@duvoai/cli 1.74.0 → 1.75.0

package/dist/bin/duvo.js

@@ -3726,8 +3726,9 @@ var rotateInterviewVoiceTokenResponseSchema = z10.object({
   providerConfig: voiceProviderConfigSchema
 });
 var WEBSOCKET_FALLBACK_MINT_REASON = "websocket-fallback";
+var TURN_RELAY_FALLBACK_MINT_REASON = "turn-relay-fallback";
 var rotateVoiceTokenQuerySchema = z10.object({
-  reason: z10.enum([WEBSOCKET_FALLBACK_MINT_REASON]).optional()
+  reason: z10.enum([WEBSOCKET_FALLBACK_MINT_REASON, TURN_RELAY_FALLBACK_MINT_REASON]).optional()
 });
 var CLARITY_INTERVIEW_STATUSES = [
   "pending",
@@ -4209,7 +4210,7 @@ var clarityTransformationProposalSnapshotKindDetailResponseSchema = z12.object({
   snapshot: clarityTransformationProposalSnapshotKindApiSchema
 });
 var saveClarityProcessSnapshotBodySchema = z12.object({
-  steps: z12.array(clarityV1WritablePostprocessStepSchema).min(1).superRefine(refineStepGraph),
+  steps: z12.array(postprocessClarityStepBaseSchema).min(1).superRefine(refineStepGraph),
   baselineSnapshotId: z12.guid(),
   clarityCurrentProcessId: z12.guid().optional(),
   ...swotAnalysisAgentCurrentProcessSchema.shape,
@@ -25317,8 +25318,9 @@ var rotateInterviewVoiceTokenResponseSchema2 = z342.object({
   providerConfig: voiceProviderConfigSchema2
 });
 var WEBSOCKET_FALLBACK_MINT_REASON2 = "websocket-fallback";
+var TURN_RELAY_FALLBACK_MINT_REASON2 = "turn-relay-fallback";
 var rotateVoiceTokenQuerySchema2 = z342.object({
-  reason: z342.enum([WEBSOCKET_FALLBACK_MINT_REASON2]).optional()
+  reason: z342.enum([WEBSOCKET_FALLBACK_MINT_REASON2, TURN_RELAY_FALLBACK_MINT_REASON2]).optional()
 });
 var CLARITY_INTERVIEW_STATUSES2 = [
   "pending",
@@ -25800,7 +25802,7 @@ var clarityTransformationProposalSnapshotKindDetailResponseSchema2 = z362.object
   snapshot: clarityTransformationProposalSnapshotKindApiSchema2
 });
 var saveClarityProcessSnapshotBodySchema2 = z362.object({
-  steps: z362.array(clarityV1WritablePostprocessStepSchema2).min(1).superRefine(refineStepGraph2),
+  steps: z362.array(postprocessClarityStepBaseSchema2).min(1).superRefine(refineStepGraph2),
   baselineSnapshotId: z362.guid(),
   clarityCurrentProcessId: z362.guid().optional(),
   ...swotAnalysisAgentCurrentProcessSchema2.shape,
@@ -26384,7 +26386,6 @@ function clarityStepsToEaseDocument(steps) {
   const stepOrder = steps.map((step) => step.id);
   const stepsById = Object.fromEntries(
     steps.map((step) => {
-      const serialized = serializeClarityStepForV12(step);
       const {
         id,
         readiness: _readiness,
@@ -26392,7 +26393,7 @@ function clarityStepsToEaseDocument(steps) {
         extraCaptureNeeded: _extraCaptureNeeded,
         linkedAgentId: _linkedAgentId,
         ...baseStep
-      } = serialized;
+      } = step;
       return [id, baseStep];
     })
   );
@@ -26492,42 +26493,25 @@ __name(assertEaseDocument, "assertEaseDocument");
 __name3(assertEaseDocument, "assertEaseDocument");
 function materializeEaseDocument(easeDocument) {
   const ease = assertEaseDocument(easeDocument);
+  const steps = postprocessClarityStepBaseSchema2.array().parse(
+    coerceStepsOutput2(
+      ease.stepOrder.map((stepId) => ({
+        id: stepId,
+        ...ease.stepsById[stepId]
+      }))
+    )
+  );
   return {
     ...pickAllowedRoots(ease),
-    steps: ease.stepOrder.map(
-      (stepId) => legacyClarityStepBaseSchema2.parse(
-        coerceStepOutput2({
-          id: stepId,
-          ...ease.stepsById[stepId]
-        })
-      )
-    )
+    steps
   };
 }
 __name(materializeEaseDocument, "materializeEaseDocument");
 __name3(materializeEaseDocument, "materializeEaseDocument");
-function normalizeEaseOutput(output) {
-  return {
-    ...pickAllowedRoots(output),
-    steps: output.steps.map(
-      (step) => postprocessClarityStepBaseSchema2.parse(step)
-    )
-  };
-}
-__name(normalizeEaseOutput, "normalizeEaseOutput");
-__name3(normalizeEaseOutput, "normalizeEaseOutput");
 function clarityOutputToEaseDocument(output) {
-  const stepOrder = output.steps.map((step) => step.id);
-  const stepsById = Object.fromEntries(
-    output.steps.map((step) => {
-      const { id, ...baseStep } = step;
-      return [id, baseStep];
-    })
-  );
   return {
     ...pickAllowedRoots(output),
-    stepOrder,
-    stepsById
+    ...clarityStepsToEaseDocument(output.steps)
   };
 }
 __name(clarityOutputToEaseDocument, "clarityOutputToEaseDocument");
@@ -31406,9 +31390,10 @@ var toolExecutionPairSchema = z562.object({
 });
 var screenshotsTimelineResponseSchema = z562.object({
   toolExecutions: z562.array(toolExecutionPairSchema),
-  // Screenshots stored for the run, which exceeds the frames returned when the
-  // timeline is capped. Both fields are optional so a client parsing this
-  // schema still reads a response from a backend that predates the cap.
+  // After-frames stored for the run, which can exceed the number returned when
+  // the timeline is capped. The timeline reads only after-frames, not every
+  // stored screenshot. Both fields are optional so a client parsing this schema
+  // still reads a response from a backend that predates the cap.
   totalScreenshotCount: z562.number().int().nonnegative().optional(),
   truncated: z562.boolean().optional()
 });
@@ -36965,22 +36950,27 @@ var FEATURE_FLAG_CATALOGUE = {
   CLARITY_REALTIME_SDP_PROXY: {
     key: "clarity_realtime_sdp_proxy",
     defaultValue: false,
-    description: "Superseded by clarity_sdp_proxy_wss_fallback, which enables this and the WebSocket fallback together; still honoured on its own so teams already enabled keep working. Routes the Clarity interview WebRTC signaling (SDP offer/answer exchange) through the Duvo backend instead of the browser calling api.openai.com directly, so interviews can start on corporate networks that domain-block OpenAI. Voice/screen media still flows browser-to-OpenAI over WebRTC. Off-by-default for staged rollout; does not help networks that block UDP (those need a TURN relay)."
+    description: "Read only while clarity_wss_first_transport is off (the INC-150 kill-switch path): superseded by clarity_sdp_proxy_wss_fallback, still honoured on its own so teams already enabled keep working. Routes interview WebRTC signaling through the Duvo backend. Retirement staged in #10298 once the kill switch itself retires."
   },
   CLARITY_INTERVIEW_WS_FALLBACK: {
     key: "clarity_interview_ws_fallback",
     defaultValue: false,
-    description: "Superseded by clarity_sdp_proxy_wss_fallback, which enables this and the SDP proxy together; still honoured on its own so teams already enabled keep working. Lets a Clarity interview fall back to a WebSocket transport when the WebRTC media path cannot be established, which is how networks that block UDP and raw TCP/443 fail today: signaling succeeds and the interview then dies with 'Connection lost'. The fallback is attempted once, only for that specific failure, and carries the full interview (audio both ways, screen frames, tools, interruption) over the same TLS connection the rest of the app uses. Off-by-default for staged rollout."
+    description: "Read only while clarity_wss_first_transport is off (the INC-150 kill-switch path): superseded by clarity_sdp_proxy_wss_fallback, still honoured on its own. Arms the WebSocket fallback after a WebRTC media-path failure. Retirement staged in #10298 once the kill switch itself retires."
   },
   CLARITY_SDP_PROXY_WSS_FALLBACK: {
     key: "clarity_sdp_proxy_wss_fallback",
-    defaultValue: false,
-    description: "Enables the full enterprise-network transport ladder in one switch: SDP signaling is routed through the Duvo backend AND the interview may fall back to a WebSocket transport when the WebRTC media path cannot be established. The two halves address consecutive failures on the same restricted network \u2014 signaling blocked by domain filtering, then media blocked by UDP policy \u2014 and a network that needs one usually needs the other, so they roll out together. Supersedes clarity_realtime_sdp_proxy and clarity_interview_ws_fallback, which remain honoured independently so teams already on them keep working; either legacy flag still enables its own half. Off-by-default for staged rollout. Does not cover networks that block the OpenAI domain outright for media as well \u2014 those need the TURN relay."
+    defaultValue: true,
+    description: "Read only while clarity_wss_first_transport is off (the INC-150 kill-switch path): enables the SDP proxy and the WebSocket fallback together for the pre-ladder orchestration; an explicit false is that path's own kill switch and beats the superseded standalone keys. Retirement staged in #10298 once clarity_wss_first_transport itself retires."
+  },
+  CLARITY_WSS_FIRST_TRANSPORT: {
+    key: "clarity_wss_first_transport",
+    defaultValue: true,
+    description: "Kill switch for the Clarity WSS-first transport ladder (default on): the OpenAI WebSocket transport first, relay-only WebRTC through the TURN relay when the socket cannot connect. An explicit false restores the pre-ladder orchestration \u2014 direct WebRTC first with the flag-gated WebSocket fallback \u2014 in minutes, without a revert release; INC-150 is why that path exists. Remove the flag and the legacy path one release after the ladder survives in prod."
   },
   CLARITY_TURN_RELAY_SPIKE: {
     key: "clarity_turn_relay_spike",
     defaultValue: false,
-    description: "Test-only spike that forces Clarity OpenAI Realtime WebRTC through an authenticated Duvo coturn relay. Requires isolated TURN environment configuration and fails closed when enabled without it. Never enable as a production rollout flag."
+    description: "Per-team diagnostic that reorders the Clarity transport ladder to relay-first: WebRTC media through the authenticated Duvo coturn relay (turn.prd.duvo.ai) from the FIRST attempt, falling forward to the OpenAI WebSocket transport on a relay media failure. The default ladder is the inverse (socket first, relay on socket failure), so this flag exists for teams whose networks are known to need the relay immediately. Requires CLARITY_TURN_RELAY_URL and CLARITY_TURN_SHARED_SECRET, and fails the interview start when enabled without them. Keep per-team: the relay is a single capacity-limited VM (coturn total-quota caps concurrent sessions), and forcing it moves ALL of a team's media there rather than only socket-failed sessions."
   },
   CLARITY_SIGNAVIO_SWIMLANES_EXPORT: {
     key: "clarity_signavio_swimlanes_export",
@@ -49376,7 +49366,7 @@ var CLARITY_READ_TOOLS = [
         path: "/v2/organizations/:orgId/clarity/hierarchy/tree"
       }
     ],
-    description: "Read the raw Clarity process hierarchy tree."
+    description: "Read the raw Clarity process hierarchy tree. Narrow a large organization with --root (one subtree) or --owner-team (one team's processes)."
   },
   {
     name: "getClarityHierarchyPeople",
@@ -49389,7 +49379,7 @@ var CLARITY_READ_TOOLS = [
         path: "/v2/organizations/:orgId/clarity/hierarchy/people"
       }
     ],
-    description: "Read the people on every process in the landscape in one request, with role, invite status, and capture counts."
+    description: "Read the people on every process in the landscape in one request, with role, invite status, and capture counts. Narrow it with --root (one subtree), --owner-team (one owning team), and --user or --search (one person); filtering to a person and reading their capture counts answers who still owes a capture. Check `truncated` before treating the rows, or a count derived from them, as the whole answer: a landscape large enough to hit a cap reports a lower bound."
   },
   {
     name: "listClarityLandscapeNodePeople",
@@ -53564,7 +53554,10 @@ function registerClarityLandscape(clarity) {
     }
     renderLandscapeNodes(response.nodes, "No landscape nodes found.");
   }, "getAction"));
-  landscape.command("tree").description("Read the raw Clarity process tree").option("--org <org-id>", ORG_FLAG_DESCRIPTION2).option("--root <node-id>", "only read the subtree under this node").option("--json", "output JSON").action(/* @__PURE__ */ __name(async function treeAction(options) {
+  landscape.command("tree").description("Read the raw Clarity process tree").option("--org <org-id>", ORG_FLAG_DESCRIPTION2).option("--root <node-id>", "only read the subtree under this node").option(
+    "--owner-team <team-id>",
+    "only read the process nodes owned by this team"
+  ).option("--json", "output JSON").action(/* @__PURE__ */ __name(async function treeAction(options) {
     const config = await requireAuthenticatedConfig(this);
     const response = await loadTree(this, config, options);
     if (options.json) {
@@ -53575,7 +53568,13 @@ function registerClarityLandscape(clarity) {
   }, "treeAction"));
   landscape.command("people").description(
     "Read the people on every process in the landscape in one request"
-  ).option("--org <org-id>", ORG_FLAG_DESCRIPTION2).option("--root <node-id>", "only read the subtree under this node").option("--json", "output JSON").action(/* @__PURE__ */ __name(async function peopleAction(options) {
+  ).option("--org <org-id>", ORG_FLAG_DESCRIPTION2).option("--root <node-id>", "only read the subtree under this node").option(
+    "--owner-team <team-id>",
+    "only read the rosters of processes owned by this team"
+  ).option("--user <user-id>", "only read the rows for this platform user").option(
+    "--search <text>",
+    "only read the rows whose person name or email contains this text"
+  ).option("--json", "output JSON").action(/* @__PURE__ */ __name(async function peopleAction(options) {
     const config = await requireAuthenticatedConfig(this);
     const response = await loadHierarchyPeople(this, config, options);
     if (options.json) {
@@ -53861,7 +53860,7 @@ async function loadLandscape(command, config, options) {
 __name(loadLandscape, "loadLandscape");
 async function loadTree(command, config, options) {
   const path = resolveOrgPath(command, TREE_RESOURCE_PATH);
-  const searchParams = buildRootSearchParams(options.root);
+  const searchParams = buildLandscapeFilterSearchParams(options);
   const raw = await httpRequest({
     method: "GET",
     path,
@@ -53874,7 +53873,7 @@ async function loadTree(command, config, options) {
 __name(loadTree, "loadTree");
 async function loadHierarchyPeople(command, config, options) {
   const path = resolveOrgPath(command, PEOPLE_RESOURCE_PATH);
-  const searchParams = buildRootSearchParams(options.root);
+  const searchParams = buildLandscapeFilterSearchParams(options);
   const raw = await httpRequest({
     method: "GET",
     path,
@@ -53903,6 +53902,20 @@ function buildRootSearchParams(rootId) {
   return searchParams;
 }
 __name(buildRootSearchParams, "buildRootSearchParams");
+function buildLandscapeFilterSearchParams(options) {
+  const searchParams = buildRootSearchParams(options.root);
+  for (const [key, value] of [
+    ["ownerTeamId", options.ownerTeam],
+    ["userId", options.user],
+    ["search", options.search]
+  ]) {
+    if (value !== void 0) {
+      searchParams.set(key, value);
+    }
+  }
+  return searchParams;
+}
+__name(buildLandscapeFilterSearchParams, "buildLandscapeFilterSearchParams");
 function renderLandscapeNodes(nodes, emptyMessage) {
   if (nodes.length === 0) {
     console.log(emptyMessage);
@@ -55656,25 +55669,17 @@ function registerClaritySaveTransformationProposal(clarity) {
 }
 __name(registerClaritySaveTransformationProposal, "registerClaritySaveTransformationProposal");
 async function saveSnapshot(args) {
-  const wireSteps = args.body.steps.map(serializeClarityStepForV1);
-  const parsedBody = saveClarityProcessSnapshotBodySchema.safeParse({
-    ...args.body,
-    steps: wireSteps
-  });
+  const parsedBody = saveClarityProcessSnapshotBodySchema.safeParse(args.body);
   if (!parsedBody.success) {
     throw new CliError(`Invalid snapshot edits: ${parsedBody.error.message}`);
   }
   const { apiKey, apiBaseUrl } = await requireAuthenticatedConfig(args.command);
-  const { steps: _steps, ...bodyFields } = parsedBody.data;
   const raw = await httpRequest({
     method: "POST",
     path: `/v2/clarity-v2/processes/${encodeURIComponent(args.processId)}/snapshots/${args.kind}/save`,
     apiKey,
     apiBaseUrl,
-    body: {
-      ...bodyFields,
-      steps: wireSteps
-    }
+    body: parsedBody.data
   });
   if (args.json) {
     printJson(raw);
@@ -55721,16 +55726,6 @@ async function readSnapshotFile(path) {
     );
   }
   const snapshot = Array.isArray(parsed.data) ? { steps: parsed.data } : parsed.data;
-  try {
-    for (const step of snapshot.steps) {
-      serializeClarityStepForV1(step);
-    }
-  } catch (error) {
-    if (error instanceof ClarityV1RepresentationError) {
-      throw new CliError(`Invalid steps file "${path}": ${error.message}`);
-    }
-    throw error;
-  }
   return snapshot;
 }
 __name(readSnapshotFile, "readSnapshotFile");
@@ -68500,7 +68495,7 @@ __name(isStandaloneBinary, "isStandaloneBinary");
 import { createRequire } from "node:module";
 function getPackageMeta() {
   if (true) {
-    return { name: "@duvoai/cli", version: "1.74.0" };
+    return { name: "@duvoai/cli", version: "1.75.0" };
   }
   const require2 = createRequire(import.meta.url);
   const raw = require2("../../package.json");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@duvoai/cli",
-  "version": "1.74.0",
+  "version": "1.75.0",
   "description": "Command-line interface for the Duvo public API",
   "bin": {
     "duvo": "./dist/bin/duvo.js"