orizu 0.3.1 → 0.3.3

package/README.md

@@ -101,6 +101,17 @@ orizu logout
     <td>Create a project</td>
     <td><code>orizu projects create --name "Support QA" --team ops-eval</code></td>
   </tr>
+  <tr>
+    <td colspan="2"><strong>Prompts</strong></td>
+  </tr>
+  <tr>
+    <td>List prompts</td>
+    <td><code>orizu prompts list --project ops-eval/support-qa</code></td>
+  </tr>
+  <tr>
+    <td>Show prompt comments</td>
+    <td><code>orizu prompts comments &lt;promptIdOrName&gt; --project ops-eval/support-qa</code></td>
+  </tr>
   <tr>
     <td colspan="2"><strong>Datasets</strong></td>
   </tr>

package/dist/index.js

@@ -30,10 +30,10 @@ function printVersion() {
     printLine(`orizu ${getCliVersion()}`);
 }
 function printUsage() {
-    printLine(`orizu global options:\n\n  --local                 Use http://localhost:3000\n  --server <url>          Use a specific server origin (for example: https://preview.example.com)\n  --version, -v           Print the orizu CLI version\n\norizu commands:\n\n  orizu login [--no-prompt-if-logged-in]\n  orizu logout\n  orizu whoami\n  orizu env [--project <team/project>] [--project-id <projectId>]\n  orizu log <event_type> --run-id <id> --sequence <n> --payload @event.json\n  orizu teams list\n  orizu teams create [--name <name>]\n  orizu teams members list [--team <teamSlug>]\n  orizu teams members add --email <email> [--team <teamSlug>]\n  orizu teams members remove --email <email> [--team <teamSlug>]\n  orizu teams members role --team <teamSlug> --email <email> --role <admin|member>\n  orizu projects list [--team <teamSlug>]\n  orizu projects create --name <name> [--team <teamSlug>]\n  orizu prompts list --project <team/project>\n  orizu prompts pull <prompt-id-or-name> --project <team/project> --out <dir> [--label <label> | --version <id>] [--json]\n  orizu prompts push <dir> [--runner-version <id>] [--project <team/project>] [--parent <version-id>] [--json]\n  orizu prompts labels set <prompt-name> <label> --version <version-id> [--project <team/project>] [--json]\n  orizu prompts scorers set-headline <prompt-id> --scorer-version <id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]\n  orizu prompts scorers add <prompt-id> --scorer-version <id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]\n  orizu scorers list --project <team/project>\n  orizu scorers register --project <team/project> --name <name> --manifest <manifest.json> [--prompt-version <id>] [--runner-version <id>] [--label <label>] [--json]\n  orizu scorers detail <scorer-id-or-name> --project <team/project> [--json]\n  orizu scorers labels set <scorer-name> <label> --version <scorer-version-id> [--project <team/project>] [--json]\n  orizu scores submit <results.jsonl|results.json> --scorer-version <id> --subject-version <prompt-version-id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]\n  orizu judges list --project <team/project>\n  orizu judges pull <judge-id-or-name> --project <team/project> --out <dir> [--label <label> | --version <id>] [--json]\n  orizu judges push <dir> [--runner-version <id>] [--project <team/project>] [--parent <version-id>] [--json]\n  orizu runners push <dir> [--project <team/project>] [--name <name>] [--label <label>] [--json]\n  orizu runners exec (--prompt <prompt-version-id> | --prompt-version <id> --runner-version <id> | --scorer-version <id>) --dataset-version <id> --split-set <id-or-name> --split <name> [--runner-dir <dir>] --out <results.jsonl|results.jsonl.gz>\n  orizu optimizers push <dir> [--project <team/project>] [--name <name>] [--label <label>] [--json]\n  orizu runs submit <results.jsonl|results.jsonl.gz> --prompt-version <id> --runner-version <id> --dataset-version <id> --split-set <id> --split <name> [--project <team/project>]\n  orizu apps list [--project <team/project>]\n  orizu apps create --project <team/project> --name <name> --dataset <datasetId> --file <path> --input-schema <json-path> --output-schema <json-path> [--component <name>]\n  orizu apps update [--app <appId>] [--project <team/project>] --file <path> --input-schema <json-path> --output-schema <json-path> [--component <name>]\n  orizu apps link-dataset --dataset <datasetId> [--app <appId>] [--project <team/project>] [--version <n>]\n  orizu apps detail --app <appId> [--project <team/project>] [--json]\n  orizu tasks list [--project <team/project>]\n  orizu tasks create --project <team/project> --dataset <datasetId> --app <appId> --title <title> --assignees <userIdOrEmail1,userIdOrEmail2> [--version <n>] [--instructions <text>] [--labels-per-item <n>] [--json]\n  orizu tasks assign --task <taskId> --assignees <userId1,userId2>\n  orizu tasks status --task <taskId> [--json]\n  orizu tasks pause --task <taskId>\n  orizu tasks unpause --task <taskId>\n  orizu datasets upload --file <path> [--project <team/project>] [--name <name>]\n  orizu datasets push <path> [--project <team/project>] [--name <name>] [--json]\n  orizu datasets versions create <datasetId|dataset-name> [--project <team/project>] [--label <label>] [--json]\n  orizu datasets splits create <datasetVersionId> [--from-file <split.json>] [--json]\n  orizu datasets download [--dataset <datasetId|datasetUrl>] [--project <team/project>] [--format <csv|json|jsonl>] [--out <path>]\n  orizu datasets append [--dataset <datasetId|datasetUrl>] [--project <team/project>] --file <path>\n  orizu datasets edit-rows [--dataset <datasetId|datasetUrl>] [--project <team/project>] --file <path>\n  orizu datasets delete-rows [--dataset <datasetId|datasetUrl>] [--project <team/project>] --row-ids <id1,id2>\n  orizu datasets delete [--dataset <datasetId|datasetUrl>] [--project <team/project>]\n  orizu datasets lock [--dataset <datasetId|datasetUrl>] [--project <team/project>] [--reason <text>]\n  orizu datasets clone [--dataset <datasetId|datasetUrl>] [--project <team/project>] [--name <name>]\n  orizu tasks export [--task <taskId>] [--format <csv|json|jsonl>] [--out <path>]`);
+    printLine(`orizu global options:\n\n  --local                 Use http://localhost:3000\n  --server <url>          Use a specific server origin (for example: https://preview.example.com)\n  --version, -v           Print the orizu CLI version\n\norizu commands:\n\n  orizu login [--no-prompt-if-logged-in]\n  orizu logout\n  orizu whoami\n  orizu env [--project <team/project>] [--project-id <projectId>]\n  orizu log <event_type> --run-id <id> --sequence <n> --payload @event.json\n  orizu teams list\n  orizu teams create [--name <name>]\n  orizu teams members list [--team <teamSlug>]\n  orizu teams members add --email <email> [--team <teamSlug>]\n  orizu teams members remove --email <email> [--team <teamSlug>]\n  orizu teams members role --team <teamSlug> --email <email> --role <admin|member>\n  orizu projects list [--team <teamSlug>]\n  orizu projects create --name <name> [--team <teamSlug>]\n  orizu prompts list --project <team/project>\n  orizu prompts comments <prompt-id-or-name> --project <team/project> [--label <label> | --version <id>] [--json]\n  orizu prompts pull <prompt-id-or-name> --project <team/project> --out <dir> [--label <label> | --version <id>] [--json]\n  orizu prompts push <dir> [--runner-version <id>] [--project <team/project>] [--parent <version-id>] [--json]\n  orizu prompts labels set <prompt-name> <label> --version <version-id> [--project <team/project>] [--json]\n  orizu prompts scorers set-headline <prompt-id> --scorer-version <id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]\n  orizu prompts scorers add <prompt-id> --scorer-version <id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]\n  orizu scorers list --project <team/project>\n  orizu scorers register --project <team/project> --name <name> --manifest <manifest.json> [--prompt-version <id>] [--runner-version <id>] [--label <label>] [--json]\n  orizu scorers detail <scorer-id-or-name> --project <team/project> [--json]\n  orizu scorers labels set <scorer-name> <label> --version <scorer-version-id> [--project <team/project>] [--json]\n  orizu scores submit <results.jsonl|results.json> --scorer-version <id> --subject-version <prompt-version-id> [--dataset-version <id> --split-set <id> --split <name>] [--project <team/project>] [--json]\n  orizu judges list --project <team/project>\n  orizu judges pull <judge-id-or-name> --project <team/project> --out <dir> [--label <label> | --version <id>] [--json]\n  orizu judges push <dir> [--runner-version <id>] [--project <team/project>] [--parent <version-id>] [--json]\n  orizu runners push <dir> [--project <team/project>] [--name <name>] [--label <label>] [--json]\n  orizu runners exec (--prompt <prompt-version-id> | --prompt-version <id> --runner-version <id> | --scorer-version <id>) --dataset-version <id> --split-set <id-or-name> --split <name> [--runner-dir <dir>] --out <results.jsonl|results.jsonl.gz>\n  orizu optimizers push <dir> [--project <team/project>] [--name <name>] [--label <label>] [--json]\n  orizu runs submit <results.jsonl|results.jsonl.gz> --prompt-version <id> --runner-version <id> --dataset-version <id> --split-set <id> --split <name> [--project <team/project>]\n  orizu apps list [--project <team/project>]\n  orizu apps create --project <team/project> --name <name> --dataset <datasetId> --file <path> --input-schema <json-path> --output-schema <json-path> [--component <name>]\n  orizu apps update [--app <appId>] [--project <team/project>] --file <path> --input-schema <json-path> --output-schema <json-path> [--component <name>]\n  orizu apps link-dataset --dataset <datasetId> [--app <appId>] [--project <team/project>] [--version <n>]\n  orizu apps detail --app <appId> [--project <team/project>] [--json]\n  orizu tasks list [--project <team/project>]\n  orizu tasks create --project <team/project> --dataset <datasetId> --app <appId> --title <title> --assignees <userIdOrEmail1,userIdOrEmail2> [--version <n>] [--instructions <text>] [--labels-per-item <n>] [--json]\n  orizu tasks assign --task <taskId> --assignees <userId1,userId2>\n  orizu tasks status --task <taskId> [--json]\n  orizu tasks pause --task <taskId>\n  orizu tasks unpause --task <taskId>\n  orizu datasets upload --file <path> [--project <team/project>] [--name <name>]\n  orizu datasets push <path> [--project <team/project>] [--name <name>] [--json]\n  orizu datasets versions create <datasetId|dataset-name> [--project <team/project>] [--label <label>] [--json]\n  orizu datasets splits create <datasetVersionId> [--from-file <split.json>] [--json]\n  orizu datasets download [--dataset <datasetId|datasetUrl>] [--project <team/project>] [--format <csv|json|jsonl>] [--out <path>]\n  orizu datasets append [--dataset <datasetId|datasetUrl>] [--project <team/project>] --file <path>\n  orizu datasets edit-rows [--dataset <datasetId|datasetUrl>] [--project <team/project>] --file <path>\n  orizu datasets delete-rows [--dataset <datasetId|datasetUrl>] [--project <team/project>] --row-ids <id1,id2>\n  orizu datasets delete [--dataset <datasetId|datasetUrl>] [--project <team/project>]\n  orizu datasets lock [--dataset <datasetId|datasetUrl>] [--project <team/project>] [--reason <text>]\n  orizu datasets clone [--dataset <datasetId|datasetUrl>] [--project <team/project>] [--name <name>]\n  orizu tasks export [--task <taskId>] [--format <csv|json|jsonl>] [--out <path>]`);
 }
 function printOptimizationUsage() {
-    printLine(`\nOptimization lifecycle commands:\n\n  orizu optimizations start --project <team/project> --optimizer-version <id> --prompt-version <id[,id]> --selection-scorer <id> [--reflection-scorer <id>] [--pareto-scorer <id>] [--best-scorer <id>] --dataset-version <id> --split-set <id> [--train-split <name>] [--validation-split <name>] [--metadata <json|@file>] [--json]\n  orizu optimizations run-gepa --project <team/project> --optimizer-version-id <id> --candidate-version-id <id> --runner-version-id <id> --candidate-runner-dir <dir> --scorer-version-id <id> --scorer-runner-version-id <id> --scorer-runner-dir <dir> --dataset-version-id <id> --split-set-id <id> [--train-split train] [--val-split validation]\n  orizu optimizations pause <run-id> [--reason <text>] [--json]\n  orizu optimizations resume <run-id> [--json]\n  orizu optimizations finish <run-id> [--best-score <n>] [--best-candidate <id>] [--result-prompt-version <id>] [--metadata <json|@file>] [--json]\n  orizu optimizations fail <run-id> [--reason <text>] [--metadata <json|@file>] [--json]\n  orizu optimizations cancel <run-id> [--reason <text>] [--json]`);
+    printLine(`\nOptimization lifecycle commands:\n\n  orizu optimizations start --project <team/project> --optimizer-version <id> --prompt-version <id[,id]> --selection-scorer <id> [--reflection-scorer <id>] [--pareto-scorer <id>] [--best-scorer <id>] --dataset-version <id> --split-set <id> [--train-split <name>] [--validation-split <name>] [--metadata <json|@file>] [--json]\n  orizu optimizations run-gepa --project <team/project> --optimizer-version-id <id> --candidate-version-id <id> --runner-version-id <id> --candidate-runner-dir <dir> --scorer-version-id <id> --scorer-runner-version-id <id> --scorer-runner-dir <dir> --dataset-version-id <id> --split-set-id <id> [--train-split train] [--val-split validation] [--log-dir logs]\n  orizu optimizations export <run-id> [--out <path>] [--json]\n  orizu optimizations pause <run-id> [--reason <text>] [--json]\n  orizu optimizations resume <run-id> [--json]\n  orizu optimizations finish <run-id> [--best-score <n>] [--best-candidate <id>] [--result-prompt-version <id>] [--metadata <json|@file>] [--json]\n  orizu optimizations fail <run-id> [--reason <text>] [--metadata <json|@file>] [--json]\n  orizu optimizations cancel <run-id> [--reason <text>] [--json]`);
 }
 let cliArgs = process.argv.slice(2);
 function getArg(name) {
@@ -480,6 +480,63 @@ function printTaskStatusSummary(data) {
         });
     }
 }
+function compactTerminalText(value, maxLength = 160) {
+    const compact = sanitizeTerminalText(value).replace(/\s+/g, ' ').trim();
+    if (compact.length <= maxLength) {
+        return compact;
+    }
+    return `${compact.slice(0, Math.max(0, maxLength - 1)).trim()}…`;
+}
+function printIndentedBody(value, indent) {
+    const lines = sanitizeTerminalText(value || '').split(/\r?\n/);
+    for (const line of lines) {
+        printLine(`${indent}${line}`);
+    }
+}
+function formatPromptCommentAnchor(anchor) {
+    if (!anchor) {
+        return null;
+    }
+    const lineLabel = anchor.startLine && anchor.endLine
+        ? anchor.startLine === anchor.endLine
+            ? `line ${anchor.startLine}`
+            : `lines ${anchor.startLine}-${anchor.endLine}`
+        : null;
+    const selectedText = anchor.text ? `"${compactTerminalText(anchor.text, 180)}"` : null;
+    if (lineLabel && selectedText) {
+        return `${lineLabel}: ${selectedText}`;
+    }
+    return lineLabel || selectedText;
+}
+function printPromptComments(data) {
+    const versionLabel = data.version.versionLabel || (data.version.versionNumber ? `v${data.version.versionNumber}` : data.version.id);
+    printLine(`Prompt: ${sanitizeTerminalText(data.prompt.name)} (${sanitizeTerminalText(data.prompt.id)})`);
+    printLine(`Version: ${sanitizeTerminalText(String(versionLabel))} (${sanitizeTerminalText(data.version.id)})`);
+    printLine(`Comments: ${data.summary.threadCount} thread${data.summary.threadCount === 1 ? '' : 's'} ` +
+        `(${data.summary.openThreadCount} open, ${data.summary.resolvedThreadCount} resolved, ${data.summary.replyCount} replies)`);
+    if (data.comments.length === 0) {
+        printLine('\nNo comments found for this prompt version.');
+        return;
+    }
+    for (const [index, thread] of data.comments.entries()) {
+        const authorName = thread.author?.name || 'Unknown';
+        const anchor = formatPromptCommentAnchor(thread.anchor);
+        printLine('');
+        printLine(`${index + 1}. [${thread.status}] ${sanitizeTerminalText(authorName)} · ${sanitizeTerminalText(thread.createdAt)}`);
+        if (anchor) {
+            printLine(`   Selection: ${anchor}`);
+        }
+        printIndentedBody(thread.body, '   ');
+        if (thread.replies.length > 0) {
+            printLine(`   Replies (${thread.replies.length})`);
+            for (const reply of thread.replies) {
+                const replyAuthor = reply.author?.name || 'Unknown';
+                printLine(`   - ${sanitizeTerminalText(replyAuthor)} · ${sanitizeTerminalText(reply.createdAt)}`);
+                printIndentedBody(reply.body, '     ');
+            }
+        }
+    }
+}
 const DEFAULT_AUTH_CALLBACK_PORT = 43123;
 function resolveAuthCallbackPort() {
     const envPort = process.env.ORIZU_AUTH_PORT;
@@ -788,6 +845,33 @@ async function listJudges() {
     const data = await parseJsonResponse(response, 'Judges list');
     printPromptSummaries(data.judges, 'No judges found.');
 }
+async function listPromptComments() {
+    const promptRef = getPositionalArg(2);
+    const project = getArg('--project') || await resolveProjectSlug(null);
+    const label = getArg('--label');
+    const version = getArg('--version');
+    if (!promptRef) {
+        throw new Error('Usage: orizu prompts comments <prompt-id-or-name> --project <team/project> [--label <label> | --version <version-id>] [--json]');
+    }
+    if (label && version) {
+        throw new Error('Use either --label or --version, not both');
+    }
+    const params = new URLSearchParams({ project });
+    if (label)
+        params.set('label', label);
+    if (version)
+        params.set('version', version);
+    const response = await authedFetch(`/api/cli/prompts/${encodeURIComponent(promptRef)}/comments?${params.toString()}`);
+    if (!response.ok) {
+        throw new Error(`Failed to fetch prompt comments: ${await response.text()}`);
+    }
+    const data = await parseJsonResponse(response, 'Prompt comments');
+    if (hasJsonFlag()) {
+        printJson(data);
+        return;
+    }
+    printPromptComments(data);
+}
 async function listScorers() {
     const project = getArg('--project') || await resolveProjectSlug(null);
     const response = await authedFetch(`/api/cli/scorers?project=${encodeURIComponent(project)}`);
@@ -1473,6 +1557,27 @@ async function updateOptimizationRunLifecycle(action) {
         printLine(`Cancelled optimization run ${id}`);
     }
 }
+async function exportOptimizationRun() {
+    const runId = getPositionalArg(2) || getArg('--run-id');
+    const outPathArg = getArg('--out');
+    if (!runId) {
+        throw new Error('Usage: orizu optimizations export <run-id> [--out <path>] [--json]');
+    }
+    const response = await authedFetch(`/api/cli/optimization-runs/${encodeURIComponent(runId)}/export`);
+    if (!response.ok) {
+        throw new Error(`Failed to export optimization run: ${await response.text()}`);
+    }
+    const data = await parseJsonResponse(response, 'Optimization export');
+    if (hasJsonFlag() && !outPathArg) {
+        printJson(data);
+        return;
+    }
+    const filename = outPathArg
+        ? expandHomePath(outPathArg)
+        : `${runId}.optimization.json`;
+    writeTextFileEnsuringDir(filename, `${JSON.stringify(data, null, 2)}\n`);
+    printLine(`Saved optimization export to ${sanitizeTerminalText(filename)}`);
+}
 function removeFlagWithValue(args, flag) {
     const filtered = [];
     for (let index = 0; index < args.length; index += 1) {
@@ -1485,8 +1590,11 @@ function removeFlagWithValue(args, flag) {
     return filtered;
 }
 function bundledOrizuGepaPythonPath() {
-    const candidate = fileURLToPath(new URL('../../orizu-gepa-python/src', import.meta.url));
-    return existsSync(candidate) ? candidate : null;
+    const candidates = [
+        fileURLToPath(new URL('../vendor/orizu-gepa-python/src', import.meta.url)),
+        fileURLToPath(new URL('../../orizu-gepa-python/src', import.meta.url)),
+    ];
+    return candidates.find(candidate => existsSync(candidate)) ?? null;
 }
 async function runGepaOptimization() {
     const project = getArg('--project') || await resolveProjectSlug(null);
@@ -2664,6 +2772,47 @@ function readRunnerManifest(runnerDir) {
         supports_body_kind: supportedBodyKinds,
     };
 }
+const RUNNER_TIMEOUT_MS = 120_000;
+const RUNNER_OUTPUT_MAX_BYTES = 2 * 1024 * 1024;
+const RUNNER_ARTIFACT_MAX_BYTES = 25 * 1024 * 1024;
+const RUNNER_ENV_ALLOWLIST = new Set([
+    'PATH',
+    'SystemRoot',
+    'WINDIR',
+    'HOME',
+    'TMPDIR',
+    'TEMP',
+    'TMP',
+    'LANG',
+    'LC_ALL',
+    'PYTHONPATH',
+    'NODE_PATH',
+    'ANTHROPIC_API_KEY',
+    'OPENAI_API_KEY',
+    'GEMINI_API_KEY',
+    'GOOGLE_API_KEY',
+]);
+function runnerSubprocessEnv(inputPath, outputPath) {
+    const env = {};
+    for (const key of RUNNER_ENV_ALLOWLIST) {
+        const value = process.env[key];
+        if (value !== undefined) {
+            env[key] = value;
+        }
+    }
+    env.ORIZU_RUNNER_INPUT_PATH = inputPath;
+    env.ORIZU_RUNNER_OUTPUT_PATH = outputPath;
+    return env;
+}
+function boundedRunnerOutput(value) {
+    if (!value)
+        return '';
+    const buffer = Buffer.isBuffer(value) ? value : Buffer.from(value);
+    if (buffer.byteLength <= RUNNER_OUTPUT_MAX_BYTES) {
+        return buffer.toString('utf8');
+    }
+    return `${buffer.subarray(0, RUNNER_OUTPUT_MAX_BYTES).toString('utf8')}\n[truncated]`;
+}
 async function materializeRunnerVersion(runnerVersionId) {
     const response = await authedFetch(`/api/cli/runner-versions/${encodeURIComponent(runnerVersionId)}/download`);
     if (!response.ok) {
@@ -2672,7 +2821,12 @@ async function materializeRunnerVersion(runnerVersionId) {
     const tempDir = mkdtempSync(join(tmpdir(), 'orizu-runner-version-'));
     const zipPath = join(tempDir, 'runner.zip');
     const runnerDir = join(tempDir, 'runner');
-    writeFileSync(zipPath, new Uint8Array(await response.arrayBuffer()));
+    const zipBytes = new Uint8Array(await response.arrayBuffer());
+    if (zipBytes.byteLength > RUNNER_ARTIFACT_MAX_BYTES) {
+        rmSync(tempDir, { recursive: true, force: true });
+        throw new Error(`Runner artifact exceeds ${RUNNER_ARTIFACT_MAX_BYTES} bytes`);
+    }
+    writeFileSync(zipPath, zipBytes);
     const result = spawnSync('unzip', ['-q', zipPath, '-d', runnerDir], {
         encoding: 'utf8',
     });
@@ -2778,18 +2932,16 @@ async function runnersExec() {
                 }));
                 const result = spawnSync(manifest.command[0], manifest.command.slice(1), {
                     cwd: runnerDir,
-                    env: {
-                        ...process.env,
-                        ORIZU_RUNNER_INPUT_PATH: inputPath,
-                        ORIZU_RUNNER_OUTPUT_PATH: outputPath,
-                    },
+                    env: runnerSubprocessEnv(inputPath, outputPath),
                     encoding: 'utf8',
+                    maxBuffer: RUNNER_OUTPUT_MAX_BYTES,
+                    timeout: RUNNER_TIMEOUT_MS,
                 });
                 if (result.error) {
                     throw result.error;
                 }
                 if (result.status !== 0) {
-                    throw new Error(`Runner failed for row ${row.id} with exit code ${result.status}: ${sanitizeTerminalText(result.stderr || result.stdout || '')}`);
+                    throw new Error(`Runner failed for row ${row.id} with exit code ${result.status}: ${sanitizeTerminalText(boundedRunnerOutput(result.stderr || result.stdout))}`);
                 }
                 const runnerOutput = JSON.parse(readFileSync(outputPath, 'utf8'));
                 resultLines.push(JSON.stringify({
@@ -2890,6 +3042,10 @@ export async function main(rawArgs = process.argv.slice(2)) {
         await listPrompts();
         return;
     }
+    if (command === 'prompts' && subcommand === 'comments') {
+        await listPromptComments();
+        return;
+    }
     if (command === 'prompts' && subcommand === 'pull') {
         await pullPromptArtifact('prompt');
         return;
@@ -2966,6 +3122,10 @@ export async function main(rawArgs = process.argv.slice(2)) {
         await runGepaOptimization();
         return;
     }
+    if (command === 'optimizations' && subcommand === 'export') {
+        await exportOptimizationRun();
+        return;
+    }
     if (command === 'optimizations' &&
         (subcommand === 'pause' ||
             subcommand === 'resume' ||

package/package.json

@@ -1,12 +1,22 @@
 {
   "name": "orizu",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "private": false,
   "type": "module",
   "bin": {
     "orizu": "dist/index.js"
   },
+  "files": [
+    "README.md",
+    "dist",
+    "scripts",
+    "src",
+    "tsconfig.json",
+    "vendor"
+  ],
   "scripts": {
-    "build": "tsc -p tsconfig.json"
+    "build": "tsc -p tsconfig.json",
+    "prepack": "node scripts/vendor-gepa-python.mjs",
+    "postpack": "node scripts/vendor-gepa-python.mjs --clean"
   }
 }

package/scripts/vendor-gepa-python.mjs

@@ -0,0 +1,54 @@
+import { cpSync, existsSync, mkdirSync, rmSync } from 'node:fs'
+import { dirname, resolve } from 'node:path'
+import { fileURLToPath } from 'node:url'
+
+const scriptDir = dirname(fileURLToPath(import.meta.url))
+const cliRoot = resolve(scriptDir, '..')
+const repoRoot = resolve(cliRoot, '..', '..')
+const sourceRoot = resolve(repoRoot, 'packages', 'orizu-gepa-python')
+const vendorRoot = resolve(cliRoot, 'vendor', 'orizu-gepa-python')
+const shouldClean = process.argv.includes('--clean')
+const sourceSrc = resolve(sourceRoot, 'src')
+const sourcePyproject = resolve(sourceRoot, 'pyproject.toml')
+const sourceManifest = resolve(sourceRoot, 'manifest.json')
+const vendoredSrc = resolve(vendorRoot, 'src')
+const vendoredPyproject = resolve(vendorRoot, 'pyproject.toml')
+const vendoredManifest = resolve(vendorRoot, 'manifest.json')
+const hasSourcePackage = existsSync(sourceSrc)
+  && existsSync(sourcePyproject)
+  && existsSync(sourceManifest)
+const hasVendoredPackage = existsSync(vendoredSrc)
+  && existsSync(vendoredPyproject)
+  && existsSync(vendoredManifest)
+
+if (shouldClean) {
+  if (hasSourcePackage) {
+    rmSync(vendorRoot, { recursive: true, force: true })
+  }
+  process.exit(0)
+}
+
+if (!hasSourcePackage) {
+  if (hasVendoredPackage) {
+    process.exit(0)
+  }
+  throw new Error(`Unable to vendor orizu-gepa-python: source package not found at ${sourceRoot}`)
+}
+
+rmSync(vendorRoot, { recursive: true, force: true })
+mkdirSync(vendorRoot, { recursive: true })
+cpSync(sourcePyproject, resolve(vendorRoot, 'pyproject.toml'))
+cpSync(sourceManifest, resolve(vendorRoot, 'manifest.json'))
+cpSync(sourceSrc, resolve(vendorRoot, 'src'), {
+  recursive: true,
+  filter: sourcePath => {
+    const normalizedPath = sourcePath.replace(/\\/g, '/')
+    return !normalizedPath.endsWith('/__pycache__')
+      && !normalizedPath.includes('/__pycache__/')
+      && !normalizedPath.endsWith('.pyc')
+      && !normalizedPath.endsWith('.pyo')
+      && !normalizedPath.endsWith('/.pytest_cache')
+      && !normalizedPath.includes('/.pytest_cache/')
+      && !normalizedPath.endsWith('/.DS_Store')
+  },
+})