@omni-commerce/cli 0.9.0 → 0.10.0

package/dist/index.js

@@ -11,7 +11,8 @@ var GLOBAL_TRUE_FLAGS = /* @__PURE__ */ new Set([
   "schema",
   "dry-run",
   "version",
-  "v"
+  "v",
+  "no-browser"
 ]);
 function parseArgv(argv) {
   const trail = [];
@@ -69,6 +70,129 @@ function flagString(flags, name) {
   return typeof value === "string" && value.trim() ? value.trim() : void 0;
 }
 
+// src/browser-login.ts
+import { setTimeout as sleep } from "timers/promises";
+
+// src/open-browser.ts
+import { execFile } from "child_process";
+import { promisify } from "util";
+var executeFile = promisify(execFile);
+async function openBrowser(url) {
+  const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "rundll32.exe" : "xdg-open";
+  const args = process.platform === "win32" ? ["url.dll,FileProtocolHandler", url] : [url];
+  await executeFile(command, args, { timeout: 1e4 });
+}
+
+// src/version.ts
+var CLI_VERSION = "0.10.0";
+
+// src/browser-login.ts
+function loginOrigin(baseUrl) {
+  const url = new URL(baseUrl);
+  const loopback = ["localhost", "127.0.0.1", "[::1]"].includes(url.hostname);
+  if (url.protocol !== "https:" && !(url.protocol === "http:" && loopback) || url.username || url.password || url.search || url.hash || url.pathname !== "/") {
+    throw new Error(
+      "Login requires an HTTPS API origin (HTTP is allowed on localhost)."
+    );
+  }
+  return url.origin;
+}
+async function readResponse(response) {
+  const body = await response.json().catch(() => null);
+  if (!body || typeof body !== "object" || Array.isArray(body)) {
+    throw new Error("Invalid login response. Check --base-url and try again.");
+  }
+  return body;
+}
+async function browserLogin(baseUrl, options = {}) {
+  const origin = loginOrigin(baseUrl);
+  const fetchImpl = options.fetch ?? fetch;
+  const post = (path2, body, timeoutMs = 3e4) => fetchImpl(new URL(path2, origin), {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+    redirect: "error",
+    signal: AbortSignal.timeout(Math.max(1, timeoutMs))
+  });
+  const started = await post("/api/cli/device/code", {
+    client_version: CLI_VERSION
+  });
+  if (!started.ok)
+    throw new Error(
+      `Could not start browser login (${started.status}). Try again shortly.`
+    );
+  const issued = await readResponse(started);
+  if (typeof issued.device_code !== "string" || !/^[a-f0-9]{64}$/.test(issued.device_code) || typeof issued.user_code !== "string" || !/^[A-Z]{4}-[A-Z]{4}$/.test(issued.user_code) || typeof issued.verification_uri_complete !== "string" || typeof issued.expires_in !== "number" || !Number.isFinite(issued.expires_in) || issued.expires_in <= 0 || issued.expires_in > 900 || typeof issued.interval !== "number" || !Number.isFinite(issued.interval) || issued.interval < 5 || issued.interval > 900) {
+    throw new Error(
+      "Invalid browser login response. Check --base-url and try again."
+    );
+  }
+  const verificationUrl = new URL(issued.verification_uri_complete);
+  if (verificationUrl.origin !== origin || verificationUrl.username || verificationUrl.password || verificationUrl.pathname !== "/cli/authorize" || verificationUrl.searchParams.get("code") !== issued.user_code || [...verificationUrl.searchParams.keys()].some((key) => key !== "code") || verificationUrl.hash) {
+    throw new Error("The login page does not match the requested API origin.");
+  }
+  const deadline = Date.now() + issued.expires_in * 1e3;
+  let intervalMs = issued.interval * 1e3;
+  process.stdout.write(
+    `Confirm code ${issued.user_code} in your browser.
+${verificationUrl.toString()}
+`
+  );
+  if (!options.noBrowser) {
+    try {
+      await (options.openBrowser ?? openBrowser)(verificationUrl.toString());
+    } catch {
+      process.stderr.write(
+        "Could not open your browser. Open the URL above to continue.\n"
+      );
+    }
+  }
+  while (Date.now() < deadline) {
+    await sleep(Math.min(intervalMs, deadline - Date.now()));
+    if (Date.now() >= deadline) break;
+    let response;
+    try {
+      response = await post(
+        "/api/cli/device/token",
+        { device_code: issued.device_code },
+        Math.min(3e4, deadline - Date.now())
+      );
+    } catch {
+      intervalMs = Math.min(Math.max(intervalMs * 2, 1e4), 6e4);
+      continue;
+    }
+    if (response.status === 429 || response.status >= 500) {
+      const retryAfter = Number(response.headers.get("Retry-After"));
+      intervalMs = Math.max(
+        intervalMs + 5e3,
+        Number.isFinite(retryAfter) ? retryAfter * 1e3 : 0
+      );
+      continue;
+    }
+    const result = await readResponse(response);
+    if (response.ok) {
+      if (typeof result.api_key !== "string" || !result.api_key.startsWith("omni_sk_") || result.token_type !== "api_key") {
+        throw new Error("The login server did not return valid credentials.");
+      }
+      return { apiKey: result.api_key, baseUrl: origin };
+    }
+    if (result.error === "authorization_pending") continue;
+    if (result.error === "slow_down") {
+      intervalMs += 5e3;
+      continue;
+    }
+    if (result.error === "access_denied")
+      throw new Error(
+        "Browser login was denied. Run omni auth login to try again."
+      );
+    if (result.error === "expired_token") break;
+    throw new Error(
+      `Browser login failed (${response.status}). Run omni auth login to try again.`
+    );
+  }
+  throw new Error("Browser login expired. Run omni auth login to try again.");
+}
+
 // src/config.ts
 import { chmod, mkdir, readFile, rm, writeFile } from "fs/promises";
 import { homedir } from "os";
@@ -87,9 +211,12 @@ async function readConfig() {
 }
 async function writeConfig(config) {
   const directory = path.dirname(configPath());
-  await mkdir(directory, { recursive: true });
+  await mkdir(directory, { recursive: true, mode: 448 });
   await writeFile(configPath(), `${JSON.stringify(config, null, 2)}
-`, "utf8");
+`, {
+    encoding: "utf8",
+    mode: 384
+  });
   await chmod(configPath(), 384);
 }
 async function clearConfig() {
@@ -99,7 +226,7 @@ async function resolveCredentials(input2) {
   const file = await readConfig();
   const apiKey = input2.apiKey || process.env.OMNI_API_KEY || file.apiKey || void 0;
   const source = input2.apiKey ? "flag" : process.env.OMNI_API_KEY ? "env" : file.apiKey ? "config" : "none";
-  const baseUrl = input2.baseUrl || process.env.OMNI_BASE_URL || file.baseUrl || "https://omnicommerce.sg";
+  const baseUrl = input2.baseUrl || process.env.OMNI_BASE_URL || file.baseUrl || "https://omnicommerce.ai";
   return { apiKey, baseUrl, source };
 }
 function maskSecret(value) {
@@ -237,6 +364,69 @@ ${body}
 
 // src/generated/commands.ts
 var COMMANDS = [
+  {
+    trail: ["api", "get-embedwell-knownagent-card-json"],
+    resourcePath: ["api"],
+    methodName: "getEmbedwellKnownagentCardJson",
+    httpMethod: "GET",
+    path: "/api/embed/{deploymentId}/.well-known/agent-card.json",
+    summary: "Discover a published merchant agent",
+    flags: [
+      {
+        name: "deploymentId",
+        flag: "deployment-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["api", "embeda2a"],
+    resourcePath: ["api"],
+    methodName: "embeda2a",
+    httpMethod: "POST",
+    path: "/api/embed/{deploymentId}/a2a",
+    summary: "Call a merchant agent using A2A",
+    flags: [
+      {
+        name: "deploymentId",
+        flag: "deployment-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["api", "embedcheckout-sessions"],
+    resourcePath: ["api"],
+    methodName: "embedcheckoutSessions",
+    httpMethod: "POST",
+    path: "/api/embed/{deploymentId}/checkout-sessions/{operation}",
+    summary: "Manage customer-owned purchase offers",
+    flags: [
+      {
+        name: "deploymentId",
+        flag: "deployment-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "operation",
+        flag: "operation",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
   {
     trail: ["agents", "general", "invoke"],
     resourcePath: ["agents", "general"],
@@ -1068,6 +1258,124 @@ var COMMANDS = [
     acceptsFile: false,
     bodyRequired: true
   },
+  {
+    trail: ["brand-kits", "list"],
+    resourcePath: ["brandKits"],
+    methodName: "list",
+    httpMethod: "GET",
+    path: "/api/v1/brand-kits",
+    summary: "List Brand Kits",
+    flags: [
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "q",
+        flag: "q",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "limit",
+        flag: "limit",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "offset",
+        flag: "offset",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["brand-kits", "create"],
+    resourcePath: ["brandKits"],
+    methodName: "create",
+    httpMethod: "POST",
+    path: "/api/v1/brand-kits",
+    summary: "Create Brand Kit",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["brand-kits", "delete"],
+    resourcePath: ["brandKits"],
+    methodName: "delete",
+    httpMethod: "DELETE",
+    path: "/api/v1/brand-kits/{brandKitId}",
+    summary: "Delete Brand Kit",
+    flags: [
+      {
+        name: "brandKitId",
+        flag: "brand-kit-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["brand-kits", "get"],
+    resourcePath: ["brandKits"],
+    methodName: "get",
+    httpMethod: "GET",
+    path: "/api/v1/brand-kits/{brandKitId}",
+    summary: "Get Brand Kit",
+    flags: [
+      {
+        name: "brandKitId",
+        flag: "brand-kit-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["brand-kits", "update"],
+    resourcePath: ["brandKits"],
+    methodName: "update",
+    httpMethod: "PATCH",
+    path: "/api/v1/brand-kits/{brandKitId}",
+    summary: "Update Brand Kit",
+    flags: [
+      {
+        name: "brandKitId",
+        flag: "brand-kit-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
   {
     trail: ["brandsgateway", "import-products"],
     resourcePath: ["brandsgateway"],
@@ -1433,6 +1741,30 @@ var COMMANDS = [
     acceptsFile: false,
     bodyRequired: true
   },
+  {
+    trail: ["commerce", "await-jobs"],
+    resourcePath: ["commerce"],
+    methodName: "awaitJobs",
+    httpMethod: "POST",
+    path: "/api/v1/commerce/jobs/await",
+    summary: "Await Commerce Jobs",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["commerce", "verify-state"],
+    resourcePath: ["commerce"],
+    methodName: "verifyState",
+    httpMethod: "POST",
+    path: "/api/v1/commerce/state/verify",
+    summary: "Verify Commerce State",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
   {
     trail: ["compare", "get"],
     resourcePath: ["compare"],
@@ -1501,6 +1833,12 @@ var COMMANDS = [
         flag: "organization-id",
         required: false,
         source: "query"
+      },
+      {
+        name: "includeDownloadUrl",
+        flag: "include-download-url",
+        required: false,
+        source: "query"
       }
     ],
     acceptsJsonBody: false,
@@ -1556,6 +1894,79 @@ var COMMANDS = [
     acceptsFile: false,
     bodyRequired: true
   },
+  {
+    trail: ["inventory", "list"],
+    resourcePath: ["inventory"],
+    methodName: "list",
+    httpMethod: "GET",
+    path: "/api/v1/inventory",
+    summary: "List Inventory Groups",
+    flags: [
+      {
+        name: "productIds",
+        flag: "product-ids",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "query",
+        flag: "query",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "marketplace",
+        flag: "marketplace",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "country",
+        flag: "country",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "storeIds",
+        flag: "store-ids",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "unlistedMarketplaces",
+        flag: "unlisted-marketplaces",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "groupBy",
+        flag: "group-by",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "status",
+        flag: "status",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "offset",
+        flag: "offset",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "limit",
+        flag: "limit",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
   {
     trail: ["jobs", "get"],
     resourcePath: ["jobs"],
@@ -2159,14 +2570,94 @@ var COMMANDS = [
     bodyRequired: true
   },
   {
-    trail: ["organizations", "create"],
-    resourcePath: ["organizations"],
-    methodName: "create",
-    httpMethod: "POST",
-    path: "/api/v1/organizations",
-    summary: "Create Organization",
-    flags: [],
-    acceptsJsonBody: true,
+    trail: ["orders", "list-batch-action-options"],
+    resourcePath: ["orders"],
+    methodName: "listBatchActionOptions",
+    httpMethod: "GET",
+    path: "/api/v1/orders/actions",
+    summary: "Check Order Action Options",
+    flags: [
+      {
+        name: "orderIds",
+        flag: "order-ids",
+        required: true,
+        source: "query"
+      },
+      {
+        name: "action",
+        flag: "action",
+        required: true,
+        source: "query"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["orders", "process-actions"],
+    resourcePath: ["orders"],
+    methodName: "processActions",
+    httpMethod: "POST",
+    path: "/api/v1/orders/actions",
+    summary: "Process Order Actions",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["orders", "get-action-jobs"],
+    resourcePath: ["orders"],
+    methodName: "getActionJobs",
+    httpMethod: "GET",
+    path: "/api/v1/orders/actions/jobs",
+    summary: "Get Order Action Jobs",
+    flags: [
+      {
+        name: "jobIds",
+        flag: "job-ids",
+        required: true,
+        source: "query"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["orders", "create-picking-list"],
+    resourcePath: ["orders"],
+    methodName: "createPickingList",
+    httpMethod: "POST",
+    path: "/api/v1/orders/picking-list",
+    summary: "Create Picking List",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["organizations", "create"],
+    resourcePath: ["organizations"],
+    methodName: "create",
+    httpMethod: "POST",
+    path: "/api/v1/organizations",
+    summary: "Create Organization",
+    flags: [],
+    acceptsJsonBody: true,
     acceptsFile: false,
     bodyRequired: true
   },
@@ -2367,6 +2858,90 @@ var COMMANDS = [
         flag: "offset",
         required: false,
         source: "query"
+      },
+      {
+        name: "store",
+        flag: "store",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "storeKeys",
+        flag: "store-keys",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "brands",
+        flag: "brands",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "bundleType",
+        flag: "bundle-type",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "language",
+        flag: "language",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "hasImage",
+        flag: "has-image",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "stock",
+        flag: "stock",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "duplicateStatus",
+        flag: "duplicate-status",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "duplicateType",
+        flag: "duplicate-type",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "publishedFrom",
+        flag: "published-from",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "publishedTo",
+        flag: "published-to",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "publishedTimeZone",
+        flag: "published-time-zone",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "cursor",
+        flag: "cursor",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "includeSummary",
+        flag: "include-summary",
+        required: false,
+        source: "query"
       }
     ],
     acceptsJsonBody: false,
@@ -2593,6 +3168,43 @@ var COMMANDS = [
     acceptsFile: false,
     bodyRequired: true
   },
+  {
+    trail: ["products", "get-bulk-import-retry"],
+    resourcePath: ["products"],
+    methodName: "getBulkImportRetry",
+    httpMethod: "GET",
+    path: "/api/v1/products/bulk-import/retries/{retryJobId}",
+    summary: "Get Import Retry Progress",
+    flags: [
+      {
+        name: "retryJobId",
+        flag: "retry-job-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["products", "retry-bulk-import"],
+    resourcePath: ["products"],
+    methodName: "retryBulkImport",
+    httpMethod: "POST",
+    path: "/api/v1/products/bulk-import/retry",
+    summary: "Retry Failed Import or Review Jobs",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
   {
     trail: ["products", "compare-prices"],
     resourcePath: ["products"],
@@ -2642,6 +3254,133 @@ var COMMANDS = [
     acceptsFile: false,
     bodyRequired: true
   },
+  {
+    trail: ["products", "count"],
+    resourcePath: ["products"],
+    methodName: "count",
+    httpMethod: "GET",
+    path: "/api/v1/products/count",
+    summary: "Count Products",
+    flags: [
+      {
+        name: "status",
+        flag: "status",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "marketplace",
+        flag: "marketplace",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "country",
+        flag: "country",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "q",
+        flag: "q",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "sku",
+        flag: "sku",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "minPrice",
+        flag: "min-price",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "maxPrice",
+        flag: "max-price",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "store",
+        flag: "store",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "storeKeys",
+        flag: "store-keys",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "brands",
+        flag: "brands",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "bundleType",
+        flag: "bundle-type",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "language",
+        flag: "language",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "hasImage",
+        flag: "has-image",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "stock",
+        flag: "stock",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "duplicateStatus",
+        flag: "duplicate-status",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "duplicateType",
+        flag: "duplicate-type",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "publishedFrom",
+        flag: "published-from",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "publishedTo",
+        flag: "published-to",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "publishedTimeZone",
+        flag: "published-time-zone",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
   {
     trail: ["products", "enrich"],
     resourcePath: ["products"],
@@ -2892,10 +3631,115 @@ var COMMANDS = [
     summary: "Retry Marketplace Delivery",
     flags: [
       {
-        name: "promotionId",
-        flag: "promotion-id",
+        name: "promotionId",
+        flag: "promotion-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["returns", "list"],
+    resourcePath: ["returns"],
+    methodName: "list",
+    httpMethod: "GET",
+    path: "/api/v1/returns",
+    summary: "List Returns",
+    flags: [
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "marketplace",
+        flag: "marketplace",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "accountId",
+        flag: "account-id",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "externalOrderId",
+        flag: "external-order-id",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "updatedSince",
+        flag: "updated-since",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "cursor",
+        flag: "cursor",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "limit",
+        flag: "limit",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["returns", "get"],
+    resourcePath: ["returns"],
+    methodName: "get",
+    httpMethod: "GET",
+    path: "/api/v1/returns/{returnId}",
+    summary: "Get Return",
+    flags: [
+      {
+        name: "returnId",
+        flag: "return-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["returns", "list-actions"],
+    resourcePath: ["returns"],
+    methodName: "listActions",
+    httpMethod: "GET",
+    path: "/api/v1/returns/actions",
+    summary: "Check Return Actions",
+    flags: [
+      {
+        name: "returnIds",
+        flag: "return-ids",
         required: true,
-        source: "path"
+        source: "query"
       },
       {
         name: "organizationId",
@@ -2904,57 +3748,39 @@ var COMMANDS = [
         source: "query"
       }
     ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["returns", "process"],
+    resourcePath: ["returns"],
+    methodName: "process",
+    httpMethod: "POST",
+    path: "/api/v1/returns/actions",
+    summary: "Process Returns",
+    flags: [],
     acceptsJsonBody: true,
     acceptsFile: false,
     bodyRequired: true
   },
   {
-    trail: ["returns", "list"],
+    trail: ["returns", "get-action-jobs"],
     resourcePath: ["returns"],
-    methodName: "list",
+    methodName: "getActionJobs",
     httpMethod: "GET",
-    path: "/api/v1/returns",
-    summary: "List Returns",
+    path: "/api/v1/returns/actions/jobs",
+    summary: "Get Return Action Jobs",
     flags: [
       {
-        name: "organizationId",
-        flag: "organization-id",
-        required: false,
-        source: "query"
-      },
-      {
-        name: "marketplace",
-        flag: "marketplace",
-        required: false,
-        source: "query"
-      },
-      {
-        name: "accountId",
-        flag: "account-id",
-        required: false,
-        source: "query"
-      },
-      {
-        name: "externalOrderId",
-        flag: "external-order-id",
-        required: false,
-        source: "query"
-      },
-      {
-        name: "updatedSince",
-        flag: "updated-since",
-        required: false,
-        source: "query"
-      },
-      {
-        name: "cursor",
-        flag: "cursor",
-        required: false,
+        name: "jobIds",
+        flag: "job-ids",
+        required: true,
         source: "query"
       },
       {
-        name: "limit",
-        flag: "limit",
+        name: "organizationId",
+        flag: "organization-id",
         required: false,
         source: "query"
       }
@@ -2964,18 +3790,18 @@ var COMMANDS = [
     bodyRequired: false
   },
   {
-    trail: ["returns", "get"],
+    trail: ["returns", "list-for-orders"],
     resourcePath: ["returns"],
-    methodName: "get",
+    methodName: "listForOrders",
     httpMethod: "GET",
-    path: "/api/v1/returns/{returnId}",
-    summary: "Get Return",
+    path: "/api/v1/returns/orders",
+    summary: "Get Order Returns",
     flags: [
       {
-        name: "returnId",
-        flag: "return-id",
+        name: "orderIds",
+        flag: "order-ids",
         required: true,
-        source: "path"
+        source: "query"
       },
       {
         name: "organizationId",
@@ -3105,6 +3931,255 @@ var COMMANDS = [
     acceptsFile: false,
     bodyRequired: true
   },
+  {
+    trail: ["scripts", "list"],
+    resourcePath: ["scripts"],
+    methodName: "list",
+    httpMethod: "GET",
+    path: "/api/v1/scripts",
+    summary: "List Organization Scripts",
+    flags: [
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "q",
+        flag: "q",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "status",
+        flag: "status",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["scripts", "create"],
+    resourcePath: ["scripts"],
+    methodName: "create",
+    httpMethod: "POST",
+    path: "/api/v1/scripts",
+    summary: "Create Script",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["scripts", "archive"],
+    resourcePath: ["scripts"],
+    methodName: "archive",
+    httpMethod: "DELETE",
+    path: "/api/v1/scripts/{scriptId}",
+    summary: "Archive Script",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["scripts", "get"],
+    resourcePath: ["scripts"],
+    methodName: "get",
+    httpMethod: "GET",
+    path: "/api/v1/scripts/{scriptId}",
+    summary: "Get Script",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["scripts", "update"],
+    resourcePath: ["scripts"],
+    methodName: "update",
+    httpMethod: "PATCH",
+    path: "/api/v1/scripts/{scriptId}",
+    summary: "Update Script",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["scripts", "activate"],
+    resourcePath: ["scripts"],
+    methodName: "activate",
+    httpMethod: "POST",
+    path: "/api/v1/scripts/{scriptId}/activate",
+    summary: "Activate Script Version",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["scripts", "deploy"],
+    resourcePath: ["scripts"],
+    methodName: "deploy",
+    httpMethod: "POST",
+    path: "/api/v1/scripts/{scriptId}/deploy",
+    summary: "Deploy Script",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["scripts", "list-runs"],
+    resourcePath: ["scripts"],
+    methodName: "listRuns",
+    httpMethod: "GET",
+    path: "/api/v1/scripts/{scriptId}/runs",
+    summary: "List Script Runs",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      },
+      {
+        name: "limit",
+        flag: "limit",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["scripts", "execute"],
+    resourcePath: ["scripts"],
+    methodName: "execute",
+    httpMethod: "POST",
+    path: "/api/v1/scripts/{scriptId}/runs",
+    summary: "Execute Script",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      }
+    ],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["scripts", "get-source"],
+    resourcePath: ["scripts"],
+    methodName: "getSource",
+    httpMethod: "GET",
+    path: "/api/v1/scripts/{scriptId}/source",
+    summary: "Get Script Source",
+    flags: [
+      {
+        name: "scriptId",
+        flag: "script-id",
+        required: true,
+        source: "path"
+      },
+      {
+        name: "organizationId",
+        flag: "organization-id",
+        required: false,
+        source: "query"
+      }
+    ],
+    acceptsJsonBody: false,
+    acceptsFile: false,
+    bodyRequired: false
+  },
+  {
+    trail: ["scripts", "await-runs"],
+    resourcePath: ["scripts"],
+    methodName: "awaitRuns",
+    httpMethod: "POST",
+    path: "/api/v1/scripts/jobs/await",
+    summary: "Read Script Run Results",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
+  {
+    trail: ["scripts", "cancel-runs"],
+    resourcePath: ["scripts"],
+    methodName: "cancelRuns",
+    httpMethod: "POST",
+    path: "/api/v1/scripts/jobs/cancel",
+    summary: "Cancel Script Runs",
+    flags: [],
+    acceptsJsonBody: true,
+    acceptsFile: false,
+    bodyRequired: true
+  },
   {
     trail: ["search", "list"],
     resourcePath: ["search"],
@@ -3814,7 +4889,7 @@ function printRootHelp(commands) {
 
 Usage:
   omni <resource> <command> [flags]
-  omni auth login --api-key omni_sk_...
+  omni auth login
   omni auth status
   omni auth logout
 
@@ -3823,7 +4898,7 @@ ${groups.map((group) => `  ${group}`).join("\n")}
 
 Global flags:
   --api-key <key>     API key (or OMNI_API_KEY / omni auth login)
-  --base-url <url>    API origin (default https://omnicommerce.sg)
+  --base-url <url>    API origin (default https://omnicommerce.ai)
   --json <object|->   JSON body, or - to read stdin
   --format json|table Output format (table on TTY, json when piped)
   --dry-run           Print the request without sending it
@@ -3838,6 +4913,16 @@ Examples:
   omni jobs wait --job-id prod_123
 `;
 }
+function printAuthHelp() {
+  return `Usage:
+  omni auth login                       Sign in using your browser
+  omni auth login --no-browser          Print the login URL without opening it
+  omni auth login --api-key <key>       Save an existing API key
+  omni auth login --base-url <origin>   Sign in to another API origin
+  omni auth status                     Show saved credential status
+  omni auth logout                     Remove saved credentials
+`;
+}
 function printCommandHelp(command) {
   const flags = command.flags.map((flag) => {
     const req = flag.required ? "required" : "optional";
@@ -3864,9 +4949,6 @@ function matchCommands(commands, trail) {
   return { exact, prefix };
 }
 
-// src/version.ts
-var CLI_VERSION = "0.9.0";
-
 // src/run.ts
 async function readStdin() {
   const chunks = [];
@@ -3898,21 +4980,26 @@ function buildRequest(command, flags, body) {
   }
   return request;
 }
-async function handleAuth(trail, flags) {
+async function handleAuth(trail, flags, options) {
   const action = trail[1] ?? "status";
   if (action === "login") {
-    const apiKey = flagString(flags, "api-key");
-    if (!apiKey) {
-      throw new Error("omni auth login requires --api-key");
-    }
     const existing = await readConfig();
-    await writeConfig({
-      ...existing,
+    const apiKey = flagString(flags, "api-key");
+    const credentials = apiKey ? {
       apiKey,
       baseUrl: flagString(flags, "base-url") ?? existing.baseUrl
+    } : await browserLogin(
+      (await resolveCredentials({
+        baseUrl: flagString(flags, "base-url")
+      })).baseUrl,
+      { ...options, noBrowser: flags["no-browser"] === true }
+    );
+    await writeConfig({
+      ...existing,
+      ...credentials
     });
     process.stdout.write(
-      `Saved credentials to config (${maskSecret(apiKey)})
+      `Saved credentials to config (${maskSecret(credentials.apiKey)})
 `
     );
     return 0;
@@ -3922,6 +5009,7 @@ async function handleAuth(trail, flags) {
     process.stdout.write("Removed saved credentials\n");
     return 0;
   }
+  if (action !== "status") throw new Error(`Unknown auth command: ${action}`);
   const resolved = await resolveCredentials({
     apiKey: flagString(flags, "api-key"),
     baseUrl: flagString(flags, "base-url")
@@ -3942,7 +5030,11 @@ async function runCli(argv, options) {
     return 0;
   }
   if (parsed.trail[0] === "auth") {
-    return handleAuth(parsed.trail, parsed.flags);
+    if (parsed.help) {
+      process.stdout.write(printAuthHelp());
+      return 0;
+    }
+    return handleAuth(parsed.trail, parsed.flags, options);
   }
   if (parsed.trail.length === 0) {
     process.stdout.write(printRootHelp(COMMANDS));