@tarileo/avileo-catalog-cli 0.3.2 → 0.3.3

package/README.md

@@ -3,7 +3,7 @@
 The Avileo tenant-agent command line interface for a registered business with effective catalog-agent access.
 
 The origin-pinning contract below describes this checkout. A package version in
-`package.json` does not prove npm availability: `0.3.2` has not been published
+`package.json` does not prove npm availability: `0.3.3` has not been published
 by this release closure. Public handoff must wait for the operator's verified
 package version/artifact and an activated destination. Never substitute an older
 CLI that lacks these flags or silently pair with the integrated deployment.

package/dist/index.js

@@ -14605,7 +14605,7 @@ function isRetryableStatus(status2) {
 function requestIdFrom(response, payload) {
   return payload?.requestId ?? response.headers.get("x-request-id") ?? void 0;
 }
-function agentError(response, payload) {
+function agentError(response, payload, retry) {
   const code = payload?.code ?? "AGENT_REQUEST_FAILED";
   const message = payload?.message ?? "La API de Avileo devolvi\xF3 una respuesta inv\xE1lida";
   const options = {
@@ -14613,7 +14613,7 @@ function agentError(response, payload) {
     status: response.status,
     ...payload?.details === void 0 ? {} : { details: payload.details },
     ...requestIdFrom(response, payload) === void 0 ? {} : { requestId: requestIdFrom(response, payload) },
-    retryable: isRetryableStatus(response.status)
+    retryable: retry && isRetryableStatus(response.status)
   };
   if (response.status === 401 || code === "UNAUTHORIZED") {
     return new AgentAuthenticationError(message, options);
@@ -14656,16 +14656,18 @@ var AgentHttpClient = class {
   constructor(config2) {
     this.#apiKey = configuredApiKey(config2);
     this.#baseUrl = (config2.baseUrl ?? AVILEO_AGENT_API_URL).replace(/\/$/, "");
-    this.#fetchImpl = config2.fetch ?? fetch;
+    this.#fetchImpl = config2.fetch ?? ((...args) => fetch(...args));
     this.#timeoutMs = config2.timeoutMs;
   }
   request(path, options = {}) {
-    return this.perform(path, options, options.mutation ? crypto.randomUUID() : void 0);
+    return this.perform(path, options);
   }
-  async perform(path, options, operationId) {
+  async perform(path, options = {}) {
     const url2 = `${this.#baseUrl}${path}`;
     const formData = options.body instanceof FormData ? options.body : void 0;
     const body = options.body === void 0 ? void 0 : formData ?? JSON.stringify(options.body);
+    const idempotencyKey = options.dispatchIdempotency ? crypto.randomUUID() : void 0;
+    const retry = options.retry !== false;
     for (let attempt = 0; attempt < 3; attempt += 1) {
       const abort = createAbortSignal(this.#timeoutMs);
       let response;
@@ -14674,8 +14676,8 @@ var AgentHttpClient = class {
           method: options.method ?? "GET",
           headers: {
             ...formData || options.body === void 0 ? {} : { "content-type": "application/json" },
-            ...operationId ? { "idempotency-key": operationId } : {},
             ...options.approvalId ? { "x-avileo-approval-id": options.approvalId } : {},
+            ...idempotencyKey ? { "idempotency-key": idempotencyKey } : {},
             ...this.#apiKey ? { "x-avileo-agent-key": this.#apiKey } : {}
           },
           body,
@@ -14683,18 +14685,18 @@ var AgentHttpClient = class {
         });
       } catch {
         abort.cancel();
-        if (attempt < 2) {
+        if (retry && attempt < 2) {
           await new Promise((resolve) => setTimeout(resolve, retryDelayMs(attempt)));
           continue;
         }
         throw new AgentNetworkError("No se pudo conectar con la API de Avileo", {
           code: "NETWORK_ERROR",
           status: 0,
-          retryable: true
+          retryable: retry
         });
       }
       abort.cancel();
-      if (isRetryableStatus(response.status) && attempt < 2) {
+      if (retry && isRetryableStatus(response.status) && attempt < 2) {
         await new Promise((resolve) => setTimeout(resolve, retryDelayMs(attempt, response)));
         continue;
       }
@@ -14706,12 +14708,12 @@ var AgentHttpClient = class {
           code: "INVALID_RESPONSE",
           status: response.status,
           requestId: response.headers.get("x-request-id") ?? void 0,
-          retryable: isRetryableStatus(response.status)
+          retryable: retry && isRetryableStatus(response.status)
         });
       }
       const failure = errorPayload(payload);
       if (failure || !response.ok || !successPayload(payload)) {
-        throw agentError(response, failure);
+        throw agentError(response, failure, retry);
       }
       return payload.data;
     }
@@ -15304,6 +15306,14 @@ var AgentPaymentLinkPageSchema = external_exports.object({
   items: external_exports.array(AgentPaymentLinkDtoSchema),
   total: external_exports.number().int().nonnegative()
 }).strict();
+var AGENT_PAYMENT_METHODS = ["yape", "plin", "transferencia"];
+var AgentPaymentMethodSchema = external_exports.enum(AGENT_PAYMENT_METHODS);
+var AgentPaymentMethodDtoSchema = external_exports.object({
+  id: uuidSchema,
+  metodo: AgentPaymentMethodSchema,
+  qrRenderUrl: external_exports.string().nullable(),
+  habilitado: external_exports.boolean()
+}).strict();
 var AGENT_DEVICE_AUTH_STATUSES = ["pending", "approved", "denied", "expired"];
 var AGENT_DEVICE_AUTH_DEFAULT_PERMISSIONS = [
   ...AGENT_KEY_READ_ACTIONS
@@ -15328,7 +15338,8 @@ var AvileoAgentDeviceAuthClient = class {
   async start(input = {}) {
     return this.http.request("/api/v1/agent-auth/device", {
       method: "POST",
-      body: input
+      body: input,
+      retry: false
     });
   }
   async poll(deviceCode) {
@@ -15381,7 +15392,7 @@ var AgentProductsResource = class {
     return this.http.request("/api/v1/agent/catalog/products", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15389,14 +15400,14 @@ var AgentProductsResource = class {
     return this.http.request(`/api/v1/agent/catalog/products/${encodeURIComponent(productId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   deactivate(productId, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/deactivate`,
-      { method: "POST", mutation: true, approvalId }
+      { method: "POST", dispatchIdempotency: true, approvalId }
     );
   }
 };
@@ -15416,27 +15427,27 @@ var AgentVariantsResource = class {
   create(productId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/variants`,
-      { method: "POST", body: input, mutation: true, approvalId }
+      { method: "POST", body: input, dispatchIdempotency: true, approvalId }
     );
   }
   update(variantId, input, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   deactivate(variantId, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/deactivate`,
-      { method: "POST", mutation: true, approvalId }
+      { method: "POST", dispatchIdempotency: true, approvalId }
     );
   }
   reorder(productId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/products/${encodeURIComponent(productId)}/variants/reorder`,
-      { method: "POST", body: input, mutation: true, approvalId }
+      { method: "POST", body: input, dispatchIdempotency: true, approvalId }
     );
   }
 };
@@ -15455,7 +15466,7 @@ var AgentCategoriesResource = class {
     return this.http.request("/api/v1/agent/catalog/categories", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15463,14 +15474,14 @@ var AgentCategoriesResource = class {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   delete(categoryId, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/categories/${encodeURIComponent(categoryId)}`, {
       method: "DELETE",
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15490,7 +15501,7 @@ var AgentTagsResource = class {
     return this.http.request("/api/v1/agent/catalog/tags", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15498,14 +15509,14 @@ var AgentTagsResource = class {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`, {
       method: "PATCH",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
   delete(tagId, approvalId) {
     return this.http.request(`/api/v1/agent/catalog/tags/${encodeURIComponent(tagId)}`, {
       method: "DELETE",
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15527,7 +15538,7 @@ var AgentAssetsResource = class {
     return this.http.request("/api/v1/agent/catalog/assets/upload", {
       method: "POST",
       body,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15535,7 +15546,7 @@ var AgentAssetsResource = class {
     return this.http.request("/api/v1/agent/catalog/assets/import", {
       method: "POST",
       body: input,
-      mutation: true,
+      dispatchIdempotency: true,
       approvalId
     });
   }
@@ -15558,13 +15569,13 @@ var AgentInventoryResource = class {
   adjust(variantId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory/adjust`,
-      { method: "POST", body: input, mutation: true, approvalId }
+      { method: "POST", body: input, dispatchIdempotency: true, approvalId }
     );
   }
   set(variantId, input, approvalId) {
     return this.http.request(
       `/api/v1/agent/catalog/variants/${encodeURIComponent(variantId)}/inventory`,
-      { method: "PUT", body: input, mutation: true, approvalId }
+      { method: "PUT", body: input, dispatchIdempotency: true, approvalId }
     );
   }
 };
@@ -15577,7 +15588,7 @@ var AgentImportsResource = class {
     return this.http.request("/api/v1/agent/catalog/imports/preview", {
       method: "POST",
       body: input,
-      mutation: true
+      dispatchIdempotency: true
     });
   }
   apply(importId, approvalId) {
@@ -15585,7 +15596,7 @@ var AgentImportsResource = class {
       `/api/v1/agent/catalog/imports/${encodeURIComponent(importId)}/apply`,
       {
         method: "POST",
-        mutation: true,
+        dispatchIdempotency: true,
         approvalId
       }
     );
@@ -15602,8 +15613,7 @@ var AgentOperationsResource = class {
   propose(input) {
     return this.http.request("/api/v1/agent/operations", {
       method: "POST",
-      body: input,
-      mutation: true
+      body: input
     });
   }
   proposeClientKey(name) {
@@ -15618,11 +15628,45 @@ var AgentOperationsResource = class {
   apply(operationId) {
     return this.http.request(`/api/v1/agent/operations/${encodeURIComponent(operationId)}/apply`, {
       method: "POST",
-      mutation: true,
       approvalId: operationId
     });
   }
 };
+var AgentPaymentMethodListSchema = external_exports.array(AgentPaymentMethodDtoSchema);
+var AgentPaymentMethodsResource = class {
+  constructor(http) {
+    this.http = http;
+  }
+  http;
+  /** Lists the payment methods with their QR render info. */
+  list() {
+    return this.http.request("/api/v1/agent/payment-methods").then((response) => AgentPaymentMethodListSchema.parse(response));
+  }
+};
+var AgentPaymentLinkPublicMethodSchema = external_exports.object({
+  phone: external_exports.string().optional(),
+  accountNumber: external_exports.string().optional(),
+  accountName: external_exports.string(),
+  bank: external_exports.string().optional(),
+  cci: external_exports.string().optional(),
+  qrUrl: external_exports.string().nullable()
+}).strict();
+var AgentPaymentLinkPublicViewSchema = external_exports.object({
+  businessName: external_exports.string(),
+  amountMinor: external_exports.number().int().positive(),
+  currency: external_exports.string().length(3),
+  concept: external_exports.string().nullable(),
+  expectedMethod: AgentPaymentLinkExpectedMethodSchema,
+  status: AgentPaymentLinkStatusSchema,
+  methods: external_exports.object({
+    yape: AgentPaymentLinkPublicMethodSchema.optional(),
+    plin: AgentPaymentLinkPublicMethodSchema.optional(),
+    transferencia: AgentPaymentLinkPublicMethodSchema.optional()
+  }).strict(),
+  expiresAt: external_exports.string(),
+  proofAttempts: external_exports.number().int().nonnegative(),
+  maxProofAttempts: external_exports.number().int().positive()
+}).strict();
 var AgentPaymentLinksResource = class {
   constructor(http) {
     this.http = http;
@@ -15631,15 +15675,33 @@ var AgentPaymentLinksResource = class {
   /**
    * Creates a payment link. `amount` is in soles (major units); the backend
    * converts it to minor units — never convert it here. The URL is only
-   * non-null for the initial create response.
+   * non-null for the initial create response. Automatic retries require an
+   * explicit idempotencyKey; a replay can only return `url: null`.
    */
   create(input) {
     return this.http.request("/api/v1/agent/payment-links", {
       method: "POST",
       body: input,
-      mutation: true
+      retry: Boolean(input.idempotencyKey?.trim())
     }).then((response) => AgentCreatedPaymentLinkDtoSchema.parse(response));
   }
+  /**
+   * Fetches the public payer view of a link by its plaintext token (no agent
+   * credential required). Use it right after `create` to render the QR and
+   * per-method instructions in your own UI instead of redirecting the payer
+   * to the hosted page: `methods.<yape|plin|transferencia>.qrUrl` is a
+   * backend-resolved render URL ready for `<img src>`.
+   */
+  getPublicView(token) {
+    const trimmed = token.trim();
+    if (trimmed.length < 20 || trimmed.length > 128 || !/^lnk_[0-9A-Za-z]+$/.test(trimmed)) {
+      throw new AgentValidationError("Token de link de pago inv\xE1lido", {
+        code: "INVALID_PAYMENT_LINK_TOKEN",
+        status: 0
+      });
+    }
+    return this.http.request(`/api/v1/public/pagar/${encodeURIComponent(trimmed)}`).then((response) => AgentPaymentLinkPublicViewSchema.parse(response));
+  }
   /** Fetches a persisted link; `url` is always `null`. */
   get(paymentLinkId) {
     return this.http.request(`/api/v1/agent/payment-links/${encodeURIComponent(paymentLinkId)}`).then((response) => AgentPaymentLinkDtoSchema.parse(response));
@@ -15661,7 +15723,8 @@ function createAvileoAgent(config2) {
     assets: new AgentAssetsResource(http),
     inventory: new AgentInventoryResource(http),
     imports: new AgentImportsResource(http),
-    paymentLinks: new AgentPaymentLinksResource(http)
+    paymentLinks: new AgentPaymentLinksResource(http),
+    paymentMethods: new AgentPaymentMethodsResource(http)
   };
 }
 
@@ -16508,7 +16571,29 @@ async function login(options) {
   const expiresAt = Date.parse(start.expiresAt);
   const deadline = Number.isFinite(expiresAt) ? expiresAt : Date.now() + 10 * 60 * 1e3;
   while (Date.now() < deadline) {
-    const result = await deviceAuth.poll(start.deviceCode);
+    let result;
+    try {
+      result = await deviceAuth.poll(start.deviceCode);
+    } catch (error51) {
+      if (error51 instanceof AgentError && error51.code === "AGENT_DEVICE_AUTH_CONSUMED") {
+        throw new AgentConflictError(
+          `${error51.message} La clave solo se entrega una vez y no se puede recuperar. Revoca la clave de este intento en Mis agentes y ejecuta \xABavileo auth login\xBB nuevamente. Tu credencial local anterior no se modific\xF3.`,
+          {
+            code: error51.code,
+            status: error51.status,
+            details: error51.details,
+            requestId: error51.requestId
+          }
+        );
+      }
+      if (error51 instanceof AgentError && error51.code === "NETWORK_ERROR") {
+        throw new CliProtocolError(
+          "CLI_AUTH_DELIVERY_UNCERTAIN",
+          "No se pudo confirmar la entrega de la clave. Revisa Mis agentes y revoca la clave de este intento si aparece; luego ejecuta \xABavileo auth login\xBB nuevamente. Tu credencial local anterior no se modific\xF3."
+        );
+      }
+      throw error51;
+    }
     if (result.status === "pending") {
       const remaining = Math.max(0, deadline - Date.now());
       await sleep(Math.min(Math.max(250, start.pollInterval * 1e3), remaining));
@@ -16521,7 +16606,7 @@ async function login(options) {
     if (!result.agentKey || !result.keyId || !result.businessId) {
       throw new CliProtocolError(
         "CLI_AUTH_ERROR",
-        "La autorizaci\xF3n aprobada no devolvi\xF3 una credencial v\xE1lida"
+        "La autorizaci\xF3n aprobada no devolvi\xF3 una credencial v\xE1lida. Revoca la clave de este intento en Mis agentes y ejecuta \xABavileo auth login\xBB nuevamente. Tu credencial local anterior no se modific\xF3."
       );
     }
     saveLocalCredential({ apiKey: result.agentKey, baseUrl }, options.env);