@native-marketing/cli 0.1.1 → 0.3.0

package/README.md

@@ -19,10 +19,33 @@ cf capabilities find '当前定位' --profile marketing --json
 
 Request the scopes needed for your authorized work. A project code or profile name does not grant access. Credentials are stored owner-only in `~/.config/content-factory-agent/` unless `CF_AGENT_CONFIG_DIR` is set. Never pass a token as a command argument. `auth import --token-file` accepts a protected local file; it does not exchange AgentStack API keys for Native OAuth.
 
-Help is layered: `help`, `help <group>`, `help all`. Discovery returns only currently visible capabilities; exact input schema is loaded on demand. `search` finds saved content. Supply exact business inputs through stdin or `--input-file`, keeping schema/view controls separate. Business writes require the existing request ID, concurrency checks and human authorization.
+Help is layered: `help`, `help <group>`, `help all`. `capabilities find` uses AGENT_V3 bilingual action/object matching, returns only currently visible capabilities and reports scoped NO_MATCH explicitly. Small definitions include their schema and fingerprint; larger definitions are loaded on demand. `search` finds saved content. Supply exact business inputs through stdin or `--input-file`, keeping schema/view controls separate. Business writes require the existing request ID, concurrency checks and human authorization. Native Marketing exports content and records manual publication; it does not publish to external platforms.
 
 `--json` returns one JSON envelope on stdout; OAuth interaction prompts go to stderr. Errors carry code, outcome and safe recovery details. UNKNOWN means the original write may have happened: query its original read-only receipt before deciding what to do. The CLI never automatically replays an unknown write. A receipt is the original result; reread current state separately. A lost write permission may still allow authorized receipt recovery, but cannot authorize a new write.
 
 The package exports its existing programmatic CLI surface and an `/agent` entry. Use `@native-marketing/sdk` for direct client APIs, or `@native-marketing/sdk/http` for typed HTTP calls. Installing or asking for help does not start work or a Runtime.
 
+## Tenant application connections and event permissions
+
+```sh
+cf auth login --resource https://ip.shipkitx.com/mcp/tenants/TEN-000001 \
+  --profile tenant --scope 'cf.context.read cf.knowledge.manage' --json
+cf help event-exchanges --json
+cf event-exchanges list --profile tenant --json
+cf capabilities describe cf_configure_event_exchange --profile tenant --json
+```
+
+Replace the Tenant code with your exact authorized Tenant. Current `permissions.manage` permission is required; login alone grants no application connection. Both `cf` and `cf-agent` support:
+
+| Command                                                              | Effect                                                                                                      |
+| -------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------- |
+| `event-exchanges list`                                               | One bounded page of local connections and per-event grants                                                  |
+| `event-exchanges configure --input-file registration.json`           | Explicitly register/revoke one exact EventSDK type using requestId, expectedRevision and the current schema |
+| `event-exchanges receipt --input-file original-request.json`         | Read the original configure receipt, without replay                                                         |
+| `event-exchanges outbox-list`                                        | Bounded delivery/backlog/Worker observation                                                                 |
+| `event-exchanges outbox-recover --input-file original-delivery.json` | Explicitly recover one original delivery with expectedGeneration                                            |
+| `event-exchanges outbox-receipt --input-file original-request.json`  | Read the original delivery recovery receipt                                                                 |
+
+Events are never selected automatically. Use only the precise public source/target Tenant refs and consumer agreed by both applications; local ACTIVE does not confirm peer authorization or business completion. For configure or recovery UNKNOWN, preserve the original request/resource/client and read its corresponding receipt. Never generate a replacement request ID or automatically repeat the write. These commands use the same native capabilities as MCP, keep authorization in the Native database and do not publish a separate authorization-change CloudEvent.
+
 The package's `release.json` identifies the source commit. Public availability does not change source licensing (UNLICENSED). Installation does not deploy or migrate a Native Marketing server.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@native-marketing/cli",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "type": "module",
   "license": "UNLICENSED",
   "engines": {
@@ -36,6 +36,6 @@
     }
   },
   "dependencies": {
-    "@native-marketing/sdk": "0.1.1"
+    "@native-marketing/sdk": "0.3.0"
   }
 }

package/release.json

@@ -1,7 +1,7 @@
 {
-  "sourceCommit": "d5c864b995aaa63230e895df3d7cbe50d4947202",
+  "sourceCommit": "10c5dcfba354af4dfed4a2faaffbb6ff6b743c62",
   "workingTreeDirty": false,
-  "version": "0.1.1",
-  "openapiTypesSha256": "ab00b08c6f94b2b39d7f4010de2335d70be26e7987e9db6dc57fa308426aecc4",
+  "version": "0.3.0",
+  "openapiTypesSha256": "1a86e24ce9e458e945e4df5e9c7423c9bf4253ac24b3f627f67ba38c92856a38",
   "localBuild": true
 }