@overaihq/cli 0.12.1 → 0.13.1

package/dist/{chunk-KIHU74V6.js → chunk-56E4CWBE.js}

@@ -370,12 +370,22 @@ var pageErrorPayloadSchema = external_exports.object({
   message: external_exports.string(),
   stack: external_exports.string().optional()
 });
+var screenshotResultPayloadSchema = external_exports.object({
+  requestId: external_exports.string(),
+  error: external_exports.string().optional(),
+  mediaType: external_exports.string().optional(),
+  data: external_exports.string().optional(),
+  width: external_exports.number().optional(),
+  height: external_exports.number().optional()
+});
 
 // ../common/src/webPage.ts
 var webPageLanguage = ["react"];
 var configFlag = external_exports.union([external_exports.boolean(), external_exports.string()]).nullish().transform((value) => value === true || value === "true").catch(false);
 var webPageConfigSchema = external_exports.object({
   language: external_exports.enum(["react"]).catch("react"),
+  /* Missing on legacy versions; invalid modes fail closed instead of granting workspace access. */
+  authorizationMode: external_exports.enum(["workspace", "viewer"]).default("workspace"),
   customTitle: external_exports.string().nullish(),
   code: external_exports.string().default(reactDefaultTemplate),
   dataSourceUrl: external_exports.string().nullish(),

package/dist/index.js

@@ -5,7 +5,7 @@ import {
 import {
   itemFilterExpressionRootSchema,
   webPageConfigSchema
-} from "./chunk-KIHU74V6.js";
+} from "./chunk-56E4CWBE.js";
 import {
   external_exports
 } from "./chunk-XCJJTK3H.js";
@@ -26821,7 +26821,10 @@ var gqlRequest = async (query, variables) => {
     }
   })();
   if (body?.errors != null && body.errors.length > 0) {
-    throw new Error(body.errors.map((e) => e.message).join("; "));
+    throw Object.assign(
+      new Error(body.errors.map((e) => e.message).join("; ")),
+      { errors: body.errors }
+    );
   }
   if (!res.ok) throw v2Error("graphql", res, raw2);
   if (body?.data == null) {
@@ -27083,7 +27086,7 @@ var validateAutomationElements = async (elements) => {
   return findings(automationNodesSchema.safeParse(elements));
 };
 var validateWebPageConfig = async (config) => {
-  const { webPageConfigWriteSchema } = await import("./webPage-675DU764.js");
+  const { webPageConfigWriteSchema } = await import("./webPage-4HUHD7FS.js");
   return findings(webPageConfigWriteSchema.safeParse(config));
 };
 
@@ -27116,7 +27119,7 @@ var functionAdapter = {
         functions(condition: { workspaceId: $workspaceId }, includeArchived: NO) {
           nodes {
             id name
-            functionVersions(orderBy: [CREATED_AT_DESC], first: 1) {
+            functionVersions(orderBy: [VERSION_NUMBER_DESC], first: 1) {
               nodes { versionNumber code inputSchema outputSchema executionTimeout executionCpu executionMemory }
             }
             functionDeployedVersion { versionNumber }
@@ -27143,7 +27146,7 @@ var functionAdapter = {
     const data = await gqlRequest(
       `query CliFunctionHead($id: String!) {
         function(id: $id) {
-          functionVersions(orderBy: [CREATED_AT_DESC], first: 1) { nodes { versionNumber } }
+          functionVersions(orderBy: [VERSION_NUMBER_DESC], first: 1) { nodes { versionNumber } }
           functionDeployedVersion { versionNumber }
         }
       }`,
@@ -27171,11 +27174,11 @@ var functionAdapter = {
     }
     return functionFiles(id, name2, data.functionVersion);
   },
-  push: async (id, files, message) => {
+  push: async (id, files, message, expectedLatestVersion) => {
     const meta = JSON.parse(fileBySuffix(files, ".meta.json"));
     const data = await gqlRequest(
-      `mutation CliCreateFunctionVersion($functionId: String!, $code: String!, $message: String, $inputSchema: String, $outputSchema: String, $executionTimeout: Int, $executionCpu: Int, $executionMemory: Int) {
-        createFunctionVersion(input: { functionVersion: {
+      `mutation CliCreateFunctionVersion($expectedLatestVersion: Int, $functionId: String!, $code: String!, $message: String, $inputSchema: String, $outputSchema: String, $executionTimeout: Int, $executionCpu: Int, $executionMemory: Int) {
+        createFunctionVersion(input: { expectedLatestVersion: $expectedLatestVersion, functionVersion: {
           functionId: $functionId, code: $code, message: $message,
           inputSchema: $inputSchema, outputSchema: $outputSchema,
           executionTimeout: $executionTimeout, executionCpu: $executionCpu,
@@ -27183,6 +27186,7 @@ var functionAdapter = {
         }}) { functionVersion { versionNumber } }
       }`,
       {
+        expectedLatestVersion,
         functionId: id,
         code: fileBySuffix(files, ".ts"),
         message,
@@ -27301,7 +27305,7 @@ var pageAdapter = (opts) => {
       }
       return pageFiles(opts.dir, id, name2, version.config);
     },
-    push: async (id, files, message) => {
+    push: async (id, files, message, expectedLatestVersion) => {
       const config = pageConfigFromFiles(files);
       const findings2 = await opts.validateConfig?.(config) ?? [];
       if (findings2.length > 0) {
@@ -27311,12 +27315,12 @@ ${findings2.map((f) => `  ${f}`).join("\n")}`
         );
       }
       const data = await gqlRequest(
-        `mutation CliCreatePageVersion($id: String!, $message: String, $config: JSON!) {
-          create${capitalized}Version(input: { ${gqlName}Version: { ${idArg}: $id, message: $message, config: $config } }) {
+        `mutation CliCreatePageVersion($expectedLatestVersion: Int, $id: String!, $message: String, $config: JSON!) {
+          create${capitalized}Version(input: { expectedLatestVersion: $expectedLatestVersion, ${gqlName}Version: { ${idArg}: $id, message: $message, config: $config } }) {
             ${gqlName}Version { versionNumber }
           }
         }`,
-        { id, message, config }
+        { id, message, config, expectedLatestVersion }
       );
       const versionNumber = data[`create${capitalized}Version`]?.[`${gqlName}Version`]?.versionNumber;
       if (versionNumber == null) {
@@ -27411,7 +27415,7 @@ var automationAdapter = {
       })
     };
   },
-  push: async (id, files, message) => {
+  push: async (id, files, message, expectedLatestVersion) => {
     const doc = JSON.parse(fileBySuffix(files, ".json"));
     const findings2 = await validateAutomationElements(doc.elements);
     if (findings2.length > 0) {
@@ -27421,12 +27425,13 @@ ${findings2.map((f) => `  ${f}`).join("\n")}`
       );
     }
     const data = await gqlRequest(
-      `mutation CliCreateAutomationVersion($automationId: String!, $elements: JSON!, $message: String, $maxConcurrentRuns: Int) {
-        createAutomationVersion(input: { automationVersion: {
+      `mutation CliCreateAutomationVersion($expectedLatestVersion: Int, $automationId: String!, $elements: JSON!, $message: String, $maxConcurrentRuns: Int) {
+        createAutomationVersion(input: { expectedLatestVersion: $expectedLatestVersion, automationVersion: {
           automationId: $automationId, elements: $elements, message: $message, maxConcurrentRuns: $maxConcurrentRuns
         }}) { automationVersion { num } }
       }`,
       {
+        expectedLatestVersion,
         automationId: id,
         elements: doc.elements,
         message,
@@ -27536,22 +27541,20 @@ var agentAdapter = {
       { agentId: id, versionNumber }
     );
     if (data.agentVersion == null) {
-      throw new Error(
-        `Agent ${id} has no version ${String(versionNumber)}.`
-      );
+      throw new Error(`Agent ${id} has no version ${String(versionNumber)}.`);
     }
     return agentFiles(id, name2, data.agentVersion);
   },
-  push: async (id, files, message) => {
+  push: async (id, files, message, expectedLatestVersion) => {
     const config = JSON.parse(fileBySuffix(files, ".json"));
     const data = await gqlRequest(
-      `mutation CliCreateAgentVersion(
+      `mutation CliCreateAgentVersion($expectedLatestVersion: Int,
         $agentId: String!, $message: String!, $systemPrompt: String!,
         $model: String!, $temperature: Float!, $maxTokens: Int!,
         $rateLimitRequestsPerMinute: Int!, $rateLimitTokensPerMinute: Int!,
         $functionIds: [String]
       ) {
-        createAgentVersionWithFunctions(input: {
+        createAgentVersionWithFunctions(input: { expectedLatestVersion: $expectedLatestVersion,
           agentId: $agentId, message: $message, systemPrompt: $systemPrompt,
           model: $model, temperature: $temperature, maxTokens: $maxTokens,
           rateLimitRequestsPerMinute: $rateLimitRequestsPerMinute,
@@ -27559,7 +27562,7 @@ var agentAdapter = {
           functionIds: $functionIds
         }) { result { versionNumber } }
       }`,
-      { agentId: id, message, ...config }
+      { agentId: id, message, ...config, expectedLatestVersion }
     );
     const versionNumber = data.createAgentVersionWithFunctions?.result?.versionNumber;
     if (versionNumber == null) {
@@ -27931,7 +27934,12 @@ var runPush = async (args, clone) => {
       if (content == null) throw new Error(`${relPath} is missing locally.`);
       files[relPath] = content;
     }
-    const versionNumber = await adapter.push(id, files, message);
+    const versionNumber = await adapter.push(
+      id,
+      files,
+      message,
+      force ? void 0 : resource.baseVersion
+    );
     for (const relPath of changedFiles) {
       const content = files[relPath];
       if (content == null) continue;
@@ -35077,14 +35085,50 @@ var runGraphql = async (args) => {
 };
 
 // src/commands/integration.ts
+var USAGE2 = "Usage: overai integration configure <id> --config <json|@file|@-> | integration config <id> | integration secret set <id> <KEY> --value <@file|@->";
+var setSecret = async (integrationId, key, rawValue) => {
+  if (rawValue == null) {
+    throw new Error("Integration secret set requires --value.");
+  }
+  if (!rawValue.startsWith("@")) {
+    throw new Error(
+      "--value must be @- (stdin) or @<file>, so the secret stays out of your shell history."
+    );
+  }
+  const value = await readValue(rawValue, "--value");
+  if (value == null || value === "") {
+    throw new Error("--value resolved to an empty string.");
+  }
+  await gqlRequest(
+    `mutation SetIntegrationSecret($input: UpdateIntegrationConfigInput!) {
+      updateIntegrationConfig(input: $input) { success }
+    }`,
+    { input: { integrationId, partialConfig: { [key]: value } } }
+  );
+};
 var runIntegration = async (args) => {
-  const [operation, id] = args;
+  const [operation] = args;
+  if (operation === "secret") {
+    const [, action, id2, key] = args;
+    if (action !== "set" || id2 == null || key == null || key.startsWith("-")) {
+      throw new Error(USAGE2);
+    }
+    await setSecret(id2, key, flagValue(args, "--value"));
+    const result2 = await userTrpcMutation(
+      "getMaskedIntegrationConfig",
+      { id: id2 }
+    );
+    printResult(result2, resolveFormat(flagValue(args, "-o", "--output")));
+    return;
+  }
+  const [, id] = args;
   if (id == null || operation !== "configure" && operation !== "config") {
-    throw new Error("Usage: overai integration configure <id> --config <json|@file|@-> | integration config <id>");
+    throw new Error(USAGE2);
   }
   if (operation === "configure") {
     const raw2 = await readValue(flagValue(args, "--config"), "--config");
-    if (raw2 == null) throw new Error("Integration configure requires --config.");
+    if (raw2 == null)
+      throw new Error("Integration configure requires --config.");
     const value = (() => {
       try {
         return JSON.parse(raw2);
@@ -35094,7 +35138,9 @@ var runIntegration = async (args) => {
     })();
     await userTrpcMutation("putIntegrationConfig", { id, value });
   }
-  const result = await userTrpcMutation("getMaskedIntegrationConfig", { id });
+  const result = await userTrpcMutation("getMaskedIntegrationConfig", {
+    id
+  });
   printResult(result, resolveFormat(flagValue(args, "-o", "--output")));
 };
 
@@ -35559,6 +35605,8 @@ var runResource = async (args) => {
 // src/docs/bestPractices.ts
 var platform2 = `# OverAI platform primer
 
+Saves reject a stale editing base without discarding your draft. Incorporate the latest saved changes before retrying; never retry with a newer base unless those changes have been reconciled. A save conflict does not deploy anything. Normal push sends the manifest base to an atomic server check. Only explicit --force omits it; never use --force as automatic conflict recovery.
+
 Organization context: Commands in a clone select its org automatically. Outside a clone,
 use OVERAI_ORG_ID=<orgId>. Each backend/org has an independent saved session; org switch
 changes only the machine-global default. Use whoami to inspect the effective scope.
@@ -35589,11 +35637,13 @@ The env SDK is mostly shared across pages, functions, and automation code
 nodes:
 env.TBSxxx.sql\`...\` (postgres.js tagged template \u2014 interpolations are
 auto-parameterized, never string-concatenate user input; each table space also
-gets a generated global TBSxxx.Tables interface, so annotate the row element
-type \u2014 env.TBSxxx.sql<TBSxxx.Tables["users"]>\`...\` \u2014 for typed rows and
+gets a generated Env.TBSxxx.Tables interface, so annotate the row element
+type \u2014 env.TBSxxx.sql<Env.TBSxxx.Tables["users"]>\`...\` \u2014 for typed rows and
 column autocomplete; joins/aggregates/projections take a hand-written type or
 Pick<...>), env.FNxxx.call()
-(pass \`path\` to hit a sub-path of a function that routes internally),
+(pass \`path\` to hit a sub-path of a function that routes internally; a
+function with declared schemas also gets Env.FNxxx.Input / Env.FNxxx.Output
+types for annotating payloads and results),
 env.ATxxx.start(inputs?) (fire-and-forget), env.DFxxx.read.json()/.saveVersion(),
 env.FBxxx.list()/read(entryId)/upload()/createFolder(),
 env.STORAGE.fetch/upload/presign (upload shortens stored names over 128
@@ -35651,12 +35701,24 @@ A page version's config JSON carries the code; the CLI splits it into
 language, customTitle, hideTopBar, ...). Push reassembles them.
 
 - Web pages are React (TSX). Printable pages are React or Liquid.
+- Web page config authorizationMode defaults to "workspace" for shared access.
+  Opt into "viewer" for personal pages spanning the signed-in viewer's workspaces.
+  Page code uses their permissions; results/access errors can differ by user.
+  Public links require sign-in. Save and deploy publishes the mode with the code.
+  Called functions retain their own execution permissions.
 - Web page code is concatenated with an SDK that already provides React and
   its hooks, then appends the <App /> render call. Declare a plain
   \`function App() { ... }\` \u2014 no \`export default\`, no
   \`import ... from "react"\` (redeclaring hooks is a SyntaxError \u2192 blank
   page). Imports must be https URLs (\`https://esm.sh/...\`) \u2014 the sandbox
   cannot resolve bare or relative specifiers.
+- In a React page, HTML from somewhere else (an exported dashboard, a mockup,
+  a page from another tool) gets rebuilt as native React, preserving the
+  original styling closely. Don't load a foreign HTML file into a \`srcDoc\`
+  iframe or inject it into the DOM: embedded HTML is opaque to the outline and
+  patchable only by blind string replacement that silently no-ops when the
+  source drifts. A Liquid printable page is the exception \u2014 Liquid is HTML
+  templating, so imported markup becomes the template body directly.
 - Pages run sandboxed in an iframe with the env SDK plus hooks: useCurrentUser,
   useSearchParam, useTheme, useLLMText/Object/Chat, useAgentChat, useDataFile
   (legacy \u2014 prefer env.DFxxx), navigateToPage, openPrintablePage.
@@ -36368,7 +36430,7 @@ var listWorkspaceUsers = async (args) => {
     resolveFormat(flagValue(args, "-o", "--output"))
   );
 };
-var USAGE2 = `Usage:
+var USAGE3 = `Usage:
   overai workspace list [--archived] [--limit <n>]
   overai workspace show [workspaceId]
   overai workspace users [workspaceId]
@@ -36386,7 +36448,7 @@ var runWorkspace = async (args) => {
     await listWorkspaceUsers(args.slice(1));
     return;
   }
-  process.stderr.write(USAGE2);
+  process.stderr.write(USAGE3);
   process.exitCode = 1;
 };
 
@@ -36468,6 +36530,9 @@ Other resources:
   overai knowledge-base search <id> <query> [--limit N]
   overai integration configure <id> --config <json|@file|@->
   overai integration config <id>       Read its masked configuration
+  overai integration secret set <id> <KEY> --value <@file|@->
+                                       Set one credential, leaving the rest of
+                                       the config alone
   overai printable-page render <id> [--search-params <json|@file>]
 
 Self-hosted runners (enabling remote access stays on-device \u2014 not a CLI action):

package/dist/{webPage-675DU764.js → webPage-4HUHD7FS.js}

@@ -3,7 +3,7 @@ import {
   webPageConfigSchema,
   webPageConfigWriteSchema,
   webPageLanguage
-} from "./chunk-KIHU74V6.js";
+} from "./chunk-56E4CWBE.js";
 import "./chunk-XCJJTK3H.js";
 import "./chunk-U67V476Y.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overaihq/cli",
-  "version": "0.12.1",
+  "version": "0.13.1",
   "description": "Create, edit, deploy, and run OverAI workspace resources from the command line",
   "type": "module",
   "homepage": "https://overai.com",