@withandeo/cli 0.11.0 → 0.12.0

package/dist/main.js

@@ -7,6 +7,7 @@ import { createHash } from "node:crypto";
 import { AgentApiClient } from "./api.js";
 import { CLI_AUTH_SCHEMA, DEFAULT_AUTH_PROFILE, createDefaultAuthStore, validateAuthProfile, validateNamedAuthProfile, } from "./auth-store.js";
 import { labelLocalArtifact, verifyArtifact } from "./artifact.js";
+import { packageAppWorkflows } from "./workflow-package.js";
 import { BUILD_ENVELOPE_FILENAME, CLI_CONFIG_SCHEMA, CLI_LINK_SCHEMA, } from "./contracts.js";
 import { CliApiError, CliError } from "./errors.js";
 import { loadProjectContext, normalizeApiUrl, pathExists, readBoundedFile, readOptionalToken, requiredProjectId, resolveArtifactDirectory, safeArtifactPath, writeProjectLink, } from "./files.js";
@@ -90,6 +91,8 @@ export async function runCli(argv, overrides = {}) {
     }
 }
 async function execute(topic, options, cwd, runtime) {
+    if (topic.startsWith("workflows "))
+        return { value: await workflowCommand(topic.slice(10), cwd, options, runtime) };
     switch (topic) {
         case "init":
             return { value: await initializeStarter({
@@ -200,6 +203,52 @@ async function execute(topic, options, cwd, runtime) {
             throw new CliError("command_unknown", `Unknown command: ${topic}.`, "tender-accounts --help");
     }
 }
+async function workflowCommand(action, cwd, options, runtime) {
+    const context = await optionalContext(cwd);
+    const { client, projectId } = await sourceProjectAccess(cwd, context?.link ?? null, options, runtime, false);
+    const query = Object.fromEntries(["environment", "limit", "offset", "cursor"].flatMap(key => options.flags.has(key) ? [[key, options.flags.get(key)]] : []));
+    if (action === "list")
+        return client.appWorkflows(projectId, [], { query });
+    if (action === "preview-services")
+        return client.appWorkflows(projectId, ["preview-services"]);
+    if (action === "preview-service-set")
+        return client.appWorkflows(projectId, ["preview-services"], { method: "PUT", body: {
+                targetProjectId: requiredFlag(options, "target-project"), previewAppId: requiredFlag(options, "preview") === "none" ? null : requiredFlag(options, "preview"),
+            } });
+    const scope = requiredFlag(options, "scope");
+    if (action === "runs")
+        return client.appWorkflows(projectId, [scope, "runs"], { query });
+    const id = requiredFlag(options, "run");
+    if (action === "acknowledge") {
+        if (options.flags.get("confirm") !== id)
+            throw new CliError("confirmation_required", "Use --confirm RUN_ID after inspecting history. Acknowledgment does not resend or confirm event delivery.");
+        return client.appWorkflows(projectId, [scope, "runs", id, "acknowledge"], { method: "POST", body: { confirm: true, controlId: requiredFlag(options, "control") } });
+    }
+    if (action === "status")
+        return client.appWorkflows(projectId, [scope, "runs", id]);
+    if (["history", "diagnostics", "export"].includes(action))
+        return client.appWorkflows(projectId, [scope, "runs", id, action], { query });
+    let payload = {};
+    if (options.flags.has("input-file")) {
+        try {
+            payload = JSON.parse(new TextDecoder("utf8", { fatal: true }).decode(await readBoundedFile(resolve(cwd, requiredFlag(options, "input-file")), 64 * 1024)));
+        }
+        catch {
+            throw new CliError("workflow_input_invalid", "The input file must contain valid JSON of at most 64 KiB. Do not put API credentials in workflow input.");
+        }
+    }
+    if (action === "start")
+        return client.appWorkflows(projectId, [scope, "runs"], { method: "POST", body: { id, params: payload } });
+    if (action === "event")
+        return client.appWorkflows(projectId, [scope, "runs", id, "sendEvent"], { method: "POST", body: { type: requiredFlag(options, "type"), payload } });
+    if (["pause", "resume", "terminate", "restart"].includes(action)) {
+        if (["terminate", "restart"].includes(action) && options.flags.get("confirm") !== id) {
+            throw new CliError("confirmation_required", "Confirm the exact run with --confirm RUN_ID. Restart can repeat business operations.");
+        }
+        return client.appWorkflows(projectId, [scope, "runs", id, action], { method: "POST", body: { confirm: true } });
+    }
+    throw new CliError("command_unknown", "Unknown workflow command.", "andeo workflows --help");
+}
 async function sourceStatus(cwd, options, runtime) {
     const context = await optionalContext(cwd);
     const { client, projectId } = await sourceProjectAccess(cwd, context?.link ?? null, options, runtime, false);
@@ -1432,6 +1481,20 @@ async function doctor(cwd, options, runtime) {
 }
 async function runDev(cwd, options, runtime) {
     const context = await loadProjectContext(cwd);
+    const { readWorkflowConfig } = await import("./workflow-config.js");
+    if ((await readWorkflowConfig(context.root, runtime.environment.WRANGLER_ENV))?.declarations.length) {
+        await buildProject(cwd, options, runtime);
+        const { startWorkflowDev } = await import("./workflow-dev.js");
+        const local = await startWorkflowDev(context.root, resolveArtifactDirectory(context));
+        runtime.stderr.write("Andeo workflow development: http://127.0.0.1:8787 (local execution, not hosted authorization). Restart after rebuilding changes.\n");
+        try {
+            await new Promise(resolve => { const remove = runtime.onInterrupt(() => { remove(); resolve(); }); });
+        }
+        finally {
+            await local.dispose();
+        }
+        return { value: { status: "stopped", workflowExecution: "local" } };
+    }
     if (!context.config.commands.dev) {
         throw new CliError("dev_command_missing", "This app does not declare commands.dev in tender-accounts.json.");
     }
@@ -1460,6 +1523,7 @@ async function buildProject(cwd, options, runtime) {
     const source = await sourceState(context.root, runtime);
     await runBuildStage(cwd, options, runtime, "check", { TENDER_SOURCE_REVISION: source.revision });
     await runBuildStage(cwd, options, runtime, "package", { TENDER_SOURCE_REVISION: source.revision });
+    await packageAppWorkflows(context.root, resolveArtifactDirectory(context), runtime.environment.WRANGLER_ENV);
     let artifact = await verifyArtifact(resolveArtifactDirectory(context));
     artifact = await labelLocalArtifact(artifact, { gitRevision: source.revision, dirty: source.dirty });
     return buildSummary(artifact, source.dirty);
@@ -1529,6 +1593,7 @@ async function preview(cwd, options, runtime, uploadOnly = false) {
         previewUrl: session.url,
         previewGrantId: session.grantId,
         previewExpiresAt: session.expiresAt,
+        sourceVerification: session.sourceVerification,
         from: session.from,
         entry: session.entry,
         selection: session.selection,
@@ -1574,8 +1639,10 @@ async function previewOpen(cwd, options, runtime) {
 }
 async function deliveryRetry(cwd, options, runtime) {
     const context = await loadProjectContext(cwd);
+    if (options.booleans.has("reauthorize") && !context.link)
+        throw new CliError("project_not_linked", "Link the exact app before reauthorizing its preview.", "andeo link --json");
     const { client } = await authenticatedClient(cwd, context.link, options, runtime);
-    return await client.retryDelivery(requiredDeliveryId(options));
+    return await client.retryDelivery(requiredDeliveryId(options), options.booleans.has("reauthorize") ? context.link.projectId : undefined);
 }
 async function authenticatedClient(cwd, link, options, runtime) {
     let apiUrl = selectedApiUrl(options, link, runtime.environment, runtime.defaultApiUrl);
@@ -1902,7 +1969,7 @@ function commandTopic(argv) {
         const topic = `preview ${argv[1]}`;
         return argv.includes("--help") || argv.includes("-h") ? { topic: "help", values: [topic] } : { topic, values: argv.slice(2) };
     }
-    if (parent === "auth" || parent === "delivery" || parent === "source" || parent === "skill" || parent === "config" || parent === "production") {
+    if (parent === "auth" || parent === "delivery" || parent === "source" || parent === "skill" || parent === "config" || parent === "production" || parent === "workflows") {
         const child = argv[1];
         if (!child || child.startsWith("--"))
             return { topic: "help", values: [parent] };
@@ -1932,7 +1999,7 @@ function parseOptions(values) {
     const booleans = new Set();
     const positionals = [];
     const booleanNames = new Set([
-        "json", "token-stdin", "dry-run", "no-wait", "force",
+        "json", "token-stdin", "dry-run", "no-wait", "force", "reauthorize",
         "device", "wait", "no-open", "local", "all", "production",
     ]);
     for (let index = 0; index < values.length; index += 1) {
@@ -1965,6 +2032,21 @@ function assertAllowedOptions(topic, options) {
     const common = ["cwd", "json"];
     const authentication = ["api-url", "token-stdin", "profile"];
     const allowed = {
+        "workflows list": [...common, ...authentication, "project", "environment", "limit", "offset"],
+        "workflows runs": [...common, ...authentication, "project", "scope", "limit", "offset"],
+        "workflows status": [...common, ...authentication, "project", "scope", "run"],
+        "workflows history": [...common, ...authentication, "project", "scope", "run", "cursor"],
+        "workflows diagnostics": [...common, ...authentication, "project", "scope", "run", "limit", "offset"],
+        "workflows export": [...common, ...authentication, "project", "scope", "run", "limit", "offset"],
+        "workflows start": [...common, ...authentication, "project", "scope", "run", "input-file"],
+        "workflows event": [...common, ...authentication, "project", "scope", "run", "input-file", "type"],
+        "workflows pause": [...common, ...authentication, "project", "scope", "run"],
+        "workflows resume": [...common, ...authentication, "project", "scope", "run"],
+        "workflows restart": [...common, ...authentication, "project", "scope", "run", "confirm"],
+        "workflows acknowledge": [...common, ...authentication, "project", "scope", "run", "control", "confirm"],
+        "workflows terminate": [...common, ...authentication, "project", "scope", "run", "confirm"],
+        "workflows preview-services": [...common, ...authentication, "project"],
+        "workflows preview-service-set": [...common, ...authentication, "project", "target-project", "preview"],
         init: [...common, "name", "slug", "directory", "template", "dry-run"],
         "config example": common,
         "skill print": common,
@@ -2045,7 +2127,7 @@ function assertAllowedOptions(topic, options) {
             "sampling-rate",
         ],
         "delivery status": [...common, ...authentication, "delivery"],
-        "delivery retry": [...common, ...authentication, "delivery"],
+        "delivery retry": [...common, ...authentication, "delivery", "reauthorize"],
     };
     const accepted = new Set(allowed[topic] ?? common);
     const provided = [...options.flags.keys(), ...options.booleans];
@@ -2146,6 +2228,18 @@ function writeOutput(value, options, runtime) {
     runtime.stdout.write(`${JSON.stringify(value, null, 2)}\n`);
 }
 function helpText(topic) {
+    if (topic === "workflows" || topic?.startsWith("workflows "))
+        return `Usage: andeo workflows <list|runs|status|start|event|pause|resume|terminate|restart|acknowledge|history|diagnostics|export|preview-services|preview-service-set> [options]
+
+All commands support --project PROJECT_ID and --json. List scopes with workflows list [--environment preview|production].
+Runs: --scope SCOPE_ID. Inspect/control one run: --scope SCOPE_ID --run APP_LOCAL_ID.
+Start: --input-file params.json (optional). Event: --type NAME [--input-file event.json].
+Restart and terminate require --confirm APP_LOCAL_ID. Mutations are never automatically retried.
+Acknowledge an uncertain event with --control CONTROL_ID --confirm APP_LOCAL_ID after inspection; this never resends or confirms delivery.
+History resumes with --cursor N; lists/diagnostics/export support --limit 1..100 and --offset N.
+Choose background preview routing with preview-service-set --target-project PROJECT_ID --preview APP_ID|none.
+Only non-secret JSON belongs in workflow params/events. Keep credentials in the connected service's native secrets.
+Account workflow entitlement is required for new starts. Run status is authoritative; list results are a timestamped projection.`;
     const topics = {
         init: "Usage: andeo init --name NAME [--slug SLUG] [--directory PATH] [--template shopify-customer-account] [--dry-run] [--json]\n\nCreate a new merchant-owned Shopify gateway and React portal in an empty directory.\n\nExamples:\n  andeo init --name \"Acme account\" --directory ./acme-account\n  andeo init --name \"Acme account\" --directory ./acme-account --dry-run --json",
         auth: "Usage: andeo auth <login|create|activate|deactivate|status|list|delete|logout> [options]",
@@ -2194,7 +2288,7 @@ function helpText(topic) {
         "delivery status": "Usage: andeo delivery status --delivery dly_... [--json]\n\nRead one developer preview delivery. Do not pass a dwf_ production workflow ID.",
         "preview entries": "Usage: andeo preview entries [--json]\n\nList eligible published entry apps and the selected default for this linked app.",
         "preview open": "Usage: andeo preview open --from dly_...|sbl_... [--through PROJECT_ID] [--return-path /account] [--json]\n\nOpen the exact deployed preview without rebuilding or uploading. Private apps open through their published connections. Opening again renews access.",
-        "delivery retry": "Usage: andeo delivery retry --delivery dly_... [--json]\n\nRetry one requested or failed developer preview idempotently. A dwf_ production workflow is resumed by a merchant administrator from Activity.",
+        "delivery retry": "Usage: andeo delivery retry --delivery dly_... [--reauthorize] [--json]\n\nRetry one requested or failed developer preview idempotently. --reauthorize explicitly authorizes a legacy preview for the same owner and linked project using the current CLI login; it cannot replace another login's recorded grant or publish production. Normal credential refresh needs no flag. A dwf_ production workflow is resumed by a merchant administrator from Activity.",
         skill: "Usage: andeo skill <print|install> [options]",
         "skill print": "Usage: andeo skill print [--json]",
         "skill install": "Usage: andeo skill install [--agent codex|claude] [--directory PATH] [--force] [--json]\n\nInstall globally for the current user by default: ~/.agents/skills for Codex or ~/.claude/skills for Claude. --directory is an explicit custom or repository-local override.",
@@ -2203,7 +2297,7 @@ function helpText(topic) {
     };
     if (topic && topics[topic])
         return topics[topic];
-    return `Andeo merchant developer CLI ${CLI_VERSION}\n\nCommands:\n  init              Create a new Shopify account starter\n  auth login        Create or refresh the default login\n  auth create       Create or re-authorize a named login\n  auth activate     Bind a named login to a directory tree\n  auth deactivate   Remove an exact directory binding\n  auth status       Validate one login or scoped credential\n  auth list         List local login profiles and bindings\n  auth delete       Revoke one named login\n  auth logout       Revoke the default or every login\n  link              Link this checkout to one permitted project\n  doctor            Check developer readiness\n  dev               Run the project-owned local dev command\n  check             Run project validation\n  build             Package and verify a portable artifact\n  upload            Retain a build for administrator publication\n  preview           Build and deploy an exact preview\n  preview entries   List eligible connected entry apps\n  preview open      Reopen an exact deployed preview\n  source status     Inspect Andeo-managed Git and recent builds\n  source branches   List exact managed branches and default policy\n  source compare    Compare two managed branches\n  source connect    Connect this linked project to managed Git\n  source pull       Clone or fast-forward the exact connected repository\n  source token      Issue a short-lived repository credential\n  source push       Push the exact commit without persisting a token\n  source promote    Fast-forward the default after successful preview checks\n  source history    Run guarded, archived source-history migration\n  tail              Stream logs for one exact linked project\n  delivery status   Read preview workflow state\n  delivery retry    Retry a failed preview workflow\n  skill install     Install the Andeo agent skill\n  config example    Print the project configuration contract\n\nThere is intentionally no production publish command.\nRun andeo <command> --help for examples.`;
+    return `Andeo merchant developer CLI ${CLI_VERSION}\n\nCommands:\n  init              Create a new Shopify account starter\n  auth login        Create or refresh the default login\n  auth create       Create or re-authorize a named login\n  auth activate     Bind a named login to a directory tree\n  auth deactivate   Remove an exact directory binding\n  auth status       Validate one login or scoped credential\n  auth list         List local login profiles and bindings\n  auth delete       Revoke one named login\n  auth logout       Revoke the default or every login\n  link              Link this checkout to one permitted project\n  doctor            Check developer readiness\n  dev               Run the project-owned local dev command\n  check             Run project validation\n  build             Package and verify a portable artifact\n  upload            Retain a build for administrator publication\n  preview           Build and deploy an exact preview\n  preview entries   List eligible connected entry apps\n  preview open      Reopen an exact deployed preview\n  source status     Inspect Andeo-managed Git and recent builds\n  source branches   List exact managed branches and default policy\n  source compare    Compare two managed branches\n  source connect    Connect this linked project to managed Git\n  source pull       Clone or fast-forward the exact connected repository\n  source token      Issue a short-lived repository credential\n  source push       Push the exact commit without persisting a token\n  source promote    Fast-forward the default after successful preview checks\n  source history    Run guarded, archived source-history migration\n  workflows         Inspect and control app-defined background runs\n  tail              Stream logs for one exact linked project\n  delivery status   Read preview workflow state\n  delivery retry    Retry a failed preview workflow\n  skill install     Install the Andeo agent skill\n  config example    Print the project configuration contract\n\nThere is intentionally no production publish command.\nRun andeo <command> --help for examples.`;
 }
 function normalizeError(error) {
     if (error instanceof CliApiError) {