@lahat-group/cli 1.1.4 → 1.1.6

package/dist/index.js

@@ -3128,10 +3128,12 @@ var HELP_KEYS = {
   },
   orderStatus: {
     created: "orderStatus.created",
-    pending_contact: "orderStatus.pending_contact",
+    pending_payment: "orderStatus.pending_payment",
     paid: "orderStatus.paid",
+    pending_measurement: "orderStatus.pending_measurement",
     sent_to_manufacturing: "orderStatus.sent_to_manufacturing",
     in_manufacturing: "orderStatus.in_manufacturing",
+    pending_assembly: "orderStatus.pending_assembly",
     provided: "orderStatus.provided"
   }
 };
@@ -3156,10 +3158,12 @@ var ALL_HELP_KEYS = [
   HELP_KEYS.inspector.layout,
   HELP_KEYS.inspector.column,
   HELP_KEYS.orderStatus.created,
-  HELP_KEYS.orderStatus.pending_contact,
+  HELP_KEYS.orderStatus.pending_payment,
   HELP_KEYS.orderStatus.paid,
+  HELP_KEYS.orderStatus.pending_measurement,
   HELP_KEYS.orderStatus.sent_to_manufacturing,
   HELP_KEYS.orderStatus.in_manufacturing,
+  HELP_KEYS.orderStatus.pending_assembly,
   HELP_KEYS.orderStatus.provided
 ];
 
@@ -9424,6 +9428,29 @@ init_esm_shims();
 // ../../packages/shared/src/permissions.ts
 init_esm_shims();
 
+// ../../packages/shared/src/agentScopes.ts
+init_esm_shims();
+var AGENT_SCOPES = {
+  "profile:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05E9\u05DD \u05D5\u05D4\u05D0\u05D9\u05DE\u05D9\u05D9\u05DC \u05E9\u05DC\u05DA", en: "See your name and email" },
+  "projects:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "See your projects" },
+  "projects:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD", en: "Create and edit projects" },
+  "customers:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05DC\u05E7\u05D5\u05D7\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your customers" },
+  "customers:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05DC\u05E7\u05D5\u05D7\u05D5\u05EA", en: "Create and edit customers" },
+  "designs:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9 \u05D4\u05D0\u05E8\u05D5\u05E0\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your wardrobe designs" },
+  "designs:write": { he: "\u05DC\u05D9\u05E6\u05D5\u05E8 \u05D5\u05DC\u05E2\u05E8\u05D5\u05DA \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9 \u05D0\u05E8\u05D5\u05E0\u05D5\u05EA", en: "Create and edit wardrobe designs" },
+  "price:read": { he: "\u05DC\u05EA\u05DE\u05D7\u05E8 \u05EA\u05E6\u05D5\u05E8\u05EA \u05D0\u05E8\u05D5\u05DF", en: "Price a configuration" },
+  "chat:read": { he: "\u05DC\u05E7\u05E8\u05D5\u05D0 \u05D4\u05D5\u05D3\u05E2\u05D5\u05EA \u05D1\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Read project messages" },
+  "chat:write": { he: "\u05DC\u05DB\u05EA\u05D5\u05D1 \u05D4\u05D5\u05D3\u05E2\u05D5\u05EA \u05D1\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Post project messages" },
+  "files:write": { he: "\u05DC\u05D4\u05E2\u05DC\u05D5\u05EA \u05EA\u05DE\u05D5\u05E0\u05D5\u05EA \u05E9\u05DC \u05EA\u05DB\u05E0\u05D5\u05E0\u05D9\u05DD", en: "Upload design images" },
+  "quotations:write": { he: "\u05DC\u05D4\u05E4\u05D9\u05E7 \u05D4\u05E6\u05E2\u05EA \u05DE\u05D7\u05D9\u05E8", en: "Generate a quotation PDF" },
+  "orders:read": { he: "\u05DC\u05E8\u05D0\u05D5\u05EA \u05D0\u05EA \u05D4\u05D4\u05D6\u05DE\u05E0\u05D5\u05EA \u05E9\u05DC\u05DA", en: "See your orders" },
+  "orders:write": { he: "\u05DC\u05D4\u05DB\u05D9\u05DF \u05D8\u05D9\u05D5\u05D8\u05EA \u05D4\u05D6\u05DE\u05E0\u05D4 \u05DC\u05D0\u05D9\u05E9\u05D5\u05E8\u05DA", en: "Draft an order for you to confirm" },
+  "orders:commit": { he: "\u05DC\u05D0\u05E9\u05E8 \u05D4\u05D6\u05DE\u05E0\u05D4 \u05D1\u05E9\u05DE\u05DA", en: "Confirm an order on your behalf" },
+  "invitations:write": { he: "\u05DC\u05D4\u05D6\u05DE\u05D9\u05DF \u05D0\u05E0\u05E9\u05D9\u05DD \u05DC\u05E4\u05E8\u05D5\u05D9\u05E7\u05D8\u05D9\u05DD \u05E9\u05DC\u05DA", en: "Invite people to your projects" },
+  "staff:read": { he: "\u05DC\u05E7\u05E8\u05D5\u05D0 \u05D0\u05EA \u05D4\u05E0\u05EA\u05D5\u05E0\u05D9\u05DD \u05E9\u05DC \u05DB\u05DC \u05D4\u05DE\u05E9\u05EA\u05DE\u05E9\u05D9\u05DD \u05D1\u05DE\u05E2\u05E8\u05DB\u05EA", en: "Read every user's data in the system" }
+};
+var ALL_AGENT_SCOPES = Object.keys(AGENT_SCOPES);
+
 // ../../packages/shared/src/legal.ts
 init_esm_shims();
 
@@ -9431,10 +9458,12 @@ init_esm_shims();
 init_esm_shims();
 var ORDER_STATUSES = [
   "created",
-  "pending_contact",
+  "pending_payment",
   "paid",
+  "pending_measurement",
   "sent_to_manufacturing",
   "in_manufacturing",
+  "pending_assembly",
   "provided",
   "cancelled"
 ];
@@ -9443,25 +9472,66 @@ var LOGISTICS_STATUSES = ["pending_coordination", "coordinated", "done"];
 var OFFICE = ["admin", "support"];
 var TRANSITIONS = [
   // Main pipeline
-  { track: "main", from: "created", to: "pending_contact", roles: ["admin", "support", "designer", "client"], viaVerification: true },
-  { track: "main", from: "pending_contact", to: "paid", roles: OFFICE },
+  { track: "main", from: "created", to: "pending_payment", roles: ["admin", "support", "designer", "client"], viaVerification: true },
+  { track: "main", from: "pending_payment", to: "paid", roles: OFFICE },
+  // Exactly one of the next two is unblocked, decided by whether the customer
+  // bought the measurement service. `pending_measurement` is never entered — and
+  // so never appears in statusHistory — when they didn't.
+  {
+    track: "main",
+    from: "paid",
+    to: "pending_measurement",
+    roles: OFFICE,
+    guard: (o) => o.services.measurement ? null : "measurementNotPurchased"
+  },
   {
     track: "main",
     from: "paid",
     to: "sent_to_manufacturing",
     roles: OFFICE,
-    guard: (o) => !o.services.measurement || o.measurement?.status === "measured" ? null : "measurementNotDone"
+    guard: (o) => o.services.measurement ? "measurementRequired" : null
+  },
+  {
+    track: "main",
+    from: "pending_measurement",
+    to: "sent_to_manufacturing",
+    roles: OFFICE,
+    guard: (o) => o.measurement?.status === "measured" ? null : "measurementNotDone"
   },
   { track: "main", from: "sent_to_manufacturing", to: "in_manufacturing", roles: OFFICE, requires: "estimatedDeliveryDate" },
+  // Same either/or shape as measurement, for transport & installation.
   {
     track: "main",
     from: "in_manufacturing",
+    to: "pending_assembly",
+    roles: OFFICE,
+    guard: (o) => o.services.logistics ? null : "logisticsNotPurchased"
+  },
+  {
+    track: "main",
+    from: "in_manufacturing",
+    to: "provided",
+    roles: OFFICE,
+    guard: (o) => o.services.logistics ? "logisticsRequired" : null
+  },
+  {
+    track: "main",
+    from: "pending_assembly",
     to: "provided",
     roles: OFFICE,
-    guard: (o) => !o.services.logistics || o.logistics?.status === "done" ? null : "logisticsNotDone"
+    guard: (o) => o.logistics?.status === "done" ? null : "logisticsNotDone"
   },
   // Cancel — reachable from any non-terminal main status, office only
-  ...["created", "pending_contact", "paid", "sent_to_manufacturing", "in_manufacturing", "provided"].map(
+  ...[
+    "created",
+    "pending_payment",
+    "paid",
+    "pending_measurement",
+    "sent_to_manufacturing",
+    "in_manufacturing",
+    "pending_assembly",
+    "provided"
+  ].map(
     (from) => ({ track: "main", from, to: "cancelled", roles: OFFICE })
   ),
   // Measurement sub-track
@@ -9472,14 +9542,19 @@ var TRANSITIONS = [
   { track: "logistics", from: "coordinated", to: "done", roles: OFFICE }
 ];
 
+// ../../packages/shared/src/quotations.ts
+init_esm_shims();
+
 // ../../packages/shared/src/orderEmailEvents.ts
 init_esm_shims();
 var MAIN_LABELS = {
   created: "\u05D4\u05D6\u05DE\u05E0\u05D4 \u05E0\u05D5\u05E6\u05E8\u05D4",
-  pending_contact: "\u05DE\u05DE\u05EA\u05D9\u05DF \u05DC\u05D9\u05E6\u05D9\u05E8\u05EA \u05E7\u05E9\u05E8",
+  pending_payment: "\u05DE\u05DE\u05EA\u05D9\u05DF \u05DC\u05EA\u05E9\u05DC\u05D5\u05DD",
   paid: "\u05E9\u05D5\u05DC\u05DD",
+  pending_measurement: "\u05DE\u05DE\u05EA\u05D9\u05DF \u05DC\u05DE\u05D3\u05D9\u05D3\u05D4",
   sent_to_manufacturing: "\u05E0\u05E9\u05DC\u05D7 \u05DC\u05D9\u05D9\u05E6\u05D5\u05E8",
   in_manufacturing: "\u05D1\u05D9\u05D9\u05E6\u05D5\u05E8",
+  pending_assembly: "\u05DE\u05DE\u05EA\u05D9\u05DF \u05DC\u05D4\u05E8\u05DB\u05D1\u05D4",
   provided: "\u05E1\u05D5\u05E4\u05E7",
   cancelled: "\u05D1\u05D5\u05D8\u05DC"
 };
@@ -11891,7 +11966,7 @@ async function formatCliError(err, json) {
 
 // src/version.ts
 init_esm_shims();
-var CLI_VERSION = "1.1.4";
+var CLI_VERSION = "1.1.6";
 
 // src/index.ts
 program.name("wardrobe").description("Wardrobe configurator CLI").version(CLI_VERSION);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lahat-group/cli",
-  "version": "1.1.4",
+  "version": "1.1.6",
   "description": "CLI + Claude Skill to build, validate, price, and save wardrobe designs.",
   "license": "UNLICENSED",
   "type": "module",

package/skill/SKILL.md

@@ -63,15 +63,21 @@ Prefer generating the skeleton with `wardrobe init` rather than hand-writing it
 `init` fills materials, `ruleVersion`, and a valid column layout for you. Column
 `id`s are `nanoid()` and are not stable across rebuilds.
 
-## Guardrails — orders require a human
+## Guardrails — committing to an order requires a human
 
-- **The CLI cannot place orders.** Ordering is intentionally not an agent verb: the
-  agent key carries only `designs:read`, `designs:write`, `price:read` — **no order or
-  admin scope**. Don't attempt to order, or to run admin/catalog operations.
+- **The CLI cannot place orders.** The `wardrobe-cli` client is registered with
+  `profile:read`, `projects:read`, `designs:read`, `designs:write`, `price:read` —
+  **no order or admin scope** — so every order route answers `403 insufficient_scope`.
+  Don't attempt to order, or to run admin/catalog operations.
 - To turn a saved design into an order, direct the **human** to the web app: they
   open the project, review the design, and complete the **verify-details** flow —
   which computes the final price, freezes the PDF, and advances the order. Only a
   human does this. Your job ends at `apply` (a saved design) plus a clear summary.
+- This is now a **scope** boundary rather than a property of the API surface: other
+  registered clients may hold `orders:write` and *draft* an order (status `created` —
+  no frozen PDF, no confirmation email). But `orders:commit`, which gates
+  `verify-details`, is held by no client at all, so the commitment step stays human
+  for every agent. See `docs/bot-api.md`.
 
 ## Error handling