@dashai/cli 0.29.0 → 0.30.1

package/README.md

@@ -837,6 +837,30 @@ The CLI persists state at `$XDG_CONFIG_HOME/dashwise/auth.json` (typically `~/.c
 
 MIT
 
+### `dashwise module ship [slug]`
+
+Release and install in one command, for a person. It releases the latest push to the linked repository's **default branch** (or `--commit-sha <sha>`), waits for the build, then installs exactly that version the way `module install --version` does: for an update it first prints what the move does to the copy's data, asks once, and installs with the preview's `drift_hash`.
+
+```bash
+dashwise module ship                      # default-branch head of the module in module.json
+dashwise module ship my-module --workspace acme --bump patch
+dashwise module ship my-module --commit-sha <full-40-character-sha> --installation 156
+```
+
+Before anything is queued it prints the revision it will release (`Releasing <sha> from main`, from the server's release plan) and names newer work on another branch that is not included. If the release is still building at `--timeout` (exit 4), it prints `dashwise module ship <slug> --build <id>`, which waits for that build and then installs it, without queueing another release. `--yes` skips the install question when nothing is lost; it never accepts data loss. A move that loses data is accepted only by answering in a terminal; without one, it is refused and the refusal prints the `module install --accept-data-loss <drift_hash>` re-run line. **Refused inside an AI agent session**: an agent may release (`module release`), but taking a module live is a person's act. Exit codes are `module release`'s while building (4: still building) and `module install`'s after.
+
+### `dashwise module build-log [slug] <buildId>`
+
+Print a build's log as the server serves it: scrubbed (credentials, tokens, internal hosts and account ids are hidden; the count of hidden values is shown) and bounded to the newest part of the log. One positional is the build id, with the module from `module.json`.
+
+```bash
+dashwise module build-log 51
+dashwise module build-log my-module 51 --follow   # new lines until the build ends
+dashwise module build-log my-module 51 --json
+```
+
+`--follow` re-reads the log while the build is queued or building and prints only what is new (every 5 s while it grows, backing off to 10 s while it does not); it exits 0 when the build succeeds, 1 when it fails, 4 at `--timeout` (default 900 s). Text written to the terminal is sanitized: escape sequences (cursor moves, window titles, OSC 8 links, OSC 52 clipboard writes) and control characters other than newline and tab are removed, keeping only colour on a terminal; `--json` prints the server's text unchanged. Needs the backend's author build logs switched on; until then it says so.
+
 ### `dashwise module release [slug]`
 
 Release code already pushed to the module's linked GitHub repository. This uses

package/dist/bin.js

@@ -364,6 +364,14 @@ async function setOrigins(installationId, allowedOrigins, options = {}) {
     options
   );
 }
+async function getModuleBuildLog(moduleId, buildId, options = {}) {
+  return apiRequest(
+    "GET",
+    `/api/modules/${moduleId}/builds/${buildId}/log`,
+    void 0,
+    options
+  );
+}
 async function listInstallationSecrets(installationId, options = {}) {
   return apiRequest(
     "GET",
@@ -19217,8 +19225,16 @@ var MARKERS = [
   ["CODEX_SANDBOX_NETWORK_DISABLED", (v) => v.length > 0],
   ["CURSOR_AGENT", (v) => v.length > 0],
   ["DW_AGENT", (v) => v.length > 0],
-  ["DASHWISE_AGENT_SESSION", (v) => v === "1" || v === "true"]
+  ["DASHWISE_AGENT_SESSION", (v) => v === "1" || v === "true"],
+  ["CLAUDE_CODE_ENTRYPOINT", (v) => v.length > 0],
+  ["GEMINI_CLI", (v) => v === "1"],
+  ["COPILOT_AGENT_SESSION_ID", (v) => v.length > 0],
+  ["COPILOT_AGENT_JOB_ID", (v) => v.length > 0],
+  ["AI_AGENT", (v) => v.length > 0]
 ];
+MARKERS.map(
+  ([name]) => name
+);
 function agentSessionMarker(env = process.env) {
   for (const [name, test] of MARKERS) {
     const value = env[name];
@@ -20787,7 +20803,10 @@ async function moduleReleaseCommand(slugArg, options) {
   if (resuming && (options.commitSha !== void 0 || options.bump !== void 0 || options.noWait)) {
     return usage2("--build only reads an existing release; do not combine it with --commit-sha, --bump or --no-wait.");
   }
-  if (!resuming && (!options.commitSha || !FULL_SHA.test(options.commitSha))) {
+  if (!resuming && options.commitSha !== void 0 && !FULL_SHA.test(options.commitSha)) {
+    return usage2("--commit-sha requires the full 40-character SHA already pushed to the linked repository.");
+  }
+  if (!resuming && options.commitSha === void 0 && !options.defaultBranchHead) {
     return usage2("--commit-sha requires the full 40-character SHA already pushed to the linked repository.");
   }
   const bump = options.bump ?? "minor";
@@ -20810,7 +20829,7 @@ async function moduleReleaseCommand(slugArg, options) {
       return usage2("Release creates a version. Pass --yes to confirm in non-interactive or --json mode.");
     }
     const answer = await select({
-      message: `Release ${slug} at ${options.commitSha} with a ${bump} bump?`,
+      message: `Release ${slug} at ${options.commitSha ?? "the head of its default branch"} with a ${bump} bump?`,
       options: [{ value: "cancel", label: "Cancel" }, { value: "release", label: "Release this revision" }],
       initialValue: "cancel"
     });
@@ -20825,7 +20844,7 @@ async function moduleReleaseCommand(slugArg, options) {
   if (!resuming) {
     try {
       initial = await apiRequest("POST", `/api/modules/${moduleId}/builds`, {
-        commit_sha: pinnedSha,
+        ...pinnedSha !== void 0 ? { commit_sha: pinnedSha } : {},
         version_bump: bump
       }, auth);
     } catch (err) {
@@ -20839,12 +20858,13 @@ async function moduleReleaseCommand(slugArg, options) {
       if (!json && isTransientPollError(err)) info("Check the module build history in Dashwise before retrying; the release may already be queued.");
       return reportRefusal(err, { module: slug }, { json, action: "Release" });
     }
-    if (!isRepositoryBuild(initial, moduleId) || initial.commit_sha.toLowerCase() !== pinnedSha) {
+    if (!isRepositoryBuild(initial, moduleId) || pinnedSha !== void 0 && initial.commit_sha.toLowerCase() !== pinnedSha) {
       return reportCliError("Release response did not confirm the requested repository revision. Check the module build history before retrying.", { json });
     }
     buildId = initial.id;
   }
   const id = buildId;
+  options.onBuildId?.(id);
   const resume = `dashwise module release ${slug} --build ${id}`;
   if (!json) info(`Build #${id}. Resume checking: ${code(resume)}`);
   if (options.noWait && isRepositoryBuild(initial, moduleId) && (initial.status === "queued" || initial.status === "building")) {
@@ -20883,6 +20903,13 @@ async function moduleReleaseCommand(slugArg, options) {
       }
       if (json) out(JSON.stringify(value));
       else success(`Released ${slug} v${value.version} (build #${id}, revision ${pinnedSha}).`);
+      options.onReleased?.({
+        id,
+        module_id: moduleId,
+        commit_sha: pinnedSha,
+        version: value.version,
+        module_version_id: value.module_version_id
+      });
       return 0;
     }
     if (value.status === "failed") {
@@ -20924,6 +20951,248 @@ async function moduleReleaseCommand(slugArg, options) {
   }
 }
 
+// src/commands/module/build-log.ts
+init_api_client();
+init_config();
+init_manifest_io();
+init_output();
+init_permission_hint();
+var RUNNING = /* @__PURE__ */ new Set(["queued", "building"]);
+var FOLLOW_BASE_MS = 5e3;
+var FOLLOW_MAX_MS = 1e4;
+var MIN_OVERLAP = 64;
+function newLogText(printed, next) {
+  if (printed === "") return { text: next, moved: false };
+  if (next.startsWith(printed)) return { text: next.slice(printed.length), moved: false };
+  const min = Math.min(MIN_OVERLAP, printed.length);
+  const head = next.slice(0, min);
+  for (let j = printed.indexOf(head); j !== -1; j = printed.indexOf(head, j + 1)) {
+    const tail = printed.slice(j);
+    if (tail.length >= min && next.startsWith(tail)) {
+      return { text: next.slice(tail.length), moved: false };
+    }
+  }
+  return { text: next, moved: true };
+}
+function sanitizeForTerminal(text4, keepColour = false) {
+  const ESCAPE = /\u001b(?:\[[0-?]*[ -/]*[@-~]|\][\s\S]*?(?:\u0007|\u001b\\|$)|[PX^_][\s\S]*?(?:\u001b\\|$)|[ -/]*[0-~]|$)/g;
+  const SGR = /^\u001b\[[0-9;]*m$/;
+  return text4.replace(/\r\n/g, "\n").replace(ESCAPE, (seq) => keepColour && SGR.test(seq) ? seq : "").replace(
+    /[\u0000-\u0008\u000b-\u001f\u007f-\u009f]/g,
+    (ch, at, all) => (
+      // Keep the ESC that opens a kept SGR sequence; drop every other control.
+      ch === "\x1B" && keepColour && SGR.test((/^\u001b\[[0-9;]*m/.exec(all.slice(at)) ?? [""])[0]) ? ch : ""
+    )
+  );
+}
+async function moduleBuildLogCommand(slugArg, buildIdArg, options) {
+  const json = options.json;
+  const usage2 = (message) => reportCliError(message, { json, code: "USAGE" });
+  let slug = slugArg;
+  let rawId = buildIdArg;
+  if (rawId === void 0 && slug !== void 0 && /^\d+$/.test(slug)) {
+    rawId = slug;
+    slug = void 0;
+  }
+  const buildId = rawId === void 0 ? Number.NaN : Number(rawId);
+  if (!Number.isSafeInteger(buildId) || buildId <= 0) {
+    return usage2("Pass the build id: `dashwise module build-log [slug] <buildId>` (ids are in `dashwise module status`).");
+  }
+  if (json && options.follow) return usage2("--follow streams text; drop --json.");
+  if (!slug) {
+    try {
+      const local = readManifest(options.dir)?.module?.slug;
+      if (typeof local === "string" && local) slug = local;
+    } catch {
+    }
+  }
+  if (!slug) return usage2("Pass a module slug or run from a directory with a valid module.json.");
+  const timeoutMs = (options.timeoutSec ?? 900) * 1e3;
+  if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) return usage2("--timeout expects a positive number of seconds.");
+  const cfg = readConfig();
+  if (!isLoggedIn() || !cfg) return reportCliError("Not logged in. Run `dashwise login` first.", { json });
+  const auth = { baseUrl: resolveApiUrl(), auth: { token: cfg.token } };
+  let moduleId;
+  try {
+    const mod = await getModuleBySlug(slug, auth);
+    moduleId = mod.id;
+    slug = mod.slug;
+  } catch (err) {
+    return reportRefusal(err, { module: slug }, { json, action: "Resolving the module" });
+  }
+  const read = async () => {
+    try {
+      return await getModuleBuildLog(moduleId, buildId, auth);
+    } catch (err) {
+      if (err instanceof ApiError && err.code === "FEATURE_DISABLED") {
+        return reportCliError(
+          "Build logs are not available on this Dashwise yet (the backend serves them once its build-log scrubber is switched on).",
+          { json }
+        );
+      }
+      return reportRefusal(err, { module: slug }, { json, action: `Reading the log of build #${buildId}` });
+    }
+  };
+  const first = await read();
+  if (typeof first === "number") return first;
+  if (json) {
+    out(JSON.stringify(first));
+    return 0;
+  }
+  const printLog = (view, printed2) => {
+    if (!view.available || view.text === null) return printed2;
+    const delta = newLogText(printed2, view.text);
+    if (delta.moved) info(dim("\u2026 (earlier lines scrolled out of the window the server keeps)"));
+    if (delta.text) {
+      const safe = sanitizeForTerminal(delta.text, Boolean(process.stdout.isTTY));
+      process.stdout.write(safe.endsWith("\n") ? safe : `${safe}
+`);
+    }
+    return view.text;
+  };
+  if (!first.available && !(options.follow && RUNNING.has(first.status))) {
+    info(`Build #${buildId} (${first.status}) has no log: it did not run on the build service, or the log expired.`);
+    return 0;
+  }
+  if (first.truncated) info(dim("(showing the newest part of the log)"));
+  let printed = printLog(first, "");
+  const footer = (view) => {
+    if (view.redactions > 0) info(dim(`${view.redactions} value(s) were hidden by the server's scrubber.`));
+  };
+  if (!options.follow || !RUNNING.has(first.status)) {
+    footer(first);
+    return 0;
+  }
+  const deadline = Date.now() + timeoutMs;
+  let last = first;
+  const base = options.pollIntervalMs ?? FOLLOW_BASE_MS;
+  const cap = options.pollIntervalMs !== void 0 ? options.pollIntervalMs * 2 : FOLLOW_MAX_MS;
+  let interval = base;
+  while (Date.now() < deadline) {
+    await new Promise(
+      (resolve16) => setTimeout(resolve16, Math.min(interval, Math.max(0, deadline - Date.now())))
+    );
+    let view;
+    try {
+      view = await getModuleBuildLog(moduleId, buildId, auth);
+    } catch (err) {
+      if (isTransientPollError(err)) continue;
+      return reportRefusal(err, { module: slug }, { json, action: `Reading the log of build #${buildId}` });
+    }
+    const grew = view.text !== null && view.text !== last.text;
+    interval = grew ? base : Math.min(cap, Math.round(interval * 1.5));
+    printed = printLog(view, printed);
+    last = view;
+    if (!RUNNING.has(view.status)) {
+      footer(view);
+      if (view.status === "failed") {
+        fail(`Build #${buildId} failed.`);
+        return 1;
+      }
+      info(`Build #${buildId}: ${view.status}.`);
+      return 0;
+    }
+  }
+  warn(`Stopped following build #${buildId} (still ${last.status}). Resume: ${code(`dashwise module build-log ${slug} ${buildId} --follow`)}`);
+  return EXIT_TIMED_OUT;
+}
+
+// src/commands/module/ship.ts
+init_api_client();
+init_config();
+init_manifest_io();
+init_output();
+init_permission_hint();
+async function moduleShipCommand(slugArg, options) {
+  const marker = agentSessionMarker();
+  if (marker !== null) {
+    fail(
+      `\`dashwise module ship\` takes a module live, which a person does (detected an AI agent session: ${marker}). An agent may release (${code("dashwise module release --commit-sha <sha> --yes")}); a person then installs it.`
+    );
+    return 2;
+  }
+  if (options.build !== void 0 && options.commitSha !== void 0) {
+    fail("--build resumes an existing release; do not combine it with --commit-sha.");
+    return 1;
+  }
+  const commitSha = options.build !== void 0 ? void 0 : options.commitSha ?? await defaultBranchHead(slugArg, options.dir);
+  if (options.commitSha !== void 0) {
+    info(`Releasing ${options.commitSha.slice(0, 12)} (--commit-sha).`);
+  }
+  let released = null;
+  let buildId = options.build;
+  const releaseExit = await moduleReleaseCommand(slugArg, {
+    ...options.dir !== void 0 ? { dir: options.dir } : {},
+    ...commitSha !== void 0 ? { commitSha } : {},
+    ...options.build !== void 0 ? { build: options.build } : {},
+    ...options.bump !== void 0 && options.build === void 0 ? { bump: options.bump } : {},
+    ...options.timeoutSec !== void 0 ? { timeoutSec: options.timeoutSec } : {},
+    ...options.pollIntervalMs !== void 0 ? { pollIntervalMs: options.pollIntervalMs } : {},
+    // `ship` is the person's go for the release; the install below asks.
+    yes: true,
+    defaultBranchHead: commitSha === void 0 && options.build === void 0,
+    onBuildId: (id) => {
+      buildId = id;
+    },
+    onReleased: (build2) => {
+      released = build2;
+    }
+  });
+  if (releaseExit === EXIT_TIMED_OUT && buildId !== void 0) {
+    info(
+      `Resume the ship (wait for build #${buildId}, then install it): ${code(["dashwise module ship", slugArg, `--build ${buildId}`].filter(Boolean).join(" "))}`
+    );
+  }
+  if (releaseExit !== 0) return releaseExit;
+  const build = released;
+  if (!build) {
+    fail("The release finished without naming its version; nothing was installed.");
+    return 1;
+  }
+  info(`Installing v${build.version} (build #${build.id}, revision ${build.commit_sha.slice(0, 12)}).`);
+  return moduleInstallCommand(slugArg, {
+    ...options.dir !== void 0 ? { dir: options.dir } : {},
+    ...options.workspace !== void 0 ? { workspace: options.workspace } : {},
+    ...options.installation !== void 0 ? { installation: options.installation } : {},
+    ...options.keepDevInstall !== void 0 ? { keepDevInstall: options.keepDevInstall } : {},
+    ...options.replaceDevInstall !== void 0 ? { replaceDevInstall: options.replaceDevInstall } : {},
+    ...options.yes !== void 0 ? { yes: options.yes } : {},
+    version: build.version
+  });
+}
+async function defaultBranchHead(slugArg, dir) {
+  const cfg = readConfig();
+  let slug = slugArg;
+  if (!slug) {
+    try {
+      slug = readManifest(dir)?.module?.slug;
+    } catch {
+      slug = void 0;
+    }
+  }
+  if (!slug || !cfg || !isLoggedIn()) return void 0;
+  const auth = { baseUrl: resolveApiUrl(), auth: { token: cfg.token } };
+  try {
+    const mod = await getModuleBySlug(slug, auth);
+    const plan = await apiRequest("GET", `/api/modules/${mod.id}/builds/release-plan`, void 0, auth);
+    const sha = plan.default_branch_sha ?? void 0;
+    if (!sha || !/^[0-9a-f]{40}$/i.test(sha)) {
+      info("Releasing the head of the default branch.");
+      return void 0;
+    }
+    info(`Releasing ${sha.slice(0, 12)} from ${plan.default_branch ?? "the default branch"}.`);
+    if (plan.pending_branch) {
+      warn(
+        `Newer work on ${plan.pending_branch.name}${plan.pending_branch.commits_ahead ? ` (${plan.pending_branch.commits_ahead} commit(s) ahead)` : ""} is not in this release: merge it to ${plan.default_branch ?? "the default branch"} first to ship it.`
+      );
+    }
+    return sha.toLowerCase();
+  } catch {
+    info("Releasing the head of the default branch.");
+    return void 0;
+  }
+}
+
 // src/commands/module/status.ts
 init_api_client();
 init_config();
@@ -26874,6 +27143,36 @@ moduleCmd.command("release [slug]").description("Release an exact pushed reposit
     timeoutSec: opts.timeout
   });
 });
+moduleCmd.command("build-log [slug] [buildId]").description(
+  "Print a build's log, scrubbed by the server (credentials and internal hosts hidden) and bounded to its newest part. One positional is the build id (module from module.json). --follow prints new lines until the build ends."
+).option("--dir <path>", "Project root for module.json slug lookup (default: current directory).").option("--follow", "Keep printing new lines while the build is queued or building.").option("--timeout <seconds>", "Max seconds to follow (default 900); exit 4 means still building.", Number).option("--json", "Emit the log response as JSON (not with --follow).").action(
+  async (slug, buildId, opts) => {
+    process.exitCode = await moduleBuildLogCommand(slug, buildId, {
+      ...opts.dir !== void 0 ? { dir: opts.dir } : {},
+      ...opts.follow !== void 0 ? { follow: opts.follow } : {},
+      ...opts.timeout !== void 0 ? { timeoutSec: opts.timeout } : {},
+      ...opts.json !== void 0 ? { json: opts.json } : {}
+    });
+  }
+);
+moduleCmd.command("ship [slug]").description(
+  "Release and install in one command, for a person: releases the latest push to the default branch (or --commit-sha), waits for the build, then installs that version, showing what the update does to the data and asking once. Refused inside an AI agent session (an agent releases; a person takes it live)."
+).option("--dir <path>", "Project root for module.json slug lookup (default: current directory).").option("--commit-sha <sha>", "Release this pushed revision (full 40-character SHA) instead of the default-branch head.").option("--build <id>", "Resume a ship whose release was still building: wait for that build, then install it. Never queues a release.", parsePositiveIdOption).option("--bump <direction>", "Semver bump: patch | minor | major (default minor).").option("--workspace <slug-or-id>", "Target workspace (as for module install).").option("--installation <id>", "Update exactly this production installation.", parsePositiveIdOption).option("--keep-dev-install", "Install alongside the workspace's dev install (as for module install).").option("--replace-dev-install", "Replace the workspace's dev install (as for module install).").option("-y, --yes", "Skip the install question when nothing is lost. Never accepts data loss.").option("--timeout <seconds>", "Max seconds to wait for the build (default 360); exit 4 means still building.", Number).action(
+  async (slug, opts) => {
+    process.exitCode = await moduleShipCommand(slug, {
+      ...opts.dir !== void 0 ? { dir: opts.dir } : {},
+      ...opts.commitSha !== void 0 ? { commitSha: opts.commitSha } : {},
+      ...opts.build !== void 0 ? { build: opts.build } : {},
+      ...opts.bump !== void 0 ? { bump: opts.bump } : {},
+      ...opts.workspace !== void 0 ? { workspace: opts.workspace } : {},
+      ...opts.installation !== void 0 ? { installation: opts.installation } : {},
+      ...opts.keepDevInstall !== void 0 ? { keepDevInstall: opts.keepDevInstall } : {},
+      ...opts.replaceDevInstall !== void 0 ? { replaceDevInstall: opts.replaceDevInstall } : {},
+      ...opts.yes !== void 0 ? { yes: opts.yes } : {},
+      ...opts.timeout !== void 0 ? { timeoutSec: opts.timeout } : {}
+    });
+  }
+);
 moduleCmd.command("publish").description("Pack the current directory + upload it as a new module version.").option("--dir <path>", "Project root (default: current directory).").option("--bump <direction>", "Semver bump: patch | minor | major.").option("--dry-run", "Validate + upload but do not persist the version row.").option("-y, --yes", "Skip the confirmation prompt (for CI / scripted use).").option(
   "--from-local",
   "Publish local files to a module that has a linked repository (the next repository build replaces them)."
@@ -27297,7 +27596,7 @@ fieldCmd.command("set-type <table-slug> <field-slug> <new-type>").description(
   }
 );
 function getVersion() {
-  return "0.29.0";
+  return "0.30.1";
 }
 function parsePositiveIdOption(value) {
   if (!/^[1-9][0-9]*$/.test(value.trim())) {