@odla-ai/cli 0.12.0 → 0.13.0

package/dist/index.d.cts

@@ -99,8 +99,8 @@ declare function adminAi(options: AdminAiOptions): Promise<void>;
 /** Stable, machine-readable division of work between the CLI, coding agent,
  * human operator, and Studio. Printed by `odla-ai capabilities --json`. */
 declare const CAPABILITIES: {
-    readonly cli: readonly ["start an email-bound device request without accepting a password or user session token", "register the app and enable configured services per environment", "issue, persist, and explicitly rotate configured service credentials", "write local Worker values and push deployed Worker secrets through Wrangler stdin", "store tenant-vault secrets (including the Clerk webhook secret and reserved Clerk secret key) write-only from stdin or an env var", "push db schema/rules and configure platform AI, auth, and deployment links", "apply Google Calendar booking config, then drive state-bound consent, status, discovery, and disconnect flows (bookings run live through the platform proxy)", "validate config offline and smoke-test a provisioned db environment", "run app-attributed hosted security discovery and independent validation without provider keys", "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys", "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"];
-    readonly agent: readonly ["install and import the selected odla SDKs", "wrap the Worker with withObservability and choose useful telemetry", "make application-specific schema, rules, auth, UI, and migration decisions", "wire @odla-ai/calendar into trusted Worker code and keep the app admin key out of browsers"];
+    readonly cli: readonly ["start an email-bound device request without accepting a password or user session token", "register the app and enable configured services per environment", "issue, persist, and explicitly rotate configured service credentials", "write local Worker values and push deployed Worker secrets through Wrangler stdin", "store tenant-vault secrets (including the Clerk webhook secret and reserved Clerk secret key) write-only from stdin or an env var", "compose declared app-capability schema/rules, create guarded seeds when absent, and configure platform AI, auth, and deployment links", "apply Google Calendar booking config, then drive state-bound consent, status, discovery, and disconnect flows (bookings run live through the platform proxy)", "validate integration contracts offline and smoke-test a provisioned db environment plus anonymous capability routes", "run app-attributed hosted security discovery and independent validation without provider keys", "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys", "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"];
+    readonly agent: readonly ["install and import the selected odla SDKs", "wrap the Worker with withObservability and choose useful telemetry", "install capability packages, mount their runtime routes, and make application-specific schema, rules, auth, UI, and migration decisions", "wire @odla-ai/calendar into trusted Worker code and keep the app admin key out of browsers"];
     readonly human: readonly ["provide the existing odla account email, then sign in and explicitly review/approve the exact device code", "review mirrored calendar/attendee disclosure and complete the server-issued Google consent flow", "consent to production changes with --yes", "request destructive credential rotation explicitly", "review application semantics, security findings, releases, and merges", "approve redacted-source disclosure before hosted security reasoning", "approve GitHub App repository access separately from redacted-snippet disclosure"];
     readonly studio: readonly ["view telemetry and environment state", "let signed-in users inventory/revoke their own agent grants and admins audit/global-revoke them", "review calendar connection, granted read scope, selected calendars, and sync health without exposing provider tokens", "perform manual credential recovery when the CLI's local shown-once copy is unavailable", "configure system AI purposes and view app/environment/run-attributed usage", "connect/revoke GitHub security sources and inspect ref-to-SHA jobs, routes, retention, coverage, and normalized reports"];
 };
@@ -195,6 +195,51 @@ type AppRules = Record<string, {
     update?: string;
     delete?: string;
 }>;
+/** One natural-key row the CLI creates only when an integration has not
+ * already been configured. Existing owner-edited rows are never overwritten. */
+interface IntegrationSeed {
+    /** Stable label used in dry-run output and the exactly-once mutation id. */
+    id: string;
+    /** Namespace containing the singleton/seed row. */
+    ns: string;
+    /** Declared-unique natural key used to detect an existing row and prevent
+     * a concurrent create from overwriting it. */
+    key: {
+        attr: string;
+        value: string;
+    };
+    /** Complete initial attributes; the key attribute may be omitted. */
+    attrs: Record<string, unknown>;
+}
+/** One unauthenticated deployed-app check performed by `odla-ai smoke`. */
+interface IntegrationProbe {
+    /** Absolute path beneath the configured environment link. */
+    path: string;
+    /** Expected unauthenticated HTTP status, normally 401. */
+    expectedStatus: number;
+}
+/** Structural, data-only capability descriptor consumed from
+ * `odla.config.mjs`. Capability packages do not depend on the CLI; their
+ * descriptors only need to conform to this shape. */
+interface OdlaIntegration {
+    /** Stable lowercase capability id, unique within one project. */
+    id: string;
+    /** Human-readable capability name for plans and diagnostics. */
+    title: string;
+    /** Package that supplies the capability. */
+    npm: string;
+    /** Serialized odla-db schema fragment merged by namespace. */
+    schema?: {
+        entities: Record<string, unknown>;
+        links?: Record<string, unknown>;
+    };
+    /** Rule fragment merged by namespace. */
+    rules?: AppRules;
+    /** Rows created after schema/rules provisioning only when absent. */
+    seeds?: IntegrationSeed[];
+    /** Read-only unauthenticated checks run against `links.<env>`. */
+    probes?: IntegrationProbe[];
+}
 interface ClerkAuthConfig {
     publishableKey?: string;
     audience?: string;
@@ -237,6 +282,9 @@ interface OdlaProjectConfig {
     };
     envs?: OdlaEnvName[];
     services?: string[];
+    /** App capabilities composed into schema/rules/seeds. Integrations are npm
+     * modules, not hosted platform services, so they do not belong in services. */
+    integrations?: OdlaIntegration[];
     db?: {
         /** Inline SerializedSchema, JSON file, or JS module path exporting default/schema. */
         schema?: unknown;
@@ -345,6 +393,8 @@ interface ProvisionPlan {
     dbEndpoint: string;
     envs: string[];
     services: string[];
+    /** Configured app-capability ids in provisioning order. */
+    integrations: string[];
     hasSchema: boolean;
     hasRules: boolean;
     aiProvider?: string;
@@ -377,13 +427,14 @@ interface DoctorOptions {
 /**
  * Validate and summarize an odla project config entirely offline — no network
  * calls and no file writes. Loads `configPath`, builds the provision plan, and
- * resolves the schema and rules (synthesizing deny-all rules from the schema
- * when `db.rules` is omitted and `db.defaultRules` isn't `false`), then prints a
- * summary line for the app, envs, services, schema entity count, rules namespace
- * count, and AI provider.
+ * resolves and collision-checks app plus integration schema/rules (synthesizing
+ * deny-all rules when `db.rules` is omitted and `db.defaultRules` isn't
+ * `false`), then prints the app, envs, services, integrations, schema entity
+ * count, rules namespace count, and AI provider.
  *
  * It then collects warnings for the mistakes provision can't fix silently: a
- * schema with no entities, a rules namespace with no matching entity, the `ai`
+ * schema with no entities, a rules namespace with no matching entity, an
+ * integration with incomplete rules or a seed targeting an unknown namespace, the `ai`
  * service enabled without an `ai.provider`, `auth.clerk` entries that reference
  * an unset env var (`$FOO`), an `ai.keyEnv` that isn't set (provider key upload
  * will be skipped), and — when `o11y` is enabled — any env whose local
@@ -441,8 +492,9 @@ declare function initProject(options: InitOptions): void;
  * developer token, creates the registry app when absent, enables each service
  * per env (AI also gets `setAi` with the configured provider/model), configures
  * Clerk auth and links, then per env mints or reuses credentials only for the
- * configured services, pushes the schema with the db key and the
- * rules with the developer token, and stores the provider key in the tenant
+ * configured services, collision-checks and merges integration schema/rules,
+ * pushes the composed schema with the db key and rules with the developer
+ * token, creates natural-key integration seeds only when absent, and stores the provider key in the tenant
  * vault when `ai.keyEnv` is set and present. Writes the credentials file
  * (mode 0600, gitignored) and, when requested, `.dev.vars`. Google Calendar
  * consent runs last, per env; when the platform connector itself is not yet
@@ -789,9 +841,10 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  *
  * It then makes real network calls: fetches the registry public-config (and, when
  * `ai.provider` is configured, asserts the live provider matches), fetches the
- * live db schema with the db key and asserts every entity from the local schema
- * is present, and runs a `count` aggregate against the first entity to confirm
- * the db answers queries. Progress lines are printed and it ends with `ok`.
+ * live db schema with the db key and asserts every entity from the composed app
+ * plus integration schema is present, runs a `count` aggregate against the
+ * first entity, and checks each integration's deployed route probe anonymously
+ * against `links.<env>`. Progress lines are printed and it ends with `ok`.
  * Read-only — it writes nothing and throws on the first mismatch or failed
  * request.
  *
@@ -802,4 +855,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };

package/dist/index.d.ts

@@ -99,8 +99,8 @@ declare function adminAi(options: AdminAiOptions): Promise<void>;
 /** Stable, machine-readable division of work between the CLI, coding agent,
  * human operator, and Studio. Printed by `odla-ai capabilities --json`. */
 declare const CAPABILITIES: {
-    readonly cli: readonly ["start an email-bound device request without accepting a password or user session token", "register the app and enable configured services per environment", "issue, persist, and explicitly rotate configured service credentials", "write local Worker values and push deployed Worker secrets through Wrangler stdin", "store tenant-vault secrets (including the Clerk webhook secret and reserved Clerk secret key) write-only from stdin or an env var", "push db schema/rules and configure platform AI, auth, and deployment links", "apply Google Calendar booking config, then drive state-bound consent, status, discovery, and disconnect flows (bookings run live through the platform proxy)", "validate config offline and smoke-test a provisioned db environment", "run app-attributed hosted security discovery and independent validation without provider keys", "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys", "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"];
-    readonly agent: readonly ["install and import the selected odla SDKs", "wrap the Worker with withObservability and choose useful telemetry", "make application-specific schema, rules, auth, UI, and migration decisions", "wire @odla-ai/calendar into trusted Worker code and keep the app admin key out of browsers"];
+    readonly cli: readonly ["start an email-bound device request without accepting a password or user session token", "register the app and enable configured services per environment", "issue, persist, and explicitly rotate configured service credentials", "write local Worker values and push deployed Worker secrets through Wrangler stdin", "store tenant-vault secrets (including the Clerk webhook secret and reserved Clerk secret key) write-only from stdin or an env var", "compose declared app-capability schema/rules, create guarded seeds when absent, and configure platform AI, auth, and deployment links", "apply Google Calendar booking config, then drive state-bound consent, status, discovery, and disconnect flows (bookings run live through the platform proxy)", "validate integration contracts offline and smoke-test a provisioned db environment plus anonymous capability routes", "run app-attributed hosted security discovery and independent validation without provider keys", "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys", "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"];
+    readonly agent: readonly ["install and import the selected odla SDKs", "wrap the Worker with withObservability and choose useful telemetry", "install capability packages, mount their runtime routes, and make application-specific schema, rules, auth, UI, and migration decisions", "wire @odla-ai/calendar into trusted Worker code and keep the app admin key out of browsers"];
     readonly human: readonly ["provide the existing odla account email, then sign in and explicitly review/approve the exact device code", "review mirrored calendar/attendee disclosure and complete the server-issued Google consent flow", "consent to production changes with --yes", "request destructive credential rotation explicitly", "review application semantics, security findings, releases, and merges", "approve redacted-source disclosure before hosted security reasoning", "approve GitHub App repository access separately from redacted-snippet disclosure"];
     readonly studio: readonly ["view telemetry and environment state", "let signed-in users inventory/revoke their own agent grants and admins audit/global-revoke them", "review calendar connection, granted read scope, selected calendars, and sync health without exposing provider tokens", "perform manual credential recovery when the CLI's local shown-once copy is unavailable", "configure system AI purposes and view app/environment/run-attributed usage", "connect/revoke GitHub security sources and inspect ref-to-SHA jobs, routes, retention, coverage, and normalized reports"];
 };
@@ -195,6 +195,51 @@ type AppRules = Record<string, {
     update?: string;
     delete?: string;
 }>;
+/** One natural-key row the CLI creates only when an integration has not
+ * already been configured. Existing owner-edited rows are never overwritten. */
+interface IntegrationSeed {
+    /** Stable label used in dry-run output and the exactly-once mutation id. */
+    id: string;
+    /** Namespace containing the singleton/seed row. */
+    ns: string;
+    /** Declared-unique natural key used to detect an existing row and prevent
+     * a concurrent create from overwriting it. */
+    key: {
+        attr: string;
+        value: string;
+    };
+    /** Complete initial attributes; the key attribute may be omitted. */
+    attrs: Record<string, unknown>;
+}
+/** One unauthenticated deployed-app check performed by `odla-ai smoke`. */
+interface IntegrationProbe {
+    /** Absolute path beneath the configured environment link. */
+    path: string;
+    /** Expected unauthenticated HTTP status, normally 401. */
+    expectedStatus: number;
+}
+/** Structural, data-only capability descriptor consumed from
+ * `odla.config.mjs`. Capability packages do not depend on the CLI; their
+ * descriptors only need to conform to this shape. */
+interface OdlaIntegration {
+    /** Stable lowercase capability id, unique within one project. */
+    id: string;
+    /** Human-readable capability name for plans and diagnostics. */
+    title: string;
+    /** Package that supplies the capability. */
+    npm: string;
+    /** Serialized odla-db schema fragment merged by namespace. */
+    schema?: {
+        entities: Record<string, unknown>;
+        links?: Record<string, unknown>;
+    };
+    /** Rule fragment merged by namespace. */
+    rules?: AppRules;
+    /** Rows created after schema/rules provisioning only when absent. */
+    seeds?: IntegrationSeed[];
+    /** Read-only unauthenticated checks run against `links.<env>`. */
+    probes?: IntegrationProbe[];
+}
 interface ClerkAuthConfig {
     publishableKey?: string;
     audience?: string;
@@ -237,6 +282,9 @@ interface OdlaProjectConfig {
     };
     envs?: OdlaEnvName[];
     services?: string[];
+    /** App capabilities composed into schema/rules/seeds. Integrations are npm
+     * modules, not hosted platform services, so they do not belong in services. */
+    integrations?: OdlaIntegration[];
     db?: {
         /** Inline SerializedSchema, JSON file, or JS module path exporting default/schema. */
         schema?: unknown;
@@ -345,6 +393,8 @@ interface ProvisionPlan {
     dbEndpoint: string;
     envs: string[];
     services: string[];
+    /** Configured app-capability ids in provisioning order. */
+    integrations: string[];
     hasSchema: boolean;
     hasRules: boolean;
     aiProvider?: string;
@@ -377,13 +427,14 @@ interface DoctorOptions {
 /**
  * Validate and summarize an odla project config entirely offline — no network
  * calls and no file writes. Loads `configPath`, builds the provision plan, and
- * resolves the schema and rules (synthesizing deny-all rules from the schema
- * when `db.rules` is omitted and `db.defaultRules` isn't `false`), then prints a
- * summary line for the app, envs, services, schema entity count, rules namespace
- * count, and AI provider.
+ * resolves and collision-checks app plus integration schema/rules (synthesizing
+ * deny-all rules when `db.rules` is omitted and `db.defaultRules` isn't
+ * `false`), then prints the app, envs, services, integrations, schema entity
+ * count, rules namespace count, and AI provider.
  *
  * It then collects warnings for the mistakes provision can't fix silently: a
- * schema with no entities, a rules namespace with no matching entity, the `ai`
+ * schema with no entities, a rules namespace with no matching entity, an
+ * integration with incomplete rules or a seed targeting an unknown namespace, the `ai`
  * service enabled without an `ai.provider`, `auth.clerk` entries that reference
  * an unset env var (`$FOO`), an `ai.keyEnv` that isn't set (provider key upload
  * will be skipped), and — when `o11y` is enabled — any env whose local
@@ -441,8 +492,9 @@ declare function initProject(options: InitOptions): void;
  * developer token, creates the registry app when absent, enables each service
  * per env (AI also gets `setAi` with the configured provider/model), configures
  * Clerk auth and links, then per env mints or reuses credentials only for the
- * configured services, pushes the schema with the db key and the
- * rules with the developer token, and stores the provider key in the tenant
+ * configured services, collision-checks and merges integration schema/rules,
+ * pushes the composed schema with the db key and rules with the developer
+ * token, creates natural-key integration seeds only when absent, and stores the provider key in the tenant
  * vault when `ai.keyEnv` is set and present. Writes the credentials file
  * (mode 0600, gitignored) and, when requested, `.dev.vars`. Google Calendar
  * consent runs last, per env; when the platform connector itself is not yet
@@ -789,9 +841,10 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  *
  * It then makes real network calls: fetches the registry public-config (and, when
  * `ai.provider` is configured, asserts the live provider matches), fetches the
- * live db schema with the db key and asserts every entity from the local schema
- * is present, and runs a `count` aggregate against the first entity to confirm
- * the db answers queries. Progress lines are printed and it ends with `ok`.
+ * live db schema with the db key and asserts every entity from the composed app
+ * plus integration schema is present, runs a `count` aggregate against the
+ * first entity, and checks each integration's deployed route probe anonymously
+ * against `links.<env>`. Progress lines are printed and it ends with `ok`.
  * Read-only — it writes nothing and throws on the first mismatch or failed
  * request.
  *
@@ -802,4 +855,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };

package/dist/index.js

@@ -38,7 +38,7 @@ import {
   secretsSetClerkKey,
   smoke,
   startHostedSecurityJob
-} from "./chunk-Y4HWUEFF.js";
+} from "./chunk-I7XDJZB6.js";
 export {
   AGENT_HARNESSES,
   CAPABILITIES,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odla-ai/cli",
-  "version": "0.12.0",
+  "version": "0.13.0",
   "description": "Agent-operable CLI for odla provisioning, calendar consent and sync lifecycle, System AI administration, Worker secrets, security jobs, and smoke checks.",
   "license": "MIT",
   "homepage": "https://odla.ai/docs/packages/cli",

package/skills/odla/SKILL.md

@@ -102,7 +102,8 @@ guessing which platform/credential steps need manual work. Then:
    persisted, so once the human approves, re-run the same command and it
    resumes the same code and collects the token. It creates the app,
    enables services, issues or reuses configured credentials (db key + o11y
-   ingest token when enabled), pushes schema + rules, writes `.dev.vars`, and
+   ingest token when enabled), composes declared integration schema/rules and
+   guarded seeds, writes `.dev.vars`, and
    transfers Worker secrets through Wrangler stdin. With calendar enabled it
    then prints a second, server-issued Google URL; the human grants booking
    consent in a browser and the connection is immediately live — nothing
@@ -134,8 +135,9 @@ requires `--yes` and removes only this connection's sealed grant — Google
 keeps every booked event.
 
 The CLI owns deterministic platform work from `odla.config.mjs`: service
-enablement, credential issuance/storage, `.dev.vars`, and Wrangler secret
-transfer. You own source changes — install `@odla-ai/o11y`, add
+enablement, integration schema/rules/seeds, credential issuance/storage,
+`.dev.vars`, and Wrangler secret transfer. You own source changes — install
+runtime capability packages, mount their routes, supply authorization, add
 `withObservability`, create the Wrangler config, and choose application-specific
 signals. The human owns device approval, production consent, and explicit
 destructive rotation. If an

package/skills/odla/references/build.md

@@ -15,6 +15,12 @@ deny-all rules from the schema. To turn on auth/observability, add `"o11y"` to
 `services` and an `auth.clerk` block in `odla.config.mjs` (init leaves it
 commented).
 
+For an npm app capability such as `@odla-ai/crm`, import its data-only
+descriptor into `odla.config.mjs` and add it under `integrations`; do not add
+the capability id to `services`. Provision collision-checks and merges its
+schema/rules, creates guarded seeds only when absent, and leaves runtime package
+installation and route mounting to the source step.
+
 For Google Calendar booking, include both `"db"` and `"calendar"`. Configure
 `calendar.google.availabilityCalendars` for every env (start with
 `"primary"`; 1–10 per env) and optionally `bookingCalendar` (defaults to the
@@ -50,10 +56,11 @@ Prints a short device code and a link. ⏸ That same account opens the link, sig
 in, explicitly reviews the exact code, and approves it — loading the URL alone
 does not claim access, and no secret passes through the chat. Provision then:
 creates the app, enables its services, issues or reuses the db key (and the
-o11y ingest token when o11y is enabled), pushes schema + rules, writes
+o11y ingest token when o11y is enabled), pushes the composed app + integration
+schema/rules, creates missing guarded seeds, writes
 `.dev.vars`, and transfers configured Worker secrets through Wrangler stdin.
 Local credential files are `0600` and gitignored. Verify with
-`npx @odla-ai/cli doctor` — it prints the app, envs, services, and flags
+`npx @odla-ai/cli doctor` — it prints the app, envs, services, integrations, and flags
 anything unset. `--push-secrets` preflights the Wrangler config and login before
 issuing or rotating a shown-once credential.
 

package/skills/odla/references/sdks.md

@@ -83,6 +83,31 @@ await ai.chat({ messages }); // provider/model + key resolved from the platform
 No API key in your code or env — it lives in the tenant vault; `provision`
 stores it when the configured `ai.keyEnv` is set at provision time.
 
+## @odla-ai/crm — records, pipelines, follow-ups, and contactability
+
+Define the CRM once in an app module, mount `createCrmRoutes` in trusted Worker
+code behind the app's admin authorization, and render the optional admin kit
+from `@odla-ai/crm/ui`. Declare `createCrmIntegration(crm, options)` under
+`odla.config.mjs` `integrations`—never under `services`.
+
+```ts
+import { createCrmIntegration } from "@odla-ai/crm";
+import { crm } from "./src/crm.js";
+
+export default {
+  app: { id: "my-app", name: "My App" },
+  services: ["db"],
+  integrations: [createCrmIntegration(crm, { basePath: "/api/crm" })],
+  links: { dev: "https://dev.example.com" },
+};
+```
+
+Provision merges the CRM schema/rules and creates `crm_config` only when
+absent. Doctor checks the composed contract offline; smoke calls the records
+route anonymously and requires `401`. The CLI does not edit the Worker or
+invent `authorize`. Billing is an optional injected `BillingProvider`; reuse
+app-owned payment code when present rather than assuming another package.
+
 ## @odla-ai/o11y — observability (Cloudflare Workers)
 
 ```ts

package/skills/odla-migrate/references/phase-2-db.md

@@ -11,8 +11,8 @@ opens the review page in interactive terminals; loading it alone is inert.
 
 ## Steps
 
-1. Require `npm view @odla-ai/cli@0.10.2 version` to succeed, then run
-   `npm i -D --save-exact @odla-ai/cli@0.10.2` and `npm i @odla-ai/db`.
+1. Require `npm view @odla-ai/cli@0.13.0 version` to succeed, then run
+   `npm i -D --save-exact @odla-ai/cli@0.13.0` and `npm i @odla-ai/db`.
 2. `npx @odla-ai/cli init --app-id <id> --name "<Name>" --env dev --services db`
    Review `odla.config.mjs`. Keep `envs: ["dev"]` — prod is Phase 5. Set
    `links.dev` to the URL the Phase 1 `wrangler deploy` **actually printed** —