tixbit 0.2.1 → 0.2.3

package/README.md

@@ -82,7 +82,7 @@ tixbit purchase <listing-id> \
 
 Sign in to Link once, then start a purchase with a total price limit:
 
-TixBit 0.2.0 needs Node.js 22 or later. The included Link CLI uses your local Link sign-in; TixBit does not ask for a developer API key.
+TixBit needs Node.js 22 or later. The included Link CLI uses your local Link sign-in; TixBit does not ask for a developer API key.
 
 ```sh
 npx @stripe/link-cli auth login
@@ -95,7 +95,7 @@ tixbit link start <listing-id> --quantity 1 --email buyer@example.com --max-pric
 tixbit link complete <order-reference>
 ```
 
-The second command checks approval, sends one Stripe MPP credential, and reports whether the ticket was issued. If approval is still pending, it returns the same URL without sending payment. If the payment result is uncertain, use `link complete` with the same order reference. The CLI stores the purchase key in a private file under `~/.local/state/tixbit/link` (or `XDG_STATE_HOME`) and never prints or saves the Link payment token. Keep that file until the order is settled. Each command returns JSON; `approval_required` and payment failures use exit code 2.
+The second command checks approval, sends one Stripe MPP credential, and reports whether the ticket was issued. If approval is still pending, it returns the same URL without sending payment. After payment submission, the CLI will not send that payment again. If the result is `pending`, run `tixbit link complete <order-reference>` again later. This checks the same order without resending the payment credential. Do not start another checkout. The CLI stores the purchase key in a private file under `~/.local/state/tixbit/link` (or `XDG_STATE_HOME`) and never prints or saves the Link payment token. Keep that file until the order is settled. Each command returns JSON; `approval_required` and payment failures use exit code 2. A completed purchase returns an order receipt URL, and TixBit sends the order confirmation and ticket delivery emails to the buyer address.
 
 Each spend request includes its TixBit order reference in the approval details. Link can still rate limit a matching amount and merchant for a short time, even after a request is canceled. If Link rejects a request, the CLI reports a safe error code such as `LINK_DUPLICATE_REQUEST` or `LINK_NETWORK_UNAVAILABLE` without printing Link credentials.
 

package/dist/cli.js

@@ -428,6 +428,20 @@ var TixBitClient = class {
       const body = await response.json().catch(() => ({}));
       const orderReference = normalizeOrderReference(body.orderReference);
       const receiptUrl = normalizeReceiptUrl(body.receiptUrl);
+      if (response.status >= 500 && body.status !== "manual_review_required") {
+        return {
+          success: false,
+          status: "pending",
+          idempotencyKey,
+          orderReference,
+          receiptUrl,
+          error: {
+            code: "PURCHASE_OUTCOME_AMBIGUOUS",
+            message: "The server failed to confirm the purchase outcome."
+          },
+          action: "Check the order with the same idempotency key. Do not create a new payment or purchase attempt."
+        };
+      }
       if (response.status === 402) {
         const order = normalizePurchaseOrder(
           body.order,
@@ -870,7 +884,7 @@ var SPEND_REQUEST_ID = /^lsrq_[A-Za-z0-9]+$/;
 var require2 = createRequire(import.meta.url);
 function linkCliEntry() {
   if (Number(process.versions.node.split(".")[0]) < 22) {
-    throw new LinkCheckoutError("LINK_NODE_UNSUPPORTED", "TixBit 0.2.0 needs Node.js 22 or later.");
+    throw new LinkCheckoutError("LINK_NODE_UNSUPPORTED", "TixBit needs Node.js 22 or later.");
   }
   try {
     return join(dirname(require2.resolve("@stripe/link-cli/package.json")), "dist", "cli.js");
@@ -1049,7 +1063,39 @@ async function startLinkPurchase(input) {
 }
 async function completeLinkPurchase(orderReference) {
   const state = await loadState(orderReference);
-  if (state.result?.status === "fulfilled" || state.result?.status === "manual_review_required") return state.result;
+  if (state.result && ["fulfilled", "payment_failed", "rejected"].includes(state.result.status)) return state.result;
+  if (state.paymentAttempted) {
+    const request2 = JSON.parse(state.requestBody);
+    const result2 = await new TixBitClient({ paymentEndpoint: paymentEndpoint(), timeoutMs: 3e4 }).purchaseTickets(request2);
+    if (result2.orderReference && result2.orderReference !== orderReference) {
+      throw new LinkCheckoutError("ORDER_REFERENCE_CHANGED", "TixBit returned a different order reference. Check the order before another payment.");
+    }
+    if (state.result?.status === "manual_review_required" && result2.status !== "fulfilled") {
+      return state.result;
+    }
+    const sameOrder = result2.orderReference === orderReference;
+    const terminalFailure = sameOrder && (result2.status === "payment_failed" || result2.status === "rejected");
+    const manualReview = sameOrder && result2.status === "manual_review_required";
+    const fulfilled = sameOrder && result2.success && result2.status === "fulfilled";
+    const output3 = {
+      success: fulfilled,
+      status: fulfilled || manualReview || terminalFailure ? result2.status : "pending",
+      orderReference,
+      amountCents: state.amountCents,
+      ...sameOrder && result2.order ? { order: result2.order } : {},
+      ...sameOrder && result2.receiptUrl ? { receiptUrl: result2.receiptUrl } : {},
+      ...!fulfilled ? {
+        error: sameOrder && (manualReview || terminalFailure) && result2.error ? result2.error : { code: "PURCHASE_OUTCOME_AMBIGUOUS", message: "The order is still being checked." },
+        action: terminalFailure || manualReview ? result2.action ?? "Contact TixBit support with this order reference. Do not submit another payment." : "Run the same complete command again later. Do not start another payment or purchase."
+      } : {}
+    };
+    if (output3.success || terminalFailure || output3.status === "manual_review_required") {
+      state.result = output3;
+      await saveState(state);
+    }
+    return output3;
+  }
+  if (state.result) return state.result;
   const approval = await linkCli(["spend-request", "retrieve", state.spendRequestId, "--include", "shared_payment_token"]);
   if (["denied", "declined", "expired", "canceled", "cancelled"].includes(String(approval.status))) {
     return {
@@ -1097,6 +1143,8 @@ async function completeLinkPurchase(orderReference) {
     }
   });
   let decline = false;
+  state.paymentAttempted = true;
+  await saveState(state);
   const client2 = new TixBitClient({
     paymentEndpoint: paymentEndpoint(),
     timeoutMs: 9e4,
@@ -1121,15 +1169,14 @@ async function completeLinkPurchase(orderReference) {
     orderReference,
     amountCents: state.amountCents,
     ...result.order && !decline ? { order: result.order } : {},
+    ...result.receiptUrl && !decline ? { receiptUrl: result.receiptUrl } : {},
     ...!result.success ? {
       error: decline ? { code: "CARD_DECLINED", message: "Stripe declined the card selected in Link." } : result.error,
-      action: decline ? "Select another card in Link and start a new spend approval. No ticket was issued." : result.action
+      action: decline ? "Select another card in Link and start a new spend approval. No ticket was issued." : result.status === "pending" ? "Payment may have succeeded. Do not retry or start another checkout. Contact TixBit support with this order reference." : result.action
     } : {}
   };
-  if (output2.status === "fulfilled" || output2.status === "manual_review_required") {
-    state.result = output2;
-    await saveState(state);
-  }
+  state.result = output2;
+  await saveState(state);
   return output2;
 }
 

package/dist/index.js

@@ -408,6 +408,20 @@ var TixBitClient = class {
       const body = await response.json().catch(() => ({}));
       const orderReference = normalizeOrderReference(body.orderReference);
       const receiptUrl = normalizeReceiptUrl(body.receiptUrl);
+      if (response.status >= 500 && body.status !== "manual_review_required") {
+        return {
+          success: false,
+          status: "pending",
+          idempotencyKey,
+          orderReference,
+          receiptUrl,
+          error: {
+            code: "PURCHASE_OUTCOME_AMBIGUOUS",
+            message: "The server failed to confirm the purchase outcome."
+          },
+          action: "Check the order with the same idempotency key. Do not create a new payment or purchase attempt."
+        };
+      }
       if (response.status === 402) {
         const order = normalizePurchaseOrder(
           body.order,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tixbit",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "Search events, browse listings, view seatmaps, and purchase TixBit tickets through MPP",
   "type": "module",
   "main": "./dist/index.js",

package/skills/tixbit/SKILL.md

@@ -64,7 +64,7 @@ npx tixbit purchase <listingId> \
 - The older `buy` web route supports 4-12 alphanumeric IDs only. The new Link MPP command accepts the listing IDs supported by the MPP server.
 - Without a signed-in user integration, seller commands return browser sign-in guidance and do not read or submit listings. Browser-to-CLI seller sessions are not supported. Do not extract browser tokens. Optional authorized integrations may supply `TIXBIT_ACCESS_TOKEN`; seller creation still requires `--confirm`, `termsAccepted: true`, and server ownership/access checks.
 - All commands emit JSON, including errors. Preserve full case-sensitive IDs.
-- Never retry uncertain Link payment automatically. Reconcile with support and Stripe Link first. Read seller listings after uncertain creation.
+- Never resend an uncertain Link payment. Repeat `link complete` with the same order reference to check server recovery without sending a second credential. Read seller listings after uncertain creation.
 - No bids or negotiation are available. Do not claim a price reduction.
 
 ## Required workflow