@stigmer/cli 3.38.2 → 3.39.0

package/commands/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/commands/bootstrap.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAQxD"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/commands/bootstrap.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAMzC,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAQxD"}

package/commands/bootstrap.js

@@ -7,9 +7,13 @@
 // one instead (`stigmer config context set --org`) and needs no bootstrap.
 //
 // Flagless on purpose: the act is idempotent, so there is nothing to force;
-// a second run changes nothing and says so. It never deletes anything.
+// a second run changes nothing and says so. It never deletes anything. When
+// the default organization was deleted, its slug is never reused and the
+// backend cannot be made ready under it: the verb fails, naming how to
+// choose another organization.
 // Heavy modules load lazily inside the action so `--help` stays fast.
 import { DEFAULT_LOCAL_ORG, ensureAuthenticated } from "../config/index.js";
+import { CliExitError, ExitCode } from "../errors/index.js";
 import { CommandResult, renderResult } from "../output/index.js";
 import { addResultFlags, resultFormat } from "./shared.js";
 export function registerBootstrap(program) {
@@ -20,13 +24,16 @@ export function registerBootstrap(program) {
     addResultFlags(bootstrap);
 }
 async function runBootstrapCommand(flags) {
-    const [{ connectBackend }, { bootstrapBackend }] = await Promise.all([
+    const [{ connectBackend }, { bootstrapBackend, RESERVED_DEFAULT_ORG_HINTS, RESERVED_DEFAULT_ORG_MESSAGE },] = await Promise.all([
         import("../backend.js"),
         import("../local/bootstrap.js"),
     ]);
     const client = connectBackend();
     ensureAuthenticated(client.config);
     const state = await bootstrapBackend(client.stigmer);
+    if (state === "reserved") {
+        throw new CliExitError(RESERVED_DEFAULT_ORG_MESSAGE, ExitCode.Usage, RESERVED_DEFAULT_ORG_HINTS);
+    }
     const out = CommandResult.success("Backend is ready");
     out.addSection("Organization").field("Slug", DEFAULT_LOCAL_ORG).field("State", state);
     renderResult(out, resultFormat(flags));

package/commands/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/commands/bootstrap.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,uEAAuE;AACvE,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,4EAA4E;AAC5E,uEAAuE;AACvE,sEAAsE;AAGtE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAoB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,SAAS,GAAG,OAAO;SACtB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,4FAA4F,CAC7F;SACA,MAAM,CAAC,CAAC,OAAoB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,cAAc,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAAkB;IACnD,MAAM,CAAC,EAAE,cAAc,EAAE,EAAE,EAAE,gBAAgB,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACnE,MAAM,CAAC,eAAe,CAAC;QACvB,MAAM,CAAC,uBAAuB,CAAC;KAChC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAErD,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtD,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtF,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/commands/bootstrap.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,uEAAuE;AACvE,4EAA4E;AAC5E,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,EAAE;AACF,4EAA4E;AAC5E,4EAA4E;AAC5E,yEAAyE;AACzE,uEAAuE;AACvE,+BAA+B;AAC/B,sEAAsE;AAGtE,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAoB,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3D,MAAM,UAAU,iBAAiB,CAAC,OAAgB;IAChD,MAAM,SAAS,GAAG,OAAO;SACtB,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,4FAA4F,CAC7F;SACA,MAAM,CAAC,CAAC,OAAoB,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;IAClE,cAAc,CAAC,SAAS,CAAC,CAAC;AAC5B,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,KAAkB;IACnD,MAAM,CACJ,EAAE,cAAc,EAAE,EAClB,EAAE,gBAAgB,EAAE,0BAA0B,EAAE,4BAA4B,EAAE,EAC/E,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QACpB,MAAM,CAAC,eAAe,CAAC;QACvB,MAAM,CAAC,uBAAuB,CAAC;KAChC,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAEnC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACtD,GAAG,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtF,YAAY,CAAC,GAAG,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/local/bootstrap.d.ts

@@ -1,7 +1,11 @@
 import { type Stigmer } from "@stigmer/sdk";
 import type { BackendClient } from "../client/index.js";
 export type Say = (line: string) => void;
-export type BootstrapOutcome = "present" | "created";
+export type BootstrapOutcome = "present" | "created" | "reserved";
+/** What the CLI says when the default organization was deleted and its slug is reserved. */
+export declare const RESERVED_DEFAULT_ORG_MESSAGE = "The 'stigmer' organization was deleted, and an organization's slug is never reused, so it cannot be created again.";
+/** How to choose another organization, in the order the CLI resolves one (config/resolve.ts). */
+export declare const RESERVED_DEFAULT_ORG_HINTS: readonly string[];
 /**
  * Make sure the organization the CLI falls back to exists on the backend
  * `stigmer` is bound to: what `stigmer bootstrap` runs. Idempotent; a lost

package/local/bootstrap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/local/bootstrap.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAE,KAAK,OAAO,EAAgB,MAAM,cAAc,CAAC;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIxD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEzC,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,CAAC;AAErD;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAsBlF;AAED,oHAAoH;AACpH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACnB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACtE;AAMD,+FAA+F;AAC/F,wBAAsB,qBAAqB,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAcnF"}
+{"version":3,"file":"bootstrap.d.ts","sourceRoot":"","sources":["../src/local/bootstrap.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAkB,KAAK,OAAO,EAAgB,MAAM,cAAc,CAAC;AAC1E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAIxD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEzC,MAAM,MAAM,gBAAgB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,CAAC;AAQlE,4FAA4F;AAC5F,eAAO,MAAM,4BAA4B,uHAAoI,CAAC;AAE9K,iGAAiG;AACjG,eAAO,MAAM,0BAA0B,EAAE,SAAS,MAAM,EAKvD,CAAC;AAEF;;;;GAIG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAwBlF;AAED,oHAAoH;AACpH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC;IACnB,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACtE;AAMD,+FAA+F;AAC/F,wBAAsB,qBAAqB,CAAC,IAAI,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAkBnF"}

package/local/bootstrap.js

@@ -13,6 +13,14 @@
 // other refusal propagates with the server's sentence; the caller decides
 // how loud to be.
 //
+// One `already-exists` is not that race. An organization's slug is never
+// reused, so once `stigmer` has been deleted no create can take it again,
+// and the server says so with the ORGANIZATION_SLUG_RESERVED reason. That
+// is `reserved`: the default organization is gone for good, and the person
+// must name another (RESERVED_DEFAULT_ORG_HINTS says how). Reporting it as
+// `present` would leave every command that falls back to `stigmer` failing
+// with no explanation.
+//
 // The create carries no label. Writing a label in the reserved `stigmer.ai/`
 // namespace needs a platform permission that a self-hosted server with
 // authentication on grants to nobody, and nothing reads one on an
@@ -28,9 +36,23 @@
 // client is pinned to a fresh local config (localhost:SERVER_PORT) with no
 // auth, the trusted-local identity.
 import { ManagementMode } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/enum_pb";
-import { StigmerError } from "@stigmer/sdk";
+import { getErrorReason, StigmerError } from "@stigmer/sdk";
 import { DEFAULT_LOCAL_ORG } from "../config/resolve.js";
 import { log } from "../logger.js";
+/**
+ * The refusal reason of a create whose slug a deleted organization held
+ * (OrganizationCommandController.create's contract): a slug is never reused.
+ */
+const REASON_ORGANIZATION_SLUG_RESERVED = "ORGANIZATION_SLUG_RESERVED";
+/** What the CLI says when the default organization was deleted and its slug is reserved. */
+export const RESERVED_DEFAULT_ORG_MESSAGE = `The '${DEFAULT_LOCAL_ORG}' organization was deleted, and an organization's slug is never reused, so it cannot be created again.`;
+/** How to choose another organization, in the order the CLI resolves one (config/resolve.ts). */
+export const RESERVED_DEFAULT_ORG_HINTS = [
+    "Name the organization to use, in any of these ways:",
+    "  --org <slug> on a command",
+    "  STIGMER_ORG_ID=<slug> in the environment",
+    "  stigmer config context set --org <slug>",
+];
 /**
  * Make sure the organization the CLI falls back to exists on the backend
  * `stigmer` is bound to: what `stigmer bootstrap` runs. Idempotent; a lost
@@ -55,7 +77,9 @@ export async function bootstrapBackend(stigmer) {
     }
     catch (error) {
         if (error instanceof StigmerError && error.code === "already-exists") {
-            return "present";
+            return getErrorReason(error)?.reason === REASON_ORGANIZATION_SLUG_RESERVED
+                ? "reserved"
+                : "present";
         }
         throw error;
     }
@@ -79,6 +103,11 @@ export async function bootstrapLocalBackend(deps = {}) {
     log.debug("bootstrap complete", { org: outcome });
     if (outcome === "created")
         say(`Created the '${DEFAULT_LOCAL_ORG}' organization`);
+    if (outcome === "reserved") {
+        say(`Warning: ${RESERVED_DEFAULT_ORG_MESSAGE}`);
+        for (const hint of RESERVED_DEFAULT_ORG_HINTS)
+            say(hint);
+    }
 }
 async function freshLocalClient() {
     const [{ createBackendClient }, { getDefault }] = await Promise.all([

package/local/bootstrap.js.map

@@ -1 +1 @@
-{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/local/bootstrap.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,sBAAsB;AACtB,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,kBAAkB;AAClB,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,kEAAkE;AAClE,2EAA2E;AAC3E,mEAAmE;AACnE,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,oCAAoC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AAC5F,OAAO,EAAgB,YAAY,EAAE,MAAM,cAAc,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAMnC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB;IACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YAChC,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,iBAAiB;YACtB,WAAW,EAAE,0DAA0D;YACvE,cAAc,EAAE,cAAc,CAAC,YAAY;SAC5C,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AASD,MAAM,WAAW,GAAQ,CAAC,IAAI,EAAE,EAAE;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAsB,EAAE;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC;IAEpC,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,kFAAkF,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,iBAAiB,gBAAgB,CAAC,CAAC;AACpF,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClE,MAAM,CAAC,oBAAoB,CAAC;QAC5B,MAAM,CAAC,qBAAqB,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC;QACzB,MAAM,EAAE,UAAU,EAAE;QACpB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;KAC3B,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"bootstrap.js","sourceRoot":"","sources":["../src/local/bootstrap.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,wEAAwE;AACxE,0EAA0E;AAC1E,4EAA4E;AAC5E,6EAA6E;AAC7E,4EAA4E;AAC5E,4EAA4E;AAC5E,sBAAsB;AACtB,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,kBAAkB;AAClB,EAAE;AACF,yEAAyE;AACzE,0EAA0E;AAC1E,0EAA0E;AAC1E,2EAA2E;AAC3E,2EAA2E;AAC3E,2EAA2E;AAC3E,uBAAuB;AACvB,EAAE;AACF,6EAA6E;AAC7E,uEAAuE;AACvE,kEAAkE;AAClE,2EAA2E;AAC3E,mEAAmE;AACnE,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,2EAA2E;AAC3E,4EAA4E;AAC5E,2EAA2E;AAC3E,oCAAoC;AAEpC,OAAO,EAAE,cAAc,EAAE,MAAM,4DAA4D,CAAC;AAC5F,OAAO,EAAE,cAAc,EAAgB,YAAY,EAAE,MAAM,cAAc,CAAC;AAE1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,OAAO,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAMnC;;;GAGG;AACH,MAAM,iCAAiC,GAAG,4BAA4B,CAAC;AAEvE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,4BAA4B,GAAG,QAAQ,iBAAiB,wGAAwG,CAAC;AAE9K,iGAAiG;AACjG,MAAM,CAAC,MAAM,0BAA0B,GAAsB;IAC3D,qDAAqD;IACrD,6BAA6B;IAC7B,4CAA4C;IAC5C,2CAA2C;CAC5C,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAgB;IACrD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,mBAAmB,EAAE,CAAC;IAC9D,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,KAAK,iBAAiB,CAAC,EAAE,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC;QACH,uEAAuE;QACvE,gEAAgE;QAChE,MAAM,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC;YAChC,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,iBAAiB;YACvB,GAAG,EAAE,iBAAiB;YACtB,WAAW,EAAE,0DAA0D;YACvE,cAAc,EAAE,cAAc,CAAC,YAAY;SAC5C,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACrE,OAAO,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,KAAK,iCAAiC;gBACxE,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS,CAAC;QAChB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AASD,MAAM,WAAW,GAAQ,CAAC,IAAI,EAAE,EAAE;IAChC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC;AACpC,CAAC,CAAC;AAEF,+FAA+F;AAC/F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAsB,EAAE;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,WAAW,CAAC;IAEpC,IAAI,OAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,GAAG,CAAC,kFAAkF,CAAC,CAAC;QACxF,OAAO;IACT,CAAC;IACD,GAAG,CAAC,KAAK,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IAClD,IAAI,OAAO,KAAK,SAAS;QAAE,GAAG,CAAC,gBAAgB,iBAAiB,gBAAgB,CAAC,CAAC;IAClF,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;QAC3B,GAAG,CAAC,YAAY,4BAA4B,EAAE,CAAC,CAAC;QAChD,KAAK,MAAM,IAAI,IAAI,0BAA0B;YAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3D,CAAC;AACH,CAAC;AAED,KAAK,UAAU,gBAAgB;IAC7B,MAAM,CAAC,EAAE,mBAAmB,EAAE,EAAE,EAAE,UAAU,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAClE,MAAM,CAAC,oBAAoB,CAAC;QAC5B,MAAM,CAAC,qBAAqB,CAAC;KAC9B,CAAC,CAAC;IACH,OAAO,mBAAmB,CAAC;QACzB,MAAM,EAAE,UAAU,EAAE;QACpB,cAAc,EAAE,GAAG,EAAE,CAAC,IAAI;KAC3B,CAAC,CAAC;AACL,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stigmer/cli",
-  "version": "3.38.2",
+  "version": "3.39.0",
   "description": "Stigmer command-line interface — manage agents, workflows, MCP servers, skills, and executions from the terminal",
   "license": "Apache-2.0",
   "type": "module",
@@ -35,12 +35,12 @@
     "@connectrpc/connect": "^2.0.0",
     "@connectrpc/connect-node": "^2.1.1",
     "@modelcontextprotocol/sdk": "^1.26.0",
-    "@stigmer/ink": "3.38.2",
-    "@stigmer/mcp-server": "3.38.2",
-    "@stigmer/plugin-package": "3.38.2",
-    "@stigmer/protos": "3.38.2",
-    "@stigmer/sdk": "3.38.2",
-    "@stigmer/zip-structure": "3.38.2",
+    "@stigmer/ink": "3.39.0",
+    "@stigmer/mcp-server": "3.39.0",
+    "@stigmer/plugin-package": "3.39.0",
+    "@stigmer/protos": "3.39.0",
+    "@stigmer/sdk": "3.39.0",
+    "@stigmer/zip-structure": "3.39.0",
     "commander": "^12.1.0",
     "fflate": "^0.8.3",
     "ink": "^7.0.0",

package/src/commands/bootstrap.ts

@@ -7,11 +7,15 @@
 // one instead (`stigmer config context set --org`) and needs no bootstrap.
 //
 // Flagless on purpose: the act is idempotent, so there is nothing to force;
-// a second run changes nothing and says so. It never deletes anything.
+// a second run changes nothing and says so. It never deletes anything. When
+// the default organization was deleted, its slug is never reused and the
+// backend cannot be made ready under it: the verb fails, naming how to
+// choose another organization.
 // Heavy modules load lazily inside the action so `--help` stays fast.
 
 import type { Command } from "commander";
 import { DEFAULT_LOCAL_ORG, ensureAuthenticated } from "../config/index.js";
+import { CliExitError, ExitCode } from "../errors/index.js";
 import { CommandResult, type OutputFlags, renderResult } from "../output/index.js";
 import { addResultFlags, resultFormat } from "./shared.js";
 
@@ -26,7 +30,10 @@ export function registerBootstrap(program: Command): void {
 }
 
 async function runBootstrapCommand(flags: OutputFlags): Promise<void> {
-  const [{ connectBackend }, { bootstrapBackend }] = await Promise.all([
+  const [
+    { connectBackend },
+    { bootstrapBackend, RESERVED_DEFAULT_ORG_HINTS, RESERVED_DEFAULT_ORG_MESSAGE },
+  ] = await Promise.all([
     import("../backend.js"),
     import("../local/bootstrap.js"),
   ]);
@@ -35,6 +42,9 @@ async function runBootstrapCommand(flags: OutputFlags): Promise<void> {
   ensureAuthenticated(client.config);
 
   const state = await bootstrapBackend(client.stigmer);
+  if (state === "reserved") {
+    throw new CliExitError(RESERVED_DEFAULT_ORG_MESSAGE, ExitCode.Usage, RESERVED_DEFAULT_ORG_HINTS);
+  }
 
   const out = CommandResult.success("Backend is ready");
   out.addSection("Organization").field("Slug", DEFAULT_LOCAL_ORG).field("State", state);

package/src/local/bootstrap.ts

@@ -13,6 +13,14 @@
 // other refusal propagates with the server's sentence; the caller decides
 // how loud to be.
 //
+// One `already-exists` is not that race. An organization's slug is never
+// reused, so once `stigmer` has been deleted no create can take it again,
+// and the server says so with the ORGANIZATION_SLUG_RESERVED reason. That
+// is `reserved`: the default organization is gone for good, and the person
+// must name another (RESERVED_DEFAULT_ORG_HINTS says how). Reporting it as
+// `present` would leave every command that falls back to `stigmer` failing
+// with no explanation.
+//
 // The create carries no label. Writing a label in the reserved `stigmer.ai/`
 // namespace needs a platform permission that a self-hosted server with
 // authentication on grants to nobody, and nothing reads one on an
@@ -29,14 +37,31 @@
 // auth, the trusted-local identity.
 
 import { ManagementMode } from "@stigmer/protos/ai/stigmer/tenancy/organization/v1/enum_pb";
-import { type Stigmer, StigmerError } from "@stigmer/sdk";
+import { getErrorReason, type Stigmer, StigmerError } from "@stigmer/sdk";
 import type { BackendClient } from "../client/index.js";
 import { DEFAULT_LOCAL_ORG } from "../config/resolve.js";
 import { log } from "../logger.js";
 
 export type Say = (line: string) => void;
 
-export type BootstrapOutcome = "present" | "created";
+export type BootstrapOutcome = "present" | "created" | "reserved";
+
+/**
+ * The refusal reason of a create whose slug a deleted organization held
+ * (OrganizationCommandController.create's contract): a slug is never reused.
+ */
+const REASON_ORGANIZATION_SLUG_RESERVED = "ORGANIZATION_SLUG_RESERVED";
+
+/** What the CLI says when the default organization was deleted and its slug is reserved. */
+export const RESERVED_DEFAULT_ORG_MESSAGE = `The '${DEFAULT_LOCAL_ORG}' organization was deleted, and an organization's slug is never reused, so it cannot be created again.`;
+
+/** How to choose another organization, in the order the CLI resolves one (config/resolve.ts). */
+export const RESERVED_DEFAULT_ORG_HINTS: readonly string[] = [
+  "Name the organization to use, in any of these ways:",
+  "  --org <slug> on a command",
+  "  STIGMER_ORG_ID=<slug> in the environment",
+  "  stigmer config context set --org <slug>",
+];
 
 /**
  * Make sure the organization the CLI falls back to exists on the backend
@@ -61,7 +86,9 @@ export async function bootstrapBackend(stigmer: Stigmer): Promise<BootstrapOutco
     return "created";
   } catch (error) {
     if (error instanceof StigmerError && error.code === "already-exists") {
-      return "present";
+      return getErrorReason(error)?.reason === REASON_ORGANIZATION_SLUG_RESERVED
+        ? "reserved"
+        : "present";
     }
     throw error;
   }
@@ -93,6 +120,10 @@ export async function bootstrapLocalBackend(deps: BootstrapDeps = {}): Promise<v
   }
   log.debug("bootstrap complete", { org: outcome });
   if (outcome === "created") say(`Created the '${DEFAULT_LOCAL_ORG}' organization`);
+  if (outcome === "reserved") {
+    say(`Warning: ${RESERVED_DEFAULT_ORG_MESSAGE}`);
+    for (const hint of RESERVED_DEFAULT_ORG_HINTS) say(hint);
+  }
 }
 
 async function freshLocalClient(): Promise<BackendClient> {