@proxy-checkout/cli 0.1.1-prx-124.150.1 → 0.1.1-prx-144.155.1

package/README.md

@@ -28,6 +28,17 @@ macOS uses the built-in Security framework and Keychain; supported Linux desktop
 
 All grants issued in this release and all operational/resource commands are test-only. `auth status` and `auth logout` are mode-neutral safety controls so a future separately issued live grant can still be inspected and revoked. This release does not issue live grants, and `--mode live` on login or a resource command exits `5` with `cli_live_mode_not_enabled` before authentication or resource creation. The credential/verifier, profiles, command registry, and policies model mode explicitly so future live commands can require a separate live-bound grant, capability, and command intent without redesigning auth.
 
+## Inspect a Stripe path
+
+`stripe doctor` is a credential-free, generated facts check. It prints the exact capability closure, read-only reconciliation operations, restricted-key permissions, webhook events, compatibility floor, helper, unsupported options, and readiness gate for a path:
+
+```bash
+proxy stripe doctor --path OT-PI --format json
+proxy stripe doctor --path OT-CO-H --format json
+```
+
+The command never connects to Stripe or Proxy and never reads secrets or provider objects. `OT-PI` and `OT-CO-H` remain `action_required` outside the named internal cohort until production-deployed Stripe test-mode proof passes. The merchant backend still owns the Stripe create/edit credential and injects its Stripe client into the SDK helper; Proxy stores only the separate read-only restricted key described by the output.
+
 ## Listen for Proxy webhooks
 
 An active HTTPS source endpoint must already exist. Its selected event types, schema version, and signing-secret identity are cloned server-side; the CLI never receives the signing secret.

package/dist/cjs/cli.d.cts

@@ -1,6 +1,6 @@
 import { CliConfigStore } from "./config.js";
 import { type CliIo } from "./output.js";
-export declare const cliVersion = "0.1.1-prx-124.150.1";
+export declare const cliVersion = "0.1.1-prx-144.155.1";
 export interface RunCliOptions {
     configStore?: CliConfigStore;
     environment?: NodeJS.ProcessEnv;

package/dist/cjs/cli.d.ts

@@ -1,6 +1,6 @@
 import { CliConfigStore } from "./config.js";
 import { type CliIo } from "./output.js";
-export declare const cliVersion = "0.1.1-prx-124.150.1";
+export declare const cliVersion = "0.1.1-prx-144.155.1";
 export interface RunCliOptions {
     configStore?: CliConfigStore;
     environment?: NodeJS.ProcessEnv;

package/dist/cjs/cli.js

@@ -8,8 +8,9 @@ const command_schema_js_1 = require("./command-schema.js");
 const config_js_1 = require("./config.js");
 const errors_js_1 = require("./errors.js");
 const output_js_1 = require("./output.js");
+const stripe_doctor_js_1 = require("./stripe-doctor.js");
 const webhooks_js_1 = require("./webhooks.js");
-exports.cliVersion = "0.1.1-prx-124.150.1";
+exports.cliVersion = "0.1.1-prx-144.155.1";
 async function runCli(argv, options = {}) {
     const io = options.io ?? {
         isTTY: Boolean(process.stdin.isTTY && process.stdout.isTTY),
@@ -28,7 +29,7 @@ async function runCli(argv, options = {}) {
         }
         if (parsedGlobals.options.llmsFull) {
             const document = (0, command_schema_js_1.llmsFullDocument)();
-            output.result({ document, schema_version: "2026-07-14" }, document);
+            output.result({ document, schema_version: "2026-07-18" }, document);
             return errors_js_1.cliExitCodes.success;
         }
         if (parsedGlobals.args.join(" ") === "commands schema") {
@@ -104,6 +105,15 @@ async function executeCommand(input) {
         input.output.result(publicProfile(input.profileName, profile), `Authenticated profile ${input.profileName} for test merchant ${profile.merchantId}.`);
         return;
     }
+    if (input.command.path === "stripe doctor") {
+        const pathId = readRequiredString(input.options, "--path");
+        const report = (0, stripe_doctor_js_1.stripeDoctorReport)(pathId);
+        if (!report) {
+            throw (0, errors_js_1.usageError)(`Unknown Stripe path ID ${pathId}; expected one of ${(0, stripe_doctor_js_1.stripeDoctorPathIds)().join(", ")}`);
+        }
+        input.output.result({ stripe_path: report }, (0, stripe_doctor_js_1.formatStripeDoctorReport)(report));
+        return;
+    }
     const resolved = await input.configStore.resolveCredential({
         apiBaseUrl: input.requestedApiBase,
         profileName: input.profileName,

package/dist/cjs/command-schema.js

@@ -63,6 +63,20 @@ exports.commandSchemas = [
         output: "Revocation status.",
         path: "auth logout",
     },
+    {
+        capabilities: [],
+        description: "Print generated Stripe path facts, exact read/event requirements, and static readiness gates.",
+        interactive: false,
+        modes: ["test", "live"],
+        options: withCommonOptions({
+            description: "Canonical Stripe path ID such as OT-PI or OT-CO-H.",
+            name: "--path",
+            required: true,
+            type: "string",
+        }),
+        output: "Generated path facts and readiness status; never credentials or provider objects.",
+        path: "stripe doctor",
+    },
     {
         description: "Relay signed Proxy test webhooks to a loopback development server.",
         interactive: true,
@@ -214,7 +228,7 @@ function findCommandSchema(path) {
 }
 function commandSchemaDocument(path) {
     if (!path) {
-        return { commands: exports.commandSchemas, schema_version: "2026-07-14" };
+        return { commands: exports.commandSchemas, schema_version: "2026-07-18" };
     }
     return findCommandSchema(path);
 }