@farthershore/cli 0.33.4 → 0.33.6

package/README.md

@@ -3,7 +3,7 @@
 Create and operate [FartherShore](https://farthershore.com) software businesses
 from the terminal.
 
-**Status: `0.33.4`.** Pre-1.0 — the command surface is stable but may still
+**Status: `0.33.6`.** Pre-1.0 — the command surface is stable but may still
 change between minor versions. Pin an exact version in CI.
 
 FartherShore lets you define a software business as code, then sells, meters,
@@ -21,19 +21,19 @@ the explicitly agent-operable subset of the CLI surface.
 ## Install
 
 ```bash
-npm install -g @farthershore/cli@0.33.4
+npm install -g @farthershore/cli@0.33.6
 ```
 
 Or run it directly with npx:
 
 ```bash
-npx -p @farthershore/cli@0.33.4 farthershore --help
+npx -p @farthershore/cli@0.33.6 farthershore --help
 ```
 
 The package also ships an MCP stdio server for agents:
 
 ```bash
-npx -p @farthershore/cli@0.33.4 farthershore-mcp
+npx -p @farthershore/cli@0.33.6 farthershore-mcp
 ```
 
 ## Authentication
@@ -140,6 +140,31 @@ write commands cover **operational** state that lives outside the manifest
 | `FARTHERSHORE_CONSUMER_TOKEN`             | Ephemeral portal consumer session for `service-account`; never persisted |
 | `FARTHERSHORE_ENVIRONMENT_ID`             | Portal environment UUID fallback for `service-account`                   |
 | `FARTHERSHORE_SUBSCRIBER_ORGANIZATION_ID` | Subscriber organization UUID fallback for `service-account`              |
+| `FS_CLI_CHANNEL`                          | `stage` enables stage-channel commands for one invocation (see below)    |
+| `FS_CLI_STAGE_HOSTS`                      | Extra hosts (comma separated) the stage-channel gate treats as stage     |
+
+## Stage-channel commands
+
+A few operations exist only to service stage. `farthershore business delete` is
+the only one today: deleting a business is unrecoverable, and there is no
+builder reason to do it from a terminal against production — the dashboard owns
+that path.
+
+They are gated twice:
+
+1. **Registration.** The command is registered only when the CLI runs in the
+   stage channel. `make cli-stage` writes `{"channel":"stage"}` into
+   `~/.farthershore/config.json` (`make cli-prod` writes `"prod"`), and
+   `FS_CLI_CHANNEL=stage` does the same for a single invocation. Without the
+   marker the command is **absent from `farthershore business --help`** and
+   invoking it is an unknown-command error — so the published CLI, as a builder
+   installs it, does not have it at all.
+2. **Target.** Even in the stage channel, the command refuses when the api-url
+   it would call is not a stage host — `--api-url https://core.farthershore.com`,
+   or `FARTHERSHORE_API_URL` pointed at production. It exits **2** with
+   `COMMAND_NOT_AVAILABLE_IN_PRODUCTION` before any request is made.
+
+Delete a production business from the dashboard instead.
 
 ## Commands
 
@@ -253,6 +278,16 @@ farthershore business create weather-api \
 
 farthershore business publish weather-api --format json --idempotency-key <persisted-business-publish-attempt-key>
 farthershore business rollback weather-api wfe_previous --reason "bad release" --format json --idempotency-key <persisted-business-rollback-attempt-key>
+```
+
+Deleting a business is **stage only** — the command is not registered in the
+published CLI at all (see [Stage-channel commands](#stage-channel-commands)).
+Run `make cli-stage` first; production businesses are deleted from the
+dashboard.
+
+<!-- cli-channel: stage -->
+
+```bash
 farthershore business delete weather-api --yes --format json
 ```
 
@@ -556,7 +591,13 @@ Bootstrap and rotation return a key once. `login` sends the 60-second,
 single-use handoff only in the browser URL fragment to the platform-owned
 `/persona-sign-in` bridge. The bridge establishes an HttpOnly browser session
 and returns to the exact original portal path, query, and fragment. CLI output
-contains portal metadata but never the handoff or a session bearer. Product
+contains portal metadata but never the handoff or a session bearer. `login`
+emits `opened: true` only after the system browser launcher (`open` /
+`xdg-open`) has exited successfully, so the URL has been handed off before the
+command returns; a launcher failure is reported as an error. The wait is capped
+at 20 seconds: a launcher still running then (for example `xdg-open` running
+the browser in the foreground) is detached, and `login` emits `opened: false`
+with a stderr notice instead of hanging until the browser closes. Product
 role keys must already exist in that subscriber's role catalog; omit `--role` to use its
 configured default. Deletion tears down the temporary user and credential, and
 deleting the environment also removes the remaining persona-owned workspace.
@@ -739,18 +780,18 @@ Use `--all-plans` to clear plan scoping.
 Install or refresh the platform-verified skills bundle together. The platform
 pins this immutable release, and CI plus a daily repository check compare it to
 GitHub's latest stable release so the guidance cannot silently drift.
-This command requires `@farthershore/cli` 0.33.4 or newer.
+This command requires `@farthershore/cli` 0.33.6 or newer.
 
 ```bash
 set -euo pipefail
 CLI_VERSION=$(farthershore --version)
-printf '%s' "$CLI_VERSION" | node -e 'let v=""; process.stdin.on("data", c => v += c).on("end", () => { const m = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:\+[0-9A-Za-z.-]+)?$/.exec(v.trim()); if (!m || !(+m[1] > 0 || +m[2] > 33 || (+m[2] === 33 && +m[3] >= 4))) { console.error("Stop: CLI 0.33.4 or newer is required; ask the human to upgrade."); process.exitCode = 1; } })'
+printf '%s' "$CLI_VERSION" | node -e 'let v=""; process.stdin.on("data", c => v += c).on("end", () => { const m = /^(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)\.(0|[1-9][0-9]*)(?:\+[0-9A-Za-z.-]+)?$/.exec(v.trim()); if (!m || !(+m[1] > 0 || +m[2] > 33 || (+m[2] === 33 && +m[3] >= 6))) { console.error("Stop: CLI 0.33.6 or newer is required; ask the human to upgrade."); process.exitCode = 1; } })'
 farthershore skills install --help
 farthershore skills install
 ```
 
 If either prerequisite fails, stop and ask the human to run
-`npm install -g @farthershore/cli@0.33.4`, then repeat the checks.
+`npm install -g @farthershore/cli@0.33.6`, then repeat the checks.
 Do not install or upgrade global tooling autonomously.
 
 The Farther Shore CLI downloads the exact installer archive and verifies this