Available skills

A skill is a named commerce capability advertised in the agent card and executed by SendMessage. Aly's current registry is fixed in the app release: six default skills, deterministic structured payloads, and a simple natural-language intent parser.

Default skills

product-search

Search products in a published store's catalog.

• Inputs: site_slug and query or equivalent text.
• Behavior: resolves the published store by slug and searches product name/subtitle with * or all matching all products.
• Artifact: search_results with store metadata, matching products, and total count.
• Auth: none required.

store-info

Return basic public details about a published storefront.

• Inputs: site_slug.
• Behavior: fetches title, product count, and social-link count.
• Artifact: store_info.
• Auth: none required.

order-status

Look up an order by confirmation token for a specific store.

• Inputs: site_slug and confirmation_token.
• Behavior: resolves the order by public confirmation token and store slug.
• Artifact: order_status with order state, items, totals, shipping address, digital downloads, and purchased media access where present.
• Auth: none required by the A2A skill policy; the confirmation token is the lookup secret.

x402-purchase

Prepare an x402 payment flow for a product.

• Inputs: site_slug, product_id, and optional quantity.
• Behavior: returns the x402 resource URL and instructions. The skill does not itself settle payment.
• Artifact: x402_purchase_info with resource_url, protocol, quantity, and payment instructions.
• Status: usually TASK_STATE_INPUT_REQUIRED because the caller must GET the resource URL, satisfy the 402 challenge, then retry with PAYMENT-SIGNATURE.
• Auth: no A2A bearer required; payment proof is handled by the x402 resource route.

cart-management

Create and mutate Aly carts.

• Actions: create, add, remove, view, apply_coupon, remove_coupon, apply_gift_card, remove_gift_card, apply_store_credit, and remove_store_credit.
• Inputs: action-specific fields such as site_slug, cart_token, product_id, variant_id, quantity, code, gift_card_id, or account_id.
• Artifacts: cart_created, item_added, item_removed, cart_details, and discount apply/remove artifacts.
• Auth: OAuth access token or API key with write:orders. The token must be workspace-scoped.

checkout

Create a UCP checkout session from an existing cart.

• Inputs: site_slug and cart_token.
• Behavior: verifies the cart belongs to the store, builds UCP line items/totals, and creates a checkout session.
• Artifact: checkout_initiated with checkout_session_id, totals, session status, messages, and complete_url.
• Status: TASK_STATE_INPUT_REQUIRED. The caller must resolve any checkout messages and POST to complete_url to create the buyer payment session.
• Auth: OAuth access token or API key with write:orders. The token must be workspace-scoped.

Intent dispatch

Structured data wins. If a data part includes skill, the parser uses that skill plus the provided fields. Without structured data, Aly uses deterministic text heuristics: cart words map tocart-management, x402/crypto words map to x402-purchase, checkout/payment words map to checkout, product/search words map to product-search, order/status/tracking words map to order-status, and explicit store-info phrasing maps to store-info. The fallback is product-search.

Unknown skills

Unknown skill IDs do not invoke arbitrary code. The task completes with a plain agent message listing supported skills and no artifact. New skill IDs should be treated as versioned additions and announced in the Changelog.