@withandeo/cli 0.19.18 → 0.19.20

package/dist/main.js

@@ -5,6 +5,7 @@ import { lstat, mkdtemp, readFile, readdir, realpath, rm } from "node:fs/promise
 import { basename, join, relative, resolve, sep } from "node:path";
 import { homedir, hostname, tmpdir } from "node:os";
 import { createHash } from "node:crypto";
+import { readFeedbackInput } from "./feedback.js";
 import { AgentApiClient } from "./api.js";
 import { emailDuration, waitForEmail } from "./email.js";
 import { CLI_AUTH_SCHEMA, DEFAULT_AUTH_PROFILE, createDefaultAuthStore, validateAuthProfile, validateNamedAuthProfile, } from "./auth-store.js";
@@ -227,6 +228,8 @@ async function execute(topic, options, cwd, runtime) {
             return { value: await linkProject(cwd, options, runtime) };
         case "doctor":
             return await doctor(cwd, options, runtime);
+        case "feedback":
+            return { value: await sendFeedback(cwd, options, runtime) };
         case "preview": {
             const value = await preview(cwd, options, runtime);
             return { value, exitCode: value.status === "timeout" ? 3 : 0 };
@@ -236,6 +239,7 @@ async function execute(topic, options, cwd, runtime) {
         case "preview open":
             return { value: await previewOpen(cwd, options, runtime) };
         case "production releases":
+        case "production verify":
         case "production rollback": {
             const context = await optionalContext(cwd);
             const { client, projectId } = await sourceProjectAccess(cwd, context?.link ?? null, options, runtime, false);
@@ -244,12 +248,29 @@ async function execute(topic, options, cwd, runtime) {
             const revision = Number(requiredFlag(options, "expected-revision"));
             if (!Number.isSafeInteger(revision) || revision < 1)
                 throw new CliError("argument_invalid", "--expected-revision must be a positive integer.");
+            if (topic === "production verify") {
+                const value = await client.verifyProduction(projectId, requiredFlag(options, "activation"), {
+                    compositionId: requiredFlag(options, "composition"), expectedRuntimeRevision: revision,
+                });
+                return { value, exitCode: value.status === "verified" ? 0 : 2 };
+            }
             return { value: await client.rollbackProduction(projectId, { productionReleaseId: requiredFlag(options, "release"),
                     expectedProductionReleaseId: requiredFlag(options, "expected-release"), expectedRuntimeRevision: revision,
                     idempotencyKey: requiredFlag(options, "idempotency-key") }) };
         }
         case "source status":
             return { value: await sourceStatus(cwd, options, runtime) };
+        case "source continue": {
+            const change = options.flags.get("change"), work = options.flags.get("work");
+            if (Boolean(change) === Boolean(work) || change && !/^scr_[A-Za-z0-9_]+$/u.test(change) || work && !/^asw_[A-Za-z0-9_]+$/u.test(work))
+                throw new CliError("source_continuation_required", "Choose exactly one existing --change scr_... or --work asw_... to continue.");
+            const client = await cloudAgentClient(runtime.environment, cwd, runtime.fetcher, { tokenStdin: options.booleans.has("token-stdin"), profile: options.flags.has("profile"),
+                apiUrl: selectedApiUrl(options, null, runtime.environment, runtime.defaultApiUrl), continuation: change ? { continueChangeId: change } : { continueWorkId: work } });
+            if (!client)
+                throw new CliError("cloud_agent_required", "Source continuation requires Cloud run authentication.");
+            return { value: { status: "continued", runId: client.runId, runExpiresAt: client.runExpiresAt, resources: client.resources,
+                    ...(change ? { changeId: change } : {}), next: change ? `andeo source change show --change ${change} --json` : "andeo source status --json" } };
+        }
         case "source branches":
             return { value: await sourceBranches(cwd, options, runtime) };
         case "source log":
@@ -1544,9 +1565,12 @@ async function sourceChangeCreate(cwd, options, runtime) {
             projectId: access.projectId,
             repositoryId: access.repository.id,
             changeRequest: created.changeRequest,
+            pendingReason: created.changeRequest.status === "checks_pending" && !created.changeRequest.buildId ? "exact_preview_missing" : null,
             next: created.changeRequest.status === "ready_for_review"
                 ? "A merchant administrator can open the exact preview and approve this change in Andeo."
-                : "Wait for Andeo to validate and seal the exact preview, then inspect this change again.",
+                : created.changeRequest.status === "checks_pending" && !created.changeRequest.buildId
+                    ? `Run andeo preview --json for commit ${created.changeRequest.headSha}; if the run expired, first run andeo source continue --change ${created.changeRequest.id} --json.`
+                    : "Wait for Andeo to validate and seal the exact preview, then inspect this change again.",
         };
     });
 }
@@ -2310,6 +2334,21 @@ async function deliveryRetry(cwd, options, runtime) {
     const { client } = await authenticatedClient(cwd, context.link, options, runtime);
     return await client.retryDelivery(requiredDeliveryId(options), options.booleans.has("reauthorize") ? context.link.projectId : undefined);
 }
+async function sendFeedback(cwd, options, runtime) {
+    const bodyFile = requiredFlag(options, "body-file");
+    if (bodyFile === "-" && options.booleans.has("token-stdin")) {
+        throw new CliError("feedback_stdin_conflict", "--body-file - cannot be combined with --token-stdin.");
+    }
+    const input = await readFeedbackInput({ title: requiredFlag(options, "title"), category: options.flags.get("category") ?? "other", bodyFile }, cwd, runtime.stdin);
+    const context = await optionalContext(cwd);
+    const explicitProject = options.flags.get("project");
+    const projectId = explicitProject ? requiredProjectId(explicitProject) : context?.link?.projectId;
+    if (options.booleans.has("dry-run")) {
+        return { status: "dry_run", title: input.title, category: input.category, projectId: projectId ?? null, bodyCharacters: input.body.length, body: input.body };
+    }
+    const { client } = await authenticatedClient(cwd, context?.link ?? null, options, runtime);
+    return client.feedback({ ...input, ...(projectId ? { projectId } : {}), cliVersion: CLI_VERSION });
+}
 async function authenticatedClient(cwd, link, options, runtime) {
     let apiUrl = selectedApiUrl(options, link, runtime.environment, runtime.defaultApiUrl);
     const cloud = await cloudAgentClient(runtime.environment, cwd, runtime.fetcher, { tokenStdin: options.booleans.has("token-stdin"), profile: options.flags.has("profile"), apiUrl });
@@ -2941,6 +2980,7 @@ function assertAllowedOptions(topic, options) {
         "agents complete": [...common, ...authentication, "expected-revision", "run"],
         link: [...common, ...authentication, "project"],
         doctor: [...common, ...authentication],
+        feedback: [...common, ...authentication, "project", "title", "category", "body-file", "dry-run"],
         preview: [
             ...common,
             ...authentication,
@@ -2956,7 +2996,9 @@ function assertAllowedOptions(topic, options) {
         "preview entries": [...common, ...authentication],
         "preview open": [...common, ...authentication, "from", "through", "return-path"],
         "source status": [...common, ...authentication, "project"],
+        "source continue": [...common, ...authentication, "change", "work"],
         "production releases": [...common, ...authentication, "project"],
+        "production verify": [...common, ...authentication, "project", "activation", "composition", "expected-revision"],
         "production rollback": [...common, ...authentication, "project", "release", "expected-release", "expected-revision", "idempotency-key"],
         "source branches": [...common, ...authentication, "project"],
         "source reconnect prepare": [...common, ...authentication, "project", "repository", "idempotency-key"],
@@ -3229,16 +3271,19 @@ Account workflow entitlement is required for new starts. Run status is authorita
         "auth logout": "Usage: andeo auth logout [--all] [--local] [--json]\n\nRevoke the default login. --local removes only the local copy; --all must be explicit to remove every login and directory binding.",
         link: "Usage: andeo link [--project PROJECT_ID] [--profile NAME] [--api-url URL] [--json]\n\nLink this checkout to exactly one project. The project ID remains a target guard; profile activation stays machine-local.",
         doctor: "Usage: andeo doctor [--json]\n\nValidate configuration, authentication, project scope, and local artifact readiness.",
+        feedback: "Usage: andeo feedback --title TEXT --body-file PATH [--category bug|docs|feature|other] [--project PROJECT_ID] [--dry-run] [--json]\n\nSend feedback to the Andeo team. Requires login. Use --body-file - to read the body from stdin. Bodies can be up to 65,000 characters, so include the context that helps. Leave out credentials and customer data. --dry-run prints what would be sent, without sending it. Sending identical feedback again returns the original receipt.\n\nExamples:\n  andeo feedback --title \"Preview logs omit build errors\" --category bug --body-file notes.md --json\n  andeo feedback --title \"Clarify workflow retries\" --category docs --body-file - --dry-run --json",
         dev: "Usage: andeo dev\n\nRun the app's declared local development command. This starts local development and does not create an Andeo deployment.",
         check: "Usage: andeo check [--json]\n\nRun the app's declared validation command.",
         build: "Usage: andeo build [--json]\n\nRun validation and packaging, then verify the complete portable artifact.",
         upload: "Usage: andeo upload [--dry-run] [--submission-key KEY] [--json]\n\nValidate, package and retain an exact artifact for administrator review. Does not create a preview or publish production.",
         preview: "Usage: andeo preview [--through PROJECT_ID] [--return-path /account] [--dry-run] [--no-wait] [--idempotency-key KEY] [--json]\n\nBuild an exact app preview. Persistent Cloud agents with preview.build/open request an isolated build of their assigned pushed branch. Explicit preview.share consent automatically resolves its published gateway and issues a handoff lasting up to seven days, independently of normal run completion. --through overrides an eligible entry when needed. Without sharing consent, access stays run-bound. Unsupported bindings fail closed. Use preview open --from sbl_... (persistent) or dly_... to reopen without rebuilding.",
-        production: "Usage: andeo production <releases|rollback> [options]",
+        production: "Usage: andeo production <releases|verify|rollback> [options]",
+        "production verify": "Usage: andeo production verify [--project PROJECT_ID] --activation ACTIVATION_ID --composition COMPOSITION_ID --expected-revision N [--json]\n\nAdministrators recheck the exact current activation without building, uploading or changing production. Exit 2 means verification remains incomplete.",
         "production releases": "Usage: andeo production releases [--project PROJECT_ID] [--json]\n\nList immutable production releases and rollback eligibility.",
         "production rollback": "Usage: andeo production rollback [--project PROJECT_ID] --release RELEASE_ID --expected-release CURRENT_ID --expected-revision N --idempotency-key KEY [--json]\n\nMerchant administrators restore a previously successful app release without building or uploading code.",
         source: "Usage: andeo source <status|branches|branch|log|compare|connect|reconnect|policy|pull|push|change|default|promote|history|operation> [options]\n\nUse standard Git through Andeo for a gateway or service project. Default-branch changes follow the saved publication policy.",
         "source status": "Usage: andeo source status [--project PROJECT_ID] [--json]\n\nRead the managed repository, immutable build contract, and recent source builds. --project works before a checkout is linked.\n\nExamples:\n  andeo source status --project prj_... --json\n  andeo source status --json",
+        "source continue": "Usage: andeo source continue --change scr_... [--json]\n       andeo source continue --work asw_... [--json]\n\nStart a fresh bounded Cloud run assigned to existing source work from the same agent, grant and installation. Preserves the original branch and change history. Use after run expiry, or as the first authenticated command in a fresh task. Pending source mutations and live writers must settle first. No source, preview, merge or production effect is started.\n\nExample:\n  andeo source continue --change scr_0123456789abcdef --json",
         "source branches": "Usage: andeo source branches [--project PROJECT_ID] [--json]\n\nList exact branch refs and identify Andeo's authoritative default separately from the provider's create-time default. Uses a short-lived read credential without persisting it.",
         "source log": "Usage: andeo source log [--project PROJECT_ID] [--branch BRANCH] [--limit 20] [--json]\n\nRead bounded commit history from one exact managed branch without requiring a checkout.",
         "source compare": "Usage: andeo source compare [--project PROJECT_ID] --base BRANCH --head BRANCH [--json]\n\nCompare exact managed refs and report identical, fast-forward, behind, diverged, or unrelated history plus a bounded file list.",
@@ -3300,7 +3345,7 @@ Account workflow entitlement is required for new starts. Run status is authorita
     };
     if (topic && topics[topic])
         return topics[topic];
-    return `Andeo merchant developer CLI ${CLI_VERSION}\n\nCommands:\n  docs              Read version-matched offline guides\n  capabilities      Inspect scoped support, enablement and permissions\n  init              Create a new Shopify account starter\n  auth login        Create or refresh the default login\n  auth create       Create or re-authorize a named login\n  auth activate     Bind a named login to a directory tree\n  auth deactivate   Remove an exact directory binding\n  auth status       Validate one login or scoped credential\n  auth list         List local login profiles and bindings\n  auth delete       Revoke one named login\n  auth logout       Revoke the default or every login\n  agents            Human administration of persistent agents\n  agent             Inspect or end this Cloud task's run\n  link              Link this checkout to one permitted project\n  doctor            Check developer readiness\n  dev               Run the project-owned local dev command\n  check             Run project validation\n  build             Package and verify a portable artifact\n  upload            Retain a build for administrator publication\n  preview           Build and deploy an exact preview\n  preview entries   List eligible connected entry apps\n  preview open      Reopen an exact deployed preview\n  source status     Inspect Andeo-managed Git and recent builds\n  source branches   List exact managed branches and default policy\n  source compare    Compare two managed branches\n  source connect    Connect this linked project to managed Git\n  source reconnect  Prepare, inspect, complete or cancel a tenant namespace cutover\n  source pull       Clone or fast-forward the exact connected repository\n  source token      Issue a short-lived repository credential\n  source push       Push the exact commit without persisting a token\n  source promote    Fast-forward the default after successful preview checks\n  source history    Run guarded, archived source-history migration\n  email             Create and reuse merchant email identities\n  workflows         Inspect and control app-defined background runs\n  vars              Manage saved per-environment runtime variables\n  source policy     Inspect or change automatic publication\n  tail              Stream logs for one exact linked project\n  delivery status   Read preview workflow state\n  delivery retry    Retry a failed preview workflow\n  upgrade           Upgrade a verified global CLI installation\n  config autoupgrade Configure automatic CLI upgrades\n  skill install     Install the Andeo agent skill\n  skill status      Inspect installed guidance freshness\n  skill sync        Refresh unchanged managed guidance\n  skills list       Discover authenticated practice skills\n  skills get        Read an authenticated practice skill\n  skills file       Read one authenticated skill resource\n  config example    Print the project configuration contract\n\nThere is intentionally no production publish command.\nRun andeo <command> --help for examples.`;
+    return `Andeo merchant developer CLI ${CLI_VERSION}\n\nCommands:\n  docs              Read version-matched offline guides\n  capabilities      Inspect scoped support, enablement and permissions\n  feedback          Send feedback to the Andeo team\n  init              Create a new Shopify account starter\n  auth login        Create or refresh the default login\n  auth create       Create or re-authorize a named login\n  auth activate     Bind a named login to a directory tree\n  auth deactivate   Remove an exact directory binding\n  auth status       Validate one login or scoped credential\n  auth list         List local login profiles and bindings\n  auth delete       Revoke one named login\n  auth logout       Revoke the default or every login\n  agents            Human administration of persistent agents\n  agent             Inspect or end this Cloud task's run\n  link              Link this checkout to one permitted project\n  doctor            Check developer readiness\n  dev               Run the project-owned local dev command\n  check             Run project validation\n  build             Package and verify a portable artifact\n  upload            Retain a build for administrator publication\n  preview           Build and deploy an exact preview\n  preview entries   List eligible connected entry apps\n  preview open      Reopen an exact deployed preview\n  source status     Inspect Andeo-managed Git and recent builds\n  source branches   List exact managed branches and default policy\n  source compare    Compare two managed branches\n  source connect    Connect this linked project to managed Git\n  source reconnect  Prepare, inspect, complete or cancel a tenant namespace cutover\n  source pull       Clone or fast-forward the exact connected repository\n  source token      Issue a short-lived repository credential\n  source push       Push the exact commit without persisting a token\n  source promote    Fast-forward the default after successful preview checks\n  source history    Run guarded, archived source-history migration\n  email             Create and reuse merchant email identities\n  workflows         Inspect and control app-defined background runs\n  vars              Manage saved per-environment runtime variables\n  source policy     Inspect or change automatic publication\n  tail              Stream logs for one exact linked project\n  delivery status   Read preview workflow state\n  delivery retry    Retry a failed preview workflow\n  upgrade           Upgrade a verified global CLI installation\n  config autoupgrade Configure automatic CLI upgrades\n  skill install     Install the Andeo agent skill\n  skill status      Inspect installed guidance freshness\n  skill sync        Refresh unchanged managed guidance\n  skills list       Discover authenticated practice skills\n  skills get        Read an authenticated practice skill\n  skills file       Read one authenticated skill resource\n  config example    Print the project configuration contract\n\nThere is intentionally no production publish command.\nRun andeo <command> --help for examples.`;
 }
 function normalizeError(error) {
     if (error instanceof FlagCompatibilityError)