@odla-ai/cli 0.27.15 → 0.27.17

package/dist/{cli-2RZFZRRT.js → cli-DCSVQAZ6.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "./chunk-MR5QXX3B.js";
+} from "./chunk-3WVVHH3Y.js";
 import {
   exitCodeFor
 } from "./chunk-UKLSRQ5J.js";
@@ -9,4 +9,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=cli-2RZFZRRT.js.map
+//# sourceMappingURL=cli-DCSVQAZ6.js.map

package/dist/index.cjs

@@ -41,6 +41,7 @@ __export(index_exports, {
   SYSTEM_AI_PURPOSES: () => SYSTEM_AI_PURPOSES,
   acceptedAfter: () => acceptedAfter,
   adminAi: () => adminAi,
+  aiModels: () => aiModels,
   calendarBookingPageUrl: () => calendarBookingPageUrl,
   calendarCalendars: () => calendarCalendars,
   calendarConnect: () => calendarConnect,
@@ -2704,6 +2705,63 @@ function printGroup(out, heading, items) {
   out.log("");
 }
 
+// src/ai-models.ts
+var import_ai = require("@odla-ai/ai");
+async function aiModels(options = {}) {
+  const cfg = await loadProjectConfig(options.configPath ?? "odla.config.mjs");
+  const env = options.env ?? cfg.envs[0] ?? "dev";
+  if (!cfg.envs.includes(env)) throw new Error(`ai models env "${env}" is not declared in config envs`);
+  const url = new URL(`/registry/apps/${encodeURIComponent(cfg.app.id)}/public-config`, cfg.platformUrl);
+  url.searchParams.set("env", env);
+  const response2 = await (options.fetch ?? fetch)(url);
+  if (!response2.ok) throw new Error(`read app AI models failed (${response2.status}): ${await safeText4(response2)}`);
+  const body = await response2.json();
+  if (!body.ai) throw new Error(`ai is not configured for ${cfg.app.id}/${env}`);
+  const mode = body.ai.mode === "hosted" ? "hosted" : "byok";
+  const defaultModel = typeof body.ai.model === "string" ? body.ai.model : void 0;
+  let models;
+  if (mode === "hosted") {
+    if (body.ai.enabled !== true) throw new Error(`hosted ai is disabled for ${cfg.app.id}/${env}`);
+    if (!Array.isArray(body.ai.models) || !body.ai.models.every(isModelSpec)) {
+      throw new Error("platform returned an invalid hosted AI model catalog");
+    }
+    models = body.ai.models;
+  } else {
+    const provider = typeof body.ai.provider === "string" ? body.ai.provider : cfg.ai?.provider;
+    if (!provider) throw new Error(`BYOK ai has no provider for ${cfg.app.id}/${env}`);
+    models = Object.values(import_ai.DEFAULT_CATALOG).filter((model) => model.provider === provider);
+  }
+  if (options.provider) models = models.filter((model) => model.provider === options.provider);
+  models.sort((a, b) => a.provider.localeCompare(b.provider) || a.id.localeCompare(b.id));
+  const out = options.stdout ?? console;
+  if (options.json) {
+    out.log(JSON.stringify({ appId: cfg.app.id, env, mode, defaultModel: defaultModel ?? null, models }, null, 2));
+    return;
+  }
+  out.log("provider	model	default	capabilities");
+  for (const model of models) {
+    out.log([model.provider, model.id, model.id === defaultModel ? "yes" : "", capabilityList(model)].join("	"));
+  }
+}
+function capabilityList(model) {
+  return [
+    model.capabilities.imageIn ? "image" : "",
+    model.capabilities.audioIn ? "audio" : "",
+    model.capabilities.documentIn ? "document" : "",
+    model.capabilities.toolUse ? "tools" : "",
+    model.capabilities.thinking || model.capabilities.effort ? "reasoning" : "",
+    model.capabilities.webSearch || model.superpowers?.webSearch ? "web-search" : ""
+  ].filter(Boolean).join(",");
+}
+function isModelSpec(value2) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) return false;
+  const model = value2;
+  return typeof model.id === "string" && typeof model.nativeId === "string" && (model.provider === "anthropic" || model.provider === "openai" || model.provider === "google") && Boolean(model.capabilities) && typeof model.capabilities === "object";
+}
+async function safeText4(response2) {
+  return (await response2.text().catch(() => "request failed")).slice(0, 300);
+}
+
 // src/config-operation-command.ts
 var import_apps6 = require("@odla-ai/apps");
 var import_node_path8 = require("path");
@@ -2884,10 +2942,10 @@ function record2(value2) {
 var import_apps5 = require("@odla-ai/apps");
 
 // src/provision-helpers.ts
-var import_ai = require("@odla-ai/ai");
+var import_ai2 = require("@odla-ai/ai");
 var import_apps4 = require("@odla-ai/apps");
 function defaultSecretName(provider) {
-  const names = import_ai.DEFAULT_SECRET_NAMES;
+  const names = import_ai2.DEFAULT_SECRET_NAMES;
   return names[provider] ?? `${provider}_api_key`;
 }
 async function assertTenantAdminAccess(doFetch, cfg, env, token) {
@@ -2897,7 +2955,7 @@ async function assertTenantAdminAccess(doFetch, cfg, env, token) {
   });
   if (res.ok || res.status === 404) return;
   if (res.status === 403) {
-    const detail = await safeText4(res);
+    const detail = await safeText5(res);
     const code = errorCode(detail);
     if (code === "human_session_required") {
       throw new Error(
@@ -2913,7 +2971,7 @@ async function assertTenantAdminAccess(doFetch, cfg, env, token) {
       `${env}: this credential lacks live app.manage authority for "${cfg.app.id}" (tenant ${tenantId}) \u2014 nothing was minted or written; run "odla-ai provision --request-grant --email <odla-account>" to open a fresh owner review. If the human account is not an owner, an existing owner must add it in signed-in Studio; an agent token cannot repair ownership`
     );
   }
-  throw new Error(`${env}: tenant access preflight (${tenantId}) failed: ${res.status} ${await safeText4(res)}`);
+  throw new Error(`${env}: tenant access preflight (${tenantId}) failed: ${res.status} ${await safeText5(res)}`);
 }
 function errorCode(text2) {
   try {
@@ -2929,7 +2987,7 @@ async function postJson(doFetch, url, bearer, body) {
     headers: { authorization: `Bearer ${bearer}`, "content-type": "application/json" },
     body: JSON.stringify(body)
   });
-  if (!res.ok) throw new Error(`${new URL(url).pathname} failed: ${res.status} ${await safeText4(res)}`);
+  if (!res.ok) throw new Error(`${new URL(url).pathname} failed: ${res.status} ${await safeText5(res)}`);
 }
 function normalizeClerkConfig(value2) {
   if (!value2) return null;
@@ -2942,7 +3000,7 @@ function normalizeClerkConfig(value2) {
   const publishableKey = envValue(cfg.publishableKey);
   return publishableKey ? { publishableKey, ...cfg.audience ? { audience: cfg.audience } : {}, ...cfg.mode ? { mode: cfg.mode } : {} } : null;
 }
-async function safeText4(res) {
+async function safeText5(res) {
   try {
     return redactSecrets((await res.text()).slice(0, 500));
   } catch {
@@ -4263,7 +4321,7 @@ function assertWranglerConfig(cfg) {
 }
 
 // src/secrets-set.ts
-var import_ai2 = require("@odla-ai/ai");
+var import_ai3 = require("@odla-ai/ai");
 var import_apps10 = require("@odla-ai/apps");
 var PROD_ENV_NAMES2 = /* @__PURE__ */ new Set(["prod", "production"]);
 async function secretsSet(options) {
@@ -4277,7 +4335,7 @@ async function secretsSet(options) {
     optionalProjectCapabilities: ["app.manage"]
   });
   try {
-    await (0, import_ai2.putSecret)({ endpoint: cfg.dbEndpoint, token, fetch: doFetch }, tenantId, name, value2);
+    await (0, import_ai3.putSecret)({ endpoint: cfg.dbEndpoint, token, fetch: doFetch }, tenantId, name, value2);
   } catch (err) {
     throw new Error(scrubValue(err instanceof Error ? err.message : String(err), value2));
   }
@@ -4712,7 +4770,7 @@ async function getJson(doFetch, url, bearer) {
   const res = await doFetch(url, {
     headers: bearer ? { authorization: `Bearer ${bearer}` } : void 0
   });
-  if (!res.ok) throw new Error(`${new URL(url).pathname} returned ${res.status}: ${await safeText5(res)}`);
+  if (!res.ok) throw new Error(`${new URL(url).pathname} returned ${res.status}: ${await safeText6(res)}`);
   return res.json();
 }
 async function postJson2(doFetch, url, bearer, body) {
@@ -4721,7 +4779,7 @@ async function postJson2(doFetch, url, bearer, body) {
     headers: { authorization: `Bearer ${bearer}`, "content-type": "application/json" },
     body: JSON.stringify(body)
   });
-  if (!res.ok) throw new Error(`${new URL(url).pathname} returned ${res.status}: ${await safeText5(res)}`);
+  if (!res.ok) throw new Error(`${new URL(url).pathname} returned ${res.status}: ${await safeText6(res)}`);
   return res.json();
 }
 function publicConfigUrl(platformUrl, appId, env) {
@@ -4729,7 +4787,7 @@ function publicConfigUrl(platformUrl, appId, env) {
   url.searchParams.set("env", env);
   return url.toString();
 }
-async function safeText5(res) {
+async function safeText6(res) {
   try {
     return redactSecrets((await res.text()).slice(0, 500));
   } catch {
@@ -4785,6 +4843,20 @@ async function secretsCommand(parsed, deps) {
   });
 }
 async function projectCommand(command, parsed, deps) {
+  if (command === "ai") {
+    const sub = parsed.positionals[1];
+    if (sub !== "models") throw new Error(`unknown ai subcommand "${sub ?? ""}". Try "odla-ai ai models --env dev".`);
+    assertArgs(parsed, ["config", "env", "provider", "json"], 2);
+    await aiModels({
+      configPath: stringOpt(parsed.options.config) ?? "odla.config.mjs",
+      env: stringOpt(parsed.options.env),
+      provider: stringOpt(parsed.options.provider),
+      json: parsed.options.json === true,
+      fetch: deps.fetch,
+      stdout: deps.stdout
+    });
+    return true;
+  }
   if (command === "config") {
     const sub = parsed.positionals[1];
     if (sub !== "diff" && sub !== "plan" && sub !== "apply") {
@@ -8561,6 +8633,7 @@ Usage:
   odla-ai setup [--dir <project>] [--agent <name>] [--global] [--force]
   odla-ai init --app-id <id> --name <name> [--services db,ai,o11y,calendar] [--env dev --env prod] [--ai-provider <byok-provider>]
   odla-ai doctor [--config odla.config.mjs]
+  odla-ai ai models [--config odla.config.mjs] [--env dev] [--provider <id>] [--json]
   odla-ai config <diff|plan> [--config odla.config.mjs] [--email <odla-account>] [--json]
   odla-ai config apply --plan <plan.json> [--idempotency-key <key>] [--email <odla-account>] [--json]
   odla-ai operations get <operation-id> [--json]
@@ -10550,7 +10623,7 @@ async function read2(url, headers, doFetch) {
 
 // src/provision.ts
 var import_apps12 = require("@odla-ai/apps");
-var import_ai3 = require("@odla-ai/ai");
+var import_ai4 = require("@odla-ai/ai");
 var import_node_process11 = __toESM(require("process"), 1);
 
 // src/integration-provision.ts
@@ -10664,14 +10737,14 @@ async function mintDbKey(opts, tenantId) {
         appId: tenantId
       })
     });
-    if (!created.ok) throw new Error(`db app create (${tenantId}) failed: ${created.status} ${await safeText6(created)}`);
+    if (!created.ok) throw new Error(`db app create (${tenantId}) failed: ${created.status} ${await safeText7(created)}`);
     res = await opts.fetch(`${opts.cfg.dbEndpoint}/admin/apps/${encodeURIComponent(tenantId)}/keys`, {
       method: "POST",
       headers,
       body: "{}"
     });
   }
-  if (!res.ok) throw new Error(`db key mint (${tenantId}) failed: ${res.status} ${await safeText6(res)}`);
+  if (!res.ok) throw new Error(`db key mint (${tenantId}) failed: ${res.status} ${await safeText7(res)}`);
   const body = await res.json();
   if (!body.key) throw new Error(`db key mint (${tenantId}) returned no key`);
   return body.key;
@@ -10687,12 +10760,12 @@ async function issueO11yToken(opts) {
       `o11y token already exists for env "${opts.env}", but its shown-once value is not in the local credentials file; run "odla-ai provision --rotate-o11y-token --push-secrets" to replace it explicitly`
     );
   }
-  if (!res.ok) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) failed: ${res.status} ${await safeText6(res)}`);
+  if (!res.ok) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) failed: ${res.status} ${await safeText7(res)}`);
   const body = await res.json();
   if (!body.token) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) returned no token`);
   return body.token;
 }
-async function safeText6(res) {
+async function safeText7(res) {
   try {
     return redactSecrets((await res.text()).slice(0, 500));
   } catch {
@@ -10874,7 +10947,7 @@ ${env}: credentials are already saved; retry "odla-ai secrets push --env ${env}$
       const key = import_node_process11.default.env[cfg.ai.keyEnv];
       if (key) {
         const secretName = cfg.ai.secretName ?? defaultSecretName(cfg.ai.provider);
-        await (0, import_ai3.putSecret)({ endpoint: cfg.dbEndpoint, token, fetch: doFetch }, tenantId, secretName, key);
+        await (0, import_ai4.putSecret)({ endpoint: cfg.dbEndpoint, token, fetch: doFetch }, tenantId, secretName, key);
         out.log(`${env}: ${cfg.ai.provider} key stored in vault (${secretName})`);
       } else {
         out.log(`${env}: ${cfg.ai.keyEnv} not set; skipped provider key storage`);
@@ -10947,6 +11020,7 @@ var PM_ENTITIES = {
 };
 var COMMAND_SURFACE = {
   agent: { jobs: {}, retry: {} },
+  ai: { models: {} },
   admin: {
     ai: {
       show: {},
@@ -12973,6 +13047,7 @@ async function calendarCommand(parsed, dependencies) {
   SYSTEM_AI_PURPOSES,
   acceptedAfter,
   adminAi,
+  aiModels,
   calendarBookingPageUrl,
   calendarCalendars,
   calendarConnect,