Skip to content

feat: Official API and Flow lifecycle commands - #41

Merged
purpshell merged 6 commits into
devfrom
codex/official-api-consumers-20260926
Oct 1, 2026
Merged

purpshell merged 6 commits into
devfrom
codex/official-api-consumers-20260926

Conversation

@purpshell

@purpshell purpshell commented Sep 26, 2026 •

Copy link
Copy Markdown
Member

Add commands for Official API templates, catalog discovery, credential health and reauthorization, service-window and pricing observations, project Flow operations, and phone-scoped Flow encryption keys. Typing accepts an inbound Official message ID, while QuickLink status distinguishes request receipts from history delivery. Provider writes are not automatically repeated, destructive Flow and key-replacement actions require --yes, and unknown receipts remain visible.

SDK pin

@polymorfa/sdk is pinned to 0.1.0-dev.20261001124422 (exact, with lockfile), published by the SDK publish-dev workflow from SDK dev a46d2f2 after polymorfa/sdks #308, #313, #314, #315 and #316 merged. Its contracts are pinned to API dev 29abb7b66a8e225af4df5cf354e9836ccb2ce04c, which contains every Official API PR these commands use.

Also in this update:

  • cloud template create and cloud template delete accept --idempotency-key (API #360). The SDK still sends exactly once; reusing the key after an unknown outcome gets idempotency_completed instead of a second write.
  • README: template routes work on Hybrid Numbers with an active Official connection (API #349), replacing the outdated "Linked Device-originated Numbers are rejected" note.
  • calls get no longer needs a runtime guard for Client.calls.retrieve; the pinned SDK exposes it (removes a now-failing lint assertion).

Verification (head ce58584)

Node 24: typecheck, lint, prettier, build pass. Full vitest: 100 files, 946 passed / 2 skipped (with --maxWorkers=4; default parallelism hit 5 s timeouts in unrelated spawn-heavy tests on this machine). Cloud and Flow command tests (25) pass against the published SDK, including the new idempotency header assertions. No live Meta call.

Five-part impact

  • API: unaffected; all routes merged on API dev.
  • SDKs: consumes the published prerelease above; no SDK change here.
  • CLI: commands, help, JSON output, confirmation handling, and the exact SDK pin updated.
  • Docs: CLI README updated. Public Mintlify pages are not changed for these beta-gated Official API commands.
  • Feature releases: commands preserve server enrollment, credential and Graph gates; they grant no access.

@coderabbitai

coderabbitai Bot commented Sep 26, 2026 •

Copy link
Copy Markdown

Warning

Review limit reached

The included review limit has been reached and this organization has disabled usage-based review continuation. Wait for reviews to reset or ask a billing admin to change After included review limits.

  • Ask an admin to enable usage-based reviews

Open in CodeRabbit

Reviews can continue after your included limit without a manual trigger. An admin must approve usage-based billing.

Next included review available in 4 minutes.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available. Your 60 included PR review attempts over the past 7 days set your current allowance at 2 reviews per hour.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Team

Run ID: 4caf464a-b06f-46b1-83b4-6ef80a594970

📥 Commits

Reviewing files that changed from the base of the PR and between efca79c and 13124c2.

⛔ Files ignored due to path filters (1)
  • package-lock.json is excluded by !**/package-lock.json
📒 Files selected for processing (34)
  • README.md
  • package.json
  • src/commands/cloud/catalog/list.ts
  • src/commands/cloud/credentials/get.ts
  • src/commands/cloud/credentials/reauthorize.ts
  • src/commands/cloud/pricing.ts
  • src/commands/cloud/service-window.ts
  • src/commands/cloud/template/create.ts
  • src/commands/cloud/template/delete.ts
  • src/commands/cloud/template/edit.ts
  • src/commands/cloud/template/get.ts
  • src/commands/cloud/template/list.ts
  • src/commands/flow/create.ts
  • src/commands/flow/delete.ts
  • src/commands/flow/deprecate.ts
  • src/commands/flow/discard.ts
  • src/commands/flow/get.ts
  • src/commands/flow/key/get.ts
  • src/commands/flow/key/register.ts
  • src/commands/flow/list.ts
  • src/commands/flow/publish.ts
  • src/commands/flow/receipts.ts
  • src/commands/flow/sync.ts
  • src/commands/flow/update.ts
  • src/commands/flow/upload.ts
  • src/commands/message/typing.ts
  • src/commands/quicklink/view.ts
  • src/flows/command.ts
  • src/services/call-analytics.ts
  • src/services/cloud.ts
  • src/services/flows.ts
  • test/commands/cloud.test.ts
  • test/commands/flows.test.ts
  • test/release/check-prerelease.test.ts
  • Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Autopilot is currently an internal CodeRabbit preview.


Comment @coderabbitai help to get the list of available commands.

@purpshell
purpshell marked this pull request as ready for review September 26, 2026 10:54
@purpshell

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 26, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-26T21:38:20.707381Z 9e89912 Manual request
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. What shall we delve into next?

Reviewed commit: 48c555a6be

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@purpshell

Copy link
Copy Markdown
Member Author

@codex review

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. 🚀

Reviewed commit: 9e89912305

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Pin the SDK prerelease published from SDK dev a46d2f2, which contains the
Official API consumers. Add --idempotency-key to cloud template create and
delete (sent once, never retried). Drop the call-detail runtime guard now
that the pinned SDK exposes Client.calls.retrieve.
@purpshell

Copy link
Copy Markdown
Member Author

Local review (head ce58584; manual pass): checked every cloud/flow/typing/quicklink view command against the SDK method signatures in 0.1.0-dev.20261001124422 (typecheck is authoritative here and passes). Provider writes pass no retry override and the SDK forces one attempt; the new --idempotency-key is forwarded only when supplied and validated (non-empty, ≤255 bytes) by the shared helper. Flow commands read the unwrapped response.data shape the pinned SDK returns. Lockfile resolves the same exact version from the public registry. No findings.

@purpshell

Copy link
Copy Markdown
Member Author

Local review (head 13124c2): delta is a lockfile-only npm audit fix (brace-expansion 5.0.12 / 1.1.21, picomatch 4.3.2) clearing GHSA-q2hr-2g5m-vwhr for audit:prod; no manifest or source change; SDK pin unchanged. CI Verify Node 22 green. No findings.

@purpshell
purpshell merged commit a8e56b8 into dev Oct 1, 2026
2 checks passed
@purpshell

Copy link
Copy Markdown
Member Author

Correction to the review note above: the third lockfile bump is js-yaml 4.3.1 → 4.3.2, not picomatch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant