@odla-ai/cli 0.41.1 → 0.42.1

package/dist/{cli-N5PASRYU.js → cli-K5SBFFAY.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   runCli
-} from "./chunk-6RGM4W73.js";
+} from "./chunk-FWPQSTNF.js";
 import {
   exitCodeFor
 } from "./chunk-UKLSRQ5J.js";
@@ -9,4 +9,4 @@ export {
   exitCodeFor,
   runCli
 };
-//# sourceMappingURL=cli-N5PASRYU.js.map
+//# sourceMappingURL=cli-K5SBFFAY.js.map

package/dist/index.cjs

@@ -6275,7 +6275,7 @@ async function stageWorkspacePair(baselineSource, workspaceSource, options = {})
   }
 }
 
-// ../harness/dist/chunk-5HX5LWTG.js
+// ../harness/dist/chunk-QZXCQSPZ.js
 var import_crypto = require("crypto");
 var import_promises5 = require("fs/promises");
 var import_path5 = require("path");
@@ -6612,7 +6612,7 @@ function validateSnapshot(snapshot, limits) {
   }
 }
 
-// ../harness/dist/chunk-5HX5LWTG.js
+// ../harness/dist/chunk-QZXCQSPZ.js
 var import_child_process4 = require("child_process");
 var import_promises6 = require("fs/promises");
 var import_path6 = require("path");
@@ -6915,7 +6915,7 @@ function looksLikeDestination(value2) {
   return /^(?:[a-z][a-z0-9+.-]*:\/\/|\/|\\\\)/i.test(text3) || /^[\w.-]+\.[a-z]{2,}(?:[/:]|$)/i.test(text3);
 }
 
-// ../harness/dist/chunk-5HX5LWTG.js
+// ../harness/dist/chunk-QZXCQSPZ.js
 var import_promises10 = require("fs/promises");
 var import_promises11 = require("fs/promises");
 var import_path10 = require("path");
@@ -7183,7 +7183,7 @@ async function buildCodeGraph(input) {
   return builder.build();
 }
 
-// ../harness/dist/chunk-5HX5LWTG.js
+// ../harness/dist/chunk-QZXCQSPZ.js
 var import_crypto4 = require("crypto");
 async function digestStagedWorkspace(root, limits) {
   const files = [];
@@ -8012,7 +8012,7 @@ var CodeRuntimeCheckpointManager = class {
     await this.options.event(command, { type: "message", actor: "system", body: prepared.note }, active.conversationRefs).catch(() => void 0);
     await active.workspace.cleanup();
     await this.options.event(command, { type: "status", status: "checkpointed" }, active.conversationRefs).catch(() => void 0);
-    return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Pi stopped at a portable checkpoint" };
+    return { status: "checkpointed", checkpoint: prepared.checkpoint, message: "Theseus stopped at a portable checkpoint" };
   }
   async acknowledged(command, result) {
     if (command.kind !== "checkpoint_stop" || result.status !== "checkpointed") return false;
@@ -8237,7 +8237,7 @@ async function materializeCommandWorkspace(input) {
     await materialized.cleanup();
   }
 }
-var V1_SYSTEM_PROMPT = `You are Pi, the coding agent inside an odla Code harness.
+var V1_SYSTEM_PROMPT = `You are Theseus, the coding agent inside an odla Code harness.
 Use only the odla_read, odla_apply_git_diff, and odla_run_recipe tools.
 For mutations, call odla_apply_git_diff with raw git diff text. It must start
 with "diff --git a/<path> b/<path>", include matching "---" and "+++" file
@@ -8284,7 +8284,12 @@ function codeSkill(opts) {
       { lease: opts.lease, workspaceDir: opts.workspaceDir, signal },
       { requestId: `bench-${tool}-${++seq}`, tool, input }
     );
-    opts.onToolCall?.({ tool, ok: response2.ok, durationMs: Date.now() - startedAt });
+    opts.onToolCall?.({
+      tool,
+      ok: response2.ok,
+      durationMs: Date.now() - startedAt,
+      ...response2.ok ? {} : { error: String(response2.content).slice(0, 300) }
+    });
     return { content: response2.content, isError: !response2.ok };
   };
   const read22 = {
@@ -8315,11 +8320,17 @@ function codeSkill(opts) {
   };
   const runRecipe = {
     name: "odla_run_recipe",
-    description: "Run one app-registered build or test recipe through CaMeL policy.",
+    description: `Run one app-registered build or test recipe through CaMeL policy.${opts.recipeIds?.length ? ` Available recipes: ${opts.recipeIds.join(", ")}.` : ""}`,
     inputSchema: {
       type: "object",
       required: ["recipeId"],
-      properties: { recipeId: { type: "string", minLength: 1, maxLength: 120, pattern: "^[a-zA-Z0-9._:-]+$" } },
+      properties: { recipeId: {
+        type: "string",
+        minLength: 1,
+        maxLength: 120,
+        pattern: "^[a-zA-Z0-9._:-]+$",
+        ...opts.recipeIds?.length ? { enum: [...opts.recipeIds] } : {}
+      } },
       additionalProperties: false
     },
     handler: (input, ctx) => call4("sandbox.run_recipe", input, ctx.signal)
@@ -8401,6 +8412,7 @@ async function runCodeAgent(options) {
     lease: options.lease,
     workspaceDir: options.workspaceDir,
     surface,
+    ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
     onToolCall: (call4) => {
       toolCalls.push(call4);
       options.onToolCall?.(call4);
@@ -8429,7 +8441,7 @@ async function runCodeAgent(options) {
 }
 async function runCodeAgentAttempt(options) {
   try {
-    const surface = options.surface ?? "v2";
+    const surface = options.surface ?? "v3";
     const { run } = await runCodeAgent({
       inference: options.inference,
       broker: options.broker,
@@ -8440,6 +8452,7 @@ async function runCodeAgentAttempt(options) {
       // id only labels the request the control plane is about to rewrite.
       model: "brokered",
       surface,
+      ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
       ...options.budget ? { budget: options.budget } : {},
       ...options.signal ? { signal: options.signal } : {},
@@ -9375,7 +9388,7 @@ async function appendCodeRuntimeEvent(control, command, event, refs) {
 }
 var digestRuntimeValue = (value2) => `sha256:${(0, import_crypto4.createHash)("sha256").update(value2).digest("hex")}`;
 var runtimeErrorMessage = (value2) => value2 instanceof Error ? value2.message : String(value2);
-var CodePiRuntimeEngine = class {
+var TheseusRuntimeEngine = class {
   constructor(options) {
     this.options = options;
     this.#attempt = options.runAgentAttempt ?? runCodeAgentAttempt;
@@ -9461,7 +9474,7 @@ var CodePiRuntimeEngine = class {
       await this.#failure(command, active, detail);
       return null;
     });
-    return { status: "running", message: resume ? "Pi resumed from a portable checkpoint" : "Pi started" };
+    return { status: "running", message: resume ? "Theseus resumed from a portable checkpoint" : "Theseus started" };
   }
   /**
    * Pursue a goal: attempt, judge with the clean verifier, re-prompt from what
@@ -9549,7 +9562,7 @@ var CodePiRuntimeEngine = class {
       await this.#failure(command, active, detail);
       return null;
     });
-    return { status: "running", message: "Pi accepted the owner prompt" };
+    return { status: "running", message: "Theseus accepted the owner prompt" };
   }
   async #runAttempt(command, metadata2, active) {
     const lease = fakeCodeLease(command, metadata2);
@@ -9574,7 +9587,8 @@ var CodePiRuntimeEngine = class {
       lease,
       workspaceDir: active.workspace.workspaceDir,
       prompt: metadata2.prompt,
-      signal: active.abort.signal
+      signal: active.abort.signal,
+      recipeIds: this.options.recipes.map((recipe2) => recipe2.id)
     });
     const closing = result.finalText.trim();
     const completed = result.status === "completed" && Boolean(closing);
@@ -9638,7 +9652,7 @@ var CodePiRuntimeEngine = class {
     }
   }
   async #diagnostic(command, active, value2) {
-    const detail = value2.trim().slice(0, 2e3) || "Pi runtime failed";
+    const detail = value2.trim().slice(0, 2e3) || "Theseus runtime failed";
     this.options.onDiagnostic?.(detail);
     await this.#event(
       command,
@@ -9968,8 +9982,9 @@ async function codeConnect(options) {
   const appId = requestedAppId ?? cfg?.app.id;
   const platform = (options.platform ?? cfg?.platformUrl ?? process.env.ODLA_PLATFORM_URL ?? "https://odla.ai").replace(/\/+$/, "");
   const appEnv = options.env ?? (cfg ? cfg.envs.includes("dev") ? "dev" : cfg.envs[0] : void 0);
-  if (appEnv !== "dev" && appEnv !== "prod" || cfg && !cfg.envs.includes(appEnv)) {
-    throw new Error(cfg ? `Code env "${appEnv ?? ""}" must be dev or prod and declared in ${options.configPath}` : `Code env "${appEnv ?? ""}" must be dev or prod; pass --env explicitly when there is no ${options.configPath}`);
+  const explicitEnv = options.env !== void 0;
+  if (appEnv !== "dev" && appEnv !== "prod" || !explicitEnv && cfg && !cfg.envs.includes(appEnv)) {
+    throw new Error(cfg ? `Code env "${appEnv ?? ""}" must be dev or prod and declared in ${options.configPath}, unless dev or prod is passed explicitly` : `Code env "${appEnv ?? ""}" must be dev or prod; pass --env explicitly when there is no ${options.configPath}`);
   }
   if (process.platform !== "darwin" && process.platform !== "linux") {
     throw new Error("odla Code hosts require macOS or Linux");
@@ -10066,16 +10081,15 @@ async function runCodeRuntime(input) {
   const control = createCodeRuntimeControlClient({
     endpoint: input.endpoint,
     token: input.token,
-    signal,
     fetch: input.fetch
   });
-  const commandEngine = new CodePiRuntimeEngine({
+  const commandEngine = new TheseusRuntimeEngine({
     control,
     engine: input.engine,
     recipes: CODE_BUILD_RECIPES,
     recipeAuthorization: "registered_recipe",
     localSource: input.localSource,
-    onDiagnostic: (message2) => input.stdout.error(`Pi runtime failed \xB7 ${message2}`)
+    onDiagnostic: (message2) => input.stdout.error(`Theseus runtime failed \xB7 ${message2}`)
   });
   const reconciler = new CodeRuntimeReconciler(control, commandEngine);
   try {
@@ -10827,7 +10841,7 @@ Commands:
                their own credentials for the shared db (the live one included)
                \u2014 no secret is ever copied between people.
   capabilities Show what the CLI automates vs agent edits and human checkpoints.
-  code         Enroll this Mac/Linux host for the current Studio-connected repository and run Pi.
+  code         Enroll this Mac/Linux host for the current Studio-connected repository and run Theseus.
                "code repository show" reports the repository an app works on (Studio or a
                human session connects one); "code grant request|list|approve|revoke" then
                governs unattended access: an agent may request, only a human may approve.
@@ -10843,12 +10857,10 @@ Commands:
                explicitly. Same device-grant auth as "app".
                Status changes and comments post to each item's @odla-ai/chat
                discussion thread.
-               NOTE: "--column ready" is OWNER-ONLY. Creating a task in Ready
-               approves its complete execution contract, so it needs pm.plan,
-               which no device enrollment or handshake approval can grant. An
-               agent proposes in Backlog (the default); a human owner or a
-               pm.plan agent promotes. This is deliberate, not a permission
-               gap \u2014 it was reported as one.
+               Creating or promoting a task in Ready requires a complete
+               execution contract and a reviewed revision. Any caller with PM
+               mutation access to that app/project may do it; claims coordinate
+               execution but never own or lock the PM record.
   bug          Intent-first alias for PM bugs. "bug report" writes to
                odla PM; odla product defects do not belong in GitHub Issues.
   discuss      Group discussions (via @odla-ai/chat) for the apps you co-own: