@m8t-stack/cli 0.2.111 → 0.2.113

package/dist/cli.js

@@ -1454,7 +1454,7 @@ function installFoundryDnsShim() {
 }
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.111";
+var CLI_VERSION = "0.2.113";
 
 // src/lib/render-error.ts
 init_errors();
@@ -28700,7 +28700,7 @@ var OpenCommand = class extends M8tCommand {
 // src/commands/dream/run.ts
 import { Command as Command55, Option as Option52 } from "clipanion";
 import { AzureCliCredential } from "@azure/identity";
-import { TableClient as TableClient7 } from "@azure/data-tables";
+import { TableClient as TableClient8 } from "@azure/data-tables";
 import { AIProjectClient as AIProjectClient3 } from "@azure/ai-projects";
 import { LogsQueryClient as LogsQueryClient3, LogsQueryResultStatus as LogsQueryResultStatus3 } from "@azure/monitor-query";
 
@@ -31125,6 +31125,64 @@ async function resolveDreamContext(opts) {
 init_esm2();
 init_esm();
 init_foundry_agent_get();
+
+// src/lib/dream-cursor-write-preflight.ts
+import { randomUUID as randomUUID2 } from "crypto";
+import { TableClient as TableClient7 } from "@azure/data-tables";
+var PROBE_PARTITION_PREFIX = "__m8t_dream_cursor_write_preflight__";
+var NONMATCHING_TABLE_ETAG = `W/"datetime'1970-01-01T00%3A00%3A00.0000000Z'"`;
+function serviceCode(error) {
+  const candidate2 = error;
+  return {
+    statusCode: candidate2.statusCode,
+    code: candidate2.code ?? candidate2.details?.errorCode,
+    message: candidate2.message
+  };
+}
+function isTableAlreadyExists(error) {
+  const { statusCode, code } = serviceCode(error);
+  return statusCode === 409 && code === "TableAlreadyExists";
+}
+function provesAuthorizedNonMutation(error) {
+  const { statusCode, code, message } = serviceCode(error);
+  if (!message?.startsWith("1:")) return false;
+  return statusCode === 404 && (code === "EntityNotFound" || code === "ResourceNotFound") || statusCode === 412 && code === "UpdateConditionNotSatisfied";
+}
+async function preflightDreamCursorWrite(client, uuid = randomUUID2) {
+  try {
+    await client.createTable();
+  } catch (error) {
+    if (!isTableAlreadyExists(error)) throw error;
+  }
+  const attempt = uuid();
+  const partitionKey = `${PROBE_PARTITION_PREFIX}-${attempt}`;
+  const actions = [
+    [
+      "upsert",
+      { partitionKey, rowKey: `upsert-${attempt}`, proof: "authorization-only" },
+      "Replace"
+    ],
+    [
+      "update",
+      { partitionKey, rowKey: `abort-${attempt}`, proof: "atomic-rollback" },
+      "Merge",
+      { etag: NONMATCHING_TABLE_ETAG }
+    ]
+  ];
+  try {
+    await client.submitTransaction(actions);
+  } catch (error) {
+    if (provesAuthorizedNonMutation(error)) return;
+    throw error;
+  }
+  throw new Error("Dream cursor write preflight transaction unexpectedly committed.");
+}
+async function preflightDreamCursorWriteAt(tableEndpoint, credential2) {
+  const client = new TableClient7(tableEndpoint, CURSOR_TABLE_NAME, credential2);
+  await preflightDreamCursorWrite(client);
+}
+
+// src/commands/dream/run.ts
 var LEDGER_TABLE_NAME = "AgentLedger";
 var SAFE_ID2 = /^[A-Za-z0-9_]+$/;
 var CONV_ID2 = /^conv_[A-Za-z0-9]+$/;
@@ -31198,6 +31256,7 @@ var DreamRunCommand = class extends M8tCommand {
         endpoint: typeof this.endpoint === "string" ? this.endpoint : void 0,
         storageAccount: typeof this.storageAccount === "string" ? this.storageAccount : void 0
       });
+      await liveDeps.preflightCursorWrite();
       const liveCursor = await liveDeps.readCursor(liveContext.worker);
       const result2 = await liveDeps.runDream({
         worker: liveContext.worker,
@@ -31375,7 +31434,7 @@ AppDependencies
   };
 }
 function buildLiveSources(context, credential2) {
-  const ledgerClient = new TableClient7(context.ledgerTableEndpoint, LEDGER_TABLE_NAME, credential2);
+  const ledgerClient = new TableClient8(context.ledgerTableEndpoint, LEDGER_TABLE_NAME, credential2);
   const ledger = makeLedgerSource(
     async (pk, sinceTs) => fetchLedgerRows(
       { workers: [pk], source: "all", from: sinceTs, to: "9999-12-31T23:59:59.999Z" },
@@ -31490,6 +31549,29 @@ function defaultDeps(overrides) {
         }
       });
     },
+    async preflightCursorWrite() {
+      if (!cached) {
+        throw new LocalCliError({
+          code: "DREAM_INTERNAL",
+          message: "preflightCursorWrite called before resolveContext."
+        });
+      }
+      try {
+        if (overrides?.preflightCursorWrite) {
+          await overrides.preflightCursorWrite(cached.context, credential2);
+        } else {
+          await preflightDreamCursorWriteAt(cached.context.ledgerTableEndpoint, credential2);
+        }
+      } catch (cause) {
+        if (cause.statusCode !== 403) throw cause;
+        throw new LocalCliError({
+          code: "DREAM_CURSOR_WRITE_REQUIRED",
+          message: `Cannot write the dream cursor for worker '${cached.context.worker}'. The live dream was not started.`,
+          hint: "Grant the signed-in operator Storage Table Data Contributor on the ledger storage account, then retry.",
+          cause
+        });
+      }
+    },
     async readCursor(worker) {
       if (!cached) {
         throw new LocalCliError({
@@ -31531,7 +31613,7 @@ function defaultDeps(overrides) {
 import { createHash as createHash5 } from "crypto";
 import { Command as Command56, Option as Option53 } from "clipanion";
 import { AzureCliCredential as AzureCliCredential2 } from "@azure/identity";
-import { TableClient as TableClient8 } from "@azure/data-tables";
+import { TableClient as TableClient9 } from "@azure/data-tables";
 import { AIProjectClient as AIProjectClient4 } from "@azure/ai-projects";
 init_errors();
 var LEDGER_TABLE_NAME2 = "AgentLedger";
@@ -31600,7 +31682,7 @@ function defaultDeps2() {
       return { projectEndpoint: project.endpoint, ledgerTableEndpoint };
     },
     async fetchRows(ctx, fromIso, toIso) {
-      const client = new TableClient8(ctx.ledgerTableEndpoint, LEDGER_TABLE_NAME2, credential2);
+      const client = new TableClient9(ctx.ledgerTableEndpoint, LEDGER_TABLE_NAME2, credential2);
       try {
         return await fetchLedgerRows({ workers: [], source: "all", from: fromIso, to: toIso }, client);
       } catch (e) {
@@ -32509,7 +32591,7 @@ async function kickInstaller(s) {
 }
 
 // src/lib/bootstrap-status.ts
-import { createHash as createHash7, randomUUID as randomUUID2 } from "crypto";
+import { createHash as createHash7, randomUUID as randomUUID3 } from "crypto";
 import * as fs32 from "fs/promises";
 import * as os13 from "os";
 import * as path35 from "path";
@@ -32551,7 +32633,7 @@ async function readStatusBlob(opts) {
       cause: e
     });
   }
-  const tmpFile = path35.join(os13.tmpdir(), `m8t-status-${randomUUID2()}.json`);
+  const tmpFile = path35.join(os13.tmpdir(), `m8t-status-${randomUUID3()}.json`);
   try {
     await runAz([
       "storage",
@@ -32719,7 +32801,7 @@ ${colors.error("\u2717")} The GitHub App on disk is installed on ${colors.field(
 // src/commands/bootstrap/launch.ts
 var DEFAULT_RG = "rg-m8t-stack";
 var DEFAULT_INSTALLER = "ghcr.io/m8t-labs/m8t-installer";
-var DEFAULT_INSTALLER_TAG = "v0.1.78";
+var DEFAULT_INSTALLER_TAG = "v0.1.80";
 var ACI_NAME = "m8t-installer";
 var MI_NAME = "m8t-installer-mi";
 var BootstrapLaunchCommand = class extends M8tCommand {
@@ -33904,7 +33986,7 @@ function renderInstallSummary(args) {
 import { constants as constants2 } from "fs";
 import * as fs38 from "fs/promises";
 import * as path42 from "path";
-import { randomUUID as randomUUID3 } from "crypto";
+import { randomUUID as randomUUID4 } from "crypto";
 import { execFile as execFile2, spawn as spawn7 } from "child_process";
 
 // src/lib/companion-artifact.ts
@@ -34741,7 +34823,7 @@ async function atomicWriteText(filePath, contents, mode) {
     recursive: true,
     mode: 448
   });
-  const temporary = `${filePath}.${randomUUID3()}.tmp`;
+  const temporary = `${filePath}.${randomUUID4()}.tmp`;
   try {
     await fs38.writeFile(temporary, contents, {
       mode,
@@ -34939,8 +35021,8 @@ async function converge(options, force) {
       if (error.code !== "ENOENT") throw error;
     }
   }
-  const stage = `${paths.targetRoot}.m8t-stage-${randomUUID3()}`;
-  const backup = `${paths.targetRoot}.m8t-backup-${randomUUID3()}`;
+  const stage = `${paths.targetRoot}.m8t-stage-${randomUUID4()}`;
+  const backup = `${paths.targetRoot}.m8t-backup-${randomUUID4()}`;
   const copy = options.copyPayload ?? copyArtifactPayload;
   await fs38.mkdir(path42.dirname(paths.targetRoot), {
     recursive: true,