@overaihq/cli 0.14.14 → 0.14.15

package/dist/index.js

@@ -38209,7 +38209,7 @@ var agentToolRequestSchema = external_exports.object({
   path: external_exports.string().prefault("/").transform((p) => p.startsWith("/") ? p : `/${p}`),
   headers: external_exports.record(external_exports.string(), external_exports.string()).prefault({}),
   queryParams: external_exports.record(external_exports.string(), external_exports.union([external_exports.string(), external_exports.number(), external_exports.boolean()])).prefault({}),
-  body: external_exports.unknown()
+  body: external_exports.unknown().optional()
 });
 var agentToolRequestJsonSchemaSchema = external_exports.object({
   type: external_exports.literal("object"),
@@ -45112,6 +45112,8 @@ var NodeEnum = /* @__PURE__ */ ((NodeEnum2) => {
   NodeEnum2["readFoldersFromLocalFolder"] = "READ_FOLDERS_FROM_LOCAL_FOLDER";
   NodeEnum2["redisAction"] = "REDIS_ACTION";
   NodeEnum2["renameLocalFile"] = "RENAME_LOCAL_FILE";
+  NodeEnum2["ringcentralAction"] = "RINGCENTRAL_ACTION";
+  NodeEnum2["ringcentralQuery"] = "RINGCENTRAL_QUERY";
   NodeEnum2["runContainerScript"] = "RUN_CONTAINER_SCRIPT";
   NodeEnum2["runFunction"] = "RUN_FUNCTION";
   NodeEnum2["runTableSpaceQuery"] = "RUN_TABLE_SPACE_QUERY";
@@ -45319,7 +45321,7 @@ var automationNodeSchema = external_exports.lazy(
 var automationNodesSchema = external_exports.array(automationNodeSchema);
 var iterationStateSchema = external_exports.object({
   iteration: external_exports.number().int(),
-  iteratee: external_exports.any(),
+  iteratee: external_exports.any().nonoptional(),
   state: external_exports.lazy(() => automationStateSchema),
   /**
    * Set when a completed iteration's `state` is compacted to `{}` to keep the
@@ -60773,6 +60775,7 @@ var ID_PREFIXES = {
   knowledge_base: { prefix: "kb", body: 10 },
   knowledge_base_chunk: { prefix: "kbc", body: 20 },
   knowledge_base_document: { prefix: "kbd", body: 20 },
+  library: { prefix: "lib", body: 10 },
   mailbox: { prefix: "mbx", body: 10 },
   mailbox_address: { prefix: "mba", body: 10 },
   mailbox_message: { prefix: "mbm", body: 10 },
@@ -65132,7 +65135,7 @@ When a parent executes, it resolves to one of these handles. Child nodes only be
 To run an event node, call \`runAutomationNode\` with a \`eventPayload\` object whose fields match the event node's declared outputs:
 
 - **TIMER**: \`{ firedAt: "<ISO8601>", scheduledAt: "<ISO8601>" }\` \u2014 use current time for both when testing ad-hoc
-- **WEBHOOK**: \`{ payload: "<JSON string>", queryParams: {}, method: "POST", headers: { "Content-Type": "application/json" }, firedAt: "<ISO8601>" }\`
+- **WEBHOOK**: \`{ payload: { ... }, queryParams: {}, firedAt: "<ISO8601>" }\` \u2014 \`payload\` is the parsed request body (a JSON object, not a JSON string), matching a live run; use a raw string only to simulate an XML body
 - **EMAIL_RECEIVED**: \`{ from: "<email>", subject?: "<string>", text?: "<string>", html?: "<string>", headers?: {}, attachments?: [], firedAt: "<ISO8601>" }\`
 - **FILE_UPLOAD**: You **cannot** provide a file URL programmatically. Tell the user: "Please click the debug run button on the file upload event node and select a file. Once you've done that, I'll continue." Then wait for them to confirm before proceeding.
 
@@ -65730,6 +65733,45 @@ A function can email recipients when it breaks: the handler throws, times out, o
 `
 };
 
+// ../common/src/architectDocs/libraries.ts
+var librariesDoc = {
+  id: "libraries",
+  summary: "Libraries: reusable components and functions that v2 pages import as overai:<libraryId>, with a Preview export, versions and sharing.",
+  body: `
+## Libraries
+
+A Library is a workspace resource holding one TypeScript/TSX module. Pages on the v2 runtime import its named exports:
+
+\`\`\`tsx
+import { StatusBadge, formatMoney } from "overai:libxxxxxxxxxx";
+import { StatusBadge } from "overai:libxxxxxxxxxx@12"; // pinned to version 12
+\`\`\`
+
+An unpinned import gets the library's deployed version. Lint flags an import of a library this workspace can't import, an archived library, or a pin to a version that doesn't exist; such an import leaves the page showing "Couldn't load the page's imports". A page can load at most 50 libraries, counting the libraries they import. Deploying a new version reaches open pages through their "new version available" refresh prompt. Library ids are lowercase; write them that way in imports. Only v2 pages can import libraries.
+
+## Writing a library
+
+- Export what pages need by name. A default export is not importable.
+- \`Preview\` is reserved: export a component named \`Preview\` and it renders in the library's editor. Show each state and a usage example there. Pages never load it, so it costs them nothing.
+- A library is a real module, so import what it uses: \`import { useState } from "react";\`. The page globals (hooks, \`env\`, SDK helpers) are not in scope.
+- Imports may be \`react\`, \`react/jsx-runtime\`, \`react-dom\`, \`react-dom/client\`, \`superjson\`, \`@zumer/snapdom\`, other libraries (\`overai:<libraryId>\`) and https URLs (esm.sh). Anything else fails the build.
+- Take data as props and leave fetching to the page. The preview runs with no page data, and a component that fetches for itself is harder to reuse.
+- A build error is served as a module that throws it, so it appears in the console of any page importing the library.
+- To reuse a component a page already has, create a library, move the component into it with a \`Preview\`, deploy it, then replace the page's copy with an import.
+- A version that does not build is never deployed, by a save or by Deploy; fix the reported error and save again.
+
+## Versions and sharing
+
+Saving creates a version and Deploy points pages at it. A library's own \`overai:\` imports also resolve to deployed versions, so an unsaved or undeployed change in one library never reaches a deployed page through another.
+
+In the page editor's preview, the page's own library imports update on every edit, but the libraries those import keep the versions loaded when the preview opened. Reload the preview to pick up a newer deploy.
+
+A library is shared into child workspaces like a function. Builders there read its source and preview but cannot edit it. A shared library brings its own imports along: pages in the child load whatever the library imports from its owning workspace, without that being shared too. To import one of those directly, share it. Library code is visible to anyone who can import it: keep secrets in a function, never in a library.
+
+Archiving a library stops every deployed page and library that imports it from loading. \`setResourceArchived\` refuses at first and returns those importers; name them to the user, and call again with \`archiveDespiteImporters: true\` only if they still want it archived. Moving a library to another workspace warns the user about the same importers, since pages load a library only from the workspace that owns it or one it is shared into.
+`
+};
+
 // ../common/src/architectDocs/liquidTemplates.ts
 var liquidTemplatesDoc = {
   id: "liquidTemplates",
@@ -66600,7 +66642,7 @@ These populate the \`data\`/\`items\` globals once, at render start, from the ol
 2. **DO NOT import React or hooks.** React, useState, useEffect, useRef, useMemo, useCallback, and useReducer are all globally available. Importing them will cause errors.
 3. **The main component MUST be named \`App\` and MUST NOT be exported.** Write \`function App() { ... }\` \u2014 no \`export\`.
 4. **Use Tailwind CSS for styling.** It's built in.
-5. **Import external libraries from esm.sh.** Example: \`import confetti from "https://esm.sh/canvas-confetti@1.9.3"\`. Imports must be absolute https URLs \u2014 the sandbox cannot resolve bare or relative specifiers.
+5. **Import external libraries from esm.sh.** Example: \`import confetti from "https://esm.sh/canvas-confetti@1.9.3"\`. Imports must be absolute https URLs \u2014 bare and relative specifiers do not resolve. On the v2 runtime, also import your organization's libraries as \`overai:<libraryId>\` (read the \`libraries\` topic).
 6. **Sandbox restrictions (v1 runtime).** By default the page runs in a sandboxed iframe (allow-scripts only). Raw \`localStorage\`, \`sessionStorage\`, cookies, alert/confirm/prompt, and form submissions are blocked. Use \`useLocalStorageState\` / \`useSessionStorageState\` for storage (both require disabling the sandbox \u2014 see Rule 1). Set \`noSandbox: true\` to lift the sandbox, or \`runtime: "v2"\` (see Web Page Configuration) when the page also needs its own origin or browser devices.
 7. **Read code before editing.** Reading a large page's config returns its outline instead of the code \u2014 then read only the blocks or line ranges you are about to change. Edits return the changed lines, numbered, so don't re-read to verify. Prefer small, targeted edits \u2014 insert or search-replace \u2014 over rewriting a whole block.
 8. **Decompose large pages.** When a page exceeds ~200 lines, break it into multiple top-level function components (e.g., \`function DataTable() { ... }\` used inside \`function App() { ... }\`), so each can be read and edited on its own.
@@ -66667,7 +66709,7 @@ These libraries are tested and work from \`https://esm.sh/...\`. Do NOT import R
 
 ### Do NOT use libraries that depend on React
 
-An esm.sh build of a React library imports its own React (\`import "/react@>=16.8"\`), a second copy beside the page's global one, so every hook inside it fails with "Invalid hook call". The page has no import map to redirect that specifier, so there is no workaround. This rules out, among others:
+An esm.sh build of a React library imports its own React (\`import "/react@>=16.8"\`), a second copy beside the page's global one, so every hook inside it fails with "Invalid hook call". The page's import map does not cover that specifier, so there is no workaround. This rules out, among others:
 
 - **react-resize-detector** \u2014 Use a \`ResizeObserver\` hook instead (see pattern below).
 - **@tanstack/react-table** \u2014 Build tables with plain \`<table>\` + Tailwind + \`useState\` for sorting/filtering/pagination.
@@ -66752,13 +66794,13 @@ var workspacesDoc = {
 
 Workspaces serve as permission boundaries. By design, a builder (viewer, editor, manager) in one workspace is able to see ALL child workspaces. It is NOT guaranteed that a builder in one workspace has permissions to see the parents though.
 
-Resources (functions, tablespaces, integrations, agents, action runners) can be shared from one workspace to another, but ONLY from a parent to a direct child. This is done such that any builder is guaranteed to be able to see all usages of a resource in their workspace. This prevents issues where a builder makes a change and unintentionally breaks something.
+Resources (functions, tablespaces, integrations, agents, action runners, libraries) can be shared from one workspace to another, but ONLY from a parent to a direct child. This is done such that any builder is guaranteed to be able to see all usages of a resource in their workspace. This prevents issues where a builder makes a change and unintentionally breaks something.
 
 To share a resource, go to the Workspace Overview page, and then click "Resource sharing" (Managers only) in the top bar.
 
-Resources shared into a workspace appear in its Workspace Overview resource table alongside its own, each marked "Shared from <parent workspace>" ("Shared from another workspace" when the viewer can't see the parent), and the "Shared" filter chip narrows the table to them. They are read-only there: no action menu, no activity stats. A shared resource's name links to its page only when the viewer holds a builder role in the workspace that owns it; otherwise the row is listed but not clickable. To change or unshare it, a manager of the parent workspace uses "Resource sharing" there.
+Resources shared into a workspace appear in its Workspace Overview resource table alongside its own, each marked "Shared from <parent workspace>" ("Shared from another workspace" when the viewer can't see the parent), and the "Shared" filter chip narrows the table to them. They are read-only there: no action menu, no activity stats. A shared resource's name links to its page only when the viewer holds a builder role in the workspace that owns it; otherwise the row is listed but not clickable. A shared library is the exception: it always opens, read-only, viewed from the child workspace. To change or unshare it, a manager of the parent workspace uses "Resource sharing" there.
 
-An agent's tools (functions, tablespaces, sub-agents, knowledge bases) resolve from the agent's own workspace, never the caller's. Sharing an agent therefore lets the recipient use its tools through it without those tools being shared. Moving an agent to a workspace that can't reach a tool silently drops that tool at runtime; the agent page header shows "N tools unavailable" when this has happened. Fix it by sharing the tool into the agent's workspace or moving the tool, not by detaching it.
+An agent's tools (functions, tablespaces, sub-agents, knowledge bases) resolve from the agent's own workspace, never the caller's. Sharing an agent therefore lets the recipient use its tools through it without those tools being shared. A library's own imports work the same way: sharing a library brings what it imports along. Moving an agent to a workspace that can't reach a tool silently drops that tool at runtime; the agent page header shows "N tools unavailable" when this has happened. Fix it by sharing the tool into the agent's workspace or moving the tool, not by detaching it.
 
 Archived workspaces are hidden from the workspace tree but are not deleted. Archiving a workspace also archives its integrations, which deletes their credentials; restoring the workspace leaves them archived. Account admins can inventory every archived workspace from **All Workspaces \u2192 Show archived**. To restore one they manage, tell the user to right-click the workspace tree's root item, choose **View archived workspaces**, and then choose **Unarchive**.
 
@@ -66794,6 +66836,7 @@ var ARCHITECT_DOC_TOPICS = [
   automationExecutionRulesDoc,
   liquidTemplatesDoc,
   webPagesDoc,
+  librariesDoc,
   printablePagesDoc,
   functionsDoc,
   functionDebuggingDoc,
@@ -66918,12 +66961,34 @@ var runReview = async () => {
         );
       }
       if (resource.type === "webPage" && relPath.endsWith(".tsx")) {
+        const metaPath = resource.files.find(
+          (file2) => file2.endsWith(".meta.json")
+        );
+        const isV2 = iife(() => {
+          const meta3 = metaPath ? readWorkingFile(root, metaPath) : null;
+          const [parsed] = resultOfSync(
+            () => JSON.parse(meta3 ?? "{}")
+          );
+          return typeof parsed === "object" && parsed !== null && "runtime" in parsed && parsed.runtime === "v2";
+        });
         const importRe = /^\s*import\s+(?:[^'"\n]*?\bfrom\s+)?["']([^"']+)["']/gm;
         for (const match of content.matchAll(importRe)) {
           const specifier = match[1];
           if (specifier == null || specifier.startsWith("https://")) continue;
+          const library = /^overai:([^@]*)(?:@([0-9]+))?$/i.exec(specifier);
+          if (library) {
+            if (!isIdOf("library", library[1]))
+              findings2.push(
+                `${relPath}: imports "${specifier}" \u2014 not a library id; copy the import line from the library's page (overai:lib followed by 10 characters).`
+              );
+            else if (!isV2)
+              findings2.push(
+                `${relPath}: imports "${specifier}" \u2014 libraries load only on the v2 runtime; set "runtime": "v2" in ${metaPath ?? "the page's meta.json"}.`
+              );
+            continue;
+          }
           findings2.push(
-            /^react(-dom)?(\/|$)/.test(specifier) ? `${relPath}: imports "${specifier}" \u2014 React and its hooks are already in scope; remove the import or the page renders blank.` : `${relPath}: imports "${specifier}" \u2014 the page sandbox can only import https URLs (use https://esm.sh/...).`
+            /^react(-dom)?(\/|$)/.test(specifier) ? `${relPath}: imports "${specifier}" \u2014 React and its hooks are already in scope; remove the import or the page renders blank.` : `${relPath}: imports "${specifier}" \u2014 pages import https URLs (use https://esm.sh/...) or, on the v2 runtime, libraries as overai:<libraryId>.`
           );
         }
         if (/^\s*export\s+default\b/m.test(content)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@overaihq/cli",
-  "version": "0.14.14",
+  "version": "0.14.15",
   "description": "Create, edit, deploy, and run OverAI workspace resources from the command line",
   "type": "module",
   "homepage": "https://overai.com",