@lahat-group/cli 1.1.3 → 1.1.5

package/dist/index.js

@@ -7555,7 +7555,8 @@ var ShelfModuleSchema = BaseModuleSchema.extend({
 });
 var RailModuleSchema = BaseModuleSchema.extend({
   type: external_exports.literal("rail"),
-  railVariant: external_exports.enum(["tall", "short"]).optional()
+  railVariant: external_exports.enum(["tall", "short"]).optional(),
+  railKind: external_exports.enum(["standard", "pull-down"]).optional()
 });
 var DrawerInternalModuleSchema = BaseModuleSchema.extend({
   type: external_exports.literal("drawer-internal"),
@@ -9064,6 +9065,19 @@ function getColumnDoorCount(bodyWidthCm) {
 
 // ../../packages/shared/src/describe.ts
 init_esm_shims();
+
+// ../../packages/shared/src/hangingRail.ts
+init_esm_shims();
+var FRONTAL_RAIL_MAX_BODY_DEPTH_CM = 55;
+function allowsPullDownRail(bodyDepthCm) {
+  return bodyDepthCm > FRONTAL_RAIL_MAX_BODY_DEPTH_CM;
+}
+function resolveRailPieceKind(railKind, bodyDepthCm) {
+  if (!allowsPullDownRail(bodyDepthCm)) return "frontal";
+  return railKind === "pull-down" ? "pull-down" : "standard";
+}
+
+// ../../packages/shared/src/describe.ts
 var POSITION_LABELS = {
   "left-corner": "Left corner",
   "right-corner": "Right corner",
@@ -9246,7 +9260,8 @@ function groupModulesEn(modules, columnDepthCm, hasDoors) {
         break;
       case "rail": {
         const variant = mod.railVariant ?? "tall";
-        rails.push(variant);
+        const kind = resolveRailPieceKind(mod.railKind, columnDepthCm);
+        rails.push(kind === "standard" ? variant : `${variant}, ${kind}`);
         break;
       }
       case "drawer-internal":
@@ -9276,6 +9291,7 @@ function groupModulesHe(modules, columnDepthCm, hasDoors) {
   const rails = [];
   const drawersByHeight = /* @__PURE__ */ new Map();
   const RAIL_VARIANT_HE = { tall: "\u05D2\u05D1\u05D5\u05D4", short: "\u05E0\u05DE\u05D5\u05DA" };
+  const RAIL_KIND_HE = { "pull-down": "\u05E1\u05E8\u05D5\u05D5\u05D8\u05D5", frontal: "\u05DE\u05D5\u05D8 \u05EA\u05DC\u05D9\u05D9\u05D4 \u05E7\u05D3\u05DE\u05D9" };
   const derivedDepth = deriveDrawerDepthCm(columnDepthCm * 10, hasDoors);
   for (const mod of modules) {
     switch (mod.type) {
@@ -9284,7 +9300,9 @@ function groupModulesHe(modules, columnDepthCm, hasDoors) {
         break;
       case "rail": {
         const variant = mod.railVariant ?? "tall";
-        rails.push(RAIL_VARIANT_HE[variant] ?? variant);
+        const variantHe = RAIL_VARIANT_HE[variant] ?? variant;
+        const kindHe = RAIL_KIND_HE[resolveRailPieceKind(mod.railKind, columnDepthCm)];
+        rails.push(kindHe ? `${variantHe}, ${kindHe}` : variantHe);
         break;
       }
       case "drawer-internal":
@@ -9406,6 +9424,28 @@ init_esm_shims();
 // ../../packages/shared/src/permissions.ts
 init_esm_shims();
 
+// ../../packages/shared/src/agentScopes.ts
+init_esm_shims();
+var AGENT_SCOPES = {
+  "profile:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05E9\u05DD \u05D5\u05D4\u05D0\u05D9\u05DE\u05D9\u05D9\u05DC \u05E9\u05DC\u05DA", en: "See your name and email" },
+  "projects:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "See your projects" },
+  "projects:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD", en: "Create and edit projects" },
+  "customers:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05DC\u05E7\u05D5\u05D7\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your customers" },
+  "customers:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05DC\u05E7\u05D5\u05D7\u05D5\u05EA", en: "Create and edit customers" },
+  "designs:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9 \u05D4\u05D0\u05E8\u05D5\u05E0\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your wardrobe designs" },
+  "designs:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9 \u05D0\u05E8\u05D5\u05E0\u05D5\u05EA", en: "Create and edit wardrobe designs" },
+  "price:read": { he: "\u05DC\u05EA\u05DE\u05D7\u05E8 \u05EA\u05E6\u05D5\u05E8\u05EA \u05D0\u05E8\u05D5\u05DF", en: "Price a configuration" },
+  "chat:read": { he: "\u05DC\u05E7\u05E8\u05D5\u05D0 \u05D4\u05D5\u05D3\u05E2\u05D5\u05EA \u05D1\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Read project messages" },
+  "chat:write": { he: "\u05DC\u05DB\u05EA\u05D5\u05D1 \u05D4\u05D5\u05D3\u05E2\u05D5\u05EA \u05D1\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Post project messages" },
+  "files:write": { he: "\u05DC\u05D4\u05E2\u05DC\u05D5\u05EA \u05EA\u05DE\u05D5\u05E0\u05D5\u05EA \u05E9\u05DC \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9\u05DD", en: "Upload design images" },
+  "quotations:write": { he: "\u05DC\u05D4\u05E4\u05D9\u05E7 \u05D4\u05E6\u05E2\u05EA \u05DE\u05D7\u05D9\u05E8", en: "Generate a quotation PDF" },
+  "orders:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05D4\u05D6\u05DE\u05E0\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your orders" },
+  "orders:write": { he: "\u05DC\u05D4\u05DB\u05D9\u05DF \u05D8\u05D9\u05D5\u05D8\u05EA \u05D4\u05D6\u05DE\u05E0\u05D4 \u05DC\u05D0\u05D9\u05E9\u05D5\u05E8\u05DA", en: "Draft an order for you to confirm" },
+  "orders:commit": { he: "\u05DC\u05D0\u05E9\u05E8 \u05D4\u05D6\u05DE\u05E0\u05D4 \u05D1\u05E9\u05DE\u05DA", en: "Confirm an order on your behalf" },
+  "invitations:write": { he: "\u05DC\u05D4\u05D6\u05DE\u05D9\u05DF \u05D0\u05E0\u05E9\u05D9\u05DD \u05DC\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Invite people to your projects" }
+};
+var ALL_AGENT_SCOPES = Object.keys(AGENT_SCOPES);
+
 // ../../packages/shared/src/legal.ts
 init_esm_shims();
 
@@ -9804,13 +9844,19 @@ var POOL_SIZE_MULTIPLIER = 128;
 var pool;
 var poolOffset;
 function fillPool(bytes) {
-  if (!pool || pool.length < bytes) {
-    pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER);
-    crypto.getRandomValues(pool);
-    poolOffset = 0;
-  } else if (poolOffset + bytes > pool.length) {
-    crypto.getRandomValues(pool);
-    poolOffset = 0;
+  if (bytes < 0) throw new RangeError("Wrong ID size");
+  try {
+    if (!pool || pool.length < bytes) {
+      pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER);
+      crypto.getRandomValues(pool);
+      poolOffset = 0;
+    } else if (poolOffset + bytes > pool.length) {
+      crypto.getRandomValues(pool);
+      poolOffset = 0;
+    }
+  } catch (e) {
+    pool = void 0;
+    throw e;
   }
   poolOffset += bytes;
 }
@@ -10484,6 +10530,7 @@ function placementsToModules(placements, H) {
           type: "rail",
           height: 0,
           railVariant: p.railVariant ?? "tall",
+          railKind: p.railKind ?? "standard",
           spacingAbove,
           spacingBelow
         });
@@ -10582,7 +10629,7 @@ function generateCustomLayout(options, H) {
     const clearance = railType === "tall" ? RAIL_CLEARANCE_TALL_CM : RAIL_CLEARANCE_SHORT_CM;
     const n1 = options.railUpperShelfCount ?? 0;
     const railY = options.railAtCeiling ? H - RAIL_CLEARANCE_ABOVE_MIN_CM : grid[Math.max(0, grid.length - 1 - n1)] - RAIL_CLEARANCE_ABOVE_MIN_CM;
-    placements.push({ type: "rail", y: railY, height: 0, railVariant: railType });
+    placements.push({ type: "rail", y: railY, height: 0, railVariant: railType, railKind: options.railKind });
     hangingZones.push({ top: railY, bottom: railY - clearance });
     if (options.hasSecondRail && options.secondRailType) {
       const secondClearance = options.secondRailType === "tall" ? RAIL_CLEARANCE_TALL_CM : RAIL_CLEARANCE_SHORT_CM;
@@ -10593,7 +10640,7 @@ function generateCustomLayout(options, H) {
       if (anchorIdx2 >= 0) {
         const secondRailY = grid[anchorIdx2] - RAIL_CLEARANCE_ABOVE_MIN_CM;
         if (secondRailY > 0) {
-          placements.push({ type: "rail", y: secondRailY, height: 0, railVariant: options.secondRailType });
+          placements.push({ type: "rail", y: secondRailY, height: 0, railVariant: options.secondRailType, railKind: options.secondRailKind });
           hangingZones.push({ top: secondRailY, bottom: secondRailY - secondClearance });
         }
       }
@@ -11866,7 +11913,7 @@ async function formatCliError(err, json) {
 
 // src/version.ts
 init_esm_shims();
-var CLI_VERSION = "1.1.3";
+var CLI_VERSION = "1.1.5";
 
 // src/index.ts
 program.name("wardrobe").description("Wardrobe configurator CLI").version(CLI_VERSION);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lahat-group/cli",
-  "version": "1.1.3",
+  "version": "1.1.5",
   "description": "CLI + Claude Skill to build, validate, price, and save wardrobe designs.",
   "license": "UNLICENSED",
   "type": "module",

package/skill/SKILL.md

@@ -63,15 +63,21 @@ Prefer generating the skeleton with `wardrobe init` rather than hand-writing it
 `init` fills materials, `ruleVersion`, and a valid column layout for you. Column
 `id`s are `nanoid()` and are not stable across rebuilds.
 
-## Guardrails — orders require a human
+## Guardrails — committing to an order requires a human
 
-- **The CLI cannot place orders.** Ordering is intentionally not an agent verb: the
-  agent key carries only `designs:read`, `designs:write`, `price:read` — **no order or
-  admin scope**. Don't attempt to order, or to run admin/catalog operations.
+- **The CLI cannot place orders.** The `wardrobe-cli` client is registered with
+  `profile:read`, `projects:read`, `designs:read`, `designs:write`, `price:read` —
+  **no order or admin scope** — so every order route answers `403 insufficient_scope`.
+  Don't attempt to order, or to run admin/catalog operations.
 - To turn a saved design into an order, direct the **human** to the web app: they
   open the project, review the design, and complete the **verify-details** flow —
   which computes the final price, freezes the PDF, and advances the order. Only a
   human does this. Your job ends at `apply` (a saved design) plus a clear summary.
+- This is now a **scope** boundary rather than a property of the API surface: other
+  registered clients may hold `orders:write` and *draft* an order (status `created` —
+  no frozen PDF, no confirmation email). But `orders:commit`, which gates
+  `verify-details`, is held by no client at all, so the commitment step stays human
+  for every agent. See `docs/bot-api.md`.
 
 ## Error handling