@odla-ai/cli 0.8.0 → 0.10.0

package/dist/index.d.ts

@@ -1,4 +1,6 @@
 import { SecurityReport, PlatformSecurityRun } from '@odla-ai/security';
+import { HostedSecurityJob, GitHubConnectionStatus, GitHubSecuritySource, HostedSecurityIntentResponse, HostedSecurityPlan, HostedSecurityReport, HostedSecurityJobStatus } from '@odla-ai/security/hosted';
+export { GitHubConnectionAttempt, GitHubConnectionStatus, GitHubSecuritySource, HostedSecurityCounts, HostedSecurityCoverage, HostedSecurityIntent, HostedSecurityIntentResponse, HostedSecurityJob, HostedSecurityJobStatus, HostedSecurityPlan, HostedSecurityPlanRoute, HostedSecurityReport, HostedSecurityReportFinding, HostedSecurityRoute } from '@odla-ai/security/hosted';
 
 /** Injectable side-effect boundaries used to run and test the command dispatcher. */
 interface CliDependencies {
@@ -89,79 +91,78 @@ declare function adminAi(options: AdminAiOptions): Promise<void>;
 /** Stable, machine-readable division of work between the CLI, coding agent,
  * human operator, and Studio. Printed by `odla-ai capabilities --json`. */
 declare const CAPABILITIES: {
-    readonly cli: readonly ["register the app and enable configured services per environment", "issue, persist, and explicitly rotate configured service credentials", "write local Worker values and push deployed Worker secrets through Wrangler stdin", "push db schema/rules and configure platform AI, auth, and deployment links", "validate config offline and smoke-test a provisioned db environment", "run app-attributed hosted security discovery and independent validation without provider keys", "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys", "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"];
-    readonly agent: readonly ["install and import the selected odla SDKs", "wrap the Worker with withObservability and choose useful telemetry", "make application-specific schema, rules, auth, UI, and migration decisions"];
-    readonly human: readonly ["approve the odla device code and one-off third-party logins", "consent to production changes with --yes", "request destructive credential rotation explicitly", "review application semantics, security findings, releases, and merges", "approve redacted-source disclosure before hosted security reasoning", "approve GitHub App repository access separately from redacted-snippet disclosure"];
-    readonly studio: readonly ["view telemetry and environment state", "perform manual credential recovery when the CLI's local shown-once copy is unavailable", "configure system AI purposes and view app/environment/run-attributed usage", "connect/revoke GitHub security sources and inspect ref-to-SHA jobs, routes, retention, coverage, and normalized reports"];
+    readonly cli: readonly ["register the app and enable configured services per environment", "issue, persist, and explicitly rotate configured service credentials", "write local Worker values and push deployed Worker secrets through Wrangler stdin", "store tenant-vault secrets (including the Clerk webhook secret and reserved Clerk secret key) write-only from stdin or an env var", "push db schema/rules and configure platform AI, auth, and deployment links", "apply read-only Google calendar mirror and public booking-page config, then drive state-bound consent, status, discovery, resync, and disconnect flows", "validate config offline and smoke-test a provisioned db environment", "run app-attributed hosted security discovery and independent validation without provider keys", "connect/revoke source-read-only GitHub sources and drive commit-pinned hosted security jobs without PATs or provider keys", "let admins manage system AI policy and credentials, inspect attributed usage, and read immutable admin changes through separate short-lived capability-only approvals"];
+    readonly agent: readonly ["install and import the selected odla SDKs", "wrap the Worker with withObservability and choose useful telemetry", "make application-specific schema, rules, auth, UI, and migration decisions", "wire @odla-ai/calendar into trusted Worker code and keep the app admin key out of browsers"];
+    readonly human: readonly ["approve the odla device code and one-off third-party logins", "review mirrored calendar/attendee disclosure and complete the server-issued Google consent flow", "consent to production changes with --yes", "request destructive credential rotation explicitly", "review application semantics, security findings, releases, and merges", "approve redacted-source disclosure before hosted security reasoning", "approve GitHub App repository access separately from redacted-snippet disclosure"];
+    readonly studio: readonly ["view telemetry and environment state", "review calendar connection, granted read scope, selected calendars, and sync health without exposing provider tokens", "perform manual credential recovery when the CLI's local shown-once copy is unavailable", "configure system AI purposes and view app/environment/run-attributed usage", "connect/revoke GitHub security sources and inspect ref-to-SHA jobs, routes, retention, coverage, and normalized reports"];
 };
 type Output = Pick<typeof console, "log">;
 /** Print the stable responsibility boundary for humans or agent tooling. */
 declare function printCapabilities(json?: boolean, out?: Output): void;
 
-interface DoctorOptions {
-    configPath: string;
-    stdout?: Pick<typeof console, "log" | "error">;
+declare const CALENDAR_STATES: readonly ["not_connected", "authorizing", "needs_sync", "initial_sync", "healthy", "degraded", "disconnected", "failed"];
+type CalendarConnectionState = (typeof CALENDAR_STATES)[number];
+/** Owner-visible, secret-free calendar connection and sync health. */
+interface CalendarStatus {
+    env: string;
+    enabled: boolean;
+    /** True when the platform has provider credentials for this connection. */
+    connected: boolean;
+    provider: "google" | null;
+    status: CalendarConnectionState;
+    access?: "read";
+    calendars: string[];
+    attendeePolicy?: "full" | "hashed";
+    /** True once a booking projection may have established the DB privacy policy. */
+    attendeePolicyLocked?: boolean;
+    bookingPageUrl?: string | null;
+    grantedScopes: string[];
+    attemptId?: string;
+    lastSuccessfulSyncAt?: number;
+    lastFullSyncAt?: number;
+    watchExpiresAt?: number;
+    bookingCount?: number;
+    error?: {
+        code?: string;
+        message?: string;
+    };
+}
+/** One Google calendar the connected identity may select for mirroring. */
+interface AvailableGoogleCalendar {
+    id: string;
+    summary?: string;
+    primary?: boolean;
+    selected?: boolean;
+    accessRole?: "freeBusyReader" | "reader" | "writer" | "owner";
 }
-/**
- * Validate and summarize an odla project config entirely offline — no network
- * calls and no file writes. Loads `configPath`, builds the provision plan, and
- * resolves the schema and rules (synthesizing deny-all rules from the schema
- * when `db.rules` is omitted and `db.defaultRules` isn't `false`), then prints a
- * summary line for the app, envs, services, schema entity count, rules namespace
- * count, and AI provider.
- *
- * It then collects warnings for the mistakes provision can't fix silently: a
- * schema with no entities, a rules namespace with no matching entity, the `ai`
- * service enabled without an `ai.provider`, `auth.clerk` entries that reference
- * an unset env var (`$FOO`), an `ai.keyEnv` that isn't set (provider key upload
- * will be skipped), and — when `o11y` is enabled — any env whose local
- * credentials lack an ingest token. It also folds in the shared rule linter,
- * git-tracked secret-shaped files, and wrangler config warnings. Prints `ok`
- * when clean, otherwise the warning list. Purely advisory: never throws on
- * warnings and never mutates anything.
- *
- * @param options.configPath Path to the `odla.config.mjs` to inspect.
- * @param options.stdout Optional console-like sink (defaults to `console`).
- */
-declare function doctor(options: DoctorOptions): Promise<void>;
 
-interface InitOptions {
-    rootDir?: string;
-    configPath?: string;
-    appId: string;
-    name: string;
-    envs?: string[];
-    services?: string[];
-    aiProvider?: string;
-    force?: boolean;
+interface CalendarLifecycleOptions {
+    configPath: string;
+    env?: string;
+    token?: string;
+    open?: boolean;
+    interactive?: boolean;
+    yes?: boolean;
+    json?: boolean;
+    fetch?: typeof fetch;
     stdout?: Pick<typeof console, "log" | "error">;
+    openConsentUrl?: (url: string) => Promise<void>;
+    wait?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
+    pollTimeoutMs?: number;
+    now?: () => number;
+    signal?: AbortSignal;
 }
-/**
- * Scaffold a new odla project into `rootDir` (default: cwd). Writes an
- * `odla.config.mjs` (default name, overridable via `configPath`) plus starter
- * `src/odla/schema.mjs` (a single `notes` entity) and `src/odla/rules.mjs`
- * (deny-all), and creates the `src/odla` and `.odla` directories. Also runs
- * `ensureGitignore` so the local token/credentials paths are ignored.
- *
- * Fully local and synchronous — no network calls. The config file is only
- * written when it doesn't already exist unless `force` is set (otherwise it
- * throws); the schema/rules files are written only when missing (never
- * overwritten, even with `force`). `appId` must match `^[a-z0-9][a-z0-9-]*$` or
- * it throws. Defaults: `envs` → `["dev"]`, `services` → `["db","ai"]`,
- * `aiProvider` → `"anthropic"` (which also picks the `keyEnv`, e.g.
- * `ANTHROPIC_API_KEY`/`OPENAI_API_KEY`/`GOOGLE_API_KEY`).
- *
- * @param options.appId Slug for the app (lowercase alphanumerics and hyphens).
- * @param options.name Human-readable app name embedded in the config.
- * @param options.rootDir Project root (defaults to `process.cwd()`).
- * @param options.configPath Config filename relative to root (default `odla.config.mjs`).
- * @param options.envs Environment names (default `["dev"]`; production is an explicit opt-in).
- * @param options.services Enabled services (default `["db","ai"]`).
- * @param options.aiProvider AI provider slug (default `"anthropic"`).
- * @param options.force Overwrite an existing config file instead of throwing.
- * @param options.stdout Optional console-like sink (defaults to `console`).
- */
-declare function initProject(options: InitOptions): void;
+/** Read the owner-visible Google connection and mirror health for one env. */
+declare function calendarStatus(options: CalendarLifecycleOptions): Promise<CalendarStatus>;
+/** List calendars visible to the connected Google identity for config authoring. */
+declare function calendarCalendars(options: CalendarLifecycleOptions): Promise<AvailableGoogleCalendar[]>;
+/** Apply the public booking page setting, then complete Google consent + initial sync. */
+declare function calendarConnect(options: CalendarLifecycleOptions): Promise<CalendarStatus>;
+/** Ask the hosted connector for an immediate incremental/full recovery sync. */
+declare function calendarResync(options: CalendarLifecycleOptions): Promise<CalendarStatus>;
+/** Stop watches and delete this connection's encrypted platform token/cursors
+ * without purging the mirror or revoking the shared Google project grant. */
+declare function calendarDisconnect(options: CalendarLifecycleOptions): Promise<CalendarStatus>;
 
 interface RunResult {
     code: number;
@@ -186,6 +187,41 @@ interface ClerkAuthConfig {
     audience?: string;
     mode?: "client" | "full";
 }
+/** Read-only event selection applied by the hosted Google calendar connector. */
+interface GoogleCalendarMatchConfig {
+    /** Mirror only events whose summary begins with this value. */
+    summaryPrefix?: string;
+    /** Require the connected identity to organize the event. Defaults to true. */
+    organizerSelf?: boolean;
+    /** Require at least one attendee. Defaults to true. */
+    requireAttendees?: boolean;
+}
+/** Google Calendar intent. OAuth credentials never belong in this config. */
+interface GoogleCalendarConfig {
+    /** One through ten provider calendar ids to mirror in each odla environment. */
+    calendars: Record<OdlaEnvName, string[]>;
+    /** Public Google Appointment Schedule URL for static embed/link mode. */
+    bookingPageUrl?: Record<OdlaEnvName, string | null>;
+    match?: GoogleCalendarMatchConfig;
+    /** Store normalized attendee addresses, or only SHA-256 match keys. */
+    attendeePolicy?: "full" | "hashed";
+}
+interface CalendarConfig {
+    google: GoogleCalendarConfig;
+}
+/** Canonical, environment-specific config sent to the calendar controller. */
+interface CalendarServiceConfig extends Record<string, unknown> {
+    provider: "google";
+    access: "read";
+    /** Deduplicated provider ids; the hosted connector accepts at most ten. */
+    calendars: string[];
+    match: {
+        organizerSelf: boolean;
+        requireAttendees: boolean;
+        summaryPrefix?: string;
+    };
+    attendeePolicy: "full" | "hashed";
+}
 /** Authored `odla.config.mjs` contract consumed by doctor and provision. */
 interface OdlaProjectConfig {
     platformUrl?: string;
@@ -214,6 +250,7 @@ interface OdlaProjectConfig {
         /** Vault secret name. Defaults to @odla-ai/ai's provider default. */
         secretName?: string;
     };
+    calendar?: CalendarConfig;
     o11y?: {
         /** This service's name in the collector. Defaults to the app id. */
         service?: string;
@@ -278,6 +315,10 @@ interface ProvisionOptions {
     interactive?: boolean;
     /** Test/embedding override for opening the approval URL. Defaults to the OS browser opener. */
     openApprovalUrl?: (url: string) => Promise<void>;
+    /** Test/embedding override for calendar connection polling. */
+    calendarPollWait?: (milliseconds: number, signal?: AbortSignal) => Promise<void>;
+    /** Maximum calendar consent + initial-sync wait. Defaults to ten minutes. */
+    calendarPollTimeoutMs?: number;
     /** Explicit consent for a non-dry-run plan containing `prod` or `production`. */
     yes?: boolean;
     fetch?: typeof fetch;
@@ -301,10 +342,86 @@ interface ProvisionPlan {
 interface SmokeOptions {
     configPath: string;
     env?: string;
+    /** Developer-token override used only for owner-visible calendar health. */
+    token?: string;
+    open?: boolean;
+    interactive?: boolean;
+    openApprovalUrl?: (url: string) => Promise<void>;
     fetch?: typeof fetch;
     stdout?: Pick<typeof console, "log" | "error">;
 }
 
+declare const GOOGLE_CALENDAR_READ_SCOPE = "https://www.googleapis.com/auth/calendar.events.readonly";
+/** Resolve the checked-in calendar block into one controller-safe env payload. */
+declare function calendarServiceConfig(cfg: LoadedProjectConfig, env: string): CalendarServiceConfig;
+/** Public Appointment Schedule URL to apply separately from connector config. */
+declare function calendarBookingPageUrl(cfg: LoadedProjectConfig, env: string): string | null | undefined;
+
+interface DoctorOptions {
+    configPath: string;
+    stdout?: Pick<typeof console, "log" | "error">;
+}
+/**
+ * Validate and summarize an odla project config entirely offline — no network
+ * calls and no file writes. Loads `configPath`, builds the provision plan, and
+ * resolves the schema and rules (synthesizing deny-all rules from the schema
+ * when `db.rules` is omitted and `db.defaultRules` isn't `false`), then prints a
+ * summary line for the app, envs, services, schema entity count, rules namespace
+ * count, and AI provider.
+ *
+ * It then collects warnings for the mistakes provision can't fix silently: a
+ * schema with no entities, a rules namespace with no matching entity, the `ai`
+ * service enabled without an `ai.provider`, `auth.clerk` entries that reference
+ * an unset env var (`$FOO`), an `ai.keyEnv` that isn't set (provider key upload
+ * will be skipped), and — when `o11y` is enabled — any env whose local
+ * credentials lack an ingest token. It also folds in the shared rule linter,
+ * git-tracked secret-shaped files, and wrangler config warnings. Prints `ok`
+ * when clean, otherwise the warning list. Purely advisory: never throws on
+ * warnings and never mutates anything.
+ *
+ * @param options.configPath Path to the `odla.config.mjs` to inspect.
+ * @param options.stdout Optional console-like sink (defaults to `console`).
+ */
+declare function doctor(options: DoctorOptions): Promise<void>;
+
+interface InitOptions {
+    rootDir?: string;
+    configPath?: string;
+    appId: string;
+    name: string;
+    envs?: string[];
+    services?: string[];
+    aiProvider?: string;
+    force?: boolean;
+    stdout?: Pick<typeof console, "log" | "error">;
+}
+/**
+ * Scaffold a new odla project into `rootDir` (default: cwd). Writes an
+ * `odla.config.mjs` (default name, overridable via `configPath`) plus starter
+ * `src/odla/schema.mjs` (a single `notes` entity) and `src/odla/rules.mjs`
+ * (deny-all), and creates the `src/odla` and `.odla` directories. Also runs
+ * `ensureGitignore` so the local token/credentials paths are ignored.
+ *
+ * Fully local and synchronous — no network calls. The config file is only
+ * written when it doesn't already exist unless `force` is set (otherwise it
+ * throws); the schema/rules files are written only when missing (never
+ * overwritten, even with `force`). `appId` must match `^[a-z0-9][a-z0-9-]*$` or
+ * it throws. Defaults: `envs` → `["dev"]`, `services` → `["db","ai"]`,
+ * `aiProvider` → `"anthropic"` (which also picks the `keyEnv`, e.g.
+ * `ANTHROPIC_API_KEY`/`OPENAI_API_KEY`/`GOOGLE_API_KEY`).
+ *
+ * @param options.appId Slug for the app (lowercase alphanumerics and hyphens).
+ * @param options.name Human-readable app name embedded in the config.
+ * @param options.rootDir Project root (defaults to `process.cwd()`).
+ * @param options.configPath Config filename relative to root (default `odla.config.mjs`).
+ * @param options.envs Environment names (default `["dev"]`; production is an explicit opt-in).
+ * @param options.services Enabled services (default `["db","ai"]`).
+ * @param options.aiProvider AI provider slug (default `"anthropic"`).
+ * @param options.force Overwrite an existing config file instead of throwing.
+ * @param options.stdout Optional console-like sink (defaults to `console`).
+ */
+declare function initProject(options: InitOptions): void;
+
 /**
  * Provision an app end-to-end from its config — the primary deploy path, and
  * (apart from key rotation) idempotent, so re-running is safe. Obtains a
@@ -365,6 +482,47 @@ interface SecretsPushOptions {
  */
 declare function secretsPush(options: SecretsPushOptions): Promise<void>;
 
+/**
+ * Inputs for one write-only tenant-vault transfer (`secrets set` /
+ * `secrets set-clerk-key`). Values may come only from a named environment
+ * variable or stdin, so a producer command can be piped straight into the
+ * vault without the secret ever being displayed or stored on disk.
+ */
+interface SecretsSetOptions {
+    configPath: string;
+    env: string;
+    /** Vault secret name (`secrets set` only; `$`-prefixed names are reserved). */
+    name?: string;
+    fromEnv?: string;
+    stdin?: boolean;
+    /** Explicit consent for a prod-named env (and for sk_live_ into a non-prod env). */
+    yes?: boolean;
+    /** Developer token override; defaults to $ODLA_DEV_TOKEN, the cached token, or a device handshake. */
+    token?: string;
+    open?: boolean;
+    interactive?: boolean;
+    openApprovalUrl?: (url: string) => Promise<void>;
+    fetch?: typeof fetch;
+    readStdin?: () => Promise<string>;
+    stdout?: Pick<typeof console, "log" | "error">;
+}
+/**
+ * Store one named secret in the env's tenant vault (the same write-only slot
+ * Studio's Secrets panel fills), e.g. `clerk_webhook_secret` for synced auth.
+ * The value is encrypted at rest and can be read back only by that tenant's
+ * app API key — never by this CLI, Studio, or the developer token.
+ */
+declare function secretsSet(options: SecretsSetOptions): Promise<void>;
+/**
+ * Store the app's Clerk secret key under the reserved `$clerk_secret` slot so
+ * odla-db can resolve the app's users (invites, member lookups). Reserved
+ * secrets are never readable by app keys; the dedicated endpoint is the only
+ * way to set one. Guards against instance/env mismatches: an sk_test_ key
+ * never belongs in a prod-named env, and an sk_live_ key entering a non-prod
+ * env requires `--yes` (live users would sync into a non-prod tenant).
+ */
+declare function secretsSetClerkKey(options: SecretsSetOptions): Promise<void>;
+
 /** Built-in security coverage profile selected for a hosted reasoning run. */
 type HostedSecurityProfile = "odla" | "cloudflare-app" | "generic";
 /** Exact attribution and authorization need supplied to a lazy token callback. */
@@ -420,223 +578,15 @@ interface HostedSecurityResult {
  */
 declare function runHostedSecurity(options: RunHostedSecurityOptions): Promise<HostedSecurityResult>;
 
-/** GitHub repository connection persisted by odla.ai. GitHub credentials and
- * installation identifiers are deliberately absent from this client view. */
-interface GitHubSecuritySource {
-    sourceId: string;
-    repository: string;
-    installationAccount: string;
-    defaultBranch: string;
-    env: string;
-    status: "active" | "disabled" | "deleted";
-    connectedAt: string;
-}
-/** One browser-mediated GitHub App installation attempt. */
-interface GitHubConnectionAttempt {
-    attemptId: string;
-    installUrl: string;
-    expiresAt: string;
-}
-/** Poll-safe state for a GitHub App installation attempt. */
-interface GitHubConnectionStatus {
-    attemptId: string;
-    status: "pending" | "connected" | "expired" | "failed";
-    connectionId?: string;
-    sourceId?: string;
-    repository?: string;
-    installationAccount?: string;
-    failureCode?: string;
-}
-/** Model identity selected by platform policy. No provider credential is
- * returned to the CLI. */
-interface HostedSecurityRoute {
-    provider: string;
-    model: string;
-    policyVersion?: number;
-}
-/** One purpose-specific System AI route disclosed before a hosted review. */
-interface HostedSecurityPlanRoute extends HostedSecurityRoute {
-    purpose: "security.discovery" | "security.validation";
-    policyVersion: number;
-    enabled: boolean;
-    credentialReady: boolean;
-    maxCallsPerRun: number;
-    maxInputBytes: number;
-    maxOutputTokens: number;
-}
-/** Owner-readable, versioned disclosure preflight. Provider/model identities
- * and bounds are non-secret; the full plan digest binds subsequent consent so
- * an admin edit or processing-contract release cannot silently change it. */
-interface HostedSecurityPlan {
-    env: string;
-    /** Versioned disclosure and processing contract covered by `planDigest`. */
-    consentContract: "odla.hosted-security-consent.v1";
-    /** Versioned private report projection covered by `planDigest`. */
-    reportProjection: "odla.hosted-security-report.v1";
-    /** Best-effort credential-pattern redaction contract covered by `planDigest`. */
-    redactionContract: "odla.best-effort-credential-pattern-redaction.v1";
-    /** Server-owned prompt bundle covered by `planDigest`. */
-    promptBundle: string;
-    /** Digest binding this exact disclosure plan to a later enqueue request. */
-    planDigest: `sha256:${string}`;
-    ready: boolean;
-    independent: boolean;
-    sourceDisclosure: "redacted";
-    targetExecution: false;
-    reportRetentionDays: number;
-    routes: {
-        discovery: HostedSecurityPlanRoute;
-        validation: HostedSecurityPlanRoute;
-    };
-}
-/** Server-authored preview of the exact source/ref/profile execution choice. */
-interface HostedSecurityIntent {
-    executionContract: "odla.hosted-security-execution-consent.v1";
-    executionDigest: `sha256:${string}`;
-    appId: string;
-    env: string;
-    sourceId: string;
-    repository: string;
-    defaultBranch: string;
-    /** Explicit requested ref; omitted requests are canonicalized to the source's current default branch. */
-    requestedRef: string;
-    profile: "odla" | "cloudflare-app" | "generic";
-    sourceDisclosure: "redacted";
-    planDigest: `sha256:${string}`;
-}
-/** Atomic server response used to review both the processing plan and execution intent. */
-interface HostedSecurityIntentResponse {
-    plan: HostedSecurityPlan;
-    intent: HostedSecurityIntent;
-}
-/** Lifecycle state reported for a hosted repository security job. */
-type HostedSecurityJobStatus = "queued" | "acquiring" | "analyzing" | "completed" | "failed" | "cancelled";
-/** Finding totals summarized on hosted job metadata. */
-interface HostedSecurityCounts {
-    confirmed: number;
-    needsReproduction: number;
-    candidates: number;
-}
-/** Coverage-cell totals summarized on hosted job metadata. */
-interface HostedSecurityCoverage {
-    completeCells?: number;
-    totalCells?: number;
-    shallowCells?: number;
-    blockedCells?: number;
-    unscheduledCells?: number;
-    budgetExhaustedCells?: number;
-}
-/** Bounded job metadata returned by odla.ai; it has no archive, file-body, or
- * explicit source-excerpt field. */
-interface HostedSecurityJob {
-    jobId: string;
-    env: string;
-    sourceId: string;
-    repository: string;
-    requestedRef?: string;
-    commitSha?: string;
-    status: HostedSecurityJobStatus;
-    runId?: string;
-    profile: string;
-    routes?: {
-        discovery: HostedSecurityRoute;
-        validation: HostedSecurityRoute;
-    };
-    sourceDisclosure: "redacted";
-    planDigest: `sha256:${string}`;
-    executionContract: "odla.hosted-security-execution-consent.v1";
-    executionDigest: `sha256:${string}`;
-    retentionDays: number;
-    snapshotDigest?: `sha256:${string}`;
-    fileCount?: number;
-    inputBytes?: number;
-    reportDigest?: `sha256:${string}`;
-    coverageStatus?: "not_run" | "complete" | "incomplete";
-    coverage?: HostedSecurityCoverage;
-    counts?: HostedSecurityCounts;
-    errorCode?: string;
-    createdAt: string;
-    updatedAt: string;
-    startedAt?: string;
-    completedAt?: string;
-}
-/** One normalized, bounded finding in a hosted security report. */
-interface HostedSecurityReportFinding {
-    fingerprint: string;
-    kind: string;
-    attackClass: string;
-    title: string;
-    summary: string;
-    impact: string;
-    remediation?: string;
-    validationRationale?: string;
-    validationStatus?: string;
-    confidence: "low" | "medium" | "high";
-    severity: "critical" | "high" | "medium" | "low" | "informational";
-    disposition: string;
-    locations: Array<{
-        path: string;
-        line: number;
-        column?: number;
-    }>;
-}
-/** Bounded report projection with normalized model-derived prose and paths.
- * Its schema has no dedicated raw-source, archive, source-excerpt, context
- * packet, raw-provider-response, credential, execution-trace, or reproduction
- * output field. Model prose may reveal or echo source semantics, so the report
- * must remain private. */
-interface HostedSecurityReport {
-    schemaVersion: 1;
-    jobId: string;
-    runId: string;
-    repository: string;
-    revision: string;
-    snapshotDigest: string;
-    reportDigest: string;
-    startedAt: string;
-    completedAt: string;
-    mode: "passive" | "autonomous";
-    coverageStatus: "not_run" | "complete" | "incomplete";
-    findingsReturned: number;
-    findingsTotal: number;
-    coverageReturned: number;
-    coverageTotal: number;
-    metrics: HostedSecurityCounts & {
-        rejected: number;
-        suppressed: number;
-        coverageCells: number;
-        shallowCells: number;
-        blockedCells: number;
-        unscheduledCells: number;
-        budgetExhaustedCells: number;
-    };
-    provenance: {
-        harnessVersion: string;
-        promptBundle: string;
-        profile: {
-            id: string;
-            version: string;
-        };
-        independentValidation: boolean;
-        discovery?: {
-            provider?: string;
-            model?: string;
-        };
-        validation?: {
-            provider?: string;
-            model?: string;
-        };
-    };
-    coverage: Array<{
-        area: string;
-        attackClass: string;
-        attempts: number;
-        candidateCount: number;
-        state: string;
-    }>;
-    limitations: string[];
-    findings: HostedSecurityReportFinding[];
-}
+/**
+ * The hosted-security client surface. The WIRE types live in @odla-ai/security/hosted — one
+ * definition shared with the dashboard and the server that produces them. Re-exported here so
+ * this module stays the single import path for the rest of the CLI.
+ *
+ * What remains below is what is genuinely the CLI's own: transport controls (platform origin,
+ * token, fetch, AbortSignal) that no other client shares.
+ */
+
 /** Common authenticated transport controls for hosted-security requests. */
 interface HostedSecurityRequestOptions {
     platform: string;
@@ -831,4 +781,4 @@ declare function installSkill(options?: SkillInstallOptions): SkillInstallResult
  */
 declare function smoke(options: SmokeOptions): Promise<void>;
 
-export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, CAPABILITIES, type CliDependencies, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GitHubConnectionAttempt, type GitHubConnectionStatus, type GitHubSecuritySource, type HarnessInstallResult, type HostedSecurityCounts, type HostedSecurityCoverage, type HostedSecurityIntent, type HostedSecurityIntentResponse, type HostedSecurityJob, type HostedSecurityJobStatus, type HostedSecurityPlan, type HostedSecurityPlanRoute, type HostedSecurityProfile, type HostedSecurityReport, type HostedSecurityReportFinding, type HostedSecurityResult, type HostedSecurityRoute, type HostedSecurityTokenRequest, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runHostedSecurity, secretsPush, smoke, startHostedSecurityJob };
+export { AGENT_HARNESSES, type AdminAiOptions, type AgentHarness, type AgentHarnessSelector, type AvailableGoogleCalendar, CAPABILITIES, type CalendarConfig, type CalendarConnectionState, type CalendarLifecycleOptions, type CalendarServiceConfig, type CalendarStatus, type CliDependencies, type ConnectGitHubSecuritySourceOptions, type DisconnectGitHubSecuritySourceOptions, type FollowHostedSecurityJobOptions, GOOGLE_CALENDAR_READ_SCOPE, type GetHostedSecurityIntentOptions, type GetHostedSecurityJobOptions, type GoogleCalendarConfig, type GoogleCalendarMatchConfig, type HarnessInstallResult, type HostedSecurityProfile, type HostedSecurityResult, type HostedSecurityTokenRequest, type ListGitHubSecuritySourcesOptions, type ListHostedSecurityJobsOptions, type LoadedProjectConfig, type LocalCredentials, type OdlaProjectConfig, type ProvisionOptions, type ProvisionPlan, type RunHostedSecurityOptions, SYSTEM_AI_PURPOSES, type ScopedPlatformTokenOptions, type SecretsPushOptions, type SecretsSetOptions, type SkillInstallOptions, type SkillInstallResult, type SmokeOptions, type StartHostedSecurityJobOptions, type SystemAiPurpose, adminAi, calendarBookingPageUrl, calendarCalendars, calendarConnect, calendarDisconnect, calendarResync, calendarServiceConfig, calendarStatus, connectGitHubSecuritySource, disconnectGitHubSecuritySource, doctor, followHostedSecurityJob, getHostedSecurityIntent, getHostedSecurityJob, getHostedSecurityPlan, getHostedSecurityReport, getScopedPlatformToken, inferGitHubRepository, initProject, installSkill, isTerminalHostedSecurityStatus, listGitHubSecuritySources, listHostedSecurityJobs, printCapabilities, provision, redactSecrets, repositoryFromGitRemote, runCli, runHostedSecurity, secretsPush, secretsSet, secretsSetClerkKey, smoke, startHostedSecurityJob };

package/dist/index.js

@@ -2,8 +2,16 @@
 import {
   AGENT_HARNESSES,
   CAPABILITIES,
+  GOOGLE_CALENDAR_READ_SCOPE,
   SYSTEM_AI_PURPOSES,
   adminAi,
+  calendarBookingPageUrl,
+  calendarCalendars,
+  calendarConnect,
+  calendarDisconnect,
+  calendarResync,
+  calendarServiceConfig,
+  calendarStatus,
   connectGitHubSecuritySource,
   disconnectGitHubSecuritySource,
   doctor,
@@ -26,14 +34,24 @@ import {
   runCli,
   runHostedSecurity,
   secretsPush,
+  secretsSet,
+  secretsSetClerkKey,
   smoke,
   startHostedSecurityJob
-} from "./chunk-BHAEDEL2.js";
+} from "./chunk-WDKBW4BE.js";
 export {
   AGENT_HARNESSES,
   CAPABILITIES,
+  GOOGLE_CALENDAR_READ_SCOPE,
   SYSTEM_AI_PURPOSES,
   adminAi,
+  calendarBookingPageUrl,
+  calendarCalendars,
+  calendarConnect,
+  calendarDisconnect,
+  calendarResync,
+  calendarServiceConfig,
+  calendarStatus,
   connectGitHubSecuritySource,
   disconnectGitHubSecuritySource,
   doctor,
@@ -56,6 +74,8 @@ export {
   runCli,
   runHostedSecurity,
   secretsPush,
+  secretsSet,
+  secretsSetClerkKey,
   smoke,
   startHostedSecurityJob
 };