tixbit 0.2.0 → 0.2.2

package/README.md

@@ -95,7 +95,9 @@ tixbit link start <listing-id> --quantity 1 --email buyer@example.com --max-pric
 tixbit link complete <order-reference>
 ```
 
-The second command checks approval, sends one Stripe MPP credential, and reports whether the ticket was issued. If approval is still pending, it returns the same URL without sending payment. If the payment result is uncertain, use `link complete` with the same order reference. The CLI stores the purchase key in a private file under `~/.local/state/tixbit/link` (or `XDG_STATE_HOME`) and never prints or saves the Link payment token. Keep that file until the order is settled. Each command returns JSON; `approval_required` and payment failures use exit code 2.
+The second command checks approval, sends one Stripe MPP credential, and reports whether the ticket was issued. If approval is still pending, it returns the same URL without sending payment. After payment submission, the CLI will not send that payment again. If the result is `pending`, do not start another checkout. Contact TixBit support with the order reference so the charge and ticket can be reconciled. The CLI stores the purchase key in a private file under `~/.local/state/tixbit/link` (or `XDG_STATE_HOME`) and never prints or saves the Link payment token. Keep that file until the order is settled. Each command returns JSON; `approval_required` and payment failures use exit code 2.
+
+Each spend request includes its TixBit order reference in the approval details. Link can still rate limit a matching amount and merchant for a short time, even after a request is canceled. If Link rejects a request, the CLI reports a safe error code such as `LINK_DUPLICATE_REQUEST` or `LINK_NETWORK_UNAVAILABLE` without printing Link credentials.
 
 `--email` is always required and is never inferred from git or local account state. If a request times out or returns `pending` or `manual_review_required`, reuse the same idempotency key and follow the returned `action`; do not start another payment.
 

package/dist/cli.js

@@ -428,6 +428,20 @@ var TixBitClient = class {
       const body = await response.json().catch(() => ({}));
       const orderReference = normalizeOrderReference(body.orderReference);
       const receiptUrl = normalizeReceiptUrl(body.receiptUrl);
+      if (response.status >= 500 && body.status !== "manual_review_required") {
+        return {
+          success: false,
+          status: "pending",
+          idempotencyKey,
+          orderReference,
+          receiptUrl,
+          error: {
+            code: "PURCHASE_OUTCOME_AMBIGUOUS",
+            message: "The server failed to confirm the purchase outcome."
+          },
+          action: "Check the order with the same idempotency key. Do not create a new payment or purchase attempt."
+        };
+      }
       if (response.status === 402) {
         const order = normalizePurchaseOrder(
           body.order,
@@ -923,8 +937,30 @@ async function linkCli(args) {
       windowsHide: true
     });
     stdout = typeof result === "string" ? result : result.stdout;
-  } catch {
-    throw new LinkCheckoutError("LINK_CLI_FAILED", "Link could not complete this step. Run `npx @stripe/link-cli auth login`, then retry with the same order reference.");
+  } catch (error) {
+    const output2 = error && typeof error === "object" && "stdout" in error ? String(error.stdout) : "";
+    let message = "";
+    try {
+      const parsed = JSON.parse(output2);
+      const data = parsed && typeof parsed === "object" && !Array.isArray(parsed) && "data" in parsed ? parsed.data : parsed;
+      const item = Array.isArray(data) ? data[0] : data;
+      if (item && typeof item === "object" && "message" in item) {
+        message = String(item.message);
+      } else {
+        const nested = parsed && typeof parsed === "object" && !Array.isArray(parsed) && "error" in parsed ? parsed.error : void 0;
+        if (nested && typeof nested === "object" && "message" in nested) {
+          message = String(nested.message);
+        }
+      }
+    } catch {
+    }
+    if (/duplicate spend requests|matching spend request/i.test(message)) {
+      throw new LinkCheckoutError("LINK_DUPLICATE_REQUEST", "Link blocked a matching spend request. Wait a few minutes, then start a new checkout.");
+    }
+    if (/Invalid network_id|could not retrieve merchant information/i.test(message)) {
+      throw new LinkCheckoutError("LINK_NETWORK_UNAVAILABLE", "Link could not resolve the merchant profile in this account and mode. No payment was sent.");
+    }
+    throw new LinkCheckoutError("LINK_CLI_FAILED", "Link could not complete this step. Check Link sign-in and payment methods, then retry.");
   }
   try {
     const parsed = JSON.parse(stdout);
@@ -984,7 +1020,7 @@ async function startLinkPurchase(input) {
   if (typeof body.orderReference !== "string" || !ORDER_REFERENCE.test(body.orderReference)) {
     throw new LinkCheckoutError("ORDER_REFERENCE_MISSING", "TixBit did not return an order reference.");
   }
-  const context = `Approve one TixBit ticket purchase for listing ${purchase.listingId}, quantity ${purchase.quantity}. The total charge is USD ${(amountCents / 100).toFixed(2)}. This request permits one machine payment for this selected order only.`;
+  const context = `Approve one TixBit ticket purchase for order ${body.orderReference}, listing ${purchase.listingId}, quantity ${purchase.quantity}. The total charge is USD ${(amountCents / 100).toFixed(2)}. This request permits one machine payment for this selected order only.`;
   const created = await linkCli([
     "spend-request",
     "create",
@@ -998,6 +1034,8 @@ async function startLinkPurchase(input) {
     "usd",
     "--context",
     context,
+    "--metadata",
+    `order_reference:${body.orderReference}`,
     "--request-approval"
   ]);
   if (typeof created.id !== "string" || !SPEND_REQUEST_ID.test(created.id)) {
@@ -1025,7 +1063,15 @@ async function startLinkPurchase(input) {
 }
 async function completeLinkPurchase(orderReference) {
   const state = await loadState(orderReference);
-  if (state.result?.status === "fulfilled" || state.result?.status === "manual_review_required") return state.result;
+  if (state.result) return state.result;
+  if (state.paymentAttempted) return {
+    success: false,
+    status: "pending",
+    orderReference,
+    amountCents: state.amountCents,
+    error: { code: "PURCHASE_OUTCOME_AMBIGUOUS", message: "Payment may have been submitted, but the result is unknown." },
+    action: "Do not retry payment or start another checkout. Contact TixBit support with this order reference."
+  };
   const approval = await linkCli(["spend-request", "retrieve", state.spendRequestId, "--include", "shared_payment_token"]);
   if (["denied", "declined", "expired", "canceled", "cancelled"].includes(String(approval.status))) {
     return {
@@ -1073,6 +1119,8 @@ async function completeLinkPurchase(orderReference) {
     }
   });
   let decline = false;
+  state.paymentAttempted = true;
+  await saveState(state);
   const client2 = new TixBitClient({
     paymentEndpoint: paymentEndpoint(),
     timeoutMs: 9e4,
@@ -1099,13 +1147,11 @@ async function completeLinkPurchase(orderReference) {
     ...result.order && !decline ? { order: result.order } : {},
     ...!result.success ? {
       error: decline ? { code: "CARD_DECLINED", message: "Stripe declined the card selected in Link." } : result.error,
-      action: decline ? "Select another card in Link and start a new spend approval. No ticket was issued." : result.action
+      action: decline ? "Select another card in Link and start a new spend approval. No ticket was issued." : result.status === "pending" ? "Payment may have succeeded. Do not retry or start another checkout. Contact TixBit support with this order reference." : result.action
     } : {}
   };
-  if (output2.status === "fulfilled" || output2.status === "manual_review_required") {
-    state.result = output2;
-    await saveState(state);
-  }
+  state.result = output2;
+  await saveState(state);
   return output2;
 }
 

package/dist/index.js

@@ -408,6 +408,20 @@ var TixBitClient = class {
       const body = await response.json().catch(() => ({}));
       const orderReference = normalizeOrderReference(body.orderReference);
       const receiptUrl = normalizeReceiptUrl(body.receiptUrl);
+      if (response.status >= 500 && body.status !== "manual_review_required") {
+        return {
+          success: false,
+          status: "pending",
+          idempotencyKey,
+          orderReference,
+          receiptUrl,
+          error: {
+            code: "PURCHASE_OUTCOME_AMBIGUOUS",
+            message: "The server failed to confirm the purchase outcome."
+          },
+          action: "Check the order with the same idempotency key. Do not create a new payment or purchase attempt."
+        };
+      }
       if (response.status === 402) {
         const order = normalizePurchaseOrder(
           body.order,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tixbit",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "description": "Search events, browse listings, view seatmaps, and purchase TixBit tickets through MPP",
   "type": "module",
   "main": "./dist/index.js",