moodle-cli 0.7.0-alpha.0 → 0.7.0-alpha.2

package/README.md

@@ -174,7 +174,7 @@ moodle mcp bridge
 
 The default client connection uses `moodle mcp bridge`, which keeps the Bearer token out of client configuration. Use `moodle mcp connect CLIENT --mode remote` for clients that support authenticated remote MCP headers.
 
-Alpha version `0.7.0-alpha.0` supports MCP `2026-07-28` and a stateless compatibility lane for `2025-11-25` clients.
+Alpha version `0.7.0-alpha.2` supports MCP `2026-07-28` and a stateless compatibility lane for `2025-11-25` clients.
 
 ### Configuration
 

package/dist/moodle.js

@@ -1861,7 +1861,7 @@ var MoodleClientCore = class {
   constructor(baseUrl, options) {
     this.baseUrl = baseUrl.replace(/\/$/, "");
     const resolvedOptions = typeof options === "string" ? { cookie: { name: "MoodleSession", value: options } } : options;
-    this.fetchImpl = resolvedOptions.fetchImpl ?? fetch;
+    this.fetchImpl = resolvedOptions.fetchImpl ?? ((input, init) => fetch(input, init));
     this.cookie = resolvedOptions.cookie;
     this.sesskey = resolvedOptions.pageContext?.sesskey ?? resolvedOptions.sesskey ?? null;
     this.userid = resolvedOptions.pageContext?.user_info.userid ?? resolvedOptions.userid ?? null;
@@ -3700,7 +3700,7 @@ function escapeXml(value) {
 }
 
 // src/version.ts
-var VERSION = "0.7.0-alpha.0";
+var VERSION = "0.7.0-alpha.2";
 
 // src/forum.ts
 function parseDiscussionReference(value) {
@@ -5073,7 +5073,7 @@ var ManagedMcpDeployment = class {
         `Worker ${intent.workerName} is not owned by Moodle MCP profile ${intent.profile}`
       );
     }
-    const receipt = replacingExisting ? null : matchingReceipt;
+    const receipt = replacingExisting || remote === null ? null : matchingReceipt;
     const existing = remote && receipt ? { ...remote, productionEndpoint: receipt.productionEndpoint, releaseDigest: receipt.releaseDigest } : remote;
     const rotate = intent.rotateToken === true && credentials !== null;
     const releaseChanged = existing?.releaseDigest !== intent.releaseDigest;
@@ -5098,8 +5098,10 @@ var ManagedMcpDeployment = class {
     let credentials = null;
     let credentialsBefore = null;
     let secretsUploaded = false;
+    let initializedWorker = null;
     let candidate = null;
     let appliedReceipt = null;
+    let productionRestored = false;
     let moodleUser = null;
     try {
       yield started(activeStage);
@@ -5122,6 +5124,14 @@ var ManagedMcpDeployment = class {
       activeStage = "upload_private_credentials";
       yield started(activeStage);
       if (plan.uploadCandidate) {
+        if (plan.operation === "create") {
+          initializedWorker = await this.dependencies.wrangler.initializeWorker({
+            accountId: plan.intent.accountId,
+            workerName: plan.intent.workerName,
+            configPath: prepared.wranglerConfigPath,
+            releaseDigest: plan.intent.releaseDigest
+          });
+        }
         await this.dependencies.wrangler.uploadSecrets({
           accountId: plan.intent.accountId,
           workerName: plan.intent.workerName,
@@ -5134,17 +5144,30 @@ var ManagedMcpDeployment = class {
       activeStage = "deploy_candidate_version";
       yield started(activeStage);
       if (plan.uploadCandidate) {
+        const productionEndpoint2 = initializedWorker?.productionEndpoint ?? plan.existing?.productionEndpoint;
+        if (!productionEndpoint2) {
+          throw new DeploymentApplyError("MISSING_ENDPOINT", "The Worker production endpoint is unavailable");
+        }
         candidate = await this.dependencies.wrangler.uploadCandidate({
           accountId: plan.intent.accountId,
           workerName: plan.intent.workerName,
           configPath: prepared.wranglerConfigPath,
-          releaseDigest: plan.intent.releaseDigest
+          releaseDigest: plan.intent.releaseDigest,
+          productionEndpoint: productionEndpoint2
         });
+        if (!candidate.previewEndpoint) {
+          await this.dependencies.wrangler.promote({
+            accountId: plan.intent.accountId,
+            workerName: plan.intent.workerName,
+            versionId: candidate.versionId
+          });
+          promoted = true;
+        }
       }
       yield completed(activeStage);
       activeStage = "upload_moodle_session";
       yield started(activeStage);
-      const sessionEndpoint = candidate?.previewEndpoint ?? plan.existing?.productionEndpoint;
+      const sessionEndpoint = candidate?.previewEndpoint ?? candidate?.productionEndpoint ?? plan.existing?.productionEndpoint;
       if (!sessionEndpoint) {
         throw new DeploymentApplyError("MISSING_ENDPOINT", "The Worker did not provide a session endpoint");
       }
@@ -5162,7 +5185,7 @@ var ManagedMcpDeployment = class {
       yield completed(activeStage);
       activeStage = "run_release_checks";
       yield started(activeStage);
-      if (candidate) {
+      if (candidate?.previewEndpoint) {
         try {
           await this.dependencies.worker.runSmoke({
             endpoint: candidate.previewEndpoint,
@@ -5197,6 +5220,9 @@ var ManagedMcpDeployment = class {
         if (!promoted) {
           throw new DeploymentApplyError("PRODUCTION_VALIDATION_FAILED", "The existing Worker failed validation");
         }
+        if (plan.operation === "create") {
+          throw new DeploymentApplyError("PRODUCTION_VALIDATION_FAILED", "The new Worker failed production validation");
+        }
         candidateRevision = await this.rollbackProduction(
           plan,
           credentials,
@@ -5204,6 +5230,7 @@ var ManagedMcpDeployment = class {
           productionEndpoint,
           candidateRevision
         );
+        productionRestored = true;
         throw new DeploymentApplyError(
           "PRODUCTION_VALIDATION_FAILED_RESTORED",
           "The previous healthy release was restored with the current credentials and Moodle session"
@@ -5221,7 +5248,25 @@ var ManagedMcpDeployment = class {
       if (plan.intent.rotateToken && credentialsBefore && !secretsUploaded) {
         await this.dependencies.credentials.write(plan.intent.profile, credentialsBefore);
       }
-      if (!appliedReceipt && plan.receipt && candidateRevision !== null) {
+      if (promoted && plan.existing && !productionRestored && !appliedReceipt) {
+        await this.dependencies.wrangler.restoreProduction({
+          accountId: plan.intent.accountId,
+          workerName: plan.intent.workerName,
+          previousVersionId: plan.existing.productionVersionId
+        });
+        productionRestored = true;
+        if (plan.intent.rotateToken && credentialsBefore) {
+          await this.dependencies.credentials.write(plan.intent.profile, credentialsBefore);
+        }
+      }
+      if (initializedWorker && !appliedReceipt) {
+        await this.dependencies.wrangler.removeWorker({
+          accountId: plan.intent.accountId,
+          workerName: plan.intent.workerName,
+          deploymentId: deploymentId(plan.intent.accountId, plan.intent.workerName)
+        });
+        await this.removeLocalState(plan.intent.profile);
+      } else if (!appliedReceipt && plan.receipt && candidateRevision !== null) {
         await this.dependencies.receipts.write({ ...plan.receipt, sessionRevision: candidateRevision });
       }
       const safe = asDeploymentError(error);
@@ -5458,6 +5503,9 @@ function validateIntent(intent) {
     throw new DeploymentPlanError("INVALID_INTENT", "Cloudflare account and release digest are required");
   }
 }
+function deploymentId(accountId, workerName) {
+  return `moodle-cli:${accountId}:${workerName}`;
+}
 function isOwnedByProfile(worker, receipt, profile) {
   return receipt ? receipt.accountId === worker.accountId && receipt.workerName === worker.workerName && receipt.deploymentId === worker.ownershipTag : worker.ownershipTag === `moodle-cli:${profile}`;
 }
@@ -5930,6 +5978,8 @@ function isMissing3(error) {
 
 // src/mcp/deployment/node-adapters.ts
 var MODERN_MCP_VERSION = "2026-07-28";
+var WORKER_PROPAGATION_ATTEMPTS = 10;
+var WORKER_PROPAGATION_MAX_DELAY_MS = 4e3;
 var NodeDeploymentCommandRunner = class {
   async run(command, args, environment = {}) {
     return new Promise((resolve, reject) => {
@@ -6016,12 +6066,12 @@ ${error.stderr}`)) {
       return null;
     }
     const productionEndpoint = firstWorkersDevUrl(document) ?? `https://${workerName}.workers.dev`;
-    const deploymentId = ownershipId(accountId, workerName);
+    const deploymentId2 = ownershipId(accountId, workerName);
     return {
       accountId,
       workerName,
-      deploymentId,
-      ownershipTag: deploymentId,
+      deploymentId: deploymentId2,
+      ownershipTag: deploymentId2,
       productionEndpoint,
       productionVersionId: versionIds[0],
       previousHealthyVersionId: versionIds[1] ?? null,
@@ -6039,6 +6089,36 @@ ${error.stderr}`)) {
       input.configPath
     ], input.accountId);
   }
+  async initializeWorker(input) {
+    let result = null;
+    try {
+      result = await this.wrangler([
+        "deploy",
+        "--name",
+        input.workerName,
+        "--config",
+        input.configPath,
+        "--message",
+        `moodle-cli-bootstrap:${input.releaseDigest}`
+      ], input.accountId);
+      const worker = await this.inspect(input.accountId, input.workerName);
+      if (!worker) {
+        throw new DeploymentApplyError("INITIAL_WORKER_INVALID", "Wrangler did not return the initialized Worker");
+      }
+      const productionEndpoint = firstWorkersDevUrl([result.stdout, result.stderr]);
+      return productionEndpoint ? { ...worker, productionEndpoint } : worker;
+    } catch (error) {
+      const worker = await this.inspect(input.accountId, input.workerName).catch(() => null);
+      if (worker || result) {
+        await this.removeWorker({
+          accountId: input.accountId,
+          workerName: input.workerName,
+          deploymentId: ownershipId(input.accountId, input.workerName)
+        }).catch(() => void 0);
+      }
+      throw error;
+    }
+  }
   async uploadCandidate(input) {
     const outputFilePath = join7(dirname7(input.configPath), "wrangler-version-upload.jsonl");
     await rm6(outputFilePath, { force: true });
@@ -6058,13 +6138,13 @@ ${error.stderr}`)) {
       const document = await readWranglerVersionUpload(outputFilePath, input.workerName);
       const versionId = typeof document.version_id === "string" ? document.version_id : null;
       const previewEndpoint = firstWorkersDevUrl(document.preview_alias_url) ?? firstWorkersDevUrl(document.preview_url);
-      if (!versionId || !previewEndpoint) {
-        throw new DeploymentApplyError("CANDIDATE_UPLOAD_INVALID", "Wrangler did not return a candidate version and preview endpoint");
+      if (!versionId) {
+        throw new DeploymentApplyError("CANDIDATE_UPLOAD_INVALID", "Wrangler did not return a candidate version");
       }
       return {
         versionId,
-        previewEndpoint,
-        productionEndpoint: productionEndpointFromPreview(previewEndpoint, input.workerName),
+        previewEndpoint: previewEndpoint ?? null,
+        productionEndpoint: input.productionEndpoint,
         deploymentId: ownershipId(input.accountId, input.workerName)
       };
     } finally {
@@ -6130,6 +6210,7 @@ var NodeReleaseMaterializer = class {
       account_id: plan.intent.accountId,
       main: `./${basename(workerFile)}`,
       compatibility_date: this.options.compatibilityDate,
+      preview_urls: true,
       vars: { MOODLE_ORIGIN: plan.intent.moodleOrigin },
       durable_objects: {
         bindings: [{ name: "SESSION_BROKER", class_name: "SessionBroker" }]
@@ -6185,12 +6266,14 @@ function createBackgroundMoodleSessionSource(options = {}) {
   return new DefaultMoodleSessionSource({ ...options, interactive: false });
 }
 var FetchManagedWorkerClient = class {
-  constructor(fetchImpl = fetch) {
-    this.fetchImpl = fetchImpl;
+  constructor(fetchImpl, sleep = (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds))) {
+    this.sleep = sleep;
+    this.fetchImpl = fetchImpl ?? ((input, init) => fetch(input, init));
   }
+  sleep;
   fetchImpl;
   async putSession(input) {
-    const response = await this.fetchImpl(endpointUrl(input.endpoint, "/session"), {
+    const response = await this.fetchWithRetry(endpointUrl(input.endpoint, "/session"), {
       method: "PUT",
       headers: {
         authorization: `Bearer ${input.sessionSyncToken}`,
@@ -6202,18 +6285,18 @@ var FetchManagedWorkerClient = class {
         cookieValue: input.session.cookieValue,
         expectedRevision: input.expectedRevision
       })
-    });
+    }, isRetryableSessionUpload);
     const body = await safeJson(response);
-    if (!response.ok || !isRecord8(body) || typeof body.revision !== "number") {
-      const code = isRecord8(body) && typeof body.code === "string" ? body.code : "SESSION_UPLOAD_FAILED";
-      throw new DeploymentApplyError(code, "The Worker rejected the Moodle session update");
+    if (response.ok && isRecord8(body) && typeof body.revision === "number") {
+      return { revision: body.revision };
     }
-    return { revision: body.revision };
+    const code = isRecord8(body) && typeof body.code === "string" ? body.code : "SESSION_UPLOAD_FAILED";
+    throw new DeploymentApplyError(code, "The Worker rejected the Moodle session update");
   }
   async getReadiness(input) {
-    const response = await this.fetchImpl(endpointUrl(input.endpoint, "/readyz"), {
+    const response = await this.fetchWithRetry(endpointUrl(input.endpoint, "/readyz"), {
       headers: { authorization: `Bearer ${input.sessionSyncToken}` }
-    });
+    }, isRetryableWorkerPropagation);
     const body = await safeJson(response);
     if (isRecord8(body) && (body.status === "pass" || body.status === "warn" || body.status === "fail")) {
       const session = firstHealthCheck(body, "moodle:session");
@@ -6227,7 +6310,11 @@ var FetchManagedWorkerClient = class {
     return { status: "fail", reasonCode: null, revision: null };
   }
   async runSmoke(input) {
-    const health = await this.fetchImpl(endpointUrl(input.endpoint, "/healthz"));
+    const health = await this.fetchWithRetry(
+      endpointUrl(input.endpoint, "/healthz"),
+      void 0,
+      isRetryableWorkerPropagation
+    );
     const healthBody = await safeJson(health);
     if (!health.ok || !isRecord8(healthBody) || healthBody.status !== "pass") {
       throw new DeploymentApplyError("HEALTH_CHECK_FAILED", "Worker liveness check failed");
@@ -6261,7 +6348,7 @@ var FetchManagedWorkerClient = class {
     if (typeof params.name === "string") {
       headers["mcp-name"] = params.name;
     }
-    const response = await this.fetchImpl(endpointUrl(endpoint, "/mcp"), {
+    const response = await this.fetchWithRetry(endpointUrl(endpoint, "/mcp"), {
       method: "POST",
       headers,
       body: JSON.stringify({
@@ -6277,13 +6364,23 @@ var FetchManagedWorkerClient = class {
           }
         }
       })
-    });
+    }, isRetryableWorkerPropagation);
     const body = await safeJson(response);
     if (!response.ok || !isRecord8(body) || body.jsonrpc !== "2.0" || body.id !== id || "error" in body || !("result" in body)) {
       throw new DeploymentApplyError("MCP_SMOKE_FAILED", `MCP ${method} check failed`);
     }
     return body.result;
   }
+  async fetchWithRetry(input, init, retryable) {
+    for (let attempt = 0; attempt < WORKER_PROPAGATION_ATTEMPTS; attempt += 1) {
+      const response = await this.fetchImpl(input, init);
+      if (!retryable(response.status) || attempt === WORKER_PROPAGATION_ATTEMPTS - 1) {
+        return response;
+      }
+      await this.sleep(Math.min(500 * 2 ** attempt, WORKER_PROPAGATION_MAX_DELAY_MS));
+    }
+    throw new Error("Worker propagation retry loop exhausted unexpectedly");
+  }
 };
 var PrivateDeploymentReceiptStore = class {
   constructor(baseDirectory = join7(homedir8(), ".config", "moodle-cli", "mcp", "deployments")) {
@@ -6366,6 +6463,12 @@ function ownershipId(accountId, workerName) {
 function endpointUrl(endpoint, path4) {
   return `${endpoint.replace(/\/$/u, "")}${path4}`;
 }
+function isRetryableSessionUpload(status) {
+  return status === 401 || isRetryableWorkerPropagation(status);
+}
+function isRetryableWorkerPropagation(status) {
+  return status === 404 || status === 429 || status >= 500;
+}
 async function safeJson(response) {
   try {
     return await response.json();
@@ -6469,18 +6572,6 @@ function firstWorkersDevUrl(value) {
   });
   return found;
 }
-function productionEndpointFromPreview(preview2, workerName) {
-  const url = new URL(preview2);
-  const labels = url.hostname.split(".");
-  if (labels[0] !== workerName && labels[0]?.endsWith(`-${workerName}`)) {
-    labels[0] = workerName;
-    url.hostname = labels.join(".");
-  }
-  url.pathname = "";
-  url.search = "";
-  url.hash = "";
-  return url.origin;
-}
 function visit(value, visitor, key = "") {
   visitor(key, value);
   if (Array.isArray(value)) {
@@ -7860,7 +7951,10 @@ Log: ${result.log_path}`, options);
     await outputMcpResult(runtime, result, options);
   });
   addOutputOptions(mcp.command("status").description("Show local and remote Moodle MCP readiness.")).option("--verbose", "Include sanitized deployment diagnostics.").option("--logs", "Include sanitized recent Worker logs.").action(async (options) => {
-    const result = await getMcpService().status({ verbose: Boolean(options.verbose), logs: Boolean(options.logs) });
+    const result = await getMcpService().status({
+      verbose: Boolean(options.verbose || program.opts().verbose),
+      logs: Boolean(options.logs)
+    });
     await outputMcpResult(runtime, result, options);
   });
   addOutputOptions(mutating(mcp.command("login").description("Acquire and upload a fresh Moodle session."))).action(
@@ -8095,7 +8189,15 @@ function queryMatches2(text, query) {
   const needle = query.toLowerCase().split(/\s+/).join(" ");
   return needle ? haystack.includes(needle) || needle.split(" ").every((token) => haystack.includes(token)) : true;
 }
-var isMain = process.argv[1] ? realpathSync2(fileURLToPath2(import.meta.url)) === realpathSync2(process.argv[1]) : false;
+function pathsReferToSameFile(moduleUrl, executable) {
+  if (!executable) return false;
+  try {
+    return realpathSync2(fileURLToPath2(moduleUrl)) === realpathSync2(executable);
+  } catch {
+    return false;
+  }
+}
+var isMain = import.meta.main === true || pathsReferToSameFile(import.meta.url, process.argv[1]);
 if (isMain) {
   runCli().then((code) => {
     process.exitCode = code;

package/dist/worker/worker.js

@@ -5996,7 +5996,7 @@ function problemResponse(status, code, title, detail, headers) {
 }
 
 // src/version.ts
-var VERSION = "0.7.0-alpha.0";
+var VERSION = "0.7.0-alpha.2";
 
 // src/worker/http.ts
 var HEALTH_PATH = "/healthz";
@@ -22117,7 +22117,7 @@ var MoodleClientCore = class {
   constructor(baseUrl, options) {
     this.baseUrl = baseUrl.replace(/\/$/, "");
     const resolvedOptions = typeof options === "string" ? { cookie: { name: "MoodleSession", value: options } } : options;
-    this.fetchImpl = resolvedOptions.fetchImpl ?? fetch;
+    this.fetchImpl = resolvedOptions.fetchImpl ?? ((input, init) => fetch(input, init));
     this.cookie = resolvedOptions.cookie;
     this.sesskey = resolvedOptions.pageContext?.sesskey ?? resolvedOptions.sesskey ?? null;
     this.userid = resolvedOptions.pageContext?.user_info.userid ?? resolvedOptions.userid ?? null;
@@ -23214,12 +23214,12 @@ var AJAX_PATH = "/lib/ajax/service.php";
 var SESSION_TOUCH = "core_session_touch";
 var SESSION_TIME_REMAINING = "core_session_time_remaining";
 var FetchMoodleSessionUpstream = class {
-  constructor(origin, fetchImpl = fetch) {
-    this.fetchImpl = fetchImpl;
+  origin;
+  fetchImpl;
+  constructor(origin, fetchImpl) {
     this.origin = new URL(origin).origin;
+    this.fetchImpl = fetchImpl ?? ((input, init) => fetch(input, init));
   }
-  fetchImpl;
-  origin;
   async validate(candidate) {
     if (new URL(candidate.moodleOrigin).origin !== this.origin) return { valid: false, code: "SESSION_INVALID" };
     const response = await this.fetchImpl(`${this.origin}${DASHBOARD_PATH2}`, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moodle-cli",
-  "version": "0.7.0-alpha.0",
+  "version": "0.7.0-alpha.2",
   "description": "Terminal-first CLI for Moodle LMS",
   "license": "MIT",
   "type": "module",
@@ -19,6 +19,7 @@
   "scripts": {
     "build": "tsc --noEmit && tsup && npm run build:worker && rm -f dist/.gitignore",
     "build:worker": "tsup --config tsup.worker.config.ts && node scripts/check-worker-bundle.mjs",
+    "bin:smoke": "bun scripts/smoke-standalone.mjs",
     "check": "tsc --noEmit",
     "pack:check": "npm pack --dry-run --json | node -e \"let data = ''; process.stdin.on('data', chunk => data += chunk); process.stdin.on('end', () => { const files = JSON.parse(data)[0]?.files?.map(file => file.path) ?? []; for (const required of ['dist/moodle.js', 'dist/worker/worker.js', 'README.md', 'ONBOARDING.md', 'SKILL.md', 'references/command-reference.md', 'references/downloads.md', 'agents/openai.yaml']) if (!files.includes(required)) throw new Error('npm package is missing ' + required); });\"",
     "pack:smoke": "tmp=\"$(mktemp -d)\" && npm pack --pack-destination \"$tmp\" >/dev/null && npm install --prefix \"$tmp/install\" \"$tmp\"/moodle-cli-*.tgz >/dev/null && test \"$(\"$tmp/install/node_modules/.bin/moodle\" --version)\" = \"$(node -p \"JSON.parse(require('node:fs').readFileSync('package.json', 'utf8')).version\")\" && \"$tmp/install/node_modules/.bin/moodle\" download --help >/dev/null && \"$tmp/install/node_modules/.bin/moodle\" mcp --help >/dev/null",