harvask-cli 0.4.0 → 0.6.0

package/dist/commands/workspace/index.js

@@ -0,0 +1,240 @@
+/**
+ * workspace カテゴリ（AI ワークスペース, /v1/projects/{project}/workspace）。
+ *
+ * ローカルにある既存プロジェクトを、プロジェクトの AI ワークスペース
+ * （Web の Files タブ＝AI セッションの `~/work`）へまとめて投入する。
+ * 契約の正本は project-management-tool の docs/features/workspace-file-api.md。
+ *
+ * ここだけ他カテゴリと形が違う（ApiCall を 1 本返すのではなく、preflight → 複数バッチの
+ * multipart POST という手順になる）。判定はすべて collect.ts / batch.ts の純粋関数に寄せ、
+ * このファイルは手順と出力の組み立てに徹する。
+ */
+import { resolve } from 'node:path';
+import { statSync } from 'node:fs';
+import { parseProjectArg, requireConfirmation } from '../_exec.js';
+import { resolveProjectId } from '../../utils/project-resolver.js';
+import { printOutput } from '../../output/index.js';
+import { ValidationError } from '../../errors/index.js';
+import { parseIntArg } from '../../utils/input.js';
+import { buildFilesFormData } from '../../utils/upload.js';
+import { API_NS } from '../../api-base.js';
+import { collectFiles, detectProtectedPaths, joinWorkspacePath, normalizeDestPath, shouldAbortForInvalid, } from './collect.js';
+import { chunk, DEFAULT_MAX_BATCH_BYTES, MAX_FILE_BYTES, MAX_PREFLIGHT_PATHS, partitionOversized, planBatches, totalBytes, } from './batch.js';
+/** `post_max_size`（1GB）。--max-batch-bytes をこれ以上にしても 413 になるだけ。 */
+const POST_MAX_SIZE = 1024 * 1024 * 1024;
+/** 出力に載せるサンプル件数（全部出すと数千行になるため）。 */
+const SAMPLE_LIMIT = 10;
+function collectRepeatable(value, previous) {
+    return previous.concat([value]);
+}
+function sample(items) {
+    const head = items.slice(0, SAMPLE_LIMIT).join(', ');
+    return items.length > SAMPLE_LIMIT ? `${head}, … (+${items.length - SAMPLE_LIMIT} more)` : head;
+}
+/**
+ * バッチのサイズからリクエストタイムアウトを決める。
+ * 既定の 120 秒固定では 100MB 級のバッチが上り帯域次第で必ず落ちる（しかもリトライで倍払う）。
+ */
+function timeoutForBytes(bytes) {
+    const megabytes = Math.ceil(bytes / (1024 * 1024));
+    return Math.min(120_000 + megabytes * 2_000, 900_000);
+}
+/**
+ * preflight を MAX_PREFLIGHT_PATHS 件ずつ投げて結果をまとめる。
+ */
+async function preflightAll(client, projectId, paths, dest) {
+    const merged = {
+        conflicts: [],
+        blocked: [],
+        invalid: [],
+        blocked_extensions: [],
+    };
+    for (const part of chunk(paths, MAX_PREFLIGHT_PATHS)) {
+        const body = { paths: part };
+        if (dest !== '') {
+            body.path = dest;
+        }
+        const res = await client.post(`${API_NS}/projects/${projectId}/workspace/upload/preflight`, body);
+        merged.conflicts.push(...(res.conflicts ?? []));
+        merged.blocked.push(...(res.blocked ?? []));
+        merged.invalid.push(...(res.invalid ?? []));
+        if (merged.blocked_extensions.length === 0) {
+            merged.blocked_extensions = res.blocked_extensions ?? [];
+        }
+    }
+    return merged;
+}
+export const workspaceModule = {
+    name: 'workspace',
+    describe: 'AI workspace (push a local directory into the project workspace)',
+    register(program, ctx) {
+        const ws = program
+            .command('workspace')
+            .description('AI workspace (Files tab / ~/work in AI sessions)');
+        ws.command('push')
+            .description('Push a local directory into the project AI workspace')
+            .argument('<dir>', 'local directory to push')
+            .option('-p, --project <key|id>', 'project key (PRJ) or numeric id')
+            .option('--dest <path>', 'destination directory inside the workspace (default: root)')
+            .option('--dry-run', 'preflight only: print the plan and send no bytes')
+            .option('--include-ignored', 'ignore .gitignore and the default excludes (.env* stays excluded)')
+            .option('--exclude <glob>', 'additional exclude (repeatable)', collectRepeatable, [])
+            .option('--include <glob>', 'restore a default-excluded path (repeatable)', collectRepeatable, [])
+            .option('--force', 'allow pushing into apps/ or canvas/')
+            .option('--max-batch-bytes <n>', 'max total bytes per request (default 200MB)', parseIntArg)
+            .option('--yes', 'approve overwrites in non-interactive mode')
+            .addHelpText('after', `
+Sends a local tree to the project workspace (Web: Files tab, AI sessions: ~/work).
+Same relative path = overwrite; there is no version history. Always --dry-run first.
+
+  harvask workspace push ./legacy-app -p PRJ --dest legacy --dry-run
+  harvask workspace push ./legacy-app -p PRJ --dest legacy
+
+Excluded no matter what: .env* and .git/ (the workspace is visible to every member).
+Excluded by default (--include-ignored / --include <glob> to restore):
+node_modules/ vendor/ dist/ build/ __pycache__/ .venv/ .DS_Store
+In a git repository, .gitignore decides the rest.
+
+Windows binaries (.exe .bat .cmd .ps1 .vbs .com .msi .dll) cannot be stored: they
+are reported under "skipped", not treated as an error. .sh is allowed.
+
+Batches are not atomic. If it fails partway, the result JSON lists "remaining";
+re-running the same command resumes (re-uploading overwrites).
+A live mini-app / browser-agent session makes this fail with 409 — end the
+session instead of retrying, or the upload is silently rolled back.
+`)
+            .action(async (dirArg, opts) => {
+            const root = resolve(dirArg);
+            let rootStat;
+            try {
+                rootStat = statSync(root);
+            }
+            catch (e) {
+                throw new ValidationError(`Directory not found or unreadable: ${root} (${e.message})`);
+            }
+            if (!rootStat.isDirectory()) {
+                throw new ValidationError(`Not a directory: ${root}`);
+            }
+            const dest = normalizeDestPath(opts.dest);
+            const maxBatchBytes = opts.maxBatchBytes ?? DEFAULT_MAX_BATCH_BYTES;
+            if (maxBatchBytes < 1 || maxBatchBytes > POST_MAX_SIZE) {
+                throw new ValidationError(`--max-batch-bytes must be between 1 and ${POST_MAX_SIZE} (post_max_size)`);
+            }
+            // 1. ローカルを集める（ネットワークより先に。引数の誤りはここで落とす）
+            const collected = collectFiles(root, {
+                includeIgnored: Boolean(opts.includeIgnored),
+                exclude: opts.exclude,
+                include: opts.include,
+            });
+            const sized = partitionOversized(collected.files);
+            const excluded = [
+                ...collected.excluded,
+                ...sized.oversized.map((f) => ({
+                    path: f.path,
+                    reason: 'too_large',
+                    detail: `${f.size} bytes > ${MAX_FILE_BYTES} (per-file limit)`,
+                })),
+            ];
+            const client = ctx.getApiClient();
+            const projectId = await resolveProjectId(client, parseProjectArg(opts.project) ?? {});
+            if (sized.ok.length === 0) {
+                printOutput({
+                    project_id: projectId,
+                    dest,
+                    source: collected.source,
+                    planned: 0,
+                    uploaded: 0,
+                    overwritten: 0,
+                    skipped: [],
+                    excluded,
+                    batches: { total: 0, completed: 0 },
+                    remaining: [],
+                    note: 'nothing to push (everything was excluded or the directory is empty)',
+                }, ctx.out);
+                return;
+            }
+            // 2. preflight（何が上書きになり、何が置けないか）
+            const pre = await preflightAll(client, projectId, sized.ok.map((f) => f.path), dest);
+            if (shouldAbortForInvalid(pre.invalid)) {
+                // 1 件でも不正なパスがあると upload は丸ごと 422 になる。部分的には送らない。
+                throw new ValidationError(`${pre.invalid.length} path(s) cannot be stored in the workspace: ${sample(pre.invalid)}`);
+            }
+            const blocked = new Set(pre.blocked.map((b) => b.path));
+            const files = sized.ok.filter((f) => !blocked.has(f.path));
+            const skipped = pre.blocked.map((b) => ({
+                path: b.path,
+                reason: 'blocked_extension',
+                extension: b.extension,
+            }));
+            const protectedHits = detectProtectedPaths(files.map((f) => joinWorkspacePath(dest, f.path)));
+            if (protectedHits.length > 0 && !opts.force) {
+                throw new ValidationError(`${protectedHits.length} path(s) would land under apps/ or canvas/, where mini-app sources, their SQLite data and Canvas documents live: ${sample(protectedHits)}. Use a different --dest, or --force if you really mean it.`);
+            }
+            const conflicts = new Set(pre.conflicts);
+            const willOverwrite = files.filter((f) => conflicts.has(f.path)).length;
+            const batches = planBatches(files, { maxBytes: maxBatchBytes });
+            if (opts.dryRun) {
+                printOutput({
+                    dry_run: true,
+                    project_id: projectId,
+                    dest,
+                    source: collected.source,
+                    planned: files.length,
+                    would_create: files.length - willOverwrite,
+                    would_overwrite: willOverwrite,
+                    total_bytes: totalBytes(files),
+                    batches: { total: batches.length },
+                    protected: protectedHits,
+                    skipped,
+                    excluded,
+                }, ctx.out);
+                return;
+            }
+            // 上書きの承認は 1 バイトも送らない --dry-run の後で聞く（計画を見るのに --yes は要らない）
+            if (willOverwrite > 0) {
+                requireConfirmation(opts, `overwrite ${willOverwrite} existing workspace file(s)`);
+            }
+            // 3. 投入。バッチ間は原子的でないので、落ちたら未送信分を remaining に載せて終わる
+            //    （同名は上書きなので、同じコマンドをもう一度流せばそこから再開になる）
+            const uploaded = [];
+            let overwritten = 0;
+            let completed = 0;
+            let remaining = files.map((f) => f.path);
+            const result = () => ({
+                project_id: projectId,
+                dest,
+                source: collected.source,
+                planned: files.length,
+                uploaded: uploaded.length,
+                overwritten,
+                skipped,
+                excluded,
+                batches: { total: batches.length, completed },
+                remaining,
+            });
+            try {
+                for (const batch of batches) {
+                    const form = buildFilesFormData(batch, dest);
+                    const res = await client.postMultipart(`${API_NS}/projects/${projectId}/workspace/upload`, form, { timeout: timeoutForBytes(totalBytes(batch)) });
+                    completed++;
+                    for (const item of res.uploaded ?? []) {
+                        uploaded.push(item.path);
+                    }
+                    for (const item of res.skipped ?? []) {
+                        skipped.push(item);
+                    }
+                    overwritten += batch.filter((f) => conflicts.has(f.path)).length;
+                    const done = new Set(batch.map((f) => f.path));
+                    remaining = remaining.filter((p) => !done.has(p));
+                }
+            }
+            catch (err) {
+                // 結果は stdout（再開に使う remaining を含む）、理由は stderr（Error/Why/Hint）
+                printOutput(result(), ctx.out);
+                throw err;
+            }
+            printOutput(result(), ctx.out);
+        });
+    },
+};
+//# sourceMappingURL=index.js.map

package/dist/commands/workspace/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/commands/workspace/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAInC,OAAO,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAC3C,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,GAGtB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,KAAK,EACL,uBAAuB,EACvB,cAAc,EACd,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,UAAU,GACX,MAAM,YAAY,CAAC;AAEpB,kEAAkE;AAClE,MAAM,aAAa,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzC,mCAAmC;AACnC,MAAM,YAAY,GAAG,EAAE,CAAC;AAoBxB,SAAS,iBAAiB,CAAC,KAAa,EAAE,QAAkB;IAC1D,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,MAAM,CAAC,KAAe;IAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrD,OAAO,KAAK,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,KAAK,CAAC,MAAM,GAAG,YAAY,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAClG,CAAC;AAED;;;GAGG;AACH,SAAS,eAAe,CAAC,KAAa;IACpC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;IACnD,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,SAAS,GAAG,KAAK,EAAE,OAAO,CAAC,CAAC;AACxD,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,YAAY,CACzB,MAAwB,EACxB,SAAiB,EACjB,KAAe,EACf,IAAY;IAEZ,MAAM,MAAM,GAAgC;QAC1C,SAAS,EAAE,EAAE;QACb,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,kBAAkB,EAAE,EAAE;KACvB,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACtD,IAAI,IAAI,KAAK,EAAE,EAAE,CAAC;YAChB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAC3B,GAAG,MAAM,aAAa,SAAS,6BAA6B,EAC5D,IAAI,CACL,CAAC;QACF,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC;QAC3D,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAmB;IAC7C,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,kEAAkE;IAC5E,QAAQ,CAAC,OAAgB,EAAE,GAAmB;QAC5C,MAAM,EAAE,GAAG,OAAO;aACf,OAAO,CAAC,WAAW,CAAC;aACpB,WAAW,CAAC,kDAAkD,CAAC,CAAC;QAEnE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;aACf,WAAW,CAAC,sDAAsD,CAAC;aACnE,QAAQ,CAAC,OAAO,EAAE,yBAAyB,CAAC;aAC5C,MAAM,CAAC,wBAAwB,EAAE,iCAAiC,CAAC;aACnE,MAAM,CAAC,eAAe,EAAE,4DAA4D,CAAC;aACrF,MAAM,CAAC,WAAW,EAAE,kDAAkD,CAAC;aACvE,MAAM,CAAC,mBAAmB,EAAE,mEAAmE,CAAC;aAChG,MAAM,CAAC,kBAAkB,EAAE,iCAAiC,EAAE,iBAAiB,EAAE,EAAE,CAAC;aACpF,MAAM,CAAC,kBAAkB,EAAE,8CAA8C,EAAE,iBAAiB,EAAE,EAAE,CAAC;aACjG,MAAM,CAAC,SAAS,EAAE,qCAAqC,CAAC;aACxD,MAAM,CAAC,uBAAuB,EAAE,6CAA6C,EAAE,WAAW,CAAC;aAC3F,MAAM,CAAC,OAAO,EAAE,4CAA4C,CAAC;aAC7D,WAAW,CACV,OAAO,EACP;;;;;;;;;;;;;;;;;;;CAmBP,CACM;aACA,MAAM,CAAC,KAAK,EAAE,MAAc,EAAE,IAAI,EAAE,EAAE;YACrC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;YAC7B,IAAI,QAAQ,CAAC;YACb,IAAI,CAAC;gBACH,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,eAAe,CAAC,sCAAsC,IAAI,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;YACpG,CAAC;YACD,IAAI,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC5B,MAAM,IAAI,eAAe,CAAC,oBAAoB,IAAI,EAAE,CAAC,CAAC;YACxD,CAAC;YAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC1C,MAAM,aAAa,GAAW,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;YAC5E,IAAI,aAAa,GAAG,CAAC,IAAI,aAAa,GAAG,aAAa,EAAE,CAAC;gBACvD,MAAM,IAAI,eAAe,CACvB,2CAA2C,aAAa,kBAAkB,CAC3E,CAAC;YACJ,CAAC;YAED,uCAAuC;YACvC,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,EAAE;gBACnC,cAAc,EAAE,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC;gBAC5C,OAAO,EAAE,IAAI,CAAC,OAAmB;gBACjC,OAAO,EAAE,IAAI,CAAC,OAAmB;aAClC,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAoB;gBAChC,GAAG,SAAS,CAAC,QAAQ;gBACrB,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7B,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,MAAM,EAAE,WAAoB;oBAC5B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,YAAY,cAAc,mBAAmB;iBAC/D,CAAC,CAAC;aACJ,CAAC;YAEF,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,CAAC;YAClC,MAAM,SAAS,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;YAEtF,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,WAAW,CACT;oBACE,UAAU,EAAE,SAAS;oBACrB,IAAI;oBACJ,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,OAAO,EAAE,CAAC;oBACV,QAAQ,EAAE,CAAC;oBACX,WAAW,EAAE,CAAC;oBACd,OAAO,EAAE,EAAE;oBACX,QAAQ;oBACR,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE;oBACnC,SAAS,EAAE,EAAE;oBACb,IAAI,EAAE,qEAAqE;iBAC5E,EACD,GAAG,CAAC,GAAG,CACR,CAAC;gBACF,OAAO;YACT,CAAC;YAED,iCAAiC;YACjC,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,MAAM,EACN,SAAS,EACT,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAC3B,IAAI,CACL,CAAC;YAEF,IAAI,qBAAqB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACvC,gDAAgD;gBAChD,MAAM,IAAI,eAAe,CACvB,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,+CAA+C,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAC1F,CAAC;YACJ,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxD,MAAM,KAAK,GAAgB,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACxE,MAAM,OAAO,GAAmB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBACtD,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,MAAM,EAAE,mBAAmB;gBAC3B,SAAS,EAAE,CAAC,CAAC,SAAS;aACvB,CAAC,CAAC,CAAC;YAEJ,MAAM,aAAa,GAAG,oBAAoB,CACxC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAClD,CAAC;YACF,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAC5C,MAAM,IAAI,eAAe,CACvB,GAAG,aAAa,CAAC,MAAM,oHAAoH,MAAM,CAAC,aAAa,CAAC,6DAA6D,CAC9N,CAAC;YACJ,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,aAAa,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;YACxE,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC,CAAC;YAEhE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;gBAChB,WAAW,CACT;oBACE,OAAO,EAAE,IAAI;oBACb,UAAU,EAAE,SAAS;oBACrB,IAAI;oBACJ,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,OAAO,EAAE,KAAK,CAAC,MAAM;oBACrB,YAAY,EAAE,KAAK,CAAC,MAAM,GAAG,aAAa;oBAC1C,eAAe,EAAE,aAAa;oBAC9B,WAAW,EAAE,UAAU,CAAC,KAAK,CAAC;oBAC9B,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE;oBAClC,SAAS,EAAE,aAAa;oBACxB,OAAO;oBACP,QAAQ;iBACT,EACD,GAAG,CAAC,GAAG,CACR,CAAC;gBACF,OAAO;YACT,CAAC;YAED,0DAA0D;YAC1D,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;gBACtB,mBAAmB,CAAC,IAAI,EAAE,aAAa,aAAa,6BAA6B,CAAC,CAAC;YACrF,CAAC;YAED,kDAAkD;YAClD,yCAAyC;YACzC,MAAM,QAAQ,GAAa,EAAE,CAAC;YAC9B,IAAI,WAAW,GAAG,CAAC,CAAC;YACpB,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,IAAI,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAEzC,MAAM,MAAM,GAAG,GAA4B,EAAE,CAAC,CAAC;gBAC7C,UAAU,EAAE,SAAS;gBACrB,IAAI;gBACJ,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,OAAO,EAAE,KAAK,CAAC,MAAM;gBACrB,QAAQ,EAAE,QAAQ,CAAC,MAAM;gBACzB,WAAW;gBACX,OAAO;gBACP,QAAQ;gBACR,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE;gBAC7C,SAAS;aACV,CAAC,CAAC;YAEH,IAAI,CAAC;gBACH,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;oBAC5B,MAAM,IAAI,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;oBAC7C,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,aAAa,CACpC,GAAG,MAAM,aAAa,SAAS,mBAAmB,EAClD,IAAI,EACJ,EAAE,OAAO,EAAE,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAChD,CAAC;oBACF,SAAS,EAAE,CAAC;oBACZ,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC;wBACtC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBAC3B,CAAC;oBACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;wBACrC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,CAAC;oBACD,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;oBACjE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC/C,SAAS,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,6DAA6D;gBAC7D,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC/B,MAAM,GAAG,CAAC;YACZ,CAAC;YAED,WAAW,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC,CAAC,CAAC;IACP,CAAC;CACF,CAAC"}

package/dist/errors/hint-map.js

@@ -49,7 +49,41 @@ export function hintFor(e) {
                 why: apiMessage ?? 'Resource not found.',
                 hint: 'Verify the id/key (e.g. project key PRJ, issue key PRJ-123). Use `harvask project list` / `harvask issue search` to find valid ids.',
             };
+        case 409:
+            if (code === 'workspace_session_active') {
+                return {
+                    why: 'A mini-app / browser-agent session is live for this project; while it runs the workspace is synced from the session, so anything written now is silently rolled back.',
+                    hint: 'End that session, then run the command again. Do not retry on a timer — this is a guard, not a transient error.',
+                };
+            }
+            return {
+                why: apiMessage ?? e.message,
+                hint: 'The resource is locked or was changed by someone else. Re-read the current state before trying again.',
+            };
+        case 413:
+            return {
+                why: apiMessage ?? 'Request body too large (HTTP 413).',
+                hint: 'Send less per request (e.g. `workspace push --max-batch-bytes 52428800`). Already-sent files are listed in the result; "remaining" shows what is left.',
+            };
         case 422:
+            if (code === 'missing_chat_id') {
+                return {
+                    why: 'chat_message attachments identify the chat with the X-Chat-Id header, not a body field.',
+                    hint: 'Pass `--chat-id <id>` (find it with `harvask chat list`).',
+                };
+            }
+            if (code === 'handover_approval_required') {
+                return {
+                    why: 'This was generated by a handover and is still waiting for a human to approve it.',
+                    hint: 'Approve it in the handover review screen first. It cannot be activated or run from the CLI before that.',
+                };
+            }
+            if (code === 'cannot_overwrite_folder') {
+                return {
+                    why: 'A folder with that name already exists in the target directory.',
+                    hint: 'Rename the file, pick another --parent-id, or drop --on-conflict overwrite.',
+                };
+            }
             return {
                 why: formatValidationErrors(e.apiError?.errors) ?? apiMessage ?? e.message,
                 hint: 'Fix the listed fields. See `--help` for allowed values (issue_type/priority enums, title<=255, content<=500000).',

package/dist/errors/hint-map.js.map

@@ -1 +1 @@
-{"version":3,"file":"hint-map.js","sourceRoot":"","sources":["../../src/errors/hint-map.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,UAAU,sBAAsB,CAAC,MAAiC;IACtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAiB;IACvC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;IAEvC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,2BAA2B;gBAC9C,IAAI,EAAE,gEAAgE;aACvE,CAAC;QACJ,KAAK,GAAG;YACN,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,EAAE,6CAA6C;oBAClD,IAAI,EAAE,uGAAuG;iBAC9G,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAClC,OAAO;oBACL,GAAG,EAAE,uCAAuC;oBAC5C,IAAI,EAAE,2FAA2F;iBAClG,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAClC,OAAO;oBACL,GAAG,EAAE,qDAAqD;oBAC1D,IAAI,EAAE,sEAAsE;iBAC7E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,gBAAgB;gBACnC,IAAI,EAAE,4FAA4F;aACnG,CAAC;QACJ,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,qBAAqB;gBACxC,IAAI,EAAE,qIAAqI;aAC5I,CAAC;QACJ,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,OAAO;gBAC1E,IAAI,EAAE,kHAAkH;aACzH,CAAC;QACJ,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,0BAA0B;gBAC/B,IAAI,EAAE,2FAA2F;aAClG,CAAC;QACJ,KAAK,GAAG,CAAC;QACT,KAAK,CAAC;YACJ,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,OAAO;gBACd,IAAI,EAAE,0FAA0F;aACjG,CAAC;QACJ;YACE,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBACxB,OAAO;oBACL,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO;oBAC5B,IAAI,EAAE,gGAAgG;iBACvG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO;gBAC5B,IAAI,EAAE,oFAAoF;aAC3F,CAAC;IACN,CAAC;AACH,CAAC"}
+{"version":3,"file":"hint-map.js","sourceRoot":"","sources":["../../src/errors/hint-map.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AASH,MAAM,UAAU,sBAAsB,CAAC,MAAiC;IACtE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,GAAG,KAAK,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;SAC9D,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAiB;IACvC,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,CAAC;IAC9B,MAAM,UAAU,GAAG,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC;IAEvC,QAAQ,CAAC,CAAC,UAAU,EAAE,CAAC;QACrB,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,2BAA2B;gBAC9C,IAAI,EAAE,gEAAgE;aACvE,CAAC;QACJ,KAAK,GAAG;YACN,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,EAAE,6CAA6C;oBAClD,IAAI,EAAE,uGAAuG;iBAC9G,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAClC,OAAO;oBACL,GAAG,EAAE,uCAAuC;oBAC5C,IAAI,EAAE,2FAA2F;iBAClG,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAClC,OAAO;oBACL,GAAG,EAAE,qDAAqD;oBAC1D,IAAI,EAAE,sEAAsE;iBAC7E,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,gBAAgB;gBACnC,IAAI,EAAE,4FAA4F;aACnG,CAAC;QACJ,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,qBAAqB;gBACxC,IAAI,EAAE,qIAAqI;aAC5I,CAAC;QACJ,KAAK,GAAG;YACN,IAAI,IAAI,KAAK,0BAA0B,EAAE,CAAC;gBACxC,OAAO;oBACL,GAAG,EAAE,uKAAuK;oBAC5K,IAAI,EAAE,iHAAiH;iBACxH,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO;gBAC5B,IAAI,EAAE,uGAAuG;aAC9G,CAAC;QACJ,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,oCAAoC;gBACvD,IAAI,EAAE,wJAAwJ;aAC/J,CAAC;QACJ,KAAK,GAAG;YACN,IAAI,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBAC/B,OAAO;oBACL,GAAG,EAAE,yFAAyF;oBAC9F,IAAI,EAAE,2DAA2D;iBAClE,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;gBAC1C,OAAO;oBACL,GAAG,EAAE,kFAAkF;oBACvF,IAAI,EAAE,yGAAyG;iBAChH,CAAC;YACJ,CAAC;YACD,IAAI,IAAI,KAAK,yBAAyB,EAAE,CAAC;gBACvC,OAAO;oBACL,GAAG,EAAE,iEAAiE;oBACtE,IAAI,EAAE,6EAA6E;iBACpF,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,UAAU,IAAI,CAAC,CAAC,OAAO;gBAC1E,IAAI,EAAE,kHAAkH;aACzH,CAAC;QACJ,KAAK,GAAG;YACN,OAAO;gBACL,GAAG,EAAE,0BAA0B;gBAC/B,IAAI,EAAE,2FAA2F;aAClG,CAAC;QACJ,KAAK,GAAG,CAAC;QACT,KAAK,CAAC;YACJ,OAAO;gBACL,GAAG,EAAE,CAAC,CAAC,OAAO;gBACd,IAAI,EAAE,0FAA0F;aACjG,CAAC;QACJ;YACE,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;gBACxB,OAAO;oBACL,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO;oBAC5B,IAAI,EAAE,gGAAgG;iBACvG,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,GAAG,EAAE,UAAU,IAAI,CAAC,CAAC,OAAO;gBAC5B,IAAI,EAAE,oFAAoF;aAC3F,CAAC;IACN,CAAC;AACH,CAAC"}

package/dist/registry.js

@@ -21,6 +21,7 @@ import { scheduledTaskModule } from './commands/scheduled-task/index.js';
 import { chatModule } from './commands/chat/index.js';
 import { fileModule } from './commands/file/index.js';
 import { storageModule } from './commands/storage/index.js';
+import { workspaceModule } from './commands/workspace/index.js';
 import { attachmentModule } from './commands/attachment/index.js';
 import { skillModule } from './commands/skill/index.js';
 export const CATEGORIES = [
@@ -38,6 +39,7 @@ export const CATEGORIES = [
     chatModule,
     fileModule,
     storageModule,
+    workspaceModule,
     attachmentModule,
     siteCredentialModule,
     previewConfigModule,

package/dist/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,UAAU;IACV,aAAa;IACb,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,cAAc;IACd,UAAU;IACV,cAAc;IACd,mBAAmB;IACnB,UAAU;IACV,UAAU;IACV,aAAa;IACb,gBAAgB;IAChB,oBAAoB;IACpB,mBAAmB;IACnB,WAAW;IACX,SAAS;CACV,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AA4BH,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AAC9D,OAAO,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,eAAe,EAAE,MAAM,+BAA+B,CAAC;AAChE,OAAO,EAAE,gBAAgB,EAAE,MAAM,gCAAgC,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAExD,MAAM,CAAC,MAAM,UAAU,GAAqB;IAC1C,UAAU;IACV,aAAa;IACb,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,UAAU;IACV,eAAe;IACf,cAAc;IACd,UAAU;IACV,cAAc;IACd,mBAAmB;IACnB,UAAU;IACV,UAAU;IACV,aAAa;IACb,eAAe;IACf,gBAAgB;IAChB,oBAAoB;IACpB,mBAAmB;IACnB,WAAW;IACX,SAAS;CACV,CAAC"}

package/dist/utils/upload.js

@@ -29,4 +29,33 @@ export function buildFileFormData(filePath, fields = {}) {
     }
     return form;
 }
+/**
+ * 複数ファイルを `files[]` / `paths[]` として積む（workspace upload の API 仕様）。
+ *
+ * `paths[i]` はファイル名込みのフル相対パスで、`files[i]` と同順・同数でなければならない。
+ * 添付名は `basename(paths[i])` と一致させる（食い違うとサーバーが 422
+ * `path_filename_mismatch` を返す — 意図した場所に違う名前で置かれる事故を防ぐため）。
+ *
+ * @param basePath ワークスペース内のベースディレクトリ（空ならルート直下）
+ */
+export function buildFilesFormData(files, basePath = '') {
+    const form = new FormData();
+    for (const file of files) {
+        let buffer;
+        try {
+            buffer = readFileSync(file.absolute);
+        }
+        catch (e) {
+            throw new ValidationError(`File not found or unreadable: ${file.absolute} (${e.message})`);
+        }
+        const name = basename(file.path);
+        const blob = new Blob([new Uint8Array(buffer)], { type: getMimeType(name) });
+        form.append('files[]', blob, name);
+        form.append('paths[]', file.path);
+    }
+    if (basePath !== '') {
+        form.append('path', basePath);
+    }
+    return form;
+}
 //# sourceMappingURL=upload.js.map

package/dist/utils/upload.js.map

@@ -1 +1 @@
-{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/utils/upload.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,SAAsD,EAAE;IAExD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,iCAAiC,QAAQ,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"upload.js","sourceRoot":"","sources":["../../src/utils/upload.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAE9C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,QAAgB,EAChB,SAAsD,EAAE;IAExD,IAAI,MAAc,CAAC;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;IAClC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,eAAe,CAAC,iCAAiC,QAAQ,KAAM,CAAW,CAAC,OAAO,GAAG,CAAC,CAAC;IACnG,CAAC;IACD,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,0EAA0E;IAC1E,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7E,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,KAAgD,EAChD,QAAQ,GAAG,EAAE;IAEb,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;IAC5B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,MAAc,CAAC;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,eAAe,CACvB,iCAAiC,IAAI,CAAC,QAAQ,KAAM,CAAW,CAAC,OAAO,GAAG,CAC3E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAC7E,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,QAAQ,KAAK,EAAE,EAAE,CAAC;QACpB,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "harvask-cli",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "description": "Command-line client for a harvask tenant, built for coding agents",
   "type": "module",
   "bin": {

package/skills/harvask/AGENTS.md

@@ -40,6 +40,12 @@ If a command fails with an auth error (exit code 3), run `harvask login` again.
    harvask issue assign -p PRJ 1234 --assignee-id 42
    ```
 
+## Migrating an existing project
+
+Bringing a local directory (or another tool's export) into a harvask project has its own
+rules — where files should go, what must never be uploaded, and why a live session blocks
+writes. Read `migration.md` in this skill directory before pushing anything.
+
 ## project key vs id
 
 - Humans know the **key** (e.g. `PRJ`); the API uses a numeric **id**.
@@ -127,9 +133,10 @@ harvask issue bulk-create | bulk-update      (--items @file.json [--atomic])
 harvask wiki           list | show | create | update (--base-version required) | search | set-home | history | delete | bulk-create | bulk-update
 harvask milestone      list | create | update
 harvask workflow       list | show | create | update | execute (non-idempotent, --yes required non-interactively)
-harvask scheduled-task list | show | create | update | delete
+harvask scheduled-task list | show | create | update | execute (non-idempotent, --yes required non-interactively) | delete
 harvask file           search | stats
-harvask storage        list | search | stats | upload | folder | move | rename | delete | download | content
+harvask storage        list | search | stats | upload (--on-conflict rename|overwrite|error) | folder | move | rename | delete | download | content
+harvask workspace      push <dir> (--dest, --dry-run, --exclude)   # local tree -> AI workspace
 harvask preview-config show | update
 harvask site-credential                       # list browser credentials
 
@@ -148,5 +155,14 @@ Notes:
 - `personal-wiki` is intentionally not available via the CLI.
 - File/binary: `storage upload` / `attachment upload` take `--file <path>`;
   `storage download` / `attachment download` save with `--out <path>`.
+  `attachment upload --type chat_message` also needs `--chat-id <id>`.
+- `project create --key` is optional; without it the server derives a unique key
+  from `--name`.
+- `scheduled-task` has three execution types: `issue`, `workflow` and `chat`
+  (`--chat-message` is the body, required for chat). `update` changes only the
+  fields you pass, including the schedule (`--frequency` / `--time` /
+  `--day-of-week` / `--day-of-month` / `--cron`). Fields that do not belong to
+  the resulting execution type are rejected by the CLI, because the server
+  silently drops them.
 
 Use `harvask <command> --help` for options, examples, and prerequisites.

package/skills/harvask/GEMINI.md

@@ -40,6 +40,12 @@ If a command fails with an auth error (exit code 3), run `harvask login` again.
    harvask issue assign -p PRJ 1234 --assignee-id 42
    ```
 
+## Migrating an existing project
+
+Bringing a local directory (or another tool's export) into a harvask project has its own
+rules — where files should go, what must never be uploaded, and why a live session blocks
+writes. Read `migration.md` in this skill directory before pushing anything.
+
 ## project key vs id
 
 - Humans know the **key** (e.g. `PRJ`); the API uses a numeric **id**.
@@ -127,9 +133,10 @@ harvask issue bulk-create | bulk-update      (--items @file.json [--atomic])
 harvask wiki           list | show | create | update (--base-version required) | search | set-home | history | delete | bulk-create | bulk-update
 harvask milestone      list | create | update
 harvask workflow       list | show | create | update | execute (non-idempotent, --yes required non-interactively)
-harvask scheduled-task list | show | create | update | delete
+harvask scheduled-task list | show | create | update | execute (non-idempotent, --yes required non-interactively) | delete
 harvask file           search | stats
-harvask storage        list | search | stats | upload | folder | move | rename | delete | download | content
+harvask storage        list | search | stats | upload (--on-conflict rename|overwrite|error) | folder | move | rename | delete | download | content
+harvask workspace      push <dir> (--dest, --dry-run, --exclude)   # local tree -> AI workspace
 harvask preview-config show | update
 harvask site-credential                       # list browser credentials
 
@@ -148,5 +155,14 @@ Notes:
 - `personal-wiki` is intentionally not available via the CLI.
 - File/binary: `storage upload` / `attachment upload` take `--file <path>`;
   `storage download` / `attachment download` save with `--out <path>`.
+  `attachment upload --type chat_message` also needs `--chat-id <id>`.
+- `project create --key` is optional; without it the server derives a unique key
+  from `--name`.
+- `scheduled-task` has three execution types: `issue`, `workflow` and `chat`
+  (`--chat-message` is the body, required for chat). `update` changes only the
+  fields you pass, including the schedule (`--frequency` / `--time` /
+  `--day-of-week` / `--day-of-month` / `--cron`). Fields that do not belong to
+  the resulting execution type are rejected by the CLI, because the server
+  silently drops them.
 
 Use `harvask <command> --help` for options, examples, and prerequisites.

package/skills/harvask/SKILL.md

@@ -43,6 +43,12 @@ If a command fails with an auth error (exit code 3), run `harvask login` again.
    harvask issue assign -p PRJ 1234 --assignee-id 42
    ```
 
+## Migrating an existing project
+
+Bringing a local directory (or another tool's export) into a harvask project has its own
+rules — where files should go, what must never be uploaded, and why a live session blocks
+writes. Read `migration.md` in this skill directory before pushing anything.
+
 ## project key vs id
 
 - Humans know the **key** (e.g. `PRJ`); the API uses a numeric **id**.
@@ -130,9 +136,10 @@ harvask issue bulk-create | bulk-update      (--items @file.json [--atomic])
 harvask wiki           list | show | create | update (--base-version required) | search | set-home | history | delete | bulk-create | bulk-update
 harvask milestone      list | create | update
 harvask workflow       list | show | create | update | execute (non-idempotent, --yes required non-interactively)
-harvask scheduled-task list | show | create | update | delete
+harvask scheduled-task list | show | create | update | execute (non-idempotent, --yes required non-interactively) | delete
 harvask file           search | stats
-harvask storage        list | search | stats | upload | folder | move | rename | delete | download | content
+harvask storage        list | search | stats | upload (--on-conflict rename|overwrite|error) | folder | move | rename | delete | download | content
+harvask workspace      push <dir> (--dest, --dry-run, --exclude)   # local tree -> AI workspace
 harvask preview-config show | update
 harvask site-credential                       # list browser credentials
 
@@ -151,5 +158,14 @@ Notes:
 - `personal-wiki` is intentionally not available via the CLI.
 - File/binary: `storage upload` / `attachment upload` take `--file <path>`;
   `storage download` / `attachment download` save with `--out <path>`.
+  `attachment upload --type chat_message` also needs `--chat-id <id>`.
+- `project create --key` is optional; without it the server derives a unique key
+  from `--name`.
+- `scheduled-task` has three execution types: `issue`, `workflow` and `chat`
+  (`--chat-message` is the body, required for chat). `update` changes only the
+  fields you pass, including the schedule (`--frequency` / `--time` /
+  `--day-of-week` / `--day-of-month` / `--cron`). Fields that do not belong to
+  the resulting execution type are rejected by the CLI, because the server
+  silently drops them.
 
 Use `harvask <command> --help` for options, examples, and prerequisites.

package/skills/harvask/migration.md

@@ -0,0 +1,72 @@
+# Migrating an existing local project into harvask
+
+Use this when someone wants to bring a project that lives on their machine (or in another
+tool) into a harvask project: source trees, design docs, spreadsheets, legacy assets.
+
+## First: pick the destination. They are not interchangeable.
+
+| What you have | Where it goes | How |
+|---|---|---|
+| Code in a git repository | **Keep it in git.** Link the repo in the project settings (Web UI: Settings > Repository) | No migration needed — AI sessions clone it |
+| Files the AI should work on directly: docs, data, assets, legacy scripts, a non-git tree | **AI workspace** (Files tab = `~/work` in AI sessions) | `harvask workspace push` |
+| Reference documents people will search and share | **Storage** | `harvask storage upload` |
+| Knowledge that should be read, edited and versioned as text | **Wiki** | `harvask wiki create` / `global-wiki` |
+
+If the answer is "code that is already in git", say so and stop — pushing a clone into the
+workspace duplicates it and the copies drift apart.
+
+## Workspace push
+
+```bash
+harvask workspace push ./legacy-app -p PRJ --dest legacy --dry-run   # plan only, sends nothing
+harvask workspace push ./legacy-app -p PRJ --dest legacy --yes       # do it
+```
+
+Always run `--dry-run` first and show the plan (`would_create` / `would_overwrite` /
+`skipped` / `excluded`) before sending anything. Overwrites are silent and there is no
+version history, so `--yes` is required to overwrite in a non-interactive shell.
+
+### Rules that bite
+
+- **Never push `.env` or credentials.** The CLI excludes `.env*` and cannot be told
+  otherwise, because the workspace is visible to every project member. If secrets are
+  needed by the AI, use project secrets (Web UI), not files.
+- `.gitignore` is respected when the directory is a git repo (the CLI lets `git ls-files`
+  enumerate, so `.git/info/exclude` and your global gitignore count too). `node_modules/`,
+  `vendor/`, `dist/`, `build/`, `__pycache__/`, `.venv/`, `.DS_Store` are excluded by
+  default; `--include-ignored` (everything) or `--include <glob>` (one path) brings them
+  back. `--exclude <glob>` wins over `--include`.
+- Windows binaries and scripts (`.exe .bat .cmd .ps1 .vbs .com .msi .dll`) cannot be
+  stored. They are reported as `skipped`, not treated as an error. `.sh` is allowed, but
+  the workspace has no execute bit — run it as `sh script.sh`.
+- Do not push into `apps/` or `canvas/`. Mini-app sources plus their SQLite data and
+  Canvas documents live there; overwriting them breaks the running app. The CLI refuses
+  unless `--force`, and you should ask the user before reaching for it.
+- Symlinks are not followed (reported as `excluded`), and empty directories are not
+  reproduced (object storage has no directories).
+
+### When it stops
+
+- **409 `workspace_session_active`** — a mini-app or browser-agent session is live for
+  that project. Do **not** retry: while a session runs, the workspace is synced from the
+  session and anything you upload is silently rolled back. End the session, then push.
+- **Invalid paths** — the dry run reports them and the CLI refuses to send. Those paths
+  can never be stored (`..`, empty segments, deeper than 20 levels); one bad path fails a
+  whole request, so fix or drop them.
+- **Partial failure** — batches are not atomic. The result JSON lists `remaining`; re-run
+  the same command to continue. Re-uploading is safe: same path = overwrite.
+- **413 / timeouts** on a slow link — send less per request with
+  `--max-batch-bytes 52428800` and re-run; what already landed is not sent again.
+
+## After the files land
+
+Migration is not finished when the bytes arrive. Leave the AI something to work from:
+
+1. Tell the user what landed and where (`--dest` path), and what was skipped or excluded.
+2. Write down what the project is, how it runs, and what is missing — a project Wiki page
+   (`harvask wiki create -p PRJ`) is the right home; the AI reads it before working.
+3. If the migration exists to get work done, file the first issue
+   (`harvask issue create -p PRJ`) describing that work.
+
+Check the result in the Files tab (`/projects/{id}/files`) or with a fresh `--dry-run`:
+everything should now report as `would_overwrite`, nothing as `would_create`.