@inquir/compute-cli 0.3.0 → 0.4.0

package/dist/utils/project-lookup.js

@@ -0,0 +1,52 @@
+import { ApiError } from '../sdk.js';
+import { getProject, listProjects } from './api.js';
+import { CliError, ExitCode } from './errors.js';
+/** A lookup by name reads the project list; bounded like the other list scans. */
+const MAX_PROJECT_LIST_PAGES = 20;
+export function isNotFound(error) {
+    return error instanceof ApiError && error.status === 404;
+}
+async function projectsNamed(name, apiOptions) {
+    const byId = new Map();
+    let cursor;
+    for (let page = 0; page < MAX_PROJECT_LIST_PAGES; page++) {
+        const result = await listProjects({ limit: 100, cursor }, apiOptions);
+        for (const project of result.items)
+            byId.set(project.id, project);
+        if (!result.nextCursor || result.nextCursor === cursor)
+            break;
+        cursor = result.nextCursor;
+    }
+    const projects = [...byId.values()];
+    const exact = projects.filter((project) => project.name === name);
+    if (exact.length > 0)
+        return exact;
+    const folded = name.toLocaleLowerCase();
+    return projects.filter((project) => project.name.toLocaleLowerCase() === folded);
+}
+/**
+ * A project by the id or slug the API takes, or by its display name — the
+ * only thing the dashboard shows. A name is tried only after the API answered
+ * 404, so an id or slug always wins, and only a unique one is accepted.
+ */
+export async function resolveProject(selector, apiOptions) {
+    try {
+        return await getProject(selector, apiOptions);
+    }
+    catch (error) {
+        if (!isNotFound(error))
+            throw error;
+        const named = await projectsNamed(selector, apiOptions);
+        if (named.length === 1)
+            return getProject(named[0].id, apiOptions);
+        if (named.length > 1) {
+            throw new CliError(`Several projects are named '${selector}'`, {
+                code: 'AMBIGUOUS_PROJECT',
+                exitCode: ExitCode.USAGE,
+                fix: `Use the slug of the one you mean: ${named.map((project) => project.slug).join(', ')}`,
+            });
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=project-lookup.js.map

package/dist/utils/project-lookup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"project-lookup.js","sourceRoot":"","sources":["../../src/utils/project-lookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAoC,MAAM,WAAW,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,YAAY,EAA0B,MAAM,UAAU,CAAC;AAC5E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAEjD,kFAAkF;AAClF,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY,EAAE,UAA6B;IACtE,MAAM,IAAI,GAAG,IAAI,GAAG,EAAmB,CAAC;IACxC,IAAI,MAA0B,CAAC;IAC/B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,sBAAsB,EAAE,IAAI,EAAE,EAAE,CAAC;QACzD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;QACtE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM;YAAE,MAAM;QAC9D,MAAM,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAClE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,MAAM,GAAG,IAAI,CAAC,iBAAiB,EAAE,CAAC;IACxC,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,iBAAiB,EAAE,KAAK,MAAM,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAgB,EAAE,UAA6B;IAClF,IAAI,CAAC;QACH,OAAO,MAAM,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;IAChD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACxD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,MAAM,IAAI,QAAQ,CAAC,+BAA+B,QAAQ,GAAG,EAAE;gBAC7D,IAAI,EAAE,mBAAmB;gBACzB,QAAQ,EAAE,QAAQ,CAAC,KAAK;gBACxB,GAAG,EAAE,qCAAqC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;aAC5F,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inquir/compute-cli",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "type": "module",
   "description": "Workspace-first CLI for Inquir Compute.",
   "bin": {
@@ -12,19 +12,19 @@
   ],
   "scripts": {
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\"",
-    "build": "npm run clean && npm --prefix ../.. run build --workspace @inquir/compute && tsc -p tsconfig.json",
+    "build": "npm run clean && npm --prefix ../.. run build --workspace @inquir/compute && tsc -p tsconfig.json",
     "build:self": "tsc -p tsconfig.json",
-    "prepack": "npm run build",
+    "prepack": "npm run build",
     "test": "npx vitest run -c vitest.config.ts"
   },
-  "publishConfig": {
-    "access": "public"
-  },
-  "engines": {
-    "node": ">=22"
-  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "engines": {
+    "node": ">=22"
+  },
   "dependencies": {
-    "@inquir/compute": "^0.3.0",
+    "@inquir/compute": "^0.4.0",
     "tsx": "^4.19.2"
   },
   "devDependencies": {

package/skill/SKILL.md

@@ -37,7 +37,7 @@ Overrides when detection guesses wrong: `--runtime`, `--handler <module.export>`
 
 ## Databases (Postgres / Redis)
 
-- `inquir apps create mydb --template postgres|redis` — one command from nothing to a running database: image, persistent volume, pinned public TCP port, generated password, first release.
+- `inquir apps create mydb --template postgres|redis` — one command from nothing to a running database: image, persistent volume, private TCP port, generated password, first release. `--volume-runner <runner>` puts it on a worker; that needs the operator's mirror of the template image, and the refusal (`APP_TEMPLATE_IMAGE_NOT_MIRRORED`) says so.
 - `inquir apps connect mydb web` — writes the connection URL into another app's env as `DATABASE_URL` / `REDIS_URL`; applies on that app's next release. Prefer this: the password never passes through you.
 - `inquir apps connection-url mydb` — prints the live URL with credentials in it (and into shell history); use only when the consumer is not an app on the platform.
 - `inquir apps backups mydb [list|create|restore <id>|delete <id>]` — volume snapshots. `restore` **overwrites the volume** and stops the app while it runs; it asks for confirmation, so non-interactively it needs `--yes`.
@@ -48,15 +48,21 @@ Register once: `claude mcp add inquir -- inquir mcp`
 
 - `deploy {path, name?, start?, env?}` — detect + deploy a directory; returns detection reasons, deploy status, and error logs on failure.
 - `invoke {function, payload}` — run a function and get result + logs.
-- `exec {function, command, target?}` — run a shell command inside the function's container (its runtime image + code). `target: "source"` (default) is read-write: use it for installing deps, running tests, debugging.
+- `exec {function, command, requestId, target?}` — submit an asynchronous command against a private source snapshot. Before calling, generate and retain one lowercase UUID v4 `requestId` per intent. A repeated UUID only observes; it never creates another execution. Finite execution must be enabled on the server; an unavailable response never falls back to writable published source. `target: "release"` uses the existing read-only release execution and needs no UUID.
+- `source_command_status {requestId, waitMs?}` — read execution state/output; optional bounded GET polling. An interrupted wait does not cancel execution or release capacity.
+- `source_command_reconcile {requestId}` — explicitly apply retained output if the original source is still current. Inspect `APPLIED`, `CONFLICT`, or `workspaceFailure`; never automatically rerun a command after conflict.
+- `source_command_cancel {requestId}` — request durable cancellation. `CANCEL_REQUESTED` is intent, not a stopped-container receipt; `PUBLICATION_COMMITTED` means cancellation is too late.
+- `source_command_resume {requestId, action: "status" | "submit"}` — reload the privately retained operation after restart. Use `status` first; `submit` explicitly retries the same saved bytes and UUID after an uncertain submission. Resume requires the same API, credential and workspace. Records contain command/env secrets and no credentials; preserve the CLI user profile's private filesystem permissions. Optional `inquir mcp --source-session <stable-conversation-id>` also binds JSON-RPC request IDs across reconnects; do not reuse that namespace for unrelated conversations.
 - `list_invocations {function}` — recent runs with errors and logs: the debugging entry point.
 - `deploy_status {deployId}`, `rollback {function, deployId}`, `list_functions`.
 
+The stdio server admits four working calls, including at most one deploy/rollback, plus two source-control or deploy-status calls. A busy response starts no work; retain the source UUID when retrying. Ping and cancellation notifications remain available while work waits. Each input frame is limited to 64 KiB. HTTP responses are limited to 2 MiB for source commands and 4 MiB otherwise, with a 60-second timeout per request including body reads. Output waits for the reader, retaining at most sixteen replies or 8 MiB; a broken or stalled pipe closes observation. Disconnecting never sends a job cancellation.
+
 ## Debug loop that works
 
 1. `deploy` → read `deploy.error` and status.
 2. If failing at runtime: `list_invocations` → read logs.
-3. Reproduce inside the container: `exec {command: "npm test"}` or `exec {command: "python -c '...'"}`.
+3. Submit a source command with a retained UUID, then read `source_command_status`. Review output before explicitly reconciling source changes. For a read-only release check use `exec {function: "my-function", command: "npm test", target: "release"}`.
 4. Fix code locally, `deploy` again. Deploys are versioned; `rollback` restores any previous success.
 
 ## Contracts that matter