@lotics/cli 0.175.0 → 0.177.0

package/dist/src/cli.js

@@ -44183,6 +44183,7 @@ function transportErrorMessage(status, parsed) {
 }
 
 // src/client.ts
+import crypto from "node:crypto";
 import fs2 from "node:fs";
 import path2 from "node:path";
 
@@ -44321,6 +44322,9 @@ async function fetchOfficialStarters() {
   return await response.json();
 }
 var SHELF_FETCH_TIMEOUT_MS = 1e4;
+function newRequestId() {
+  return crypto.randomUUID().replace(/-/g, "").slice(0, 12);
+}
 var LoticsClient = class {
   apiKey;
   workspaceId;
@@ -44337,7 +44341,18 @@ var LoticsClient = class {
     this.viewAsMemberId = options.viewAsMemberId;
     this.baseUrl = API_BASE_URL;
   }
-  async throwResponseError(response) {
+  /**
+   * The id is appended to the MESSAGE rather than carried on a field, because
+   * the only thing that reliably reaches a person is what got printed: the CLI's
+   * top-level handler writes `error.message` to stderr, and the telemetry tail
+   * captures the same bytes. A field would have to be read by every one of ~60
+   * exit sites to be worth anything.
+   *
+   * `requestId` is optional because one caller legitimately has none — a
+   * presigned CDN download is not a request of ours and appears in none of our
+   * logs. Every call against the API passes the id its own headers carry.
+   */
+  async throwResponseError(response, requestId) {
     const text = await response.text();
     let message2;
     try {
@@ -44346,15 +44361,23 @@ var LoticsClient = class {
     } catch {
       message2 = text;
     }
-    throw new Error(`${response.status}: ${message2}`);
+    const trace = requestId === void 0 ? "" : `
+
+  Request id: ${requestId} \u2014 quote this to Lotics support.`;
+    throw new Error(`${response.status}: ${message2}${trace}`);
   }
   /**
-   * The backend's `log()` middleware registers `user-agent` and
-   * `x-posthog-session-id` onto the per-request Logger, so they ride EVERY log
-   * line that request emits — the validation 400, the tool error, the timing.
-   * Sending them is therefore the whole of the correlation work: it turns an
-   * anonymous API-key request into "`app workflow set`, from cli 0.117.0, the
-   * fourth command of this session".
+   * The backend's `log()` middleware registers `user-agent`,
+   * `x-posthog-session-id` and `x-request-id` onto the per-request Logger, so
+   * they ride EVERY log line that request emits — the validation 400, the tool
+   * error, the timing. Sending them is therefore the whole of the correlation
+   * work: it turns an anonymous API-key request into "`app workflow set`, from
+   * cli 0.117.0, the fourth command of this session".
+   *
+   * The request id is minted HERE, with the other headers, so it cannot reach
+   * some paths and not others: several commands build their own transport around
+   * these headers, and an id threaded only through `request` would leave
+   * `app deploy`, `uploadFiles` and every workflow call unfindable.
    */
   buildHeaders() {
     const invocation2 = getInvocation();
@@ -44376,6 +44399,7 @@ var LoticsClient = class {
         headers["x-posthog-session-id"] = invocation2.session;
       }
     }
+    headers["x-request-id"] = newRequestId();
     return headers;
   }
   async request(method, path13, body) {
@@ -44387,7 +44411,7 @@ var LoticsClient = class {
       init.body = JSON.stringify(body);
     }
     const response = await fetch(url2, init);
-    if (!response.ok) await this.throwResponseError(response);
+    if (!response.ok) await this.throwResponseError(response, headers["x-request-id"]);
     return response.json();
   }
   async whoami() {
@@ -44438,13 +44462,14 @@ var LoticsClient = class {
       const timeout = setTimeout(() => controller.abort(), options.timeoutMs);
       try {
         const url2 = `${this.baseUrl}/v1/tools/execute`;
+        const headers = { ...this.buildHeaders(), "Content-Type": "application/json" };
         const response = await fetch(url2, {
           method: "POST",
-          headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
+          headers,
           body: JSON.stringify(body),
           signal: controller.signal
         });
-        if (!response.ok) await this.throwResponseError(response);
+        if (!response.ok) await this.throwResponseError(response, headers["x-request-id"]);
         return response.json();
       } catch (error52) {
         if (error52 instanceof Error && error52.name === "AbortError") {
@@ -44862,16 +44887,12 @@ var LoticsClient = class {
    * iframe. Mirrors POST /v1/apps/{app_id}/agents/{alias}/runs.
    */
   async appAgentRunStream(app_id, alias, body, signal) {
+    const headers = { ...this.buildHeaders(), "Content-Type": "application/json" };
     const res = await fetch(
       `${this.baseUrl}/v1/apps/${encodeURIComponent(app_id)}/agents/${encodeURIComponent(alias)}/runs`,
-      {
-        method: "POST",
-        headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-        signal
-      }
+      { method: "POST", headers, body: JSON.stringify(body), signal }
     );
-    if (!res.ok) await this.throwResponseError(res);
+    if (!res.ok) await this.throwResponseError(res, headers["x-request-id"]);
     return res;
   }
   /**
@@ -44881,16 +44902,12 @@ var LoticsClient = class {
    * POST /v1/apps/{app_id}/agent-runs/{run_id}/continue.
    */
   async appAgentRunContinueStream(app_id, run_id, body, signal) {
+    const headers = { ...this.buildHeaders(), "Content-Type": "application/json" };
     const res = await fetch(
       `${this.baseUrl}/v1/apps/${encodeURIComponent(app_id)}/agent-runs/${encodeURIComponent(run_id)}/continue`,
-      {
-        method: "POST",
-        headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
-        body: JSON.stringify(body),
-        signal
-      }
+      { method: "POST", headers, body: JSON.stringify(body), signal }
     );
-    if (!res.ok) await this.throwResponseError(res);
+    if (!res.ok) await this.throwResponseError(res, headers["x-request-id"]);
     return res;
   }
   /**
@@ -45009,12 +45026,8 @@ var LoticsClient = class {
     formData.append("agent_aliases", JSON.stringify(args.agent_aliases ?? []));
     formData.append("query_aliases", JSON.stringify(args.query_aliases ?? []));
     const url2 = `${this.baseUrl}/v1/apps/${encodeURIComponent(args.app_id)}/versions`;
-    const response = await fetch(url2, {
-      method: "POST",
-      headers: this.buildHeaders(),
-      // no Content-Type — fetch sets multipart boundary
-      body: formData
-    });
+    const headers = this.buildHeaders();
+    const response = await fetch(url2, { method: "POST", headers, body: formData });
     if (response.status === 409) {
       const conflict = await response.json();
       const err2 = new Error(conflict.message ?? "Deploy conflict \u2014 pull required");
@@ -45023,7 +45036,7 @@ var LoticsClient = class {
       throw err2;
     }
     if (!response.ok) {
-      await this.throwResponseError(response);
+      await this.throwResponseError(response, headers["x-request-id"]);
     }
     return response.json();
   }
@@ -45039,11 +45052,14 @@ var LoticsClient = class {
     return absolutePath;
   }
   async downloadFileById(fileId, outputDir, options) {
+    const signedHeaders = this.buildHeaders();
     const signedUrlRes = await fetch(
       `${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/signed_url`,
-      { headers: this.buildHeaders() }
+      { headers: signedHeaders }
     );
-    if (!signedUrlRes.ok) await this.throwResponseError(signedUrlRes);
+    if (!signedUrlRes.ok) {
+      await this.throwResponseError(signedUrlRes, signedHeaders["x-request-id"]);
+    }
     const { url: url2 } = await signedUrlRes.json();
     const response = await fetch(url2);
     if (!response.ok) await this.throwResponseError(response);
@@ -45103,12 +45119,9 @@ var LoticsClient = class {
       formData.append("file", new Blob([item.bytes], { type: mimeType }), item.filename);
     }
     const url2 = `${this.baseUrl}/v1/files`;
-    const response = await fetch(url2, {
-      method: "POST",
-      headers: this.buildHeaders(),
-      body: formData
-    });
-    if (!response.ok) await this.throwResponseError(response);
+    const headers = this.buildHeaders();
+    const response = await fetch(url2, { method: "POST", headers, body: formData });
+    if (!response.ok) await this.throwResponseError(response, headers["x-request-id"]);
     return response.json();
   }
 };
@@ -45200,7 +45213,7 @@ async function resolveUploadSource(sourceFlag, flags) {
 }
 
 // src/telemetry.ts
-import crypto from "node:crypto";
+import crypto2 from "node:crypto";
 import fs3 from "node:fs";
 import os2 from "node:os";
 import path3 from "node:path";
@@ -45276,7 +45289,7 @@ function buildEvent(exitCode, durationMs, now) {
   if (invocation2 === null || invocation2.session === null) return null;
   const message2 = exitCode === 0 ? "" : stripNarration(stderrTail);
   return {
-    event_id: crypto.randomUUID(),
+    event_id: crypto2.randomUUID(),
     ts: now.toISOString(),
     cli_session_id: invocation2.session,
     cli_command: invocation2.command,
@@ -45343,8 +45356,8 @@ function flushSpool(post, minEvents = 5) {
   const batch = events.slice(0, MAX_FLUSH_EVENTS);
   const sent = `${lines.slice(0, batch.length).join("\n")}
 `;
-  void post(batch).then(() => {
-    clearSpool(sent);
+  void post(batch).then((outcome) => {
+    if (outcome !== "retry") clearSpool(sent);
   }).catch(() => {
   });
 }
@@ -45358,7 +45371,9 @@ async function postEvents(baseUrl, apiKey, events, timeoutMs = 5e3) {
       body: JSON.stringify({ events }),
       signal: controller.signal
     });
-    if (!res.ok) throw new Error(`telemetry flush: ${res.status}`);
+    if (res.ok) return "delivered";
+    const permanent = res.status >= 400 && res.status < 500 && res.status !== 408 && res.status !== 429;
+    return permanent ? "rejected" : "retry";
   } finally {
     clearTimeout(timer2);
   }
@@ -45696,7 +45711,7 @@ function resultSideEffects(result) {
 }
 
 // src/version.ts
-var VERSION = "0.175.0";
+var VERSION = "0.177.0";
 
 // src/timezone.ts
 function machineTimezone() {
@@ -48192,6 +48207,22 @@ ${inputLines.join("\n")}
 }
 `;
 }
+var LINK_TSCONFIG_PATH = ".lotics/tsconfig.link.json";
+function generateLinkTsconfig(paths) {
+  const header = Object.keys(paths).length > 0 ? `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
+// LOTICS_UI_SRC is set, so @lotics/ui resolves to your working copy for tsc,
+// vitest, eslint and your editor \u2014 the same copy Vite is bundling. The peer
+// pins keep ONE react / react-native in the program; without them the kit's
+// source resolves its own copies and every shared type stops matching.
+// Unset LOTICS_UI_SRC and re-run to go back to the published kit.
+` : `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
+// @lotics/ui resolves from node_modules as normal, so this is inert. It still
+// has to exist: tsconfig.json extends it, and a missing extends target fails
+// the build outright.
+`;
+  return `${header}${JSON.stringify({ compilerOptions: { paths } }, null, 2)}
+`;
+}
 var CAPABILITY_GATED_CALLS = {
   comments: ["useComments", "createComment", "updateComment", "deleteComment"]
 };
@@ -71905,18 +71936,17 @@ function ensureAppTsconfig(projectDir) {
   }
   const existingExtends = parsed.extends;
   if (existingExtends === void 0) {
-    parsed.extends = `./${LINK_TSCONFIG}`;
-    changes.push(`added "extends": "./${LINK_TSCONFIG}" (so tsc resolves the same @lotics/ui as Vite)`);
-  } else if (existingExtends !== `./${LINK_TSCONFIG}`) {
+    parsed.extends = `./${LINK_TSCONFIG_PATH}`;
+    changes.push(`added "extends": "./${LINK_TSCONFIG_PATH}" (so tsc resolves the same @lotics/ui as Vite)`);
+  } else if (existingExtends !== `./${LINK_TSCONFIG_PATH}`) {
     console.error(
-      `\u26A0 tsconfig.json already extends ${JSON.stringify(existingExtends)}, so the dev-link config was not added \u2014 \`tsc\` will keep resolving @lotics/ui from node_modules even under LOTICS_UI_SRC. Add "./${LINK_TSCONFIG}" to "extends" (it accepts an array) to fix it.`
+      `\u26A0 tsconfig.json already extends ${JSON.stringify(existingExtends)}, so the dev-link config was not added \u2014 \`tsc\` will keep resolving @lotics/ui from node_modules even under LOTICS_UI_SRC. Add "./${LINK_TSCONFIG_PATH}" to "extends" (it accepts an array) to fix it.`
     );
   }
   if (changes.length === 0) return;
   fs8.writeFileSync(tsconfigPath, JSON.stringify(parsed, null, 2) + "\n");
   console.error(`Patched tsconfig.json: ${changes.join("; ")}.`);
 }
-var LINK_TSCONFIG = ".lotics/tsconfig.link.json";
 function writeDevLinkTsconfig(projectDir) {
   const uiSrc = process.env.LOTICS_UI_SRC;
   const paths = {};
@@ -71931,19 +71961,8 @@ function writeDevLinkTsconfig(projectDir) {
       paths[`${peer}/*`] = [`${target}/*`];
     }
   }
-  const file2 = path9.join(projectDir, ".lotics", "tsconfig.link.json");
-  const header = uiSrc ? `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
-// LOTICS_UI_SRC is set, so @lotics/ui resolves to your working copy for tsc,
-// vitest, eslint and your editor \u2014 the same copy Vite is bundling. The peer
-// pins keep ONE react / react-native in the program; without them the kit's
-// source resolves its own copies and every shared type stops matching.
-// Unset LOTICS_UI_SRC and re-run to go back to the published kit.
-` : `// GENERATED by \`lotics app codegen\` \u2014 do not edit.
-// LOTICS_UI_SRC is not set, so this is inert and @lotics/ui resolves from
-// node_modules as normal.
-`;
-  fs8.writeFileSync(file2, `${header}${JSON.stringify({ compilerOptions: { paths } }, null, 2)}
-`);
+  const file2 = path9.join(projectDir, LINK_TSCONFIG_PATH);
+  fs8.writeFileSync(file2, generateLinkTsconfig(paths));
   return file2;
 }
 function writeKitTypeAugmentation(projectDir) {
@@ -72475,6 +72494,8 @@ async function hydrateAppProject(client, targetPath, app, opts) {
     }
     reportUnseenLive("prompt", unseenLiveProse, app.id);
   }
+}
+async function prepareProjectToolchain(targetPath) {
   await runNpmInstall(targetPath);
   writeAppDtsKitLinks(targetPath);
 }
@@ -72521,6 +72542,7 @@ async function appPull(client, args) {
     ...args.force !== void 0 ? { force: args.force } : {},
     kept: keptLocal
   });
+  await prepareProjectToolchain(targetPath);
   reportRestoredFiles(restoredFromArchive, prior !== null);
   reportKeptLocalFiles(keptLocal, app.id, {
     // `prior` is non-null whenever the stamp was held — `stampAfterPull` cannot
@@ -74125,11 +74147,21 @@ Building ${starter.name} \u2014 this runs its build on your machine (its package
   } else if (serverDeployed === null) {
     note(`Building and deploying\u2026`);
   }
+  if (serverDeployed === null && result.build_error) {
+    warn(
+      `
+Lotics could not build ${starter.name} \u2014 building here instead.
+  ${result.build_error.split("\n")[0]}
+  The copy is fine: the tables, the records and the app all landed. Do NOT
+  copy again, and do not write a replacement app \u2014 only the build is missing.`
+    );
+  }
   const resumeDir = path10.relative(process.cwd(), targetPath) || ".";
   try {
     if (serverDeployed !== null) {
       note(`Deployed v${serverDeployed.version_number} \u2014 built on Lotics, no Node needed here.`);
     } else {
+      await prepareProjectToolchain(targetPath);
       await appDeploy(client, {
         projectDir: targetPath,
         message: `Copied from starter ${starter.name}`

package/dist/src/client.d.ts

@@ -163,12 +163,17 @@ export declare class LoticsClient {
     constructor(options: LoticsClientOptions);
     private throwResponseError;
     /**
-     * The backend's `log()` middleware registers `user-agent` and
-     * `x-posthog-session-id` onto the per-request Logger, so they ride EVERY log
-     * line that request emits — the validation 400, the tool error, the timing.
-     * Sending them is therefore the whole of the correlation work: it turns an
-     * anonymous API-key request into "`app workflow set`, from cli 0.117.0, the
-     * fourth command of this session".
+     * The backend's `log()` middleware registers `user-agent`,
+     * `x-posthog-session-id` and `x-request-id` onto the per-request Logger, so
+     * they ride EVERY log line that request emits — the validation 400, the tool
+     * error, the timing. Sending them is therefore the whole of the correlation
+     * work: it turns an anonymous API-key request into "`app workflow set`, from
+     * cli 0.117.0, the fourth command of this session".
+     *
+     * The request id is minted HERE, with the other headers, so it cannot reach
+     * some paths and not others: several commands build their own transport around
+     * these headers, and an id threaded only through `request` would leave
+     * `app deploy`, `uploadFiles` and every workflow call unfindable.
      */
     private buildHeaders;
     private request;
@@ -422,6 +427,11 @@ export declare class LoticsClient {
             version_id: string;
             version_number: number;
         } | null;
+        /**
+         * Why the server built nothing, when it was asked to and `deployed` is null.
+         * Absent from an older server's response for the same reason as `deployed`.
+         */
+        build_error?: string | null;
         binding: Record<string, Record<string, string>>;
         sample_record_ids: Record<string, string[]>;
         knowledge_warnings: {

package/dist/src/client.js

@@ -1,4 +1,5 @@
 import { transportErrorMessage } from "@lotics/shared/transport_error";
+import crypto from "node:crypto";
 import fs from "node:fs";
 import path from "node:path";
 import { getInvocation } from "./invocation.js";
@@ -115,6 +116,18 @@ export async function fetchOfficialStarters() {
 }
 /** Long enough for a slow link, short enough that a dead one still says so. */
 const SHELF_FETCH_TIMEOUT_MS = 10_000;
+/**
+ * A short id for one request, short because a person has to read it back to us.
+ *
+ * Not `generateLocalId` from `@lotics/shared`: this file is the UNBUNDLED
+ * library entry, so every bare specifier it imports has to resolve from a
+ * package whose `dependencies` are empty. `node:crypto` is a builtin and costs
+ * nothing, and the server treats the header as opaque — it logs whatever
+ * arrives, so matching its id ALPHABET buys nothing.
+ */
+function newRequestId() {
+    return crypto.randomUUID().replace(/-/g, "").slice(0, 12);
+}
 export class LoticsClient {
     apiKey;
     workspaceId;
@@ -131,7 +144,18 @@ export class LoticsClient {
         this.viewAsMemberId = options.viewAsMemberId;
         this.baseUrl = API_BASE_URL;
     }
-    async throwResponseError(response) {
+    /**
+     * The id is appended to the MESSAGE rather than carried on a field, because
+     * the only thing that reliably reaches a person is what got printed: the CLI's
+     * top-level handler writes `error.message` to stderr, and the telemetry tail
+     * captures the same bytes. A field would have to be read by every one of ~60
+     * exit sites to be worth anything.
+     *
+     * `requestId` is optional because one caller legitimately has none — a
+     * presigned CDN download is not a request of ours and appears in none of our
+     * logs. Every call against the API passes the id its own headers carry.
+     */
+    async throwResponseError(response, requestId) {
         const text = await response.text();
         let message;
         try {
@@ -141,15 +165,21 @@ export class LoticsClient {
         catch {
             message = text;
         }
-        throw new Error(`${response.status}: ${message}`);
+        const trace = requestId === undefined ? "" : `\n\n  Request id: ${requestId} — quote this to Lotics support.`;
+        throw new Error(`${response.status}: ${message}${trace}`);
     }
     /**
-     * The backend's `log()` middleware registers `user-agent` and
-     * `x-posthog-session-id` onto the per-request Logger, so they ride EVERY log
-     * line that request emits — the validation 400, the tool error, the timing.
-     * Sending them is therefore the whole of the correlation work: it turns an
-     * anonymous API-key request into "`app workflow set`, from cli 0.117.0, the
-     * fourth command of this session".
+     * The backend's `log()` middleware registers `user-agent`,
+     * `x-posthog-session-id` and `x-request-id` onto the per-request Logger, so
+     * they ride EVERY log line that request emits — the validation 400, the tool
+     * error, the timing. Sending them is therefore the whole of the correlation
+     * work: it turns an anonymous API-key request into "`app workflow set`, from
+     * cli 0.117.0, the fourth command of this session".
+     *
+     * The request id is minted HERE, with the other headers, so it cannot reach
+     * some paths and not others: several commands build their own transport around
+     * these headers, and an id threaded only through `request` would leave
+     * `app deploy`, `uploadFiles` and every workflow call unfindable.
      */
     buildHeaders() {
         const invocation = getInvocation();
@@ -171,6 +201,9 @@ export class LoticsClient {
                 headers["x-posthog-session-id"] = invocation.session;
             }
         }
+        // Unconditional, unlike the session header: this describes the request
+        // rather than tracking anyone, and it is what makes a failure findable.
+        headers["x-request-id"] = newRequestId();
         return headers;
     }
     async request(method, path, body) {
@@ -183,7 +216,7 @@ export class LoticsClient {
         }
         const response = await fetch(url, init);
         if (!response.ok)
-            await this.throwResponseError(response);
+            await this.throwResponseError(response, headers["x-request-id"]);
         return response.json();
     }
     async whoami() {
@@ -234,14 +267,15 @@ export class LoticsClient {
             const timeout = setTimeout(() => controller.abort(), options.timeoutMs);
             try {
                 const url = `${this.baseUrl}/v1/tools/execute`;
+                const headers = { ...this.buildHeaders(), "Content-Type": "application/json" };
                 const response = await fetch(url, {
                     method: "POST",
-                    headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
+                    headers,
                     body: JSON.stringify(body),
                     signal: controller.signal,
                 });
                 if (!response.ok)
-                    await this.throwResponseError(response);
+                    await this.throwResponseError(response, headers["x-request-id"]);
                 return response.json();
             }
             catch (error) {
@@ -662,14 +696,10 @@ export class LoticsClient {
      * iframe. Mirrors POST /v1/apps/{app_id}/agents/{alias}/runs.
      */
     async appAgentRunStream(app_id, alias, body, signal) {
-        const res = await fetch(`${this.baseUrl}/v1/apps/${encodeURIComponent(app_id)}/agents/${encodeURIComponent(alias)}/runs`, {
-            method: "POST",
-            headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
-            body: JSON.stringify(body),
-            signal,
-        });
+        const headers = { ...this.buildHeaders(), "Content-Type": "application/json" };
+        const res = await fetch(`${this.baseUrl}/v1/apps/${encodeURIComponent(app_id)}/agents/${encodeURIComponent(alias)}/runs`, { method: "POST", headers, body: JSON.stringify(body), signal });
         if (!res.ok)
-            await this.throwResponseError(res);
+            await this.throwResponseError(res, headers["x-request-id"]);
         return res;
     }
     /**
@@ -679,14 +709,10 @@ export class LoticsClient {
      * POST /v1/apps/{app_id}/agent-runs/{run_id}/continue.
      */
     async appAgentRunContinueStream(app_id, run_id, body, signal) {
-        const res = await fetch(`${this.baseUrl}/v1/apps/${encodeURIComponent(app_id)}/agent-runs/${encodeURIComponent(run_id)}/continue`, {
-            method: "POST",
-            headers: { ...this.buildHeaders(), "Content-Type": "application/json" },
-            body: JSON.stringify(body),
-            signal,
-        });
+        const headers = { ...this.buildHeaders(), "Content-Type": "application/json" };
+        const res = await fetch(`${this.baseUrl}/v1/apps/${encodeURIComponent(app_id)}/agent-runs/${encodeURIComponent(run_id)}/continue`, { method: "POST", headers, body: JSON.stringify(body), signal });
         if (!res.ok)
-            await this.throwResponseError(res);
+            await this.throwResponseError(res, headers["x-request-id"]);
         return res;
     }
     /**
@@ -775,11 +801,8 @@ export class LoticsClient {
         formData.append("agent_aliases", JSON.stringify(args.agent_aliases ?? []));
         formData.append("query_aliases", JSON.stringify(args.query_aliases ?? []));
         const url = `${this.baseUrl}/v1/apps/${encodeURIComponent(args.app_id)}/versions`;
-        const response = await fetch(url, {
-            method: "POST",
-            headers: this.buildHeaders(), // no Content-Type — fetch sets multipart boundary
-            body: formData,
-        });
+        const headers = this.buildHeaders(); // no Content-Type — fetch sets multipart boundary
+        const response = await fetch(url, { method: "POST", headers, body: formData });
         if (response.status === 409) {
             const conflict = (await response.json());
             const err = new Error(conflict.message ?? "Deploy conflict — pull required");
@@ -789,7 +812,7 @@ export class LoticsClient {
             throw err;
         }
         if (!response.ok) {
-            await this.throwResponseError(response);
+            await this.throwResponseError(response, headers["x-request-id"]);
         }
         return response.json();
     }
@@ -809,9 +832,11 @@ export class LoticsClient {
         // edge Worker that doesn't accept the API key). The signed_url endpoint
         // takes the API key and returns a short-lived, directly-fetchable URL
         // whose Content-Disposition carries the original filename.
-        const signedUrlRes = await fetch(`${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/signed_url`, { headers: this.buildHeaders() });
-        if (!signedUrlRes.ok)
-            await this.throwResponseError(signedUrlRes);
+        const signedHeaders = this.buildHeaders();
+        const signedUrlRes = await fetch(`${this.baseUrl}/v1/files/${encodeURIComponent(fileId)}/signed_url`, { headers: signedHeaders });
+        if (!signedUrlRes.ok) {
+            await this.throwResponseError(signedUrlRes, signedHeaders["x-request-id"]);
+        }
         const { url } = (await signedUrlRes.json());
         const response = await fetch(url);
         if (!response.ok)
@@ -890,13 +915,10 @@ export class LoticsClient {
             formData.append("file", new Blob([item.bytes], { type: mimeType }), item.filename);
         }
         const url = `${this.baseUrl}/v1/files`;
-        const response = await fetch(url, {
-            method: "POST",
-            headers: this.buildHeaders(),
-            body: formData,
-        });
+        const headers = this.buildHeaders();
+        const response = await fetch(url, { method: "POST", headers, body: formData });
         if (!response.ok)
-            await this.throwResponseError(response);
+            await this.throwResponseError(response, headers["x-request-id"]);
         return response.json();
     }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lotics/cli",
-  "version": "0.175.0",
+  "version": "0.177.0",
   "description": "Lotics SDK and CLI for AI agents",
   "type": "module",
   "bin": {