@itpay/cli 2.1.2 → 2.1.4

package/dist/src/commands/services.js

@@ -408,7 +408,7 @@ export async function runServicesCheckout(backend, config, serviceExecutionID, c
         if (missingInput.length > 0 && !readModel.workflow_entry && readModel.execution.next_action !== "create_checkout") {
             throw new CommandContractError("capability_input_invalid", `missing required capability input: ${missingInput.join(", ")}`, "补齐付费 capability 的 required_input；本次没有创建 quote、Checkout 或订单。", [{ command: checkoutCommand(serviceExecutionID, capability, lockedInput), reason: "提交完整且会被锁定的服务输入" }]);
         }
-        if (capability.delivery_email_required && String(deliveryContact.email ?? "").trim() === "") {
+        if (capability.delivery_email_required && readModel.workflow_entry?.capability_id !== capability.capability_id && String(deliveryContact.email ?? "").trim() === "") {
             throw new CommandContractError("delivery_email_required", "delivery email is required before creating this service checkout", "该 capability 的交付链接会发送到用户邮箱；先向用户说明用途并询问邮箱，不要代填。", [{
                     command: `itpay services checkout ${serviceExecutionID} --capability ${capability.capability_id}${formatInputOptions(lockedInput)} --email <email> --json`,
                     reason: "使用用户提供的邮箱创建 Checkout",
@@ -500,14 +500,14 @@ export async function runServicesQuote(backend, serviceExecutionID, capabilityID
     const selectionBacked = model.execution.status === "human_action_approved" &&
         model.allowed_actions?.some((action) => action.type === "prepare_quote" && action.capability_id === capabilityID);
     const missingInput = missingRequiredInput(capability.input_schema, input);
-    if (missingInput.length > 0 && !selectionBacked) {
+    if (missingInput.length > 0 && !selectionBacked && model.workflow_entry?.capability_id !== capability.capability_id) {
         throw new CommandContractError("capability_input_invalid", `missing required capability input: ${missingInput.join(", ")}`, "补齐付费 capability 输入；本次没有创建 Quote、Cart 或 Checkout。", [{ command: quoteCommand(serviceExecutionID, capability, input), reason: "提交完整且会被锁定的输入" }]);
     }
     const deliveryContact = {
         ...(options.deliveryContact ?? {}),
         ...(options.email ? { email: options.email } : {}),
     };
-    if (capability.delivery_email_required && String(deliveryContact.email ?? "").trim() === "") {
+    if (capability.delivery_email_required && model.workflow_entry?.capability_id !== capability.capability_id && String(deliveryContact.email ?? "").trim() === "") {
         throw new CommandContractError("delivery_email_required", "delivery email is required before preparing this service quote", "交付链接会发送到用户邮箱；说明用途并询问邮箱，不要代填。", [{ command: quoteCommand(serviceExecutionID, capability, input), reason: "使用用户提供的邮箱创建报价" }]);
     }
     const quote = await backend.prepareServiceQuote(serviceExecutionID, {
@@ -559,6 +559,8 @@ export async function runServicesGet(backend, serviceExecutionID, options = {})
         ...(execution.current_capability_id ? { current_capability_id: execution.current_capability_id } : {}),
         updated_at: execution.updated_at,
         timeline,
+        ...(response.workflow ? { workflow: response.workflow } : {}),
+        ...(response.rail_booking ? { rail_booking: response.rail_booking } : {}),
         ...(response.events.length > timeline.length ? { timeline_truncated: true } : {}),
         ...(deliveryMode ? { delivery_mode: deliveryMode } : {}),
         ...(lockedRefund ? {
@@ -590,6 +592,8 @@ export async function runServicesGet(backend, serviceExecutionID, options = {})
 export async function runServicesNext(backend, serviceExecutionID, options = {}) {
     const response = await backend.getServiceExecution(serviceExecutionID);
     const envelope = servicesNextEnvelope(response);
+    if (response.rail_booking)
+        envelope.result = { ...envelope.result, rail_booking: response.rail_booking };
     writeCommandEnvelope(envelope, {
         ...(options.jsonOutput !== undefined ? { jsonOutput: options.jsonOutput } : {}),
         ...(options.output ? { output: options.output } : {}),

package/dist/src/sell/contract.js

@@ -8,7 +8,7 @@ export const SELL_GUIDE = {
         "Use the authenticated user's existing merchant. KYB and payout changes remain in the dashboard.",
         "Resolve every API against its declared method, Content-Type, parameters, response schema and locked version. Ask for missing inputs; never guess credentials or change contracts.",
         "Only saved versions may run. A run is not a saved version. Local evidence cannot grant platform test approval.",
-        "Public workflows are acyclic, synchronous, per-call; include exactly one payment step and delivery on every success path. Unsupported nodes block publication.",
+        "Use the platform node catalog and validator for supported pricing, quotas, confirmation and durable fulfillment. Every paid success path must cross payment and delivery gates.",
         "Use own credentials for local requests. Platform-managed credentials stay on the platform. Mark execution location honestly.",
         "Present side effects before live tests. Unknown results stop automatic retries. Local payment/refund/delivery gates are simulated, never real funds.",
         "Show the exact workflow and version before user confirmation. Preview price, delivery and current terms before explicit submission approval.",
@@ -44,6 +44,8 @@ export const SELL_OPERATIONS = [
     { command: "pricing get", method: "GET", path: `${draft}/workflow`, scope: read, fields: {}, description: "Read the current price and refund policy" },
     { command: "pricing set", method: "PUT", path: `${draft}/pricing`, scope: write, fields: { expected_revision: "number", pricing: "object", policy: "object" }, description: "Set per-call price and platform refund policy" },
     { command: "verify", method: "POST", path: `${draft}/validation-runs`, scope: test, fields: { workflow_version_id: "string", expected_semantic_revision: "number", expected_fixture_revision: "number" }, description: "Start platform verification for an explicitly saved version", confirmation: true },
+    { command: "tests start-checkout", method: "POST", path: `${draft}/live-checkout-tests`, scope: test, fields: { expected_revision: "number", agent_instance_id: "string" }, description: "Dev admin only: freeze one success fixture into a private real-checkout test bound to your registered Agent. Payment still requires user confirmation; this does not publish the service.", confirmation: true },
+    { command: "tests accept-checkout", method: "POST", path: `${draft}/live-checkout-tests/{execution_id}/accept`, scope: test, fields: {}, description: "Record server-observed issued tickets and completed delivery as evidence for the exact tested revision. Never synthesizes payment or issuance.", confirmation: true },
     { command: "runs get", method: "GET", path: `${draft}/validation-runs/{run_id}`, scope: read, fields: {}, description: "Inspect platform test nodes and diagnostics" },
     { command: "runs confirm", method: "POST", path: `${draft}/validation-runs/{run_id}/confirm`, scope: test, fields: { risk_hash: "string" }, description: "Confirm the exact disclosed platform test side effects", confirmation: true },
     { command: "submission preview", method: "GET", path: `${org}/guide`, scope: read, fields: { draft_id: "string" }, description: "Read publication readiness and required agreements" },

package/dist/src/state/config.js

@@ -15,8 +15,8 @@ import { OperationJournal } from "./operation_journal.js";
 export const DEFAULT_BASE_URL = "https://app.itpay.ai";
 export const DEV_BASE_URL = "https://dev.itpay.ai";
 export const SANDBOX_BASE_URL = "https://sandbox.itpay.ai";
-export const CLI_VERSION = "2.1.2";
-export const API_CONTRACT_REVISION = "sha256:8fc92bcea2b2c5205139382e73295fbabf3ff9b0ae001a7e8d748d3bb6857061";
+export const CLI_VERSION = "2.1.4";
+export const API_CONTRACT_REVISION = "sha256:7f8e09ecee0ab32e3eed3690341fa5bbf6d955dbb464fd79ce0e340667b1085e";
 const CART_SESSION_DEFAULT_DIR = ".itpay-v3";
 const CART_SESSION_FILENAME = "cart.json";
 const OPERATION_JOURNAL_FILENAME = "operations.json";

package/docs/cli-reference/commands/sell.md

@@ -1341,3 +1341,24 @@ Options:
 ## Seller login and dev
 
 Use `ITPAY_BACKEND_URL=https://dev.itpay.ai itpay sell auth login` to receive the normal ItPay authorization link. After browser login and required email verification, run `ITPAY_BACKEND_URL=https://dev.itpay.ai itpay sell auth status`. The CLI claims its own account session through the standard API and stores it in an owner-only file; never copy tokens or browser cookies. `itpay sell auth logout` revokes this session. Keep the same backend prefix on subsequent commands; production, dev, and sandbox state are isolated. Agent device enrollment does not grant Seller organization access.
+
+## Private dev live checkout acceptance
+
+`itpay sell tests start-checkout --merchant-id <merchant> --draft-id <draft> --input-json <file> --confirm --json`
+
+Requires the dev server in live Provider mode, an account-scoped platform admin session,
+and an active enrolled Agent already bound to the same buyer. The JSON contains
+`expected_revision` and `agent_instance_id`. Save exactly one success fixture first.
+This queues a private canary execution; it does not publish a service or pay for a ticket.
+Disclose the live query side effects before using `--confirm`.
+
+Resume the returned `service_execution_id` using the normal workflow commands through
+that Agent. The user confirms the route and submits passenger details in the protected
+Checkout page. Only a verified payment callback permits supplier creation/payment.
+
+`itpay sell tests accept-checkout --merchant-id <merchant> --draft-id <draft> --execution-id <execution> --confirm --json`
+
+Records server-observed completed delivery and issued tickets for the exact frozen
+workflow, fixture and dependency hashes. Pending, partial, manual-recovery, unpaid or
+changed tests cannot pass. No payment or issuance assertions are accepted as input.
+Then use the normal submission and admin review flow; this test alone is not publication.

package/docs/sell.md

@@ -61,3 +61,24 @@ Example local MCP configuration (use the existing authenticated CLI account):
 ## Seller login and dev
 
 Use `ITPAY_BACKEND_URL=https://dev.itpay.ai itpay sell auth login` to receive the normal ItPay authorization link. After browser login and required email verification, run `ITPAY_BACKEND_URL=https://dev.itpay.ai itpay sell auth status`. The CLI claims its own account session through the standard API and stores it in an owner-only file; never copy tokens or browser cookies. `itpay sell auth logout` revokes this session. Keep the same backend prefix on subsequent commands; production, dev, and sandbox state are isolated. Agent device enrollment does not grant Seller organization access.
+
+## Private dev live checkout acceptance
+
+`itpay sell tests start-checkout --merchant-id <merchant> --draft-id <draft> --input-json <file> --confirm --json`
+
+Requires the dev server in live Provider mode, an account-scoped platform admin session,
+and an active enrolled Agent already bound to the same buyer. The JSON contains
+`expected_revision` and `agent_instance_id`. Save exactly one success fixture first.
+This queues a private canary execution; it does not publish a service or pay for a ticket.
+Disclose the live query side effects before using `--confirm`.
+
+Resume the returned `service_execution_id` using the normal workflow commands through
+that Agent. The user confirms the route and submits passenger details in the protected
+Checkout page. Only a verified payment callback permits supplier creation/payment.
+
+`itpay sell tests accept-checkout --merchant-id <merchant> --draft-id <draft> --execution-id <execution> --confirm --json`
+
+Records server-observed completed delivery and issued tickets for the exact frozen
+workflow, fixture and dependency hashes. Pending, partial, manual-recovery, unpaid or
+changed tests cannot pass. No payment or issuance assertions are accepted as input.
+Then use the normal submission and admin review flow; this test alone is not publication.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@itpay/cli",
-  "version": "2.1.2",
+  "version": "2.1.4",
   "description": "The ItPay CLI for services, orders, and human-authorized purchased content.",
   "type": "module",
   "bin": {