@arbol-ai/cli 1.20261019.5745 → 2.1.0

package/README.md

@@ -3,9 +3,9 @@
 `arbol`, the Arbol API from your terminal. Its commands are generated by
 [Cloudflare Forge](https://github.com/cloudflare/forge) from the platform's public OpenAPI,
 [`https://api.getarbol.com/openapi.json`](https://api.getarbol.com/openapi.json), and every request
-goes through [`@arbol-ai/sdk`](https://www.npmjs.com/package/@arbol-ai/sdk). A release's version is
-the date and time it was built (`1.YYYYMMDD.HHMMSS`, UTC); `arbol --version` also names the API release
-its commands were generated from.
+goes through [`@arbol-ai/sdk`](https://www.npmjs.com/package/@arbol-ai/sdk). Its versions are semver,
+from 2.1.0 on (see [Releases](#releases)); `arbol --version` also names the API release its commands
+were generated from, as in `arbol 2.1.0 (Arbol API 1.20261019.4056)`.
 
 ```sh
 npm install --global @arbol-ai/cli
@@ -154,21 +154,34 @@ A release of the API flows through three repositories, each started by the one b
 1. **project-arbol-gateway** publishes the OpenAPI at `https://api.getarbol.com/openapi.json` and sends
    `openapi-release` to project-arbol-sdk-js.
 2. **project-arbol-sdk-js** regenerates `@arbol-ai/sdk` from it, publishes it to npm and sends
-   `sdk-release` (`{ "version": "<release>" }`) here.
-3. **Here**, [Generate](.github/workflows/generate.yml) releases only when the OpenAPI's content
-   changed: the SHA-256 of its canonical JSON without `info.version` (keys sorted, no whitespace; see
+   `sdk-release` here: `{ "version": "<SDK version>", "openapi": { "release": "...", "sha256": "..." } }`.
+3. **Here**, [Generate](.github/workflows/generate.yml) releases when the OpenAPI's content changed:
+   the SHA-256 of its canonical JSON without `info.version` (keys sorted, no whitespace; see
    [`generation/openapi-hash.ts`](generation/openapi-hash.ts), the same hash sdk-js computes), compared
-   with `openapiContentSha256` in main's `src/generated/generation.json`. When it is equal, the run
-   stops and nothing is committed or published. Otherwise Generate pins `@arbol-ai/sdk` to exactly the
-   release sdk-js named, regenerates `src/generated/`, and when `bun run verify` passes commits
-   `Release <release>` to main and runs [Publish](.github/workflows/publish.yml) on that commit.
-
-Generate also runs every 6 hours and by hand, with the same hash check, pinning the SDK release the
-OpenAPI names once it is on npm. Its push uses an installation token of the organization's GitHub App
+   with `openapiContentSha256` in main's `src/generated/generation.json`. It also releases when the
+   `@arbol-ai/sdk` to pin is not the one main pins. Otherwise the run stops and nothing is committed or
+   published. A release pins `@arbol-ai/sdk` exactly, regenerates `src/generated/`, and when
+   `bun run verify` passes commits `Release Arbol API <release> with @arbol-ai/sdk <version>` to main and
+   runs [Publish](.github/workflows/publish.yml) on that commit with `bump: minor`.
+
+The SDK Generate pins is the version `sdk-release` names. Every 6 hours and by hand, Generate runs the
+same check and pins the highest `@arbol-ai/sdk` whose published `package.json` says it was generated
+from the same OpenAPI content (`arbol.openapi.sha256`); while there is none, it stops with a notice,
+since the SDK is released first. Its push uses an installation token of the organization's GitHub App
 (Arbol Bot: the variable `ARBOL_BOT_APP_ID` and the secret `ARBOL_BOT_PRIVATE_KEY`), so the commit runs
-Verify like any other. A change to the CLI's own code, which the OpenAPI does not carry, is released by
-running Publish by hand on main. npm receives the package with the organization's `NPM_TOKEN` and a
-provenance statement.
+Verify like any other.
+
+Versions are semver, computed by Publish from the highest version on npm
+([`generation/release.ts`](generation/release.ts)):
+
+- A release from Generate raises the minor: 2.1.0, then 2.2.0. The first 2.x release is 2.1.0; before it
+  versions were the build's date and time (`1.YYYYMMDD.HHMMSS`).
+- A change to the CLI's own code, which the OpenAPI does not carry, is released by running Publish by
+  hand on main. Its `bump` input raises the `patch` (the default), `minor` or `major`.
+
+The published `package.json` records the OpenAPI the commands were generated from:
+`"arbol": { "openapi": { "release": "<info.version>", "sha256": "<content hash>" } }`. npm receives the
+package with the organization's `NPM_TOKEN` and a provenance statement.
 
 ## License
 

package/dist/index.js

@@ -78070,7 +78070,7 @@ ${name}`);
 }
 
 // src/index.ts
-var VERSION = "1.20261019.5745";
+var VERSION = "2.1.0";
 var RELEASE = generation_default.release;
 var SDK_PATHS = new Map(Object.values(commands).map((command) => [command.operation, command.sdkPath]));
 var SERVICES = [...new Set(Object.keys(commands).map((name) => name.split(" ")[0]))].toSorted();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arbol-ai/cli",
-  "version": "1.20261019.5745",
+  "version": "2.1.0",
   "description": "The Arbol CLI: the Arbol API from your terminal, with commands generated by Cloudflare Forge from the public OpenAPI.",
   "keywords": [
     "arbol",
@@ -44,7 +44,7 @@
     "verify": "bun run typecheck && bun run test && bun run build"
   },
   "dependencies": {
-    "@arbol-ai/sdk": "1.20261019.4056",
+    "@arbol-ai/sdk": "2.1.0",
     "ajv": "8.20.0",
     "ajv-formats": "3.0.1",
     "oauth4webapi": "3.8.8"
@@ -56,5 +56,11 @@
     "@types/node": "^26.0.0",
     "typescript": "7.0.2"
   },
-  "packageManager": "bun@1.4.3"
+  "packageManager": "bun@1.4.3",
+  "arbol": {
+    "openapi": {
+      "release": "1.20261019.4056",
+      "sha256": "a160f98ddd0944d6e78111d113869b22cac6caabc036bb47f7609c009c37e501"
+    }
+  }
 }