@odla-ai/cli 0.10.1 → 0.11.0

package/README.md

@@ -29,8 +29,8 @@ For a project you keep working in, install it as a dev dependency so the
 shorter `npx odla-ai` form works and the version is pinned by your lockfile:
 
 ```bash
-npm view @odla-ai/cli@0.10.1 version
-npm i -D --save-exact @odla-ai/cli@0.10.1
+npm view @odla-ai/cli@0.10.2 version
+npm i -D --save-exact @odla-ai/cli@0.10.2
 ```
 
 ## Prerequisites
@@ -215,7 +215,7 @@ mutation-id control. Public health remains aggregate rather than per calendar.
 
 The bundled build/migration skills add a passive pre-ship gate with
 `@odla-ai/security`: after the exact-version availability check, run
-`npm i -D --save-exact @odla-ai/security@0.2.2`, then
+`npm i -D --save-exact @odla-ai/security@0.3.1`, then
 `npx odla-security scan . --profile odla --out .odla/security/pre-ship --fail-on high --fail-on-candidates critical`.
 The passive scan remains a separate binary: it makes no model calls and does
 not execute target code. After explicit redacted-source approval,
@@ -240,7 +240,7 @@ carries a bounded `Retry-After` only when the upstream supplied one. The CLI
 does not echo arbitrary response text or silently change the admin-selected
 model.
 Before installing the exact release, require
-`npm view @odla-ai/security@0.2.2 version` to succeed before installation. An
+`npm view @odla-ai/security@0.3.1 version` to succeed before installation. An
 exact-version `E404` means the release is unavailable, not that the security
 preflight passed, and does not prove the package name is absent. odla's own
 engineering environment uses an equivalent internal gate; customer projects

package/REQUIREMENTS.md

@@ -97,4 +97,6 @@ Agnacl, but none should mention or special-case Agnacl.
 - Every command must produce machine-readable enough output for an LLM to decide
   the next action from stdout alone.
 - Failures should name the exact config key or external capability missing.
-- The package must ship `llms.txt` so agents can use it without reading source.
+- The package must ship its offline skills and README so agents have the
+  operational contract without reading private source; exported TypeScript
+  declarations/JSDoc remain the version-matched programmatic reference.

package/dist/bin.cjs

@@ -1084,6 +1084,28 @@ function unique(values) {
   return [...new Set(values.filter(Boolean))];
 }
 
+// src/calendar-errors.ts
+var PLATFORM_NOT_READY_CODES = /* @__PURE__ */ new Set([
+  "calendar_google_oauth_not_configured",
+  "calendar_token_vault_not_configured",
+  "calendar_db_ingress_not_configured"
+]);
+var CalendarRequestError = class extends Error {
+  /** HTTP status returned by the registry. */
+  status;
+  /** Machine-readable `error.code` from the response body, when present. */
+  code;
+  constructor(message, status, code) {
+    super(message);
+    this.name = "CalendarRequestError";
+    this.status = status;
+    if (code !== void 0) this.code = code;
+  }
+};
+function isCalendarPlatformNotReady(error) {
+  return error instanceof CalendarRequestError && error.code !== void 0 && PLATFORM_NOT_READY_CODES.has(error.code);
+}
+
 // src/redact.ts
 var REPLACEMENTS = [
   [/odla_(sk|dev)_[A-Za-z0-9._-]+/g, "odla_$1_[redacted]"],
@@ -1249,7 +1271,8 @@ async function calendarJson(ctx, suffix, init) {
   if (!response.ok) {
     const code = textField(body.error?.code, 128);
     const message = textField(body.error?.message, 500);
-    throw new Error(redactSecrets(`calendar request failed (${response.status})${code ? ` ${code}` : ""}${message ? `: ${message}` : ""}`));
+    const detail = `${code ? ` ${code}` : ""}${message ? `: ${message}` : ""}`;
+    throw new CalendarRequestError(redactSecrets(`calendar request failed (${response.status})${detail}`), response.status, code);
   }
   return body;
 }
@@ -2300,17 +2323,6 @@ async function provision(options) {
     if (cfg.services.includes("calendar")) {
       const calendarCtx = { platform: cfg.platformUrl, appId: cfg.app.id, env, token, fetch: doFetch };
       await applyCalendarBookingPage(calendarCtx, calendarBookingPageUrl(cfg, env), out);
-      await ensureCalendarConnected(
-        calendarCtx,
-        {
-          open: options.open,
-          interactive: options.interactive,
-          openConsentUrl: options.openApprovalUrl,
-          wait: options.calendarPollWait,
-          pollTimeoutMs: options.calendarPollTimeoutMs,
-          stdout: out
-        }
-      );
     }
   }
   for (const env of cfg.envs) {
@@ -2374,6 +2386,26 @@ ${env}: credentials are already saved; retry "odla-ai secrets push --env ${env}$
     writeDevVars(devVarsTarget, credentials, env, o11yDevVars(cfg));
     out.log(`dev vars: wrote ${displayPath(devVarsTarget, cfg.rootDir)} for ${env}`);
   }
+  if (cfg.services.includes("calendar")) {
+    for (const env of cfg.envs) {
+      try {
+        await ensureCalendarConnected(
+          { platform: cfg.platformUrl, appId: cfg.app.id, env, token, fetch: doFetch },
+          {
+            open: options.open,
+            interactive: options.interactive,
+            openConsentUrl: options.openApprovalUrl,
+            wait: options.calendarPollWait,
+            pollTimeoutMs: options.calendarPollTimeoutMs,
+            stdout: out
+          }
+        );
+      } catch (error) {
+        if (!isCalendarPlatformNotReady(error)) throw error;
+        out.log(`${env}: calendar consent skipped (${error.code}); resume with "odla-ai calendar connect --env ${env}" once the platform is configured`);
+      }
+    }
+  }
 }
 function serviceRank(service) {
   if (service === "db") return 0;