@lahat-group/cli 1.1.4 → 1.1.5

package/dist/index.js

@@ -9424,6 +9424,28 @@ init_esm_shims();
 // ../../packages/shared/src/permissions.ts
 init_esm_shims();
 
+// ../../packages/shared/src/agentScopes.ts
+init_esm_shims();
+var AGENT_SCOPES = {
+  "profile:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05E9\u05DD \u05D5\u05D4\u05D0\u05D9\u05DE\u05D9\u05D9\u05DC \u05E9\u05DC\u05DA", en: "See your name and email" },
+  "projects:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "See your projects" },
+  "projects:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD", en: "Create and edit projects" },
+  "customers:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05DC\u05E7\u05D5\u05D7\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your customers" },
+  "customers:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05DC\u05E7\u05D5\u05D7\u05D5\u05EA", en: "Create and edit customers" },
+  "designs:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9 \u05D4\u05D0\u05E8\u05D5\u05E0\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your wardrobe designs" },
+  "designs:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9 \u05D0\u05E8\u05D5\u05E0\u05D5\u05EA", en: "Create and edit wardrobe designs" },
+  "price:read": { he: "\u05DC\u05EA\u05DE\u05D7\u05E8 \u05EA\u05E6\u05D5\u05E8\u05EA \u05D0\u05E8\u05D5\u05DF", en: "Price a configuration" },
+  "chat:read": { he: "\u05DC\u05E7\u05E8\u05D5\u05D0 \u05D4\u05D5\u05D3\u05E2\u05D5\u05EA \u05D1\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Read project messages" },
+  "chat:write": { he: "\u05DC\u05DB\u05EA\u05D5\u05D1 \u05D4\u05D5\u05D3\u05E2\u05D5\u05EA \u05D1\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Post project messages" },
+  "files:write": { he: "\u05DC\u05D4\u05E2\u05DC\u05D5\u05EA \u05EA\u05DE\u05D5\u05E0\u05D5\u05EA \u05E9\u05DC \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9\u05DD", en: "Upload design images" },
+  "quotations:write": { he: "\u05DC\u05D4\u05E4\u05D9\u05E7 \u05D4\u05E6\u05E2\u05EA \u05DE\u05D7\u05D9\u05E8", en: "Generate a quotation PDF" },
+  "orders:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05D4\u05D6\u05DE\u05E0\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your orders" },
+  "orders:write": { he: "\u05DC\u05D4\u05DB\u05D9\u05DF \u05D8\u05D9\u05D5\u05D8\u05EA \u05D4\u05D6\u05DE\u05E0\u05D4 \u05DC\u05D0\u05D9\u05E9\u05D5\u05E8\u05DA", en: "Draft an order for you to confirm" },
+  "orders:commit": { he: "\u05DC\u05D0\u05E9\u05E8 \u05D4\u05D6\u05DE\u05E0\u05D4 \u05D1\u05E9\u05DE\u05DA", en: "Confirm an order on your behalf" },
+  "invitations:write": { he: "\u05DC\u05D4\u05D6\u05DE\u05D9\u05DF \u05D0\u05E0\u05E9\u05D9\u05DD \u05DC\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Invite people to your projects" }
+};
+var ALL_AGENT_SCOPES = Object.keys(AGENT_SCOPES);
+
 // ../../packages/shared/src/legal.ts
 init_esm_shims();
 
@@ -11891,7 +11913,7 @@ async function formatCliError(err, json) {
 
 // src/version.ts
 init_esm_shims();
-var CLI_VERSION = "1.1.4";
+var CLI_VERSION = "1.1.5";
 
 // src/index.ts
 program.name("wardrobe").description("Wardrobe configurator CLI").version(CLI_VERSION);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lahat-group/cli",
-  "version": "1.1.4",
+  "version": "1.1.5",
   "description": "CLI + Claude Skill to build, validate, price, and save wardrobe designs.",
   "license": "UNLICENSED",
   "type": "module",

package/skill/SKILL.md

@@ -63,15 +63,21 @@ Prefer generating the skeleton with `wardrobe init` rather than hand-writing it
 `init` fills materials, `ruleVersion`, and a valid column layout for you. Column
 `id`s are `nanoid()` and are not stable across rebuilds.
 
-## Guardrails — orders require a human
+## Guardrails — committing to an order requires a human
 
-- **The CLI cannot place orders.** Ordering is intentionally not an agent verb: the
-  agent key carries only `designs:read`, `designs:write`, `price:read` — **no order or
-  admin scope**. Don't attempt to order, or to run admin/catalog operations.
+- **The CLI cannot place orders.** The `wardrobe-cli` client is registered with
+  `profile:read`, `projects:read`, `designs:read`, `designs:write`, `price:read` —
+  **no order or admin scope** — so every order route answers `403 insufficient_scope`.
+  Don't attempt to order, or to run admin/catalog operations.
 - To turn a saved design into an order, direct the **human** to the web app: they
   open the project, review the design, and complete the **verify-details** flow —
   which computes the final price, freezes the PDF, and advances the order. Only a
   human does this. Your job ends at `apply` (a saved design) plus a clear summary.
+- This is now a **scope** boundary rather than a property of the API surface: other
+  registered clients may hold `orders:write` and *draft* an order (status `created` —
+  no frozen PDF, no confirmation email). But `orders:commit`, which gates
+  `verify-details`, is held by no client at all, so the commitment step stays human
+  for every agent. See `docs/bot-api.md`.
 
 ## Error handling