@buildinternet/uploads 0.11.0 → 0.11.1

package/README.md

@@ -128,7 +128,7 @@ Config layers (first match wins): CLI flags → env vars → `--env-file` → `~
 
 ## MCP server
 
-`uploads mcp` serves the Model Context Protocol over stdio (newline-delimited JSON-RPC, no extra dependencies). Tools include file operations plus public gallery workflows: `gallery_create`, `gallery_get`, `gallery_add`, `gallery_link`, and `gallery_find_by_reference`. Gallery tools return API-provided canonical URLs and never need GitHub credentials. The remaining stdio tools are `put`, `attach`, `list`, `delete`, `set_metadata`, `find_files`, `usage`, `reconcile`, `purge_expired`, `comment`, `health`, and `doctor` — with the same config resolution and defaults, plus a per-call `workspace` argument. `put` and `attach` accept a `metadata` param (same `gh.*` auto-injection as the CLI's `attach`); `set_metadata` and `find_files` mirror `uploads meta set` and `uploads find`. Interactive/credential commands (`setup`, `login`, `admin`, `config`) are not exposed. A token isn't required to start the server; auth errors surface per tool call (`health` needs no auth).
+`uploads mcp` serves the Model Context Protocol over stdio (newline-delimited JSON-RPC, no extra dependencies). Tools include file operations plus public gallery workflows: `gallery_create`, `gallery_get`, `gallery_add`, `gallery_link`, and `gallery_find_by_reference`. Gallery tools return API-provided canonical URLs and never need GitHub credentials. The remaining stdio tools are `put`, `attach`, `list`, `delete`, `get_metadata`, `set_metadata`, `find_files`, `usage`, `reconcile`, `purge_expired`, `comment`, `health`, and `doctor` — with the same config resolution and defaults, plus a per-call `workspace` argument. `put` and `attach` accept a `metadata` param (same `gh.*` auto-injection as the CLI's `attach`); `get_metadata`, `set_metadata`, and `find_files` mirror `uploads meta get` / `meta set` / `find`. Interactive/credential commands (`setup`, `login`, `admin`, `config`) are not exposed. A token isn't required to start the server; auth errors surface per tool call (`health` needs no auth).
 
 ```json
 { "command": "uploads", "args": ["--env-file", "/path/to/.env", "mcp"] }
@@ -136,7 +136,7 @@ Config layers (first match wins): CLI flags → env vars → `--env-file` → `~
 
 Or with `UPLOADS_TOKEN`/`UPLOADS_WORKSPACE` in the environment or user config. Claude Code: `claude mcp add uploads -- uploads --env-file /path/to/.env mcp`.
 
-For HTTP clients there's also a hosted variant at `https://agents.uploads.sh/mcp` — the workspace is inferred from the bearer token, so only the URL and token are needed (`https://agents.uploads.sh/<workspace>/mcp` and the `mcp.uploads.sh` hostname also work). Tools: file operations plus `gallery_create`, `gallery_get`, `gallery_add`, `gallery_link`, and `gallery_find_by_reference`; all use the same bearer-token workspace scopes and gallery URLs come from the API — see `apps/mcp` in the repo. The hosted `put` also accepts a `metadata` param. `uploads install` registers the skills + hosted MCP (short progress; `--verbose` for underlying output). Its `put` takes no content type: the stored type is sniffed server-side from the bytes and checked against the workspace allowlist, and writes are rate limited per workspace.
+For HTTP clients there's also a hosted variant at `https://agents.uploads.sh/mcp` — the workspace is inferred from the bearer token, so only the URL and token are needed (`https://agents.uploads.sh/<workspace>/mcp` and the `mcp.uploads.sh` hostname also work). Tools: file operations (including `get_metadata` / `set_metadata` / `find_files`) plus `gallery_create`, `gallery_get`, `gallery_add`, `gallery_link`, and `gallery_find_by_reference`; all use the same bearer-token workspace scopes and gallery URLs come from the API — see `apps/mcp` in the repo. The hosted `put` also accepts a `metadata` param. `uploads install` registers the skills + hosted MCP (short progress; `--verbose` for underlying output). Its `put` takes no content type: the stored type is sniffed server-side from the bytes and checked against the workspace allowlist, and writes are rate limited per workspace.
 
 ## Programmatic use
 

package/dist/async.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Run `fn` over `values` with bounded concurrency, preserving input order
+ * in the returned array. Used by multi-file attach (and similar fan-outs).
+ */
+export declare function mapBounded<T, R>(values: readonly T[], concurrency: number, fn: (value: T, index: number) => Promise<R>): Promise<R[]>;

package/dist/async.js

@@ -0,0 +1,21 @@
+/**
+ * Run `fn` over `values` with bounded concurrency, preserving input order
+ * in the returned array. Used by multi-file attach (and similar fan-outs).
+ */
+export async function mapBounded(values, concurrency, fn) {
+    if (values.length === 0)
+        return [];
+    const limit = Math.max(1, Math.min(concurrency, values.length));
+    const result = Array.from({ length: values.length });
+    let next = 0;
+    async function worker() {
+        for (;;) {
+            const index = next++;
+            if (index >= values.length)
+                return;
+            result[index] = await fn(values[index], index);
+        }
+    }
+    await Promise.all(Array.from({ length: limit }, worker));
+    return result;
+}

package/dist/cli-catalog.js

@@ -59,7 +59,7 @@ export const ROOT_COMMANDS = [
     },
     {
         name: "put",
-        usage: "put <file>",
+        usage: "put <file...>",
         summary: "Upload (+ URL + markdown for GitHub)",
         essential: true,
     },

package/dist/commands/install.js

@@ -189,6 +189,7 @@ export async function runInstall(args, opts, help = false) {
         .filter(([step]) => step.startsWith("skill:"))
         .map(([, r]) => r);
     const skillsOk = skillResults.length > 0 && skillResults.every((r) => r.ok);
+    const skillsFailed = skillResults.some((r) => !r.ok);
     if (!failed && !dryRun) {
         const stepLabels = [
             ...new Set(Object.keys(results).map((k) => (k.startsWith("skill:") ? "skills" : k))),
@@ -201,5 +202,9 @@ export async function runInstall(args, opts, help = false) {
             : "Fix the MCP step above, then re-run `uploads install mcp`.";
         process.stdout.write(`\nSkills are installed. ${next}\n`);
     }
+    else if (failed && !dryRun && skillsFailed) {
+        // Mixed or total skill failure used to print only per-step lines (#191).
+        process.stdout.write("\nSkill install incomplete. Fix the errors above, then re-run `uploads install skill`.\n");
+    }
     return failed ? 1 : 0;
 }

package/dist/commands.d.ts

@@ -1,4 +1,4 @@
-import { type UploadsClient } from "./client.js";
+import { type PutResult, type UploadsClient } from "./client.js";
 import { type CommandFlags } from "./cli-args.js";
 import { type ResolvedConfig } from "./config.js";
 import { type GhTarget } from "./github.js";
@@ -6,6 +6,10 @@ import { type CommandRunner } from "./github-gh.js";
 import { type OptimizeImageOptions, type OptimizeImageResult } from "./optimize.js";
 import { type FrameResult } from "./frame.js";
 import type { PutDefaults } from "./config-file.js";
+/** Parallel fan-out for multi-file put/attach (matches files-sdk bulk default). */
+export declare const UPLOAD_BATCH_CONCURRENCY = 8;
+/** @deprecated Use UPLOAD_BATCH_CONCURRENCY. */
+export declare const ATTACH_CONCURRENCY = 8;
 export { formatUsageHuman } from "./format-usage.js";
 export interface CliContext {
     config: ResolvedConfig;
@@ -42,6 +46,92 @@ export declare function syncAttachmentsComment(client: UploadsClient, target: Gh
     action: "created" | "updated" | "skipped";
     count: number;
 }>;
+export type AttachUploadItem = PutResult & {
+    file: string;
+    markdown: string;
+    optimize: {
+        optimized: boolean;
+        skippedReason?: OptimizeImageResult["skippedReason"];
+        originalBytes: number;
+        outputBytes: number;
+        filename: string;
+    };
+    frame?: PreparedUpload["frame"];
+};
+export type AttachFailure = {
+    file: string;
+    error: {
+        message: string;
+        code?: string;
+        status?: number;
+    };
+};
+/**
+ * Prepare + put each path as a PR/issue attachment with bounded concurrency.
+ * Per-file errors collect in `failures` (does not throw). `firstError` is the
+ * original cause of the first failure — for rethrowing single-file CLI paths.
+ */
+export declare function uploadAttachments(opts: {
+    client: UploadsClient;
+    target: GhTarget;
+    files: readonly string[];
+    contentType?: string;
+    optimize: OptimizeImageOptions;
+    frame: {
+        frameId?: string;
+        frameUrl?: string;
+        frameFit?: "cover" | "contain";
+    };
+    metadata?: Record<string, string>;
+    /** Provenance `client` field (default uploads-cli). */
+    provenanceClient?: string;
+    concurrency?: number;
+}): Promise<{
+    uploads: AttachUploadItem[];
+    failures: AttachFailure[];
+    firstError?: unknown;
+}>;
+export type PutUploadItem = PutResult & {
+    file: string;
+    markdown: string;
+    optimize: AttachUploadItem["optimize"];
+    frame?: PreparedUpload["frame"];
+};
+/**
+ * Prepare + put each path with put-style key resolution and bounded concurrency.
+ * Same partial-failure shape as uploadAttachments.
+ */
+export declare function uploadPuts(opts: {
+    client: UploadsClient;
+    files: readonly string[];
+    /** Single-file --name leaf override. */
+    nameOverride?: string;
+    /** Single-file --key. */
+    explicitKey?: string;
+    ghTarget?: GhTarget;
+    prefix?: string;
+    repo?: string;
+    ref?: string;
+    deriveRepoFromGit?: boolean;
+    contentType?: string;
+    dryRun?: boolean;
+    optimize: OptimizeImageOptions;
+    frame: {
+        frameId?: string;
+        frameUrl?: string;
+        frameFit?: "cover" | "contain";
+    };
+    metadata?: Record<string, string>;
+    provenanceClient?: string;
+    /** When set, used as alt for every file; else each file's basename. */
+    alt?: string;
+    width?: number;
+    concurrency?: number;
+}): Promise<{
+    uploads: PutUploadItem[];
+    failures: AttachFailure[];
+    firstError?: unknown;
+}>;
 export declare function runAttach(ctx: CliContext, args: string[], help?: boolean, run?: CommandRunner): Promise<number>;
 export declare function runPut(ctx: CliContext, args: string[], help?: boolean, run?: CommandRunner): Promise<number>;
 export declare function runGallery(ctx: CliContext, args: string[], help?: boolean): Promise<number>;