@odla-ai/cli 0.17.1 → 0.19.0

package/dist/index.d.cts

@@ -3,7 +3,7 @@ import { HostedSecurityJob, GitHubConnectionStatus, GitHubSecuritySource, Hosted
 export { GitHubConnectionAttempt, GitHubConnectionStatus, GitHubSecuritySource, HostedSecurityCounts, HostedSecurityCoverage, HostedSecurityIntent, HostedSecurityIntentResponse, HostedSecurityJob, HostedSecurityJobStatus, HostedSecurityPlan, HostedSecurityPlanRoute, HostedSecurityReport, HostedSecurityReportFinding, HostedSecurityRoute } from '@odla-ai/security/hosted';
 
 /** One exact platform scope obtainable through the admin device flow. */
-type ScopedPlatformScope = "platform:ai:policy:read" | "platform:ai:policy:write" | "platform:ai:credential:read" | "platform:ai:credential:write" | "platform:ai:usage:read" | "platform:ai:audit:read" | "app:code:host:connect" | "platform:code:host:connect" | "platform:security:self";
+type ScopedPlatformScope = "platform:ai:policy:read" | "platform:ai:policy:write" | "platform:ai:credential:read" | "platform:ai:credential:write" | "platform:ai:usage:read" | "platform:ai:audit:read" | "app:code:host:connect" | "platform:code:host:connect" | "platform:security:self" | "platform:runbook:write";
 /** Inputs for obtaining one short-lived, exact-scope platform device grant. */
 interface ScopedPlatformTokenOptions {
     platform: string;
@@ -15,6 +15,15 @@ interface ScopedPlatformTokenOptions {
     stdout?: Pick<typeof console, "log">;
     openApprovalUrl?: (url: string) => Promise<void>;
     tokenFile?: string;
+    /**
+     * Project root the grant cache hangs off, mirroring how the developer token
+     * resolves `.odla/dev-token.json` against the loaded config's `rootDir`.
+     * Callers with a project should pass `cfg.rootDir`: without it the cache
+     * follows the shell's working directory rather than the project, so the same
+     * command run from a subdirectory reads a different cache — and writes a
+     * credential file wherever it happened to be standing.
+     */
+    rootDir?: string;
     /** Keep the shown-once grant only in memory. */
     cache?: boolean;
     /** Human-visible purpose recorded on the exact handshake. */
@@ -165,6 +174,9 @@ interface CliDependencies {
     confirm?: (message: string) => Promise<boolean>;
     stdout?: Pick<typeof console, "log" | "error">;
     codeConnect?: (options: CodeConnectOptions) => Promise<void>;
+    /** Runs git in the working directory; injected so `runbook impact` can be
+     * driven over a fixed diff instead of whatever the checkout happens to be. */
+    runGit?: (args: string[]) => string;
 }
 /**
  * Parse CLI arguments and dispatch the matching odla command.
@@ -180,7 +192,7 @@ interface CliDependencies {
 declare function runCli(argv?: string[], dependencies?: CliDependencies): Promise<void>;
 
 /** Hosted platform purposes whose provider, model, and budgets an admin may route. */
-declare const SYSTEM_AI_PURPOSES: readonly ["o11y.triage", "security.discovery", "security.validation"];
+declare const SYSTEM_AI_PURPOSES: readonly ["o11y.triage", "security.discovery", "security.validation", "runbook.answer"];
 /** One catalog-validated, platform-funded System AI purpose. */
 type SystemAiPurpose = (typeof SYSTEM_AI_PURPOSES)[number];
 
@@ -242,6 +254,46 @@ type Output = Pick<typeof console, "log">;
 /** Print the stable responsibility boundary for humans or agent tooling. */
 declare function printCapabilities(json?: boolean, out?: Output): void;
 
+/** A node in the invocation tree. An empty node is a leaf: everything after it
+ * is arguments, not sub-actions, and is not validated here. */
+interface SurfaceNode {
+    readonly [word: string]: SurfaceNode;
+}
+/**
+ * Every invocation the CLI dispatches, as a tree of words.
+ *
+ * Keyed by the word at that position; the value is what may follow it. A leaf
+ * (`{}`) means the command takes arguments from there on, so `odla-ai runbook
+ * get release` validates `runbook get` and leaves `release` alone.
+ */
+declare const COMMAND_SURFACE: SurfaceNode;
+/** The words accepted at a path, sorted for stable messages. */
+declare function acceptedAfter(path: readonly string[]): string[];
+/** One rejected invocation: where it went wrong and what was accepted there. */
+interface InvocationProblem {
+    /** The words that were valid, joined — `runbook` for `runbook imapct`. */
+    validPrefix: string;
+    /** The word that was not accepted. */
+    word: string;
+    /** What could have appeared instead. */
+    accepted: string[];
+}
+/**
+ * Check an invocation's words against the surface.
+ *
+ * Returns null when the words name a real command path. Validation stops at the
+ * first leaf — arguments are not sub-actions — so an unknown *argument* is never
+ * reported as an unknown command.
+ */
+declare function validateInvocation(words: readonly string[]): InvocationProblem | null;
+/** Render a problem as the sentence a dispatcher throws, so the message a user
+ * sees and the message a gate prints come from the same place. */
+declare function describeProblem(problem: InvocationProblem): string;
+/** Every complete path through the surface, as word arrays. Used by the test
+ * that drives each one through the real dispatcher, and by the published-surface
+ * gate to know what a version is expected to carry. */
+declare function surfacePaths(node?: SurfaceNode, prefix?: readonly string[]): string[][];
+
 declare const CALENDAR_STATES: readonly ["not_connected", "authorizing", "healthy", "degraded", "disconnected", "failed"];
 /** Connection lifecycle reported by the registry; mirrors the platform's
  * calendar states. `degraded` means connected but re-consent is required. */
@@ -990,4 +1042,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, COMMAND_SURFACE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type InvocationProblem, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SurfaceNode, type SystemAiPurpose, acceptedAfter, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, describeProblem, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob, surfacePaths, validateInvocation };

package/dist/index.d.ts

@@ -3,7 +3,7 @@ import { HostedSecurityJob, GitHubConnectionStatus, GitHubSecuritySource, Hosted
 export { GitHubConnectionAttempt, GitHubConnectionStatus, GitHubSecuritySource, HostedSecurityCounts, HostedSecurityCoverage, HostedSecurityIntent, HostedSecurityIntentResponse, HostedSecurityJob, HostedSecurityJobStatus, HostedSecurityPlan, HostedSecurityPlanRoute, HostedSecurityReport, HostedSecurityReportFinding, HostedSecurityRoute } from '@odla-ai/security/hosted';
 
 /** One exact platform scope obtainable through the admin device flow. */
-type ScopedPlatformScope = "platform:ai:policy:read" | "platform:ai:policy:write" | "platform:ai:credential:read" | "platform:ai:credential:write" | "platform:ai:usage:read" | "platform:ai:audit:read" | "app:code:host:connect" | "platform:code:host:connect" | "platform:security:self";
+type ScopedPlatformScope = "platform:ai:policy:read" | "platform:ai:policy:write" | "platform:ai:credential:read" | "platform:ai:credential:write" | "platform:ai:usage:read" | "platform:ai:audit:read" | "app:code:host:connect" | "platform:code:host:connect" | "platform:security:self" | "platform:runbook:write";
 /** Inputs for obtaining one short-lived, exact-scope platform device grant. */
 interface ScopedPlatformTokenOptions {
     platform: string;
@@ -15,6 +15,15 @@ interface ScopedPlatformTokenOptions {
     stdout?: Pick<typeof console, "log">;
     openApprovalUrl?: (url: string) => Promise<void>;
     tokenFile?: string;
+    /**
+     * Project root the grant cache hangs off, mirroring how the developer token
+     * resolves `.odla/dev-token.json` against the loaded config's `rootDir`.
+     * Callers with a project should pass `cfg.rootDir`: without it the cache
+     * follows the shell's working directory rather than the project, so the same
+     * command run from a subdirectory reads a different cache — and writes a
+     * credential file wherever it happened to be standing.
+     */
+    rootDir?: string;
     /** Keep the shown-once grant only in memory. */
     cache?: boolean;
     /** Human-visible purpose recorded on the exact handshake. */
@@ -165,6 +174,9 @@ interface CliDependencies {
     confirm?: (message: string) => Promise<boolean>;
     stdout?: Pick<typeof console, "log" | "error">;
     codeConnect?: (options: CodeConnectOptions) => Promise<void>;
+    /** Runs git in the working directory; injected so `runbook impact` can be
+     * driven over a fixed diff instead of whatever the checkout happens to be. */
+    runGit?: (args: string[]) => string;
 }
 /**
  * Parse CLI arguments and dispatch the matching odla command.
@@ -180,7 +192,7 @@ interface CliDependencies {
 declare function runCli(argv?: string[], dependencies?: CliDependencies): Promise<void>;
 
 /** Hosted platform purposes whose provider, model, and budgets an admin may route. */
-declare const SYSTEM_AI_PURPOSES: readonly ["o11y.triage", "security.discovery", "security.validation"];
+declare const SYSTEM_AI_PURPOSES: readonly ["o11y.triage", "security.discovery", "security.validation", "runbook.answer"];
 /** One catalog-validated, platform-funded System AI purpose. */
 type SystemAiPurpose = (typeof SYSTEM_AI_PURPOSES)[number];
 
@@ -242,6 +254,46 @@ type Output = Pick<typeof console, "log">;
 /** Print the stable responsibility boundary for humans or agent tooling. */
 declare function printCapabilities(json?: boolean, out?: Output): void;
 
+/** A node in the invocation tree. An empty node is a leaf: everything after it
+ * is arguments, not sub-actions, and is not validated here. */
+interface SurfaceNode {
+    readonly [word: string]: SurfaceNode;
+}
+/**
+ * Every invocation the CLI dispatches, as a tree of words.
+ *
+ * Keyed by the word at that position; the value is what may follow it. A leaf
+ * (`{}`) means the command takes arguments from there on, so `odla-ai runbook
+ * get release` validates `runbook get` and leaves `release` alone.
+ */
+declare const COMMAND_SURFACE: SurfaceNode;
+/** The words accepted at a path, sorted for stable messages. */
+declare function acceptedAfter(path: readonly string[]): string[];
+/** One rejected invocation: where it went wrong and what was accepted there. */
+interface InvocationProblem {
+    /** The words that were valid, joined — `runbook` for `runbook imapct`. */
+    validPrefix: string;
+    /** The word that was not accepted. */
+    word: string;
+    /** What could have appeared instead. */
+    accepted: string[];
+}
+/**
+ * Check an invocation's words against the surface.
+ *
+ * Returns null when the words name a real command path. Validation stops at the
+ * first leaf — arguments are not sub-actions — so an unknown *argument* is never
+ * reported as an unknown command.
+ */
+declare function validateInvocation(words: readonly string[]): InvocationProblem | null;
+/** Render a problem as the sentence a dispatcher throws, so the message a user
+ * sees and the message a gate prints come from the same place. */
+declare function describeProblem(problem: InvocationProblem): string;
+/** Every complete path through the surface, as word arrays. Used by the test
+ * that drives each one through the real dispatcher, and by the published-surface
+ * gate to know what a version is expected to carry. */
+declare function surfacePaths(node?: SurfaceNode, prefix?: readonly string[]): string[][];
+
 declare const CALENDAR_STATES: readonly ["not_connected", "authorizing", "healthy", "degraded", "disconnected", "failed"];
 /** Connection lifecycle reported by the registry; mirrors the platform's
  * calendar states. `degraded` means connected but re-consent is required. */
@@ -990,4 +1042,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, COMMAND_SURFACE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type InvocationProblem, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SurfaceNode, type SystemAiPurpose, acceptedAfter, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, describeProblem, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob, surfacePaths, validateInvocation };

package/dist/index.js

@@ -4,8 +4,10 @@ import {
   CAPABILITIES,
   CODE_BUILD_RECIPES,
   CODE_PI_IMAGE,
+  COMMAND_SURFACE,
   GOOGLE_CALENDAR_EVENTS_SCOPE,
   SYSTEM_AI_PURPOSES,
+  acceptedAfter,
   adminAi,
   calendarBookingPageUrl,
   calendarCalendars,
@@ -15,6 +17,7 @@ import {
   calendarStatus,
   codeConnect,
   connectGitHubSecuritySource,
+  describeProblem,
   disconnectGitHubSecuritySource,
   doctor,
   exitCodeFor,
@@ -42,15 +45,19 @@ import {
   secretsSet,
   secretsSetClerkKey,
   smoke,
-  startHostedSecurityJob
-} from "./chunk-2UKO2NED.js";
+  startHostedSecurityJob,
+  surfacePaths,
+  validateInvocation
+} from "./chunk-QMA5OGKQ.js";
 export {
   AGENT_HARNESSES,
   CAPABILITIES,
   CODE_BUILD_RECIPES,
   CODE_PI_IMAGE,
+  COMMAND_SURFACE,
   GOOGLE_CALENDAR_EVENTS_SCOPE,
   SYSTEM_AI_PURPOSES,
+  acceptedAfter,
   adminAi,
   calendarBookingPageUrl,
   calendarCalendars,
@@ -60,6 +67,7 @@ export {
   calendarStatus,
   codeConnect,
   connectGitHubSecuritySource,
+  describeProblem,
   disconnectGitHubSecuritySource,
   doctor,
   exitCodeFor,
@@ -87,6 +95,8 @@ export {
   secretsSet,
   secretsSetClerkKey,
   smoke,
-  startHostedSecurityJob
+  startHostedSecurityJob,
+  surfacePaths,
+  validateInvocation
 };
 //# sourceMappingURL=index.js.map