@alexkroman1/aai-cli 5.10.1 → 5.12.0

package/dist/_preflight.d.ts

@@ -0,0 +1,57 @@
+/**
+ * The deploy-time credential preflight — the classic dev/prod failure, caught
+ * before the upload instead of at the deployed agent's first session.
+ *
+ * An agent that ran locally on shell-exported provider keys dies after deploy
+ * with what looks like a provider outage: `aai dev` falls back to the shell
+ * (`withHostCredentialFallback`), and the platform never will. Naming the key
+ * here turns that into one line of output while the developer is still in the
+ * directory that owns the `.env`.
+ *
+ * **This lives in the CLI because the agent's config does.** The platform
+ * stores no description of a bundle and never evaluates one (see "The
+ * platform stores no agent config" in packages/aai-server/CLAUDE.md), so the
+ * only place that knows an agent needs `CARTESIA_API_KEY` is the process that
+ * just built it.
+ *
+ * **It WARNS, and must not be turned into a hard failure.** The CLI sees the
+ * env it is about to upload; it cannot see what is already stored against the
+ * slug from an earlier `aai secret put`, so a key the platform holds looks
+ * missing from here. The server-side check this replaced could see both and
+ * so could reject — moving the config to where it is authored costs that
+ * accuracy, and a false rejection is worse than a false warning: it blocks a
+ * deploy that would have worked.
+ */
+import { requiredProviderEnvVars } from "@alexkroman1/aai/runtime";
+/**
+ * The config shape read out of a bundle's `__aaiConfig` export: the provider
+ * descriptors the credential derivation needs, plus the agent's declared
+ * `requiredEnv`. Deliberately structural rather than the SDK's `AgentConfig` —
+ * the export comes from the USER's installed SDK, which may be older or newer
+ * than this CLI's, so anything beyond these is not ours to assume.
+ *
+ * **The `__aaiConfig` export, not the bundle's default export.** They look
+ * interchangeable — `evalWorkerBundle` already returns the `AgentDef`, and
+ * `agentEnvWarnings` (`_dev-server.ts`) derives the same key set from one —
+ * but `__aaiConfig` is `toAgentConfig(def)`, which has run
+ * `normalizeAgentConveniences` and `defaultProviders`. A def written with an
+ * author shorthand (`llm: "gpt-5"`) still carries a STRING there, and
+ * `descriptorKind` reads a string as no kind at all, so deriving from the raw
+ * def silently omits that provider's key. The normalized config is what the
+ * runtime will actually resolve against, so it is what the preflight checks.
+ */
+export type PreflightConfig = Parameters<typeof requiredProviderEnvVars>[0] & {
+    requiredEnv?: readonly string[] | undefined;
+};
+/**
+ * Env var names the agent needs that the env being uploaded doesn't supply.
+ * Empty values count as missing — an empty credential authenticates nothing.
+ *
+ * Two sources: provider credentials derived from the stt/llm/tts/s2s
+ * descriptors (the same registry-backed derivation the runtime resolves keys
+ * with), and the agent's own declared `requiredEnv` — an `agent()` field for
+ * custom keys tools read from `ctx.env`, which no static derivation can see.
+ */
+export declare function missingCredentials(config: PreflightConfig, env: Record<string, string>): string[];
+/** One line naming the missing keys and what to do about them. */
+export declare function missingCredentialMessage(missing: string[]): string;

package/dist/_slug-api-DXm7s9X5.mjs

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+import { n as getServerInfo } from "./_agent-JGaAJ5j6.mjs";
+import { n as apiRequest, t as HINT_NOT_DEPLOYED } from "./_api-client-B-upMGkc.mjs";
+//#region _slug-api.ts
+/**
+* Authenticated request against a deployed agent's slug-scoped resource
+* (`${serverUrl}/${slug}${resourcePath}`) — the one shape every per-agent
+* command (secret, storage) shares, including the standard "not deployed"
+* 404 hint.
+*
+* Its own module (rather than living beside `getServerInfo` in `_agent.ts`)
+* so tests can mock `_agent.ts`/`_api-client.ts` while this composition
+* stays real — an intra-module call would bypass those mocks.
+*/
+/**
+* A SECRET request, routed to the project when this directory is linked to
+* one and to the bare slug otherwise.
+*
+* A studio project deploys TWO agents — production and preview — and a
+* secret has to reach both or the preview fails at its first session while
+* production works. The project route fans out server-side
+* (`aai-studio-server/studio-secrets.ts`); this CLI used to write the
+* production slug alone, so a key set here was missing from the preview the
+* user's own `aai publish` had created. An unlinked directory has one agent
+* and keeps the per-slug route, which is the platform primitive underneath.
+*/
+async function secretRequest(cwd, resourcePath, init, server) {
+	const { serverUrl, slug, apiKey, studioProject } = await getServerInfo(cwd, server);
+	return {
+		data: await apiRequest(studioProject ? `${serverUrl}/studio/projects/${encodeURIComponent(studioProject)}/secret${resourcePath}` : `${serverUrl}/${slug}/secret${resourcePath}`, {
+			...init,
+			apiKey,
+			hints: { 404: HINT_NOT_DEPLOYED }
+		}),
+		target: studioProject ?? slug
+	};
+}
+async function slugRequest(cwd, resourcePath, init, server) {
+	const { serverUrl, slug, apiKey } = await getServerInfo(cwd, server);
+	return {
+		data: await apiRequest(`${serverUrl}/${slug}${resourcePath}`, {
+			...init,
+			apiKey,
+			hints: { 404: HINT_NOT_DEPLOYED }
+		}),
+		slug
+	};
+}
+//#endregion
+export { slugRequest as n, secretRequest as t };

package/dist/_slug-api.d.ts

@@ -9,6 +9,22 @@ import { type ApiRequestOptions } from "./_api-client.ts";
  * so tests can mock `_agent.ts`/`_api-client.ts` while this composition
  * stays real — an intra-module call would bypass those mocks.
  */
+/**
+ * A SECRET request, routed to the project when this directory is linked to
+ * one and to the bare slug otherwise.
+ *
+ * A studio project deploys TWO agents — production and preview — and a
+ * secret has to reach both or the preview fails at its first session while
+ * production works. The project route fans out server-side
+ * (`aai-studio-server/studio-secrets.ts`); this CLI used to write the
+ * production slug alone, so a key set here was missing from the preview the
+ * user's own `aai publish` had created. An unlinked directory has one agent
+ * and keeps the per-slug route, which is the platform primitive underneath.
+ */
+export declare function secretRequest<T = unknown>(cwd: string, resourcePath: string, init: Pick<ApiRequestOptions, "method" | "body" | "action">, server?: string): Promise<{
+    data: T;
+    target: string;
+}>;
 export declare function slugRequest<T = unknown>(cwd: string, resourcePath: string, init: Pick<ApiRequestOptions, "method" | "body" | "action">, server?: string): Promise<{
     data: T;
     slug: string;

package/dist/_studio-CXoY_Hsg.mjs

@@ -0,0 +1,94 @@
+#!/usr/bin/env node
+import { n as apiRequest } from "./_api-client-B-upMGkc.mjs";
+import path from "node:path";
+import { MAX_SLUG_LENGTH, PREVIEW_SLUG_SUFFIX, VALID_SLUG_RE } from "@alexkroman1/aai/utils";
+import { slugifyName } from "@alexkroman1/aai/slugify";
+import { isLocalOnlyFile, snapshotWorkspaceFiles } from "@alexkroman1/aai/workspace-files";
+//#region _studio.ts
+/**
+* Internals of the studio-workspace commands (`aai list/pull/push/publish`):
+* the local source-file walk and the thin clients for the platform's
+* `/studio/projects` routes. The workspace is the single source of truth —
+* these helpers only move files between a local directory and the project's
+* workspace row; production deploys happen exclusively through the studio's
+* Publish route (which runs the deploy machinery in the project's sandbox).
+*/
+/**
+* Snapshot the local project into a workspace file map.
+*
+* The walk, the caps, the skip rules and the strict UTF-8 decode all come
+* from the SDK (`@alexkroman1/aai/workspace-files`), which is also what the
+* guest's end-of-turn sync uses — the two write the same map from opposite
+* ends, and a disagreement between them is not an error but a file silently
+* dropped here and resurrected there.
+*
+* `isLocalOnlyFile` is the one rule this side adds: `.env` rides the secret
+* routes and lockfiles are install output, so neither belongs in a row.
+*/
+function collectSourceFiles(dir) {
+	return snapshotWorkspaceFiles(dir, {
+		subject: "Project",
+		skipFile: isLocalOnlyFile
+	});
+}
+/**
+* A studio project name derived from a directory name, or null if unusable.
+*
+* The normalization is the platform's own (`slugifyName`), not a local
+* regex. This used to strip `[^a-z0-9-_]` by hand, which differs from the
+* studio's slugifier on exactly the names people give agents: `Café
+* Ordering` reduced to `caf-ordering` here and `cafe-ordering` there, so the
+* same directory produced a different project depending on whether it was
+* created by `aai push` or by typing the name into the studio.
+*
+* A `-preview` suffix is deliberately unusable. Publishing a project deploys
+* it under the project's own name, so a `*-preview` project would claim a
+* slug the studio's orphan-preview sweep reaps hourly — deleting the agent,
+* its app-database schema, and its secrets on a schedule the user never
+* asked for. Refusing the name is recoverable (rename the directory); losing
+* a published agent to the reaper is not.
+*/
+function projectNameFromDir(dir) {
+	const name = slugifyName(path.basename(dir), MAX_SLUG_LENGTH);
+	if (name.endsWith(PREVIEW_SLUG_SUFFIX)) return null;
+	return VALID_SLUG_RE.test(name) ? name : null;
+}
+/** The shareable studio URL for a project — what every command prints. */
+function studioProjectUrl(serverUrl, project) {
+	return `${serverUrl}/studio/chat/${project}`;
+}
+function listStudioProjects(serverUrl, apiKey) {
+	return apiRequest(`${serverUrl}/studio/projects`, {
+		apiKey,
+		action: "list"
+	}).then((res) => res.projects);
+}
+/** Fetch a project, or null when it doesn't exist (the push existence probe). */
+function fetchStudioProject(serverUrl, apiKey, project) {
+	return apiRequest(`${serverUrl}/studio/projects/${encodeURIComponent(project)}`, {
+		apiKey,
+		action: "pull",
+		allow404: true
+	});
+}
+/** `PUT /studio/projects/:project/source` — the atomic whole-tree push. */
+function pushStudioSource(serverUrl, apiKey, project, body) {
+	return apiRequest(`${serverUrl}/studio/projects/${encodeURIComponent(project)}/source`, {
+		apiKey,
+		action: "push",
+		method: "PUT",
+		body,
+		hints: { 409: "The studio has newer changes. Run `aai pull` to fetch them, or `aai push --force` to overwrite." }
+	});
+}
+/** `POST /studio/projects/:project/deploy` — Publish, in the project's sandbox. */
+function publishStudioProject(serverUrl, apiKey, project) {
+	return apiRequest(`${serverUrl}/studio/projects/${encodeURIComponent(project)}/deploy`, {
+		apiKey,
+		action: "publish",
+		method: "POST",
+		retry: 0
+	});
+}
+//#endregion
+export { publishStudioProject as a, projectNameFromDir as i, fetchStudioProject as n, pushStudioSource as o, listStudioProjects as r, studioProjectUrl as s, collectSourceFiles as t };

package/dist/_studio.d.ts

@@ -6,27 +6,30 @@
  * workspace row; production deploys happen exclusively through the studio's
  * Publish route (which runs the deploy machinery in the project's sandbox).
  */
+import { type WorkspaceSnapshot } from "@alexkroman1/aai/workspace-files";
 /**
- * Mirrors of the studio workspace caps (`aai-studio-server/studio-limits.ts`)
- * — by value, like `aai-guest/limits.ts`, since the CLI cannot depend on the
- * private server package. The server re-validates every push; these exist so
- * an oversized file is a named warning locally instead of a rejected upload.
+ * Snapshot the local project into a workspace file map.
+ *
+ * The walk, the caps, the skip rules and the strict UTF-8 decode all come
+ * from the SDK (`@alexkroman1/aai/workspace-files`), which is also what the
+ * guest's end-of-turn sync uses — the two write the same map from opposite
+ * ends, and a disagreement between them is not an error but a file silently
+ * dropped here and resurrected there.
+ *
+ * `isLocalOnlyFile` is the one rule this side adds: `.env` rides the secret
+ * routes and lockfiles are install output, so neither belongs in a row.
  */
-export declare const MAX_STUDIO_FILE_BYTES = 256000;
-export declare const MAX_STUDIO_FILES = 100;
-/**
- * Walk a local project into the path→content record a workspace stores —
- * the CLI-side twin of the guest's `snapshotWorkspace`: same ignored
- * directories, same caps, oversized and non-text files skipped with a
- * warning rather than failing the whole push.
- */
-export declare function collectSourceFiles(dir: string): Promise<{
-    files: Record<string, string>;
-    warnings: string[];
-}>;
+export declare function collectSourceFiles(dir: string): Promise<WorkspaceSnapshot>;
 /**
  * A studio project name derived from a directory name, or null if unusable.
  *
+ * The normalization is the platform's own (`slugifyName`), not a local
+ * regex. This used to strip `[^a-z0-9-_]` by hand, which differs from the
+ * studio's slugifier on exactly the names people give agents: `Café
+ * Ordering` reduced to `caf-ordering` here and `cafe-ordering` there, so the
+ * same directory produced a different project depending on whether it was
+ * created by `aai push` or by typing the name into the studio.
+ *
  * A `-preview` suffix is deliberately unusable. Publishing a project deploys
  * it under the project's own name, so a `*-preview` project would claim a
  * slug the studio's orphan-preview sweep reaps hourly — deleting the agent,

package/dist/{_templates-BWJOiWOO.mjs → _templates-CKYDgGyY.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { a as errorMessage } from "./_utils-8KKw-bzi.mjs";
-import { t as getMonorepoRoot } from "./_agent-DS2PUJcl.mjs";
+import { t as getMonorepoRoot } from "./_agent-JGaAJ5j6.mjs";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import fs from "node:fs/promises";
@@ -119,6 +119,18 @@ async function readJsonFile(file) {
 	}
 }
 /**
+* Directory holding the base scaffold — the files every project gets
+* underneath its template (package.json, tsconfig, `server.mjs`, …).
+*
+* Exported so `aai eject` can copy one file out of it rather than carrying a
+* second copy of that file's contents: the scaffold is the single definition
+* of the self-hosted entrypoint, and a project retrofitted with `eject` gets
+* byte-identical output to one `aai init` scaffolded.
+*/
+function scaffoldDir() {
+	return path.join(resolveTemplatesDir(), "scaffold");
+}
+/**
 * Layer the base scaffold (package.json, tsconfig, …) into targetDir
 * WITHOUT overwriting anything already there. Shared by `aai init`
 * (underneath a template) and `aai pull` (underneath the studio workspace
@@ -130,14 +142,14 @@ async function readJsonFile(file) {
 * {@link layerScaffoldManifest}.
 */
 async function layerScaffold(targetDir) {
-	const scaffoldDir = path.join(resolveTemplatesDir(), "scaffold");
-	if (!existsSync(scaffoldDir)) return;
-	await fs.cp(scaffoldDir, targetDir, {
+	const dir = scaffoldDir();
+	if (!existsSync(dir)) return;
+	await fs.cp(dir, targetDir, {
 		recursive: true,
 		force: false,
 		errorOnExist: false
 	});
-	await layerScaffoldManifest(scaffoldDir, targetDir);
+	await layerScaffoldManifest(dir, targetDir);
 }
 /**
 * Copy a template into targetDir, merging scaffold files underneath.
@@ -154,4 +166,4 @@ async function downloadAndMergeTemplate(template, targetDir) {
 	await layerScaffold(targetDir);
 }
 //#endregion
-export { REPO_URL, downloadAndMergeTemplate, layerScaffold, listTemplates };
+export { REPO_URL, downloadAndMergeTemplate, layerScaffold, listTemplates, scaffoldDir };

package/dist/_templates.d.ts

@@ -35,6 +35,16 @@ type Manifest = Record<string, unknown>;
  * Returns null when nothing was missing, so the common case writes no file.
  */
 export declare function mergeScaffoldManifest(existing: Manifest, scaffold: Manifest): Manifest | null;
+/**
+ * Directory holding the base scaffold — the files every project gets
+ * underneath its template (package.json, tsconfig, `server.mjs`, …).
+ *
+ * Exported so `aai eject` can copy one file out of it rather than carrying a
+ * second copy of that file's contents: the scaffold is the single definition
+ * of the self-hosted entrypoint, and a project retrofitted with `eject` gets
+ * byte-identical output to one `aai init` scaffolded.
+ */
+export declare function scaffoldDir(): string;
 /**
  * Layer the base scaffold (package.json, tsconfig, …) into targetDir
  * WITHOUT overwriting anything already there. Shared by `aai init`

package/dist/{_typecheck-gate-DB-PY0A3.mjs → _typecheck-gate-4v9UBZHh.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { t as CliError } from "./_output-CC300DzW.mjs";
-import { n as log } from "./_ui-DfwfDbT-.mjs";
+import { n as log } from "./_ui-u7T4YooX.mjs";
 import { typecheckProject } from "./typecheck.mjs";
 //#region _typecheck-gate.ts
 /**

package/dist/{_ui-DfwfDbT-.mjs → _ui-u7T4YooX.mjs}

@@ -37,6 +37,10 @@ function notify(level, message) {
 	}
 	process.stderr.write(`${message}\n`);
 }
+/** Whether `silenceOutput()` has been called — i.e. we are in JSON mode. */
+function outputSilenced() {
+	return silenced;
+}
 /**
 * Unwrap a clack prompt result, exiting cleanly if the user cancelled.
 * `message` lets the caller name what was cancelled (e.g. "Setup cancelled").
@@ -65,4 +69,4 @@ function parsePort(raw) {
 	return port;
 }
 //#endregion
-export { silenceOutput as a, parsePort as i, log as n, unwrapCancel as o, notify as r, fmtUrl as t };
+export { parsePort as a, outputSilenced as i, log as n, silenceOutput as o, notify as r, unwrapCancel as s, fmtUrl as t };

package/dist/_ui.d.ts

@@ -23,6 +23,8 @@ export declare function silenceOutput(): void;
  * line — while a human tailing the log sees what happened.
  */
 export declare function notify(level: "error" | "warn" | "info" | "success", message: string): void;
+/** Whether `silenceOutput()` has been called — i.e. we are in JSON mode. */
+export declare function outputSilenced(): boolean;
 /**
  * Unwrap a clack prompt result, exiting cleanly if the user cancelled.
  * `message` lets the caller name what was cancelled (e.g. "Setup cancelled").

package/dist/{build-CACFbdQ4.mjs → build-BTOyN3H5.mjs}

@@ -1,9 +1,9 @@
 #!/usr/bin/env node
 import { a as ok, t as CliError } from "./_output-CC300DzW.mjs";
-import { n as log } from "./_ui-DfwfDbT-.mjs";
-import { r as evalWorkerBundle, t as buildAgentBundle } from "./_bundler-DC17suWN.mjs";
-import { assertTypechecks } from "./_typecheck-gate-DB-PY0A3.mjs";
-import { classifyVitestError, runVitest } from "./test-C-V98oC-.mjs";
+import { n as log } from "./_ui-u7T4YooX.mjs";
+import { r as evalWorkerBundle, t as buildAgentBundle } from "./_bundler-BvfPzf8J.mjs";
+import { assertTypechecks } from "./_typecheck-gate-4v9UBZHh.mjs";
+import { classifyVitestError, runVitest } from "./test-BtOzTcXE.mjs";
 //#region build.ts
 /**
 * `aai build` — bundle the agent without deploying, behind the same gates

package/dist/cli.d.ts

@@ -1 +1,2 @@
-export declare const mainCommand: import("citty").CommandDef<import("citty").ArgsDef>;
+import { type ArgsDef, type CommandDef } from "citty";
+export declare const mainCommand: CommandDef<ArgsDef>;