@outputai/cli 0.1.4 → 0.1.5

package/dist/assets/config/costs.yml

@@ -0,0 +1,309 @@
+# LLM Token Pricing Configuration
+# Prices are per million tokens (as of Feb 2026)
+# Update these values as pricing changes
+
+models:
+  # =============================================================================
+  # Anthropic
+  # =============================================================================
+  claude-haiku-4-5:
+    provider: anthropic
+    input: 1.00
+    output: 5.00
+    cached_input: 0.10
+
+  claude-sonnet-4:
+    provider: anthropic
+    input: 3.00
+    output: 15.00
+    cached_input: 0.30
+
+  claude-opus-4:
+    provider: anthropic
+    input: 15.00
+    output: 75.00
+    cached_input: 1.50
+
+  claude-opus-4-6:
+    provider: anthropic
+    input: 5.00
+    output: 25.00
+    cached_input: 0.50
+
+  claude-opus-4-5:
+    provider: anthropic
+    input: 5.00
+    output: 25.00
+    cached_input: 0.50
+
+  claude-sonnet-4-5:
+    provider: anthropic
+    input: 3.00
+    output: 15.00
+    cached_input: 0.30
+
+  # Legacy models
+  claude-3-5-sonnet-20241022:
+    provider: anthropic
+    input: 3.00
+    output: 15.00
+    cached_input: 0.30
+
+  claude-3-5-haiku-20241022:
+    provider: anthropic
+    input: 0.80
+    output: 4.00
+    cached_input: 0.08
+
+  # =============================================================================
+  # OpenAI
+  # =============================================================================
+
+  # GPT-5 series
+  gpt-5.2:
+    provider: openai
+    input: 1.75
+    output: 14.00
+    cached_input: 0.175
+
+  gpt-5.2-pro:
+    provider: openai
+    input: 21.00
+    output: 168.00
+
+  gpt-5-mini:
+    provider: openai
+    input: 0.25
+    output: 2.00
+    cached_input: 0.025
+
+  gpt-5-nano:
+    provider: openai
+    input: 0.05
+    output: 0.40
+    cached_input: 0.005
+
+  # GPT-4.1 series
+  gpt-4.1:
+    provider: openai
+    input: 2.00
+    output: 8.00
+    cached_input: 0.50
+
+  gpt-4.1-mini:
+    provider: openai
+    input: 0.40
+    output: 1.60
+    cached_input: 0.10
+
+  gpt-4.1-nano:
+    provider: openai
+    input: 0.10
+    output: 0.40
+    cached_input: 0.025
+
+  # GPT-4o series (legacy)
+  gpt-4o:
+    provider: openai
+    input: 2.50
+    output: 10.00
+    cached_input: 1.25
+
+  gpt-4o-mini:
+    provider: openai
+    input: 0.15
+    output: 0.60
+    cached_input: 0.075
+
+  gpt-4-turbo:
+    provider: openai
+    input: 10.00
+    output: 30.00
+
+  gpt-4:
+    provider: openai
+    input: 30.00
+    output: 60.00
+
+  gpt-3.5-turbo:
+    provider: openai
+    input: 0.50
+    output: 1.50
+
+  # Reasoning models (o-series)
+  o1:
+    provider: openai
+    input: 15.00
+    output: 60.00
+    cached_input: 7.50
+    reasoning: 60.00
+
+  o1-mini:
+    provider: openai
+    input: 1.10
+    output: 4.40
+    cached_input: 0.55
+    reasoning: 4.40
+
+  o3-mini:
+    provider: openai
+    input: 1.10
+    output: 4.40
+    cached_input: 0.55
+    reasoning: 4.40
+
+  o4-mini:
+    provider: openai
+    input: 1.10
+    output: 4.40
+    cached_input: 0.275
+
+  # =============================================================================
+  # Google
+  # =============================================================================
+  gemini-1.5-pro:
+    provider: google
+    input: 1.25
+    output: 5.00
+    cached_input: 0.3125
+
+  gemini-1.5-flash:
+    provider: google
+    input: 0.075
+    output: 0.30
+    cached_input: 0.01875
+
+  gemini-2.0-flash:
+    provider: google
+    input: 0.10
+    output: 0.40
+
+  # =============================================================================
+  # Perplexity (usage-based, approximate)
+  # =============================================================================
+  llama-3.1-sonar-small-128k-online:
+    provider: perplexity
+    input: 0.20
+    output: 0.20
+
+  llama-3.1-sonar-large-128k-online:
+    provider: perplexity
+    input: 1.00
+    output: 1.00
+
+  llama-3.1-sonar-huge-128k-online:
+    provider: perplexity
+    input: 5.00
+    output: 5.00
+
+# =============================================================================
+# API Services - Extensible pricing for non-LLM APIs
+# =============================================================================
+#
+# Pricing types:
+#   - token: Price per million tokens (usage extracted from response)
+#   - unit: Price per API unit (usage extracted or calculated from response)
+#   - request: Fixed price per request
+#
+# To add a new provider:
+#   1. Add entry with url_pattern to match HTTP calls
+#   2. Set type and pricing
+#   3. Optional: usage_path to extract usage from response body
+#
+services:
+  # ---------------------------------------------------------------------------
+  # Jina Reader API - Token-based
+  # Pricing: https://jina.ai/reader/
+  # ---------------------------------------------------------------------------
+  jina:
+    type: token
+    url_pattern: "r.jina.ai"
+    usage_path: "body.data.usage.tokens"
+    per_million: 0.045                      # $0.045 per 1M tokens
+
+  # ---------------------------------------------------------------------------
+  # Semrush API - Unit-based (converted to dollars)
+  # Pricing: https://developer.semrush.com/api/basics/api-units-balance/
+  # ---------------------------------------------------------------------------
+  semrush:
+    type: unit
+    url_pattern: "api.semrush.com"
+    price_per_unit: 0.00025                 # ~$0.25 per 1000 units
+    endpoints:
+      backlinks_overview:
+        pattern: "type=backlinks_overview"
+        units_per_request: 10
+      domain_organic:
+        pattern: "type=domain_organic"
+        units_per_line: 10
+      phrase_related:
+        pattern: "type=phrase_related"
+        units_per_line: 40
+      domain_ranks:
+        pattern: "type=domain_ranks"
+        units_per_request: 10
+
+  # ---------------------------------------------------------------------------
+  # Exa Research API - Cost from response
+  # Pricing: https://exa.ai/pricing
+  #
+  # Exa's pricing structure (per 1k tasks):
+  #   - Agent search operations: $5 (all models)
+  #   - Agent page reads: $5 (exa-research/fast) or $10 (exa-research-pro) per 1k pages
+  #   - Reasoning tokens: $5 per 1M tokens
+  #
+  # The API returns actual cost in response.body.costDollars.total
+  # which accounts for searches, page reads, and reasoning tokens.
+  # ---------------------------------------------------------------------------
+  exa:
+    type: response_cost
+    url_pattern: "api.exa.ai"
+    cost_path: "output.body.costDollars.total"
+    # Exa uses async flow: POST creates task, GET returns results with costDollars
+    # Only count GET responses that have costDollars.total - no fallback needed
+    # For traces without verbose HTTP bodies, Exa costs will show as $0
+
+  # ---------------------------------------------------------------------------
+  # Tavily API - Request-based
+  # Pricing: https://tavily.com/pricing
+  # ---------------------------------------------------------------------------
+  tavily:
+    type: request
+    url_pattern: "api.tavily.com"
+    endpoints:
+      search:
+        pattern: "/search"
+        price: 0.01
+      extract:
+        pattern: "/extract"
+        price_per_item: 0.005
+        items_path: "body.urls"
+
+  # ---------------------------------------------------------------------------
+  # DataForSEO API - Request-based
+  # Pricing: https://dataforseo.com/pricing
+  # ---------------------------------------------------------------------------
+  dataforseo:
+    type: request
+    url_pattern: "api.dataforseo.com"
+    endpoints:
+      whois:
+        pattern: "/whois"
+        price: 0.015
+      bulk_traffic:
+        pattern: "/bulk_traffic"
+        price_per_item: 0.075
+        items_path: "body[0].targets"
+
+  # ---------------------------------------------------------------------------
+  # Perplexity API (direct HTTP calls, not via LLM SDK)
+  # Pricing: https://docs.perplexity.ai/guides/pricing
+  # ---------------------------------------------------------------------------
+  perplexity_api:
+    type: token
+    url_pattern: "api.perplexity.ai"
+    usage_path: "body.usage"
+    input_field: "prompt_tokens"
+    output_field: "completion_tokens"
+    input_per_million: 1.00
+    output_per_million: 1.00

package/dist/assets/docker/docker-compose-dev.yml

@@ -0,0 +1,146 @@
+name: ${DOCKER_SERVICE_NAME:-output-sdk}
+services:
+  redis:
+    image: redis:8-alpine
+    networks:
+      - main
+    ports:
+      - '6379:6379'
+    volumes:
+      - redis:/data
+    healthcheck:
+      test: ['CMD', 'redis-cli', 'ping']
+      interval: 2s
+      timeout: 2s
+      retries: 5
+      start_period: 3s
+
+  postgresql:
+    environment:
+      POSTGRES_PASSWORD: temporal
+      POSTGRES_USER: temporal
+    image: postgres:17.5
+    networks:
+      - main
+    expose:
+      - 5432
+    volumes:
+      - postgres:/var/lib/postgresql/data
+    healthcheck:
+      test: ['CMD-SHELL', 'pg_isready -U temporal -d temporal']
+      interval: 2s
+      timeout: 2s
+      retries: 5
+      start_period: 3s
+
+  temporal:
+    depends_on:
+      postgresql:
+        condition: service_healthy
+      redis:
+        condition: service_healthy
+    environment:
+      - DB=postgres12
+      - DB_PORT=5432
+      - POSTGRES_USER=temporal
+      - POSTGRES_PWD=temporal
+      - POSTGRES_SEEDS=postgresql
+    image: temporalio/auto-setup:latest
+    networks:
+      - main
+    ports:
+      - '7233:7233'
+    healthcheck:
+      test:
+        [
+          'CMD',
+          'sh',
+          '-c',
+          'tctl --address temporal:7233 cluster health 2>&1 | grep -q "temporal.api.workflowservice.v1.WorkflowService: SERVING"'
+        ]
+      interval: 3s
+      timeout: 5s
+      retries: 20
+      start_period: 10s
+
+  temporal-ui:
+    depends_on:
+      - temporal
+    environment:
+      - TEMPORAL_ADDRESS=temporal:7233
+      - TEMPORAL_CORS_ORIGINS=http://localhost:3000
+    image: temporalio/ui:latest
+    networks:
+      - main
+    ports:
+      - '8080:8080'
+
+  api:
+    depends_on:
+      temporal:
+        condition: service_healthy
+      worker:
+        condition: service_healthy
+    image: outputai/api:${OUTPUT_API_VERSION:-0.1.5}
+    init: true
+    networks:
+      - main
+    env_file:
+      - path: ./${OUTPUT_WORKFLOWS_DIR:-.}/.env
+        required: false
+    environment:
+      - NODE_ENV=development
+      - OUTPUT_API_PORT=3001
+      - OUTPUT_CATALOG_ID=${OUTPUT_CATALOG_ID:-main}
+      - OUTPUT_AWS_REGION=${AWS_REGION:-us-west-1}
+      - OUTPUT_AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID:-}
+      - OUTPUT_AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY:-}
+      - TEMPORAL_ADDRESS=temporal:7233
+    ports:
+      - '3001:3001'
+
+  worker:
+    depends_on:
+      temporal:
+        condition: service_healthy
+    image: node:24.13.0-slim
+    healthcheck:
+      test: [ 'CMD', 'npx', '--yes', 'output-healthcheck' ]
+      interval: 3s
+      timeout: 10s
+      retries: 20
+      start_period: 30s
+    init: true
+    networks:
+      - main
+    env_file:
+      - path: ./${OUTPUT_WORKFLOWS_DIR:-.}/.env
+        required: false
+    environment:
+      - NODE_ENV=development
+      - OUTPUT_CATALOG_ID=${OUTPUT_CATALOG_ID:-main}
+      - OUTPUT_REDIS_URL=redis://redis:6379
+      - OUTPUT_TRACE_LOCAL_ON=${OUTPUT_TRACE_LOCAL_ON:-true}
+      - OUTPUT_TRACE_HOST_PATH=${PWD}/logs
+      - OUTPUT_TRACE_HTTP_VERBOSE=${OUTPUT_TRACE_HTTP_VERBOSE:-true}
+      - TEMPORAL_ADDRESS=temporal:7233
+      - NODE_OPTIONS=${NODE_OPTIONS:---max-old-space-size=4096}
+    command: >
+      sh -c "
+        npm run output:worker:install &&
+        echo 'Installed dependencies' &&
+        npx nodemon --watch src --watch package.json --ext ts,js,json,prompt --ignore 'dist/**' --ignore '**/*.test.ts' --ignore '**/*.spec.ts' --exec 'npm run output:worker:install && npm run output:worker:build && npm run output:worker:start'
+      "
+    working_dir: /app/${OUTPUT_WORKFLOWS_DIR:-.}
+    volumes:
+      - ./:/app
+      - worker_node_modules:/app/${OUTPUT_WORKFLOWS_DIR:-.}/node_modules
+
+volumes:
+  postgres:
+  redis:
+  worker_node_modules:
+
+networks:
+  main:
+    driver: bridge

package/dist/commands/credentials/edit.d.ts

@@ -0,0 +1,10 @@
+import { Command } from '@oclif/core';
+export default class CredentialsEdit extends Command {
+    static description: string;
+    static examples: string[];
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workflow: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/credentials/edit.js

@@ -0,0 +1,67 @@
+import { Command, Flags } from '@oclif/core';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { load as parseYaml } from 'js-yaml';
+import { decryptCredentials, writeEncrypted, credentialsExist, resolveCredentialsPath } from '#services/credentials_service.js';
+export default class CredentialsEdit extends Command {
+    static description = 'Edit encrypted credentials in your $EDITOR';
+    static examples = [
+        '<%= config.bin %> <%= command.id %>',
+        '<%= config.bin %> <%= command.id %> --environment production',
+        '<%= config.bin %> <%= command.id %> --workflow my_workflow'
+    ];
+    static flags = {
+        environment: Flags.string({
+            char: 'e',
+            description: 'Target environment (e.g. production, development)'
+        }),
+        workflow: Flags.string({
+            char: 'w',
+            description: 'Target a specific workflow directory'
+        })
+    };
+    async run() {
+        const { flags } = await this.parse(CredentialsEdit);
+        const environment = flags.environment;
+        const workflow = flags.workflow;
+        if (environment && workflow) {
+            this.error('Cannot specify both --environment and --workflow.');
+        }
+        if (!credentialsExist(environment, workflow)) {
+            this.error(`No credentials file found at ${resolveCredentialsPath(environment, workflow)}. Run "output credentials init" first.`);
+        }
+        const editorEnv = process.env.EDITOR || process.env.VISUAL || 'vi';
+        const [editorCmd, ...editorArgs] = editorEnv.split(/\s+/);
+        const plaintext = decryptCredentials(environment, workflow);
+        const tmpFile = path.join(os.tmpdir(), `output-credentials-${Date.now()}.yml`);
+        try {
+            fs.writeFileSync(tmpFile, plaintext, { mode: 0o600 });
+            const result = spawnSync(editorCmd, [...editorArgs, tmpFile], { stdio: 'inherit' });
+            if (result.error) {
+                this.error(`Failed to launch editor: ${result.error.message}`);
+            }
+            if (result.status !== 0) {
+                this.error(`Editor exited with non-zero status: ${result.status}`);
+            }
+            const edited = fs.readFileSync(tmpFile, 'utf8');
+            // Validate YAML before saving
+            parseYaml(edited);
+            writeEncrypted(environment, edited, workflow);
+            this.log('Credentials saved successfully.');
+        }
+        finally {
+            try {
+                if (fs.existsSync(tmpFile)) {
+                    const size = fs.statSync(tmpFile).size;
+                    fs.writeFileSync(tmpFile, '\0'.repeat(size));
+                    fs.unlinkSync(tmpFile);
+                }
+            }
+            catch {
+                // best-effort cleanup
+            }
+        }
+    }
+}

package/dist/commands/credentials/edit.spec.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/commands/credentials/edit.spec.js

@@ -0,0 +1,73 @@
+/* eslint-disable @typescript-eslint/no-explicit-any */
+import { describe, it, expect, beforeEach, afterEach, vi } from 'vitest';
+import * as credentialsService from '#services/credentials_service.js';
+import CredentialsEdit from './edit.js';
+vi.mock('#services/credentials_service.js');
+vi.mock('js-yaml', () => ({
+    load: vi.fn()
+}));
+vi.mock('node:fs', () => ({
+    default: {
+        writeFileSync: vi.fn(),
+        readFileSync: vi.fn(() => 'edited: content\n'),
+        existsSync: vi.fn(() => true),
+        statSync: vi.fn(() => ({ size: 16 })),
+        unlinkSync: vi.fn()
+    }
+}));
+vi.mock('node:child_process', () => ({
+    spawnSync: vi.fn(() => ({ status: 0 }))
+}));
+describe('credentials edit command', () => {
+    beforeEach(() => {
+        vi.clearAllMocks();
+        vi.mocked(credentialsService.credentialsExist).mockReturnValue(true);
+        vi.mocked(credentialsService.decryptCredentials).mockReturnValue('anthropic:\n  api_key: sk-test\n');
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    const createTestCommand = (flags = {}) => {
+        const cmd = new CredentialsEdit([], {});
+        cmd.log = vi.fn();
+        cmd.error = vi.fn((msg) => {
+            throw new Error(msg);
+        });
+        Object.defineProperty(cmd, 'parse', {
+            value: vi.fn().mockResolvedValue({
+                args: {},
+                flags: { environment: undefined, workflow: undefined, ...flags }
+            }),
+            configurable: true
+        });
+        return cmd;
+    };
+    describe('command structure', () => {
+        it('should have correct description', () => {
+            expect(CredentialsEdit.description).toContain('Edit');
+        });
+        it('should have environment and workflow flags', () => {
+            expect(CredentialsEdit.flags.environment).toBeDefined();
+            expect(CredentialsEdit.flags.workflow).toBeDefined();
+        });
+    });
+    describe('command execution', () => {
+        it('should decrypt, spawn editor, and re-encrypt', async () => {
+            const cmd = createTestCommand();
+            await cmd.run();
+            expect(credentialsService.decryptCredentials).toHaveBeenCalledWith(undefined, undefined);
+            expect(credentialsService.writeEncrypted).toHaveBeenCalled();
+            expect(cmd.log).toHaveBeenCalledWith('Credentials saved successfully.');
+        });
+        it('should error when both environment and workflow are specified', async () => {
+            const cmd = createTestCommand({ environment: 'production', workflow: 'my_workflow' });
+            await expect(cmd.run()).rejects.toThrow('Cannot specify both');
+        });
+        it('should error when credentials file does not exist', async () => {
+            vi.mocked(credentialsService.credentialsExist).mockReturnValue(false);
+            vi.mocked(credentialsService.resolveCredentialsPath).mockReturnValue('/project/config/credentials.yml.enc');
+            const cmd = createTestCommand();
+            await expect(cmd.run()).rejects.toThrow('No credentials file found');
+        });
+    });
+});

package/dist/commands/credentials/get.d.ts

@@ -0,0 +1,13 @@
+import { Command } from '@oclif/core';
+export default class CredentialsGet extends Command {
+    static description: string;
+    static examples: string[];
+    static args: {
+        path: import("@oclif/core/interfaces").Arg<string, Record<string, unknown>>;
+    };
+    static flags: {
+        environment: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+        workflow: import("@oclif/core/interfaces").OptionFlag<string | undefined, import("@oclif/core/interfaces").CustomOptions>;
+    };
+    run(): Promise<void>;
+}

package/dist/commands/credentials/get.js

@@ -0,0 +1,46 @@
+import { Args, Command, Flags } from '@oclif/core';
+import { load as parseYaml } from 'js-yaml';
+import { getNestedValue } from '@outputai/credentials';
+import { decryptCredentials, credentialsExist, resolveCredentialsPath } from '#services/credentials_service.js';
+export default class CredentialsGet extends Command {
+    static description = 'Get a specific credential value by dot-notation path';
+    static examples = [
+        '<%= config.bin %> <%= command.id %> anthropic.api_key',
+        '<%= config.bin %> <%= command.id %> aws.region --environment production',
+        '<%= config.bin %> <%= command.id %> stripe.key --workflow my_workflow'
+    ];
+    static args = {
+        path: Args.string({
+            description: 'Dot-notation path to the credential (e.g. anthropic.api_key)',
+            required: true
+        })
+    };
+    static flags = {
+        environment: Flags.string({
+            char: 'e',
+            description: 'Target environment (e.g. production, development)'
+        }),
+        workflow: Flags.string({
+            char: 'w',
+            description: 'Target a specific workflow directory'
+        })
+    };
+    async run() {
+        const { args, flags } = await this.parse(CredentialsGet);
+        const environment = flags.environment;
+        const workflow = flags.workflow;
+        if (environment && workflow) {
+            this.error('Cannot specify both --environment and --workflow.');
+        }
+        if (!credentialsExist(environment, workflow)) {
+            this.error(`No credentials file found at ${resolveCredentialsPath(environment, workflow)}. Run "output credentials init" first.`);
+        }
+        const plaintext = decryptCredentials(environment, workflow);
+        const data = parseYaml(plaintext);
+        const value = getNestedValue(data, args.path);
+        if (value === undefined || value === null) {
+            this.error(`Credential not found: ${args.path}`);
+        }
+        this.log(typeof value === 'object' ? JSON.stringify(value, null, 2) : String(value));
+    }
+}

package/dist/commands/credentials/get.spec.d.ts

@@ -0,0 +1 @@
+export {};