@synap-core/cli 1.11.0 → 1.13.0

package/dist/commands/update.js

@@ -1,145 +1,16 @@
 /**
  * synap update
  *
- * Update the synap skill and optionally trigger a server-side redeploy
- * via Dokploy when DOKPLOY_API_KEY is configured.
- *
- *   synap update              — update skill + show service status
- *   synap update --server     — also trigger Dokploy redeploy of control-plane
- *   synap update --all        — trigger redeploy of all registered Dokploy services
+ * Tells the user how to update the CLI itself. (It used to also update an
+ * agent's skill; Synap installs no agent now, so the hint is all that is left.)
  */
-import chalk from "chalk";
-import ora from "ora";
 import { log, banner } from "../utils/logger.js";
-import { detectOpenClaw } from "../lib/openclaw.js";
-import { installSynapSkill } from "../lib/pod.js";
-function getDokployBase() {
-    const key = process.env.DOKPLOY_API_KEY ?? "";
-    if (!key)
-        return null;
-    const domain = process.env.DEPLOY_DOMAIN ?? "deploy.synap.live";
-    const url = process.env.DOKPLOY_URL ?? `https://${domain}`;
-    return { url, key };
-}
-async function fetchApps() {
-    const dok = getDokployBase();
-    if (!dok)
-        return [];
-    try {
-        const res = await fetch(`${dok.url}/api/application.all`, {
-            headers: { "x-api-key": dok.key },
-            signal: AbortSignal.timeout(8000),
-        });
-        if (!res.ok)
-            return [];
-        return (await res.json());
-    }
-    catch {
-        return [];
-    }
-}
-async function triggerDeploy(appId) {
-    const dok = getDokployBase();
-    if (!dok)
-        return false;
-    try {
-        const res = await fetch(`${dok.url}/api/application.deploy`, {
-            method: "POST",
-            headers: { "Content-Type": "application/json", "x-api-key": dok.key },
-            body: JSON.stringify({ applicationId: appId }),
-            signal: AbortSignal.timeout(10000),
-        });
-        return res.ok;
-    }
-    catch {
-        return false;
-    }
-}
-// ─── Main ────────────────────────────────────────────────────────────────────
-export async function update(opts = {}) {
+export async function update() {
     banner();
     log.heading("Update");
-    // ── 1. Skill update (OpenClaw) ────────────────────────────────────────────
-    const oc = detectOpenClaw();
-    if (oc.found) {
-        const spinner = ora("Updating synap skill...").start();
-        try {
-            installSynapSkill();
-            spinner.succeed("Synap skill updated");
-        }
-        catch (err) {
-            spinner.fail(err instanceof Error ? err.message : "Skill update failed");
-        }
-    }
-    else {
-        log.dim("OpenClaw not detected — skipping skill update");
-    }
-    // ── 2. Dokploy service status ─────────────────────────────────────────────
-    log.blank();
-    const dok = getDokployBase();
-    if (!dok) {
-        log.dim("Dokploy not configured (DOKPLOY_API_KEY not set)");
-        log.dim("To enable server management: set DOKPLOY_API_KEY + DEPLOY_DOMAIN in your env");
-        log.blank();
-        log.info("To update the CLI itself:");
-        log.dim("  npm update -g @synap/cli");
-        log.blank();
-        return;
-    }
-    const appsSpinner = ora("Fetching service status from Dokploy...").start();
-    const apps = await fetchApps();
-    appsSpinner.stop();
-    if (apps.length === 0) {
-        log.dim("No services found in Dokploy (or API unreachable)");
-    }
-    else {
-        log.heading("Services");
-        for (const app of apps) {
-            const status = app.status === "running"
-                ? chalk.green(app.status)
-                : app.status === "error"
-                    ? chalk.red(app.status)
-                    : chalk.yellow(app.status);
-            console.log(`  ${chalk.bold(app.name.padEnd(24))} ${status}  ${chalk.dim(app.env ?? "")}`);
-        }
-    }
-    // ── 3. Trigger redeploys if requested ─────────────────────────────────────
-    if (opts.server || opts.all) {
-        log.blank();
-        log.heading(opts.all ? "Redeploying all services" : "Redeploying control-plane");
-        const targets = opts.all
-            ? apps
-            : apps.filter((a) => a.name.toLowerCase().includes("control-plane") ||
-                a.appName?.toLowerCase().includes("control-plane"));
-        if (targets.length === 0) {
-            log.dim("No matching services found in Dokploy");
-            log.dim("Register services first: synap infra status");
-        }
-        else {
-            for (const app of targets) {
-                const spinner = ora(`Deploying ${app.name}...`).start();
-                const ok = await triggerDeploy(app.id);
-                if (ok) {
-                    spinner.succeed(`${app.name}: deploy triggered`);
-                }
-                else {
-                    spinner.fail(`${app.name}: deploy failed`);
-                }
-            }
-        }
-        log.blank();
-        log.dim(`Watch progress: ${chalk.cyan(`${dok.url}`)}`);
-        log.dim("Or tail logs:   synap infra logs <service-name>");
-    }
-    else if (apps.length > 0) {
-        log.blank();
-        log.dim(`To redeploy:  ${chalk.cyan("synap update --server")}  (control-plane only)`);
-        log.dim(`              ${chalk.cyan("synap update --all")}     (all services)`);
-    }
-    // ── 4. CLI update reminder ────────────────────────────────────────────────
-    log.blank();
     log.info("To update the CLI itself:");
-    log.dim("  npm update -g @synap/cli");
+    log.dim("  npm update -g @synap-core/cli");
+    log.dim("  npx @synap-core/cli@latest   (no global install)");
     log.blank();
 }
 //# sourceMappingURL=update.js.map

package/dist/commands/update.js.map

@@ -1 +1 @@
-{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,GAAG,MAAM,KAAK,CAAC;AACtB,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAiBlD,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,mBAAmB,CAAC;IAChE,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,WAAW,MAAM,EAAE,CAAC;IAC3D,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,KAAK,UAAU,SAAS;IACtB,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IAEpB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,sBAAsB,EAAE;YACxD,OAAO,EAAE,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE;YACjC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,CAAC;QACvB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAiB,CAAC;IAC5C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,KAAa;IACxC,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IAEvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,yBAAyB,EAAE;YAC3D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,WAAW,EAAE,GAAG,CAAC,GAAG,EAAE;YACrE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;SACnC,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,OAAsB,EAAE;IACnD,MAAM,EAAE,CAAC;IACT,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAEtB,6EAA6E;IAC7E,MAAM,EAAE,GAAG,cAAc,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,OAAO,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,KAAK,EAAE,CAAC;QACvD,IAAI,CAAC;YACH,iBAAiB,EAAE,CAAC;YACpB,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,GAAG,CAAC,+CAA+C,CAAC,CAAC;IAC3D,CAAC;IAED,6EAA6E;IAC7E,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAE7B,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,GAAG,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAC5D,GAAG,CAAC,GAAG,CAAC,8EAA8E,CAAC,CAAC;QACxF,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;QACtC,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;QACtC,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,yCAAyC,CAAC,CAAC,KAAK,EAAE,CAAC;IAC3E,MAAM,IAAI,GAAG,MAAM,SAAS,EAAE,CAAC;IAC/B,WAAW,CAAC,IAAI,EAAE,CAAC;IAEnB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IAC/D,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACxB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,MAAM,GACV,GAAG,CAAC,MAAM,KAAK,SAAS;gBACtB,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;gBACzB,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,OAAO;oBACxB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;oBACvB,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAC/B,OAAO,CAAC,GAAG,CACT,KAAK,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,KAAK,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAC9E,CAAC;QACJ,CAAC;IACH,CAAC;IAED,6EAA6E;IAC7E,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5B,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC;QAEjF,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG;YACtB,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAChB,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;gBAC9C,CAAC,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CACnD,CAAC;QAEN,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;YACjD,GAAG,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;QACzD,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;gBAC1B,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC;gBACxD,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACvC,IAAI,EAAE,EAAE,CAAC;oBACP,OAAO,CAAC,OAAO,CAAC,GAAG,GAAG,CAAC,IAAI,oBAAoB,CAAC,CAAC;gBACnD,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,iBAAiB,CAAC,CAAC;gBAC7C,CAAC;YACH,CAAC;QACH,CAAC;QAED,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,GAAG,CAAC,mBAAmB,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,GAAG,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;IAC7D,CAAC;SAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,KAAK,EAAE,CAAC;QACZ,GAAG,CAAC,GAAG,CACL,iBAAiB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,wBAAwB,CAC7E,CAAC;QACF,GAAG,CAAC,GAAG,CACL,iBAAiB,KAAK,CAAC,IAAI,CAAC,oBAAoB,CAAC,qBAAqB,CACvE,CAAC;IACJ,CAAC;IAED,6EAA6E;IAC7E,GAAG,CAAC,KAAK,EAAE,CAAC;IACZ,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,4BAA4B,CAAC,CAAC;IACtC,GAAG,CAAC,KAAK,EAAE,CAAC;AACd,CAAC"}
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../../src/commands/update.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAEjD,MAAM,CAAC,KAAK,UAAU,MAAM;IAC1B,MAAM,EAAE,CAAC;IACT,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtB,GAAG,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;IACtC,GAAG,CAAC,GAAG,CAAC,iCAAiC,CAAC,CAAC;IAC3C,GAAG,CAAC,GAAG,CAAC,oDAAoD,CAAC,CAAC;IAC9D,GAAG,CAAC,KAAK,EAAE,CAAC;AACd,CAAC"}

package/dist/commands/upload.d.ts

@@ -9,17 +9,39 @@
  * Usage:
  *   synap upload ./report.pdf
  *   synap upload ./logo.png --title "Brand logo" --workspace <id>
+ *   synap upload ./logo.svg --profile brand-asset --prop variant=dark
+ *   synap upload ./launch.mp4 --workspace <id>      # >10MB → presigned lane
  *   synap upload ./spec.pdf --attach <entityId>   # also link doc → entity
  *
  * API:
- *   POST /api/hub/files  (multipart)  — field `file` (≤10MB) + REQUIRED
- *                                       workspaceId (membership-gated) +
- *                                       optional title → { fileEntityId, documentId }
+ *   POST /api/hub/files  (multipart)  — ≤10MB (fonts ≤5MB): field `file` +
+ *                                       workspaceId (membership-gated) + optional
+ *                                       title / profileSlug / properties /
+ *                                       targetWorkspaceId → { fileEntityId, documentId }
+ *   POST /api/hub/files/uploads       — >10MB: presigned PUT URL (caps per mime:
+ *        PUT <uploadUrl>                video 500MB · audio 100MB · zip 200MB);
+ *   POST /api/hub/files/uploads/finalize  the bytes go straight to storage, then
+ *                                       finalize mints the entity (same shape).
  *   POST /api/hub/relations           — with --attach: `references` relation
  *                                       from the target entity to the new doc.
+ *
+ * `--workspace` is an EXPLICIT placement pin (sent as `targetWorkspaceId`).
+ * Without it the configured workspace is only context, and a pod-scope kind
+ * such as `file` lands pod-wide — which is why `--workspace` used to look
+ * ignored (the entity came back with workspaceId null).
  */
+import { type HubConfig } from "../lib/hub-client.js";
+/** Mirror of the pod's per-mime caps (C4) — refuse before any round-trip. */
+export declare function maxUploadBytesForMime(mime: string): number;
+export declare function mimeFor(path: string): string;
+/** `--prop key=value` (repeatable) → the entity `properties` object. */
+export declare function parseProps(pairs: string[] | undefined): Record<string, string>;
 export interface UploadOpts {
     workspace?: string;
+    /** Entity kind to create (default `file`), e.g. `brand-asset`. */
+    profile?: string;
+    /** Repeatable `key=value` entity properties. */
+    prop?: string[];
     attach?: string;
     title?: string;
     open?: boolean;
@@ -27,4 +49,20 @@ export interface UploadOpts {
     podUrl?: string;
     apiKey?: string;
 }
+export interface UploadRequest {
+    buf: Buffer<ArrayBuffer>;
+    filename: string;
+    mimeType: string;
+    workspaceId?: string;
+    targetWorkspaceId?: string;
+    title?: string;
+    profileSlug?: string;
+    properties: Record<string, string>;
+}
+/**
+ * Pick the lane by size: the buffered multipart door up to 10MB, the presigned
+ * lane above it (request → PUT straight to storage → finalize). Both answer
+ * `{ fileEntityId, documentId }` or a governed `proposed` handle.
+ */
+export declare function sendUpload(req: UploadRequest, cfg: HubConfig): Promise<Record<string, unknown>>;
 export declare function uploadFile(path: string, opts: UploadOpts): Promise<void>;

package/dist/commands/upload.js

@@ -9,24 +9,49 @@
  * Usage:
  *   synap upload ./report.pdf
  *   synap upload ./logo.png --title "Brand logo" --workspace <id>
+ *   synap upload ./logo.svg --profile brand-asset --prop variant=dark
+ *   synap upload ./launch.mp4 --workspace <id>      # >10MB → presigned lane
  *   synap upload ./spec.pdf --attach <entityId>   # also link doc → entity
  *
  * API:
- *   POST /api/hub/files  (multipart)  — field `file` (≤10MB) + REQUIRED
- *                                       workspaceId (membership-gated) +
- *                                       optional title → { fileEntityId, documentId }
+ *   POST /api/hub/files  (multipart)  — ≤10MB (fonts ≤5MB): field `file` +
+ *                                       workspaceId (membership-gated) + optional
+ *                                       title / profileSlug / properties /
+ *                                       targetWorkspaceId → { fileEntityId, documentId }
+ *   POST /api/hub/files/uploads       — >10MB: presigned PUT URL (caps per mime:
+ *        PUT <uploadUrl>                video 500MB · audio 100MB · zip 200MB);
+ *   POST /api/hub/files/uploads/finalize  the bytes go straight to storage, then
+ *                                       finalize mints the entity (same shape).
  *   POST /api/hub/relations           — with --attach: `references` relation
  *                                       from the target entity to the new doc.
+ *
+ * `--workspace` is an EXPLICIT placement pin (sent as `targetWorkspaceId`).
+ * Without it the configured workspace is only context, and a pod-scope kind
+ * such as `file` lands pod-wide — which is why `--workspace` used to look
+ * ignored (the entity came back with workspaceId null).
  */
 import { readFileSync } from "fs";
 import { basename, extname } from "path";
 import { log } from "../utils/logger.js";
-import { resolveHubConfig, resolveUserId, hubPostMultipart, renderHubError, } from "../lib/hub-client.js";
+import { resolveHubConfig, resolveUserId, hubPost, hubPostMultipart, renderHubError, } from "../lib/hub-client.js";
 import { writeGovernance } from "../lib/capture-lane.js";
 import { createRelation } from "./data.js";
 import { openInBrowser } from "./open.js";
-/** Mirror of the pinned /api/hub/files contract: reject >10MB before the round-trip. */
-const MAX_UPLOAD_BYTES = 10 * 1024 * 1024;
+const MB = 1024 * 1024;
+/** The buffered multipart door's ceiling (the pod holds that body in memory). */
+const MAX_BUFFERED_BYTES = 10 * MB;
+/** Mirror of the pod's per-mime caps (C4) — refuse before any round-trip. */
+export function maxUploadBytesForMime(mime) {
+    if (mime.startsWith("video/"))
+        return 500 * MB;
+    if (mime.startsWith("audio/"))
+        return 100 * MB;
+    if (mime === "application/zip")
+        return 200 * MB;
+    if (mime.startsWith("font/"))
+        return 5 * MB;
+    return MAX_BUFFERED_BYTES;
+}
 /** Best-effort extension → mime. Backend accepts arbitrary mime; octet-stream is the safe default. */
 const MIME = {
     ".md": "text/markdown",
@@ -51,11 +76,75 @@ const MIME = {
     ".ogg": "audio/ogg",
     ".mp4": "video/mp4",
     ".mov": "video/quicktime",
+    ".webm": "video/webm",
     ".zip": "application/zip",
+    ".woff2": "font/woff2",
+    ".woff": "font/woff",
+    ".ttf": "font/ttf",
+    ".otf": "font/otf",
 };
-function mimeFor(path) {
+export function mimeFor(path) {
     return MIME[extname(path).toLowerCase()] ?? "application/octet-stream";
 }
+/** `--prop key=value` (repeatable) → the entity `properties` object. */
+export function parseProps(pairs) {
+    const out = {};
+    for (const pair of pairs ?? []) {
+        const i = pair.indexOf("=");
+        if (i <= 0)
+            throw new Error(`--prop expects key=value, got "${pair}"`);
+        out[pair.slice(0, i)] = pair.slice(i + 1);
+    }
+    return out;
+}
+/**
+ * Pick the lane by size: the buffered multipart door up to 10MB, the presigned
+ * lane above it (request → PUT straight to storage → finalize). Both answer
+ * `{ fileEntityId, documentId }` or a governed `proposed` handle.
+ */
+export async function sendUpload(req, cfg) {
+    const hasProps = Object.keys(req.properties).length > 0;
+    if (req.buf.byteLength <= MAX_BUFFERED_BYTES) {
+        const form = new FormData();
+        form.append("file", new File([req.buf], req.filename, { type: req.mimeType }));
+        if (req.workspaceId)
+            form.append("workspaceId", req.workspaceId);
+        if (req.targetWorkspaceId)
+            form.append("targetWorkspaceId", req.targetWorkspaceId);
+        if (req.title)
+            form.append("title", req.title);
+        if (req.profileSlug)
+            form.append("profileSlug", req.profileSlug);
+        if (hasProps)
+            form.append("properties", JSON.stringify(req.properties));
+        return (await hubPostMultipart("/files", form, cfg));
+    }
+    const ticket = (await hubPost("/files/uploads", {
+        workspaceId: req.workspaceId,
+        ...(req.targetWorkspaceId ? { targetWorkspaceId: req.targetWorkspaceId } : {}),
+        filename: req.filename,
+        mimeType: req.mimeType,
+        size: req.buf.byteLength,
+    }, cfg));
+    // Straight to object storage — signed for exactly this type and length.
+    const put = await fetch(ticket.uploadUrl, {
+        method: "PUT",
+        headers: { ...(ticket.headers ?? {}), "Content-Type": req.mimeType },
+        body: req.buf,
+        signal: AbortSignal.timeout(30 * 60_000),
+    });
+    if (!put.ok) {
+        const detail = await put.text().catch(() => "");
+        throw new Error(`Upload to storage failed (HTTP ${put.status})${detail ? `: ${detail.slice(0, 300)}` : ""}`);
+    }
+    return (await hubPost("/files/uploads/finalize", {
+        uploadToken: ticket.uploadToken,
+        ...(req.title ? { title: req.title } : {}),
+        ...(req.profileSlug ? { profileSlug: req.profileSlug } : {}),
+        ...(hasProps ? { properties: req.properties } : {}),
+        ...(req.targetWorkspaceId ? { targetWorkspaceId: req.targetWorkspaceId } : {}),
+    }, cfg, 60_000));
+}
 export async function uploadFile(path, opts) {
     try {
         const cfg = await resolveHubConfig(opts);
@@ -78,19 +167,32 @@ export async function uploadFile(path, opts) {
             log.error(`File is empty: ${path}`);
             process.exit(1);
         }
-        if (buf.byteLength > MAX_UPLOAD_BYTES) {
-            log.error(`File too large: ${(buf.byteLength / 1024 / 1024).toFixed(1)}MB — the pod accepts up to 10MB.`);
+        const filename = basename(path);
+        const mimeType = mimeFor(path);
+        const cap = maxUploadBytesForMime(mimeType);
+        if (buf.byteLength > cap) {
+            log.error(`File too large: ${(buf.byteLength / MB).toFixed(1)}MB — the pod accepts up to ${cap / MB}MB for ${mimeType}.`);
             process.exit(1);
         }
-        const filename = basename(path);
-        const form = new FormData();
-        // Field name + optional fields per the pinned /api/hub/files contract.
-        form.append("file", new File([buf], filename, { type: mimeFor(path) }));
-        if (workspaceId)
-            form.append("workspaceId", workspaceId);
-        if (opts.title)
-            form.append("title", opts.title);
-        const res = (await hubPostMultipart("/files", form, cfg));
+        let properties;
+        try {
+            properties = parseProps(opts.prop);
+        }
+        catch (e) {
+            log.error(e.message);
+            process.exit(1);
+        }
+        const res = await sendUpload({
+            buf,
+            filename,
+            mimeType,
+            workspaceId,
+            // Only an explicit --workspace pins; the configured default stays context.
+            targetWorkspaceId: opts.workspace,
+            title: opts.title,
+            profileSlug: opts.profile,
+            properties,
+        }, cfg);
         const governance = writeGovernance(res);
         const fileEntityId = String(res.fileEntityId ?? "");
         const documentId = String(res.documentId ?? "");

package/dist/commands/upload.js.map

@@ -1 +1 @@
-{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/commands/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,cAAc,GACf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,wFAAwF;AACxF,MAAM,gBAAgB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAE1C,sGAAsG;AACtG,MAAM,IAAI,GAA2B;IACnC,KAAK,EAAE,eAAe;IACtB,WAAW,EAAE,eAAe;IAC5B,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EACL,yEAAyE;IAC3E,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AACzE,CAAC;AAYD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAgB;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,+EAA+E;QAC/E,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,CAAC;QAEtD,+EAA+E;QAC/E,8EAA8E;QAC9E,IAAI,GAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,qBAAqB,IAAI,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,GAAG,CAAC,UAAU,GAAG,gBAAgB,EAAE,CAAC;YACtC,GAAG,CAAC,KAAK,CACP,mBAAmB,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAC/F,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,uEAAuE;QACvE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACxE,IAAI,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,WAAW,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAEjD,MAAM,GAAG,GAAG,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAGvD,CAAC;QAEF,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAEhD,gFAAgF;QAChF,wEAAwE;QACxE,oFAAoF;QACpF,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAiB,EAAE,CAChD,cAAc,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,MAAO;YACpB,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,WAAW;YACtB,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEL,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,EACtE,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,uEAAuE;YACvE,IAAI,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;gBAC7D,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,mFAAmF;YACnF,GAAG,CAAC,IAAI,CAAC,WAAW,QAAQ,4BAA4B,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,UAAU;gBAAE,GAAG,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;YACrD,IAAI,GAAG,CAAC,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,GAAG,CAAC,GAAG,CACL,qGAAqG,CACtG,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,OAAO,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;QACrC,IAAI,YAAY;YAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;QAC7D,IAAI,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;QAEzD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,KAAK,CACP,wFAAwF,CACzF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,qEAAqE;QACrE,2EAA2E;QAC3E,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;YAC9B,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/commands/upload.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,IAAI,CAAC;AAClC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EACL,gBAAgB,EAChB,aAAa,EACb,OAAO,EACP,gBAAgB,EAChB,cAAc,GAEf,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE1C,MAAM,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACvB,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,CAAC;AAEnC,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,GAAG,EAAE,CAAC;IAC/C,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,GAAG,EAAE,CAAC;IAC/C,IAAI,IAAI,KAAK,iBAAiB;QAAE,OAAO,GAAG,GAAG,EAAE,CAAC;IAChD,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAG,EAAE,CAAC;IAC5C,OAAO,kBAAkB,CAAC;AAC5B,CAAC;AAED,sGAAsG;AACtG,MAAM,IAAI,GAA2B;IACnC,KAAK,EAAE,eAAe;IACtB,WAAW,EAAE,eAAe;IAC5B,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,UAAU;IAClB,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,iBAAiB;IACzB,MAAM,EAAE,oBAAoB;IAC5B,OAAO,EACL,yEAAyE;IAC3E,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,YAAY;IACpB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,iBAAiB;IACzB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,iBAAiB;IACzB,QAAQ,EAAE,YAAY;IACtB,OAAO,EAAE,WAAW;IACpB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;CACnB,CAAC;AAEF,MAAM,UAAU,OAAO,CAAC,IAAY;IAClC,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AACzE,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,UAAU,CAAC,KAA2B;IACpD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,IAAI,EAAE,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,IAAI,GAAG,CAAC,CAAC;QACvE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AA2BD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAkB,EAClB,GAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACxD,IAAI,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,kBAAkB,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;QAC/E,IAAI,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,GAAG,CAAC,iBAAiB;YAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,GAAG,CAAC,iBAAiB,CAAC,CAAC;QACnF,IAAI,GAAG,CAAC,KAAK;YAAE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,WAAW;YAAE,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;QACjE,IAAI,QAAQ;YAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;QACxE,OAAO,CAAC,MAAM,gBAAgB,CAAC,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAA4B,CAAC;IAClF,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAC3B,gBAAgB,EAChB;QACE,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,UAAU;KACzB,EACD,GAAG,CACJ,CAAiF,CAAC;IAEnF,wEAAwE;IACxE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE;QACxC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,QAAQ,EAAE;QACpE,IAAI,EAAE,GAAG,CAAC,GAAG;QACb,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,MAAM,CAAC;KACzC,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,kCAAkC,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAC5F,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,MAAM,OAAO,CACnB,yBAAyB,EACzB;QACE,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,GAAG,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,EACD,GAAG,EACH,MAAM,CACP,CAA4B,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAY,EAAE,IAAgB;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACzC,+EAA+E;QAC/E,4EAA4E;QAC5E,gFAAgF;QAChF,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC;QACzB,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,WAAW,CAAC;QAEtD,+EAA+E;QAC/E,8EAA8E;QAC9E,IAAI,GAAwB,CAAC;QAC7B,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC3B,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAC,qBAAqB,IAAI,MAAO,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YACjE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,IAAI,GAAG,CAAC,UAAU,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC;YACpC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC/B,MAAM,GAAG,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,GAAG,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC;YACzB,GAAG,CAAC,KAAK,CACP,mBAAmB,CAAC,GAAG,CAAC,UAAU,GAAG,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,GAAG,GAAG,EAAE,UAAU,QAAQ,GAAG,CAC/G,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,IAAI,UAAkC,CAAC;QACvC,IAAI,CAAC;YACH,UAAU,GAAG,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,GAAG,CAAC,KAAK,CAAE,CAAW,CAAC,OAAO,CAAC,CAAC;YAChC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B;YACE,GAAG;YACH,QAAQ;YACR,QAAQ;YACR,WAAW;YACX,2EAA2E;YAC3E,iBAAiB,EAAE,IAAI,CAAC,SAAS;YACjC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,WAAW,EAAE,IAAI,CAAC,OAAO;YACzB,UAAU;SACX,EACD,GAAG,CACJ,CAAC;QAEF,MAAM,UAAU,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;QACxC,MAAM,YAAY,GAAG,MAAM,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;QAEhD,gFAAgF;QAChF,wEAAwE;QACxE,oFAAoF;QACpF,MAAM,QAAQ,GAAG,CAAC,IAAa,EAAiB,EAAE,CAChD,cAAc,CAAC;YACb,MAAM,EAAE,IAAI,CAAC,MAAO;YACpB,MAAM,EAAE,YAAY;YACpB,IAAI,EAAE,YAAY;YAClB,SAAS,EAAE,WAAW;YACtB,IAAI;YACJ,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;QAEL,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,EACtE,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACF,uEAAuE;YACvE,IAAI,UAAU,KAAK,UAAU,IAAI,IAAI,CAAC,MAAM,IAAI,YAAY,EAAE,CAAC;gBAC7D,MAAM,QAAQ,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;YACD,OAAO;QACT,CAAC;QAED,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;YAC9B,mFAAmF;YACnF,GAAG,CAAC,IAAI,CAAC,WAAW,QAAQ,4BAA4B,CAAC,CAAC;YAC1D,MAAM,UAAU,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,UAAU;gBAAE,GAAG,CAAC,GAAG,CAAC,eAAe,UAAU,EAAE,CAAC,CAAC;YACrD,IAAI,GAAG,CAAC,SAAS;gBAAE,GAAG,CAAC,GAAG,CAAC,aAAa,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,GAAG,CAAC,GAAG,CACL,qGAAqG,CACtG,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QAED,GAAG,CAAC,OAAO,CAAC,aAAa,QAAQ,EAAE,CAAC,CAAC;QACrC,IAAI,YAAY;YAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,YAAY,EAAE,CAAC,CAAC;QAC7D,IAAI,UAAU;YAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,UAAU,EAAE,CAAC,CAAC;QAEzD,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,GAAG,CAAC,KAAK,CACP,wFAAwF,CACzF,CAAC;gBACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YACD,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACrC,CAAC;QAED,qEAAqE;QACrE,2EAA2E;QAC3E,6EAA6E;QAC7E,2EAA2E;QAC3E,IAAI,IAAI,CAAC,IAAI,IAAI,YAAY,EAAE,CAAC;YAC9B,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,cAAc,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/commands/vendor.d.ts

@@ -0,0 +1,28 @@
+/**
+ * `synap vendor` — the author's PUBLISHER PROFILE.
+ * ================================================
+ *
+ * A package is attributed to a vendor or to nobody. The CP's publish handler is
+ * `if (body.vendorId) { … }` with no else: it never auto-creates a vendor, never
+ * infers one from the session, and never back-fills attribution afterwards. So
+ * an author who publishes before creating a profile is orphaned permanently —
+ * their packages can never appear on `GET /api/vendors/:slug`, the page the
+ * landing site links as `/superpowers/by/<slug>`.
+ *
+ * The browser has always had this door (`PublishWizard`'s Publisher step, which
+ * blocks until a vendor exists). The CLI only ever READ one. This is the missing
+ * half — the same endpoint, the same field names.
+ *
+ * Transport lives in `lib/cp-packages.ts` (`createVendor` / `fetchMyVendorId`);
+ * this file is presentation + exit codes only.
+ */
+export declare function vendorCreate(slug: string, opts: {
+    json?: boolean;
+    name?: string;
+    description?: string;
+    website?: string;
+}): Promise<void>;
+/** `synap vendor show` — do I have a publisher profile, and what is published under it? */
+export declare function vendorShow(opts: {
+    json?: boolean;
+}): Promise<void>;

package/dist/commands/vendor.js

@@ -0,0 +1,110 @@
+/**
+ * `synap vendor` — the author's PUBLISHER PROFILE.
+ * ================================================
+ *
+ * A package is attributed to a vendor or to nobody. The CP's publish handler is
+ * `if (body.vendorId) { … }` with no else: it never auto-creates a vendor, never
+ * infers one from the session, and never back-fills attribution afterwards. So
+ * an author who publishes before creating a profile is orphaned permanently —
+ * their packages can never appear on `GET /api/vendors/:slug`, the page the
+ * landing site links as `/superpowers/by/<slug>`.
+ *
+ * The browser has always had this door (`PublishWizard`'s Publisher step, which
+ * blocks until a vendor exists). The CLI only ever READ one. This is the missing
+ * half — the same endpoint, the same field names.
+ *
+ * Transport lives in `lib/cp-packages.ts` (`createVendor` / `fetchMyVendorId`);
+ * this file is presentation + exit codes only.
+ */
+import chalk from "chalk";
+import { log } from "../utils/logger.js";
+import { createVendor, fetchMyVendorId, CpWriteError, } from "../lib/cp-packages.js";
+import { getCpUrl, getStoredToken } from "../lib/auth.js";
+/** `my-studio` → `My Studio` — a default `--name` when the author gives none. */
+function titleFromSlug(slug) {
+    return (slug
+        .split(/[-_]/)
+        .filter(Boolean)
+        .map((w) => w.charAt(0).toUpperCase() + w.slice(1))
+        .join(" ") || slug);
+}
+export async function vendorCreate(slug, opts) {
+    // Same rule as the CP's `createVendorSchema` — checked here so a typo costs a
+    // message rather than a round-trip and a raw zod error.
+    if (!/^[a-z][a-z0-9-]{1,63}$/.test(slug)) {
+        const message = "A publisher slug must be lowercase kebab-case, start with a letter, and be 2–64 characters.";
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: false, error: message, slug }, null, 2));
+        }
+        else {
+            log.error(message);
+            log.hint(`e.g. synap vendor create my-studio --name "My Studio"`);
+        }
+        process.exit(1);
+    }
+    const displayName = opts.name?.trim() || titleFromSlug(slug);
+    try {
+        const vendor = await createVendor({
+            slug,
+            displayName,
+            description: opts.description,
+            website: opts.website,
+        });
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: true, vendor }, null, 2));
+            return;
+        }
+        log.success(`Publisher profile ${chalk.bold(vendor.displayName)} created (@${vendor.slug}).`);
+        log.dim("Everything you publish from now on is attributed to it:");
+        log.dim(`  ${getCpUrl()}/api/vendors/${vendor.slug}`);
+        log.dim("Already published something? Publish it again — the CP attributes");
+        log.dim("on write and never back-fills.");
+    }
+    catch (e) {
+        if (e instanceof CpWriteError) {
+            if (opts.json) {
+                console.log(JSON.stringify({ ok: false, status: e.status, error: e.serverMessage, slug }, null, 2));
+            }
+            else {
+                log.error(`Could not create the publisher profile${e.status ? ` (HTTP ${e.status})` : ""}: ${e.serverMessage}`);
+                // The CP returns 409 for BOTH "you already have one" and "slug taken" —
+                // its message distinguishes them, so only add the next action.
+                if (e.status === 409)
+                    log.hint("Run: synap vendor show");
+                if (e.status === 401)
+                    log.hint("Run: synap login");
+            }
+            process.exit(1);
+        }
+        log.error(`Could not create the publisher profile: ${e.message}`);
+        process.exit(1);
+    }
+}
+/** `synap vendor show` — do I have a publisher profile, and what is published under it? */
+export async function vendorShow(opts) {
+    const token = getStoredToken()?.token;
+    if (!token) {
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: false, error: "not-logged-in" }, null, 2));
+        }
+        else {
+            log.error("Not logged in.");
+            log.hint("Run: synap login");
+        }
+        process.exit(1);
+    }
+    const id = await fetchMyVendorId(getCpUrl(), token);
+    if (opts.json) {
+        console.log(JSON.stringify({ ok: true, vendorId: id }, null, 2));
+        return;
+    }
+    if (!id) {
+        // A refusal that names the consequence, not just the absence.
+        log.warn("You have no publisher profile.");
+        log.hint("Packages you publish will be attributed to nobody, and the CP never back-fills.");
+        log.hint(`Create one: synap vendor create <slug> --name "<name>"`);
+        return;
+    }
+    log.success(`You have a publisher profile (id ${id}).`);
+}
+//# sourceMappingURL=vendor.js.map

package/dist/commands/vendor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor.js","sourceRoot":"","sources":["../../src/commands/vendor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,MAAM,OAAO,CAAC;AAC1B,OAAO,EAAE,GAAG,EAAE,MAAM,oBAAoB,CAAC;AACzC,OAAO,EACL,YAAY,EACZ,eAAe,EACf,YAAY,GACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE1D,iFAAiF;AACjF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,CACL,IAAI;SACD,KAAK,CAAC,MAAM,CAAC;SACb,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;SAClD,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAY,EACZ,IAKC;IAED,8EAA8E;IAC9E,wDAAwD;IACxD,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,MAAM,OAAO,GACX,6FAA6F,CAAC;QAChG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACnB,GAAG,CAAC,IAAI,CAAC,uDAAuD,CAAC,CAAC;QACpE,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;IAE7D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC;YAChC,IAAI;YACJ,WAAW;YACX,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC3D,OAAO;QACT,CAAC;QACD,GAAG,CAAC,OAAO,CACT,qBAAqB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,cAAc,MAAM,CAAC,IAAI,IAAI,CACjF,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,yDAAyD,CAAC,CAAC;QACnE,GAAG,CAAC,GAAG,CAAC,KAAK,QAAQ,EAAE,gBAAgB,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,mEAAmE,CAAC,CAAC;QAC7E,GAAG,CAAC,GAAG,CAAC,gCAAgC,CAAC,CAAC;IAC5C,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,YAAY,EAAE,CAAC;YAC9B,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gBACd,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,SAAS,CACZ,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,aAAa,EAAE,IAAI,EAAE,EAC7D,IAAI,EACJ,CAAC,CACF,CACF,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,KAAK,CACP,yCAAyC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,aAAa,EAAE,CACrG,CAAC;gBACF,wEAAwE;gBACxE,+DAA+D;gBAC/D,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;oBAAE,GAAG,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;gBACzD,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;oBAAE,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,2CAA4C,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAwB;IACvD,MAAM,KAAK,GAAG,cAAc,EAAE,EAAE,KAAK,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;YAC5B,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC/B,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,eAAe,CAAC,QAAQ,EAAE,EAAE,KAAM,CAAC,CAAC;IACrD,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,OAAO;IACT,CAAC;IACD,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,8DAA8D;QAC9D,GAAG,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;QAC3C,GAAG,CAAC,IAAI,CACN,iFAAiF,CAClF,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,wDAAwD,CAAC,CAAC;QACnE,OAAO;IACT,CAAC;IACD,GAAG,CAAC,OAAO,CAAC,oCAAoC,EAAE,IAAI,CAAC,CAAC;AAC1D,CAAC"}

package/dist/commands/versions.js

@@ -143,6 +143,12 @@ function isNewer(from, to) {
         name: "cmp",
         tags: [],
         isPrivate: false,
+        // `items` became required on `CatalogEntryBase` when the type split into a
+        // bundled/remote union (`@synap-core/workspace-templates` 0.11.0). This is a
+        // SYNTHETIC entry that exists only to reuse the shared version comparator —
+        // it summarises no real package, so `[]` is the honest value, exactly as the
+        // field's own contract prescribes for an entry that carries no cells.
+        items: [],
         source: "remote",
         remote: { slug: "__cmp__", name: "cmp", definition: { sourcePackage: { version: to } } },
     };