octwin-cli 0.7.2 → 0.8.0

package/CHANGELOG.md

@@ -5,6 +5,97 @@ Format: [Keep a Changelog](https://keepachangelog.com/) — newest first, bucket
 **Added · Changed · Deprecated · Removed · Fixed · Security**. The platform-wide view lives in the
 repo root [`CHANGELOG.md`](../../CHANGELOG.md); this file is the CLI-only cut that ships with the package.
 
+## [0.8.0] - 2026-08-27
+
+### Added
+- **Five new command families, closing the gap between what a token reaches and what the CLI can
+  ask.** A **Full CLI access** token spans the whole scope registry, and four of those domains had
+  no command at all — so the reach existed and there was nothing to type.
+  - `octwin automation [campaigns]` — every job the pack's declaration produced, with status,
+    interval and last result (matched / acted / errors), under a health line whose counts come from
+    SQL rather than from filtering the page (the job list is capped server-side, so a client-side
+    count would depend on the cap). Writes: `run` · `pause` · `resume` · `send <campaignId>`.
+  - `octwin integrations` — what the pack **declares** beside what is actually **configured**, in
+    one view, because a connection declared and never configured is the commonest reason an
+    integration silently never fires and neither list alone can show it. Plus
+    `preflight <key>` (diagnosis, no outbound call, `integrations:read`), `test <key>` (a live call,
+    `integrations:write`, exits 1 on failure), `deliveries [id]`, `retry|cancel|send-now <id>`,
+    and `events` for what arrived inbound.
+  - `octwin journeys [id] [--funnel|--overview|--goals|--trends|--cost|--definition] [--stage <id>]`
+    — the declared journeys, measured. Same flag grammar as `octwin analytics` on purpose: a journey
+    funnel and an entity funnel are the same question about different subjects. `--definition` is
+    the one view that works with no traffic.
+  - `octwin performance [--detail]` — the project's business indicators, each with its delta against
+    the previous window and the `why` naming the declaration it came from. Needs `records:read`, not
+    a `performance:*` scope (there is none), so a read-only token already reaches it.
+  - `octwin usage` — model calls, tokens and cost, by model / kind / agent / channel; project when
+    one is pinned, workspace otherwise. Needs no particular scope. **Model spend only** —
+    WhatsApp/Meta message billing is operator-only and outside the token scope registry, which the
+    output says rather than leaving as an absence.
+- **`octwin automation run|pause|resume|send` accept the declaration KEY.** The routes take a UUID
+  and answer a bare *"Malformed identifier in the URL"* 400 for anything else — but the key
+  (`cart_recovery_nudge`) is what the list prints and what the author wrote in their own YAML. The
+  key is now resolved against the list route, and an unknown one fails naming the keys that exist.
+
+### Fixed
+- **A body-less write sent `content-type: application/json` and no body, so Fastify answered a bare
+  `400 Bad Request`.** `apiSend` set the header unconditionally; every caller until now passed an
+  object, so the branch was dead and the bug latent. The first body-less POST (`automation run`) hit
+  it immediately. The header is now omitted when there is no body — rather than each caller learning
+  to pass `{}`, which is the per-site divergence that helper exists to prevent.
+- **Four URLs were exempt from the route guard.** `cli-routes.test.ts` reads a template literal in
+  the first argument position, so `apiGet(base, t)` — a bare identifier — was never checked. That
+  covered the `scheduling` engine-state and `agents` roster calls, and would have covered the new
+  `journeys`, `performance` and `usage` ones. All now spelled as literals: the guard checks **62**
+  URLs, up from 45.
+
+## [0.7.3] - 2026-08-26
+
+### Changed
+- **A marketplace listing request is now OPT-IN: `octwin deploy --request-listing`.** A plain
+  `octwin deploy` says nothing about the public marketplace — it neither asks for a listing nor
+  gives one up. `--withdraw-listing` retracts, including an approved listing.
+  **Why:** the request was read from the manifest's `listing.public` on every deploy, and deploying
+  is how you *test*. 17 of the 23 published packs carry that key, so an edit-deploy-chat loop filed
+  a review request every time round. Worse, the *absence* of the key meant **retract** — so an
+  ordinary deploy of a pack whose manifest you had not yet annotated could wipe a listing you
+  already had. `--request-listing` still requires `listing.public: true` in the manifest (the
+  manifest states that the pack is a product; the flag is you choosing to ask), and the flag
+  without the key is a clean error rather than a silent no-op.
+- **The listing verdict distinguishes "you submitted this" from "your approval expired".** They are
+  both `pending` and they mean opposite things to an author. A deploy that changes the content of an
+  approved pack now says so in those words — an approval covers only the content it was made
+  against, so it cannot survive an edit.
+
+### Added
+- **A one-line nudge when your manifest asks and your deploy did not.** A pack carrying
+  `listing.public: true` that has never been submitted now prints the flag to use, so an opt-in
+  default cannot turn into waiting for a review nobody requested.
+
+### Fixed
+- **The "newer CLI" and "KB drifted" notices now print when a command FAILS.** All three nudges
+  (CLI upgrade · KB drift · unread memos) were awaited at the very end of `main()`, which silently
+  meant *only on success* — `die()` is a hard exit, so a failed deploy, an auth error or a bad
+  manifest printed none of them. That is backwards: a stale capability reference is a leading cause
+  of the failure an author is staring at, so the run that most needed the nudge was the only one
+  that never got it. They are now computed before the command and printed however it ends.
+- **The CLI-upgrade notice is no longer hidden from piped output.** It began with
+  `if (!process.stdout.isTTY) return`, so every agent-driven and CI run — the readers that cannot
+  notice an outdated CLI on their own — was the one audience never told. Its two siblings had
+  already dropped that gate for exactly this reason; now all three agree. Still skipped under
+  `npx`, where there is nothing to upgrade.
+- **`octwin login` now reports KB drift too.** It is networked and usually the first command of a
+  session, i.e. the best possible moment to say the reference moved, and it was excluded.
+- **A memo poll can no longer fail the command it was annotating.** It went through `apiGet` →
+  `fetchOrDie`, whose job is to `die` on a network failure — so an unreachable platform turned an
+  observer into a command failure. It now uses a plain, timed, fail-silent fetch.
+- **A failing command reports its real exit code again on Windows.** Moving the polls before the
+  command made `process.exit()` abort with `Assertion failed: !(handle->flags & UV_HANDLE_CLOSING)`
+  and return **127** instead of 1 — so CI saw neither success nor the documented failure code. The
+  CLI now unwinds through a `CliExit` and lets the event loop drain, which is the only teardown
+  that is clean once the polls have opened sockets. `--check`'s exit 2 and the streaming commands
+  were re-verified.
+
 ## [0.7.2] - 2026-08-20
 
 ### Fixed

package/README.md

@@ -67,7 +67,7 @@ octwin status               # "✓ live and current" once it's warm
 | `octwin validate` | Check the pack locally (structure + pure-YAML rules). `--remote` runs **the same validation the platform runs to load your pack** — every declaration file (`xrm.yaml`, `scheduling.yaml`, `worklist.yaml`, `roles.yaml`, `automation.yaml`, `integrations.yaml`, `surveys.yaml`, `taps.yaml`, `commands.yaml`, `journeys/`, `messages.<lang>.yaml`), the cross-file checks between them, and the **flow lint** — conventions the schema can't express, like an `assign:` whose value is a quoted literal or a `$t()` key with no namespace. These need template expansion and the platform's own schemas, which only the server has, so a local ✓ does not cover them. A `--remote` ✓ and a successful deploy are now the same answer by construction, not by convention. |
 | `octwin login` | Save a deploy token for a platform URL **and make that URL the default target** (both stored in `~/.octwin/credentials.json`). `--url`, `--token`. |
 | `octwin whoami` | Verify the saved/passed token is valid for a tenant. `--url`, `--tenant`. |
-| `octwin deploy` | Upload + install the pack onto your tenant's project. `--seed` also runs the pack's demo seed. Reports the **marketplace-listing verdict** when the manifest carries `listing.public: true`. |
+| `octwin deploy` | Upload + install the pack onto your tenant's project. `--seed` also runs the pack's demo seed. Says **nothing** about the public marketplace unless asked: `--request-listing` submits the pack for operator review (needs `listing.public: true` in the manifest too), `--withdraw-listing` retracts. Reports the **listing verdict** whenever one exists. |
 | `octwin status` | Report what the platform has live for this pack — installed version, the **content sha** the instance loaded vs. the one the catalog holds (a redeploy of the *same* version changes it), its flows, and whether it is live on the public marketplace. |
 | `octwin pull <packId>` | Write a **deployed** pack's source back to disk — the inverse of `deploy`, and how a pack pushed from one machine is recovered. Defaults to the version installed on the target project; `--version` overrides, `--dir` defaults to `./<packId>`, a non-empty dir needs `--force`. You may pull a pack your tenant **owns**. |
 | `octwin chat "msg"` | Drive a turn through the dev web channel and print **every render with its tap ids**. `--as <handle>` picks the test user; `--tap "<tap-id>"` presses a rendered button/list row; `--json` dumps the raw envelopes. |
@@ -80,6 +80,11 @@ octwin status               # "✓ live and current" once it's warm
 | `octwin analytics` | Stage-by-stage conversion for **any** entity declared with a `pipeline:` (`--overview` / `--milestones` / `--trends` / `--cost`; `--stage <id>` lists the records currently at a stage). Needs `records:read`. |
 | `octwin catalog` | Commerce products with price / availability / stock, plus the WhatsApp catalog binding. `--readiness` runs the Meta Graph checklist. Needs `catalog:read` + the `catalog` plan feature. |
 | `octwin scheduling` | The scheduling engine's state, or `--slots <resourceRecordId>` for the slots one bookable resource actually computes — how you verify the availability rules `deploy --seed` created. Needs `scheduling:read`. |
+| `octwin automation` | The jobs your pack's automation declaration produced — status, interval and each one's **last result** (matched / acted / errors) — under a health line counted in SQL. `campaigns` lists the campaigns. Jobs are derived from declarations, so there is no `create`. Needs `automation:read`. |
+| `octwin integrations` | What the pack **declares** beside what is actually **configured**, and it flags the gap: a connection declared and never configured is the commonest reason an integration silently never fires, and neither list alone shows it. `preflight <key>` diagnoses without calling out (`integrations:read`); `deliveries [id]` is the outbound log; `events` is what arrived inbound. Needs `integrations:read`. |
+| `octwin journeys` | The customer journeys your pack declares, measured: `--funnel` (default) · `--overview` · `--goals` · `--trends` · `--cost` · `--definition` (what was declared, works with no traffic), plus `--stage <id>` for the runs sitting at a stage now. Same flag grammar as `octwin analytics` — a journey funnel and an entity funnel are the same question about different subjects. Needs `journeys:read`. |
+| `octwin performance` | The project's business indicators — value produced, conversion, duration — each with its delta against the previous window and a `why` naming the declaration it came from. `--detail` adds the breakdown. Needs `records:read`, **not** a `performance:*` scope (there is none). |
+| `octwin usage` | Model calls, tokens and cost, by model / kind / agent / channel. Project when one is pinned, workspace otherwise. Needs no particular scope. **Model spend only** — WhatsApp/Meta message billing is operator-only and no API token can read it. |
 | `octwin media generate "<prompt>"` | AI-generate an image, store it as a public asset, and print its `MEDIA-` handle + serve URL. `--out` downloads the bytes (WhatsApp renders only `.png`/`.jpg`); `--json`. Pairs with `octwin chat --media` to drive media-collect flows. Needs `media:generate`. |
 | `octwin platform-kb pull` | Pull the platform's capability reference into `.octwin/platform-kb/` for the **`octwin-pack`** Claude Code authoring plugin: guides as markdown, plus **one JSON file per capability** (`primitives/record_list.json`, `render-intents/carousel.json`, `declarations/xrm.json`, …) and **three maps** — `INDEX.md` (the corpus, by family and size), `SYMBOLS.md` (every name → its exact file; grep this), `OUTLINE.md` (every heading with its line number). **No token needed** — the reference is served anonymously. `--if-stale` skips the download when your copy is current (cheap enough for every session); `--check` writes nothing and exits 0 current / 2 stale / 1 could-not-tell. |
 | `octwin test` | Alias for `octwin validate --remote` — the platform's full manifest + flow-DSL check. |
@@ -100,6 +105,8 @@ lists the verbs and their exact flags.
 | `octwin catalog` | `availability <sku> --to "in stock"` · `stock <sku> [--set-on-hand n]` |
 | `octwin scheduling` | `rules --resource <id>` · `rule add\|rm` · `exception add\|rm` |
 | `octwin agents` | `set <ref> [--model m] [--enable-tool t] [--disable-tool t]` |
+| `octwin automation` | `run <jobId>` · `pause\|resume <jobId>` · `send <campaignId>` — the id may be the declaration **key** the list prints; the CLI resolves it to the uuid the route wants |
+| `octwin integrations` | `test <key>` (a live call to the connection's `health:` operation) · `retry\|cancel\|send-now <deliveryId>` |
 
 `--set k=v` coerces JSON scalars (`--set rating=4.5` sends a number); `--fields-json` takes anything
 nested. Destructive verbs want `--force` rather than a prompt — the CLI is non-interactive by
@@ -134,6 +141,11 @@ octwin orders                                 # then: octwin orders <reference_i
 octwin analytics                              # then: octwin analytics <entity> [--stage <id>]
 octwin catalog                                # products + stock + the WhatsApp binding
 octwin scheduling --slots <resourceRecordId>  # the slots your availability rules compute
+octwin automation                             # did your declared jobs run, and what did they touch
+octwin integrations                           # declared vs configured — the silent-never-fires check
+octwin journeys                               # then: octwin journeys <id> [--overview|--goals|--cost]
+octwin performance                            # value, conversion and duration, each with its `why`
+octwin usage                                  # what your testing actually cost in model spend
 ```
 
 Three things worth knowing when you read the output: