@epilot/cli 0.1.9 → 0.1.11

package/definitions/permissions.json

@@ -2,7 +2,7 @@
   "openapi": "3.0.3",
   "info": {
     "title": "Permissions API",
-    "version": "1.2.0",
+    "version": "1.2.1",
     "description": "Flexible Role-based Access Control for epilot"
   },
   "tags": [
@@ -927,11 +927,34 @@
             "anyOf": [
               {
                 "$ref": "#/components/schemas/EqualsCondition"
+              },
+              {
+                "$ref": "#/components/schemas/EqualsCurrentUserCondition"
               }
             ]
           }
         ]
       },
+      "EqualsCurrentUserCondition": {
+        "description": "Check if any relation_user attribute on the entity contains the current user. When attribute is provided, only that specific attribute path is checked.",
+        "type": "object",
+        "properties": {
+          "attribute": {
+            "type": "string",
+            "description": "Optional JSON path to a specific user attribute. When omitted, all relation_user attributes on the entity are scanned.",
+            "example": "assignee.*.user_id"
+          },
+          "operation": {
+            "type": "string",
+            "enum": [
+              "equals_current_user"
+            ]
+          }
+        },
+        "required": [
+          "operation"
+        ]
+      },
       "EqualsCondition": {
         "description": "Check if attribute equals to any of the values",
         "type": "object",
@@ -1076,6 +1099,10 @@
                     "description": "Optional parent role that this role inherits from. Must be an `org_role` or `share_role`."
                   }
                 ]
+              },
+              "vendor_created": {
+                "type": "boolean",
+                "description": "Indicates whether this role was created by a vendor organization on behalf of the partner organization."
               }
             }
           }
@@ -1147,6 +1174,10 @@
                 "type": "integer",
                 "readOnly": true,
                 "description": "Maximum number of users that can be assigned this role (vendor-enforced limit, can only be set via internal auth)"
+              },
+              "vendor_created": {
+                "type": "boolean",
+                "description": "Indicates whether this role was created by a vendor organization on behalf of the partner organization."
               }
             }
           }
@@ -1394,6 +1425,10 @@
                         "description": "Optional parent role that this role inherits from. Must be an `org_role` or a sharing role of type `share_role` or `partner_role`."
                       }
                     ]
+                  },
+                  "vendor_created": {
+                    "type": "boolean",
+                    "description": "Indicates whether this role was created by a vendor organization on behalf of the partner organization."
                   }
                 }
               },
@@ -1439,6 +1474,10 @@
                         "$ref": "#/components/schemas/OrganizationId"
                       }
                     ]
+                  },
+                  "vendor_created": {
+                    "type": "boolean",
+                    "description": "Indicates whether this role was created by a vendor organization on behalf of the partner organization."
                   }
                 }
               },
@@ -1472,9 +1511,5 @@
       }
     }
   },
-  "servers": [
-    {
-      "url": "https://permissions.sls.epilot.io"
-    }
-  ]
+  "servers": []
 }

package/definitions/webhooks.json

@@ -928,7 +928,8 @@
             "description": "Filter by event outcome",
             "enum": [
               "succeeded",
-              "failed"
+              "failed",
+              "skipped"
             ],
             "example": "succeeded"
           }
@@ -1006,6 +1007,89 @@
           "supportedValues"
         ]
       },
+      "WebhookCondition": {
+        "type": "object",
+        "description": "A condition that must be met for the webhook to fire.",
+        "properties": {
+          "field": {
+            "type": "string",
+            "description": "Dot-notation path to the field in the event payload (e.g. \"entity.status\", \"entity.line_items\")"
+          },
+          "operation": {
+            "type": "string",
+            "enum": [
+              "equals",
+              "not_equals",
+              "any_of",
+              "none_of",
+              "contains",
+              "not_contains",
+              "starts_with",
+              "ends_with",
+              "greater_than",
+              "less_than",
+              "greater_than_or_equals",
+              "less_than_or_equals",
+              "is_empty",
+              "is_not_empty"
+            ]
+          },
+          "values": {
+            "type": "array",
+            "description": "Values to compare against (not required for is_empty/is_not_empty)",
+            "items": {
+              "type": "string"
+            }
+          },
+          "field_type": {
+            "type": "string",
+            "description": "Type hint for the field (affects comparison logic)",
+            "enum": [
+              "string",
+              "number",
+              "boolean",
+              "date",
+              "datetime"
+            ],
+            "default": "string"
+          },
+          "is_array_field": {
+            "type": "boolean",
+            "description": "Whether the target field is an array (repeatable)",
+            "default": false
+          },
+          "repeatable_item_op": {
+            "type": "boolean",
+            "description": "When true, evaluates conditions per-item in repeatable array fields",
+            "default": false
+          }
+        },
+        "required": [
+          "field",
+          "operation"
+        ]
+      },
+      "WebhookConditionGroup": {
+        "type": "object",
+        "description": "A group of conditions with a logical operator. Multiple conditions are AND-ed by default.",
+        "properties": {
+          "conditions": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/WebhookCondition"
+            },
+            "maxItems": 10
+          },
+          "logical_operator": {
+            "type": "string",
+            "enum": [
+              "AND",
+              "OR"
+            ],
+            "default": "AND"
+          }
+        }
+      },
       "Auth": {
         "type": "object",
         "properties": {
@@ -1137,6 +1221,27 @@
           "enableStaticIP": {
             "type": "boolean"
           },
+          "protected": {
+            "type": "boolean",
+            "description": "When true, indicates this webhook configuration is protected and should not be modified without explicit intent."
+          },
+          "secureProxy": {
+            "type": "object",
+            "description": "Routes webhook requests through a secure VPC proxy (ERP integration service). When set, takes precedence over enableStaticIP.",
+            "properties": {
+              "integration_id": {
+                "type": "string",
+                "format": "uuid"
+              },
+              "use_case_slug": {
+                "type": "string"
+              }
+            },
+            "required": [
+              "integration_id",
+              "use_case_slug"
+            ]
+          },
           "status": {
             "type": "string",
             "enum": [
@@ -1149,6 +1254,9 @@
             "type": "string",
             "description": "JSONata expression to transform the payload"
           },
+          "filterConditions": {
+            "$ref": "#/components/schemas/WebhookConditionGroup"
+          },
           "_manifest": {
             "type": "array",
             "description": "Manifest ID used to create/update the webhook resource",
@@ -1427,7 +1535,8 @@
             "enum": [
               "succeeded",
               "failed",
-              "in_progress"
+              "in_progress",
+              "skipped"
             ]
           },
           "http_method": {

package/definitions/workflow.json

@@ -2030,6 +2030,10 @@
                 "description": "The user which moved the step/task to the IN_PROGRESS state. The user should also be present in the assignedTo property of the step/task",
                 "type": "string"
               },
+              "assignedToOnHold": {
+                "description": "The user which moved the step/task to the ON_HOLD state. The user should also be present in the assignedTo property of the step/task",
+                "type": "string"
+              },
               "status": {
                 "$ref": "#/components/schemas/StepStatus"
               },
@@ -2306,6 +2310,10 @@
             "description": "The user which moved the step/task to the IN_PROGRESS state. The user should also be present in the assignedTo property of the step/task",
             "type": "string"
           },
+          "assignedToOnHold": {
+            "description": "The user which moved the step/task to the ON_HOLD state. The user should also be present in the assignedTo property of the step/task",
+            "type": "string"
+          },
           "status": {
             "$ref": "#/components/schemas/StepStatus"
           },
@@ -2860,6 +2868,7 @@
           },
           "contexts": {
             "type": "array",
+            "minItems": 1,
             "items": {
               "$ref": "#/components/schemas/FlowContext"
             }
@@ -3694,6 +3703,10 @@
           "skipped_by": {
             "$ref": "#/components/schemas/UserId",
             "description": "The user which moved the task/phase to SKIPPED state."
+          },
+          "on_hold_by": {
+            "$ref": "#/components/schemas/UserId",
+            "description": "The user which moved the task/phase to ON_HOLD state."
           }
         }
       },
@@ -3761,6 +3774,14 @@
             "items": {
               "type": "string"
             }
+          },
+          "value_type": {
+            "type": "string",
+            "enum": [
+              "static",
+              "relative_date"
+            ],
+            "description": "How to interpret values. \"static\" (default) means literal values. \"relative_date\" means values[0] is a dynamic date token like \"today\"."
           }
         },
         "required": [
@@ -3838,6 +3859,25 @@
           "attribute_sub_field": {
             "type": "string",
             "description": "For complex attribute types, specifies which sub-field to extract (e.g., 'address', 'name', 'email_type')"
+          },
+          "date_offset": {
+            "type": "object",
+            "description": "Offset to apply to the source date value before comparison (e.g., +18 years for age check, +30 days for expiry)",
+            "properties": {
+              "amount": {
+                "type": "integer",
+                "description": "Number of units to offset"
+              },
+              "unit": {
+                "type": "string",
+                "enum": [
+                  "days",
+                  "months",
+                  "years"
+                ],
+                "description": "Unit of the offset"
+              }
+            }
           }
         }
       },

package/dist/{access-token-PTTCRMGK.js → access-token-CIM4RLBP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";

package/dist/add-component-IW4644NE.js

@@ -0,0 +1,241 @@
+#!/usr/bin/env node
+import {
+  log,
+  readManifest,
+  writeManifest
+} from "./chunk-POCU2J27.js";
+import "./chunk-RSA7K5HB.js";
+import "./chunk-PDMWUCWD.js";
+import "./chunk-7ZQ666ZQ.js";
+
+// src/commands/app/add-component.ts
+import { defineCommand } from "citty";
+import { randomUUID } from "crypto";
+import { existsSync, readFileSync, writeFileSync, readdirSync } from "fs";
+import { resolve, join } from "path";
+var TEMPLATES_REPO = "epilot-dev/app-templates";
+var TEMPLATE_REGISTRY = {
+  CUSTOM_FLOW_ACTION_SANDBOX: {
+    configOnly: false,
+    manifestType: "CUSTOM_FLOW_ACTION",
+    templateDir: "custom-flow-action-sandbox",
+    description: "Sandboxed flow action (JS runs in epilot)",
+    configuration: () => ({
+      type: "sandbox",
+      sandbox_settings: { code: "// code is read from dist/ during deploy" }
+    })
+  },
+  CUSTOM_FLOW_ACTION_EXTERNAL: {
+    configOnly: true,
+    manifestType: "CUSTOM_FLOW_ACTION",
+    templateDir: "custom-flow-action-external",
+    description: "External integration webhook (config-only)",
+    configuration: () => ({
+      type: "external_integration",
+      external_integration_settings: { url: "https://api.example.com/webhook" }
+    }),
+    options: [
+      { key: "api_key", label: "API Key", type: "secret", required: true, description: "API key for authentication" }
+    ]
+  },
+  CUSTOM_CAPABILITY: {
+    configOnly: false,
+    manifestType: "CUSTOM_CAPABILITY",
+    templateDir: "custom-capability",
+    description: "Custom entity tab or group",
+    configuration: () => ({ type: "tab", allowed_schemas: [] }),
+    surfaces: (id) => ({ capability_config: { app_url: `./components/${id}/dist/index.html` } }),
+    assets: (id) => ({ zip: `./components/${id}/dist/` })
+  },
+  CUSTOM_JOURNEY_BLOCK: {
+    configOnly: false,
+    manifestType: "CUSTOM_JOURNEY_BLOCK",
+    templateDir: "custom-journey-block",
+    description: "Custom journey builder block",
+    configuration: (id) => ({
+      component_url: `./components/${id}/dist/bundle.js`,
+      component_tag: id,
+      component_args: []
+    }),
+    assets: (id) => ({ bundle: `./components/${id}/dist/bundle.js` })
+  },
+  CUSTOM_PAGE: {
+    configOnly: false,
+    manifestType: "CUSTOM_PAGE",
+    templateDir: "custom-page",
+    description: "Custom navigation page",
+    configuration: (id) => ({ slug: id, nav_label: toPascalCase(id), nav_icon: "layout" }),
+    surfaces: (id) => ({ page: { app_url: `./components/${id}/dist/index.html` } }),
+    assets: (id) => ({ zip: `./components/${id}/dist/` })
+  },
+  CUSTOM_PORTAL_BLOCK: {
+    configOnly: false,
+    manifestType: "CUSTOM_PORTAL_BLOCK",
+    templateDir: "custom-portal-block",
+    description: "Custom portal widget",
+    configuration: () => ({}),
+    surfaces: (id) => ({ portal_block: { app_url: `./components/${id}/dist/index.html` } }),
+    assets: (id) => ({ zip: `./components/${id}/dist/` })
+  },
+  PORTAL_EXTENSION: {
+    configOnly: true,
+    manifestType: "PORTAL_EXTENSION",
+    templateDir: "portal-extension",
+    description: "Portal extension hooks (config-only)",
+    configuration: () => ({
+      hooks: [
+        {
+          type: "registration_identifiers_check",
+          call: {
+            method: "POST",
+            url: "https://api.example.com/portal/register",
+            headers: { "x-api-key": "{{api_key}}" }
+          }
+        }
+      ]
+    }),
+    options: [
+      { key: "api_key", label: "API Key", type: "secret", required: true, description: "API key for your backend" }
+    ]
+  },
+  EXTERNAL_PRODUCT_CATALOG: {
+    configOnly: true,
+    manifestType: "EXTERNAL_PRODUCT_CATALOG",
+    templateDir: "external-product-catalog",
+    description: "External product catalog hooks (config-only)",
+    configuration: () => ({
+      hooks: [
+        {
+          id: "get-products",
+          name: { de: "Produkte abrufen", en: "Get Products" },
+          type: "products",
+          call: {
+            method: "POST",
+            url: "https://api.example.com/products",
+            headers: { "Content-Type": "application/json", "x-api-key": "{{api_key}}" }
+          }
+        }
+      ]
+    }),
+    options: [
+      { key: "api_key", label: "API Key", type: "secret", required: true, description: "API key for product catalog" }
+    ]
+  }
+};
+var AVAILABLE_TYPES = Object.keys(TEMPLATE_REGISTRY);
+function toPascalCase(str) {
+  return str.replace(/(^|[-_])([a-z])/g, (_, __, c) => c.toUpperCase());
+}
+async function downloadTemplate(templateDir, targetDir, componentName) {
+  const { downloadTemplate: giget } = await import("giget");
+  await giget(`github:${TEMPLATES_REPO}/${templateDir}`, {
+    dir: targetDir,
+    force: true
+  });
+  replaceInDir(targetDir, "{{name}}", componentName);
+}
+function replaceInDir(dir, search, replace) {
+  const entries = readdirSync(dir, { withFileTypes: true });
+  for (const entry of entries) {
+    const fullPath = join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name === "node_modules" || entry.name === ".git") continue;
+      replaceInDir(fullPath, search, replace);
+    } else {
+      try {
+        const content = readFileSync(fullPath, "utf-8");
+        if (content.includes(search)) {
+          writeFileSync(fullPath, content.replaceAll(search, replace));
+        }
+      } catch {
+      }
+    }
+  }
+}
+var add_component_default = defineCommand({
+  meta: { name: "add-component", description: "Add a new component to the app" },
+  args: {
+    name: { type: "positional", description: "Component name", required: false },
+    type: { type: "string", alias: "t", description: "Component type" },
+    path: { type: "string", description: "Path to manifest.json (default: manifest.json)" }
+  },
+  run: async ({ args }) => {
+    let componentType = args.type;
+    if (!componentType) {
+      const { select } = await import("@inquirer/prompts");
+      componentType = await select({
+        message: "Select component type",
+        choices: AVAILABLE_TYPES.map((type) => ({
+          value: type,
+          name: `${type} \u2014 ${TEMPLATE_REGISTRY[type].description}`
+        }))
+      });
+    }
+    if (!AVAILABLE_TYPES.includes(componentType)) {
+      log.error(`Invalid component type: ${componentType}`);
+      log.info("");
+      log.info("Available types:");
+      for (const type of AVAILABLE_TYPES) {
+        log.info(`  ${type} \u2014 ${TEMPLATE_REGISTRY[type].description}`);
+      }
+      process.exit(1);
+    }
+    let componentName = args.name;
+    if (!componentName) {
+      const { input } = await import("@inquirer/prompts");
+      componentName = await input({
+        message: "Component name",
+        validate: (v) => {
+          if (!v.trim()) return "Name is required";
+          if (!/^[a-z0-9][a-z0-9-]*$/.test(v)) return "Use lowercase letters, numbers, and hyphens";
+          return true;
+        }
+      });
+    }
+    const manifestPath = resolve(args.path ?? "manifest.json");
+    if (!existsSync(manifestPath)) {
+      log.error('manifest.json not found. Run "epilot app init" first.');
+      process.exit(1);
+    }
+    const manifest = readManifest(manifestPath);
+    if (manifest.components.some((c) => c._dir === componentName)) {
+      log.error(`Component "${componentName}" already exists in manifest.`);
+      process.exit(1);
+    }
+    const componentDir = resolve("components", componentName);
+    if (existsSync(componentDir)) {
+      log.error(`Directory "components/${componentName}" already exists.`);
+      process.exit(1);
+    }
+    const tmpl = TEMPLATE_REGISTRY[componentType];
+    log.dim(`Downloading template from ${TEMPLATES_REPO}/${tmpl.templateDir}...`);
+    await downloadTemplate(tmpl.templateDir, componentDir, componentName);
+    const componentId = randomUUID();
+    const component = {
+      id: componentId,
+      component_type: tmpl.manifestType,
+      _dir: componentName,
+      name: { de: toPascalCase(componentName), en: toPascalCase(componentName) },
+      description: { de: "Description", en: "Description" },
+      configuration: tmpl.configuration(componentName)
+    };
+    if (tmpl.surfaces) component.surfaces = tmpl.surfaces(componentName);
+    if (tmpl.assets) component.assets = tmpl.assets(componentName);
+    if (tmpl.options) component.options = tmpl.options;
+    manifest.components.push(component);
+    writeManifest(manifestPath, manifest);
+    log.success(`Added component "${componentName}" (${componentType})`);
+    log.info("");
+    log.info(`  components/${componentName}/`);
+    if (tmpl.configOnly) {
+      log.dim("This is a config-only component. Edit configuration.json to configure it.");
+    } else {
+      log.dim('Run "npm install" to link the new workspace.');
+    }
+    log.info("");
+    log.info(`manifest.json updated (${manifest.components.length} component(s))`);
+  }
+});
+export {
+  add_component_default as default
+};

package/dist/{address-2FDPEPR6.js → address-EDRTUWTP.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";

package/dist/{address-suggestions-XBEK5DDQ.js → address-suggestions-S5WEST2N.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";

package/dist/{ai-agents-ZY5BNVTN.js → ai-agents-RXDDJDAR.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";

package/dist/{app-IT5FWGUK.js → api-36XROHLK.js}

@@ -1,16 +1,16 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";
 import "./chunk-7ZQ666ZQ.js";
 
-// src/commands/apis/app.ts
+// src/commands/app/api.ts
 import { defineCommand } from "citty";
-var app_default = defineCommand({
-  meta: { name: "app", description: "App API" },
+var api_default = defineCommand({
+  meta: { name: "api", description: "Call raw App API operations (OpenAPI)" },
   args: {
     operation: { type: "positional", description: "operationId to call", required: false },
     param: { type: "string", alias: "p", description: "Parameter key=value" },
@@ -50,5 +50,5 @@ var app_default = defineCommand({
   }
 });
 export {
-  app_default as default
+  api_default as default
 };

package/dist/app-BKS7M4UQ.js

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+
+// src/commands/app/index.ts
+import { defineCommand } from "citty";
+var app_default = defineCommand({
+  meta: {
+    name: "app",
+    description: "Manage epilot Apps \u2014 create, deploy, and manage app manifests"
+  },
+  subCommands: {
+    init: () => import("./init-DGPWBRRB.js").then((m) => m.default),
+    "add-component": () => import("./add-component-IW4644NE.js").then((m) => m.default),
+    "remove-component": () => import("./remove-component-B2GMICMD.js").then((m) => m.default),
+    validate: () => import("./validate-G7K6AVBI.js").then((m) => m.default),
+    deploy: () => import("./deploy-UQZAUHAB.js").then((m) => m.default),
+    export: () => import("./export-US5GMHTS.js").then((m) => m.default),
+    versions: () => import("./versions-UTPAWTIU.js").then((m) => m.default),
+    review: () => import("./review-QFPON37R.js").then((m) => m.default),
+    api: () => import("./api-36XROHLK.js").then((m) => m.default)
+  }
+});
+export {
+  app_default as default
+};

package/dist/{audit-logs-FB4TE4TI.js → audit-logs-PXGDGJGV.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";

package/dist/{automation-JE5LDKJM.js → automation-LS6MVLP2.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   callApi
-} from "./chunk-P5IZZW4Y.js";
+} from "./chunk-BYAEI4Z2.js";
 import "./chunk-RSA7K5HB.js";
 import "./chunk-PDMWUCWD.js";
 import "./chunk-IOLKUHUB.js";