@petercjl/ecom-cli 0.1.3 → 0.2.0

package/README.md

@@ -1,6 +1,6 @@
 # Ecom CLI
 
-Agent CLI and portable Skill for the Ecom desktop browser. The first release lists the names and stable IDs of existing containers without opening websites or switching tabs. Ecom must already be running in normal desktop mode. The browser transport currently supports macOS; Windows browser integration is not implemented.
+Agent CLI and portable Skill for the Ecom desktop browser. List existing containers, inspect a selected account’s platform/homepage/login status, and perform explicitly authorized HTTPS JSON GET operations through that container’s native session, preserving the active tab. Ecom must already be running in normal desktop mode. The browser transport currently supports macOS; Windows browser integration is not implemented.
 
 ## Install
 
@@ -14,6 +14,12 @@ The Agent needs local Node.js 22+ and terminal/file access. Installation include
 
 > 用 Ecom CLI 列出我当前的浏览器容器。
 
+> 用 Ecom CLI 查看指定账号的平台、首页和登录核验状态。
+
+> 用 Ecom CLI，通过指定账号请求我提供的只读接口地址。
+
+Provide the account name or stable container ID. For requests, supply an authorized read-only HTTPS endpoint or a trusted registered business operation. The browser permits only its explicitly enabled origin, rejects redirects/HTML and unsupported methods, and retains credentials in its native session. Native account readiness and identity checks remain authoritative. An HTTP 200 JSON response is transport success; the caller evaluates business success.
+
 Container names may identify accounts. Use a trusted Agent and share results intentionally. Installing the plugin does not authorize website operations, cookie export or account modification.
 
 ## Update

package/bin/ecom-cli.mjs

@@ -4,6 +4,6 @@ try {
   const result = await main(process.argv.slice(2));
   process.stdout.write(JSON.stringify(result) + '\n');
 } catch (error) {
-  process.stdout.write(JSON.stringify({ok:false,error:{code:error.code || 'CLI_ERROR',message:error.code ? error.message : 'Operation failed; inspect doctor and operation status',executed:error.executed ?? false,...(error.operationId ? {operationId:error.operationId} : {}),...(error.recovery ? {recovery:error.recovery} : {})}}) + '\n');
+  process.stdout.write(JSON.stringify({ok:false,error:{code:error.code || 'CLI_ERROR',message:error.code ? error.message : 'Operation failed; inspect doctor and operation status',executed:error.executed ?? false,...(error.operationId ? {operationId:error.operationId} : {}),...(error.httpStatus!==undefined?{httpStatus:error.httpStatus}:{}),...(error.recovery ? {recovery:error.recovery} : {})}}) + '\n');
   process.exitCode = error.code === 'INVALID_ARGUMENT' ? 2 : 1;
 }

package/capabilities.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "package": "@petercjl/ecom-cli",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "skills": [
     "ecom-cli"
   ],
@@ -159,6 +159,98 @@
         }
       },
       "sideEffects": "package-and-skill-update"
+    },
+    "containers inspect": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--profile": {
+          "type": "string"
+        },
+        "--instance": {
+          "type": "string"
+        },
+        "--container": {
+          "type": "string",
+          "required": true,
+          "description": "Stable container ID or unique exact name"
+        }
+      },
+      "sideEffects": "local-write",
+      "authorization": "Read selected account metadata; credentials excluded and homepage credential fields redacted. Automatic update detection only.",
+      "output": {
+        "container": "id, name, platform, platformName, homeUrl, icon, color, login",
+        "login": "state, service, authenticationState, verificationSupported, checking, checkedAt, identityBound, identityConfirmed, expiry"
+      },
+      "errors": [
+        "CONTAINER_NOT_FOUND",
+        "CONTAINER_AMBIGUOUS",
+        "PROTOCOL_MISMATCH"
+      ]
+    },
+    "session request": {
+      "options": {
+        "--json": {
+          "type": "boolean"
+        },
+        "--profile": {
+          "type": "string"
+        },
+        "--instance": {
+          "type": "string"
+        },
+        "--container": {
+          "type": "string",
+          "required": true,
+          "description": "Stable container ID or unique exact name"
+        },
+        "--url": {
+          "type": "string",
+          "required": true,
+          "description": "HTTPS URL in the origin explicitly enabled by Ecom; no credentials or fragment"
+        },
+        "--method": {
+          "type": "string",
+          "default": "GET",
+          "enum": [
+            "GET"
+          ]
+        }
+      },
+      "sideEffects": "local-write",
+      "authorization": "Explicit user-authorized read operation using selected persistent container; website credentials remain native. GET is a transport restriction, not proof of business read-only semantics.",
+      "output": {
+        "instance": "Pinned Ecom identity",
+        "container": "id and name",
+        "httpStatus": "200",
+        "data": "Native-redacted JSON response",
+        "businessStatus": "not-evaluated"
+      },
+      "limits": {
+        "clientTimeoutMs": 60000,
+        "nativeNetworkTimeoutMs": 20000,
+        "nativeResponseBytes": 2097152,
+        "redirects": "rejected",
+        "html": "rejected",
+        "concurrency": "native limit 2 requests"
+      },
+      "errors": [
+        "INVALID_URL",
+        "METHOD_UNSUPPORTED",
+        "CREDENTIAL_INPUT_REJECTED",
+        "ORIGIN_NOT_ALLOWED",
+        "CONTAINER_NOT_FOUND",
+        "CONTAINER_AMBIGUOUS",
+        "SHOP_NOT_READY",
+        "SHOP_VERIFICATION_FAILED",
+        "BUSY",
+        "REQUEST_FAILED",
+        "NON_JSON_RESPONSE",
+        "INSTANCE_CHANGED",
+        "PROTOCOL_MISMATCH",
+        "OPERATION_TIMEOUT"
+      ]
     }
   },
   "transport": {
@@ -317,7 +409,7 @@
     "enabledByDefault": true,
     "intervalHours": 24,
     "timeoutMs": 1500,
-    "trigger": "containers list task entry",
+    "trigger": "containers list, containers inspect and session request task entry",
     "configuration": "Stable latest channel; detection only. Explicit update activates only the selected target runtime and Skill together.",
     "disable": "ECOM_CLI_UPDATE_CHECK=0",
     "recovery": "Offline checks retain installed runtime; local edit/ownership conflicts stop replacement; prior target kept as backup. Use recorded candidate and inspect target status before retrying.",
@@ -340,6 +432,17 @@
     "TARGET_REQUIRED",
     "LOCAL_EDITS",
     "UNMANAGED_TARGET",
-    "TARGET_LOCKED"
+    "TARGET_LOCKED",
+    "INVALID_URL",
+    "METHOD_UNSUPPORTED",
+    "CREDENTIAL_INPUT_REJECTED",
+    "ORIGIN_NOT_ALLOWED",
+    "CONTAINER_NOT_FOUND",
+    "CONTAINER_AMBIGUOUS",
+    "SHOP_NOT_READY",
+    "SHOP_VERIFICATION_FAILED",
+    "BUSY",
+    "REQUEST_FAILED",
+    "NON_JSON_RESPONSE"
   ]
 }

package/lib/browser.mjs

@@ -26,27 +26,85 @@ export function discover({profile,instance}={}) {
   if(candidates.length!==1) throw fail(candidates.length?'INSTANCE_AMBIGUOUS':'INSTANCE_NOT_RUNNING',candidates.length?'Multiple Ecom instances; specify --profile or --instance':'Open an Ecom build supporting this CLI in normal desktop mode');
   return candidates[0];
 }
+const instanceOf=({endpoint,channel})=>({id:endpoint.instanceId,pid:endpoint.pid,channel});
+const credentialKey=/token|cookie|csrf|password|authorization|secret|sessionid|api[-_]?key|access[-_]?key|credential/i;
+function homeUrl(value) {
+  try {
+    const url=new URL(value);if(url.protocol!=='https:')return null;
+    url.username='';url.password='';
+    for(const [key,value]of url.searchParams)if(credentialKey.test(key)||credentialKey.test(value)&&/[=%]/.test(value))url.searchParams.set(key,'[REDACTED]');
+    if(credentialKey.test(url.hash))url.hash='[REDACTED]';
+    return url.href;
+  }catch{return null;}
+}
+export function resolveContainer(items,value) {
+  if(typeof value!=='string'||!value.trim())throw fail('INVALID_ARGUMENT','Specify --container with a stable ID or unique exact name');
+  const matches=items.filter(c=>c.id===value||c.name===value);
+  if(matches.length!==1)throw fail(matches.length?'CONTAINER_AMBIGUOUS':'CONTAINER_NOT_FOUND','Select an existing stable container ID or unique exact name');
+  return matches[0];
+}
+export function validateReadUrl(value,method='GET') {
+  if(method!=='GET')throw fail('METHOD_UNSUPPORTED','This version supports explicit read-only GET operations only');
+  let url;try{url=new URL(value);}catch{throw fail('INVALID_URL','Specify an absolute HTTPS URL');}
+  if(url.protocol!=='https:'||url.username||url.password||url.hash)throw fail('INVALID_URL','HTTPS URL must have no credentials or fragment');
+  for(const [key,value]of url.searchParams)if(credentialKey.test(key)||credentialKey.test(value)&&/[=%]/.test(value))throw fail('CREDENTIAL_INPUT_REJECTED','Credentials remain in the browser; credential query parameters are not accepted');
+  return url.href;
+}
 export async function listContainers(options={}) {return readMailbox(discover(options));}
-export async function readMailbox({folder,endpoint,channel},timeoutMs=10000) {
+export async function readMailbox(connection,timeoutMs=10000) {
+  const body=await callMailbox(connection,{method:'containers.list'},timeoutMs);
+  if(!Array.isArray(body.containers)||body.containers.some(c=>typeof c.id!=='string'||typeof c.name!=='string'))throw fail('PROTOCOL_MISMATCH','Invalid container list',{operationId:body.operationId,executed:'unknown'});
+  return {...body,instance:instanceOf(connection),containers:body.containers.map(({id,name})=>({id,name}))};
+}
+export async function inspectContainer(options={}) {
+  if(!options.container)throw fail('INVALID_ARGUMENT','containers inspect requires --container');
+  return inspectInConnection(discover(options),options.container);
+}
+export async function inspectInConnection(connection,selector) {
+  const body=await callMailbox(connection,{method:'shops.list'});
+  if(!Array.isArray(body.shops)||body.shops.some(c=>typeof c.id!=='string'||typeof c.name!=='string'))throw fail('PROTOCOL_MISMATCH','Invalid account metadata',{operationId:body.operationId,executed:'unknown'});
+  const row=resolveContainer(body.shops,selector);
+  const string=x=>typeof x==='string'?x:null;
+  const container={id:row.id,name:row.name,platform:string(row.platform),platformName:string(row.customPlatformName),homeUrl:homeUrl(row.homeUrl),icon:Number.isInteger(row.icon)?row.icon:null,color:string(row.color),
+    login:{state:string(row.state)??'unconfigured',service:string(row.authentication?.service),authenticationState:string(row.authentication?.state),verificationSupported:row.verificationSupported===true,checking:row.checking===true,checkedAt:string(row.checkedAt),identityBound:!!row.identity,identityConfirmed:row.state==='ready'&&!!row.identity,expiry:row.expiry?{kind:string(row.expiry.kind),cookieExpiresAt:string(row.expiry.cookieExpiresAt)}:null}};
+  return {ok:true,schemaVersion:1,operationId:body.operationId,instance:instanceOf(connection),container};
+}
+export async function requestSession(options={}) {
+  if(!options.container||!options.url)throw fail('INVALID_ARGUMENT','session request requires --container and --url');
+  const url=validateReadUrl(options.url,options.method??'GET');
+  return requestInConnection(discover(options),{...options,url});
+}
+export async function requestInConnection(connection,options) {
+  const url=validateReadUrl(options.url,options.method??'GET');
+  if(!connection.endpoint.allowedOrigin||new URL(url).origin!==connection.endpoint.allowedOrigin)throw fail('ORIGIN_NOT_ALLOWED','URL must match the HTTPS origin explicitly enabled by this Ecom instance');
+  const listed=await readMailbox(connection);
+  const container=resolveContainer(listed.containers,options.container);
+  const body=await callMailbox(connection,{method:'session.get',containerId:container.id,url},60000);
+  if(body.containerId!==container.id||body.httpStatus!==200||!Object.hasOwn(body,'data'))throw fail('PROTOCOL_MISMATCH','Session response does not match selected container or JSON response contract',{operationId:body.operationId,executed:'unknown'});
+  return {ok:true,schemaVersion:1,operationId:body.operationId,instance:instanceOf(connection),container,request:{method:'GET',url},httpStatus:body.httpStatus,data:body.data,businessStatus:'not-evaluated'};
+}
+export async function callMailbox({folder,endpoint},payload,timeoutMs=10000) {
   privatePath(folder,true);privatePath(path.join(folder,'endpoint.json'));
   const current=JSON.parse(fs.readFileSync(path.join(folder,'endpoint.json'),'utf8'));
   if(current.pid!==endpoint.pid || current.instanceId!==endpoint.instanceId || current.authToken!==endpoint.authToken) throw fail('INSTANCE_CHANGED','Instance changed before submission; discover it again');
   const id=crypto.randomUUID(), request=path.join(folder,id+'.request.json'), temporary=path.join(folder,id+'.request.tmp'), response=path.join(folder,id+'.response.json');
   if(exists(request)||exists(response)) throw fail('OPERATION_COLLISION','Request already exists');
-  writeNew(temporary,{schemaVersion:1,instanceId:endpoint.instanceId,authToken:endpoint.authToken,method:'containers.list'});
+  writeNew(temporary,{...payload,schemaVersion:1,instanceId:endpoint.instanceId,authToken:endpoint.authToken});
   fs.renameSync(temporary,request);
   const end=Date.now()+timeoutMs;
   while(Date.now()<end) {
     if(exists(response)) {
       privatePath(response);
       const raw=fs.readFileSync(response,'utf8');
-      if(Buffer.byteLength(raw)>1024*1024) throw fail('PROTOCOL_MISMATCH','Oversized response',{operationId:id,executed:'unknown'});
+      if(Buffer.byteLength(raw)>(payload.method==='session.get'?2*1024*1024+65536:1024*1024)) throw fail('PROTOCOL_MISMATCH','Oversized response',{operationId:id,executed:'unknown'});
       let body;try{body=JSON.parse(raw);}catch{await pause(25);continue;}
       if(body.schemaVersion!==1 || body.instanceId!==endpoint.instanceId || body.operationId!==id) throw fail('PROTOCOL_MISMATCH','Response does not match this operation',{operationId:id,executed:'unknown'});
       fs.unlinkSync(response);
-      if(body.ok!==true) throw fail('BROWSER_ERROR','Browser refused read-only request',{operationId:id,executed:body.error?.executed??false});
-      if(!Array.isArray(body.containers)||body.containers.some(c=>typeof c.id!=='string'||typeof c.name!=='string')) throw fail('PROTOCOL_MISMATCH','Invalid container list',{operationId:id,executed:'unknown'});
-      return {ok:true,schemaVersion:1,operationId:id,instance:{id:endpoint.instanceId,pid:endpoint.pid,channel},containers:body.containers.map(({id,name})=>({id,name}))};
+      if(body.ok!==true) {
+        const code=/^[A-Z][A-Z0-9_]{0,63}$/.test(body.error?.code??'')?body.error.code:'BROWSER_ERROR';
+        throw fail(code,'Ecom refused the request: '+code,{operationId:id,executed:body.error?.executed??'unknown',...(Number.isInteger(body.error?.httpStatus)?{httpStatus:body.error.httpStatus}:{})});
+      }
+      return body;
     }
     await pause(25);
   }

package/lib/cli.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import {root,pkg,fail} from './common.mjs';
-import {discover,listContainers} from './browser.mjs';
+import {discover,listContainers,inspectContainer,requestSession,validateReadUrl} from './browser.mjs';
 import {source,status,installSkill,checkUpdate,updateInstall} from './maintenance.mjs';
 export const capabilities=()=>JSON.parse(fs.readFileSync(path.join(root,'capabilities.json'),'utf8'));
 export function parse(argv) {
@@ -13,7 +13,7 @@ export function parse(argv) {
     const key=word.slice(2);
     if(Object.hasOwn(options,key)) throw fail('INVALID_ARGUMENT','Duplicate option '+word);
     if(['json','help','yes'].includes(key))options[key]=true;
-    else if(['agent','target','profile','instance','name','version'].includes(key)&&argv[i+1]&&!argv[i+1].startsWith('--')) options[key]=argv[++i];
+    else if(['agent','target','profile','instance','name','version','container','url','method'].includes(key)&&argv[i+1]&&!argv[i+1].startsWith('--')) options[key]=argv[++i];
     else throw fail('INVALID_ARGUMENT','Unknown option or missing value: '+word);
   }
   let command=positions.join(' ')||'help';
@@ -22,11 +22,16 @@ export function parse(argv) {
   if(!caps.commandContracts[command]) throw fail('INVALID_ARGUMENT','Unsupported command; use help --json');
   if(command!=='help')for(const key of Object.keys(options))if(!caps.commandContracts[command].options['--'+key])throw fail('INVALID_ARGUMENT','Option is not supported by this command: --'+key);
   if(options.name&&options.name!=='ecom-cli')throw fail('INVALID_ARGUMENT','Unknown Skill name');
+  if(command==='containers inspect'&&!options.container)throw fail('INVALID_ARGUMENT','containers inspect requires --container');
+  if(command==='session request') {
+    if(!options.container||!options.url)throw fail('INVALID_ARGUMENT','session request requires --container and --url');
+    options.url=validateReadUrl(options.url,options.method??'GET');
+  }
   return {command,options,requested};
 }
 export async function main(argv) {
   const {command,options,requested}=parse(argv);
-  if(command==='help')return {ok:true,package:pkg.name,version:pkg.version,usage:'ecom-cli containers list --json | skill source|status|install|update | update check|install | doctor',...capabilities(),...(capabilities().commandContracts[requested]??{})};
+  if(command==='help')return {ok:true,package:pkg.name,version:pkg.version,usage:'ecom-cli containers list|inspect | session request | skill source|status|install|update | update check|install | doctor; use help --json for required options',...capabilities(),...(capabilities().commandContracts[requested]??{})};
   if(command==='version')return {ok:true,package:pkg.name,version:pkg.version,protocolVersion:1};
   if(command==='capabilities'||command==='schema')return {ok:true,...capabilities()};
   if(command==='skill source') {const item=source();return {...capabilities(),...item,complete:true,items:[item]};}
@@ -38,9 +43,11 @@ export async function main(argv) {
     let instance,error;try{const found=discover(options);instance={id:found.endpoint.instanceId,pid:found.endpoint.pid,channel:found.channel};}catch(e){error={code:e.code,message:e.message};}
     return {ok:!error,package:pkg.name,version:pkg.version,node:process.version,platform:process.platform,transport:'private-local-mailbox',debuggingRequired:false,instance,...(error?{error}:{}),skillSource:source().path};
   }
-  if(command==='containers list') {
+  if(['containers list','containers inspect','session request'].includes(command)) {
     const update=await checkUpdate({automatic:true});
     if(update.available)process.stderr.write('Ecom CLI update available: '+update.latest+'; ask the current Agent to update the package and Skill.\n');
+    if(command==='containers inspect')return inspectContainer(options);
+    if(command==='session request')return requestSession(options);
     return listContainers(options);
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/ecom-cli",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "description": "Agent CLI and portable Skill for Ecom browser containers",
   "type": "module",
   "license": "MPL-2.0",

package/skills/ecom-cli/SKILL.md

@@ -1,23 +1,29 @@
 ---
 name: ecom-cli
-description: List isolated account containers in the running Ecom desktop browser, inspect its CLI connection, or install/update the Ecom CLI and companion Skill for the current Agent. Use when the user asks for Ecom browser containers or Ecom CLI setup. Website business queries and browser mutations are outside the first release.
+description: List and inspect account containers in the running Ecom browser, send explicitly authorized read-only HTTPS JSON requests using a selected container session, diagnose connections, or install/update the Ecom CLI and companion Skill. Use for Ecom account metadata and native-session API access; application business logic stays with the calling workflow.
 ---
 
 # Ecom CLI
 
 ## Input → strategy → output
 
-Input is a request to list Ecom containers, diagnose the connection, or maintain this plugin for the current Agent. The current Agent needs local command execution, file access and Node.js 22+. Output is a verified container list (stable ID and name), connection diagnosis, or an installation receipt with a separate host discovery check. Container names may identify accounts; disclose only within the user's request.
+Input is an Ecom container listing/detail request, an authorized read-only endpoint plus target container, a connection diagnosis, or selected-Agent maintenance intent. The current Agent needs local command execution, file access and Node.js 22+. Output is a container list, projected account metadata, native-redacted JSON response with pinned target identity, connection diagnosis, or installation receipt with a separate host discovery check. Container names may identify accounts; disclose only within the user's request.
 
 ## Main line
 
 1. Resolve this installed Skill's directory from the host's actual discovery record. Its bundled CLI is `.runtime/bin/ecom-cli.mjs` relative to that directory. Invoke it through an available Node.js 22+ runtime, checking host-managed runtime configuration before PATH. Canonical npm source has no `.runtime`; complete its managed installation using the packaged INSTALL.md first.
 2. Read [capabilities.json](capabilities.json) and use [the generic adapter](adapters/generic.json) for any host with the required capabilities. Probe the actual entry with `version --json` and `capabilities --json`; use only declared commands and flags. A missing runtime or required capability ends with CAPABILITY_UNAVAILABLE; do not modify adapters during a task.
-3. For normal listing, invoke the resolved entry with `containers list --json`. Ecom must already be running in normal desktop mode. Discovery validates the live executable and protected endpoint. With multiple instances, ask which instance/profile the user intends and pass the declared selector. Never choose an account from a name guess.
-4. Require `ok=true`, protocol version 1, a concrete instance identity and container ID/name pairs. Return the names and stable IDs as requested. This operation reads containers without navigating pages or changing the active tab.
+3. Choose the supported operation from the live schema. Use `containers list --json` to locate targets, then use a stable ID or unique exact name. Ecom must already be running in normal desktop mode; discovery validates its executable and protected endpoint. Multiple instances require an explicit intended instance/profile rather than a guess.
+4. For account details, run `containers inspect --container VALUE --json`. Report platform, saved homepage and timestamped service-login status. `identityBound` records a saved binding; `identityConfirmed` requires the native ready state. Cookie expiry is a reference, not proof of current service access. Account names are labels and do not grant or remove capabilities. Credential-like homepage fields are redacted.
+5. For a session request, require an explicit authorized read-only endpoint from the user or a trusted business capability’s registered operation. Business selection, endpoint semantics, date/metrics and interpretation belong to that caller. Run `session request --container VALUE --url HTTPS_URL --method GET --json`. GET alone does not prove an endpoint has no side effects; resolve unclear endpoint intent before submission. The CLI pins one instance and container across discovery and execution. Credentials remain native; header/body/credential inputs, redirects and HTML are unsupported. The enabled origin is controlled by Ecom, not expanded by the CLI.
+6. Require `ok=true`, protocol version 1, operation ID and matching instance/container IDs. For requests, require the JSON response contract and distinguish HTTP success from business success: `businessStatus=not-evaluated` requires the caller’s platform-specific check. Preserve structured errors and executed status. These operations do not navigate or activate tabs.
 
 ## Diagnosis and recovery
 
+- SHOP_NOT_READY: inspect this exact account. Complete login and platform-identity verification through its Ecom account management page; a cookie expiry or account name does not satisfy readiness. If the native adapter cannot verify identity, report that gap and stop the data request. Return to step 5 only after readiness is established.
+- SHOP_VERIFICATION_FAILED: stop; the browser’s pre-request identity check failed. Preserve the selected target and report the failure.
+- ORIGIN_NOT_ALLOWED, CREDENTIAL_INPUT_REJECTED, METHOD_UNSUPPORTED or INVALID_URL: correct the intended input within the declared contract; do not broaden browser permissions.
+- REQUEST_FAILED or NON_JSON_RESPONSE: preserve HTTP/operation/execute fields; handle login, permission or challenge through the original container. Do not infer business success.
 - INSTANCE_NOT_RUNNING: run `doctor --json`. Ask the user to open a compatible Ecom version. Do not enable remote debugging or substitute another browser.
 - INSTANCE_AMBIGUOUS: obtain the intended instance or profile, then return to step 3.
 - INSTANCE_CHANGED: no request was submitted; rediscover before returning to step 3.

package/skills/ecom-cli/capabilities.json

@@ -24,13 +24,17 @@
       "output_fields": [
         "ok",
         "containers",
+        "container",
         "instance",
+        "httpStatus",
+        "data",
+        "businessStatus",
         "error"
       ],
       "side_effects": {
         "external_mutation": false,
         "may_cost_money": false,
-        "authorization": "Read-only browser request authorized by user; selected-target writes require installation/update intent"
+        "authorization": "Container metadata reads and explicitly authorized read-only HTTPS operations; website Set-Cookie may refresh the native session. Selected-target maintenance requires installation/update intent."
       },
       "errors": [
         "CAPABILITY_UNAVAILABLE",

package/skills/ecom-cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/ecom-cli",
-  "version": "0.1.3",
+  "version": "0.2.0",
   "private": true,
   "type": "module"
 }