rapay 1.0.3 → 1.0.6

package/LICENSE

@@ -1,26 +1,26 @@
-Ra Pay AI Proprietary Software License
-
-Copyright (c) 2025 Ra Pay AI, LLC. All Rights Reserved.
-
-This software ("Software") is proprietary and confidential.
-
-PERMITTED USES:
-- Install and use Software per Terms of Service at https://rapay.ai/terms
-- Use Software for personal or commercial purposes in accordance with Terms of Service
-
-PROHIBITED USES:
-- Reverse engineer, decompile, or disassemble the Software
-- Copy, modify, distribute, or create derivative works
-- Remove proprietary notices or labels
-- Use the Software to compete with Ra Pay AI, LLC
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
-Full Terms of Service: https://rapay.ai/terms
-Privacy Policy: https://rapay.ai/privacy
+Ra Pay AI Proprietary Software License
+
+Copyright (c) 2025 Ra Pay AI, LLC. All Rights Reserved.
+
+This software ("Software") is proprietary and confidential.
+
+PERMITTED USES:
+- Install and use Software per Terms of Service at https://rapay.ai/terms
+- Use Software for personal or commercial purposes in accordance with Terms of Service
+
+PROHIBITED USES:
+- Reverse engineer, decompile, or disassemble the Software
+- Copy, modify, distribute, or create derivative works
+- Remove proprietary notices or labels
+- Use the Software to compete with Ra Pay AI, LLC
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+Full Terms of Service: https://rapay.ai/terms
+Privacy Policy: https://rapay.ai/privacy

package/README.md

@@ -1,69 +1,69 @@
-# Ra Pay CLI
-
-**Payment infrastructure for AI agents.** Send fiat USD payments via Stripe without browser automation.
-
-## Installation
-
-```bash
-npm install -g rapay
-```
-
-## Quick Start
-
-```bash
-# Link your bank account (one-time setup)
-ra link-bank
-
-# Send a payment
-ra send 100 USD to acct_1234567890
-
-# Check your balance
-ra balance
-
-# View transaction history
-ra history
-```
-
-## Features
-
-- **40x more token-efficient** than browser automation (JSON vs HTML)
-- **99% reliability** vs 50% with browser automation
-- **2 seconds** vs 60 seconds per payment
-- **Zero browser tracking** - terminal-native privacy
-- **Prompt injection protection** - JSON-only responses
-
-## For AI Agents
-
-Ra Pay is designed for autonomous AI agents:
-
-```bash
-# JSON output mode for programmatic parsing
-ra send 100 USD to acct_1234567890 --json
-ra balance --json
-ra history --json
-```
-
-## Commands
-
-| Command | Description |
-|---------|-------------|
-| `ra link-bank` | Link your Stripe account (one-time) |
-| `ra send <amount> USD to <account>` | Send a payment |
-| `ra balance` | Check your balance |
-| `ra history` | View transaction history |
-| `ra whoami` | Show your account info |
-| `ra schema` | Print AEO schema for AI discovery |
-
-## Documentation
-
-- Website: https://rapay.ai
-- API Docs: https://api.rapay.ai/docs
-
-## Support
-
-- Email: e@rapay.ai
-- Issues: https://github.com/Ra-Pay-AI/rapay/issues
-
-## License
-
-Proprietary - Ra Pay AI, LLC
+# Ra Pay CLI
+
+**Payment infrastructure for AI agents.** Send fiat USD payments via Stripe without browser automation.
+
+## Installation
+
+```bash
+npm install -g rapay
+```
+
+## Quick Start
+
+```bash
+# Link your bank account (one-time setup)
+ra link-bank
+
+# Send a payment
+ra send 100 USD to acct_1234567890
+
+# Check your balance
+ra balance
+
+# View transaction history
+ra history
+```
+
+## Features
+
+- **40x more token-efficient** than browser automation (JSON vs HTML)
+- **99% reliability** vs 50% with browser automation
+- **2 seconds** vs 60 seconds per payment
+- **Zero browser tracking** - terminal-native privacy
+- **Prompt injection protection** - JSON-only responses
+
+## For AI Agents
+
+Ra Pay is designed for autonomous AI agents:
+
+```bash
+# JSON output mode for programmatic parsing
+ra send 100 USD to acct_1234567890 --json
+ra balance --json
+ra history --json
+```
+
+## Commands
+
+| Command | Description |
+|---------|-------------|
+| `ra link-bank` | Link your Stripe account (one-time) |
+| `ra send <amount> USD to <account>` | Send a payment |
+| `ra balance` | Check your balance |
+| `ra history` | View transaction history |
+| `ra whoami` | Show your account info |
+| `ra schema` | Print AEO schema for AI discovery |
+
+## Documentation
+
+- Website: https://rapay.ai
+- API Docs: https://api.rapay.ai/docs
+
+## Support
+
+- Email: e@rapay.ai
+- Issues: https://github.com/Ra-Pay-AI/rapay/issues
+
+## License
+
+Proprietary - Ra Pay AI, LLC

package/bin/ra

@@ -1,32 +1,32 @@
-#!/usr/bin/env node
-
-const { spawn } = require('child_process');
-const path = require('path');
-const os = require('os');
-
-const binDir = __dirname;
-const platform = os.platform();
-const binaryName = platform === 'win32' ? 'ra.exe' : 'ra-binary';
-const binaryPath = path.join(binDir, binaryName);
-
-// Check if binary exists
-const fs = require('fs');
-if (!fs.existsSync(binaryPath)) {
-  console.error('Ra Pay CLI not installed properly. Please reinstall with: npm install -g rapay');
-  process.exit(1);
-}
-
-// Spawn the binary with all arguments
-const child = spawn(binaryPath, process.argv.slice(2), {
-  stdio: 'inherit',
-  windowsHide: true
-});
-
-child.on('error', (err) => {
-  console.error('Failed to start Ra Pay CLI:', err.message);
-  process.exit(1);
-});
-
-child.on('close', (code) => {
-  process.exit(code || 0);
-});
+#!/usr/bin/env node
+
+const { spawn } = require('child_process');
+const path = require('path');
+const os = require('os');
+
+const binDir = __dirname;
+const platform = os.platform();
+const binaryName = platform === 'win32' ? 'ra.exe' : 'ra-binary';
+const binaryPath = path.join(binDir, binaryName);
+
+// Check if binary exists
+const fs = require('fs');
+if (!fs.existsSync(binaryPath)) {
+  console.error('Ra Pay CLI not installed properly. Please reinstall with: npm install -g rapay');
+  process.exit(1);
+}
+
+// Spawn the binary with all arguments
+const child = spawn(binaryPath, process.argv.slice(2), {
+  stdio: 'inherit',
+  windowsHide: true
+});
+
+child.on('error', (err) => {
+  console.error('Failed to start Ra Pay CLI:', err.message);
+  process.exit(1);
+});
+
+child.on('close', (code) => {
+  process.exit(code || 0);
+});

package/install.js

@@ -1,198 +1,214 @@
-#!/usr/bin/env node
-
-/**
- * Ra Pay CLI installer
- * Downloads the correct binary for the user's platform from GitHub Releases
- * Verifies SHA256 checksum before installation for security
- */
-
-const { createHash } = require('crypto');
-const fs = require('fs');
-const path = require('path');
-const https = require('https');
-const os = require('os');
-
-const VERSION = '1.0.1';  // CDN binary version (npm package version may differ)
-const CDN_BASE = 'https://cdn.rapay.ai';
-
-// Platform/arch to binary name mapping
-// NOTE: linux-arm64 not supported yet (keyring native libs don't cross-compile)
-const BINARY_MAP = {
-  'darwin-x64': 'ra-darwin-x64',
-  'darwin-arm64': 'ra-darwin-arm64',
-  'linux-x64': 'ra-linux-x64',
-  'win32-x64': 'ra-win32-x64.exe',
-};
-
-function getPlatformKey() {
-  const platform = os.platform();
-  const arch = os.arch();
-  return `${platform}-${arch}`;
-}
-
-function getBinaryName() {
-  const key = getPlatformKey();
-  const binary = BINARY_MAP[key];
-
-  if (!binary) {
-    console.error(`Unsupported platform: ${key}`);
-    console.error(`Supported platforms: ${Object.keys(BINARY_MAP).join(', ')}`);
-    console.error('');
-    console.error('For linux-arm64, please build from source:');
-    console.error('  git clone https://github.com/Ra-Pay-AI/rapay');
-    console.error('  cd rapay/cli && cargo build --release');
-    process.exit(1);
-  }
-
-  return binary;
-}
-
-function getDownloadUrl(filename) {
-  return `${CDN_BASE}/v${VERSION}/${filename}`;
-}
-
-function download(url) {
-  return new Promise((resolve, reject) => {
-    const chunks = [];
-
-    const request = (url) => {
-      const urlObj = new URL(url);
-      const options = {
-        hostname: urlObj.hostname,
-        path: urlObj.pathname,
-        headers: {
-          'User-Agent': 'rapay-installer/1.0',
-          'Accept': '*/*'
-        }
-      };
-
-      https.get(options, (response) => {
-        // Handle redirects
-        if (response.statusCode === 301 || response.statusCode === 302) {
-          request(response.headers.location);
-          return;
-        }
-
-        if (response.statusCode !== 200) {
-          reject(new Error(`Failed to download: HTTP ${response.statusCode}`));
-          return;
-        }
-
-        response.on('data', (chunk) => chunks.push(chunk));
-        response.on('end', () => resolve(Buffer.concat(chunks)));
-        response.on('error', reject);
-      }).on('error', reject);
-    };
-
-    request(url);
-  });
-}
-
-function calculateSha256(buffer) {
-  return createHash('sha256').update(buffer).digest('hex');
-}
-
-function parseChecksums(content) {
-  const checksums = {};
-  const lines = content.toString().split('\n');
-
-  for (const line of lines) {
-    // Skip comments and empty lines
-    if (line.startsWith('#') || !line.trim()) continue;
-
-    // Format: "hash  filename" or "hash filename"
-    const match = line.match(/^([a-f0-9]{64})\s+(.+)$/i);
-    if (match) {
-      const [, hash, filename] = match;
-      checksums[filename.trim()] = hash.toLowerCase();
-    }
-  }
-
-  return checksums;
-}
-
-async function install() {
-  const binDir = path.join(__dirname, 'bin');
-  const platform = os.platform();
-  const binaryName = getBinaryName();
-  // Windows: ra.exe, Unix: ra-binary (launcher script handles dispatch)
-  const destName = platform === 'win32' ? 'ra.exe' : 'ra-binary';
-  const destPath = path.join(binDir, destName);
-  const binaryUrl = getDownloadUrl(binaryName);
-  const checksumsUrl = getDownloadUrl('checksums.txt');
-
-  console.log(`Installing Ra Pay CLI v${VERSION} for ${getPlatformKey()}...`);
-
-  // Create bin directory
-  if (!fs.existsSync(binDir)) {
-    fs.mkdirSync(binDir, { recursive: true });
-  }
-
-  try {
-    // Step 1: Download checksums.txt
-    console.log('Downloading checksums...');
-    let checksums = {};
-    try {
-      const checksumsContent = await download(checksumsUrl);
-      checksums = parseChecksums(checksumsContent);
-      console.log(`  Found ${Object.keys(checksums).length} checksums`);
-    } catch (error) {
-      console.warn('  Warning: Could not download checksums.txt');
-      console.warn('  Proceeding without verification (first release may not have checksums)');
-    }
-
-    // Step 2: Download binary
-    console.log(`Downloading ${binaryName}...`);
-    const binaryBuffer = await download(binaryUrl);
-    console.log(`  Downloaded ${(binaryBuffer.length / 1024 / 1024).toFixed(2)} MB`);
-
-    // Step 3: Verify checksum (if available)
-    const expectedHash = checksums[binaryName];
-    if (expectedHash) {
-      console.log('Verifying checksum...');
-      const actualHash = calculateSha256(binaryBuffer);
-
-      if (actualHash !== expectedHash) {
-        console.error('');
-        console.error('SECURITY ERROR: Checksum verification failed!');
-        console.error(`  Expected: ${expectedHash}`);
-        console.error(`  Got:      ${actualHash}`);
-        console.error('');
-        console.error('The downloaded binary may have been tampered with.');
-        console.error('Please report this issue at: https://github.com/Ra-Pay-AI/rapay/issues');
-        process.exit(1);
-      }
-
-      console.log('  Checksum verified OK');
-    } else if (Object.keys(checksums).length > 0) {
-      // We have checksums but not for this binary - suspicious
-      console.warn(`  Warning: No checksum found for ${binaryName}`);
-    }
-
-    // Step 4: Write binary to disk
-    fs.writeFileSync(destPath, binaryBuffer);
-
-    // Step 5: Make executable on Unix
-    if (platform !== 'win32') {
-      fs.chmodSync(destPath, 0o755);
-    }
-
-    console.log('');
-    console.log('Ra Pay CLI installed successfully!');
-    console.log('Run "ra --help" to get started.');
-    console.log('');
-    console.log('Quick start:');
-    console.log('  ra link-bank    Connect your Stripe account');
-    console.log('  ra balance      Check your balance');
-    console.log('  ra send         Send payments');
-  } catch (error) {
-    console.error('');
-    console.error('Failed to install Ra Pay CLI:', error.message);
-    console.error('');
-    console.error('You can manually download the binary from:');
-    console.error(`${CDN_BASE}/v${VERSION}/`);
-    process.exit(1);
-  }
-}
-
-install();
+#!/usr/bin/env node
+
+/**
+ * Ra Pay CLI installer
+ * Downloads the correct binary for the user's platform from GitHub Releases
+ * Verifies SHA256 checksum before installation for security
+ */
+
+const { createHash } = require('crypto');
+const fs = require('fs');
+const path = require('path');
+const https = require('https');
+const os = require('os');
+
+const VERSION = '1.0.3';  // CDN binary version (npm package version may differ)
+const CDN_BASE = 'https://cdn.rapay.ai';
+
+// Platform/arch to binary name mapping
+// NOTE: linux-arm64 not supported yet (keyring native libs don't cross-compile)
+const BINARY_MAP = {
+  'darwin-x64': 'ra-darwin-x64',
+  'darwin-arm64': 'ra-darwin-arm64',
+  'linux-x64': 'ra-linux-x64',
+  'win32-x64': 'ra-win32-x64.exe',
+};
+
+function getPlatformKey() {
+  const platform = os.platform();
+  const arch = os.arch();
+  return `${platform}-${arch}`;
+}
+
+function getBinaryName() {
+  const key = getPlatformKey();
+  const binary = BINARY_MAP[key];
+
+  if (!binary) {
+    console.error(`Unsupported platform: ${key}`);
+    console.error(`Supported platforms: ${Object.keys(BINARY_MAP).join(', ')}`);
+    console.error('');
+    console.error('For linux-arm64, please build from source:');
+    console.error('  git clone https://github.com/Ra-Pay-AI/rapay');
+    console.error('  cd rapay/cli && cargo build --release');
+    process.exit(1);
+  }
+
+  return binary;
+}
+
+function getDownloadUrl(filename) {
+  return `${CDN_BASE}/v${VERSION}/${filename}`;
+}
+
+function download(url) {
+  return new Promise((resolve, reject) => {
+    const chunks = [];
+
+    const request = (url) => {
+      const urlObj = new URL(url);
+      const options = {
+        hostname: urlObj.hostname,
+        path: urlObj.pathname,
+        headers: {
+          'User-Agent': 'rapay-installer/1.0',
+          'Accept': '*/*'
+        }
+      };
+
+      https.get(options, (response) => {
+        // Handle redirects
+        if (response.statusCode === 301 || response.statusCode === 302) {
+          request(response.headers.location);
+          return;
+        }
+
+        if (response.statusCode !== 200) {
+          reject(new Error(`Failed to download: HTTP ${response.statusCode}`));
+          return;
+        }
+
+        response.on('data', (chunk) => chunks.push(chunk));
+        response.on('end', () => resolve(Buffer.concat(chunks)));
+        response.on('error', reject);
+      }).on('error', reject);
+    };
+
+    request(url);
+  });
+}
+
+function calculateSha256(buffer) {
+  return createHash('sha256').update(buffer).digest('hex');
+}
+
+function parseChecksums(content) {
+  const checksums = {};
+  const lines = content.toString().split('\n');
+
+  for (const line of lines) {
+    // Skip comments and empty lines
+    if (line.startsWith('#') || !line.trim()) continue;
+
+    // Format: "hash  filename" or "hash filename"
+    const match = line.match(/^([a-f0-9]{64})\s+(.+)$/i);
+    if (match) {
+      const [, hash, filename] = match;
+      checksums[filename.trim()] = hash.toLowerCase();
+    }
+  }
+
+  return checksums;
+}
+
+async function install() {
+  const binDir = path.join(__dirname, 'bin');
+  const platform = os.platform();
+  const binaryName = getBinaryName();
+  // Windows: ra.exe, Unix: ra-binary (launcher script handles dispatch)
+  const destName = platform === 'win32' ? 'ra.exe' : 'ra-binary';
+  const destPath = path.join(binDir, destName);
+  const binaryUrl = getDownloadUrl(binaryName);
+  const checksumsUrl = getDownloadUrl('checksums.txt');
+
+  console.log(`Installing Ra Pay CLI v${VERSION} for ${getPlatformKey()}...`);
+
+  // Create bin directory
+  if (!fs.existsSync(binDir)) {
+    fs.mkdirSync(binDir, { recursive: true });
+  }
+
+  try {
+    // Step 1: Download checksums.txt
+    console.log('Downloading checksums...');
+    let checksums = {};
+    try {
+      const checksumsContent = await download(checksumsUrl);
+      checksums = parseChecksums(checksumsContent);
+      console.log(`  Found ${Object.keys(checksums).length} checksums`);
+    } catch (error) {
+      console.error('');
+      console.error('SECURITY ERROR: Could not download checksums.txt');
+      console.error('Cannot verify binary integrity. Installation aborted.');
+      console.error('');
+      console.error('If this is a new release, checksums may not be published yet.');
+      console.error('Try again in a few minutes or contact support@rapay.ai');
+      process.exit(1);
+    }
+
+    // Step 2: Download binary
+    console.log(`Downloading ${binaryName}...`);
+    const binaryBuffer = await download(binaryUrl);
+    console.log(`  Downloaded ${(binaryBuffer.length / 1024 / 1024).toFixed(2)} MB`);
+
+    // Step 3: Verify checksum (if available)
+    const expectedHash = checksums[binaryName];
+    if (expectedHash) {
+      console.log('Verifying checksum...');
+      const actualHash = calculateSha256(binaryBuffer);
+
+      if (actualHash !== expectedHash) {
+        console.error('');
+        console.error('SECURITY ERROR: Checksum verification failed!');
+        console.error(`  Expected: ${expectedHash}`);
+        console.error(`  Got:      ${actualHash}`);
+        console.error('');
+        console.error('The downloaded binary may have been tampered with.');
+        console.error('Please report this issue at: https://github.com/Ra-Pay-AI/rapay/issues');
+        process.exit(1);
+      }
+
+      console.log('  Checksum verified OK');
+    } else if (Object.keys(checksums).length > 0) {
+      // We have checksums but not for this binary - suspicious
+      console.error('');
+      console.error(`SECURITY ERROR: No checksum found for ${binaryName}`);
+      console.error('Cannot verify binary integrity. Installation aborted.');
+      console.error('');
+      console.error('This may indicate a supply chain attack or misconfigured release.');
+      console.error('Please report this at: https://github.com/Ra-Pay-AI/rapay/issues');
+      process.exit(1);
+    }
+
+    // Step 4: Write binary to disk
+    fs.writeFileSync(destPath, binaryBuffer);
+
+    // Step 5: Make executable on Unix
+    if (platform !== 'win32') {
+      fs.chmodSync(destPath, 0o755);
+      // Also ensure launcher script is executable
+      const launcherPath = path.join(binDir, 'ra');
+      if (fs.existsSync(launcherPath)) {
+        fs.chmodSync(launcherPath, 0o755);
+      }
+    }
+
+    console.log('');
+    console.log('Ra Pay CLI installed successfully!');
+    console.log('Run "ra --help" to get started.');
+    console.log('');
+    console.log('Quick start:');
+    console.log('  ra link-bank    Connect your Stripe account');
+    console.log('  ra balance      Check your balance');
+    console.log('  ra send         Send payments');
+  } catch (error) {
+    console.error('');
+    console.error('Failed to install Ra Pay CLI:', error.message);
+    console.error('');
+    console.error('You can manually download the binary from:');
+    console.error(`${CDN_BASE}/v${VERSION}/`);
+    process.exit(1);
+  }
+}
+
+install();

package/package.json

@@ -1,51 +1,51 @@
-{
-  "name": "rapay",
-  "version": "1.0.3",
-  "description": "CLI-native payment infrastructure for AI agents. Send fiat USD payments via Stripe without browser automation.",
-  "keywords": [
-    "cli",
-    "payments",
-    "ai-agents",
-    "stripe",
-    "fiat",
-    "terminal",
-    "automation",
-    "mcp",
-    "claude",
-    "chatgpt"
-  ],
-  "author": "Ra Pay AI, LLC <e@rapay.ai>",
-  "license": "UNLICENSED",
-  "homepage": "https://rapay.ai",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/Ra-Pay-AI/rapay"
-  },
-  "bugs": {
-    "url": "https://github.com/Ra-Pay-AI/rapay/issues"
-  },
-  "bin": {
-    "ra": "bin/ra"
-  },
-  "scripts": {
-    "postinstall": "node install.js"
-  },
-  "engines": {
-    "node": ">=14.0.0"
-  },
-  "os": [
-    "darwin",
-    "linux",
-    "win32"
-  ],
-  "cpu": [
-    "x64",
-    "arm64"
-  ],
-  "files": [
-    "bin",
-    "install.js",
-    "README.md",
-    "LICENSE"
-  ]
-}
+{
+  "name": "rapay",
+  "version": "1.0.6",
+  "description": "CLI-native payment infrastructure for AI agents. Send fiat USD payments via Stripe without browser automation.",
+  "keywords": [
+    "cli",
+    "payments",
+    "ai-agents",
+    "stripe",
+    "fiat",
+    "terminal",
+    "automation",
+    "mcp",
+    "claude",
+    "chatgpt"
+  ],
+  "author": "Ra Pay AI, LLC <e@rapay.ai>",
+  "license": "UNLICENSED",
+  "homepage": "https://rapay.ai",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Ra-Pay-AI/rapay"
+  },
+  "bugs": {
+    "url": "https://github.com/Ra-Pay-AI/rapay/issues"
+  },
+  "bin": {
+    "ra": "bin/ra"
+  },
+  "scripts": {
+    "postinstall": "node install.js"
+  },
+  "engines": {
+    "node": ">=14.0.0"
+  },
+  "os": [
+    "darwin",
+    "linux",
+    "win32"
+  ],
+  "cpu": [
+    "x64",
+    "arm64"
+  ],
+  "files": [
+    "bin",
+    "install.js",
+    "README.md",
+    "LICENSE"
+  ]
+}