@plune-ai/cli 0.4.0 → 0.5.0

package/dist/index.cjs

@@ -30,13 +30,20 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var src_exports = {};
 __export(src_exports, {
+  NotLoggedInError: () => NotLoggedInError,
   RUN_RESULT_SCHEMA_VERSION: () => RUN_RESULT_SCHEMA_VERSION,
+  SyncFileError: () => SyncFileError,
+  SyncHttpError: () => SyncHttpError,
+  SyncNetworkError: () => SyncNetworkError,
+  TokenRejectedError: () => TokenRejectedError,
   assertionConfigSchema: () => assertionConfigSchema,
   assertionResultRecordSchema: () => assertionResultRecordSchema,
   binaryVerdictSchema: () => binaryVerdictSchema,
   parseRunResult: () => parseRunResult,
+  reportSyncFailure: () => reportSyncFailure,
   run: () => handleRun,
-  runResultSchema: () => runResultSchema
+  runResultSchema: () => runResultSchema,
+  sync: () => handleSync
 });
 module.exports = __toCommonJS(src_exports);
 
@@ -357,7 +364,7 @@ function normalizeProviderError(err, secret, envVar) {
 }
 
 // src/providers/retry.ts
-var defaultSleep = (ms) => new Promise((resolve4) => setTimeout(resolve4, ms));
+var defaultSleep = (ms) => new Promise((resolve5) => setTimeout(resolve5, ms));
 function retryAfterMs(err) {
   if (typeof err !== "object" || err === null || !("headers" in err)) return void 0;
   const raw = readHeader(err.headers, "retry-after");
@@ -1503,6 +1510,10 @@ async function handleRun(options, depsFactory) {
   }
 }
 
+// src/cli/commands/sync.ts
+var fs6 = __toESM(require("fs"), 1);
+var path5 = __toESM(require("path"), 1);
+
 // src/types/run-result-schema.ts
 var import_zod2 = require("zod");
 var RUN_RESULT_SCHEMA_VERSION = 1;
@@ -1561,13 +1572,148 @@ var runResultSchema = import_zod2.z.object({
 function parseRunResult(value) {
   return runResultSchema.parse(value);
 }
+
+// src/cli/credentials.ts
+var import_node_fs = require("fs");
+var import_node_os = require("os");
+var import_node_path = require("path");
+function credentialsFile() {
+  const base = process.env["XDG_CONFIG_HOME"]?.trim() || (0, import_node_path.join)((0, import_node_os.homedir)(), ".config");
+  return (0, import_node_path.join)(base, "plune", "credentials.json");
+}
+function loadToken() {
+  try {
+    const parsed = JSON.parse((0, import_node_fs.readFileSync)(credentialsFile(), "utf-8"));
+    return typeof parsed.token === "string" && parsed.token.length > 0 ? parsed.token : null;
+  } catch {
+    return null;
+  }
+}
+
+// src/cli/commands/sync.ts
+var DEFAULT_API_URL = "https://beta-api.plune.ai";
+var NotLoggedInError = class extends Error {
+  constructor() {
+    super('Not logged in. Run "plune login" first to save your API token.');
+    this.name = "NotLoggedInError";
+  }
+};
+var TokenRejectedError = class extends Error {
+  constructor() {
+    super(
+      'Your API token was rejected (revoked or invalid). Run "plune login" with a fresh token.'
+    );
+    this.name = "TokenRejectedError";
+  }
+};
+var SyncFileError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SyncFileError";
+  }
+};
+var SyncNetworkError = class extends Error {
+  constructor(apiUrl) {
+    super(
+      `Could not reach the Plune API at ${apiUrl}. Check your connection (or PLUNE_API_URL) and try again.`
+    );
+    this.name = "SyncNetworkError";
+  }
+};
+var SyncHttpError = class extends Error {
+  constructor(status, detail) {
+    super(`Sync failed \u2014 the server returned HTTP ${status}${detail ? ` (${detail})` : ""}.`);
+    this.status = status;
+    this.name = "SyncHttpError";
+  }
+  status;
+};
+function resolveApiUrl(explicit) {
+  const raw = explicit ?? process.env["PLUNE_API_URL"] ?? DEFAULT_API_URL;
+  return raw.replace(/\/+$/, "");
+}
+function readRun(cwd, file) {
+  const target = file !== void 0 ? path5.resolve(cwd, file) : path5.join(cwd, ".plune", "last-run.json");
+  let raw;
+  try {
+    raw = fs6.readFileSync(target, "utf8");
+  } catch {
+    throw new SyncFileError(
+      file !== void 0 ? `Run file not found: ${target}` : 'No run to sync. Run "plune run" first (or pass --file <path>).'
+    );
+  }
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    throw new SyncFileError(`Run file is not valid JSON: ${target}`);
+  }
+  try {
+    return parseRunResult(json);
+  } catch {
+    throw new SyncFileError(`Run file does not match the RunResult schema: ${target}`);
+  }
+}
+async function safeErrorDetail(res) {
+  try {
+    const body = await res.json();
+    return typeof body.error === "string" ? body.error : "";
+  } catch {
+    return "";
+  }
+}
+async function handleSync(deps = {}) {
+  const cwd = deps.cwd ?? process.cwd();
+  const apiUrl = resolveApiUrl(deps.apiUrl);
+  const token = (deps.loadToken ?? loadToken)();
+  if (token === null) throw new NotLoggedInError();
+  const run = readRun(cwd, deps.file);
+  const doFetch = deps.fetchImpl ?? fetch;
+  const endpoint = `${apiUrl}/v1/runs`;
+  let res;
+  try {
+    res = await doFetch(endpoint, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
+      body: JSON.stringify(run)
+    });
+  } catch {
+    throw new SyncNetworkError(apiUrl);
+  }
+  if (!res.ok) {
+    const detail = await safeErrorDetail(res);
+    if (res.status === 401) throw new TokenRejectedError();
+    throw new SyncHttpError(res.status, detail);
+  }
+  const body = await res.json().catch(() => ({}));
+  const id = typeof body.id === "string" ? body.id : "";
+  return { id, url: `${endpoint}/${id}` };
+}
+function reportSyncFailure(err, write) {
+  if (err instanceof NotLoggedInError || err instanceof TokenRejectedError || err instanceof SyncFileError) {
+    write(err.message + "\n");
+    return 2;
+  }
+  if (err instanceof SyncNetworkError || err instanceof SyncHttpError) {
+    write(err.message + "\n");
+    return 1;
+  }
+  return null;
+}
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  NotLoggedInError,
   RUN_RESULT_SCHEMA_VERSION,
+  SyncFileError,
+  SyncHttpError,
+  SyncNetworkError,
+  TokenRejectedError,
   assertionConfigSchema,
   assertionResultRecordSchema,
   binaryVerdictSchema,
   parseRunResult,
+  reportSyncFailure,
   run,
-  runResultSchema
+  runResultSchema,
+  sync
 });

package/dist/index.d.cts

@@ -214,6 +214,57 @@ interface RunOptions {
 }
 declare function handleRun(options: RunOptions, depsFactory?: (config: Config, baseDir: string) => RunDeps): Promise<RunResult>;
 
+/** No saved token — the user must `plune login` before syncing. (exit 2) */
+declare class NotLoggedInError extends Error {
+    constructor();
+}
+/** The token was present but the server rejected it (401 — revoked or invalid). (exit 2) */
+declare class TokenRejectedError extends Error {
+    constructor();
+}
+/** No run to sync, or the run file is unreadable / not a valid RunResult. (exit 2) */
+declare class SyncFileError extends Error {
+    constructor(message: string);
+}
+/** The API was unreachable (DNS / TLS / offline). Message names the host, never the token. (exit 1) */
+declare class SyncNetworkError extends Error {
+    constructor(apiUrl: string);
+}
+/** The server answered with a non-2xx that is not a 401 (e.g. 400 invalid body, 5xx). (exit 1) */
+declare class SyncHttpError extends Error {
+    readonly status: number;
+    constructor(status: number, detail: string);
+}
+interface SyncDeps {
+    /** Base dir the default run file is read from (config dir or cwd). Defaults to `process.cwd()`. */
+    cwd?: string;
+    /** Explicit run JSON to sync instead of `<cwd>/.plune/last-run.json`. */
+    file?: string;
+    /** Override the API base URL. Falls back to `PLUNE_API_URL`, then the beta default. */
+    apiUrl?: string;
+    /** Token source (injected in tests). Defaults to the real credentials store. */
+    loadToken?: () => string | null;
+    /** HTTP transport (injected in tests — e.g. a real Hono app's `request`). Defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+}
+interface SyncResult {
+    /** Server-assigned run id. */
+    id: string;
+    /** The `GET /v1/runs/:id` URL where the uploaded run can be read back. */
+    url: string;
+}
+/**
+ * Upload the latest (or `--file`) local run to `POST {apiUrl}/v1/runs` with the stored Bearer token.
+ * Returns the server-assigned id + the read-back URL. Throws a typed error (see the classes above) on
+ * every failure path so the CLI can exit cleanly without ever leaking the token or a stack trace.
+ */
+declare function handleSync(deps?: SyncDeps): Promise<SyncResult>;
+/**
+ * Map a `handleSync` rejection to a friendly stderr line + the exit code to use, or `null` if the error
+ * is not a known sync failure (caller then treats it as unexpected).
+ */
+declare function reportSyncFailure(err: unknown, write: (s: string) => void): number | null;
+
 declare const assertionConfigSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"exact-match">;
     value: z.ZodString;
@@ -748,4 +799,4 @@ type BinaryVerdict = z.infer<typeof binaryVerdictSchema>;
 /** Parse + validate an unknown value as a RunResult. Throws ZodError on failure. */
 declare function parseRunResult(value: unknown): ParsedRunResult;
 
-export { type AssertionResultRecord, type BinaryVerdict, type Config, type EvalResult, type ParsedRunResult, RUN_RESULT_SCHEMA_VERSION, type RowResult, type RunError, type RunOptions, type RunResult, type Summary, type Usage, assertionConfigSchema, assertionResultRecordSchema, binaryVerdictSchema, parseRunResult, handleRun as run, runResultSchema };
+export { type AssertionResultRecord, type BinaryVerdict, type Config, type EvalResult, NotLoggedInError, type ParsedRunResult, RUN_RESULT_SCHEMA_VERSION, type RowResult, type RunError, type RunOptions, type RunResult, type Summary, type SyncDeps, SyncFileError, SyncHttpError, SyncNetworkError, type SyncResult, TokenRejectedError, type Usage, assertionConfigSchema, assertionResultRecordSchema, binaryVerdictSchema, parseRunResult, reportSyncFailure, handleRun as run, runResultSchema, handleSync as sync };

package/dist/index.d.ts

@@ -214,6 +214,57 @@ interface RunOptions {
 }
 declare function handleRun(options: RunOptions, depsFactory?: (config: Config, baseDir: string) => RunDeps): Promise<RunResult>;
 
+/** No saved token — the user must `plune login` before syncing. (exit 2) */
+declare class NotLoggedInError extends Error {
+    constructor();
+}
+/** The token was present but the server rejected it (401 — revoked or invalid). (exit 2) */
+declare class TokenRejectedError extends Error {
+    constructor();
+}
+/** No run to sync, or the run file is unreadable / not a valid RunResult. (exit 2) */
+declare class SyncFileError extends Error {
+    constructor(message: string);
+}
+/** The API was unreachable (DNS / TLS / offline). Message names the host, never the token. (exit 1) */
+declare class SyncNetworkError extends Error {
+    constructor(apiUrl: string);
+}
+/** The server answered with a non-2xx that is not a 401 (e.g. 400 invalid body, 5xx). (exit 1) */
+declare class SyncHttpError extends Error {
+    readonly status: number;
+    constructor(status: number, detail: string);
+}
+interface SyncDeps {
+    /** Base dir the default run file is read from (config dir or cwd). Defaults to `process.cwd()`. */
+    cwd?: string;
+    /** Explicit run JSON to sync instead of `<cwd>/.plune/last-run.json`. */
+    file?: string;
+    /** Override the API base URL. Falls back to `PLUNE_API_URL`, then the beta default. */
+    apiUrl?: string;
+    /** Token source (injected in tests). Defaults to the real credentials store. */
+    loadToken?: () => string | null;
+    /** HTTP transport (injected in tests — e.g. a real Hono app's `request`). Defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+}
+interface SyncResult {
+    /** Server-assigned run id. */
+    id: string;
+    /** The `GET /v1/runs/:id` URL where the uploaded run can be read back. */
+    url: string;
+}
+/**
+ * Upload the latest (or `--file`) local run to `POST {apiUrl}/v1/runs` with the stored Bearer token.
+ * Returns the server-assigned id + the read-back URL. Throws a typed error (see the classes above) on
+ * every failure path so the CLI can exit cleanly without ever leaking the token or a stack trace.
+ */
+declare function handleSync(deps?: SyncDeps): Promise<SyncResult>;
+/**
+ * Map a `handleSync` rejection to a friendly stderr line + the exit code to use, or `null` if the error
+ * is not a known sync failure (caller then treats it as unexpected).
+ */
+declare function reportSyncFailure(err: unknown, write: (s: string) => void): number | null;
+
 declare const assertionConfigSchema: z.ZodDiscriminatedUnion<"type", [z.ZodObject<{
     type: z.ZodLiteral<"exact-match">;
     value: z.ZodString;
@@ -748,4 +799,4 @@ type BinaryVerdict = z.infer<typeof binaryVerdictSchema>;
 /** Parse + validate an unknown value as a RunResult. Throws ZodError on failure. */
 declare function parseRunResult(value: unknown): ParsedRunResult;
 
-export { type AssertionResultRecord, type BinaryVerdict, type Config, type EvalResult, type ParsedRunResult, RUN_RESULT_SCHEMA_VERSION, type RowResult, type RunError, type RunOptions, type RunResult, type Summary, type Usage, assertionConfigSchema, assertionResultRecordSchema, binaryVerdictSchema, parseRunResult, handleRun as run, runResultSchema };
+export { type AssertionResultRecord, type BinaryVerdict, type Config, type EvalResult, NotLoggedInError, type ParsedRunResult, RUN_RESULT_SCHEMA_VERSION, type RowResult, type RunError, type RunOptions, type RunResult, type Summary, type SyncDeps, SyncFileError, SyncHttpError, SyncNetworkError, type SyncResult, TokenRejectedError, type Usage, assertionConfigSchema, assertionResultRecordSchema, binaryVerdictSchema, parseRunResult, reportSyncFailure, handleRun as run, runResultSchema, handleSync as sync };

package/dist/index.js

@@ -315,7 +315,7 @@ function normalizeProviderError(err, secret, envVar) {
 }
 
 // src/providers/retry.ts
-var defaultSleep = (ms) => new Promise((resolve4) => setTimeout(resolve4, ms));
+var defaultSleep = (ms) => new Promise((resolve5) => setTimeout(resolve5, ms));
 function retryAfterMs(err) {
   if (typeof err !== "object" || err === null || !("headers" in err)) return void 0;
   const raw = readHeader(err.headers, "retry-after");
@@ -1461,6 +1461,10 @@ async function handleRun(options, depsFactory) {
   }
 }
 
+// src/cli/commands/sync.ts
+import * as fs6 from "fs";
+import * as path5 from "path";
+
 // src/types/run-result-schema.ts
 import { z as z2 } from "zod";
 var RUN_RESULT_SCHEMA_VERSION = 1;
@@ -1519,12 +1523,147 @@ var runResultSchema = z2.object({
 function parseRunResult(value) {
   return runResultSchema.parse(value);
 }
+
+// src/cli/credentials.ts
+import { chmodSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
+import { dirname as dirname3, join as join3 } from "path";
+function credentialsFile() {
+  const base = process.env["XDG_CONFIG_HOME"]?.trim() || join3(homedir(), ".config");
+  return join3(base, "plune", "credentials.json");
+}
+function loadToken() {
+  try {
+    const parsed = JSON.parse(readFileSync3(credentialsFile(), "utf-8"));
+    return typeof parsed.token === "string" && parsed.token.length > 0 ? parsed.token : null;
+  } catch {
+    return null;
+  }
+}
+
+// src/cli/commands/sync.ts
+var DEFAULT_API_URL = "https://beta-api.plune.ai";
+var NotLoggedInError = class extends Error {
+  constructor() {
+    super('Not logged in. Run "plune login" first to save your API token.');
+    this.name = "NotLoggedInError";
+  }
+};
+var TokenRejectedError = class extends Error {
+  constructor() {
+    super(
+      'Your API token was rejected (revoked or invalid). Run "plune login" with a fresh token.'
+    );
+    this.name = "TokenRejectedError";
+  }
+};
+var SyncFileError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "SyncFileError";
+  }
+};
+var SyncNetworkError = class extends Error {
+  constructor(apiUrl) {
+    super(
+      `Could not reach the Plune API at ${apiUrl}. Check your connection (or PLUNE_API_URL) and try again.`
+    );
+    this.name = "SyncNetworkError";
+  }
+};
+var SyncHttpError = class extends Error {
+  constructor(status, detail) {
+    super(`Sync failed \u2014 the server returned HTTP ${status}${detail ? ` (${detail})` : ""}.`);
+    this.status = status;
+    this.name = "SyncHttpError";
+  }
+  status;
+};
+function resolveApiUrl(explicit) {
+  const raw = explicit ?? process.env["PLUNE_API_URL"] ?? DEFAULT_API_URL;
+  return raw.replace(/\/+$/, "");
+}
+function readRun(cwd, file) {
+  const target = file !== void 0 ? path5.resolve(cwd, file) : path5.join(cwd, ".plune", "last-run.json");
+  let raw;
+  try {
+    raw = fs6.readFileSync(target, "utf8");
+  } catch {
+    throw new SyncFileError(
+      file !== void 0 ? `Run file not found: ${target}` : 'No run to sync. Run "plune run" first (or pass --file <path>).'
+    );
+  }
+  let json;
+  try {
+    json = JSON.parse(raw);
+  } catch {
+    throw new SyncFileError(`Run file is not valid JSON: ${target}`);
+  }
+  try {
+    return parseRunResult(json);
+  } catch {
+    throw new SyncFileError(`Run file does not match the RunResult schema: ${target}`);
+  }
+}
+async function safeErrorDetail(res) {
+  try {
+    const body = await res.json();
+    return typeof body.error === "string" ? body.error : "";
+  } catch {
+    return "";
+  }
+}
+async function handleSync(deps = {}) {
+  const cwd = deps.cwd ?? process.cwd();
+  const apiUrl = resolveApiUrl(deps.apiUrl);
+  const token = (deps.loadToken ?? loadToken)();
+  if (token === null) throw new NotLoggedInError();
+  const run = readRun(cwd, deps.file);
+  const doFetch = deps.fetchImpl ?? fetch;
+  const endpoint = `${apiUrl}/v1/runs`;
+  let res;
+  try {
+    res = await doFetch(endpoint, {
+      method: "POST",
+      headers: { "content-type": "application/json", authorization: `Bearer ${token}` },
+      body: JSON.stringify(run)
+    });
+  } catch {
+    throw new SyncNetworkError(apiUrl);
+  }
+  if (!res.ok) {
+    const detail = await safeErrorDetail(res);
+    if (res.status === 401) throw new TokenRejectedError();
+    throw new SyncHttpError(res.status, detail);
+  }
+  const body = await res.json().catch(() => ({}));
+  const id = typeof body.id === "string" ? body.id : "";
+  return { id, url: `${endpoint}/${id}` };
+}
+function reportSyncFailure(err, write) {
+  if (err instanceof NotLoggedInError || err instanceof TokenRejectedError || err instanceof SyncFileError) {
+    write(err.message + "\n");
+    return 2;
+  }
+  if (err instanceof SyncNetworkError || err instanceof SyncHttpError) {
+    write(err.message + "\n");
+    return 1;
+  }
+  return null;
+}
 export {
+  NotLoggedInError,
   RUN_RESULT_SCHEMA_VERSION,
+  SyncFileError,
+  SyncHttpError,
+  SyncNetworkError,
+  TokenRejectedError,
   assertionConfigSchema,
   assertionResultRecordSchema,
   binaryVerdictSchema,
   parseRunResult,
+  reportSyncFailure,
   handleRun as run,
-  runResultSchema
+  runResultSchema,
+  handleSync as sync
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plune-ai/cli",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "AI-powered assertion testing for LLM apps — write assertions, run them against any provider, get a pass/fail report (local, CI, or diff).",
   "keywords": [
     "ai",