monday-cli 0.5.0 → 0.7.0

package/dist/utils/file-source.js

@@ -0,0 +1,140 @@
+/**
+ * Local-file pre-check + Blob-construction shared helpers for the
+ * multipart-upload surfaces. Lifted at v0.6-M38 IMPL kickoff per
+ * R-v0.6-NEW-1 (3-consumer trigger fires at IMPL: v0.4-M31's `monday
+ * item upload` action body + v0.4-M31's `monday update upload` action
+ * body + v0.6-M38's `executeFileColumnSet` runtime body). Mirrors
+ * R-NEW-29's M25 lift-ahead-of-feat cadence (extract the shared
+ * pattern BEFORE the feat commit that crystallizes the 3rd consumer
+ * so the feat diff stays focused on the behavioural change).
+ *
+ * **Two helpers, distinct fire points** — the M31 / M38 callers run
+ * the pre-check BEFORE `resolveClient` so a missing/unreadable-file
+ * error surfaces as `usage_error` (exit 1) rather than getting
+ * tangled up with `config_error` (exit 3) on a token miss; the Blob
+ * construction fires AFTER column-type validation so a non-`file`
+ * column rejection or an `item update` mutex rejection doesn't pay
+ * for the full read:
+ *
+ *   1. {@link precheckLocalFile} — `fs.stat()` + `fs.access(R_OK)` +
+ *      non-empty check. Surfaces `usage_error` with `details.reason:
+ *      'file_not_readable'` (ENOENT / EACCES / path is a directory)
+ *      or `'file_empty'` (zero bytes).
+ *   2. {@link buildBlobFromPath} — `fs/promises.readFile()` + Web
+ *      `Blob` construction with the sniffed `Content-Type` from
+ *      `sniffContentType(...)`. No additional error surfaces — read
+ *      failures past the pre-check are TOCTOU-class (file removed
+ *      between pre-check and read) and surface via the caller's
+ *      catch-all.
+ *
+ * **Behaviour-preserving lift.** Byte-equivalent to the M31 inline
+ * copies the lift consolidates — same `usage_error` message prose,
+ * same `details.reason` discriminator + `errno_code` slot + hint
+ * text, same path resolution (`resolve(process.cwd(), rawPath)`)
+ * and basename (`basename(filePath)`). Integration tests for the
+ * 2 M31 consumers cover the pre-check error branches; this module
+ * adds direct unit tests for the helper + the buildBlobFromPath
+ * sibling.
+ */
+import { stat as fsStat, access as fsAccess, readFile } from 'node:fs/promises';
+import { constants as fsConstants } from 'node:fs';
+import { resolve as resolvePath, basename } from 'node:path';
+import { UsageError, asError, errorCode } from './errors.js';
+import { sniffContentType } from './mime.js';
+/**
+ * Resolves `rawPath` relative to `process.cwd()` and confirms the
+ * file is (a) a regular file (not a directory / socket / device),
+ * (b) readable by the current user, and (c) non-empty. Throws
+ * {@link UsageError} on any check failure with a `details.reason`
+ * discriminator:
+ *
+ *   - `'file_not_readable'` — `ENOENT` / `EACCES` / path resolves
+ *     to a directory or special file. `details.errno_code` echoes
+ *     the underlying errno when one was attached to the Node fs
+ *     error.
+ *   - `'file_empty'` — file exists and is readable but has zero
+ *     bytes. Monday rejects empty uploads server-side; the CLI
+ *     surfaces the rejection with a clearer hint via the local
+ *     pre-check.
+ *
+ * The Web `Blob` construction for the actual upload payload happens
+ * later via {@link buildBlobFromPath} — callers run the pre-check
+ * BEFORE the wire dispatch so a bad path doesn't burn a network
+ * round-trip, and run the Blob construction AFTER any column-type
+ * / mutex validation so a non-`file` column rejection doesn't pay
+ * for the full read.
+ */
+export const precheckLocalFile = async (rawPath) => {
+    const filePath = resolvePath(process.cwd(), rawPath);
+    const filename = basename(filePath);
+    let fileSizeBytes;
+    try {
+        const stats = await fsStat(filePath);
+        if (!stats.isFile()) {
+            throw new UsageError(`<file> ${JSON.stringify(rawPath)} is not a regular file ` +
+                `(resolved to ${JSON.stringify(filePath)}).`, {
+                details: {
+                    reason: 'file_not_readable',
+                    file_path: filePath,
+                    hint: 'pass a path to a regular readable file; directories ' +
+                        'and special files (sockets, devices) are rejected.',
+                },
+            });
+        }
+        await fsAccess(filePath, fsConstants.R_OK);
+        fileSizeBytes = stats.size;
+    }
+    catch (err) {
+        if (err instanceof UsageError) {
+            throw err;
+        }
+        const code = errorCode(err);
+        throw new UsageError(`<file> ${JSON.stringify(rawPath)} cannot be read ` +
+            `(resolved to ${JSON.stringify(filePath)}): ` +
+            `${asError(err).message}.`, {
+            cause: err,
+            details: {
+                reason: 'file_not_readable',
+                file_path: filePath,
+                ...(code === undefined ? {} : { errno_code: code }),
+                hint: 'check that the path exists, is readable by the current ' +
+                    "user, and isn't a directory.",
+            },
+        });
+    }
+    if (fileSizeBytes === 0) {
+        throw new UsageError(`<file> ${JSON.stringify(rawPath)} is empty (0 bytes); ` +
+            `Monday rejects empty uploads server-side.`, {
+            details: {
+                reason: 'file_empty',
+                file_path: filePath,
+                filename,
+                file_size_bytes: 0,
+                hint: 'Monday returns FILE_SIZE_LIMIT_EXCEEDED on empty ' +
+                    'uploads. Provide a non-empty file or remove the upload ' +
+                    'call.',
+            },
+        });
+    }
+    return { filePath, filename, fileSizeBytes };
+};
+/**
+ * Reads the file at `precheck.filePath` into memory and wraps it as
+ * a Web `Blob` with a `Content-Type` sniffed from the filename
+ * extension via {@link sniffContentType}. The Blob is the payload
+ * the multipart transport sends to Monday's wire `File!` scalar.
+ *
+ * Run AFTER {@link precheckLocalFile} so the path is known good and
+ * the size is known non-zero. Run AFTER column-type validation / M38
+ * mutex checks so a non-`file` column rejection or a mutex violation
+ * doesn't pay for the full read. The read uses `fs/promises.readFile`
+ * which buffers the entire payload into memory — Monday's per-file
+ * cap is plan-tier-dependent (typically 500 MB at standard tiers);
+ * callers don't pre-check size against a hardcoded ceiling because
+ * the cap isn't exposed via the GraphQL schema.
+ */
+export const buildBlobFromPath = async (precheck) => {
+    const bytes = await readFile(precheck.filePath);
+    return new Blob([bytes], { type: sniffContentType(precheck.filename) });
+};
+//# sourceMappingURL=file-source.js.map

package/dist/utils/file-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-source.js","sourceRoot":"","sources":["../../src/utils/file-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,IAAI,IAAI,MAAM,EAAE,MAAM,IAAI,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,IAAI,WAAW,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7D,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAiB7C;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,OAAe,EACa,EAAE;IAC9B,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,MAAM,IAAI,UAAU,CAClB,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,yBAAyB;gBACxD,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAC9C;gBACE,OAAO,EAAE;oBACP,MAAM,EAAE,mBAAmB;oBAC3B,SAAS,EAAE,QAAQ;oBACnB,IAAI,EACF,sDAAsD;wBACtD,oDAAoD;iBACvD;aACF,CACF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QAC3C,aAAa,GAAG,KAAK,CAAC,IAAI,CAAC;IAC7B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,UAAU,EAAE,CAAC;YAC9B,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,IAAI,UAAU,CAClB,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,kBAAkB;YACjD,gBAAgB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK;YAC7C,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,GAAG,EAC5B;YACE,KAAK,EAAE,GAAG;YACV,OAAO,EAAE;gBACP,MAAM,EAAE,mBAAmB;gBAC3B,SAAS,EAAE,QAAQ;gBACnB,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;gBACnD,IAAI,EACF,yDAAyD;oBACzD,8BAA8B;aACjC;SACF,CACF,CAAC;IACJ,CAAC;IACD,IAAI,aAAa,KAAK,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,UAAU,CAClB,UAAU,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,uBAAuB;YACtD,2CAA2C,EAC7C;YACE,OAAO,EAAE;gBACP,MAAM,EAAE,YAAY;gBACpB,SAAS,EAAE,QAAQ;gBACnB,QAAQ;gBACR,eAAe,EAAE,CAAC;gBAClB,IAAI,EACF,mDAAmD;oBACnD,yDAAyD;oBACzD,OAAO;aACV;SACF,CACF,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC,CAAC;AAEF;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EACpC,QAA2B,EACZ,EAAE;IACjB,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChD,OAAO,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,gBAAgB,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "monday-cli",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Agent-first CLI for Monday.com — read boards, file backlog items, transition statuses, and post comments from the terminal. Built for AI coding agents (Claude Code, Codex) with humans as a welcome second audience.",
   "type": "module",
   "engines": {