@agentuity/cli 0.1.16 → 0.1.18

package/dist/cmd/cloud/queue/stats.js

@@ -0,0 +1,239 @@
+import { z } from 'zod';
+import { createCommand } from '../../../types';
+import * as tui from '../../../tui';
+import { createQueueAPIClient, getQueueApiOptions } from './util';
+import { getCommand } from '../../../command-prefix';
+import { getOrgAnalytics, getQueueAnalytics, streamOrgAnalytics, streamQueueAnalytics, } from '@agentuity/server';
+const StatsResponseSchema = z.union([
+    z.object({ type: z.literal('org'), analytics: z.unknown() }),
+    z.object({ type: z.literal('queue'), analytics: z.unknown() }),
+    z.object({ type: z.literal('stream'), events: z.array(z.unknown()) }),
+]);
+function formatNumber(n) {
+    if (n >= 1_000_000)
+        return `${(n / 1_000_000).toFixed(1)}M`;
+    if (n >= 1_000)
+        return `${(n / 1_000).toFixed(1)}K`;
+    return String(n);
+}
+function formatPercent(n) {
+    return `${n.toFixed(2)}%`;
+}
+function formatLatency(ms) {
+    if (ms >= 1000)
+        return `${(ms / 1000).toFixed(1)}s`;
+    return `${Math.round(ms)}ms`;
+}
+function formatDuration(start, end) {
+    const startDate = new Date(start);
+    const endDate = new Date(end);
+    const hours = Math.round((endDate.getTime() - startDate.getTime()) / 3600000);
+    if (hours >= 24)
+        return `${Math.round(hours / 24)}d`;
+    return `${hours}h`;
+}
+function displayOrgAnalytics(analytics) {
+    const { summary, queues, period } = analytics;
+    tui.info(`Organization Analytics (${formatDuration(period.start, period.end)})`);
+    tui.newline();
+    console.log(tui.colorPrimary('Summary:'));
+    console.log(`  ${tui.muted('Total Queues:')}     ${summary.total_queues}`);
+    console.log(`  ${tui.muted('Published:')}        ${formatNumber(summary.total_messages_published)}`);
+    console.log(`  ${tui.muted('Delivered:')}        ${formatNumber(summary.total_messages_delivered)}`);
+    console.log(`  ${tui.muted('Acknowledged:')}     ${formatNumber(summary.total_messages_acknowledged)}`);
+    console.log(`  ${tui.muted('DLQ Messages:')}     ${formatNumber(summary.total_dlq_messages)}`);
+    console.log(`  ${tui.muted('Avg Latency:')}      ${formatLatency(summary.avg_latency_ms)}`);
+    console.log(`  ${tui.muted('P95 Latency:')}      ${formatLatency(summary.p95_latency_ms)}`);
+    console.log(`  ${tui.muted('Error Rate:')}       ${formatPercent(summary.error_rate_percent)}`);
+    if (queues.length > 0) {
+        tui.newline();
+        console.log(tui.colorPrimary('Queues:'));
+        const tableData = queues.map((q) => ({
+            Name: q.name,
+            Type: q.queue_type,
+            Published: formatNumber(q.messages_published),
+            Delivered: formatNumber(q.messages_delivered),
+            Backlog: formatNumber(q.backlog),
+            DLQ: formatNumber(q.dlq_count),
+            'Avg Latency': formatLatency(q.avg_latency_ms),
+            'Error %': formatPercent(q.error_rate_percent),
+        }));
+        tui.table(tableData);
+    }
+}
+function displayQueueAnalytics(analytics) {
+    const { queue_name, queue_type, period, current, period_stats, latency, consumer_latency } = analytics;
+    tui.info(`Queue: ${queue_name} (${queue_type})`);
+    console.log(tui.colorWarning(`Period: ${formatDuration(period.start, period.end)}`));
+    tui.newline();
+    console.log(tui.colorPrimary('Current State:'));
+    console.log(`  ${tui.muted('Backlog:')}          ${formatNumber(current.backlog)}`);
+    console.log(`  ${tui.muted('In-Flight:')}        ${formatNumber(current.messages_in_flight)}`);
+    console.log(`  ${tui.muted('DLQ:')}              ${formatNumber(current.dlq_count)}`);
+    console.log(`  ${tui.muted('Consumers:')}        ${current.active_consumers}`);
+    if (current.oldest_message_age_seconds != null) {
+        console.log(`  ${tui.muted('Oldest Msg Age:')}   ${current.oldest_message_age_seconds}s`);
+    }
+    tui.newline();
+    console.log(tui.colorPrimary('Period Stats:'));
+    console.log(`  ${tui.muted('Published:')}          ${formatNumber(period_stats.messages_published)}`);
+    console.log(`  ${tui.muted('Delivered:')}          ${formatNumber(period_stats.messages_delivered)}`);
+    console.log(`  ${tui.muted('Acknowledged:')}       ${formatNumber(period_stats.messages_acknowledged)}`);
+    console.log(`  ${tui.muted('Failed:')}             ${formatNumber(period_stats.messages_failed)}`);
+    console.log(`  ${tui.muted('Replayed:')}           ${formatNumber(period_stats.messages_replayed)}`);
+    console.log(`  ${tui.muted('Bytes Published:')}    ${tui.formatBytes(period_stats.bytes_published)}`);
+    console.log(`  ${tui.muted('Delivery Attempts:')}  ${formatNumber(period_stats.delivery_attempts)}`);
+    console.log(`  ${tui.muted('Retries:')}            ${formatNumber(period_stats.retry_count)}`);
+    tui.newline();
+    console.log(tui.colorPrimary('Delivery Latency:'));
+    console.log(`  ${tui.muted('Average:')}          ${formatLatency(latency.avg_ms)}`);
+    if (latency.p50_ms != null)
+        console.log(`  ${tui.muted('Median (P50):')}     ${formatLatency(latency.p50_ms)}`);
+    if (latency.p95_ms != null)
+        console.log(`  ${tui.muted('P95:')}              ${formatLatency(latency.p95_ms)}`);
+    if (latency.p99_ms != null)
+        console.log(`  ${tui.muted('P99:')}              ${formatLatency(latency.p99_ms)}`);
+    if (latency.max_ms != null)
+        console.log(`  ${tui.muted('Max:')}              ${formatLatency(latency.max_ms)}`);
+    tui.newline();
+    console.log(tui.colorPrimary('Consumer Latency:'));
+    console.log(`  ${tui.muted('Average:')}          ${formatLatency(consumer_latency.avg_ms)}`);
+    if (consumer_latency.p50_ms != null)
+        console.log(`  ${tui.muted('Median (P50):')}     ${formatLatency(consumer_latency.p50_ms)}`);
+    if (consumer_latency.p95_ms != null)
+        console.log(`  ${tui.muted('P95:')}              ${formatLatency(consumer_latency.p95_ms)}`);
+    if (consumer_latency.p99_ms != null)
+        console.log(`  ${tui.muted('P99:')}              ${formatLatency(consumer_latency.p99_ms)}`);
+    if (analytics.destinations && analytics.destinations.length > 0) {
+        tui.newline();
+        tui.info('Destinations:');
+        const destData = analytics.destinations.map((d) => {
+            const total = d.success_count + d.failure_count;
+            const errorRate = total > 0 ? (d.failure_count / total) * 100 : 0;
+            return {
+                ID: d.id.slice(0, 12) + '...',
+                URL: d.url.length > 40 ? d.url.slice(0, 37) + '...' : d.url,
+                Success: formatNumber(d.success_count),
+                Failed: formatNumber(d.failure_count),
+                'Avg Response': d.avg_response_time_ms ? formatLatency(d.avg_response_time_ms) : '-',
+                'Error %': formatPercent(errorRate),
+            };
+        });
+        tui.table(destData);
+    }
+}
+function displayStreamEvent(event, queueName) {
+    const time = new Date(event.timestamp).toLocaleTimeString();
+    const prefix = queueName ? `[${queueName}]` : '[org]';
+    process.stdout.write('\x1b[2K\r');
+    process.stdout.write(`${tui.colorMuted(time)} ${prefix} ` +
+        `Backlog: ${tui.colorInfo(formatNumber(event.backlog))} | ` +
+        `In-Flight: ${tui.colorInfo(formatNumber(event.messages_in_flight))} | ` +
+        `Throughput: ${tui.colorSuccess(formatNumber(event.throughput_1m))}/min | ` +
+        `Latency: ${formatLatency(event.avg_latency_ms)} | ` +
+        `Errors: ${event.error_rate_1m > 0 ? tui.colorError(String(event.error_rate_1m)) : '0'}/min`);
+}
+export const statsSubcommand = createCommand({
+    name: 'stats',
+    description: 'View queue analytics and statistics',
+    tags: ['read-only', 'requires-auth'],
+    requires: { auth: true, org: true },
+    examples: [
+        {
+            command: getCommand('cloud queue stats'),
+            description: 'View org-level analytics for all queues',
+        },
+        {
+            command: getCommand('cloud queue stats --name my-queue'),
+            description: 'View detailed analytics for a specific queue',
+        },
+        {
+            command: getCommand('cloud queue stats --live'),
+            description: 'Stream real-time stats (Ctrl+C to exit)',
+        },
+        {
+            command: getCommand('cloud queue stats --name my-queue --live --interval 10'),
+            description: 'Stream queue stats every 10 seconds',
+        },
+    ],
+    schema: {
+        args: z.object({
+            name: z.string().optional().describe('Queue name (omit for org-level stats)'),
+        }),
+        options: z.object({
+            live: z.boolean().default(false).describe('Stream real-time stats'),
+            interval: z.number().default(5).describe('Refresh interval in seconds (for --live)'),
+            start: z.string().optional().describe('Start time (ISO 8601)'),
+            end: z.string().optional().describe('End time (ISO 8601)'),
+            granularity: z.enum(['minute', 'hour', 'day']).optional().describe('Time granularity'),
+        }),
+        response: StatsResponseSchema,
+    },
+    idempotent: true,
+    async handler(ctx) {
+        const { args, opts, options } = ctx;
+        const client = await createQueueAPIClient(ctx);
+        const apiOptions = getQueueApiOptions(ctx);
+        const analyticsOptions = {
+            ...apiOptions,
+            start: opts.start,
+            end: opts.end,
+            granularity: opts.granularity,
+        };
+        if (opts.live) {
+            const events = [];
+            tui.info(`Streaming stats every ${opts.interval}s... ${tui.colorMuted('(Ctrl+C to exit)')}`);
+            tui.info('');
+            const handleInterrupt = () => {
+                tui.info('');
+                tui.info('Stream stopped.');
+                process.exit(0);
+            };
+            process.on('SIGINT', handleInterrupt);
+            try {
+                if (args.name) {
+                    const stream = streamQueueAnalytics(client, args.name, {
+                        interval: opts.interval,
+                        orgId: apiOptions?.orgId,
+                    });
+                    for await (const event of stream) {
+                        events.push(event);
+                        if (!options.json) {
+                            displayStreamEvent(event, args.name);
+                        }
+                    }
+                }
+                else {
+                    const stream = streamOrgAnalytics(client, {
+                        interval: opts.interval,
+                        orgId: apiOptions?.orgId,
+                    });
+                    for await (const event of stream) {
+                        events.push(event);
+                        if (!options.json) {
+                            displayStreamEvent(event);
+                        }
+                    }
+                }
+            }
+            finally {
+                process.off('SIGINT', handleInterrupt);
+            }
+            return { type: 'stream', events };
+        }
+        if (args.name) {
+            const analytics = await getQueueAnalytics(client, args.name, analyticsOptions);
+            if (!options.json) {
+                displayQueueAnalytics(analytics);
+            }
+            return { type: 'queue', analytics };
+        }
+        const analytics = await getOrgAnalytics(client, analyticsOptions);
+        if (!options.json) {
+            displayOrgAnalytics(analytics);
+        }
+        return { type: 'org', analytics };
+    },
+});
+export default statsSubcommand;
+//# sourceMappingURL=stats.js.map

package/dist/cmd/cloud/queue/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/queue/stats.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,GAAG,MAAM,cAAc,CAAC;AACpC,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,QAAQ,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EACN,eAAe,EACf,iBAAiB,EACjB,kBAAkB,EAClB,oBAAoB,GAIpB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC;IACnC,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IAC5D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;IAC9D,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;CACrE,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,CAAS;IAC9B,IAAI,CAAC,IAAI,SAAS;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IAC5D,IAAI,CAAC,IAAI,KAAK;QAAE,OAAO,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC/B,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;AAC3B,CAAC;AAED,SAAS,aAAa,CAAC,EAAU;IAChC,IAAI,EAAE,IAAI,IAAI;QAAE,OAAO,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;IACpD,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC;AAC9B,CAAC;AAED,SAAS,cAAc,CAAC,KAAa,EAAE,GAAW;IACjD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,SAAS,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;IAC9E,IAAI,KAAK,IAAI,EAAE;QAAE,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,CAAC;IACrD,OAAO,GAAG,KAAK,GAAG,CAAC;AACpB,CAAC;AAED,SAAS,mBAAmB,CAAC,SAAuB;IACnD,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAE9C,GAAG,CAAC,IAAI,CAAC,2BAA2B,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjF,GAAG,CAAC,OAAO,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;IAC1C,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3E,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,YAAY,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,YAAY,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,YAAY,CAAC,OAAO,CAAC,2BAA2B,CAAC,EAAE,CAC1F,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;IAC5F,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,UAAU,aAAa,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAEhG,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACzC,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACpC,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,UAAU;YAClB,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC7C,SAAS,EAAE,YAAY,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC7C,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;YAChC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9B,aAAa,EAAE,aAAa,CAAC,CAAC,CAAC,cAAc,CAAC;YAC9C,SAAS,EAAE,aAAa,CAAC,CAAC,CAAC,kBAAkB,CAAC;SAC9C,CAAC,CAAC,CAAC;QACJ,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACtB,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAyB;IACvD,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE,GACzF,SAAS,CAAC;IAEX,GAAG,CAAC,IAAI,CAAC,UAAU,UAAU,KAAK,UAAU,GAAG,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,cAAc,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrF,GAAG,CAAC,OAAO,EAAE,CAAC;IAEd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAChD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACpF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,YAAY,CAAC,OAAO,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACtF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC/E,IAAI,OAAO,CAAC,0BAA0B,IAAI,IAAI,EAAE,CAAC;QAChD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,iBAAiB,CAAC,MAAM,OAAO,CAAC,0BAA0B,GAAG,CAAC,CAAC;IAC3F,CAAC;IAED,GAAG,CAAC,OAAO,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC;IAC/C,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,YAAY,CAAC,YAAY,CAAC,kBAAkB,CAAC,EAAE,CACxF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,aAAa,YAAY,CAAC,YAAY,CAAC,kBAAkB,CAAC,EAAE,CACxF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,UAAU,YAAY,CAAC,YAAY,CAAC,qBAAqB,CAAC,EAAE,CAC3F,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,YAAY,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,CACrF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,cAAc,YAAY,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,kBAAkB,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,eAAe,CAAC,EAAE,CACxF,CAAC;IACF,OAAO,CAAC,GAAG,CACV,KAAK,GAAG,CAAC,KAAK,CAAC,oBAAoB,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC,iBAAiB,CAAC,EAAE,CACvF,CAAC;IACF,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,eAAe,YAAY,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAE/F,GAAG,CAAC,OAAO,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpF,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACrF,IAAI,OAAO,CAAC,MAAM,IAAI,IAAI;QACzB,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,aAAa,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAErF,GAAG,CAAC,OAAO,EAAE,CAAC;IACd,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,mBAAmB,CAAC,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,aAAa,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7F,IAAI,gBAAgB,CAAC,MAAM,IAAI,IAAI;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,QAAQ,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,gBAAgB,CAAC,MAAM,IAAI,IAAI;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9F,IAAI,gBAAgB,CAAC,MAAM,IAAI,IAAI;QAClC,OAAO,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,aAAa,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAE9F,IAAI,SAAS,CAAC,YAAY,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QAC1B,MAAM,QAAQ,GAAG,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACjD,MAAM,KAAK,GAAG,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,aAAa,CAAC;YAChD,MAAM,SAAS,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,OAAO;gBACN,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK;gBAC7B,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;gBAC3D,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;gBACtC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;gBACrC,cAAc,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,GAAG;gBACpF,SAAS,EAAE,aAAa,CAAC,SAAS,CAAC;aACnC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrB,CAAC;AACF,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAoB,EAAE,SAAkB;IACnE,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,kBAAkB,EAAE,CAAC;IAC5D,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC;IAEtD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAClC,OAAO,CAAC,MAAM,CAAC,KAAK,CACnB,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,MAAM,GAAG;QACnC,YAAY,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK;QAC3D,cAAc,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,KAAK;QACxE,eAAe,GAAG,CAAC,YAAY,CAAC,YAAY,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,SAAS;QAC3E,YAAY,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK;QACpD,WAAW,KAAK,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,CAC7F,CAAC;AACH,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC;IAC5C,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,qCAAqC;IAClD,IAAI,EAAE,CAAC,WAAW,EAAE,eAAe,CAAC;IACpC,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE;IACnC,QAAQ,EAAE;QACT;YACC,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC;YACxC,WAAW,EAAE,yCAAyC;SACtD;QACD;YACC,OAAO,EAAE,UAAU,CAAC,mCAAmC,CAAC;YACxD,WAAW,EAAE,8CAA8C;SAC3D;QACD;YACC,OAAO,EAAE,UAAU,CAAC,0BAA0B,CAAC;YAC/C,WAAW,EAAE,yCAAyC;SACtD;QACD;YACC,OAAO,EAAE,UAAU,CAAC,wDAAwD,CAAC;YAC7E,WAAW,EAAE,qCAAqC;SAClD;KACD;IACD,MAAM,EAAE;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;YACd,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uCAAuC,CAAC;SAC7E,CAAC;QACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,wBAAwB,CAAC;YACnE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,0CAA0C,CAAC;YACpF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uBAAuB,CAAC;YAC9D,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC;YAC1D,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,kBAAkB,CAAC;SACtF,CAAC;QACF,QAAQ,EAAE,mBAAmB;KAC7B;IACD,UAAU,EAAE,IAAI;IAEhB,KAAK,CAAC,OAAO,CAAC,GAAG;QAChB,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QAE3C,MAAM,gBAAgB,GAAG;YACxB,GAAG,UAAU;YACb,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,WAAW,EAAE,IAAI,CAAC,WAAW;SAC7B,CAAC;QAEF,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,MAAM,GAAoB,EAAE,CAAC;YAEnC,GAAG,CAAC,IAAI,CACP,yBAAyB,IAAI,CAAC,QAAQ,QAAQ,GAAG,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAClF,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAEb,MAAM,eAAe,GAAG,GAAG,EAAE;gBAC5B,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACb,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;gBAC5B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACjB,CAAC,CAAC;YACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YAEtC,IAAI,CAAC;gBACJ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACf,MAAM,MAAM,GAAG,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE;wBACtD,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,KAAK,EAAE,UAAU,EAAE,KAAK;qBACxB,CAAC,CAAC;oBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACnB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;4BACnB,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;wBACtC,CAAC;oBACF,CAAC;gBACF,CAAC;qBAAM,CAAC;oBACP,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE;wBACzC,QAAQ,EAAE,IAAI,CAAC,QAAQ;wBACvB,KAAK,EAAE,UAAU,EAAE,KAAK;qBACxB,CAAC,CAAC;oBACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;wBAClC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;wBACnB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;4BACnB,kBAAkB,CAAC,KAAK,CAAC,CAAC;wBAC3B,CAAC;oBACF,CAAC;gBACF,CAAC;YACF,CAAC;oBAAS,CAAC;gBACV,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;YACxC,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,QAAiB,EAAE,MAAM,EAAE,CAAC;QAC5C,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,SAAS,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC;YAE/E,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACnB,qBAAqB,CAAC,SAAS,CAAC,CAAC;YAClC,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,OAAgB,EAAE,SAAS,EAAE,CAAC;QAC9C,CAAC;QAED,MAAM,SAAS,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;QAElE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YACnB,mBAAmB,CAAC,SAAS,CAAC,CAAC;QAChC,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,KAAc,EAAE,SAAS,EAAE,CAAC;IAC5C,CAAC;CACD,CAAC,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/dist/cmd/cloud/queue/util.d.ts

@@ -0,0 +1,26 @@
+import type { Logger } from '@agentuity/core';
+import { APIClient, type QueueApiOptions } from '@agentuity/server';
+import type { AuthData, Config, GlobalOptions } from '../../../types';
+/**
+ * Context required for queue API operations.
+ */
+export interface QueueContext {
+    logger: Logger;
+    auth: AuthData;
+    config: Config | null;
+    options: GlobalOptions;
+    orgId?: string;
+}
+/**
+ * Creates an API client for queue operations.
+ *
+ * Queues are global resources that don't require a project context.
+ * Uses the global Catalyst API client with user authentication.
+ */
+export declare function createQueueAPIClient(ctx: QueueContext): Promise<APIClient>;
+/**
+ * Creates QueueApiOptions from the CLI context.
+ * Prioritizes explicit orgId on context, then falls back to global --org-id option.
+ */
+export declare function getQueueApiOptions(ctx: QueueContext): QueueApiOptions | undefined;
+//# sourceMappingURL=util.d.ts.map

package/dist/cmd/cloud/queue/util.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.d.ts","sourceRoot":"","sources":["../../../../src/cmd/cloud/queue/util.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAEtE;;GAEG;AACH,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,YAAY,GAAG,OAAO,CAAC,SAAS,CAAC,CAEhF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,YAAY,GAAG,eAAe,GAAG,SAAS,CAGjF"}

package/dist/cmd/cloud/queue/util.js

@@ -0,0 +1,19 @@
+import { getGlobalCatalystAPIClient } from '../../../config';
+/**
+ * Creates an API client for queue operations.
+ *
+ * Queues are global resources that don't require a project context.
+ * Uses the global Catalyst API client with user authentication.
+ */
+export async function createQueueAPIClient(ctx) {
+    return getGlobalCatalystAPIClient(ctx.logger, ctx.auth, ctx.config?.name);
+}
+/**
+ * Creates QueueApiOptions from the CLI context.
+ * Prioritizes explicit orgId on context, then falls back to global --org-id option.
+ */
+export function getQueueApiOptions(ctx) {
+    const orgId = ctx.orgId ?? ctx.options.orgId;
+    return orgId ? { orgId } : undefined;
+}
+//# sourceMappingURL=util.js.map

package/dist/cmd/cloud/queue/util.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"util.js","sourceRoot":"","sources":["../../../../src/cmd/cloud/queue/util.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAC;AAc7D;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAiB;IAC3D,OAAO,0BAA0B,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAiB;IACnD,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtC,CAAC"}

package/dist/cmd/cloud/sandbox/snapshot/build.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../../../src/cmd/cloud/sandbox/snapshot/build.ts"],"names":[],"mappings":"AAqBA,eAAO,MAAM,kBAAkB,QAAiC,CAAC;AACjE,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAwP3C,eAAO,MAAM,eAAe,yCAue1B,CAAC;AAEH,eAAe,eAAe,CAAC"}
+{"version":3,"file":"build.d.ts","sourceRoot":"","sources":["../../../../../src/cmd/cloud/sandbox/snapshot/build.ts"],"names":[],"mappings":"AAuBA,eAAO,MAAM,kBAAkB,QAAiC,CAAC;AACjE,eAAO,MAAM,uBAAuB,MAAM,CAAC;AA4R3C,eAAO,MAAM,eAAe,yCA4lB1B,CAAC;AAEH,eAAe,eAAe,CAAC"}

package/dist/cmd/cloud/sandbox/snapshot/build.js

@@ -5,8 +5,9 @@ import { YAML } from 'bun';
 import * as tar from 'tar';
 import { createCommand } from '../../../../types';
 import * as tui from '../../../../tui';
+import { ErrorCode } from '../../../../errors';
 import { getCommand } from '../../../../command-prefix';
-import { snapshotBuildInit, snapshotBuildFinalize, SnapshotBuildFileSchema, } from '@agentuity/server';
+import { snapshotBuildInit, snapshotBuildFinalize, snapshotUpload, SnapshotBuildFileSchema, } from '@agentuity/server';
 import { getCatalystAPIClient } from '../../../../config';
 import { validateAptDependencies } from '../../../../utils/apt-validator';
 import { encryptFIPSKEMDEMStream } from '../../../../crypto/box';
@@ -28,7 +29,11 @@ const SnapshotBuildResponseSchema = z.object({
         .record(z.string(), z.string())
         .optional()
         .describe('User-defined metadata key-value pairs'),
+    error: z.string().optional().describe('Error message if build failed'),
+    malwareDetected: z.boolean().optional().describe('True if malware was detected'),
+    virusName: z.string().optional().describe('Name of detected virus'),
 });
+const MALWARE_REGEX = /malware detected \(([^)]+)\)/i;
 function buildFileTree(files) {
     const root = { name: '', isFile: false, children: new Map() };
     for (const file of files) {
@@ -172,6 +177,27 @@ async function createTarGzArchive(directory, files, outputPath) {
         cwd: directory,
     }, filePaths);
 }
+function createProgressStream(file, totalSize, onProgress) {
+    let bytesRead = 0;
+    const reader = file.stream().getReader();
+    return new ReadableStream({
+        async pull(controller) {
+            const { done, value } = await reader.read();
+            if (done) {
+                controller.close();
+                onProgress(100);
+                return;
+            }
+            bytesRead += value.byteLength;
+            const percent = Math.min(99, Math.floor((bytesRead / totalSize) * 100));
+            onProgress(percent);
+            controller.enqueue(value);
+        },
+        cancel() {
+            reader.cancel();
+        },
+    });
+}
 async function generateContentHash(params) {
     const hash = createHash('sha256');
     hash.update(`runtime:${params.runtime}\n`);
@@ -186,7 +212,8 @@ async function generateContentHash(params) {
         const sortedFiles = [...params.files].sort((a, b) => a.path.localeCompare(b.path));
         for (const file of sortedFiles) {
             const contentHash = params.fileHashes.get(file.path) ?? '';
-            hash.update(`file:${file.path}:${file.size}:${contentHash}\n`);
+            const mode = file.mode.toString(8).padStart(4, '0');
+            hash.update(`file:${file.path}:${file.size}:${contentHash}:${mode}:${file.contentType}\n`);
         }
     }
     if (params.env && Object.keys(params.env).length > 0) {
@@ -195,6 +222,7 @@ async function generateContentHash(params) {
             hash.update(`env:${key}=${params.env[key]}\n`);
         }
     }
+    hash.update(`access:${params.isPublic ? 'public' : 'private'}\n`);
     return hash.digest('hex');
 }
 export const buildSubcommand = createCommand({
@@ -242,12 +270,42 @@ export const buildSubcommand = createCommand({
             description: z.string().optional().describe('Snapshot description (overrides build file)'),
             metadata: z.array(z.string()).optional().describe('Metadata key-value pairs (KEY=VALUE)'),
             force: z.boolean().optional().describe('Force rebuild even if content is unchanged'),
+            public: z
+                .boolean()
+                .optional()
+                .describe('Make snapshot public (enables virus scanning, no encryption)'),
+            confirm: z
+                .boolean()
+                .optional()
+                .describe('Confirm public snapshot publishing (required for --public)'),
         }),
         response: SnapshotBuildResponseSchema,
     },
     async handler(ctx) {
         const { args, opts, options, auth, region, config, logger, orgId } = ctx;
         const dryRun = options.dryRun === true;
+        const isPublic = opts.public === true;
+        if (isPublic && !dryRun) {
+            if (!opts.confirm) {
+                if (!tui.isTTYLike()) {
+                    logger.fatal(`Publishing a public snapshot requires confirmation.\n\n` +
+                        `Public snapshots make all environment variables and files publicly accessible.\n\n` +
+                        `To proceed, add the --confirm flag:\n` +
+                        `  ${getCommand('cloud sandbox snapshot build . --public --confirm')}\n\n` +
+                        `To preview what will be published, use --dry-run first:\n` +
+                        `  ${getCommand('cloud sandbox snapshot build . --public --dry-run')}`);
+                }
+                tui.warningBox('Public Snapshot', `You are publishing a public snapshot.\n\n` +
+                    `This will make all environment variables and\n` +
+                    `files in the snapshot publicly accessible.\n\n` +
+                    `Run with --dry-run to preview the contents.`);
+                console.log('');
+                const confirmed = await tui.confirm('Proceed with public snapshot?', false);
+                if (!confirmed) {
+                    logger.fatal('Aborted');
+                }
+            }
+        }
         const directory = resolve(args.directory);
         if (!existsSync(directory)) {
             logger.fatal(`Directory not found: ${directory}`);
@@ -362,19 +420,32 @@ export const buildSubcommand = createCommand({
         if (buildConfig.files && buildConfig.files.length > 0) {
             files = await resolveFileGlobs(directory, buildConfig.files);
         }
-        const fileList = Array.from(files.values()).map((f) => ({
-            path: f.path,
-            size: f.size,
-        }));
-        const totalSize = fileList.reduce((sum, f) => sum + f.size, 0);
-        const fileHashes = new Map();
+        const fileMetadata = new Map();
         for (const file of files.values()) {
             const fullPath = join(directory, file.path);
             const bunFile = Bun.file(fullPath);
             const content = await bunFile.arrayBuffer();
             const hash = createHash('sha256').update(Buffer.from(content)).digest('hex');
-            fileHashes.set(file.path, hash);
+            const contentType = bunFile.type || 'application/octet-stream';
+            const stat = statSync(fullPath);
+            const mode = stat.mode & 0o7777; // Extract permission bits only
+            fileMetadata.set(file.path, { sha256: hash, contentType, mode });
+        }
+        const fileHashes = new Map();
+        for (const [path, meta] of fileMetadata) {
+            fileHashes.set(path, meta.sha256);
         }
+        const fileList = Array.from(files.values()).map((f) => {
+            const meta = fileMetadata.get(f.path);
+            return {
+                path: f.path,
+                size: f.size,
+                sha256: meta?.sha256 ?? '',
+                contentType: meta?.contentType ?? 'application/octet-stream',
+                mode: meta?.mode ?? 0o644,
+            };
+        });
+        const totalSize = fileList.reduce((sum, f) => sum + f.size, 0);
         const contentHash = await generateContentHash({
             runtime: buildConfig.runtime,
             description: finalDescription,
@@ -382,6 +453,7 @@ export const buildSubcommand = createCommand({
             files: fileList,
             fileHashes,
             env: finalEnv,
+            isPublic,
         });
         if (dryRun) {
             if (!options.json) {
@@ -393,10 +465,11 @@ export const buildSubcommand = createCommand({
                         Description: finalDescription ?? '-',
                         Runtime: buildConfig.runtime,
                         Tag: opts.tag ?? 'latest',
+                        Access: isPublic ? 'public' : 'private',
                         Size: tui.formatBytes(totalSize),
                         Files: fileList.length.toFixed(),
                     },
-                ], ['Name', 'Description', 'Runtime', 'Tag', 'Size', 'Files'], { layout: 'vertical', padStart: '  ' });
+                ], ['Name', 'Description', 'Runtime', 'Tag', 'Access', 'Size', 'Files'], { layout: 'vertical', padStart: '  ' });
                 if (buildConfig.dependencies && buildConfig.dependencies.length > 0) {
                     console.log('');
                     tui.info('Dependencies:');
@@ -458,11 +531,12 @@ export const buildSubcommand = createCommand({
                     return await snapshotBuildInit(client, {
                         runtime: buildConfig.runtime,
                         name: finalName,
-                        tag: opts.tag,
+                        tag: opts.tag ?? 'latest',
                         description: finalDescription,
                         contentHash,
                         force: opts.force,
-                        encrypt: true,
+                        encrypt: !isPublic,
+                        public: isPublic,
                         orgId,
                     });
                 },
@@ -490,7 +564,7 @@ export const buildSubcommand = createCommand({
                     userMetadata: finalMetadata,
                 };
             }
-            // Encrypt the archive if public key is provided
+            // Encrypt the archive if public key is provided (private snapshots only)
             let uploadPath = archivePath;
             let uploadSize = archiveSize;
             if (initResult.publicKey) {
@@ -518,26 +592,74 @@ export const buildSubcommand = createCommand({
                 uploadPath = encryptedPath;
                 uploadSize = Bun.file(encryptedPath).size;
             }
-            await tui.spinner({
-                message: 'Uploading snapshot...',
-                type: 'progress',
-                clearOnSuccess: true,
-                callback: async (updateProgress) => {
-                    const uploadFile = Bun.file(uploadPath);
-                    const response = await fetch(initResult.uploadUrl, {
-                        method: 'PUT',
-                        headers: {
-                            'Content-Type': 'application/gzip',
-                            'Content-Length': String(uploadSize),
+            if (initResult.uploadUrl) {
+                // Private snapshot: upload directly to S3
+                // Use Bun.file() directly as body - Bun sets Content-Length automatically from file size
+                await tui.spinner({
+                    message: 'Uploading snapshot...',
+                    clearOnSuccess: true,
+                    callback: async () => {
+                        const uploadFile = Bun.file(uploadPath);
+                        const response = await fetch(initResult.uploadUrl, {
+                            method: 'PUT',
+                            headers: {
+                                'Content-Type': 'application/gzip',
+                            },
+                            body: uploadFile,
+                        });
+                        if (!response.ok) {
+                            throw new Error(`Upload failed: ${response.status} ${response.statusText}`);
+                        }
+                    },
+                });
+            }
+            else {
+                // Public snapshot: upload via Catalyst (with virus scanning)
+                try {
+                    await tui.spinner({
+                        message: 'Uploading and scanning snapshot...',
+                        type: 'progress',
+                        clearOnSuccess: true,
+                        clearOnError: true,
+                        callback: async (updateProgress) => {
+                            const uploadFile = Bun.file(uploadPath);
+                            const progressStream = createProgressStream(uploadFile, uploadSize, updateProgress);
+                            await snapshotUpload(client, {
+                                snapshotId: initResult.snapshotId,
+                                body: progressStream,
+                                contentLength: uploadSize,
+                                orgId,
+                            });
                         },
-                        body: uploadFile,
                     });
-                    if (!response.ok) {
-                        throw new Error(`Upload failed: ${response.status} ${response.statusText}`);
+                }
+                catch (err) {
+                    const errorMessage = err instanceof Error ? err.message : String(err);
+                    const malwareMatch = MALWARE_REGEX.exec(errorMessage);
+                    if (malwareMatch) {
+                        const virusName = malwareMatch[1];
+                        if (options.json) {
+                            console.log(JSON.stringify({
+                                snapshotId: '',
+                                name: finalName ?? '',
+                                tag: opts.tag ?? 'latest',
+                                runtime: buildConfig.runtime,
+                                sizeBytes: totalSize,
+                                fileCount: fileList.length,
+                                createdAt: new Date().toISOString(),
+                                error: errorMessage,
+                                malwareDetected: true,
+                                virusName,
+                            }, null, 2));
+                            process.exit(ErrorCode.MALWARE_DETECTED);
+                        }
+                        console.log('');
+                        tui.errorBox('Malware Detected', `Your snapshot was rejected because it contains malware.\n\nVirus: ${virusName}\n\nPlease remove the infected files and try again.`);
+                        tui.fatal('Snapshot build failed due to malware detection', ErrorCode.MALWARE_DETECTED);
                     }
-                    updateProgress(100);
-                },
-            });
+                    throw err;
+                }
+            }
             const snapshot = await tui.spinner({
                 message: 'Finalizing snapshot...',
                 clearOnSuccess: true,