mayar 0.1.9 → 1.0.1

package/README.md

@@ -4,13 +4,28 @@ Command-line interface for the [Mayar](https://docs.mayar.id) API. Zero runtime
 
 ## Install
 
+**One-liner (no npm required):**
+
+```bash
+curl -fsSL https://raw.githubusercontent.com/mayarid/mayar-cli/main/install.sh | sh
+```
+
+Downloads the latest tarball from the npm registry, extracts to `~/.local/share/mayar`, and symlinks the binary to `~/.local/bin/mayar`. Requires only `node>=18`, `curl`, and `tar`. Override paths or pin a version:
+
+```bash
+MAYAR_VERSION=0.1.9 MAYAR_BIN_DIR=/usr/local/bin \
+  curl -fsSL https://raw.githubusercontent.com/mayarid/mayar-cli/main/install.sh | sh
+```
+
+**Via npm:**
+
 ```bash
 npm install -g mayar
 # or run without installing:
 npx mayar --help
 ```
 
-Or from source:
+**From source:**
 
 ```bash
 git clone https://github.com/mayarid/mayar-cli.git
@@ -55,75 +70,138 @@ mayar --api-key YOUR_KEY_HERE balance
 
 Get your API key from [web.mayar.id](https://web.mayar.id) → Integration → API Key.
 
+> **v1.0.0 — Mayar API v2.** All commands now target `/hl/v2/...`. Pagination switched from `--page`/`--pageSize` to cursor-based `--limit`/`--after` (returned in the previous response's `nextStartingAfter`). The `--pageSize` flag is still accepted as an alias for `--limit`.
+
 ## Commands
 
 ```
 Setup
-  init                                  Run first-time setup (interactive, masked input)
-  api-key <key>                         Save API key non-interactively (e.g. for scripts)
-  config show                           Show masked saved key and config path
-  config reset                          Remove the saved key
+  init                                  First-time setup (interactive, masked input)
+  login [--no-browser]                  Sign in via Google OAuth
+  api-key <key>                         Save API key non-interactively
+  config show|reset                     Inspect or remove the saved config
 
 Account
-  whoami                                Show merchant identity (decoded from JWT) + verify key
-  balance                               GET /hl/v1/balance
+  whoami                                Merchant identity (JWT decode + live verify)
+  balance                               GET  /hl/v2/balances
 
 Invoices
-  invoice list [--page N --pageSize N]  GET /hl/v1/invoice
-  invoice get <id>                      GET /hl/v1/invoice/{id}
-  invoice close <id>                    GET /hl/v1/invoice/close/{id}
-  invoice reopen <id>                   GET /hl/v1/invoice/open/{id}
-  invoice create --data <json|@file>    POST /hl/v1/invoice/create
+  invoice list [--limit --after --status --search]
+  invoice get <id>
+  invoice close <id> | reopen <id>      POST /hl/v2/invoices/{id}/{open|close}
+  invoice status <id> <action>          action ∈ open|close|active|closed|unlisted
+  invoice edit <id> --data <json|@file>
+  invoice filter --email <email> [--limit --after --status --search]
+  invoice create --data <json|@file>
 
 Products
-  product list [--page N --pageSize N]  GET /hl/v1/product
-  product search <keyword>              GET /hl/v1/product?search=...
-  product type <type> [--page ...]      GET /hl/v1/product/type/{type}
-  product get <id>                      GET /hl/v1/product/{id}
-  product close <id>                    GET /hl/v1/product/close/{id}
-  product reopen <id>                   GET /hl/v1/product/open/{id}
+  product list [--limit --after --search --type --stock]
+  product search <keyword>
+  product type <ebook|course|membership|saas|event|webinar|…>
+  product get <id>
+  product close | reopen | status <id> <action>
+  product transactions <id> [--limit --after --status --customerId]
+  product create --type <T> --data <json|@file>
+                                        T ∈ ebook|digital|event|webinar|generic|payment-link
+  product edit <id>   --type <T> --data <json|@file>
 
 Single payment requests
-  payment list                          GET /hl/v1/payment
-  payment get <id>                      GET /hl/v1/payment/{id}
-  payment close <id>                    GET /hl/v1/payment/close/{id}
-  payment reopen <id>                   GET /hl/v1/payment/open/{id}
-  payment create --data <json|@file>    POST /hl/v1/payment/create
+  payment list [--limit --after --status]
+  payment get <id>
+  payment close | reopen | status <id> <action>
+  payment edit <id> --data <json|@file>
+  payment create --data <json|@file>
 
 Customers
-  customer list [--page ...]            GET /hl/v1/customer
-  customer create --data <json|@file>   POST /hl/v1/customer/create
-  customer search <email>               GET /hl/v1/customer/detail?email=
-  customer update <from> <to>           POST /hl/v1/customer/update
-  customer magic-link <email>           POST /hl/v1/customer/login/portal
+  customer list                          GET  /hl/v2/customers
+  customer create --data <json|@file>
+  customer search <email>                GET  /hl/v2/customers/detail?email=
+  customer update <fromEmail> <toEmail>
+  customer magic-link <email>            POST /hl/v2/customers/portal-login
 
 Transactions
-  tx list   [--page ...]                GET /hl/v1/transactions          (paid)
-  tx unpaid [--page ...]                GET /hl/v1/transactions/unpaid
-  tx daily                              GET /hl/v1/transactions/daily
+  tx list   [--limit --after --status --customerId --type --startAt --endAt]
+  tx unpaid [--limit --after --status --customerId --startAt --endAt]
+  tx daily
+  tx product <productId> [--limit --after --status]
 
 Reviews
-  review list [--page ...]              GET /hl/v1/reviews
-
-Dynamic QR
-  qrcode <amount>                       POST /hl/v1/qrcode/create
+  review list [--limit --after --status --paymentLinkId --rating]
+  review stats [productId]               merchant-wide or per-product
+  review create --data <json|@file>
+  review update <id> --data <json|@file>
+  review bulk-status --data <json>       [{id,status: ACTIVE|ARCHIVED|INACTIVE}, …]
+  review product <paymentLinkId> [--limit --after --rating]
+  review product-customer <paymentLinkId> --customerId <id>
+
+Discounts (coupons)
+  discount create --data <json|@file>
+  discount get <id>
+  discount validate <code> <paymentLinkId>
+  discount check <code>
+
+Bundling
+  bundling list [--limit --after]
+  bundling get <id>
+
+Installments
+  installment list [--limit --after --status --customerId]
+  installment get <id>
+  installment create --data <json|@file>
+
+Memberships
+  membership members --productId <id> [--limit --after]
+  membership tiers   --productId <id> [--limit --after]
+  membership register --data <json|@file>
+  membership get <memberId>            --productId <id>
+  membership update <memberId>         --productId <id> [--data <json|@file>]
+  membership cancel <memberId>         --productId <id>
+  membership create-invoice <memberId> --productId <id>
+
+Credit wallets
+  credit balance  --customerId <id> --productId <id> [--tierId <id>]
+  credit add      --data <json|@file>    {customerId, productId, amount}
+  credit spend    --data <json|@file>    {customerId, productId, amount}
+  credit history  <customerId> --productId <id> [--page N --limit N]
+  credit register-usage      --data <json|@file>
+  credit register-membership --data <json|@file>
+  credit checkout            --data <json|@file>
+
+SaaS licensing
+  saas activate   <licenseCode> <productId>   POST /saas/v2/license/activate
+  saas deactivate <licenseCode> <productId>   POST /saas/v2/license/deactivate
+  saas verify     <licenseCode> <productId>   POST /saas/v2/license/verify
+
+Software licensing
+  software verify <licenseCode> <productId>   POST /software/v2/license/verify
+
+QR & payment channels
+  qrcode <amount>                        POST /hl/v2/qr-codes/create
+  qrcode static                          GET  /hl/v2/qr-codes/static
+  qrcode channels                        GET  /hl/v2/payment-channels
 
 Webhooks
-  webhook register <url>                GET /hl/v1/webhook/register
-  webhook test <url>                    POST /hl/v1/webhook/test
-  webhook history [--page ...]          GET /hl/v1/webhook/history
+  webhook register <url>                 POST /hl/v2/webhooks/update
+  webhook test <url>
+  webhook history     [--limit --after --status --type --startAt --endAt]
+  webhook new-history [--limit --after]
+  webhook retry <historyId>
 
 Global flags
   --json                Output raw JSON instead of pretty tables
   --api-key <key>       Use this API key for the run (also accepts --api-key=KEY)
-  --page N              Pagination page (default 1)
-  --pageSize N          Pagination page size (default 10)
+  --limit N             Page size (default 10, max 50)
+  --after CURSOR        Pagination cursor (from previous nextStartingAfter)
+  --pageSize N          Alias for --limit
+  --data <json|@file>   Inline JSON, or @path to a JSON file
   -h, --help            Show help
   -v, --version         Show version
 
 Environment
-  MAYAR_API_KEY         API key — used when --api-key flag is absent and no config is saved
-  MAYAR_API_URL         Override API base URL (default: https://api.mayar.id)
+  MAYAR_API_KEY         Used when --api-key is absent and no config is saved
+  MAYAR_API_URL         Override API base URL
+  MAYAR_AUTH_URL        Override auth server base URL (used by 'login')
+  NODE_ENV=development  Target the sandbox (*.mayar.club) instead of production
 ```
 
 ## Examples
@@ -135,9 +213,10 @@ mayar whoami
 # Account balance
 mayar balance
 
-# Paginated lists
-mayar invoice list --page 1 --pageSize 20
-mayar product type ebook --pageSize 50
+# Paginated lists (v2 cursor pagination)
+mayar invoice list --limit 20
+mayar invoice list --limit 20 --after 1730000000000     # next page
+mayar product type ebook --limit 50
 
 # Search
 mayar product search "kelas python"
@@ -168,7 +247,13 @@ mayar qrcode 10000
 # Webhooks
 mayar webhook register https://example.com/hooks/mayar
 mayar webhook test     https://example.com/hooks/mayar
-mayar webhook history --page 1 --pageSize 20
+mayar webhook history --limit 20
+
+# Membership members
+mayar membership members --productId prd-42 --limit 20
+
+# SaaS license verify
+mayar saas verify LIC-123 prd-42
 
 # Pipe raw JSON to jq
 mayar invoice list --json | jq '.data[] | {id, status}'
@@ -190,4 +275,5 @@ To rotate keys: `mayar config reset && mayar init`.
 - All requests use `Authorization: Bearer <key>`. Errors print `API <status> — <message>` and exit non-zero.
 - `--data @file.json` reads from disk; `--data '{...}'` reads inline JSON.
 - `MAYAR_API_URL` overrides the base URL — useful for staging or custom proxy environments.
-- `mayar whoami` decodes the JWT locally and verifies the key live against `/hl/v1/balance`.
+- `mayar whoami` decodes the JWT locally and verifies the key live against `/hl/v2/balances`.
+- **v1.0.0 migration**: all API paths moved from `/hl/v1/*` to `/hl/v2/*`. `--page` is no longer used (v2 has no page numbers); the cursor is returned as `nextStartingAfter` in each response and passed as `--after` for the next page.

package/package.json

@@ -1,17 +1,25 @@
 {
   "name": "mayar",
-  "version": "0.1.9",
+  "version": "1.0.1",
   "description": "Zero-dependency Node.js CLI for the Mayar API (production endpoint).",
   "bin": {
     "mayar": "bin/mayar.js"
   },
   "main": "src/cli.js",
   "scripts": {
-    "start": "node bin/mayar.js"
+    "start": "node bin/mayar.js",
+    "test": "node --test",
+    "test:coverage": "node --test --experimental-test-coverage"
   },
   "engines": {
     "node": ">=18"
   },
+  "dependencies": {
+    "@mayaross/auth": "^1.0.0"
+  },
+  "bundleDependencies": [
+    "@mayaross/auth"
+  ],
   "keywords": [
     "mayar",
     "mayar-api",

package/src/api.js

@@ -1,7 +1,8 @@
 const https = require('https');
 const { URL } = require('url');
+const config = require('./config');
 
-const BASE_URL = process.env.MAYAR_API_URL || 'https://api.mayar.id';
+const BASE_URL = config.apiBaseUrl();
 const VERSION = require('../package.json').version;
 
 function request(method, pathname, { apiKey, body, query } = {}) {

package/src/cli.js

@@ -3,13 +3,14 @@ const config = require('./config');
 
 const VERSION = require('../package.json').version;
 
-const HELP = () => `${ui.bold('mayar')} ${ui.dim('— Mayar API CLI (production)')}
+const HELP = () => `${ui.bold('mayar')} ${ui.dim('— Mayar API CLI (v2)')}
 
 ${ui.bold('Usage:')}
   mayar <command> [args] [flags]
 
 ${ui.bold('Setup:')}
   init                                Run first-time setup (or re-configure API key)
+  login [--no-browser]                Sign in via browser (Google OAuth) and save auth token
   api-key <key>                       Save API key non-interactively
   config show                         Show config path and masked API key
   config reset                        Remove the saved API key
@@ -19,64 +20,132 @@ ${ui.bold('Account:')}
   balance                             Get account balance
 
 ${ui.bold('Invoices:')}
-  invoice list [--page N --pageSize N]
+  invoice list [--limit N --after CURSOR]
   invoice get <id>
   invoice close <id>
   invoice reopen <id>
-  invoice create --data <json|@file.json>
+  invoice status <id> <open|close|active|closed|unlisted>
+  invoice edit <id> --data <json|@file>
+  invoice filter --email <email> [--limit N --after CURSOR]
+  invoice create --data <json|@file>
 
 ${ui.bold('Products:')}
-  product list [--page N --pageSize N]
+  product list [--limit N --after CURSOR --search Q --type T]
   product search <keyword>
   product type <ebook|course|membership|saas|event|webinar|...>
   product get <id>
   product close <id>
   product reopen <id>
+  product status <id> <open|close|active|closed|unlisted>
+  product transactions <id> [--limit N --after CURSOR]
+  product create --type <T> --data <json|@file>
+  product edit <id> --data <json|@file>
+  product sort <generic_link|event|webinar|digital_product> [--limit --after]
+
+${ui.bold('Payment links (alt route):')}
+  payment-link edit <id> --data <json|@file>   Alias for /hl/v2/payment-links/{id}/update
 
 ${ui.bold('Single payment requests:')}
-  payment list
+  payment list [--limit N --after CURSOR --status paid|unpaid|closed]
   payment get <id>
-  payment close <id>
-  payment reopen <id>
-  payment create --data <json|@file.json>
+  payment status <id> <open|close|active|closed|unlisted>
+  payment edit <id> --data <json|@file>
+  payment create --data <json|@file>
 
 ${ui.bold('Customers:')}
-  customer list [--page N --pageSize N]
-  customer create --data <json|@file.json>
-  customer search <email>             Look up a customer by email
+  customer list
+  customer create --data <json|@file>
+  customer search <email>
   customer update <fromEmail> <toEmail>
-  customer magic-link <email>         Email a portal login link to the customer
+  customer magic-link <email>
 
 ${ui.bold('Transactions:')}
-  tx list [--page N --pageSize N]     Paid transactions
-  tx unpaid [--page N --pageSize N]   Unpaid transactions
-  tx daily                            Today's totals (volume + count)
+  tx list [--limit N --after CURSOR --status --customerId --startAt --endAt]
+  tx unpaid [--limit N --after CURSOR]
+  tx daily
+  tx product <productId> [--limit N --after CURSOR]
 
 ${ui.bold('Reviews:')}
-  review list [--page N --pageSize N]
+  review list [--limit N --after CURSOR --status --paymentLinkId --rating]
+  review stats [productId]
+  review create --data <json|@file>
+  review update <id> --data <json|@file>
+  review bulk-status --data <json|@file>       (array of {id,status})
+  review product <paymentLinkId> [--limit N --after CURSOR]
+  review product-customer <paymentLinkId> --customerId <id>
+
+${ui.bold('Discounts (coupons):')}
+  discount create --data <json|@file>
+  discount get <id>
+  discount validate <code> <paymentLinkId>
+  discount check <code>
+
+${ui.bold('Bundling:')}
+  bundling list [--limit N --after CURSOR]
+  bundling get <id>
+
+${ui.bold('Installments:')}
+  installment list [--limit N --after CURSOR]
+  installment get <id>
+  installment create --data <json|@file>
+
+${ui.bold('Memberships:')}
+  membership members --productId <id> [--limit N --after CURSOR]
+  membership tiers   --productId <id> [--limit N --after CURSOR]
+  membership register --data <json|@file>
+  membership get <memberId> --productId <id>
+  membership update <memberId> --productId <id> [--data <json|@file>]
+  membership cancel <memberId> --productId <id>
+  membership create-invoice <memberId> --productId <id>
 
-${ui.bold('Dynamic QR:')}
-  qrcode <amount>
+${ui.bold('Credit wallets:')}
+  credit balance --customerId <id> --productId <id> [--tierId <id>]
+  credit add    --data <json|@file>       ({customerId, productId, amount})
+  credit spend  --data <json|@file>       ({customerId, productId, amount})
+  credit history <customerId> --productId <id> [--page N --limit N]
+  credit register-usage      --data <json|@file>
+  credit register-membership --data <json|@file>
+  credit checkout            --data <json|@file>
+
+${ui.bold('SaaS licensing:')}
+  saas activate   <licenseCode> <productId>
+  saas deactivate <licenseCode> <productId>
+  saas verify     <licenseCode> <productId>
+
+${ui.bold('Software licensing:')}
+  software verify <licenseCode> <productId>
+
+${ui.bold('QR & payment channels:')}
+  qrcode <amount>                     Dynamic QR for the given amount
+  qrcode static                       Merchant's static QRIS image
+  qrcode channels                     List enabled payment channels
 
 ${ui.bold('Webhooks:')}
   webhook register <url>
   webhook test <url>
-  webhook history [--page N --pageSize N]
+  webhook history [--limit N --after CURSOR]
+  webhook new-history [--limit N --after CURSOR]
+  webhook retry <historyId>
 
 ${ui.bold('Global flags:')}
   --json                Output raw JSON instead of formatted tables
   --api-key <key>       Use this API key for the run (overrides env + saved config)
-  --page N              Pagination page (default 1)
-  --pageSize N          Pagination page size (default 10)
+  --limit N             Page size (v2, default 10, max 50)
+  --after CURSOR        Cursor for next page (from previous response's nextStartingAfter)
+  --pageSize N          Alias for --limit
+  --data <json|@file>   Inline JSON or @path to a JSON file
   -h, --help            Show help
   -v, --version         Show version
 
 ${ui.bold('Environment:')}
   MAYAR_API_KEY         Used when --api-key is not given and no config is saved
-  MAYAR_API_URL         Override API base URL (default: https://api.mayar.id)
+  MAYAR_API_URL         Override API base URL
+  MAYAR_AUTH_URL        Override auth server base URL (used by 'login')
+  NODE_ENV=development  Target the sandbox (api/auth .mayar.club) instead of production
 
 ${ui.dim('Resolution order: --api-key flag > MAYAR_API_KEY env > saved config.')}
-${ui.dim('Endpoint: MAYAR_API_URL env or https://api.mayar.id (default)')}
+${ui.dim('API endpoint:  MAYAR_API_URL, else NODE_ENV=development → api.mayar.club, else api.mayar.id')}
+${ui.dim('Auth endpoint: MAYAR_AUTH_URL, else NODE_ENV=development → auth.mayar.club, else auth.mayar.id')}
 ${ui.dim('Config:   ~/.config/mayar/config.json (chmod 600)')}
 `;
 
@@ -88,10 +157,13 @@ function parseFlags(argv) {
     if (a === '--') { positional.push(...argv.slice(i + 1)); break; }
     if (a === '--json') flags.json = true;
     else if (a === '--force') flags.force = true;
+    else if (a === '--no-browser') flags['no-browser'] = true;
     else if (a === '--api-key') flags.apiKey = argv[++i];
     else if (a.startsWith('--api-key=')) flags.apiKey = a.slice('--api-key='.length);
     else if (a === '--page') flags.page = argv[++i];
     else if (a === '--pageSize' || a === '--page-size') flags.pageSize = argv[++i];
+    else if (a === '--limit') flags.limit = argv[++i];
+    else if (a === '--after' || a === '--starting-after' || a === '--startingAfter') flags.after = argv[++i];
     else if (a === '--data') flags.data = argv[++i];
     else if (a === '-h' || a === '--help') flags.help = true;
     else if (a === '-v' || a === '--version') flags.version = true;
@@ -111,7 +183,6 @@ async function ensureKey(flags) {
   if (process.env.MAYAR_API_KEY) return process.env.MAYAR_API_KEY;
   const cfg = config.load();
   if (cfg && cfg.apiKey) return cfg.apiKey;
-  // First-run flow
   ui.printBanner();
   process.stdout.write(`${ui.bold('Welcome to Mayar CLI.')}\n`);
   process.stdout.write(`No API key found. Get yours from ${ui.cyan('https://web.mayar.id')} → Integration → API Key.\n\n`);
@@ -136,13 +207,10 @@ async function run(argv) {
 
   try {
     if (cmd === 'help') { process.stdout.write(HELP()); return; }
-    if (cmd === 'init') {
-      const init = require('./commands/init');
-      return await init.run({ flags });
-    }
+    if (cmd === 'init') { return await require('./commands/init').run({ flags }); }
+    if (cmd === 'login') { return await require('./commands/login').run({ flags }); }
     if (cmd === 'api-key' || cmd === 'apikey') {
-      const apikey = require('./commands/apikey');
-      return await apikey.run({ positional: [sub, ...rest].filter((x) => x !== undefined) });
+      return await require('./commands/apikey').run({ positional: [sub, ...rest].filter((x) => x !== undefined) });
     }
     if (cmd === 'config') {
       if (sub === 'show') {
@@ -168,17 +236,40 @@ async function run(argv) {
       whoami:       './commands/whoami',
       balance:      './commands/balance',
       invoice:      './commands/invoice',
+      invoices:     './commands/invoice',
       product:      './commands/product',
+      products:     './commands/product',
       payment:      './commands/payment',
+      payments:     './commands/payment',
       customer:     './commands/customer',
+      customers:    './commands/customer',
       tx:           './commands/transaction',
       transaction:  './commands/transaction',
       transactions: './commands/transaction',
       qr:           './commands/qrcode',
       qrcode:       './commands/qrcode',
       webhook:      './commands/webhook',
+      webhooks:     './commands/webhook',
       review:       './commands/review',
       reviews:      './commands/review',
+      discount:     './commands/discount',
+      discounts:    './commands/discount',
+      coupon:       './commands/discount',
+      coupons:      './commands/discount',
+      bundling:     './commands/bundling',
+      bundlings:    './commands/bundling',
+      installment:  './commands/installment',
+      installments: './commands/installment',
+      membership:   './commands/membership',
+      memberships:  './commands/membership',
+      credit:       './commands/credit',
+      credits:      './commands/credit',
+      saas:         './commands/saas',
+      software:     './commands/software',
+      'payment-link':  './commands/payment-link',
+      paymentlink:     './commands/payment-link',
+      'payment-links': './commands/payment-link',
+      plink:           './commands/payment-link',
     };
     const handler = handlers[cmd];
     if (!handler) {
@@ -196,4 +287,4 @@ async function run(argv) {
   }
 }
 
-module.exports = { run };
+module.exports = { run, parseFlags };

package/src/commands/balance.js

@@ -3,7 +3,7 @@ const ui = require('../ui');
 const { checkResp } = require('../util');
 
 async function run({ apiKey, flags }) {
-  const res = await api.request('GET', '/hl/v1/balance', { apiKey });
+  const res = await api.request('GET', '/hl/v2/balances', { apiKey });
   checkResp(res);
   if (flags.json) return ui.jsonOut(res.body);
   const d = (res.body && res.body.data) || {};

package/src/commands/bundling.js

@@ -0,0 +1,36 @@
+const api = require('../api');
+const ui = require('../ui');
+const { checkResp, pagination, cursorFooter } = require('../util');
+
+const USAGE = 'Usage: mayar bundling <list|get>';
+
+async function run({ apiKey, flags, positional }) {
+  const [sub, ...rest] = positional;
+  switch (sub) {
+    case undefined:
+    case 'list': {
+      const res = await api.request('GET', '/hl/v2/bundling', {
+        apiKey, query: pagination(flags),
+      });
+      checkResp(res);
+      if (flags.json) return ui.jsonOut(res.body);
+      const data = (res.body && res.body.data) || [];
+      const rows = data.map((b) => ({
+        id: b.id, name: b.name, amount: b.amount, status: b.status,
+      }));
+      ui.table(rows, ['id', 'name', 'amount', 'status']);
+      cursorFooter(res.body, data.length);
+      return;
+    }
+    case 'get':
+    case 'detail': {
+      if (!rest[0]) throw new Error('Usage: mayar bundling get <id>');
+      const res = await api.request('GET', `/hl/v2/bundling/${encodeURIComponent(rest[0])}`, { apiKey });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    default:
+      throw new Error(USAGE);
+  }
+}
+
+module.exports = { run };

package/src/commands/credit.js

@@ -0,0 +1,72 @@
+const api = require('../api');
+const ui = require('../ui');
+const { checkResp, readData } = require('../util');
+
+const USAGE = 'Usage: mayar credit <balance|add|spend|history|register-usage|register-membership|checkout>';
+
+async function run({ apiKey, flags, positional }) {
+  const [sub, ...rest] = positional;
+  switch (sub) {
+    case 'balance': {
+      if (!flags.customerId) throw new Error('mayar credit balance requires --customerId <id>');
+      if (!flags.productId)  throw new Error('mayar credit balance requires --productId <id>');
+      const res = await api.request('GET', '/hl/v2/credit/customer/balance', {
+        apiKey,
+        query: {
+          customerId: flags.customerId,
+          productId: flags.productId,
+          membershipTierId: flags.tierId || flags.membershipTierId,
+        },
+      });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    case 'add': {
+      const body = readData(flags.data);
+      if (!body) throw new Error('mayar credit add requires --data <json|@file> ({customerId,productId,amount})');
+      const res = await api.request('POST', '/hl/v2/credit/customer/add-credit', { apiKey, body });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    case 'spend': {
+      const body = readData(flags.data);
+      if (!body) throw new Error('mayar credit spend requires --data <json|@file> ({customerId,productId,amount})');
+      const res = await api.request('POST', '/hl/v2/credit/customer/spend', { apiKey, body });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    case 'history': {
+      if (!rest[0]) throw new Error('Usage: mayar credit history <customerId> --productId <id>');
+      if (!flags.productId) throw new Error('mayar credit history requires --productId <id>');
+      const res = await api.request('GET', `/hl/v2/credit/customer/paginate-credit-history/${encodeURIComponent(rest[0])}`, {
+        apiKey,
+        query: {
+          productId: flags.productId,
+          page: flags.page,
+          limit: flags.limit,
+        },
+      });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    case 'register-usage': {
+      const body = readData(flags.data);
+      if (!body) throw new Error('mayar credit register-usage requires --data <json|@file>');
+      const res = await api.request('POST', '/hl/v2/credit/credit-usage/customer/regist', { apiKey, body });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    case 'register-membership': {
+      const body = readData(flags.data);
+      if (!body) throw new Error('mayar credit register-membership requires --data <json|@file>');
+      const res = await api.request('POST', '/hl/v2/credit/membership/customer/regist', { apiKey, body });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    case 'checkout':
+    case 'generate-checkout': {
+      const body = readData(flags.data);
+      if (!body) throw new Error('mayar credit checkout requires --data <json|@file>');
+      const res = await api.request('POST', '/hl/v2/credit/generate/immutable/checkout', { apiKey, body });
+      checkResp(res); ui.jsonOut(res.body); return;
+    }
+    default:
+      throw new Error(USAGE);
+  }
+}
+
+module.exports = { run };