@odla-ai/cli 0.43.1 → 0.44.0

package/dist/bin.cjs

@@ -1480,10 +1480,17 @@ function parseArgv(argv2) {
 function assertArgs(parsed, allowedOptions2, maxPositionals) {
   const allowed = new Set(allowedOptions2);
   for (const name of Object.keys(parsed.options)) {
-    if (!allowed.has(name)) throw new Error(`unknown option "--${name}"; run "odla-ai help" for supported options`);
+    if (allowed.has(name)) continue;
+    const accepts = [...allowed].sort().map((option) => `--${option}`).join(" ");
+    throw new Error(
+      `unknown option "--${name}"` + (accepts ? ` \u2014 this command accepts: ${accepts}` : " \u2014 this command takes no options")
+    );
   }
   if (parsed.positionals.length > maxPositionals) {
-    throw new Error(`unexpected argument "${parsed.positionals[maxPositionals]}"; run "odla-ai help"`);
+    const taken = parsed.positionals.slice(0, maxPositionals).join(" ");
+    throw new Error(
+      `unexpected argument "${parsed.positionals[maxPositionals]}" \u2014 ` + (maxPositionals ? `"odla-ai ${taken}" takes no further arguments` : "this command takes no arguments")
+    );
   }
 }
 function requiredString(value2, name) {
@@ -1527,6 +1534,196 @@ var init_argv = __esm({
   }
 });
 
+// src/surface.ts
+function acceptedAfter(path) {
+  let node = COMMAND_SURFACE;
+  for (const word of path) {
+    node = node?.[word];
+    if (!node) return [];
+  }
+  return Object.keys(node).sort();
+}
+function validateInvocation(words2) {
+  let node = COMMAND_SURFACE;
+  const walked = [];
+  for (const word of words2) {
+    if (Object.keys(node).length === 0) return null;
+    const next = node[word];
+    if (!next) return { validPrefix: walked.join(" "), word, accepted: Object.keys(node).sort() };
+    walked.push(word);
+    node = next;
+  }
+  return null;
+}
+function describeProblem(problem) {
+  const where = problem.validPrefix ? `after "${problem.validPrefix}"` : "as a command";
+  if (!problem.accepted.length) return `"${problem.word}" is not accepted ${where}. Run "odla-ai help"`;
+  if (!problem.word) return `"odla-ai ${problem.validPrefix}" needs one of: ${problem.accepted.join(", ")}`;
+  return `"${problem.word}" is not accepted ${where} \u2014 try: ${problem.accepted.join(", ")}`;
+}
+function rejectWord(path, word, note) {
+  const sentence = describeProblem({
+    validPrefix: path.join(" "),
+    word: word ?? "",
+    accepted: acceptedAfter(path)
+  });
+  throw new Error(note ? `${sentence}. ${note}` : sentence);
+}
+function invocationPath(words2) {
+  let node = COMMAND_SURFACE;
+  const path = [];
+  for (const word of words2) {
+    const next = node[word];
+    if (!next) break;
+    path.push(word);
+    node = next;
+    if (Object.keys(node).length === 0) break;
+  }
+  return path;
+}
+var PM_ACTIONS, PM_TASK_ACTIONS, PM_ENTITIES, COMMAND_SURFACE;
+var init_surface = __esm({
+  "src/surface.ts"() {
+    "use strict";
+    init_cjs_shims();
+    PM_ACTIONS = {
+      list: {},
+      add: {},
+      create: {},
+      get: {},
+      set: {},
+      update: {},
+      status: {},
+      move: {},
+      done: {},
+      comment: {},
+      comments: {},
+      history: {},
+      link: {},
+      ref: {},
+      rm: {},
+      delete: {}
+    };
+    PM_TASK_ACTIONS = {
+      ...PM_ACTIONS,
+      ready: {},
+      claim: {},
+      release: {}
+    };
+    PM_ENTITIES = {
+      ...Object.fromEntries(
+        ["goal", "conformance", "decision", "bug"].map((entity) => [entity, PM_ACTIONS])
+      ),
+      task: PM_TASK_ACTIONS,
+      kanban: PM_TASK_ACTIONS
+    };
+    COMMAND_SURFACE = {
+      agent: { jobs: {}, retry: {} },
+      ai: { models: {} },
+      admin: {
+        ai: {
+          show: {},
+          set: {},
+          credentials: {},
+          models: {},
+          usage: {},
+          audit: {},
+          credential: { set: {} }
+        },
+        spend: { show: {}, reset: {} }
+      },
+      app: {
+        archive: {},
+        restore: {},
+        export: {},
+        import: {},
+        rename: {},
+        "refresh-sandbox": {},
+        "go-live": {},
+        promote: {},
+        owners: { list: {}, add: {}, remove: {} }
+      },
+      auth: { login: {} },
+      brand: { design: { unpack: {} } },
+      bug: { create: {}, list: {}, report: {} },
+      calendar: { status: {}, calendars: {}, connect: {}, disconnect: {} },
+      capabilities: {},
+      code: {
+        connect: {},
+        grant: { request: {}, list: {}, approve: {}, revoke: {} },
+        repository: { show: {}, list: {}, bind: {} }
+      },
+      config: { diff: {}, plan: {}, apply: {} },
+      context: { show: {}, list: {}, save: {}, remove: {} },
+      credentials: { list: {}, revoke: {} },
+      device: { enroll: {}, list: {}, revoke: {} },
+      // `watch`, `read`, `reply`, and `resolve` take a topic id from there on.
+      discuss: {
+        groups: {},
+        list: {},
+        topics: {},
+        read: {},
+        post: {},
+        reply: {},
+        resolve: {},
+        who: {},
+        watch: {}
+      },
+      doctor: {},
+      help: {},
+      init: {},
+      monitor: { plan: {}, apply: {}, run: {}, status: {}, incidents: {}, report: {} },
+      o11y: { status: {} },
+      operations: { get: {}, wait: {} },
+      platform: {
+        status: {}
+      },
+      pm: {
+        ...PM_ENTITIES,
+        project: { list: {}, add: {}, create: {}, use: {} },
+        handoff: {},
+        next: {},
+        start: {},
+        watch: {}
+      },
+      provision: {},
+      runbook: {
+        ask: {},
+        search: {},
+        impact: {},
+        list: {},
+        get: {},
+        cat: {},
+        new: {},
+        edit: {},
+        comment: {},
+        import: {},
+        visibility: {},
+        publish: {},
+        archive: {},
+        history: {},
+        revert: {},
+        rm: {},
+        lint: {}
+      },
+      secrets: { push: {}, status: {}, set: {}, "set-clerk-key": {} },
+      security: {
+        plan: {},
+        sources: {},
+        run: {},
+        status: {},
+        report: {},
+        github: { connect: {}, disconnect: {} }
+      },
+      setup: {},
+      skill: { install: {} },
+      smoke: {},
+      version: {},
+      whoami: {}
+    };
+  }
+});
+
 // src/admin-spend.ts
 async function call(ctx, method, scope) {
   const url = `${ctx.platformUrl.replace(/\/$/, "")}/registry/platform/spend?scope=${encodeURIComponent(scope)}`;
@@ -1575,9 +1772,7 @@ async function spendReset(ctx, scope) {
 async function adminSpend(parsed, ctx) {
   const action2 = parsed.positionals[2];
   const scope = parsed.positionals[3] ?? stringOpt(parsed.options.scope);
-  if (action2 !== "show" && action2 !== "reset") {
-    throw new Error('unknown spend command. Try "odla-ai admin spend show <scope>".');
-  }
+  if (action2 !== "show" && action2 !== "reset") rejectWord(["admin", "spend"], action2);
   if (!scope) {
     throw new Error(
       `"admin spend ${action2}" needs a scope, e.g. odla-ai admin spend ${action2} app:my-app:<incarnation>`
@@ -1591,6 +1786,7 @@ var init_admin_spend = __esm({
     "use strict";
     init_cjs_shims();
     init_argv();
+    init_surface();
     money = (value2) => `$${value2.toFixed(2)}`;
   }
 });
@@ -2426,6 +2622,11 @@ var init_operator_context = __esm({
 async function adminCommand(parsed, deps = {}) {
   const area = parsed.positionals[1];
   const action2 = parsed.positionals[2];
+  if (area !== "ai" && area !== "spend") rejectWord(["admin"], area);
+  if (!acceptedAfter(["admin", area]).includes(action2 ?? "")) rejectWord(["admin", area], action2);
+  if (action2 === "credential" && !acceptedAfter(["admin", "ai", "credential"]).includes(parsed.positionals[3] ?? "")) {
+    rejectWord(["admin", "ai", "credential"], parsed.positionals[3]);
+  }
   if (area === "spend") {
     assertArgs(parsed, JSON_OPTIONS, 4);
     const context2 = await resolveOperatorContext(parsed, { allowMissingConfig: true });
@@ -2451,14 +2652,11 @@ async function adminCommand(parsed, deps = {}) {
       out
     });
   }
-  const credentialSet = action2 === "credential" && parsed.positionals[3] === "set";
+  const credentialSet = action2 === "credential";
   const credentials = action2 === "credentials";
   const models = action2 === "models";
   const usage = action2 === "usage";
   const audit = action2 === "audit";
-  if (area !== "ai" || action2 !== "show" && action2 !== "set" && !credentialSet && !credentials && !models && !usage && !audit) {
-    throw new Error('unknown admin command. Try "odla-ai admin ai show".');
-  }
   const allowed = credentialSet ? [...CONTEXT_OPTIONS, "from-env", "stdin"] : action2 === "set" ? SET_OPTIONS : models ? [...JSON_OPTIONS, "provider"] : usage ? [...JSON_OPTIONS, "app-id", "env", "run-id", "limit"] : audit ? [...JSON_OPTIONS, "limit"] : JSON_OPTIONS;
   assertArgs(parsed, allowed, credentialSet ? 5 : action2 === "set" ? 4 : 3);
   const context = await resolveOperatorContext(parsed, { allowMissingConfig: true });
@@ -2504,6 +2702,7 @@ var init_admin_command = __esm({
     init_token();
     init_argv();
     init_operator_context();
+    init_surface();
     CONTEXT_OPTIONS = ["platform", "config", "context", "token", "open", "email"];
     JSON_OPTIONS = [...CONTEXT_OPTIONS, "json"];
     SET_OPTIONS = [
@@ -2708,9 +2907,7 @@ async function authCommand(parsed, deps = {}) {
     "json"
   ], 2);
   const action2 = parsed.positionals[1] ?? "login";
-  if (action2 !== "login") {
-    throw new Error(`unknown auth action "${action2}". Try "odla-ai auth login --app <id> --email <odla-account>".`);
-  }
+  if (action2 !== "login") rejectWord(["auth"], action2);
   const context = await resolveOperatorContext(parsed, {
     allowMissingConfig: true,
     requireApp: true
@@ -2768,6 +2965,7 @@ var init_auth_command = __esm({
     init_token();
     init_auth_guidance();
     init_whoami_command();
+    init_surface();
   }
 });
 
@@ -2803,9 +3001,7 @@ var init_tenant = __esm({
 // src/agent-command.ts
 async function agentCommand(parsed, deps = {}) {
   const action2 = parsed.positionals[1];
-  if (action2 !== "jobs" && action2 !== "retry") {
-    throw new Error(`unknown agent action "${action2 ?? ""}". Try "odla-ai agent jobs --json".`);
-  }
+  if (action2 !== "jobs" && action2 !== "retry") rejectWord(["agent"], action2);
   assertArgs(parsed, ["config", "env", "state", "limit", "json", "token"], action2 === "jobs" ? 2 : 3);
   if (action2 === "retry" && (parsed.options.state !== void 0 || parsed.options.limit !== void 0)) {
     throw new Error('--state and --limit are supported only by "agent jobs"');
@@ -2887,6 +3083,7 @@ var init_agent_command = __esm({
     init_config();
     init_tenant();
     init_local();
+    init_surface();
   }
 });
 
@@ -3010,9 +3207,7 @@ async function appOwnersCommand(parsed, dependencies = {}) {
     await (sub === "add" ? ownersAdd(email, options) : ownersRemove(email, options));
     return;
   }
-  throw new Error(
-    `unknown app owners subcommand "${sub}". Try "odla-ai app owners list", "odla-ai app owners add <email>", or "odla-ai app owners remove <email>".`
-  );
+  rejectWord(["app", "owners"], sub);
 }
 var init_app_owners = __esm({
   "src/app-owners.ts"() {
@@ -3020,6 +3215,7 @@ var init_app_owners = __esm({
     init_cjs_shims();
     init_argv();
     init_human_session();
+    init_surface();
   }
 });
 
@@ -3143,8 +3339,10 @@ async function appCommand(parsed, dependencies = {}) {
     return;
   }
   if (sub !== "archive" && sub !== "restore") {
-    throw new Error(
-      `unknown app subcommand "${sub ?? ""}". Try "odla-ai app archive --yes", "odla-ai app restore", "odla-ai app export", "odla-ai app import <file>", "odla-ai app refresh-sandbox", "odla-ai app go-live", "odla-ai app promote", "odla-ai app rename <name>", or "odla-ai app owners <list|add|remove>". (Permanent deletion has no CLI: it requires a signed-in owner in Studio.)`
+    rejectWord(
+      ["app"],
+      sub,
+      "Permanent deletion has no CLI: it requires a signed-in owner in Studio."
     );
   }
   assertArgs(parsed, ["config", "token", "email", "yes", "json"], 2);
@@ -3171,6 +3369,7 @@ var init_app_lifecycle = __esm({
     init_app_transfer();
     init_argv();
     init_human_session();
+    init_surface();
   }
 });
 
@@ -3320,7 +3519,8 @@ async function brandCommand(parsed, deps) {
     await designUnpack(parsed, deps);
     return;
   }
-  throw new Error(USAGE);
+  if (subject !== "design") rejectWord(["brand"], subject);
+  rejectWord(["brand", "design"], action2, USAGE);
 }
 var import_promises, import_node_path10, USAGE;
 var init_brand_command = __esm({
@@ -3331,6 +3531,7 @@ var init_brand_command = __esm({
     import_node_path10 = require("path");
     init_argv();
     init_brand_design_unpack();
+    init_surface();
     USAGE = "usage: odla-ai brand design unpack <bundle.html|-> [--out <dir>] [--json]";
   }
 });
@@ -6392,9 +6593,7 @@ async function secretsCommand(parsed, deps) {
     return;
   }
   if (sub !== "push") {
-    throw new Error(
-      `unknown secrets subcommand "${sub ?? ""}". Try "odla-ai secrets push --env dev", "odla-ai secrets status --env dev", "odla-ai secrets set <name> --env dev --stdin", or "odla-ai secrets set-clerk-key --env dev --stdin".`
-    );
+    rejectWord(["secrets"], sub);
   }
   assertArgs(parsed, ["config", "env", "dry-run", "yes"], 2);
   await secretsPush({
@@ -6407,7 +6606,7 @@ async function secretsCommand(parsed, deps) {
 async function projectCommand(command, parsed, deps) {
   if (command === "ai") {
     const sub = parsed.positionals[1];
-    if (sub !== "models") throw new Error(`unknown ai subcommand "${sub ?? ""}". Try "odla-ai ai models --env dev".`);
+    if (sub !== "models") rejectWord(["ai"], sub);
     assertArgs(parsed, ["config", "env", "provider", "json"], 2);
     await aiModels({
       configPath: stringOpt(parsed.options.config) ?? "odla.config.mjs",
@@ -6421,9 +6620,7 @@ async function projectCommand(command, parsed, deps) {
   }
   if (command === "config") {
     const sub = parsed.positionals[1];
-    if (sub !== "diff" && sub !== "plan" && sub !== "apply") {
-      throw new Error(`unknown config subcommand "${sub ?? ""}". Try "odla-ai config diff --json".`);
-    }
+    if (sub !== "diff" && sub !== "plan" && sub !== "apply") rejectWord(["config"], sub);
     assertArgs(
       parsed,
       sub === "apply" ? ["config", "plan", "idempotency-key", "token", "email", "open", "json"] : ["config", "token", "email", "open", "json"],
@@ -6451,7 +6648,7 @@ async function projectCommand(command, parsed, deps) {
   if (command === "operations") {
     const sub = parsed.positionals[1];
     if (sub !== "get" && sub !== "wait") {
-      throw new Error(`unknown operations subcommand "${sub ?? ""}". Try "odla-ai operations get <operation-id> --json".`);
+      rejectWord(["operations"], sub);
     }
     assertArgs(
       parsed,
@@ -6525,7 +6722,7 @@ async function projectCommand(command, parsed, deps) {
   }
   if (command === "skill") {
     const sub = parsed.positionals[1];
-    if (sub !== "install") throw new Error(`unknown skill subcommand "${sub ?? ""}". Try "odla-ai skill install".`);
+    if (sub !== "install") rejectWord(["skill"], sub);
     install(parsed, 2, deps);
     return true;
   }
@@ -6553,6 +6750,7 @@ var init_cli_project = __esm({
     init_secrets_status();
     init_skill();
     init_smoke();
+    init_surface();
     SKILL_OPTS = ["dir", "global", "force", "agent", "harness"];
   }
 });
@@ -11198,9 +11396,7 @@ function grantsUrl(cfg, suffix = "") {
 async function codeGrantCommand(parsed, deps = {}) {
   const action2 = parsed.positionals[2];
   if (!isAction(action2)) {
-    throw new Error(
-      `unknown code grant action "${action2 ?? ""}". Try "odla-ai code grant list --env dev".`
-    );
+    rejectWord(["code", "grant"], action2);
   }
   const decides = action2 === "approve" || action2 === "revoke";
   assertArgs(parsed, ["config", "env", "json", "token", "email", "open"], decides ? 4 : 3);
@@ -11267,6 +11463,7 @@ var init_code_grant_command = __esm({
     init_config();
     init_redact();
     init_token();
+    init_surface();
     ACTIONS = ["request", "list", "approve", "revoke"];
     isAction = (value2) => ACTIONS.includes(value2 ?? "");
   }
@@ -11331,9 +11528,7 @@ function repositoryUrl(cfg, suffix = "") {
 async function codeRepositoryCommand(parsed, deps = {}) {
   const action2 = parsed.positionals[2];
   if (!isAction2(action2)) {
-    throw new Error(
-      `unknown code repository action "${action2 ?? ""}". Try "odla-ai code repository show --env dev".`
-    );
+    rejectWord(["code", "repository"], action2);
   }
   assertArgs(parsed, ["config", "env", "repo", "json", "token", "email", "open"], 3);
   const cfg = await loadProjectConfig(stringOpt(parsed.options.config) ?? "odla.config.mjs");
@@ -11398,6 +11593,7 @@ var init_code_repository_command = __esm({
     init_config();
     init_redact();
     init_token();
+    init_surface();
     ACTIONS2 = ["show", "list", "bind"];
     isAction2 = (value2) => ACTIONS2.includes(value2 ?? "");
   }
@@ -11421,9 +11617,7 @@ async function codeCommand(parsed, dependencies) {
     });
   }
   if (sub !== "connect") {
-    throw new Error(
-      `unknown code subcommand "${sub ?? ""}". Try "odla-ai code connect --env dev" or "odla-ai code grant list --env dev".`
-    );
+    rejectWord(["code"], sub);
   }
   assertArgs(parsed, [
     "config",
@@ -11468,6 +11662,7 @@ var init_code_command = __esm({
     init_code_connect();
     init_code_grant_command();
     init_code_repository_command();
+    init_surface();
   }
 });
 
@@ -11579,9 +11774,7 @@ async function contextCommand(parsed, deps = {}) {
     return;
   }
   if (action2 !== "show") {
-    throw new Error(
-      `unknown context action "${action2 ?? ""}". Try show|list|save|remove.`
-    );
+    rejectWord(["context"], action2);
   }
   const context = await resolveOperatorContext(parsed, {
     allowMissingConfig: true,
@@ -11638,6 +11831,7 @@ var init_context_command = __esm({
     init_operator_credentials();
     init_operator_context();
     init_operator_profiles();
+    init_surface();
   }
 });
 
@@ -11647,9 +11841,7 @@ async function responseError(response2) {
 }
 async function credentialCommand(parsed, deps = {}) {
   const action2 = parsed.positionals[1] ?? "list";
-  if (action2 !== "list" && action2 !== "revoke") {
-    throw new Error(`unknown credentials action "${action2}". Try "odla-ai credentials list".`);
-  }
+  if (action2 !== "list" && action2 !== "revoke") rejectWord(["credentials"], action2);
   assertArgs(parsed, ["config", "env", "all", "json", "token", "email", "open"], action2 === "revoke" ? 3 : 2);
   const cfg = await loadProjectConfig(stringOpt(parsed.options.config) ?? "odla.config.mjs");
   const doFetch = deps.fetch ?? fetch;
@@ -11697,6 +11889,7 @@ var init_credential_command = __esm({
     init_config();
     init_redact();
     init_token();
+    init_surface();
   }
 });
 
@@ -12697,7 +12890,7 @@ async function discussCommand(parsed, deps = {}) {
   assertArgs(parsed, ALLOWED, 3);
   const action2 = parsed.positionals[1];
   const id2 = parsed.positionals[2];
-  if (!action2) throw new Error('"discuss" needs an action. Run "odla-ai help".');
+  if (!acceptedAfter(["discuss"]).includes(action2 ?? "")) rejectWord(["discuss"], action2);
   const ctx = await buildContext(parsed, deps);
   switch (action2) {
     case "groups":
@@ -12721,7 +12914,7 @@ async function discussCommand(parsed, deps = {}) {
       return;
     }
     default:
-      throw new Error(`unknown discuss action "${action2}". Run "odla-ai help".`);
+      rejectWord(["discuss"], action2);
   }
 }
 var ALLOWED;
@@ -12734,6 +12927,7 @@ var init_discuss_command = __esm({
     init_discuss_actions();
     init_discuss_watch();
     init_token();
+    init_surface();
     ALLOWED = [
       "config",
       "token",
@@ -13722,7 +13916,7 @@ async function pmCommand(parsed, deps = {}) {
       assertArgs(parsed, COMMON_OPTIONS, 4);
       return pmProjectUse(await buildContext2(parsed, deps), requireId2(parsed.positionals[3], action3));
     }
-    throw new Error(`unknown pm project action "${action3}". Try list|add|use.`);
+    rejectWord(["pm", "project"], action3);
   }
   if (word === "next") {
     assertArgs(parsed, [...COMMON_OPTIONS, "app", "project", "verbose"], 2);
@@ -13753,10 +13947,10 @@ async function pmCommand(parsed, deps = {}) {
     return pmHandoff(await buildContext2(parsed, deps), parsed);
   }
   const entity = ALIASES[word];
-  if (!entity) throw new Error(`unknown pm entity "${word}". Try "odla-ai pm start" to claim Ready work, or "odla-ai pm bug list" (goal|task|decision|bug).`);
+  if (!entity) rejectWord(["pm"], word);
   const requestedAction = parsed.positionals[2] ?? "list";
   const action2 = canonicalAction(requestedAction);
-  if (!action2) throw new Error(`unknown pm action "${requestedAction}". Try list|add|get|set|done|link|ref|comment|comments|history|rm.`);
+  if (!action2) rejectWord(["pm", word], requestedAction);
   assertArgs(parsed, allowedOptions(entity, action2), 4);
   if ((action2 === "ready" || action2 === "claim" || action2 === "release") && entity !== "task") {
     throw new Error(`pm ${action2} is only valid for tasks`);
@@ -13809,6 +14003,7 @@ var init_pm_command = __esm({
     init_pm_watch();
     init_pm_project_actions();
     init_pm_project_context();
+    init_surface();
     ALIASES = {
       goal: "goal",
       conformance: "goal",
@@ -13918,12 +14113,7 @@ async function platformCommand(parsed, deps = {}) {
   if (action2 === "status") {
     return platformStatus(parsed, deps);
   }
-  throw new Error(
-    `unknown platform action "${[
-      action2,
-      parsed.positionals[2]
-    ].filter(Boolean).join(" ")}". Try "odla-ai platform status --json".`
-  );
+  rejectWord(["platform"], action2);
 }
 async function platformStatus(parsed, deps) {
   assertArgs(
@@ -13989,6 +14179,7 @@ var init_platform_command = __esm({
     init_argv();
     init_operator_context();
     init_platform_output();
+    init_surface();
   }
 });
 
@@ -14282,9 +14473,7 @@ async function o11yCommand(parsed, deps = {}) {
   );
   const action2 = parsed.positionals[1];
   if (action2 !== "status") {
-    throw new Error(
-      `unknown o11y action "${action2 ?? ""}". Try "odla-ai o11y status --json".`
-    );
+    rejectWord(["o11y"], action2);
   }
   const minutes = statusMinutes(
     numberOpt(parsed.options.minutes, "--minutes") ?? 60
@@ -14420,6 +14609,7 @@ var init_o11y_command = __esm({
     init_o11y_verdict();
     init_o11y_output();
     init_token();
+    init_surface();
   }
 });
 
@@ -14540,9 +14730,7 @@ var init_monitoring_config = __esm({
 async function monitorCommand(parsed, deps = {}) {
   assertArgs(parsed, OPTIONS, 3);
   const action2 = parsed.positionals[1] ?? "status";
-  if (!["plan", "apply", "run", "status", "incidents", "report"].includes(action2)) {
-    throw new Error(`unknown monitor action "${action2}". Try "odla-ai monitor status --json".`);
-  }
+  if (!acceptedAfter(["monitor"]).includes(action2)) rejectWord(["monitor"], action2);
   const context = await resolveOperatorContext(parsed, {
     allowMissingConfig: action2 !== "plan" && action2 !== "apply",
     requireApp: true
@@ -14696,6 +14884,7 @@ var init_monitor_command = __esm({
     init_monitoring_config();
     init_operator_context();
     init_token();
+    init_surface();
     OPTIONS = [
       "config",
       "context",
@@ -15245,183 +15434,6 @@ var init_provision = __esm({
   }
 });
 
-// src/surface.ts
-function acceptedAfter(path) {
-  let node = COMMAND_SURFACE;
-  for (const word of path) {
-    node = node?.[word];
-    if (!node) return [];
-  }
-  return Object.keys(node).sort();
-}
-function validateInvocation(words2) {
-  let node = COMMAND_SURFACE;
-  const walked = [];
-  for (const word of words2) {
-    if (Object.keys(node).length === 0) return null;
-    const next = node[word];
-    if (!next) return { validPrefix: walked.join(" "), word, accepted: Object.keys(node).sort() };
-    walked.push(word);
-    node = next;
-  }
-  return null;
-}
-function describeProblem(problem) {
-  const where = problem.validPrefix ? `after "${problem.validPrefix}"` : "as a command";
-  return `"${problem.word}" is not accepted ${where} \u2014 try: ${problem.accepted.join(", ")}`;
-}
-function invocationPath(words2) {
-  let node = COMMAND_SURFACE;
-  const path = [];
-  for (const word of words2) {
-    const next = node[word];
-    if (!next) break;
-    path.push(word);
-    node = next;
-    if (Object.keys(node).length === 0) break;
-  }
-  return path;
-}
-var PM_ACTIONS, PM_TASK_ACTIONS, PM_ENTITIES, COMMAND_SURFACE;
-var init_surface = __esm({
-  "src/surface.ts"() {
-    "use strict";
-    init_cjs_shims();
-    PM_ACTIONS = {
-      list: {},
-      add: {},
-      create: {},
-      get: {},
-      set: {},
-      update: {},
-      status: {},
-      move: {},
-      done: {},
-      comment: {},
-      comments: {},
-      ref: {},
-      rm: {},
-      delete: {}
-    };
-    PM_TASK_ACTIONS = {
-      ...PM_ACTIONS,
-      ready: {},
-      claim: {},
-      release: {}
-    };
-    PM_ENTITIES = {
-      ...Object.fromEntries(
-        ["goal", "conformance", "decision", "bug"].map((entity) => [entity, PM_ACTIONS])
-      ),
-      task: PM_TASK_ACTIONS,
-      kanban: PM_TASK_ACTIONS
-    };
-    COMMAND_SURFACE = {
-      agent: { jobs: {}, retry: {} },
-      ai: { models: {} },
-      admin: {
-        ai: {
-          show: {},
-          set: {},
-          credentials: {},
-          models: {},
-          usage: {},
-          audit: {},
-          credential: { set: {} }
-        }
-      },
-      app: {
-        archive: {},
-        restore: {},
-        export: {},
-        import: {},
-        rename: {},
-        "refresh-sandbox": {},
-        "go-live": {},
-        promote: {},
-        owners: { list: {}, add: {}, remove: {} }
-      },
-      auth: { login: {} },
-      brand: { design: { unpack: {} } },
-      bug: { create: {}, list: {}, report: {} },
-      calendar: { status: {}, calendars: {}, connect: {}, disconnect: {} },
-      capabilities: {},
-      code: {
-        connect: {},
-        grant: { request: {}, list: {}, approve: {}, revoke: {} },
-        repository: { show: {}, list: {}, bind: {} }
-      },
-      config: { diff: {}, plan: {}, apply: {} },
-      context: { show: {}, list: {}, save: {}, remove: {} },
-      credentials: { list: {}, revoke: {} },
-      device: { enroll: {}, list: {}, revoke: {} },
-      // `watch`, `read`, `reply`, and `resolve` take a topic id from there on.
-      discuss: {
-        groups: {},
-        list: {},
-        topics: {},
-        read: {},
-        post: {},
-        reply: {},
-        resolve: {},
-        who: {},
-        watch: {}
-      },
-      doctor: {},
-      help: {},
-      init: {},
-      monitor: { plan: {}, apply: {}, run: {}, status: {}, incidents: {}, report: {} },
-      o11y: { status: {} },
-      operations: { get: {}, wait: {} },
-      platform: {
-        status: {}
-      },
-      pm: {
-        ...PM_ENTITIES,
-        project: { list: {}, add: {}, create: {}, use: {} },
-        handoff: {},
-        next: {},
-        start: {},
-        watch: {}
-      },
-      provision: {},
-      runbook: {
-        ask: {},
-        search: {},
-        impact: {},
-        list: {},
-        get: {},
-        cat: {},
-        new: {},
-        edit: {},
-        comment: {},
-        import: {},
-        visibility: {},
-        publish: {},
-        archive: {},
-        history: {},
-        revert: {},
-        rm: {},
-        lint: {}
-      },
-      secrets: { push: {}, status: {}, set: {}, "set-clerk-key": {} },
-      security: {
-        plan: {},
-        sources: {},
-        run: {},
-        status: {},
-        report: {},
-        github: { connect: {}, disconnect: {} }
-      },
-      setup: {},
-      skill: { install: {} },
-      smoke: {},
-      version: {},
-      whoami: {}
-    };
-  }
-});
-
 // src/record.ts
 function recordInvocation(parsed) {
   const file = import_node_process18.default.env.ODLA_CLI_RECORD;
@@ -15529,6 +15541,7 @@ async function deviceCommand(parsed, deps) {
     "wait"
   ], 3);
   const action2 = parsed.positionals[1] ?? "";
+  if (!acceptedAfter(["device"]).includes(action2)) rejectWord(["device"], action2);
   const out = deps.stdout ?? console;
   const doFetch = deps.fetch ?? fetch;
   const cfg = await loadProjectConfig(stringOpt(parsed.options.config));
@@ -15536,7 +15549,7 @@ async function deviceCommand(parsed, deps) {
   if (action2 === "enroll") return enroll(parsed, deps, cfg, doFetch, out, json);
   if (action2 === "list") return list2(parsed, deps, cfg, doFetch, out, json);
   if (action2 === "revoke") return revoke(parsed, deps, cfg, doFetch, out, json);
-  throw new Error('odla-ai device expects "enroll", "list", or "revoke"');
+  rejectWord(["device"], action2);
 }
 async function enroll(parsed, deps, cfg, doFetch, out, json) {
   const name = stringOpt(parsed.options.name) ?? defaultDeviceName();
@@ -15706,6 +15719,7 @@ var init_device_command = __esm({
     init_device_session();
     init_config();
     init_operator_context();
+    init_surface();
   }
 });
 
@@ -16494,6 +16508,7 @@ async function buildContext3(parsed, deps, action2) {
 async function runbookCommand(parsed, deps = {}) {
   const action2 = parsed.positionals[1] ?? "list";
   assertArgs(parsed, ALLOWED2, action2 === "ask" || action2 === "search" ? 64 : 4);
+  if (!acceptedAfter(["runbook"]).includes(action2)) rejectWord(["runbook"], action2);
   const ctx = await buildContext3(parsed, deps, action2);
   const slug = parsed.positionals[2];
   switch (action2) {
@@ -16583,7 +16598,7 @@ async function runbookCommand(parsed, deps = {}) {
     case "rm":
       return runbookRemove(ctx, requireSlug(slug, "rm"));
     default:
-      throw new Error(`unknown runbook action "${action2}". Try ${acceptedAfter(["runbook"]).join(", ")}.`);
+      rejectWord(["runbook"], action2);
   }
 }
 var ALLOWED2, WRITES2;
@@ -17292,9 +17307,7 @@ async function securityCommand(parsed, dependencies) {
     else printHostedReport(context.stdout, report5);
     return;
   }
-  if (sub !== "run") {
-    throw new Error('unknown security command. Try "odla-ai security plan", "security sources", or "security run".');
-  }
+  if (sub !== "run") rejectWord(["security"], sub);
   const sourceId = stringOpt(parsed.options.source);
   if (sourceId) await runSourceSecurityCommand(parsed, dependencies, sourceId);
   else await runLocalSecurityCommand(parsed, dependencies);
@@ -17311,9 +17324,7 @@ async function githubSecurityCommand(parsed, dependencies) {
       stringOpt(parsed.options.env)
     );
   }
-  if (action2 !== "connect") {
-    throw new Error('unknown security github command. Try "odla-ai security github connect".');
-  }
+  if (action2 !== "connect") rejectWord(["security", "github"], action2);
   assertArgs(parsed, ["config", "env", "platform", "repo", "email", "open"], 3);
   await requireStudioHuman(
     stringOpt(parsed.options.config) ?? "odla.config.mjs",
@@ -17369,6 +17380,7 @@ var init_security_command = __esm({
     init_security_run_command();
     init_security_hosted();
     init_human_session();
+    init_surface();
   }
 });
 
@@ -17473,6 +17485,7 @@ async function dispatchCli(argv2, dependencies) {
   }
   if (command === "bug") {
     const action2 = parsed.positionals[1] ?? "list";
+    if (!acceptedAfter(["bug"]).includes(action2)) rejectWord(["bug"], action2);
     const canonical2 = action2 === "report" || action2 === "create" ? "add" : action2;
     await pmCommand({
       ...parsed,
@@ -17501,7 +17514,7 @@ async function dispatchCli(argv2, dependencies) {
     return;
   }
   if (await projectCommand(command, parsed, runtime)) return;
-  throw new Error(`unknown command "${command}". Run "odla-ai help".`);
+  rejectWord([], command);
 }
 async function provisionCommand(parsed, dependencies) {
   assertArgs(parsed, [
@@ -17545,7 +17558,7 @@ async function provisionCommand(parsed, dependencies) {
 async function calendarCommand(parsed, dependencies) {
   const sub = parsed.positionals[1];
   if (sub !== "status" && sub !== "calendars" && sub !== "connect" && sub !== "disconnect") {
-    throw new Error(`unknown calendar subcommand "${sub ?? ""}". Try "odla-ai calendar status --env dev".`);
+    rejectWord(["calendar"], sub);
   }
   assertArgs(parsed, ["config", "env", "json", "token", "email", "open", "yes"], 2);
   if (sub !== "status" && sub !== "calendars" && parsed.options.json !== void 0) throw new Error(`--json is supported only by calendar status/calendars`);
@@ -17599,6 +17612,7 @@ var init_cli = __esm({
     init_runbook_command();
     init_security_command();
     init_whoami_command();
+    init_surface();
     init_exit_code();
   }
 });