makea-cli 0.2.1__tar.gz → 0.2.4__tar.gz

{makea_cli-0.2.1 → makea_cli-0.2.4}/CHANGELOG.md

@@ -1,5 +1,58 @@
 # Changelog
 
+## 0.2.4
+
+For Beeboo acting for a brand through the CLI (the Claude agent on the product
+channel).
+
+- **Token broker mode.** With `MAKEA_TOKEN_BROKER=<unix socket>` the CLI sends
+  its own argv to the broker and uses the token it gets back
+  (`x-impersonation-token`) for that one invocation. There is no fallback to a
+  cached login in this mode: a command that did not come through the host's
+  gate gets no token.
+- `designer submit tech-pack <product_id>` (`ask`): confirm the tech pack.
+- `designer create quote-award <product_id> --quote <supplier link id>` (`ask`):
+  choose the quote to sample with. Creates or reuses a DRAFT sampling order and
+  prints its id.
+- `designer create checkout --key sampling:<id> [--key …] --accept-terms`
+  (`ask`): a Stripe checkout link for one or more charges (sampling,
+  production deposit/final, shipping, misc). It is the one command near a
+  payment endpoint: it creates the session and nothing is charged until the
+  brand pays on Stripe's page. Bank transfers and subscriptions stay out.
+
+## 0.2.3
+
+- `admin update quote --ip-schedule-hidden/--ip-schedule-visible`: hide a
+  supplier's IP Schedule from the customer, or show it again. Visible unless set.
+- `--ip-schedule-json` help describes the version 2 schedule: two buckets
+  (`production_files`, tech pack and BOM included, and `physical_tooling`),
+  "not created" by default, and optional.
+
+## 0.2.2
+
+Order lifecycle, exposed in tiers rather than all at once.
+
+- `ask` (an agent must put it in front of a person): `designer submit
+  sampling-order` (confirm a sample order), `designer submit production-order`,
+  `designer update production-order --complete|--links-file`, `designer update
+  shipping-order --confirm-receive`.
+- `never` (an agent must not run it at all): `designer update sampling-order
+  --cancel`, `designer delete sampling-order` (DRAFT only, the backend enforces
+  that), `designer delete shipping-order` — the endpoint is named cancel but it
+  unlinks every production order and removes the shipment.
+
+Cancel and delete are separate commands rather than flags on an `ask` one. The
+grade is per command, so putting them on a milder command would launder a
+destructive action through the wrong grade.
+
+**The grade is advice to a harness, not a gate in the CLI.** A person in a
+terminal runs any of these; `never` means an agent may not decide to.
+
+Payments, bank transfers and subscriptions stay out of the CLI. The endpoints
+exist, and a `--dry-run` would even make them look safe, but giving them a
+command puts a charge one step away from an agent and no approval grade makes
+that a good trade. A test asserts no write command reaches them.
+
 ## 0.2.1
 
 Each persona can now clear its own queue. `list task` and `list action` could show

{makea_cli-0.2.1 → makea_cli-0.2.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: makea-cli
-Version: 0.2.1
+Version: 0.2.4
 Summary: Makea admin CLI (browser login + Makea admin HTTP API)
 Requires-Python: >=3.10
 Requires-Dist: click<9,>=8.1
@@ -79,6 +79,8 @@ makea-cli auth --logout
 
 每条命令都有的开关：`--describe` 打印它的机器可读定义（flags、副作用、审批档位）；`--json` 强制纯 JSON（stdout 不是终端时默认就是）。读命令还有 `--fields a,b,c` 只保留这些字段；`list` 命令还有 `--limit N`（后端自己分页的就透传，不分页的在本地截断并在结果里写明 `truncated` / `returned` / `omitted`）；写命令还有 `--dry-run`（打印将要发出的请求，不发）和 `--idempotency-key <k>`。`makea-cli --describe --json` 打印全量 manifest。
 
+写命令的**审批档位**（manifest 的 `approval`）是给 harness 的建议，不是 CLI 的门：`auto` 可以自动跑；`ask` 必须先让人确认；`never` agent 不许自己决定（人在终端照常能跑）。动钱的端点（payments / bank transfer / subscription）**故意不进 CLI**。
+
 exit code：`0` 成功 · `2` 用法错 · `3` 未登录或身份与 persona 不匹配 · `4` 后端拒绝（4xx，错误 JSON 在 stderr）· `5` 没跑完（5xx / 网络 / 超时）——读命令直接重试即可；**写命令可能已经生效了，重试前先读一遍状态**。
 
 0.1 的平铺命令名（`list-users`、`submit-supplier-quote` …）仍可用，作为隐藏的过渡别名转发到新命令并在 stderr 打一行提示；**下一个 minor 版本删除**。完整的改名对照表在 [CHANGELOG.md](CHANGELOG.md)。
@@ -142,11 +144,15 @@ exit code：`0` 成功 · `2` 用法错 · `3` 未登录或身份与 persona 不
 
 | 命令 | 读/写 | 后端 | 说明 | 旧名 |
 |---|---|---|---|---|
+| `makea-cli designer create checkout` | write（ask） | `POST /designer/payments/basket/create-session` | a Stripe checkout link for one or more charges. --key repeats: sampling:<sampling_order_id>, production:<production_o… | — |
 | `makea-cli designer create collection` | write（auto） | `POST /designer/collections/create` | create or update a designer collection. | `designer-create-collection` |
 | `makea-cli designer create note` | write（ask） | `POST /designer/products/{product_id}/notes` | post a message into a product's conversation. | — |
 | `makea-cli designer create product` | write（ask） | `POST /designer/product/create_or_update_product` | payload must match manufacture/specifications (all frontend fields; categories/subcategories + collection_id in --hel… | `designer-upsert-product` |
+| `makea-cli designer create quote-award` | write（ask） | `POST /designer/quotes/group_pay_prepare` | choose the supplier quote to sample with. --quote is the supplier link id from `designer list supplier-link`; repeat … | — |
 | `makea-cli designer create rfq` | write（ask） | `POST /designer/product/send_rfq` | ask the chosen suppliers to quote on a product. --supplier repeats; --makea-sourcing also asks Makea to source. | — |
 | `makea-cli designer create sampling-order` | write（ask） | `POST /designer/sampling_orders` | order samples. --file is the full order payload (product_order_id, items, fees …); run --dry-run first and read the b… | — |
+| `makea-cli designer delete sampling-order` | write（never） | `DELETE /designer/sampling_orders/{sampling_order_id}` | delete a DRAFT sample order. The backend refuses any other status. Graded `never`. | — |
+| `makea-cli designer delete shipping-order` | write（never） | `POST /designer/shipping_orders/{shipping_order_id}/cancel` | the endpoint is called cancel but it unlinks every production order and removes the shipment, so it is a delete here.… | — |
 | `makea-cli designer download document` | read | `GET /designer/document/download` | save bytes for user_id + document_id (designer-authenticated; same query contract as admin document download). | `designer-download-document` |
 | `makea-cli designer get collection` | read | `GET /designer/collections/{collection_id}/overview` | one collection with its products, orders and lifecycle in a single read. | — |
 | `makea-cli designer get lifecycle` | read | `GET /designer/product_orders/{product_order_id}/lifecycle` | which stage this product is in. | — |
@@ -167,10 +173,16 @@ exit code：`0` 成功 · `2` 用法错 · `3` 未登录或身份与 persona 不
 | `makea-cli designer list task` | read | `GET /designer/tasks` | what the platform is waiting on you for. | — |
 | `makea-cli designer search note` | read | `GET /designer/products/{product_id}/channel_search` | full-text search across a product's conversation; --channel narrows to one channel key. | — |
 | `makea-cli designer set product-collection` | write（auto） | `POST /designer/products/{id}/link-to-collection` | assign product to a collection. | `designer-link-product-to-collection` |
+| `makea-cli designer submit production-order` | write（ask） | `POST /designer/production_orders/{production_order_id}/submit` | submit a 大货 order. This is the commitment, so --dry-run and confirm with the user first. | — |
+| `makea-cli designer submit sampling-order` | write（ask） | `POST /designer/sampling_orders/{sampling_order_id}/confirm` | confirm a sample order so the supplier starts. Run --dry-run first and read it back to the user. | — |
+| `makea-cli designer submit tech-pack` | write（ask） | `POST /designer/products/{product_id}/technical-specifications/confirm` | confirm the tech pack, the step before anyone is asked to quote. | — |
 | `makea-cli designer update action` | write（auto） | `POST /designer/actions/{action_id}/{acknowledge\|snooze\|dismiss}` | respond to one of the pending actions from `designer list action`. An action is closed by the fact it asks for, not b… | — |
 | `makea-cli designer update note` | write（ask） | `POST /designer/products/{product_id}/notes/{note_id}/{accept\|reject}` | decide on a task the assistant proposed on a product. | — |
 | `makea-cli designer update product` | write（auto） | `POST /designer/product/update_basic_info` | patch fields on a product. --cover-image / --back-image take a document id and are what the assistant's set_product_i… | — |
+| `makea-cli designer update production-order` | write（ask） | `POST /designer/production_orders/{production_order_id}/complete` | POST /designer/production_orders/{id}/complete, or PUT the order to re-pick which supplier links it covers (--links-f… | — |
 | `makea-cli designer update proposal` | write（ask） | `POST /designer/beeboo_proposals/approve` | apply one spec change the assistant proposed. This edits the pack, so read the proposal first. | — |
+| `makea-cli designer update sampling-order` | write（never） | `POST /designer/sampling_orders/{sampling_order_id}/cancel` | cancel a sample order. Graded `never`: an agent must not do this on its own, a person runs it. | — |
+| `makea-cli designer update shipping-order` | write（ask） | `POST /designer/shipping_orders/{shipping_order_id}/confirm_receive` | say the goods arrived. The backend accepts this only while the shipment is IN_TRANSIT. | — |
 | `makea-cli designer update suggested-action` | write（ask） | `POST /designer/channels/{channel_id}/suggested_actions/bulk_accept` | accept several of a channel's suggested actions in one write. --action takes note_id:action_id and repeats. | — |
 | `makea-cli designer update task` | write（auto） | `POST /designer/tasks/{complete\|dismiss}` | close one of the tasks from `designer list task`. Complete means you did it; dismiss means it does not apply. | — |
 | `makea-cli designer upload document` | write（auto） | `POST /designer/document/upload` | upload a file for the current designer token; optional product_id (omit to start a new draft id server-side). | `designer-upload-document` |

{makea_cli-0.2.1 → makea_cli-0.2.4}/README.md

@@ -67,6 +67,8 @@ makea-cli auth --logout
 
 每条命令都有的开关：`--describe` 打印它的机器可读定义（flags、副作用、审批档位）；`--json` 强制纯 JSON（stdout 不是终端时默认就是）。读命令还有 `--fields a,b,c` 只保留这些字段；`list` 命令还有 `--limit N`（后端自己分页的就透传，不分页的在本地截断并在结果里写明 `truncated` / `returned` / `omitted`）；写命令还有 `--dry-run`（打印将要发出的请求，不发）和 `--idempotency-key <k>`。`makea-cli --describe --json` 打印全量 manifest。
 
+写命令的**审批档位**（manifest 的 `approval`）是给 harness 的建议，不是 CLI 的门：`auto` 可以自动跑；`ask` 必须先让人确认；`never` agent 不许自己决定（人在终端照常能跑）。动钱的端点（payments / bank transfer / subscription）**故意不进 CLI**。
+
 exit code：`0` 成功 · `2` 用法错 · `3` 未登录或身份与 persona 不匹配 · `4` 后端拒绝（4xx，错误 JSON 在 stderr）· `5` 没跑完（5xx / 网络 / 超时）——读命令直接重试即可；**写命令可能已经生效了，重试前先读一遍状态**。
 
 0.1 的平铺命令名（`list-users`、`submit-supplier-quote` …）仍可用，作为隐藏的过渡别名转发到新命令并在 stderr 打一行提示；**下一个 minor 版本删除**。完整的改名对照表在 [CHANGELOG.md](CHANGELOG.md)。
@@ -130,11 +132,15 @@ exit code：`0` 成功 · `2` 用法错 · `3` 未登录或身份与 persona 不
 
 | 命令 | 读/写 | 后端 | 说明 | 旧名 |
 |---|---|---|---|---|
+| `makea-cli designer create checkout` | write（ask） | `POST /designer/payments/basket/create-session` | a Stripe checkout link for one or more charges. --key repeats: sampling:<sampling_order_id>, production:<production_o… | — |
 | `makea-cli designer create collection` | write（auto） | `POST /designer/collections/create` | create or update a designer collection. | `designer-create-collection` |
 | `makea-cli designer create note` | write（ask） | `POST /designer/products/{product_id}/notes` | post a message into a product's conversation. | — |
 | `makea-cli designer create product` | write（ask） | `POST /designer/product/create_or_update_product` | payload must match manufacture/specifications (all frontend fields; categories/subcategories + collection_id in --hel… | `designer-upsert-product` |
+| `makea-cli designer create quote-award` | write（ask） | `POST /designer/quotes/group_pay_prepare` | choose the supplier quote to sample with. --quote is the supplier link id from `designer list supplier-link`; repeat … | — |
 | `makea-cli designer create rfq` | write（ask） | `POST /designer/product/send_rfq` | ask the chosen suppliers to quote on a product. --supplier repeats; --makea-sourcing also asks Makea to source. | — |
 | `makea-cli designer create sampling-order` | write（ask） | `POST /designer/sampling_orders` | order samples. --file is the full order payload (product_order_id, items, fees …); run --dry-run first and read the b… | — |
+| `makea-cli designer delete sampling-order` | write（never） | `DELETE /designer/sampling_orders/{sampling_order_id}` | delete a DRAFT sample order. The backend refuses any other status. Graded `never`. | — |
+| `makea-cli designer delete shipping-order` | write（never） | `POST /designer/shipping_orders/{shipping_order_id}/cancel` | the endpoint is called cancel but it unlinks every production order and removes the shipment, so it is a delete here.… | — |
 | `makea-cli designer download document` | read | `GET /designer/document/download` | save bytes for user_id + document_id (designer-authenticated; same query contract as admin document download). | `designer-download-document` |
 | `makea-cli designer get collection` | read | `GET /designer/collections/{collection_id}/overview` | one collection with its products, orders and lifecycle in a single read. | — |
 | `makea-cli designer get lifecycle` | read | `GET /designer/product_orders/{product_order_id}/lifecycle` | which stage this product is in. | — |
@@ -155,10 +161,16 @@ exit code：`0` 成功 · `2` 用法错 · `3` 未登录或身份与 persona 不
 | `makea-cli designer list task` | read | `GET /designer/tasks` | what the platform is waiting on you for. | — |
 | `makea-cli designer search note` | read | `GET /designer/products/{product_id}/channel_search` | full-text search across a product's conversation; --channel narrows to one channel key. | — |
 | `makea-cli designer set product-collection` | write（auto） | `POST /designer/products/{id}/link-to-collection` | assign product to a collection. | `designer-link-product-to-collection` |
+| `makea-cli designer submit production-order` | write（ask） | `POST /designer/production_orders/{production_order_id}/submit` | submit a 大货 order. This is the commitment, so --dry-run and confirm with the user first. | — |
+| `makea-cli designer submit sampling-order` | write（ask） | `POST /designer/sampling_orders/{sampling_order_id}/confirm` | confirm a sample order so the supplier starts. Run --dry-run first and read it back to the user. | — |
+| `makea-cli designer submit tech-pack` | write（ask） | `POST /designer/products/{product_id}/technical-specifications/confirm` | confirm the tech pack, the step before anyone is asked to quote. | — |
 | `makea-cli designer update action` | write（auto） | `POST /designer/actions/{action_id}/{acknowledge\|snooze\|dismiss}` | respond to one of the pending actions from `designer list action`. An action is closed by the fact it asks for, not b… | — |
 | `makea-cli designer update note` | write（ask） | `POST /designer/products/{product_id}/notes/{note_id}/{accept\|reject}` | decide on a task the assistant proposed on a product. | — |
 | `makea-cli designer update product` | write（auto） | `POST /designer/product/update_basic_info` | patch fields on a product. --cover-image / --back-image take a document id and are what the assistant's set_product_i… | — |
+| `makea-cli designer update production-order` | write（ask） | `POST /designer/production_orders/{production_order_id}/complete` | POST /designer/production_orders/{id}/complete, or PUT the order to re-pick which supplier links it covers (--links-f… | — |
 | `makea-cli designer update proposal` | write（ask） | `POST /designer/beeboo_proposals/approve` | apply one spec change the assistant proposed. This edits the pack, so read the proposal first. | — |
+| `makea-cli designer update sampling-order` | write（never） | `POST /designer/sampling_orders/{sampling_order_id}/cancel` | cancel a sample order. Graded `never`: an agent must not do this on its own, a person runs it. | — |
+| `makea-cli designer update shipping-order` | write（ask） | `POST /designer/shipping_orders/{shipping_order_id}/confirm_receive` | say the goods arrived. The backend accepts this only while the shipment is IN_TRANSIT. | — |
 | `makea-cli designer update suggested-action` | write（ask） | `POST /designer/channels/{channel_id}/suggested_actions/bulk_accept` | accept several of a channel's suggested actions in one write. --action takes note_id:action_id and repeats. | — |
 | `makea-cli designer update task` | write（auto） | `POST /designer/tasks/{complete\|dismiss}` | close one of the tasks from `designer list task`. Complete means you did it; dismiss means it does not apply. | — |
 | `makea-cli designer upload document` | write（auto） | `POST /designer/document/upload` | upload a file for the current designer token; optional product_id (omit to start a new draft id server-side). | `designer-upload-document` |

makea_cli-0.2.4/makea_cli/__init__.py

@@ -0,0 +1 @@
+__version__ = "0.2.4"

{makea_cli-0.2.1 → makea_cli-0.2.4}/makea_cli/api_client.py

@@ -12,6 +12,7 @@ import httpx
 from contextvars import ContextVar
 from dataclasses import dataclass
 
+from makea_cli import broker
 from makea_cli.auth_pkce import ensure_fresh_id_token
 from makea_cli.config import api_base_url
 from makea_cli.errors import ApiError, AuthError, UnknownOutcomeError
@@ -53,8 +54,20 @@ def _token() -> str:
         raise AuthError(str(e)) from e
 
 
+def _auth_headers() -> dict[str, str]:
+    """Who this request is from.
+
+    Under a token broker the token is a delegation the backend reads from the
+    impersonation header; there is no bearer at all, so a command that did not
+    come through the host's gate has nothing to send.
+    """
+    if broker.broker_path():
+        return {"x-impersonation-token": broker.brokered_token() or ""}
+    return {"Authorization": f"Bearer {_token()}"}
+
+
 def _headers() -> dict[str, str]:
-    headers = {"Authorization": f"Bearer {_token()}", "Accept": "application/json"}
+    headers = {**_auth_headers(), "Accept": "application/json"}
     if state.idempotency_key:
         headers["Idempotency-Key"] = state.idempotency_key
     return headers
@@ -254,7 +267,7 @@ def post_multipart_with_files(
 def _download(path: str, params: dict[str, Any], *, timeout: float) -> tuple[bytes, str | None]:
     """GET a file (or follow the redirect to its presigned URL); returns (bytes, filename)."""
     url = f"{api_base_url()}{path}"
-    headers = {"Authorization": f"Bearer {_token()}", "Accept": "*/*"}
+    headers = {**_auth_headers(), "Accept": "*/*"}
     try:
         with httpx.Client(timeout=timeout, follow_redirects=True) as client:
             r = client.get(url, headers=headers, params=params)
@@ -1185,6 +1198,21 @@ def designer_send_rfq(body: dict[str, Any]) -> Any:
     return post_json("/designer/product/send_rfq", body)
 
 
+def designer_confirm_tech_spec(product_id: str) -> Any:
+    """POST /designer/products/{id}/technical-specifications/confirm — confirm the tech pack."""
+    return post_json(f"/designer/products/{product_id}/technical-specifications/confirm", {})
+
+
+def designer_award_quotes(body: dict[str, Any]) -> Any:
+    """POST /designer/quotes/group_pay_prepare — DRAFT sampling orders for chosen quotes."""
+    return post_json("/designer/quotes/group_pay_prepare", body)
+
+
+def designer_create_checkout(body: dict[str, Any]) -> Any:
+    """POST /designer/payments/basket/create-session — a Stripe checkout for charges."""
+    return post_json("/designer/payments/basket/create-session", body)
+
+
 def designer_list_collections() -> Any:
     """GET /designer/collections — the brand's collections."""
     return get_json("/designer/collections")
@@ -1312,3 +1340,49 @@ def designer_list_actions(*, product_id: str | None = None) -> Any:
 def supplier_list_tasks() -> Any:
     """GET /supplier/tasks — the factory's onboarding and per-order to-dos."""
     return get_json("/supplier/tasks")
+
+
+# --- order lifecycle (designer). Tiered on purpose: see the commands' approval
+# --- grades -- submit/confirm ask a person, cancel/delete are never automatic,
+# --- and nothing here moves money. Payments and subscriptions are deliberately
+# --- absent from the CLI: an agent should not have a path to a charge.
+
+
+def designer_confirm_sampling_order(sampling_order_id: str) -> Any:
+    """POST /designer/sampling_orders/{id}/confirm — the brand confirms the sample order."""
+    return post_json(f"/designer/sampling_orders/{sampling_order_id}/confirm", {})
+
+
+def designer_cancel_sampling_order(sampling_order_id: str) -> Any:
+    """POST /designer/sampling_orders/{id}/cancel — cancel it."""
+    return post_json(f"/designer/sampling_orders/{sampling_order_id}/cancel", {})
+
+
+def designer_delete_sampling_order(sampling_order_id: str) -> Any:
+    """DELETE /designer/sampling_orders/{id} — DRAFT only; the backend refuses anything else."""
+    return delete_json(f"/designer/sampling_orders/{sampling_order_id}")
+
+
+def designer_submit_production_order(production_order_id: str) -> Any:
+    """POST /designer/production_orders/{id}/submit — hand the bulk order to the supplier."""
+    return post_json(f"/designer/production_orders/{production_order_id}/submit", {})
+
+
+def designer_complete_production_order(production_order_id: str) -> Any:
+    """POST /designer/production_orders/{id}/complete — the brand marks the bulk order done."""
+    return post_json(f"/designer/production_orders/{production_order_id}/complete", {})
+
+
+def designer_update_production_order(production_order_id: str, body: dict[str, Any]) -> Any:
+    """PUT /designer/production_orders/{id} — re-pick which supplier links the order covers."""
+    return put_json(f"/designer/production_orders/{production_order_id}", body, timeout=120.0)
+
+
+def designer_confirm_receive_shipping_order(shipping_order_id: str) -> Any:
+    """POST /designer/shipping_orders/{id}/confirm_receive — IN_TRANSIT only."""
+    return post_json(f"/designer/shipping_orders/{shipping_order_id}/confirm_receive", {})
+
+
+def designer_cancel_shipping_order(shipping_order_id: str) -> Any:
+    """POST /designer/shipping_orders/{id}/cancel — unlinks every production order, then deletes it."""
+    return post_json(f"/designer/shipping_orders/{shipping_order_id}/cancel", {})

makea_cli-0.2.4/makea_cli/broker.py

@@ -0,0 +1,83 @@
+"""Token broker client: how the CLI acts for someone without holding their token.
+
+A host that runs the CLI on a user's behalf (the Beeboo agent runner) does not
+put that user's token in the environment, where any process in the sandbox
+could read it. It runs a broker on a unix socket and names it in
+``MAKEA_TOKEN_BROKER``. Before a command runs, the host's gate has already
+looked at the exact command line and left a one-time ticket for it; the CLI
+sends its own argv and gets back a token that is good for this invocation.
+
+A process that did not come through the gate (``python -c``, ``curl``, a CLI
+call wrapped in a script) has no ticket and gets nothing. That is the whole
+point, so there is deliberately no fallback to a cached login in this mode.
+"""
+
+from __future__ import annotations
+
+import json
+import os
+import socket
+import sys
+
+from makea_cli.errors import AuthError
+
+BROKER_ENV = "MAKEA_TOKEN_BROKER"
+
+# A broker lives on the same box; anything slower than this is a broker that
+# is not there.
+_TIMEOUT_SECONDS = 10.0
+
+# One invocation spends one ticket. Every request the command makes reuses the
+# token the ticket bought.
+_cached: dict[str, str] | None = None
+
+
+def broker_path() -> str | None:
+    path = (os.environ.get(BROKER_ENV) or "").strip()
+    return path or None
+
+
+def invocation_argv() -> list[str]:
+    """This process's command line, as the gate saw it (without the program name)."""
+    return list(sys.argv[1:])
+
+
+def exchange(path: str, argv: list[str]) -> dict[str, str]:
+    """Trade this command line for ``{"token", "persona"}``, or raise AuthError."""
+    request = json.dumps({"argv": argv}).encode("utf-8") + b"\n"
+    try:
+        with socket.socket(socket.AF_UNIX, socket.SOCK_STREAM) as sock:
+            sock.settimeout(_TIMEOUT_SECONDS)
+            sock.connect(path)
+            sock.sendall(request)
+            chunks = []
+            while True:
+                chunk = sock.recv(65536)
+                if not chunk:
+                    break
+                chunks.append(chunk)
+                if chunk.endswith(b"\n"):
+                    break
+    except OSError as e:
+        raise AuthError(f"token broker unavailable ({e.__class__.__name__})") from e
+    try:
+        reply = json.loads(b"".join(chunks).decode("utf-8") or "{}")
+    except (UnicodeDecodeError, json.JSONDecodeError) as e:
+        raise AuthError("token broker sent an unreadable reply") from e
+    if not reply.get("ok") or not reply.get("token"):
+        raise AuthError(
+            str(reply.get("error") or "the token broker refused this command"),
+            detail={"broker": True},
+        )
+    return {"token": str(reply["token"]), "persona": str(reply.get("persona") or "")}
+
+
+def brokered_token() -> str | None:
+    """The token for this invocation when a broker is configured, else None."""
+    global _cached
+    path = broker_path()
+    if not path:
+        return None
+    if _cached is None:
+        _cached = exchange(path, invocation_argv())
+    return _cached["token"]

{makea_cli-0.2.1 → makea_cli-0.2.4}/makea_cli/commands/brand/cmd.py

@@ -562,6 +562,197 @@ def register(app: typer.Typer) -> None:
             body["channel_key"] = channel
         print_json_or_exit(console, lambda: api_client.designer_add_product_note(product_id, body))
 
+    # --- order lifecycle ---------------------------------------------------------
+    #
+    # The `approval` grade on each of these is advice to a harness, not a gate in
+    # the CLI: a person in a terminal just runs the command. `ask` means an agent
+    # must put it in front of someone; `never` means an agent must not run it at
+    # all, which is why cancel and delete are their own commands rather than flags
+    # on an `ask` one -- the grade is per command, so mixing them would launder a
+    # destructive action through a milder grade.
+    #
+    # Payments and subscriptions are deliberately absent. They exist on the
+    # backend; giving them a CLI surface would put a charge one command away from
+    # an agent, and no approval grade makes that a good trade.
+
+    @command(
+        app,
+        "designer",
+        "submit",
+        "sampling-order",
+        api="POST /designer/sampling_orders/{sampling_order_id}/confirm",
+        side_effects=[
+            "confirms the sample order to the supplier",
+            "starts the supplier's clock on it",
+        ],
+        approval="ask",
+        help=(
+            "POST /designer/sampling_orders/{id}/confirm — confirm a sample order so the "
+            "supplier starts. Run --dry-run first and read it back to the user."
+        ),
+    )
+    def submit_sampling_order(
+        sampling_order_id: str = typer.Argument(..., help="Sampling order id."),
+    ) -> None:
+        """Confirm a sampling order."""
+        print_json_or_exit(
+            console, lambda: api_client.designer_confirm_sampling_order(sampling_order_id)
+        )
+
+    @command(
+        app,
+        "designer",
+        "update",
+        "sampling-order",
+        api="POST /designer/sampling_orders/{sampling_order_id}/cancel",
+        side_effects=["cancels the order", "tells the supplier to stop"],
+        approval="never",
+        help=(
+            "POST /designer/sampling_orders/{id}/cancel — cancel a sample order. Graded "
+            "`never`: an agent must not do this on its own, a person runs it."
+        ),
+    )
+    def update_sampling_order(
+        sampling_order_id: str = typer.Argument(..., help="Sampling order id."),
+        cancel: bool = typer.Option(
+            ..., "--cancel", help="The only operation here; explicit on purpose."
+        ),
+    ) -> None:
+        """Cancel a sampling order."""
+        if not cancel:
+            raise typer.BadParameter("--cancel is required")
+        print_json_or_exit(
+            console, lambda: api_client.designer_cancel_sampling_order(sampling_order_id)
+        )
+
+    @command(
+        app,
+        "designer",
+        "delete",
+        "sampling-order",
+        api="DELETE /designer/sampling_orders/{sampling_order_id}",
+        side_effects=["removes the order row; the backend allows this on DRAFT only"],
+        approval="never",
+        help=(
+            "DELETE /designer/sampling_orders/{id} — delete a DRAFT sample order. The backend "
+            "refuses any other status. Graded `never`."
+        ),
+    )
+    def delete_sampling_order(
+        sampling_order_id: str = typer.Argument(..., help="Sampling order id (DRAFT)."),
+    ) -> None:
+        """Delete a draft sampling order."""
+        print_json_or_exit(
+            console, lambda: api_client.designer_delete_sampling_order(sampling_order_id)
+        )
+
+    @command(
+        app,
+        "designer",
+        "submit",
+        "production-order",
+        api="POST /designer/production_orders/{production_order_id}/submit",
+        side_effects=["hands the bulk order to the supplier", "creates its charges"],
+        approval="ask",
+        help=(
+            "POST /designer/production_orders/{id}/submit — submit a 大货 order. This is the "
+            "commitment, so --dry-run and confirm with the user first."
+        ),
+    )
+    def submit_production_order(
+        production_order_id: str = typer.Argument(..., help="Production order id."),
+    ) -> None:
+        """Submit a production order."""
+        print_json_or_exit(
+            console, lambda: api_client.designer_submit_production_order(production_order_id)
+        )
+
+    @command(
+        app,
+        "designer",
+        "update",
+        "production-order",
+        api="POST /designer/production_orders/{production_order_id}/complete",
+        side_effects=["completing closes the order for both sides"],
+        approval="ask",
+        help=(
+            "POST /designer/production_orders/{id}/complete, or PUT the order to re-pick which "
+            "supplier links it covers (--links-file, same body shape as creating it)."
+        ),
+    )
+    def update_production_order(
+        production_order_id: str = typer.Argument(..., help="Production order id."),
+        complete: bool = typer.Option(False, "--complete", help="Mark the order finished."),
+        links_file: Path | None = typer.Option(
+            None,
+            "--links-file",
+            exists=True,
+            dir_okay=False,
+            help="JSON with selected_links, to change what the order covers.",
+        ),
+    ) -> None:
+        """Complete a production order, or change the links it covers."""
+        if complete == (links_file is not None):
+            raise typer.BadParameter("pass exactly one of --complete / --links-file")
+        if complete:
+            run = lambda: api_client.designer_complete_production_order(production_order_id)  # noqa: E731
+        else:
+            body = _json_object(None, links_file, "links-file")
+            run = lambda: api_client.designer_update_production_order(production_order_id, body)  # noqa: E731
+        print_json_or_exit(console, run)
+
+    @command(
+        app,
+        "designer",
+        "update",
+        "shipping-order",
+        api="POST /designer/shipping_orders/{shipping_order_id}/confirm_receive",
+        side_effects=["marks the shipment received, which closes it"],
+        approval="ask",
+        help=(
+            "POST /designer/shipping_orders/{id}/confirm_receive — say the goods arrived. The "
+            "backend accepts this only while the shipment is IN_TRANSIT."
+        ),
+    )
+    def update_shipping_order(
+        shipping_order_id: str = typer.Argument(..., help="Shipping order id."),
+        confirm_receive: bool = typer.Option(
+            ..., "--confirm-receive", help="The only operation here; explicit on purpose."
+        ),
+    ) -> None:
+        """Confirm receipt of a shipment."""
+        if not confirm_receive:
+            raise typer.BadParameter("--confirm-receive is required")
+        print_json_or_exit(
+            console,
+            lambda: api_client.designer_confirm_receive_shipping_order(shipping_order_id),
+        )
+
+    @command(
+        app,
+        "designer",
+        "delete",
+        "shipping-order",
+        api="POST /designer/shipping_orders/{shipping_order_id}/cancel",
+        side_effects=[
+            "unlinks every production order on the shipment",
+            "deletes the shipment itself",
+        ],
+        approval="never",
+        help=(
+            "POST /designer/shipping_orders/{id}/cancel — the endpoint is called cancel but it "
+            "unlinks every production order and removes the shipment, so it is a delete here. "
+            "Graded `never`."
+        ),
+    )
+    def delete_shipping_order(
+        shipping_order_id: str = typer.Argument(..., help="Shipping order id."),
+    ) -> None:
+        """Cancel (and remove) a shipping order."""
+        print_json_or_exit(
+            console, lambda: api_client.designer_cancel_shipping_order(shipping_order_id)
+        )
+
     @command(
         app,
         "designer",
@@ -626,3 +817,100 @@ def register(app: typer.Typer) -> None:
         if makea_sourcing:
             body["makea_sourcing"] = True
         print_json_or_exit(console, lambda: api_client.designer_send_rfq(body))
+
+    # --- the sampling journey: confirm the pack, award a quote, pay -------------
+
+    @command(
+        app,
+        "designer",
+        "submit",
+        "tech-pack",
+        api="POST /designer/products/{product_id}/technical-specifications/confirm",
+        side_effects=[
+            "locks the tech pack as the version suppliers quote against",
+            "opens the product for sourcing",
+        ],
+        approval="ask",
+        help=(
+            "POST /designer/products/{id}/technical-specifications/confirm — confirm the "
+            "tech pack, the step before anyone is asked to quote."
+        ),
+    )
+    def submit_tech_pack(
+        product_id: str = typer.Argument(..., help="Product id."),
+    ) -> None:
+        """Confirm a product's tech pack."""
+        print_json_or_exit(console, lambda: api_client.designer_confirm_tech_spec(product_id))
+
+    @command(
+        app,
+        "designer",
+        "create",
+        "quote-award",
+        api="POST /designer/quotes/group_pay_prepare",
+        side_effects=[
+            "creates (or reuses) a DRAFT sampling order on each chosen quote",
+            "nothing is charged until that order is paid",
+        ],
+        approval="ask",
+        help=(
+            "POST /designer/quotes/group_pay_prepare — choose the supplier quote to sample "
+            "with. --quote is the supplier link id from `designer list supplier-link`; "
+            "repeat --option for the quote's optional extras. Prints the sampling_order_ids "
+            "to pay with `designer create checkout --key sampling:<id>`."
+        ),
+    )
+    def create_quote_award(
+        product_id: str = typer.Argument(..., help="Product id."),
+        quote: str = typer.Option(..., "--quote", help="Supplier link id of the chosen quote."),
+        option: list[str] = typer.Option(
+            [], "--option", help="Optional extra on the quote to include (repeat)."
+        ),
+        no_base_sampling: bool = typer.Option(
+            False, "--no-base-sampling", help="Leave the quote's base sample out."
+        ),
+        notes: str | None = typer.Option(None, "--notes", help="Note for the supplier."),
+    ) -> None:
+        """Award a quote: the sampling order that pays for it."""
+        selection: dict[str, Any] = {"product_id": product_id, "link_id": quote}
+        if option:
+            selection["selected_option_ids"] = list(option)
+        if no_base_sampling:
+            selection["include_base_sampling"] = False
+        if notes:
+            selection["notes"] = notes
+        print_json_or_exit(
+            console, lambda: api_client.designer_award_quotes({"selections": [selection]})
+        )
+
+    @command(
+        app,
+        "designer",
+        "create",
+        "checkout",
+        api="POST /designer/payments/basket/create-session",
+        side_effects=[
+            "records the brand's acceptance of the sampling/production terms",
+            "creates a Stripe checkout session; nothing is charged until it is paid there",
+        ],
+        approval="ask",
+        help=(
+            "POST /designer/payments/basket/create-session — a Stripe checkout link for one "
+            "or more charges. --key repeats: sampling:<sampling_order_id>, "
+            "production:<production_order_id>:deposit|final, shipping:<id>, misc:<id> "
+            "(the `key` of each payable in `designer list payment`). Prints checkout_url."
+        ),
+    )
+    def create_checkout(
+        key: list[str] = typer.Option(..., "--key", help="Charge key to pay (repeat)."),
+        accept_terms: bool = typer.Option(
+            False,
+            "--accept-terms",
+            help="The brand accepts the sampling/production terms for these charges.",
+        ),
+    ) -> None:
+        """Create a Stripe checkout link for charges."""
+        body: dict[str, Any] = {"keys": list(key)}
+        if accept_terms:
+            body["terms_accepted"] = True
+        print_json_or_exit(console, lambda: api_client.designer_create_checkout(body))