@kohala/devkit 0.1.1 → 0.1.3

package/CHANGELOG.md

@@ -1,6 +1,37 @@
 # @kohala/devkit
 
-## 0.1.1 (unreleased)
+## 0.1.3 (unreleased)
+
+- **`kohala deploy --run` now explains the "agent not enabled" case instead of
+  a raw 409 API error.** Newly deployed agents start disabled on the platform,
+  so a manual run cannot start until the agent is enabled in the kohala.ai
+  dashboard. The CLI now says exactly that (deploy itself still succeeds; exit
+  code stays non-zero so scripts notice the run did not start).
+
+- **Documented the platform's runtimeMode display mapping.** The platform
+  stores `wrap` under its own enum name `script` (`llm` round-trips as `llm`);
+  verified live — this is display-side naming, not data loss.
+
+## 0.1.2
+
+- **`kohala validate` now rejects tool ids not in the bundled platform
+  catalog snapshot** (BUG-033). A typo'd tool id (e.g. `htpp.geet`) used to
+  pass validation and only fail at deploy/run time; it now fails validation
+  offline with the offending id(s) named. Pass `--allow-unknown-tools` to
+  bypass when the snapshot lags newly added platform tools — the deploy
+  endpoint still verifies against the live catalog authoritatively.
+
+- **Docs: LLM model-override env vars and `memory serve` agent scoping**
+  (BUG-047, BUG-035). The README now documents `KOHALA_LLM_MODEL`,
+  `ANTHROPIC_MODEL`, and `GEMINI_MODEL`, and clarifies that
+  `kohala memory serve` is always scoped to one agent (run it inside an
+  agent directory or pass `--agent <name>`).
+
+- **Repo hygiene: removed Replit workspace scaffolding from the repository**
+  (BUG-016). `.replit`, `replit.md`, `attached_assets/`, and `artifacts/`
+  are no longer tracked in the public repo.
+
+## 0.1.1
 
 Bug fixes.
 

package/README.md

@@ -93,3 +93,24 @@ See [CONTRIBUTING.md](CONTRIBUTING.md). Bug reports and PRs welcome.
 ## License
 
 [MIT](LICENSE)
+
+### LLM model overrides (local emulator)
+
+`kohala run` in LLM mode picks its model from environment variables:
+
+| Variable | Effect |
+| --- | --- |
+| `KOHALA_LLM_MODEL` | Provider-agnostic override — takes precedence over the two below. |
+| `ANTHROPIC_MODEL` | Anthropic model id (e.g. `claude-3-5-haiku-latest`). |
+| `GEMINI_MODEL` | Gemini model id (e.g. `gemini-2.0-flash`). |
+
+Unset, the emulator uses its built-in defaults.
+
+### Memory server scoping
+
+`kohala memory serve` is always scoped to ONE agent. Either run it from inside
+an agent directory (one containing `kohala.json`) or pass `--agent <name>`:
+
+```bash
+kohala memory serve --agent my-agent --backend file
+```

package/dist/cli/index.js

@@ -190,12 +190,240 @@ function loadManifest(agentDir) {
   return result.data;
 }
 
+// src/manifest/known-tools.ts
+var KNOWN_TOOL_IDS = /* @__PURE__ */ new Set([
+  "http.get",
+  "http.brightdata",
+  "run_python_script",
+  "web.search",
+  "image.generate",
+  "code.run",
+  "s3.put",
+  "koan.publish",
+  "report.publish",
+  "email.send",
+  "send_email",
+  "email.user_send",
+  "email.user_inbox",
+  "calendar.user_events",
+  "calendar.user_create_event",
+  "whatsapp.user_send",
+  "whatsapp.user_inbox",
+  "linkedin.user_post",
+  "linkedin.user_profile",
+  "linkedin.org_posts",
+  "linkedin.org_stats",
+  "validate_output",
+  "html.parse",
+  "json.parse",
+  "csv.parse",
+  "canvas.message",
+  "canvas.request_approval",
+  "odoo.search_read",
+  "odoo.read",
+  "odoo.read_group",
+  "odoo.create",
+  "odoo.write",
+  "odoo.unlink",
+  "odoo.call_method",
+  "odoo.message_post",
+  "odoo.attachments.upload",
+  "aftership.create_tracking",
+  "aftership.get_tracking",
+  "aftership.list_trackings",
+  "aftership.update_tracking",
+  "aftership.delete_tracking",
+  "aftership.detect_courier",
+  "fedex.track",
+  "ups.track",
+  "era5.point_history",
+  "noaa.forecast",
+  "noaa.alerts",
+  "airlabs.flight",
+  "airlabs.schedules",
+  "adsb.aircraft_near",
+  "adsb.by_callsign",
+  "aftership.list_couriers",
+  "ga.run_report",
+  "ga.realtime_report",
+  "ga.get_metadata",
+  "ga.list_properties",
+  "epicor.query",
+  "epicor.list",
+  "epicor.get",
+  "epicor.create",
+  "epicor.update",
+  "epicor.call_method",
+  "ideogram.generate",
+  "ideogram.edit",
+  "ideogram.remix",
+  "ideogram.reframe",
+  "ideogram.replace_background",
+  "ideogram.upscale",
+  "ideogram.describe",
+  "elevenlabs.text_to_speech",
+  "elevenlabs.speech_to_text",
+  "elevenlabs.speech_to_speech",
+  "elevenlabs.sound_effects",
+  "elevenlabs.voice_isolator",
+  "elevenlabs.music",
+  "elevenlabs.dubbing",
+  "elevenlabs.dubbing_result",
+  "elevenlabs.voice_design",
+  "elevenlabs.list_voices",
+  "video.generate_social",
+  "video.generate_cinematic",
+  "video.generate_avatar",
+  "video.status",
+  "extract.fields",
+  "extract.receipt",
+  "extract.financial",
+  "extract.legal",
+  "extract.product_spec",
+  "extract.menu",
+  "extract.evaluate",
+  "memory.search",
+  "memory.remember",
+  "http.post_json",
+  "s3.list",
+  "s3.get",
+  "s3.delete",
+  "feed.fetch",
+  "text.diff",
+  "data.diff",
+  "pinecone.upsert",
+  "pinecone.query",
+  "pinecone.fetch",
+  "pinecone.delete",
+  "llm.complete",
+  "pdf.extract",
+  "geocode",
+  "slack.message",
+  "discord.message",
+  "schedule.next_run",
+  "schedule.last_run",
+  "metrics.record",
+  "vector.embed",
+  "sms.send",
+  "push.send",
+  "webhook.post",
+  "notify.send",
+  "agent.handoff",
+  "bus.publish",
+  "bus.subscribe",
+  "bus.list_subscriptions",
+  "bus.unsubscribe",
+  "invoice.record",
+  "invoice.generate",
+  "invoice.modify",
+  "invoice.list",
+  "invoice.publish_koan",
+  "invoice.ap_run",
+  "invoice.ap_sweep",
+  "invoice.ar_sweep",
+  "invoice.ar_draft",
+  "invoice.send",
+  "invoice.review",
+  "invoice.calibrate",
+  "invoice.settings",
+  "invoice.status",
+  "sales_agreement.record",
+  "sales_agreement.review",
+  "sales_agreement.list",
+  "sales_agreement.publish_koan",
+  "customers.list",
+  "customers.add",
+  "customers.get_brand_profile",
+  "secrets.get",
+  "secrets.set",
+  "secrets.list",
+  "secrets.delete",
+  "aws.ec2_list",
+  "aws.ec2_start",
+  "aws.ec2_stop",
+  "aws.s3_list",
+  "aws.lambda_list",
+  "aws.lambda_invoke",
+  "aws.cloudwatch_alarms",
+  "aws.cost_summary",
+  "aws.rds_list",
+  "aws.bedrock_models",
+  "aws.grafana_list",
+  "googleads.list_accounts",
+  "googleads.search",
+  "googleads.campaign_performance",
+  "googleads.ad_group_performance",
+  "googleads.keyword_performance",
+  "googleads.budget_summary",
+  "calendar.generate",
+  "content.analyze",
+  "finance.ar.summary",
+  "finance.ar_aging",
+  "finance.ar_pastdue_report",
+  "finance.ar_overdue_notify",
+  "finance.ap.summary",
+  "finance.ap_aging",
+  "finance.reporting.summary",
+  "finance.trial_balance",
+  "sales.pipeline.summary",
+  "sales.pipeline_read",
+  "inventory.stock.summary",
+  "inventory.procurement_read",
+  "slack.list_channels",
+  "slack.post_message",
+  "notion.search",
+  "notion.append_page",
+  "hubspot.list_engagements",
+  "hubspot.log_call",
+  "hubspot.update_deal",
+  "linear.create_issue",
+  "asana.create_task",
+  "airtable.list_records",
+  "airtable.create_record",
+  "pandadoc.create_document",
+  "canva.create_design",
+  "canva.autofill_deck",
+  "zapier.trigger_zap",
+  "commitments.recall",
+  "workspacesync.fanout",
+  "dealdesk.draft",
+  "pricing.catalog_list",
+  "pricing.assumptions_list",
+  "pricing.benchmark_list",
+  "pricing.single_use_list",
+  "pricing.reusable_tco_list",
+  "pricing.monitoring_list",
+  "pricing.simulate_save"
+]);
+function unknownToolIds(tools) {
+  return tools.filter((t) => !KNOWN_TOOL_IDS.has(t));
+}
+
 // src/cli/validate.ts
 function registerValidateCommand(program2) {
-  program2.command("validate").argument("<agent>", "agent directory (containing kohala.json)").description("Validate an agent's kohala.json and print precise errors").action((agent) => {
+  program2.command("validate").argument("<agent>", "agent directory (containing kohala.json)").option(
+    "--allow-unknown-tools",
+    "do not fail on tool ids missing from the bundled catalog snapshot"
+  ).description("Validate an agent's kohala.json and print precise errors").action((agent, options) => {
     const agentDir = path3.resolve(process.cwd(), agent);
     try {
       const manifest = loadManifest(agentDir);
+      const unknown = unknownToolIds(manifest.toolAllowlist);
+      if (unknown.length > 0) {
+        const msg = `toolAllowlist contains tool id(s) not in the Kohala tool catalog: ` + unknown.join(", ");
+        if (options.allowUnknownTools) {
+          console.warn(pc2.yellow(`warning: ${msg}`));
+        } else {
+          console.error(pc2.red(msg));
+          console.error(
+            pc2.dim(
+              "  If these are new platform tools the bundled snapshot doesn't know yet, re-run with --allow-unknown-tools (the deploy endpoint will still verify against the live catalog)."
+            )
+          );
+          process.exitCode = 1;
+          return;
+        }
+      }
       console.log(pc2.green(`kohala.json for "${manifest.name}" is valid.`));
       console.log(
         pc2.dim(
@@ -2172,8 +2400,26 @@ function registerDeployCommand(program2) {
         )
       );
       if (options.run) {
-        const runUrl = await client.triggerManualRun(upserted.id);
-        console.log(pc8.green(`  \u2714 manual run triggered: ${runUrl}`));
+        try {
+          const runUrl = await client.triggerManualRun(upserted.id);
+          console.log(pc8.green(`  \u2714 manual run triggered: ${runUrl}`));
+        } catch (error) {
+          if (error instanceof DeployError && error.status === 409) {
+            console.error(
+              pc8.yellow(
+                `  \u2716 manual run not started: the agent is not enabled on the platform yet.`
+              )
+            );
+            console.error(
+              pc8.dim(
+                `    Deploy itself succeeded. Enable "${manifest.name}" in your kohala.ai dashboard, then re-run \`kohala deploy ${agent} --run\` (or trigger a run from the dashboard).`
+              )
+            );
+            process.exitCode = 1;
+            return;
+          }
+          throw error;
+        }
       }
       console.log("");
       console.log(pc8.green(`Deployed. Deploys are additive \u2014 nothing was deleted remotely.`));