@withandeo/cli 0.16.0 → 0.18.0

package/skill/tender-accounts/references/email.md

@@ -1,27 +1,27 @@
 # Email identities and prepared test accounts
 
-Use `andeo capabilities --project prj_... --json` to inspect `email.enabled` and `email.permissions`. Email is receive-only and belongs to one tenant/project. Developer access is required even for reading. A tenant member and an authorized agent use the same inboxes through the admin Email tab or CLI.
+Use `andeo email capabilities --json` to inspect `enabled`, `tenantId`, and `permissions`. Email is receive-only and belongs to the merchant, shared across all its apps. Developer access to any app in that merchant grants access to all its inboxes, even for an agent scoped to only one app. Viewers cannot read mail. A tenant member and an authorized agent use the same inboxes through the merchant Email section or CLI. Select the merchant with its login `--profile`; optional `--tenant tn_...` checks that the profile belongs to the intended merchant.
 
 ## Reuse an identity prepared by a person
 
 The user can create a persistent inbox, register the external account manually, and prepare its orders or other test state once. Your task is to reuse that account:
 
 ```sh
-andeo email list --project prj_... --json
-andeo email cursor --project prj_... --inbox inbox_... --json
+andeo email list --json
+andeo email cursor --inbox inbox_... --json
 # Now trigger the authorized login or verification email in the external app.
-andeo email wait --project prj_... --inbox inbox_... --after 'inbox_...:0' --timeout 120s --json
+andeo email wait --inbox inbox_... --after 'inbox_...:0' --timeout 120s --json
 ```
 
 Use the actual cursor returned before triggering the email. A message arriving before `wait` starts is still found. `status=timeout` preserves the cursor for another wait. Capture a new cursor for a new login attempt, so an older code is not mistaken for the new one.
 
-Use the supplied inbox ID/address. Labels help discovery but are not unique; disambiguate existing matches instead of picking arbitrarily or creating a replacement. The handoff should identify the project, inbox, external application, and scenario. Inbox access does not create or reset the external account, and does not imply permission to perform unrelated actions.
+Use the supplied inbox ID/address. Labels help discovery but are not unique; disambiguate existing matches instead of picking arbitrarily or creating a replacement. The handoff should identify the merchant, inbox, external application, and scenario. Inbox access does not create or reset the external account, and does not imply permission to perform unrelated actions.
 
 ## Create an identity when requested
 
 ```sh
-andeo email create --project prj_... --name shop-returning-customer --json
-andeo email create --project prj_... --name signup-test --expires-in 1h --json
+andeo email create --name shop-returning-customer --json
+andeo email create --name signup-test --expires-in 1h --json
 ```
 
 Omitting expiration creates a persistent inbox. Names contain 1–47 lowercase letters, digits, or hyphens, starting with a letter or digit. Andeo assigns the full address, including a unique suffix on `@andeo.ai`. You cannot choose an exact global address. Save the returned inbox ID/address in the task handoff. Creating the same label again creates another identity.
@@ -29,9 +29,9 @@ Omitting expiration creates a persistent inbox. Names contain 1–47 lowercase l
 ## Find and read mail
 
 ```sh
-andeo email messages --project prj_... --inbox inbox_... --limit 20 --json
-andeo email messages --project prj_... --inbox inbox_... --from sender@example.com --subject verification --json
-andeo email read --project prj_... --inbox inbox_... --message mail_... --json
+andeo email messages --inbox inbox_... --limit 20 --json
+andeo email messages --inbox inbox_... --from sender@example.com --subject verification --json
+andeo email read --inbox inbox_... --message mail_... --json
 ```
 
 `messages` returns summaries oldest first, with `hasMore` and `cursor`; pass that cursor as `--after` for the next page. Maximum page size is 50. Both `messages` and `wait` accept exact-sender `--from` and literal-substring `--subject`; matching folds ASCII case and both filters must match when supplied. Sender strings are not proof of authenticity. No matches can mean the email has not arrived, the filters differ, or messages have expired; inspect summaries and refresh rather than creating another inbox.
@@ -41,11 +41,11 @@ Reading does not consume mail, so agents can share an inbox concurrently. Bodies
 ## Lifecycle and scope
 
 ```sh
-andeo email retire --project prj_... --inbox inbox_... --json
+andeo email retire --inbox inbox_... --json
 ```
 
 Retire only when the task calls for ending that identity. Retirement immediately blocks receipt and reading, is safe to repeat, and cannot be undone. The address stays reserved. It does not delete the external account. Preserve persistent test personas after a test unless asked to retire them.
 
-There are at most 25 active inboxes per project. Temporary lifetimes range from 1 minute to 7 days. Message retention is 24 hours even for persistent inboxes; expired/retired inboxes return `email_inbox_inactive`. Waits are bounded to 10 minutes. Attachments and outbound sending are not supported.
+There are at most 25 active inboxes per merchant. Temporary lifetimes range from 1 minute to 7 days. Message retention is 24 hours even for persistent inboxes; expired/retired inboxes return `email_inbox_inactive`. Waits are bounded to 10 minutes. Attachments and outbound sending are not supported.
 
-Use [authentication](authentication.md) for profile selection and project access. All email commands accept `--profile`, `--project`, and `--json`; use `andeo email --help` for syntax. No MCP setup is required.
+Use [authentication](authentication.md) for profile selection and merchant access. All email commands accept `--profile`, `--tenant`, and `--json`; use `andeo email --help` for syntax. No app selection or MCP setup is required. Legacy `--project` is accepted as an access check, not an inbox filter. Existing addresses and messages remain unchanged when moving from app ownership to merchant ownership.

package/skill/tender-accounts/references/skills.md

@@ -0,0 +1,28 @@
+# Authenticated skills
+
+Andeo distributes rolling implementation guidance through the authenticated CLI. The CLI is the access boundary: catalog and file reads use the current Andeo credential against the agent API, and the API reads private objects without returning an R2 URL.
+
+## Discover and read
+
+```sh
+andeo skills list --json
+andeo skills get SKILL_ID
+andeo skills file SKILL_ID --path RELATIVE_PATH
+```
+
+Use `--profile NAME` when the current directory does not select the intended login. These commands also accept `--api-url` and `--token-stdin` under the normal CLI authentication contract.
+
+Plain output from `get` and `file` is the requested Markdown or YAML. `--json` returns the catalog revision, skill digest, file inventory, selected path, and content for agents that need a structured response.
+
+Reads are session-only. The CLI does not install these skills in a repository or global agent directory. Once content is printed, the caller can retain it, so authentication controls retrieval rather than revocation of material already read.
+
+## Initial catalog
+
+| Skill | Use it for |
+| --- | --- |
+| `recharge-client` | Calling Recharge through the official Storefront client while preserving the portal and transparent gateway boundary. |
+| `recharge-customer-operations` | Subscription, charge, bundle, cancellation, reactivation, gifting, profile, benefit, and verification workflows. |
+| `shopify-customer-account` | Customer Account API work and routing into Shopify's maintained AI Toolkit skills. |
+| `guardrailed-design-system` | Component-first React design systems with semantic tokens, typed components, Storybook, and enforceable boundaries. |
+
+Read the entrypoint first. Use `skills file` only for references linked by that entrypoint and relevant to the current work.