@withandeo/cli 0.19.19 → 0.19.21

package/dist/main.js

@@ -5,6 +5,7 @@ import { lstat, mkdtemp, readFile, readdir, realpath, rm } from "node:fs/promise
 import { basename, join, relative, resolve, sep } from "node:path";
 import { homedir, hostname, tmpdir } from "node:os";
 import { createHash } from "node:crypto";
+import { readFeedbackInput } from "./feedback.js";
 import { AgentApiClient } from "./api.js";
 import { emailDuration, waitForEmail } from "./email.js";
 import { CLI_AUTH_SCHEMA, DEFAULT_AUTH_PROFILE, createDefaultAuthStore, validateAuthProfile, validateNamedAuthProfile, } from "./auth-store.js";
@@ -75,7 +76,7 @@ export async function runCli(argv, overrides = {}) {
             runtime.stdout.write(`${CLI_VERSION}\n`);
             return 0;
         }
-        const options = parseOptions(values);
+        const options = parseOptions(values, topic === "source change edit" ? "description" : undefined);
         assertAllowedOptions(topic, options);
         const cwd = resolve(runtime.cwd, options.flags.get("cwd") ?? ".");
         const result = await execute(topic, options, cwd, runtime);
@@ -227,6 +228,8 @@ async function execute(topic, options, cwd, runtime) {
             return { value: await linkProject(cwd, options, runtime) };
         case "doctor":
             return await doctor(cwd, options, runtime);
+        case "feedback":
+            return { value: await sendFeedback(cwd, options, runtime) };
         case "preview": {
             const value = await preview(cwd, options, runtime);
             return { value, exitCode: value.status === "timeout" ? 3 : 0 };
@@ -236,6 +239,7 @@ async function execute(topic, options, cwd, runtime) {
         case "preview open":
             return { value: await previewOpen(cwd, options, runtime) };
         case "production releases":
+        case "production verify":
         case "production rollback": {
             const context = await optionalContext(cwd);
             const { client, projectId } = await sourceProjectAccess(cwd, context?.link ?? null, options, runtime, false);
@@ -244,6 +248,12 @@ async function execute(topic, options, cwd, runtime) {
             const revision = Number(requiredFlag(options, "expected-revision"));
             if (!Number.isSafeInteger(revision) || revision < 1)
                 throw new CliError("argument_invalid", "--expected-revision must be a positive integer.");
+            if (topic === "production verify") {
+                const value = await client.verifyProduction(projectId, requiredFlag(options, "activation"), {
+                    compositionId: requiredFlag(options, "composition"), expectedRuntimeRevision: revision,
+                });
+                return { value, exitCode: value.status === "verified" ? 0 : 2 };
+            }
             return { value: await client.rollbackProduction(projectId, { productionReleaseId: requiredFlag(options, "release"),
                     expectedProductionReleaseId: requiredFlag(options, "expected-release"), expectedRuntimeRevision: revision,
                     idempotencyKey: requiredFlag(options, "idempotency-key") }) };
@@ -285,6 +295,8 @@ async function execute(topic, options, cwd, runtime) {
             return { value: await sourceOperationRetry(cwd, options, runtime) };
         case "source change create":
             return { value: await sourceChangeCreate(cwd, options, runtime) };
+        case "source change edit":
+            return { value: await sourceChangeEdit(cwd, options, runtime) };
         case "source merge": {
             const value = await sourceMerge(cwd, options, runtime);
             return { value, exitCode: value.status === "timeout" ? 3 : value.merge && ["awaiting_approval", "needs_attention", "superseded", "authorization_required", "reconciliation_required", "cancelled"].includes(value.merge.stage) ? 2 : 0 };
@@ -1564,6 +1576,38 @@ async function sourceChangeCreate(cwd, options, runtime) {
         };
     });
 }
+async function sourceChangeEdit(cwd, options, runtime) {
+    const rawChangeId = options.flags.get("change");
+    if (!rawChangeId)
+        throw new CliError("argument_required", "Supply the change ID with --change.", "andeo source change list --json");
+    const changeId = requiredSourceChangeRequestId(rawChangeId);
+    const rawSnapshot = options.flags.get("expected-snapshot");
+    if (!rawSnapshot) {
+        throw new CliError("argument_required", "Supply the current snapshotVersion with --expected-snapshot.", `andeo source change show --change ${changeId} --json`);
+    }
+    const expectedSnapshot = Number(rawSnapshot);
+    if (!/^[0-9]+$/u.test(rawSnapshot) || !Number.isSafeInteger(expectedSnapshot) || expectedSnapshot < 1) {
+        throw new CliError("argument_invalid", "--expected-snapshot must be a positive integer.");
+    }
+    const title = options.flags.get("title")?.trim();
+    const description = options.flags.get("description")?.trim();
+    if (title === undefined && description === undefined) {
+        throw new CliError("argument_required", "Supply --title, --description, or both.");
+    }
+    if (title === "" || (title?.length ?? 0) > 160 || (description?.length ?? 0) > 4000) {
+        throw new CliError("argument_invalid", "A title must contain 1–160 characters and a description at most 4,000 characters.");
+    }
+    const access = await sourceReadAccess(cwd, options, runtime);
+    const { changeRequest } = await access.client.sourceChangeRequest(changeId);
+    requireLinkedSourceChange(access.projectId, changeRequest.projectId);
+    if (changeRequest.id !== changeId || changeRequest.repositoryId !== access.repository.id) {
+        throw new CliError("source_change_repository_mismatch", "The returned change does not match this repository and change ID.");
+    }
+    if (access.repository.assignedFeatureBranch && changeRequest.headBranch !== access.repository.assignedFeatureBranch) {
+        throw new CliError("agent_branch_scope_mismatch", "This run may edit reviews only for its assigned feature branch.");
+    }
+    return access.client.editSourceChangeRequest(changeId, { expectedSnapshot, title, description });
+}
 async function sourceChangeList(cwd, options, runtime) {
     const access = await sourceReadAccess(cwd, options, runtime);
     const state = (options.flags.get("state") ?? "open");
@@ -2324,6 +2368,21 @@ async function deliveryRetry(cwd, options, runtime) {
     const { client } = await authenticatedClient(cwd, context.link, options, runtime);
     return await client.retryDelivery(requiredDeliveryId(options), options.booleans.has("reauthorize") ? context.link.projectId : undefined);
 }
+async function sendFeedback(cwd, options, runtime) {
+    const bodyFile = requiredFlag(options, "body-file");
+    if (bodyFile === "-" && options.booleans.has("token-stdin")) {
+        throw new CliError("feedback_stdin_conflict", "--body-file - cannot be combined with --token-stdin.");
+    }
+    const input = await readFeedbackInput({ title: requiredFlag(options, "title"), category: options.flags.get("category") ?? "other", bodyFile }, cwd, runtime.stdin);
+    const context = await optionalContext(cwd);
+    const explicitProject = options.flags.get("project");
+    const projectId = explicitProject ? requiredProjectId(explicitProject) : context?.link?.projectId;
+    if (options.booleans.has("dry-run")) {
+        return { status: "dry_run", title: input.title, category: input.category, projectId: projectId ?? null, bodyCharacters: input.body.length, body: input.body };
+    }
+    const { client } = await authenticatedClient(cwd, context?.link ?? null, options, runtime);
+    return client.feedback({ ...input, ...(projectId ? { projectId } : {}), cliVersion: CLI_VERSION });
+}
 async function authenticatedClient(cwd, link, options, runtime) {
     let apiUrl = selectedApiUrl(options, link, runtime.environment, runtime.defaultApiUrl);
     const cloud = await cloudAgentClient(runtime.environment, cwd, runtime.fetcher, { tokenStdin: options.booleans.has("token-stdin"), profile: options.flags.has("profile"), apiUrl });
@@ -2688,7 +2747,7 @@ function requiredSkillArgument(options) {
     return skillId;
 }
 function skillPath() {
-    return fileURLToPath(new URL("../skill/tender-accounts/SKILL.md", import.meta.url));
+    return fileURLToPath(new URL("../skill/andeo/SKILL.md", import.meta.url));
 }
 function exampleConfig() {
     return {
@@ -2840,7 +2899,7 @@ function commandTopic(argv) {
     };
     return { topic: legacy[parent] ?? parent ?? "help", values: argv.slice(1) };
 }
-function parseOptions(values) {
+function parseOptions(values, allowEmptyFlag) {
     const flags = new Map();
     const booleans = new Set();
     const positionals = [];
@@ -2866,7 +2925,7 @@ function parseOptions(values) {
             continue;
         }
         const value = values[index + 1];
-        if (!value || value.startsWith("--") || flags.has(name)) {
+        if (value === undefined || (value === "" && name !== allowEmptyFlag) || value.startsWith("--") || flags.has(name)) {
             throw new CliError("argument_value_missing", `Option --${name} requires exactly one value.`);
         }
         flags.set(name, value);
@@ -2955,6 +3014,7 @@ function assertAllowedOptions(topic, options) {
         "agents complete": [...common, ...authentication, "expected-revision", "run"],
         link: [...common, ...authentication, "project"],
         doctor: [...common, ...authentication],
+        feedback: [...common, ...authentication, "project", "title", "category", "body-file", "dry-run"],
         preview: [
             ...common,
             ...authentication,
@@ -2972,6 +3032,7 @@ function assertAllowedOptions(topic, options) {
         "source status": [...common, ...authentication, "project"],
         "source continue": [...common, ...authentication, "change", "work"],
         "production releases": [...common, ...authentication, "project"],
+        "production verify": [...common, ...authentication, "project", "activation", "composition", "expected-revision"],
         "production rollback": [...common, ...authentication, "project", "release", "expected-release", "expected-revision", "idempotency-key"],
         "source branches": [...common, ...authentication, "project"],
         "source reconnect prepare": [...common, ...authentication, "project", "repository", "idempotency-key"],
@@ -3006,6 +3067,7 @@ function assertAllowedOptions(topic, options) {
         "source operation status": [...common, ...authentication, "operation"],
         "source operation retry": [...common, ...authentication, "operation", "no-wait", "timeout-seconds"],
         "source change create": [...common, ...authentication, "project", "title", "description", "base", "head"],
+        "source change edit": [...common, ...authentication, "project", "change", "expected-snapshot", "title", "description"],
         "source merge": [...common, ...authentication, "project", "head", "title", "change", "expected-head", "expected-snapshot", "idempotency-key", "dry-run", "wait", "no-wait", "timeout-seconds",
             "expected-base", "expected-policy-revision", "validation-mode", "authorize", "continuation", "note"],
         "source merge status": [...common, ...authentication, "project", "merge"],
@@ -3244,12 +3306,14 @@ Account workflow entitlement is required for new starts. Run status is authorita
         "auth logout": "Usage: andeo auth logout [--all] [--local] [--json]\n\nRevoke the default login. --local removes only the local copy; --all must be explicit to remove every login and directory binding.",
         link: "Usage: andeo link [--project PROJECT_ID] [--profile NAME] [--api-url URL] [--json]\n\nLink this checkout to exactly one project. The project ID remains a target guard; profile activation stays machine-local.",
         doctor: "Usage: andeo doctor [--json]\n\nValidate configuration, authentication, project scope, and local artifact readiness.",
+        feedback: "Usage: andeo feedback --title TEXT --body-file PATH [--category bug|docs|feature|other] [--project PROJECT_ID] [--dry-run] [--json]\n\nSend feedback to the Andeo team. Requires login. Use --body-file - to read the body from stdin. Bodies can be up to 65,000 characters, so include the context that helps. Leave out credentials and customer data. --dry-run prints what would be sent, without sending it. Sending identical feedback again returns the original receipt.\n\nExamples:\n  andeo feedback --title \"Preview logs omit build errors\" --category bug --body-file notes.md --json\n  andeo feedback --title \"Clarify workflow retries\" --category docs --body-file - --dry-run --json",
         dev: "Usage: andeo dev\n\nRun the app's declared local development command. This starts local development and does not create an Andeo deployment.",
         check: "Usage: andeo check [--json]\n\nRun the app's declared validation command.",
         build: "Usage: andeo build [--json]\n\nRun validation and packaging, then verify the complete portable artifact.",
         upload: "Usage: andeo upload [--dry-run] [--submission-key KEY] [--json]\n\nValidate, package and retain an exact artifact for administrator review. Does not create a preview or publish production.",
         preview: "Usage: andeo preview [--through PROJECT_ID] [--return-path /account] [--dry-run] [--no-wait] [--idempotency-key KEY] [--json]\n\nBuild an exact app preview. Persistent Cloud agents with preview.build/open request an isolated build of their assigned pushed branch. Explicit preview.share consent automatically resolves its published gateway and issues a handoff lasting up to seven days, independently of normal run completion. --through overrides an eligible entry when needed. Without sharing consent, access stays run-bound. Unsupported bindings fail closed. Use preview open --from sbl_... (persistent) or dly_... to reopen without rebuilding.",
-        production: "Usage: andeo production <releases|rollback> [options]",
+        production: "Usage: andeo production <releases|verify|rollback> [options]",
+        "production verify": "Usage: andeo production verify [--project PROJECT_ID] --activation ACTIVATION_ID --composition COMPOSITION_ID --expected-revision N [--json]\n\nAdministrators recheck the exact current activation without building, uploading or changing production. Exit 2 means verification remains incomplete.",
         "production releases": "Usage: andeo production releases [--project PROJECT_ID] [--json]\n\nList immutable production releases and rollback eligibility.",
         "production rollback": "Usage: andeo production rollback [--project PROJECT_ID] --release RELEASE_ID --expected-release CURRENT_ID --expected-revision N --idempotency-key KEY [--json]\n\nMerchant administrators restore a previously successful app release without building or uploading code.",
         source: "Usage: andeo source <status|branches|branch|log|compare|connect|reconnect|policy|pull|push|change|default|promote|history|operation> [options]\n\nUse standard Git through Andeo for a gateway or service project. Default-branch changes follow the saved publication policy.",
@@ -3271,7 +3335,7 @@ Account workflow entitlement is required for new starts. Run status is authorita
         "source operation": "Usage: andeo source operation <status|retry> --operation sop_... [--json]",
         "source operation status": "Usage: andeo source operation status --operation sop_... [--json]\n\nRead durable status and safe evidence for one exact source operation.",
         "source operation retry": "Usage: andeo source operation retry --operation sop_... [--no-wait] [--timeout-seconds N] [--json]\n\nRetry or resume the same durable source operation without changing its reviewed intent. This never publishes production.",
-        "source change": "Usage: andeo source change <create|list|show|close|resume|cancel|take-over> [options]\n\nCreate and inspect exact preview-backed changes, or recover an accepted merge intent.",
+        "source change": "Usage: andeo source change <create|edit|list|show|close|resume|cancel|take-over> [options]\n\nCreate, edit, and inspect exact preview-backed changes, or recover an accepted merge intent.",
         "source change cancel": "Usage: andeo source change cancel --change scr_... [--json]\n\nWithdraw new work for an accepted intent. Already-issued effects require readback; source may already be merged.",
         "source change take-over": "Usage: andeo source change take-over --change scr_... --idempotency-key KEY [--json]\n\nAdministrator only. Records a new bounded authorization for the same exact inputs; then use source change resume.",
         "source merge": "Usage: andeo source merge --head BRANCH --title TITLE --idempotency-key KEY [--dry-run] [--wait] [--timeout-seconds N] [--json]\n       andeo source merge --change scr_... --idempotency-key KEY [--wait] [--json]\n       andeo source merge --head BRANCH --title TITLE --validation-mode administrator_authorized --expected-base SHA --expected-head SHA --expected-policy-revision N --authorize --idempotency-key KEY [--continuation source_only] [--note TEXT] [--wait] [--json]\n       andeo source merge <status|resume|cancel|take-over> --merge smi_... [options]\n\nRequest exact fast-forward landing. Persistent agents require source.merge for the assigned branch and review.prepare for implicit review creation. The grant delegates source approval without per-change administrator approval; a successful exact isolated preview is required. Landing may deploy under the saved publication policy. Human/legacy native review keeps its existing approval contract. Administrator-authorized source-only mode requires saved policy and a current administrator; Andeo does not independently verify checks. Inspect refs and blockers with --dry-run before authorizing. Waiting is bounded and never cancels hosted work.\n\nExamples:\n  andeo source merge --head feature/copy --title \"Update copy\" --idempotency-key account-copy-v1 --dry-run --json\n  andeo source merge --head feature/copy --title \"Update copy\" --idempotency-key account-copy-v1 --wait --json",
@@ -3283,7 +3347,8 @@ Account workflow entitlement is required for new starts. Run status is authorita
         "source change resume": "Usage: andeo source change resume --change scr_... [--json]\n\nResume the same eligible merge intent or exact failed publication. Revalidates authority and retained lineage; never creates a replacement build.\n\nExample:\n  andeo source change resume --change scr_... --json",
         "source merge-policy show": "Usage: andeo source merge-policy show [--json]\n\nRead the saved merge policy and explicit principal grants.",
         "source merge-policy set": "Usage: andeo source merge-policy set --mode human-review|agent|administrator-authorized [--principals PRINCIPAL_IDS] --expected-revision N --idempotency-key KEY [--json]\n\nAdministrator only. Agent grants are comma-separated stable principal IDs. Administrator-authorized mode requires controlled transport, source-only continuation and exact per-operation approval; omit --principals. This never changes publication policy.\n\nExample:\n  andeo source merge-policy set --mode agent --principals principal_example --expected-revision 0 --idempotency-key merge-policy-v1 --json",
-        "source change create": "Usage: andeo source change create --head BRANCH --title TITLE [--description TEXT] [--base BRANCH] [--json]\n\nOpen or refresh the review for the exact protected-base and feature-branch SHAs. An existing open review keeps its ID and number; changed refs create a new snapshot and invalidate prior approval. Unchanged refs are a no-op. A landing review cannot be refreshed.",
+        "source change create": "Usage: andeo source change create --head BRANCH --title TITLE [--description TEXT] [--base BRANCH] [--json]\n\nOpen or refresh the review for the exact protected-base and feature-branch SHAs. A refresh keeps the ID, number, title, and description. Changed refs create a new snapshot and invalidate prior approval. A landing review cannot be refreshed. Use source change edit to correct the title or description.",
+        "source change edit": "Usage: andeo source change edit --change scr_... --expected-snapshot N [--title TITLE] [--description TEXT] [--json]\n\nEdit an open review's title or description. Read snapshotVersion with source change show first. Supply at least one field. Use --description '' to clear the description. A metadata change creates a new snapshot, preserves the ID, number, and exact preview, and requires fresh approval if previously approved.\n\nExample:\n  andeo source change edit --change scr_... --expected-snapshot 3 --title \"Update account copy\" --json",
         "source change list": "Usage: andeo source change list [--state open|closed|all] [--json]\n\nList reviewed source changes for this exact linked project.",
         "source change show": "Usage: andeo source change show --change scr_... [--json]\n\nRead exact snapshot, preview, decision, and landing state.",
         "source change close": "Usage: andeo source change close --change scr_... [--json]\n\nClose an unlanded change without changing source or production.",
@@ -3316,7 +3381,7 @@ Account workflow entitlement is required for new starts. Run status is authorita
     };
     if (topic && topics[topic])
         return topics[topic];
-    return `Andeo merchant developer CLI ${CLI_VERSION}\n\nCommands:\n  docs              Read version-matched offline guides\n  capabilities      Inspect scoped support, enablement and permissions\n  init              Create a new Shopify account starter\n  auth login        Create or refresh the default login\n  auth create       Create or re-authorize a named login\n  auth activate     Bind a named login to a directory tree\n  auth deactivate   Remove an exact directory binding\n  auth status       Validate one login or scoped credential\n  auth list         List local login profiles and bindings\n  auth delete       Revoke one named login\n  auth logout       Revoke the default or every login\n  agents            Human administration of persistent agents\n  agent             Inspect or end this Cloud task's run\n  link              Link this checkout to one permitted project\n  doctor            Check developer readiness\n  dev               Run the project-owned local dev command\n  check             Run project validation\n  build             Package and verify a portable artifact\n  upload            Retain a build for administrator publication\n  preview           Build and deploy an exact preview\n  preview entries   List eligible connected entry apps\n  preview open      Reopen an exact deployed preview\n  source status     Inspect Andeo-managed Git and recent builds\n  source branches   List exact managed branches and default policy\n  source compare    Compare two managed branches\n  source connect    Connect this linked project to managed Git\n  source reconnect  Prepare, inspect, complete or cancel a tenant namespace cutover\n  source pull       Clone or fast-forward the exact connected repository\n  source token      Issue a short-lived repository credential\n  source push       Push the exact commit without persisting a token\n  source promote    Fast-forward the default after successful preview checks\n  source history    Run guarded, archived source-history migration\n  email             Create and reuse merchant email identities\n  workflows         Inspect and control app-defined background runs\n  vars              Manage saved per-environment runtime variables\n  source policy     Inspect or change automatic publication\n  tail              Stream logs for one exact linked project\n  delivery status   Read preview workflow state\n  delivery retry    Retry a failed preview workflow\n  upgrade           Upgrade a verified global CLI installation\n  config autoupgrade Configure automatic CLI upgrades\n  skill install     Install the Andeo agent skill\n  skill status      Inspect installed guidance freshness\n  skill sync        Refresh unchanged managed guidance\n  skills list       Discover authenticated practice skills\n  skills get        Read an authenticated practice skill\n  skills file       Read one authenticated skill resource\n  config example    Print the project configuration contract\n\nThere is intentionally no production publish command.\nRun andeo <command> --help for examples.`;
+    return `Andeo merchant developer CLI ${CLI_VERSION}\n\nCommands:\n  docs              Read version-matched offline guides\n  capabilities      Inspect scoped support, enablement and permissions\n  feedback          Send feedback to the Andeo team\n  init              Create a new Shopify account starter\n  auth login        Create or refresh the default login\n  auth create       Create or re-authorize a named login\n  auth activate     Bind a named login to a directory tree\n  auth deactivate   Remove an exact directory binding\n  auth status       Validate one login or scoped credential\n  auth list         List local login profiles and bindings\n  auth delete       Revoke one named login\n  auth logout       Revoke the default or every login\n  agents            Human administration of persistent agents\n  agent             Inspect or end this Cloud task's run\n  link              Link this checkout to one permitted project\n  doctor            Check developer readiness\n  dev               Run the project-owned local dev command\n  check             Run project validation\n  build             Package and verify a portable artifact\n  upload            Retain a build for administrator publication\n  preview           Build and deploy an exact preview\n  preview entries   List eligible connected entry apps\n  preview open      Reopen an exact deployed preview\n  source status     Inspect Andeo-managed Git and recent builds\n  source branches   List exact managed branches and default policy\n  source compare    Compare two managed branches\n  source connect    Connect this linked project to managed Git\n  source reconnect  Prepare, inspect, complete or cancel a tenant namespace cutover\n  source pull       Clone or fast-forward the exact connected repository\n  source token      Issue a short-lived repository credential\n  source push       Push the exact commit without persisting a token\n  source promote    Fast-forward the default after successful preview checks\n  source history    Run guarded, archived source-history migration\n  email             Create and reuse merchant email identities\n  workflows         Inspect and control app-defined background runs\n  vars              Manage saved per-environment runtime variables\n  source policy     Inspect or change automatic publication\n  tail              Stream logs for one exact linked project\n  delivery status   Read preview workflow state\n  delivery retry    Retry a failed preview workflow\n  upgrade           Upgrade a verified global CLI installation\n  config autoupgrade Configure automatic CLI upgrades\n  skill install     Install the Andeo agent skill\n  skill status      Inspect installed guidance freshness\n  skill sync        Refresh unchanged managed guidance\n  skills list       Discover authenticated practice skills\n  skills get        Read an authenticated practice skill\n  skills file       Read one authenticated skill resource\n  config example    Print the project configuration contract\n\nThere is intentionally no production publish command.\nRun andeo <command> --help for examples.`;
 }
 function normalizeError(error) {
     if (error instanceof FlagCompatibilityError)