@dench.com/cli 3.7.0-staging.387 → 3.8.1-staging.390

package/lib/campaign-timeline.ts

@@ -8,6 +8,8 @@ export type TimelineRun = {
   startedAt?: number;
   waitUntil?: number;
   retryAt?: number;
+  /** A wait for acceptance: when it stops waiting either way. */
+  timeoutAt?: number;
   completedAt?: number;
   emailMessageId?: string;
   lastError?: string;
@@ -49,6 +51,8 @@ export type TimelineResult = {
     type: string;
     order: number;
     waitHours?: number;
+    /** If / else and Wait until they accept steps: what they check. */
+    label?: string;
   }>;
   runs: TimelineRun[];
   emailMessages: TimelineEmail[];
@@ -63,6 +67,10 @@ export type TimelineStep = {
   outcome: string;
   at: number | null;
   detail: string[];
+  /** An If / else or a wait for acceptance: the path it took. */
+  branch?: "yes" | "no";
+  /** Still waiting for them to accept: when it stops waiting. */
+  acceptanceDeadline?: number;
   subject?: string;
   text?: string;
   error?: string;
@@ -101,16 +109,66 @@ const EMAIL_STATUS: Record<string, string> = {
   failed: "could not send",
 };
 
+function resultField(result: unknown, key: string): unknown {
+  return result && typeof result === "object"
+    ? (result as Record<string, unknown>)[key]
+    : undefined;
+}
+
 function skipReason(result: unknown): string {
-  const reason =
-    result && typeof result === "object"
-      ? (result as { reason?: unknown }).reason
-      : undefined;
+  const reason = resultField(result, "reason");
   return (typeof reason === "string" && SKIP_REASONS[reason]) || "Skipped";
 }
 
+/** Why an If / else or a wait for acceptance took its No path. */
+const NO_REASONS: Record<string, string> = {
+  missing_linkedin_identity: "no LinkedIn profile",
+  missing_email_identity: "no email address",
+  linkedin_connection_timeout: "they did not accept in time",
+  linkedin_invite_withdrawn: "the connection request was withdrawn",
+  linkedin_invite_not_sent: "no connection request went out",
+};
+
+const LOGIC_TYPES = new Set(["condition", "wait_for_connection"]);
+
+export function branchOf(run: TimelineRun): "yes" | "no" | undefined {
+  if (!LOGIC_TYPES.has(run.type) || run.status !== "sent") return undefined;
+  const branch = resultField(run.result, "branch");
+  return branch === "yes" || branch === "no" ? branch : undefined;
+}
+
+/** What the editor calls each exit: Yes / No, or Accepted / Not accepted. */
+export function branchExitLabel(type: string, branch: "yes" | "no"): string {
+  if (type === "wait_for_connection")
+    return branch === "yes" ? "Accepted" : "Not accepted";
+  return branch === "yes" ? "Yes" : "No";
+}
+
+function logicOutcome(run: TimelineRun): string | undefined {
+  if (!LOGIC_TYPES.has(run.type)) return undefined;
+  const branch = branchOf(run);
+  if (branch) {
+    const reason = resultField(run.result, "reason");
+    const why =
+      branch === "no" && typeof reason === "string" ? NO_REASONS[reason] : "";
+    return `${branchExitLabel(run.type, branch)}${why ? ` (${why})` : ""}`;
+  }
+  if (run.status === "sent") return "Done";
+  if (run.type === "wait_for_connection")
+    return run.status === "waiting"
+      ? "Waiting for them to accept"
+      : run.status === "queued" || run.status === "running"
+        ? "Checking whether they accepted"
+        : undefined;
+  return ["queued", "running", "waiting"].includes(run.status)
+    ? "Checking"
+    : undefined;
+}
+
 function outcomeOf(run: TimelineRun): string {
   if (run.status === "skipped") return skipReason(run.result);
+  const logic = logicOutcome(run);
+  if (logic) return logic;
   if (run.status === "sent") {
     if (run.type === "wait") return "Waited";
     if (run.type === "linkedin_visit") return "Visited";
@@ -153,6 +211,11 @@ export function timelineSteps(result: TimelineResult): TimelineStep[] {
         run.status === "sent" || run.status === "skipped"
           ? undefined
           : (run.lastError ?? email?.lastError)?.trim();
+      const branch = branchOf(run);
+      const waitingForAccept =
+        run.type === "wait_for_connection" &&
+        run.status === "waiting" &&
+        typeof run.timeoutAt === "number";
       return {
         step: (step?.order ?? run.stepIndex) + 1,
         stepId: String(run.stepId),
@@ -167,6 +230,8 @@ export function timelineSteps(result: TimelineResult): TimelineStep[] {
           run.scheduledAt ??
           null,
         detail,
+        ...(branch ? { branch } : {}),
+        ...(waitingForAccept ? { acceptanceDeadline: run.timeoutAt } : {}),
         ...(email?.subject ? { subject: email.subject } : {}),
         ...(text ? { text } : {}),
         ...(problem ? { error: problem } : {}),

package/lib/command-args.ts

@@ -51,6 +51,17 @@ export const COMMAND_ARGUMENTS = [
   spec("use", [1, 1]),
   spec("backend set", [1, 1]),
   spec("backend clear", [0, 0]),
+  spec("env list", [0, 0], "--limit --cursor"),
+  spec("env show", [1, 1], "--revision"),
+  spec("env save", [1, 1], "--path --wait", "--no-wait"),
+  spec("env run", [1, 1], "--revision --state-key", "--prepare-local"),
+  spec("env delete", [1, 1]),
+  spec("secrets set", [1, 1], "--file --kind --expected-version", "--stdin"),
+  spec("secrets list", [0, 0]),
+  spec("secrets delete", [1, 1], "--expected-version"),
+  ...["identity", "organisation", "user", "tools", "rules"].map((section) =>
+    spec(`context set ${section}`, [0, 0], "--content", "--stdin"),
+  ),
   ...["install", "uninstall", "refresh"].map((verb) =>
     spec(
       `ads ${verb}`,
@@ -80,7 +91,7 @@ export const COMMAND_ARGUMENTS = [
   spec(
     "chat new",
     [1, null],
-    "--model --file-context --visibility --title",
+    "--model --file-context --visibility --title --environment",
     "--yolo --follow",
   ),
   spec("chat send", [2, null], "--model", "--yolo --follow"),
@@ -113,13 +124,14 @@ export const COMMAND_ARGUMENTS = [
   spec(
     "cron create",
     [1, 1],
-    "--prompt --description --overlap --target --type --at --cron --tz --every --every-ms --connection --event --toolkit --trigger-config --object --where --where-logic",
+    "--prompt --description --overlap --target --type --at --cron --tz --every --every-ms --connection --event --toolkit --trigger-config --object --where --where-logic --environment",
     "--disabled --delete-after-run --no-secret --signed",
   ),
   spec(
     "cron update",
     [1, 1],
-    "--name --prompt --description --overlap --enabled --at --cron --tz --every --every-ms",
+    "--name --prompt --description --overlap --enabled --at --cron --tz --every --every-ms --environment",
+    "--clear-environment",
   ),
   spec("cron run", [1, 1], "", "--wait"),
   spec("cron secret", [1, 1], "", "--off"),
@@ -189,7 +201,10 @@ export const COMMAND_ARGUMENTS = [
 ];
 
 export function assertDeclaredCommandFlags(argv: readonly string[]): void {
-  const args = argv.filter((arg) => arg !== "--json");
+  const boundary = argv.indexOf("--");
+  const args = argv
+    .slice(0, boundary < 0 ? undefined : boundary)
+    .filter((arg) => arg !== "--json");
   if (["routine", "routines"].includes(args[0])) args[0] = "cron";
   if (["ad", "adline"].includes(args[0])) args[0] = "ads";
   if (args[0] === "agent" && ["new", "send"].includes(args[1]))

package/lib/command-help.ts

@@ -37,8 +37,23 @@ export function commandHelp(argv: readonly string[], usageText = ""): string {
       description: "",
     })),
     ...apiOperations
-      .filter((op) => !op.deprecated)
-      .map((op) => ({ usage: op.cli, description: op.summary })),
+      .filter((op) => {
+        if (!op.deprecated) return true;
+        // Keep exact legacy leaf help available without adding those commands
+        // back to the broad index or a parent family's discovery.
+        const command = words(op.cli);
+        return (
+          command.length > 1 &&
+          input.length >= command.length &&
+          matches(input.slice(0, command.length), command)
+        );
+      })
+      .map((op) => ({
+        usage: op.cli,
+        description: op.deprecated
+          ? `Compatibility command. ${op.summary}`
+          : op.summary,
+      })),
   ];
   let prefix = input;
   while (

package/lib/command-registry.ts

@@ -137,6 +137,190 @@ function local(reason: string): LocalOnlyOperation {
 }
 
 const rawApiOperations = [
+  op({
+    id: "environments.list",
+    group: "environments",
+    summary:
+      "List workspace-shared reusable setups and ready revisions (metadata only).",
+    cli: "dench env list",
+    method: "GET",
+    path: "/environments",
+    requestSchema: z
+      .object({
+        limit: z.number().int().min(1).max(100).optional(),
+        cursor: z.string().optional(),
+      })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("query", "functions/environments:list"),
+  }),
+  op({
+    id: "environments.get",
+    group: "environments",
+    summary:
+      "Inspect a saved setup, its manifest, and an optional immutable revision.",
+    cli: "dench env show",
+    method: "GET",
+    path: "/environments/{name}",
+    requestSchema: z
+      .object({
+        name: z.string().regex(/^[a-z][a-z0-9-]{0,63}$/),
+        revision: z
+          .string()
+          .regex(/^[a-f0-9]{64}$/)
+          .optional(),
+      })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("query", "functions/environments:get"),
+  }),
+  op({
+    id: "environments.upload",
+    group: "environments",
+    summary:
+      "Reserve an owner-bound source upload. Prefix the uploaded bytes with the returned proof before saving.",
+    cli: "dench env save",
+    method: "POST",
+    path: "/environments/uploads",
+    requestSchema: z
+      .object({
+        kind: z.literal("source"),
+        size: z.number().int().min(1).max(16777216),
+        sha256: z.string().regex(/^[a-f0-9]{64}$/),
+      })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("mutation", "functions/environments:requestUpload"),
+  }),
+  op({
+    id: "environments.save",
+    group: "environments",
+    summary:
+      "Publish an explicitly saved source and manifest for one-time preparation. Returns pending/building until verified; does not run the task.",
+    cli: "dench env save",
+    method: "POST",
+    path: "/environments/{name}",
+    requestSchema: z
+      .object({
+        name: z.string().regex(/^[a-z][a-z0-9-]{0,63}$/),
+        manifest: z
+          .object({
+            version: z.literal(1),
+            name: z.string(),
+            purpose: z.string(),
+            files: z.array(z.string()),
+            prepare: z.array(z.string()),
+            verify: z.array(z.string()),
+            env: z.record(z.string(), z.string()).optional(),
+            secretEnv: z.record(z.string(), z.string()).optional(),
+            secretFiles: z
+              .array(
+                z.object({
+                  path: z.string(),
+                  secret: z.string(),
+                  mutable: z.boolean().optional(),
+                }),
+              )
+              .optional(),
+            statePaths: z.array(z.string()).optional(),
+            portable: z.boolean().optional(),
+          })
+          .strict(),
+        uploadId: z.string(),
+        storageId: z.string(),
+        sha256: z.string().regex(/^[a-f0-9]{64}$/),
+      })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("action", "functions/environmentsNode:save"),
+  }),
+  op({
+    id: "environments.delete",
+    group: "environments",
+    summary:
+      "Retire a saved setup from new selection; retain immutable revisions and active job evidence.",
+    cli: "dench env delete",
+    method: "DELETE",
+    path: "/environments/{name}",
+    requestSchema: z
+      .object({ name: z.string().regex(/^[a-z][a-z0-9-]{0,63}$/) })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("mutation", "functions/environments:remove"),
+  }),
+  op({
+    id: "environments.run",
+    group: "environments",
+    summary:
+      "Run a command with prepared dependencies and declared credentials, saving declared state with a revision check.",
+    cli: "dench env run",
+    method: "POST",
+    path: "/local/environments/run",
+    requestSchema: noBody,
+    responseSchema: anyResponse,
+    backend: local(
+      "Execution occurs in the CLI process. Use dench env run NAME -- COMMAND; secret-bearing execution resolution is not a general REST read endpoint.",
+    ),
+  }),
+  op({
+    id: "secrets.list",
+    group: "secrets",
+    summary:
+      "List workspace-shared credential names, kinds and versions; never values.",
+    cli: "dench secrets list",
+    method: "GET",
+    path: "/secrets",
+    requestSchema: z
+      .object({
+        limit: z.number().int().min(1).max(100).optional(),
+        cursor: z.string().optional(),
+      })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("query", "functions/workspaceSecrets:list"),
+  }),
+  op({
+    id: "secrets.set",
+    group: "secrets",
+    summary:
+      "Encrypt a workspace credential. Use CLI stdin or the secure chat form; return metadata only. Do not put values in chat, manifests or scripts.",
+    cli: "dench secrets set",
+    method: "PUT",
+    path: "/secrets/{name}",
+    requestSchema: z
+      .object({
+        name: z.string().regex(/^[A-Z][A-Z0-9_]{0,127}$/),
+        kind: z.enum(["env", "file"]),
+        value: z.string().min(1).max(65536),
+        expectedVersion: z.number().int().nonnegative().optional(),
+      })
+      .strict(),
+    responseSchema: z.object({
+      name: z.string(),
+      kind: z.enum(["env", "file"]),
+      version: z.number(),
+      revision: z.number(),
+      status: z.literal("stored"),
+    }),
+    backend: convex("action", "functions/workspaceSecretsNode:set"),
+  }),
+  op({
+    id: "secrets.delete",
+    group: "secrets",
+    summary:
+      "Revoke a workspace credential for future resolution, optionally checking its version.",
+    cli: "dench secrets delete",
+    method: "DELETE",
+    path: "/secrets/{name}",
+    requestSchema: z
+      .object({
+        name: z.string().regex(/^[A-Z][A-Z0-9_]{0,127}$/),
+        expectedVersion: z.number().int().nonnegative().optional(),
+      })
+      .strict(),
+    responseSchema: anyResponse,
+    backend: convex("mutation", "functions/workspaceSecrets:remove"),
+  }),
   op({
     id: "campaigns.drafts.create",
     group: "campaigns",
@@ -3999,7 +4183,7 @@ const rawApiOperations = [
     id: "campaigns.analytics",
     group: "campaigns",
     summary:
-      "Campaign funnel: enrolled, contacted, invited, accepted, messaged, replied, opens and clicks.",
+      "Campaign funnel: enrolled, contacted, invited, accepted, messaged, replied, opens and clicks, and for a workflow how many people took each If / else and Wait for them to accept path (branchStats).",
     cli: "dench campaign get",
     method: "GET",
     path: "/campaigns/{sequenceId}/analytics",
@@ -4053,7 +4237,7 @@ const rawApiOperations = [
     id: "campaigns.steps.replace",
     group: "campaigns",
     summary:
-      "Replace every step of a draft campaign (email, wait, LinkedIn visit, connection request, message, post reaction, InMail). Steps are checked first: a field the step type would drop, missing text or {TOKEN} single braces are rejected, not saved. Configure sender pools on the campaign; step sender ids are legacy-only.",
+      "Replace every step of a draft campaign (email, wait, LinkedIn visit, connection request, message, post reaction, InMail, If / else, Wait for them to accept). A workflow (stepModel workflow, or steps with key, next, yesNext or noNext) branches: condition and wait_for_connection steps continue on yesNext or noNext, other steps on next; each points at another step's key or end. Steps are checked first: a field the step type would drop, missing text, {TOKEN} single braces or paths that don't hold together are rejected, not saved. Configure sender pools on the campaign; step sender ids are legacy-only.",
     cli: "dench campaign steps set",
     method: "PUT",
     path: "/campaigns/{sequenceId}/steps",
@@ -4065,7 +4249,7 @@ const rawApiOperations = [
     id: "campaigns.steps.update",
     group: "campaigns",
     summary:
-      "Edit the text, waits and conditions of a launched (or paused) campaign's steps in place. Each step keeps its id, type and place; pass the stepId and the updatedAt you read, and only the fields you change. Messages already sent or being prepared keep their text; drafts use campaigns.steps.replace.",
+      "Edit the text, waits and conditions of a launched (or paused) campaign's steps in place. Each step keeps its id, type and place; pass the stepId and the updatedAt you read, and only the fields you change. A workflow keeps its paths and what each If / else checks (key, next, yesNext, noNext, check, conditionField, conditionOperator); conditionValue and acceptance waits stay editable. Messages already sent or being prepared keep their text; drafts use campaigns.steps.replace.",
     cli: "dench campaign steps edit",
     method: "PATCH",
     path: "/campaigns/{sequenceId}/steps",
@@ -5134,7 +5318,8 @@ const rawApiOperations = [
     id: "agentConfig.identity.show",
     group: "agent-config",
     summary: "Read IDENTITY.md.",
-    cli: "dench identity show",
+    cli: "dench context --sections identity",
+    aliases: ["dench identity show"],
     method: "GET",
     path: "/agent-config/identity",
     requestSchema: noBody,
@@ -5145,7 +5330,8 @@ const rawApiOperations = [
     id: "agentConfig.identity.edit",
     group: "agent-config",
     summary: "Update IDENTITY.md.",
-    cli: "dench identity edit",
+    cli: "dench context set identity",
+    aliases: ["dench identity edit"],
     method: "PUT",
     path: "/agent-config/identity",
     requestSchema: anyObject,
@@ -5156,7 +5342,8 @@ const rawApiOperations = [
     id: "agentConfig.organisation.show",
     group: "agent-config",
     summary: "Read ORGANISATION.md.",
-    cli: "dench organisation show",
+    cli: "dench context --sections organisation",
+    aliases: ["dench organisation show"],
     method: "GET",
     path: "/agent-config/organisation",
     requestSchema: noBody,
@@ -5167,7 +5354,8 @@ const rawApiOperations = [
     id: "agentConfig.organisation.edit",
     group: "agent-config",
     summary: "Update ORGANISATION.md.",
-    cli: "dench organisation edit",
+    cli: "dench context set organisation",
+    aliases: ["dench organisation edit"],
     method: "PUT",
     path: "/agent-config/organisation",
     requestSchema: anyObject,
@@ -5178,7 +5366,8 @@ const rawApiOperations = [
     id: "agentConfig.user.show",
     group: "agent-config",
     summary: "Read USER.md.",
-    cli: "dench user show",
+    cli: "dench context --sections user",
+    aliases: ["dench user show"],
     method: "GET",
     path: "/agent-config/user",
     requestSchema: noBody,
@@ -5189,7 +5378,8 @@ const rawApiOperations = [
     id: "agentConfig.user.edit",
     group: "agent-config",
     summary: "Update USER.md.",
-    cli: "dench user edit",
+    cli: "dench context set user",
+    aliases: ["dench user edit"],
     method: "PUT",
     path: "/agent-config/user",
     requestSchema: anyObject,
@@ -5200,7 +5390,8 @@ const rawApiOperations = [
     id: "agentConfig.tools.show",
     group: "agent-config",
     summary: "Read tool notes.",
-    cli: "dench tools show",
+    cli: "dench context --sections tools",
+    aliases: ["dench tools show"],
     method: "GET",
     path: "/agent-config/tools",
     requestSchema: noBody,
@@ -5211,15 +5402,32 @@ const rawApiOperations = [
     id: "agentConfig.tools.edit",
     group: "agent-config",
     summary: "Update tool notes.",
-    cli: "dench tools edit",
+    cli: "dench context set tools",
+    aliases: ["dench tools edit"],
     method: "PUT",
     path: "/agent-config/tools",
     requestSchema: anyObject,
     responseSchema: anyResponse,
     backend: convex("mutation", "functions/agentConfig:updateToolsNotes"),
   }),
+  op({
+    id: "workspace.context.rules.set",
+    group: "workspace",
+    summary:
+      "Update standing workspace rules; credentials belong in secrets and runnable setup in environments.",
+    cli: "dench context set rules",
+    method: "PUT",
+    path: "/context/rules",
+    requestSchema: z.object({ content: z.string().min(1).max(32000) }).strict(),
+    responseSchema: anyResponse,
+    backend: {
+      ...convex("mutation", "functions/agentConfig:writeMagicFileFromUI"),
+      fixedArgs: { path: "/RULES.md" },
+    },
+  }),
   op({
     id: "agentConfig.mem.show",
+    deprecated: true,
     group: "agent-config",
     summary: "Read aggregate memory.",
     cli: "dench mem show",
@@ -5231,6 +5439,7 @@ const rawApiOperations = [
   }),
   op({
     id: "agentConfig.mem.edit",
+    deprecated: true,
     group: "agent-config",
     summary: "Update aggregate memory.",
     cli: "dench mem set",
@@ -5242,6 +5451,7 @@ const rawApiOperations = [
   }),
   op({
     id: "agentConfig.bootstrap.show",
+    deprecated: true,
     group: "agent-config",
     summary: "Read bootstrap state.",
     cli: "dench bootstrap status",
@@ -5253,6 +5463,7 @@ const rawApiOperations = [
   }),
   op({
     id: "agentConfig.bootstrap.complete",
+    deprecated: true,
     group: "agent-config",
     summary: "Complete bootstrap.",
     cli: "dench bootstrap complete",
@@ -5264,6 +5475,7 @@ const rawApiOperations = [
   }),
   op({
     id: "agentConfig.bootstrap.template",
+    deprecated: true,
     group: "agent-config",
     summary: "Update bootstrap template.",
     cli: "dench bootstrap template",
@@ -5300,6 +5512,7 @@ const rawApiOperations = [
   }),
   op({
     id: "agentConfig.daily.today",
+    deprecated: true,
     group: "agent-config",
     summary: "Read today's daily activity path.",
     cli: "dench daily today",
@@ -5311,6 +5524,7 @@ const rawApiOperations = [
   }),
   op({
     id: "agentConfig.daily.show",
+    deprecated: true,
     group: "agent-config",
     summary: "Read a daily activity path.",
     cli: "dench daily show",