@odla-ai/cli 0.37.0 → 0.37.1

package/dist/{cli-QR44X5IB.js → cli-OH6PCYZ3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "./chunk-OWTIDSL5.js";
+} from "./chunk-XFIFFYNH.js";
 import {
   exitCodeFor
 } from "./chunk-UKLSRQ5J.js";
@@ -9,4 +9,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=cli-QR44X5IB.js.map
+//# sourceMappingURL=cli-OH6PCYZ3.js.map

package/dist/index.cjs

@@ -7010,7 +7010,7 @@ function createCodeRuntimeControlClient(options) {
     throw new TypeError("modelRequestTimeoutMs must be an integer from 30000 to 1800000");
   }
   const request3 = options.fetch ?? fetch;
-  const call2 = async (path, body, timeoutMs = requestTimeoutMs) => {
+  const call3 = async (path, body, timeoutMs = requestTimeoutMs) => {
     const timeout = AbortSignal.timeout(timeoutMs);
     const signal = options.signal ? AbortSignal.any([options.signal, timeout]) : timeout;
     let response2;
@@ -7040,17 +7040,17 @@ function createCodeRuntimeControlClient(options) {
   return {
     heartbeat: async (version, capabilities) => {
       validateHeartbeat(version, capabilities);
-      return parseSnapshot(await call2("/registry/code/runtime/heartbeat", { runtimeVersion: version, capabilities }));
+      return parseSnapshot(await call3("/registry/code/runtime/heartbeat", { runtimeVersion: version, capabilities }));
     },
     acknowledge: async (commandId, result) => {
       if (!/^ccmd_[0-9a-f]{32}$/.test(commandId)) throw new TypeError("invalid Code runtime command id");
-      await call2(`/registry/code/runtime/commands/${commandId}/ack`, result);
+      await call3(`/registry/code/runtime/commands/${commandId}/ack`, result);
     },
     source: async (sessionId) => parseSource(
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/source`, {})
+      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/source`, {})
     ),
     infer: async (sessionId, inference) => {
-      const value2 = record5(await call2(
+      const value2 = record5(await call3(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/inference`,
         inference,
         modelRequestTimeoutMs
@@ -7061,11 +7061,11 @@ function createCodeRuntimeControlClient(options) {
       return value2;
     },
     review: async (sessionId, review) => parseReview(
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/review`, review, modelRequestTimeoutMs)
+      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/review`, review, modelRequestTimeoutMs)
     ),
     submitCandidate: async (sessionId, checkpointId, verification) => {
       if (!/^cpoint_[0-9a-f]{32}$/.test(checkpointId)) throw new TypeError("invalid Code checkpoint id");
-      return parseCandidate(await call2(
+      return parseCandidate(await call3(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/candidates`,
         { checkpointId, verification }
       ));
@@ -7075,21 +7075,21 @@ function createCodeRuntimeControlClient(options) {
       if (!/^[A-Za-z0-9._:-]{1,120}$/.test(eventId) || !event || typeof event !== "object" || new TextEncoder().encode(serialized).byteLength > 24e3) {
         throw new TypeError("invalid Code session event");
       }
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/chat/events`, { eventId, event });
+      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/chat/events`, { eventId, event });
     },
     recallMemories: async (sessionId, subjects, limit) => {
-      const response2 = await call2(
+      const response2 = await call3(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/recall`,
         { subjects: [...subjects], limit }
       );
       return Array.isArray(response2.memories) ? response2.memories : [];
     },
     rememberMemory: async (sessionId, memory) => {
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/remember`, memory);
+      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/remember`, memory);
     },
     reportSessionFailure: async (sessionId, message2) => {
       if (!message2.trim() || message2.length > 2e3) throw new TypeError("invalid Code session failure");
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/failure`, { message: message2 });
+      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/failure`, { message: message2 });
     }
   };
 }
@@ -7978,7 +7978,7 @@ var SYSTEM_PROMPT_FOR = {
 };
 function codeSkill(opts) {
   let seq = 0;
-  const call2 = async (tool, input, signal) => {
+  const call3 = async (tool, input, signal) => {
     const startedAt = Date.now();
     const response2 = await opts.broker.execute(
       { lease: opts.lease, workspaceDir: opts.workspaceDir, signal },
@@ -8000,7 +8000,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.read", input, ctx.signal)
+    handler: (input, ctx) => call3("sandbox.read", input, ctx.signal)
   };
   const applyPatch = {
     name: "odla_apply_git_diff",
@@ -8011,7 +8011,7 @@ function codeSkill(opts) {
       properties: { patch: { type: "string", minLength: 1, maxLength: 262144 } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.apply_patch", input, ctx.signal)
+    handler: (input, ctx) => call3("sandbox.apply_patch", input, ctx.signal)
   };
   const runRecipe = {
     name: "odla_run_recipe",
@@ -8022,7 +8022,7 @@ function codeSkill(opts) {
       properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.run_recipe", input, ctx.signal)
+    handler: (input, ctx) => call3("sandbox.run_recipe", input, ctx.signal)
   };
   const listFiles2 = {
     name: "odla_list",
@@ -8035,7 +8035,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.list", input, ctx.signal)
+    handler: (input, ctx) => call3("sandbox.list", input, ctx.signal)
   };
   const searchFiles = {
     name: "odla_search",
@@ -8051,7 +8051,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.search", input, ctx.signal)
+    handler: (input, ctx) => call3("sandbox.search", input, ctx.signal)
   };
   const graphTool = (name, tool, description, required) => ({
     name,
@@ -8062,7 +8062,7 @@ function codeSkill(opts) {
       properties: { query: { type: "string", maxLength: 512 } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2(tool, input, ctx.signal)
+    handler: (input, ctx) => call3(tool, input, ctx.signal)
   });
   const orientation = [
     graphTool(
@@ -8101,9 +8101,9 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
-    onToolCall: (call2) => {
-      toolCalls.push(call2);
-      options.onToolCall?.(call2);
+    onToolCall: (call3) => {
+      toolCalls.push(call3);
+      options.onToolCall?.(call3);
     }
   });
   const compaction = options.compaction === void 0 ? (0, import_ai4.keepRecentExchanges)({ whenInputTokensExceed: 12e4, keep: 3 }) : options.compaction;
@@ -12884,9 +12884,15 @@ async function provisionEnvCredentials(opts) {
     if (o11yToken) {
       opts.stdout.log(`${opts.env}: reusing local o11y ingest token`);
     } else {
-      o11yToken = await issueO11yToken(opts);
-      credentials = save(opts, credentials, tenantId, { ...dbKey ? { dbKey } : {}, o11yToken });
-      opts.stdout.log(`${opts.env}: ${opts.rotateO11y ? "rotated" : "issued"} o11y ingest token`);
+      o11yToken = await issueO11yToken(opts) ?? void 0;
+      if (o11yToken) {
+        credentials = save(opts, credentials, tenantId, { ...dbKey ? { dbKey } : {}, o11yToken });
+        opts.stdout.log(`${opts.env}: ${opts.rotateO11y ? "rotated" : "issued"} o11y ingest token`);
+      } else {
+        opts.stdout.log(
+          `${opts.env}: o11y token already exists and its shown-once value is not on this machine \u2014 leaving it alone (a co-owner provisioned this env). Nothing was rotated, and this env's running Worker keeps its token. To replace it deliberately \u2014 which invalidates the token on whatever is deployed \u2014 run "odla-ai provision --rotate-o11y-token --push-secrets".`
+        );
+      }
     }
   }
   return save(opts, credentials, tenantId, {
@@ -12940,11 +12946,7 @@ async function issueO11yToken(opts) {
     `${opts.cfg.platformUrl}/o11y/${encodeURIComponent(opts.cfg.app.id)}/token${suffix}?env=${encodeURIComponent(opts.env)}`,
     { method: "POST", headers: { authorization: `Bearer ${opts.developerToken}` } }
   );
-  if (res.status === 409 && !opts.rotateO11y) {
-    throw new Error(
-      `o11y token already exists for env "${opts.env}", but its shown-once value is not in the local credentials file; run "odla-ai provision --push-secrets" to install a separate runtime credential without rotating siblings`
-    );
-  }
+  if (res.status === 409 && !opts.rotateO11y) return null;
   if (!res.ok) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) failed: ${res.status} ${await safeText7(res)}`);
   const body = await res.json();
   if (!body.token) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) returned no token`);
@@ -13879,12 +13881,7 @@ ${counts.created} created, ${counts.updated} updated, ${counts.unchanged} unchan
   );
 }
 async function upsert(ctx, r, visibility) {
-  const page2 = await call(
-    ctx,
-    "GET",
-    `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(r.slug)}&limit=1`
-  );
-  const found = page2.records[0];
+  const found = await bySlug(ctx, r.slug).catch(() => null);
   if (!found) {
     await call(ctx, "POST", "/runbook", {
       appId: ctx.appId,
@@ -14289,13 +14286,7 @@ async function runbookAsk(ctx, question, all) {
   ctx.out.log(JSDOC_POINTER);
 }
 async function runbookComment(ctx, slug, body) {
-  const page2 = await call(
-    ctx,
-    "GET",
-    `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(slug)}&limit=1`
-  );
-  const found = page2.records[0];
-  if (!found) throw new Error(`no runbook "${slug}" in ${ctx.appId}`);
+  const found = await bySlug(ctx, slug);
   await call(ctx, "POST", `/runbook/${encodeURIComponent(found.id)}/comments`, { body });
   ctx.out.log(`commented on ${slug} (v${found.version})`);
 }
@@ -14346,13 +14337,7 @@ var defaultRunOrInjected = (deps) => deps.run ?? defaultRun;
 
 // src/runbook-edit-flow.ts
 async function editRunbook(ctx, slug, deps = {}) {
-  const page2 = await call(
-    ctx,
-    "GET",
-    `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(slug)}&limit=1`
-  );
-  const found = page2.records[0];
-  if (!found) throw new Error(`no runbook "${slug}" in ${ctx.appId}`);
+  const found = await bySlug(ctx, slug);
   ctx.out.log(`opening ${slug} v${found.version} in your editor\u2026`);
   const body = await editText(found.body, slug, deps);
   return body === null ? null : { body, expectedVersion: found.version };