@f-o-h/cli 0.1.37 → 0.1.39

package/README.md

@@ -4,7 +4,7 @@ AI-operator provisioning CLI for Front Of House.
 
 Public mirror: https://github.com/iiko38/front-of-house-cli
 
-Current published baseline: `@f-o-h/cli@0.1.37`
+Current published baseline: `@f-o-h/cli@0.1.39`
 
 This mirror is a generated release artifact. The private product monorepo is not
 published here, and no open-source license is granted unless stated separately.
@@ -87,6 +87,9 @@ read-only by default; pass `--mutation-mode ensure` or `--repair` only when you
 explicitly want proof to ensure missing widget state. Use `--strict` in
 automation when holds should fail the command, and `--mission voice` or
 `--require-phone` when a voice/contact number is mandatory for the demo.
+Use `--contact-path byon` when the proof is meant to validate a
+customer-owned/BYON phone route; missing BYON config then reports
+`byon_voice_number_not_configured` instead of suggesting FOH number purchase.
 
 For mass AI-agent evals and repeated demo rehearsals, keep setup on the free
 scaffold lane:
@@ -99,6 +102,10 @@ FOH_CLI_SPEND_POLICY=no_spend foh setup --org <org-id> --agent-template <templat
 buying one. `--phone-mode skip` bypasses the phone step. `--phone-mode purchase`
 is the explicit paid contact path and is fail-closed when
 `FOH_CLI_SPEND_POLICY=no_spend` is set.
+
+If managed-number provisioning is blocked by account/provider capacity or empty
+reserve inventory, proof reports `provider_capacity_blocked`; fix capacity or
+switch to BYON rather than retrying blindly.
 
 The CLI defaults to the production API at `https://api.frontofhouse.okii.uk`.
 

package/dist/foh.js

@@ -9927,7 +9927,12 @@ function envelopeOk(status) {
 function dedupeCommands(commands = []) {
   return Array.from(new Set(commands.map((command) => String(command || "").trim()).filter(Boolean)));
 }
+function defaultSafeToRetry(status) {
+  return !(status === "fail" || status === "blocked" || status === "hold");
+}
 function cliEnvelope(input) {
+  const extra = input.extra ?? {};
+  const artifacts = input.artifacts ?? {};
   return {
     schema_version: input.schemaVersion ?? "foh_cli_envelope.v1",
     ok: envelopeOk(input.status),
@@ -9936,9 +9941,13 @@ function cliEnvelope(input) {
     summary: input.summary,
     ids: input.ids ?? {},
     checks: input.checks ?? [],
-    artifacts: input.artifacts ?? {},
+    artifacts,
+    spend_class: input.spendClass ?? extra.spend_class ?? null,
+    safe_to_retry: input.safeToRetry ?? extra.safe_to_retry ?? defaultSafeToRetry(input.status),
+    proof_artifacts: input.proofArtifacts ?? extra.proof_artifacts ?? artifacts.proof_bundle ?? artifacts.proof_report ?? null,
+    operator_note: input.operatorNote ?? extra.operator_note ?? null,
     next_commands: dedupeCommands(input.nextCommands),
-    ...input.extra ?? {}
+    ...extra
   };
 }
 function reasonCodeFromStep(step, fallback = "cli_command_failed") {
@@ -32755,7 +32764,7 @@ var StdioServerTransport = class {
 };
 
 // src/lib/cli-version.ts
-var CLI_VERSION = "0.1.37";
+var CLI_VERSION = "0.1.39";
 
 // src/commands/mcp-serve.ts
 var DEFAULT_TIMEOUT_MS = 12e4;
@@ -37173,6 +37182,11 @@ function normalizeMutationMode(raw, repair) {
   const value = String(raw || "read-only").trim().toLowerCase();
   return value === "ensure" ? "ensure" : "read-only";
 }
+function normalizeContactPath(raw) {
+  const value = String(raw || "auto").trim().toLowerCase();
+  if (value === "managed" || value === "byon") return value;
+  return "auto";
+}
 function agentIdFromList(response) {
   const agents = Array.isArray(response.agents) ? response.agents : [];
   const usable = agents.filter((agent) => typeof agent.id === "string" && agent.id.trim());
@@ -37186,10 +37200,41 @@ function firstUsableOrgId(response) {
   const usable = orgs.map((org) => org && typeof org === "object" ? org : {}).map((org) => String(org.org_id ?? org.id ?? "").trim()).filter(Boolean);
   return { orgId: usable.length === 1 ? usable[0] : void 0, count: usable.length };
 }
+function readStringField(record2, keys) {
+  for (const key of keys) {
+    const value = record2[key];
+    if (typeof value === "string" && value.trim()) return value.trim();
+  }
+  return "";
+}
+function isProviderCapacityBlocked(onboarding) {
+  const code = readStringField(onboarding, [
+    "provisioning_reason_code",
+    "provisioning_error_code",
+    "reason_code",
+    "code"
+  ]).toLowerCase();
+  if ([
+    "provider_capacity_blocked",
+    "twilio_subaccount_limit_reached",
+    "reserve_pool_exhausted",
+    "global_safety_limit_reached"
+  ].includes(code)) {
+    return true;
+  }
+  const message = readStringField(onboarding, [
+    "provisioning_error",
+    "provisioning_message",
+    "error",
+    "message"
+  ]).toLowerCase();
+  return /maximum number of subaccounts|subaccount limit|reserve[- ]number pool|reserve pool exhausted|global safety limit/.test(message);
+}
 function registerProve(program3) {
-  program3.command("prove").description("Produce one setup/runtime proof bundle for an agent").option("--agent <id>", "Agent ID to prove").option("--org <id>", "Org ID (default: stored org from foh org use)").option("--cert-mode <m>", "Simulation cert mode: quick, full, stress", "quick").option("--cert-adaptive-runs <n>", "Adaptive runs for full/stress certification", "30").option("--cert-max-improvement-rounds <n>", "Max prompt improvement rounds in cert loop (0-5)", "1").option("--mission <mission>", "Proof mission: setup, widget, voice, publish", "setup").option("--mutation-mode <mode>", "Proof mutation mode: read-only or ensure", "read-only").option("--repair", "Alias for --mutation-mode ensure").option("--require-phone", "Hold proof if no phone/contact number is provisioned").option("--skip-cert", "Skip simulation certification check").option("--skip-smoke", "Skip widget runtime smoke check").option("--skip-voice-health", "Skip realtime voice provider health check").option("--out <path>", "Write signed proof report JSON to this path").option("--strict", "Exit non-zero unless all non-skipped checks pass").option("--api-url <url>", "API base URL override").option("--json", "Output as JSON").action(async (opts) => withCommandErrorHandling(async () => {
+  program3.command("prove").description("Produce one setup/runtime proof bundle for an agent").option("--agent <id>", "Agent ID to prove").option("--org <id>", "Org ID (default: stored org from foh org use)").option("--cert-mode <m>", "Simulation cert mode: quick, full, stress", "quick").option("--cert-adaptive-runs <n>", "Adaptive runs for full/stress certification", "30").option("--cert-max-improvement-rounds <n>", "Max prompt improvement rounds in cert loop (0-5)", "1").option("--mission <mission>", "Proof mission: setup, widget, voice, publish", "setup").option("--contact-path <mode>", "Voice contact path: auto, managed, or byon", "auto").option("--mutation-mode <mode>", "Proof mutation mode: read-only or ensure", "read-only").option("--repair", "Alias for --mutation-mode ensure").option("--require-phone", "Hold proof if no phone/contact number is provisioned").option("--skip-cert", "Skip simulation certification check").option("--skip-smoke", "Skip widget runtime smoke check").option("--skip-voice-health", "Skip realtime voice provider health check").option("--out <path>", "Write signed proof report JSON to this path").option("--strict", "Exit non-zero unless all non-skipped checks pass").option("--api-url <url>", "API base URL override").option("--json", "Output as JSON").action(async (opts) => withCommandErrorHandling(async () => {
     const checks = [];
     const mission = normalizeMission(opts.mission);
+    const contactPath = normalizeContactPath(opts.contactPath);
     const mutationMode = normalizeMutationMode(opts.mutationMode, Boolean(opts.repair));
     const ctx = {
       tokenPresent: false,
@@ -37291,18 +37336,41 @@ function registerProve(program3) {
           if (phoneNumber) {
             checks.push(pass("contact_channel", "Contact phone number is provisioned.", {
               phone_number_present: true,
-              provisioning_status: provisioningStatus
+              provisioning_status: provisioningStatus,
+              contact_path: contactPath
+            }));
+          } else if (contactPath === "byon" && (opts.requirePhone || mission === "voice")) {
+            checks.push(hold("contact_channel", "byon_voice_number_not_configured", "BYON/customer-owned voice contact path was requested, but no contact phone is configured for this org.", `foh provision status --org ${ctx.orgId} --json`, {
+              provisioning_status: provisioningStatus,
+              mission,
+              contact_path: contactPath,
+              spend_policy: resolveCliSpendPolicy(),
+              spend_class: "customer_owned",
+              safe_to_retry: false,
+              operator_note: "Attach or configure the customer-owned voice number, then rerun proof. This path should not buy a FOH-owned number."
+            }));
+          } else if (provisioningStatus === "failed" && isProviderCapacityBlocked(onboarding) && (opts.requirePhone || mission === "voice")) {
+            checks.push(hold("contact_channel", "provider_capacity_blocked", "Phone/contact provisioning is blocked by provider/account capacity or empty reserve inventory.", `foh provision status --org ${ctx.orgId} --json`, {
+              provisioning_status: provisioningStatus,
+              mission,
+              contact_path: contactPath,
+              spend_policy: resolveCliSpendPolicy(),
+              spend_class: "paid_foh",
+              safe_to_retry: false,
+              operator_note: "Do not retry blindly. Resolve provider/account capacity or use BYON/customer-owned contact path."
             }));
           } else if (provisioningStatus === "failed" && (opts.requirePhone || mission === "voice")) {
             checks.push(hold("contact_channel", "contact_phone_provisioning_failed", "Phone/contact provisioning failed for this org.", `foh provision status --org ${ctx.orgId} --json`, {
               provisioning_status: provisioningStatus,
               mission,
+              contact_path: contactPath,
               spend_policy: resolveCliSpendPolicy()
             }));
           } else if (isNoSpendPolicy() && (opts.requirePhone || mission === "voice")) {
             checks.push(hold("contact_channel", "voice_contact_expected_no_spend_hold", "No phone/contact number is provisioned; this is expected in no-spend eval mode unless a BYON/customer-approved phone path exists.", `foh provision status --org ${ctx.orgId} --json`, {
               provisioning_status: provisioningStatus,
               mission,
+              contact_path: contactPath,
               spend_policy: resolveCliSpendPolicy(),
               spend_class: "free",
               safe_to_retry: true,
@@ -37312,6 +37380,7 @@ function registerProve(program3) {
             checks.push(hold("contact_channel", "contact_phone_missing", "No phone/contact number is provisioned for this org.", `foh provision buy --org ${ctx.orgId} --json`, {
               provisioning_status: provisioningStatus,
               mission,
+              contact_path: contactPath,
               spend_policy: resolveCliSpendPolicy()
             }));
           } else {
@@ -37464,6 +37533,7 @@ function registerProve(program3) {
         org_id: ctx.orgId ?? null,
         agent_id: ctx.agentId ?? null,
         mission,
+        contact_path: contactPath,
         mutation_mode: mutationMode,
         widget_public_key_present: Boolean(ctx.widgetPublicKey),
         conversation_id: ctx.conversationId ?? null,
@@ -39196,6 +39266,12 @@ function classifyRun(input) {
   if (hasCommandReason(new RegExp(PAID_RESOURCE_BLOCKED_REASON_CODE, "i"))) {
     return { status: "hold", reasonCode: PAID_RESOURCE_BLOCKED_REASON_CODE };
   }
+  if (hasCommandReason(/provider_capacity_blocked/i)) {
+    return { status: "hold", reasonCode: "provider_capacity_blocked" };
+  }
+  if (hasCommandReason(/byon_voice_number_not_configured/i)) {
+    return { status: "hold", reasonCode: "byon_voice_number_not_configured" };
+  }
   if (hasCommandReason(/contact_phone_provisioning_failed/i)) {
     return { status: "hold", reasonCode: "voice_contact_phone_provisioning_failed" };
   }
@@ -39230,12 +39306,18 @@ ${stderr}`;
   if (/ENV_NETWORK_DNS_BLOCK|Could not resolve host|npm ping.*timeout|NO_EXECUTABLE_INSTALL/i.test(combined)) {
     return { status: "hold", reasonCode: "codex_network_dns_blocked" };
   }
-  if (/contact_phone_provisioning_failed/i.test(combined)) {
-    return { status: "hold", reasonCode: "voice_contact_phone_provisioning_failed" };
-  }
   if (new RegExp(PAID_RESOURCE_BLOCKED_REASON_CODE, "i").test(combined)) {
     return { status: "hold", reasonCode: PAID_RESOURCE_BLOCKED_REASON_CODE };
   }
+  if (/provider_capacity_blocked/i.test(combined)) {
+    return { status: "hold", reasonCode: "provider_capacity_blocked" };
+  }
+  if (/byon_voice_number_not_configured/i.test(combined)) {
+    return { status: "hold", reasonCode: "byon_voice_number_not_configured" };
+  }
+  if (/contact_phone_provisioning_failed/i.test(combined)) {
+    return { status: "hold", reasonCode: "voice_contact_phone_provisioning_failed" };
+  }
   if (/voice_contact_expected_no_spend_hold/i.test(combined)) {
     return { status: "hold", reasonCode: "voice_contact_expected_no_spend_hold" };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@f-o-h/cli",
-  "version": "0.1.37",
+  "version": "0.1.39",
   "description": "FOH CLI - AI-operator provisioning tool for Front Of House",
   "license": "UNLICENSED",
   "bin": {

package/schemas/cli-envelope.schema.json

@@ -3,7 +3,7 @@
   "$id": "https://frontofhouse.okii.uk/schemas/cli-envelope.schema.json",
   "title": "FOH CLI Envelope",
   "type": "object",
-  "required": ["schema_version", "ok", "status", "reason_code", "summary", "ids", "checks", "artifacts", "next_commands"],
+  "required": ["schema_version", "ok", "status", "reason_code", "summary", "ids", "checks", "artifacts", "spend_class", "safe_to_retry", "proof_artifacts", "operator_note", "next_commands"],
   "properties": {
     "schema_version": { "type": "string" },
     "ok": { "type": "boolean" },
@@ -13,6 +13,10 @@
     "ids": { "type": "object" },
     "checks": { "type": "array" },
     "artifacts": { "type": "object" },
+    "spend_class": { "type": ["string", "null"] },
+    "safe_to_retry": { "type": "boolean" },
+    "proof_artifacts": { "type": ["object", "string", "null"] },
+    "operator_note": { "type": ["string", "null"] },
     "next_commands": {
       "type": "array",
       "items": { "type": "string" }