@tarileo/avileo-catalog-cli 0.1.4 → 0.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -2,13 +2,35 @@
2
2
 
3
3
  The Avileo tenant-agent command line interface for a registered `tienda` catalog.
4
4
 
5
- Inject `AVILEO_AGENT_API_KEY` through the host secret manager, then use structured
6
- JSON output for automation:
5
+ For a first-time human connection, use the temporary device authorization link:
7
6
 
8
7
  ```sh
9
- npx --yes @tarileo/avileo-catalog-cli@0.1.0 business show --json
8
+ npx --yes @tarileo/avileo-catalog-cli@0.2.0 auth login --json
10
9
  ```
11
10
 
11
+ The CLI prints only the verification URI, user code and status, opens the link
12
+ with a safe executable when available, polls until approval, and stores the new
13
+ Agent Key locally with `0600` permissions. The key is never printed or placed
14
+ in the URL. Use `auth status --json` to inspect the source (`environment` or
15
+ `local`) without revealing the key, and `auth logout --json` to remove only the
16
+ local credential; remote revocation remains an Avileo action.
17
+
18
+ For CI/CD and automated agents, continue injecting `AVILEO_AGENT_API_KEY`.
19
+ Environment credentials always take priority over the local credential file.
20
+ Never pass an Agent Key through flags, prompts or JSON input.
21
+
22
+ `AVILEO_AGENT_BASE_URL` remains the development/test endpoint override.
23
+
12
24
  Use `--from <json-file>` for structured mutation input. Direct mutations validate
13
- locally by default; pass `--apply` only after reviewing the result. The optional
14
- `AVILEO_AGENT_BASE_URL` environment variable is for development and test targets.
25
+ locally by default; pass `--apply` only after reviewing the result. The CLI is
26
+ a safe shell adapter over the same `/api/v1/agent/*` HTTP contract used by
27
+ `@tarileo/avileo-sdk/agent`. See the [Agent HTTP API](/docs/agent-http)
28
+ reference for headers, idempotency, resources and errors.
29
+
30
+ For operators and AI agents, the recommended sequence is:
31
+
32
+ 1. Run `business show --json`.
33
+ 2. Read the exact resource before proposing a change.
34
+ 3. Run mutations without `--apply` to review local validation or a diff.
35
+ 4. Request explicit approval and repeat with `--apply`.
36
+ 5. Use the durable import preview/apply flow for structured supplier lists.