Summary

Summary

Refactors the commerce-api TanStack Intent skill to focus on OAuth authentication and delegates API discovery/testing to @godaddy/cli. Previously the skill documented every subgraph endpoint, hardcoded
query/mutation counts, and included per-API GraphQL examples. This was brittle and duplicated what the CLI already provides.

What changed

Before (467 lines): Auth flow + hardcoded endpoint tables + introspection patterns + query examples for all 5 APIs (Checkout, Orders, Catalog, Taxes, Price Adjustments) + 6 common mistakes

After (299 lines): Auth flow + CLI discovery patterns + Checkout session example + 5 common mistakes

Kept

• OAuth2 client credentials grant (/v2/oauth2/token) with full code example
• Environments table (ote, prod)
• Required headers (Authorization, Content-Type, x-store-id, user-agent)
• OAuth scopes table (commerce.product:read, commerce.product:write, commerce.order:read)
• Checkout API createCheckoutSession / updateCheckoutSession pattern
• Token caching pattern

Replaced

• Hardcoded subgraph endpoint tables, introspection code, query/mutation counts, per-API GraphQL examples → @godaddy/cli discovery section:
  • godaddy api list — discover domains
  • godaddy api list --domain — list endpoints with scopes
  • godaddy api describe — full schema, parameters, GraphQL operations
  • godaddy api search — keyword search
  • godaddy api call — authenticated test calls

Added

• New common mistake: Checkout API uses a different host (checkout.commerce.api.{host}) than subgraph APIs

Removed

• Per-API query examples (Orders, Catalog, Taxes, Price Adjustments)
• Hardcoded query/mutation counts (11q/17m, 29q/110m, etc.)
• GraphQL introspection code pattern
• Subgraph URL missing storeId mistake (now handled by CLI describe output)
• Draft order status mistake (unverified at subgraph level)

Why

The CLI's API catalog (godaddy api describe) returns full schemas, endpoint URLs, required scopes, and GraphQL operations — everything an agent needs to implement calls. Hardcoding that in the skill
meant maintaining two sources of truth that drift independently. Now the skill teaches auth (which the CLI doesn't cover — it uses interactive OAuth PKCE), and the CLI handles discovery.

Validation

  $ npx @tanstack/intent@latest validate                                                                                                                                                                  
  ✅ Validated 1 skill files — all passed                                                                                                                                                                 

All skill claims verified against live APIs:

Changeset

• Changeset added (docs)

Test Plan