@odla-ai/cli 0.20.2 → 0.22.0

package/dist/index.cjs

@@ -61,6 +61,7 @@ __export(index_exports, {
   inferGitHubRepository: () => inferGitHubRepository,
   initProject: () => initProject,
   installSkill: () => installSkill,
+  invocationPath: () => invocationPath,
   isTerminalHostedSecurityStatus: () => isTerminalHostedSecurityStatus,
   listGitHubSecuritySources: () => listGitHubSecuritySources,
   listHostedSecurityJobs: () => listHostedSecurityJobs,
@@ -116,7 +117,7 @@ function approvalLines(prompt) {
   return lines;
 }
 function printApproval(out, prompt) {
-  for (const line of approvalLines(prompt)) out.log(line);
+  for (const line of approvalLines(prompt)) out.error(line);
 }
 function reminderLines(prompt) {
   return [
@@ -336,7 +337,7 @@ async function getDeveloperToken(cfg, options, doFetch, out) {
   }
   const cached = readJsonFile(cfg.local.tokenFile);
   if (cached?.token && cached.platform === audience && (cached.expiresAt ?? 0) > Date.now() + 6e4) {
-    out.log(`auth: using cached developer token (${displayPath(cfg.local.tokenFile, cfg.rootDir)})`);
+    out.error(`auth: using cached developer token (${displayPath(cfg.local.tokenFile, cfg.rootDir)})`);
     return cached.token;
   }
   const ctx = {
@@ -353,16 +354,16 @@ async function getDeveloperToken(cfg, options, doFetch, out) {
   const { token, expiresAt } = await resumePendingHandshake(ctx, waitMs) ?? await freshHandshake(ctx, waitMs);
   clearPendingHandshake(ctx.pendingFile);
   writePrivateJson(cfg.local.tokenFile, { platform: audience, email: ctx.email, token, expiresAt });
-  out.log(`auth: developer token cached (${displayPath(cfg.local.tokenFile, cfg.rootDir)})`);
+  out.error(`auth: developer token cached (${displayPath(cfg.local.tokenFile, cfg.rootDir)})`);
   return token;
 }
 async function resumePendingHandshake(ctx, waitMs) {
   const pending = readPendingHandshake(ctx.pendingFile, ctx.audience, ctx.email);
   if (!pending) return null;
-  ctx.out.log("");
-  ctx.out.log(`auth: resuming pending handshake \u2014 ${approvalHint(pending)}`);
+  ctx.out.error("");
+  ctx.out.error(`auth: resuming pending handshake \u2014 ${approvalHint(pending)}`);
   await launchApproval(ctx, pending.approvalUrl);
-  ctx.out.log("");
+  ctx.out.error("");
   const stopReminder = approvalReminder(ctx.out, pending);
   try {
     return await (0, import_db.collectToken)({
@@ -378,7 +379,7 @@ async function resumePendingHandshake(ctx, waitMs) {
     if (code === "handshake_pending") throw stillPending(pending, ctx.email);
     if (code === "handshake_expired" || code === "handshake_timeout") {
       clearPendingHandshake(ctx.pendingFile);
-      ctx.out.log("auth: pending handshake lapsed unapproved; starting a fresh one");
+      ctx.out.error("auth: pending handshake lapsed unapproved; starting a fresh one");
       return null;
     }
     if (code === "handshake_denied") clearPendingHandshake(ctx.pendingFile);
@@ -436,12 +437,12 @@ async function launchApproval(ctx, approvalUrl) {
   if (ctx.browser.open) {
     try {
       await (ctx.options.openApprovalUrl ?? openUrl)(approvalUrl);
-      ctx.out.log(`auth: asked the OS to open a browser${ctx.browser.mode === "auto" ? " (auto)" : ""} \u2014 if no tab appeared, use the URL above`);
+      ctx.out.error(`auth: asked the OS to open a browser${ctx.browser.mode === "auto" ? " (auto)" : ""} \u2014 if no tab appeared, use the URL above`);
     } catch (err) {
-      ctx.out.log(`auth: could not open browser (${err instanceof Error ? err.message : String(err)})`);
+      ctx.out.error(`auth: could not open browser (${err instanceof Error ? err.message : String(err)})`);
     }
   } else if (ctx.browser.reason) {
-    ctx.out.log(`auth: browser launch skipped (${ctx.browser.reason}) \u2014 show the human the URL above`);
+    ctx.out.error(`auth: browser launch skipped (${ctx.browser.reason}) \u2014 show the human the URL above`);
   }
 }
 function stillPending(pending, email) {
@@ -566,7 +567,7 @@ async function scopedToken(platform, scope, options, doFetch, out) {
   const cache = options.cache === false ? null : readJsonFile(tokenFile);
   const cached = cache?.platform === audience ? cache.tokens?.[scope] : void 0;
   if (cached?.token && (cached.expiresAt ?? 0) > Date.now() + 6e4) {
-    out.log(`auth: using cached ${scope} grant (${tokenFile})`);
+    out.error(`auth: using cached ${scope} grant (${tokenFile})`);
     return cached.token;
   }
   const email = handshakeEmail(options.email, cache?.platform === audience ? cache.email : void 0);
@@ -597,9 +598,9 @@ async function scopedToken(platform, scope, options, doFetch, out) {
     tokens[scope] = { token, expiresAt };
     if ((0, import_node_fs3.existsSync)((0, import_node_path3.join)(rootDir, ".git"))) ensureGitignore(rootDir, [tokenFile]);
     writePrivateJson(tokenFile, { platform: audience, email, tokens });
-    out.log(`auth: cached ${scope} grant (${tokenFile}; mode 0600)`);
+    out.error(`auth: cached ${scope} grant (${tokenFile}; mode 0600)`);
   } else {
-    out.log(`auth: ${scope} grant is in memory only; its credential record remains in odla-ai/db`);
+    out.error(`auth: ${scope} grant is in memory only; its credential record remains in odla-ai/db`);
   }
   return token;
 }
@@ -7858,13 +7859,163 @@ ${env}: credentials are already saved; retry "odla-ai secrets push --env ${env}$
   }
 }
 
+// src/record.ts
+var import_node_fs13 = require("fs");
+var import_node_process8 = __toESM(require("process"), 1);
+
+// src/surface.ts
+var PM_ACTIONS = {
+  list: {},
+  add: {},
+  create: {},
+  get: {},
+  set: {},
+  update: {},
+  status: {},
+  move: {},
+  done: {},
+  comment: {},
+  comments: {},
+  rm: {},
+  delete: {}
+};
+var PM_ENTITIES = Object.fromEntries(
+  ["goal", "conformance", "task", "kanban", "decision", "bug"].map((entity) => [entity, PM_ACTIONS])
+);
+var COMMAND_SURFACE = {
+  admin: {
+    ai: {
+      show: {},
+      set: {},
+      credentials: {},
+      models: {},
+      usage: {},
+      audit: {},
+      credential: { set: {} }
+    }
+  },
+  app: {
+    archive: {},
+    restore: {},
+    export: {},
+    import: {},
+    rename: {},
+    "refresh-sandbox": {},
+    "go-live": {},
+    promote: {},
+    owners: { list: {}, add: {}, remove: {} }
+  },
+  calendar: { status: {}, calendars: {}, connect: {}, disconnect: {} },
+  capabilities: {},
+  code: { connect: {} },
+  doctor: {},
+  help: {},
+  init: {},
+  pm: PM_ENTITIES,
+  provision: {},
+  runbook: {
+    ask: {},
+    search: {},
+    impact: {},
+    list: {},
+    get: {},
+    cat: {},
+    new: {},
+    edit: {},
+    comment: {},
+    import: {},
+    visibility: {},
+    publish: {},
+    archive: {},
+    history: {},
+    revert: {},
+    rm: {},
+    lint: {}
+  },
+  secrets: { push: {}, set: {}, "set-clerk-key": {} },
+  security: {
+    plan: {},
+    sources: {},
+    run: {},
+    status: {},
+    report: {},
+    github: { connect: {}, disconnect: {} }
+  },
+  setup: {},
+  skill: { install: {} },
+  smoke: {},
+  version: {},
+  whoami: {}
+};
+function acceptedAfter(path) {
+  let node = COMMAND_SURFACE;
+  for (const word of path) {
+    node = node?.[word];
+    if (!node) return [];
+  }
+  return Object.keys(node).sort();
+}
+function validateInvocation(words2) {
+  let node = COMMAND_SURFACE;
+  const walked = [];
+  for (const word of words2) {
+    if (Object.keys(node).length === 0) return null;
+    const next = node[word];
+    if (!next) return { validPrefix: walked.join(" "), word, accepted: Object.keys(node).sort() };
+    walked.push(word);
+    node = next;
+  }
+  return null;
+}
+function describeProblem(problem) {
+  const where = problem.validPrefix ? `after "${problem.validPrefix}"` : "as a command";
+  return `"${problem.word}" is not accepted ${where} \u2014 try: ${problem.accepted.join(", ")}`;
+}
+function invocationPath(words2) {
+  let node = COMMAND_SURFACE;
+  const path = [];
+  for (const word of words2) {
+    const next = node[word];
+    if (!next) break;
+    path.push(word);
+    node = next;
+    if (Object.keys(node).length === 0) break;
+  }
+  return path;
+}
+function surfacePaths(node = COMMAND_SURFACE, prefix = []) {
+  const paths = [];
+  for (const [word, child] of Object.entries(node)) {
+    const path = [...prefix, word];
+    paths.push(path);
+    paths.push(...surfacePaths(child, path));
+  }
+  return paths;
+}
+
+// src/record.ts
+function recordInvocation(parsed) {
+  const file = import_node_process8.default.env.ODLA_CLI_RECORD;
+  if (!file) return;
+  try {
+    const entry = {
+      path: invocationPath(parsed.positionals),
+      options: Object.keys(parsed.options).sort()
+    };
+    if (!entry.path.length) return;
+    (0, import_node_fs13.appendFileSync)(file, `${JSON.stringify(entry)}
+`);
+  } catch {
+  }
+}
+
 // src/runbook-command.ts
-var import_node_fs17 = require("fs");
+var import_node_fs18 = require("fs");
 var import_node_path14 = require("path");
-var import_node_process9 = __toESM(require("process"), 1);
+var import_node_process10 = __toESM(require("process"), 1);
 
 // src/runbook-actions.ts
-var import_node_fs13 = require("fs");
+var import_node_fs14 = require("fs");
 
 // src/runbook-requires.ts
 var SPEC = /^(@?[\w./-]+?)@(\d+\.\d+\.\d+(?:[\w.-]*)?)$/;
@@ -7949,7 +8100,7 @@ async function bySlug(ctx, slug) {
 function readBody(file, inline) {
   if (inline !== void 0) return inline;
   if (file === void 0) throw new Error("supply the new text with --file <path>, --file - (stdin), or --body");
-  return (0, import_node_fs13.readFileSync)(file === "-" ? 0 : file, "utf8");
+  return (0, import_node_fs14.readFileSync)(file === "-" ? 0 : file, "utf8");
 }
 var stamp = (ms) => ms ? new Date(ms).toISOString().slice(0, 16).replace("T", " ") : "";
 async function runbookList(ctx, all, query) {
@@ -8036,7 +8187,7 @@ async function runbookRemove(ctx, slug) {
 }
 
 // src/runbook-import.ts
-var import_node_fs14 = require("fs");
+var import_node_fs15 = require("fs");
 var import_node_path11 = require("path");
 function parseRunbook(text, slug) {
   let rest = text;
@@ -8062,12 +8213,12 @@ function parseRunbook(text, slug) {
   };
 }
 function readRunbookDir(dir) {
-  if (!(0, import_node_fs14.statSync)(dir, { throwIfNoEntry: false })?.isDirectory()) throw new Error(`not a directory: ${dir}`);
-  const files = (0, import_node_fs14.readdirSync)(dir).filter((f) => f.endsWith(".md")).sort();
+  if (!(0, import_node_fs15.statSync)(dir, { throwIfNoEntry: false })?.isDirectory()) throw new Error(`not a directory: ${dir}`);
+  const files = (0, import_node_fs15.readdirSync)(dir).filter((f) => f.endsWith(".md")).sort();
   if (!files.length) throw new Error(`no .md files in ${dir}`);
   return files.map((file) => {
     const slug = (0, import_node_path11.basename)(file, ".md");
-    const parsed = parseRunbook((0, import_node_fs14.readFileSync)((0, import_node_path11.join)(dir, file), "utf8"), slug);
+    const parsed = parseRunbook((0, import_node_fs15.readFileSync)((0, import_node_path11.join)(dir, file), "utf8"), slug);
     return { file, slug, ...parsed, words: parsed.body.split(/\s+/).filter(Boolean).length };
   });
 }
@@ -8139,7 +8290,7 @@ async function upsert(ctx, r, visibility) {
 
 // src/runbook-impact.ts
 var import_node_child_process7 = require("child_process");
-var import_node_fs15 = require("fs");
+var import_node_fs16 = require("fs");
 var import_node_path12 = require("path");
 
 // src/runbook-impact-scan.ts
@@ -8310,9 +8461,9 @@ ${body.split("\n").map((line) => `+${line}`).join("\n")}
 function manifestLabeller(root) {
   return (workspace) => {
     const manifest = (0, import_node_path12.join)(root, workspace, "package.json");
-    if (!(0, import_node_fs15.existsSync)(manifest)) return void 0;
+    if (!(0, import_node_fs16.existsSync)(manifest)) return void 0;
     try {
-      const name = JSON.parse((0, import_node_fs15.readFileSync)(manifest, "utf8")).name;
+      const name = JSON.parse((0, import_node_fs16.readFileSync)(manifest, "utf8")).name;
       return typeof name === "string" ? name : void 0;
     } catch {
       return void 0;
@@ -8379,7 +8530,7 @@ function report2(ctx, impacts) {
 async function runbookImpact(ctx, options, deps = {}) {
   const cwd = deps.cwd ?? process.cwd();
   const runGit = deps.runGit ?? gitRunner(cwd);
-  const read2 = deps.readRepoFile ?? ((path) => (0, import_node_fs15.readFileSync)((0, import_node_path12.join)(cwd, path), "utf8"));
+  const read2 = deps.readRepoFile ?? ((path) => (0, import_node_fs16.readFileSync)((0, import_node_path12.join)(cwd, path), "utf8"));
   const surfaces = changedSurfaces(collectDiff(runGit, options.base, read2), manifestLabeller(cwd));
   if (!surfaces.length) {
     return ctx.out.log(
@@ -8391,124 +8542,6 @@ async function runbookImpact(ctx, options, deps = {}) {
   report2(ctx, impacts);
 }
 
-// src/surface.ts
-var PM_ACTIONS = {
-  list: {},
-  add: {},
-  create: {},
-  get: {},
-  set: {},
-  update: {},
-  status: {},
-  move: {},
-  done: {},
-  comment: {},
-  comments: {},
-  rm: {},
-  delete: {}
-};
-var PM_ENTITIES = Object.fromEntries(
-  ["goal", "conformance", "task", "kanban", "decision", "bug"].map((entity) => [entity, PM_ACTIONS])
-);
-var COMMAND_SURFACE = {
-  admin: {
-    ai: {
-      show: {},
-      set: {},
-      credentials: {},
-      models: {},
-      usage: {},
-      audit: {},
-      credential: { set: {} }
-    }
-  },
-  app: {
-    archive: {},
-    restore: {},
-    export: {},
-    import: {},
-    rename: {},
-    "refresh-sandbox": {},
-    "go-live": {},
-    promote: {},
-    owners: { list: {}, add: {}, remove: {} }
-  },
-  calendar: { status: {}, calendars: {}, connect: {}, disconnect: {} },
-  capabilities: {},
-  code: { connect: {} },
-  doctor: {},
-  help: {},
-  init: {},
-  pm: PM_ENTITIES,
-  provision: {},
-  runbook: {
-    ask: {},
-    search: {},
-    impact: {},
-    list: {},
-    get: {},
-    cat: {},
-    new: {},
-    edit: {},
-    comment: {},
-    import: {},
-    visibility: {},
-    publish: {},
-    archive: {},
-    history: {},
-    revert: {},
-    rm: {},
-    lint: {}
-  },
-  secrets: { push: {}, set: {}, "set-clerk-key": {} },
-  security: {
-    plan: {},
-    sources: {},
-    run: {},
-    status: {},
-    report: {},
-    github: { connect: {}, disconnect: {} }
-  },
-  setup: {},
-  skill: { install: {} },
-  smoke: {},
-  version: {},
-  whoami: {}
-};
-function acceptedAfter(path) {
-  let node = COMMAND_SURFACE;
-  for (const word of path) {
-    node = node?.[word];
-    if (!node) return [];
-  }
-  return Object.keys(node).sort();
-}
-function validateInvocation(words2) {
-  let node = COMMAND_SURFACE;
-  const walked = [];
-  for (const word of words2) {
-    if (Object.keys(node).length === 0) return null;
-    const next = node[word];
-    if (!next) return { validPrefix: walked.join(" "), word, accepted: Object.keys(node).sort() };
-    walked.push(word);
-    node = next;
-  }
-  return null;
-}
-function describeProblem(problem) {
-  const where = problem.validPrefix ? `after "${problem.validPrefix}"` : "as a command";
-  return `"${problem.word}" is not accepted ${where} \u2014 try: ${problem.accepted.join(", ")}`;
-}
-function surfacePaths(node = COMMAND_SURFACE, prefix = []) {
-  const paths = [];
-  for (const [word, child] of Object.entries(node)) {
-    const path = [...prefix, word];
-    paths.push(path);
-    paths.push(...surfacePaths(child, path));
-  }
-  return paths;
-}
-
 // src/runbook-lint.ts
 function invocationsIn(body) {
   const re = /(`|npx[^\S\n]+)?(?:@odla-ai\/cli(?:@[\w.-]+)?|odla-ai)((?:[^\S\n]+[a-z][\w-]*)+)/g;
@@ -8630,12 +8663,12 @@ async function runbookComment(ctx, slug, body) {
 
 // src/runbook-editor.ts
 var import_node_child_process8 = require("child_process");
-var import_node_fs16 = require("fs");
+var import_node_fs17 = require("fs");
 var import_node_os4 = require("os");
 var import_node_path13 = require("path");
-var import_node_process8 = __toESM(require("process"), 1);
+var import_node_process9 = __toESM(require("process"), 1);
 var EDITOR_ENV = ["ODLA_EDITOR", "VISUAL", "EDITOR"];
-function resolveEditor(env = import_node_process8.default.env) {
+function resolveEditor(env = import_node_process9.default.env) {
   for (const name of EDITOR_ENV) {
     const value = env[name];
     if (value && value.trim()) return value.trim();
@@ -8649,8 +8682,8 @@ function defaultRun(command, path) {
   return result.status ?? 0;
 }
 function editText(initial, slug, deps = {}) {
-  const env = deps.env ?? import_node_process8.default.env;
-  const interactive = deps.interactive ?? (() => Boolean(import_node_process8.default.stdin.isTTY));
+  const env = deps.env ?? import_node_process9.default.env;
+  const interactive = deps.interactive ?? (() => Boolean(import_node_process9.default.stdin.isTTY));
   const editor = resolveEditor(env);
   if (!editor)
     throw new Error(
@@ -8658,16 +8691,16 @@ function editText(initial, slug, deps = {}) {
     );
   if (!interactive())
     throw new Error(`cannot open an editor without a terminal \u2014 pass --file <path> or --body "\u2026" instead`);
-  const dir = (0, import_node_fs16.mkdtempSync)((0, import_node_path13.join)((0, import_node_os4.tmpdir)(), "odla-runbook-"));
+  const dir = (0, import_node_fs17.mkdtempSync)((0, import_node_path13.join)((0, import_node_os4.tmpdir)(), "odla-runbook-"));
   const file = (0, import_node_path13.join)(dir, `${slug}.md`);
   try {
-    (0, import_node_fs16.writeFileSync)(file, initial, { mode: 384 });
+    (0, import_node_fs17.writeFileSync)(file, initial, { mode: 384 });
     const code = defaultRunOrInjected(deps)(editor, file);
     if (code !== 0) throw new Error(`editor "${editor}" exited with ${code}; nothing was written`);
-    const edited = (0, import_node_fs16.readFileSync)(file, "utf8");
+    const edited = (0, import_node_fs17.readFileSync)(file, "utf8");
     return edited === initial ? null : edited;
   } finally {
-    (0, import_node_fs16.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs17.rmSync)(dir, { recursive: true, force: true });
   }
 }
 var defaultRunOrInjected = (deps) => deps.run ?? defaultRun;
@@ -8767,11 +8800,11 @@ var WRITES = /* @__PURE__ */ new Set(["new", "edit", "publish", "archive", "visi
 var CONFIG_FREE = /* @__PURE__ */ new Set(["list", "search", "ask", "get", "cat", "history", "impact", "lint"]);
 async function loadOrDefaultConfig(configPath, action, appId) {
   const projectScoped = appId !== void 0;
-  if (!projectScoped && CONFIG_FREE.has(action) && !(0, import_node_fs17.existsSync)((0, import_node_path14.resolve)(configPath))) {
-    const rootDir = import_node_process9.default.cwd();
+  if (!projectScoped && CONFIG_FREE.has(action) && !(0, import_node_fs18.existsSync)((0, import_node_path14.resolve)(configPath))) {
+    const rootDir = import_node_process10.default.cwd();
     return {
       configPath,
-      platformUrl: import_node_process9.default.env.ODLA_PLATFORM_URL ?? "https://odla.ai",
+      platformUrl: import_node_process10.default.env.ODLA_PLATFORM_URL ?? "https://odla.ai",
       rootDir,
       app: { id: "", name: "" },
       local: { tokenFile: (0, import_node_path14.join)(rootDir, ".odla/dev-token.json") }
@@ -8779,13 +8812,11 @@ async function loadOrDefaultConfig(configPath, action, appId) {
   }
   return loadProjectConfig(configPath);
 }
-var PURE_STDOUT = /* @__PURE__ */ new Set(["get", "cat"]);
 async function buildContext2(parsed, deps, action) {
   const configPath = stringOpt(parsed.options.config) ?? "odla.config.mjs";
   const cfg = await loadOrDefaultConfig(configPath, action, stringOpt(parsed.options.app));
   const doFetch = deps.fetch ?? fetch;
   const out = deps.stdout ?? console;
-  const authOut = PURE_STDOUT.has(action) ? { log: (line) => out.error(line), error: (line) => out.error(line) } : out;
   const appId = stringOpt(parsed.options.app) ?? PLATFORM_SCOPE;
   const dryRun = parsed.options["dry-run"] === true;
   if (action === "import" && dryRun) {
@@ -8805,7 +8836,7 @@ async function buildContext2(parsed, deps, action) {
     email: stringOpt(parsed.options.email),
     label: `odla CLI (runbook ${action})`,
     fetch: doFetch,
-    stdout: authOut,
+    stdout: out,
     openApprovalUrl: deps.openUrl,
     // Anchor the grant cache to this project, not the shell's cwd.
     rootDir: cfg.rootDir
@@ -8822,7 +8853,7 @@ async function buildContext2(parsed, deps, action) {
       open: void 0
     },
     doFetch,
-    authOut
+    out
   );
   return {
     platformUrl: cfg.platformUrl,
@@ -9634,6 +9665,7 @@ function exitCodeFor(err) {
 }
 async function runCli(argv = process.argv.slice(2), dependencies = {}) {
   const parsed = parseArgv(argv);
+  recordInvocation(parsed);
   const command = parsed.positionals[0] ?? "help";
   if (command === "version" || command === "-v" || parsed.options.version === true) {
     assertArgs(parsed, ["version"], 1);
@@ -9776,6 +9808,7 @@ async function calendarCommand(parsed, dependencies) {
   inferGitHubRepository,
   initProject,
   installSkill,
+  invocationPath,
   isTerminalHostedSecurityStatus,
   listGitHubSecuritySources,
   listHostedSecurityJobs,