shopstack 0.2.3 → 0.2.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -70,7 +70,7 @@ deliberately has no card-input or payment-approval tool.
70
70
 
71
71
  The canonical agent skill ships as `SKILL.md` in this package. After
72
72
  publication it is available at
73
- `https://unpkg.com/shopstack@0.2.3/SKILL.md` with the release-pinned package.
73
+ `https://unpkg.com/shopstack@0.2.4/SKILL.md` with the release-pinned package.
74
74
 
75
75
  ## Connections
76
76
 
@@ -125,6 +125,9 @@ Treat the printed URL as opaque and open it exactly as returned, including its
125
125
  `#token=...` fragment. If that fragment is lost while the checkout is active,
126
126
  run `shopstack checkout view CHECKOUT_ID` to receive a replacement URL. The
127
127
  replacement disconnects an older viewer session but does not restart checkout.
128
+ Omit `model_handle` to use the production GLM route. Set it to `qwen` only when
129
+ you explicitly need the fixed Qwen comparison route.
130
+
128
131
  When no provider is selected, the checkout runs normally until the payment
129
132
  form, then asks for card details through a no-echo terminal prompt. Card data is
130
133
  sent only to the protected payment-details endpoint. The CLI separately shows
package/SKILL.md CHANGED
@@ -141,7 +141,7 @@ replacement verbatim.
141
141
 
142
142
  - Use `GET/POST /v1/checkout/{id}/messages` only for ordinary missing information.
143
143
  - Use protected SDK/CLI payment input when `required_input.type` is `payment_card`.
144
- - Use only the dedicated payment-approval endpoint from a separately scoped trusted backend.
144
+ - Use only the dedicated payment-approval endpoint with the owning user's credential.
145
145
  - MCP and messages cannot approve payment and expose no approval tool.
146
146
  - Never infer approval from a user's conversational message.
147
147
  - Cancel with the typed cancellation operation if the user withdraws the request.
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "shopstack",
3
- "version": "0.2.3",
3
+ "version": "0.2.4",
4
4
  "description": "Production Shopstack SDK and CLI for agentic checkout.",
5
5
  "type": "module",
6
6
  "exports": {
@@ -26,8 +26,8 @@
26
26
  "check": "npm run format:check && npm run test:coverage",
27
27
  "format:check": "prettier --check .",
28
28
  "shopstack": "node ./bin/shopstack",
29
- "test": "node --test test",
30
- "test:coverage": "node --test --experimental-test-coverage test",
29
+ "test": "node --test test/*.test.js",
30
+ "test:coverage": "node --test --experimental-test-coverage test/*.test.js",
31
31
  "prepublishOnly": "npm run check"
32
32
  },
33
33
  "engines": {
package/src/cli.js CHANGED
@@ -4,7 +4,9 @@ import { createInterface } from "node:readline/promises";
4
4
  import { ShopstackClient } from "./client.js";
5
5
  import { ConfigStore } from "./config.js";
6
6
 
7
- const VERSION = "0.2.2";
7
+ const VERSION = JSON.parse(
8
+ await readFile(new URL("../package.json", import.meta.url), "utf8"),
9
+ ).version;
8
10
 
9
11
  const HELP = `Shopstack CLI ${VERSION}
10
12