@dataparade/cli 0.0.6 → 0.0.7

package/README.md

@@ -38,10 +38,11 @@ List commands and options: `npx @dataparade/cli --help` and `npx @dataparade/cli
 
 ## Upload to dashboard
 
-After a scan, the CLI **auto-uploads** `dataflow.json` when `DATAPARADE_WORKSPACE_API_KEY` is set (from **Workspace → Access keys**). This creates an **import preview draft** in the web app — not a finished assessment.
+After a scan, the CLI **auto-uploads** `dataflow.json` by default (unless you opt out). This creates an **import preview draft** in the web app — not a finished assessment.
 
+- **With a workspace API key** (`DATAPARADE_WORKSPACE_API_KEY` from **Workspace → Access keys**): prints a dashboard link (`?importDraft=`) for that workspace.
+- **Without a workspace key**: prints a sign-up link (`/preview/cli/<token>`). Create an account to open **Preview & Edit** on your dashboard.
 - Opt out: `--skip-auto-upload` or `DATAPARADE_SKIP_AUTO_UPLOAD=true`
-- Without a workspace key, the scan still succeeds; run `upload` later
 - Upload alone does **not** consume scan quota
 
 ```bash

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@dataparade/cli",
-    "version": "0.0.6",
+    "version": "0.0.7",
     "description": "dataPARADE CLI — scan codebases for privacy and security data flows",
     "publishConfig": {
         "access": "public",

package/dist/src/cli.js

@@ -130,7 +130,8 @@ function createProgram() {
         .option("--no-terraform-stack-section-auto", "Do not infer terraformStackSectionPathDepth from .tf layout when depth is unset")
         .option("--monorepo-package-section-path-depth <n>", "Workspace package section depth (max 3): primary packages and rollup use N POSIX path segments (e.g. 3 for packages/twenty-apps/hello)")
         .option("--no-monorepo-package-section-auto", "Do not infer monorepoPackageSectionPathDepth from package.json layout when depth is unset")
-        .option("--ai-inference", "Enable post-scan AI inference pipeline")
+        .option("--ai-inference", "Enable post-scan AI inference (default: on; SCAN_AI_INFERENCE=false also disables)")
+        .option("--no-ai-inference", "Disable post-scan AI inference")
         .option("--ai-provider <provider>", `AI provider: ${types_1.AI_PROVIDER_IDS.join("|")}`)
         .option("--ai-model <model>", "Model name for AI inference")
         .option("--ai-endpoint <url>", "Override provider endpoint URL")
@@ -265,14 +266,53 @@ function createProgram() {
                 config.cliQuotaJobId = preflight.jobId;
                 if (config.enableAiInference &&
                     preflight.suggestedAiBudgetTokens > 0) {
-                    config.aiBudgetTokens = preflight.suggestedAiBudgetTokens;
+                    // suggestedAiBudgetTokens is a server ceiling (remaining quota /
+                    // per-job cap), not a spend target. Never raise the CLI working
+                    // budget above the configured default (or user override).
+                    config.aiBudgetTokens = Math.min(config.aiBudgetTokens ?? 12_000, preflight.suggestedAiBudgetTokens);
                 }
                 if (preflight.aiDelivery === "platform_proxy") {
                     config.aiMode = "platform";
                 }
                 if (isInteractive) {
                     // eslint-disable-next-line no-console
-                    console.log(`[scan] quota: scans_remaining=${preflight.scansRemaining} ai_tokens_remaining=${preflight.aiTokensRemaining} job_id=${preflight.jobId}`);
+                    console.log(`[scan] quota: scans_remaining=${preflight.scansRemaining} ai_tokens_remaining=${preflight.aiTokensRemaining} job_id=${preflight.jobId} working_budget=${config.aiBudgetTokens ?? 0}`);
+                }
+            }
+            else if (!workspaceApiKey &&
+                !usesByok &&
+                config.enableAiInference) {
+                try {
+                    const { cliAnonymousAiSession } = await Promise.resolve().then(() => __importStar(require("./platform-api/anonymous-ai-session-client")));
+                    const session = await cliAnonymousAiSession({
+                        projectName: config.projectName,
+                    });
+                    cliQuotaJobId = session.jobId;
+                    config.cliQuotaJobId = session.jobId;
+                    config.anonSessionToken = session.sessionToken;
+                    if (session.suggestedAiBudgetTokens > 0) {
+                        // Anon suggested value is the hard per-job ceiling (default 100k).
+                        // Applying it as the working budget caused scans to burn ~100k tokens.
+                        config.aiBudgetTokens = Math.min(config.aiBudgetTokens ?? 12_000, session.suggestedAiBudgetTokens);
+                    }
+                    if (session.aiDelivery === "platform_proxy") {
+                        config.aiMode = "platform";
+                    }
+                    if (isInteractive) {
+                        // eslint-disable-next-line no-console
+                        console.log(`[scan] anonymous platform AI: job_id=${session.jobId} working_budget=${config.aiBudgetTokens ?? 0} server_cap=${session.suggestedAiBudgetTokens} (claim debits actual tokens used)`);
+                    }
+                }
+                catch (anonSessionError) {
+                    const { CliAnonymousIpLimitError } = await Promise.resolve().then(() => __importStar(require("./platform-api/anonymous-ai-session-client")));
+                    const message = anonSessionError instanceof Error
+                        ? anonSessionError.message
+                        : "Anonymous AI session failed.";
+                    // eslint-disable-next-line no-console
+                    console.error(`[scan] ${message}`);
+                    process.exitCode =
+                        anonSessionError instanceof CliAnonymousIpLimitError ? 2 : 1;
+                    return;
                 }
             }
             const configValidation = (0, scan_config_schema_1.validateScanConfiguration)(config);
@@ -310,10 +350,12 @@ function createProgram() {
                 const s = scanResult.aiInferenceSummary;
                 // eslint-disable-next-line no-console
                 console.log(`[scan] llm-inference summary: candidates=${s.candidatesConsidered} proposals=${s.proposalsGenerated} (provider=${s.proposalsGeneratedProvider}) applied=${s.proposalsApplied} (provider=${s.proposalsAppliedProvider}) rejected=${s.proposalsRejected} (${s.aiProvider}/${s.aiModel})`);
-                if (options.aiVerbose) {
-                    // eslint-disable-next-line no-console
-                    console.log(`[scan] ai-usage totals: provider_calls=${s.providerCalls} tokens_in=${s.inputTokens} tokens_out=${s.outputTokens} tokens_total=${s.totalTokens} estimated_cost_usd=${formatUsd(s.estimatedCostUsd)}`);
-                }
+                // Always show real provider token usage (budget_cap is only a ceiling, not cost).
+                // eslint-disable-next-line no-console
+                console.log(`[scan] ai-usage: provider_calls=${s.providerCalls} tokens_in=${s.inputTokens} tokens_out=${s.outputTokens} tokens_total=${s.totalTokens}` +
+                    (typeof s.estimatedCostUsd === "number"
+                        ? ` estimated_cost_usd=${formatUsd(s.estimatedCostUsd)}`
+                        : ""));
                 if (options.aiVerbose && scanResult.aiInferenceProposalDetails) {
                     printAiInferenceVerbose(scanResult.aiInferenceProposalDetails);
                 }
@@ -387,30 +429,23 @@ function createProgram() {
                     const skipAutoUpload = Boolean(options.skipAutoUpload) ||
                         (0, upload_env_1.resolveSkipAutoUpload)(process.env);
                     if (!skipAutoUpload) {
-                        const uploadApiKey = workspaceApiKey;
-                        if (!uploadApiKey) {
-                            // eslint-disable-next-line no-console
-                            console.log(`[scan] Auto-upload skipped (no workspace API key). Run: dataparade upload ${dataflowOutputPath}`);
+                        try {
+                            const { runDataflowUpload } = await Promise.resolve().then(() => __importStar(require("./upload/run-upload")));
+                            const dataflowWrapper = (0, json_1.buildDataflowWrapper)(scanResult, diagramGraph, { projectName: resolvedProjectName });
+                            await runDataflowUpload({
+                                apiKey: workspaceApiKey,
+                                dataflow: dataflowWrapper,
+                                projectName: resolvedProjectName,
+                                scanJobId: cliQuotaJobId,
+                                logPrefix: "[scan]",
+                            });
                         }
-                        else {
-                            try {
-                                const { runDataflowUpload } = await Promise.resolve().then(() => __importStar(require("./upload/run-upload")));
-                                const dataflowWrapper = (0, json_1.buildDataflowWrapper)(scanResult, diagramGraph, { projectName: resolvedProjectName });
-                                await runDataflowUpload({
-                                    apiKey: uploadApiKey,
-                                    dataflow: dataflowWrapper,
-                                    projectName: resolvedProjectName,
-                                    scanJobId: cliQuotaJobId,
-                                    logPrefix: "[scan]",
-                                });
-                            }
-                            catch (uploadError) {
-                                const uploadMessage = uploadError instanceof Error
-                                    ? uploadError.message
-                                    : "Unknown upload error.";
-                                // eslint-disable-next-line no-console
-                                console.error(`[scan] Auto-upload failed: ${uploadMessage}`);
-                            }
+                        catch (uploadError) {
+                            const uploadMessage = uploadError instanceof Error
+                                ? uploadError.message
+                                : "Unknown upload error.";
+                            // eslint-disable-next-line no-console
+                            console.error(`[scan] Auto-upload failed: ${uploadMessage}`);
                         }
                     }
                 }
@@ -498,12 +533,6 @@ function createProgram() {
         const apiKey = options.workspaceApiKey?.trim() ||
             options.apiKey?.trim() ||
             (0, scan_env_1.resolveWorkspaceApiKey)(process.env);
-        if (!apiKey) {
-            // eslint-disable-next-line no-console
-            console.error("[upload] error: workspace API key is required (DATAPARADE_WORKSPACE_API_KEY or --workspace-api-key)");
-            process.exitCode = 1;
-            return;
-        }
         const filePath = path_1.default.resolve(process.cwd(), file || "dataflow.json");
         let dataflow;
         try {

package/dist/src/config/env.js

@@ -22,10 +22,15 @@ function parseBoolean(value) {
     if (value == null)
         return undefined;
     const normalized = value.trim().toLowerCase();
-    if (normalized === "true")
+    if (normalized === "true" || normalized === "1" || normalized === "yes" || normalized === "on") {
         return true;
-    if (normalized === "false")
+    }
+    if (normalized === "false" ||
+        normalized === "0" ||
+        normalized === "no" ||
+        normalized === "off") {
         return false;
+    }
     return undefined;
 }
 function loadCliConfigEnv(env) {

package/dist/src/config/load-cli-env.d.ts

@@ -1 +1,3 @@
+/** @internal Exported for unit tests. */
+export declare function findCliPackageRoot(startDir: string): string | undefined;
 export declare function loadCliDotenv(): void;

package/dist/src/config/load-cli-env.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.findCliPackageRoot = findCliPackageRoot;
 exports.loadCliDotenv = loadCliDotenv;
 /**
  * Loads `cli/.env` when not running under Jest.
@@ -16,9 +17,12 @@ const node_path_1 = __importDefault(require("node:path"));
 const dotenv_1 = require("dotenv");
 const CLI_PACKAGE_NAME = "@dataparade/cli";
 const tried = { current: false };
+/** @internal Exported for unit tests. */
 function findCliPackageRoot(startDir) {
     let dir = node_path_1.default.resolve(startDir);
     const { root } = node_path_1.default.parse(dir);
+    /** Fallback when tsc emits package.json under dist/ but no outer root is found. */
+    let distPackageRoot;
     while (dir !== root) {
         const pkgPath = node_path_1.default.join(dir, "package.json");
         if (node_fs_1.default.existsSync(pkgPath)) {
@@ -26,7 +30,12 @@ function findCliPackageRoot(startDir) {
                 const raw = node_fs_1.default.readFileSync(pkgPath, "utf8");
                 const pkg = JSON.parse(raw);
                 if (pkg.name === CLI_PACKAGE_NAME) {
-                    return dir;
+                    if (node_path_1.default.basename(dir) === "dist") {
+                        distPackageRoot = dir;
+                    }
+                    else {
+                        return dir;
+                    }
                 }
             }
             catch {
@@ -35,7 +44,7 @@ function findCliPackageRoot(startDir) {
         }
         dir = node_path_1.default.dirname(dir);
     }
-    return undefined;
+    return distPackageRoot;
 }
 function loadCliDotenv() {
     if (tried.current)

package/dist/src/config/redact.js

@@ -10,5 +10,8 @@ function redactScanConfigurationForDisplay(config) {
     if (config.workspaceApiKey?.trim()) {
         redacted.workspaceApiKey = "<redacted>";
     }
+    if (config.anonSessionToken?.trim()) {
+        redacted.anonSessionToken = "<redacted>";
+    }
     return redacted;
 }

package/dist/src/config/validate-scan-ai.js

@@ -13,15 +13,20 @@ function validateAiInferenceCredentials(config) {
         Boolean(config.aiModel?.trim()) &&
         Boolean(config.aiApiKey?.trim());
     const hasWorkspace = Boolean(config.workspaceApiKey?.trim());
-    if (hasByok && hasWorkspace) {
-        errors.push("ai-inference: set either SCAN_BYOK_* (your LLM provider) or DATAPARADE_WORKSPACE_API_KEY (platform AI), not both");
+    const hasAnonSession = Boolean(config.anonSessionToken?.trim());
+    if (hasByok && (hasWorkspace || hasAnonSession)) {
+        errors.push("ai-inference: set either SCAN_BYOK_* (your LLM provider) or platform AI (DATAPARADE_WORKSPACE_API_KEY or anonymous session), not both");
         return errors;
     }
-    if (!hasByok && !hasWorkspace) {
-        errors.push("ai-inference: LLM inference requires SCAN_BYOK_PROVIDER, SCAN_BYOK_MODEL, and SCAN_BYOK_API_KEY, or DATAPARADE_WORKSPACE_API_KEY for platform AI");
+    if (hasWorkspace && hasAnonSession) {
+        errors.push("ai-inference: set either DATAPARADE_WORKSPACE_API_KEY or an anonymous AI session, not both");
+        return errors;
+    }
+    if (!hasByok && !hasWorkspace && !hasAnonSession) {
+        errors.push("ai-inference: LLM inference requires SCAN_BYOK_PROVIDER, SCAN_BYOK_MODEL, and SCAN_BYOK_API_KEY, DATAPARADE_WORKSPACE_API_KEY for platform AI, or an anonymous platform AI session");
     }
-    if (hasWorkspace && !config.cliQuotaJobId) {
-        errors.push("ai-inference: platform AI requires a quota preflight job id (pass DATAPARADE_WORKSPACE_API_KEY and ensure preflight succeeded)");
+    if ((hasWorkspace || hasAnonSession) && !config.cliQuotaJobId) {
+        errors.push("ai-inference: platform AI requires a quota/session job id (preflight or anonymous-session must succeed)");
     }
     return errors;
 }
@@ -32,7 +37,8 @@ function resolveAiMode(config) {
         return "hosted_worker";
     if (config.aiApiKey?.trim())
         return "byok";
-    if (config.workspaceApiKey?.trim())
+    if (config.workspaceApiKey?.trim() || config.anonSessionToken?.trim()) {
         return "platform";
+    }
     return "none";
 }

package/dist/src/core/pipeline/ai-orchestrator-options.js

@@ -8,7 +8,9 @@ function buildAgentOrchestratorOptions(config, opts) {
     const platformProvider = process.env.SCAN_WORKER_LLM_PROVIDER?.trim() ||
         "openai";
     const platformModel = process.env.SCAN_WORKER_LLM_MODEL?.trim() ||
-        config.aiModel?.trim() ||
+        (config.aiModel?.trim() && config.aiModel.trim() !== "heuristic"
+            ? config.aiModel.trim()
+            : undefined) ||
         "gpt-4o-mini";
     const base = {
         provider: aiMode === "platform"
@@ -29,11 +31,13 @@ function buildAgentOrchestratorOptions(config, opts) {
         skipStructuralHeuristics: opts.skipStructuralHeuristics,
     };
     if (aiMode === "platform" &&
-        config.workspaceApiKey?.trim() &&
-        config.cliQuotaJobId?.trim()) {
+        config.cliQuotaJobId?.trim() &&
+        (config.workspaceApiKey?.trim() || config.anonSessionToken?.trim())) {
         base.platformProxy = {
             apiBaseUrl: config.platformApiBaseUrl ?? (0, dataparade_api_base_url_1.getDataparadeApiBaseUrl)(),
-            workspaceApiKey: config.workspaceApiKey.trim(),
+            workspaceApiKey: (config.workspaceApiKey?.trim() ||
+                config.anonSessionToken?.trim() ||
+                ""),
             jobId: config.cliQuotaJobId.trim(),
         };
         base.apiKey = undefined;

package/dist/src/core/pipeline/orchestrator.js

@@ -27,7 +27,7 @@ function createDefaultScanConfiguration(overrides = {}) {
         languages: undefined,
         minimumConfidence: 0.5,
         deepAnalysis: false,
-        enableAiInference: false,
+        enableAiInference: true,
         aiProvider: "mock",
         aiModel: "heuristic",
         aiEndpoint: undefined,

package/dist/src/core/schema/scan-config.schema.d.ts

@@ -48,6 +48,7 @@ export declare const scanConfigurationSchema: z.ZodObject<{
     }>>;
     aiVerbose: z.ZodOptional<z.ZodBoolean>;
     workspaceApiKey: z.ZodOptional<z.ZodString>;
+    anonSessionToken: z.ZodOptional<z.ZodString>;
     aiMode: z.ZodOptional<z.ZodEnum<{
         byok: "byok";
         platform: "platform";

package/dist/src/core/schema/scan-config.schema.js

@@ -45,6 +45,7 @@ exports.scanConfigurationSchema = zod_1.z.object({
     aiInferenceScope: zod_1.z.enum(["default", "third_party_only"]).optional(),
     aiVerbose: zod_1.z.boolean().optional(),
     workspaceApiKey: zod_1.z.string().min(1).optional(),
+    anonSessionToken: zod_1.z.string().min(1).optional(),
     aiMode: zod_1.z.enum(["byok", "platform", "hosted_worker", "none"]).optional(),
     platformApiBaseUrl: zod_1.z.string().min(1).optional(),
     cliQuotaJobId: zod_1.z.string().min(1).optional(),

package/dist/src/core/types/config.d.ts

@@ -48,6 +48,11 @@ export interface ScanConfiguration {
     aiThirdPartyDataFlowEnabled?: boolean;
     /** DataParade workspace API key (quota + platform LLM proxy). */
     workspaceApiKey?: string;
+    /**
+     * Anonymous platform AI session token (`dp_anon_…`) from
+     * POST /api/scans/cli/ai/anonymous-session. Mutually exclusive with workspaceApiKey.
+     */
+    anonSessionToken?: string;
     /** How LLM inference is billed: byok (direct provider) or platform (API proxy). */
     aiMode?: "byok" | "platform" | "hosted_worker" | "none";
     /** Base URL for platform API (preflight / infer / complete). */

package/dist/src/platform-api/anonymous-ai-session-client.d.ts

@@ -0,0 +1,14 @@
+export type AnonymousAiSessionResponse = {
+    sessionToken: string;
+    jobId: string;
+    suggestedAiBudgetTokens: number;
+    expiresAt: string;
+    aiDelivery: "platform_proxy" | "none";
+};
+export declare class CliAnonymousIpLimitError extends Error {
+    readonly status = 429;
+    constructor(message: string);
+}
+export declare function cliAnonymousAiSession(input?: {
+    projectName?: string;
+}): Promise<AnonymousAiSessionResponse>;

package/dist/src/platform-api/anonymous-ai-session-client.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CliAnonymousIpLimitError = void 0;
+exports.cliAnonymousAiSession = cliAnonymousAiSession;
+const dataparade_api_base_url_1 = require("./dataparade-api-base-url");
+class CliAnonymousIpLimitError extends Error {
+    constructor(message) {
+        super(message);
+        this.status = 429;
+        this.name = "CliAnonymousIpLimitError";
+    }
+}
+exports.CliAnonymousIpLimitError = CliAnonymousIpLimitError;
+async function cliAnonymousAiSession(input) {
+    const res = await fetch(`${(0, dataparade_api_base_url_1.getDataparadeApiBaseUrl)()}/api/scans/cli/ai/anonymous-session`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            projectName: input?.projectName,
+        }),
+    });
+    if (!res.ok) {
+        let message = `Anonymous AI session failed (${res.status})`;
+        try {
+            const body = (await res.json());
+            if (typeof body.message === "string")
+                message = body.message;
+            else if (Array.isArray(body.message))
+                message = body.message.join(", ");
+        }
+        catch {
+            // ignore
+        }
+        if (res.status === 429) {
+            throw new CliAnonymousIpLimitError(message);
+        }
+        throw new Error(message);
+    }
+    return (await res.json());
+}

package/dist/src/platform-api/upload-client.d.ts

@@ -1,3 +1,10 @@
-import type { CliUploadPreviewInput, CliUploadPreviewResponse } from "./upload.types";
-export type { CliUploadPreviewInput, CliUploadPreviewResponse } from "./upload.types";
-export declare function cliUploadPreview(input: CliUploadPreviewInput): Promise<CliUploadPreviewResponse>;
+import type { CliAnonymousUploadPreviewResponse, CliUploadPreviewInput, CliUploadPreviewResponse } from "./upload.types";
+export type { CliAnonymousUploadPreviewResponse, CliUploadPreviewInput, CliUploadPreviewResponse, } from "./upload.types";
+export declare function cliUploadAnonymousPreview(input: {
+    dataflow: unknown;
+    projectName?: string;
+    scanJobId?: string;
+}): Promise<CliAnonymousUploadPreviewResponse>;
+export declare function cliUploadPreview(input: CliUploadPreviewInput & {
+    apiKey: string;
+}): Promise<CliUploadPreviewResponse>;

package/dist/src/platform-api/upload-client.js

@@ -1,17 +1,49 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.cliUploadAnonymousPreview = cliUploadAnonymousPreview;
 exports.cliUploadPreview = cliUploadPreview;
 const dataparade_api_base_url_1 = require("./dataparade-api-base-url");
-function buildHeaders(apiKey) {
+function buildAuthHeaders(apiKey) {
     return {
         Authorization: `Bearer ${apiKey}`,
         "Content-Type": "application/json",
     };
 }
+async function parseUploadError(res) {
+    let message = `Upload failed (${res.status})`;
+    try {
+        const body = (await res.json());
+        if (typeof body.message === "string")
+            message = body.message;
+        else if (Array.isArray(body.message))
+            message = body.message.join(", ");
+        else if (typeof body.error === "string")
+            message = body.error;
+    }
+    catch {
+        // ignore
+    }
+    throw new Error(message);
+}
+async function cliUploadAnonymousPreview(input) {
+    const res = await fetch(`${(0, dataparade_api_base_url_1.getDataparadeApiBaseUrl)()}/api/scans/cli/preview`, {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+            dataflow: input.dataflow,
+            projectName: input.projectName,
+            scanJobId: input.scanJobId,
+        }),
+    });
+    if (!res.ok) {
+        return await parseUploadError(res);
+    }
+    return (await res.json());
+}
 async function cliUploadPreview(input) {
     const res = await fetch(`${(0, dataparade_api_base_url_1.getDataparadeApiBaseUrl)()}/api/scans/cli/upload`, {
         method: "POST",
-        headers: buildHeaders(input.apiKey),
+        headers: buildAuthHeaders(input.apiKey),
         body: JSON.stringify({
             dataflow: input.dataflow,
             projectName: input.projectName,
@@ -19,20 +51,7 @@ async function cliUploadPreview(input) {
         }),
     });
     if (!res.ok) {
-        let message = `Upload failed (${res.status})`;
-        try {
-            const body = (await res.json());
-            if (typeof body.message === "string")
-                message = body.message;
-            else if (Array.isArray(body.message))
-                message = body.message.join(", ");
-            else if (typeof body.error === "string")
-                message = body.error;
-        }
-        catch {
-            // ignore
-        }
-        throw new Error(message);
+        return await parseUploadError(res);
     }
     return (await res.json());
 }

package/dist/src/platform-api/upload.types.d.ts

@@ -1,10 +1,15 @@
+export type CliUploadPreviewResponse = {
+    draftId: string;
+    projectName?: string | null;
+};
+export type CliAnonymousUploadPreviewResponse = {
+    claimToken: string;
+    expiresAt: string;
+    projectName: string;
+};
 export type CliUploadPreviewInput = {
-    apiKey: string;
+    apiKey?: string;
     dataflow: unknown;
     projectName?: string;
     scanJobId?: string;
 };
-export type CliUploadPreviewResponse = {
-    draftId: string;
-    projectName?: string | null;
-};

package/dist/src/upload/build-preview-url.d.ts

@@ -1 +1,2 @@
 export declare function buildImportPreviewUrl(draftId: string): string;
+export declare function buildAnonymousCliPreviewUrl(claimToken: string): string;

package/dist/src/upload/build-preview-url.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildImportPreviewUrl = buildImportPreviewUrl;
+exports.buildAnonymousCliPreviewUrl = buildAnonymousCliPreviewUrl;
 const dataparade_app_base_url_1 = require("../platform-api/dataparade-app-base-url");
 function buildImportPreviewUrl(draftId) {
     const base = (0, dataparade_app_base_url_1.getDataparadeAppBaseUrl)();
@@ -8,3 +9,8 @@ function buildImportPreviewUrl(draftId) {
     url.searchParams.set("importDraft", draftId);
     return url.toString();
 }
+function buildAnonymousCliPreviewUrl(claimToken) {
+    const base = (0, dataparade_app_base_url_1.getDataparadeAppBaseUrl)();
+    const encoded = encodeURIComponent(claimToken);
+    return `${base}/preview/cli/${encoded}`;
+}

package/dist/src/upload/run-upload.js

@@ -5,14 +5,30 @@ const upload_client_1 = require("../platform-api/upload-client");
 const build_preview_url_1 = require("./build-preview-url");
 async function runDataflowUpload(input) {
     const prefix = input.logPrefix ?? "[upload]";
-    const result = await (0, upload_client_1.cliUploadPreview)({
-        apiKey: input.apiKey,
+    if (input.apiKey?.trim()) {
+        const result = await (0, upload_client_1.cliUploadPreview)({
+            apiKey: input.apiKey.trim(),
+            dataflow: input.dataflow,
+            projectName: input.projectName,
+            scanJobId: input.scanJobId,
+        });
+        const previewUrl = (0, build_preview_url_1.buildImportPreviewUrl)(result.draftId);
+        // eslint-disable-next-line no-console
+        console.log(`${prefix} Preview ready: ${previewUrl}`);
+        return { draftId: result.draftId, previewUrl };
+    }
+    const result = await (0, upload_client_1.cliUploadAnonymousPreview)({
         dataflow: input.dataflow,
         projectName: input.projectName,
         scanJobId: input.scanJobId,
     });
-    const previewUrl = (0, build_preview_url_1.buildImportPreviewUrl)(result.draftId);
+    const previewUrl = (0, build_preview_url_1.buildAnonymousCliPreviewUrl)(result.claimToken);
     // eslint-disable-next-line no-console
     console.log(`${prefix} Preview ready: ${previewUrl}`);
-    return { draftId: result.draftId, previewUrl };
+    // eslint-disable-next-line no-console
+    console.log(`${prefix} Claiming this preview after signup uses 1 scan slot` +
+        (input.scanJobId
+            ? " and any platform AI tokens used during the scan."
+            : "."));
+    return { previewUrl };
 }

package/dist/src/upload/types.d.ts

@@ -1,11 +1,11 @@
 export type RunDataflowUploadInput = {
-    apiKey: string;
+    apiKey?: string;
     dataflow: unknown;
     projectName?: string;
     scanJobId?: string;
     logPrefix?: string;
 };
 export type RunDataflowUploadResult = {
-    draftId: string;
+    draftId?: string;
     previewUrl: string;
 };

package/dist/tests/cli/cli.spec.js

@@ -14,7 +14,7 @@ describe("CLI", () => {
         }
     });
     it("scan <path> writes a dataflow.json wrapper to the current directory and exits 0", () => {
-        const result = (0, child_process_1.spawnSync)("node", [cliDistPath, "scan", "."], {
+        const result = (0, child_process_1.spawnSync)("node", [cliDistPath, "scan", ".", "--no-ai-inference", "--skip-auto-upload"], {
             encoding: "utf-8",
             cwd: path_1.default.join(__dirname, "../../"),
         });
@@ -33,7 +33,13 @@ describe("CLI", () => {
     it("scan ../frontend produces a dataflow.json wrapper with at least one node", () => {
         const cliCwd = path_1.default.join(__dirname, "../../");
         const frontendPath = "../frontend";
-        const result = (0, child_process_1.spawnSync)("node", [cliDistPath, "scan", frontendPath], {
+        const result = (0, child_process_1.spawnSync)("node", [
+            cliDistPath,
+            "scan",
+            frontendPath,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ], {
             encoding: "utf-8",
             cwd: cliCwd,
         });
@@ -48,7 +54,15 @@ describe("CLI", () => {
         const cliCwd = path_1.default.join(__dirname, "../../");
         const frontendPath = "../frontend";
         const outputFile = "scan-frontend-summary.json";
-        const result = (0, child_process_1.spawnSync)("node", [cliDistPath, "scan", frontendPath, "--output", outputFile], {
+        const result = (0, child_process_1.spawnSync)("node", [
+            cliDistPath,
+            "scan",
+            frontendPath,
+            "--output",
+            outputFile,
+            "--no-ai-inference",
+            "--skip-auto-upload",
+        ], {
             encoding: "utf-8",
             cwd: cliCwd,
         });