@odla-ai/cli 0.37.0 → 0.38.0

package/dist/bin.js

@@ -174,7 +174,7 @@ function absoluteEntryPath(entryPath) {
 
 // src/bin.ts
 var argv = process.argv.slice(2);
-requireCurrentCliForProvision(argv).then(() => requireCoherentProvisionRuntime(argv)).then(async () => (await import("./cli-QR44X5IB.js")).runCli()).catch((err) => {
+requireCurrentCliForProvision(argv).then(() => requireCoherentProvisionRuntime(argv)).then(async () => (await import("./cli-DZKEPGBZ.js")).runCli()).catch((err) => {
   console.error(redactSecrets(`odla-ai: ${err instanceof Error ? err.message : String(err)}`));
   process.exitCode = exitCodeFor(err);
 });

package/dist/{chunk-OWTIDSL5.js → chunk-DKOJBWRJ.js}

@@ -1023,6 +1023,66 @@ function addOption(options, name, value2) {
   else options[name] = [String(current), String(value2)];
 }
 
+// src/admin-spend.ts
+async function call(ctx, method, scope) {
+  const url = `${ctx.platformUrl.replace(/\/$/, "")}/registry/platform/spend?scope=${encodeURIComponent(scope)}`;
+  const response2 = await ctx.doFetch(url, {
+    method,
+    headers: { authorization: `Bearer ${ctx.token}` }
+  });
+  const body = await response2.json().catch(() => ({}));
+  if (!response2.ok) {
+    const detail = body.error?.message ?? body.error?.code ?? `registry returned ${response2.status}`;
+    throw new Error(`spend ${method} failed: ${detail} (${response2.status})`);
+  }
+  return body;
+}
+var money = (value2) => `$${value2.toFixed(2)}`;
+async function spendShow(ctx, scope) {
+  const view = await call(ctx, "GET", scope);
+  if (ctx.json) return ctx.out.log(JSON.stringify(view, null, 2));
+  ctx.out.log(`scope:   ${view.scope}`);
+  ctx.out.log(`day:     ${view.day} (UTC)`);
+  ctx.out.log(
+    `spent:   ${money(view.spentUsd)} of ${view.capUsd > 0 ? money(view.capUsd) : "(no cap set)"}`
+  );
+  ctx.out.log(`calls:   ${view.calls}`);
+  if (view.unpricedCalls > 0) {
+    ctx.out.log(
+      `unpriced: ${view.unpricedCalls} call(s) had no price, so "spent" is a floor, not the total.`
+    );
+  }
+  if (!view.latched) return ctx.out.log("status:  running");
+  ctx.out.log(
+    `status:  HALTED \u2014 reached ${money(view.latched.capUsd)} on ${view.latched.day} (${view.latched.reason}), at ${money(view.latched.costUsd)}.`
+  );
+  ctx.out.log("A new day does not clear this. Resume with:");
+  ctx.out.log(`  odla-ai admin spend reset ${view.scope}`);
+}
+async function spendReset(ctx, scope) {
+  const result = await call(ctx, "DELETE", scope);
+  if (ctx.json) return ctx.out.log(JSON.stringify(result, null, 2));
+  ctx.out.log(result.message);
+  if (result.stillOverCap) {
+    ctx.out.log(
+      `  today: ${money(result.spentUsd)} against a ${money(result.capUsd)} cap.`
+    );
+  }
+}
+async function adminSpend(parsed, ctx) {
+  const action2 = parsed.positionals[2];
+  const scope = parsed.positionals[3] ?? stringOpt(parsed.options.scope);
+  if (action2 !== "show" && action2 !== "reset") {
+    throw new Error('unknown spend command. Try "odla-ai admin spend show <scope>".');
+  }
+  if (!scope) {
+    throw new Error(
+      `"admin spend ${action2}" needs a scope, e.g. odla-ai admin spend ${action2} app:my-app:<incarnation>`
+    );
+  }
+  return action2 === "show" ? spendShow(ctx, scope) : spendReset(ctx, scope);
+}
+
 // src/operator-context.ts
 import { existsSync as existsSync6 } from "fs";
 import { join as join5, resolve as resolve4 } from "path";
@@ -1802,6 +1862,31 @@ var SET_OPTIONS = [
 async function adminCommand(parsed, deps = {}) {
   const area = parsed.positionals[1];
   const action2 = parsed.positionals[2];
+  if (area === "spend") {
+    assertArgs(parsed, JSON_OPTIONS, 4);
+    const context2 = await resolveOperatorContext(parsed, { allowMissingConfig: true });
+    const out = deps.stdout ?? console;
+    const doFetch = deps.fetch ?? fetch;
+    const token = await getDeveloperToken(
+      context2.cfg,
+      {
+        configPath: context2.cfg.configPath,
+        token: stringOpt(parsed.options.token),
+        email: stringOpt(parsed.options.email),
+        open: parsed.options.open === false ? false : parsed.options.open === true ? true : void 0,
+        openApprovalUrl: deps.openUrl
+      },
+      doFetch,
+      out
+    );
+    return adminSpend(parsed, {
+      platformUrl: context2.platform.value,
+      token,
+      doFetch,
+      json: parsed.options.json === true,
+      out
+    });
+  }
   const credentialSet = action2 === "credential" && parsed.positionals[3] === "set";
   const credentials = action2 === "credentials";
   const models = action2 === "models";
@@ -1905,7 +1990,8 @@ async function fetchIdentity(platformUrl, token, doFetch) {
     email,
     admin: body.admin === true,
     machine,
-    scopes
+    scopes,
+    projects: Array.isArray(body.projects) ? body.projects.map(String) : null
   };
 }
 function credentialLabel(identity) {
@@ -1975,6 +2061,13 @@ async function whoamiCommand(parsed, deps = {}) {
     out.log(`credential id: ${identity.credential.id}`);
   out.log(`admin:      ${identity.admin ? "yes" : "no"}`);
   if (identity.scopes.length) out.log(`scopes:     ${identity.scopes.join(", ")}`);
+  if (identity.projects === null) {
+    out.log("projects:   (this registry does not report project grants)");
+  } else if (identity.projects.length) {
+    out.log(`projects:   ${identity.projects.join(", ")}`);
+  } else {
+    out.log("projects:   (none \u2014 every pm and discuss call will be refused)");
+  }
   if (!identity.admin) {
     if (identity.scopes.includes("platform:runbook:write")) {
       out.log("\nThis exact scope can read and edit all platform runbook content.");
@@ -5477,10 +5570,10 @@ import { existsSync as existsSync11 } from "fs";
 import { cpus, hostname, totalmem } from "os";
 import { resolve as resolve11 } from "path";
 
-// ../harness/dist/chunk-3QP4VDQS.js
+// ../harness/dist/chunk-LNQNFGQC.js
 var HARNESS_PROTOCOL_VERSION = 1;
 
-// ../harness/dist/chunk-GKDKIU4P.js
+// ../harness/dist/chunk-K76I2TCQ.js
 import { execFile, spawn as spawn3 } from "child_process";
 import { constants } from "fs";
 import { access } from "fs/promises";
@@ -5853,7 +5946,7 @@ async function stageWorkspacePair(baselineSource, workspaceSource, options = {})
   }
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 import { createHash as createHash3 } from "crypto";
 import { readFile as readFile2, readdir as readdir2 } from "fs/promises";
 import { relative as relative4, resolve as resolve10 } from "path";
@@ -6190,7 +6283,7 @@ function validateSnapshot(snapshot, limits) {
   }
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 import { spawn as spawn4 } from "child_process";
 import { lstat as lstat2 } from "fs/promises";
 import { resolve as resolve23, sep as sep3 } from "path";
@@ -6495,7 +6588,7 @@ function looksLikeDestination(value2) {
   return /^(?:[a-z][a-z0-9+.-]*:\/\/|\/|\\\\)/i.test(text3) || /^[\w.-]+\.[a-z]{2,}(?:[/:]|$)/i.test(text3);
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 import { readFile as readFile4, stat as stat2 } from "fs/promises";
 import { readFile as readFile3 } from "fs/promises";
 import { join as join33 } from "path";
@@ -6763,7 +6856,7 @@ async function buildCodeGraph(input) {
   return builder.build();
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 import { createHash as createHash32 } from "crypto";
 async function digestStagedWorkspace(root, limits) {
   const files = [];
@@ -6883,7 +6976,7 @@ function createCodeRuntimeControlClient(options) {
     throw new TypeError("modelRequestTimeoutMs must be an integer from 30000 to 1800000");
   }
   const request3 = options.fetch ?? fetch;
-  const call2 = async (path, body, timeoutMs = requestTimeoutMs) => {
+  const call4 = async (path, body, timeoutMs = requestTimeoutMs) => {
     const timeout = AbortSignal.timeout(timeoutMs);
     const signal = options.signal ? AbortSignal.any([options.signal, timeout]) : timeout;
     let response2;
@@ -6913,17 +7006,17 @@ function createCodeRuntimeControlClient(options) {
   return {
     heartbeat: async (version, capabilities) => {
       validateHeartbeat(version, capabilities);
-      return parseSnapshot(await call2("/registry/code/runtime/heartbeat", { runtimeVersion: version, capabilities }));
+      return parseSnapshot(await call4("/registry/code/runtime/heartbeat", { runtimeVersion: version, capabilities }));
     },
     acknowledge: async (commandId, result) => {
       if (!/^ccmd_[0-9a-f]{32}$/.test(commandId)) throw new TypeError("invalid Code runtime command id");
-      await call2(`/registry/code/runtime/commands/${commandId}/ack`, result);
+      await call4(`/registry/code/runtime/commands/${commandId}/ack`, result);
     },
     source: async (sessionId) => parseSource(
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/source`, {})
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/source`, {})
     ),
     infer: async (sessionId, inference) => {
-      const value2 = record5(await call2(
+      const value2 = record5(await call4(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/inference`,
         inference,
         modelRequestTimeoutMs
@@ -6934,11 +7027,11 @@ function createCodeRuntimeControlClient(options) {
       return value2;
     },
     review: async (sessionId, review) => parseReview(
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/review`, review, modelRequestTimeoutMs)
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/review`, review, modelRequestTimeoutMs)
     ),
     submitCandidate: async (sessionId, checkpointId, verification) => {
       if (!/^cpoint_[0-9a-f]{32}$/.test(checkpointId)) throw new TypeError("invalid Code checkpoint id");
-      return parseCandidate(await call2(
+      return parseCandidate(await call4(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/candidates`,
         { checkpointId, verification }
       ));
@@ -6948,21 +7041,21 @@ function createCodeRuntimeControlClient(options) {
       if (!/^[A-Za-z0-9._:-]{1,120}$/.test(eventId) || !event || typeof event !== "object" || new TextEncoder().encode(serialized).byteLength > 24e3) {
         throw new TypeError("invalid Code session event");
       }
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/chat/events`, { eventId, event });
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/chat/events`, { eventId, event });
     },
     recallMemories: async (sessionId, subjects, limit) => {
-      const response2 = await call2(
+      const response2 = await call4(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/recall`,
         { subjects: [...subjects], limit }
       );
       return Array.isArray(response2.memories) ? response2.memories : [];
     },
     rememberMemory: async (sessionId, memory) => {
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/remember`, memory);
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/remember`, memory);
     },
     reportSessionFailure: async (sessionId, message2) => {
       if (!message2.trim() || message2.length > 2e3) throw new TypeError("invalid Code session failure");
-      await call2(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/failure`, { message: message2 });
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/failure`, { message: message2 });
     }
   };
 }
@@ -7851,7 +7944,7 @@ var SYSTEM_PROMPT_FOR = {
 };
 function codeSkill(opts) {
   let seq = 0;
-  const call2 = async (tool, input, signal) => {
+  const call4 = async (tool, input, signal) => {
     const startedAt = Date.now();
     const response2 = await opts.broker.execute(
       { lease: opts.lease, workspaceDir: opts.workspaceDir, signal },
@@ -7873,7 +7966,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.read", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.read", input, ctx.signal)
   };
   const applyPatch = {
     name: "odla_apply_git_diff",
@@ -7884,7 +7977,7 @@ function codeSkill(opts) {
       properties: { patch: { type: "string", minLength: 1, maxLength: 262144 } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.apply_patch", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.apply_patch", input, ctx.signal)
   };
   const runRecipe = {
     name: "odla_run_recipe",
@@ -7895,7 +7988,7 @@ function codeSkill(opts) {
       properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.run_recipe", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.run_recipe", input, ctx.signal)
   };
   const listFiles2 = {
     name: "odla_list",
@@ -7908,7 +8001,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.list", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.list", input, ctx.signal)
   };
   const searchFiles = {
     name: "odla_search",
@@ -7924,7 +8017,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2("sandbox.search", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.search", input, ctx.signal)
   };
   const graphTool = (name, tool, description, required) => ({
     name,
@@ -7935,7 +8028,7 @@ function codeSkill(opts) {
       properties: { query: { type: "string", maxLength: 512 } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call2(tool, input, ctx.signal)
+    handler: (input, ctx) => call4(tool, input, ctx.signal)
   });
   const orientation = [
     graphTool(
@@ -7974,9 +8067,9 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
-    onToolCall: (call2) => {
-      toolCalls.push(call2);
-      options.onToolCall?.(call2);
+    onToolCall: (call4) => {
+      toolCalls.push(call4);
+      options.onToolCall?.(call4);
     }
   });
   const compaction = options.compaction === void 0 ? keepRecentExchanges({ whenInputTokensExceed: 12e4, keep: 3 }) : options.compaction;
@@ -8061,6 +8154,9 @@ async function handleCodeRuntimeInference(input) {
     call: request3.call
   });
   state2.tokens += response2.receipt.inputTokens + response2.receipt.outputTokens;
+  const { costUsd } = response2.receipt;
+  if (costUsd === void 0) state2.costKnown = false;
+  else state2.costUsd += costUsd;
   await input.event({
     type: "usage",
     provider: response2.receipt.provider,
@@ -8070,7 +8166,9 @@ async function handleCodeRuntimeInference(input) {
     durationMs: Date.now() - startedAt,
     interactionId: command.commandId,
     interactionTokens: state2.tokens,
-    interactionMaxTokens: metadata2.maxTokensPerInteraction
+    interactionMaxTokens: metadata2.maxTokensPerInteraction,
+    ...costUsd === void 0 ? {} : { costUsd },
+    ...state2.costKnown ? { interactionCostUsd: state2.costUsd } : {}
   }).catch(() => void 0);
   return {
     protocolVersion: HARNESS_PROTOCOL_VERSION,
@@ -8914,10 +9012,16 @@ async function startGoalPursuit(input) {
     attempt: async ({ prompt }) => {
       const result = await input.attempt(prompt);
       return {
-        // The runtime charges tokens through the control plane's own
-        // per-interaction reservation, so the goal budget bounds ATTEMPTS here
-        // and the token ceiling is enforced where the credential lives.
-        tokens: 0,
+        // What the attempt actually spent, so the runner's token_budget and
+        // cost_budget checks can be reached. This used to be a hardcoded 0 with
+        // no cost at all, which made maxTokens and maxUsd unreachable while
+        // callers reasonably read them as hard ceilings.
+        //
+        // costUsd is omitted rather than zeroed when any call in the attempt
+        // was unpriced: the runner only enforces a cost budget while the cost
+        // is known, and a zero would make it enforce against a lie.
+        tokens: result.tokens ?? 0,
+        ...result.costUsd === void 0 ? {} : { costUsd: result.costUsd },
         ...result.status === "failed" ? { error: result.error ?? "attempt failed" } : {}
       };
     },
@@ -9131,7 +9235,7 @@ var CodePiRuntimeEngine = class {
       recipeAuthorization: this.options.recipeAuthorization
     }, lease, metadata2.role));
     const startedAt = Date.now();
-    const interaction = { tokens: 0, noticeEmitted: false };
+    const interaction = { tokens: 0, noticeEmitted: false, costUsd: 0, costKnown: true };
     const inference = createCodeRuntimeInference({
       command,
       metadata: metadata2,
@@ -9169,7 +9273,11 @@ var CodePiRuntimeEngine = class {
       await this.#diagnostic(command, active, detail);
       await this.#failure(command, active, detail);
     }
-    return result;
+    return {
+      ...result,
+      tokens: interaction.tokens,
+      ...interaction.costKnown ? { costUsd: interaction.costUsd } : {}
+    };
   }
   /** Report every brokered effect as it starts and finishes. */
   #observed(command, active, broker) {
@@ -10278,6 +10386,8 @@ Usage:
   odla-ai admin ai credential set <provider> [--context <name>] (--from-env <NAME>|--stdin)
   odla-ai admin ai usage [--context <name>] [--app-id <id>] [--env <env>] [--run-id <id>] [--limit <1-500>] [--json]
   odla-ai admin ai audit [--context <name>] [--limit <1-200>] [--json]
+  odla-ai admin spend show <app:<id>:<incarnation>> [--context <name>] [--json]
+  odla-ai admin spend reset <app:<id>:<incarnation>> [--context <name>] [--json]
   odla-ai security github connect [--repo owner/name] [--env dev]             [continue in Studio; human session required]
   odla-ai security github disconnect --source <id> [--env dev]          [continue in Studio; human session required]
   odla-ai security plan [--env dev] [--json]
@@ -10370,6 +10480,9 @@ Commands:
                human session connects one); "code grant request|list|approve|revoke" then
                governs unattended access: an agent may request, only a human may approve.
   admin        Manage platform-funded AI routing/credentials/usage with narrow device grants.
+               "admin spend" reads one app's daily inference spend and resumes it
+               after a cap halts it. The cap is per UTC day; exhausting it LATCHES,
+               and a new day does not clear the latch \u2014 resuming is deliberate.
   security     Connect GitHub sources and run commit-pinned hosted reviews, or scan a local snapshot.
   pm           Project management (via @odla-ai/pm): Products contain Projects;
                projects contain goals, kanban tasks, decisions, and bugs. Use
@@ -10377,6 +10490,12 @@ Commands:
                pass --app/--project explicitly. Same device-grant auth as "app".
                Status changes and comments post to each item's @odla-ai/chat
                discussion thread.
+               NOTE: "--column ready" is OWNER-ONLY. Creating a task in Ready
+               approves its complete execution contract, so it needs pm.plan,
+               which no device enrollment or handshake approval can grant. An
+               agent proposes in Backlog (the default); a human owner or a
+               pm.plan agent promotes. This is deliberate, not a permission
+               gap \u2014 it was reported as one.
   bug          Intent-first alias for PM bugs. "bug report" writes to
                odla PM; odla product defects do not belong in GitHub Issues.
   discuss      Group discussions (via @odla-ai/chat) for the apps you co-own:
@@ -12757,9 +12876,15 @@ async function provisionEnvCredentials(opts) {
     if (o11yToken) {
       opts.stdout.log(`${opts.env}: reusing local o11y ingest token`);
     } else {
-      o11yToken = await issueO11yToken(opts);
-      credentials = save(opts, credentials, tenantId, { ...dbKey ? { dbKey } : {}, o11yToken });
-      opts.stdout.log(`${opts.env}: ${opts.rotateO11y ? "rotated" : "issued"} o11y ingest token`);
+      o11yToken = await issueO11yToken(opts) ?? void 0;
+      if (o11yToken) {
+        credentials = save(opts, credentials, tenantId, { ...dbKey ? { dbKey } : {}, o11yToken });
+        opts.stdout.log(`${opts.env}: ${opts.rotateO11y ? "rotated" : "issued"} o11y ingest token`);
+      } else {
+        opts.stdout.log(
+          `${opts.env}: o11y token already exists and its shown-once value is not on this machine \u2014 leaving it alone (a co-owner provisioned this env). Nothing was rotated, and this env's running Worker keeps its token. To replace it deliberately \u2014 which invalidates the token on whatever is deployed \u2014 run "odla-ai provision --rotate-o11y-token --push-secrets".`
+        );
+      }
     }
   }
   return save(opts, credentials, tenantId, {
@@ -12813,11 +12938,7 @@ async function issueO11yToken(opts) {
     `${opts.cfg.platformUrl}/o11y/${encodeURIComponent(opts.cfg.app.id)}/token${suffix}?env=${encodeURIComponent(opts.env)}`,
     { method: "POST", headers: { authorization: `Bearer ${opts.developerToken}` } }
   );
-  if (res.status === 409 && !opts.rotateO11y) {
-    throw new Error(
-      `o11y token already exists for env "${opts.env}", but its shown-once value is not in the local credentials file; run "odla-ai provision --push-secrets" to install a separate runtime credential without rotating siblings`
-    );
-  }
+  if (res.status === 409 && !opts.rotateO11y) return null;
   if (!res.ok) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) failed: ${res.status} ${await safeText7(res)}`);
   const body = await res.json();
   if (!body.token) throw new Error(`o11y token ${opts.rotateO11y ? "rotation" : "issue"} (${opts.env}) returned no token`);
@@ -13512,7 +13633,7 @@ function defaultDeviceName() {
 // src/runbook-actions.ts
 import { readFileSync as readFileSync10 } from "fs";
 var PLATFORM_SCOPE = "$platform";
-async function call(ctx, method, path, body) {
+async function call2(ctx, method, path, body) {
   const res = await ctx.doFetch(`${ctx.platformUrl.replace(/\/$/, "")}/registry/pm${path}`, {
     method,
     headers: {
@@ -13534,7 +13655,7 @@ async function call(ctx, method, path, body) {
   throw new Error(message2);
 }
 async function bySlug(ctx, slug) {
-  const page2 = await call(
+  const page2 = await call2(
     ctx,
     "GET",
     `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(slug)}&limit=1`
@@ -13543,7 +13664,7 @@ async function bySlug(ctx, slug) {
   if (filtered) return filtered;
   const limit = 100;
   for (let offset = 0; ; offset += limit) {
-    const fallback = await call(
+    const fallback = await call2(
       ctx,
       "GET",
       `/runbook?app=${encodeURIComponent(ctx.appId)}&limit=${limit}&offset=${offset}`
@@ -13564,7 +13685,7 @@ async function runbookList(ctx, all, query) {
   const params = new URLSearchParams();
   if (!all) params.set("app", ctx.appId);
   if (query) params.set("q", query);
-  const page2 = await call(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
+  const page2 = await call2(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
   if (ctx.json) return ctx.out.log(JSON.stringify(page2, null, 2));
   if (!page2.records.length) return ctx.out.log("(no runbooks)");
   ctx.out.log(["SLUG", "STATUS", "V", "SCOPE", "UPDATED", "TITLE"].join("	"));
@@ -13581,7 +13702,7 @@ async function runbookGet(ctx, slug) {
   ctx.out.log(runbook.body);
 }
 async function runbookNew(ctx, slug, title, body, summary, requires) {
-  const created = await call(ctx, "POST", "/runbook", {
+  const created = await call2(ctx, "POST", "/runbook", {
     appId: ctx.appId,
     input: { slug, title, body, ...summary ? { summary } : {}, ...requires ? { requires } : {} }
   });
@@ -13589,7 +13710,7 @@ async function runbookNew(ctx, slug, title, body, summary, requires) {
 }
 async function runbookEdit(ctx, slug, body, note, requires, expectedVersion) {
   const runbook = await bySlug(ctx, slug);
-  const result = await call(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
+  const result = await call2(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
     // An empty --requires clears the declaration; omitting the flag leaves
     // whatever is there, so an ordinary body edit never drops it.
     patch: {
@@ -13604,7 +13725,7 @@ async function runbookEdit(ctx, slug, body, note, requires, expectedVersion) {
 }
 async function runbookStatus(ctx, slug, status) {
   const runbook = await bySlug(ctx, slug);
-  const result = await call(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
+  const result = await call2(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
     patch: { status }
   });
   ctx.out.log(ctx.json ? JSON.stringify(result, null, 2) : `${slug} \u2192 ${status}`);
@@ -13613,7 +13734,7 @@ async function runbookVisibility(ctx, slug, visibility) {
   if (visibility !== "operator" && visibility !== "admin")
     throw new Error(`visibility must be "operator" or "admin", got "${visibility}"`);
   const runbook = await bySlug(ctx, slug);
-  const result = await call(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
+  const result = await call2(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
     patch: { visibility }
   });
   if (ctx.json) return ctx.out.log(JSON.stringify(result, null, 2));
@@ -13623,7 +13744,7 @@ async function runbookVisibility(ctx, slug, visibility) {
 }
 async function runbookHistory(ctx, slug) {
   const runbook = await bySlug(ctx, slug);
-  const page2 = await call(ctx, "GET", `/runbook/${encodeURIComponent(runbook.id)}/revisions`);
+  const page2 = await call2(ctx, "GET", `/runbook/${encodeURIComponent(runbook.id)}/revisions`);
   if (ctx.json) return ctx.out.log(JSON.stringify(page2, null, 2));
   ctx.out.log(`${slug} is at v${runbook.version}`);
   if (!page2.records.length) return ctx.out.log("(no earlier versions)");
@@ -13633,7 +13754,7 @@ async function runbookHistory(ctx, slug) {
 }
 async function runbookRevert(ctx, slug, version) {
   const runbook = await bySlug(ctx, slug);
-  const result = await call(
+  const result = await call2(
     ctx,
     "POST",
     `/runbook/${encodeURIComponent(runbook.id)}/revert`,
@@ -13644,7 +13765,7 @@ async function runbookRevert(ctx, slug, version) {
 }
 async function runbookRemove(ctx, slug) {
   const runbook = await bySlug(ctx, slug);
-  await call(ctx, "DELETE", `/runbook/${encodeURIComponent(runbook.id)}`);
+  await call2(ctx, "DELETE", `/runbook/${encodeURIComponent(runbook.id)}`);
   ctx.out.log(`removed ${slug}`);
 }
 
@@ -13703,14 +13824,9 @@ ${counts.created} created, ${counts.updated} updated, ${counts.unchanged} unchan
   );
 }
 async function upsert(ctx, r, visibility) {
-  const page2 = await call(
-    ctx,
-    "GET",
-    `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(r.slug)}&limit=1`
-  );
-  const found = page2.records[0];
+  const found = await bySlug(ctx, r.slug).catch(() => null);
   if (!found) {
-    await call(ctx, "POST", "/runbook", {
+    await call2(ctx, "POST", "/runbook", {
       appId: ctx.appId,
       input: {
         slug: r.slug,
@@ -13729,7 +13845,7 @@ async function upsert(ctx, r, visibility) {
     ctx.out.log(`  = ${r.slug} (already current at v${found.version})`);
     return "unchanged";
   }
-  const result = await call(
+  const result = await call2(
     ctx,
     "PATCH",
     `/runbook/${encodeURIComponent(found.id)}`,
@@ -13957,7 +14073,7 @@ async function assessImpact(ctx, surfaces, all, limit) {
   for (const surface of surfaces) {
     const params = new URLSearchParams({ q: surface.query, limit: String(limit) });
     if (!all) params.set("app", ctx.appId);
-    const result = await call(ctx, "GET", `/runbook/search?${params}`);
+    const result = await call2(ctx, "GET", `/runbook/search?${params}`);
     const runbooks = result.outcome === "ranked" ? foldHits(result.hits) : result.candidates.map((c) => ({ ...c, version: 0, sections: [] }));
     out.push({ surface, runbooks });
   }
@@ -14040,7 +14156,7 @@ function lintRunbook(runbook, installed) {
 async function runbookLint(ctx, all) {
   const params = new URLSearchParams();
   if (!all) params.set("app", ctx.appId);
-  const page2 = await call(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
+  const page2 = await call2(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
   const installed = { "@odla-ai/cli": cliVersion() };
   const findings = page2.records.flatMap((runbook) => lintRunbook(runbook, installed));
   if (ctx.json) return ctx.out.log(JSON.stringify({ checked: page2.records.length, findings }, null, 2));
@@ -14065,7 +14181,7 @@ async function runbookSearch(ctx, query, all, limit) {
   const params = new URLSearchParams({ q: query });
   if (!all) params.set("app", ctx.appId);
   if (limit) params.set("limit", String(limit));
-  const result = await call(ctx, "GET", `/runbook/search?${params}`);
+  const result = await call2(ctx, "GET", `/runbook/search?${params}`);
   if (ctx.json) return ctx.out.log(JSON.stringify(result, null, 2));
   if (result.outcome === "empty-corpus") return ctx.out.log("no runbooks are available to search");
   if (result.outcome === "no-match") return ctx.out.log(`no runbook mentions "${query}"`);
@@ -14084,7 +14200,7 @@ async function runbookSearch(ctx, query, all, limit) {
 }
 var JSDOC_POINTER = "Runbooks are procedure. For what an export does \u2014 arguments, defaults, errors \u2014 read its JSDoc: the installed package's .d.ts, or its page under https://odla.ai/docs.";
 async function runbookAsk(ctx, question, all) {
-  const result = await call(ctx, "POST", "/runbook/ask", {
+  const result = await call2(ctx, "POST", "/runbook/ask", {
     question,
     ...all ? {} : { app: ctx.appId }
   });
@@ -14113,14 +14229,8 @@ async function runbookAsk(ctx, question, all) {
   ctx.out.log(JSDOC_POINTER);
 }
 async function runbookComment(ctx, slug, body) {
-  const page2 = await call(
-    ctx,
-    "GET",
-    `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(slug)}&limit=1`
-  );
-  const found = page2.records[0];
-  if (!found) throw new Error(`no runbook "${slug}" in ${ctx.appId}`);
-  await call(ctx, "POST", `/runbook/${encodeURIComponent(found.id)}/comments`, { body });
+  const found = await bySlug(ctx, slug);
+  await call2(ctx, "POST", `/runbook/${encodeURIComponent(found.id)}/comments`, { body });
   ctx.out.log(`commented on ${slug} (v${found.version})`);
 }
 
@@ -14170,13 +14280,7 @@ var defaultRunOrInjected = (deps) => deps.run ?? defaultRun;
 
 // src/runbook-edit-flow.ts
 async function editRunbook(ctx, slug, deps = {}) {
-  const page2 = await call(
-    ctx,
-    "GET",
-    `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(slug)}&limit=1`
-  );
-  const found = page2.records[0];
-  if (!found) throw new Error(`no runbook "${slug}" in ${ctx.appId}`);
+  const found = await bySlug(ctx, slug);
   ctx.out.log(`opening ${slug} v${found.version} in your editor\u2026`);
   const body = await editText(found.body, slug, deps);
   return body === null ? null : { body, expectedVersion: found.version };
@@ -15296,4 +15400,4 @@ export {
   isTerminalHostedSecurityStatus,
   runCli
 };
-//# sourceMappingURL=chunk-OWTIDSL5.js.map
+//# sourceMappingURL=chunk-DKOJBWRJ.js.map