portage-cli 0.13.0 → 0.13.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7c58c0040e6d1f58b5cf9dbbe64c91273c198a4cfc8119477e1fcbbf04c4c4dd
-  data.tar.gz: ba48da2d241487885a286eb8044e493f6727b7e7d4b96f3b9dc7d748b1644f67
+  metadata.gz: b9dba6d24f2ebadd03022d53d85684d8cbe8e3110b609f1becadd4d5212ec47b
+  data.tar.gz: ed6cfcbb1516e7addd017c25a52343f95c71b72bde869aa7e1acd06a44eb3a48
 SHA512:
-  metadata.gz: 388d5ea84ba8ba1279862b57b07cf36db2164cec50752638ae3eb2d924fd81c56a569ea2d107994fc56f3d1989ab0d5b567fed3e0a12e9b3e7c65a291b95e198
-  data.tar.gz: fd18e9aa2c798935143742e961936c359ff68722a3f8bad2f20489322456df3467f042ef9c653a4f72f167fc4a765a08bd81680e01ec6c2a0b26fb0ce934b477
+  metadata.gz: 54563a08ca407b2847502f2a95290598147f4e78aa47f346ce0f20d637d416afb6e5c7119ba4e19e233fe64286a83cb5b47fc1351d63a7aabac81f5065060893
+  data.tar.gz: 396ee2c09e74e5708fd5ade1555c412bf5b342979549b04932809760e0744b303050c0dc92b4a4e97d3e4c8f0090a92f7921cc29b020e277370e2566cdf8ca07

data/CHANGELOG.md

@@ -6,6 +6,14 @@ pre-1.0, so APIs may still shift between minor versions.
 
 ## [Unreleased]
 
+## [0.13.1] - 2026-10-07
+
+- **Fix: `portage orders reconcile` can settle a hand-off on a BigCommerce, Magento, Wix or Shopify-adapter store.** Those adapters kept checkout status in the process that created the checkout, so reconcile (a new process) only ever saw `incomplete` or not-found. With their new releases, an adapter checkout that became a paid order reads as `completed` with its `order`, and reconcile settles it and snapshots the order as it does for native UCP stores. No CLI code changed; a new spec covers the adapter loopback path end to end. WooCommerce has no such signal and still stays pending (design-log §55).
+
+- **Fix: `portage orders reconcile` (and `buy --wait`) can read a native UCP checkout again.** `HandoffReconciler` called `get_checkout` and `get_order` without `meta.ucp-agent.profile`, so every real UCP store answered `MissingAgentProfileError`. Reconcile read that as "not found", so a pending hand-off never settled while the checkout lived and would have settled `failed`/`unknown` at expiry even if the shopper had paid. It now sends the same agent profile `buy` does (found in the handoff-reconcile Phase 0 live check, design-log §55). A store error's note is now the server's own message (`ServerError#summary`), not Shopify's whole several-kilobyte UCP envelope.
+
+- **Fix: a store that escalates its checkout can be approved and reconciled under `require_approval`.** On a dry run, including the dry run the default `require_approval: any` makes of an unapproved `buy --yes`, a `requires_escalation` checkout was reported as `requires_escalation`, so no quote was saved, there was nothing to `portage approve`, and the report pointed at the checkout link with no pending hand-off recorded. A dry run now reports it as `dry_run` with a new `handoff_expected: true` key and a note that a real run hands it off, so the gated run returns `needs_approval` and the approved run's hand-off is recorded for reconcile (design-log §55). A plain `--yes` run outside the gate still escalates as before.
+
 ## [0.13.0] - 2026-10-05
 
 - **Fix: `payment_methods` adapter fallback no longer silently fails.** `PaymentMethods#adapter_session` referenced `Buy::PermissiveAuthenticator`, which doesn't exist (the class is `Portage::Cli::PermissiveAuthenticator`); the resulting `NameError` was swallowed by the method's `rescue StandardError`, so enrolling against your own adapter-backed store always reported no session. It now requires and uses the right constant. Patch-level bug fix.

data/lib/portage/cli/buy.rb

@@ -1075,8 +1075,13 @@ module Portage
         return quote_changed_report(source, products, checkout, warnings) if quote_exceeded?(checkout)
 
         escalation = decide_escalation(checkout, warnings)
+        # A dry run never hands off, so an escalating checkout is still just
+        # a priced dry run: reporting it as `requires_escalation` saved no
+        # quote, and the CLI's approval gate had nothing to approve
+        # (design-log §55). The real run after approval escalates and hands
+        # off, which is where the pending record gets written.
+        return dry_run_report(source, products, checkout, warnings, escalates: escalation[:escalate]) if @dry_run
         return escalated_report(source, products, checkout, warnings, escalation) if escalation[:escalate]
-        return dry_run_report(source, products, checkout, warnings) if @dry_run
         return webmcp_handoff_checkout_report(source, products, checkout, warnings) if force_handoff
         return confirmation_needed_report(source, products, checkout, warnings) unless confirmed?
 
@@ -1582,9 +1587,13 @@ module Portage
       # `warnings` here are #reconcile_checkout's mismatches, which a real
       # run of the same checkout stops on — so the report says so up front,
       # before anyone approves a quote for it.
-      def dry_run_report(source, products, checkout, warnings = [])
+      def dry_run_report(source, products, checkout, warnings = [], escalates: false)
         message = "Dry run — checkout created but not completed."
         extra = {}
+        if escalates
+          message += " The store needs the shopper to finish this checkout, so a real run hands it off."
+          extra[:handoff_expected] = true
+        end
         if warnings.any?
           message += " It doesn't match the request (#{warnings.join(' ')}), so a real purchase would stop " \
                      "with checkout_mismatch."

data/lib/portage/cli/handoff_reconciler.rb

@@ -4,6 +4,7 @@ require "portage/ucp"
 require "portage/ucp/client"
 require "portage/ucp/journal"
 require_relative "user_agent"
+require_relative "agent_profile_url"
 require_relative "adapter_session"
 require_relative "handoff_spend_mode"
 require_relative "reconcile_notifier"
@@ -92,7 +93,7 @@ module Portage
 
       def reconcile(record)
         session = reconnect(record["store_url"])
-        checkout = session.get_checkout(checkout_id: record["checkout_id"])
+        checkout = session.get_checkout(checkout_id: record["checkout_id"], meta: agent_meta)
         settle_from_checkout(record, checkout)
       rescue StandardError => e
         # A reconnect failure (no automated path back into the store) and a
@@ -102,7 +103,9 @@ module Portage
         # buys nothing here: either way, this run learned nothing new about
         # whether the shopper paid, and the record's own `expires_at` is
         # still the only thing allowed to turn that into a settle.
-        settle_not_found(record, note: e.message)
+        # ServerError#summary: Shopify answers a gone checkout with its whole
+        # UCP envelope as the message; the note only needs its messages[].
+        settle_not_found(record, note: e.respond_to?(:summary) ? e.summary : e.message)
       end
 
       def settle_from_checkout(record, checkout)
@@ -176,7 +179,7 @@ module Portage
         return nil unless order && order["id"]
 
         session = reconnect(record["store_url"])
-        order_wire = session.get_order(order_id: order["id"])
+        order_wire = session.get_order(order_id: order["id"], meta: agent_meta)
         return order["id"] unless order_wire
 
         @order_ledger.record(idempotency_key: record["idempotency_key"], order: WireOrder.new(order_wire))
@@ -233,6 +236,11 @@ module Portage
           raise(ReconnectError, "no automated path back into #{store_url}")
       end
 
+      # Same `meta.ucp-agent.profile` Buy#agent_meta sends: a real UCP
+      # server rejects any call without it, so leaving it off made every
+      # native reconcile fail as "not found" (design-log §55).
+      def agent_meta = { agent_profile: AgentProfileUrl.resolve }
+
       def native_session(uri)
         Portage::Ucp::Client.discover(uri.to_s, headers: UserAgent.headers)
       rescue Portage::Ucp::Client::DiscoveryError

data/lib/portage/cli/version.rb

@@ -1,5 +1,5 @@
 module Portage
   module Cli
-    VERSION = "0.13.0".freeze
+    VERSION = "0.13.1".freeze
   end
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: portage-cli
 version: !ruby/object:Gem::Version
-  version: 0.13.0
+  version: 0.13.1
 platform: ruby
 authors:
 - Tom Whitbread
 autorequire:
 bindir: exe
 cert_chain: []
-date: 2026-10-05 00:00:00.000000000 Z
+date: 2026-10-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: irb