@tarileo/avileo-catalog-cli 0.2.1 → 0.3.0

package/dist/index.js

@@ -14675,6 +14675,7 @@ var AgentHttpClient = class {
           headers: {
             ...formData || options.body === void 0 ? {} : { "content-type": "application/json" },
             ...operationId ? { "idempotency-key": operationId } : {},
+            ...options.approvalId ? { "x-avileo-approval-id": options.approvalId } : {},
             ...this.#apiKey ? { "x-avileo-agent-key": this.#apiKey } : {}
           },
           body,
@@ -14731,6 +14732,8 @@ var AGENT_CAPABILITY_ACTIONS = [
   "inventory:write"
 ];
 var AgentCapabilityActionSchema = external_exports.enum(AGENT_CAPABILITY_ACTIONS);
+var AGENT_KEY_MODES = ["read", "mutate"];
+var AgentKeyModeSchema = external_exports.enum(AGENT_KEY_MODES);
 var AGENT_CATALOG_KEY_PRESET_ACTIONS = [
   "business:read",
   "catalog:read",
@@ -14909,7 +14912,7 @@ var AgentStorefrontDtoSchema = external_exports.object({
 }).strict();
 var AgentBusinessDtoSchema = external_exports.object({
   name: nonEmptyTextSchema.max(255),
-  businessMode: external_exports.literal("tienda"),
+  businessMode: external_exports.string().trim().min(1).max(50),
   currency: external_exports.string().trim().length(3),
   isActive: external_exports.literal(true),
   tenantState: external_exports.literal("active"),
@@ -15140,14 +15143,96 @@ var AgentCatalogImportResultDtoSchema = external_exports.object({
   updatedAt: timestampSchema,
   completedAt: timestampSchema.nullable()
 }).strict();
+var AGENT_OPERATION_NAMES = [
+  "catalog.products.create",
+  "catalog.products.update",
+  "catalog.products.deactivate",
+  "catalog.variants.create",
+  "catalog.variants.reorder",
+  "catalog.variants.update",
+  "catalog.variants.deactivate",
+  "catalog.categories.create",
+  "catalog.categories.update",
+  "catalog.categories.delete",
+  "catalog.tags.create",
+  "catalog.tags.update",
+  "catalog.tags.delete",
+  "catalog.assets.upload",
+  "catalog.assets.import",
+  "catalog.inventory.adjust",
+  "catalog.inventory.set",
+  "catalog.imports.preview",
+  "catalog.imports.apply",
+  "business.profile.update",
+  "catalog.client_keys.create"
+];
+var AgentOperationNameSchema = external_exports.enum(AGENT_OPERATION_NAMES);
+var AGENT_OPERATION_STATES = [
+  "awaiting_approval",
+  "approved",
+  "rejected",
+  "succeeded",
+  "failed",
+  "expired",
+  "conflict"
+];
+var AgentOperationStateSchema = external_exports.enum(AGENT_OPERATION_STATES);
+var AgentOperationProposalInputSchema = external_exports.object({
+  operationName: AgentOperationNameSchema,
+  payload: external_exports.record(external_exports.string(), external_exports.unknown())
+}).strict();
+var AgentOperationProposalDtoSchema = external_exports.object({
+  id: uuidSchema,
+  operationName: AgentOperationNameSchema,
+  state: external_exports.literal("awaiting_approval"),
+  input: external_exports.record(external_exports.string(), external_exports.unknown()),
+  summary: nonEmptyTextSchema.max(500),
+  diff: external_exports.record(external_exports.string(), external_exports.unknown()),
+  approvalUrl: external_exports.string().url(),
+  createdAt: timestampSchema,
+  expiresAt: timestampSchema
+}).strict();
+var AgentOperationStatusDtoSchema = external_exports.object({
+  id: uuidSchema,
+  operationName: AgentOperationNameSchema,
+  state: AgentOperationStateSchema,
+  input: external_exports.record(external_exports.string(), external_exports.unknown()),
+  summary: nonEmptyTextSchema.max(500),
+  diff: external_exports.record(external_exports.string(), external_exports.unknown()),
+  approvalUrl: external_exports.string().url(),
+  result: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
+  error: external_exports.record(external_exports.string(), external_exports.unknown()).nullable(),
+  approvedAt: timestampSchema.nullable(),
+  rejectedAt: timestampSchema.nullable(),
+  completedAt: timestampSchema.nullable(),
+  createdAt: timestampSchema,
+  updatedAt: timestampSchema,
+  expiresAt: timestampSchema
+}).strict();
+var AgentOperationProposalEnvelopeSchema = external_exports.object({
+  success: external_exports.literal(true),
+  data: AgentOperationProposalDtoSchema
+}).strict();
+var AgentOperationStatusEnvelopeSchema = external_exports.object({
+  success: external_exports.literal(true),
+  data: AgentOperationStatusDtoSchema
+}).strict();
+var AgentOperationApplyEnvelopeSchema = external_exports.object({
+  success: external_exports.literal(true),
+  data: external_exports.record(external_exports.string(), external_exports.unknown())
+}).strict();
 var AGENT_DEVICE_AUTH_STATUSES = ["pending", "approved", "denied", "expired"];
-var AGENT_DEVICE_AUTH_DEFAULT_PERMISSIONS = [...AGENT_CATALOG_KEY_PRESET_ACTIONS];
+var AGENT_DEVICE_AUTH_DEFAULT_PERMISSIONS = [
+  ...AGENT_CATALOG_KEY_PRESET_ACTIONS
+];
 function parsePollResponse(value) {
   if (!AGENT_DEVICE_AUTH_STATUSES.includes(value.status)) {
     throw new Error("La API de Avileo devolvi\xF3 un estado de autorizaci\xF3n inv\xE1lido");
   }
   if (value.permissions) {
-    const parsed = value.permissions.map((permission) => AgentCapabilityActionSchema.parse(permission));
+    const parsed = value.permissions.map(
+      (permission) => AgentCapabilityActionSchema.parse(permission)
+    );
     return { ...value, permissions: parsed };
   }
   return value;
@@ -15165,10 +15250,13 @@ var AvileoAgentDeviceAuthClient = class {
   }
   async poll(deviceCode) {
     if (!deviceCode.trim()) throw new Error("deviceCode es obligatorio");
-    const result = await this.http.request("/api/v1/agent-auth/device/poll", {
-      method: "POST",
-      body: { deviceCode }
-    });
+    const result = await this.http.request(
+      "/api/v1/agent-auth/device/poll",
+      {
+        method: "POST",
+        body: { deviceCode }
+      }
+    );
     return parsePollResponse(result);
   }
 };
@@ -15191,6 +15279,9 @@ var AgentBusinessResource = class {
   get() {
     return this.http.request("/api/v1/agent/business");
   }
+  profile() {
+    return this.http.request("/api/v1/agent/business/profile");
+  }
 };
 var AgentProductsResource = class {
   constructor(http) {
@@ -15203,24 +15294,26 @@ var AgentProductsResource = class {
   get(productId) {
     return this.http.request(`/api/v1/agent/catalog/products/${encodeURIComponent(productId)}`);
   }
-  create(input) {
+  create(input, approvalId) {
     return this.http.request("/api/v1/agent/catalog/products", {
       method: "POST",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  update(productId, input) {
+  update(productId, input, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/products/${encodeURIComponent(productId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  deactivate(productId) {
+  deactivate(productId, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/deactivate`,
-      { method: "POST", mutation: true }
+      { method: "POST", mutation: true, approvalId }
     );
   }
 };
@@ -15237,29 +15330,30 @@ var AgentVariantsResource = class {
   get(variantId) {
     return this.http.request(`/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}`);
   }
-  create(productId, input) {
+  create(productId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/variants`,
-      { method: "POST", body: input, mutation: true }
+      { method: "POST", body: input, mutation: true, approvalId }
     );
   }
-  update(variantId, input) {
+  update(variantId, input, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  deactivate(variantId) {
+  deactivate(variantId, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/deactivate`,
-      { method: "POST", mutation: true }
+      { method: "POST", mutation: true, approvalId }
     );
   }
-  reorder(productId, input) {
+  reorder(productId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/variants/reorder`,
-      { method: "POST", body: input, mutation: true }
+      { method: "POST", body: input, mutation: true, approvalId }
     );
   }
 };
@@ -15274,24 +15368,27 @@ var AgentCategoriesResource = class {
   get(categoryId) {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`);
   }
-  create(input) {
+  create(input, approvalId) {
     return this.http.request("/api/v1/agent/catalog/categories", {
       method: "POST",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  update(categoryId, input) {
+  update(categoryId, input, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  delete(categoryId) {
+  delete(categoryId, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`, {
       method: "DELETE",
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
 };
@@ -15306,24 +15403,27 @@ var AgentTagsResource = class {
   get(tagId) {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`);
   }
-  create(input) {
+  create(input, approvalId) {
     return this.http.request("/api/v1/agent/catalog/tags", {
       method: "POST",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  update(tagId, input) {
+  update(tagId, input, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  delete(tagId) {
+  delete(tagId, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`, {
       method: "DELETE",
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
 };
@@ -15338,20 +15438,22 @@ var AgentAssetsResource = class {
   get(assetId) {
     return this.http.request(`/api/v1/agent/catalog/assets/${encodeURIComponent(assetId)}`);
   }
-  upload(file2) {
+  upload(file2, approvalId) {
     const body = new FormData();
     body.set("file", file2);
     return this.http.request("/api/v1/agent/catalog/assets/upload", {
       method: "POST",
       body,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
-  importFromUrl(input) {
+  importFromUrl(input, approvalId) {
     return this.http.request("/api/v1/agent/catalog/assets/import", {
       method: "POST",
       body: input,
-      mutation: true
+      mutation: true,
+      approvalId
     });
   }
 };
@@ -15370,16 +15472,16 @@ var AgentInventoryResource = class {
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory/movements${queryString(filters)}`
     );
   }
-  adjust(variantId, input) {
+  adjust(variantId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory/adjust`,
-      { method: "POST", body: input, mutation: true }
+      { method: "POST", body: input, mutation: true, approvalId }
     );
   }
-  set(variantId, input) {
+  set(variantId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory`,
-      { method: "PUT", body: input, mutation: true }
+      { method: "PUT", body: input, mutation: true, approvalId }
     );
   }
 };
@@ -15395,20 +15497,54 @@ var AgentImportsResource = class {
       mutation: true
     });
   }
-  apply(importId) {
-    return this.http.request(`/api/v1/agent/catalog/imports/${encodeURIComponent(importId)}/apply`, {
+  apply(importId, approvalId) {
+    return this.http.request(
+      `/api/v1/agent/catalog/imports/${encodeURIComponent(importId)}/apply`,
+      {
+        method: "POST",
+        mutation: true,
+        approvalId
+      }
+    );
+  }
+  get(importId) {
+    return this.http.request(`/api/v1/agent/catalog/imports/${encodeURIComponent(importId)}`);
+  }
+};
+var AgentOperationsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  propose(input) {
+    return this.http.request("/api/v1/agent/operations", {
       method: "POST",
+      body: input,
       mutation: true
     });
   }
-  get(importId) {
-    return this.http.request(`/api/v1/agent/catalog/imports/${encodeURIComponent(importId)}`);
+  proposeClientKey(name) {
+    return this.propose({
+      operationName: "catalog.client_keys.create",
+      payload: name === void 0 ? {} : { name }
+    });
+  }
+  get(operationId) {
+    return this.http.request(`/api/v1/agent/operations/${encodeURIComponent(operationId)}`);
+  }
+  apply(operationId) {
+    return this.http.request(`/api/v1/agent/operations/${encodeURIComponent(operationId)}/apply`, {
+      method: "POST",
+      mutation: true,
+      approvalId: operationId
+    });
   }
 };
 function createAvileoAgent(config2) {
   const http = new AgentHttpClient(config2);
   return {
     business: new AgentBusinessResource(http),
+    operations: new AgentOperationsResource(http),
     products: new AgentProductsResource(http),
     variants: new AgentVariantsResource(http),
     categories: new AgentCategoriesResource(http),
@@ -15554,7 +15690,8 @@ function emitFailure(failure) {
 function exitCodeFor(error51) {
   const candidate = error51;
   if (candidate.retryable) return 2;
-  if (candidate.status === 409 || /CONFLICT|IDEMPOTENCY|VERSION/.test(candidate.code ?? "")) return 4;
+  if (candidate.status === 409 || /CONFLICT|IDEMPOTENCY|VERSION/.test(candidate.code ?? ""))
+    return 4;
   if (candidate.status === 401 || candidate.status === 403 || candidate.status === 422 || /AUTH|PERMISSION|VALIDATION|UNSUPPORTED|QUOTA|POLICY/.test(candidate.code ?? "")) {
     return 3;
   }
@@ -15576,7 +15713,7 @@ function redact(value) {
     return Object.fromEntries(
       Object.entries(value).map(([key, item]) => [
         key,
-        /(?:api.?key|authorization|secret|token|password)/i.test(key) ? "[REDACTED]" : redact(item)
+        /(?:agent.?key|api.?key|authorization|secret|token|password)/i.test(key) ? "[REDACTED]" : redact(item)
       ])
     );
   }
@@ -15592,8 +15729,9 @@ function registerBusinessCommands(root, getClient) {
 }
 
 // src/commands/catalog.ts
-import { basename } from "path";
+import { createHash } from "crypto";
 import { readFile, stat } from "fs/promises";
+import { basename, extname } from "path";
 function requireId(value, name) {
   if (!value.trim()) throw new CliProtocolError("CLI_VALIDATION_ERROR", `${name} es obligatorio`);
   return value;
@@ -15634,7 +15772,7 @@ function normalizeInput(value) {
 }
 function withMutationOptions(command, includeFrom = true) {
   if (includeFrom) command.requiredOption("--from <json-file>", "Objeto JSON estructurado");
-  return command.option("--apply", "Ejecuta la mutaci\xF3n despu\xE9s de validarla localmente");
+  return command.option("--apply", "Solicita aprobaci\xF3n o ejecuta una mutaci\xF3n aprobada").option("--approval-id <uuid>", "Aprobaci\xF3n emitida por Avileo");
 }
 function wantsApply(command) {
   return Boolean(command.optsWithGlobals().apply);
@@ -15652,7 +15790,8 @@ function addListOptions(command) {
 }
 function parseInteger(value) {
   const result = Number(value);
-  if (!Number.isInteger(result) || result < 0) throw new CliProtocolError("CLI_VALIDATION_ERROR", "Se esperaba un entero no negativo");
+  if (!Number.isInteger(result) || result < 0)
+    throw new CliProtocolError("CLI_VALIDATION_ERROR", "Se esperaba un entero no negativo");
   return result;
 }
 function parseBoolean(value) {
@@ -15660,12 +15799,17 @@ function parseBoolean(value) {
   if (value === "false") return false;
   throw new CliProtocolError("CLI_VALIDATION_ERROR", "Se esperaba true o false");
 }
-async function applyOrPreview(command, input, run, current) {
-  if (wantsApply(command)) {
-    emitSuccess(await run());
+async function applyOrPreview(command, input, getClient, operationName, payload, run, current) {
+  if (!wantsApply(command)) {
+    emitSuccess(localResult(input, current ? await current() : void 0));
     return;
   }
-  emitSuccess(localResult(input, current ? await current() : void 0));
+  const rawApprovalId = command.optsWithGlobals().approvalId;
+  if (typeof rawApprovalId === "string") {
+    emitSuccess(await run(requireId(rawApprovalId, "approvalId")));
+    return;
+  }
+  emitSuccess(await getClient().operations.propose({ operationName, payload }));
 }
 function registerCatalogCommands(root, getClient) {
   const catalog = root.command("catalog").description("Gestiona recursos de cat\xE1logo de Avileo");
@@ -15680,165 +15824,363 @@ function registerCatalogCommands(root, getClient) {
 function registerProductCommands(catalog, getClient) {
   const product = catalog.command("product");
   addListOptions(product.command("list")).action(async (options) => {
-    const { active: isActive, categoryId, ...filters } = options;
-    emitSuccess(await getClient().products.list({ ...filters, ...categoryId ? { categoryId } : {}, ...isActive === void 0 ? {} : { isActive } }));
+    const {
+      active: isActive,
+      categoryId,
+      ...filters
+    } = options;
+    emitSuccess(
+      await getClient().products.list({
+        ...filters,
+        ...categoryId ? { categoryId } : {},
+        ...isActive === void 0 ? {} : { isActive }
+      })
+    );
   });
-  product.command("get <productId>").action(async (productId) => emitSuccess(await getClient().products.get(requireId(productId, "productId"))));
-  withMutationOptions(product.command("create")).action(async (options, command) => {
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().products.create(input));
+  product.command("get <productId>").action(async (productId) => {
+    emitSuccess(await getClient().products.get(requireId(productId, "productId")));
   });
-  withMutationOptions(product.command("update <productId>")).action(async (productId, options, command) => {
-    const id = requireId(productId, "productId");
+  withMutationOptions(product.command("create")).action(async (options, command) => {
     const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().products.update(id, input), () => getClient().products.get(id));
-  });
-  withMutationOptions(product.command("deactivate <productId>"), false).action(async (productId, _options, command) => {
-    const id = requireId(productId, "productId");
-    const input = { isActive: false };
-    await applyOrPreview(command, input, () => getClient().products.deactivate(id), () => getClient().products.get(id));
+    await applyOrPreview(
+      command,
+      input,
+      getClient,
+      "catalog.products.create",
+      { body: input },
+      (approvalId) => getClient().products.create(input, approvalId)
+    );
   });
+  withMutationOptions(product.command("update <productId>")).action(
+    async (productId, options, command) => {
+      const id = requireId(productId, "productId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.products.update",
+        { productId: id, body: input },
+        (approvalId) => getClient().products.update(id, input, approvalId),
+        () => getClient().products.get(id)
+      );
+    }
+  );
+  withMutationOptions(product.command("deactivate <productId>"), false).action(
+    async (productId, _options, command) => {
+      const id = requireId(productId, "productId");
+      await applyOrPreview(
+        command,
+        { isActive: false },
+        getClient,
+        "catalog.products.deactivate",
+        { productId: id },
+        (approvalId) => getClient().products.deactivate(id, approvalId),
+        () => getClient().products.get(id)
+      );
+    }
+  );
 }
 function registerVariantCommands(catalog, getClient) {
   const variant = catalog.command("variant");
-  variant.command("list <productId>").action(async (productId) => emitSuccess(await getClient().variants.list(requireId(productId, "productId"))));
-  variant.command("get <variantId>").action(async (variantId) => emitSuccess(await getClient().variants.get(requireId(variantId, "variantId"))));
-  withMutationOptions(variant.command("create <productId>")).action(async (productId, options, command) => {
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().variants.create(requireId(productId, "productId"), input));
-  });
-  withMutationOptions(variant.command("update <variantId>")).action(async (variantId, options, command) => {
-    const id = requireId(variantId, "variantId");
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().variants.update(id, input), () => getClient().variants.get(id));
-  });
-  withMutationOptions(variant.command("deactivate <variantId>"), false).action(async (variantId, _options, command) => {
-    const id = requireId(variantId, "variantId");
-    const input = { isActive: false };
-    await applyOrPreview(command, input, () => getClient().variants.deactivate(id), () => getClient().variants.get(id));
-  });
-  withMutationOptions(variant.command("reorder <productId>")).action(async (productId, options, command) => {
-    const id = requireId(productId, "productId");
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().variants.reorder(id, input), () => getClient().variants.list(id));
-  });
+  variant.command("list <productId>").action(async (productId) => {
+    emitSuccess(await getClient().variants.list(requireId(productId, "productId")));
+  });
+  variant.command("get <variantId>").action(async (variantId) => {
+    emitSuccess(await getClient().variants.get(requireId(variantId, "variantId")));
+  });
+  withMutationOptions(variant.command("create <productId>")).action(
+    async (productId, options, command) => {
+      const id = requireId(productId, "productId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.variants.create",
+        { productId: id, body: input },
+        (approvalId) => getClient().variants.create(id, input, approvalId)
+      );
+    }
+  );
+  withMutationOptions(variant.command("update <variantId>")).action(
+    async (variantId, options, command) => {
+      const id = requireId(variantId, "variantId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.variants.update",
+        { variantId: id, body: input },
+        (approvalId) => getClient().variants.update(id, input, approvalId),
+        () => getClient().variants.get(id)
+      );
+    }
+  );
+  withMutationOptions(variant.command("deactivate <variantId>"), false).action(
+    async (variantId, _options, command) => {
+      const id = requireId(variantId, "variantId");
+      await applyOrPreview(
+        command,
+        { isActive: false },
+        getClient,
+        "catalog.variants.deactivate",
+        { variantId: id },
+        (approvalId) => getClient().variants.deactivate(id, approvalId),
+        () => getClient().variants.get(id)
+      );
+    }
+  );
+  withMutationOptions(variant.command("reorder <productId>")).action(
+    async (productId, options, command) => {
+      const id = requireId(productId, "productId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.variants.reorder",
+        { productId: id, body: input },
+        (approvalId) => getClient().variants.reorder(id, input, approvalId),
+        () => getClient().variants.list(id)
+      );
+    }
+  );
 }
 function registerCategoryCommands(catalog, getClient) {
   const category = catalog.command("category");
   category.command("list").action(async () => emitSuccess(await getClient().categories.list()));
-  category.command("get <categoryId>").action(async (categoryId) => emitSuccess(await getClient().categories.get(requireId(categoryId, "categoryId"))));
-  withMutationOptions(category.command("create")).action(async (options, command) => {
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().categories.create(input));
+  category.command("get <categoryId>").action(async (categoryId) => {
+    emitSuccess(await getClient().categories.get(requireId(categoryId, "categoryId")));
   });
-  withMutationOptions(category.command("update <categoryId>")).action(async (categoryId, options, command) => {
-    const id = requireId(categoryId, "categoryId");
+  withMutationOptions(category.command("create")).action(async (options, command) => {
     const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().categories.update(id, input), () => getClient().categories.get(id));
-  });
-  withMutationOptions(category.command("delete <categoryId>"), false).action(async (categoryId, _options, command) => {
-    const id = requireId(categoryId, "categoryId");
-    await applyOrPreview(command, { delete: true }, () => getClient().categories.delete(id), () => getClient().categories.get(id));
+    await applyOrPreview(
+      command,
+      input,
+      getClient,
+      "catalog.categories.create",
+      { body: input },
+      (approvalId) => getClient().categories.create(input, approvalId)
+    );
   });
+  withMutationOptions(category.command("update <categoryId>")).action(
+    async (categoryId, options, command) => {
+      const id = requireId(categoryId, "categoryId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.categories.update",
+        { categoryId: id, body: input },
+        (approvalId) => getClient().categories.update(id, input, approvalId),
+        () => getClient().categories.get(id)
+      );
+    }
+  );
+  withMutationOptions(category.command("delete <categoryId>"), false).action(
+    async (categoryId, _options, command) => {
+      const id = requireId(categoryId, "categoryId");
+      await applyOrPreview(
+        command,
+        { delete: true },
+        getClient,
+        "catalog.categories.delete",
+        { categoryId: id },
+        (approvalId) => getClient().categories.delete(id, approvalId),
+        () => getClient().categories.get(id)
+      );
+    }
+  );
 }
 function registerTagCommands(catalog, getClient) {
   const tag = catalog.command("tag");
   tag.command("list").action(async () => emitSuccess(await getClient().tags.list()));
-  tag.command("get <tagId>").action(async (tagId) => emitSuccess(await getClient().tags.get(requireId(tagId, "tagId"))));
+  tag.command("get <tagId>").action(async (tagId) => {
+    emitSuccess(await getClient().tags.get(requireId(tagId, "tagId")));
+  });
   withMutationOptions(tag.command("create")).action(async (options, command) => {
     const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().tags.create(input));
+    await applyOrPreview(
+      command,
+      input,
+      getClient,
+      "catalog.tags.create",
+      { body: input },
+      (approvalId) => getClient().tags.create(input, approvalId)
+    );
   });
   withMutationOptions(tag.command("update <tagId>")).action(async (tagId, options, command) => {
     const id = requireId(tagId, "tagId");
     const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().tags.update(id, input), () => getClient().tags.get(id));
-  });
-  withMutationOptions(tag.command("delete <tagId>"), false).action(async (tagId, _options, command) => {
-    const id = requireId(tagId, "tagId");
-    await applyOrPreview(command, { delete: true }, () => getClient().tags.delete(id), () => getClient().tags.get(id));
+    await applyOrPreview(
+      command,
+      input,
+      getClient,
+      "catalog.tags.update",
+      { tagId: id, body: input },
+      (approvalId) => getClient().tags.update(id, input, approvalId),
+      () => getClient().tags.get(id)
+    );
   });
+  withMutationOptions(tag.command("delete <tagId>"), false).action(
+    async (tagId, _options, command) => {
+      const id = requireId(tagId, "tagId");
+      await applyOrPreview(
+        command,
+        { delete: true },
+        getClient,
+        "catalog.tags.delete",
+        { tagId: id },
+        (approvalId) => getClient().tags.delete(id, approvalId),
+        () => getClient().tags.get(id)
+      );
+    }
+  );
 }
 function registerAssetCommands(catalog, getClient) {
   const asset = catalog.command("asset");
   asset.command("list").option("--search <text>").option("--limit <number>", "M\xE1ximo de resultados", parseInteger).option("--offset <number>", "Desplazamiento", parseInteger).action(async (options) => emitSuccess(await getClient().assets.list(options)));
-  asset.command("get <assetId>").action(async (assetId) => emitSuccess(await getClient().assets.get(requireId(assetId, "assetId"))));
-  asset.command("upload").requiredOption("--file <path>", "Archivo local").option("--apply", "Sube el archivo").action(async (options, command) => {
+  asset.command("get <assetId>").action(async (assetId) => {
+    emitSuccess(await getClient().assets.get(requireId(assetId, "assetId")));
+  });
+  withMutationOptions(
+    asset.command("upload").requiredOption("--file <path>", "Archivo local"),
+    false
+  ).action(async (options, command) => {
     const filePath = options.file;
     const fileStat = await stat(filePath);
-    if (!fileStat.isFile()) throw new CliProtocolError("CLI_VALIDATION_ERROR", "--file debe apuntar a un archivo");
+    if (!fileStat.isFile()) {
+      throw new CliProtocolError("CLI_VALIDATION_ERROR", "--file debe apuntar a un archivo");
+    }
     if (!wantsApply(command)) {
-      emitSuccess({ validated: "local", file: basename(filePath), sizeBytes: fileStat.size });
+      emitSuccess({
+        validated: "local",
+        file: basename(filePath),
+        sizeBytes: fileStat.size
+      });
+      return;
+    }
+    const extension = extname(filePath).toLowerCase();
+    const mimeType = extension === ".jpg" || extension === ".jpeg" ? "image/jpeg" : extension === ".png" ? "image/png" : extension === ".webp" ? "image/webp" : void 0;
+    if (!mimeType) {
+      throw new CliProtocolError(
+        "CLI_VALIDATION_ERROR",
+        "Solo se permiten im\xE1genes JPEG, PNG o WebP"
+      );
+    }
+    const contents = await readFile(filePath);
+    const file2 = new File([contents], basename(filePath), { type: mimeType });
+    const rawApprovalId = command.optsWithGlobals().approvalId;
+    if (typeof rawApprovalId === "string") {
+      emitSuccess(await getClient().assets.upload(file2, requireId(rawApprovalId, "approvalId")));
       return;
     }
-    const file2 = new File([await readFile(filePath)], basename(filePath));
-    emitSuccess(await getClient().assets.upload(file2));
+    emitSuccess(
+      await getClient().operations.propose({
+        operationName: "catalog.assets.upload",
+        payload: {
+          filename: file2.name,
+          mimeType: file2.type,
+          sizeBytes: file2.size,
+          contentHash: createHash("sha256").update(contents).digest("hex")
+        }
+      })
+    );
   });
   withMutationOptions(asset.command("import-url")).action(async (options, command) => {
     const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().assets.importFromUrl(input));
+    await applyOrPreview(
+      command,
+      input,
+      getClient,
+      "catalog.assets.import",
+      input,
+      (approvalId) => getClient().assets.importFromUrl(input, approvalId)
+    );
   });
 }
 function registerInventoryCommands(catalog, getClient) {
   const inventory = catalog.command("inventory");
-  inventory.command("get <variantId>").action(async (variantId) => emitSuccess(await getClient().inventory.get(requireId(variantId, "variantId"))));
-  inventory.command("movements <variantId>").option("--reason <reason>").option("--limit <number>", "M\xE1ximo de resultados", parseInteger).option("--offset <number>", "Desplazamiento", parseInteger).action(async (variantId, options) => emitSuccess(await getClient().inventory.listMovements(requireId(variantId, "variantId"), options)));
-  withMutationOptions(inventory.command("adjust <variantId>")).action(async (variantId, options, command) => {
-    const id = requireId(variantId, "variantId");
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().inventory.adjust(id, input), () => getClient().inventory.get(id));
+  inventory.command("get <variantId>").action(async (variantId) => {
+    emitSuccess(await getClient().inventory.get(requireId(variantId, "variantId")));
   });
-  withMutationOptions(inventory.command("set <variantId>")).action(async (variantId, options, command) => {
-    const id = requireId(variantId, "variantId");
-    const input = await readMutationInput(options.from);
-    await applyOrPreview(command, input, () => getClient().inventory.set(id, input), () => getClient().inventory.get(id));
+  inventory.command("movements <variantId>").option("--reason <reason>").option("--limit <number>", "M\xE1ximo de resultados", parseInteger).option("--offset <number>", "Desplazamiento", parseInteger).action(async (variantId, options) => {
+    emitSuccess(
+      await getClient().inventory.listMovements(requireId(variantId, "variantId"), options)
+    );
   });
-}
-async function resolveLocalFileSources(value, client) {
-  if (Array.isArray(value)) return Promise.all(value.map((item) => resolveLocalFileSources(item, client)));
-  if (!value || typeof value !== "object") return value;
-  const source = value;
-  if (source.kind === "file") {
-    if (typeof source.path !== "string" || Object.keys(source).length !== 2) {
-      throw new CliProtocolError(
-        "CLI_VALIDATION_ERROR",
-        'Una imagen local debe tener exactamente kind: "file" y path'
+  withMutationOptions(inventory.command("adjust <variantId>")).action(
+    async (variantId, options, command) => {
+      const id = requireId(variantId, "variantId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.inventory.adjust",
+        { variantId: id, body: input },
+        (approvalId) => getClient().inventory.adjust(id, input, approvalId),
+        () => getClient().inventory.get(id)
       );
     }
-    const fileStat = await stat(source.path);
-    if (!fileStat.isFile()) {
-      throw new CliProtocolError("CLI_VALIDATION_ERROR", "La ruta de imagen local debe apuntar a un archivo");
+  );
+  withMutationOptions(inventory.command("set <variantId>")).action(
+    async (variantId, options, command) => {
+      const id = requireId(variantId, "variantId");
+      const input = await readMutationInput(options.from);
+      await applyOrPreview(
+        command,
+        input,
+        getClient,
+        "catalog.inventory.set",
+        { variantId: id, body: input },
+        (approvalId) => getClient().inventory.set(id, input, approvalId),
+        () => getClient().inventory.get(id)
+      );
     }
-    const asset = await client.assets.upload(
-      new File([await readFile(source.path)], basename(source.path))
+  );
+}
+function rejectLocalFileSources(value) {
+  if (Array.isArray(value)) {
+    for (const item of value) rejectLocalFileSources(item);
+    return;
+  }
+  if (!value || typeof value !== "object") return;
+  const source = value;
+  if (source.kind === "file") {
+    throw new CliProtocolError(
+      "CLI_VALIDATION_ERROR",
+      "Sube cada imagen local con catalog asset upload, apru\xE9bala y usa su assetId"
     );
-    return { kind: "asset", assetId: asset.id };
   }
-  return Object.fromEntries(
-    await Promise.all(
-      Object.entries(source).map(async ([key, nested]) => [
-        key,
-        await resolveLocalFileSources(nested, client)
-      ])
-    )
-  );
+  for (const nested of Object.values(source)) rejectLocalFileSources(nested);
 }
 function registerImportCommands(catalog, getClient) {
   const imports = catalog.command("import");
   imports.command("preview").requiredOption("--from <json-file>", "Lista estructurada para vista previa").action(async (options) => {
     const input = await readMutationInput(options.from);
-    const normalizedInput = await resolveLocalFileSources(input, getClient());
-    emitSuccess(await getClient().imports.preview(normalizedInput));
-  });
-  imports.command("apply <importId>").option("--apply", "Encola la importaci\xF3n aprobada").action(async (importId, _options, command) => {
-    const id = requireId(importId, "importId");
-    if (!wantsApply(command)) {
-      emitSuccess({ validated: "local", importId: id, action: "apply" });
-      return;
+    rejectLocalFileSources(input);
+    emitSuccess(await getClient().imports.preview(input));
+  });
+  withMutationOptions(imports.command("apply <importId>"), false).action(
+    async (importId, _options, command) => {
+      const id = requireId(importId, "importId");
+      await applyOrPreview(
+        command,
+        { importId: id, action: "apply" },
+        getClient,
+        "catalog.imports.apply",
+        { importId: id },
+        (approvalId) => getClient().imports.apply(id, approvalId)
+      );
     }
-    emitSuccess(await getClient().imports.apply(id));
+  );
+  imports.command("status <importId>").action(async (importId) => {
+    emitSuccess(await getClient().imports.get(requireId(importId, "importId")));
   });
-  imports.command("status <importId>").action(async (importId) => emitSuccess(await getClient().imports.get(requireId(importId, "importId"))));
 }
 
 // src/commands/auth.ts
@@ -15902,12 +16244,10 @@ async function login(options) {
   const deviceAuth = options.deviceAuthFactory(baseUrl ? { baseUrl } : {});
   const start = await deviceAuth.start({ name: "Avileo CLI" });
   const browserOpened = await options.openBrowser(start.verificationUri);
-  if (!options.json()) {
-    process.stderr.write(
-      `Abr\xED ${start.verificationUri} y confirma el c\xF3digo ${start.userCode}. Esperando aprobaci\xF3n\u2026
+  process.stderr.write(
+    `Abr\xED ${start.verificationUri} y confirma el c\xF3digo ${start.userCode}. Esperando aprobaci\xF3n\u2026
 `
-    );
-  }
+  );
   const expiresAt = Date.parse(start.expiresAt);
   const deadline = Number.isFinite(expiresAt) ? expiresAt : Date.now() + 10 * 60 * 1e3;
   while (Date.now() < deadline) {
@@ -16003,6 +16343,26 @@ function createProgram(options = {}) {
   });
   registerBusinessCommands(program, getClient);
   registerCatalogCommands(program, getClient);
+  const operation = program.command("operation").description("Consulta y aplica operaciones aprobadas en Avileo");
+  operation.command("status <id>").description("Consulta el estado de una operaci\xF3n").action(async (id) => {
+    if (!id.trim()) {
+      throw new CliProtocolError("CLI_VALIDATION_ERROR", "id es obligatorio");
+    }
+    emitSuccess(await getClient().operations.get(id));
+  });
+  operation.command("apply <id>").description("Aplica una operaci\xF3n aprobada").action(async (id) => {
+    if (!id.trim()) {
+      throw new CliProtocolError("CLI_VALIDATION_ERROR", "id es obligatorio");
+    }
+    emitSuccess(await getClient().operations.apply(id));
+  });
+  program.command("catalog-key").description("Gestiona la Client Key p\xFAblica del cat\xE1logo").command("create").requiredOption("--name <name>", "Nombre visible de la Client Key").description("Propone crear una Client Key para aprobaci\xF3n en Avileo").action(async (options2) => {
+    const name = options2.name.trim();
+    if (!name) {
+      throw new CliProtocolError("CLI_VALIDATION_ERROR", "name es obligatorio");
+    }
+    emitSuccess(await getClient().operations.proposeClientKey(name));
+  });
   const parseAsync3 = program.parseAsync.bind(program);
   program.parseAsync = (async (...args) => {
     try {