latinfo 0.5.6 → 0.5.7

package/README.md

@@ -1,40 +1,53 @@
-# Latinfo
+# latinfo
 
-Tax registry API for Latin America. One request, one response, no infrastructure.
+Tax registry API for Latin America. Query RUC, DNI, and company data from Peru's SUNAT. 18M+ records, updated daily, sub-100ms from anywhere.
 
 ## Install
 
 ```bash
 npm install -g latinfo
+latinfo login
 ```
 
-## Quick start
+`latinfo login` opens GitHub OAuth in your browser and stores your API key in `~/.latinfo/config.json`. Takes 30 seconds.
 
-```bash
-# Login with GitHub
-latinfo login
+## CLI
 
-# Lookup by RUC
-latinfo ruc 20100047218
+```bash
+latinfo ruc 20100047218           # Lookup by RUC
+latinfo dni 12345678              # Lookup by DNI (converts to RUC automatically)
+latinfo search "banco de credito" # Search by company name
+latinfo ruc 20100047218 --json    # JSON output (for scripts and AI agents)
+```
 
-# Lookup by DNI (converts to RUC automatically)
-latinfo dni 12345678
+No login needed for demo data (5 embedded records). Run `latinfo login` for 18M+ records.
 
-# Search by company name
-latinfo search "banco de credito"
+## SDK
 
-# JSON output (for scripts and AI agents)
-latinfo ruc 20100047218 --json
+```bash
+npm install latinfo
 ```
 
-## What you get
+```typescript
+import { Latinfo } from 'latinfo';
+
+const client = new Latinfo('YOUR_API_KEY');
+
+// Lookup by RUC
+const company = await client.pe.ruc('20100047218');
+console.log(company.razon_social); // BANCO DE CREDITO DEL PERU
+
+// Lookup by DNI
+const person = await client.pe.dni('12345678');
 
-- RUC lookup in ~80ms from any location
-- DNI to RUC conversion with check digit validation
-- Company name search with ranked results, prefix autocomplete, and LATAM abbreviation handling (S.A.C., E.I.R.L., S.R.L.)
-- 18M+ records from Peru's SUNAT official registry, updated daily
-- All data sourced from official government registries. Public records, no scraping.
-- Free: 1M requests/month. No credit card. Self-hosting 18M records requires a database server with enough RAM for full-text search indexes, a daily import pipeline, and ongoing maintenance.
+// Search by company name
+const results = await client.pe.search('banco de credito');
+
+// Rotate API key
+const { api_key } = await client.rotate();
+```
+
+Get your API key: `npm install -g latinfo && latinfo login`
 
 ## API
 
@@ -42,8 +55,9 @@ Base URL: `https://api.latinfo.dev`
 
 ```
 GET /pe/ruc/:ruc       → Lookup by RUC (11 digits)
-GET /pe/dni/:dni       → Lookup by DNI (8 digits, converts to RUC)
+GET /pe/dni/:dni       → Lookup by DNI (8 digits)
 GET /pe/search?q=...   → Search by company name
+POST /auth/rotate      → Rotate API key
 ```
 
 ```bash
@@ -51,50 +65,50 @@ curl -H "Authorization: Bearer YOUR_API_KEY" \
   https://api.latinfo.dev/pe/ruc/20100047218
 ```
 
-Your API key is stored in `~/.latinfo/config.json` after `latinfo login`.
-
-## SDK
-
-```typescript
-import { latinfo } from 'latinfo';
-
-const client = latinfo('YOUR_API_KEY');
-
-const company = await client.ruc('20100047218');
-console.log(company.razon_social); // BANCO DE CREDITO DEL PERU
-```
+Full API reference: [latinfo.dev/docs](https://latinfo.dev/docs)
 
 ## Response fields
 
 | Field | Description | Example |
-|-------|------------|---------|
-| `ruc` | RUC number (11 digits) | 20100047218 |
-| `razon_social` | Business name | BANCO DE CREDITO DEL PERU |
-| `estado` | Tax status | ACTIVO |
-| `condicion` | Condition | HABIDO |
-| `ubigeo` | Location code | 150114 |
-| `tipo_via` | Street type | JR. |
-| `nombre_via` | Street name | CENTENARIO |
-| `numero` | Street number | 156 |
+|-------|-------------|---------|
+| `ruc` | RUC number (11 digits) | `20100047218` |
+| `razon_social` | Business name | `BANCO DE CREDITO DEL PERU` |
+| `estado` | Tax status | `ACTIVO` |
+| `condicion` | Condition | `HABIDO` |
+| `ubigeo` | Location code | `150114` |
+| `tipo_via` | Street type | `JR.` |
+| `nombre_via` | Street name | `CENTENARIO` |
+| `numero` | Street number | `156` |
+| `interior` | Interior / apt | `-` |
+| `lote` | Lot | `-` |
+| `codigo_zona` | Zone code | `URB.` |
+| `tipo_zona` | Zone name | `BALCONCILLO` |
+| `departamento` | Department | `-` |
+| `manzana` | Block | `-` |
+| `kilometro` | Kilometer | `-` |
 
 ## What you don't have to do
 
 You don't download 364MB from SUNAT. You don't parse Latin1 with escaped pipe delimiters. You don't write a check digit algorithm. You don't build a search index that handles S.A.C. and E.I.R.L. You don't set up a daily import pipeline. You don't manage servers.
 
-We do all of that. Daily. For free.
+We do all of that. Daily.
 
 ## Pricing
 
-- **Free**: 1M requests/month
+- **Free**: 100,000 requests/day — no credit card
 - **Pro**: 10M requests/month — $1/month
 
 ## Countries
 
-- **Peru** (SUNAT) — RUC, DNI, company name search. 18M+ records, updated daily.
-- Brazil, Mexico, Colombia, Argentina, Chile — in development.
+| Country | Data | Status |
+|---------|------|--------|
+| Peru | SUNAT padrón — RUC, DNI, company search | Active |
+| Brazil, Mexico, Colombia, Argentina, Chile | — | In development |
 
 ## Links
 
 - Website: [latinfo.dev](https://latinfo.dev)
-- API docs: [api.latinfo.dev/openapi.json](https://api.latinfo.dev/openapi.json)
+- Docs: [latinfo.dev/docs](https://latinfo.dev/docs)
+- Changelog: [latinfo.dev/changelog](https://latinfo.dev/changelog)
+- Status: [carrera.instatus.com](https://carrera.instatus.com)
 - Email: [hola@latinfo.dev](mailto:hola@latinfo.dev)

package/dist/index.js

@@ -10,7 +10,7 @@ const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
 const child_process_1 = require("child_process");
 const demo_data_1 = require("./demo-data");
-const VERSION = '0.5.3';
+const VERSION = '0.5.7';
 const API_URL = process.env.LATINFO_API_URL || 'https://api.latinfo.dev';
 const GITHUB_CLIENT_ID = process.env.GITHUB_CLIENT_ID || 'Ov23li5fcQaiCsVtaMKK';
 const CONFIG_DIR = path_1.default.join(os_1.default.homedir(), '.latinfo');
@@ -32,8 +32,8 @@ function loadConfig() {
     }
 }
 function saveConfig(config) {
-    fs_1.default.mkdirSync(CONFIG_DIR, { recursive: true });
-    fs_1.default.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
+    fs_1.default.mkdirSync(CONFIG_DIR, { recursive: true, mode: 0o700 });
+    fs_1.default.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 0o600 });
 }
 function deleteConfig() {
     try {
@@ -46,12 +46,13 @@ function openBrowser(url) {
     const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
     (0, child_process_1.exec)(`${cmd} "${url}"`);
 }
-async function waitForCallback(port) {
+async function waitForCallback(port, expectedState) {
     return new Promise((resolve, reject) => {
         const server = http_1.default.createServer((req, res) => {
             const url = new URL(req.url || '', `http://localhost:${port}`);
             const code = url.searchParams.get('code');
-            if (code) {
+            const state = url.searchParams.get('state');
+            if (code && state === expectedState) {
                 res.writeHead(200, { 'Content-Type': 'text/html' });
                 res.end('<h2>Done. You can close this window.</h2>');
                 server.close();
@@ -59,9 +60,9 @@ async function waitForCallback(port) {
             }
             else {
                 res.writeHead(400);
-                res.end('Missing code');
+                res.end('Authorization failed');
                 server.close();
-                reject(new Error('No code received from GitHub'));
+                reject(new Error('Invalid state or missing code'));
             }
         });
         server.listen(port, () => { });
@@ -104,10 +105,11 @@ async function login() {
     const port = 8400;
     const redirectUri = `http://localhost:${port}/callback`;
     const scope = 'read:user,user:email';
-    const authUrl = `https://github.com/login/oauth/authorize?client_id=${GITHUB_CLIENT_ID}&redirect_uri=${encodeURIComponent(redirectUri)}&scope=${scope}`;
+    const state = crypto.randomUUID();
+    const authUrl = `https://github.com/login/oauth/authorize?client_id=${GITHUB_CLIENT_ID}&redirect_uri=${encodeURIComponent(redirectUri)}&scope=${scope}&state=${state}`;
     console.log('Opening GitHub...');
     openBrowser(authUrl);
-    const code = await waitForCallback(port);
+    const code = await waitForCallback(port, state);
     const authRes = await fetch(`${API_URL}/auth/github`, {
         method: 'POST',
         headers: { 'Content-Type': 'application/json' },
@@ -342,83 +344,85 @@ function logout() {
     console.log('Logged out.');
 }
 function help() {
-    console.log(`latinfo v${VERSION} — Public data API for Latin America
-
-API base: ${API_URL}
+    console.log(`latinfo v${VERSION} — Tax registry API for Latin America
 
 USAGE
   latinfo <command> [args] [--json]
 
+QUICK START
+  npm install -g latinfo
+  latinfo login                      # GitHub OAuth, 30 seconds
+  latinfo ruc 20100047218            # Banco de Crédito del Perú
+  latinfo search "banco de credito"  # search by company name
+  latinfo ruc 20100047218 --json     # JSON output
+
+  Works instantly with ${Object.keys(demo_data_1.DEMO_DATA).length} embedded records (no login needed).
+  Run 'latinfo login' for 18M+ records and DNI lookup.
+
 COMMANDS
   login
-    Authenticate via GitHub OAuth. Opens a browser, waits for callback
-    on localhost:8400, and stores the API key in ~/.latinfo/config.json.
+    GitHub OAuth. Opens browser, waits for callback on localhost:8400,
+    stores API key in ~/.latinfo/config.json.
 
   logout
-    Remove stored credentials from ~/.latinfo/config.json.
+    Remove stored credentials.
 
   whoami
-    Show the authenticated GitHub username.
-    Output fields (--json): username, api_key
-
-  plan
-    Show current plan and limits.
-    Output fields (--json): plan, limit
+    Show authenticated GitHub username.
+    --json: { username, api_key }
 
   ruc <ruc>
-    Lookup a Peruvian taxpayer by RUC (11 digits).
-    Output fields (--json): ruc, razon_social, estado, condicion,
-      ubigeo, tipo_via, nombre_via, numero, codigo_zona, tipo_zona,
-      departamento, provincia, distrito, direccion_completa, tipo_contribuyente
+    Lookup by RUC (11 digits).
+    --json fields: ruc, razon_social, estado, condicion, ubigeo,
+      tipo_via, nombre_via, numero, interior, lote, codigo_zona,
+      tipo_zona, departamento, manzana, kilometro
 
   dni <dni>
-    Lookup a Peruvian taxpayer by DNI (8 digits). Finds the RUC
-    associated with the person and returns the same fields as 'ruc'.
-    Output fields (--json): same as ruc
+    Lookup by DNI (8 digits). Converts to RUC automatically.
+    --json fields: same as ruc
 
   search <query>
-    Search taxpayers by business name (razón social). Returns an array.
-    Output fields (--json): array of objects with same fields as ruc
+    Search by company name (razón social). Returns ranked results
+    with prefix autocomplete and abbreviation handling (S.A.C., E.I.R.L.).
+    --json fields: array of ruc objects
 
-  costs <users> [avg_req] [pro_%]
-    Simulate Cloudflare cost vs revenue. Defaults: 1000 req/user, 1% Pro.
-    Output fields (--json): users, pro_users, requests, cf_tier,
-      cf_cost, revenue, margin, safe
+  costs <users> [avg_req/user/month] [pro_%]
+    Simulate Cloudflare cost vs revenue.
+    Defaults: 1000 req/user, 1% Pro.
+    --json fields: users, pro_users, requests, cf_tier, cf_cost,
+      revenue, margin, safe
 
   costs --live
-    Real-time cost report from production data (admin only).
+    Real-time cost report from production (admin only).
     Requires LATINFO_ADMIN_SECRET env var.
-    Output fields (--json): month, users, pro_users, requests,
-      cf_tier, cf_cost, revenue, margin, safe
 
-  help
-    Show this help text.
+  help       Show this help text.
 
 FLAGS
-  --json    Output raw JSON instead of human-formatted text.
-            Errors are written to stderr as {"error":"...","message":"..."}.
-  --live    Use real-time production data (for 'costs' command).
-  --version, -v
-            Print version and exit.
+  --json     Output raw JSON. Errors → stderr as { error, message }.
+  --live     Use production data (costs command).
+  --version  Print version and exit.
 
 COUNTRIES
-  pe        Peru (SUNAT padrón). Active and available.
+  pe    Peru (SUNAT padrón) — 18M+ records, updated daily. Active.
+  br, mx, co, ar, cl — in development.
 
-QUICK START (no login needed)
-  latinfo ruc 20100047218          # Banco de Crédito del Perú
-  latinfo search "GLORIA"          # search by business name
-  latinfo ruc 20131312955 --json   # SUNAT, JSON output
+PRICING
+  Free  100,000 requests/day — no credit card
+  Pro   10M requests/month   — $1/month
 
-  Works instantly with ${Object.keys(demo_data_1.DEMO_DATA).length} embedded records. Run 'latinfo login'
-  for 18M+ records and DNI lookup.
+LINKS
+  latinfo.dev/docs       API reference
+  latinfo.dev/changelog  Changelog
+  carrera.instatus.com   Status page
 
-AUTH
-  Config file: ~/.latinfo/config.json
-  Environment: LATINFO_API_URL to override API base URL.
+CONFIG
+  ~/.latinfo/config.json  API key (written by 'latinfo login')
+  LATINFO_API_URL         Override API base URL
 
 EXIT CODES
   0  Success
-  1  Error (invalid input, auth failure, API error)`);
+  1  Error`);
 }
 function version() {
     console.log(`latinfo/${VERSION}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "latinfo",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "Tax registry API for Latin America. Query RUC, DNI, and company data from SUNAT Peru. 18M+ records, updated daily, sub-100ms from anywhere.",
   "homepage": "https://latinfo.dev",
   "repository": {
@@ -23,6 +23,7 @@
     "build": "tsc",
     "dev": "tsx src/index.ts"
   },
+  "license": "MIT",
   "files": ["dist"],
   "devDependencies": {
     "tsx": "^4.19.0",