@itpay/cli 2.1.34 → 2.1.41

package/dist/src/commands/rail_catalog.js

@@ -1,261 +0,0 @@
-import { CLI_VERSION, cliDistribution } from "../state/config.js";
-export class RailCatalogEncodingError extends Error {
-    constructor(encoding) {
-        super(`catalog encoding ${JSON.stringify(encoding)} is not supported by CLI ${CLI_VERSION} ` +
-            `(${cliDistribution()}); obtain a compatible exact version through this installation channel. ` +
-            `The committed catalog is intact`);
-        this.name = "rail_catalog_encoding";
-    }
-}
-function scopeFromProfiles(value) {
-    const profiles = Array.isArray(value) ? value : [];
-    const selected = profiles.find((p) => Array.isArray(p) && Array.isArray(p[1]) && p[1].includes("balanced")) ?? profiles[0];
-    if (!Array.isArray(selected))
-        return { origin: "legacy_unknown", destination: "legacy_unknown",
-            duration_basis: "legacy_unknown", arrival_basis: "legacy_unknown", cost_basis: "legacy_unknown",
-            duration_minutes: null, estimated_total_cost: null, cost_incomplete: true };
-    const extras = selected[10] && typeof selected[10] === "object" ? selected[10] : {};
-    const total = typeof selected[9] === "number" && extras.ci !== true ? selected[9] / 100 : null;
-    return {
-        origin: extras.os ?? "legacy_unknown", destination: extras.ds ?? "legacy_unknown",
-        duration_basis: extras.db ?? "legacy_unknown", arrival_basis: extras.ab ?? "legacy_unknown",
-        cost_basis: extras.cb ?? "legacy_unknown", duration_minutes: selected[8] ?? null,
-        estimated_total_cost: total, cost_incomplete: extras.ci === true,
-    };
-}
-function asString(v) {
-    return typeof v === "string" && v.length > 0 ? v : undefined;
-}
-function asIndex(v, bound) {
-    if (typeof v !== "number" || !Number.isInteger(v) || v < 0 || v >= bound) {
-        throw new Error("shared_rows: index out of bounds");
-    }
-    return v;
-}
-function asObject(value) {
-    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function datedTime(date, value) {
-    const raw = asString(value);
-    if (!raw)
-        return null;
-    if (/^\d{4}-\d{2}-\d{2}[ T]\d{2}:\d{2}/.test(raw))
-        return raw.replace("T", " ").slice(0, 16);
-    const short = raw.match(/^(\d{2}:\d{2})(?:\+(\d+))?$/);
-    const day = asString(date);
-    if (!short || !day)
-        return null;
-    if (!short[2])
-        return `${day} ${short[1]}`;
-    const shifted = new Date(`${day}T00:00:00Z`);
-    if (Number.isNaN(shifted.getTime()))
-        return null;
-    shifted.setUTCDate(shifted.getUTCDate() + Number(short[2]));
-    return `${shifted.toISOString().slice(0, 10)} ${short[1]}`;
-}
-function elapsedMinutes(departure, arrival) {
-    if (!departure || !arrival)
-        return null;
-    const start = Date.parse(departure.replace(" ", "T") + "Z");
-    const end = Date.parse(arrival.replace(" ", "T") + "Z");
-    return Number.isFinite(start) && Number.isFinite(end) && end >= start ? (end - start) / 60_000 : null;
-}
-function seatOffer(row, names) {
-    if (!Array.isArray(row))
-        return null;
-    const extras = asObject(row[7]);
-    const code = asString(row[1]);
-    return {
-        offer_ref: row[0], seat_type: code ?? null, seat_name: code ? names[code] ?? code : null,
-        inventory_status: row[2] ?? null, quantity: row[3] ?? null, unit_price_fen: row[4] ?? null,
-        eligible: row[5] === true, requires_quote: row[6] === true,
-        price_source: extras.s ?? "sale_price", quote_price_unverified: extras.u === true,
-        conflicted: extras.c === true,
-        ...(Array.isArray(extras.o) ? { price_observations_fen: extras.o } : {}),
-    };
-}
-function decodeRide(row, wait, stations, services) {
-    if (!Array.isArray(row)) {
-        const ride = asObject(row);
-        if (!Object.keys(ride).length)
-            throw new Error("rail catalog: malformed ride row");
-        const refs = Array.isArray(ride.service_refs) ? ride.service_refs : [];
-        const codes = [...new Set(refs.map((ref) => asObject(services[asString(ref) ?? ""]).tc)
-                .filter((code) => typeof code === "string" && code.length > 0))];
-        const departure = datedTime(ride.boarding_date, ride.departure_at ?? ride.departure);
-        const arrival = datedTime(ride.boarding_date, ride.arrival_at ?? ride.arrival);
-        return { train_codes: codes, train_code: codes.join("/"),
-            from_station: stations[asString(ride.from_station_code) ?? ""] ?? ride.from_station ?? null,
-            to_station: stations[asString(ride.to_station_code) ?? ""] ?? ride.to_station ?? null,
-            boarding_date: ride.boarding_date ?? null,
-            departure, arrival, duration_minutes: elapsedMinutes(departure, arrival),
-            wait_minutes: typeof wait === "number" ? wait : ride.wait_minutes ?? null,
-            same_run: ride.same_run === true, onboard_stops: Array.isArray(ride.onboard_stops) ? ride.onboard_stops : [],
-        };
-    }
-    const extras = asObject(row[8]);
-    const refs = Array.isArray(row[4]) ? row[4] : [];
-    const codes = [...new Set(refs.map((ref) => asObject(services[asString(ref) ?? ""]).tc)
-            .filter((code) => typeof code === "string" && code.length > 0))];
-    const base = row[0];
-    const departure = datedTime(base, extras.dep);
-    const arrival = datedTime(base, extras.arr);
-    return {
-        train_codes: codes, train_code: codes.join("/"),
-        from_station: stations[asString(row[2]) ?? ""] ?? row[2] ?? null,
-        to_station: stations[asString(row[3]) ?? ""] ?? row[3] ?? null,
-        boarding_date: base ?? null,
-        departure, arrival, duration_minutes: elapsedMinutes(departure, arrival),
-        wait_minutes: typeof wait === "number" ? wait : typeof row[5] === "number" ? row[5] : null,
-        same_run: row[6] === true, onboard_stops: Array.isArray(row[7]) ? row[7] : [],
-    };
-}
-function decodePlans(rawPlans, rawProfiles, packed, catalog, services, names, stations) {
-    const plans = Array.isArray(rawPlans) ? rawPlans : [];
-    const profiles = Array.isArray(rawProfiles) ? rawProfiles : [];
-    const preferred = profiles.find((profile) => Array.isArray(profile) && Array.isArray(profile[1]) && profile[1].includes("balanced")) ?? profiles[0];
-    const profile = Array.isArray(preferred) ? preferred : [];
-    const serviceIndex = Array.isArray(catalog.service_index) ? catalog.service_index : [];
-    const selectedPlan = packed && typeof profile[2] === "number" ? plans[asIndex(profile[2], plans.length)] :
-        plans.find((plan) => Array.isArray(plan) && plan[0] === profile[2]);
-    const selectedRef = Array.isArray(selectedPlan) ? selectedPlan[0] : null;
-    const decoded = plans.map((plan) => {
-        if (!Array.isArray(plan))
-            throw new Error("rail catalog: malformed ticket plan");
-        const refs = (Array.isArray(plan[1]) ? plan[1] : []).map((ref) => packed && typeof ref === "number" ? serviceIndex[asIndex(ref, serviceIndex.length)] : ref);
-        const extras = asObject(plan[7]);
-        const legs = refs.map((ref, index) => {
-            const service = asObject(services[asString(ref) ?? ""]);
-            const offers = Array.isArray(service.of) ? service.of : [];
-            const selectedOffer = plan[0] === selectedRef && Array.isArray(profile[3]) ? profile[3][index] : undefined;
-            const chosen = packed && typeof selectedOffer === "number" ? offers[asIndex(selectedOffer, offers.length)] :
-                offers.find((offer) => Array.isArray(offer) && offer[0] === selectedOffer);
-            return {
-                service_ref: ref ?? null, train_code: service.tc ?? null,
-                from_station: stations[asString(service.f) ?? ""] ?? service.f ?? null,
-                to_station: stations[asString(service.t) ?? ""] ?? service.t ?? null,
-                departure: datedTime(service.d, service.dep), arrival: datedTime(service.d, service.arr),
-                seat_options: offers.map((offer) => seatOffer(offer, names)).filter((offer) => offer !== null),
-                ...(chosen ? { selected_seat: seatOffer(chosen, names) } : {}),
-            };
-        });
-        const amount = asObject(plan[3]);
-        return {
-            ticket_plan_ref: plan[0], passenger_count: plan[2] ?? null,
-            purchase_support: plan[6] ?? "none", rail_amount_verified: plan[4] === true,
-            rail_amount_fen: { default: amount.def ?? null, minimum: amount.min ?? null, maximum: amount.max ?? null },
-            service_fee_fen: plan[5] ?? null, quote_price_unverified: extras.qu === true,
-            legs,
-        };
-    });
-    const selected = decoded.find((plan) => plan.ticket_plan_ref === selectedRef);
-    return { plans: decoded, ...(selected ? { selected } : {}) };
-}
-// _cn_route_text port: "南头 C7608 → 广州南换乘71分 → G2944 重庆西" — kept
-// byte-identical with the planner so a packed journey renders the same text
-// its object form carried.
-function regenerateRoute(ridePairs, rideTable, stations, services) {
-    const name = (code, fallback) => asString(stations[asString(code) ?? ""]) ?? asString(fallback) ?? asString(code) ?? "?";
-    const rides = ridePairs.map((pair) => {
-        if (!Array.isArray(pair) || pair.length !== 2)
-            throw new Error("shared_rows: malformed ride pair");
-        const src = rideTable[asIndex(pair[0], rideTable.length)];
-        if (!Array.isArray(src))
-            throw new Error("shared_rows: malformed ride row");
-        return { row: src, wait: pair[1] };
-    });
-    const first = rides[0];
-    if (first === undefined)
-        return "";
-    const trainCodes = (rideRow) => (Array.isArray(rideRow[4]) ? rideRow[4] : [])
-        .map((ref) => {
-        const svc = services[asString(ref) ?? ""];
-        return asString(svc?.tc);
-    })
-        .filter((c) => Boolean(c));
-    const waitOf = (ride) => typeof ride.wait === "number" ? ride.wait
-        : typeof ride.row[5] === "number" ? ride.row[5]
-            : undefined;
-    const sameRun = (rideRow) => rideRow[6] === true;
-    const parts = [`${name(first.row[2], undefined)} ${trainCodes(first.row).join("/")}`];
-    for (let i = 1; i < rides.length; i += 1) {
-        const prev = rides[i - 1].row;
-        const ride = rides[i];
-        const via = name(prev[3], undefined);
-        const wait = waitOf(ride);
-        parts.push(sameRun(ride.row)
-            ? wait !== undefined ? `${via}同车停${wait}分` : `${via}同车接续`
-            : wait !== undefined ? `${via}换乘${wait}分` : `${via}换乘`);
-        parts.push(`${trainCodes(ride.row).join("/")} ${name(ride.row[3], undefined)}`);
-    }
-    if (rides.length === 1) {
-        parts.push(name(first.row[3], undefined));
-    }
-    return parts.filter((s) => s.trim().length > 0).join(" → ");
-}
-// decodeRailCatalogJourneys returns one summary per committed combination in
-// catalog order. Legacy object-form catalogs (no `encoding`) pass through;
-// shared_rows.v1 rows are positional under journey_columns
-// [ref, route, rides, plans, gc, pr, profiles, tc, ev, rep, tw, risk].
-// Any other encoding throws RailCatalogEncodingError — an explicit upgrade
-// hint, never an empty catalog.
-export function decodeRailCatalogJourneys(catalog) {
-    const encoding = catalog["encoding"];
-    const layerMap = catalog["choice_layers"]?.["journey_layer"] ?? {};
-    const layerOf = (ref) => layerMap[ref] === "backup" ? "backup" : "main";
-    const stations = asObject(catalog.stations);
-    const services = asObject(catalog.services);
-    const seatNames = asObject(catalog.seat_names);
-    if (encoding === undefined || encoding === null) {
-        const rows = Array.isArray(catalog["journeys"]) ? catalog["journeys"] : [];
-        return {
-            packed: false,
-            journeys: rows.map((j) => {
-                const rec = (j ?? {});
-                const ref = asString(rec["ref"]) ?? asString(rec["journey_id"]) ?? "?";
-                const calculationScope = scopeFromProfiles(rec["profiles"]);
-                const rides = (Array.isArray(rec.rides) ? rec.rides : []).map((ride) => decodeRide(ride, null, stations, services));
-                const ticketPlans = decodePlans(rec.plans, rec.profiles, false, catalog, services, seatNames, stations);
-                return {
-                    ref,
-                    route: asString(rec["route"]) ?? asString(rec["route_text"]) ?? asString(rec["summary"]) ?? "",
-                    defaultLayer: layerOf(ref),
-                    rides,
-                    ...(calculationScope ? { calculation_scope: calculationScope } : {}),
-                    ticket_plans: ticketPlans.plans,
-                    ...(ticketPlans.selected ? { selected_plan: ticketPlans.selected } : {}),
-                };
-            }),
-        };
-    }
-    if (encoding !== "shared_rows.v1") {
-        throw new RailCatalogEncodingError(encoding);
-    }
-    const columns = catalog["journey_columns"];
-    if (!Array.isArray(columns) || columns[0] !== "ref" || columns[1] !== "route" || columns[2] !== "rides") {
-        throw new RailCatalogEncodingError(`${String(encoding)} (unexpected journey_columns)`);
-    }
-    const rideTable = (Array.isArray(catalog["ride_table"]) ? catalog["ride_table"] : []);
-    const journeys = (Array.isArray(catalog["journeys"]) ? catalog["journeys"] : []);
-    return {
-        packed: true,
-        journeys: journeys.map((row) => {
-            if (!Array.isArray(row))
-                throw new Error("shared_rows: journey row is not an array");
-            const ref = asString(row[0]) ?? "?";
-            const route = asString(row[1]) ??
-                (Array.isArray(row[2]) ? regenerateRoute(row[2], rideTable, stations, services) : "");
-            const rides = (Array.isArray(row[2]) ? row[2] : []).map((pair) => {
-                if (!Array.isArray(pair) || pair.length !== 2)
-                    throw new Error("shared_rows: malformed ride pair");
-                return decodeRide(rideTable[asIndex(pair[0], rideTable.length)], pair[1], stations, services);
-            });
-            const calculationScope = scopeFromProfiles(row[6]);
-            const ticketPlans = decodePlans(row[3], row[6], true, catalog, services, seatNames, stations);
-            return { ref, route, defaultLayer: layerOf(ref), rides,
-                ...(calculationScope ? { calculation_scope: calculationScope } : {}),
-                ticket_plans: ticketPlans.plans,
-                ...(ticketPlans.selected ? { selected_plan: ticketPlans.selected } : {}) };
-        }),
-    };
-}

package/dist/src/render/browser.js

@@ -1,65 +0,0 @@
-// Local browser dispatch for `--present browser`. Opens the URL via the OS
-// opener with an argv array — never a model-generated shell string. Dispatch
-// proves only that the request was accepted by the OS; it never means the
-// page became visible (that would be `page_loaded`, which needs evidence).
-import { spawn } from "node:child_process";
-import { platform } from "node:os";
-// Official HTTPS origins (or the loopback dev origin behind ITPAY_CLI_DEV).
-// No userinfo, no non-http(s) schemes, no redirect chains — the opener gets
-// exactly this URL once.
-export function isPresentableURL(raw, baseURL, env = process.env) {
-    let url;
-    try {
-        url = new URL(raw);
-    }
-    catch {
-        return false;
-    }
-    if (url.username || url.password)
-        return false;
-    if (env.ITPAY_CLI_DEV === "1" && /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(url.origin))
-        return true;
-    if (url.protocol !== "https:")
-        return false;
-    const allowedOrigins = new Set(["https://app.itpay.ai", "https://sandbox.itpay.ai", "https://dev.itpay.ai"]);
-    if (baseURL) {
-        try {
-            allowedOrigins.add(new URL(baseURL).origin);
-        }
-        catch {
-            /* ignore malformed base URL */
-        }
-    }
-    return allowedOrigins.has(url.origin);
-}
-export function openInSystemBrowser(raw, baseURL, env = process.env) {
-    if (!isPresentableURL(raw, baseURL, env)) {
-        return Promise.resolve({ status: "failed", reason: "url_rejected" });
-    }
-    const [command, args] = openerArgv(raw);
-    if (!command) {
-        return Promise.resolve({ status: "unavailable", reason: "no system opener on this platform" });
-    }
-    return new Promise((resolvePromise) => {
-        const child = spawn(command, args, { detached: true, stdio: "ignore" });
-        child.once("error", (error) => resolvePromise({ status: "failed", reason: error.message }));
-        child.once("spawn", () => {
-            child.unref();
-            resolvePromise({ status: "dispatch_accepted", argv: [command, ...args] });
-        });
-    });
-}
-function openerArgv(url) {
-    switch (platform()) {
-        case "darwin":
-            return ["open", [url]];
-        case "win32":
-            return ["cmd.exe", ["/c", "start", "", url]];
-        case "linux":
-        case "freebsd":
-        case "openbsd":
-            return ["xdg-open", [url]];
-        default:
-            return [undefined, []];
-    }
-}

package/dist/src/sell/commands.js

@@ -1,80 +0,0 @@
-import { sellerAuth } from "../state/account_auth.js";
-import { registerSync } from "./sync.js";
-import { preview } from "./preview.js";
-import { serveSellMCP } from "./mcp.js";
-import { registerLocal } from "./local.js";
-import { readFileSync } from 'node:fs';
-import { loadConfig, newBackendClient } from '../state/config.js';
-import { SELL_GUIDE, SELL_OPERATIONS, sellRequest } from './contract.js';
-export function registerSell(program) {
-    const sell = program.command('sell').description('Create, test and submit your service for review');
-    const auth = sell.command('auth').description('Authorize this CLI using normal ItPay account login');
-    for (const action of ['login', 'status', 'logout'])
-        auth.command(action).action(async () => {
-            process.stdout.write(JSON.stringify(await sellerAuth(action, loadConfig().baseURL)) + '\n');
-        });
-    const groups = new Map([['', sell]]);
-    for (const operation of SELL_OPERATIONS) {
-        const parts = operation.command.split(' ');
-        const leaf = parts.pop();
-        let parent = sell, key = '';
-        for (const part of parts) {
-            key = key ? `${key} ${part}` : part;
-            let group = groups.get(key);
-            if (!group) {
-                group = parent.command(part);
-                groups.set(key, group);
-            }
-            parent = group;
-        }
-        const command = parent.command(leaf).description(operation.description).option('--json', 'Structured output').option('--input-json <file>', 'Request fields as JSON');
-        const required = [...operation.path.matchAll(/\{(\w+)\}/g)].map(m => m[1]);
-        for (const field of required)
-            command.option(`--${field.replaceAll('_', '-')} <value>`, field);
-        if (operation.confirmation)
-            command.option('--confirm', 'User explicitly confirmed the disclosed version/action');
-        command.action(async (options) => {
-            try {
-                if (operation.command === 'guide' && !options.merchantId) {
-                    process.stdout.write(JSON.stringify({ ...SELL_GUIDE, operations: SELL_OPERATIONS }, null, 2) + '\n');
-                    return;
-                }
-                if (operation.confirmation && !options.confirm)
-                    throw new Error('Explicit user confirmation required after reviewing this action; pass --confirm only after user approval');
-                const input = options.inputJson ? JSON.parse(readFileSync(String(options.inputJson), 'utf8')) : {};
-                if (!input || typeof input !== 'object' || Array.isArray(input))
-                    throw new Error('Input JSON must be an object');
-                const params = {};
-                for (const field of required)
-                    params[field] = options[field.replace(/_([a-z])/g, (_, c) => c.toUpperCase())];
-                const request = sellRequest(operation, params, input);
-                const result = await newBackendClient(loadConfig()).sellRequest(request);
-                process.stdout.write(JSON.stringify({ status: 'ok', operation: operation.command, result: result ?? null }, null, 2) + '\n');
-            }
-            catch (error) {
-                process.exitCode = 1;
-                process.stdout.write(JSON.stringify({ status: 'error', operation: operation.command, message: error instanceof Error ? error.message : 'Sell operation failed', next: 'itpay sell guide --json' }, null, 2) + '\n');
-            }
-        });
-    }
-    registerLocal(sell);
-    registerSync(sell);
-    sell.commands.find(command => command.name() === "workflow").command("preview").option("--project <directory>", "Project directory", ".").action(async (options) => { const result = await preview(options.project); process.stdout.write(JSON.stringify({ url: result.url, instruction: "Open this local URL to inspect the saved workflow" }) + "\n"); });
-    sell.command("mcp").description("Serve local Seller MCP over stdio").requiredOption("--stdio").option("--project <directory>", "Project directory", ".").action(async (options) => { await serveSellMCP(options.project); });
-    const submission = sell.commands.find(command => command.name() === "submission");
-    submission.command("watch").requiredOption("--merchant-id <id>").requiredOption("--submission-id <id>").option("--timeout <seconds>", "Maximum wait", "120").option("--json").action(async (options) => {
-        const timeout = Number(options.timeout);
-        if (!Number.isFinite(timeout) || timeout < 0 || timeout > 600)
-            throw new Error("timeout must be between 0 and 600");
-        const backend = newBackendClient(loadConfig()), until = Date.now() + timeout * 1000;
-        for (;;) {
-            const result = await backend.sellRequest({ method: "GET", path: "/v1/seller/organizations/" + encodeURIComponent(options.merchantId) + "/service-submissions/" + encodeURIComponent(options.submissionId) });
-            if (!["submitted", "pending", "under_review"].includes(result.status) || Date.now() >= until) {
-                process.stdout.write(JSON.stringify({ status: result.status, result }) + "\n");
-                break;
-            }
-            await new Promise(resolve => setTimeout(resolve, 2000));
-        }
-    });
-    return sell;
-}

package/dist/src/sell/contract.js

@@ -1,86 +0,0 @@
-const org = "/v1/seller/organizations/{merchant_id}";
-const draft = `${org}/service-drafts/{draft_id}`;
-const read = "itpay.seller.read", write = "itpay.seller.write", test = "itpay.seller.test", submit = "itpay.seller.submit";
-export const SELL_GUIDE = {
-    version: "itpay.sell.v1", command: "itpay sell", truth: "workflow.yaml",
-    steps: ["auth", "setup", "sources", "workflow", "local_test", "confirm", "push", "platform_verification", "pricing", "submission", "publication"],
-    rules: [
-        "Use the authenticated user's existing merchant. KYB and payout changes remain in the dashboard.",
-        "Resolve every API against its declared method, Content-Type, parameters, response schema and locked version. Ask for missing inputs; never guess credentials or change contracts.",
-        "Only saved versions may run. A run is not a saved version. Local evidence cannot grant platform test approval.",
-        "Use the platform node catalog and validator for supported pricing, quotas, confirmation and durable fulfillment. Every paid success path must cross payment and delivery gates.",
-        "Use own credentials for local requests. Platform-managed credentials stay on the platform. Mark execution location honestly.",
-        "Present side effects before live tests. Unknown results stop automatic retries. Local payment/refund/delivery gates are simulated, never real funds.",
-        "Show the exact workflow and version before user confirmation. Preview price, delivery and current terms before explicit submission approval.",
-        "Use platform guide for next actions. Submission is not publication: only an actual admin approval publishes the service."
-    ]
-};
-export const SELL_OPERATIONS = [
-    { command: "status", method: "GET", path: "/v1/seller/organizations", scope: read, fields: {}, description: "List existing merchant memberships" },
-    { command: "guide", method: "GET", path: `${org}/guide`, scope: read, fields: { draft_id: "string" }, optional: ["draft_id"], description: "Read authoritative publication blockers and next actions" },
-    { command: "library search", method: "GET", path: "/v1/library/apis", scope: read, fields: { q: "string" }, optional: ["q"], description: "Search available API contracts" },
-    { command: "library get", method: "GET", path: "/v1/library/apis/{library_api_id}", scope: read, fields: {}, description: "Inspect an API contract" },
-    { command: "sources list", method: "GET", path: `${org}/api-intakes`, scope: read, fields: {}, description: "List imported API sources" },
-    { command: "sources inspect", method: "GET", path: `${org}/api-intakes/{intake_id}`, scope: read, fields: {}, description: "Inspect imported operations and verification results" },
-    { command: "sources import", method: "POST", path: `${org}/api-intakes`, scope: write, fields: { provider_key: "string", source_url: "string", document: "document", media_type: "string" }, optional: ["source_url", "document", "media_type"], description: "Import an OpenAPI source without inventing request contracts" },
-    { command: "sources library", method: "POST", path: `${org}/api-intakes/from-library`, scope: write, fields: { library_api_id: "string" }, description: "Bind a platform library source" },
-    { command: "sources probe", method: "POST", path: `${org}/api-intakes/{intake_id}/probe`, scope: test, fields: { credential_profile_id: "string", operation_inputs: "object" }, description: "Verify selected API requests on the platform", confirmation: true },
-    { command: "credentials status", method: "GET", path: `${org}/provider-credential-profiles`, scope: read, fields: {}, description: "Read credential bindings without secret values" },
-    { command: "services list", method: "GET", path: `${org}/service-drafts`, scope: read, fields: {}, description: "List own service drafts and publication state" },
-    { command: "services create", method: "POST", path: `${org}/service-drafts`, scope: write, fields: { service_id: "string", public_name: "string" }, description: "Create a platform service draft" },
-    { command: "services icon", method: "PUT", path: `${draft}/icon/content`, scope: write, fields: { content_base64: "string" }, description: "Upload a PNG/JPEG service icon, max 512 KiB, as signed JSON" },
-    { command: "services get", method: "GET", path: `${draft}/workflow`, scope: read, fields: {}, description: "Read the current workflow and service settings" },
-    { command: "workflow catalog", method: "GET", path: `${org}/node-catalog`, scope: read, fields: {}, description: "Read exact supported node templates and required configuration" },
-    { command: "workflow plan", method: "POST", path: `${draft}/orchestration-runs`, scope: test, fields: { expected_revision: "number", instruction: "string", api_intake_ids: "array", credential_profile_bindings: "object" }, description: "Explicitly use ItPay AI planning and platform verification", confirmation: true },
-    { command: "workflow plan-get", method: "GET", path: `${draft}/orchestration-runs/{run_id}`, scope: read, fields: {}, description: "Read the AI candidate and diagnostics" },
-    { command: "workflow plan-apply", method: "POST", path: `${draft}/orchestration-runs/{run_id}/apply`, scope: write, fields: { expected_revision: "number" }, description: "Apply a reviewed AI candidate to the draft", confirmation: true },
-    { command: "workflow upload", method: "PUT", path: `${draft}/workflow`, scope: write, fields: { expected_revision: "number", public_name: "string", arazzo: "object" }, optional: ["public_name"], description: "Update the platform workflow with optimistic concurrency" },
-    { command: "workflow validate-platform", method: "POST", path: `${draft}/workflow/validate`, scope: write, fields: {}, description: "Validate using the same public runtime rules as approval" },
-    { command: "workflow versions list-platform", method: "GET", path: `${draft}/workflow/versions`, scope: read, fields: {}, description: "List explicitly saved platform versions" },
-    { command: "workflow versions save-platform", method: "POST", path: `${draft}/workflow/versions`, scope: write, fields: { name: "string", source: "string", arazzo_document: "string", expected_revision: "number" }, description: "Save an explicit immutable platform version" },
-    { command: "workflow versions delete-platform", method: "DELETE", path: `${draft}/workflow/versions/{version_id}`, scope: write, fields: { expected_revision: "number" }, description: "Delete an eligible saved version and its runs", confirmation: true },
-    { command: "fixtures get", method: "GET", path: `${draft}/fixtures`, scope: read, fields: {}, description: "Read test inputs" },
-    { command: "fixtures set", method: "PUT", path: `${draft}/fixtures`, scope: write, fields: { expected_revision: "number", fixtures: "array" }, description: "Save explicit test inputs" },
-    { command: "pricing get", method: "GET", path: `${draft}/workflow`, scope: read, fields: {}, description: "Read the current price and refund policy" },
-    { command: "pricing set", method: "PUT", path: `${draft}/pricing`, scope: write, fields: { expected_revision: "number", pricing: "object", policy: "object" }, description: "Set per-call price and platform refund policy" },
-    { command: "verify", method: "POST", path: `${draft}/validation-runs`, scope: test, fields: { workflow_version_id: "string", expected_semantic_revision: "number", expected_fixture_revision: "number" }, description: "Start platform verification for an explicitly saved version", confirmation: true },
-    { command: "tests start-checkout", method: "POST", path: `${draft}/live-checkout-tests`, scope: test, fields: { expected_revision: "number", agent_instance_id: "string" }, description: "Dev admin only: freeze one success fixture into a private real-checkout test bound to your registered Agent. Payment still requires user confirmation; this does not publish the service.", confirmation: true },
-    { command: "tests accept-checkout", method: "POST", path: `${draft}/live-checkout-tests/{execution_id}/accept`, scope: test, fields: {}, description: "Record server-observed issued tickets and completed delivery as evidence for the exact tested revision. Never synthesizes payment or issuance.", confirmation: true },
-    { command: "runs get", method: "GET", path: `${draft}/validation-runs/{run_id}`, scope: read, fields: {}, description: "Inspect platform test nodes and diagnostics" },
-    { command: "runs confirm", method: "POST", path: `${draft}/validation-runs/{run_id}/confirm`, scope: test, fields: { risk_hash: "string" }, description: "Confirm the exact disclosed platform test side effects", confirmation: true },
-    { command: "submission preview", method: "GET", path: `${org}/guide`, scope: read, fields: { draft_id: "string" }, description: "Read publication readiness and required agreements" },
-    { command: "submission submit", method: "POST", path: `${draft}/submit`, scope: submit, fields: { expected_revision: "number", terms_version: "string", confirmations: "array" }, description: "Submit the confirmed version for review, never approve it", confirmation: true },
-    { command: "submission get", method: "GET", path: `${org}/service-submissions/{submission_id}`, scope: read, fields: {}, description: "Read the actual review/publication result" },
-    { command: "submission withdraw", method: "POST", path: `${org}/service-submissions/{submission_id}/withdraw`, scope: submit, fields: {}, description: "Withdraw own pending submission", confirmation: true },
-];
-export function sellRequest(operation, params, input = {}) {
-    let path = operation.path.replace(/\{(\w+)\}/g, (_, key) => {
-        const value = params[key];
-        if (typeof value !== "string" || !value.trim())
-            throw new Error(`${key} is required`);
-        return encodeURIComponent(value);
-    });
-    for (const key of Object.keys(input))
-        if (!operation.fields[key])
-            throw new Error(`Unsupported field: ${key}`);
-    for (const [key, type] of Object.entries(operation.fields)) {
-        const value = input[key];
-        if (value === undefined && operation.optional?.includes(key))
-            continue;
-        const valid = type === "document" ? (typeof value === "string" || (!!value && typeof value === "object" && !Array.isArray(value))) : type === "array" ? Array.isArray(value) : type === "object" ? !!value && typeof value === "object" && !Array.isArray(value) : typeof value === type;
-        if (!valid)
-            throw new Error(`${key} must be ${type}`);
-        if (type === "number" && (!Number.isSafeInteger(value) || Number(value) < 0))
-            throw new Error(`${key} must be a nonnegative integer`);
-    }
-    if (operation.method === "GET") {
-        const query = [];
-        for (const [key, value] of Object.entries(input))
-            if (value !== undefined)
-                query.push(`${encodeURIComponent(key)}=${encodeURIComponent(String(value))}`);
-        if (query.length)
-            path += `?${query.join("&")}`;
-        return { path, method: operation.method };
-    }
-    return { path, method: operation.method, body: input };
-}