@odla-ai/cli 0.46.7 → 0.46.8

package/README.md

@@ -103,6 +103,8 @@ npx --yes @odla-ai/cli@latest pm next --app <appId> --project <projectId>
 npx --yes @odla-ai/cli@latest pm handoff --app <appId>
 npx --yes @odla-ai/cli@latest pm watch --app <appId> --entity task --jsonl
 npx --yes @odla-ai/cli@latest pm bug list --app <appId> --status open
+npx --yes @odla-ai/cli@latest pm bug list --platform-wide --status open
+npx --yes @odla-ai/cli@latest pm bug get <uuid-or-unique-prefix> --platform-wide
 npx --yes @odla-ai/cli@latest pm goal list --app <appId> --status open
 npx --yes @odla-ai/cli@latest pm decision list --app <appId> --limit 20
 ```
@@ -116,7 +118,12 @@ it with `pm bug done <id> --decision <decision-id>` or
 
 Read the active task, linked goal, and comments before changing code. Without
 `--app`, list commands span every project the account co-owns, which is the
-right first view when coordinating several efforts; scope every write to the
+right first view when coordinating several efforts. A platform administrator
+can approve the dedicated `platform:pm:read` capability used by
+`pm <goal|task|decision|bug> list|get --platform-wide`; it reads core records
+across current app lifetimes but cannot read comments/history or perform any PM
+mutation. `get` accepts a unique UUID prefix and refuses missing or ambiguous
+matches. Scope every write to the
 exact `appId` from that project's config. PM requires a registered app. Before
 the first provision, use a focused commit/checkpoint, then initialize PM and
 backfill that evidence immediately after registration. Never use a parallel

package/dist/bin.cjs

@@ -1134,6 +1134,7 @@ var init_admin_ai_auth = __esm({
     init_odla_home();
     SCOPE_PURPOSE = {
       "platform:status:read": "read the platform fleet health and deployment snapshot",
+      "platform:pm:read": "read the core PM inventory across all current odla projects",
       "app:config:read": "compare checked-in intent with an exact-id app Registry configuration",
       "app:config:write": "apply or inspect one revision-bound configuration operation for an app you own",
       "platform:runbook:write": "read and edit all of odla's operational runbooks, including admin-visible content",
@@ -8235,7 +8236,7 @@ var init_code2 = __esm({
   }
 });
 
-// ../harness/dist/chunk-ISR434K7.js
+// ../harness/dist/chunk-IWVGSWY6.js
 async function digestStagedWorkspace(root, limits) {
   const files = [];
   const walk = async (directory) => {
@@ -9369,6 +9370,7 @@ async function runCodeAgentAttempt(options) {
       model: "brokered",
       surface,
       ...options.recipeIds ? { recipeIds: options.recipeIds } : {},
+      ...options.extraSkills ? { extraSkills: options.extraSkills } : {},
       ...options.maxSteps === void 0 ? {} : { maxSteps: options.maxSteps },
       ...options.budget ? { budget: options.budget } : {},
       ...options.signal ? { signal: options.signal } : {},
@@ -10209,6 +10211,16 @@ function assertBudget(budget) {
     throw new TypeError("goal budget deadline must be epoch milliseconds");
   }
 }
+async function sessionSkillsFor(options, command) {
+  try {
+    return await options.sessionSkills?.(command) ?? [];
+  } catch (cause) {
+    options.onDiagnostic?.(
+      `session skills unavailable, continuing with code tools only: ${cause instanceof Error ? cause.message : String(cause)}`
+    );
+    return [];
+  }
+}
 function createCodeRuntimeToolBroker(input, lease, role) {
   const broker = createCodeToolBroker({
     recipes: input.recipes,
@@ -10473,8 +10485,8 @@ function codeToolResultPresentation(request3, response2) {
   };
 }
 var import_crypto, import_promises5, import_path5, import_child_process4, import_promises6, import_path6, import_child_process5, import_process2, import_crypto2, import_crypto3, import_fs2, import_promises7, import_path7, import_promises8, import_os3, import_path8, import_ai4, import_ai5, import_child_process6, import_promises9, import_path9, import_promises10, import_promises11, import_path10, import_crypto4, CODE_RUNTIME_PROTOCOL_VERSION, CodeRuntimeReconciler, CodeRuntimeControlError, record5, invalid, RESERVED, SECRET, PATH, FORBIDDEN, ARTIFACT_PATH, PRIVATE_ARTIFACT_PART, SHA3, DIGEST3, ID3, RULE, DEFAULT_PREFIXES, DEFAULT_SUFFIXES, message, CodeRuntimeCheckpointManager, record22, SOURCE_LIMITS, RESERVED2, SECRET2, SOURCE_MAX_FILES, SOURCE_MAX_BYTES, SOURCE_SET_MAX_BYTES, V1_SYSTEM_PROMPT, V2_SYSTEM_PROMPT, V3_SYSTEM_PROMPT, SYSTEM_PROMPT_FOR, DEFAULT_MAX_FILES, DEFAULT_MAX_RESULTS, DEFAULT_MAX_FILE_BYTES, MAX_NATIVE_ARG_BYTES, DESTINATIONS, READ, LIST, SEARCH, GRAPH, PATCH, RECIPE, cache, shortId, GRAPH_TOOLS, MAX_MEMORY_BODY, POSITIVE, digestRuntimeValue, runtimeErrorMessage, text3, integer2, record32, excerpt, paths, TheseusRuntimeEngine;
-var init_chunk_ISR434K7 = __esm({
-  "../harness/dist/chunk-ISR434K7.js"() {
+var init_chunk_IWVGSWY6 = __esm({
+  "../harness/dist/chunk-IWVGSWY6.js"() {
     "use strict";
     init_cjs_shims();
     init_chunk_CR6RE3A2();
@@ -10934,6 +10946,7 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
           event: (event) => this.#event(command, event, active.conversationRefs)
         });
         await this.#event(command, { type: "status", status: "running" }, active.conversationRefs);
+        const extraSkills = await sessionSkillsFor(this.options, command);
         const result = await this.#attempt({
           inference,
           broker,
@@ -10941,7 +10954,8 @@ Never claim a build or test passed unless odla_run_recipe returned that result.`
           workspaceDir: active.workspace.workspaceDir,
           prompt: metadata2.prompt,
           signal: active.abort.signal,
-          recipeIds: this.options.recipes.map((recipe2) => recipe2.id)
+          recipeIds: this.options.recipes.map((recipe2) => recipe2.id),
+          ...extraSkills.length ? { extraSkills } : {}
         });
         const closing = result.finalText.trim();
         const completed = result.status === "completed" && Boolean(closing);
@@ -11037,7 +11051,7 @@ var init_node = __esm({
   "../harness/dist/node.js"() {
     "use strict";
     init_cjs_shims();
-    init_chunk_ISR434K7();
+    init_chunk_IWVGSWY6();
     init_chunk_CR6RE3A2();
     MEASURED_PREMIUM = Object.freeze({
       /** 3 racers vs pure depth at equal budget: 21,044 / 7,936. */
@@ -12085,10 +12099,10 @@ Usage:
   odla-ai pm project add --app <product-id> --name <name> [--description <text>] [--json]
   odla-ai pm project use <project-id> [--json]                         [saved for this app, on this machine]
   odla-ai pm project set <project-id> [--name <n>|--description <text>|--status <active|completed|archived>] [--mutation-id <id>] [--json]
-  odla-ai pm goal list [--app <id>] [--project <id>] [--status <s>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
-  odla-ai pm task list [--app <id>] [--column <backlog|ready|doing|review|done>] [--goal <id>] [--assignee <id>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
-  odla-ai pm decision list [--app <id>] [--status <s>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
-  odla-ai pm bug list [--app <id>] [--status <s>] [--severity <s>] [--goal <id>] [--assignee <id>] [--decision <id>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
+  odla-ai pm goal list [--app <id>] [--project <id>] [--platform-wide] [--status <s>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
+  odla-ai pm task list [--app <id>] [--platform-wide] [--column <backlog|ready|doing|review|done>] [--goal <id>] [--assignee <id>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
+  odla-ai pm decision list [--app <id>] [--platform-wide] [--status <s>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
+  odla-ai pm bug list [--app <id>|--platform-wide] [--status <s>] [--severity <s>] [--goal <id>] [--assignee <id>] [--decision <id>] [--q <text>] [--limit <n>] [--offset <n>] [--json]
   odla-ai pm goal add --app <id> --title <t> [--status <s>] [--proof <text>] [--target <pct>] [--mutation-id <id>] [--json]
   odla-ai pm task add --app <id> --title <t> [--column <backlog|ready|doing|review|done>] [--goal <id>|--alignment-decision <id>] [--assignee <id>] [--description <text>|--body <text>] [--acceptance <text>] [--execution <human|agent|either>] [--due <epoch-ms>] [--mutation-id <id>] [--json]
   odla-ai pm next --app <id> [--project <id>] [--verbose] [--json]
@@ -12100,7 +12114,7 @@ Usage:
   odla-ai pm decision add --app <id> --title <t> --body <text> [--status <s>] [--mutation-id <id>] [--json]
   odla-ai pm bug add --app <id> --title <t> (--description <text>|--body <text>) [--status <s>] [--severity <s>] [--goal <id>] [--assignee <id>] [--decision <id>] [--mutation-id <id>] [--json]
   odla-ai bug report --app <id> --title <t> (--description <text>|--body <text>) [--severity <s>] [--json]
-  odla-ai pm <goal|task|decision|bug> get <id> [--json]
+  odla-ai pm <goal|task|decision|bug> get <id-or-uuid-prefix> [--platform-wide] [--json]
   odla-ai pm <goal|task|decision|bug> link <id> [--json]
   odla-ai pm <goal|task|decision|bug> ref <id> [--json]
   odla-ai pm goal set <id> [--title <t>|--status <s>|--proof <text>|--no-proof|--target <pct>|--no-target] [--mutation-id <id>] [--json]
@@ -13272,8 +13286,37 @@ async function pmAdd(ctx, entity, parsed) {
   const record11 = { id: res.id, appId, title: String(input.title) };
   emit2(ctx, res, () => ctx.out.log(`created ${entity}: ${studioRecordLink(ctx, entity, record11)}`));
 }
+function looksLikeUuidPrefix(value2) {
+  if (!UUID_PREFIX.test(value2) || !/[0-9a-f]/i.test(value2)) return false;
+  return "00000000-0000-0000-0000-000000000000".slice(0, value2.length).split("").every((expected, index) => expected === "-" ? value2[index] === "-" : value2[index] !== "-");
+}
+async function resolvePmId(ctx, entity, supplied) {
+  if (UUID.test(supplied) || !looksLikeUuidPrefix(supplied)) return supplied;
+  const prefix = supplied.toLowerCase();
+  const matches = [];
+  const limit = 200;
+  let offset = 0;
+  for (; ; ) {
+    const page2 = await pmRequest(
+      ctx,
+      "GET",
+      `/${entity}?limit=${limit}&offset=${offset}`
+    );
+    matches.push(...page2.records.map((record11) => record11.id).filter((id2) => id2.toLowerCase().startsWith(prefix)));
+    offset += page2.records.length;
+    if (matches.length > 1 || page2.records.length === 0 || offset >= page2.total) break;
+  }
+  if (matches.length === 0) {
+    throw new Error(`no ${entity} id matches prefix "${supplied}"`);
+  }
+  if (matches.length > 1) {
+    throw new Error(`ambiguous ${entity} id prefix "${supplied}"`);
+  }
+  return matches[0];
+}
 async function pmGet(ctx, entity, id2) {
-  const { record: record11 } = await pmRequest(ctx, "GET", `/${entity}/${encodeURIComponent(id2)}`);
+  const resolved = await resolvePmId(ctx, entity, id2);
+  const { record: record11 } = await pmRequest(ctx, "GET", `/${entity}/${encodeURIComponent(resolved)}`);
   emit2(ctx, record11, () => printRecord(ctx, entity, record11));
 }
 async function pmReference(ctx, entity, id2) {
@@ -13349,12 +13392,15 @@ async function pmRemove(ctx, entity, id2) {
   await pmRequest(ctx, "DELETE", `/${entity}/${encodeURIComponent(id2)}`);
   ctx.out.log(`deleted ${entity} ${id2}`);
 }
+var UUID, UUID_PREFIX;
 var init_pm_actions = __esm({
   "src/pm-actions.ts"() {
     "use strict";
     init_cjs_shims();
     init_argv();
     init_pm_action_core();
+    UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+    UUID_PREFIX = /^[0-9a-f-]{8,35}$/i;
   }
 });
 
@@ -14019,15 +14065,23 @@ async function buildContext2(parsed, deps) {
   const { cfg } = context;
   const doFetch = deps.fetch ?? fetch;
   const out = deps.stdout ?? console;
-  const token = await getDeveloperToken(
+  const platformWide = parsed.options["platform-wide"] === true;
+  const tokenOptions = {
+    token: stringOpt(parsed.options.token),
+    email: stringOpt(parsed.options.email),
+    open: parsed.options.open === false ? false : parsed.options.open === true ? true : void 0,
+    openApprovalUrl: deps.openUrl
+  };
+  const token = platformWide ? await resolveAdminPlatformToken({
+    platform: cfg.platformUrl,
+    scope: "platform:pm:read",
+    rootDir: cfg.rootDir,
+    fetch: doFetch,
+    stdout: out,
+    ...tokenOptions
+  }) : await getDeveloperToken(
     cfg,
-    {
-      configPath: cfg.configPath,
-      token: stringOpt(parsed.options.token),
-      email: stringOpt(parsed.options.email),
-      open: parsed.options.open === false ? false : parsed.options.open === true ? true : void 0,
-      openApprovalUrl: deps.openUrl
-    },
+    { configPath: cfg.configPath, ...tokenOptions },
     doFetch,
     out
   );
@@ -14042,8 +14096,8 @@ async function buildContext2(parsed, deps) {
     json: parsed.options.json === true,
     // Preserve PM's existing cross-project default when a config is present;
     // only an explicit remote-agent environment or profile selects an app.
-    appId: context.app.source === "environment" || context.app.source === "profile" ? context.app.value ?? void 0 : compatibleProject?.appId,
-    projectId: compatibleProject?.projectId,
+    appId: platformWide ? void 0 : context.app.source === "environment" || context.app.source === "profile" ? context.app.value ?? void 0 : compatibleProject?.appId,
+    projectId: platformWide ? void 0 : compatibleProject?.projectId,
     rootDir: cfg.rootDir,
     ...deps.sleep ? { sleep: deps.sleep } : {},
     ...deps.now ? { now: deps.now } : {}
@@ -14153,6 +14207,7 @@ var init_pm_command = __esm({
     init_pm_comments();
     init_pm_history();
     init_token();
+    init_admin_ai_auth();
     init_pm_watch();
     init_pm_project_actions();
     init_pm_project_context();
@@ -14167,9 +14222,9 @@ var init_pm_command = __esm({
     };
     COMMON_OPTIONS = ["config", "token", "email", "json", "platform", "context", "open"];
     ACTION_OPTIONS = {
-      list: ["app", "project", "q", "limit", "offset"],
+      list: ["app", "project", "q", "limit", "offset", "platform-wide"],
       add: ["app", "project", "title", "mutation-id"],
-      get: [],
+      get: ["platform-wide"],
       set: ["mutation-id"],
       done: ["mutation-id"],
       comment: ["body", "mutation-id"],