ucpify 1.0.1 → 1.2.0

package/dist/schema.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.UpdateCheckoutRequestSchema = exports.CreateCheckoutRequestSchema = exports.MerchantConfigSchema = exports.PaymentHandlerSchema = exports.ShippingOptionSchema = exports.ItemSchema = exports.UCP_VERSION = void 0;
+exports.UpdateCheckoutRequestSchema = exports.CreateCheckoutRequestSchema = exports.MerchantConfigSchema = exports.OAuthConfigSchema = exports.PaymentHandlerSchema = exports.ShippingOptionSchema = exports.ItemSchema = exports.UCP_VERSION = void 0;
 const zod_1 = require("zod");
 // UCP Version
 exports.UCP_VERSION = '2026-01-11';
@@ -28,6 +28,20 @@ exports.PaymentHandlerSchema = zod_1.z.object({
     id: zod_1.z.string(),
     config: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).optional(),
 });
+// OAuth Configuration Schema
+exports.OAuthConfigSchema = zod_1.z.discriminatedUnion('provider', [
+    zod_1.z.object({
+        provider: zod_1.z.literal('built-in'),
+    }),
+    zod_1.z.object({
+        provider: zod_1.z.literal('external'),
+        issuer: zod_1.z.string().url(),
+        authorization_endpoint: zod_1.z.string().url(),
+        token_endpoint: zod_1.z.string().url(),
+        revocation_endpoint: zod_1.z.string().url().optional(),
+        jwks_uri: zod_1.z.string().url().optional(),
+    }),
+]);
 // Merchant Configuration Schema
 exports.MerchantConfigSchema = zod_1.z.object({
     name: zod_1.z.string(),
@@ -40,6 +54,7 @@ exports.MerchantConfigSchema = zod_1.z.object({
     payment_handlers: zod_1.z.array(exports.PaymentHandlerSchema).default([]),
     tax_rate: zod_1.z.number().min(0).max(1).default(0), // e.g., 0.08 for 8%
     port: zod_1.z.number().default(3000),
+    oauth: exports.OAuthConfigSchema.optional(),
 });
 // Request validation schemas
 exports.CreateCheckoutRequestSchema = zod_1.z.object({

package/dist/ucp-server-db.d.ts

@@ -16,6 +16,10 @@ export declare class UCPServerDB {
                 }[];
             };
             capabilities: {
+                'dev.ucp.identity_linking'?: {
+                    version: string;
+                    spec: string;
+                }[] | undefined;
                 'dev.ucp.shopping.checkout': {
                     version: string;
                     spec: string;

package/dist/ucp-server-db.js

@@ -45,6 +45,11 @@ class UCPServerDB {
                     'dev.ucp.shopping.order': [
                         { version: schema_1.UCP_VERSION, spec: 'https://ucp.dev/specification/order', schema: 'https://ucp.dev/schemas/shopping/order.json' },
                     ],
+                    ...(this.config.oauth ? {
+                        'dev.ucp.identity_linking': [
+                            { version: schema_1.UCP_VERSION, spec: 'https://ucp.dev/specification/identity-linking' },
+                        ],
+                    } : {}),
                 },
                 payment_handlers: paymentHandlers,
             },

package/dist/ucp-server.d.ts

@@ -2,6 +2,8 @@ import { MerchantConfig, CheckoutSession, Order, Buyer, Fulfillment } from './sc
 export declare class UCPServer {
     private config;
     private itemsMap;
+    private checkoutSessions;
+    private orders;
     constructor(config: MerchantConfig);
     getProfile(): {
         ucp: {
@@ -16,6 +18,10 @@ export declare class UCPServer {
                 }[];
             };
             capabilities: {
+                'dev.ucp.identity_linking'?: {
+                    version: string;
+                    spec: string;
+                }[] | undefined;
                 'dev.ucp.shopping.checkout': {
                     version: string;
                     spec: string;

package/dist/ucp-server.js

@@ -3,12 +3,14 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.UCPServer = void 0;
 const uuid_1 = require("uuid");
 const schema_1 = require("./schema");
-// In-memory stores
-const checkoutSessions = new Map();
-const orders = new Map();
+const stripe_1 = require("./stripe");
+const paypal_1 = require("./paypal");
+const logger_1 = require("./logger");
 class UCPServer {
     config;
     itemsMap;
+    checkoutSessions = new Map();
+    orders = new Map();
     constructor(config) {
         this.config = config;
         this.itemsMap = new Map(config.items.map((item) => [item.id, item]));
@@ -62,6 +64,14 @@ class UCPServer {
                             schema: 'https://ucp.dev/schemas/shopping/order.json',
                         },
                     ],
+                    ...(this.config.oauth ? {
+                        'dev.ucp.identity_linking': [
+                            {
+                                version: schema_1.UCP_VERSION,
+                                spec: 'https://ucp.dev/specification/identity-linking',
+                            },
+                        ],
+                    } : {}),
                 },
                 payment_handlers: paymentHandlers,
             },
@@ -156,16 +166,16 @@ class UCPServer {
             continue_url: `${this.config.domain}/checkout/${id}`,
             expires_at: expiresAt,
         };
-        checkoutSessions.set(id, session);
+        this.checkoutSessions.set(id, session);
         return session;
     }
     // Get checkout session
     getCheckout(id) {
-        return checkoutSessions.get(id);
+        return this.checkoutSessions.get(id);
     }
     // Update checkout session
     updateCheckout(id, data) {
-        const session = checkoutSessions.get(id);
+        const session = this.checkoutSessions.get(id);
         if (!session)
             return undefined;
         // Update buyer
@@ -251,18 +261,58 @@ class UCPServer {
         const newMessages = this.validateCheckout(session);
         session.messages = newMessages.length > 0 ? newMessages : undefined;
         session.status = newMessages.length > 0 ? 'incomplete' : 'ready_for_complete';
-        checkoutSessions.set(id, session);
+        this.checkoutSessions.set(id, session);
         return session;
     }
     // Complete checkout (create order)
     async completeCheckout(id) {
-        const session = checkoutSessions.get(id);
+        const session = this.checkoutSessions.get(id);
         if (!session)
             return { error: 'Checkout session not found' };
         if (session.status !== 'ready_for_complete') {
             return { error: 'Checkout is not ready for completion', messages: session.messages };
         }
         const orderId = `order_${(0, uuid_1.v4)().replace(/-/g, '').slice(0, 12)}`;
+        // Get total amount for payment
+        const totalAmount = session.totals.find(t => t.type === 'total')?.amount || 0;
+        // Payment processing - try Stripe first, then PayPal
+        if (totalAmount > 0) {
+            if ((0, stripe_1.isStripeConfigured)()) {
+                try {
+                    const paymentIntent = await (0, stripe_1.createPaymentIntent)({
+                        amount: totalAmount,
+                        currency: session.currency,
+                        checkoutId: id,
+                        customerEmail: session.buyer?.email,
+                        metadata: { order_id: orderId },
+                    });
+                    if (paymentIntent) {
+                        logger_1.logger.info({ checkoutId: id, paymentIntentId: paymentIntent.id, amount: totalAmount }, 'Stripe payment intent created');
+                    }
+                }
+                catch (error) {
+                    logger_1.logger.error({ error, checkoutId: id }, 'Failed to create Stripe payment intent');
+                    return { error: 'Payment processing failed' };
+                }
+            }
+            else if ((0, paypal_1.isPayPalConfigured)()) {
+                try {
+                    const ppOrder = await (0, paypal_1.createPayPalOrder)({
+                        amount: totalAmount,
+                        currency: session.currency,
+                        checkoutId: id,
+                        description: `Order ${orderId}`,
+                    });
+                    if (ppOrder) {
+                        logger_1.logger.info({ checkoutId: id, paypalOrderId: ppOrder.id, amount: totalAmount }, 'PayPal order created');
+                    }
+                }
+                catch (error) {
+                    logger_1.logger.error({ error, checkoutId: id }, 'Failed to create PayPal order');
+                    return { error: 'Payment processing failed' };
+                }
+            }
+        }
         const order = {
             ucp: {
                 version: schema_1.UCP_VERSION,
@@ -294,7 +344,7 @@ class UCPServer {
                 : undefined,
             created_at: new Date().toISOString(),
         };
-        orders.set(orderId, order);
+        this.orders.set(orderId, order);
         // Update session to completed state with order confirmation
         session.status = 'completed';
         session.order = {
@@ -303,26 +353,26 @@ class UCPServer {
         };
         delete session.continue_url;
         delete session.messages;
-        checkoutSessions.set(id, session);
+        this.checkoutSessions.set(id, session);
         return session;
     }
     // Cancel checkout
     cancelCheckout(id) {
-        const session = checkoutSessions.get(id);
+        const session = this.checkoutSessions.get(id);
         if (!session)
             return undefined;
         session.status = 'canceled';
         delete session.continue_url;
-        checkoutSessions.set(id, session);
+        this.checkoutSessions.set(id, session);
         return session;
     }
     // Get order
     getOrder(id) {
-        return orders.get(id);
+        return this.orders.get(id);
     }
     // List orders
     listOrders() {
-        return Array.from(orders.values());
+        return Array.from(this.orders.values());
     }
     getConfig() {
         return this.config;

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.1",
+  "version": "1.2.0",
   "description": "Generate UCP-compliant servers for merchants from a simple schema",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -23,8 +23,13 @@
     "agentic",
     "ai-commerce"
   ],
-  "author": "",
+  "author": "Hemanth HM <hemanth@h3manth.com>",
   "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/hemanth/ucpify.git"
+  },
+  "homepage": "https://github.com/hemanth/ucpify#readme",
   "type": "commonjs",
   "dependencies": {
     "@paypal/paypal-server-sdk": "^2.2.0",
@@ -50,4 +55,4 @@
     "vitest": "^4.0.18"
   },
   "name": "ucpify"
-}
+}

package/src/cli.ts

@@ -7,11 +7,12 @@ import { MerchantConfigSchema, MerchantConfig } from './schema';
 import { createExpressApp } from './express-app';
 
 const program = new Command();
+const pkg = JSON.parse(fs.readFileSync(path.join(__dirname, '..', 'package.json'), 'utf-8'));
 
 program
   .name('ucpify')
   .description('Generate and run a UCP-compliant server for merchants')
-  .version('1.0.0');
+  .version(pkg.version);
 
 program
   .command('init')
@@ -114,6 +115,9 @@ program
       const app = createExpressApp(config, { useDb });
       const port = config.port;
       const storageType = useDb ? 'SQLite' : 'In-memory';
+      const oauthStatus = config.oauth
+        ? config.oauth.provider === 'built-in' ? 'Built-in' : `External (${config.oauth.issuer})`
+        : 'Disabled';
 
       app.listen(port, () => {
         console.log(`
@@ -124,6 +128,7 @@ program
 ║  Domain:   ${config.domain.padEnd(49)}║
 ║  Port:     ${String(port).padEnd(49)}║
 ║  Storage:  ${storageType.padEnd(49)}║
+║  OAuth:    ${oauthStatus.padEnd(49)}║
 ╠══════════════════════════════════════════════════════════════╣
 ║  Endpoints:                                                  ║
 ║  • GET  /.well-known/ucp              - UCP Profile          ║
@@ -135,7 +140,11 @@ program
 ║  • GET  /ucp/v1/orders                - List Orders          ║
 ║  • GET  /ucp/v1/orders/:id            - Get Order            ║
 ║  • GET  /ucp/v1/items                 - Product Catalog      ║
-║  • GET  /health                       - Health Check         ║
+║  • GET  /health                       - Health Check         ║${config.oauth ? `
+║  • GET  /.well-known/oauth-...        - OAuth Metadata       ║` : ''}${config.oauth?.provider === 'built-in' ? `
+║  • GET  /oauth2/authorize             - Authorization        ║
+║  • POST /oauth2/token                 - Token Exchange       ║
+║  • POST /oauth2/revoke                - Token Revocation     ║` : ''}
 ╚══════════════════════════════════════════════════════════════╝
 
 🔗 UCP Profile: http://localhost:${port}/.well-known/ucp
@@ -143,6 +152,7 @@ program
 🚚 Shipping: ${config.shipping_options.length} options available
 💳 Payment Handlers: ${config.payment_handlers.length} configured
 💾 Storage: ${storageType}${useDb ? ' (./data/ucp.db)' : ''}
+🔐 OAuth: ${oauthStatus}
         `);
       });
     } catch (error) {
@@ -175,10 +185,30 @@ program
       console.log(`   • Products: ${config.items.length}`);
       console.log(`   • Shipping Options: ${config.shipping_options.length}`);
       console.log(`   • Payment Handlers: ${config.payment_handlers.length}`);
+      console.log(`   • OAuth: ${config.oauth ? config.oauth.provider : 'Disabled'}`);
     } catch (error) {
       console.error('❌ Validation failed:', error);
       process.exit(1);
     }
   });
 
+program
+  .command('oauth:add-client')
+  .description('Register a new OAuth client (built-in provider only)')
+  .argument('<name>', 'Client application name')
+  .option('-r, --redirect-uri <uri>', 'Redirect URI', 'http://localhost:3000/callback')
+  .action((name, options) => {
+    const { OAuthManager } = require('./oauth');
+    const oauthManager = new OAuthManager();
+    const client = oauthManager.createClient(name, [options.redirectUri]);
+
+    console.log(`\n✅ OAuth client created!\n`);
+    console.log(`   Client ID:     ${client.client_id}`);
+    console.log(`   Client Secret: ${client.client_secret}`);
+    console.log(`   Redirect URI:  ${options.redirectUri}`);
+    console.log(`\n⚠️  Save the client secret. It cannot be retrieved later.`);
+    console.log(`\n📝 Add to your merchant-config.json:`);
+    console.log(JSON.stringify({ oauth: { provider: 'built-in' } }, null, 2));
+  });
+
 program.parse();

package/src/db.ts

@@ -71,9 +71,44 @@ CREATE TABLE IF NOT EXISTS inventory (
   updated_at TEXT NOT NULL
 );
 
+CREATE TABLE IF NOT EXISTS oauth_clients (
+  client_id TEXT PRIMARY KEY,
+  client_secret_hash TEXT NOT NULL,
+  name TEXT NOT NULL,
+  redirect_uris_json TEXT NOT NULL,
+  created_at TEXT NOT NULL
+);
+
+CREATE TABLE IF NOT EXISTS oauth_codes (
+  code TEXT PRIMARY KEY,
+  client_id TEXT NOT NULL,
+  user_id TEXT NOT NULL,
+  scope TEXT NOT NULL,
+  redirect_uri TEXT NOT NULL,
+  code_challenge TEXT,
+  code_challenge_method TEXT,
+  expires_at INTEGER NOT NULL,
+  used INTEGER NOT NULL DEFAULT 0,
+  FOREIGN KEY (client_id) REFERENCES oauth_clients(client_id)
+);
+
+CREATE TABLE IF NOT EXISTS oauth_tokens (
+  token TEXT PRIMARY KEY,
+  token_type TEXT NOT NULL,
+  client_id TEXT NOT NULL,
+  user_id TEXT NOT NULL,
+  scope TEXT NOT NULL,
+  parent_token TEXT,
+  expires_at INTEGER NOT NULL,
+  revoked INTEGER NOT NULL DEFAULT 0,
+  FOREIGN KEY (client_id) REFERENCES oauth_clients(client_id)
+);
+
 CREATE INDEX IF NOT EXISTS idx_line_items_checkout ON line_items(checkout_id);
 CREATE INDEX IF NOT EXISTS idx_orders_checkout ON orders(checkout_id);
 CREATE INDEX IF NOT EXISTS idx_checkouts_status ON checkouts(status);
+CREATE INDEX IF NOT EXISTS idx_oauth_tokens_client ON oauth_tokens(client_id);
+CREATE INDEX IF NOT EXISTS idx_oauth_codes_client ON oauth_codes(client_id);
 `;
 
 db.exec(schema);