@odla-ai/cli 0.18.0 → 0.20.0

package/dist/index.d.cts

@@ -254,6 +254,46 @@ type Output = Pick<typeof console, "log">;
 /** Print the stable responsibility boundary for humans or agent tooling. */
 declare function printCapabilities(json?: boolean, out?: Output): void;
 
+/** A node in the invocation tree. An empty node is a leaf: everything after it
+ * is arguments, not sub-actions, and is not validated here. */
+interface SurfaceNode {
+    readonly [word: string]: SurfaceNode;
+}
+/**
+ * Every invocation the CLI dispatches, as a tree of words.
+ *
+ * Keyed by the word at that position; the value is what may follow it. A leaf
+ * (`{}`) means the command takes arguments from there on, so `odla-ai runbook
+ * get release` validates `runbook get` and leaves `release` alone.
+ */
+declare const COMMAND_SURFACE: SurfaceNode;
+/** The words accepted at a path, sorted for stable messages. */
+declare function acceptedAfter(path: readonly string[]): string[];
+/** One rejected invocation: where it went wrong and what was accepted there. */
+interface InvocationProblem {
+    /** The words that were valid, joined — `runbook` for `runbook imapct`. */
+    validPrefix: string;
+    /** The word that was not accepted. */
+    word: string;
+    /** What could have appeared instead. */
+    accepted: string[];
+}
+/**
+ * Check an invocation's words against the surface.
+ *
+ * Returns null when the words name a real command path. Validation stops at the
+ * first leaf — arguments are not sub-actions — so an unknown *argument* is never
+ * reported as an unknown command.
+ */
+declare function validateInvocation(words: readonly string[]): InvocationProblem | null;
+/** Render a problem as the sentence a dispatcher throws, so the message a user
+ * sees and the message a gate prints come from the same place. */
+declare function describeProblem(problem: InvocationProblem): string;
+/** Every complete path through the surface, as word arrays. Used by the test
+ * that drives each one through the real dispatcher, and by the published-surface
+ * gate to know what a version is expected to carry. */
+declare function surfacePaths(node?: SurfaceNode, prefix?: readonly string[]): string[][];
+
 declare const CALENDAR_STATES: readonly ["not_connected", "authorizing", "healthy", "degraded", "disconnected", "failed"];
 /** Connection lifecycle reported by the registry; mirrors the platform's
  * calendar states. `degraded` means connected but re-consent is required. */
@@ -1002,4 +1042,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, COMMAND_SURFACE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type InvocationProblem, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SurfaceNode, type SystemAiPurpose, acceptedAfter, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, describeProblem, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob, surfacePaths, validateInvocation };

package/dist/index.d.ts

@@ -254,6 +254,46 @@ type Output = Pick<typeof console, "log">;
 /** Print the stable responsibility boundary for humans or agent tooling. */
 declare function printCapabilities(json?: boolean, out?: Output): void;
 
+/** A node in the invocation tree. An empty node is a leaf: everything after it
+ * is arguments, not sub-actions, and is not validated here. */
+interface SurfaceNode {
+    readonly [word: string]: SurfaceNode;
+}
+/**
+ * Every invocation the CLI dispatches, as a tree of words.
+ *
+ * Keyed by the word at that position; the value is what may follow it. A leaf
+ * (`{}`) means the command takes arguments from there on, so `odla-ai runbook
+ * get release` validates `runbook get` and leaves `release` alone.
+ */
+declare const COMMAND_SURFACE: SurfaceNode;
+/** The words accepted at a path, sorted for stable messages. */
+declare function acceptedAfter(path: readonly string[]): string[];
+/** One rejected invocation: where it went wrong and what was accepted there. */
+interface InvocationProblem {
+    /** The words that were valid, joined — `runbook` for `runbook imapct`. */
+    validPrefix: string;
+    /** The word that was not accepted. */
+    word: string;
+    /** What could have appeared instead. */
+    accepted: string[];
+}
+/**
+ * Check an invocation's words against the surface.
+ *
+ * Returns null when the words name a real command path. Validation stops at the
+ * first leaf — arguments are not sub-actions — so an unknown *argument* is never
+ * reported as an unknown command.
+ */
+declare function validateInvocation(words: readonly string[]): InvocationProblem | null;
+/** Render a problem as the sentence a dispatcher throws, so the message a user
+ * sees and the message a gate prints come from the same place. */
+declare function describeProblem(problem: InvocationProblem): string;
+/** Every complete path through the surface, as word arrays. Used by the test
+ * that drives each one through the real dispatcher, and by the published-surface
+ * gate to know what a version is expected to carry. */
+declare function surfacePaths(node?: SurfaceNode, prefix?: readonly string[]): string[][];
+
 declare const CALENDAR_STATES: readonly ["not_connected", "authorizing", "healthy", "degraded", "disconnected", "failed"];
 /** Connection lifecycle reported by the registry; mirrors the platform's
  * calendar states. `degraded` means connected but re-consent is required. */
@@ -1002,4 +1042,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, CODE_BUILD_RECIPES, CODE_PI_IMAGE, COMMAND_SURFACE, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type CodeBuildRule, type CodeConnectOptions, type CodeContainerEngine, type CodeHostCapabilities, type CodeLocalSourceDescriptor, type CodeRuntimeInput, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_EVENTS_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type IntegrationProbe, type IntegrationSeed, type InvocationProblem, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaIntegration, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SurfaceNode, type SystemAiPurpose, acceptedAfter, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarServiceConfig, calendarStatus, codeConnect, connectGitHubSecuritySource, describeProblem, disconnectGitHubSecuritySource, doctor, exitCodeFor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, prepareCodeImages, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runCodeRuntime, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob, surfacePaths, validateInvocation };

package/dist/index.js

@@ -4,8 +4,10 @@ import {
   CAPABILITIES,
   CODE_BUILD_RECIPES,
   CODE_PI_IMAGE,
+  COMMAND_SURFACE,
   GOOGLE_CALENDAR_EVENTS_SCOPE,
   SYSTEM_AI_PURPOSES,
+  acceptedAfter,
   adminAi,
   calendarBookingPageUrl,
   calendarCalendars,
@@ -15,6 +17,7 @@ import {
   calendarStatus,
   codeConnect,
   connectGitHubSecuritySource,
+  describeProblem,
   disconnectGitHubSecuritySource,
   doctor,
   exitCodeFor,
@@ -42,15 +45,19 @@ import {
   secretsSet,
   secretsSetClerkKey,
   smoke,
-  startHostedSecurityJob
-} from "./chunk-TOSMNGGQ.js";
+  startHostedSecurityJob,
+  surfacePaths,
+  validateInvocation
+} from "./chunk-I4XURPUK.js";
 export {
   AGENT_HARNESSES,
   CAPABILITIES,
   CODE_BUILD_RECIPES,
   CODE_PI_IMAGE,
+  COMMAND_SURFACE,
   GOOGLE_CALENDAR_EVENTS_SCOPE,
   SYSTEM_AI_PURPOSES,
+  acceptedAfter,
   adminAi,
   calendarBookingPageUrl,
   calendarCalendars,
@@ -60,6 +67,7 @@ export {
   calendarStatus,
   codeConnect,
   connectGitHubSecuritySource,
+  describeProblem,
   disconnectGitHubSecuritySource,
   doctor,
   exitCodeFor,
@@ -87,6 +95,8 @@ export {
   secretsSet,
   secretsSetClerkKey,
   smoke,
-  startHostedSecurityJob
+  startHostedSecurityJob,
+  surfacePaths,
+  validateInvocation
 };
 //# sourceMappingURL=index.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@odla-ai/cli",
-  "version": "0.18.0",
+  "version": "0.20.0",
   "description": "Agent-operable CLI for odla provisioning, calendar consent and sync lifecycle, System AI administration, Worker secrets, security jobs, and smoke checks.",
   "license": "MIT",
   "homepage": "https://odla.ai/docs/packages/cli",

package/skills/odla/SKILL.md

@@ -214,6 +214,20 @@ the database, so no build, test, or CI gate in the repository can see it drift
 from your code. Reread what it names and fix any step your change made wrong,
 in the same piece of work.
 
+The other direction — are the runbooks themselves still true?
+
+```cmd
+npx @odla-ai/cli runbook lint
+```
+
+Every `odla-ai …` command the runbooks name is held against this CLI's real
+command surface, and against the minimum versions each runbook declares. Because
+a runbook is edited without a release, its text can name a command only a newer
+package has; a runbook records that as `requires` (`@odla-ai/cli@0.18.0`), and
+`runbook get` warns on stderr when yours is older. If you add a command and then
+tell a runbook to use it, set `requires` in the same edit — otherwise the first
+reader on an older CLI gets an "unknown action" error instead of an explanation.
+
 Found a wrong step? Fix an app runbook directly. For a platform runbook,
 `runbook edit` requests an admin-approved capability — a plain handshake token is
 never admin, and `npx @odla-ai/cli whoami` tells you what you hold.