@agentrhq/webcmd 0.4.0 → 0.4.2

package/dist/src/hosted/runner.test.js

@@ -10,7 +10,7 @@ import { createProgram } from '../cli.js';
 import { formatRootHelp } from '../command-presentation.js';
 import { HOSTED_ROOT_HELP } from '../completion-shared.js';
 import { PKG_VERSION } from '../version.js';
-import { makeHostedConfig } from './config.js';
+import { makeHostedConfig, makeLocalConfig } from './config.js';
 import { runHostedCli } from './runner.js';
 const [packageMajor, packageMinor] = PKG_VERSION.split('.');
 const compatiblePatchVersion = `${packageMajor}.${packageMinor}.99`;
@@ -223,6 +223,107 @@ function captureLocalBrowserStructure(argv) {
     }
 }
 describe('runHostedCli', () => {
+    const publicProfile = {
+        id: 'profile_work',
+        name: 'Work',
+        workspace: 'ws_demo',
+        default: false,
+        status: 'available',
+        createdAt: '2026-07-24T00:00:00.000Z',
+        updatedAt: '2026-07-24T00:00:00.000Z',
+        lastUsedAt: '2026-07-24T00:00:00.000Z',
+    };
+    it('lists and deletes hosted profiles without fetching the manifest', async () => {
+        const requests = [];
+        const fetchImpl = vi.fn(async (url, init) => {
+            const request = {
+                url: String(url),
+                method: init?.method ?? 'GET',
+                ...(init?.body ? { body: JSON.parse(String(init.body)) } : {}),
+            };
+            requests.push(request);
+            if (request.method === 'DELETE') {
+                return new Response(JSON.stringify({ ok: true, deleted: true }));
+            }
+            return new Response(JSON.stringify({ ok: true, profiles: [publicProfile] }));
+        });
+        for (const argv of [
+            ['profile', 'list', '-f', 'json'],
+            ['profile', 'delete', 'profile_work', '-f', 'json'],
+        ]) {
+            const stdout = sink();
+            const stderr = sink();
+            const result = await runHostedCli(argv, {
+                config: makeHostedConfig({ apiBaseUrl: 'https://api.example.com', apiKey: 'key' }),
+                stdout: stdout.stream,
+                stderr: stderr.stream,
+                fetchImpl,
+            });
+            expect(result).toEqual({ handled: true, exitCode: 0 });
+            expect(stderr.text()).toBe('');
+            expect(stdout.text()).toContain(argv[1] === 'delete' ? '"deleted": true' : '"id": "profile_work"');
+        }
+        expect(requests).toEqual([
+            { url: 'https://api.example.com/v1/profiles', method: 'GET' },
+            { url: 'https://api.example.com/v1/profiles/profile_work', method: 'DELETE' },
+        ]);
+        expect(requests.some(request => request.url.endsWith('/v1/manifest'))).toBe(false);
+    });
+    it.each(['create', 'get'])('rejects the removed profile %s subcommand', async (command) => {
+        const stderr = sink();
+        const fetchImpl = vi.fn();
+        const result = await runHostedCli(['profile', command, 'Work'], {
+            config: makeHostedConfig({ apiBaseUrl: 'https://api.example.com', apiKey: 'key' }),
+            stderr: stderr.stream,
+            fetchImpl,
+        });
+        expect(result.handled).toBe(true);
+        expect(stderr.text()).toMatch(/unknown command|not supported/i);
+        expect(fetchImpl).not.toHaveBeenCalled();
+    });
+    it('threads the ambient workspace onto hosted profile requests', async () => {
+        const cases = [
+            { name: 'from WEBCMD_WORKSPACE env', argv: ['profile', 'list', '-f', 'json'], env: { WEBCMD_WORKSPACE: 'ws1' }, expected: 'ws1' },
+            { name: 'from --workspace flag', argv: ['--workspace', 'ws2', 'profile', 'list', '-f', 'json'], env: {}, expected: 'ws2' },
+        ];
+        for (const testCase of cases) {
+            let capturedHeader = null;
+            const fetchImpl = vi.fn(async (_url, init) => {
+                capturedHeader = new Headers(init?.headers).get('x-webcmd-workspace');
+                return new Response(JSON.stringify({ ok: true, profiles: [publicProfile] }));
+            });
+            const stdout = sink();
+            const stderr = sink();
+            const result = await runHostedCli(testCase.argv, {
+                config: makeHostedConfig({ apiBaseUrl: 'https://api.example.com', apiKey: 'key' }),
+                stdout: stdout.stream,
+                stderr: stderr.stream,
+                fetchImpl,
+                env: testCase.env,
+            });
+            expect(result).toEqual({ handled: true, exitCode: 0 });
+            expect(stderr.text()).toBe('');
+            expect(capturedHeader).toBe(testCase.expected);
+        }
+    });
+    it.each(['rename', 'use'])('rejects local-only profile %s in hosted mode without an API call', async (command) => {
+        const stderr = sink();
+        const fetchImpl = vi.fn();
+        const result = await runHostedCli(['profile', command, 'value'], {
+            config: makeHostedConfig({ apiBaseUrl: 'https://api.example.com', apiKey: 'key' }),
+            stderr: stderr.stream,
+            fetchImpl,
+        });
+        expect(result).toEqual({ handled: true, exitCode: 78 });
+        expect(stderr.text()).toContain(`webcmd profile ${command} is not available in hosted mode.`);
+        expect(fetchImpl).not.toHaveBeenCalled();
+    });
+    it.each(['list', 'rename', 'use'])('leaves profile %s to the existing local command surface', async (command) => {
+        const result = await runHostedCli(['profile', command, 'value'], {
+            config: makeLocalConfig(),
+        });
+        expect(result).toEqual({ handled: false, exitCode: 0 });
+    });
     it.each([
         ['missing-site'],
         ['missing-site', 'child'],

package/dist/src/hosted/types.d.ts

@@ -40,10 +40,13 @@ export interface HostedManifest {
     commands: HostedCommand[];
 }
 export interface HostedPublicProfile {
-    name: string;
+    id: string;
+    name: string | null;
+    workspace: string | null;
     default: boolean;
-    status: 'available';
+    status: 'pending' | 'available';
     createdAt: string;
+    updatedAt: string;
     lastUsedAt: string;
 }
 export interface HostedProfilesResponse {

package/dist/src/root-command-surface.js

@@ -35,6 +35,11 @@ export function parseHostedRootCommandSurface(argv) {
     let stderr = '';
     const boundary = findRootCommandBoundary(input);
     const root = configureRootCommandSurface(new Command('webcmd'))
+        // Hosted-only: registered here (not in the shared configureRootCommandSurface)
+        // so the local CLI surface is unaffected. Lets Commander's structural parse
+        // consume `--workspace <id>` before the site/command token instead of
+        // throwing an unknown-option error.
+        .option('--workspace <id>', 'Hosted workspace id/slug for the request')
         .exitOverride()
         .configureOutput({
         writeOut: value => { stdout += value; },
@@ -89,13 +94,16 @@ export function parseHostedRootCommandSurface(argv) {
 function findRootCommandBoundary(argv) {
     for (let index = 0; index < argv.length; index += 1) {
         const token = argv[index];
-        if (token === '--profile') {
+        if (token === '--profile' || token === '--workspace') {
             // Commander requires and consumes the next token even when it is `--` or
             // starts with a dash. Structural failures have already been reported.
+            // `--workspace` is hosted-only (not a registered Commander option here)
+            // but must still be skipped as a value pair so it and its value are not
+            // mistaken for the site/command token and forwarded to the server.
             index += 1;
             continue;
         }
-        if (token.startsWith('--profile='))
+        if (token.startsWith('--profile=') || token.startsWith('--workspace='))
             continue;
         if (token === '--')
             return { separatorIndex: index };

package/hosted-contract.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "webcmdVersion": "0.4.0",
+  "webcmdVersion": "0.4.2",
   "outputFormats": [
     "table",
     "plain",
@@ -69,6 +69,334 @@
     }
   ],
   "commands": [
+    {
+      "command": "amazon-in/checkout",
+      "site": "amazon-in",
+      "name": "checkout",
+      "description": "Prepare a guarded Amazon.in checkout with browser-only payment handoff",
+      "access": "write",
+      "strategy": "UI",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [
+        {
+          "name": "input",
+          "type": "string",
+          "description": "Amazon.in product URL or ASIN",
+          "positional": true,
+          "required": true,
+          "variadic": false
+        }
+      ],
+      "options": [
+        {
+          "name": "quantity",
+          "type": "int",
+          "description": "Quantity (1-10)",
+          "positional": false,
+          "required": false,
+          "variadic": false,
+          "default": 1
+        },
+        {
+          "name": "size",
+          "type": "string",
+          "description": "Exact visible size label",
+          "positional": false,
+          "required": false,
+          "variadic": false
+        },
+        {
+          "name": "colour",
+          "type": "string",
+          "description": "Exact visible colour label",
+          "positional": false,
+          "required": false,
+          "variadic": false
+        },
+        {
+          "name": "payment",
+          "type": "string",
+          "description": "Payment method; secrets remain browser-only",
+          "positional": false,
+          "required": true,
+          "variadic": false,
+          "choices": [
+            "upi",
+            "saved-card",
+            "new-card",
+            "cod"
+          ]
+        },
+        {
+          "name": "card-last4",
+          "type": "string",
+          "description": "Saved-card selector: exactly four digits",
+          "positional": false,
+          "required": false,
+          "variadic": false
+        },
+        {
+          "name": "place-order",
+          "type": "boolean",
+          "description": "Submit the final Amazon action once",
+          "positional": false,
+          "required": false,
+          "variadic": false,
+          "default": false
+        }
+      ],
+      "columns": [
+        "status",
+        "asin",
+        "title",
+        "size",
+        "colour",
+        "quantity",
+        "item_price",
+        "total",
+        "payment_method",
+        "delivery_date",
+        "action",
+        "verify_command"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
+    {
+      "command": "amazon-in/checkout-status",
+      "site": "amazon-in",
+      "name": "checkout-status",
+      "description": "Read the current Amazon.in checkout or payment state without clicking",
+      "access": "read",
+      "strategy": "UI",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [],
+      "options": [],
+      "columns": [
+        "status",
+        "order_id",
+        "total",
+        "payment_method",
+        "action"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
+    {
+      "command": "amazon-in/login",
+      "site": "amazon-in",
+      "name": "login",
+      "description": "Open amazon-in login",
+      "access": "write",
+      "strategy": "COOKIE",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [],
+      "options": [],
+      "columns": [
+        "status",
+        "logged_in",
+        "site",
+        "user_name",
+        "action",
+        "verify_command"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
+    {
+      "command": "amazon-in/product",
+      "site": "amazon-in",
+      "name": "product",
+      "description": "Fetch the current Amazon.in price and selected product variant",
+      "access": "read",
+      "strategy": "UI",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [
+        {
+          "name": "input",
+          "type": "string",
+          "description": "Amazon.in product URL or ASIN",
+          "positional": true,
+          "required": true,
+          "variadic": false
+        }
+      ],
+      "options": [],
+      "columns": [
+        "asin",
+        "title",
+        "price",
+        "mrp",
+        "discount",
+        "availability",
+        "size",
+        "colour",
+        "image_url",
+        "product_url"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
+    {
+      "command": "amazon-in/search",
+      "site": "amazon-in",
+      "name": "search",
+      "description": "Search Amazon.in products with inclusive INR price bounds and images",
+      "access": "read",
+      "strategy": "UI",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [
+        {
+          "name": "query",
+          "type": "string",
+          "description": "Product search query",
+          "positional": true,
+          "required": true,
+          "variadic": false
+        }
+      ],
+      "options": [
+        {
+          "name": "min-price",
+          "type": "number",
+          "description": "Inclusive minimum price in rupees",
+          "positional": false,
+          "required": false,
+          "variadic": false
+        },
+        {
+          "name": "max-price",
+          "type": "number",
+          "description": "Inclusive maximum price in rupees",
+          "positional": false,
+          "required": false,
+          "variadic": false
+        },
+        {
+          "name": "limit",
+          "type": "int",
+          "description": "Maximum results (1-50)",
+          "positional": false,
+          "required": false,
+          "variadic": false,
+          "default": 20
+        }
+      ],
+      "columns": [
+        "rank",
+        "asin",
+        "title",
+        "price",
+        "mrp",
+        "rating",
+        "review_count",
+        "image_url",
+        "product_url",
+        "is_sponsored"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
+    {
+      "command": "amazon-in/whoami",
+      "site": "amazon-in",
+      "name": "whoami",
+      "description": "Show the current logged-in amazon-in account",
+      "access": "read",
+      "strategy": "COOKIE",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [],
+      "options": [],
+      "columns": [
+        "logged_in",
+        "site",
+        "user_name"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
+    {
+      "command": "amazon-in/wishlist",
+      "site": "amazon-in",
+      "name": "wishlist",
+      "description": "Fetch current prices for products in the default Amazon.in wishlist",
+      "access": "read",
+      "strategy": "UI",
+      "browser": true,
+      "domain": "amazon.in",
+      "positionals": [],
+      "options": [
+        {
+          "name": "filter",
+          "type": "string",
+          "description": "Wishlist items to include",
+          "positional": false,
+          "required": false,
+          "variadic": false,
+          "default": "unpurchased",
+          "choices": [
+            "unpurchased",
+            "all"
+          ]
+        }
+      ],
+      "columns": [
+        "list_name",
+        "item_id",
+        "asin",
+        "title",
+        "price",
+        "mrp",
+        "availability",
+        "size",
+        "colour",
+        "image_url",
+        "product_url"
+      ],
+      "aliases": [],
+      "defaultFormat": "table",
+      "fileArguments": [],
+      "sessionPolicy": "create-or-reuse",
+      "availability": {
+        "mode": "hosted"
+      }
+    },
     {
       "command": "amazon/bestsellers",
       "site": "amazon",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentrhq/webcmd",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "Turn websites, browser sessions, desktop apps, and local tools into deterministic CLI surfaces for humans and AI agents.",
   "engines": {
     "node": ">=20.0.0"
@@ -114,4 +114,4 @@
   "overrides": {
     "postcss": "^8.5.10"
   }
-}
+}