@m8t-stack/cli 0.2.36 → 0.2.38

package/dist/cli.js

@@ -1298,7 +1298,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.36";
+var CLI_VERSION = "0.2.38";
 
 // src/lib/render-error.ts
 init_errors();
@@ -16963,7 +16963,7 @@ async function listModelQuota(region) {
 function usageModelName(usageName) {
   return usageName.split(".").slice(2).join(".");
 }
-var REASONING_USAGE_RE = /gpt-5|o[1-9]/i;
+var REASONING_USAGE_RE = /gpt-5|o[1-9]|grok-4/i;
 function isReasoningModel(modelDeployment) {
   return REASONING_USAGE_RE.test(modelDeployment);
 }
@@ -25476,7 +25476,7 @@ async function ensureDeployment(args) {
     "--model-version",
     args.modelVersion,
     "--model-format",
-    "OpenAI",
+    args.format ?? "OpenAI",
     "--sku-name",
     "GlobalStandard",
     "--sku-capacity",
@@ -26216,8 +26216,8 @@ var BootstrapLaunchCommand = class extends M8tCommand {
     examples: [
       ["Launch in eastus2", "$0 bootstrap launch --location eastus2"],
       ["BYO app registration", "$0 bootstrap launch --location eastus2 --client-id <appId>"],
-      ["Pin a specific installer tag", "$0 bootstrap launch --location eastus2 --installer-tag v0.1.33"],
-      ["Override the full installer image ref", "$0 bootstrap launch --location eastus2 --installer-image ghcr.io/m8t-labs/m8t-installer:v0.1.33"],
+      ["Pin a specific installer tag", "$0 bootstrap launch --location eastus2 --installer-tag v0.1.42"],
+      ["Override the full installer image ref", "$0 bootstrap launch --location eastus2 --installer-image ghcr.io/m8t-labs/m8t-installer:v0.1.42"],
       ["Share a support contact", "$0 bootstrap launch --location eastus2 --contact-email you@example.com --company 'Acme'"]
     ]
   });
@@ -27466,6 +27466,7 @@ async function deploySimpleStacey(args) {
       repoRoot: args.repoRoot,
       persona: SIMPLE_STACEY_PERSONA,
       agentName: SIMPLE_STACEY_AGENT,
+      model: args.model,
       fieldOverrides: args.fieldOverrides
     });
   } catch (e) {
@@ -27534,6 +27535,7 @@ async function deploySimpleStaceyWithRetry(args) {
         credential: args.credential,
         endpoint: args.endpoint,
         repoRoot: args.repoRoot,
+        model: args.model,
         fieldOverrides: args.fieldOverrides
       });
     } catch (error) {
@@ -27629,12 +27631,13 @@ function writeWebEnvLocal(args) {
     });
   }
   const body = [
-    "# Written by `m8t bootstrap ui` \u2014 onboarding chat-only run (Simple Stacey).",
+    "# Written by `m8t bootstrap ui` \u2014 local onboarding run (Simple Stacey).",
+    "# Text-first: the intake voice stack is off unless the run passed --voice.",
     "# STORAGE unset \u2192 gateway boot skipped; the webapp forwards your MSAL token to Foundry.",
     `AZURE_TENANT_ID=${args.tenantId}`,
     `AZURE_CLIENT_ID=${args.clientId}`,
     `FOUNDRY_PROJECT_ENDPOINT=${args.foundryEndpoint}`,
-    "VOICE_RELAY_PUBLIC_URL=ws://localhost:8790",
+    ...args.voice ? ["VOICE_RELAY_PUBLIC_URL=ws://localhost:8790", "NEXT_PUBLIC_M8T_INTAKE_VOICE=1"] : [],
     "STORAGE_ACCOUNT_NAME=",
     `M8T_INTERNAL_SECRET=${internalSecret}`,
     "M8T_SINGLE_GATEWAY_PROCESS=1",
@@ -27929,6 +27932,257 @@ function stopOnboardingUi(home = os17.homedir()) {
   return uiStopped || relayStopped;
 }
 
+// src/lib/model-catalog.ts
+async function listAgentModels(region) {
+  let out;
+  try {
+    out = await runAz(["cognitiveservices", "model", "list", "-l", region, "--output", "json"]);
+  } catch (e) {
+    const msg = e instanceof Error ? e.message : String(e);
+    const denied = /AuthorizationFailed|Forbidden|\b403\b|does not have authorization/i.test(msg);
+    return { ok: false, error: denied ? "denied" : "unavailable" };
+  }
+  let raw;
+  try {
+    raw = JSON.parse(out);
+  } catch {
+    return { ok: false, error: "malformed" };
+  }
+  if (!Array.isArray(raw) || raw.some((e) => typeof e !== "object" || e === null)) {
+    return { ok: false, error: "malformed" };
+  }
+  try {
+    const rows = raw.map((e) => ({
+      format: e.model?.format ?? "",
+      name: e.model?.name ?? "",
+      version: e.model?.version ?? "",
+      skus: [...new Set((e.model?.skus ?? []).map((s) => s.name ?? "").filter(Boolean))],
+      agentsV2: e.model?.capabilities?.agentsV2 === "true"
+    }));
+    return { ok: true, rows };
+  } catch {
+    return { ok: false, error: "malformed" };
+  }
+}
+
+// src/lib/model-cascade.ts
+var WHITELIST = [
+  { model: "gpt-5.6-luna", format: "OpenAI", version: "2026-07-09", capacity: 100 },
+  { model: "gpt-5.6-sol", format: "OpenAI", version: "2026-07-09", capacity: 100 },
+  { model: "gpt-5.6-terra", format: "OpenAI", version: "2026-07-09", capacity: 100 },
+  { model: "gpt-5.4", format: "OpenAI", version: "2026-03-05", capacity: 100 },
+  { model: "grok-4.3", format: "xAI", version: "1", capacity: 100 },
+  { model: "gpt-4.1-mini", format: "OpenAI", version: "2025-04-14", capacity: 50 }
+];
+var GLOBAL_STANDARD = "GlobalStandard";
+function planCascade(whitelist, catalog, quota) {
+  if (!catalog.ok) {
+    return {
+      candidates: [],
+      skipped: whitelist.map((r) => ({ model: r.model, outcome: "catalog-unverified", detail: catalog.error }))
+    };
+  }
+  const rowsByName = /* @__PURE__ */ new Map();
+  for (const row of catalog.rows) {
+    const list = rowsByName.get(row.name);
+    if (list) list.push(row);
+    else rowsByName.set(row.name, [row]);
+  }
+  const candidates = [];
+  const skipped = [];
+  for (const rung of whitelist) {
+    const rows = rowsByName.get(rung.model);
+    if (!rows || rows.length === 0) {
+      skipped.push({ model: rung.model, outcome: "not-in-catalog" });
+      continue;
+    }
+    const agentRows = rows.filter((r) => r.agentsV2);
+    if (agentRows.length === 0) {
+      skipped.push({ model: rung.model, outcome: "not-agent-eligible" });
+      continue;
+    }
+    if (!agentRows.some((r) => r.skus.includes(GLOBAL_STANDARD))) {
+      skipped.push({ model: rung.model, outcome: "no-global-standard" });
+      continue;
+    }
+    if (modelQuotaVerdict(quota, rung.model).verdict === "no_quota") {
+      skipped.push({ model: rung.model, outcome: "no-quota" });
+      continue;
+    }
+    candidates.push(rung);
+  }
+  return { candidates, skipped };
+}
+var QUOTA_RE = /insufficient\s*quota|not enough quota|quota limit|quota\b[^.]{0,40}exceed|exceed\w*\b[^.]{0,40}quota|capacity[^.]{0,40}exceed|exceed\w*\b[^.]{0,40}capacity/i;
+var REGION_RE = /not available in|not supported in|NotAvailableInRegion|InvalidResourceLocation/i;
+var CONFLICT_RE = /\bconflict\b|\b409\b/i;
+function classifyDeployError(message) {
+  if (QUOTA_RE.test(message)) return "deploy-rejected-quota";
+  if (REGION_RE.test(message)) return "deploy-rejected-region";
+  return "deploy-unverified";
+}
+async function walkCascade(whitelist, plan, deploy, opts) {
+  const outcomes = /* @__PURE__ */ new Map();
+  for (const s of plan.skipped) outcomes.set(s.model, s);
+  let chosen = null;
+  let aborted = false;
+  for (const rung of plan.candidates) {
+    if (chosen) break;
+    if (opts.now() >= opts.deadlineAt) {
+      aborted = true;
+      break;
+    }
+    let row;
+    try {
+      await deploy(rung);
+      row = { model: rung.model, outcome: "deployed" };
+      chosen = rung;
+    } catch (e) {
+      const msg = e instanceof Error ? e.message : String(e);
+      if (CONFLICT_RE.test(msg)) {
+        try {
+          await deploy(rung);
+          row = { model: rung.model, outcome: "deployed" };
+          chosen = rung;
+        } catch (e2) {
+          const msg2 = e2 instanceof Error ? e2.message : String(e2);
+          row = {
+            model: rung.model,
+            outcome: CONFLICT_RE.test(msg2) ? "deploy-unverified" : classifyDeployError(msg2),
+            detail: msg2
+          };
+        }
+      } else {
+        row = { model: rung.model, outcome: classifyDeployError(msg), detail: msg };
+      }
+    }
+    outcomes.set(rung.model, row);
+    opts.onRung?.(row.model, row.outcome);
+  }
+  const trace = whitelist.map(
+    (r) => outcomes.get(r.model) ?? { model: r.model, outcome: aborted ? "aborted-deadline" : "not-reached" }
+  );
+  return { chosen, trace };
+}
+var CERTAIN_UNAVAILABLE = /* @__PURE__ */ new Set([
+  "not-in-catalog",
+  "not-agent-eligible",
+  "no-global-standard",
+  "deploy-rejected-region"
+]);
+var QUOTA_BLOCKED = /* @__PURE__ */ new Set(["no-quota", "deploy-rejected-quota"]);
+function decideNote(whitelist, result) {
+  const chosenIdx = result.chosen ? whitelist.findIndex((r) => r.model === result.chosen?.model) : whitelist.length;
+  const better = result.trace.slice(0, Math.max(chosenIdx, 0));
+  const runningModel = result.chosen?.model ?? null;
+  if (chosenIdx === 0) {
+    return { status: "top", runningModel, pitchModel: null, unavailableAbovePitch: [] };
+  }
+  const pitch = better.find((t) => QUOTA_BLOCKED.has(t.outcome));
+  if (pitch) {
+    const pitchIdx = better.findIndex((t) => t.model === pitch.model);
+    return {
+      status: "lesser-quota",
+      runningModel,
+      pitchModel: pitch.model,
+      unavailableAbovePitch: better.slice(0, pitchIdx).filter((t) => CERTAIN_UNAVAILABLE.has(t.outcome)).map((t) => t.model)
+    };
+  }
+  const allCertain = better.length > 0 && better.every((t) => CERTAIN_UNAVAILABLE.has(t.outcome));
+  return {
+    status: allCertain ? "lesser-unavailable" : "lesser-unverified",
+    runningModel,
+    pitchModel: null,
+    unavailableAbovePitch: []
+  };
+}
+var listNames = (names) => names.length <= 1 ? names[0] ?? "" : `${names.slice(0, -1).join(", ")} and ${names[names.length - 1]}`;
+function renderChosenModelNote(d) {
+  const subject = d.runningModel ? `You are running on ${d.runningModel}.` : "You are running on this install's default model.";
+  switch (d.status) {
+    case "top":
+      return `${subject} That is the best available model for this install.`;
+    case "lesser-quota": {
+      const aside = d.unavailableAbovePitch.length > 0 ? ` ${listNames(d.unavailableAbovePitch)} ${d.unavailableAbovePitch.length > 1 ? "are" : "is"} not offered for this install.` : "";
+      return `${subject} A stronger model, ${d.pitchModel ?? ""}, is offered here, but this subscription has no quota for it.${aside} You can offer to help request that quota.`;
+    }
+    case "lesser-unavailable":
+      return `${subject} No stronger model is offered for this install right now.`;
+    case "lesser-unverified":
+      return `${subject} It was not possible to check which stronger models this subscription can run, so do not make claims about what is or is not available.`;
+  }
+}
+
+// src/lib/intake-model.ts
+var DEFAULT_DEADLINE_MS = 18e4;
+var SCOPE_RE = /\/resourceGroups\/([^/]+)\/providers\/Microsoft\.CognitiveServices\/accounts\/([^/]+)/i;
+function parseAccountScope(scope) {
+  const m = SCOPE_RE.exec(scope);
+  return m ? { resourceGroup: m[1], account: m[2] } : null;
+}
+function narrate(model, outcome, region) {
+  if (outcome === "deployed") return `${model} - ready`;
+  return `${model} - not available for your subscription in ${region}`;
+}
+async function accountRegion(account, resourceGroup, fallback) {
+  try {
+    const out = await runAz([
+      "cognitiveservices",
+      "account",
+      "show",
+      "--name",
+      account,
+      "--resource-group",
+      resourceGroup,
+      "--query",
+      "location",
+      "-o",
+      "tsv"
+    ]);
+    return out.trim() || fallback;
+  } catch {
+    return fallback;
+  }
+}
+async function resolveIntakeModel(args) {
+  const floorTrace = (outcome, detail) => WHITELIST.map((r) => ({ model: r.model, outcome, ...detail === void 0 ? {} : { detail } }));
+  const degradeToFloor = (detail) => {
+    const trace = floorTrace("catalog-unverified", detail);
+    return { model: void 0, note: renderChosenModelNote(decideNote(WHITELIST, { chosen: null, trace })), trace };
+  };
+  const parsed = parseAccountScope(args.accountScope);
+  if (!parsed) return degradeToFloor(`unparseable account scope: ${args.accountScope}`);
+  try {
+    const region = await accountRegion(parsed.account, parsed.resourceGroup, args.fallbackRegion);
+    args.onNarrate?.("choosing the best model your subscription can run...");
+    const [catalog, quota] = await Promise.all([listAgentModels(region), listModelQuota(region)]);
+    const plan = planCascade(WHITELIST, catalog, quota);
+    const deploy = async (rung) => {
+      await ensureDeployment({
+        account: parsed.account,
+        resourceGroup: parsed.resourceGroup,
+        model: rung.model,
+        modelVersion: rung.version,
+        capacity: rung.capacity,
+        format: rung.format
+      });
+    };
+    const start = Date.now();
+    const result = await walkCascade(WHITELIST, plan, deploy, {
+      now: () => Date.now(),
+      deadlineAt: start + (args.deadlineMs ?? DEFAULT_DEADLINE_MS),
+      onRung: (model, outcome) => args.onNarrate?.(narrate(model, outcome, region))
+    });
+    return {
+      model: result.chosen?.model,
+      note: renderChosenModelNote(decideNote(WHITELIST, result)),
+      trace: result.trace
+    };
+  } catch (e) {
+    return degradeToFloor(e instanceof Error ? e.message : String(e));
+  }
+}
+
 // src/commands/bootstrap/ui.ts
 function renderDeploySuccess(version, envPath) {
   return `${colors.success("\u2713")} Simple Stacey is live (stacey-intake v${version}).
@@ -27951,8 +28205,9 @@ var BootstrapUiCommand = class extends M8tCommand {
     details: [
       "Run after `m8t bootstrap launch`, in parallel with `status --watch`. Waits for the cloud",
       "installer's foundry-create phase, grants you Foundry data-plane access, deploys a no-brain",
-      "Simple Stacey (stacey-intake), writes apps/web/.env.local (chat-only), installs deps, and",
-      "starts the webapp detached so a coding agent can continue without opening a separate terminal.",
+      "Simple Stacey (stacey-intake), writes apps/web/.env.local (chat-only unless --voice is set),",
+      "installs deps, and starts the webapp detached so a coding agent can continue without opening",
+      "a separate terminal.",
       "",
       "The command returns as soon as the server is ready (or after ~45 s if it is still compiling).",
       "Use `--stop` to shut it down, `--foreground` to keep the old blocking behaviour."
@@ -27961,7 +28216,8 @@ var BootstrapUiCommand = class extends M8tCommand {
       ["Start the onboarding UI (backgrounds the server, returns)", "$0 bootstrap ui --repo-root /path/to/m8t"],
       ["Stop the running onboarding UI", "$0 bootstrap ui --stop"],
       ["Prep only (don't serve at all)", "$0 bootstrap ui --repo-root /path/to/m8t --prep-only"],
-      ["Foreground (blocking, old behaviour)", "$0 bootstrap ui --repo-root /path/to/m8t --foreground"]
+      ["Foreground (blocking, old behaviour)", "$0 bootstrap ui --repo-root /path/to/m8t --foreground"],
+      ["Experimental: enable the intake voice call", "$0 bootstrap ui --repo-root /path/to/m8t --voice"]
     ]
   });
   repoRoot = Option51.String("--repo-root");
@@ -27973,6 +28229,9 @@ var BootstrapUiCommand = class extends M8tCommand {
   skipInstall = Option51.Boolean("--skip-install", false);
   stop = Option51.Boolean("--stop", false);
   foreground = Option51.Boolean("--foreground", false);
+  voice = Option51.Boolean("--voice", false, {
+    description: "Experimental/preview: enable the intake voice call and start the voice relay on :8790. Not a supported founder path \u2014 the intake is text-only by default."
+  });
   async executeCommand() {
     if (this.stop === true) {
       const stopped = stopOnboardingUi();
@@ -28025,13 +28284,24 @@ var BootstrapUiCommand = class extends M8tCommand {
     await ensureFounderFoundryRole({ credential: credential2, subscriptionId: state.subscriptionId, principalId: oid, accountScope });
     const identity = await getSignedInUserIdentity();
     out("deploying Simple Stacey (stacey-intake) in the background...");
-    const deployOutcome = deploySimpleStaceyWithRetry({
-      credential: credential2,
-      endpoint,
-      repoRoot,
-      fieldOverrides: { founder_identity_note: composeFounderIdentityNote(identity) },
-      onWait: out
-    }).then(
+    const deployOutcome = (async () => {
+      const choice = await resolveIntakeModel({
+        accountScope,
+        fallbackRegion: state.location,
+        onNarrate: out
+      });
+      return deploySimpleStaceyWithRetry({
+        credential: credential2,
+        endpoint,
+        repoRoot,
+        model: choice.model,
+        fieldOverrides: {
+          founder_identity_note: composeFounderIdentityNote(identity),
+          chosen_model_note: choice.note
+        },
+        onWait: out
+      });
+    })().then(
       (version) => ({ ok: true, version }),
       (error) => ({ ok: false, error: error instanceof Error ? error : new Error(String(error)) })
     );
@@ -28039,7 +28309,8 @@ var BootstrapUiCommand = class extends M8tCommand {
       repoRoot,
       tenantId: account.tenantId,
       clientId: state.appRegClientId,
-      foundryEndpoint: endpoint
+      foundryEndpoint: endpoint,
+      voice: this.voice === true
     });
     if (!this.skipInstall) {
       out("installing apps/web dependencies (pnpm)\u2026");
@@ -28054,15 +28325,17 @@ var BootstrapUiCommand = class extends M8tCommand {
       return 0;
     }
     if (this.foreground === true) {
-      out("starting the voice relay on :8790 in the background\u2026");
-      await serveOnboardingRelayDetached({
-        repoRoot,
-        foundryEndpoint: endpoint,
-        tenantId: account.tenantId,
-        clientId: state.appRegClientId,
-        webInternalBaseUrl: "http://localhost:3000"
-      });
-      out("voice relay on :8790");
+      if (this.voice === true) {
+        out("starting the voice relay on :8790 in the background\u2026");
+        await serveOnboardingRelayDetached({
+          repoRoot,
+          foundryEndpoint: endpoint,
+          tenantId: account.tenantId,
+          clientId: state.appRegClientId,
+          webInternalBaseUrl: "http://localhost:3000"
+        });
+        out("voice relay on :8790");
+      }
       const outcome2 = await deployOutcome;
       if (!outcome2.ok) {
         this.context.stderr.write(renderDeployFailure(outcome2.error));
@@ -28073,15 +28346,17 @@ var BootstrapUiCommand = class extends M8tCommand {
       await runInherit("pnpm", ["--filter", "web", "dev"], repoRoot, "BOOTSTRAP_UI_DEV_FAILED");
       return 0;
     }
-    out("starting the voice relay on :8790 in the background\u2026");
-    await serveOnboardingRelayDetached({
-      repoRoot,
-      foundryEndpoint: endpoint,
-      tenantId: account.tenantId,
-      clientId: state.appRegClientId,
-      webInternalBaseUrl: "http://localhost:3000"
-    });
-    out("voice relay on :8790");
+    if (this.voice === true) {
+      out("starting the voice relay on :8790 in the background\u2026");
+      await serveOnboardingRelayDetached({
+        repoRoot,
+        foundryEndpoint: endpoint,
+        tenantId: account.tenantId,
+        clientId: state.appRegClientId,
+        webInternalBaseUrl: "http://localhost:3000"
+      });
+      out("voice relay on :8790");
+    }
     out("starting the webapp on :3000 in the background\u2026");
     const { alreadyRunning, logPath } = await serveOnboardingUiDetached({ repoRoot, port: this.port });
     if (alreadyRunning) {