@odla-ai/cli 0.37.1 → 0.38.1

package/dist/{cli-OH6PCYZ3.js → cli-LGYDXY5R.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "./chunk-XFIFFYNH.js";
+} from "./chunk-HETCZVFB.js";
 import {
   exitCodeFor
 } from "./chunk-UKLSRQ5J.js";
@@ -9,4 +9,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=cli-OH6PCYZ3.js.map
+//# sourceMappingURL=cli-LGYDXY5R.js.map

package/dist/index.cjs

@@ -1110,6 +1110,66 @@ function addOption(options, name, value2) {
   else options[name] = [String(current), String(value2)];
 }
 
+// src/admin-spend.ts
+async function call(ctx, method, scope) {
+  const url = `${ctx.platformUrl.replace(/\/$/, "")}/registry/platform/spend?scope=${encodeURIComponent(scope)}`;
+  const response2 = await ctx.doFetch(url, {
+    method,
+    headers: { authorization: `Bearer ${ctx.token}` }
+  });
+  const body = await response2.json().catch(() => ({}));
+  if (!response2.ok) {
+    const detail = body.error?.message ?? body.error?.code ?? `registry returned ${response2.status}`;
+    throw new Error(`spend ${method} failed: ${detail} (${response2.status})`);
+  }
+  return body;
+}
+var money = (value2) => `$${value2.toFixed(2)}`;
+async function spendShow(ctx, scope) {
+  const view = await call(ctx, "GET", scope);
+  if (ctx.json) return ctx.out.log(JSON.stringify(view, null, 2));
+  ctx.out.log(`scope:   ${view.scope}`);
+  ctx.out.log(`day:     ${view.day} (UTC)`);
+  ctx.out.log(
+    `spent:   ${money(view.spentUsd)} of ${view.capUsd > 0 ? money(view.capUsd) : "(no cap set)"}`
+  );
+  ctx.out.log(`calls:   ${view.calls}`);
+  if (view.unpricedCalls > 0) {
+    ctx.out.log(
+      `unpriced: ${view.unpricedCalls} call(s) had no price, so "spent" is a floor, not the total.`
+    );
+  }
+  if (!view.latched) return ctx.out.log("status:  running");
+  ctx.out.log(
+    `status:  HALTED \u2014 reached ${money(view.latched.capUsd)} on ${view.latched.day} (${view.latched.reason}), at ${money(view.latched.costUsd)}.`
+  );
+  ctx.out.log("A new day does not clear this. Resume with:");
+  ctx.out.log(`  odla-ai admin spend reset ${view.scope}`);
+}
+async function spendReset(ctx, scope) {
+  const result = await call(ctx, "DELETE", scope);
+  if (ctx.json) return ctx.out.log(JSON.stringify(result, null, 2));
+  ctx.out.log(result.message);
+  if (result.stillOverCap) {
+    ctx.out.log(
+      `  today: ${money(result.spentUsd)} against a ${money(result.capUsd)} cap.`
+    );
+  }
+}
+async function adminSpend(parsed, ctx) {
+  const action2 = parsed.positionals[2];
+  const scope = parsed.positionals[3] ?? stringOpt(parsed.options.scope);
+  if (action2 !== "show" && action2 !== "reset") {
+    throw new Error('unknown spend command. Try "odla-ai admin spend show <scope>".');
+  }
+  if (!scope) {
+    throw new Error(
+      `"admin spend ${action2}" needs a scope, e.g. odla-ai admin spend ${action2} app:my-app:<incarnation>`
+    );
+  }
+  return action2 === "show" ? spendShow(ctx, scope) : spendReset(ctx, scope);
+}
+
 // src/operator-context.ts
 var import_node_fs8 = require("fs");
 var import_node_path7 = require("path");
@@ -1798,7 +1858,11 @@ async function resolveOperatorContext(parsed, options = {}) {
   const appEnvironment = clean2(import_node_process10.default.env.ODLA_APP_ID);
   const appValue = appFlag ?? appEnvironment ?? profile.value?.app ?? loaded?.app.id ?? null;
   const appSource = appFlag ? "flag" : appEnvironment ? "environment" : profile.value?.app ? "profile" : loaded ? "config" : "unresolved";
-  if (appValue) assertOperatorName(appValue, "app");
+  if (appValue) {
+    for (const id2 of options.allowAppList ? appValue.split(",") : [appValue]) {
+      assertOperatorName(id2.trim(), "app");
+    }
+  }
   if (options.requireApp && !appValue) {
     throw new Error(
       "app context is unresolved; pass --app <id>, set ODLA_APP_ID, select --context <name>, or run inside a project with odla.config.mjs"
@@ -1889,6 +1953,31 @@ var SET_OPTIONS = [
 async function adminCommand(parsed, deps = {}) {
   const area = parsed.positionals[1];
   const action2 = parsed.positionals[2];
+  if (area === "spend") {
+    assertArgs(parsed, JSON_OPTIONS, 4);
+    const context2 = await resolveOperatorContext(parsed, { allowMissingConfig: true });
+    const out = deps.stdout ?? console;
+    const doFetch = deps.fetch ?? fetch;
+    const token = await getDeveloperToken(
+      context2.cfg,
+      {
+        configPath: context2.cfg.configPath,
+        token: stringOpt(parsed.options.token),
+        email: stringOpt(parsed.options.email),
+        open: parsed.options.open === false ? false : parsed.options.open === true ? true : void 0,
+        openApprovalUrl: deps.openUrl
+      },
+      doFetch,
+      out
+    );
+    return adminSpend(parsed, {
+      platformUrl: context2.platform.value,
+      token,
+      doFetch,
+      json: parsed.options.json === true,
+      out
+    });
+  }
   const credentialSet = action2 === "credential" && parsed.positionals[3] === "set";
   const credentials = action2 === "credentials";
   const models = action2 === "models";
@@ -1992,7 +2081,8 @@ async function fetchIdentity(platformUrl, token, doFetch) {
     email,
     admin: body.admin === true,
     machine,
-    scopes
+    scopes,
+    projects: Array.isArray(body.projects) ? body.projects.map(String) : null
   };
 }
 function credentialLabel(identity) {
@@ -2062,6 +2152,13 @@ async function whoamiCommand(parsed, deps = {}) {
     out.log(`credential id: ${identity.credential.id}`);
   out.log(`admin:      ${identity.admin ? "yes" : "no"}`);
   if (identity.scopes.length) out.log(`scopes:     ${identity.scopes.join(", ")}`);
+  if (identity.projects === null) {
+    out.log("projects:   (this registry does not report project grants)");
+  } else if (identity.projects.length) {
+    out.log(`projects:   ${identity.projects.join(", ")}`);
+  } else {
+    out.log("projects:   (none \u2014 every pm and discuss call will be refused)");
+  }
   if (!identity.admin) {
     if (identity.scopes.includes("platform:runbook:write")) {
       out.log("\nThis exact scope can read and edit all platform runbook content.");
@@ -5607,10 +5704,10 @@ var import_node_fs16 = require("fs");
 var import_node_os4 = require("os");
 var import_node_path15 = require("path");
 
-// ../harness/dist/chunk-3QP4VDQS.js
+// ../harness/dist/chunk-LNQNFGQC.js
 var HARNESS_PROTOCOL_VERSION = 1;
 
-// ../harness/dist/chunk-GKDKIU4P.js
+// ../harness/dist/chunk-K76I2TCQ.js
 var import_child_process = require("child_process");
 var import_fs = require("fs");
 var import_promises2 = require("fs/promises");
@@ -5983,7 +6080,7 @@ async function stageWorkspacePair(baselineSource, workspaceSource, options = {})
   }
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 var import_crypto = require("crypto");
 var import_promises5 = require("fs/promises");
 var import_path5 = require("path");
@@ -6320,7 +6417,7 @@ function validateSnapshot(snapshot, limits) {
   }
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 var import_child_process4 = require("child_process");
 var import_promises6 = require("fs/promises");
 var import_path6 = require("path");
@@ -6622,7 +6719,7 @@ function looksLikeDestination(value2) {
   return /^(?:[a-z][a-z0-9+.-]*:\/\/|\/|\\\\)/i.test(text3) || /^[\w.-]+\.[a-z]{2,}(?:[/:]|$)/i.test(text3);
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 var import_promises10 = require("fs/promises");
 var import_promises11 = require("fs/promises");
 var import_path10 = require("path");
@@ -6890,7 +6987,7 @@ async function buildCodeGraph(input) {
   return builder.build();
 }
 
-// ../harness/dist/chunk-ANNX7VGK.js
+// ../harness/dist/chunk-UVGZHNLW.js
 var import_crypto4 = require("crypto");
 async function digestStagedWorkspace(root, limits) {
   const files = [];
@@ -7010,7 +7107,7 @@ function createCodeRuntimeControlClient(options) {
     throw new TypeError("modelRequestTimeoutMs must be an integer from 30000 to 1800000");
   }
   const request3 = options.fetch ?? fetch;
-  const call3 = async (path, body, timeoutMs = requestTimeoutMs) => {
+  const call4 = async (path, body, timeoutMs = requestTimeoutMs) => {
     const timeout = AbortSignal.timeout(timeoutMs);
     const signal = options.signal ? AbortSignal.any([options.signal, timeout]) : timeout;
     let response2;
@@ -7040,17 +7137,17 @@ function createCodeRuntimeControlClient(options) {
   return {
     heartbeat: async (version, capabilities) => {
       validateHeartbeat(version, capabilities);
-      return parseSnapshot(await call3("/registry/code/runtime/heartbeat", { runtimeVersion: version, capabilities }));
+      return parseSnapshot(await call4("/registry/code/runtime/heartbeat", { runtimeVersion: version, capabilities }));
     },
     acknowledge: async (commandId, result) => {
       if (!/^ccmd_[0-9a-f]{32}$/.test(commandId)) throw new TypeError("invalid Code runtime command id");
-      await call3(`/registry/code/runtime/commands/${commandId}/ack`, result);
+      await call4(`/registry/code/runtime/commands/${commandId}/ack`, result);
     },
     source: async (sessionId) => parseSource(
-      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/source`, {})
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/source`, {})
     ),
     infer: async (sessionId, inference) => {
-      const value2 = record5(await call3(
+      const value2 = record5(await call4(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/inference`,
         inference,
         modelRequestTimeoutMs
@@ -7061,11 +7158,11 @@ function createCodeRuntimeControlClient(options) {
       return value2;
     },
     review: async (sessionId, review) => parseReview(
-      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/review`, review, modelRequestTimeoutMs)
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/review`, review, modelRequestTimeoutMs)
     ),
     submitCandidate: async (sessionId, checkpointId, verification) => {
       if (!/^cpoint_[0-9a-f]{32}$/.test(checkpointId)) throw new TypeError("invalid Code checkpoint id");
-      return parseCandidate(await call3(
+      return parseCandidate(await call4(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/candidates`,
         { checkpointId, verification }
       ));
@@ -7075,21 +7172,21 @@ function createCodeRuntimeControlClient(options) {
       if (!/^[A-Za-z0-9._:-]{1,120}$/.test(eventId) || !event || typeof event !== "object" || new TextEncoder().encode(serialized).byteLength > 24e3) {
         throw new TypeError("invalid Code session event");
       }
-      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/chat/events`, { eventId, event });
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/chat/events`, { eventId, event });
     },
     recallMemories: async (sessionId, subjects, limit) => {
-      const response2 = await call3(
+      const response2 = await call4(
         `/registry/code/runtime/sessions/${validSessionId(sessionId)}/recall`,
         { subjects: [...subjects], limit }
       );
       return Array.isArray(response2.memories) ? response2.memories : [];
     },
     rememberMemory: async (sessionId, memory) => {
-      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/remember`, memory);
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/remember`, memory);
     },
     reportSessionFailure: async (sessionId, message2) => {
       if (!message2.trim() || message2.length > 2e3) throw new TypeError("invalid Code session failure");
-      await call3(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/failure`, { message: message2 });
+      await call4(`/registry/code/runtime/sessions/${validSessionId(sessionId)}/failure`, { message: message2 });
     }
   };
 }
@@ -7978,7 +8075,7 @@ var SYSTEM_PROMPT_FOR = {
 };
 function codeSkill(opts) {
   let seq = 0;
-  const call3 = async (tool, input, signal) => {
+  const call4 = async (tool, input, signal) => {
     const startedAt = Date.now();
     const response2 = await opts.broker.execute(
       { lease: opts.lease, workspaceDir: opts.workspaceDir, signal },
@@ -8000,7 +8097,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call3("sandbox.read", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.read", input, ctx.signal)
   };
   const applyPatch = {
     name: "odla_apply_git_diff",
@@ -8011,7 +8108,7 @@ function codeSkill(opts) {
       properties: { patch: { type: "string", minLength: 1, maxLength: 262144 } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call3("sandbox.apply_patch", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.apply_patch", input, ctx.signal)
   };
   const runRecipe = {
     name: "odla_run_recipe",
@@ -8022,7 +8119,7 @@ function codeSkill(opts) {
       properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call3("sandbox.run_recipe", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.run_recipe", input, ctx.signal)
   };
   const listFiles2 = {
     name: "odla_list",
@@ -8035,7 +8132,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call3("sandbox.list", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.list", input, ctx.signal)
   };
   const searchFiles = {
     name: "odla_search",
@@ -8051,7 +8148,7 @@ function codeSkill(opts) {
       },
       additionalProperties: false
     },
-    handler: (input, ctx) => call3("sandbox.search", input, ctx.signal)
+    handler: (input, ctx) => call4("sandbox.search", input, ctx.signal)
   };
   const graphTool = (name, tool, description, required) => ({
     name,
@@ -8062,7 +8159,7 @@ function codeSkill(opts) {
       properties: { query: { type: "string", maxLength: 512 } },
       additionalProperties: false
     },
-    handler: (input, ctx) => call3(tool, input, ctx.signal)
+    handler: (input, ctx) => call4(tool, input, ctx.signal)
   });
   const orientation = [
     graphTool(
@@ -8101,9 +8198,9 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
-    onToolCall: (call3) => {
-      toolCalls.push(call3);
-      options.onToolCall?.(call3);
+    onToolCall: (call4) => {
+      toolCalls.push(call4);
+      options.onToolCall?.(call4);
     }
   });
   const compaction = options.compaction === void 0 ? (0, import_ai4.keepRecentExchanges)({ whenInputTokensExceed: 12e4, keep: 3 }) : options.compaction;
@@ -8188,6 +8285,9 @@ async function handleCodeRuntimeInference(input) {
     call: request3.call
   });
   state2.tokens += response2.receipt.inputTokens + response2.receipt.outputTokens;
+  const { costUsd } = response2.receipt;
+  if (costUsd === void 0) state2.costKnown = false;
+  else state2.costUsd += costUsd;
   await input.event({
     type: "usage",
     provider: response2.receipt.provider,
@@ -8197,7 +8297,9 @@ async function handleCodeRuntimeInference(input) {
     durationMs: Date.now() - startedAt,
     interactionId: command.commandId,
     interactionTokens: state2.tokens,
-    interactionMaxTokens: metadata2.maxTokensPerInteraction
+    interactionMaxTokens: metadata2.maxTokensPerInteraction,
+    ...costUsd === void 0 ? {} : { costUsd },
+    ...state2.costKnown ? { interactionCostUsd: state2.costUsd } : {}
   }).catch(() => void 0);
   return {
     protocolVersion: HARNESS_PROTOCOL_VERSION,
@@ -9041,10 +9143,16 @@ async function startGoalPursuit(input) {
     attempt: async ({ prompt }) => {
       const result = await input.attempt(prompt);
       return {
-        // The runtime charges tokens through the control plane's own
-        // per-interaction reservation, so the goal budget bounds ATTEMPTS here
-        // and the token ceiling is enforced where the credential lives.
-        tokens: 0,
+        // What the attempt actually spent, so the runner's token_budget and
+        // cost_budget checks can be reached. This used to be a hardcoded 0 with
+        // no cost at all, which made maxTokens and maxUsd unreachable while
+        // callers reasonably read them as hard ceilings.
+        //
+        // costUsd is omitted rather than zeroed when any call in the attempt
+        // was unpriced: the runner only enforces a cost budget while the cost
+        // is known, and a zero would make it enforce against a lie.
+        tokens: result.tokens ?? 0,
+        ...result.costUsd === void 0 ? {} : { costUsd: result.costUsd },
         ...result.status === "failed" ? { error: result.error ?? "attempt failed" } : {}
       };
     },
@@ -9258,7 +9366,7 @@ var CodePiRuntimeEngine = class {
       recipeAuthorization: this.options.recipeAuthorization
     }, lease, metadata2.role));
     const startedAt = Date.now();
-    const interaction = { tokens: 0, noticeEmitted: false };
+    const interaction = { tokens: 0, noticeEmitted: false, costUsd: 0, costKnown: true };
     const inference = createCodeRuntimeInference({
       command,
       metadata: metadata2,
@@ -9296,7 +9404,11 @@ var CodePiRuntimeEngine = class {
       await this.#diagnostic(command, active, detail);
       await this.#failure(command, active, detail);
     }
-    return result;
+    return {
+      ...result,
+      tokens: interaction.tokens,
+      ...interaction.costKnown ? { costUsd: interaction.costUsd } : {}
+    };
   }
   /** Report every brokered effect as it starts and finishes. */
   #observed(command, active, broker) {
@@ -10405,6 +10517,8 @@ Usage:
   odla-ai admin ai credential set <provider> [--context <name>] (--from-env <NAME>|--stdin)
   odla-ai admin ai usage [--context <name>] [--app-id <id>] [--env <env>] [--run-id <id>] [--limit <1-500>] [--json]
   odla-ai admin ai audit [--context <name>] [--limit <1-200>] [--json]
+  odla-ai admin spend show <app:<id>:<incarnation>> [--context <name>] [--json]
+  odla-ai admin spend reset <app:<id>:<incarnation>> [--context <name>] [--json]
   odla-ai security github connect [--repo owner/name] [--env dev]             [continue in Studio; human session required]
   odla-ai security github disconnect --source <id> [--env dev]          [continue in Studio; human session required]
   odla-ai security plan [--env dev] [--json]
@@ -10497,6 +10611,9 @@ Commands:
                human session connects one); "code grant request|list|approve|revoke" then
                governs unattended access: an agent may request, only a human may approve.
   admin        Manage platform-funded AI routing/credentials/usage with narrow device grants.
+               "admin spend" reads one app's daily inference spend and resumes it
+               after a cap halts it. The cap is per UTC day; exhausting it LATCHES,
+               and a new day does not clear the latch \u2014 resuming is deliberate.
   security     Connect GitHub sources and run commit-pinned hosted reviews, or scan a local snapshot.
   pm           Project management (via @odla-ai/pm): Products contain Projects;
                projects contain goals, kanban tasks, decisions, and bugs. Use
@@ -10504,6 +10621,12 @@ Commands:
                pass --app/--project explicitly. Same device-grant auth as "app".
                Status changes and comments post to each item's @odla-ai/chat
                discussion thread.
+               NOTE: "--column ready" is OWNER-ONLY. Creating a task in Ready
+               approves its complete execution contract, so it needs pm.plan,
+               which no device enrollment or handshake approval can grant. An
+               agent proposes in Backlog (the default); a human owner or a
+               pm.plan agent promotes. This is deliberate, not a permission
+               gap \u2014 it was reported as one.
   bug          Intent-first alias for PM bugs. "bug report" writes to
                odla PM; odla product defects do not belong in GitHub Issues.
   discuss      Group discussions (via @odla-ai/chat) for the apps you co-own:
@@ -13618,7 +13741,11 @@ async function revoke(parsed, deps, cfg, doFetch, out, json) {
   if (json) out.log(JSON.stringify({ deviceId, revoked: true }, null, 2));
 }
 async function scopedToken2(parsed, deps, cfg, doFetch, out, label, scope = "app:device:enroll") {
-  const { credentials } = await resolveOperatorContext(parsed, { allowMissingConfig: true });
+  const { credentials } = await resolveOperatorContext(parsed, {
+    allowMissingConfig: true,
+    // A device is granted the apps named in ONE approval, so --app is a list here.
+    allowAppList: true
+  });
   const scopedTokenFile = credentials.scopedTokenFile;
   return getScopedPlatformToken({
     platform: cfg.platformUrl,
@@ -13690,7 +13817,7 @@ function describeUnmet(slug, unmet) {
 
 // src/runbook-actions.ts
 var PLATFORM_SCOPE = "$platform";
-async function call(ctx, method, path, body) {
+async function call2(ctx, method, path, body) {
   const res = await ctx.doFetch(`${ctx.platformUrl.replace(/\/$/, "")}/registry/pm${path}`, {
     method,
     headers: {
@@ -13712,7 +13839,7 @@ async function call(ctx, method, path, body) {
   throw new Error(message2);
 }
 async function bySlug(ctx, slug) {
-  const page2 = await call(
+  const page2 = await call2(
     ctx,
     "GET",
     `/runbook?app=${encodeURIComponent(ctx.appId)}&slug=${encodeURIComponent(slug)}&limit=1`
@@ -13721,7 +13848,7 @@ async function bySlug(ctx, slug) {
   if (filtered) return filtered;
   const limit = 100;
   for (let offset = 0; ; offset += limit) {
-    const fallback = await call(
+    const fallback = await call2(
       ctx,
       "GET",
       `/runbook?app=${encodeURIComponent(ctx.appId)}&limit=${limit}&offset=${offset}`
@@ -13742,7 +13869,7 @@ async function runbookList(ctx, all, query) {
   const params = new URLSearchParams();
   if (!all) params.set("app", ctx.appId);
   if (query) params.set("q", query);
-  const page2 = await call(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
+  const page2 = await call2(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
   if (ctx.json) return ctx.out.log(JSON.stringify(page2, null, 2));
   if (!page2.records.length) return ctx.out.log("(no runbooks)");
   ctx.out.log(["SLUG", "STATUS", "V", "SCOPE", "UPDATED", "TITLE"].join("	"));
@@ -13759,7 +13886,7 @@ async function runbookGet(ctx, slug) {
   ctx.out.log(runbook.body);
 }
 async function runbookNew(ctx, slug, title, body, summary, requires) {
-  const created = await call(ctx, "POST", "/runbook", {
+  const created = await call2(ctx, "POST", "/runbook", {
     appId: ctx.appId,
     input: { slug, title, body, ...summary ? { summary } : {}, ...requires ? { requires } : {} }
   });
@@ -13767,7 +13894,7 @@ async function runbookNew(ctx, slug, title, body, summary, requires) {
 }
 async function runbookEdit(ctx, slug, body, note, requires, expectedVersion) {
   const runbook = await bySlug(ctx, slug);
-  const result = await call(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
+  const result = await call2(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
     // An empty --requires clears the declaration; omitting the flag leaves
     // whatever is there, so an ordinary body edit never drops it.
     patch: {
@@ -13782,7 +13909,7 @@ async function runbookEdit(ctx, slug, body, note, requires, expectedVersion) {
 }
 async function runbookStatus(ctx, slug, status) {
   const runbook = await bySlug(ctx, slug);
-  const result = await call(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
+  const result = await call2(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
     patch: { status }
   });
   ctx.out.log(ctx.json ? JSON.stringify(result, null, 2) : `${slug} \u2192 ${status}`);
@@ -13791,7 +13918,7 @@ async function runbookVisibility(ctx, slug, visibility) {
   if (visibility !== "operator" && visibility !== "admin")
     throw new Error(`visibility must be "operator" or "admin", got "${visibility}"`);
   const runbook = await bySlug(ctx, slug);
-  const result = await call(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
+  const result = await call2(ctx, "PATCH", `/runbook/${encodeURIComponent(runbook.id)}`, {
     patch: { visibility }
   });
   if (ctx.json) return ctx.out.log(JSON.stringify(result, null, 2));
@@ -13801,7 +13928,7 @@ async function runbookVisibility(ctx, slug, visibility) {
 }
 async function runbookHistory(ctx, slug) {
   const runbook = await bySlug(ctx, slug);
-  const page2 = await call(ctx, "GET", `/runbook/${encodeURIComponent(runbook.id)}/revisions`);
+  const page2 = await call2(ctx, "GET", `/runbook/${encodeURIComponent(runbook.id)}/revisions`);
   if (ctx.json) return ctx.out.log(JSON.stringify(page2, null, 2));
   ctx.out.log(`${slug} is at v${runbook.version}`);
   if (!page2.records.length) return ctx.out.log("(no earlier versions)");
@@ -13811,7 +13938,7 @@ async function runbookHistory(ctx, slug) {
 }
 async function runbookRevert(ctx, slug, version) {
   const runbook = await bySlug(ctx, slug);
-  const result = await call(
+  const result = await call2(
     ctx,
     "POST",
     `/runbook/${encodeURIComponent(runbook.id)}/revert`,
@@ -13822,7 +13949,7 @@ async function runbookRevert(ctx, slug, version) {
 }
 async function runbookRemove(ctx, slug) {
   const runbook = await bySlug(ctx, slug);
-  await call(ctx, "DELETE", `/runbook/${encodeURIComponent(runbook.id)}`);
+  await call2(ctx, "DELETE", `/runbook/${encodeURIComponent(runbook.id)}`);
   ctx.out.log(`removed ${slug}`);
 }
 
@@ -13883,7 +14010,7 @@ ${counts.created} created, ${counts.updated} updated, ${counts.unchanged} unchan
 async function upsert(ctx, r, visibility) {
   const found = await bySlug(ctx, r.slug).catch(() => null);
   if (!found) {
-    await call(ctx, "POST", "/runbook", {
+    await call2(ctx, "POST", "/runbook", {
       appId: ctx.appId,
       input: {
         slug: r.slug,
@@ -13902,7 +14029,7 @@ async function upsert(ctx, r, visibility) {
     ctx.out.log(`  = ${r.slug} (already current at v${found.version})`);
     return "unchanged";
   }
-  const result = await call(
+  const result = await call2(
     ctx,
     "PATCH",
     `/runbook/${encodeURIComponent(found.id)}`,
@@ -14130,7 +14257,7 @@ async function assessImpact(ctx, surfaces, all, limit) {
   for (const surface of surfaces) {
     const params = new URLSearchParams({ q: surface.query, limit: String(limit) });
     if (!all) params.set("app", ctx.appId);
-    const result = await call(ctx, "GET", `/runbook/search?${params}`);
+    const result = await call2(ctx, "GET", `/runbook/search?${params}`);
     const runbooks = result.outcome === "ranked" ? foldHits(result.hits) : result.candidates.map((c) => ({ ...c, version: 0, sections: [] }));
     out.push({ surface, runbooks });
   }
@@ -14213,7 +14340,7 @@ function lintRunbook(runbook, installed) {
 async function runbookLint(ctx, all) {
   const params = new URLSearchParams();
   if (!all) params.set("app", ctx.appId);
-  const page2 = await call(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
+  const page2 = await call2(ctx, "GET", `/runbook${params.size ? `?${params}` : ""}`);
   const installed = { "@odla-ai/cli": cliVersion() };
   const findings = page2.records.flatMap((runbook) => lintRunbook(runbook, installed));
   if (ctx.json) return ctx.out.log(JSON.stringify({ checked: page2.records.length, findings }, null, 2));
@@ -14238,7 +14365,7 @@ async function runbookSearch(ctx, query, all, limit) {
   const params = new URLSearchParams({ q: query });
   if (!all) params.set("app", ctx.appId);
   if (limit) params.set("limit", String(limit));
-  const result = await call(ctx, "GET", `/runbook/search?${params}`);
+  const result = await call2(ctx, "GET", `/runbook/search?${params}`);
   if (ctx.json) return ctx.out.log(JSON.stringify(result, null, 2));
   if (result.outcome === "empty-corpus") return ctx.out.log("no runbooks are available to search");
   if (result.outcome === "no-match") return ctx.out.log(`no runbook mentions "${query}"`);
@@ -14257,7 +14384,7 @@ async function runbookSearch(ctx, query, all, limit) {
 }
 var JSDOC_POINTER = "Runbooks are procedure. For what an export does \u2014 arguments, defaults, errors \u2014 read its JSDoc: the installed package's .d.ts, or its page under https://odla.ai/docs.";
 async function runbookAsk(ctx, question, all) {
-  const result = await call(ctx, "POST", "/runbook/ask", {
+  const result = await call2(ctx, "POST", "/runbook/ask", {
     question,
     ...all ? {} : { app: ctx.appId }
   });
@@ -14287,7 +14414,7 @@ async function runbookAsk(ctx, question, all) {
 }
 async function runbookComment(ctx, slug, body) {
   const found = await bySlug(ctx, slug);
-  await call(ctx, "POST", `/runbook/${encodeURIComponent(found.id)}/comments`, { body });
+  await call2(ctx, "POST", `/runbook/${encodeURIComponent(found.id)}/comments`, { body });
   ctx.out.log(`commented on ${slug} (v${found.version})`);
 }