@farthershore/cli 0.14.2 → 0.14.4

package/README.md

@@ -4,7 +4,9 @@ Bootstrap and operate [FartherShore](https://farthershore.com) software
 businesses from the terminal. Product behavior is authored in the GitHub repo;
 the CLI is the agent-friendly tool layer for setup, release, observability, and
 runtime operations. Every command supports `--format json` for non-TTY
-scripting.
+scripting. GitHub account linking and Stripe Connect/KYC stay browser-hosted;
+the CLI reports their status so agents can continue after the builder completes
+those flows.
 
 ## Install
 
@@ -87,6 +89,21 @@ farthershore skills recommend --format json \
 
 ## Commands
 
+### `farthershore operations`
+
+Print the machine-readable action boundary before an agent attempts a change:
+repo-authored product behavior, API-controlled runtime operations, dual
+repo/API operations, and browser-only prerequisites.
+
+```bash
+farthershore operations list --format json
+```
+
+`contract` rows are changed in `business/business.config.ts` and pushed through
+GitHub. `operate` rows are CLI/Core API actions. `dual` rows reconcile through
+either path. `browserOnlyPrerequisites` currently includes GitHub account
+linking and Stripe Connect onboarding, both status-only from the CLI.
+
 ### `farthershore init`
 
 Scaffold a starter software-business repo from a named plan preset. Each preset
@@ -326,6 +343,28 @@ export async function POST(request: Request) {
 }
 ```
 
+### `farthershore webhook`
+
+Provision outbound webhook endpoints and inspect delivery health. The dashboard
+exposes the same API-managed surface. If the business declares webhooks in
+`business/business.config.ts`, Core returns `409 MANAGED_BY_CODE` for writes so
+the repo remains canonical.
+
+```bash
+farthershore webhook list weather-api --format json
+farthershore webhook create weather-api \
+  --url https://hooks.example.com/farthershore \
+  --events subscription.created,payment.failed \
+  --format json
+farthershore webhook update weather-api <webhookId> --disable --format json
+farthershore webhook test weather-api <webhookId> --format json
+farthershore webhook deliveries weather-api <webhookId> --limit 20 --format json
+farthershore webhook delete weather-api <webhookId> --yes --format json
+```
+
+`webhook create` returns the signing secret once. Store it in the receiving app;
+subsequent list/delivery commands never return the secret.
+
 ### `farthershore connect`
 
 GitHub OAuth and Stripe Connect flows are browser-only. These commands
@@ -343,7 +382,9 @@ Manage maker tokens for the current org.
 ```bash
 farthershore token list --format json
 farthershore token create --name "ci-bot" --scope products:update products:publish --format json
+farthershore token rotate <tokenId> --sync-to-github --format json
 farthershore token revoke <tokenId> --yes --format json
+farthershore token delete <tokenId> --yes --format json
 ```
 
 #### Plan knobs
@@ -542,6 +583,8 @@ operation registry that generates the CLI command groups. Tool names use the
 - Backends: `fs_backend_list`, `fs_backend_create`, `fs_backend_delete`
 - Runtime tokens: `fs_runtime_token_list`, `fs_runtime_token_mint`,
   `fs_runtime_token_rotate`, `fs_runtime_token_revoke`
+- Webhooks: `fs_webhook_list`, `fs_webhook_create`, `fs_webhook_update`,
+  `fs_webhook_delete`, `fs_webhook_test`, `fs_webhook_deliveries`
 - Personas: `fs_persona_bootstrap`, `fs_persona_list`, `fs_persona_revoke`
 - Usage and maker tokens: `fs_usage_read`, `fs_maker_token_list`