@airwallex/airi-cli 0.1.0-beta.2 → 0.1.0-beta.3

package/README.md

@@ -1,11 +1,12 @@
 # airi-cli
 
-![Version](https://img.shields.io/badge/version-0.1.0--beta.2-orange)
+![Version](https://img.shields.io/badge/version-0.1.0--beta.3-orange)
 
 Command-line tool for the Airi wallet. Authenticate with OAuth, inspect your
 session, and drive an **agentic checkout** — list payment methods, create a
-payment mandate, fetch the single-use checkout credential, and report the
-result — from your terminal or an AI agent.
+payment mandate, fetch the single-use checkout credential, report the result,
+and cancel a mandate — or browse mandates already in the wallet, from your
+terminal or an AI agent.
 
 Results are printed to stdout as JSON, so they are easy to consume from scripts
 and agents.
@@ -59,7 +60,7 @@ If npm is not available, install the binary directly with the install script:
 curl -fsSL https://raw.githubusercontent.com/airwallex/airi-cli/master/install.sh | sh
 ```
 
-To uninstall (removes the binary and local state):
+To uninstall (removes the binary):
 
 ```bash
 curl -fsSL https://raw.githubusercontent.com/airwallex/airi-cli/master/install.sh | sh -s -- uninstall
@@ -203,6 +204,22 @@ after `auth login`, is:
 
 4. **Report the result** — after submitting the checkout, always report the
    outcome with `airi-cli mandate result --mandate-id <id> --result <SUCCEEDED|CANCELLED|DECLINED>`.
+5. **Cancel a mandate** — when the user asks to cancel, run
+   `airi-cli mandate cancel --mandate-id <id>`. The id is a flag, not a
+   positional argument. A cancelled mandate's status becomes `DENIED`. An
+   agent should cancel only when the user requests it.
+
+## Browsing mandates
+
+`airi-cli mandate list` returns the user's mandates, most recent first. Page
+with `--page` (0-based) and `--size` when `hasMore` is true. Filter with
+repeatable `--status` (`CREATED`, `AUTHENTICATED`, `READY`, `COMPLETED`,
+`FAILED`, `DENIED`) and `--created-from` / `--created-to` (full ISO-8601
+timestamps, for example `2026-10-01T00:00:00Z`).
+
+```bash
+airi-cli mandate list --status READY --size 10 --pretty
+```
 
 ## Commands
 
@@ -213,7 +230,9 @@ after `auth login`, is:
 | `airi-cli auth whoami` | Print the current sign-in status. |
 | `airi-cli auth logout` | Sign out by removing the stored session (local only). |
 | `airi-cli payment-methods list` | List payment methods available for agentic checkout. |
+| `airi-cli mandate list` | List payment mandates, most recent first. |
 | `airi-cli mandate create` | Create a payment mandate for a checkout. |
+| `airi-cli mandate cancel` | Cancel a payment mandate (`status` becomes `DENIED`). |
 | `airi-cli mandate get-credential` | Poll for and fetch the single-use checkout credential. |
 | `airi-cli mandate result` | Report the transaction outcome for a mandate. |
 | `airi-cli skills install` | Deploy the bundled agent skills into local AI-agent skill directories. |
@@ -238,6 +257,22 @@ Flags for `airi-cli auth whoami`:
 | --- | --- | --- |
 | `--verbose` | `false` | Include device details (name, platform, device id). |
 
+Flags for `airi-cli mandate list`:
+
+| Flag | Default | Description |
+| --- | --- | --- |
+| `--status` | — | Filter by mandate status (repeatable): `CREATED`, `AUTHENTICATED`, `READY`, `COMPLETED`, `FAILED`, `DENIED`. |
+| `--created-from` | — | Include mandates created at or after this ISO-8601 time. |
+| `--created-to` | — | Include mandates created at or before this ISO-8601 time. |
+| `--page` | `0` | Zero-based page number. |
+| `--size` | `10` | Mandates per page (1–100). |
+
+Flags for `airi-cli mandate cancel`:
+
+| Flag | Description |
+| --- | --- |
+| `--mandate-id` | Mandate ID (required). |
+
 Flags for `airi-cli mandate create` (all required):
 
 | Flag | Description |

package/checksums.json

@@ -1,8 +1,8 @@
 {
   "checksums": {
-    "linux_amd64": "1654d67477a4673902000467638dd9d8dabeebaf05b6ccc2f3b32776cd18e8a5",
-    "linux_arm64": "9962fd90bfd55d5aa722e0c40ce93038656101127aeed60c58a2ea169a36efcd",
-    "macos_x86_64": "e81bb619536b8b5c86bf3f9d94c1436022c51a3bf03d14bbf640bc6154e38235",
-    "macos_arm64": "5f9fbb14c3d27e7375fa4e9d17f99b27d21b3883f7c94ddc70c89e07d276f849"
+    "linux_amd64": "c928039f16658358e493b27ab09710ef8d768552d4b55ffdc2a32375d7b8ce2d",
+    "linux_arm64": "267acceccdbecf8de21aabbdc654dc2552aa7f22da8d060a09cd33143bd5096a",
+    "macos_x86_64": "2fb413d8c48b0639f548e5a250bce69b95bcc0cd1267ba1758a16472e3bfda91",
+    "macos_arm64": "6e617b33e087a12e57e0c601d223aa55e809acbc211abbfa2f9c2ecd4510f25d"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@airwallex/airi-cli",
-  "version": "0.1.0-beta.2",
+  "version": "0.1.0-beta.3",
   "description": "Command-line tool for the Airi wallet — OAuth sign-in and agentic checkout from your terminal or an AI agent.",
   "bin": {
     "airi-cli": "bin/airi-cli.js"

package/scripts/postinstall.mjs

@@ -32,7 +32,7 @@
 // a missing binary with the same remediation if the CLI is run.
 
 import { createWriteStream, existsSync } from 'node:fs'
-import { mkdir, mkdtemp, readFile, rm, chmod, rename } from 'node:fs/promises'
+import { mkdir, mkdtemp, readFile, rm, chmod, rename, copyFile } from 'node:fs/promises'
 import { createHash } from 'node:crypto'
 import { tmpdir } from 'node:os'
 import path from 'node:path'
@@ -246,15 +246,12 @@ async function main() {
       throw new Error(`archive did not contain expected '${BIN_NAME}' binary`)
     }
     const finalPath = binPath()
-    // Stage the new binary INSIDE the vendor dir (same filesystem as finalPath)
-    // and rename it into place. Renaming within one filesystem is atomic and
-    // avoids EXDEV (which a rename from os.tmpdir() across filesystems would
-    // hit) — and because the staged copy is fully in place and executable
-    // before the swap, a failure never leaves the old working binary deleted
-    // with no replacement.
+    // copyFile (not rename) crosses devices without EXDEV; staging inside the
+    // vendor dir keeps the final swap a same-device atomic rename, so a failure
+    // never leaves the old working binary deleted with no replacement.
     const staged = path.join(dir, `.${BIN_NAME}.new`)
     await rm(staged, { force: true })
-    await rename(extracted, staged)
+    await copyFile(extracted, staged)
     await chmod(staged, 0o755)
     await rename(staged, finalPath)
     log(`installed ${BIN_NAME} ${tag}`)