@odla-ai/cli 0.26.1 → 0.27.0

package/dist/{chunk-ZAZBUURZ.js → chunk-DS64H4FY.js}

@@ -138,7 +138,7 @@ import process2 from "process";
 async function openUrl(url, options = {}) {
   const command = openerFor(options.platform ?? process2.platform);
   const doSpawn = options.spawnImpl ?? spawn;
-  await new Promise((resolve12, reject) => {
+  await new Promise((resolve13, reject) => {
     const child = doSpawn(command.cmd, [...command.args, url], {
       stdio: "ignore",
       detached: true
@@ -146,7 +146,7 @@ async function openUrl(url, options = {}) {
     child.once("error", reject);
     child.once("spawn", () => {
       child.unref();
-      resolve12();
+      resolve13();
     });
   });
 }
@@ -439,7 +439,6 @@ function audienceBoundEnvToken(token, platform) {
 }
 var SCOPE_PURPOSE = {
   "platform:status:read": "read the platform fleet health and deployment snapshot",
-  "platform:chat:credential:write": "rotate the built-in Discussion responder credential",
   "app:config:read": "compare checked-in intent with an exact-id app Registry configuration",
   "app:config:write": "apply or inspect one revision-bound configuration operation for an app you own",
   "platform:runbook:write": "add or edit odla's operational runbooks",
@@ -1445,8 +1444,8 @@ function credential(value2) {
 // src/calendar-poll.ts
 async function waitForCalendarPoll(milliseconds, signal) {
   if (signal?.aborted) throw signal.reason ?? new Error("calendar connection aborted");
-  await new Promise((resolve12, reject) => {
-    const timer = setTimeout(resolve12, milliseconds);
+  await new Promise((resolve13, reject) => {
+    const timer = setTimeout(resolve13, milliseconds);
     signal?.addEventListener("abort", () => {
       clearTimeout(timer);
       reject(signal.reason ?? new Error("calendar connection aborted"));
@@ -1837,9 +1836,9 @@ function canonicalValue(value2) {
   }
   if (Array.isArray(value2)) return value2.map(canonicalValue);
   if (value2 && typeof value2 === "object") {
-    const record11 = value2;
+    const record10 = value2;
     return Object.fromEntries(
-      Object.keys(record11).filter((key) => record11[key] !== void 0).sort().map((key) => [key, canonicalValue(record11[key])])
+      Object.keys(record10).filter((key) => record10[key] !== void 0).sort().map((key) => [key, canonicalValue(record10[key])])
     );
   }
   throw new TypeError("canonical JSON rejects unsupported values");
@@ -2084,7 +2083,7 @@ async function configOperationWait(options) {
   assertOperationId(options.operationId);
   const cfg = await loadProjectConfig(options.configPath);
   const client = await operationClient(cfg, options, "wait");
-  const wait2 = options.pollWait ?? ((ms) => new Promise((resolve12) => setTimeout(resolve12, ms)));
+  const wait2 = options.pollWait ?? ((ms) => new Promise((resolve13) => setTimeout(resolve13, ms)));
   const now = () => (options.now?.() ?? /* @__PURE__ */ new Date()).getTime();
   const deadline = now() + (options.timeoutSeconds ?? DEFAULT_WAIT_SECONDS) * 1e3;
   const interval = (options.intervalSeconds ?? DEFAULT_INTERVAL_SECONDS) * 1e3;
@@ -3767,8 +3766,8 @@ function hostedPollTimeout(value2 = 10 * 6e4) {
 }
 async function waitForHostedPoll(milliseconds, signal) {
   if (signal?.aborted) throw signal.reason ?? new DOMException("aborted", "AbortError");
-  await new Promise((resolve12, reject) => {
-    const timer = setTimeout(resolve12, milliseconds);
+  await new Promise((resolve13, reject) => {
+    const timer = setTimeout(resolve13, milliseconds);
     signal?.addEventListener("abort", () => {
       clearTimeout(timer);
       reject(signal.reason ?? new DOMException("aborted", "AbortError"));
@@ -4397,8 +4396,8 @@ async function materializeGitTree(source, commitSha, options = {}) {
   const maxFiles = options.maxFiles ?? 2e4;
   const maxBytes = options.maxBytes ?? 512 * 1024 * 1024;
   const inventory = (await gitOutput(sourceDir, ["ls-tree", "-rz", commitSha], 16 * 1024 * 1024)).toString("utf8").split("\0").filter(Boolean);
-  const entries = inventory.flatMap((record11) => {
-    const match = /^(100644|100755) blob ([0-9a-f]{40,64})\t([\s\S]+)$/.exec(record11);
+  const entries = inventory.flatMap((record10) => {
+    const match = /^(100644|100755) blob ([0-9a-f]{40,64})\t([\s\S]+)$/.exec(record10);
     return match && allowedWorkspacePath(match[3]) ? [{ mode: match[1], hash: match[2], path: match[3] }] : [];
   });
   if (entries.length > maxFiles) throw new Error(`workspace exceeds ${maxFiles} files`);
@@ -4646,8 +4645,8 @@ function normalize(value2) {
   if (Array.isArray(value2)) return value2.map(normalize);
   if (value2 instanceof Uint8Array) return { $bytes: [...value2] };
   if (typeof value2 === "object") {
-    const record11 = value2;
-    return Object.fromEntries(Object.keys(record11).filter((key) => record11[key] !== void 0).sort().map((key) => [key, normalize(record11[key])]));
+    const record10 = value2;
+    return Object.fromEntries(Object.keys(record10).filter((key) => record10[key] !== void 0).sort().map((key) => [key, normalize(record10[key])]));
   }
   throw new CamelError("state_conflict", "Canonical JSON rejects unsupported values.");
 }
@@ -7514,6 +7513,7 @@ var COMMAND_SURFACE = {
     promote: {},
     owners: { list: {}, add: {}, remove: {} }
   },
+  brand: { design: { unpack: {} } },
   calendar: { status: {}, calendars: {}, connect: {}, disconnect: {} },
   capabilities: {},
   code: { connect: {} },
@@ -7537,8 +7537,7 @@ var COMMAND_SURFACE = {
   o11y: { status: {} },
   operations: { get: {}, wait: {} },
   platform: {
-    status: {},
-    "chat-credentials": { rotate: {} }
+    status: {}
   },
   pm: {
     ...PM_ENTITIES,
@@ -8881,6 +8880,158 @@ async function appCommand(parsed, dependencies = {}) {
   else await appRestore(options);
 }
 
+// src/brand-command.ts
+import { mkdir as mkdir4, readFile as readFile3, writeFile as writeFile4 } from "fs/promises";
+import { dirname as dirname8, resolve as resolve12 } from "path";
+
+// src/brand-design-unpack.ts
+import { gunzipSync } from "zlib";
+import {
+  digestDesignBundle,
+  parseDesignBundle,
+  readDesignManifest,
+  renderTokensCss
+} from "@odla-ai/brand";
+var EXTENSIONS = {
+  "image/png": "png",
+  "image/jpeg": "jpg",
+  "image/gif": "gif",
+  "image/webp": "webp",
+  "image/svg+xml": "svg",
+  "image/avif": "avif",
+  "font/woff2": "woff2",
+  "font/woff": "woff",
+  "font/ttf": "ttf",
+  "font/otf": "otf",
+  "text/javascript": "js",
+  "application/javascript": "js",
+  "text/css": "css",
+  "text/html": "html",
+  "application/json": "json"
+};
+var encode = (text2) => new TextEncoder().encode(text2);
+function assetFileName(uuid, mime) {
+  const ext = EXTENSIONS[mime.split(";")[0].trim().toLowerCase()] ?? "bin";
+  return `${uuid.replace(/[^a-zA-Z0-9._-]/g, "_")}.${ext}`;
+}
+function decodePayload(data, compressed) {
+  const raw = Buffer.from(data, "base64");
+  return new Uint8Array(compressed ? gunzipSync(raw) : raw);
+}
+function rewriteReferences(template, assetPaths, pagePaths) {
+  let out = template;
+  for (const [uuid, path] of pagePaths) {
+    out = out.split(`about:blank#${uuid}`).join(path);
+  }
+  for (const [uuid, path] of assetPaths) {
+    out = out.split(uuid).join(path);
+  }
+  return out;
+}
+function tokensCss(digest) {
+  if (Object.keys(digest.tokens.light).length === 0) return null;
+  return renderTokensCss(digest.tokens.light, { dark: digest.tokens.dark });
+}
+function unpackDesign(html) {
+  const bundle = parseDesignBundle(html);
+  const manifest = readDesignManifest(html);
+  const digest = digestDesignBundle(bundle);
+  const pageUuids = new Set(bundle.pageOrder);
+  const files = [];
+  const failed = [];
+  const assetPaths = /* @__PURE__ */ new Map();
+  const pagePaths = /* @__PURE__ */ new Map();
+  for (const [uuid, entry] of Object.entries(manifest)) {
+    let bytes;
+    try {
+      bytes = decodePayload(entry.data, entry.compressed);
+    } catch {
+      failed.push(uuid);
+      continue;
+    }
+    if (pageUuids.has(uuid)) {
+      const path2 = `pages/${assetFileName(uuid, "text/html")}`;
+      pagePaths.set(uuid, `./${path2}`);
+      files.push({ path: path2, bytes });
+      continue;
+    }
+    const path = `assets/${assetFileName(uuid, entry.mime)}`;
+    assetPaths.set(uuid, `./${path}`);
+    files.push({ path, bytes });
+  }
+  files.push({
+    path: "index.html",
+    bytes: encode(rewriteReferences(bundle.template, assetPaths, pagePaths))
+  });
+  files.push({ path: "digest.json", bytes: encode(`${JSON.stringify(digest, null, 2)}
+`) });
+  const css = tokensCss(digest);
+  if (css !== null) files.push({ path: "tokens.css", bytes: encode(css) });
+  if (bundle.thumbnailSvg) files.push({ path: "thumbnail.svg", bytes: encode(bundle.thumbnailSvg) });
+  return { files, digest, failed };
+}
+function describeUnpack(result, outDir) {
+  const { digest } = result;
+  const lines = [
+    `Unpacked ${digest.title ? `"${digest.title}"` : "design"} into ${outDir}`,
+    `  index.html    the design, offline-runnable (${digest.templateBytes} bytes)`,
+    `  assets/       ${digest.assetCount} embedded files (${digest.assetBytes} bytes)`,
+    `  digest.json   ${Object.keys(digest.tokens.light).length} --ui-* tokens, ${digest.props.length} props, ${digest.outline.length} headings`
+  ];
+  if (result.files.some((f) => f.path === "tokens.css"))
+    lines.push("  tokens.css    the design's tokens as an @odla-ai/ui theme sheet");
+  if (digest.fonts.length > 0) lines.push(`Typefaces: ${digest.fonts.join(", ")}`);
+  if (result.failed.length > 0)
+    lines.push(`WARNING: ${result.failed.length} embedded asset(s) could not be decoded.`);
+  return lines;
+}
+
+// src/brand-command.ts
+var USAGE = "usage: odla-ai brand design unpack <bundle.html|-> [--out <dir>] [--json]";
+async function readBundle(source, deps) {
+  if (source !== "-") return readFile3(resolve12(source), "utf8");
+  const readStdin = deps.readStdin;
+  if (!readStdin) throw new Error("reading a bundle from stdin is not supported here");
+  return readStdin();
+}
+async function writeAll(result, outDir) {
+  for (const file of result.files) {
+    const target = resolve12(outDir, file.path);
+    await mkdir4(dirname8(target), { recursive: true });
+    await writeFile4(target, file.bytes);
+  }
+}
+async function designUnpack(parsed, deps) {
+  assertArgs(parsed, ["out", "json"], 4);
+  const source = parsed.positionals[3];
+  if (!source) throw new Error(USAGE);
+  const outDir = resolve12(stringOpt(parsed.options.out) ?? "design");
+  const result = unpackDesign(await readBundle(source, deps));
+  await writeAll(result, outDir);
+  const out = deps.stdout ?? console;
+  if (parsed.options.json === true) {
+    out.log(
+      JSON.stringify({
+        outDir,
+        files: result.files.map((f) => f.path),
+        failed: result.failed,
+        digest: result.digest
+      })
+    );
+    return;
+  }
+  for (const line of describeUnpack(result, outDir)) out.log(line);
+}
+async function brandCommand(parsed, deps) {
+  const subject = parsed.positionals[1];
+  const action2 = parsed.positionals[2];
+  if (subject === "design" && action2 === "unpack") {
+    await designUnpack(parsed, deps);
+    return;
+  }
+  throw new Error(USAGE);
+}
+
 // src/harness-options.ts
 function harnessList(parsed) {
   const selected = [
@@ -9257,10 +9408,8 @@ function requireName(parsed) {
   return name;
 }
 
-// src/help.ts
-function printHelp(output = console) {
-  output.log(`odla-ai
-
+// src/help-usage.ts
+var USAGE_SECTION = `
 Start here:
   odla-ai runbook ask "<question>"   The current procedure, from odla's own
                                      runbooks. Ask BEFORE searching the web or
@@ -9294,6 +9443,7 @@ Usage:
   odla-ai app owners list [--config odla.config.mjs] [--email <odla-account>] [--json]
   odla-ai app owners add <email> [--email <odla-account>] [--json]
   odla-ai app owners remove <email> [--email <odla-account>] [--json]
+  odla-ai brand design unpack <bundle.html|-> [--out <dir>] [--json]
   odla-ai pm goal list [--app <id>] [--status <s>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
   odla-ai pm task list [--app <id>] [--column <c>] [--goal <id>] [--assignee <id>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
   odla-ai pm decision list [--app <id>] [--status <s>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
@@ -9329,7 +9479,6 @@ Usage:
   odla-ai context remove <name> --yes [--json]
   odla-ai o11y status [--app <id>] [--context <name>] [--platform https://odla.ai] [--env prod] [--minutes 60] [--json]
   odla-ai platform status [--context <name>] [--platform https://odla.ai] [--email <odla-account>] [--json]
-  odla-ai platform chat-credentials rotate [--context <name>] [--email <odla-account>] [--wrangler-config <path>] [--expected-version <id>] [--json] --yes
   odla-ai whoami [--context <name>] [--platform https://odla.ai] [--json]
   odla-ai runbook ask "<question>" [--app <id>] [--all] [--json]
   odla-ai runbook search "<question>" [--app <id>] [--all] [--limit <n>] [--json]
@@ -9374,8 +9523,12 @@ Usage:
   odla-ai secrets push --env <env> [--config odla.config.mjs] [--dry-run] [--yes]
   odla-ai secrets set <name> --env <env> (--from-env <NAME>|--stdin) [--email <odla-account>] [--config odla.config.mjs] [--yes]
   odla-ai secrets set-clerk-key --env <env> (--from-env <NAME>|--stdin) [--email <odla-account>] [--config odla.config.mjs] [--yes]
-  odla-ai version
+  odla-ai version`;
 
+// src/help.ts
+function printHelp(output = console) {
+  output.log(`odla-ai
+${USAGE_SECTION}
 Commands:
   agent        Inspect durable agent wakeups and explicitly requeue a
                dead-lettered job; JSON output is stable for remote operators.
@@ -9824,7 +9977,7 @@ function jsonl(ctx, parsed, value2) {
 }
 async function discussWatch(ctx, topicId, parsed) {
   if (ctx.json && parsed.options.jsonl === true) throw new Error("--json and --jsonl cannot be combined");
-  const sleep = ctx.sleep ?? ((ms) => new Promise((resolve12) => setTimeout(resolve12, ms)));
+  const sleep = ctx.sleep ?? ((ms) => new Promise((resolve13) => setTimeout(resolve13, ms)));
   const now = ctx.now ?? Date.now;
   const intervalMs = (numberOpt2(parsed, "interval", DEFAULT_INTERVAL_MS / 1e3) ?? DEFAULT_INTERVAL_MS / 1e3) * 1e3;
   const timeoutSeconds = numberOpt2(parsed, "timeout");
@@ -10162,8 +10315,8 @@ async function pmAdd(ctx, entity, parsed) {
   emit2(ctx, res, () => ctx.out.log(`created ${entity} ${res.id}`));
 }
 async function pmGet(ctx, entity, id) {
-  const { record: record11 } = await pmRequest(ctx, "GET", `/${entity}/${encodeURIComponent(id)}`);
-  emit2(ctx, record11, () => printRecord(ctx, entity, record11));
+  const { record: record10 } = await pmRequest(ctx, "GET", `/${entity}/${encodeURIComponent(id)}`);
+  emit2(ctx, record10, () => printRecord(ctx, entity, record10));
 }
 async function pmSet(ctx, entity, id, parsed) {
   const patch2 = collectEntityFields(entity, parsed, true);
@@ -10208,9 +10361,9 @@ async function pmHandoff(ctx, parsed) {
   ]);
   const handoff = {
     appId,
-    unmetGoals: goals.filter((record11) => record11.status !== "met"),
-    activeTasks: tasks.filter((record11) => record11.column !== "done"),
-    openBugs: bugs.filter((record11) => record11.status !== "fixed" && record11.status !== "wontfix")
+    unmetGoals: goals.filter((record10) => record10.status !== "met"),
+    activeTasks: tasks.filter((record10) => record10.column !== "done"),
+    openBugs: bugs.filter((record10) => record10.status !== "fixed" && record10.status !== "wontfix")
   };
   const result = {
     ...handoff,
@@ -10229,10 +10382,10 @@ async function pmHandoff(ctx, parsed) {
     ]) {
       ctx.out.log(`${label}:`);
       if (!records.length) ctx.out.log("- (none)");
-      else for (const record11 of records) printRecord(
+      else for (const record10 of records) printRecord(
         ctx,
         label === "unmet goals" ? "goal" : label === "active tasks" ? "task" : "bug",
-        record11
+        record10
       );
     }
   });
@@ -10423,167 +10576,12 @@ function age(input) {
   return `${Math.round(input / 6e4)}m`;
 }
 
-// src/platform-chat-credential-command.ts
-import process12 from "process";
-async function rotatePlatformChatCredential(parsed, deps) {
-  assertArgs(
-    parsed,
-    [
-      "config",
-      "context",
-      "platform",
-      "token",
-      "email",
-      "open",
-      "json",
-      "yes",
-      "wrangler-config",
-      "expected-version"
-    ],
-    3
-  );
-  if (parsed.options.yes !== true) {
-    throw new Error(
-      "platform chat-credentials rotate changes the production chat secret; pass --yes"
-    );
-  }
-  const context = await resolveOperatorContext(parsed, {
-    allowMissingConfig: true
-  });
-  const platform = context.platform.value;
-  const doFetch = deps.fetch ?? fetch;
-  const out = deps.stdout ?? console;
-  const run = deps.runner ?? defaultRunner;
-  const cwd = process12.cwd();
-  const wranglerConfig = stringOpt(parsed.options["wrangler-config"]) ?? "packages/chat-agent/wrangler.jsonc";
-  if (!await wranglerLoggedIn(run, cwd)) {
-    throw new Error(
-      'Wrangler is not authenticated; run "npx wrangler login" and retry'
-    );
-  }
-  const priorHealth = await doFetch(`${platform}/health/services/chat`);
-  const priorVersion = priorHealth.headers.get("x-odla-worker-version-id");
-  await priorHealth.body?.cancel().catch(() => {
-  });
-  if (!priorVersion) {
-    throw new Error(
-      "chat health did not identify its current Worker version; refusing to rotate"
-    );
-  }
-  const expectedVersion = stringOpt(parsed.options["expected-version"]);
-  if (expectedVersion && priorVersion !== expectedVersion) {
-    throw new Error(
-      `chat health answered from version ${priorVersion}; expected ${expectedVersion}`
-    );
-  }
-  const token = await resolveAdminPlatformToken({
-    platform,
-    scope: "platform:chat:credential:write",
-    token: stringOpt(parsed.options.token),
-    tokenFile: context.credentials.scopedTokenFile,
-    email: stringOpt(parsed.options.email),
-    open: parsed.options.open === false ? false : parsed.options.open === true ? true : void 0,
-    fetch: doFetch,
-    stdout: out,
-    openApprovalUrl: deps.openUrl,
-    label: "odla CLI (rotate built-in Discussion responder)"
-  });
-  const mintedResponse = await doFetch(
-    `${platform}/registry/platform/chat-credentials/rotate`,
-    {
-      method: "POST",
-      headers: { authorization: `Bearer ${token}` }
-    }
-  );
-  const minted = await mintedResponse.json().catch(() => null);
-  if (!mintedResponse.ok) {
-    throw new Error(
-      `mint Discussion credential failed (HTTP ${mintedResponse.status}): ${apiMessage(minted)}`
-    );
-  }
-  if (!isPlatformChatCredential(minted)) {
-    throw new Error(
-      "platform returned an invalid odla.platform-chat-credential/v1 envelope"
-    );
-  }
-  const put = await wranglerPutSecret(run, {
-    name: "ODLA_BOT_TOKENS",
-    value: JSON.stringify({
-      [minted.appId]: { [minted.principalId]: minted.key }
-    }),
-    configPath: wranglerConfig,
-    cwd
-  });
-  if (put.code !== 0) {
-    throw new Error(
-      "Wrangler could not replace ODLA_BOT_TOKENS; the new scoped key was not activated"
-    );
-  }
-  const version = await waitForRotatedChatHealth({
-    fetch: doFetch,
-    platform,
-    priorVersion,
-    wait: deps.pollWait
-  });
-  const result = {
-    schemaVersion: "odla.platform-chat-credential-rotation/v1",
-    appId: minted.appId,
-    appIncarnation: minted.appIncarnation,
-    principalId: minted.principalId,
-    health: { ok: true, service: "odla-chat-agent", version }
-  };
-  if (parsed.options.json === true) {
-    out.log(JSON.stringify(result, null, 2));
-  } else {
-    out.log(
-      `rotated	${result.appId}	${result.principalId}	${result.health.version}`
-    );
-  }
-}
-async function waitForRotatedChatHealth(opts) {
-  const wait2 = opts.wait ?? ((milliseconds) => new Promise((resolve12) => setTimeout(resolve12, milliseconds)));
-  let lastStatus = 0;
-  let lastVersion = null;
-  let lastError = "private_service_unready";
-  for (let attempt = 0; attempt < 60; attempt++) {
-    const response2 = await opts.fetch(
-      `${opts.platform}/health/services/chat`
-    );
-    const body = await response2.json().catch(() => null);
-    const version = response2.headers.get("x-odla-worker-version-id");
-    if (response2.ok && record7(body) && body.ok === true && body.service === "odla-chat-agent" && version && version !== opts.priorVersion) {
-      return version;
-    }
-    lastStatus = response2.status;
-    lastVersion = version;
-    lastError = record7(body) && typeof body.error === "string" ? body.error : "private_service_unready";
-    if (attempt < 59) await wait2(5e3);
-  }
-  throw new Error(
-    `chat health did not converge on the rotated Worker deployment (HTTP ${lastStatus}, version ${lastVersion ?? "unknown"}, ${lastError})`
-  );
-}
-function isPlatformChatCredential(value2) {
-  return record7(value2) && value2.schemaVersion === "odla.platform-chat-credential/v1" && value2.appId === "odla-pm" && typeof value2.appIncarnation === "string" && value2.appIncarnation.length > 0 && value2.principalId === "agent_odla" && typeof value2.key === "string" && value2.key.startsWith("odla_sk_");
-}
-function apiMessage(value2) {
-  if (!record7(value2)) return "request failed";
-  const error = record7(value2.error) ? value2.error : value2;
-  return typeof error.message === "string" ? error.message : typeof error.code === "string" ? error.code : "request failed";
-}
-function record7(value2) {
-  return !!value2 && typeof value2 === "object" && !Array.isArray(value2);
-}
-
 // src/platform-command.ts
 async function platformCommand(parsed, deps = {}) {
   const action2 = parsed.positionals[1];
   if (action2 === "status") {
     return platformStatus(parsed, deps);
   }
-  if (action2 === "chat-credentials" && parsed.positionals[2] === "rotate") {
-    return rotatePlatformChatCredential(parsed, deps);
-  }
   throw new Error(
     `unknown platform action "${[
       action2,
@@ -10621,7 +10619,7 @@ async function platformStatus(parsed, deps) {
   const body = await response2.json().catch(() => null);
   if (!response2.ok) {
     throw new Error(
-      `read platform status failed (HTTP ${response2.status}): ${apiMessage2(body)}`
+      `read platform status failed (HTTP ${response2.status}): ${apiMessage(body)}`
     );
   }
   if (!isPlatformStatus(body)) {
@@ -10634,17 +10632,17 @@ async function platformStatus(parsed, deps) {
   }
 }
 function isPlatformStatus(value2) {
-  if (!record8(value2) || value2.schemaVersion !== "odla.platform-status/v1") return false;
-  if (!record8(value2.verdict) || !Array.isArray(value2.verdict.reasons)) return false;
-  if (!record8(value2.catalog) || !record8(value2.summary)) return false;
+  if (!record7(value2) || value2.schemaVersion !== "odla.platform-status/v1") return false;
+  if (!record7(value2.verdict) || !Array.isArray(value2.verdict.reasons)) return false;
+  if (!record7(value2.catalog) || !record7(value2.summary)) return false;
   return Array.isArray(value2.services) && Array.isArray(value2.nextActions);
 }
-function apiMessage2(value2) {
-  if (!record8(value2)) return "request failed";
-  const error = record8(value2.error) ? value2.error : value2;
+function apiMessage(value2) {
+  if (!record7(value2)) return "request failed";
+  const error = record7(value2.error) ? value2.error : value2;
   return typeof error.message === "string" ? error.message : typeof error.code === "string" ? error.code : "request failed";
 }
-function record8(value2) {
+function record7(value2) {
   return !!value2 && typeof value2 === "object" && !Array.isArray(value2);
 }
 
@@ -10685,7 +10683,7 @@ function statusVerdict(reads) {
       severity: "degraded"
     });
   }
-  const performance = record9(reads.liveSync.body.performance) ? reads.liveSync.body.performance : null;
+  const performance = record8(reads.liveSync.body.performance) ? reads.liveSync.body.performance : null;
   if (performance?.status === "unavailable") {
     reasons.push({
       source: "liveSync",
@@ -10766,7 +10764,7 @@ function statusVerdict(reads) {
     reasons
   };
 }
-function record9(value2) {
+function record8(value2) {
   return Boolean(value2) && typeof value2 === "object" && !Array.isArray(value2);
 }
 function numeric2(value2) {
@@ -10794,7 +10792,7 @@ function printO11yStatus(status, out) {
   out.log(
     `o11y status ${status.scope.appId}/${status.scope.env} (${status.scope.minutes}m)`
   );
-  const routes = Array.isArray(status.application.body.routes) ? status.application.body.routes.filter(record10) : [];
+  const routes = Array.isArray(status.application.body.routes) ? status.application.body.routes.filter(record9) : [];
   const requests = routes.reduce(
     (total, row) => total + numeric3(row.requests),
     0
@@ -10806,39 +10804,39 @@ function printO11yStatus(status, out) {
   out.log(
     `application	${status.application.httpStatus}	${requests} requests	${errors} errors`
   );
-  const versions = Array.isArray(status.applicationVersions.body.rows) ? status.applicationVersions.body.rows.filter(record10) : [];
+  const versions = Array.isArray(status.applicationVersions.body.rows) ? status.applicationVersions.body.rows.filter(record9) : [];
   out.log(
     `application-versions	${status.applicationVersions.httpStatus}	${versions.length ? versions.slice(0, 5).map(
       (row) => `${String(row.value || "(unattributed)")}:${numeric3(row.requests)}`
     ).join(", ") : "none observed"}`
   );
   out.log(liveSyncLine(status.liveSync));
-  const canaryDurations = record10(status.canary.body.durationsMs) ? status.canary.body.durationsMs : {};
+  const canaryDurations = record9(status.canary.body.durationsMs) ? status.canary.body.durationsMs : {};
   out.log(
     `canary	${status.canary.httpStatus}	${String(status.canary.body.status ?? status.canary.body.error ?? "unavailable")}	${optionalNumeric(canaryDurations.publishToVisibleMs)} publish-to-visible`
   );
-  const collectorIngest = record10(status.collector.body.ingest) ? status.collector.body.ingest : {};
-  const collectorStorage = record10(collectorIngest.storage) ? collectorIngest.storage : {};
+  const collectorIngest = record9(status.collector.body.ingest) ? status.collector.body.ingest : {};
+  const collectorStorage = record9(collectorIngest.storage) ? collectorIngest.storage : {};
   out.log(
     `collector	${status.collector.httpStatus}	${String(status.collector.body.status ?? status.collector.body.error ?? "unavailable")}	${numeric3(collectorStorage.affectedPoints)} affected points`
   );
-  const providerMetrics = record10(status.provider.body.metrics) ? status.provider.body.metrics : {};
-  const providerCapacity = record10(status.provider.body.capacity) ? status.provider.body.capacity : {};
-  const workerMemory = record10(providerCapacity.memory) ? providerCapacity.memory : {};
+  const providerMetrics = record9(status.provider.body.metrics) ? status.provider.body.metrics : {};
+  const providerCapacity = record9(status.provider.body.capacity) ? status.provider.body.capacity : {};
+  const workerMemory = record9(providerCapacity.memory) ? providerCapacity.memory : {};
   out.log(
     `cloudflare	${status.provider.httpStatus}	${String(status.provider.body.status ?? status.provider.body.error ?? "unavailable")}	${numeric3(providerMetrics.requests)} invocations	${numeric3(providerMetrics.errors)} runtime errors	${optionalBytes(workerMemory.headroomBytes)} isolate memory headroom`
   );
   for (const line of providerCapacityLines(status.providerCapacity)) {
     out.log(line);
   }
-  const coverage = record10(status.providerReconciliation.body.comparison) ? status.providerReconciliation.body.comparison : {};
-  const coverageCounts = record10(status.providerReconciliation.body.counts) ? status.providerReconciliation.body.counts : {};
-  const coverageBudget = record10(status.providerReconciliation.body.budget) ? status.providerReconciliation.body.budget : {};
+  const coverage = record9(status.providerReconciliation.body.comparison) ? status.providerReconciliation.body.comparison : {};
+  const coverageCounts = record9(status.providerReconciliation.body.counts) ? status.providerReconciliation.body.counts : {};
+  const coverageBudget = record9(status.providerReconciliation.body.budget) ? status.providerReconciliation.body.budget : {};
   out.log(
     `request-coverage	${status.providerReconciliation.httpStatus}	${String(status.providerReconciliation.body.status ?? status.providerReconciliation.body.error ?? "unavailable")}	${optionalPercent(coverage.applicationCoverage)} application/provider	${numeric3(coverageCounts.applicationRequests)}/${numeric3(coverageCounts.providerRequests)} requests	\xB1${optionalPercent(coverageBudget.maxRelativeError)} budget`
   );
   const providerPoints = Array.isArray(status.providerHistory.body.points) ? status.providerHistory.body.points.length : 0;
-  const providerFreshness = record10(status.providerHistory.body.freshness) ? status.providerHistory.body.freshness : {};
+  const providerFreshness = record9(status.providerHistory.body.freshness) ? status.providerHistory.body.freshness : {};
   out.log(
     `cloudflare-history	${status.providerHistory.httpStatus}	${String(status.providerHistory.body.status ?? status.providerHistory.body.error ?? "unavailable")}	${providerPoints} snapshots	${optionalAge(providerFreshness.ageMs)} old`
   );
@@ -10847,17 +10845,17 @@ function printO11yStatus(status, out) {
   );
 }
 function providerCapacityLines(read3) {
-  const resources = record10(read3.body.resources) ? read3.body.resources : {};
-  const durableObjects = record10(resources.durableObjects) ? resources.durableObjects : {};
-  const periodic = record10(durableObjects.periodic) ? durableObjects.periodic : {};
-  const storage = record10(durableObjects.sqliteStorage) ? durableObjects.sqliteStorage : {};
-  const d1 = record10(resources.d1) ? resources.d1 : {};
-  const d1Activity = record10(d1.activity) ? d1.activity : {};
-  const d1Storage = record10(d1.storage) ? d1.storage : {};
-  const d1Latency = record10(d1Activity.latency) ? d1Activity.latency : {};
-  const r2 = record10(resources.r2) ? resources.r2 : {};
-  const r2Operations = record10(r2.operations) ? r2.operations : {};
-  const r2Storage = record10(r2.storage) ? r2.storage : {};
+  const resources = record9(read3.body.resources) ? read3.body.resources : {};
+  const durableObjects = record9(resources.durableObjects) ? resources.durableObjects : {};
+  const periodic = record9(durableObjects.periodic) ? durableObjects.periodic : {};
+  const storage = record9(durableObjects.sqliteStorage) ? durableObjects.sqliteStorage : {};
+  const d1 = record9(resources.d1) ? resources.d1 : {};
+  const d1Activity = record9(d1.activity) ? d1.activity : {};
+  const d1Storage = record9(d1.storage) ? d1.storage : {};
+  const d1Latency = record9(d1Activity.latency) ? d1Activity.latency : {};
+  const r2 = record9(resources.r2) ? resources.r2 : {};
+  const r2Operations = record9(r2.operations) ? r2.operations : {};
+  const r2Storage = record9(r2.storage) ? r2.storage : {};
   const status = String(
     read3.body.status ?? read3.body.error ?? "unavailable"
   );
@@ -10868,11 +10866,11 @@ function providerCapacityLines(read3) {
   ];
 }
 function liveSyncLine(read3) {
-  const performance = record10(read3.body.performance) ? read3.body.performance : {};
-  const commitToSend = record10(performance.commitToSend) ? performance.commitToSend : {};
+  const performance = record9(read3.body.performance) ? read3.body.performance : {};
+  const commitToSend = record9(performance.commitToSend) ? performance.commitToSend : {};
   return `live-sync	${read3.httpStatus}	${String(read3.body.status ?? read3.body.error ?? "unavailable")}	${numeric3(read3.body.activeConnections)} active	${optionalNumeric(commitToSend.p95)} commit-to-send p95	${numeric3(performance.sendFailures)} send failures`;
 }
-function record10(value2) {
+function record9(value2) {
   return Boolean(value2) && typeof value2 === "object" && !Array.isArray(value2);
 }
 function numeric3(value2) {
@@ -11056,9 +11054,9 @@ async function read2(url, headers, doFetch) {
 
 // src/record.ts
 import { appendFileSync } from "fs";
-import process13 from "process";
+import process12 from "process";
 function recordInvocation(parsed) {
-  const file = process13.env.ODLA_CLI_RECORD;
+  const file = process12.env.ODLA_CLI_RECORD;
   if (!file) return;
   try {
     const entry = {
@@ -11730,9 +11728,9 @@ import { spawnSync } from "child_process";
 import { mkdtempSync, readFileSync as readFileSync13, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
 import { tmpdir as tmpdir4 } from "os";
 import { join as join15 } from "path";
-import process14 from "process";
+import process13 from "process";
 var EDITOR_ENV = ["ODLA_EDITOR", "VISUAL", "EDITOR"];
-function resolveEditor(env = process14.env) {
+function resolveEditor(env = process13.env) {
   for (const name of EDITOR_ENV) {
     const value2 = env[name];
     if (value2 && value2.trim()) return value2.trim();
@@ -11746,8 +11744,8 @@ function defaultRun(command, path) {
   return result.status ?? 0;
 }
 function editText(initial, slug, deps = {}) {
-  const env = deps.env ?? process14.env;
-  const interactive = deps.interactive ?? (() => Boolean(process14.stdin.isTTY));
+  const env = deps.env ?? process13.env;
+  const interactive = deps.interactive ?? (() => Boolean(process13.stdin.isTTY));
   const editor = resolveEditor(env);
   if (!editor)
     throw new Error(
@@ -12591,6 +12589,10 @@ async function runCli(argv = process.argv.slice(2), dependencies = {}) {
     await securityCommand(parsed, runtime);
     return;
   }
+  if (command === "brand") {
+    await brandCommand(parsed, runtime);
+    return;
+  }
   if (command === "pm") {
     await pmCommand(parsed, runtime);
     return;
@@ -12734,4 +12736,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=chunk-ZAZBUURZ.js.map
+//# sourceMappingURL=chunk-DS64H4FY.js.map