@tonbo/cli 0.3.2 → 0.3.4

package/README.md

@@ -207,7 +207,8 @@ Machines belong to an Account independently of Agents. Allocate in `us-east-1`,
 
 ```console
 tonbo --json region list
-tonbo --json machine allocate --account <account-uuid> --region us-east-1
+tonbo --json machine allocate --account <account-uuid> --region us-east-1 --request-id <request-uuid>
+tonbo --json machine allocation <request-uuid> --account <account-uuid>
 tonbo --json machine list --account <account-uuid>
 tonbo --json machine bind <machine-uuid> --agent <agent-uuid>
 tonbo --json machine show <machine-uuid>
@@ -219,3 +220,5 @@ tonbo --json machine release <machine-uuid>
 Only one active Agent binding per Machine and one Machine per Agent are currently supported. Unbinding drains execution and completes physical deletion, final usage settlement and storage credential revocation before the Machine becomes available. Wait for `available: true` in `machine show` before rebinding. Cross-Agent reassignment resets rootfs; the destination mounts its own Agent Workspace and Sessions. Hidden pause/resume within the same Agent retains rootfs and process state. Release also drains an existing binding automatically; it does not delete Agent files or Sessions.
 
 `tonbo agent list` lists accessible Agents without requiring a local `.tonbo` file. JSON command output uses `agent` for one Agent and `agents` for the list; there is no duplicate `agent` output alias.
+
+Persist the allocation request UUID before sending when automating. Reuse it with the same account and region after a lost response; lookup returns the original Machine even after release. Omitting `--request-id` generates one, included in the success output or retry error.

package/dist/bin/tonbo.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 
 // src/app.ts
+import { randomUUID as randomUUID5 } from "node:crypto";
 import { Command } from "commander";
 import { readFileSync } from "node:fs";
 
@@ -523,6 +524,9 @@ var TonboApi = class {
     this.accountOrigin = accountOrigin;
     this.managementOrigin = managementOrigin;
   }
+  cancelActivities(agentId, token, body) {
+    return this.management("POST", `/v1/agents/${agentId}/production/cancellations`, token, body);
+  }
   async listRegions(oauthToken) {
     return parseRegionDiscovery(
       await requestJson(this.fetcher, `${this.accountOrigin}/api/cli/regions`, {
@@ -558,7 +562,7 @@ var TonboApi = class {
       }
     ).then((body) => body.organizations);
   }
-  createAgent(oauthToken, name, organizationId) {
+  createAgent(oauthToken, name, organizationId, requestId = randomUUID()) {
     return requestJson(
       this.fetcher,
       `${this.accountOrigin}/api/cli/agents`,
@@ -568,9 +572,28 @@ var TonboApi = class {
           authorization: `Bearer ${oauthToken}`,
           "content-type": "application/json"
         },
-        body: JSON.stringify(organizationId ? { name, orgId: organizationId } : { name })
+        body: JSON.stringify({
+          name,
+          requestId,
+          ...organizationId ? { orgId: organizationId } : {}
+        })
       }
-    ).then((body) => body.agent);
+    ).then((body) => body.agent).catch((cause) => {
+      if (cause instanceof Error && "status" in cause && typeof cause.status === "number" && cause.status >= 400 && cause.status < 500)
+        throw cause;
+      throw new Error(
+        `Agent creation was not confirmed. Query \`tonbo agent creation ${requestId}${organizationId ? ` --account ${organizationId}` : ""}\` or retry creation with --request-id ${requestId} and the same name and account.`,
+        { cause }
+      );
+    });
+  }
+  readAgentCreationRequest(oauthToken, requestId, accountId) {
+    const account = accountId ? `?account=${encodeURIComponent(accountId)}` : "";
+    return requestJson(
+      this.fetcher,
+      `${this.accountOrigin}/api/cli/agents/creations/${encodeURIComponent(requestId)}${account}`,
+      { headers: { authorization: `Bearer ${oauthToken}` } }
+    );
   }
   registerSshKey(oauthToken, key) {
     return requestJson(
@@ -1256,8 +1279,9 @@ async function openBrowser(url) {
 
 // ../../packages/agent-source-bundler/dist/src/generated/contracts.js
 var inferenceDefault = { "model": "claude-sonnet-5" };
-var sourceBundleContract = { "version": 1, "format": "tar-v1", "key_prefix": "agent-source-bundles", "content_type": "application/vnd.tonbo.source+tar", "max_bytes": 67108864 };
+var sourceBundleContract = { "version": 1, "format": "tar-v1", "key_prefix": "agent-source-bundles", "content_type": "application/vnd.tonbo.source+tar", "max_bytes": 67108864, "runtime_cache_directories": [".pi/npm", ".pi/git"] };
 var piSessionContract = { "version": 1, "adapter": "pi-jsonl-v3", "format_version": 3, "durable_completion_timeout_seconds": 30, "turn_claim_seconds": 30, "turn_claim_renew_seconds": 10, "session_directory": "/sessions", "path_template": "/sessions/{session_id}.jsonl", "preflight_command": ["/usr/local/bin/artifacts", "runtime", "session-preflight"] };
+var piSlackTemplate = { "repository": "tonbo-io/pi-slack-agent", "source_directory": "examples/pi-slack-agent", "service": { "command": ["node", "slack/server.mjs"], "secrets": ["SLACK_SIGNING_SECRET", "SLACK_BOT_TOKEN", "SLACK_BOT_USER_ID", "SLACK_TEAM_ID", "TONBO_AGENT_API_KEY", "TONBO_AGENT_API_ORIGIN", "TONBO_IAM_ORIGIN"] } };
 
 // ../../packages/agent-source-bundler/dist/src/inference-default.js
 var DEFAULT_INFERENCE_MODEL = inferenceDefault.model;
@@ -1292,6 +1316,7 @@ function githubRepositoryUrl(remote) {
 
 // src/commands.ts
 import path4 from "node:path";
+import { randomUUID as randomUUID3 } from "node:crypto";
 
 // src/build.ts
 import { spawn } from "node:child_process";
@@ -1320,11 +1345,13 @@ async function runBuildCommand(root, command) {
 
 // ../../packages/agent-source-bundler/dist/src/native-pi.js
 import { stringify } from "smol-toml";
-function nativePiDeclaration(model) {
+var PI_SLACK_TEMPLATE_SERVICE = piSlackTemplate.service;
+function nativePiDeclaration(model, service) {
   return {
     version: 2,
     harness: { runtime: "pi", driver: { kind: "native" } },
-    inference: { model }
+    inference: { model },
+    ...service ? { service } : {}
   };
 }
 
@@ -1446,8 +1473,7 @@ var DEFAULT_IGNORES = [
   "!.env.example",
   ".tonbo-cache/",
   ".tonbo-system/",
-  ".pi/npm/",
-  ".pi/git/"
+  ...sourceBundleContract.runtime_cache_directories.map((directory) => `${directory}/`)
 ];
 var EXACT_NPM_VERSION = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/;
 var GIT_COMMIT = /^[0-9a-f]{40}$/i;
@@ -2129,7 +2155,7 @@ async function agentUseCommand(deps, selector, force = false) {
   await bindDeclarationAgent(root, agent.publicHostname);
   deps.output({ message: `Bound .tonbo to agent ${agent.publicHostname}.`, agent });
 }
-async function agentCreateCommand(deps, name) {
+async function agentCreateCommand(deps, name, options = {}) {
   const root = await findDeclarationRoot(deps.cwd());
   const declaration = await loadDeclaration(root);
   if (declaration.agent) {
@@ -2139,7 +2165,8 @@ async function agentCreateCommand(deps, name) {
   }
   const oauthToken = await deps.auth.accessToken();
   validateAgentName(name);
-  const agent = await deps.api.createAgent(oauthToken, name);
+  const requestId = options.requestId ?? randomUUID3();
+  const agent = await deps.api.createAgent(oauthToken, name, options.account, requestId);
   try {
     await bindDeclarationAgent(root, agent.publicHostname);
   } catch (error) {
@@ -2148,7 +2175,11 @@ async function agentCreateCommand(deps, name) {
       { cause: error }
     );
   }
-  deps.output({ message: `Created agent ${agent.name} and bound it in .tonbo.`, agent });
+  deps.output({
+    message: `Created agent ${agent.name} and bound it in .tonbo.`,
+    agent,
+    requestId
+  });
 }
 async function deployCommand(deps, options = { promote: true }) {
   const { declaration, oauthToken, agent, root } = await resolveAgent(deps);
@@ -2440,9 +2471,23 @@ async function secretRemoveCommand(deps, name) {
   await deps.api.deleteAgentSecret(agent.id, name, token);
   deps.output({ message: `Removed agent secret ${name}.`, agent, name });
 }
+async function cancelActivitiesCommand(deps, options) {
+  const { oauthToken, agent } = await resolveAgent(deps);
+  const token = await deps.api.exchangeManagementToken(oauthToken, agent.id);
+  const result = await deps.api.cancelActivities(agent.id, token, {
+    sandbox_id: options.sandbox,
+    runtime_session_id: options.runtimeSession,
+    work_keys: options.workKey,
+    reason: options.reason
+  });
+  deps.output({
+    message: "Activity cancellation requested. Physical retirement and application checkpoint cancellation must still be verified.",
+    cancellation: result
+  });
+}
 
 // src/credentials.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 import { chmod, lstat as lstat4, mkdir, open as open2, readFile as readFile5, rename as rename2, rm as rm2 } from "node:fs/promises";
 import os from "node:os";
 import path5 from "node:path";
@@ -2473,7 +2518,7 @@ var FileCredentialStore = class {
     await assertExistingDestinationIsSafe(this.filename);
     const temporary = path5.join(
       directory,
-      `.${path5.basename(this.filename)}.${process.pid}.${randomUUID3()}.tmp`
+      `.${path5.basename(this.filename)}.${process.pid}.${randomUUID4()}.tmp`
     );
     let handle = null;
     try {
@@ -2719,13 +2764,33 @@ function createProgram(dependencies = createDependencies) {
       )
     );
   });
-  machine.command("allocate").requiredOption("--account <account>", "owning account UUID").requiredOption("--region <region>", "compute region (see tonbo region list)").action(async (options) => {
+  machine.command("allocate").requiredOption("--account <account>", "owning account UUID").requiredOption("--region <region>", "compute region (see tonbo region list)").option(
+    "--request-id <uuid>",
+    "stable allocation request UUID; reuse it after an uncertain response"
+  ).action(async (options) => {
     const deps = dependencies(jsonOutput(program));
-    deps.output(
-      await deps.api.machineRequest(await deps.auth.accessToken(), "", "POST", {
+    const requestId = options.requestId ?? randomUUID5();
+    try {
+      const result = await deps.api.machineRequest(await deps.auth.accessToken(), "", "POST", {
         accountId: options.account,
-        region: options.region
-      })
+        region: options.region,
+        requestId
+      });
+      deps.output({ ...result, requestId });
+    } catch (cause) {
+      throw new Error(
+        `Machine allocation was not confirmed. Retry with --request-id ${requestId} and the same account and region.`,
+        { cause }
+      );
+    }
+  });
+  machine.command("allocation <requestId>").description("query the original Machine for an allocation request").requiredOption("--account <account>", "owning account UUID").action(async (requestId, options) => {
+    const deps = dependencies(jsonOutput(program));
+    deps.output(
+      await deps.api.machineRequest(
+        await deps.auth.accessToken(),
+        `/allocations/${encodeURIComponent(requestId)}?account=${encodeURIComponent(options.account)}`
+      )
     );
   });
   for (const operation of ["show", "metrics", "release"]) {
@@ -2765,7 +2830,19 @@ function createProgram(dependencies = createDependencies) {
     );
   });
   const agent = program.command("agent").description("manage the Agent bound to this source directory");
-  agent.command("create <name>").description("create an agent and bind this directory to it").action(async (name) => agentCreateCommand(dependencies(jsonOutput(program)), name));
+  agent.command("create <name>").description("create an agent and bind this directory to it").option("--account <account>", "owning account UUID; defaults to your personal account").option("--request-id <uuid>", "reuse the same creation UUID after an uncertain response").action(
+    async (name, options) => agentCreateCommand(dependencies(jsonOutput(program)), name, options)
+  );
+  agent.command("creation <requestId>").description("query the original Agent for a creation request").option("--account <account>", "owning account UUID; defaults to your personal account").action(async (requestId, options) => {
+    const deps = dependencies(jsonOutput(program));
+    deps.output(
+      await deps.api.readAgentCreationRequest(
+        await deps.auth.accessToken(),
+        requestId,
+        options.account
+      )
+    );
+  });
   agent.command("list").description("list the agents available to your account").action(async () => agentListCommand(dependencies(jsonOutput(program))));
   const sshKey = program.command("ssh-key").description("manage public keys used by native agent SSH");
   sshKey.command("add <public-key>").description("register an OpenSSH public key with the current Tonbo account").action(async (path6) => sshKeyAddCommand(dependencies(jsonOutput(program)), path6));
@@ -2787,6 +2864,9 @@ function createProgram(dependencies = createDependencies) {
   deployments.command("promote <deployment>").description("move Production to a Deployment by id prefix").action(
     async (prefix) => deploymentsPromoteCommand(dependencies(jsonOutput(program)), prefix)
   );
+  deployments.command("cancel-activities").description("cancel selected named work on an exact retired runtime").requiredOption("--sandbox <id>", "retired Sandbox UUID").requiredOption("--runtime-session <id>", "exact activation UUID").requiredOption("--work-key <keys...>", "named work keys to cancel").requiredOption("--reason <reason>", "reason retained in the cancellation audit").action(
+    async (options) => cancelActivitiesCommand(dependencies(jsonOutput(program)), options)
+  );
   deployments.command("rollback [deployment]").description("move Production back to the previous Production Deployment, or to a named one").action(
     async (prefix) => deploymentsRollbackCommand(dependencies(jsonOutput(program)), prefix)
   );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tonbo/cli",
-  "version": "0.3.2",
+  "version": "0.3.4",
   "description": "Deploy persistent Agents and manage their Machines from the command line.",
   "homepage": "https://tonbo.dev",
   "bugs": {