zoodealio 0.2.1 → 0.3.0-dev.1607

package/README.md

@@ -17,8 +17,7 @@ zoodealio whoami
 ```
 
 or run it without installing: `npx zoodealio whoami` (after a `zoodealio login` elsewhere, or with
-`ZOODEALIO_API_KEY` set). From a checkout of this repo, `node integrations/cli/bin/zoodealio.js`
-runs the working copy.
+`ZOODEALIO_API_KEY` set).
 
 ## Authenticate
 
@@ -43,9 +42,7 @@ It prints `{ok, email, name, keyPrefix, origin}` on stdout and never the key.
 
 The key is stored per API origin in `$XDG_CONFIG_HOME/zoodealio/credentials.json`
 (default `~/.config/zoodealio/credentials.json`; `%APPDATA%\zoodealio\credentials.json` on Windows),
-written atomically with mode `0600` in a `0700` directory. Keys are per environment:
-`zoodealio login --env dev` stores a separate login. `ZOODEALIO_WEB_URL` overrides the sign-in
-page origin the way `ZOODEALIO_API_URL` overrides the API origin.
+written atomically with mode `0600` in a `0700` directory.
 
 ### API key for CI and servers
 
@@ -96,17 +93,6 @@ Cursor (`.cursor/mcp.json`) or VS Code (`.vscode/mcp.json`, under `servers`):
 Run `zoodealio login` first (or put `ZOODEALIO_API_KEY` in the client's `env`). Stdout carries only
 JSON-RPC; logs go to stderr.
 
-## Environments
-
-| Selection | API origin |
-| --- | --- |
-| default | `https://api.zoodealio.ai` |
-| `--env dev` | `https://dev.api.zoodealio.ai` |
-| `ZOODEALIO_API_URL=http://localhost:5256` | that origin (overrides both) |
-
-Keys are per environment. Use a local API URL only for a local API; the port above is an
-example, use whichever yours runs on.
-
 ## Output and errors
 
 stdout carries JSON and nothing else: pretty-printed on a terminal, compact when piped
@@ -138,7 +124,6 @@ Route IDs are GUIDs and are checked before any request is made.
 
 | Flag | Effect |
 | --- | --- |
-| `--env prod\|dev` | Pick the environment (default `prod`) |
 | `--pretty` | Pretty-print JSON even when piped |
 | `--dry-run` | Print `{method, url, headers, body}` with the key redacted and send nothing; works without a key |
 | `--yes` | Confirm a destructive command (not needed with `--dry-run`) |
@@ -157,7 +142,7 @@ concurrency on `properties update`, `offers accept` and `offers request-details`
 | --- | --- | --- |
 | `properties list` | GET Properties | `--search`, `--state` |
 | `properties get <id>` | GET Properties/{id} | |
-| `properties create` | POST Properties | `--body` |
+| `properties create` | POST Properties | `--body`; `--agent <id>` assigns a team member or a pending invite |
 | `properties update <id>` | PUT Properties/{id} | `--body`, `--if-match`; replaces wholesale |
 | `properties photos list\|add\|delete` | photos | `add`: `--url` (repeatable) or `--body`; `delete <id> <photoId>` needs `--yes` |
 | `properties documents list\|add\|delete` | documents | same shape as photos |
@@ -169,7 +154,7 @@ concurrency on `properties update`, `offers accept` and `offers request-details`
 | `transactions get <id>` | GET Transactions/{id} | |
 | `transactions active` | GET Transactions/active | `--property` required |
 | `comping status <transactionId>` | GET Transactions/{id}/comping | |
-| `team members`, `team get <id>`, `teams list` | GET Team | `--search` |
+| `team members`, `team get <id>`, `teams list` | GET Team | `--search`; `team members` also lists pending invites (`kind: "invite"`) |
 | `team invite` | POST Team/members | `--email` (+ `--first-name`, `--last-name`, `--team`, `--admin-team`) or `--body` |
 | `team remove <id>` | DELETE Team/members/{id} | `--yes` required |
 | `webhooks event-types\|list\|deliveries` | GET Webhooks | `deliveries`: `--subscription`, `--status` |
@@ -241,25 +226,3 @@ zoodealio api GET Properties --query pageSize=5
 - No keychain or interactive prompts. Credentials are `ZOODEALIO_API_KEY` or the
   `credentials.json` written by `zoodealio login`.
 
-## Development
-
-```sh
-cd integrations/cli
-npm install
-npm run check   # eslint, tsc --noEmit (checkJs), node --test
-```
-
-## Releasing
-
-npm no longer lets a token that bypasses 2FA publish directly, so releases are staged and then
-approved by a maintainer with 2FA:
-
-```sh
-cd integrations/cli
-npm version <patch|minor|major> --no-git-tag-version   # in a PR, then merge
-npm run check
-npm stage publish --userconfig ~/.config/zoodealio/npm-publish.npmrc
-```
-
-Then approve it on npmjs.com (avatar → Staged Packages → Approve). A version with a `-` suffix
-(`0.2.0-beta.1`) is staged with `--tag next` so `latest` stays stable.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "zoodealio",
-  "version": "0.2.1",
+  "version": "0.3.0-dev.1607",
   "description": "Zoodealio command line tool: the partner API as JSON, built for people, scripts and AI agents",
   "license": "UNLICENSED",
   "repository": {

package/src/cli.js

@@ -2,7 +2,7 @@ const { CliError, usage } = require('./errors');
 const { parse, normalizeApiPath, METHODS } = require('./args');
 const { catalogue } = require('./commands');
 const { resolveBody } = require('./input');
-const { USER_AGENT, redactKey, scrubKeys, resolveOrigin, buildUrl, send } = require('./http');
+const { DEFAULT_ENV, USER_AGENT, redactKey, scrubKeys, resolveOrigin, buildUrl, send } = require('./http');
 const { readCredential, saveCredential, removeCredential } = require('./credentials');
 const { browserLogin, resolveWebOrigin, defaultDevice } = require('./login');
 const { bridge } = require('./mcp');
@@ -57,7 +57,8 @@ async function execute(argv, io, envKey, secrets) {
 
     if (command.name === 'commands') return emit(catalogue());
 
-    const origin = resolveOrigin(io.env, flags.env);
+    const envName = flags.env || DEFAULT_ENV;
+    const origin = resolveOrigin(io.env, envName);
     const stored = readCredential(io.env, origin);
     if (stored) secrets.add(stored.key);
     const source = envKey ? 'env' : stored ? 'login' : undefined;
@@ -68,13 +69,14 @@ async function execute(argv, io, envKey, secrets) {
         if (command.name === 'login') {
             const ui = createUi(io.stderr, { fancy: !!io.interactive && !io.env.NO_COLOR });
             const result = await browserLogin({
-                apiOrigin: origin, webOrigin: resolveWebOrigin(io.env, flags.env), device: (flags.name?.trim() || defaultDevice()).slice(0, 64),
-                envName: flags.env || 'prod', noBrowser: !!flags['no-browser'], openBrowser: io.openBrowser, copy: io.copy,
+                apiOrigin: origin, webOrigin: resolveWebOrigin(io.env, envName), device: (flags.name?.trim() || defaultDevice()).slice(0, 64),
+                envName, noBrowser: !!flags['no-browser'], openBrowser: io.openBrowser, copy: io.copy,
                 interactive: io.interactive, onKey: io.onKey, timeoutMs: io.loginTimeoutMs, ui, fetch: io.fetch,
             });
             secrets.add(result.key);
             const file = saveCredential(io.env, origin, { key: result.key, keyId: result.keyId, email: result.email, name: result.name });
-            const dev = flags.env && flags.env !== 'prod' ? ` --env ${flags.env}` : '';
+            // The hints run without --env only where that reaches the environment just signed in to.
+            const dev = envName === DEFAULT_ENV ? '' : ` --env ${envName}`;
             const home = io.env.HOME || io.env.USERPROFILE;
             const where = home && file.startsWith(home) ? `~${file.slice(home.length)}` : file;
             const { style } = ui;
@@ -86,7 +88,7 @@ async function execute(argv, io, envKey, secrets) {
             ];
             const width = Math.max(...next.map(([c]) => c.length)) + 3;
             ui.say();
-            ui.say(`${style.green('✓')} Signed in as ${style.bold(result.email)}${dev ? ` ${style.dim(`(${flags.env})`)}` : ''}`);
+            ui.say(`${style.green('✓')} Signed in as ${style.bold(result.email)}${envName === 'prod' ? '' : ` ${style.dim(`(${envName})`)}`}`);
             ui.say(`  ${style.dim(`Key "${result.name}" saved to ${where}`)}`);
             ui.say();
             ui.say(`  ${style.bold('Next')}`);
@@ -148,6 +150,11 @@ async function execute(argv, io, envKey, secrets) {
     if (flags.body !== undefined) {
         if ((command.convenience || []).some((n) => flags[n] !== undefined)) throw usage('use either --body or the convenience flags, not both');
         body = await resolveBody(flags.body, io.stdin);
+        const extra = command.overlay && command.overlay(flags);
+        if (extra && Object.keys(extra).length) {
+            if (typeof body !== 'object' || body === null || Array.isArray(body)) throw usage('--body must be a JSON object when combined with convenience flags');
+            body = { ...body, ...extra };
+        }
     } else if (command.build) {
         body = command.build(flags);
         if (body === undefined && command.body === 'required') throw usage('provide --body or the convenience flags');

package/src/commands.js

@@ -7,7 +7,7 @@ const { parseJsonArg } = require('./input');
  * @typedef {{name: string, description: string, guid?: boolean}} Arg
  * @typedef {{name: string, summary: string, method: string | null, path: string | null, args: Arg[],
  *   flags: Flag[], body?: 'required' | 'optional', convenience?: string[], destructive?: boolean,
- *   auth?: boolean, build?: (flags: Record<string, any>) => unknown, notes?: string[]}} Command
+ *   auth?: boolean, build?: (flags: Record<string, any>) => unknown, overlay?: (flags: Record<string, any>) => Record<string, unknown>, notes?: string[]}} Command
  */
 
 /**
@@ -50,7 +50,14 @@ const COMMANDS = [
         flags: [str('search', 'Free-text search', { query: 'search' }), str('state', 'Two-letter state code', { query: 'stateCode' }), ...PAGING],
     }),
     cmd('properties get', 'Get one property', 'GET', '/openapi/Properties/{id}', { args: [id('id', 'Property id')] }),
-    cmd('properties create', 'Create a property', 'POST', '/openapi/Properties', { body: 'required', flags: [BODY] }),
+    cmd('properties create', 'Create a property', 'POST', '/openapi/Properties', {
+        body: 'required',
+        flags: [str('agent', 'Agent to assign: a team member id, or a pending invite id from `team members`'), BODY],
+        overlay: (f) => {
+            if (f.agent !== undefined && !GUID.test(f.agent)) throw usage(`agent id is not a GUID: ${f.agent}`);
+            return compact({ agentId: f.agent });
+        },
+    }),
     cmd('properties update', 'Replace a property (wholesale)', 'PUT', '/openapi/Properties/{id}', {
         args: [id('id', 'Property id')], body: 'required', flags: [BODY, IF_MATCH],
     }),
@@ -95,7 +102,7 @@ const COMMANDS = [
     cmd('comping status', 'Get AI comping status for a transaction', 'GET', '/openapi/Transactions/{transactionId}/comping', {
         args: [id('transactionId', 'Transaction id')],
     }),
-    cmd('team members', 'List team members', 'GET', '/openapi/Team/members', {
+    cmd('team members', 'List team members, including pending invites', 'GET', '/openapi/Team/members', {
         flags: [str('search', 'Free-text search', { query: 'search' }), ...PAGING],
     }),
     cmd('team get', 'Get one team member', 'GET', '/openapi/Team/members/{id}', { args: [id('id', 'Member id')] }),
@@ -179,7 +186,7 @@ const GUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 
 /** Flags accepted by every command. */
 const GLOBAL_FLAGS = /** @type {Flag[]} */ ([
-    str('env', 'prod (default) or dev; ZOODEALIO_API_URL overrides'),
+    str('env', 'prod or dev (default prod; dev on a dev build); ZOODEALIO_API_URL overrides'),
     { name: 'pretty', type: 'boolean', description: 'Pretty-print JSON even when piped' },
     { name: 'dry-run', type: 'boolean', description: 'Print the request (key redacted) without sending it' },
     { name: 'yes', type: 'boolean', description: 'Confirm a destructive command (not needed with --dry-run)' },

package/src/http.js

@@ -4,6 +4,18 @@ const pkg = require('../package.json');
 const USER_AGENT = `zoodealio-cli/${pkg.version}`;
 const ENVS = { prod: 'https://api.zoodealio.ai', dev: 'https://dev.api.zoodealio.ai' };
 
+/**
+ * CI publishes `<version>-dev.<run>` under the `dev` tag after the dev deployment, so that build
+ * talks to dev unless told otherwise. Every other version is a release and talks to prod.
+ * @param {string} version
+ * @returns {'prod'|'dev'}
+ */
+function defaultEnv(version) {
+    return version.includes('-dev.') ? 'dev' : 'prod';
+}
+
+const DEFAULT_ENV = defaultEnv(pkg.version);
+
 /** @type {Record<number, [number, string]>} status -> [exit code, error code slug] */
 const STATUS_MAP = {
     400: [2, 'bad_request'],
@@ -47,7 +59,7 @@ function scrubKeys(text, keys) {
 function resolveOrigin(env, envName) {
     const override = env.ZOODEALIO_API_URL;
     if (override) return override.replace(/\/+$/, '');
-    const name = envName || 'prod';
+    const name = envName || DEFAULT_ENV;
     if (!Object.hasOwn(ENVS, name)) throw usage('--env must be prod or dev');
     return ENVS[/** @type {'prod'|'dev'} */ (name)];
 }
@@ -123,4 +135,4 @@ async function send(doFetch, req) {
     }
 }
 
-module.exports = { ENVS, USER_AGENT, redactKey, scrubKeys, resolveOrigin, buildUrl, send };
+module.exports = { ENVS, DEFAULT_ENV, USER_AGENT, defaultEnv, redactKey, scrubKeys, resolveOrigin, buildUrl, send };

package/src/login.js

@@ -3,7 +3,7 @@ const http = require('node:http');
 const os = require('node:os');
 const { spawn } = require('node:child_process');
 const { CliError } = require('./errors');
-const { USER_AGENT, send } = require('./http');
+const { DEFAULT_ENV, USER_AGENT, send } = require('./http');
 
 const WEB_ENVS = { prod: 'https://zoodealio.ai', dev: 'https://dev.zoodealio.ai' };
 const LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
@@ -15,7 +15,7 @@ const LOGIN_TIMEOUT_MS = 5 * 60 * 1000;
  */
 function resolveWebOrigin(env, envName) {
     if (env.ZOODEALIO_WEB_URL) return env.ZOODEALIO_WEB_URL.replace(/\/+$/, '');
-    return WEB_ENVS[/** @type {'prod'|'dev'} */ (envName === 'dev' ? 'dev' : 'prod')];
+    return WEB_ENVS[/** @type {'prod'|'dev'} */ ((envName || DEFAULT_ENV) === 'dev' ? 'dev' : 'prod')];
 }
 
 /**