@lazehq/cli 0.1.46 → 0.1.47

package/dist/laze.mjs

@@ -35718,7 +35718,7 @@ function flagText({
 }
 
 // src/rules/cli-version.rules.ts
-var STAMPED = "0.1.46";
+var STAMPED = "0.1.47";
 function cliVersionOf({ stamped = STAMPED } = {}) {
   return stamped.startsWith("__") ? "dev" : stamped;
 }
@@ -58515,6 +58515,12 @@ var messageSchemaDefinition = external_exports.object({
   notInChannel: external_exports.array(notInChannelSchemaDefinition).optional()
 });
 var messageSchema = messageSchemaDefinition;
+var departedPersonSchemaDefinition = external_exports.object({
+  id: idSchema4,
+  name: external_exports.string(),
+  /** When they left; null when chat learnt of it later, from the chat-departed-names task. */
+  departedAt: external_exports.iso.datetime().nullable()
+});
 var conversationSchemaDefinition = external_exports.object({
   id: idSchema4,
   workspaceId: workspaceIdSchema,
@@ -58543,7 +58549,12 @@ var conversationSchemaDefinition = external_exports.object({
   /** Set when the conversation mirrors one outside Laze. */
   mirror: conversationMirrorSchemaDefinition.nullable(),
   /** For a `chat`, the agent it is with; null for every other kind. */
-  agentId: idSchema4.nullish()
+  agentId: idSchema4.nullish(),
+  /**
+   * Direct messages only: the people who left the workspace while in it, no longer members.
+   * Spec: modules/chat/specs/departed-person-direct.feature. Absent means no one.
+   */
+  departed: external_exports.array(departedPersonSchemaDefinition).optional()
 });
 var conversationSchema = conversationSchemaDefinition;
 var conversationSummarySchemaDefinition = external_exports.object({
@@ -58981,7 +58992,9 @@ var signalActivityInputSchemaDefinition = external_exports.object({
   contextTokens: external_exports.number().int().nonnegative().nullable().default(null),
   contextWindow: external_exports.number().int().positive().nullable().default(null),
   /** With `queued`: the conversation the agent is busy in, named only to people who see it. */
-  elsewhere: idSchema4.nullable().default(null)
+  elsewhere: idSchema4.nullable().default(null),
+  /** With `thinking`: no turn has taken the message yet ("Waiting for <agent> to pick this up"). */
+  waiting: external_exports.boolean().default(false)
 });
 var setAgentLimitInputSchemaDefinition = external_exports.object({
   workspaceId: workspaceIdSchema,
@@ -60406,7 +60419,9 @@ var realtimePublicationSchemaDefinition = external_exports.discriminatedUnion("t
     text: external_exports.string(),
     contextTokens: external_exports.number().int().nonnegative().nullable(),
     contextWindow: external_exports.number().int().positive().nullable(),
-    elsewhere: external_exports.string().nullable().optional()
+    elsewhere: external_exports.string().nullable().optional(),
+    /** With `thinking`: no turn has taken the message yet; apps that miss it read thinking. */
+    waiting: external_exports.boolean().optional()
   }),
   external_exports.object({
     type: external_exports.literal("typing"),
@@ -61851,6 +61866,15 @@ var vaultAlertRaisedPayloadSchemaDefinition = external_exports.object({
 // ../../modules/vault/contract/src/vault-reference-chip.ts
 var VaultReferenceChipSlot = uiTokens("vault").component("referenceChip");
 var VaultMessageFootSlot = uiTokens("vault").component("messageFoot");
+var REFERENCE = /\{\{vault:([A-Za-z0-9_][A-Za-z0-9_./:-]*)\}\}/g;
+function vaultReferenceNames({ text: text2 }) {
+  return [...new Set([...text2.matchAll(REFERENCE)].map((match) => match[1] ?? ""))].filter(
+    (name3) => name3 !== ""
+  );
+}
+function vaultReferenceConnectionName({ name: name3 }) {
+  return name3.split(".")[0] ?? name3;
+}
 
 // ../../modules/vault/contract/src/vault-pending.ts
 var connectionName2 = external_exports.string().regex(/^[a-z0-9][a-z0-9-]{0,62}$/);
@@ -62149,6 +62173,73 @@ var vaultAwsSessionSchemaDefinition = external_exports.object({
   expiration: external_exports.iso.datetime({ offset: true })
 });
 
+// ../../modules/vault/contract/src/vault-placeholders.ts
+var PLACEHOLDER = /\{\{\s*vault:[^}]*\}\}/;
+function unusableFieldProblems({
+  fields
+}) {
+  return Object.entries(fields).flatMap(([field, value]) => {
+    if (PLACEHOLDER.test(value)) return [`${field} holds a vault placeholder, not a value`];
+    if (value.trim() === field) return [`${field} holds its own name, not a value`];
+    return [];
+  });
+}
+function referenceParts(name3) {
+  const dot = name3.indexOf(".");
+  if (dot === -1) return { connection: name3, field: null };
+  return { connection: name3.slice(0, dot), field: name3.slice(dot + 1) };
+}
+function commandReferenceNames({ command }) {
+  return [...new Set(command.flatMap((word3) => vaultReferenceNames({ text: word3 })))];
+}
+function referenceValue({
+  name: name3,
+  released
+}) {
+  const { connection, field } = referenceParts(name3);
+  const fields = released.get(connection);
+  if (!fields) {
+    return {
+      refusal: `{{vault:${name3}}} names ${connection}, which this run does not release`
+    };
+  }
+  const names = Object.keys(fields).toSorted();
+  if (field !== null) {
+    const value = fields[field];
+    if (value === void 0) {
+      return { refusal: `${connection} has no field ${field}; its fields are ${names.join(", ")}` };
+    }
+    return { value };
+  }
+  const only = names.length === 1 ? fields[names[0] ?? ""] : void 0;
+  if (only === void 0) {
+    return {
+      refusal: `{{vault:${connection}}} holds ${names.length} values (${names.join(", ")}); write {{vault:${connection}.FIELD}} or read $FIELD from the environment`
+    };
+  }
+  return { value: only };
+}
+function fillCommandReferences({
+  command,
+  released
+}) {
+  const values = /* @__PURE__ */ new Map();
+  for (const name3 of commandReferenceNames({ command })) {
+    const filled = referenceValue({ name: name3, released });
+    if ("refusal" in filled) return filled;
+    values.set(name3, filled.value);
+  }
+  if (values.size === 0) return { command: [...command] };
+  return {
+    command: command.map(
+      (word3) => word3.replace(
+        /\{\{vault:([A-Za-z0-9_][A-Za-z0-9_./:-]*)\}\}/g,
+        (whole, name3) => values.get(name3) ?? whole
+      )
+    )
+  };
+}
+
 // ../../modules/agent/contract/src/agent-access.ts
 var idSchema5 = external_exports.string().min(1).max(80);
 var agentGranteeSchemaDefinition = external_exports.discriminatedUnion("kind", [
@@ -63570,7 +63661,9 @@ var agentFaceSchemaDefinition = external_exports.object({
   /** A short-lived link to its picture; null for a sloth. */
   imageUrl: external_exports.string().nullable(),
   /** Deleted for good: its old messages show a grey sloth. */
-  gone: external_exports.boolean().default(false)
+  gone: external_exports.boolean().default(false),
+  /** How it runs and whose it is, "Laze models · Ada": tells agents sharing a name apart. */
+  detail: external_exports.string().default("")
 });
 var agentFaceSchema = agentFaceSchemaDefinition;
 var agentPresenceSchemaDefinition = external_exports.object({
@@ -76079,7 +76172,7 @@ var appUnpublish = async ({ context, args }) => {
     context,
     args,
     value: app2,
-    text: `${app2.name} is not published. Its records stay; laze app publish brings it back.
+    text: `${app2.name} is offline. Its data and versions stay; laze app publish brings it back.
 `
   });
 };
@@ -80905,9 +80998,47 @@ async function vaultRun({
   if (!connection || args.rest.length === 0) throw new CliUsageError(USAGE8);
   if (!reason) throw new CliUsageError(`Say why with --reason "<one plain sentence>"
 ${USAGE8}`);
+  const foreign = commandReferenceNames({ command: args.rest }).find(
+    (name3) => vaultReferenceConnectionName({ name: name3 }) !== connection
+  );
+  if (foreign !== void 0) {
+    const named = vaultReferenceConnectionName({ name: foreign });
+    context.err(
+      `laze vault: the command names {{vault:${foreign}}}, but this run releases only ${connection}, not ${named}. Nothing was asked and the command did not run.
+`
+    );
+    return 1;
+  }
   const released = await vaultRelease({ context, args, connection, reason, command: args.rest });
   if ("exitCode" in released) return released.exitCode;
-  return context.runCommand({ command: args.rest, env: released.env });
+  const prepared = preparedCommand({
+    command: args.rest,
+    released: /* @__PURE__ */ new Map([[connection, released.env]])
+  });
+  if ("refusal" in prepared) {
+    context.err(`${prepared.refusal}
+`);
+    return 1;
+  }
+  return context.runCommand({ command: prepared.command, env: released.env });
+}
+function preparedCommand({
+  command,
+  released
+}) {
+  for (const [name3, fields] of released) {
+    const [problem] = unusableFieldProblems({ fields });
+    if (problem !== void 0) {
+      return {
+        refusal: `laze vault: ${name3}: ${problem}, so the command did not run. Ask its owner to save the real value on the vault page.`
+      };
+    }
+  }
+  const filled = fillCommandReferences({ command, released });
+  if ("refusal" in filled) {
+    return { refusal: `laze vault: ${filled.refusal}. The command did not run.` };
+  }
+  return filled;
 }
 
 // src/services/vault-share-commands.service.ts
@@ -86140,7 +86271,7 @@ import { dirname as dirname22, join as join24, resolve as resolve15 } from "node
 // src/rules/vault-manifest.rules.ts
 var VARIABLE = /^[A-Za-z_][A-Za-z0-9_]*$/;
 var CONNECTION = /^[a-z0-9][a-z0-9-]{0,62}$/;
-var REFERENCE = /^\{\{vault:([A-Za-z0-9][A-Za-z0-9_/-]{0,127})\}\}$/;
+var REFERENCE2 = /^\{\{vault:([A-Za-z0-9][A-Za-z0-9_/-]{0,127})\}\}$/;
 function refOf(name3) {
   return name3.split("/").at(-1) ?? name3;
 }
@@ -86165,7 +86296,7 @@ function lineOf4({ line, where }) {
   if (!VARIABLE.test(variable)) {
     throw new CliUsageError(`${where}: not a variable name: ${variable}`);
   }
-  const reference = REFERENCE.exec(value);
+  const reference = REFERENCE2.exec(value);
   if (reference?.[1]) return { kind: "reference", variable, ref: refOf(reference[1]) };
   return { kind: "plain", variable, value: unquoted(value) };
 }
@@ -86523,6 +86654,23 @@ function wrappedCommandOf(args) {
   if (!encoded) return ["(shell)"];
   return [Buffer.from(encoded, "base64").toString("utf8").slice(0, 2e3)];
 }
+async function releasedKeys({
+  context,
+  args,
+  refs,
+  reason,
+  command
+}) {
+  const byConnection = /* @__PURE__ */ new Map();
+  if (refs.length === 0) return { released: /* @__PURE__ */ new Map(), byConnection };
+  const outcome = await releaseBatch({ context, args, refs, reason, command: [...command] });
+  if ("exitCode" in outcome) return outcome;
+  for (const entry of outcome.entries) {
+    const fields = outcome.released.get(entry.ref)?.fields;
+    if (entry.connection && fields) byConnection.set(entry.connection.name, fields);
+  }
+  return { released: outcome.released, byConnection };
+}
 async function vaultEnv2({
   context,
   args: given
@@ -86549,12 +86697,20 @@ ${ENV_USAGE}`);
   const badReason = refusedReason({ context, reason });
   if (badReason !== null) return badReason;
   const refs = refsOf(lines2);
-  let released = /* @__PURE__ */ new Map();
-  if (refs.length > 0) {
-    const command = shell ? wrappedCommandOf(args) : args.rest;
-    const outcome = await releaseBatch({ context, args, refs, reason, command });
-    if ("exitCode" in outcome) return outcome.exitCode;
-    released = outcome.released;
+  const outcome = await releasedKeys({
+    context,
+    args,
+    refs,
+    reason,
+    command: shell ? wrappedCommandOf(args) : args.rest
+  });
+  if ("exitCode" in outcome) return outcome.exitCode;
+  const { released, byConnection } = outcome;
+  const prepared = preparedCommand({ command: shell ? [] : args.rest, released: byConnection });
+  if ("refusal" in prepared) {
+    context.err(`${prepared.refusal}
+`);
+    return 1;
   }
   const env = environmentOf({ lines: lines2, released });
   if (shell) {
@@ -86563,7 +86719,7 @@ ${ENV_USAGE}`);
     return 0;
   }
   const redact = [...released.values()].flatMap(({ fields }) => Object.values(fields));
-  return context.runCommand({ command: args.rest, env, redact });
+  return context.runCommand({ command: prepared.command, env, redact });
 }
 async function vaultAws({
   context,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lazehq/cli",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "The Laze command line: sign in, read and post in chat, and connect your own Claude Code or Codex session as an agent.",
   "license": "UNLICENSED",
   "type": "module",