@kortyx/cli 0.14.0 → 0.15.1

package/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Changelog
 
+## [0.15.1](https://github.com/kortyx-io/kortyx/compare/cli-v0.15.0...cli-v0.15.1) (2026-10-08)
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @kortyx/agent bumped to 0.32.0
+
+## [0.15.0](https://github.com/kortyx-io/kortyx/compare/cli-v0.14.0...cli-v0.15.0) (2026-10-08)
+
+
+### Features
+
+* **telemetry:** preserve complete private error diagnostics ([#290](https://github.com/kortyx-io/kortyx/issues/290)) ([e1c5a88](https://github.com/kortyx-io/kortyx/commit/e1c5a88c494016fd84a1af40579412fcfde31271))
+
+
+### Dependencies
+
+* The following workspace dependencies were updated
+  * dependencies
+    * @kortyx/agent bumped to 0.31.1
+    * @kortyx/core bumped to 0.12.0
+    * @kortyx/telemetry-contracts bumped to 0.15.0
+
 ## [0.14.0](https://github.com/kortyx-io/kortyx/compare/cli-v0.13.0...cli-v0.14.0) (2026-10-07)
 
 

package/dist/index.js

@@ -23,7 +23,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/index.ts
-var import_promises5 = require("fs/promises");
+var import_promises6 = require("fs/promises");
 var import_node_module = __toESM(require("module"));
 var import_node_os3 = require("os");
 var import_node_path6 = require("path");
@@ -148,7 +148,7 @@ var StudioApiTransport = class {
     }
     if (!response.ok) {
       await response.body?.cancel();
-      const message = response.status === 401 ? "Invalid, expired, or revoked Studio read key." : response.status === 403 ? "The API key lacks studio:read or the operation's required permission (eval:run for execution)." : response.status === 404 ? "Entity not found in this connection's project. Check the URL and selected connection." : `Studio API returned HTTP ${response.status}.`;
+      const message = response.status === 401 ? "Invalid, expired, or revoked Studio read key." : response.status === 403 ? "The API key lacks studio:read or the operation's required permission (diagnostics:read for diagnostics; eval:run for execution)." : response.status === 404 ? "Entity not found in this connection's project. Check the URL and selected connection." : `Studio API returned HTTP ${response.status}.`;
       throw new StudioReadError(
         "api_error",
         message,
@@ -208,7 +208,7 @@ var StudioApiTransport = class {
 };
 var StudioReadClient = class extends StudioApiTransport {
   async get(path, schema, query = {}) {
-    if (!/^\/v1\/studio\/(?:context|catalogs|workflows|(?:runs|sessions|interrupts)(?:\/[^/?#]+)?)$/.test(
+    if (!/^\/v1\/studio\/(?:context|catalogs|workflows|(?:runs|sessions|interrupts)(?:\/[^/?#]+)?|diagnostics\/[a-f0-9-]{36})$/.test(
       path
     ) || /(?:^|\/)(?:\.|\.\.|%2e(?:%2e)?)(?:\/|$)/i.test(path)) {
       throw new StudioReadError(
@@ -236,6 +236,7 @@ x-api-env: &api-env
 x-bootstrap-keys: &bootstrap-keys
   KORTYX_TELEMETRY_API_KEY: \${KORTYX_TELEMETRY_API_KEY}
   KORTYX_STUDIO_API_KEY: \${KORTYX_STUDIO_API_KEY}
+  KORTYX_STUDIO_ENABLE_DIAGNOSTICS: \${KORTYX_STUDIO_ENABLE_DIAGNOSTICS:-0}
   KORTYX_STUDIO_ENABLE_EVALS: \${KORTYX_STUDIO_ENABLE_EVALS:-0}
   KORTYX_STUDIO_ENABLE_REVIEWS: \${KORTYX_STUDIO_ENABLE_REVIEWS:-0}
 
@@ -2572,6 +2573,8 @@ var resetStudio = async (home, confirm, runtime) => {
 };
 
 // src/studio/read-command.ts
+var import_node_crypto2 = require("crypto");
+var import_promises5 = require("fs/promises");
 var import_telemetry_contracts5 = require("@kortyx/telemetry-contracts");
 var import_commander4 = require("commander");
 
@@ -2935,6 +2938,80 @@ var registerStudioReadCommands = (studio, log, request = fetch) => {
       )
     };
   };
+  const diagnostics = studio.command("diagnostics").description("Inspect or download a retained private error diagnostic.");
+  for (const action of ["get", "download"]) {
+    common(
+      diagnostics.command(action).argument("<diagnostic-id>").option(
+        "--environment <name>",
+        "Diagnostic environment (or connection default)."
+      ).option(
+        "--output <path>",
+        "Write a diagnostic JSON file without overwriting an existing file."
+      )
+    ).action(async (id, options) => {
+      if (!/^[a-f0-9-]{36}$/i.test(id))
+        throw new StudioReadError(
+          "invalid_diagnostic_id",
+          "Expected a diagnostic UUID."
+        );
+      const { connection, client } = await clientFor(options);
+      const environment = options.environment ?? connection.environment;
+      if (!environment)
+        throw new StudioReadError(
+          "environment_required",
+          "Provide --environment for diagnostic retrieval."
+        );
+      const value = await client.get(
+        `/v1/studio/diagnostics/${id}`,
+        import_telemetry_contracts5.DiagnosticResponseSchema,
+        {
+          env: environment,
+          ...action === "download" ? { download: "1" } : {}
+        }
+      );
+      if (action === "get") {
+        const { content, ...summary2 } = value;
+        print(
+          {
+            ...summary2,
+            capture: {
+              status: content?.capture.status ?? value.manifest.captureStatus,
+              omissions: content?.capture.omissions.length ?? 0,
+              redactions: content?.capture.redactions.length ?? 0
+            },
+            ...options.includeContent ? { content } : {},
+            note: "Private diagnostic access requires diagnostics:read. Use download for the complete redacted artifact."
+          },
+          options
+        );
+        return;
+      }
+      if (value.state !== "available" || !value.content)
+        throw new StudioReadError(
+          "diagnostic_incomplete",
+          `Diagnostic is ${value.state}; received ${value.receivedParts} of ${value.manifest.partCount} parts.`
+        );
+      const bytes = JSON.stringify(value.content);
+      if ((0, import_node_crypto2.createHash)("sha256").update(bytes).digest("hex") !== value.contentChecksum || Buffer.byteLength(bytes) !== value.contentByteLength)
+        throw new StudioReadError(
+          "diagnostic_integrity_failed",
+          "Diagnostic download failed integrity verification."
+        );
+      if (options.output) {
+        await (0, import_promises5.writeFile)(options.output, bytes, { flag: "wx", mode: 384 });
+        print(
+          {
+            diagnosticId: id,
+            state: value.state,
+            file: options.output,
+            bytes: value.contentByteLength,
+            checksum: value.contentChecksum
+          },
+          options
+        );
+      } else log(bytes);
+    });
+  }
   const inspect = async (input, options, entity) => {
     const target = parseStudioTarget(input, entity);
     const { connection, client } = await clientFor(options, target.url);
@@ -3323,7 +3400,7 @@ var registerStudioReadCommands = (studio, log, request = fetch) => {
 };
 
 // src/studio/runtime.ts
-var import_node_crypto2 = require("crypto");
+var import_node_crypto3 = require("crypto");
 var import_node_net = require("net");
 var stringOutput = (value) => typeof value === "string" ? value : "";
 var isCommandNotFound = (error) => error instanceof Error && ("code" in error && error.code === "ENOENT" || error.message.includes("ENOENT"));
@@ -3362,7 +3439,7 @@ var defaultStudioRuntime = {
   run,
   portAvailable,
   now: () => (/* @__PURE__ */ new Date()).toISOString(),
-  random: (bytes) => (0, import_node_crypto2.randomBytes)(bytes).toString("base64url"),
+  random: (bytes) => (0, import_node_crypto3.randomBytes)(bytes).toString("base64url"),
   request: fetch,
   log: (message = "") => console.log(message),
   error: (message = "") => console.error(message)
@@ -3898,7 +3975,7 @@ var readPackageName = async (cwd) => {
   let current = cwd;
   for (; ; ) {
     try {
-      const raw = await (0, import_promises5.readFile)((0, import_node_path6.join)(current, "package.json"), "utf8");
+      const raw = await (0, import_promises6.readFile)((0, import_node_path6.join)(current, "package.json"), "utf8");
       const parsed = JSON.parse(raw);
       if (isRecord(parsed) && typeof parsed.name === "string") {
         return parsed.name;
@@ -3915,7 +3992,7 @@ var loadEnvFiles = async (cwd) => {
     const path = (0, import_node_path6.join)(cwd, filename);
     let raw;
     try {
-      raw = await (0, import_promises5.readFile)(path, "utf8");
+      raw = await (0, import_promises6.readFile)(path, "utf8");
     } catch {
       continue;
     }
@@ -3955,12 +4032,12 @@ var resolveOptions = async (options) => {
   };
 };
 var createFrameworkMarkerStubs = async () => {
-  const root = await (0, import_promises5.mkdtemp)((0, import_node_path6.join)((0, import_node_os3.tmpdir)(), "kortyx-cli-stubs-"));
+  const root = await (0, import_promises6.mkdtemp)((0, import_node_path6.join)((0, import_node_os3.tmpdir)(), "kortyx-cli-stubs-"));
   for (const moduleName of ["server-only", "client-only"]) {
     const directory = (0, import_node_path6.join)(root, moduleName);
-    await (0, import_promises5.mkdir)(directory, { recursive: true });
-    await (0, import_promises5.writeFile)((0, import_node_path6.join)(directory, "index.js"), "", "utf8");
-    await (0, import_promises5.writeFile)(
+    await (0, import_promises6.mkdir)(directory, { recursive: true });
+    await (0, import_promises6.writeFile)((0, import_node_path6.join)(directory, "index.js"), "", "utf8");
+    await (0, import_promises6.writeFile)(
       (0, import_node_path6.join)(directory, "package.json"),
       JSON.stringify({ name: moduleName, version: "0.0.0", main: "index.js" }),
       "utf8"
@@ -3975,7 +4052,7 @@ var createFrameworkMarkerStubs = async () => {
       if (previousNodePath === void 0) delete process.env.NODE_PATH;
       else process.env.NODE_PATH = previousNodePath;
       moduleWithPrivateInit._initPaths?.();
-      await (0, import_promises5.rm)(root, { recursive: true, force: true });
+      await (0, import_promises6.rm)(root, { recursive: true, force: true });
     }
   };
 };
@@ -4017,7 +4094,7 @@ var findNearestFile = async (startDirectory, filename) => {
   for (; ; ) {
     const candidate = (0, import_node_path6.join)(current, filename);
     try {
-      await (0, import_promises5.access)(candidate);
+      await (0, import_promises6.access)(candidate);
       return candidate;
     } catch {
       const parent = (0, import_node_path6.dirname)(current);
@@ -4029,7 +4106,7 @@ var findNearestFile = async (startDirectory, filename) => {
 var registerTsconfigPaths = async (tsconfigPath) => {
   const parsed = import_typescript2.default.parseConfigFileTextToJson(
     tsconfigPath,
-    await (0, import_promises5.readFile)(tsconfigPath, "utf8")
+    await (0, import_promises6.readFile)(tsconfigPath, "utf8")
   );
   if (parsed.error)
     throw new Error(`Invalid TypeScript configuration: ${tsconfigPath}`);