@m8t-stack/cli 0.2.97 → 0.2.98

package/dist/cli.js

@@ -1487,7 +1487,7 @@ function installFoundryDnsShim() {
 }
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.97";
+var CLI_VERSION = "0.2.98";
 
 // src/lib/render-error.ts
 init_errors();
@@ -21207,17 +21207,46 @@ function sortObj(o) {
 
 // src/lib/gateway-live-params.ts
 async function readLiveGatewayEnvVar(opts) {
-  const args = ["containerapp", "show", "-n", opts.gatewayName, "-g", opts.resourceGroup];
-  if (opts.subscriptionId) args.push("--subscription", opts.subscriptionId);
-  args.push("--query", `properties.template.containers[0].env[?name=='${opts.name}'].value | [0]`, "-o", "tsv");
+  const show = ["containerapp", "show", "-n", opts.gatewayName, "-g", opts.resourceGroup];
+  if (opts.subscriptionId) show.push("--subscription", opts.subscriptionId);
+  show.push("--query", `properties.template.containers[0].env[?name=='${opts.name}'] | [0]`, "-o", "json");
   let raw;
   try {
-    raw = await runAz(args);
+    raw = await runAz(show);
+  } catch (e) {
+    return { kind: "unreadable", detail: e.message };
+  }
+  const text = raw.trim();
+  if (text === "" || text === "null" || text === "None") return { kind: "absent" };
+  let entry;
+  try {
+    entry = JSON.parse(text);
   } catch {
-    return "";
+    return { kind: "unreadable", detail: "the env entry did not parse as JSON" };
   }
-  const v = raw.trim();
-  return v === "None" ? "" : v;
+  if (typeof entry.value === "string" && entry.value !== "") {
+    return { kind: "value", value: entry.value };
+  }
+  if (typeof entry.secretRef !== "string" || entry.secretRef === "") {
+    return { kind: "absent" };
+  }
+  const secret = ["containerapp", "secret", "show", "-n", opts.gatewayName, "-g", opts.resourceGroup];
+  if (opts.subscriptionId) secret.push("--subscription", opts.subscriptionId);
+  secret.push("--secret-name", entry.secretRef, "--query", "value", "-o", "tsv");
+  let secretRaw;
+  try {
+    secretRaw = await runAz(secret);
+  } catch (e) {
+    return {
+      kind: "unreadable",
+      detail: `could not read secret '${entry.secretRef}': ${e.message}`
+    };
+  }
+  const value = secretRaw.trim();
+  if (value === "" || value === "None") {
+    return { kind: "unreadable", detail: `secret '${entry.secretRef}' read back empty` };
+  }
+  return { kind: "value", value };
 }
 async function readLiveGatewayImage(opts) {
   const args = ["containerapp", "show", "-n", opts.gatewayName, "-g", opts.resourceGroup];
@@ -21233,6 +21262,19 @@ async function readLiveGatewayImage(opts) {
 function readLiveVoiceInternalSecret(opts) {
   return readLiveGatewayEnvVar({ ...opts, name: "M8T_INTERNAL_SECRET" });
 }
+function voiceSecretParam(read, gatewayName) {
+  if (read.kind === "value") return { value: read.value };
+  if (read.kind === "absent") {
+    return {
+      value: "",
+      warning: `gateway '${gatewayName}' has no M8T_INTERNAL_SECRET to preserve, so this converge will mint one, rolling BOTH the gateway and the voice relay. Expected on a first deploy.`
+    };
+  }
+  return {
+    value: "",
+    warning: `could not read the voice-relay secret (M8T_INTERNAL_SECRET) off gateway '${gatewayName}': ${read.detail}. The variable may well be set \u2014 this converge will mint a NEW secret anyway, rolling BOTH the gateway and the voice relay.`
+  };
+}
 
 // src/lib/platform-converge.ts
 var ORDER = ["infra", "gateway", "codingAgent", "azureExecutor", "personas", "brainSeeds"];
@@ -22463,16 +22505,16 @@ async function buildConvergeDeps(args) {
       }
       args.onProgress?.("subscription-scoped modules skipped: updater is RG-scoped; sub-level changes require a founder-run CLI converge.");
       const gatewayName = args.suffix ? `m8t-gateway-${args.suffix}` : void 0;
-      const voiceInternalSecret = gatewayName ? await readLiveVoiceInternalSecret({
-        gatewayName,
-        resourceGroup: args.resourceGroup,
-        subscriptionId: args.subscriptionId
-      }) : "";
-      if (gatewayName && !voiceInternalSecret) {
-        args.onProgress?.(
-          `could not read the live voice-relay secret (M8T_INTERNAL_SECRET) off gateway '${gatewayName}' \u2014 the read failed or the variable is missing. This infra converge will re-mint the secret, rolling BOTH the gateway and the voice relay.`
-        );
-      }
+      const secret = gatewayName ? voiceSecretParam(
+        await readLiveVoiceInternalSecret({
+          gatewayName,
+          resourceGroup: args.resourceGroup,
+          subscriptionId: args.subscriptionId
+        }),
+        gatewayName
+      ) : { value: "" };
+      const voiceInternalSecret = secret.value;
+      if (secret.warning !== void 0) args.onProgress?.(secret.warning);
       const opts = {
         suffix: args.suffix,
         assignSubscriptionRoles: false,
@@ -24343,11 +24385,12 @@ var PlatformEnableAutoUpdateCommand = class extends M8tCommand {
         message: `Could not read the live image for gateway '${gatewayName}' in resource group ${resourceGroup}.`
       });
     }
-    const voiceInternalSecret = await readLiveVoiceInternalSecret({
-      gatewayName,
-      resourceGroup,
-      subscriptionId
-    });
+    const voiceSecret = voiceSecretParam(
+      await readLiveVoiceInternalSecret({ gatewayName, resourceGroup, subscriptionId }),
+      gatewayName
+    );
+    if (voiceSecret.warning !== void 0) log(colors.warn(voiceSecret.warning));
+    const voiceInternalSecret = voiceSecret.value;
     const stampedLocation = stampedParams?.bicep.location;
     const location = typeof this.location === "string" && this.location.length > 0 ? this.location : stampedLocation !== void 0 && stampedLocation.length > 0 ? stampedLocation : (await runAz(["resource", "list", "-g", resourceGroup, "--subscription", subscriptionId, "--query", "[0].location", "-o", "tsv"])).trim();
     if (!location) {
@@ -32775,24 +32818,35 @@ async function reactiveSeedOnInstallComplete(args) {
 }
 
 // src/lib/install-summary.ts
-var DEFAULT_WORKERS = [
-  { name: "ezra", label: "Ezra - Azure Expert", brain: "ezra-brain" }
-];
+var WORKER_LABELS = {
+  ezra: "Ezra - Azure Expert",
+  stacey: "Stacey - Startup Advisor"
+};
+function workerNameOf(brainRepo) {
+  const leaf = brainRepo.slice(brainRepo.lastIndexOf("/") + 1);
+  return leaf.endsWith("-brain") ? leaf.slice(0, -"-brain".length) : leaf;
+}
 function renderInstallSummary(args) {
   const open4 = args.webappUrl ? `${args.webappUrl}        (or run: m8t open)` : "run: m8t open";
+  const brains = args.brains ?? [];
   const lines = [
     "\u2705 Your m8t platform is ready to use.",
     `   Open it:  ${open4}`,
     ""
   ];
-  if (args.brainOrg) {
+  if (brains.length > 0) {
+    const workers = brains.map((brain) => {
+      const name = workerNameOf(brain);
+      return { name, label: WORKER_LABELS[name] ?? name, brain };
+    });
     lines.push("   Your team:");
-    for (const w of DEFAULT_WORKERS) {
-      lines.push(`     \u2022 ${w.label}   \xB7 brain: ${args.brainOrg}/${w.brain}`);
+    for (const w of workers) {
+      lines.push(`     \u2022 ${w.label}   \xB7 brain: ${w.brain}`);
     }
+    const handles = workers.map((w) => `@${w.name} (or /${w.name})`).join(", ");
     lines.push(
       "",
-      "   Reach them:  @ezra (or /ezra) in your coding agent",
+      `   Reach them:  ${handles} in your coding agent`,
       "                \xB7 the webapp  \xB7 or connect Telegram in the webapp (Channels)"
     );
   } else {
@@ -34278,14 +34332,7 @@ async function finalizeInstall(args, deps = defaultFinalizeDeps) {
 ` : "") + "\n"
     );
   }
-  let brainOrg = null;
-  try {
-    const credsRaw = await fs39.readFile(path44.join(markerDir, "github-app.json"), "utf8");
-    const creds = JSON.parse(credsRaw);
-    brainOrg = typeof creds.org === "string" ? creds.org : null;
-  } catch {
-  }
-  args.stdout(renderInstallSummary({ webappUrl, brainOrg }) + "\n");
+  args.stdout(renderInstallSummary({ webappUrl, brains: args.doc.result?.brains }) + "\n");
   args.stdout(
     `${colors.field("Optional local tooling for your coding agent:")}
   \u2022 Talk to your deployed workers from agent sessions (e.g. /ezra) \u2014 install the m8t plugin: guides/install/m8t-plugin.md.
@@ -35410,6 +35457,7 @@ var FAILURE_REASONS = /* @__PURE__ */ new Set([
   "not-connected",
   "not-authorized",
   "mate-unavailable",
+  "mate-ambiguous",
   "busy",
   "bad-request",
   "decision-not-pending"
@@ -35878,12 +35926,10 @@ function decodeAgents(data) {
   return data.agents.filter(isRecord6);
 }
 function resolveAgentName(agents, personaKey) {
-  const matches = agents.filter(
-    (agent) => agent.personaKey === personaKey && isAgentName(agent.name)
-  );
+  const matches = agents.filter((agent) => agent.personaKey === personaKey);
   if (matches.length === 0) return null;
   if (matches.length > 1) {
-    throw new PredispatchFailure("mate-unavailable");
+    throw new PredispatchFailure("mate-ambiguous");
   }
   const match = matches[0];
   if (!isAgentName(match.name)) {
@@ -36152,11 +36198,23 @@ async function rosterCompanions(sink, deps = {}) {
       { personaKey: "startup-advisor", displayName: "Stacey", portraitKey: "stacey" },
       { personaKey: "ezra", displayName: "Ezra", portraitKey: "ezra" }
     ];
+    const faults = [];
     const mates = PRESENTABLE.flatMap((mate) => {
-      const agentName = resolveAgentName(agents, mate.personaKey);
+      let agentName;
+      try {
+        agentName = resolveAgentName(agents, mate.personaKey);
+      } catch (error) {
+        if (!(error instanceof PredispatchFailure)) throw error;
+        faults.push(error.reason);
+        return [];
+      }
       return agentName === null ? [] : [{ ...mate, agentName, activeSince }];
     });
-    if (mates.length === 0) throw new PredispatchFailure("mate-unavailable");
+    if (mates.length === 0) {
+      throw new PredispatchFailure(
+        faults.includes("mate-ambiguous") ? "mate-ambiguous" : "mate-unavailable"
+      );
+    }
     const event = parseEvent({ type: "roster", origin, mates });
     sink(event);
     return event;