@commercelayer/agent-cli 1.0.0-dev.16 → 1.0.0-dev.17

package/README.md

@@ -76,6 +76,7 @@ Destructive verbs (deletes, `orders cancel`, `payments void` and `refund`, `sand
 
 - Without a login, nothing is checked on this machine: the request goes without a token, and the API's answer (`login_required`, or `state_required` for an organization not claimed) comes through as it is. So do `live_unavailable` (a plan without live), `forbidden` (the login is not an active admin of it) and `not_supported` for a verb that comes with a later step of go-live.
 - A verb that never runs live (sandbox, plans, sales calls, `auth login`, `auth switch`, `shop`) stops on this machine with `state_required`.
+- `c11r events writes --live --org <slug>` (`--since 2026-11-12T00:00:00Z`, an ISO time, `--noun`, `--cursor`, `--limit`) is the audit of live writes, and runs only in live: without `--live` it is `missing_value` with the full command, before any call.
 - `c11r status --live --org <slug>` is the organization's live status, with `live_credential` and the warning `live_credential_held` while the API holds one.
 - `c11r auth logout --live --org <slug>` revokes that credential in Commerce Layer (`DELETE /v1/auth/live`): `{ org, revoked, credential }`. The login stays on this machine. `--dry-run` says what it would revoke.
 - A verb that needs a yes is confirmed by the API in live, with a sentence naming the action, the amount and the mode (`Refunds EUR 1.00 on order N, in LIVE mode, real money.`): the CLI sends it without `confirm=true` and shows that `confirmation_required` as it is, with the API's next command, or asks it with those words in a terminal. `--yes` sends `confirm=true` on every live write, `payments capture` included.

package/dist/builtins/extensions.js

@@ -32,9 +32,10 @@ export const organizations = {
         const req = resourceRequest('organizations', run.verb, run.parsed.id, run.parsed.values);
         // Ending every other token of the organization is confirmed: by the schema's confirm_if, or
         // here for a schema without it.
-        if (run.verb.name === 'connect' && run.parsed.values.revoke_others && !run.globals.dryRun) {
-            if (!run.verb.confirmIf.includes('revoke_others'))
-                await confirm(`Connect ${run.parsed.id} and end every other organization token of it`, run.line, { yes: run.globals.yes, prompter: run.prompter ?? terminal });
+        // With confirm_if the engine has it confirmed, by the human here or by the API's 428 with its
+        // sentence; only a schema without it is confirmed here, and then sends confirm=true itself.
+        if (run.verb.name === 'connect' && run.parsed.values.revoke_others && !run.globals.dryRun && !run.verb.confirmIf.includes('revoke_others')) {
+            await confirm(`Connect ${run.parsed.id} and end every other organization token of it`, run.line, { yes: run.globals.yes, prompter: run.prompter ?? terminal });
             req.confirm = true;
             req.body = { ...req.body, confirm: true };
         }

package/dist/engine.js

@@ -42,6 +42,8 @@ function refusedBeforeEffect(e) {
         return status >= 400 && status < 500;
     return e.code === 'unknown_field' || e.code === 'unknown_verb';
 }
+/** Verbs that only run in live mode. */
+const LIVE_ONLY = new Set(['events writes']);
 async function executeOnce(argv, opts) {
     const cmd = parseCommand(argv);
     const builtins = opts.builtins ?? {};
@@ -87,6 +89,12 @@ async function executeOnce(argv, opts) {
     if (live && !verb.live) {
         fail('state_required', `${named} does not run in live mode.`, { required_state: 'claimed', path: 'live', next_step: fixWith(line.replace(/\s--live\b/, '')) });
     }
+    // A verb that only reads live data (events writes, the audit of live writes): without --live the
+    // API answers the login a bare 401, so the command says what it needs first.
+    if (!live && LIVE_ONLY.has(`${schema.noun} ${verb.name}`)) {
+        const org = cmd.globals.org ? '' : ' --org ORG_SLUG';
+        fail('missing_value', `${named} reads live data only: it needs --live and the organization, named with --org.`, { path: 'live', next_step: fixWith(`${line}${org} --live`) });
+    }
     // Live mode acts on an organization named on the command, never the folder's link or the
     // default, which are a sandbox's: --org, or C11R_ORG.
     const liveOrg = live ? (cmd.globals.org ?? (process.env.C11R_ORG || null)) : null;
@@ -122,7 +130,10 @@ async function executeOnce(argv, opts) {
     // amount and the mode ("Refunds EUR 1.00 on order N, in LIVE mode, real money."): the CLI sends
     // without confirm=true and shows that 428 as it is, or asks it in a terminal. --yes sends
     // confirm=true on every live write, payments capture included.
-    const apiAsks = live && (verb.confirm || confirmFlags.length > 0);
+    // So does a login verb (organizations disconnect), whose sentence names what stops answering.
+    const apiAsks = (live || verb.credential === 'login') && (verb.confirm || confirmFlags.length > 0);
+    if (apiAsks && cmd.globals.yes && !cmd.globals.dryRun)
+        confirmed = true;
     if (live && cmd.globals.yes && verb.method !== 'GET')
         confirmed = true;
     if ((verb.destructive || verb.confirm || confirmFlags.length) && !cmd.globals.dryRun && !apiAsks) {
@@ -156,7 +167,7 @@ async function executeOnce(argv, opts) {
             }
             catch (e) {
                 // The API's own confirmation, in live: as it is with no terminal; asked with its words in one.
-                if (live && !confirmed && e instanceof CliError && e.code === 'confirmation_required') {
+                if (apiAsks && !confirmed && e instanceof CliError && e.code === 'confirmation_required') {
                     const p = opts.prompter ?? terminal;
                     if (!p.interactive)
                         throw e;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commercelayer/agent-cli",
-  "version": "1.0.0-dev.16",
+  "version": "1.0.0-dev.17",
   "description": "c11r: the Commerce Layer CLI for coding agents. One grammar, c11r <noun> <verb>, from a sandbox to a running organization.",
   "homepage": "https://commercelayer.ai",
   "keywords": [