@deepraxis/cli 0.1.0-dev.4cbfc1f → 0.1.0-dev.5dca2b5

package/COMMANDS.md

@@ -2,7 +2,7 @@
 
 Generated by `bun run commands`. DO NOT EDIT.
 
-368 HTTP operations; 370 commands including aliases.
+372 HTTP operations; 374 commands including aliases.
 
 Environment: `PRAXIS_ENV=develop|production` (dev package defaults to `develop`; stable package defaults to `production`). No `--env` option.
 
@@ -232,6 +232,10 @@ Handwritten commands: `login`, `logout`, `whoami`, `org list`, `org switch <orga
 | `praxis file get <file_id>` | `file.files.retrieve` | GET `/file/v1/files/{file_id}` |  |
 | `praxis file get-content <file_id>` | `file.files.retrieveContent` | GET `/file/v1/files/{file_id}/content` |  |
 | `praxis file list` | `file.files.list` | GET `/file/v1/files` | `--purpose`, `--param-limit`, `--order`, `--after`, `--scope-id`, `--before` |
+| `praxis file upload cancel <upload_id>` | `file.uploads.cancel` | POST `/file/v1/uploads/{upload_id}/cancel` |  |
+| `praxis file upload complete <upload_id>` | `file.uploads.complete` | POST `/file/v1/uploads/{upload_id}/complete` | `--part-ids`, `--md5` |
+| `praxis file upload create` | `file.uploads.create` | POST `/file/v1/uploads` | `--bytes`, `--filename`, `--mime-type`, `--purpose`, `--part-size` |
+| `praxis file upload part create` | `file.uploads.parts.create` | POST `/file/v1/uploads/{upload_id}/parts` | `--upload`, `--part-number`, `--param-data` |
 | `praxis knowledge vector-store create` | `knowledge.vectorStores.create` | POST `/knowledge/v1/vector_stores` | `--name`, `--file-ids`, `--description` |
 | `praxis knowledge vector-store delete <vector_store_id>` | `knowledge.vectorStores.delete` | DELETE `/knowledge/v1/vector_stores/{vector_store_id}` |  |
 | `praxis knowledge vector-store event list` | `knowledge.vectorStores.events.list` | GET `/knowledge/v1/vector_stores/{vector_store_id}/events` | `--vector-store`, `--after-seq`, `--param-limit` |

package/dist/praxis.js

@@ -136,6 +136,27 @@ var operations = [
           description: `Tool configurations available to the agent. Maximum of 128 tools
 across all toolsets allowed.`
         },
+        {
+          name: "databases",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Database allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+        },
+        {
+          name: "vector_stores",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Knowledge vector store allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+        },
+        {
+          name: "files",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "File allowlist for platform resources accessible through service-agent codemode. Only kind=service accepts nonempty bindings; personal agents return 400. At most 20 bindings per resource type, with no duplicate ids. Newly added bindings apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Unbound resources return 404; writes to read_only resources are refused. Other platform APIs return 403, except public API discovery. Invalid bindings and unknown item fields return 400. Omit on create for no bindings."
+        },
         {
           name: "kind",
           type: "string",
@@ -312,6 +333,27 @@ Obtain this value from a create or retrieve response. Must be at least 1 if
 specified. When supplied, the request fails if it does not match the server's
 current version; omit to apply the update unconditionally.`
         },
+        {
+          name: "databases",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+        },
+        {
+          name: "vector_stores",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+        },
+        {
+          name: "files",
+          type: "array",
+          itemType: "object",
+          required: false,
+          description: "Replace this resource allowlist; omission preserves it, and null or [] clears it. Additions apply only to new sessions; disabling or removing a binding immediately revokes access in running sessions. Only service agents accept nonempty bindings."
+        },
         {
           name: "kind",
           type: "string",
@@ -804,7 +846,7 @@ Own-face superset: Managed Agents has no persistent Computer attachment director
 
 Own-face extension: Managed Agents has no persistent Computer connection. Returns the public SDK sandbox_id, envd_access_token and template_id, plus the machine tier the computer is on now (light or heavy) and the lease that keeps it there (lease_id, lease_expires_at; lease_id is null when no lease exists). Keep the lease while the connection stays open: renew it about every 20 seconds (POST .../leases/{lease_id}/renew) and release it on close (DELETE .../leases/{lease_id}). An unrenewed lease simply expires, and the full machine is reclaimed only after that. Archived computers remain accessible; foreign or absent computers return 404. Never cache credentials.
 
-Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Heavy running time counts toward the daily budget in seconds. Renew the lease while using the connection and release it with DELETE when finished. If the daily budget is exhausted, 429 COMPUTER_BUDGET_EXHAUSTED allows you to continue with need light.`,
+Connect to a computer with a caller-held lease. Omit the body or send {} to request light: the lightweight shell, or the heavy instance while it is running. Send {"need":"heavy"} to request full Linux for interactive programs; files are synchronized before the heavy connection is returned with tier heavy. Renew the lease while using the connection and release it with DELETE when finished.`,
     http: "POST",
     path: "/agent/v1/computers/{computer_id}/connect",
     streaming: "no",
@@ -1877,7 +1919,7 @@ owning account only.`
     resource: "agent.sessions",
     method: "create",
     summary: "Create session",
-    description: `Create a session: one conversation with an agent, running on a machine. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass environment_id for a sandbox recipe. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.`,
+    description: `Create a session: one conversation with an agent. Pass agent as an agent id (latest version) or {id, version, type:"agent"}. Unlike Anthropic Managed Agents, omit environment_id to get a light machine, unless computer_id (explicit, or the agent's default) selects a Computer; pass an environment id for a sandbox recipe. For service agents, omission returns environment_id=light; explicit null allocates no machine, so codemode, bash and other machine tools are unavailable. Optional model must be one of the agent's allowed models; optional thinking is {effort: low|medium|high|xhigh|max|none} or null, where null inherits the agent default and then the model default (none requires the model to allow disabling thinking). Selections are saved before initial_events run; invalid ones return 400 invalid_request_error. Inline agent overrides are not supported. Supports vault_ids, up to 50, owned by the current organization and not archived; credential injection is deferred to a later version. Omitted budget defaults to USD 20; null removes the limit, and a limit object uses a positive integer string of USD cents. Up to 500 file resources can be attached. Use initial_events to send a first user.message in this request, or send messages afterwards with sessions.events.send. The returned status can still be idle before initial events run; read agent.message and the subsequent session.status_idle event to confirm completion.`,
     http: "POST",
     path: "/agent/v1/sessions",
     streaming: "no",
@@ -1897,7 +1939,7 @@ owning account only.`
           name: "environment_id",
           type: "string",
           required: false,
-          description: "ID of the `environment` defining the container configuration for\nthis session."
+          description: "Execution environment id from agent.environments.list or agent.environments.create. For a service agent, omission selects the built-in light environment and returns session.environment_id=light; explicit null allocates no machine and makes machine tools, including codemode and bash, unavailable. Personal agents use their selected Computer."
         },
         {
           name: "budget",
@@ -7701,7 +7743,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
     resource: "file.files",
     method: "create",
     summary: "Upload file",
-    description: 'Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 104857600 bytes, and only user_data, assistants and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File(["Return within 23 days."], "policy.txt", { type: "text/plain" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. OpenAI Uploads chunking is not supported. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–2592000), or praxis[expires_in_seconds] (3600–7776000), never both. Without expiry, the file persists until deleted.',
+    description: 'Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 100000000 bytes, and only user_data, assistants and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File(["Return within 23 days."], "policy.txt", { type: "text/plain" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. Use Uploads for larger files. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–2592000), or praxis[expires_in_seconds] (3600–7776000), never both. Without expiry, the file persists until deleted.',
     http: "POST",
     path: "/file/v1/files",
     streaming: "no",
@@ -7716,7 +7758,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           name: "file",
           type: "string",
           required: true,
-          description: "File bytes in one multipart file part, not a filename or file ID. The file must be nonempty and at most 104857600 bytes; its content determines the MIME type."
+          description: "File bytes in one multipart file part, not a filename or file ID. The file must be nonempty and at most 100000000 bytes; its content determines the MIME type."
         },
         {
           name: "purpose",
@@ -7765,7 +7807,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
     resource: "file.files",
     method: "retrieve",
     summary: "Retrieve file",
-    description: "Retrieve metadata for a live file owned by your tenant. Use its file_dp_ ID from upload or list. Missing, deleted, expired and other-tenant files return 404; use the content endpoint to download the bytes.",
+    description: "Retrieve metadata for a live file owned by your tenant. Use its file- ID from upload or list. Missing, deleted, expired and other-tenant files return 404; use the content endpoint to download the bytes.",
     http: "GET",
     path: "/file/v1/files/{file_id}",
     streaming: "no",
@@ -7782,7 +7824,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
     resource: "file.files",
     method: "retrieveContent",
     summary: "Retrieve file content",
-    description: "Download the original bytes of a live file owned by your tenant. Supply its file_dp_ ID from upload or list. A single byte Range can return a partial response; a range outside the file returns 416. Missing, deleted, expired and other-tenant files return 404.",
+    description: "Download the original bytes of a live file owned by your tenant. Supply its file- ID from upload or list. A single byte Range can return a partial response; a range outside the file returns 416. Missing, deleted, expired and other-tenant files return 404.",
     http: "GET",
     path: "/file/v1/files/{file_id}/content",
     streaming: "no",
@@ -7795,6 +7837,152 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
     ],
     query: []
   },
+  {
+    resource: "file.uploads",
+    method: "create",
+    summary: "Create an upload",
+    description: "Start a multipart upload for a file larger than the 100000000-byte direct-upload limit. Supply the exact byte length, filename, MIME type and purpose. Unlike OpenAI, uploads accept at most 2 GiB (2147483648 bytes) and only user_data, assistants and vision purposes. Add parts of at most 64000000 bytes and complete within one hour. Optional part_size enables fixed-size, retryable parts. expires_after applies to the resulting file (3600–7776000 seconds on this own face); without it the file persists until deleted.",
+    http: "POST",
+    path: "/file/v1/uploads",
+    streaming: "no",
+    pagination: false,
+    pathParams: [],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "bytes",
+          type: "integer",
+          required: true,
+          description: "Exact complete file length in bytes, from 1 through 2147483648 (2 GiB); the sum of completed parts must match."
+        },
+        {
+          name: "filename",
+          type: "string",
+          required: true,
+          description: "Filename for the resulting file, at most 255 UTF-8 bytes."
+        },
+        {
+          name: "mime_type",
+          type: "string",
+          required: true,
+          description: "Declared MIME type; validated against the assembled content."
+        },
+        {
+          name: "purpose",
+          type: "string",
+          enum: [
+            "user_data",
+            "assistants",
+            "vision"
+          ],
+          required: true,
+          description: "Use user_data for conversation attachments, assistants for assistant files, or vision for PNG, JPEG, GIF and WebP images."
+        },
+        {
+          name: "expires_after",
+          type: "object",
+          required: false,
+          description: "Optional expiry policy for the resulting file; omission retains the file until deletion."
+        },
+        {
+          name: "part_size",
+          type: "integer",
+          required: false,
+          description: "Optional fixed part size in bytes, 5242880–64000000. Requires part_number on every part; retries of identical bytes at the same number return the same part. Omit to use arbitrary-sized parts."
+        }
+      ]
+    }
+  },
+  {
+    resource: "file.uploads",
+    method: "cancel",
+    summary: "Cancel an upload",
+    description: "Cancel an unfinished upload using upload_id from create and release its reserved storage. Further parts and completion are rejected. Cancelling an already cancelled upload returns the same terminal result; a completed upload cannot be cancelled. Delete its resulting file instead.",
+    http: "POST",
+    path: "/file/v1/uploads/{upload_id}/cancel",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "upload_id",
+        sdkName: "upload_id"
+      }
+    ],
+    query: []
+  },
+  {
+    resource: "file.uploads",
+    method: "complete",
+    summary: "Complete an upload",
+    description: "Assemble the uploaded parts into a file. Supply upload_id from create and part_ids from addPart in file byte order; their sizes must total the declared bytes. Optional md5 verifies the assembled content. Retrying identical part_ids and normalized md5 returns the same result; different inputs return 409. Unlike OpenAI, completed can contain a file still processing (status uploaded). Poll files.retrieve using file.id until status processed (own face state active); error, expiry or 404 means processing failed and the file cannot be used.",
+    http: "POST",
+    path: "/file/v1/uploads/{upload_id}/complete",
+    streaming: "no",
+    pagination: false,
+    pathParams: [
+      {
+        name: "upload_id",
+        sdkName: "upload_id"
+      }
+    ],
+    query: [],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "part_ids",
+          type: "array",
+          itemType: "string",
+          required: true,
+          description: "All part IDs in concatenation order, without duplicates. Fixed-size uploads require increasing part_number order."
+        },
+        {
+          name: "md5",
+          type: "string",
+          required: false,
+          description: "Optional whole-file MD5 as 32 hexadecimal characters; verified after assembly."
+        }
+      ]
+    }
+  },
+  {
+    resource: "file.uploads.parts",
+    method: "create",
+    summary: "Add an upload part",
+    description: "Send one nonempty part as the multipart data field, at most 64000000 bytes. Parts may arrive concurrently in any order. Use upload_id from create. For a fixed-size upload, supply part_number starting at 1 and exactly part_size bytes except for the final remainder; retry the same number with identical bytes to recover its part ID. Without part_size, each request creates a new part and part_number is ignored. Save the returned part IDs for complete.",
+    http: "POST",
+    path: "/file/v1/uploads/{upload_id}/parts",
+    streaming: "no",
+    pagination: false,
+    multipart: true,
+    pathParams: [
+      {
+        name: "upload_id",
+        sdkName: "upload_id"
+      }
+    ],
+    query: [
+      {
+        name: "part_number",
+        type: "integer",
+        required: false,
+        description: "Required when create set part_size; 1 through ceil(bytes / part_size). Ignored for general uploads."
+      }
+    ],
+    body: {
+      required: true,
+      fields: [
+        {
+          name: "data",
+          type: "string",
+          required: true,
+          description: "Raw bytes of this part, nonempty and at most 64000000 bytes."
+        }
+      ]
+    }
+  },
   {
     resource: "knowledge.vectorStores",
     method: "list",
@@ -12137,7 +12325,7 @@ for more details.`
           name: "message",
           type: "string",
           required: true,
-          description: "Problem description and original error text; at most 4096 Unicode code points."
+          description: "Problem description, at most 4096 Unicode code points; may be empty only when contexts.praxis.error.message is a non-empty string."
         },
         {
           name: "contact_email",
@@ -12438,7 +12626,7 @@ for more details.`
     resource: "sandbox.sandboxes",
     method: "create",
     summary: "Create sandbox (v2)",
-    description: "Start an isolated environment using a templateID from templates.list, then retain sandboxID for lifecycle calls. Unlike E2B, templateID resolves to your ready Environment or a public Base; omit it to use the default base template (`base`), as the E2B SDK does. timeout is seconds from creation and defaults to 300. envVars supplies environment variables and metadata stores your string labels. All system communication is secured; use the returned envdAccessToken for files and commands through the envd data plane, not the management methods. Never print that token.",
+    description: "Create a sandbox from the template. All system communication with the sandbox is secured.",
     http: "POST",
     path: "/sandbox/v1/sandboxes",
     streaming: "no",
@@ -12452,7 +12640,7 @@ for more details.`
           name: "templateID",
           type: "string",
           required: true,
-          description: "Template ID or alias from templates.list; resolves to your ready Environment first, then a public Base. Omit it to use the default base template (`base`)."
+          description: "Identifier of the required template"
         },
         {
           name: "timeout",
@@ -12590,7 +12778,7 @@ for more details.`
     resource: "sandbox.sandboxes",
     method: "connect",
     summary: "Connect sandbox (v2)",
-    description: "Reconnect to an existing sandbox and resume it if paused. The optional timeout is seconds from now and defaults to 300; a later existing deadline is preserved. A running sandbox returns 200 and a resumed sandbox returns 201. Read sandboxID, domain and envdAccessToken from the response for subsequent data-plane access; never treat connecting as executing a command.",
+    description: "Returns sandbox details. If the sandbox is paused, it will be resumed. TTL is only extended. The request body is optional; an omitted timeout defaults to 300 seconds.",
     http: "POST",
     path: "/sandbox/v1/sandboxes/{sandboxID}/connect",
     streaming: "no",
@@ -12749,7 +12937,7 @@ for more details.`
     resource: "sandbox.sandboxes.metrics",
     method: "list",
     summary: "Sandbox metrics",
-    description: "Read CPU, memory and disk usage over the requested interval; start and end are Unix seconds. Unlike E2B, light sandboxes do not provide metrics; check the returned capabilities before requesting them.",
+    description: "Read CPU, memory and disk usage samples of a sandbox over a time window. Use it to size a sandbox or find out why it is slow. start and end are Unix timestamps in seconds; without them the recent samples are returned. An unknown id answers 404.",
     http: "GET",
     path: "/sandbox/v1/sandboxes/{sandboxID}/metrics",
     streaming: "no",
@@ -12834,7 +13022,7 @@ for more details.`
     resource: "sandbox.sandboxes",
     method: "pause",
     summary: "Pause sandbox",
-    description: "Suspend a running sandbox for later connection; use delete to discard it instead. Unlike E2B, light sandboxes preserve disk rather than memory, and persistent sandboxes can resume on data-plane traffic even when autoResume is false. Inspect paused state with the management retrieve operation to avoid waking the sandbox. Explicitly ephemeral sandboxes cannot pause. memory defaults to true, but only a memory-capable sandbox preserves running processes; memory=false saves disk state and resumes with a cold boot. Success returns 204; connect resumes the saved sandbox.",
+    description: "Pause a running sandbox, keeping its files and memory so that connectSandbox can resume it later. Use it to stop paying for compute without losing state; to discard the sandbox use killSandbox. Success answers 204. A sandbox that is not running answers 409.",
     http: "POST",
     path: "/sandbox/v1/sandboxes/{sandboxID}/pause",
     streaming: "no",
@@ -13226,7 +13414,7 @@ for more details.`
     resource: "sandbox.templates",
     method: "list",
     summary: "List templates (v2)",
-    description: "Choose a templateID before creating a sandbox. Unlike E2B, this catalog lists your ready Environments and public Bases; use a returned ID or alias; `base` is the default template that create uses when templateID is omitted. Page through results using nextToken.",
+    description: "List the templates you can create sandboxes from. Use it to pick the template id or alias for createSandbox. `base` is the default template that createSandbox uses when templateID is omitted. limit is 1 to 100 (default 100); send the cursor from the response back as nextToken to continue.",
     http: "GET",
     path: "/sandbox/v1/templates",
     streaming: "no",
@@ -14701,6 +14889,232 @@ for more details.`
   }
 ];
 
+// ../../packages/sdk/typescript/src/core/errors.ts
+function problemFrom(status, headers, body, statusText) {
+  const value = body && typeof body === "object" ? body : {};
+  const nested = value.error && typeof value.error === "object" ? value.error : {};
+  const string = (v) => typeof v === "string" && v.trim() ? v : undefined;
+  const fallback = statusText || { 400: "Bad Request", 401: "Unauthorized", 403: "Forbidden", 404: "Not Found", 405: "Method Not Allowed", 408: "Request Timeout", 409: "Conflict", 413: "Payload Too Large", 415: "Unsupported Media Type", 422: "Unprocessable Entity", 429: "Too Many Requests", 500: "Internal Server Error", 502: "Bad Gateway", 503: "Service Unavailable", 504: "Gateway Timeout" }[status] || `HTTP ${status}`;
+  const detail = string(value.detail) ?? string(nested.message) ?? string(value.message) ?? string(body);
+  const title = string(value.title) ?? fallback;
+  const param = nested.param ?? value.param;
+  return {
+    status,
+    message: detail ?? title,
+    title,
+    detail,
+    code: string(value.code) ?? string(nested.code) ?? string(nested.type) ?? string(value.error_code),
+    type: string(nested.type) ?? string(value.type),
+    param: typeof param === "string" ? param : param === null || nested.param === null ? null : undefined,
+    errors: Array.isArray(value.errors) ? value.errors : [],
+    requestId: headers.get("x-request-id") ?? string(value.requestId) ?? string(value.request_id),
+    raw: body
+  };
+}
+
+class PraxisError extends Error {
+  status;
+  code;
+  type;
+  title;
+  detail;
+  errors;
+  requestId;
+  param;
+  raw;
+  constructor(problem = {}, options) {
+    super(problem.message ?? problem.detail ?? problem.title ?? `Praxis request failed${problem.status ? ` (${problem.status})` : ""}`, options);
+    this.name = "PraxisError";
+    this.status = problem.status;
+    this.code = problem.code;
+    this.type = problem.type;
+    this.title = problem.title;
+    this.detail = problem.detail;
+    this.errors = problem.errors ?? [];
+    this.requestId = problem.requestId;
+    this.param = problem.param;
+    this.raw = problem.raw;
+  }
+  static fromResponse(response, body) {
+    return new PraxisError(problemFrom(response.status, response.headers, body, response.statusText));
+  }
+}
+
+class PraxisConnectionError extends PraxisError {
+  constructor(cause) {
+    super({ code: "CONNECTION_ERROR", title: "Unable to connect to Praxis" }, { cause });
+    this.name = "PraxisConnectionError";
+  }
+}
+
+class PraxisTimeoutError extends PraxisError {
+  constructor(timeoutMs) {
+    super({ code: "TIMEOUT", title: `Praxis request exceeded ${timeoutMs} ms` });
+    this.name = "PraxisTimeoutError";
+  }
+}
+
+// ../../packages/sdk/typescript/src/core/retry.ts
+function canRetry(request) {
+  return request.method !== "POST" || Boolean(request.headers.get("Idempotency-Key")?.trim());
+}
+function retryAfterMs(value, now = Date.now()) {
+  if (!value)
+    return;
+  if (/^\d+(?:\.\d+)?$/.test(value.trim()))
+    return Number(value) * 1000;
+  const date = Date.parse(value);
+  return Number.isFinite(date) ? Math.max(0, date - now) : undefined;
+}
+function retryDelay(attempt, retryAfter, random = Math.random) {
+  return retryAfterMs(retryAfter) ?? Math.min(30000, 500 * 2 ** attempt) * (0.5 + random() * 0.5);
+}
+function abortable(promise, signal) {
+  signal.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const abort = () => reject(signal.reason);
+    signal.addEventListener("abort", abort, { once: true });
+    promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
+  });
+}
+function sleep(ms, signal) {
+  signal.throwIfAborted();
+  return new Promise((resolve, reject) => {
+    const abort = () => {
+      clearTimeout(timer);
+      reject(signal.reason);
+    };
+    const timer = setTimeout(() => {
+      signal.removeEventListener("abort", abort);
+      resolve();
+    }, ms);
+    signal.addEventListener("abort", abort, { once: true });
+  });
+}
+async function fetchWithRetry(request, fetcher, options) {
+  const eligible = canRetry(request);
+  const wait = options.wait ?? sleep;
+  for (let attempt = 0;; attempt++) {
+    options.signal.throwIfAborted();
+    let response;
+    try {
+      response = await abortable(fetcher(request.clone()), options.signal);
+    } catch (cause) {
+      options.signal.throwIfAborted();
+      if (!eligible || attempt >= options.maxRetries)
+        throw new PraxisConnectionError(cause);
+      await wait(retryDelay(attempt, null, options.random), options.signal);
+      continue;
+    }
+    const retriable = response.status === 408 || response.status === 429 || response.status >= 500 && response.status <= 599;
+    if (!eligible || !retriable || attempt >= options.maxRetries)
+      return response;
+    const delay = retryDelay(attempt, response.headers.get("Retry-After"), options.random);
+    await response.body?.cancel();
+    await wait(delay, options.signal);
+  }
+}
+
+// ../../packages/sdk/typescript/src/helpers/file-upload.ts
+var MAX_RETRIES = 5;
+function retryable(error) {
+  return error instanceof PraxisConnectionError || error instanceof PraxisTimeoutError || error instanceof SyntaxError || error instanceof PraxisError && (error.status === 408 || error.status === 429 || error.status !== undefined && error.status >= 500 && error.status <= 599);
+}
+async function retry(signal, operation) {
+  for (let used = 0;; used++) {
+    signal.throwIfAborted();
+    try {
+      return await operation();
+    } catch (error) {
+      signal.throwIfAborted();
+      if (used >= MAX_RETRIES || !retryable(error))
+        throw error;
+      await sleep(500 * 2 ** used, signal);
+    }
+  }
+}
+async function uploadFile(client, file, options) {
+  options.signal?.throwIfAborted();
+  if (file.size < 1 || file.size > 2 * 1024 ** 3)
+    throw new RangeError("File size must be 1 byte through 2 GiB");
+  const partSize = options.partSize ?? 50 * 1024 ** 2;
+  const concurrency = options.concurrency ?? 3;
+  if (!Number.isSafeInteger(partSize) || partSize < 5 * 1024 ** 2 || partSize > 64000000)
+    throw new RangeError("partSize must be an integer from 5242880 through 64000000");
+  if (!Number.isSafeInteger(concurrency) || concurrency < 1)
+    throw new RangeError("concurrency must be a positive integer");
+  const filename = options.filename ?? (typeof File !== "undefined" && file instanceof File ? file.name : "upload");
+  const work = new AbortController;
+  const abort = () => work.abort(options.signal?.reason);
+  options.signal?.addEventListener("abort", abort, { once: true });
+  const signal = work.signal;
+  const request = { signal, maxRetries: 0, timeoutMs: 120000 };
+  let uploadId;
+  const active = async (initial) => {
+    let result = initial;
+    for (let polls = 0;; polls++) {
+      signal.throwIfAborted();
+      if (result.state === "active")
+        return result;
+      if (result.state !== "processing")
+        throw new PraxisError({ code: "FILE_PROCESSING_FAILED", message: `File ${result.id} is not active (${result.state})` });
+      await sleep(Math.min(5000, 1000 * 2 ** polls), signal);
+      result = await retry(signal, () => client.file.files.retrieve({ path: { file_id: result.id }, ...request }));
+    }
+  };
+  try {
+    signal.throwIfAborted();
+    options.onProgress?.(0);
+    if (file.size <= 32 * 1024 ** 2) {
+      const result2 = await client.file.files.create({ body: { file: new File([file], filename, { type: file.type }), purpose: options.purpose }, ...request });
+      options.onProgress?.(1);
+      return await active(result2);
+    }
+    const upload = await client.file.uploads.create({ body: { bytes: file.size, filename, mime_type: file.type || "application/octet-stream", purpose: options.purpose, part_size: partSize }, ...request });
+    uploadId = upload.id;
+    signal.throwIfAborted();
+    const path = { upload_id: uploadId };
+    const count = Math.ceil(file.size / partSize);
+    const ids = new Array(count);
+    let cursor = 0, confirmed = 0;
+    const worker = async () => {
+      while (cursor < count) {
+        signal.throwIfAborted();
+        const index = cursor++;
+        const chunk = file.slice(index * partSize, Math.min(file.size, (index + 1) * partSize));
+        const part = await retry(signal, () => client.file.uploads.parts.create({ path, query: { part_number: index + 1 }, body: { data: new File([chunk], filename) }, ...request }));
+        ids[index] = part.id;
+        confirmed += chunk.size;
+        options.onProgress?.(confirmed / file.size);
+      }
+    };
+    const workers = Array.from({ length: Math.min(concurrency, count) }, worker);
+    try {
+      await Promise.all(workers);
+    } catch (error) {
+      work.abort();
+      await Promise.allSettled(workers);
+      throw error;
+    }
+    const result = await retry(signal, () => client.file.uploads.complete({ path, body: { part_ids: ids }, ...request }));
+    if (result.error)
+      throw new PraxisError({ code: result.error.code, message: result.error.message });
+    if (result.status !== "completed" || !result.file)
+      throw new PraxisError({ code: "INVALID_RESPONSE", message: "Complete did not return a completed Upload with a file" });
+    return await active(result.file);
+  } catch (error) {
+    work.abort();
+    if (uploadId) {
+      await client.file.uploads.cancel({ path: { upload_id: uploadId }, maxRetries: 0, timeoutMs: 1e4 }).catch(() => {});
+    }
+    if (options.signal?.aborted)
+      throw options.signal.reason;
+    throw error;
+  } finally {
+    options.signal?.removeEventListener("abort", abort);
+  }
+}
+
 // ../../packages/sdk/typescript/src/core/multipart.ts
 function multipartBodySerializer(body) {
   const data = new FormData;
@@ -14768,9 +15182,9 @@ function createSseClient({
   ...options
 }) {
   let lastEventId;
-  const sleep = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  const sleep2 = sseSleepFn ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
   const createStream = async function* () {
-    let retryDelay = sseDefaultRetryDelay ?? 3000;
+    let retryDelay2 = sseDefaultRetryDelay ?? 3000;
     let attempt = 0;
     const signal = options.signal ?? new AbortController().signal;
     while (true) {
@@ -14834,7 +15248,7 @@ function createSseClient({
                 } else if (line.startsWith("retry:")) {
                   const parsed = Number.parseInt(line.replace(/^retry:\s*/, ""), 10);
                   if (!Number.isNaN(parsed)) {
-                    retryDelay = parsed;
+                    retryDelay2 = parsed;
                   }
                 }
               }
@@ -14862,7 +15276,7 @@ function createSseClient({
                 data,
                 event: eventName,
                 id: lastEventId,
-                retry: retryDelay
+                retry: retryDelay2
               });
               if (dataLines.length) {
                 yield data;
@@ -14879,8 +15293,8 @@ function createSseClient({
         if (sseMaxRetryAttempts !== undefined && attempt >= sseMaxRetryAttempts) {
           break;
         }
-        const backoff = Math.min(retryDelay * 2 ** (attempt - 1), sseMaxRetryDelay ?? 30000);
-        await sleep(backoff);
+        const backoff = Math.min(retryDelay2 * 2 ** (attempt - 1), sseMaxRetryDelay ?? 30000);
+        await sleep2(backoff);
       }
     }
   };
@@ -16304,6 +16718,55 @@ var fileRetrieveFileContent = (options) => (options.client ?? client).get({
   url: "/file/v1/files/{file_id}/content",
   ...options
 });
+var fileCreateUpload = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }],
+  url: "/file/v1/uploads",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
+var fileAddUploadPart = (options) => (options.client ?? client).post({
+  ...formDataBodySerializer,
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }],
+  url: "/file/v1/uploads/{upload_id}/parts",
+  ...options,
+  headers: {
+    "Content-Type": null,
+    ...options.headers
+  }
+});
+var fileCompleteUpload = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }],
+  url: "/file/v1/uploads/{upload_id}/complete",
+  ...options,
+  headers: {
+    "Content-Type": "application/json",
+    ...options.headers
+  }
+});
+var fileCancelUpload = (options) => (options.client ?? client).post({
+  security: [{
+    key: "BearerAuth",
+    scheme: "bearer",
+    type: "http"
+  }],
+  url: "/file/v1/uploads/{upload_id}/cancel",
+  ...options
+});
 var healthCheck = (options) => (options?.client ?? client).get({ url: "/meta/v1/health", ...options });
 var metaMethodsSearch = (options) => (options?.client ?? client).get({ url: "/meta/v1/methods", ...options });
 var metaMethodsRetrieve = (options) => (options.client ?? client).get({ url: "/meta/v1/methods/{name}", ...options });
@@ -21013,6 +21476,14 @@ function createFile(transport) {
       list: bind(transport, fileListFiles),
       retrieve: bind(transport, fileRetrieveFile),
       retrieveContent: bind(transport, fileRetrieveFileContent)
+    },
+    uploads: {
+      cancel: bind(transport, fileCancelUpload),
+      complete: bind(transport, fileCompleteUpload),
+      create: bind(transport, fileCreateUpload),
+      parts: {
+        create: bind(transport, (options) => fileAddUploadPart({ ...options, bodySerializer: multipartBodySerializer, headers: { "Content-Type": null, ...options.headers } }))
+      }
     }
   };
 }
@@ -21383,132 +21854,6 @@ var resourceFactories = {
   vault: createVault
 };
 
-// ../../packages/sdk/typescript/src/core/errors.ts
-function problemFrom(status, headers, body, statusText) {
-  const value = body && typeof body === "object" ? body : {};
-  const nested = value.error && typeof value.error === "object" ? value.error : {};
-  const string = (v) => typeof v === "string" && v.trim() ? v : undefined;
-  const fallback = statusText || { 400: "Bad Request", 401: "Unauthorized", 403: "Forbidden", 404: "Not Found", 405: "Method Not Allowed", 408: "Request Timeout", 409: "Conflict", 413: "Payload Too Large", 415: "Unsupported Media Type", 422: "Unprocessable Entity", 429: "Too Many Requests", 500: "Internal Server Error", 502: "Bad Gateway", 503: "Service Unavailable", 504: "Gateway Timeout" }[status] || `HTTP ${status}`;
-  const detail = string(value.detail) ?? string(nested.message) ?? string(value.message) ?? string(body);
-  const title = string(value.title) ?? fallback;
-  const param = nested.param ?? value.param;
-  return {
-    status,
-    message: detail ?? title,
-    title,
-    detail,
-    code: string(value.code) ?? string(nested.code) ?? string(nested.type) ?? string(value.error_code),
-    type: string(nested.type) ?? string(value.type),
-    param: typeof param === "string" ? param : param === null || nested.param === null ? null : undefined,
-    errors: Array.isArray(value.errors) ? value.errors : [],
-    requestId: headers.get("x-request-id") ?? string(value.requestId) ?? string(value.request_id),
-    raw: body
-  };
-}
-
-class PraxisError extends Error {
-  status;
-  code;
-  type;
-  title;
-  detail;
-  errors;
-  requestId;
-  param;
-  raw;
-  constructor(problem = {}, options) {
-    super(problem.message ?? problem.detail ?? problem.title ?? `Praxis request failed${problem.status ? ` (${problem.status})` : ""}`, options);
-    this.name = "PraxisError";
-    this.status = problem.status;
-    this.code = problem.code;
-    this.type = problem.type;
-    this.title = problem.title;
-    this.detail = problem.detail;
-    this.errors = problem.errors ?? [];
-    this.requestId = problem.requestId;
-    this.param = problem.param;
-    this.raw = problem.raw;
-  }
-  static fromResponse(response, body) {
-    return new PraxisError(problemFrom(response.status, response.headers, body, response.statusText));
-  }
-}
-
-class PraxisConnectionError extends PraxisError {
-  constructor(cause) {
-    super({ code: "CONNECTION_ERROR", title: "Unable to connect to Praxis" }, { cause });
-    this.name = "PraxisConnectionError";
-  }
-}
-
-class PraxisTimeoutError extends PraxisError {
-  constructor(timeoutMs) {
-    super({ code: "TIMEOUT", title: `Praxis request exceeded ${timeoutMs} ms` });
-    this.name = "PraxisTimeoutError";
-  }
-}
-
-// ../../packages/sdk/typescript/src/core/retry.ts
-function canRetry(request) {
-  return request.method !== "POST" || Boolean(request.headers.get("Idempotency-Key")?.trim());
-}
-function retryAfterMs(value, now = Date.now()) {
-  if (!value)
-    return;
-  if (/^\d+(?:\.\d+)?$/.test(value.trim()))
-    return Number(value) * 1000;
-  const date = Date.parse(value);
-  return Number.isFinite(date) ? Math.max(0, date - now) : undefined;
-}
-function retryDelay(attempt, retryAfter, random = Math.random) {
-  return retryAfterMs(retryAfter) ?? Math.min(30000, 500 * 2 ** attempt) * (0.5 + random() * 0.5);
-}
-function abortable(promise, signal) {
-  signal.throwIfAborted();
-  return new Promise((resolve, reject) => {
-    const abort = () => reject(signal.reason);
-    signal.addEventListener("abort", abort, { once: true });
-    promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", abort));
-  });
-}
-function sleep(ms, signal) {
-  signal.throwIfAborted();
-  return new Promise((resolve, reject) => {
-    const abort = () => {
-      clearTimeout(timer);
-      reject(signal.reason);
-    };
-    const timer = setTimeout(() => {
-      signal.removeEventListener("abort", abort);
-      resolve();
-    }, ms);
-    signal.addEventListener("abort", abort, { once: true });
-  });
-}
-async function fetchWithRetry(request, fetcher, options) {
-  const eligible = canRetry(request);
-  const wait = options.wait ?? sleep;
-  for (let attempt = 0;; attempt++) {
-    options.signal.throwIfAborted();
-    let response;
-    try {
-      response = await abortable(fetcher(request.clone()), options.signal);
-    } catch (cause) {
-      options.signal.throwIfAborted();
-      if (!eligible || attempt >= options.maxRetries)
-        throw new PraxisConnectionError(cause);
-      await wait(retryDelay(attempt, null, options.random), options.signal);
-      continue;
-    }
-    const retriable = response.status === 408 || response.status === 429 || response.status >= 500 && response.status <= 599;
-    if (!eligible || !retriable || attempt >= options.maxRetries)
-      return response;
-    const delay = retryDelay(attempt, response.headers.get("Retry-After"), options.random);
-    await response.body?.cancel();
-    await wait(delay, options.signal);
-  }
-}
-
 // ../../packages/sdk/typescript/src/core/sse.ts
 async function* parseSSE(body, options = {}) {
   const reader = body.getReader();
@@ -21950,6 +22295,8 @@ class Praxis {
     const transport = new Transport(options);
     for (const [name, create] of Object.entries(resourceFactories)) {
       const resource = create(transport);
+      if (name === "file")
+        Object.assign(resource, { uploadFile: (file, options2) => uploadFile(this, file, options2) });
       if (name === "database")
         Object.assign(resource, { count: (input) => count(transport, input) });
       if (name === "application")
@@ -23492,7 +23839,7 @@ function startProgress(ctx, write = (text) => writeOutput({ stderr: text })) {
 }
 
 // src/main.ts
-var version = "0.1.0-dev.4cbfc1f";
+var version = "0.1.0-dev.5dca2b5";
 var commands = commandTree(operations);
 var manual = [["login"], ["logout"], ["whoami"], ["org", "list"], ["org", "switch"], ["api"], ["skill"]];
 function route(argv) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepraxis/cli",
-  "version": "0.1.0-dev.4cbfc1f",
+  "version": "0.1.0-dev.5dca2b5",
   "type": "module",
   "bin": {
     "praxis": "dist/praxis.js"