@postplus/cli 0.1.45 → 0.1.47

package/build/hosted-field-validation.js

@@ -1,93 +1,13 @@
-// Schema-driven early field validation (issue #475). Mirrors the Web boundary's
-// assertModelledFieldValuesInRange: every enum / numeric-range field an endpoint
-// advertises in the generated execution manifest — the same EnvelopeFieldSpec the
-// Web validator reads — is checked here BEFORE the request is posted, so the agent
-// gets an immediate field-level error (e.g. seedance resolution "999p") instead of
-// waiting for the round-trip. The Web boundary stays the AUTHORITATIVE gate; this is
-// only pre-submit feedback.
-//
-// Casing-faithfulness is the reason this cannot be a CLI-side island: the per-field
-// canonicalization rule is read from the manifest `canonicalize` hint, the SAME
-// single source the Web validator reads, so "720P" / "4K" pass and "english" /
-// "999p" fail exactly as they do on the boundary. The two canonicalize functions
-// below are stable 3-line algorithms; WHICH field uses WHICH is decided by the
-// schema hint, never re-guessed here.
-// k-tier normalization for image resolution ("4K" -> "4k"). Mirrors the Web
-// canonicalizeImageResolution exactly.
-function canonicalizeImageResolution(value) {
-    const trimmed = value.trim();
-    const tier = trimmed.match(/^(\d+(?:\.\d+)?)\s*k$/iu);
-    return tier ? `${tier[1]}k` : trimmed;
-}
-function canonicalizeLowercaseToken(value) {
-    return value.trim().toLowerCase();
-}
-function canonicalizeModelledFieldValue(field, value) {
-    switch (field.canonicalize) {
-        case 'image-resolution-tier':
-            return canonicalizeImageResolution(value);
-        case 'lowercase':
-            return canonicalizeLowercaseToken(value);
-        default:
-            return value;
-    }
-}
-function isIntegerInRange(min, max, value) {
-    return Number.isInteger(value) && value >= min && value <= max;
-}
-function formatReceivedValue(raw) {
-    return typeof raw === 'string' ? `"${raw}"` : String(raw);
-}
-function assertModelledNumberFieldValue(endpointKey, field, raw) {
-    const enumValues = field.enumValues && field.enumValues.length > 0 ? field.enumValues : null;
-    const constraint = enumValues
-        ? `must be one of ${enumValues.join(', ')}`
-        : `must be an integer from ${field.min} to ${field.max}`;
-    if (typeof raw !== 'number' || !Number.isFinite(raw)) {
-        throw new Error(`${endpointKey} ${field.name} ${constraint}; received ${formatReceivedValue(raw)}.`);
-    }
-    if (enumValues) {
-        if (!enumValues.includes(String(raw))) {
-            throw new Error(`${endpointKey} ${field.name} ${constraint}; received ${raw}.`);
-        }
-        return;
-    }
-    if (field.min === undefined || field.max === undefined) {
-        return;
-    }
-    if (!isIntegerInRange(field.min, field.max, raw)) {
-        throw new Error(`${endpointKey} ${field.name} ${constraint}; received ${raw}.`);
-    }
-}
-// Validates every advertised enum / numeric-range field present in the input against
-// the manifest contract. Skips runner-managed fields (no caller input), fields with
-// neither an enum nor a range, and fields the input omits — exactly mirroring the Web
-// boundary so a value the CLI accepts the boundary also accepts, and vice versa.
+// Schema-driven early field validation (issue #475). The canonicalize + enum/range
+// algorithm is the SSOT `hosted-field-validation-core`, authored in apps/web and
+// projected VERBATIM into ./generated by the hosted-execution-manifest codegen — the CLI
+// submodule cannot import apps/web TS, and a hand-copy here would let the casing / range
+// rules drift from the Web boundary. This module only injects the CLI's plain-Error
+// factory and keeps the established (endpointKey, fields, input) signature its callers
+// use. The Web boundary stays the AUTHORITATIVE gate; this is pre-submit feedback so the
+// agent gets an immediate field-level error (e.g. seedance resolution "999p") instead of
+// waiting for the round-trip.
+import { assertModelledFieldValuesInRange as assertModelledFieldValuesInRangeCore } from './generated/hosted-field-validation-core.generated.js';
 export function assertModelledFieldValuesInRange(endpointKey, fields, input) {
-    for (const field of fields) {
-        if (field.class === 'runner-managed') {
-            continue;
-        }
-        const enumValues = field.enumValues && field.enumValues.length > 0 ? field.enumValues : null;
-        const hasRange = field.min !== undefined && field.max !== undefined;
-        if (!enumValues && !hasRange) {
-            continue;
-        }
-        if (!Object.hasOwn(input, field.name)) {
-            continue;
-        }
-        if (field.type === 'number') {
-            assertModelledNumberFieldValue(endpointKey, field, input[field.name]);
-            continue;
-        }
-        const raw = input[field.name];
-        if (typeof raw !== 'string' || !raw.trim()) {
-            continue;
-        }
-        const value = raw.trim();
-        if (enumValues &&
-            !enumValues.includes(canonicalizeModelledFieldValue(field, value))) {
-            throw new Error(`${endpointKey} ${field.name} must be one of ${enumValues.join(', ')}; received "${value}".`);
-        }
-    }
+    assertModelledFieldValuesInRangeCore(endpointKey, fields, input, (message) => new Error(message));
 }

package/build/hosted-lib.d.ts

@@ -0,0 +1,34 @@
+import type { AuthedCloudRequestAuth } from './authed-cloud-request.js';
+export type HostedLibDomain = 'media' | 'research' | 'publish' | 'media-file';
+export type RunHostedRequestInput = {
+    /** Which hosted verb family `args` belongs to (the first CLI token). */
+    domain: HostedLibDomain;
+    /**
+     * The CLI tokens AFTER the domain, exactly as the bin would receive them, e.g.
+     * `['create', 'video-seedance-2-text']` or `['collect', 'tiktok-research']`.
+     * Flags surfaces still pass their `--flag value` tokens here; request-json
+     * surfaces pass the body via `requestJson` instead of a `--request <file>`.
+     */
+    args: string[];
+    /**
+     * The request-json envelope for request-json surfaces, injected in place of a
+     * `--request <file>` read. Omit it for flags surfaces (media create/transcribe
+     * flag-driven) and for surfaces that need no body (polling/run-handle).
+     */
+    requestJson?: Record<string, unknown> | unknown[];
+    /** The account's fresh session auth, supplied by the trusted host runtime. */
+    auth: AuthedCloudRequestAuth;
+    /**
+     * The skills release id stamped into `x-postplus-skills-release-id`. Provided
+     * verbatim by the host (it is NOT read from disk on this path).
+     */
+    skillsReleaseId?: string;
+};
+/**
+ * Runs a hosted media / research / publish / media-file request in-process and
+ * returns the parsed hosted payload. Throws the structured
+ * HostedProductRequestError / quote-confirmation error VERBATIM on failure — no
+ * stdout, no file writes, no exit code. The wire request is identical to the bin
+ * path for the same input (proven by the parity test).
+ */
+export declare function runHostedRequest(input: RunHostedRequestInput): Promise<unknown>;

package/build/hosted-lib.js

@@ -0,0 +1,45 @@
+// In-process hosted-execution library entry. This is the trusted-runtime
+// counterpart to the `postplus` bin: a host process (e.g. eve-agent) that already
+// holds the account's fresh session auth can run the SAME hosted verb grammar
+// in-process — resolve verb -> build the typed envelope -> POST -> return the
+// parsed payload — WITHOUT spawning a CLI subprocess, reading disk config, or
+// writing any temp/output file.
+//
+// Why this exists (anti-drift): the bin path and this lib path share ONE
+// resolve+build+post core in hosted-domain-commands.ts. For the same
+// domain+args+input+auth they produce a byte-identical hosted HTTP request (URL +
+// JSON body + headers). The only divergence is the input source and the result
+// sink, both injected via HostedRequestContext: auth + skillsReleaseId come in as
+// parameters (no `resolveFreshRemoteAuth()` disk read, no 401-refresh-retry — the
+// host supplies fresh session auth each turn), the request-json body comes from
+// `requestJson` instead of a `--request <file>`, and the parsed payload is RETURNED
+// (the structured HostedProductRequestError / quote-confirmation error are thrown
+// verbatim) instead of being written to stdout/file with an exit code.
+//
+// Scope: only the hosted spend/write surfaces go through here —
+// media / research / publish / media-file. Read-only diagnostics (status / doctor
+// / skills / whoami / quote / list / --version / --help) are NOT hosted-domain
+// commands and are out of scope for this entry.
+import { runHostedDomainCommand, runMediaFileCommand, } from './hosted-domain-commands.js';
+/**
+ * Runs a hosted media / research / publish / media-file request in-process and
+ * returns the parsed hosted payload. Throws the structured
+ * HostedProductRequestError / quote-confirmation error VERBATIM on failure — no
+ * stdout, no file writes, no exit code. The wire request is identical to the bin
+ * path for the same input (proven by the parity test).
+ */
+export async function runHostedRequest(input) {
+    const context = {
+        auth: input.auth,
+        ...(input.skillsReleaseId !== undefined
+            ? { skillsReleaseId: input.skillsReleaseId }
+            : {}),
+        ...(input.requestJson !== undefined
+            ? { requestJson: input.requestJson }
+            : {}),
+    };
+    if (input.domain === 'media-file') {
+        return runMediaFileCommand(input.args, context);
+    }
+    return runHostedDomainCommand(input.domain, input.args, context);
+}

package/build/hosted-manifest-index.d.ts

@@ -0,0 +1,69 @@
+export type HostedDomain = 'media' | 'publish' | 'research';
+export type ManifestFieldClass = 'intent' | 'default' | 'runner-managed';
+export type ManifestField = {
+    name: string;
+    class: ManifestFieldClass;
+    flag: string | null;
+    type: 'string' | 'number' | 'boolean' | 'media-url';
+    repeatable?: boolean;
+    enumValues?: readonly string[];
+    min?: number;
+    max?: number;
+    canonicalize?: 'lowercase' | 'image-resolution-tier';
+    default?: string | number | boolean;
+    required: boolean;
+    derivedFrom?: string;
+};
+export type ManifestEndpoint = {
+    endpointKey: string;
+    provider: string;
+    providerModelPath: string;
+    fields: readonly ManifestField[];
+    billingDimensions?: readonly string[];
+};
+export type ManifestModel = {
+    modelKey: string;
+    providerModelPath: string;
+};
+export type ManifestCollection = {
+    collectionKey: string;
+    actorId: string;
+};
+export type ManifestSource = {
+    sourceKey: string;
+    datasetId: string;
+};
+export type ManifestOperation = {
+    operation: string;
+};
+export type ManifestEntry = {
+    skill: string;
+    mode?: 'cli-runner';
+    surface: 'flags' | 'request-json';
+    verb: string;
+    domain: HostedDomain;
+    capability: string;
+    endpointKeys?: readonly string[];
+    modelKeys?: readonly string[];
+    collectionKeys?: readonly string[];
+    sourceKeys?: readonly string[];
+    endpoints?: readonly ManifestEndpoint[];
+    models?: readonly ManifestModel[];
+    collections?: readonly ManifestCollection[];
+    sources?: readonly ManifestSource[];
+    operations?: readonly ManifestOperation[];
+};
+export type ResolvedVerbTarget = {
+    skill: string;
+    capability: string;
+    surface: 'flags' | 'request-json';
+    endpoint?: ManifestEndpoint;
+    model?: ManifestModel;
+    collection?: ManifestCollection;
+    source?: ManifestSource;
+    operation?: string;
+};
+export declare function allManifestEntries(): ManifestEntry[];
+export declare function buildVerbTargetIndex(domain: HostedDomain): Map<string, Map<string, ResolvedVerbTarget>>;
+export declare function manifestTargetKeys(domain: HostedDomain, capability?: string): string[];
+export declare function findMediaEndpoint(endpointKey: string): ManifestEndpoint | null;

package/build/hosted-request-schemas.js

@@ -1,4 +1,3 @@
-import { Buffer } from 'node:buffer';
 import { findMediaEndpoint, manifestTargetKeys, } from './hosted-manifest-index.js';
 const JSON_OBJECT_SCHEMA = {
     additionalProperties: true,
@@ -211,113 +210,6 @@ function requireMediaEndpoint(endpointKey) {
     }
     return endpoint;
 }
-const MANIFEST_FIELD_DEFAULTS = buildManifestFieldDefaults();
-const MANIFEST_DERIVED_DIMENSIONS = buildManifestDerivedDimensions();
-function buildManifestFieldDefaults() {
-    const index = new Map();
-    for (const key of manifestTargetKeys('media', 'media-generation')) {
-        const endpoint = findMediaEndpoint(key);
-        if (!endpoint) {
-            continue;
-        }
-        const byField = new Map();
-        for (const field of endpoint.fields) {
-            if (field.default !== undefined) {
-                byField.set(field.name, field.default);
-            }
-        }
-        index.set(key, byField);
-    }
-    return index;
-}
-function manifestFieldDefault(endpointKey, fieldName) {
-    return MANIFEST_FIELD_DEFAULTS.get(endpointKey)?.get(fieldName);
-}
-function buildManifestDerivedDimensions() {
-    const index = new Map();
-    for (const key of manifestTargetKeys('media', 'media-generation')) {
-        const endpoint = findMediaEndpoint(key);
-        if (!endpoint) {
-            continue;
-        }
-        const derived = endpoint.fields.flatMap((field) => field.class === 'runner-managed' && field.derivedFrom
-            ? [{ fieldName: field.name, sourceName: field.derivedFrom }]
-            : []);
-        if (derived.length > 0) {
-            index.set(key, derived);
-        }
-    }
-    return index;
-}
-export function buildMediaGenerationRequestDimensions(endpointKey, input) {
-    const dimensions = {
-        billableUnitCount: 1,
-        operationKey: endpointKey,
-    };
-    for (const derived of MANIFEST_DERIVED_DIMENSIONS.get(endpointKey) ?? []) {
-        const value = input[derived.sourceName] ??
-            manifestFieldDefault(endpointKey, derived.sourceName);
-        if (value !== undefined) {
-            dimensions[derived.fieldName] = value;
-        }
-    }
-    if (endpointKey.startsWith('image-')) {
-        const resolution = typeof input.resolution === 'string' && input.resolution.trim()
-            ? input.resolution.trim()
-            : manifestFieldDefault(endpointKey, 'resolution');
-        const quality = typeof input.quality === 'string' && input.quality.trim()
-            ? input.quality.trim()
-            : manifestFieldDefault(endpointKey, 'quality');
-        if (typeof resolution === 'string') {
-            dimensions.imageSize = resolution;
-        }
-        if (typeof quality === 'string') {
-            dimensions.quality = quality;
-        }
-    }
-    if (endpointKey.startsWith('video-')) {
-        const manifestResolution = manifestFieldDefault(endpointKey, 'resolution');
-        const duration = readPositiveNumber(input.duration) ??
-            readPositiveNumber(manifestFieldDefault(endpointKey, 'duration')) ??
-            5;
-        const resolution = typeof input.resolution === 'string' && input.resolution.trim()
-            ? input.resolution.trim()
-            : typeof manifestResolution === 'string'
-                ? manifestResolution
-                : '720p';
-        dimensions.audioMode =
-            endpointKey.startsWith('video-kling-v3-0-') && input.sound !== true
-                ? 'off'
-                : 'on';
-        dimensions.duration = Math.ceil(duration);
-        dimensions.requestBytes = Buffer.byteLength(JSON.stringify(input));
-        dimensions.resolution = resolution;
-        if (endpointKey.startsWith('video-seedance-2-')) {
-            const referenceVideoCount = Array.isArray(input.reference_videos)
-                ? input.reference_videos.length
-                : 0;
-            dimensions.referenceVideoCount = referenceVideoCount;
-            dimensions.referenceVideoMode =
-                referenceVideoCount > 0
-                    ? 'with_reference_videos'
-                    : 'without_reference_videos';
-        }
-        if (endpointKey === 'video-kling-v2-6-pro-motion-control') {
-            dimensions.characterOrientation =
-                typeof input.character_orientation === 'string'
-                    ? input.character_orientation
-                    : 'image';
-            dimensions.motionControlMode = 'reference_motion_transfer';
-        }
-    }
-    return dimensions;
-}
-function readPositiveNumber(value) {
-    if (typeof value !== 'number' || !Number.isFinite(value) || value <= 0) {
-        return null;
-    }
-    return value;
-}
 function buildPublishSchemaReport() {
     const operations = manifestTargetKeys('publish', 'social-publishing');
     return {

package/build/index.js

@@ -412,17 +412,19 @@ async function main() {
         case 'doctor':
             process.exitCode = await runDoctor(parseDiagnosticOptions(rest));
             return;
+        // The bin path never passes the in-process context, so these always resolve
+        // to the numeric exit code (the `unknown` return is the hosted-lib path only).
         case 'research':
-            process.exitCode = await runHostedDomainCommand('research', rest);
+            process.exitCode = (await runHostedDomainCommand('research', rest));
             return;
         case 'media':
-            process.exitCode = await runHostedDomainCommand('media', rest);
+            process.exitCode = (await runHostedDomainCommand('media', rest));
             return;
         case 'media-file':
-            process.exitCode = await runMediaFileCommand(rest);
+            process.exitCode = (await runMediaFileCommand(rest));
             return;
         case 'publish':
-            process.exitCode = await runHostedDomainCommand('publish', rest);
+            process.exitCode = (await runHostedDomainCommand('publish', rest));
             return;
         case 'quote':
             process.exitCode = await runQuoteCommand(rest);

package/build/update-check.js

@@ -1,6 +1,6 @@
 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises';
 import { dirname, join } from 'node:path';
-import { readCurrentCliVersion } from './client-compatibility.js';
+import { POSTPLUS_CLI_UPDATE_COMMAND, readCurrentCliVersion, } from './client-compatibility.js';
 import { runInteractiveCommand as runDefaultInteractiveCommand, } from './command-runner.js';
 import { getPostPlusConfigDir, readManagedSkillBaseline, } from './local-state.js';
 import { POSTPLUS_SKILLS_REPO, loadPublicSkillCatalog, } from './skill-catalog.js';
@@ -8,7 +8,6 @@ const UPDATE_CHECK_TTL_MS = 24 * 60 * 60 * 1000;
 const UPDATE_CHECK_CACHE_FILE = 'update-check.json';
 const NPM_PACKAGE_NAME = '@postplus/cli';
 const NPM_LATEST_URL = `https://registry.npmjs.org/${encodeURIComponent(NPM_PACKAGE_NAME)}/latest`;
-export const POSTPLUS_CLI_UPDATE_COMMAND = 'npm install -g @postplus/cli@latest';
 const POSTPLUS_CLI_UPDATE_ARGS = ['install', '-g', '@postplus/cli@latest'];
 export async function generateUpdateStatusReport(input = {}, dependencies = {
     fetchFn: fetch,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@postplus/cli",
-  "version": "0.1.45",
+  "version": "0.1.47",
   "packageManager": "pnpm@10.30.3+sha512.c961d1e0a2d8e354ecaa5166b822516668b7f44cb5bd95122d590dd81922f606f5473b6d23ec4a5be05e7fcd18e8488d47d978bbe981872f1145d06e9a740017",
   "type": "module",
   "description": "PostPlus CLI for PostPlus Cloud auth, status, and diagnostics.",
@@ -13,13 +13,19 @@
     "build/auth-validate.js",
     "build/auth.js",
     "build/authed-cloud-request.js",
+    "build/authed-cloud-request.d.ts",
     "build/client-compatibility.js",
     "build/command-runner.js",
     "build/doctor.js",
     "build/hosted-domain-commands.js",
+    "build/hosted-domain-commands.d.ts",
+    "build/hosted-lib.js",
+    "build/hosted-lib.d.ts",
     "build/generated/hosted-execution-manifest.generated.js",
+    "build/generated/hosted-field-validation-core.generated.js",
     "build/hosted-field-validation.js",
     "build/hosted-manifest-index.js",
+    "build/hosted-manifest-index.d.ts",
     "build/hosted-release.js",
     "build/hosted-request-schemas.js",
     "build/index.js",
@@ -47,6 +53,13 @@
   "bin": {
     "postplus": "build/index.js"
   },
+  "exports": {
+    "./hosted-lib": {
+      "types": "./build/hosted-lib.d.ts",
+      "default": "./build/hosted-lib.js"
+    },
+    "./package.json": "./package.json"
+  },
   "scripts": {
     "build": "node ./scripts/clean-build.mjs && tsc && node ./scripts/finalize-build.mjs",
     "clean": "rm -rf .turbo node_modules build",