orizu 0.5.27 → 0.5.29

package/README.md

@@ -156,6 +156,35 @@ This prints the skill location plus source metadata (`name`, `root`, `skillMd`,
 to reading `SKILL.md` in two commands and verify the guidance matches the CLI
 that supplied it.
 
+### Update the CLI
+
+An npm-global install can update itself to npm's `latest` release:
+
+```bash
+orizu update [--dry-run] [--json]
+```
+
+The command detects the npm prefix, checks and compares versions, installs only
+when `latest` is newer, and verifies the newly installed binary in a fresh
+process. A successful `orizu update` automatically runs `orizu skills update`
+with the installed CLI, including when Orizu is already the latest. `--dry-run`
+stops after the version comparison without installing or refreshing skills. Source checkouts,
+`npx` caches, and pnpm, Bun, or Yarn global layouts are refused without being
+modified.
+For now, Windows installs and custom npm prefixes without their own `bin/node`
+(for example `npm config set prefix ~/.npm-global`) are refused with
+`update_unsupported_install`; use the manual npm command in that error.
+
+On other human-readable commands, an npm-global install may print one stderr
+line when its cached release check finds a newer version. Cache refresh happens
+in a detached process at most once every 24 hours, so commands do not wait for
+the registry. Notices and refreshes are suppressed for `--json`, CI,
+`NO_UPDATE_NOTIFIER`, and `update` itself. Disable them explicitly with:
+
+```bash
+ORIZU_NO_UPDATE_CHECK=1 orizu --help
+```
+
 Agents are first-class users of this CLI: **every command supports `--json`**
 (as a prefix, `orizu --json teams list`, or a trailing flag) and emits a single
 machine-readable JSON document instead of formatted text. Discover the full
@@ -210,6 +239,10 @@ orizu logout
     <td>Locate the bundled skill (read-only)</td>
     <td><code>orizu skills path --json</code></td>
   </tr>
+  <tr>
+    <td>Update an npm-global CLI and its installed skills</td>
+    <td><code>orizu update</code></td>
+  </tr>
   <tr>
     <td>Inspect CLI capabilities as JSON</td>
     <td><code>orizu capabilities --json</code></td>
@@ -427,6 +460,25 @@ Task and dataset export support:
 - `json`
 - `jsonl`
 
+Dataset `upload` and `push` create an immutable version after the rows are
+acknowledged. With `--json`, upload prints one result document. A failed snapshot
+reports the uploaded dataset identity so recovery can target the snapshot step.
+If a write's response is lost or times out, inspect the dataset before retrying:
+the last chunk may already have committed.
+
+Dataset downloads retry transient read failures up to three attempts. Each
+transfer request, including its response body, has a two-minute deadline;
+`ORIZU_DATASET_TRANSFER_TIMEOUT_MS` accepts 1–300000 milliseconds. Downloads
+receive the complete response before writing to the destination. Existing files
+keep their inode, ownership, permissions and ACLs; writes follow existing
+symlinks and update hardlinked readers. New files request mode `0600`, subject
+to the filesystem's access rules. A failed network transfer leaves an existing output
+untouched. The final write retains ordinary filesystem behavior: it is not
+atomic, and a disk failure during that write can leave partial output.
+SIGINT/SIGTERM cancels a download. Upload writes
+have no additional transient retries; the existing session refresh behavior is
+unchanged.
+
 ## Interactive And Automated Usage
 
 Many commands can prompt for missing team, project, app, dataset, or task selections in an interactive terminal. In scripts and CI, pass explicit flags instead:

package/dist/cli-project-slug.d.ts

@@ -0,0 +1,17 @@
+export interface ParsedProjectSlug {
+    teamSlug: string;
+    projectSlug: string;
+}
+export interface SplitProjectArg {
+    /** null when the caller passed a bare project slug. */
+    teamSlug: string | null;
+    projectSlug: string;
+}
+export declare function normalizeSlugInput(slug: string): string;
+/**
+ * Accept a `--project` value in either documented form: `teamSlug/projectSlug`
+ * or a bare `projectSlug` (resolved within the caller's team).
+ */
+export declare function splitCliProjectArg(value: string): SplitProjectArg | null;
+export declare function parseCliProjectSlug(projectSlug: string): ParsedProjectSlug | null;
+//# sourceMappingURL=cli-project-slug.d.ts.map

package/dist/cli-project-slug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-project-slug.d.ts","sourceRoot":"","sources":["../src/cli-project-slug.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,eAAe;IAC9B,uDAAuD;IACvD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,CAAA;CACpB;AAED,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAQxE;AAED,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAQjF"}

package/dist/cli-project-slug.js

@@ -0,0 +1,24 @@
+export function normalizeSlugInput(slug) {
+    return slug.trim().toLowerCase();
+}
+/**
+ * Accept a `--project` value in either documented form: `teamSlug/projectSlug`
+ * or a bare `projectSlug` (resolved within the caller's team).
+ */
+export function splitCliProjectArg(value) {
+    if (!value.includes('/')) {
+        const projectSlug = normalizeSlugInput(value);
+        return projectSlug ? { teamSlug: null, projectSlug } : null;
+    }
+    const parsed = parseCliProjectSlug(value);
+    return parsed ? { teamSlug: parsed.teamSlug, projectSlug: parsed.projectSlug } : null;
+}
+export function parseCliProjectSlug(projectSlug) {
+    const segments = projectSlug.split('/');
+    if (segments.length !== 2)
+        return null;
+    const [teamSlug, project] = segments.map(normalizeSlugInput);
+    if (!teamSlug || !project)
+        return null;
+    return { teamSlug, projectSlug: project };
+}

package/dist/credentials.d.ts

@@ -1,4 +1,5 @@
 import { ServerCredentials, StoredCredentialsV2, StoredCredentialsV3 } from './types.js';
+export declare function getConfigDir(): string;
 /**
  * Runs a synchronous credentials transaction under the one process-wide and
  * cross-process lock. Exported so real-process fixtures can hold the production
@@ -18,6 +19,9 @@ export declare function updateServerCredentials(baseUrl: string, credentials: Se
 export declare function credentialsEqual(left: ServerCredentials, right: ServerCredentials): boolean;
 export declare function updateServerCredentialsIfCurrent(baseUrl: string, expected: ServerCredentials, replacement: ServerCredentials): boolean;
 export declare function getActiveBaseUrl(): string | null;
+export declare function rememberProcessSecret(secret: string): string;
+export declare function rememberResolvedBearer(bearer: string): string;
+export declare function getSecretsSeenThisProcess(): readonly string[];
 /**
  * In-sandbox bearer resolution (ALI-1044). Resolves a bearer supplied out-of-band
  * to the hosted agent, WITHOUT consulting credentials.json:

package/dist/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,iBAAiB,EAEjB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,YAAY,CAAA;AAqInB;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAgCvE;AAED;;;;GAIG;AACH,wBAAsB,mCAAmC,CAAC,CAAC,EACzD,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CAiDZ;AAwGD,wBAAgB,qBAAqB,IAAI,mBAAmB,GAAG,mBAAmB,GAAG,IAAI,CA8BxF;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAW9E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,QAepF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,QAatF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAO3F;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAUT;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAGhD;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CA0BrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAYlE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAS1D;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,QAMtD;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAWT;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAc/D;AAED,wBAAgB,oBAAoB,SAKnC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../src/credentials.ts"],"names":[],"mappings":"AAiBA,OAAO,EACL,iBAAiB,EAEjB,mBAAmB,EACnB,mBAAmB,EACpB,MAAM,YAAY,CAAA;AAMnB,wBAAgB,YAAY,IAAI,MAAM,CAKrC;AA0HD;;;;GAIG;AACH,wBAAgB,8BAA8B,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,CAgCvE;AAED;;;;GAIG;AACH,wBAAsB,mCAAmC,CAAC,CAAC,EACzD,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAC1B,OAAO,CAAC,CAAC,CAAC,CAiDZ;AAwGD,wBAAgB,qBAAqB,IAAI,mBAAmB,GAAG,mBAAmB,GAAG,IAAI,CA8BxF;AAED,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI,CAW9E;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,QAepF;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,iBAAiB,QAatF;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAO3F;AAED,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,iBAAiB,EAC3B,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAUT;AAED,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,IAAI,CAGhD;AAID,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE7D;AAED,wBAAgB,yBAAyB,IAAI,SAAS,MAAM,EAAE,CAE7D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,qBAAqB,IAAI,MAAM,GAAG,IAAI,CA0BrD;AAED;;;;;;;;GAQG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAclE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAS1D;AAED,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,QAMtD;AAED,wBAAgB,+BAA+B,CAC7C,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,iBAAiB,GAC1B,OAAO,CAWT;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAc/D;AAED,wBAAgB,oBAAoB,SAKnC"}

package/dist/credentials.js

@@ -6,7 +6,7 @@ import { AsyncLocalStorage } from 'async_hooks';
 function isNodeError(error) {
     return error instanceof Error;
 }
-function getConfigDir() {
+export function getConfigDir() {
     if (process.env.ORIZU_CONFIG_DIR) {
         return process.env.ORIZU_CONFIG_DIR;
     }
@@ -364,6 +364,17 @@ export function getActiveBaseUrl() {
     const config = loadCredentialsConfig();
     return config?.activeBaseUrl || null;
 }
+const secretsSeenThisProcess = new Set();
+export function rememberProcessSecret(secret) {
+    secretsSeenThisProcess.add(secret);
+    return secret;
+}
+export function rememberResolvedBearer(bearer) {
+    return rememberProcessSecret(bearer);
+}
+export function getSecretsSeenThisProcess() {
+    return [...secretsSeenThisProcess];
+}
 /**
  * In-sandbox bearer resolution (ALI-1044). Resolves a bearer supplied out-of-band
  * to the hosted agent, WITHOUT consulting credentials.json:
@@ -385,7 +396,7 @@ export function getActiveBaseUrl() {
 export function resolveEnvBearerToken() {
     const explicit = process.env.ORIZU_TOKEN;
     if (explicit && explicit.trim()) {
-        return explicit.trim();
+        return rememberResolvedBearer(explicit.trim());
     }
     const tokenFile = process.env.ORIZU_TOKEN_FILE;
     if (tokenFile && tokenFile.length > 0) {
@@ -404,7 +415,7 @@ export function resolveEnvBearerToken() {
         if (!token) {
             throw new Error(`ORIZU_TOKEN_FILE (${tokenFile}) is empty.`);
         }
-        return token;
+        return rememberResolvedBearer(token);
     }
     return null;
 }
@@ -426,7 +437,7 @@ export function resolveAuthTokenForBaseUrl(baseUrl) {
     if (!credentials) {
         throw new Error(`Not logged in for ${baseUrl}. Run \`orizu login --server ${baseUrl}\` (or \`--local\`) first.`);
     }
-    return 'accessToken' in credentials ? credentials.accessToken : credentials.apiKey;
+    return rememberResolvedBearer('accessToken' in credentials ? credentials.accessToken : credentials.apiKey);
 }
 /**
  * Non-throwing "is any auth available?" check (login --no-prompt-if-logged-in,

package/dist/dataset-transfer-download.d.ts

@@ -0,0 +1,2 @@
+export declare function transferDatasetDownload(datasetId: string, format: string, filename: string): Promise<void>;
+//# sourceMappingURL=dataset-transfer-download.d.ts.map

package/dist/dataset-transfer-download.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset-transfer-download.d.ts","sourceRoot":"","sources":["../src/dataset-transfer-download.ts"],"names":[],"mappings":"AAmBA,wBAAsB,uBAAuB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAyChH"}

package/dist/dataset-transfer-download.js

@@ -0,0 +1,66 @@
+import { Effect, Either, Schedule } from 'effect';
+import { writeFileSync } from 'node:fs';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { authedFetch } from './http.js';
+class DownloadHttpError extends Error {
+    status;
+    _tag = 'DownloadHttpError';
+    constructor(status, detail) {
+        super(`Download failed (HTTP ${status}): ${detail}`);
+        this.status = status;
+    }
+}
+class DownloadTransportError extends Error {
+    _tag = 'DownloadTransportError';
+    constructor(cause) {
+        super('Dataset download transport failed', { cause });
+    }
+}
+export async function transferDatasetDownload(datasetId, format, filename) {
+    const timeoutMs = datasetTransferTimeoutMs();
+    const download = Effect.tryPromise({
+        try: async (signal) => {
+            const response = await authedFetch(`/api/cli/datasets/${encodeURIComponent(datasetId)}/download?format=${encodeURIComponent(format)}`, { signal });
+            if (!response.ok)
+                throw new DownloadHttpError(response.status, await response.text());
+            return new Uint8Array(await response.arrayBuffer());
+        },
+        catch: cause => {
+            if (cause instanceof TypeError)
+                return new DownloadTransportError(cause);
+            return cause instanceof Error ? cause : new Error('Dataset download request failed', { cause });
+        },
+    }).pipe(Effect.timeoutFail({
+        duration: timeoutMs,
+        onTimeout: () => new Error('DATASET_TRANSFER_TIMEOUT: Dataset download exceeded its deadline'),
+    }), Effect.retry({
+        times: 2,
+        schedule: Schedule.spaced(100),
+        while: error => error instanceof DownloadTransportError || (error instanceof DownloadHttpError && [429, 502, 503, 504].includes(error.status)),
+    }));
+    const fileError = (cause) => new Error(`DATASET_DOWNLOAD_FILE: Could not save dataset to ${filename}: ${cause instanceof Error ? cause.message : String(cause)}`, { cause });
+    const write = (bytes) => Effect.try({
+        // Wait for the complete response, then retain the CLI's existing in-place
+        // write semantics, including inode metadata, hardlinks and symlink targets.
+        try: () => writeFileSync(filename, bytes, { mode: 0o600 }),
+        catch: fileError,
+    });
+    const controller = new AbortController();
+    const handleInterrupt = () => controller.abort();
+    process.once('SIGINT', handleInterrupt);
+    process.once('SIGTERM', handleInterrupt);
+    try {
+        const result = await Effect.runPromise(Effect.either(Effect.flatMap(download, write)), { signal: controller.signal });
+        if (Either.isLeft(result))
+            throw result.left;
+    }
+    catch (error) {
+        if (controller.signal.aborted)
+            throw new Error('DATASET_TRANSFER_INTERRUPTED: Dataset download cancelled');
+        throw error;
+    }
+    finally {
+        process.removeListener('SIGINT', handleInterrupt);
+        process.removeListener('SIGTERM', handleInterrupt);
+    }
+}

package/dist/dataset-transfer-policy.d.ts

@@ -0,0 +1,2 @@
+export declare function datasetTransferTimeoutMs(): number;
+//# sourceMappingURL=dataset-transfer-policy.d.ts.map

package/dist/dataset-transfer-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset-transfer-policy.d.ts","sourceRoot":"","sources":["../src/dataset-transfer-policy.ts"],"names":[],"mappings":"AAAA,wBAAgB,wBAAwB,IAAI,MAAM,CAOjD"}

package/dist/dataset-transfer-policy.js

@@ -0,0 +1,8 @@
+export function datasetTransferTimeoutMs() {
+    const configured = process.env.ORIZU_DATASET_TRANSFER_TIMEOUT_MS;
+    const timeoutMs = configured === undefined ? 120_000 : Number(configured);
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 300_000) {
+        throw new Error('DATASET_TRANSFER_CONFIG: ORIZU_DATASET_TRANSFER_TIMEOUT_MS must be an integer from 1 to 300000');
+    }
+    return timeoutMs;
+}

package/dist/dataset-transfer-upload.d.ts

@@ -0,0 +1,42 @@
+export interface DatasetUploadResponse {
+    dataset: {
+        id: string;
+        name: string;
+        rowCount: number;
+        sourceType: string;
+        url?: string;
+    };
+    readmeVersion?: {
+        id: string;
+        version_num: number;
+        created_at: string;
+    } | null;
+}
+interface DatasetSnapshot {
+    datasetVersion: {
+        id: string;
+    };
+}
+type UploadRows = Array<Record<string, unknown>>;
+type UploadSource = {
+    kind: 'jsonl';
+    file: string;
+} | {
+    kind: 'rows';
+    rows: UploadRows;
+    sourceType: 'csv' | 'json' | 'jsonl';
+};
+export interface DatasetUploadOptions {
+    project: string;
+    name: string;
+    source: UploadSource;
+    readmeMarkdown: string | null;
+    json: boolean;
+    onChunk: (index: number, rowCount: number) => void;
+}
+export declare function transferDatasetUpload(options: DatasetUploadOptions): Promise<{
+    data: DatasetUploadResponse;
+    version: DatasetSnapshot;
+}>;
+export {};
+//# sourceMappingURL=dataset-transfer-upload.d.ts.map

package/dist/dataset-transfer-upload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dataset-transfer-upload.d.ts","sourceRoot":"","sources":["../src/dataset-transfer-upload.ts"],"names":[],"mappings":"AASA,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACzF,aAAa,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;CAC/E;AAED,UAAU,eAAe;IAAG,cAAc,EAAE;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAA;CAAE;AAE5D,KAAK,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAChD,KAAK,YAAY,GAAG;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,UAAU,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,CAAA;CAAE,CAAA;AAE9H,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,YAAY,CAAA;IACpB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,IAAI,EAAE,OAAO,CAAA;IACb,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,IAAI,CAAA;CACnD;AAoHD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC;IAAE,IAAI,EAAE,qBAAqB,CAAC;IAAC,OAAO,EAAE,eAAe,CAAA;CAAE,CAAC,CAEvI"}

package/dist/dataset-transfer-upload.js

@@ -0,0 +1,110 @@
+import { Context, Effect, Either, Layer } from 'effect';
+import { ensureDatasetUploadSnapshot } from './dataset-upload-snapshot.js';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { extractErrorMessage } from './error-response.js';
+import { authedFetch } from './http.js';
+import { parseJsonResponse, sanitizeTerminalText } from './json-response.js';
+import { streamJsonlRowChunks } from './jsonl-stream.js';
+class DatasetWriteFailure extends Error {
+    outcome;
+    _tag = 'DatasetWriteFailure';
+    constructor(message, outcome, options) {
+        super(message, options);
+        this.outcome = outcome;
+    }
+}
+class DatasetInputFailure extends Error {
+    _tag = 'DatasetInputFailure';
+    constructor(cause) { super(cause instanceof Error ? cause.message : String(cause), { cause }); }
+}
+const DatasetUploadApi = Context.GenericTag('orizu/DatasetUploadApi');
+// Only the existing authentication client's rejected-token refresh may replay a
+// request. No transient/transport retries belong around these non-idempotent writes.
+function post(path, body, context, prefix, timeoutMs) {
+    return Effect.suspend(() => {
+        let requestStarted = false;
+        return Effect.tryPromise({
+            try: async (signal) => {
+                const response = await authedFetch(path, {
+                    method: 'POST', headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify(body), signal,
+                }, () => { requestStarted = true; });
+                if (!response.ok) {
+                    throw new DatasetWriteFailure(`${prefix}: ${await extractErrorMessage(response)}`, response.status >= 500 ? 'unknown' : 'rejected');
+                }
+                return await parseJsonResponse(response, context);
+            },
+            catch: cause => cause instanceof DatasetWriteFailure ? cause : new DatasetWriteFailure(cause instanceof Error ? cause.message : String(cause), requestStarted ? 'unknown' : 'rejected', { cause }),
+        }).pipe(Effect.timeoutFail({
+            duration: timeoutMs,
+            onTimeout: () => new DatasetWriteFailure(`DATASET_TRANSFER_TIMEOUT: ${context} exceeded its deadline`, requestStarted ? 'unknown' : 'rejected'),
+        }));
+    });
+}
+function liveUploadApi(options) {
+    const timeoutMs = datasetTransferTimeoutMs();
+    return Layer.succeed(DatasetUploadApi, {
+        create: (rows, sourceType) => post('/api/cli/datasets/upload', {
+            projectSlug: options.project, name: options.name, rows, sourceType,
+            ...(options.readmeMarkdown !== null ? { readmeMarkdown: options.readmeMarkdown } : {}),
+        }, 'Dataset upload', 'Upload failed', timeoutMs),
+        append: (id, rows) => post(`/api/cli/datasets/${encodeURIComponent(id)}/rows`, { rows }, 'Dataset append', 'Append failed', timeoutMs),
+        snapshot: id => post(`/api/cli/datasets/${encodeURIComponent(id)}/versions`, {}, 'Dataset version create', 'Failed to create dataset version', timeoutMs),
+    });
+}
+async function expectedPromise(program) {
+    const result = await Effect.runPromise(Effect.either(program));
+    if (Either.isLeft(result))
+        throw result.left;
+    return result.right;
+}
+function uploadProgram(options) {
+    return Effect.gen(function* () {
+        const api = yield* DatasetUploadApi;
+        const chunks = yield* Effect.acquireRelease(Effect.sync(() => options.source.kind === 'jsonl'
+            ? streamJsonlRowChunks(options.source.file)
+            : (async function* () { if (options.source.kind === 'rows')
+                yield options.source.rows; })()), iterator => Effect.promise(async () => { await iterator.return(undefined); }));
+        let data;
+        let confirmedRows = 0;
+        let chunkIndex = 0;
+        while (true) {
+            const next = yield* Effect.tryPromise({ try: () => chunks.next(), catch: cause => new DatasetInputFailure(cause) }).pipe(Effect.mapError(error => new Error(data
+                ? `Upload stopped while reading the next JSONL chunk: ${error.message}\nDataset ${sanitizeTerminalText(data.dataset.name)} (${sanitizeTerminalText(data.dataset.id)}) was created and ${confirmedRows} rows were uploaded. Fix the file, remove the first ${confirmedRows} rows, and run orizu datasets append --dataset ${data.dataset.id} --file <remaining-file>.`
+                : error.message)));
+            if (next.done)
+                break;
+            chunkIndex++;
+            if (options.source.kind === 'jsonl')
+                yield* Effect.sync(() => options.onChunk(chunkIndex, next.value.length));
+            const write = data
+                ? api.append(data.dataset.id, next.value).pipe(Effect.map(result => ({
+                    data: { ...data, dataset: { ...data.dataset, rowCount: result.dataset.rowCount } },
+                    added: result.appendedCount,
+                })))
+                : api.create(next.value, options.source.kind === 'jsonl' ? 'jsonl' : options.source.sourceType).pipe(Effect.map(result => ({ data: result, added: result.dataset.rowCount })));
+            const result = yield* write.pipe(Effect.mapError(error => {
+                if (error.outcome === 'unknown') {
+                    return new Error(`DATASET_UPLOAD_UNCERTAIN: Chunk ${chunkIndex} may have committed, but its outcome could not be confirmed: ${error.message}\n` +
+                        (data ? `Dataset ${sanitizeTerminalText(data.dataset.id)} has ${confirmedRows} confirmed uploaded rows. ` : 'Dataset creation could not be confirmed. ') +
+                        'Inspect the dataset and reconcile row IDs before retrying; do not replay this chunk blindly.');
+                }
+                return new Error(data
+                    ? `Chunk ${chunkIndex} failed: ${error.message}\nDataset ${sanitizeTerminalText(data.dataset.name)} (${sanitizeTerminalText(data.dataset.id)}) was created and ${confirmedRows} rows were uploaded. To retry, remove the first ${confirmedRows} rows from your file and run orizu datasets append --dataset ${data.dataset.id} --file <remaining-file>.`
+                    : error.message);
+            }));
+            data = result.data;
+            confirmedRows += result.added;
+        }
+        if (!data)
+            return yield* Effect.fail(new Error('Dataset file contains no rows'));
+        const version = yield* Effect.tryPromise({
+            try: () => ensureDatasetUploadSnapshot(data.dataset, options.json, id => expectedPromise(api.snapshot(id))),
+            catch: cause => cause instanceof Error ? cause : new Error(String(cause)),
+        });
+        return { data, version };
+    });
+}
+export function transferDatasetUpload(options) {
+    return expectedPromise(uploadProgram(options).pipe(Effect.scoped, Effect.provide(liveUploadApi(options))));
+}

package/dist/feedback-cli.d.ts

@@ -0,0 +1,14 @@
+export interface FeedbackCliIo {
+    json: boolean;
+    print: (message: string) => void;
+    printErr: (message: string) => void;
+    fetcher?: (path: string, init?: RequestInit) => Promise<Response>;
+    configDir?: string;
+    cwd?: string;
+    now?: () => number;
+    homeDir?: string;
+    hasAuth?: (baseUrl: string) => boolean;
+}
+export declare function resolveFeedbackTimeoutMs(baseUrl: string): number;
+export declare function feedbackCommand(args: string[], io: FeedbackCliIo): Promise<number>;
+//# sourceMappingURL=feedback-cli.d.ts.map

package/dist/feedback-cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feedback-cli.d.ts","sourceRoot":"","sources":["../src/feedback-cli.ts"],"names":[],"mappings":"AAyDA,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IACjE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAA;CACvC;AAwaD,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAWhE;AAiCD,wBAAsB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAmOxF"}