@odla-ai/cli 0.25.7 → 0.25.8

package/README.md

@@ -193,6 +193,8 @@ npx odla-ai code connect --env prod --once # bounded enrollment + heartbeat proo
 npx odla-ai provision --dry-run
 npx odla-ai provision --email owner@example.com --write-dev-vars --push-secrets
 npx odla-ai smoke --env dev
+npx odla-ai agent jobs --env dev --state dead_letter --json
+npx odla-ai agent retry <job-id> --env dev --json
 npx odla-ai secrets push --env dev
 npx odla-ai secrets set clerk_webhook_secret --env dev --stdin
 npx odla-ai secrets set-clerk-key --env dev --from-env CLERK_SECRET_KEY
@@ -214,6 +216,15 @@ npx odla-ai skill install
 npx odla-ai version
 ```
 
+`agent jobs` is the remote-operator view of commit-trigger delivery. It reads
+content-free lifecycle metadata—job id, trigger, entity reference, state,
+attempts, timing, and bounded error/status codes—using an audience-bound
+developer token for an owner of the selected environment. `agent retry` accepts one exact
+dead-lettered id and resets its attempt lease; it does not replay successful or
+currently running work. Successful receipts are retained for seven days (and
+bounded to the newest 1,000 per tenant); unresolved dead letters remain until
+an operator requeues them.
+
 `code connect` is the first-party personal Code terminal runtime. Run the exact
 command copied from **Studio → Code → Terminal** while your shell is in the
 local Git checkout. `--platform`, `--app-id`, and `--env` make the requested

package/dist/bin.cjs

@@ -1020,11 +1020,6 @@ async function adminCommand(parsed) {
   });
 }
 
-// src/app-export.ts
-var import_node_fs5 = require("fs");
-var import_node_stream = require("stream");
-var import_promises = require("stream/promises");
-
 // src/config.ts
 var import_node_fs4 = require("fs");
 var import_node_path4 = require("path");
@@ -1333,7 +1328,90 @@ function bothTenants(cfg) {
   return { sandbox: (0, import_apps.tenantIdFor)(cfg.app.id, "dev"), live: (0, import_apps.tenantIdFor)(cfg.app.id, "prod") };
 }
 
+// src/agent-command.ts
+async function agentCommand(parsed, deps = {}) {
+  const action = parsed.positionals[1];
+  if (action !== "jobs" && action !== "retry") {
+    throw new Error(`unknown agent action "${action ?? ""}". Try "odla-ai agent jobs --json".`);
+  }
+  assertArgs(parsed, ["config", "env", "state", "limit", "json", "token", "email"], action === "jobs" ? 2 : 3);
+  if (action === "retry" && (parsed.options.state !== void 0 || parsed.options.limit !== void 0)) {
+    throw new Error('--state and --limit are supported only by "agent jobs"');
+  }
+  const cfg = await loadProjectConfig(stringOpt(parsed.options.config) ?? "odla.config.mjs");
+  const { env, tenant } = resolveTenant(cfg, stringOpt(parsed.options.env));
+  const doFetch = deps.fetch ?? fetch;
+  const out = deps.stdout ?? console;
+  const credential2 = await getDeveloperToken(
+    cfg,
+    {
+      configPath: cfg.configPath,
+      token: stringOpt(parsed.options.token),
+      email: stringOpt(parsed.options.email),
+      open: false
+    },
+    doFetch,
+    out
+  );
+  const base = `${cfg.dbEndpoint}/app/${encodeURIComponent(tenant)}/admin/agent-jobs`;
+  const headers = { authorization: `Bearer ${credential2}` };
+  if (action === "retry") {
+    const id = parsed.positionals[2];
+    const res2 = await doFetch(`${base}/${encodeURIComponent(id)}/retry`, { method: "POST", headers });
+    const body2 = await readJson(res2);
+    if (!res2.ok) throw new Error(`agent retry failed (${res2.status}): ${errorMessage(body2)}`);
+    const result2 = { v: 1, appId: cfg.app.id, env, tenant, ...body2 };
+    if (parsed.options.json === true) out.log(JSON.stringify(result2, null, 2));
+    else out.log(`${tenant}: requeued ${id}`);
+    return;
+  }
+  const state2 = stringOpt(parsed.options.state);
+  const allowed = ["pending", "running", "succeeded", "dead_letter"];
+  if (state2 && !allowed.includes(state2)) {
+    throw new Error(`--state must be one of ${allowed.join(", ")}`);
+  }
+  const url = new URL(base);
+  if (state2) url.searchParams.set("state", state2);
+  const limit = numberOpt(parsed.options.limit, "--limit");
+  if (limit) url.searchParams.set("limit", String(limit));
+  const res = await doFetch(url, { headers });
+  const body = await readJson(res);
+  if (!res.ok) throw new Error(`agent jobs failed (${res.status}): ${errorMessage(body)}`);
+  const result = { v: 1, appId: cfg.app.id, env, tenant, jobs: body.jobs ?? [], summary: body.summary };
+  if (parsed.options.json === true) {
+    out.log(JSON.stringify(result, null, 2));
+    return;
+  }
+  const summary = body.summary;
+  out.log(
+    `${tenant}: ${summary?.pending ?? 0} pending, ${summary?.running ?? 0} running, ${summary?.deadLetter ?? 0} dead-letter, ${summary?.succeeded ?? 0} succeeded`
+  );
+  for (const job of body.jobs ?? []) {
+    out.log(
+      [job.state, job.id, job.triggerId, `${job.entityNs}/${job.entityId}`, `attempts=${job.attempts}`, job.lastErrorCode ?? ""].filter(Boolean).join("	")
+    );
+  }
+}
+async function readJson(res) {
+  try {
+    return await res.json();
+  } catch {
+    return {};
+  }
+}
+function errorMessage(body) {
+  const error = body.error;
+  if (typeof error === "string") return error;
+  if (error && typeof error === "object" && typeof error.message === "string") {
+    return error.message;
+  }
+  return "request failed";
+}
+
 // src/app-export.ts
+var import_node_fs5 = require("fs");
+var import_node_stream = require("stream");
+var import_promises = require("stream/promises");
 async function appExport(options) {
   const cfg = await loadProjectConfig(options.configPath);
   const out = options.stdout ?? console;
@@ -2311,6 +2389,7 @@ var CAPABILITIES = {
     "apply Google Calendar booking config, then drive state-bound consent, status, discovery, and disconnect flows (bookings run live through the platform proxy)",
     "validate integration contracts offline and smoke-test a provisioned db environment plus anonymous capability routes",
     "read one versioned o11y status envelope spanning application RED, current live-sync freshness/load, the protected commit-to-visible canary, collector ingest/scheduler trust, provider-owned runtime metrics, and a bounded machine verdict",
+    "inspect durable agent wakeups as a versioned JSON envelope and explicitly requeue one dead-lettered job with a scoped environment credential",
     "run app-attributed hosted security discovery and independent validation without provider keys",
     "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys",
     "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"
@@ -6490,6 +6569,8 @@ Usage:
   odla-ai discuss resolve <topic> [--reopen] [--mutation-id <id>]
   odla-ai discuss who --q <text> [--app <id>] [--kinds user,pm:task] [--json]
   odla-ai discuss watch [<topic>] [--by <authorId>] [--self <authorId>] [--interval <s>] [--timeout <s>] [--json]
+  odla-ai agent jobs [--env dev] [--state pending|running|succeeded|dead_letter] [--limit 50] [--email <email>] [--json]
+  odla-ai agent retry <job-id> [--env dev] [--email <email>] [--json]
   odla-ai o11y status [--app <id>] [--env prod] [--minutes 60] [--json]
   odla-ai whoami [--json]
   odla-ai runbook ask "<question>" [--app <id>] [--all] [--json]
@@ -6537,6 +6618,8 @@ Usage:
   odla-ai version
 
 Commands:
+  agent        Inspect durable agent wakeups and explicitly requeue a
+               dead-lettered job; JSON output is stable for remote operators.
   runbook      odla's operational procedures, stored in the database and read at
                the moment they are followed. "ask" gives a written, cited answer;
                "search" the passages behind it; "get" the whole document.
@@ -8519,6 +8602,7 @@ var PM_ENTITIES = Object.fromEntries(
   ["goal", "conformance", "task", "kanban", "decision", "bug"].map((entity) => [entity, PM_ACTIONS])
 );
 var COMMAND_SURFACE = {
+  agent: { jobs: {}, retry: {} },
   admin: {
     ai: {
       show: {},
@@ -10334,6 +10418,10 @@ async function runCli(argv = process.argv.slice(2), dependencies = {}) {
     await adminCommand(parsed);
     return;
   }
+  if (command === "agent") {
+    await agentCommand(parsed, runtime);
+    return;
+  }
   if (command === "app") {
     await appCommand(parsed, runtime);
     return;