turnzero 0.37.0 → 0.38.0

package/dist/turnzero-cloud.mjs

@@ -43,9 +43,9 @@ var UPLOAD_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/
 var uploadFileName = (id) => `${id}.zip`;
 var UPLOAD_ENVIRONMENT = "development";
 var COMMAND_ENVIRONMENTS = Object.freeze(["development", "production"]);
-var DEPLOY_ACTION_PATH = "/api/v1/actions/deploy";
-var ACTIONS_ROUTE_PREFIX = "/api/v1/actions/";
-var actionPathOf = (action) => `${ACTIONS_ROUTE_PREFIX}${action}`;
+var DEPLOY_ACTION = "deploy";
+var ACCOUNT_ACTIONS_PATH = "/api/v1/";
+var TZCLOUD_ACTIONS_PATH = "/api/tzcloud/v1/";
 var COMMAND_ACTION_SURFACE = Object.freeze({
   add_test_end_users: "tzcloud",
   check_deploy: "tzcloud",
@@ -76,6 +76,12 @@ var COMMAND_ACTION_SURFACE = Object.freeze({
   start: "account"
 });
 var toolNameOf = (action) => COMMAND_ACTION_SURFACE[action] === "account" ? action : `${COMMAND_ACTION_SURFACE[action]}_${action}`;
+var surfaceAddressOf = (origin, surface, action) => {
+  if (surface === "account") return `${origin}${ACCOUNT_ACTIONS_PATH}${action}`;
+  const estate = estateOfPlane(origin);
+  return estate !== null ? `${ESTATE_ORIGINS[estate].tzcloud}/v1/${action}` : `${origin}${TZCLOUD_ACTIONS_PATH}${action}`;
+};
+var actionAddressOf = (origin, action) => surfaceAddressOf(origin, COMMAND_ACTION_SURFACE[action], action);
 var progressPathOf = (upload) => `${DEPLOY_PROGRESS_PREFIX}${upload}/progress`;
 var PROGRESS_PAUSE_SECONDS = 2;
 var PROGRESS_READ_BOUND_SECONDS = 60;
@@ -112,7 +118,6 @@ var computerLoginAddressOf = (origin, login2) => {
 var DEPLOY_SUBCOMMAND = "deploy";
 var CHECK_SUBCOMMAND = "check";
 var CHECK_ACTION = "check_deploy";
-var CHECK_ACTION_PATH = "/api/v1/actions/check_deploy";
 var HASH_SUBCOMMAND = "hash";
 var DEPLOY_OPTION = Object.freeze({ env: "--env", upload: "--upload", path: "--path", origin: "--origin", application: "--application" });
 var CHECK_OPTION = { application: "--application", path: "--path", origin: "--origin" };
@@ -223,7 +228,6 @@ var LIBRARY_SUBCOMMAND = "library";
 var LIBRARY_ACTS = Object.freeze(["take"]);
 var LIBRARY_OPTION = Object.freeze({ entry: "--entry", path: DEPLOY_OPTION.path, origin: DEPLOY_OPTION.origin });
 var LIBRARY_READ_ACTION = "read_library";
-var LIBRARY_READ_PATH = actionPathOf(LIBRARY_READ_ACTION);
 var LIBRARY_READ_CHUNK = 16e3;
 var LIBRARY_ENTRY_NAME_FORM = /^[a-z0-9][a-z0-9_-]*(\/[a-z0-9][a-z0-9_-]*)?$/;
 var libraryTakeLineOf = (call) => commandLineOf(call.origin, LIBRARY_SUBCOMMAND, {
@@ -351,11 +355,11 @@ var TZMESH_OPTION = {
   public: "--public"
 };
 var TZMESH_ESTATES = Object.freeze(["production", "development"]);
-var TZMESH_ESTATE_ORIGINS = Object.freeze({
-  production: Object.freeze({ plane: DEFAULT_COMMAND_ORIGIN, wire: "https://tzmesh.turnzero.ai" }),
-  development: Object.freeze({ plane: DEVELOPMENT_COMMAND_ORIGIN, wire: "https://tzmesh.dev.turnzero.ai" })
+var ESTATE_ORIGINS = Object.freeze({
+  production: Object.freeze({ plane: DEFAULT_COMMAND_ORIGIN, tzcloud: "https://tzcloud.turnzero.ai", wire: "https://tzmesh.turnzero.ai", site: "https://tzmesh.ai" }),
+  development: Object.freeze({ plane: DEVELOPMENT_COMMAND_ORIGIN, tzcloud: "https://tzcloud.dev.turnzero.ai", wire: "https://tzmesh.dev.turnzero.ai", site: "https://tzmesh.dev.turnzero.ai" })
 });
-var tzmeshEstateOfPlane = (origin) => TZMESH_ESTATES.find((estate) => TZMESH_ESTATE_ORIGINS[estate].plane === origin) ?? null;
+var estateOfPlane = (origin) => TZMESH_ESTATES.find((estate) => ESTATE_ORIGINS[estate].plane === origin) ?? null;
 var TZMESH_MINT_GRANT = "tzmesh";
 var TZMESH_COMMAND_LABEL = "turnzero command";
 var TZMESH_MINT_DAYS = 1;
@@ -526,9 +530,9 @@ function compareWireVersions(a, b) {
 
 // src/turnzero_cloud_command/plane_wire.ts
 var PLANE_WIRE_NEEDED = Object.freeze({
-  action_payloads: "2026-11-04.8",
-  management_api: "2026-11-04.7",
-  wire_errors: "2026-11-04.2"
+  action_payloads: "2026-11-05.2",
+  management_api: "2026-11-05.3",
+  wire_errors: "2026-11-05.2"
 });
 
 // src/turnzero_cloud_command/version.ts
@@ -1287,7 +1291,7 @@ var postAction = async (io2, origin, action, bearer, userAgent, body) => {
   const controller = new AbortController();
   const cancel = io2.schedule(TOKEN_CALL_BOUND_SECONDS * 1e3, () => controller.abort());
   try {
-    const response = await io2.fetch(`${origin}${actionPathOf(action)}`, {
+    const response = await io2.fetch(actionAddressOf(origin, action), {
       method: "POST",
       headers: { authorization: `Bearer ${bearer}`, "user-agent": userAgent, "content-type": "application/json" },
       body: JSON.stringify(body),
@@ -4056,7 +4060,7 @@ var postOnce = async (io2, origin, bearer, userAgent, body) => {
   const controller = new AbortController();
   const cancel = io2.schedule(DEPLOY_CALL_BOUND_SECONDS * 1e3, () => controller.abort());
   try {
-    const response = await io2.fetch(`${origin}${DEPLOY_ACTION_PATH}`, {
+    const response = await io2.fetch(actionAddressOf(origin, DEPLOY_ACTION), {
       method: "POST",
       headers: { authorization: `Bearer ${bearer}`, "user-agent": userAgent, "content-type": "application/json" },
       body: JSON.stringify(body),
@@ -4353,7 +4357,7 @@ async function deployRun(named, io2, flags) {
   io2.print(`${UPLOADED_LINE_HEAD}${zipped.zip.length} bytes as upload ${upload}`);
   let started;
   try {
-    const response = await io2.fetch(`${origin}${DEPLOY_ACTION_PATH}`, {
+    const response = await io2.fetch(actionAddressOf(origin, DEPLOY_ACTION), {
       method: "POST",
       headers: { ...headers, "content-type": "application/json" },
       body: JSON.stringify(commandStartBodyOf(options.application, upload, environment, commit)),
@@ -4574,7 +4578,7 @@ var postCheck = async (io2, origin, bearer, userAgent, body) => {
   const controller = new AbortController();
   const cancel = io2.schedule(CHECK_CALL_BOUND_SECONDS * 1e3, () => controller.abort());
   try {
-    const response = await io2.fetch(`${origin}${CHECK_ACTION_PATH}`, {
+    const response = await io2.fetch(actionAddressOf(origin, CHECK_ACTION), {
       method: "POST",
       headers: { authorization: `Bearer ${bearer}`, "user-agent": userAgent, "content-type": "application/json" },
       body: JSON.stringify(body),
@@ -5052,7 +5056,7 @@ async function secret(call, io2) {
   const unknown = secretUnknownSentence(options.act);
   let answered;
   try {
-    const request = io2.fetch(`${sent.origin}${actionPathOf(action)}`, {
+    const request = io2.fetch(actionAddressOf(sent.origin, action), {
       method: "POST",
       headers: { authorization: `Bearer ${credential.credential}`, "user-agent": agent.userAgent, "content-type": "application/json" },
       body: JSON.stringify({
@@ -5460,7 +5464,7 @@ var postSignIn = async (io2, origin, bearer, userAgent, body) => {
   const controller = new AbortController();
   const cancel = io2.schedule(SESSION_CALL_BOUND_SECONDS * 1e3, () => controller.abort());
   try {
-    const response = await io2.fetch(`${origin}${actionPathOf(SIGN_IN_TEST_END_USER_ACTION)}`, {
+    const response = await io2.fetch(actionAddressOf(origin, SIGN_IN_TEST_END_USER_ACTION), {
       method: "POST",
       headers: { authorization: `Bearer ${bearer}`, "user-agent": userAgent, "content-type": "application/json" },
       body: JSON.stringify(body),
@@ -5983,7 +5987,7 @@ var postReadStatus = async (io2, origin, bearer, userAgent, application) => {
   const controller = new AbortController();
   const cancel = io2.schedule(READ_STATUS_BOUND_SECONDS * 1e3, () => controller.abort());
   try {
-    const response = await io2.fetch(`${origin}${actionPathOf(READ_STATUS_ACTION)}`, {
+    const response = await io2.fetch(actionAddressOf(origin, READ_STATUS_ACTION), {
       method: "POST",
       headers: { authorization: `Bearer ${bearer}`, "user-agent": userAgent, "content-type": "application/json" },
       body: JSON.stringify({ application }),
@@ -6432,7 +6436,7 @@ var readOf = async (io2, origin, bearer, userAgent, body, what) => {
     const response = await readAgain(
       io2,
       what,
-      () => io2.fetch(`${origin}${LIBRARY_READ_PATH}`, {
+      () => io2.fetch(actionAddressOf(origin, LIBRARY_READ_ACTION), {
         method: "POST",
         headers: { authorization: `Bearer ${bearer}`, "user-agent": userAgent, "content-type": "application/json" },
         body: JSON.stringify(body),
@@ -7686,7 +7690,7 @@ var unreachedLine = (origin, error) => {
 async function remint(io2, origin, credential, userAgent, application, name, verifier = null) {
   let response;
   try {
-    response = await io2.fetch(`${origin}${actionPathOf(PROVISION_ACTION)}`, {
+    response = await io2.fetch(actionAddressOf(origin, PROVISION_ACTION), {
       method: "POST",
       headers: { authorization: `Bearer ${credential}`, "user-agent": userAgent, "content-type": "application/json" },
       body: JSON.stringify({ name, application, environment: PROVISION_ENVIRONMENT, ...SECRET_REPLACE_MEMBER, ...verifier !== null ? { [CODE_VERIFIER_MEMBER]: verifier } : {} }),
@@ -10699,7 +10703,7 @@ var tzmeshOptionsOf = (call, io2) => {
   if ("refusal" in origin) return origin;
   if (!FIRST_PARTY_COMMAND_ORIGINS.includes(origin.origin)) return { refusal: tzmeshOriginRefusal(closing) };
   const namedEstate = call.named[TZMESH_OPTION.tzmeshEstate];
-  const estate = namedEstate === void 0 ? tzmeshEstateOfPlane(origin.origin) : TZMESH_ESTATES.find((entry) => entry === namedEstate) ?? null;
+  const estate = namedEstate === void 0 ? estateOfPlane(origin.origin) : TZMESH_ESTATES.find((entry) => entry === namedEstate) ?? null;
   if (estate === null) return { refusal: `${TZMESH_OPTION.tzmeshEstate} names the estate the agent is registered at, ${TZMESH_ESTATES.join(" or ")}. ${closing}` };
   return {
     name,
@@ -10783,9 +10787,10 @@ var PRINTED_NAME_FORM = /^[A-Za-z0-9_.:/@-]{1,160}$/;
 var agentWords = (agent) => agent.handle !== null ? agent.handle : `with id ${agent.id}`;
 var registeredLineOf = (agent, wire) => `${REGISTERED_LINE_HEAD}agent ${agent.handle ?? "with no handle"}, id ${agent.id}, at ${wire}, its secret printed nowhere`;
 var WRITTEN_LINE = `${WRITTEN_LINE_HEAD}the agent's secret, alone on one line, into the file ${TZMESH_OPTION.toFile} names, readable by its owner alone`;
-var REGISTER_UNKNOWN = "Whether the agent was registered is unknown: tzmesh_list_participants from your tool shows it, and delete_agent from your tool, naming its participant, deletes it.";
-var agentStandsSentence = (agent) => `The agent ${agentWords(agent)} stands with no secret kept: delete_agent from your tool, naming participant ${agent.id}, deletes it and frees its name.`;
-var storeUnknownSentence = (secretName, agent) => `Whether the secret was stored is unknown: tzcloud_list_secrets from your tool shows when ${secretName} was last written. Where it was not written, delete_agent from your tool, naming participant ${agent.id}, deletes the agent ${agentWords(agent)}.`;
+var personDeletesAt = (estate) => `${ESTATE_ORIGINS[estate].site}/me under Hosted agents, open the agent's Manage keys, choose Unregister agent, then confirm.`;
+var registerUnknownSentence = (estate) => `Whether the agent was registered is unknown: tzmesh_list_participants from your tool shows it. Your person can delete it at ${personDeletesAt(estate)}`;
+var agentStandsSentence = (agent, estate) => `The agent ${agentWords(agent)} stands with no secret kept. Your person can delete it and free its name at ${personDeletesAt(estate)}`;
+var storeUnknownSentence = (secretName, agent, estate) => `Whether the secret was stored is unknown: tzcloud_list_secrets from your tool shows when ${secretName} was last written. Where it was not written, your person can delete the agent ${agentWords(agent)} at ${personDeletesAt(estate)}`;
 var TOKEN_LEFT = `list_tokens from your tool shows the run's token by its label, ${TZMESH_COMMAND_LABEL}, and revoke_token ends it; it expires within a day either way.`;
 var tokenStandsSentence = (id) => `The run's token, ${id}, was not revoked, so it works until it expires within a day: revoke_token from your tool with id ${id} ends it, and list_tokens shows whether it stands.`;
 var revocationBearerRefused = (origin) => `This computer's token for ${origin} was refused as the bearer of the revocation.`;
@@ -10891,10 +10896,10 @@ var setUpAgent = async (io2, wire, secret2, userAgent, options, ended) => {
   return { signing };
 };
 var firstStoreStandsSentence = (secretName) => `${secretName} now holds the deleted agent's secret, which works nowhere, until the line runs again.`;
-var signingUnknownSentence = (signingName, agent) => `Whether the webhook's signing secret was stored is unknown: tzcloud_list_secrets from your tool shows when ${signingName} was last written. Where it was not written, delete_agent from your tool, naming participant ${agent.id}, deletes the agent ${agentWords(agent)}, and the line runs again.`;
-var unfinishableSentence = (agent) => `The agent ${agentWords(agent)} cannot be finished, since its webhook's signing secret ended with the run: delete_agent from your tool, naming participant ${agent.id}, deletes it, and the line runs again.`;
+var signingUnknownSentence = (signingName, agent, estate) => `Whether the webhook's signing secret was stored is unknown: tzcloud_list_secrets from your tool shows when ${signingName} was last written. Where it was not written, your person can delete the agent ${agentWords(agent)} at ${personDeletesAt(estate)} Then run the line again.`;
+var unfinishableSentence = (agent, estate) => `The agent ${agentWords(agent)} cannot be finished, since its webhook's signing secret ended with the run. Your person can delete it at ${personDeletesAt(estate)} Then run the line again.`;
 var firstStoreUnknownSentence = (secretName) => `Whether ${secretName} was written is unknown: tzcloud_list_secrets from your tool shows when it was last written. Where it was, it holds the deleted agent's secret, which works nowhere, until the line runs again.`;
-var unfinishedStandsSentence = (agent, kept2) => `${kept2.known ? `${kept2.name} holds the secret of the agent ${agentWords(agent)}.` : `Whether ${kept2.name} holds the secret of the agent ${agentWords(agent)} is unknown: tzcloud_list_secrets from your tool shows when it was last written.`} ${unfinishableSentence(agent)}`;
+var unfinishedStandsSentence = (agent, kept2, estate) => `${kept2.known ? `${kept2.name} holds the secret of the agent ${agentWords(agent)}.` : `Whether ${kept2.name} holds the secret of the agent ${agentWords(agent)} is unknown: tzcloud_list_secrets from your tool shows when it was last written.`} ${unfinishableSentence(agent, estate)}`;
 var revokeRunToken = async (io2, plane, bearer, id, userAgent) => {
   const answered = await postAction(io2, plane, REVOKE_TOKEN_ACTION, bearer, userAgent, revocationBodyOf(id));
   let lines;
@@ -10924,19 +10929,19 @@ var endedLineOf = (stage, plane, agent, options) => {
     case "minted":
       return `The run was ended after its exchange minted the run's token, before the register. ${TOKEN_LEFT}`;
     case "registering":
-      return `The run was ended during the register. ${REGISTER_UNKNOWN} ${TOKEN_LEFT}`;
+      return `The run was ended during the register. ${registerUnknownSentence(options.estate)} ${TOKEN_LEFT}`;
     case "registered":
-      return agent === null ? `The run was ended after the register. ${REGISTER_UNKNOWN} ${TOKEN_LEFT}` : "secret" in route ? options.webhook !== null ? `The run was ended after the register, while its secret was being stored. ${unfinishableSentence(agent)} ${TOKEN_LEFT}` : `The run was ended after the register, while its secret was being stored. ${storeUnknownSentence(route.secret, agent)} ${TOKEN_LEFT}` : `The run was ended after the register, before its secret was written. ${agentStandsSentence(agent)} ${TOKEN_LEFT}`;
+      return agent === null ? `The run was ended after the register. ${registerUnknownSentence(options.estate)} ${TOKEN_LEFT}` : "secret" in route ? options.webhook !== null ? `The run was ended after the register, while its secret was being stored. ${unfinishableSentence(agent, options.estate)} ${TOKEN_LEFT}` : `The run was ended after the register, while its secret was being stored. ${storeUnknownSentence(route.secret, agent, options.estate)} ${TOKEN_LEFT}` : `The run was ended after the register, before its secret was written. ${agentStandsSentence(agent, options.estate)} ${TOKEN_LEFT}`;
     case "setting up":
-      return agent === null ? `The run was ended after the register. ${REGISTER_UNKNOWN} ${TOKEN_LEFT}` : `The run was ended while the agent's webhook or channels were being set. tzmesh_list_participants from your tool shows the agent and its webhook. ${agentStandsSentence(agent)} ${TOKEN_LEFT}`;
+      return agent === null ? `The run was ended after the register. ${registerUnknownSentence(options.estate)} ${TOKEN_LEFT}` : `The run was ended while the agent's webhook or channels were being set. tzmesh_list_participants from your tool shows the agent and its webhook. ${agentStandsSentence(agent, options.estate)} ${TOKEN_LEFT}`;
     case "storing signing":
-      return agent === null || options.webhook === null ? `The run was ended after the register. ${REGISTER_UNKNOWN} ${TOKEN_LEFT}` : `The run was ended while the webhook's signing secret was being stored. ${signingUnknownSentence(options.webhook.secretName, agent)} ${TOKEN_LEFT}`;
+      return agent === null || options.webhook === null ? `The run was ended after the register. ${registerUnknownSentence(options.estate)} ${TOKEN_LEFT}` : `The run was ended while the webhook's signing secret was being stored. ${signingUnknownSentence(options.webhook.secretName, agent, options.estate)} ${TOKEN_LEFT}`;
     case "stored":
       return `The run was ended after the agent's secret was kept, before the run's token was revoked. ${TOKEN_LEFT}`;
   }
 };
 var completing = async (io2, options, mint, tokens, userAgent) => {
-  const { plane, wire } = TZMESH_ESTATE_ORIGINS[options.estate];
+  const { plane, wire } = ESTATE_ORIGINS[options.estate];
   const route = options.route;
   const tag = runTagOf();
   const stage = { now: "unsent", ended: false };
@@ -10957,7 +10962,7 @@ var completing = async (io2, options, mint, tokens, userAgent) => {
     for (const line of deleted.lines) io2.print(line);
     if (deleted.deleted) {
       if (kept2 !== null) io2.print(kept2.known ? firstStoreStandsSentence(kept2.name) : firstStoreUnknownSentence(kept2.name));
-    } else io2.print(kept2 === null ? agentStandsSentence(standing) : unfinishedStandsSentence(standing, kept2));
+    } else io2.print(kept2 === null ? agentStandsSentence(standing, options.estate) : unfinishedStandsSentence(standing, kept2, options.estate));
     return revokedThen(minted, deleted.unknown ? whenUnknown : COMMAND_STATUS.failed);
   };
   const storeNamed = async (name, value) => {
@@ -11015,7 +11020,7 @@ var completing = async (io2, options, mint, tokens, userAgent) => {
       }
       if ("unknown" in registered) {
         for (const line of registered.unknown) io2.print(line);
-        io2.print(REGISTER_UNKNOWN);
+        io2.print(registerUnknownSentence(options.estate));
         return revokedThen(minted, COMMAND_STATUS.unknown);
       }
       if ("standing" in registered) {
@@ -11062,7 +11067,7 @@ var completing = async (io2, options, mint, tokens, userAgent) => {
       if (stored !== "stored") {
         for (const line of stored.unknown) io2.print(line);
         if (options.webhook !== null) return deletedThen(minted, agent, COMMAND_STATUS.unknown, { name: route.secret, known: false });
-        io2.print(storeUnknownSentence(route.secret, agent));
+        io2.print(storeUnknownSentence(route.secret, agent, options.estate));
         return revokedThen(minted, COMMAND_STATUS.unknown);
       }
       if (options.webhook !== null && signing !== null) {
@@ -11072,7 +11077,7 @@ var completing = async (io2, options, mint, tokens, userAgent) => {
         if (kept2 === "refused") return deletedThen(minted, agent, COMMAND_STATUS.failed, { name: route.secret, known: true });
         if (kept2 !== "stored") {
           for (const line of kept2.unknown) io2.print(line);
-          io2.print(signingUnknownSentence(options.webhook.secretName, agent));
+          io2.print(signingUnknownSentence(options.webhook.secretName, agent, options.estate));
           return revokedThen(minted, COMMAND_STATUS.unknown);
         }
       }
@@ -11098,7 +11103,7 @@ async function tzmeshRegister(call, io2) {
     io2.print(tzmeshMintedTokenRefusal(closing));
     return COMMAND_STATUS.nothing_started;
   }
-  const { plane } = TZMESH_ESTATE_ORIGINS[options.estate];
+  const { plane } = ESTATE_ORIGINS[options.estate];
   const tokens = readComputerTokens(io2, plane, "secret" in options.route ? options.origin : null, closing);
   if ("status" in tokens) return tokens.status;
   io2.hide(tokens.mint.token, REDACTED_TOKEN);
@@ -11129,7 +11134,14 @@ async function tzmeshRegister(call, io2) {
   return firstAct(io2, plane, "tzmesh", io2.print, null, completingOptionsOf(options));
 }
 var TZMESH_READS = `this computer's token for each address it sends to, and the verifier its first act keeps, from its credential file. It never reads a minted token from ${MINTED_TOKEN_VARIABLE}, and refuses the run where that variable is set`;
-var TZMESH_AFTER_OWN_ERROR = "whether the run's token was minted, the agent registered, or its secret kept is unknown. list_tokens from your tool shows the token by its label, turnzero command, and revoke_token ends it. tzmesh_list_participants shows the agent, and delete_agent deletes it";
+var tzmeshAfterOwnError = (call) => {
+  const named = call.named[TZMESH_OPTION.tzmeshEstate];
+  const origin = call.named[TZMESH_OPTION.origin];
+  const estate = TZMESH_ESTATES.find((entry) => entry === named) ?? (typeof origin === "string" ? estateOfPlane(origin) : null);
+  const page = (entry) => `${ESTATE_ORIGINS[entry].site}/me`;
+  const where = estate !== null ? page(estate) : `${page("production")} for an agent on production or ${page("development")} for one on development`;
+  return `whether the run's token was minted, the agent registered, or its secret kept is unknown. list_tokens from your tool shows the token by its label, turnzero command, and revoke_token ends it. tzmesh_list_participants shows the agent. Your person can delete it at ${where} under Hosted agents, open the agent's Manage keys, choose Unregister agent, then confirm`;
+};
 var TZMESH_FIRST_ACT_AFTER_OWN_ERROR = "a request may now be pending in this computer's credential file, and nothing was sent";
 var TZMESH_ROW = Object.freeze({
   name: TZMESH_SUBCOMMAND,
@@ -11153,7 +11165,7 @@ var TZMESH_ROW = Object.freeze({
     `For an agent a Turn Zero Cloud application hosts, the same run sets it up. ${TZMESH_OPTION.webhookOrigin} sets its webhook at that application's origin, and ${TZMESH_OPTION.webhookSecret} names where the webhook's signing secret is stored. ${TZMESH_OPTION.join} joins its channels. Its description, title, and ${TZMESH_OPTION.public} go into the register. Where a step fails, follow the recovery the run prints before running the line again.`,
     `The run reads this computer's token for each address it sends to: the ${TZMESH_OPTION.tzmeshEstate} platform's, to revoke the run's token, and under ${TZMESH_OPTION.secret} the ${TZMESH_OPTION.origin} platform's, to store the secret. Authorize this computer at each first.`
   ],
-  afterOwnError: (call) => call.named[TZMESH_OPTION.mint] !== void 0 ? TZMESH_AFTER_OWN_ERROR : TZMESH_FIRST_ACT_AFTER_OWN_ERROR,
+  afterOwnError: (call) => call.named[TZMESH_OPTION.mint] !== void 0 ? tzmeshAfterOwnError(call) : TZMESH_FIRST_ACT_AFTER_OWN_ERROR,
   run: tzmeshRegister
 });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "turnzero",
-  "version": "0.37.0",
+  "version": "0.38.0",
   "type": "module",
   "description": "Deploy and run AI-built apps with Turn Zero Cloud hosting and backend services.",
   "license": "Apache-2.0",
@@ -8,9 +8,9 @@
     "node": ">=24"
   },
   "plane_wire": {
-    "action_payloads": "2026-11-04.8",
-    "management_api": "2026-11-04.7",
-    "wire_errors": "2026-11-04.2"
+    "action_payloads": "2026-11-05.2",
+    "management_api": "2026-11-05.3",
+    "wire_errors": "2026-11-05.2"
   },
   "bin": {
     "turnzero": "dist/turnzero-cloud.mjs"