!cardNumber) {
-    console.log(dim("  Cancelled."));
-    return false;
-  }
-  const expiry = await prompt(`  Expiry ${dim("(MM/YY)")}: `);
-  if (!expiry) {
-    console.log(dim("  Cancelled."));
-    return false;
-  }
-  const securityCode = await promptSecret(`  CVV: `);
-  if (!securityCode) {
-    console.log(dim("  Cancelled."));
-    return false;
-  }
-  const [expiryMonth, expiryYear] = expiry.split("/").map((s) => s.trim());
-  if (!expiryMonth || !expiryYear) {
-    console.log(`  ${dim("Invalid expiry format. Use MM/YY.")}`);
-    return false;
-  }
+async function setupCardViaBrowser(endUserId, agentId) {
+  const config = loadConfig(BRAND);
+  const { apiKey, environment, baseUrl } = config;
+  const defaultUrl = environment === "production" ? "https://api.arispay.app" : "https://api-production-79ea.up.railway.app";
+  const apiUrl = baseUrl || defaultUrl;
   console.log(`
-  ${dim("Tokenizing and verifying card...")}`);
+  ${dim("Creating secure card setup link...")}`);
   try {
-    const result = await client.users.addPaymentMethod({
-      userId,
-      type: "card",
-      cardNumber: cardNumber.replace(/\s/g, ""),
-      expiryMonth,
-      expiryYear: expiryYear.length === 2 ? `20${expiryYear}` : expiryYear,
-      securityCode
+    const res = await fetch(`${apiUrl}/v1/card-setup-sessions`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${apiKey}`
+      },
+      body: JSON.stringify({ endUserId, ...agentId ? { agentId } : {} }),
+      signal: AbortSignal.timeout(15e3)
     });
-    const r = result;
-    if (r.requiresVerification) {
-      const challengeUrl = r.challengeUrl;
-      if (challengeUrl) {
-        console.log();
-        console.log(`  ${bold("Card verification required")}`);
-        console.log(`  ${dim("Your bank requires 3D Secure verification. Open this link:")}
-`);
-        console.log(`    ${cyan(challengeUrl)}
-`);
-        console.log(`  ${dim("Complete the verification in your browser, then come back here.")}`);
-        await prompt(`
-  Press Enter when done...`);
-        success("Card added (verification pending)\n");
-      } else {
-        console.log();
-        success("Card tokenized (verification in progress)\n");
-      }
-      console.log(`  ${bold("Card:")}   ${r.cardBrand?.toUpperCase() || "Card"} ending in ${r.cardLast4 || "****"}
-`);
-      return true;
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error(body.error?.message || `Failed to create card setup (HTTP ${res.status})`);
     }
+    const data = await res.json();
     console.log();
-    success(`Card verified!
+    console.log(`  ${bold("Open this link to securely add and verify your card:")}
+`);
+    console.log(`    ${cyan(data.setupUrl)}
+`);
+    console.log(`  ${dim("Your card details are entered on a secure page hosted by ArisPay.")}`);
+    console.log(`  ${dim("3D Secure verification is handled automatically in the browser.")}`);
+    console.log(`  ${dim("This link expires in 15 minutes.")}
+`);
+    console.log(`  ${dim("Waiting for you to complete card setup...")}`);
+    const deadline = Date.now() + 15 * 60 * 1e3;
+    while (Date.now() < deadline) {
+      await new Promise((r) => setTimeout(r, 3e3));
+      try {
+        const statusRes = await fetch(`${apiUrl}/v1/card-setup-sessions/${data.token}/status`, {
+          signal: AbortSignal.timeout(1e4)
+        });
+        const statusData = await statusRes.json();
+        if (statusData.status === "completed") {
+          console.log();
+          success("Card verified!\n");
+          console.log(`  ${bold("Card:")}   ${statusData.cardBrand?.toUpperCase() || "Card"} ending in ${statusData.cardLast4 || "****"}`);
+          console.log(`
+  ${dim("Your card is linked and verified. All payments will process instantly.")}
 `);
-    console.log(`  ${bold("Card:")}   ${r.cardBrand?.toUpperCase() || "Card"} ending in ${r.cardLast4 || "****"}`);
+          return true;
+        }
+        if (statusData.status === "failed") {
+          console.log();
+          console.error(`  \x1B[31m\u2717\x1B[0m Card verification failed. Please try again.`);
+          return false;
+        }
+      } catch {
+      }
+    }
     console.log(`
-  ${dim("Your card is now linked and verified. You can make payments.")}
-`);
-    return true;
+  ${dim("Card setup link expired. Run option [2] to try again.")}`);
+    return false;
   } catch (e) {
     console.log();
-    console.error(`  \x1B[31m\u2717\x1B[0m ${e.message || "Failed to tokenize card"}`);
+    console.error(`  \x1B[31m\u2717\x1B[0m ${e.message || "Failed to start card setup"}`);
     return false;
   }
 }
@@ -197,10 +191,11 @@ ${bold("Connect your agent to ArisPay")}`);
   ${dim("How does your agent make payments?")}
 `);
   console.log(`  ${cyan("[1]")} Platform   ${dim("\u2014 Your app triggers payments on behalf of the agent")}`);
-  console.log(`  ${cyan("[2]")} Autonomous ${dim("\u2014 The agent decides when to pay, within spend limits you set")}
+  console.log(`  ${cyan("[2]")} Autonomous ${dim("\u2014 The agent decides when to pay, within spend limits you set")}`);
+  console.log(`  ${cyan("[3]")} Both       ${dim("\u2014 Platform and autonomous, depending on the transaction")}
 `);
   const modeChoice = await prompt(`  Enter choice ${dim("[1]")}: `);
-  const mode = modeChoice === "2" ? "autonomous" : "platform";
+  const mode = modeChoice === "2" ? "autonomous" : modeChoice === "3" ? "both" : "platform";
   console.log(`
   ${dim("Connecting agent...")}`);
   try {
@@ -225,7 +220,7 @@ ${bold("Connect your agent to ArisPay")}`);
     console.log(`  ${bold("Mode:")}      ${a.mode || mode}`);
     console.log(`  ${bold("Status:")}    ${a.status}
 `);
-    if (mode === "autonomous") {
+    if (mode === "autonomous" || mode === "both") {
       console.log(`  ${bold("Set spend limits")}`);
       console.log(`  ${dim("Autonomous agents need spend limits so they can only spend within bounds you control.")}
 `);
@@ -284,7 +279,7 @@ ${bold("Connect your agent to ArisPay")}`);
             return;
           }
         }
-        const cardOk = await collectAndTokenizeCard(client, endUserId);
+        const cardOk = await setupCardViaBrowser(endUserId, a.id);
         if (!cardOk) return;
         const topupStr = await prompt(`
   Amount to load ${dim("(e.g. 50.00)")}: $`);
@@ -351,7 +346,8 @@ ${bold("Add a payment method")}`);
 `);
   const methodChoice = await prompt(`  Enter choice: `);
   if (methodChoice === "1") {
-    await collectAndTokenizeCard(client, userId);
+    const storedAgentId = config.agentId;
+    await setupCardViaBrowser(userId, storedAgentId);
   } else if (methodChoice === "2") {
     console.log();
     const chain = await prompt(`  Chain ${dim("(ethereum, base, polygon, solana)")}: `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arispay",
-  "version": "0.1.4",
+  "version": "0.1.7",
   "description": "SDK and CLI for enabling agent-initiated payments via Visa TAP + Fiserv",
   "type": "module",
   "main": "./dist/index.js",

package/src/cli.ts

@@ -130,69 +130,82 @@ async function postInitMenu(config: { apiKey?: string; environment?: string; bas
   }
 }
 
-// ── Card Tokenization + 3DS Helper ──────────────────────────────────
+// ── Card Setup Helper (browser-based with 3DS) ─────────────────────
 
-async function collectAndTokenizeCard(
-  client: ArisPayClient,
-  userId: string,
+async function setupCardViaBrowser(
+  endUserId: string,
+  agentId?: string,
 ): Promise<boolean> {
-  console.log(`\n  ${dim('Enter your card details below. They are sent directly to Fiserv for')}`);
-  console.log(`  ${dim('tokenization — ArisPay never sees or stores your full card number.')}\n`);
+  const config = loadConfig(BRAND);
+  const { apiKey, environment, baseUrl } = config;
+  const defaultUrl = environment === 'production'
+    ? 'https://api.arispay.app'
+    : 'https://api-production-79ea.up.railway.app';
+  const apiUrl = baseUrl || defaultUrl;
 
-  const cardNumber = await promptSecret(`  Card number: `);
-  if (!cardNumber) { console.log(dim('  Cancelled.')); return false; }
+  console.log(`\n  ${dim('Creating secure card setup link...')}`);
 
-  const expiry = await prompt(`  Expiry ${dim('(MM/YY)')}: `);
-  if (!expiry) { console.log(dim('  Cancelled.')); return false; }
+  try {
+    // Create card setup session
+    const res = await fetch(`${apiUrl}/v1/card-setup-sessions`, {
+      method: 'POST',
+      headers: {
+        'Content-Type': 'application/json',
+        Authorization: `Bearer ${apiKey}`,
+      },
+      body: JSON.stringify({ endUserId, ...(agentId ? { agentId } : {}) }),
+      signal: AbortSignal.timeout(15_000),
+    });
 
-  const securityCode = await promptSecret(`  CVV: `);
-  if (!securityCode) { console.log(dim('  Cancelled.')); return false; }
+    if (!res.ok) {
+      const body = await res.json().catch(() => ({}));
+      throw new Error((body as any).error?.message || `Failed to create card setup (HTTP ${res.status})`);
+    }
 
-  const [expiryMonth, expiryYear] = expiry.split('/').map(s => s.trim());
-  if (!expiryMonth || !expiryYear) {
-    console.log(`  ${dim('Invalid expiry format. Use MM/YY.')}`);
-    return false;
-  }
+    const data = await res.json() as { token: string; setupUrl: string; expiresAt: string };
 
-  console.log(`\n  ${dim('Tokenizing and verifying card...')}`);
-  try {
-    const result = await client.users.addPaymentMethod({
-      userId,
-      type: 'card',
-      cardNumber: cardNumber.replace(/\s/g, ''),
-      expiryMonth,
-      expiryYear: expiryYear.length === 2 ? `20${expiryYear}` : expiryYear,
-      securityCode,
-    });
-    const r = result as any;
-
-    if (r.requiresVerification) {
-      // 3DS verification required — open browser
-      const challengeUrl = r.challengeUrl;
-      if (challengeUrl) {
-        console.log();
-        console.log(`  ${bold('Card verification required')}`);
-        console.log(`  ${dim('Your bank requires 3D Secure verification. Open this link:')}\n`);
-        console.log(`    ${cyan(challengeUrl)}\n`);
-        console.log(`  ${dim('Complete the verification in your browser, then come back here.')}`);
-        await prompt(`\n  Press Enter when done...`);
-        success('Card added (verification pending)\n');
-      } else {
-        console.log();
-        success('Card tokenized (verification in progress)\n');
+    console.log();
+    console.log(`  ${bold('Open this link to securely add and verify your card:')}\n`);
+    console.log(`    ${cyan(data.setupUrl)}\n`);
+    console.log(`  ${dim('Your card details are entered on a secure page hosted by ArisPay.')}`);
+    console.log(`  ${dim('3D Secure verification is handled automatically in the browser.')}`);
+    console.log(`  ${dim('This link expires in 15 minutes.')}\n`);
+
+    // Poll for completion
+    console.log(`  ${dim('Waiting for you to complete card setup...')}`);
+    const deadline = Date.now() + 15 * 60 * 1000; // 15 min
+    while (Date.now() < deadline) {
+      await new Promise(r => setTimeout(r, 3000));
+
+      try {
+        const statusRes = await fetch(`${apiUrl}/v1/card-setup-sessions/${data.token}/status`, {
+          signal: AbortSignal.timeout(10_000),
+        });
+        const statusData = await statusRes.json() as any;
+
+        if (statusData.status === 'completed') {
+          console.log();
+          success('Card verified!\n');
+          console.log(`  ${bold('Card:')}   ${statusData.cardBrand?.toUpperCase() || 'Card'} ending in ${statusData.cardLast4 || '****'}`);
+          console.log(`\n  ${dim('Your card is linked and verified. All payments will process instantly.')}\n`);
+          return true;
+        }
+
+        if (statusData.status === 'failed') {
+          console.log();
+          console.error(`  \x1b[31m✗\x1b[0m Card verification failed. Please try again.`);
+          return false;
+        }
+      } catch {
+        // Network error — keep polling
       }
-      console.log(`  ${bold('Card:')}   ${r.cardBrand?.toUpperCase() || 'Card'} ending in ${r.cardLast4 || '****'}\n`);
-      return true;
     }
 
-    console.log();
-    success(`Card verified!\n`);
-    console.log(`  ${bold('Card:')}   ${r.cardBrand?.toUpperCase() || 'Card'} ending in ${r.cardLast4 || '****'}`);
-    console.log(`\n  ${dim('Your card is now linked and verified. You can make payments.')}\n`);
-    return true;
+    console.log(`\n  ${dim('Card setup link expired. Run option [2] to try again.')}`);
+    return false;
   } catch (e: any) {
     console.log();
-    console.error(`  \x1b[31m✗\x1b[0m ${e.message || 'Failed to tokenize card'}`);
+    console.error(`  \x1b[31m✗\x1b[0m ${e.message || 'Failed to start card setup'}`);
     return false;
   }
 }
@@ -209,10 +222,11 @@ async function wizardConnectAgent(client: ArisPayClient): Promise<void> {
 
   console.log(`\n  ${dim('How does your agent make payments?')}\n`);
   console.log(`  ${cyan('[1]')} Platform   ${dim('— Your app triggers payments on behalf of the agent')}`);
-  console.log(`  ${cyan('[2]')} Autonomous ${dim('— The agent decides when to pay, within spend limits you set')}\n`);
+  console.log(`  ${cyan('[2]')} Autonomous ${dim('— The agent decides when to pay, within spend limits you set')}`);
+  console.log(`  ${cyan('[3]')} Both       ${dim('— Platform and autonomous, depending on the transaction')}\n`);
 
   const modeChoice = await prompt(`  Enter choice ${dim('[1]')}: `);
-  const mode = modeChoice === '2' ? 'autonomous' : 'platform';
+  const mode = modeChoice === '2' ? 'autonomous' : modeChoice === '3' ? 'both' : 'platform';
 
   console.log(`\n  ${dim('Connecting agent...')}`);
 
@@ -240,7 +254,7 @@ async function wizardConnectAgent(client: ArisPayClient): Promise<void> {
     console.log(`  ${bold('Status:')}    ${a.status}\n`);
 
     // Prompt for spend limits when autonomous
-    if (mode === 'autonomous') {
+    if (mode === 'autonomous' || mode === 'both') {
       console.log(`  ${bold('Set spend limits')}`);
       console.log(`  ${dim('Autonomous agents need spend limits so they can only spend within bounds you control.')}\n`);
 
@@ -305,7 +319,7 @@ async function wizardConnectAgent(client: ArisPayClient): Promise<void> {
         }
 
         // Collect card details and verify via 3DS
-        const cardOk = await collectAndTokenizeCard(client, endUserId);
+        const cardOk = await setupCardViaBrowser(endUserId, a.id);
         if (!cardOk) return;
 
         // Top up
@@ -373,7 +387,8 @@ async function wizardAddPaymentMethod(client: ArisPayClient): Promise<void> {
   const methodChoice = await prompt(`  Enter choice: `);
 
   if (methodChoice === '1') {
-    await collectAndTokenizeCard(client, userId);
+    const storedAgentId = (config as any).agentId;
+    await setupCardViaBrowser(userId, storedAgentId);
   } else if (methodChoice === '2') {
     console.log();
     const chain = await prompt(`  Chain ${dim('(ethereum, base, polygon, solana)')}: `);