@epilot/cli 0.1.82 → 0.1.84

package/README.md

@@ -29,7 +29,7 @@ npm install -g @epilot/cli
 
 <!-- usage-help -->
 ```
-epilot v0.1.82 — CLI for epilot APIs
+epilot v0.1.84 — CLI for epilot APIs
 
 USAGE
   epilot <api> <operationId> [params...] [flags]

package/definitions/pricing.json

@@ -3,7 +3,7 @@
   "info": {
     "title": "Pricing API",
     "description": "The `pricing-api` hub sets the foundations for the following Pricing APIs:\n\n### Order API\nThis api enables the management of orders in epilot 360, providing features such as:\n - Automatic calculation of totals and price breakdowns for taxes on the Order entity\n - Product and pricing data validation\n\n### Shopping Cart API\nUsed to interact with a cart during a customer's checkout session, providing:\n - An unified data model to model a Shopping Cart\n - Product and pricing data validation\n - Checkout a cart into an order or quote\n\n### Catalog API\nProvides a way to query the entire catalog of products and prices.\n\n### Availability API\nProvides endpoints for querying products availability by a set of predefined dimensions.\n\n### Spot Market API\nProvides endpoints to fetch (historic) spot market price data.\n\n### External Integrations API\nProvides endpoints for external integrations. E.g. GetAG.\n\n### External Catalog API\nProvides endpoints for external catalog.\n\n### Product Recommendations API\nProvides endpoints for product recommendations.\n",
-    "version": "1.1.0",
+    "version": "1.2.0",
     "termsOfService": "https://epilot.cloud/agb",
     "contact": {
       "name": "Support",
@@ -3430,6 +3430,22 @@
           "external-catalog"
         ]
       },
+      "ConditionalPricingErrorCode": {
+        "type": "string",
+        "description": "Machine-readable failure mode of a conditional-pricing operation, allowing clients\nto branch on the kind of failure instead of parsing the error message.\n\n- `NOT_FOUND` (404): the addressed entity, variant or version does not exist\n- `AMBIGUOUS_RESOLUTION` (409): several variants match the given context while a single result was requested\n- `TUPLE_CONFLICT` (409): the condition tuple is already claimed by another variant\n- `VERSION_CONFLICT` (409): a version already exists at the given `valid_from` on that variant\n- `SUPERSEDED_VERSION` (409): the addressed version has been superseded\n- `CONDITION_UNDEFINED` (400): the context names a condition the entity's schema does not define\n- `OPERATOR_UNSUPPORTED` (400): the requested operator is not applicable to the condition's type\n- `CONTEXT_FORMAT_INVALID` (400): a context value is malformed for its condition type\n- `TOO_MANY_MATCHES` (400): a multi-match resolve exceeded its result cap\n- `WRITE_CONFLICT` (409): transient write contention, retryable unlike `TUPLE_CONFLICT`\n\nEach code is emitted with the HTTP status shown above, and only with that status.\n",
+        "enum": [
+          "NOT_FOUND",
+          "AMBIGUOUS_RESOLUTION",
+          "TUPLE_CONFLICT",
+          "VERSION_CONFLICT",
+          "SUPERSEDED_VERSION",
+          "CONDITION_UNDEFINED",
+          "OPERATOR_UNSUPPORTED",
+          "CONTEXT_FORMAT_INVALID",
+          "TOO_MANY_MATCHES",
+          "WRITE_CONFLICT"
+        ]
+      },
       "Error": {
         "required": [
           "message"
@@ -3449,6 +3465,31 @@
           }
         }
       },
+      "ConditionalPricingError": {
+        "description": "An error from a conditional-pricing operation, carrying a machine-readable `code`\nfrom the conditional-pricing vocabulary plus any structured data about the failure,\nso a client can branch on the kind of failure rather than parse the message.\nReferenced only by the operations that emit these codes; every other operation\nkeeps the plain `Error` shape.\n",
+        "allOf": [
+          {
+            "$ref": "#/components/schemas/Error"
+          },
+          {
+            "type": "object",
+            "properties": {
+              "error": {
+                "type": "string",
+                "description": "The error message. Carries the same string as `message`, which the shared `Error`\nschema requires — `error` is the field responses have always used, and every caller\nto date reads. Declared here rather than on the shared `Error` because a request\nvalidation failure puts a list of validation errors in this field instead of a\nstring, and those responses reference `Error` directly.\n"
+              },
+              "code": {
+                "$ref": "#/components/schemas/ConditionalPricingErrorCode"
+              },
+              "details": {
+                "type": "object",
+                "additionalProperties": true,
+                "description": "Structured data about the failure, shaped by the accompanying `code`\n(e.g. the candidate variants of an `ambiguous-resolution`). Only present\nwhen the failure has structured data to report, and never without a `code`.\n"
+              }
+            }
+          }
+        ]
+      },
       "Product": {
         "type": "object",
         "description": "The product entity",
@@ -6967,7 +7008,14 @@
             "description": "The deprecated tax rate applied.\nThis field has been deprecated in favor of the new Tax Management. You should use the new tax fields pointing to a proper tax entity.\n"
           },
           "tax": {
-            "$ref": "#/components/schemas/Tax"
+            "oneOf": [
+              {
+                "$ref": "#/components/schemas/Tax"
+              },
+              {
+                "$ref": "#/components/schemas/TaxItem"
+              }
+            ]
           }
         }
       },
@@ -8443,6 +8491,37 @@
           "_updated_at": "2021-02-09T12:41:43.662Z"
         }
       },
+      "TaxItem": {
+        "type": "object",
+        "description": "A minimal, ad-hoc tax rate for line items with no backing tax entity\nin the catalog (e.g. a fully custom/composite price component built\nby a client with no product/price reference to resolve tax from).\nMirrors how PriceItem relates to Price: unlike Tax, this has no\nentity identity — it isn't persisted and can't be looked up by _id,\nso it can't be shared/reused across price items the way a catalog\nTax can.\n",
+        "additionalProperties": false,
+        "required": [
+          "type",
+          "rate"
+        ],
+        "properties": {
+          "type": {
+            "type": "string",
+            "enum": [
+              "VAT",
+              "GST",
+              "Custom"
+            ]
+          },
+          "rate": {
+            "type": "number",
+            "nullable": true
+          },
+          "description": {
+            "type": "string"
+          }
+        },
+        "example": {
+          "rate": 19,
+          "type": "VAT",
+          "description": "Custom 19% VAT"
+        }
+      },
       "TaxBreakdownInfo": {
         "type": "object",
         "properties": {

package/dist/{add-component-IVVCAUGY.js → add-component-CJIQYDO5.js}

@@ -3,7 +3,7 @@ import {
   log,
   readManifest,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/app-TIWZ2LQC.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+// src/commands/app/index.ts
+import { defineCommand } from "citty";
+var app_default = defineCommand({
+  meta: {
+    name: "app",
+    description: "Manage epilot Apps \u2014 create, deploy, and manage app manifests"
+  },
+  subCommands: {
+    init: () => import("./init-345HGB5B.js").then((m) => m.default),
+    "add-component": () => import("./add-component-CJIQYDO5.js").then((m) => m.default),
+    "remove-component": () => import("./remove-component-LPTHVN4P.js").then((m) => m.default),
+    validate: () => import("./validate-TLSOTJAY.js").then((m) => m.default),
+    deploy: () => import("./deploy-NRQHZ635.js").then((m) => m.default),
+    export: () => import("./export-ZRDJCALM.js").then((m) => m.default),
+    versions: () => import("./versions-VA4H3EPK.js").then((m) => m.default),
+    review: () => import("./review-OZTM3XBD.js").then((m) => m.default),
+    api: () => import("./api-5W2UMWCW.js").then((m) => m.default)
+  }
+});
+export {
+  app_default as default
+};

package/dist/bin/epilot.js

@@ -11,7 +11,7 @@ import { defineCommand } from "citty";
 var main = defineCommand({
   meta: {
     name: "epilot",
-    version: "0.1.82",
+    version: "0.1.84",
     description: "CLI for epilot APIs"
   },
   args: {
@@ -31,12 +31,12 @@ var main = defineCommand({
     profile: () => import("../profile-OZJL5ZPT.js").then((m) => m.default),
     config: () => import("../config-DGZIMLZK.js").then((m) => m.default),
     completion: () => import("../completion-N6A4VCAE.js").then((m) => m.default),
-    upgrade: () => import("../upgrade-YBOBA2V7.js").then((m) => m.default),
+    upgrade: () => import("../upgrade-OBVI55D5.js").then((m) => m.default),
     "access-token": () => import("../access-token-WWE6BDJH.js").then((m) => m.default),
     address: () => import("../address-EH3C4CVB.js").then((m) => m.default),
     "address-suggestions": () => import("../address-suggestions-RRSLOBFW.js").then((m) => m.default),
     "ai-agents": () => import("../ai-agents-53M2KHPI.js").then((m) => m.default),
-    app: () => import("../app-EULJIEDB.js").then((m) => m.default),
+    app: () => import("../app-TIWZ2LQC.js").then((m) => m.default),
     "audit-logs": () => import("../audit-logs-YFRK3EFU.js").then((m) => m.default),
     automation: () => import("../automation-4DEE3TUI.js").then((m) => m.default),
     billing: () => import("../billing-XX4VVOPI.js").then((m) => m.default),
@@ -134,7 +134,7 @@ process.stderr.on("error", (err) => {
   if (err.code === "EPIPE") process.exit(0);
   throw err;
 });
-var VERSION = true ? "0.1.82" : (await null).default.version;
+var VERSION = true ? "0.1.84" : (await null).default.version;
 var reorderedArgv = hoistFlagsAfterSubcommand(process.argv.slice(2));
 process.argv = [process.argv[0], process.argv[1], ...reorderedArgv];
 var args = process.argv.slice(2);

package/dist/{chunk-4TDAAJ6H.js → chunk-QOD77YLW.js}

@@ -1,7 +1,11 @@
 #!/usr/bin/env node
 import {
+  loadCredentials,
   resolveToken
 } from "./chunk-M3M3C5WH.js";
+import {
+  getResolvedProfile
+} from "./chunk-YHQA2AVG.js";
 import {
   BOLD,
   DIM,
@@ -121,6 +125,33 @@ async function request(baseUrl, token, method, path, body) {
   }
   return text;
 }
+var parseJwtPayload = (token) => {
+  try {
+    const parts = token.split(".");
+    if (parts.length !== 3) return null;
+    const payload = Buffer.from(parts[1], "base64url").toString("utf-8");
+    return JSON.parse(payload);
+  } catch {
+    return null;
+  }
+};
+function resolveOrgId(tokenFlag, profile) {
+  const token = resolveToken(tokenFlag, profile);
+  const claims = token ? parseJwtPayload(token) : null;
+  const fromToken = claims?.org_id ?? claims?.["custom:ivy_org_id"];
+  if (fromToken) return fromToken;
+  return getResolvedProfile(profile)?.org_id ?? loadCredentials()?.org_id;
+}
+function derivePermissionsBaseUrl(appBaseUrl) {
+  try {
+    const url = new URL(appBaseUrl);
+    if (!url.hostname.startsWith("app.")) return null;
+    url.hostname = url.hostname.replace(/^app\./, "permissions.");
+    return url.origin;
+  } catch {
+    return null;
+  }
+}
 function createAppApiClient(opts) {
   const baseUrl = opts.server ?? DEFAULT_BASE_URL;
   const getToken = () => {
@@ -150,6 +181,28 @@ function createAppApiClient(opts) {
     async patchVersion(appId, version, payload) {
       await request(baseUrl, getToken(), "PATCH", `/v1/app-configurations/${appId}/versions/${version}`, payload);
     },
+    /**
+     * Upsert the app's role in the developer's own organization with the
+     * manifest grants. The role id is attached to the app version via
+     * `role_id`; on installation the App API creates a copy of it (from the
+     * version's grants) in the installer's organization.
+     */
+    async upsertAppRole(params) {
+      const permissionsBaseUrl = derivePermissionsBaseUrl(baseUrl);
+      if (!permissionsBaseUrl) {
+        throw new Error(`Cannot derive permissions API URL from ${baseUrl}`);
+      }
+      const roleId = `${params.orgId}:${params.appId}`;
+      await request(permissionsBaseUrl, getToken(), "PUT", `/v1/permissions/roles/${roleId}`, {
+        id: roleId,
+        organization_id: params.orgId,
+        type: "user_role",
+        slug: params.appId,
+        name: `Automatically created by App ${params.appName}`,
+        grants: params.grants
+      });
+      return roleId;
+    },
     async cloneVersion(appId, version) {
       return request(
         baseUrl,
@@ -358,6 +411,7 @@ export {
   validateManifest,
   readManifest,
   writeManifest,
+  resolveOrgId,
   createAppApiClient,
   uploadFileToPresignedUrl,
   uploadDirectoryAsZip,

package/dist/{deploy-JMJFXUKQ.js → deploy-NRQHZ635.js}

@@ -4,10 +4,11 @@ import {
   formatFileSize,
   log,
   readManifest,
+  resolveOrgId,
   uploadDirectoryAsZip,
   uploadFileToPresignedUrl,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";
@@ -106,10 +107,32 @@ var deploy_default = defineCommand({
     }
     if (manifest.permissions?.length || manifest.blueprint?.manifest_id) {
       if (dryRun) {
+        if (manifest.permissions?.length) {
+          log.info("[dry-run] Would upsert app role in developer org");
+        }
         log.info("[dry-run] Would update version permissions/blueprint");
       } else {
+        let roleId;
+        if (manifest.permissions?.length) {
+          const orgId = resolveOrgId(args.token, args.profile);
+          if (orgId) {
+            try {
+              roleId = await client.upsertAppRole({
+                orgId,
+                appId,
+                appName: manifest.name,
+                grants: manifest.permissions
+              });
+              log.success(`Upserted app role ${roleId}`);
+            } catch (err) {
+              log.warn(`Could not upsert app role: ${err.message}`);
+            }
+          } else {
+            log.warn("Could not resolve org id \u2014 attaching grants without a developer-org role");
+          }
+        }
         await client.patchVersion(appId, targetVersion, {
-          ...manifest.permissions?.length ? { grants: manifest.permissions } : {},
+          ...manifest.permissions?.length ? { grants: manifest.permissions, ...roleId ? { role_id: roleId } : {} } : {},
           ...manifest.blueprint?.manifest_id ? { manifest_id: manifest.blueprint.manifest_id } : {}
         });
         log.success(`Updated version ${targetVersion} (permissions/blueprint)`);

package/dist/{export-JDDMBBNS.js → export-ZRDJCALM.js}

@@ -4,7 +4,7 @@ import {
   log,
   toManifest,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{init-QZTZF2JC.js → init-345HGB5B.js}

@@ -2,7 +2,7 @@
 import {
   log,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{remove-component-HJA5OA3H.js → remove-component-LPTHVN4P.js}

@@ -3,7 +3,7 @@ import {
   log,
   readManifest,
   writeManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{review-7M27IRW6.js → review-OZTM3XBD.js}

@@ -3,7 +3,7 @@ import {
   createAppApiClient,
   log,
   readManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{upgrade-YBOBA2V7.js → upgrade-OBVI55D5.js}

@@ -72,7 +72,7 @@ ${GREEN}${BOLD}Upgraded to @epilot/cli@${latest}${RESET}
   }
 });
 var getCurrentVersion = () => {
-  if (true) return "0.1.82";
+  if (true) return "0.1.84";
   try {
     const output = execSync("npm ls -g @epilot/cli --depth=0 --json 2>/dev/null", {
       encoding: "utf-8",

package/dist/{validate-QUSO4DR4.js → validate-TLSOTJAY.js}

@@ -2,7 +2,7 @@
 import {
   log,
   validateManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import "./chunk-7ZQ666ZQ.js";

package/dist/{versions-EUTT4SNW.js → versions-VA4H3EPK.js}

@@ -3,7 +3,7 @@ import {
   createAppApiClient,
   log,
   readManifest
-} from "./chunk-4TDAAJ6H.js";
+} from "./chunk-QOD77YLW.js";
 import "./chunk-M3M3C5WH.js";
 import "./chunk-YHQA2AVG.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@epilot/cli",
-  "version": "0.1.82",
+  "version": "0.1.84",
   "description": "CLI for epilot APIs",
   "type": "module",
   "bin": {

package/dist/app-EULJIEDB.js

@@ -1,24 +0,0 @@
-#!/usr/bin/env node
-
-// src/commands/app/index.ts
-import { defineCommand } from "citty";
-var app_default = defineCommand({
-  meta: {
-    name: "app",
-    description: "Manage epilot Apps \u2014 create, deploy, and manage app manifests"
-  },
-  subCommands: {
-    init: () => import("./init-QZTZF2JC.js").then((m) => m.default),
-    "add-component": () => import("./add-component-IVVCAUGY.js").then((m) => m.default),
-    "remove-component": () => import("./remove-component-HJA5OA3H.js").then((m) => m.default),
-    validate: () => import("./validate-QUSO4DR4.js").then((m) => m.default),
-    deploy: () => import("./deploy-JMJFXUKQ.js").then((m) => m.default),
-    export: () => import("./export-JDDMBBNS.js").then((m) => m.default),
-    versions: () => import("./versions-EUTT4SNW.js").then((m) => m.default),
-    review: () => import("./review-7M27IRW6.js").then((m) => m.default),
-    api: () => import("./api-5W2UMWCW.js").then((m) => m.default)
-  }
-});
-export {
-  app_default as default
-};