@tiangong-lca/cli 0.1.8 → 0.1.9

package/README.md

@@ -31,9 +31,9 @@ checkPaths:
   - test/auth-identity*.test.ts
   - test/public-auth-identity-receipt.test.ts
   - test/lca-release*.test.ts
-lastReviewedAt: 2026-09-02
-lastReviewedCommit: 3254d6167662121ca871090f6e57ff2a55578f28
-lastReviewedNote: 'Reviewed for Issue #266: published CLI 0.1.8 ships zero-config official Production login and complete custom/headless boundaries through the existing verified release path.'
+lastReviewedAt: 2026-09-04
+lastReviewedCommit: b15c074b1f10314e4835fd64cb7079c8aa9fec3d
+lastReviewedNote: 'Reviewed for CLI #272: release-only 0.1.9 after support export #270; runtime, dependencies, lock bytes, public exports and publication mechanics are unchanged.'
 ---
 
 # TianGong LCA CLI
@@ -189,6 +189,16 @@ The callback URI must exactly match the URI registered with the selected Supabas
 
 Local logout does not revoke the server grant. To invalidate every refresh token for the CLI client, open Account → Connected applications and disconnect TianGong CLI.
 
+## Canonical support export
+
+```sh
+tiangong-lca dataset support-cache export --out-dir ./new-support-export --expected-project-ref <project-ref> --expected-user-id <user-id> --json
+```
+
+Export visible flow properties and unit groups through the CLI OAuth session. The default state filter is `100`; repeat `--state-code` to request other RLS-scoped states. The directory must be new. Two complete ordered reads must agree before private row files and an atomic `export-report.json` completion marker are published. The report includes identity, counts and file hashes; its observed stability is not a database transaction snapshot.
+
+Limits are 100,000 rows per table, 1,000 pages per table scan, 8 MiB per response, 64 MiB total response bytes and a 120-second operation deadline. An incomplete or changed read fails without publishing a completion marker. Use a fresh directory for a new attempt; no business data is written.
+
 ## Auth Identity Receipt
 
 Use the identity receipt before a production-backed case or any later owner-draft write gate:

package/dist/src/cli.d.ts

@@ -1,5 +1,6 @@
 import type { DotEnvLoadResult } from './lib/dotenv.js';
 import type { FetchLike } from './lib/http.js';
+import { type RunDatasetSupportCacheExportOptions, type DatasetSupportCacheExportReport } from './lib/dataset-support-cache.js';
 import { inspectSupabaseAuthStatus, loginWithSupabaseOAuth, logoutSupabaseUserSession } from './lib/supabase-session.js';
 import { type AuthIdentityReceipt, type RunAuthIdentityReceiptOptions } from './lib/auth-identity-receipt.js';
 import { type LifecyclemodelAutoBuildReport, type RunLifecyclemodelAutoBuildOptions } from './lib/lifecyclemodel-auto-build.js';
@@ -68,6 +69,7 @@ import { runFlowIdentity } from './lib/dataset-maintenance-flow-identity-run.js'
 import { verifyFlowIdentity } from './lib/dataset-maintenance-flow-identity-verify.js';
 import { type DatasetSourceUploadAttachmentsReport, type RunDatasetSourceUploadAttachmentsOptions } from './lib/dataset-source-upload-attachments.js';
 export type CliDeps = {
+    runDatasetSupportCacheExportImpl?: (options: RunDatasetSupportCacheExportOptions) => Promise<DatasetSupportCacheExportReport>;
     env: NodeJS.ProcessEnv;
     dotEnvStatus: DotEnvLoadResult;
     fetchImpl: FetchLike;

package/dist/src/cli.js

@@ -3,6 +3,7 @@ import { buildDoctorReport, readRuntimeEnv } from './lib/env.js';
 import { CliError, toErrorPayload } from './lib/errors.js';
 import { stringifyJson } from './lib/io.js';
 import { loadCliPackageVersion } from './lib/package-version.js';
+import { runDatasetSupportCacheExport, } from './lib/dataset-support-cache.js';
 import { requireSupabaseRestRuntime } from './lib/supabase-client.js';
 import { inspectSupabaseAuthStatus, loginWithSupabaseOAuth, logoutSupabaseUserSession, } from './lib/supabase-session.js';
 import { OAUTH_LOGIN_TIMEOUT_MAX_MS } from './lib/oauth-loopback.js';
@@ -93,7 +94,7 @@ Implemented Commands:
   auth       login | status | whoami | doctor-auth | logout | identity-receipt
   search     flow | process | lifecyclemodel
   process    get | list | identity-preflight | build-plan | scope-statistics | dedup-review | auto-build | resume-build | publish-build | complete-required-fields | save-draft | batch-build | refresh-references | verify-rows
-  dataset    contract get | context-pack | classification children/path/audit/apply | curation-queue build/next/verify | import-lca convert | author | patch apply | save-draft | source upload-attachments | validate | verify-remote | bilingual extract/apply/validate | evidence-search plan/run | references rewrite/refresh-remote | maintenance clear-account/plan/apply/verify/flow-identity
+  dataset    support-cache export | contract get | context-pack | classification children/path/audit/apply | curation-queue build/next/verify | import-lca convert | author | patch apply | save-draft | source upload-attachments | validate | verify-remote | bilingual extract/apply/validate | evidence-search plan/run | references rewrite/refresh-remote | maintenance clear-account/plan/apply/verify/flow-identity
   flow       get | list | identity-preflight | build-plan | fetch-rows | materialize-decisions | remediate | publish-version | publish-reviewed-data | build-alias-map | scan-process-flow-refs | plan-process-flow-repairs | apply-process-flow-repairs | regen-product | validate-processes
   lifecyclemodel auto-build | validate-build | publish-build | save-draft | graph | build-resulting-process | publish-resulting-process | orchestrate
   qa         process | flow | lifecyclemodel
@@ -450,6 +451,7 @@ function renderDatasetHelp() {
   tiangong-lca dataset <subcommand> [options]
 
 Implemented Subcommands:
+  support-cache export Export complete observed canonical support rows through OAuth
   contract get        Write TIDAS schema / methodology / ruleset contract artifacts
   context-pack        Write an AI-ready TIDAS contract context pack
   classification       Navigate bundled TIDAS classification schemas or apply selected classifications
@@ -6321,6 +6323,46 @@ export async function executeCli(argv, deps) {
                 stderr: '',
             };
         }
+        if (command === 'dataset' && subcommand === 'support-cache') {
+            const help = 'Usage: tiangong-lca dataset support-cache export --out-dir <fresh-dir> [--state-code <int>] [--page-size <1..5000>] [--timeout-ms <1..120000>] [--expected-project-ref <ref>] [--expected-user-id <uuid>] [--json]';
+            const action = commandArgs[0];
+            if (!action || action === '--help' || action === '-h')
+                return { exitCode: 0, stdout: help + '\n', stderr: '' };
+            if (action !== 'export')
+                throw new CliError('dataset support-cache action must be export.', {
+                    code: 'DATASET_SUPPORT_CACHE_ACTION_INVALID',
+                    exitCode: 2,
+                });
+            const { values } = parseArgs({
+                args: commandArgs.slice(1),
+                strict: true,
+                allowPositionals: false,
+                options: {
+                    'out-dir': { type: 'string' },
+                    'state-code': { type: 'string', multiple: true },
+                    'page-size': { type: 'string' },
+                    'timeout-ms': { type: 'string' },
+                    'expected-project-ref': { type: 'string' },
+                    'expected-user-id': { type: 'string' },
+                    json: { type: 'boolean' },
+                    help: { type: 'boolean', short: 'h' },
+                },
+            });
+            if (values.help)
+                return { exitCode: 0, stdout: help + '\n', stderr: '' };
+            const report = await (deps.runDatasetSupportCacheExportImpl ?? runDatasetSupportCacheExport)({
+                outDir: values['out-dir'] ?? '',
+                env: deps.env,
+                fetchImpl: deps.fetchImpl,
+                cliVersion: loadCliPackageVersion(import.meta.url),
+                stateCodes: values['state-code']?.map((value) => value.trim() ? Number(value) : Number.NaN),
+                pageSize: values['page-size'] === undefined ? undefined : Number(values['page-size']),
+                timeoutMs: values['timeout-ms'] === undefined ? undefined : Number(values['timeout-ms']),
+                expectedProjectRef: values['expected-project-ref'],
+                expectedUserId: values['expected-user-id'],
+            });
+            return { exitCode: 0, stdout: stringifyJson(report, values.json ?? false), stderr: '' };
+        }
         if (command === 'dataset' && subcommand === 'verify-remote') {
             const datasetFlags = parseDatasetRemoteVerifyFlags(commandArgs);
             if (datasetFlags.help) {