@odla-ai/cli 0.41.1 → 0.42.1

package/bin/odla-ai.js

@@ -3,7 +3,7 @@ import { existsSync, readFileSync, statSync } from "node:fs";
 import { spawnSync } from "node:child_process";
 import { dirname, join } from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
-import { workspaceBuildOrder } from "./workspace-build.js";
+import { workspaceBuildOrder, workspaceInitialBuildArguments } from "./workspace-build.js";
 import { firstStaleWorkspace, staleBuildNotice } from "./stale-build.js";
 
 const packageRoot = join(dirname(fileURLToPath(import.meta.url)), "..");
@@ -22,10 +22,9 @@ if (!existsSync(builtEntry)) {
 
   console.error("odla-ai: workspace CLI is not built; building the local monorepo first");
   const npm = process.platform === "win32" ? "npm.cmd" : "npm";
-  const workspaces = workspaceBuildOrder(workspaceRoot);
   const child = spawnSync(
     npm,
-    ["run", "build", ...workspaces.map((name) => `--workspace=${name}`)],
+    workspaceInitialBuildArguments(),
     { cwd: workspaceRoot, stdio: "inherit" },
   );
   if (child.error) throw child.error;

package/bin/workspace-build.d.ts

@@ -1,5 +1,6 @@
 /** Return buildable internal dependencies in dependency-first order. */
 export declare function workspaceBuildOrder(root: string): string[];
+export declare function workspaceInitialBuildArguments(): string[];
 
 /** Every workspace in the checkout, by package name, with its directory. */
 export declare function workspacePackages(

package/bin/workspace-build.js

@@ -46,3 +46,11 @@ export function workspaceBuildOrder(root) {
   visit("@odla-ai/cli");
   return order;
 }
+
+/** The missing-build recovery path must use the repository's canonical build.
+ * Its project-reference steps include internal packages that intentionally do
+ * not expose workspace build scripts, so a workspace-only closure is unsafe in
+ * a fresh checkout. */
+export function workspaceInitialBuildArguments() {
+  return ["run", "build"];
+}

package/dist/bin.cjs

@@ -7915,7 +7915,7 @@ var init_code2 = __esm({
   }
 });
 
-// ../harness/dist/chunk-5HX5LWTG.js
+// ../harness/dist/chunk-QZXCQSPZ.js
 async function digestStagedWorkspace(root, limits) {
   const files = [];
   const walk = async (directory) => {
@@ -8868,7 +8868,12 @@ function codeSkill(opts) {
       { lease: opts.lease, workspaceDir: opts.workspaceDir, signal },
       { requestId: `bench-${tool}-${++seq}`, tool, input }
     );
-    opts.onToolCall?.({ tool, ok: response2.ok, durationMs: Date.now() - startedAt });
+    opts.onToolCall?.({
+      tool,
+      ok: response2.ok,
+      durationMs: Date.now() - startedAt,
+      ...response2.ok ? {} : { error: String(response2.content).slice(0, 300) }
+    });
     return { content: response2.content, isError: !response2.ok };
   };
   const read22 = {
@@ -8899,11 +8904,17 @@ function codeSkill(opts) {
   };
   const runRecipe = {
     name: "odla_run_recipe",
-    description: "Run one app-registered build or test recipe through CaMeL policy.",
+    description: `Run one app-registered build or test recipe through CaMeL policy.${opts.recipeIds?.length ? ` Available recipes: ${opts.recipeIds.join(", ")}.` : ""}`,
     inputSchema: {
       type: "object",
       required: ["recipeId"],
-      properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
+      properties: { recipeId: {
+        type: "string",
+        minLength: 1,
+        maxLength: 120,
+        pattern: "^[a-zA-Z0-9._:-]+$",
+        ...opts.recipeIds?.length ? { enum: [...opts.recipeIds] } : {}
+      } },
       additionalProperties: false
     },
     handler: (input, ctx) => call4("sandbox.run_recipe", input, ctx.signal)
@@ -8985,6 +8996,7 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
+    ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call4) => {
       toolCalls.push(call4);
       options.onToolCall?.(call4);
@@ -9013,7 +9025,7 @@ async function runCodeAgent(options) {
 }
 async function runCodeAgentAttempt(options) {
   try {
-    const surface = options.surface ?? "v2";
+    const surface = options.surface ?? "v3";
     const { run } = await runCodeAgent({
       inference: options.inference,
       broker: options.broker,
@@ -9024,6 +9036,7 @@ async function runCodeAgentAttempt(options) {
       // id only labels the request the control plane is about to rewrite.
       model: "brokered",
       surface,
+      ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
       ...options.budget ? { budget: options.budget } : {},
       ...options.signal ? { signal: options.signal } : {},
@@ -9904,9 +9917,9 @@ async function appendCodeRuntimeEvent(control, command, event, refs) {
   const bounded = event.type === "message" ? { ...event, body: event.body.trim().slice(0, 2e4) || `${event.actor} event` } : event;
   await control.appendSessionEvent(command.sessionId, eventId, bounded);
 }
-var import_crypto, import_promises5, import_path5, import_child_process4, import_promises6, import_path6, import_child_process5, import_process2, import_crypto2, import_crypto3, import_fs2, import_promises7, import_path7, import_promises8, import_os3, import_path8, import_ai4, import_ai5, import_promises9, import_path9, import_promises10, import_promises11, import_path10, import_crypto4, CODE_RUNTIME_PROTOCOL_VERSION, CodeRuntimeReconciler, CodeRuntimeControlError, record5, invalid, RESERVED, SECRET, PATH, FORBIDDEN, ARTIFACT_PATH, PRIVATE_ARTIFACT_PART, SHA3, DIGEST3, ID3, RULE, DEFAULT_PREFIXES, DEFAULT_SUFFIXES, message, CodeRuntimeCheckpointManager, record22, SOURCE_LIMITS, RESERVED2, SECRET2, SOURCE_MAX_FILES, SOURCE_MAX_BYTES, SOURCE_SET_MAX_BYTES, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, SYSTEM_PROMPT_FOR, DEFAULT_MAX_FILES, DEFAULT_MAX_RESULTS, DEFAULT_MAX_FILE_BYTES, DESTINATIONS, READ, LIST, SEARCH, GRAPH, PATCH, RECIPE, cache, shortId, GRAPH_TOOLS, MAX_MEMORY_BODY, POSITIVE, digestRuntimeValue, runtimeErrorMessage, CodePiRuntimeEngine;
-var init_chunk_5HX5LWTG = __esm({
-  "../harness/dist/chunk-5HX5LWTG.js"() {
+var import_crypto, import_promises5, import_path5, import_child_process4, import_promises6, import_path6, import_child_process5, import_process2, import_crypto2, import_crypto3, import_fs2, import_promises7, import_path7, import_promises8, import_os3, import_path8, import_ai4, import_ai5, import_promises9, import_path9, import_promises10, import_promises11, import_path10, import_crypto4, CODE_RUNTIME_PROTOCOL_VERSION, CodeRuntimeReconciler, CodeRuntimeControlError, record5, invalid, RESERVED, SECRET, PATH, FORBIDDEN, ARTIFACT_PATH, PRIVATE_ARTIFACT_PART, SHA3, DIGEST3, ID3, RULE, DEFAULT_PREFIXES, DEFAULT_SUFFIXES, message, CodeRuntimeCheckpointManager, record22, SOURCE_LIMITS, RESERVED2, SECRET2, SOURCE_MAX_FILES, SOURCE_MAX_BYTES, SOURCE_SET_MAX_BYTES, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, SYSTEM_PROMPT_FOR, DEFAULT_MAX_FILES, DEFAULT_MAX_RESULTS, DEFAULT_MAX_FILE_BYTES, DESTINATIONS, READ, LIST, SEARCH, GRAPH, PATCH, RECIPE, cache, shortId, GRAPH_TOOLS, MAX_MEMORY_BODY, POSITIVE, digestRuntimeValue, runtimeErrorMessage, TheseusRuntimeEngine;
+var init_chunk_QZXCQSPZ = __esm({
+  "../harness/dist/chunk-QZXCQSPZ.js"() {
     "use strict";
     init_cjs_shims();
     init_chunk_K76I2TCQ();
@@ -10026,7 +10039,7 @@ var init_chunk_5HX5LWTG = __esm({
         await this.options.event(command, { type: "message", actor: "system", body: prepared.note }, active.conversationRefs).catch(() => void 0);
         await active.workspace.cleanup();
         await this.options.event(command, { type: "status", status: "checkpointed" }, active.conversationRefs).catch(() => void 0);
-        return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Pi stopped at a portable checkpoint" };
+        return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Theseus stopped at a portable checkpoint" };
       }
       async acknowledged(command, result) {
         if (command.kind !== "checkpoint_stop" || result.status !== "checkpointed") return false;
@@ -10050,7 +10063,7 @@ var init_chunk_5HX5LWTG = __esm({
     SOURCE_MAX_FILES = 1e5;
     SOURCE_MAX_BYTES = 80 * 1024 * 1024;
     SOURCE_SET_MAX_BYTES = 480 * 1024 * 1024;
-    V1_SYSTEM_PROMPT = `You are Pi, the coding agent inside an odla Code harness.
+    V1_SYSTEM_PROMPT = `You are Theseus, the coding agent inside an odla Code harness.
 Use only the odla_read, odla_apply_git_diff, and odla_run_recipe tools.
 For mutations, call odla_apply_git_diff with raw git diff text. It must start
 with "diff --git a/<path> b/<path>", include matching "---" and "+++" file
@@ -10144,7 +10157,7 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
     POSITIVE = (value2) => Number.isFinite(value2) && Number(value2) > 0 ? Number(value2) : void 0;
     digestRuntimeValue = (value2) => `sha256:${(0, import_crypto4.createHash)("sha256").update(value2).digest("hex")}`;
     runtimeErrorMessage = (value2) => value2 instanceof Error ? value2.message : String(value2);
-    CodePiRuntimeEngine = class {
+    TheseusRuntimeEngine = class {
       constructor(options) {
         this.options = options;
         this.#attempt = options.runAgentAttempt ?? runCodeAgentAttempt;
@@ -10230,7 +10243,7 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
           await this.#failure(command, active, detail);
           return null;
         });
-        return { status: "running", message: resume ? "Pi resumed from a portable checkpoint" : "Pi started" };
+        return { status: "running", message: resume ? "Theseus resumed from a portable checkpoint" : "Theseus started" };
       }
       /**
        * Pursue a goal: attempt, judge with the clean verifier, re-prompt from what
@@ -10318,7 +10331,7 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
           await this.#failure(command, active, detail);
           return null;
         });
-        return { status: "running", message: "Pi accepted the owner prompt" };
+        return { status: "running", message: "Theseus accepted the owner prompt" };
       }
       async #runAttempt(command, metadata2, active) {
         const lease = fakeCodeLease(command, metadata2);
@@ -10343,7 +10356,8 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
           lease,
           workspaceDir: active.workspace.workspaceDir,
           prompt: metadata2.prompt,
-          signal: active.abort.signal
+          signal: active.abort.signal,
+          recipeIds: this.options.recipes.map((recipe2) => recipe2.id)
         });
         const closing = result.finalText.trim();
         const completed = result.status === "completed" && Boolean(closing);
@@ -10407,7 +10421,7 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
         }
       }
       async #diagnostic(command, active, value2) {
-        const detail = value2.trim().slice(0, 2e3) || "Pi runtime failed";
+        const detail = value2.trim().slice(0, 2e3) || "Theseus runtime failed";
         this.options.onDiagnostic?.(detail);
         await this.#event(
           command,
@@ -10428,7 +10442,7 @@ var init_node = __esm({
   "../harness/dist/node.js"() {
     "use strict";
     init_cjs_shims();
-    init_chunk_5HX5LWTG();
+    init_chunk_QZXCQSPZ();
     init_chunk_K76I2TCQ();
     MEASURED_PREMIUM = Object.freeze({
       /** 3 racers vs pure depth at equal budget: 21,044 / 7,936. */
@@ -10709,8 +10723,9 @@ async function codeConnect(options) {
   const appId = requestedAppId ?? cfg?.app.id;
   const platform = (options.platform ?? cfg?.platformUrl ?? process.env.ODLA_PLATFORM_URL ?? "https://odla.ai").replace(/\/+$/, "");
   const appEnv = options.env ?? (cfg ? cfg.envs.includes("dev") ? "dev" : cfg.envs[0] : void 0);
-  if (appEnv !== "dev" && appEnv !== "prod" || cfg && !cfg.envs.includes(appEnv)) {
-    throw new Error(cfg ? `Code env "${appEnv ?? ""}" must be dev or prod and declared in ${options.configPath}` : `Code env "${appEnv ?? ""}" must be dev or prod; pass --env explicitly when there is no ${options.configPath}`);
+  const explicitEnv = options.env !== void 0;
+  if (appEnv !== "dev" && appEnv !== "prod" || !explicitEnv && cfg && !cfg.envs.includes(appEnv)) {
+    throw new Error(cfg ? `Code env "${appEnv ?? ""}" must be dev or prod and declared in ${options.configPath}, unless dev or prod is passed explicitly` : `Code env "${appEnv ?? ""}" must be dev or prod; pass --env explicitly when there is no ${options.configPath}`);
   }
   if (process.platform !== "darwin" && process.platform !== "linux") {
     throw new Error("odla Code hosts require macOS or Linux");
@@ -10807,16 +10822,15 @@ async function runCodeRuntime(input) {
   const control = createCodeRuntimeControlClient({
     endpoint: input.endpoint,
     token: input.token,
-    signal,
     fetch: input.fetch
   });
-  const commandEngine = new CodePiRuntimeEngine({
+  const commandEngine = new TheseusRuntimeEngine({
     control,
     engine: input.engine,
     recipes: CODE_BUILD_RECIPES,
     recipeAuthorization: "registered_recipe",
     localSource: input.localSource,
-    onDiagnostic: (message2) => input.stdout.error(`Pi runtime failed \xB7 ${message2}`)
+    onDiagnostic: (message2) => input.stdout.error(`Theseus runtime failed \xB7 ${message2}`)
   });
   const reconciler = new CodeRuntimeReconciler(control, commandEngine);
   try {
@@ -11654,7 +11668,7 @@ Commands:
                their own credentials for the shared db (the live one included)
                \u2014 no secret is ever copied between people.
   capabilities Show what the CLI automates vs agent edits and human checkpoints.
-  code         Enroll this Mac/Linux host for the current Studio-connected repository and run Pi.
+  code         Enroll this Mac/Linux host for the current Studio-connected repository and run Theseus.
                "code repository show" reports the repository an app works on (Studio or a
                human session connects one); "code grant request|list|approve|revoke" then
                governs unattended access: an agent may request, only a human may approve.
@@ -11670,12 +11684,10 @@ Commands:
                explicitly. Same device-grant auth as "app".
                Status changes and comments post to each item's @odla-ai/chat
                discussion thread.
-               NOTE: "--column ready" is OWNER-ONLY. Creating a task in Ready
-               approves its complete execution contract, so it needs pm.plan,
-               which no device enrollment or handshake approval can grant. An
-               agent proposes in Backlog (the default); a human owner or a
-               pm.plan agent promotes. This is deliberate, not a permission
-               gap \u2014 it was reported as one.
+               Creating or promoting a task in Ready requires a complete
+               execution contract and a reviewed revision. Any caller with PM
+               mutation access to that app/project may do it; claims coordinate
+               execution but never own or lock the PM record.
   bug          Intent-first alias for PM bugs. "bug report" writes to
                odla PM; odla product defects do not belong in GitHub Issues.
   discuss      Group discussions (via @odla-ai/chat) for the apps you co-own: