@isomorph.ai/cli 0.3.1-rc.2 → 0.3.2-rc.1

package/dist/packages/harbour-cli/src/agent-setup.js

@@ -220,7 +220,7 @@ The kit's rules are the files beside this one: \`core.md\` before the first edit
 - "does it work?", and before you report anything as working → open the dev link in your own browser, press the control you built or changed, and read what the app shows. A green \`isomorph check\` is not that proof: fixtures answer AI and company systems, so their refusals appear only when the control is really pressed. Test rendering, navigation, fixtures and approved reads automatically; a Send in development is real: reuse explicit authorization for that bounded test, or ask once if none exists (IT approval alone is not permission to send). If you have no browser, say that the button itself is untested.
 - "I need Slack / Gmail / the warehouse / company data" → read \`integrations.md\` beside this skill first; then, in the same turn, read the catalog, declare only what the app calls, submit the access request yourself, and say READY or PENDING in one line.
 - "summarise", "draft", "explain", "AI" → read \`ai.md\` beside this skill first; then one call behind a control they press.
-- "ship it", "put it online", "let my team try it" → \`isomorph check --app-root . --json\` first, unasked; fix everything it finds: the same gates rerun in the cloud, minutes per attempt. Before sharing or deploying the private preview, show the exact proposed app name, description and audience that will be passed to Isomorph (say "only you" when the audience is empty); ask for one confirmation or correction covering all three; do not run \`productionise\` until they confirm. \`isomorph productionise --app-root . --name "<app name>" --description "<description>" --emails "<comma-separated audience>" --confirm-save --json\` (omit \`--emails\` for "only you"; \`--confirm-save\` is the approval they just gave). It records the confirmed setup before uploading or deploying the app, files the access request for each declared connection itself and refuses with \`INTEGRATIONS_NOT_READY\` naming what IT still has to approve, or \`AI_NOT_READY\` and the one IT step: relay that line only; the app works without them until then. \`result.deployment.protectedUrl\` is the private preview, for them and the confirmed audience after company sign-in. If your tool cuts it off, \`${continueCommand("<ref>")}\` continues the same deployment; never start another one to find out what happened; \`TRANSFORMING\` means building and checking.
+- "ship it", "put it online", "let my team try it" → \`isomorph check --app-root . --json\` first, unasked; fix everything it finds: the same gates rerun in the cloud, minutes per attempt. Before sharing or deploying the private preview, show the exact proposed app name, description and audience that will be passed to Isomorph (say "only you" when the audience is empty); ask for one confirmation or correction covering all three; do not run \`productionise\` until they confirm. \`isomorph productionise --app-root . --name "<app name>" --description "<description>" --emails "<comma-separated audience>" --confirm-save --json\` (omit \`--emails\` for "only you"; \`--confirm-save\` is the approval they just gave). It records the confirmed setup before uploading or deploying the app, files the access request for each declared connection itself and refuses with \`INTEGRATIONS_NOT_READY\` naming what IT still has to approve, or \`AI_NOT_READY\` and the one IT step: relay that line only; the app works without them until then. Pass \`--session-notes\`: what in Isomorph cost you time, what you believed, what was true; \`""\` if nothing did. \`result.deployment.protectedUrl\` is the private preview, for them and the confirmed audience after company sign-in. If your tool cuts it off, \`${continueCommand("<ref>")}\` continues the same deployment; never start another one to find out what happened; \`TRANSFORMING\` means building and checking.
 - "make it live for everyone", "go to production" → only after they have tried the preview, which \`--confirm-tested\` states. Before \`isomorph promote --operation <ref> --confirm-tested --json\`, show the exact app name, description and production audience again; ask for one confirmation or correction covering all three; never promote a profile or audience the person has not just seen and confirmed. Report the production link, or that operator approval is pending.
 - "stop it" → \`isomorph stop --app-root .\` (data kept); \`isomorph dev --reset --app-root .\` deletes local data, only when they ask to start over.
 - "every day at 2pm", "run this on a schedule", "send this automatically" → read \`jobs.md\` beside this skill first; then write the job, run it once with \`isomorph jobs run\`, and say the sentence it gives you.

package/dist/packages/harbour-cli/src/cli.js

@@ -26,6 +26,7 @@ const secretName = optionValue("--name");
 const profileName = optionValue("--name");
 const profileDescription = optionValue("--description");
 const audienceEmails = optionValue("--emails");
+const sessionNotes = optionValue("--session-notes");
 const personal = args.includes("--personal");
 const valueStdin = args.includes("--value-stdin");
 /** The reply the save and promote prompts would otherwise wait to have typed, for a caller with no terminal. */
@@ -65,7 +66,7 @@ const usage = [
     "Usage:",
     "  isomorph connect <work-email | company-start-url>",
     "  isomorph login | logout",
-    "  isomorph productionise --app-root <path> [--include <relative-path>]... [--name <text> --description <text> [--emails a@co,b@co]] [--confirm-save] [--no-wait] [--max-wait <seconds>] [--json]",
+    "  isomorph productionise --app-root <path> [--include <relative-path>]... [--name <text> --description <text> [--emails a@co,b@co]] [--session-notes <text>] [--confirm-save] [--no-wait] [--max-wait <seconds>] [--json]",
     "  isomorph status --operation <reference> [--wait] [--max-wait <seconds>] [--json]",
     "  isomorph retry --operation <reference> [--no-wait] [--max-wait <seconds>] [--json]",
     "  isomorph promote --operation <reference> [--app-root <path>] [--confirm-tested] [--no-wait] [--max-wait <seconds>] [--json]   (--app-root: also confirm the company's AI setup for production when the app calls governed AI)",
@@ -264,7 +265,7 @@ else {
                         ? { displayName: profileName, description: profileDescription, audienceEmails: audienceEmails ? audienceEmails.split(",").map(value => value.trim()).filter(Boolean) : [] }
                         : undefined;
                     await assertKitCurrent(appRoot(root));
-                    const result = await productionise(root, client, progress, tenant, includePaths, { waitForDeployment: !noWait, waitOptions, integrations: { governance: new GovernanceClient(config.apiUrl, token, tenant), bundle: EMBEDDED_KIT_BUNDLE }, ...(confirmSave ? { readApproval: async () => SAVE_APPROVAL } : {}), ...(confirmedAppSetup ? { confirmedAppSetup } : {}) });
+                    const result = await productionise(root, client, progress, tenant, includePaths, { waitForDeployment: !noWait, waitOptions, integrations: { governance: new GovernanceClient(config.apiUrl, token, tenant), bundle: EMBEDDED_KIT_BUNDLE }, ...(confirmSave ? { readApproval: async () => SAVE_APPROVAL } : {}), ...(confirmedAppSetup ? { confirmedAppSetup } : {}), ...(sessionNotes ? { sessionNotes } : {}) });
                     envelope = operationEnvelope(result.result, result.operationRef, CLI_VERSION);
                 }
                 else {

package/dist/packages/harbour-cli/src/integrations.js

@@ -33,6 +33,13 @@ export class GovernanceClient {
     aiReadiness(appId, environment) {
         return this.call("POST", `/v1/development/apps/${encodeURIComponent(appId)}/ai/readiness`, { environment });
     }
+    /**
+     * What the building agent says cost it time in Isomorph itself. Never blocks a
+     * deployment: the caller discards every failure, and an empty note files nothing.
+     */
+    submitFeedback(appId, input) {
+        return this.call("POST", `/v1/development/apps/${encodeURIComponent(appId)}/feedback`, input);
+    }
     async call(method, path, body) {
         const url = `${this.apiUrl.replace(/\/$/, "")}${path}`;
         const response = await this.fetchImpl(url, { method, headers: { authorization: `Bearer ${this.token}`, "x-harbour-tenant": this.tenantId, accept: "application/json", ...(body ? { "content-type": "application/json" } : {}) }, ...(body ? { body: JSON.stringify(body) } : {}), redirect: "error" })

package/dist/packages/harbour-cli/src/productionise.js

@@ -16,6 +16,33 @@ import { FLOW_CHECK, preflightKitGate, readReport } from "./check.js";
  * `isomorph.stage-approval/1.0` attestation governance receives is unchanged, byte for byte. */
 export const SAVE_APPROVAL = "Approved.";
 export async function productionise(rootArg, client, output, tenantId, includePaths = [], options = {}) {
+    const deployment = await deploy(rootArg, client, output, tenantId, includePaths, options);
+    await reportSession(rootArg, deployment.operationRef, options);
+    return deployment;
+}
+/**
+ * The building agent's own account of what cost it time, filed once the
+ * deployment has resolved so the note is written with the outcome in hand.
+ *
+ * Every failure is swallowed by design. This is a side-channel: a governance
+ * outage, a missing Atlas token, or a runtime too old to have the feedback route
+ * must never fail, delay or alter a deployment the builder already asked for.
+ */
+async function reportSession(rootArg, operationRef, options) {
+    const notes = options.sessionNotes?.trim();
+    if (!notes || !options.integrations)
+        return;
+    try {
+        const appId = options.appId ?? (await readKitLock(resolve(rootArg)))?.appId;
+        if (!appId)
+            return;
+        await options.integrations.governance.submitFeedback(appId, {
+            operationRef, cliVersion: CLI_VERSION, kitBundleVersion: options.integrations.bundle.kitVersion, notes
+        });
+    }
+    catch { /* never surfaced: the deployment is what the builder asked for. */ }
+}
+async function deploy(rootArg, client, output, tenantId, includePaths = [], options = {}) {
     const root = resolve(rootArg);
     output(`Isomorph is checking ${basename(root)}.`);
     if (root === parse(root).root || root === resolve(homedir()))
@@ -127,9 +154,7 @@ export async function productionise(rootArg, client, output, tenantId, includePa
                 throw new CliError("APP_IDENTITY_MISSING", "Isomorph did not return the app identity for this operation.", operationRef);
             if (kitAppId && appId !== kitAppId)
                 throw new CliError("APP_IDENTITY_MISMATCH", "Isomorph returned a different app identity than the one linked in .isomorph/kit.lock.json.", operationRef);
-            // The canonical identity lands in kit.lock so a later `integrations request` reuses it instead of linking a second app.
-            await recordKitAppId(root, appId, tenantId);
-            pending = { ...pending, appId, sourceDigest: (await sourceDigest(root)).digest };
+            pending = { ...pending, appId };
             await writePending(root, pending);
             if (options.confirmedAppSetup && !pending.appSetupConfirmed) {
                 await confirmProfile(client, operationRef, options.confirmedAppSetup, output);
@@ -145,6 +170,17 @@ export async function productionise(rootArg, client, output, tenantId, includePa
             if (prepared.nextAction?.tool && !matchesTool(prepared.nextAction.tool, "isomorph_complete_source_upload"))
                 throw new CliError("UNSUPPORTED_NEXT_STEP", "Isomorph returned an unsupported next step.", operationRef);
             const archive = await archiveForManifest(root, prepared.acceptedManifest);
+            // The canonical identity lands in kit.lock so a later `integrations request` reuses it instead
+            // of linking a second app — written here, at the first moment it is safe to write it, and never
+            // earlier. `.isomorph/kit.lock.json` is one of the app's own deployable files; the package is
+            // built from bytes read at the top of this run, and `archiveForManifest` re-reads every file and
+            // compares its sha256 before uploading. Recording the id before that read made the CLI refuse
+            // its own edit — "The app changed while it was being packaged (.isomorph/kit.lock.json)" —
+            // deterministically on the first deployment of every new app, because `recordKitAppId` is a
+            // no-op once the id matches, so only a lock that has no id yet changes. Re-running succeeded and
+            // hid the cause (2026-09-15). Both reads are done by this line and the archive is in memory, so
+            // the app is still linked before anything can fail on the network.
+            await recordKitAppId(root, appId, tenantId);
             const parts = await putMultipart(prepared.sourceUpload, archive.body, (sent, total) => output(`Isomorph is uploading the app package (${Math.floor(sent * 100 / total)}%).`));
             pending = { ...pending, uploadCompletion: { intentId: prepared.sourceUpload.intentId, parts, clientSha256: archive.digest } };
             await writePending(root, pending);
@@ -157,6 +193,12 @@ export async function productionise(rootArg, client, output, tenantId, includePa
         }
         if (!appId)
             throw new CliError("APP_IDENTITY_MISSING", "The saved operation has no app identity.", operationRef);
+        // The lock now carries the app id, so the tree differs from the one this operation was opened
+        // against; re-pin the digest a resumed run compares with.
+        if (pending.sourceDigest !== (await sourceDigest(root)).digest) {
+            pending = { ...pending, sourceDigest: (await sourceDigest(root)).digest };
+            await writePending(root, pending);
+        }
         if (!prior?.sourceSave)
             await waitForIntake(client, operationRef);
         let execution = prior?.sourceSave?.status && prior.sourceSave.status !== "AWAITING_APPROVAL" ? { status: prior.sourceSave.status } : await execute(client, operationRef, appId, graph);

package/dist/packages/harbour-cli/src/upload.js

@@ -27,7 +27,7 @@ export async function archiveForManifest(root, manifest) {
             throw new Error("The app changed while it was being packaged.");
         const content = new Uint8Array(await readFile(absolute));
         if (content.byteLength !== entry.bytes || await sha256Bytes(content) !== entry.sha256)
-            throw new Error(`The app changed while it was being packaged (${entry.path}).`);
+            throw new Error(`The app changed while it was being packaged (${entry.path}). Run the same productionise command again: it continues the saved operation and packages the app as it is now.`);
         files.push({ path: relative(rootAbsolute, absolute).split(sep).join("/"), content });
     }
     const body = new Uint8Array(deterministicZip(files.sort((left, right) => left.path.localeCompare(right.path))));

package/dist/packages/harbour-cli/src/version.js

@@ -1 +1 @@
-export const CLI_VERSION = "0.3.1-rc.2";
+export const CLI_VERSION = "0.3.2-rc.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@isomorph.ai/cli",
-  "version": "0.3.1-rc.2",
+  "version": "0.3.2-rc.1",
   "description": "Isomorph development kit CLI",
   "type": "module",
   "bin": {