pop-pay 0.3.0 → 0.3.1

package/README.md

@@ -13,7 +13,24 @@ The runtime security layer for AI agent commerce. Card credentials are injected
 
 ## Getting Started
 
-Add pop-pay to your MCP client config:
+### 1. Initialize the credential vault
+
+```bash
+npx -y pop-pay pop-init-vault
+```
+
+This encrypts your card credentials into `~/.config/pop-pay/vault.enc` (AES-256-GCM). The MCP server decrypts automatically at startup.
+
+For stronger protection (recommended — blocks agents with shell access):
+
+```bash
+npx -y pop-pay pop-init-vault --passphrase   # one-time setup
+npx -y pop-pay pop-unlock                     # run once before each session
+```
+
+### 2. Add to your MCP client
+
+Standard config for any MCP-compatible client:
 
 ```json
 {
@@ -22,11 +39,7 @@ Add pop-pay to your MCP client config:
       "command": "npx",
       "args": ["-y", "pop-pay", "launch-mcp"],
       "env": {
-        "POP_CDP_URL": "http://localhost:9222",
-        "POP_ALLOWED_CATEGORIES": "[\"aws\",\"cloudflare\"]",
-        "POP_MAX_PER_TX": "100.0",
-        "POP_MAX_DAILY": "500.0",
-        "POP_GUARDRAIL_ENGINE": "keyword"
+        "POP_CDP_URL": "http://localhost:9222"
       }
     }
   }
@@ -38,49 +51,38 @@ Add pop-pay to your MCP client config:
 <details>
 <summary>Claude Code</summary>
 
-```bash
-claude mcp add pop-pay -- npx -y pop-pay launch-mcp
-```
-
-With environment variables:
+Claude Code uses its own CLI — the JSON config above is not needed.
 
 ```bash
-claude mcp add pop-pay \
-  -e POP_CDP_URL=http://localhost:9222 \
-  -e POP_ALLOWED_CATEGORIES='["aws","cloudflare"]' \
-  -e POP_MAX_PER_TX=100.0 \
-  -e POP_MAX_DAILY=500.0 \
-  -e POP_GUARDRAIL_ENGINE=keyword \
-  -- npx -y pop-pay launch-mcp
+claude mcp add --scope user pop-pay -- npx -y pop-pay launch-mcp
 ```
 
-</details>
-
-<details>
-<summary>Cursor</summary>
-
-Add to `~/.cursor/mcp.json` using the standard config block above.
+`--scope user` makes it available across all projects. To remove: `claude mcp remove pop-pay`
 
 </details>
 
 <details>
-<summary>Windsurf</summary>
+<summary>Cursor / Windsurf / VS Code</summary>
 
-Add to `~/.codeium/windsurf/mcp_config.json` using the standard config block above.
+Add the JSON config above to:
+- **Cursor**: `~/.cursor/mcp.json`
+- **Windsurf**: `~/.codeium/windsurf/mcp_config.json`
+- **VS Code (Copilot)**: `.vscode/mcp.json` in project root
 
 </details>
 
 <details>
-<summary>VS Code (Copilot)</summary>
+<summary>OpenClaw / NemoClaw</summary>
 
-Add to `.vscode/mcp.json` in your project root using the standard config block above.
+OpenClaw has its own CLI — the JSON config above is not needed.
 
-</details>
+```bash
+openclaw mcp add pop-pay -- npx -y pop-pay launch-mcp
+```
 
-<details>
-<summary>OpenClaw / NemoClaw</summary>
+Or add to `~/.openclaw/mcp_servers.json` using the JSON config above.
 
-Compatible with any MCP host. See the [Integration Guide](./docs/INTEGRATION_GUIDE.md) for setup instructions and System Prompt templates.
+For System Prompt templates and NemoClaw sandbox setup, see [Integration Guide §4](./docs/INTEGRATION_GUIDE.md).
 
 </details>
 
@@ -91,26 +93,17 @@ Compatible with any MCP host. See the [Integration Guide](./docs/INTEGRATION_GUI
 docker-compose up -d
 ```
 
-Runs the MCP server + headless Chromium with CDP. Mount your encrypted vault from the host. See `docker-compose.yml` for configuration.
+Runs the MCP server + headless Chromium with CDP. Mount your encrypted vault from the host.
 
 </details>
 
-## Vault Setup
-
-Credentials are stored in an AES-256-GCM encrypted vault — plaintext card data never touches disk.
-
-```bash
-npx pop-init-vault
-```
-
-**Passphrase mode** (recommended — protects against agents with shell access):
+### 3. Launch Chrome with CDP and start using
 
 ```bash
-npx pop-init-vault --passphrase   # one-time setup
-npx pop-unlock                     # run once before each MCP session
+npx -y pop-pay launch
 ```
 
-`pop-unlock` derives the key from your passphrase and stores it in the OS keyring. The MCP server reads it automatically at startup.
+Restart your MCP client. The agent now has access to pop-pay's MCP tools.
 
 ## MCP Tools
 

package/dist/cli-main.d.ts

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+/**
+ * pop-pay CLI dispatcher.
+ * Routes subcommands to the appropriate module.
+ */
+export {};
+//# sourceMappingURL=cli-main.d.ts.map

package/dist/cli-main.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-main.d.ts","sourceRoot":"","sources":["../src/cli-main.ts"],"names":[],"mappings":";AAEA;;;GAGG"}

package/dist/cli-main.js

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+"use strict";
+/**
+ * pop-pay CLI dispatcher.
+ * Routes subcommands to the appropriate module.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const node_fs_1 = require("node:fs");
+const node_path_1 = require("node:path");
+function getVersion() {
+    try {
+        const pkgPath = (0, node_path_1.join)(__dirname, "..", "package.json");
+        const pkg = JSON.parse((0, node_fs_1.readFileSync)(pkgPath, "utf8"));
+        return pkg.version;
+    }
+    catch {
+        return "unknown";
+    }
+}
+function showHelp() {
+    console.log(`pop-pay v${getVersion()} — Semantic Payment Guardrail for AI Agents
+
+Usage: pop-pay <command> [options]
+
+Commands:
+  launch-mcp      Start the MCP server (stdio transport)
+  launch          Launch Chrome with CDP remote debugging
+  init-vault      Initialize the encrypted credential vault
+  unlock          Unlock the vault for the current session
+  dashboard       Start the monitoring dashboard
+
+Options:
+  -v, --version   Show version
+  -h, --help      Show this help message`);
+}
+async function main() {
+    const subcommand = process.argv[2];
+    if (!subcommand || subcommand === "--help" || subcommand === "-h") {
+        showHelp();
+        return;
+    }
+    if (subcommand === "--version" || subcommand === "-v") {
+        console.log(getVersion());
+        return;
+    }
+    switch (subcommand) {
+        case "launch-mcp":
+            process.argv.splice(2, 1);
+            await import("./mcp-server.js");
+            break;
+        case "launch":
+        case "pop-launch":
+            process.argv.splice(2, 1);
+            await import("./cli.js");
+            break;
+        case "init-vault":
+        case "pop-init-vault":
+            process.argv.splice(2, 1);
+            await import("./cli-vault.js");
+            break;
+        case "unlock":
+        case "pop-unlock":
+            // Keep "unlock" in argv — cli-vault.ts detects it via process.argv.includes("unlock")
+            process.argv[2] = "unlock";
+            await import("./cli-vault.js");
+            break;
+        case "dashboard":
+            process.argv.splice(2, 1);
+            await import("./cli-dashboard.js");
+            break;
+        default:
+            console.error(`Unknown command: ${subcommand}\n`);
+            showHelp();
+            process.exit(1);
+    }
+}
+main().catch((err) => {
+    console.error("pop-pay:", err.message ?? err);
+    process.exit(1);
+});
+//# sourceMappingURL=cli-main.js.map

package/dist/cli-main.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-main.js","sourceRoot":"","sources":["../src/cli-main.ts"],"names":[],"mappings":";;AAEA;;;GAGG;;AAEH,qCAAuC;AACvC,yCAAiC;AAEjC,SAAS,UAAU;IACjB,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,IAAA,gBAAI,EAAC,SAAS,EAAE,IAAI,EAAE,cAAc,CAAC,CAAC;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,GAAG,CAAC,OAAO,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,CAAC,GAAG,CAAC,YAAY,UAAU,EAAE;;;;;;;;;;;;;yCAaG,CAAC,CAAC;AAC3C,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAEnC,IAAI,CAAC,UAAU,IAAI,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAClE,QAAQ,EAAE,CAAC;QACX,OAAO;IACT,CAAC;IAED,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QACtD,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1B,OAAO;IACT,CAAC;IAED,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,iBAAiB,CAAC,CAAC;YAChC,MAAM;QAER,KAAK,QAAQ,CAAC;QACd,KAAK,YAAY;YACf,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,UAAU,CAAC,CAAC;YACzB,MAAM;QAER,KAAK,YAAY,CAAC;QAClB,KAAK,gBAAgB;YACnB,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM;QAER,KAAK,QAAQ,CAAC;QACd,KAAK,YAAY;YACf,sFAAsF;YACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;YAC3B,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;YAC/B,MAAM;QAER,KAAK,WAAW;YACd,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAC1B,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;YACnC,MAAM;QAER;YACE,OAAO,CAAC,KAAK,CAAC,oBAAoB,UAAU,IAAI,CAAC,CAAC;YAClD,QAAQ,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,CAAC;IAC9C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,14 +1,14 @@
 {
   "name": "pop-pay",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Point One Percent - Semantic Payment Guardrail for AI Agents. It only takes 0.1% of hallucination to drain 100% of your wallet.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "bin": {
+    "pop-pay": "dist/cli-main.js",
     "pop-launch": "dist/cli.js",
     "pop-init-vault": "dist/cli-vault.js",
-    "pop-unlock": "dist/cli-vault.js",
-    "pop-pay": "dist/cli-dashboard.js"
+    "pop-unlock": "dist/cli-vault.js"
   },
   "scripts": {
     "build": "tsc",