@deepraxis/cli 0.2.0-dev.a538fab → 0.2.0-dev.ed5af3e

package/dist/praxis.js

@@ -8405,7 +8405,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
     resource: "file.files",
     method: "create",
     summary: "Upload file",
-    description: 'Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 100000000 bytes, and only user_data and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File(["Return within 23 days."], "policy.txt", { type: "text/plain" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. Use Uploads for larger files. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–7776000). Without expiry, the file persists until deleted.',
+    description: 'Upload a file to reuse in conversations or attach to a knowledge base. Unlike OpenAI Files, uploads must be nonempty and at most 100000000 bytes, and only user_data, assistants and vision purposes are accepted. Send file bytes as a multipart file part, not a filename or file ID; in the SDK use a File or Blob, for example new File(["Return within 23 days."], "policy.txt", { type: "text/plain" }). Content determines the MIME type. Supported uploads include PDF, DOCX/XLSX/PPTX, PNG/JPEG/GIF/WebP, MP3/WAV/FLAC/OGG/M4A, MP4/WebM, and UTF-8 JSON/NDJSON/CSV/Markdown/plain text; empty, unsupported, oversized files and unsupported purposes return 400. Use Uploads for larger files. The purpose vision accepts only PNG, JPEG, GIF and WebP, while conversation images require user_data. The returned ID belongs to your tenant; upload alone does not ingest the file into Knowledge. Knowledge attachment has a lower limit of 100000000 bytes. Optionally set expires_after[anchor]=created_at with expires_after[seconds] (3600–2592000), or praxis[expires_in_seconds] (3600–7776000), never both. Without expiry, the file persists until deleted.',
     http: "POST",
     path: "/file/v1/files",
     streaming: "no",
@@ -8427,16 +8427,23 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           type: "string",
           enum: [
             "user_data",
+            "assistants",
             "vision"
           ],
           required: true,
-          description: "Purpose label stored with the file: user_data or vision. The vision purpose accepts only PNG, JPEG, GIF and WebP images. Conversation image references require user_data."
+          description: "Purpose label stored with the file: user_data, assistants or vision. The vision purpose accepts only PNG, JPEG, GIF and WebP images. Conversation image references require user_data."
         },
         {
           name: "expires_after",
           type: "object",
           required: false,
           description: "Optional expiry relative to created_at. Files without an expiry persist until deleted."
+        },
+        {
+          name: "praxis",
+          type: "object",
+          required: false,
+          description: "Own-face extensions. Use at most one expiry setting."
         }
       ]
     }
@@ -8499,7 +8506,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
     resource: "file.uploads",
     method: "create",
     summary: "Create an upload",
-    description: "Start a multipart upload for a file larger than the 100000000-byte direct-upload limit. Supply the exact byte length, filename, MIME type and purpose. Unlike OpenAI, uploads accept at most 2 GiB (2147483648 bytes) and only user_data and vision purposes. Add parts of at most 64000000 bytes and complete within one hour. Optional part_size enables fixed-size, retryable parts. expires_after applies to the resulting file (3600–7776000 seconds on this own face); without it the file persists until deleted.",
+    description: "Start a multipart upload for a file larger than the 100000000-byte direct-upload limit. Supply the exact byte length, filename, MIME type and purpose. Unlike OpenAI, uploads accept at most 2 GiB (2147483648 bytes) and only user_data, assistants and vision purposes. Add parts of at most 64000000 bytes and complete within one hour. Optional part_size enables fixed-size, retryable parts. expires_after applies to the resulting file (3600–7776000 seconds on this own face); without it the file persists until deleted.",
     http: "POST",
     path: "/file/v1/uploads",
     streaming: "no",
@@ -8532,10 +8539,11 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           type: "string",
           enum: [
             "user_data",
+            "assistants",
             "vision"
           ],
           required: true,
-          description: "Use user_data for conversation attachments, or vision for PNG, JPEG, GIF and WebP images."
+          description: "Use user_data for conversation attachments, assistants for assistant files, or vision for PNG, JPEG, GIF and WebP images."
         },
         {
           name: "expires_after",
@@ -9715,7 +9723,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           name: "overwrite",
           type: "boolean",
           required: false,
-          description: "Allow replacing an existing public_id, preserving its asset_id and increasing its version. Only the latest version is deliverable; old version URLs return 404. Create a new public_id to retain old deliveries. False returns the existing resource without replacing it; defaults to true."
+          description: "Allow replacing an existing public_id, preserving its asset_id and increasing its version. False returns the existing resource without replacing it; defaults to true."
         },
         {
           name: "tags",
@@ -9774,7 +9782,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           name: "file_id",
           type: "string",
           required: true,
-          description: "File ID to copy into this library; passed as the upload source instead of file bytes. This creates an independent public copy readable without authentication. Deleting the source File does not delete this asset; do not import confidential content."
+          description: "File ID to copy into this library; passed as the upload source instead of file bytes."
         },
         {
           name: "public_id",
@@ -9828,7 +9836,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           name: "overwrite",
           type: "boolean",
           required: false,
-          description: "Allow replacing an existing public_id, preserving its asset_id and increasing its version. Only the latest version is deliverable; old version URLs return 404. Create a new public_id to retain old deliveries. False returns the existing resource without replacing it; defaults to true."
+          description: "Allow replacing an existing public_id, preserving its asset_id and increasing its version. False returns the existing resource without replacing it; defaults to true."
         },
         {
           name: "tags",
@@ -10345,7 +10353,7 @@ The default is return=minimal: success returns HTTP 201 with an empty body. Send
           name: "expression",
           type: "string",
           required: false,
-          description: 'Asset filter expression supporting field comparisons, AND, OR, NOT, parentheses and suffix wildcards. An empty expression matches all assets. For business metadata use context.sku=KETTLE-RED AND context.revision=2; request with_field: ["context"] to include context.'
+          description: "Asset filter expression supporting field comparisons, AND, OR, NOT, parentheses and suffix wildcards. An empty expression matches all assets."
         },
         {
           name: "sort_by",
@@ -26678,9 +26686,8 @@ function jwtFetch(fetchImpl, token) {
 function credentials(config, vars, ports) {
   const path = ports.path ?? tokenPath(config.env);
   const store = ports.store ?? createTokenStore(config.env, path, ports.secretStore);
-  const source = credentialSource(vars);
   const apiKey = vars.PRAXIS_API_KEY;
-  const machineToken = source === "machine-token" ? vars.PRAXIS_API_TOKEN : undefined;
+  const machineToken = credentialSource(vars) === "machine-token" ? vars.PRAXIS_API_TOKEN : undefined;
   const remember = ports.remember ?? (() => {});
   if (apiKey)
     remember(apiKey);
@@ -26742,7 +26749,6 @@ function credentials(config, vars, ports) {
     }
   }
   return {
-    source,
     get,
     requireLogin,
     async client(org) {
@@ -26798,13 +26804,13 @@ function skillDocument(commands) {
     "## General rules",
     "",
     "- Select the environment only with `PRAXIS_ENV`; there is no `--env` option. The dev package defaults to develop.",
-    "- Authenticate with `PRAXIS_API_KEY`, `PRAXIS_API_TOKEN` (a machine token, sent in the Authorization header; computers have it set) or `praxis login`, in that order. Login saves the session even when an environment credential takes precedence; unset the named variable in its warning to use the saved login. API keys and machine tokens determine the organization; login sessions can use `--org <organization_id>`. `PRAXIS_API_URL` overrides the API base and must be an https deepraxis.com URL.",
+    "- Authenticate with `PRAXIS_API_KEY`, `PRAXIS_API_TOKEN` (a machine token, sent in the Authorization header; computers have it set) or `praxis login`, in that order. API keys and machine tokens determine the organization; login sessions can use `--org <organization_id>`. `PRAXIS_API_URL` overrides the API base and must be an https deepraxis.com URL.",
     "- AI mode is enabled automatically in supported agent environments. Use `--format agent` to select it explicitly.",
     "- Use `--json` for the complete JSON response without presentation truncation. Successful JSON output goes to stdout; errors go to stderr.",
     "- Supply bodies with `--data JSON`, `--data @file.json`, or `--data -` for stdin. Scalar field options override matching JSON fields. Structured fields require `--data`.",
     "- Deletion requires `--yes` in AI mode. Confirm the intended resource before using it.",
     "- Use `--limit N` to limit a server page for SDK-paginated commands. Other lists apply it only to displayed rows; `--param-limit` still sends the API parameter when available. `--all` follows supported pagination and cannot be combined with `--limit`.",
-    "- Error JSON has an `error` object: `code` identifies the failure, `message` describes it, `hint` suggests recovery, `env` identifies the environment, `command` identifies the command, `status` is the HTTP status, and `request_id` correlates diagnostics. Authentication failures also include `credential_source` (api-key, machine-token, or login); follow the source-specific hint. Unavailable fields are null. Exit codes: 0 success, 1 runtime/API error, 2 usage error.",
+    "- Error JSON has an `error` object: `code` identifies the failure, `message` describes it, `hint` suggests recovery, `env` identifies the environment, `command` identifies the command, `status` is the HTTP status, and `request_id` correlates diagnostics. Unavailable fields are null. Exit codes: 0 success, 1 runtime/API error, 2 usage error.",
     "- Append `--help` to a command for its optional parameters. Required scalar body options below can also be supplied as fields in `--data`.",
     "- Two layers: top-level commands (`login`, `org`, `skill`, …) are workflows and session commands; every API operation is under `praxis api <domain> …`. `praxis api <METHOD> <path>` sends a raw request (the method is uppercase).",
     "",
@@ -26935,12 +26941,7 @@ Enter code: ${code.user_code}` });
   const location = await (ports.store ?? createTokenStore(config.env, path)).save(toStored(flow.tokens, ports.now()));
   if (location !== "keychain")
     ports.emit({ kind: "message", channel: "stderr", text: "stored in a file (no system keychain available)" });
-  const shadowedBy = ports.source === "api-key" ? "PRAXIS_API_KEY" : ports.source === "machine-token" ? "PRAXIS_API_TOKEN" : undefined;
   ports.emit({ kind: "message", text: `Logged in (${config.env}).` });
-  if (shadowedBy)
-    ports.emit({ kind: "message", channel: "stderr", text: `Note: ${shadowedBy} is set and takes precedence over this login. Unset it (unset ${shadowedBy}) to use the login.` });
-  if (ports.json)
-    ports.emit({ kind: "object", data: { env: config.env, ...shadowedBy ? { shadowed_by: shadowedBy } : {} } });
 }
 async function whoami(auth, env, org) {
   const credential = await auth.get(org);
@@ -27742,7 +27743,7 @@ ${usage ? `usage: ${JSON.stringify(usage)}
 
 // src/output/render.ts
 function errorJSON(result, ctx) {
-  return JSON.stringify({ error: { code: result.code, message: result.message, hint: result.hint ?? null, env: result.env, command: ctx.command ?? null, status: result.status ?? null, request_id: result.request_id ?? null, ...result.credential_source ? { credential_source: result.credential_source } : {} } }) + `
+  return JSON.stringify({ error: { code: result.code, message: result.message, hint: result.hint ?? null, env: result.env, command: ctx.command ?? null, status: result.status ?? null, request_id: result.request_id ?? null } }) + `
 `;
 }
 function render(result, ctx) {
@@ -27883,16 +27884,6 @@ var humanize = (code) => {
   const words = code.toLowerCase().split("_").filter(Boolean).join(" ");
   return words.charAt(0).toUpperCase() + words.slice(1);
 };
-function authHint(source) {
-  switch (source) {
-    case "api-key":
-      return "The API key from PRAXIS_API_KEY was rejected; check or replace it, or unset it to use `praxis login`.";
-    case "machine-token":
-      return "The machine token from PRAXIS_API_TOKEN was rejected (it may have expired); unset it to use `praxis login`, or refresh it.";
-    case "login":
-      return "Run `praxis login` or set PRAXIS_API_KEY.";
-  }
-}
 function errorInput(error, ctx) {
   const sdk = error instanceof PraxisError ? error : undefined;
   const raw = record(sdk?.raw), nested = record(raw.error);
@@ -27907,13 +27898,11 @@ function errorInput(error, ctx) {
   if (stripped)
     message = `${humanize(code)}${message ? `: ${message}` : ""}`;
   const status = sdk?.status, request_id = sdk?.requestId;
-  const authFailure = status === 401 || ["NOT_LOGGED_IN", "UNAUTHENTICATED", "TOKEN_REVOKED", "LOGIN_FAILED"].includes(code);
-  const source = ctx.credentialSource ?? "login";
   let hint = genericHint;
   if (error instanceof UsageError)
     hint = error.hint;
-  else if (authFailure)
-    hint = authHint(source);
+  else if (status === 401 || ["NOT_LOGGED_IN", "UNAUTHENTICATED", "TOKEN_REVOKED", "LOGIN_FAILED"].includes(code))
+    hint = "Run `praxis login` or set PRAXIS_API_KEY.";
   else if (status === 404)
     hint = ctx.listCommand ? `Check the id; list existing ones with \`${ctx.listCommand}\`` : "Check the id.";
   else if (status === 403)
@@ -27922,7 +27911,7 @@ function errorInput(error, ctx) {
     hint = "Rate limited; retry later.";
   else if (status !== undefined && status >= 500)
     hint = `Server error; retry later.${request_id ? ` Request id: ${request_id}.` : ""}`;
-  return { kind: "error", code, message, hint, env: ctx.env, ...authFailure ? { credential_source: source } : {}, ...status !== undefined ? { status } : {}, ...request_id ? { request_id } : {} };
+  return { kind: "error", code, message, hint, env: ctx.env, ...status !== undefined ? { status } : {}, ...request_id ? { request_id } : {} };
 }
 
 // src/output/progress.ts
@@ -27952,7 +27941,7 @@ function startProgress(ctx, write = (text) => writeOutput({ stderr: text })) {
 }
 
 // src/main.ts
-var version = "0.2.0-dev.a538fab";
+var version = "0.2.0-dev.ed5af3e";
 var commands = commandTree(operations);
 var manual = [...workflows.map((w) => w.words), [API_WORD]];
 function route(argv) {
@@ -28147,7 +28136,6 @@ Examples:
     const auth = credentials(config, ports.env, { fetch: wireFetch, now: ports.now, path, store, remember: (s) => {
       secrets.push(s);
     } });
-    ctx.credentialSource = auth.source;
     const org = flags.org;
     const confirm = (method) => confirmOperation(method, { yes: Boolean(flags.yes), noInput: Boolean(flags["no-input"]) || ctx.mode === "agent", stdinIsTTY: ports.stdinIsTTY, ask: async () => {
       stopProgress();
@@ -28214,8 +28202,7 @@ Examples:
       case "login":
         if (flags["no-input"] || quiet)
           throw new UsageError("login requires displaying a device code", "Remove --no-input / --quiet or set PRAXIS_API_KEY for scripts.");
-        ctx.credentialSource = "login";
-        await login(config, path, { ...ports, source: auth.source, json: ctx.mode === "json", store, fetch: wireFetch, emit, remember: (s) => secrets.push(s) });
+        await login(config, path, { ...ports, store, fetch: wireFetch, emit, remember: (s) => secrets.push(s) });
         break;
       case "logout":
         emit({ kind: "message", text: await store.delete() ? "Logged out." : "Not logged in." });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deepraxis/cli",
-  "version": "0.2.0-dev.a538fab",
+  "version": "0.2.0-dev.ed5af3e",
   "type": "module",
   "bin": {
     "praxis": "dist/praxis.js"