@deepraxis/cli 0.1.0-dev.06cf3b8 → 0.1.0-dev.086e3bf

package/COMMANDS.md

@@ -2,7 +2,7 @@
 
 Generated by `bun run commands`. DO NOT EDIT.
 
-363 HTTP operations; 365 commands including aliases.
+368 HTTP operations; 370 commands including aliases.
 
 Environment: `PRAXIS_ENV=develop|production` (dev package defaults to `develop`; stable package defaults to `production`). No `--env` option.
 
@@ -21,7 +21,7 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent archive <agent_id>` | `agent.agents.archive` | POST `/agent/v1/agents/{agent_id}/archive` |  |
 | `praxis agent computer archive <computer_id>` | `agent.computers.archive` | POST `/agent/v1/computers/{computer_id}/archive` |  |
 | `praxis agent computer attachment create` | `agent.computers.attachments.create` | POST `/agent/v1/computers/{computer_id}/attachments` | `--computer`, `--name` |
-| `praxis agent computer connect <computer_id>` | `agent.computers.connect` | POST `/agent/v1/computers/{computer_id}/connect` |  |
+| `praxis agent computer connect <computer_id>` | `agent.computers.connect` | POST `/agent/v1/computers/{computer_id}/connect` | `--need` |
 | `praxis agent computer create` | `agent.computers.create` | POST `/agent/v1/computers` | `--name`, `--environment-id` |
 | `praxis agent computer delete <computer_id>` | `agent.computers.delete` | DELETE `/agent/v1/computers/{computer_id}` |  |
 | `praxis agent computer file get-content` | `agent.computers.files.retrieveContent` | GET `/agent/v1/computers/{computer_id}/files/content` | `--computer`, `--path` |
@@ -31,7 +31,7 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent computer lease renew create` | `agent.computers.leases.renew.create` | POST `/agent/v1/computers/{computer_id}/leases/{lease_id}/renew` | `--computer`, `--lease` |
 | `praxis agent computer list` | `agent.computers.list` | GET `/agent/v1/computers` | `--param-limit`, `--page` |
 | `praxis agent computer update <computer_id>` | `agent.computers.update` | POST `/agent/v1/computers/{computer_id}` | `--name` |
-| `praxis agent create` | `agent.agents.create` | POST `/agent/v1/agents` | `--name`, `--description`, `--system`, `--kind`, `--computer-id`, `--subagent-model` |
+| `praxis agent create` | `agent.agents.create` | POST `/agent/v1/agents` | `--name`, `--description`, `--system`, `--kind`, `--computer-id`, `--subagent-model`, `--preset` |
 | `praxis agent deployment archive <deployment_id>` | `agent.deployments.archive` | POST `/agent/v1/deployments/{deployment_id}/archive` |  |
 | `praxis agent deployment create` | `agent.deployments.create` | POST `/agent/v1/deployments` | `--environment-id`, `--name`, `--description`, `--vault-ids` |
 | `praxis agent deployment get <deployment_id>` | `agent.deployments.retrieve` | GET `/agent/v1/deployments/{deployment_id}` |  |
@@ -69,6 +69,7 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent session compact <session_id>` | `agent.sessions.compact` | POST `/agent/v1/sessions/{session_id}/compact` | `--instructions` |
 | `praxis agent session compaction list` | `agent.sessions.compactions.list` | GET `/agent/v1/sessions/{session_id}/compactions` | `--session` |
 | `praxis agent session create` | `agent.sessions.create` | POST `/agent/v1/sessions` | `--environment-id`, `--title`, `--vault-ids`, `--cwd`, `--computer-id`, `--time-zone`, `--model` |
+| `praxis agent session delete <session_id>` | `agent.sessions.delete` | DELETE `/agent/v1/sessions/{session_id}` |  |
 | `praxis agent session event list` | `agent.sessions.events.list` | GET `/agent/v1/sessions/{session_id}/events` | `--session`, `--created-at-gt`, `--created-at-gte`, `--created-at-lt`, `--created-at-lte`, `--order`, `--types`, `--param-limit`, `--page` |
 | `praxis agent session event send <session_id>` | `agent.sessions.events.send` | POST `/agent/v1/sessions/{session_id}/events` |  |
 | `praxis agent session event stream` | `agent.sessions.events.stream` | GET `/agent/v1/sessions/{session_id}/events/stream` | `--session`, `--event-deltas` |
@@ -90,7 +91,8 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis agent session thread stream <thread_id>` | `agent.sessions.threads.stream` | GET `/agent/v1/sessions/{session_id}/threads/{thread_id}/stream` | `--session`, `--query-session-id`, `--event-deltas` |
 | `praxis agent session update <session_id>` | `agent.sessions.update` | POST `/agent/v1/sessions/{session_id}` | `--title`, `--vault-ids`, `--model` |
 | `praxis agent toolset list` | `agent.toolsets.list` | GET `/agent/v1/toolsets` |  |
-| `praxis agent update <agent_id>` | `agent.agents.update` | POST `/agent/v1/agents/{agent_id}` | `--description`, `--name`, `--system`, `--param-version`, `--kind`, `--computer-id`, `--subagent-model` |
+| `praxis agent unarchive create` | `agent.agents.unarchive.create` | POST `/agent/v1/agents/{agent_id}/unarchive` | `--agent` |
+| `praxis agent update <agent_id>` | `agent.agents.update` | POST `/agent/v1/agents/{agent_id}` | `--description`, `--name`, `--system`, `--param-version`, `--kind`, `--computer-id`, `--subagent-model`, `--preset` |
 | `praxis agent version list` | `agent.agents.versions.list` | GET `/agent/v1/agents/{agent_id}/versions` | `--agent`, `--param-limit`, `--page` |
 | `praxis application asset upload` | `application.assets.upload.create` | POST `/application/v1/assets/upload` | `--jwt` |
 | `praxis application subdomain get` | `application.subdomain.retrieve` | GET `/application/v1/subdomain` |  |
@@ -113,6 +115,7 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis application worker secret list` | `application.workers.secrets.list` | GET `/application/v1/workers/{worker_id}/secrets` | `--worker` |
 | `praxis application worker secret update <name>` | `application.workers.secrets.update` | PUT `/application/v1/workers/{worker_id}/secrets/{name}` | `--worker` |
 | `praxis application worker update <worker_id>` | `application.workers.update` | PATCH `/application/v1/workers/{worker_id}` | `--name`, `--tags` |
+| `praxis application worker version asset get-manifest` | `application.workers.versions.assets.retrieveManifest` | GET `/application/v1/workers/{worker_id}/versions/{version_id}/assets/manifest` | `--worker`, `--param-version` |
 | `praxis application worker version create` | `application.workers.versions.create` | POST `/application/v1/workers/{worker_id}/versions` | `--worker`, `--deploy`, `--main-module`, `--compatibility-date`, `--compatibility-flags` |
 | `praxis application worker version get <version_id>` | `application.workers.versions.retrieve` | GET `/application/v1/workers/{worker_id}/versions/{version_id}` | `--worker` |
 | `praxis application worker version list` | `application.workers.versions.list` | GET `/application/v1/workers/{worker_id}/versions` | `--worker`, `--param-cursor`, `--param-limit` |

package/dist/praxis.js

@@ -183,6 +183,17 @@ across all toolsets allowed.`
           type: "object",
           required: false,
           description: "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable."
+        },
+        {
+          name: "preset",
+          type: "string",
+          enum: [
+            "minimal",
+            "data-editor",
+            "full"
+          ],
+          required: false,
+          description: "Optional tool preset. minimal enables read, glob, grep and ask_user_question; data-editor also enables write and edit; full uses the default toolset with always_allow. Explicit tools override matching preset entries. codemode requires bash and is absent from data-editor."
         }
       ]
     }
@@ -348,6 +359,17 @@ current version; omit to apply the update unconditionally.`
           type: "object",
           required: false,
           description: "Praxis extension: switchable model ids on /agent/v1 only. The default model must be included. When omitted, only the default model is selectable."
+        },
+        {
+          name: "preset",
+          type: "string",
+          enum: [
+            "minimal",
+            "data-editor",
+            "full"
+          ],
+          required: false,
+          description: "Optional tool preset. minimal enables read, glob, grep and ask_user_question; data-editor also enables write and edit; full uses the default toolset with always_allow. Explicit tools override matching preset entries. codemode requires bash and is absent from data-editor."
         }
       ]
     }
@@ -552,6 +574,23 @@ Removes the user from the blocklist; previously revoked tokens stay revoked. Ide
     ],
     query: []
   },
+  {
+    resource: "agent.agents.unarchive",
+    method: "create",
+    summary: "Unarchive Agent",
+    description: "Restore an archived agent without creating a configuration version. Already active agents are unchanged. Missing or inaccessible agents return 404. Use the returned agent id to create new sessions.",
+    http: "POST",
+    path: "/agent/v1/agents/{agent_id}/unarchive",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "agent_id",
+        sdkName: "agent_id"
+      }
+    ],
+    query: []
+  },
   {
     resource: "agent.agents.versions",
     method: "list",
@@ -763,7 +802,9 @@ Own-face superset: Managed Agents has no persistent Computer attachment director
     summary: "Connect computer",
     description: `Resume the computer and issue a sandbox connection.
 
-Own-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.`,
+Own-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.
+
+Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.`,
     http: "POST",
     path: "/agent/v1/computers/{computer_id}/connect",
     streaming: "no",
@@ -774,7 +815,22 @@ Own-face extension: Managed Agents has no persistent Computer connection. Return
         sdkName: "computer_id"
       }
     ],
-    query: []
+    query: [],
+    body: {
+      required: false,
+      fields: [
+        {
+          name: "need",
+          type: "string",
+          enum: [
+            "light",
+            "heavy"
+          ],
+          required: false,
+          description: "Defaults to light. light uses the lightweight shell, or the heavy instance while it is running. heavy requests a full Linux computer for interactive programs; heavy running time counts toward the daily budget in seconds."
+        }
+      ]
+    }
   },
   {
     resource: "agent.computers.files",
@@ -1921,6 +1977,23 @@ offsets ("+08:00") and unknown names return 400. Never stored in
       ]
     }
   },
+  {
+    resource: "agent.sessions",
+    method: "delete",
+    summary: "Delete session",
+    description: "Delete an idle or terminated session and its event history after saving a deletion snapshot. Supply the session id from creation or listing. Running sessions return 409 INVALID_STATE: interrupt first or wait until idle or terminated. Afterwards retrieval and event listing return 404 and lists omit the session. Example: DELETE /agent/v1/sessions/sesn_example.",
+    http: "DELETE",
+    path: "/agent/v1/sessions/{session_id}",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "session_id",
+        sdkName: "session_id"
+      }
+    ],
+    query: []
+  },
   {
     resource: "agent.sessions",
     method: "retrieve",
@@ -3435,6 +3508,27 @@ Own-face extension. Use a readable session and a run_id from its events. Each su
     ],
     query: []
   },
+  {
+    resource: "application.workers.versions.assets",
+    method: "retrieveManifest",
+    summary: "Get version asset manifest",
+    description: "Read the retained asset paths, content hashes and byte sizes of a version for publication planning. This read creates no session or version. A version without assets returns an empty manifest; unavailable artifacts and foreign resources return 404.",
+    http: "GET",
+    path: "/application/v1/workers/{worker_id}/versions/{version_id}/assets/manifest",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "worker_id",
+        sdkName: "worker_id"
+      },
+      {
+        name: "version_id",
+        sdkName: "version_id"
+      }
+    ],
+    query: []
+  },
   {
     resource: "automation.actions",
     method: "list",
@@ -15429,6 +15523,19 @@ var createClient = (config = {}) => {
 var client = createClient(createConfig({ baseUrl: "https://api.deepraxis.com" }));
 
 // ../../packages/sdk/typescript/src/generated/sdk.gen.ts
+var unarchiveAgent = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/agents/{agent_id}/unarchive",
+  ...options
+});
 var deleteRunFeedback = (options) => (options.client ?? client).delete({
   security: [{
     key: "BearerAuth",
@@ -15750,7 +15857,11 @@ var connectComputer = (options) => (options.client ?? client).post({
     type: "apiKey"
   }],
   url: "/agent/v1/computers/{computer_id}/connect",
-  ...options
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
 });
 var renewComputerLease = (options) => (options.client ?? client).post({
   security: [{
@@ -17028,7 +17139,7 @@ var runSandboxCommand = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
-var agentsList = (options) => (options?.client ?? client).get({
+var sessionsDelete = (options) => (options.client ?? client).delete({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17038,10 +17149,10 @@ var agentsList = (options) => (options?.client ?? client).get({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/agents",
+  url: "/agent/v1/sessions/{session_id}",
   ...options
 });
-var agentsCreate = (options) => (options.client ?? client).post({
+var sessionsRetrieve = (options) => (options.client ?? client).get({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17051,14 +17162,27 @@ var agentsCreate = (options) => (options.client ?? client).post({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/agents",
+  url: "/agent/v1/sessions/{session_id}",
+  ...options
+});
+var sessionsUpdate = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }, {
+    key: "ApiKeyAuth",
+    name: "X-API-Key",
+    type: "apiKey"
+  }],
+  url: "/agent/v1/sessions/{session_id}",
   ...options,
   headers: {
     "Content-Type": "application/json",
     ...options.headers
   }
 });
-var agentsRetrieve = (options) => (options.client ?? client).get({
+var agentsList = (options) => (options?.client ?? client).get({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17068,10 +17192,10 @@ var agentsRetrieve = (options) => (options.client ?? client).get({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/agents/{agent_id}",
+  url: "/agent/v1/agents",
   ...options
 });
-var agentsUpdate = (options) => (options.client ?? client).post({
+var agentsCreate = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17081,14 +17205,14 @@ var agentsUpdate = (options) => (options.client ?? client).post({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/agents/{agent_id}",
+  url: "/agent/v1/agents",
   ...options,
   headers: {
     "Content-Type": "application/json",
     ...options.headers
   }
 });
-var agentsArchive = (options) => (options.client ?? client).post({
+var agentsRetrieve = (options) => (options.client ?? client).get({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17098,10 +17222,10 @@ var agentsArchive = (options) => (options.client ?? client).post({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/agents/{agent_id}/archive",
+  url: "/agent/v1/agents/{agent_id}",
   ...options
 });
-var agentsVersionsList = (options) => (options.client ?? client).get({
+var agentsUpdate = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17111,10 +17235,14 @@ var agentsVersionsList = (options) => (options.client ?? client).get({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/agents/{agent_id}/versions",
-  ...options
+  url: "/agent/v1/agents/{agent_id}",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
 });
-var sessionsList = (options) => (options?.client ?? client).get({
+var agentsArchive = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17124,10 +17252,10 @@ var sessionsList = (options) => (options?.client ?? client).get({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/sessions",
+  url: "/agent/v1/agents/{agent_id}/archive",
   ...options
 });
-var sessionsCreate = (options) => (options.client ?? client).post({
+var agentsVersionsList = (options) => (options.client ?? client).get({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17137,14 +17265,10 @@ var sessionsCreate = (options) => (options.client ?? client).post({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/sessions",
-  ...options,
-  headers: {
-    "Content-Type": "application/json",
-    ...options.headers
-  }
+  url: "/agent/v1/agents/{agent_id}/versions",
+  ...options
 });
-var sessionsRetrieve = (options) => (options.client ?? client).get({
+var sessionsList = (options) => (options?.client ?? client).get({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17154,10 +17278,10 @@ var sessionsRetrieve = (options) => (options.client ?? client).get({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/sessions/{session_id}",
+  url: "/agent/v1/sessions",
   ...options
 });
-var sessionsUpdate = (options) => (options.client ?? client).post({
+var sessionsCreate = (options) => (options.client ?? client).post({
   security: [{
     key: "BearerAuth",
     scheme: "bearer",
@@ -17167,7 +17291,7 @@ var sessionsUpdate = (options) => (options.client ?? client).post({
     name: "X-API-Key",
     type: "apiKey"
   }],
-  url: "/agent/v1/sessions/{session_id}",
+  url: "/agent/v1/sessions",
   ...options,
   headers: {
     "Content-Type": "application/json",
@@ -17668,6 +17792,15 @@ var applicationCreateVersion = (options) => (options.client ?? client).post({
     ...options.headers
   }
 });
+var applicationGetVersionAssetManifest = (options) => (options.client ?? client).get({
+  security: [{
+    key: "application-bearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }],
+  url: "/application/v1/workers/{worker_id}/versions/{version_id}/assets/manifest",
+  ...options
+});
 var applicationGetVersion = (options) => (options.client ?? client).get({
   security: [{
     key: "application-bearerAuth",
@@ -20505,6 +20638,9 @@ function createAgent(transport) {
       },
       list: bind(transport, agentsList),
       retrieve: bind(transport, agentsRetrieve),
+      unarchive: {
+        create: bind(transport, unarchiveAgent)
+      },
       update: bind(transport, agentsUpdate),
       versions: {
         list: bind(transport, agentsVersionsList)
@@ -20585,6 +20721,7 @@ function createAgent(transport) {
         list: bind(transport, listSessionCompactions)
       },
       create: bind(transport, sessionsCreate),
+      delete: bind(transport, sessionsDelete),
       events: {
         list: bind(transport, sessionsEventsList),
         send: bind(transport, sessionsEventsSend),
@@ -20666,6 +20803,9 @@ function createApplication(transport) {
       },
       update: bind(transport, applicationUpdateWorker),
       versions: {
+        assets: {
+          retrieveManifest: bind(transport, applicationGetVersionAssetManifest)
+        },
         create: bind(transport, applicationCreateVersion),
         list: bindPage(transport, applicationListVersions),
         retrieve: bind(transport, applicationGetVersion)
@@ -21616,6 +21756,10 @@ function base64(bytes) {
   return btoa(chunks.join(""));
 }
 async function publish(client2, input) {
+  const rolloutFields = ["gradual", "gradualRollout", "gradual_rollout", "canary", "rollout", "percentage", "percent", "traffic", "traffic_percentage", "strategy", "versions"];
+  if (Object.keys(input).some((key) => rolloutFields.includes(key) || /percentage|percent|canary|gradual|rollout|灰度/i.test(key))) {
+    throw new PraxisError({ code: "INVALID_PARAMS", message: '平台不支持灰度 (gradual rollout is not supported). Roll back with praxis.application.workers.deployments.create({ path: { worker_id }, body: { strategy: "percentage", versions: [{ version_id: previousVersionId, percentage: 100 }] } }); the previous version artifacts must still be retained.' });
+  }
   const timeout = input.timeout_ms ?? 120000;
   if (!Number.isFinite(timeout) || timeout < 0)
     throw new RangeError("timeout_ms must be non-negative and finite");
@@ -21634,7 +21778,7 @@ async function publish(client2, input) {
   const files = Object.entries(input.files);
   if (files.length > 1e5)
     throw new PraxisError({ code: "LIMIT_EXCEEDED", message: "At most 100000 asset paths can be published" });
-  const manifest = {};
+  let manifest = {};
   const contents = new Map;
   for (const [path2, content] of files) {
     const normalized = path2.startsWith("/") ? path2 : `/${path2}`;
@@ -21643,8 +21787,8 @@ async function publish(client2, input) {
     const bytes = typeof content === "string" ? new TextEncoder().encode(content) : new Uint8Array(content);
     if (bytes.length > FILE_BYTES)
       throw new PraxisError({ code: "LIMIT_EXCEEDED", message: `Asset ${normalized} exceeds 25 MiB` });
-    const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
-    const hash = Array.from(digest.subarray(0, 16), (byte) => byte.toString(16).padStart(2, "0")).join("");
+    const digest2 = new Uint8Array(await crypto.subtle.digest("SHA-256", bytes));
+    const hash = Array.from(digest2.subarray(0, 16), (byte) => byte.toString(16).padStart(2, "0")).join("");
     manifest[normalized] = { hash, size: bytes.length };
     contents.set(hash, bytes);
   }
@@ -21657,9 +21801,60 @@ async function publish(client2, input) {
     }
   }
   const created = !worker;
+  if (!worker && input.dryRun)
+    throw new PraxisError({ code: "NOT_FOUND", message: "请先创建应用 (create the application before dryRun)" });
   worker ??= await workers.create({ body: { name: input.name, subdomain: { enabled: true } } });
   const path = { worker_id: worker.id };
+  let currentVersion;
+  let currentDeployment;
+  let previous = {};
+  if (worker.praxis?.current_deployment_id) {
+    currentDeployment = await workers.deployments.retrieve({ path: { ...path, deployment_id: worker.praxis.current_deployment_id } });
+    const active = currentDeployment.versions[0];
+    if (!active)
+      throw new PraxisError({ code: "INVALID_RESPONSE", message: "Current deployment has no version" });
+    currentVersion = await workers.versions.retrieve({ path: { ...path, version_id: active.version_id } });
+    previous = (await workers.versions.assets.retrieveManifest({ path: { ...path, version_id: active.version_id } })).manifest;
+  }
+  manifest = {
+    ...Object.fromEntries(Object.entries(previous).filter(([key]) => input.keepExisting || Object.hasOwn(manifest, key))),
+    ...manifest
+  };
+  if (Object.keys(manifest).length > 1e5)
+    throw new PraxisError({ code: "LIMIT_EXCEEDED", message: "At most 100000 asset paths can be published" });
+  const added = Object.keys(manifest).filter((key) => !Object.hasOwn(previous, key));
+  const changed = Object.keys(manifest).filter((key) => previous[key] && (previous[key].hash !== manifest[key].hash || previous[key].size !== manifest[key].size));
+  const removed = Object.keys(previous).filter((key) => !Object.hasOwn(manifest, key));
+  const digest = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify(manifest))));
+  const manifestHash = Array.from(digest, (byte) => byte.toString(16).padStart(2, "0")).join("");
+  const staticOnly = !["main", "bindings", "compatibility_date", "compatibility_flags", "assets_config"].some((key) => Object.hasOwn(input, key));
+  const unchanged = staticOnly && !!currentVersion && manifestHash === currentVersion.praxis.assets_manifest?.manifest_hash;
+  const hashes = new Set(Object.values(manifest).map((entry) => entry.hash));
+  const currentResult = {
+    url: worker.subdomain.url,
+    worker_id: worker.id,
+    version_id: currentVersion?.id ?? null,
+    deployment_id: currentDeployment?.id ?? null,
+    status: currentDeployment?.praxis.status ?? "draft",
+    created,
+    ...currentVersion ? { version: currentVersion } : {},
+    unchanged,
+    uploaded: 0,
+    reused: hashes.size
+  };
+  if (unchanged && !input.dryRun)
+    return currentResult;
   const session = await workers.assetsUploadSession.create({ path, body: { manifest } });
+  if (input.dryRun) {
+    const missing = new Set(session.buckets.flat());
+    if ([...missing].some((hash) => !hashes.has(hash)))
+      throw new PraxisError({ code: "INVALID_RESPONSE", message: "Upload session requested an unknown hash" });
+    return {
+      ...currentResult,
+      reused: hashes.size - missing.size,
+      plan: { added, changed, removed, upload_hashes: missing.size, existing_hashes: hashes.size - missing.size }
+    };
+  }
   let jwt = session.buckets.length ? null : session.jwt;
   const uploaded = new Set;
   for (const bucket of session.buckets) {
@@ -21730,7 +21925,7 @@ async function publish(client2, input) {
     status: deployment.praxis.status,
     created,
     uploaded: uploaded.size,
-    reused: contents.size - uploaded.size
+    reused: hashes.size - uploaded.size
   };
 }
 
@@ -23280,7 +23475,7 @@ function startProgress(ctx, write = (text) => writeOutput({ stderr: text })) {
 }
 
 // src/main.ts
-var version = "0.1.0-dev.06cf3b8";
+var version = "0.1.0-dev.086e3bf";
 var commands = commandTree(operations);
 var manual = [["login"], ["logout"], ["whoami"], ["org", "list"], ["org", "switch"], ["api"], ["skill"]];
 function route(argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepraxis/cli",
-  "version": "0.1.0-dev.06cf3b8",
+  "version": "0.1.0-dev.086e3bf",
   "type": "module",
   "bin": {
     "praxis": "dist/praxis.js"