@commercelayer/agent-cli 1.0.0-dev.16 → 1.0.0-dev.18

package/README.md

@@ -76,6 +76,7 @@ Destructive verbs (deletes, `orders cancel`, `payments void` and `refund`, `sand
 
 - Without a login, nothing is checked on this machine: the request goes without a token, and the API's answer (`login_required`, or `state_required` for an organization not claimed) comes through as it is. So do `live_unavailable` (a plan without live), `forbidden` (the login is not an active admin of it) and `not_supported` for a verb that comes with a later step of go-live.
 - A verb that never runs live (sandbox, plans, sales calls, `auth login`, `auth switch`, `shop`) stops on this machine with `state_required`.
+- `c11r events writes --live --org <slug>` (`--since 2026-11-12T00:00:00Z`, an ISO time, `--noun`, `--cursor`, `--limit`) is the audit of live writes, and runs only in live: without `--live` it is `missing_value` with the full command, before any call.
 - `c11r status --live --org <slug>` is the organization's live status, with `live_credential` and the warning `live_credential_held` while the API holds one.
 - `c11r auth logout --live --org <slug>` revokes that credential in Commerce Layer (`DELETE /v1/auth/live`): `{ org, revoked, credential }`. The login stays on this machine. `--dry-run` says what it would revoke.
 - A verb that needs a yes is confirmed by the API in live, with a sentence naming the action, the amount and the mode (`Refunds EUR 1.00 on order N, in LIVE mode, real money.`): the CLI sends it without `confirm=true` and shows that `confirmation_required` as it is, with the API's next command, or asks it with those words in a terminal. `--yes` sends `confirm=true` on every live write, `payments capture` included.

package/dist/builtins/extensions.js

@@ -32,9 +32,10 @@ export const organizations = {
         const req = resourceRequest('organizations', run.verb, run.parsed.id, run.parsed.values);
         // Ending every other token of the organization is confirmed: by the schema's confirm_if, or
         // here for a schema without it.
-        if (run.verb.name === 'connect' && run.parsed.values.revoke_others && !run.globals.dryRun) {
-            if (!run.verb.confirmIf.includes('revoke_others'))
-                await confirm(`Connect ${run.parsed.id} and end every other organization token of it`, run.line, { yes: run.globals.yes, prompter: run.prompter ?? terminal });
+        // With confirm_if the engine has it confirmed, by the human here or by the API's 428 with its
+        // sentence; only a schema without it is confirmed here, and then sends confirm=true itself.
+        if (run.verb.name === 'connect' && run.parsed.values.revoke_others && !run.globals.dryRun && !run.verb.confirmIf.includes('revoke_others')) {
+            await confirm(`Connect ${run.parsed.id} and end every other organization token of it`, run.line, { yes: run.globals.yes, prompter: run.prompter ?? terminal });
             req.confirm = true;
             req.body = { ...req.body, confirm: true };
         }

package/dist/builtins/loops.js

@@ -33,12 +33,12 @@ export const loops = {
         description: 'Loops: a skill on a schedule, under a policy written in advance. Definitions are in loops.yml in the project folder; each pass is one c11r loops run.',
         id: { accepts: ['name'], example: 'orders-15m' },
         verbs: [
-            { verb: 'list', method: 'GET', state: 'none', effect: 'Lists the loops of loops.yml.' },
-            { verb: 'get', method: 'GET', path: '/v1/loops/{id}', state: 'none', effect: 'Returns a loop from loops.yml, with its last pass when the organization has run it.' },
-            { verb: 'create', method: 'POST', path: '/v1/loops/{id}', state: 'none', body: policyFlags(true), effect: 'Adds a loop to loops.yml, after checking its policy against the skill noun\'s schema. Nothing runs until a pass.' },
-            { verb: 'update', method: 'PATCH', path: '/v1/loops/{id}', state: 'none', body: policyFlags(false), effect: 'Changes a loop in loops.yml. A flag given replaces what is there: --allow replaces the whole list.' },
-            { verb: 'delete', method: 'DELETE', path: '/v1/loops/{id}', state: 'none', destructive: true, deletes: true, effect: 'Removes a loop from loops.yml, and its cursor from the organization.' },
-            { verb: 'run', method: 'POST', path: '/v1/loops/{id}/run', effect: 'One pass: what is waiting since the last pass, and the actions the policy allows. Answers done, waiting (new: true for what appeared since the last pass) and failed. With --dry-run nothing changes and the last pass time stays.' },
+            { verb: 'list', live: false, method: 'GET', state: 'none', effect: 'Lists the loops of loops.yml.' },
+            { verb: 'get', live: false, method: 'GET', path: '/v1/loops/{id}', state: 'none', effect: 'Returns a loop from loops.yml, with its last pass when the organization has run it.' },
+            { verb: 'create', live: false, method: 'POST', path: '/v1/loops/{id}', state: 'none', body: policyFlags(true), effect: 'Adds a loop to loops.yml, after checking its policy against the skill noun\'s schema. Nothing runs until a pass.' },
+            { verb: 'update', live: false, method: 'PATCH', path: '/v1/loops/{id}', state: 'none', body: policyFlags(false), effect: 'Changes a loop in loops.yml. A flag given replaces what is there: --allow replaces the whole list.' },
+            { verb: 'delete', live: false, method: 'DELETE', path: '/v1/loops/{id}', state: 'none', destructive: true, deletes: true, effect: 'Removes a loop from loops.yml, and its cursor from the organization.' },
+            { verb: 'run', live: false, method: 'POST', path: '/v1/loops/{id}/run', effect: 'One pass: what is waiting since the last pass, and the actions the policy allows. Answers done, waiting (new: true for what appeared since the last pass) and failed. With --dry-run nothing changes and the last pass time stays.' },
         ],
     }),
     async run(run) {

package/dist/engine.js

@@ -42,6 +42,8 @@ function refusedBeforeEffect(e) {
         return status >= 400 && status < 500;
     return e.code === 'unknown_field' || e.code === 'unknown_verb';
 }
+/** Verbs that only run in live mode. */
+const LIVE_ONLY = new Set(['events writes']);
 async function executeOnce(argv, opts) {
     const cmd = parseCommand(argv);
     const builtins = opts.builtins ?? {};
@@ -87,6 +89,12 @@ async function executeOnce(argv, opts) {
     if (live && !verb.live) {
         fail('state_required', `${named} does not run in live mode.`, { required_state: 'claimed', path: 'live', next_step: fixWith(line.replace(/\s--live\b/, '')) });
     }
+    // A verb that only reads live data (events writes, the audit of live writes): without --live the
+    // API answers the login a bare 401, so the command says what it needs first.
+    if (!live && LIVE_ONLY.has(`${schema.noun} ${verb.name}`)) {
+        const org = cmd.globals.org ? '' : ' --org ORG_SLUG';
+        fail('missing_value', `${named} reads live data only: it needs --live and the organization, named with --org.`, { path: 'live', next_step: fixWith(`${line}${org} --live`) });
+    }
     // Live mode acts on an organization named on the command, never the folder's link or the
     // default, which are a sandbox's: --org, or C11R_ORG.
     const liveOrg = live ? (cmd.globals.org ?? (process.env.C11R_ORG || null)) : null;
@@ -122,7 +130,10 @@ async function executeOnce(argv, opts) {
     // amount and the mode ("Refunds EUR 1.00 on order N, in LIVE mode, real money."): the CLI sends
     // without confirm=true and shows that 428 as it is, or asks it in a terminal. --yes sends
     // confirm=true on every live write, payments capture included.
-    const apiAsks = live && (verb.confirm || confirmFlags.length > 0);
+    // So does a login verb (organizations disconnect), whose sentence names what stops answering.
+    const apiAsks = (live || verb.credential === 'login') && (verb.confirm || confirmFlags.length > 0);
+    if (apiAsks && cmd.globals.yes && !cmd.globals.dryRun)
+        confirmed = true;
     if (live && cmd.globals.yes && verb.method !== 'GET')
         confirmed = true;
     if ((verb.destructive || verb.confirm || confirmFlags.length) && !cmd.globals.dryRun && !apiAsks) {
@@ -156,10 +167,11 @@ async function executeOnce(argv, opts) {
             }
             catch (e) {
                 // The API's own confirmation, in live: as it is with no terminal; asked with its words in one.
-                if (live && !confirmed && e instanceof CliError && e.code === 'confirmation_required') {
+                if (apiAsks && !confirmed && e instanceof CliError && e.code === 'confirmation_required') {
                     const p = opts.prompter ?? terminal;
+                    // Without a command of the API's, the next step is this one again, without --yes.
                     if (!p.interactive)
-                        throw e;
+                        throw e.body.next_step?.command ? e : new CliError({ ...e.body, next_step: { action: 'fix_request', command: line, url: null } }, e.kind, e.state);
                     await confirm(e.body.message, line, { yes: false, prompter: p, sentence: e.body.message });
                     confirmed = true;
                     return sendOnce(req);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@commercelayer/agent-cli",
-  "version": "1.0.0-dev.16",
+  "version": "1.0.0-dev.18",
   "description": "c11r: the Commerce Layer CLI for coding agents. One grammar, c11r <noun> <verb>, from a sandbox to a running organization.",
   "homepage": "https://commercelayer.ai",
   "keywords": [