orizu 0.5.45 → 0.5.46

package/dist/account-directory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-directory.d.ts","sourceRoot":"","sources":["../src/account-directory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,2BAA2B,EAAe,MAAM,WAAW,CAAA;AAEzE,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAUD,UAAU,iBAAiB;IACzB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,eAAe,EAAE,MAAM,CAAA;QACvB,yBAAyB,EAAE,MAAM,CAAA;QACjC,wBAAwB,EAAE,MAAM,CAAA;QAChC,MAAM,EAAE;YACN,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;SAChB,CAAA;QACD,kBAAkB,EAAE,MAAM,CAAA;QAC1B,SAAS,EAAE,KAAK,CAAC;YACf,UAAU,EAAE,MAAM,CAAA;YAClB,KAAK,EAAE,MAAM,CAAA;YACb,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;YACf,KAAK,EAAE,MAAM,CAAA;SACd,CAAC,CAAA;KACH,CAAA;CACF;AAED,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;CAarB,CAAA;AA2CV,KAAK,oBAAoB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;AAChE,iBAAe,UAAU,CAAC,OAAO,GAAE,oBAAkC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAOtF;AAED,iBAAe,aAAa,CAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC,CASpB;AAED,iBAAe,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAY9E;AAED,iBAAe,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAUlF;AAED,iBAAe,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU1F;AAYD,iBAAe,kBAAkB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,iBAAe,qBAAqB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,CAAC,CA6BlB;AAED,iBAAe,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAmElF;AAED,iBAAe,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5E;AAED,iBAAe,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwB1D;AAED,iBAAe,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB9G;AAED,iBAAe,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB9F;AA2FD,iBAAS,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,QAiBtD;AAED,iBAAe,SAAS,kBAOvB;AAiBD,iBAAe,UAAU,kBAsBxB;AAED,iBAAe,YAAY,kBAS1B;AAED,iBAAe,aAAa,kBAyB3B;AAED,iBAAe,eAAe,kBAQ7B;AAED,iBAAe,aAAa,kBAqB3B;AAED,iBAAe,gBAAgB,kBAc9B;AAED,iBAAe,oBAAoB,kBAoBlC;AAED,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,SAAS,EACT,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,uBAAuB,GACxB,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"account-directory.d.ts","sourceRoot":"","sources":["../src/account-directory.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,KAAK,2BAA2B,EAAe,MAAM,WAAW,CAAA;AAEzE,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,UAAU,IAAI;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,UAAU,UAAU;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,iBAAiB,EAAE,MAAM,CAAA;IACzB,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,cAAc;IACtB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,WAAW,EAAE,MAAM,CAAA;IACnB,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED,UAAU,gBAAgB;IACxB,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAUD,UAAU,iBAAiB;IACzB,IAAI,EAAE;QACJ,EAAE,EAAE,MAAM,CAAA;QACV,KAAK,EAAE,MAAM,CAAA;QACb,MAAM,EAAE,MAAM,CAAA;QACd,SAAS,EAAE,MAAM,CAAA;QACjB,QAAQ,EAAE,MAAM,CAAA;QAChB,QAAQ,EAAE,MAAM,CAAA;QAChB,WAAW,EAAE,MAAM,CAAA;QACnB,WAAW,EAAE,MAAM,CAAA;QACnB,eAAe,EAAE,MAAM,CAAA;QACvB,yBAAyB,EAAE,MAAM,CAAA;QACjC,wBAAwB,EAAE,MAAM,CAAA;QAChC,MAAM,EAAE;YACN,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;SAChB,CAAA;QACD,kBAAkB,EAAE,MAAM,CAAA;QAC1B,SAAS,EAAE,KAAK,CAAC;YACf,UAAU,EAAE,MAAM,CAAA;YAClB,KAAK,EAAE,MAAM,CAAA;YACb,SAAS,EAAE,MAAM,CAAA;YACjB,UAAU,EAAE,MAAM,CAAA;YAClB,OAAO,EAAE,MAAM,CAAA;YACf,OAAO,EAAE,MAAM,CAAA;YACf,KAAK,EAAE,MAAM,CAAA;SACd,CAAC,CAAA;KACH,CAAA;CACF;AAED,QAAA,MAAM,yBAAyB;;;;;;;;;;;;;CAarB,CAAA;AA2CV,KAAK,oBAAoB,GAAG,2BAA2B,CAAC,OAAO,CAAC,CAAA;AAChE,iBAAe,UAAU,CAAC,OAAO,GAAE,oBAAkC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAOtF;AAED,iBAAe,aAAa,CAC1B,QAAQ,CAAC,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,EAAE,CAAC,CASpB;AAED,iBAAe,UAAU,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAY9E;AAED,iBAAe,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAUlF;AAED,iBAAe,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAW,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAU1F;AAYD,iBAAe,kBAAkB,CAC/B,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,iBAAe,qBAAqB,CAClC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,OAAO,CAAC,CA6BlB;AAED,iBAAe,uBAAuB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAmElF;AAED,iBAAe,kBAAkB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAG5E;AAED,iBAAe,yBAAyB,IAAI,OAAO,CAAC,MAAM,CAAC,CAwB1D;AAED,iBAAe,wBAAwB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CAkB9G;AAED,iBAAe,0BAA0B,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAmB9F;AA2FD,iBAAS,sBAAsB,CAAC,IAAI,EAAE,iBAAiB,QAiBtD;AAED,iBAAe,SAAS,kBAOvB;AAiBD,iBAAe,UAAU,kBAsBxB;AAED,iBAAe,YAAY,kBAS1B;AAED,iBAAe,aAAa,kBAyB3B;AAED,iBAAe,eAAe,kBAQ7B;AAED,iBAAe,aAAa,kBAc3B;AAED,iBAAe,gBAAgB,kBAc9B;AAED,iBAAe,oBAAoB,kBAoBlC;AAED,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,UAAU,EACV,SAAS,EACT,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,yBAAyB,EACzB,0BAA0B,EAC1B,yBAAyB,EACzB,SAAS,EACT,UAAU,EACV,eAAe,EACf,aAAa,EACb,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,aAAa,EACb,uBAAuB,GACxB,CAAA;AAED,YAAY,EAAE,IAAI,EAAE,oBAAoB,EAAE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}

package/dist/account-directory.js

@@ -357,20 +357,13 @@ async function addTeamMember() {
     if (!email) {
         throw new Error('Usage: orizu teams members add --email <email> [--team <teamSlug>]');
     }
-    const response = await authedFetch(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
-        method: 'POST',
-        headers: { 'Content-Type': 'application/json' },
-        body: JSON.stringify({ email }),
-    });
-    if (!response.ok) {
-        throw new Error(`Failed to add team member: ${await response.text()}`);
-    }
-    const data = await parseJsonResponse(response, 'Team member add');
+    const { addTeamMemberWithDeadline } = await import('./team-member-add-workflow.js');
+    const member = await addTeamMemberWithDeadline(teamSlug, email, authedFetch);
     if (hasJsonFlag()) {
-        printJson({ member: data.member });
+        printJson({ member });
         return;
     }
-    printLine(`Added team member ${sanitizeTerminalText(data.member.email)} (${sanitizeTerminalText(data.member.id)})`);
+    printLine(`Added team member ${sanitizeTerminalText(member.email)} (${sanitizeTerminalText(member.id)})`);
 }
 async function removeTeamMember() {
     const teamSlug = await resolveTeamSlug(getArg('--team'));

package/dist/team-member-add-workflow.d.ts

@@ -0,0 +1,15 @@
+import { Schema } from 'effect';
+declare const AddReply: Schema.Struct<{
+    readonly member: Schema.Struct<{
+        readonly id: Schema.NonEmptyString;
+        readonly email: Schema.String;
+    }>;
+}>;
+/** The member as the server sent it; `--json` prints every field it has. */
+export type AddedMember = typeof AddReply.Type['member'] & Readonly<Record<string, unknown>>;
+/** Sends one request; calls `onRequestStart` just before anything goes out. */
+export type TeamMemberAddRequest = (path: string, init: RequestInit, onRequestStart?: () => void) => Promise<Response>;
+/** `orizu teams members add`: the invited member, or an error saying whether the invite may be saved. */
+export declare function addTeamMemberWithDeadline(teamSlug: string, email: string, request: TeamMemberAddRequest): Promise<AddedMember>;
+export {};
+//# sourceMappingURL=team-member-add-workflow.d.ts.map

package/dist/team-member-add-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"team-member-add-workflow.d.ts","sourceRoot":"","sources":["../src/team-member-add-workflow.ts"],"names":[],"mappings":"AAAA,OAAO,EAA+B,MAAM,EAAE,MAAM,QAAQ,CAAA;AAmB5D,QAAA,MAAM,QAAQ;;;;;EAKZ,CAAA;AAEF,4EAA4E;AAC5E,MAAM,MAAM,WAAW,GAAG,OAAO,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;AAE5F,+EAA+E;AAC/E,MAAM,MAAM,oBAAoB,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,IAAI,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AA2EtH,yGAAyG;AACzG,wBAAsB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,GAAG,OAAO,CAAC,WAAW,CAAC,CAMpI"}

package/dist/team-member-add-workflow.js

@@ -0,0 +1,111 @@
+import { Cause, Effect, Exit, Result, Schema } from 'effect';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { extractErrorMessage } from './error-response.js';
+import { sanitizeTerminalText } from './json-response.js';
+import { appErrorOf, unreachedCode } from './request-outcome.js';
+// Loaded only through `await import(...)`, like the dataset workflows.
+const FAILED = 'Failed to add team member';
+// What the route says when it cannot tell whether the invite was saved (ORI-2383 slice A).
+const SERVER_MAY_BE_SAVED = 'Invite may already be saved. Refresh the member list before inviting again.';
+// The route saves the address trimmed and lowercased, so the check names that address.
+const mayBeInvited = (teamSlug, email) => {
+    const saved = sanitizeTerminalText(email.trim().toLowerCase());
+    return `${saved} may already be invited: run \`orizu teams members list --team ${teamSlug}\` and look for ${saved}. If they are listed, they were invited; don't invite them again.`;
+};
+const AddReply = Schema.Struct({
+    member: Schema.Struct({
+        id: Schema.NonEmptyString,
+        email: Schema.String,
+    }),
+});
+// The invite may be saved when the server says so, when the reply was lost,
+// late or unreadable after the request was sent, when a 5xx did not come from
+// the app (a gateway giving up while the app kept working), or when the reply
+// has no member. Any other error reply is a clear refusal.
+class TeamMemberAddFailure extends Error {
+    mayBeSaved;
+    _tag = 'TeamMemberAddFailure';
+    constructor(message, mayBeSaved) {
+        super(message);
+        this.mayBeSaved = mayBeSaved;
+    }
+}
+// One request, never retried: a retry after a saved invite is refused as
+// "already a member", which hides that the first one worked.
+function memberAdd(teamSlug, email, request, timeoutMs) {
+    return Effect.suspend(() => {
+        let sent = false;
+        let timedOut = false;
+        return Effect.tryPromise({
+            try: async (signal) => {
+                const controller = new AbortController();
+                const abort = () => controller.abort();
+                const timer = setTimeout(() => { timedOut = true; controller.abort(); }, timeoutMs);
+                if (signal.aborted)
+                    abort();
+                else
+                    signal.addEventListener('abort', abort, { once: true });
+                try {
+                    const response = await request(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
+                        method: 'POST',
+                        headers: { 'Content-Type': 'application/json' },
+                        body: JSON.stringify({ email }),
+                        signal: controller.signal,
+                    }, () => { sent = true; });
+                    if (!response.ok) {
+                        const appError = await appErrorOf(response.clone());
+                        const detail = await extractErrorMessage(response);
+                        if (appError === SERVER_MAY_BE_SAVED)
+                            throw new TeamMemberAddFailure(appError, true);
+                        if (response.status < 400 || (response.status >= 500 && appError === null)) {
+                            throw new TeamMemberAddFailure(`Member add got no clear answer (status ${response.status}).`, true);
+                        }
+                        // The route's own failures already say what failed.
+                        throw new TeamMemberAddFailure(detail.startsWith('Failed to ') ? detail : `${FAILED}: ${detail}`, false);
+                    }
+                    // Reading the body can still fail or stall; that stays under the deadline.
+                    const body = await response.text();
+                    let data;
+                    try {
+                        data = JSON.parse(body);
+                    }
+                    catch {
+                        data = undefined;
+                    }
+                    if (Result.isFailure(Schema.decodeUnknownResult(AddReply)(data))) {
+                        throw new TeamMemberAddFailure(`Member add returned an unexpected response (status ${response.status}).`, true);
+                    }
+                    // Decoding keeps only the named fields; the reply's member is returned whole.
+                    return data.member;
+                }
+                finally {
+                    clearTimeout(timer);
+                    signal.removeEventListener('abort', abort);
+                    controller.abort();
+                }
+            },
+            catch: cause => {
+                if (cause instanceof TeamMemberAddFailure)
+                    return cause;
+                if (timedOut)
+                    return new TeamMemberAddFailure('Member add exceeded its deadline.', sent);
+                const unreached = unreachedCode(cause);
+                if (unreached)
+                    return new TeamMemberAddFailure(`${FAILED}: could not reach the server (${unreached}).`, false);
+                const message = cause instanceof Error ? cause.message : String(cause);
+                if (!sent || message.startsWith('ORIZU_AUTH_CONTEXT_CHANGED:'))
+                    return new TeamMemberAddFailure(message, false);
+                // Also reached when a sign-in refresh fails after a 401: still told to
+                // check, so say only that the invite did not finish.
+                return new TeamMemberAddFailure(`Member add did not finish: ${message}`, true);
+            },
+        });
+    });
+}
+/** `orizu teams members add`: the invited member, or an error saying whether the invite may be saved. */
+export async function addTeamMemberWithDeadline(teamSlug, email, request) {
+    const exit = await Effect.runPromiseExit(memberAdd(teamSlug, email, request, datasetTransferTimeoutMs()).pipe(Effect.mapError(failure => new Error(failure.mayBeSaved ? `${failure.message}\n${mayBeInvited(teamSlug, email)}` : failure.message))));
+    if (Exit.isSuccess(exit))
+        return exit.value;
+    throw Cause.squash(exit.cause);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orizu",
-  "version": "0.5.45",
+  "version": "0.5.46",
   "private": false,
   "type": "module",
   "main": "./dist/index.js",

package/src/account-directory.ts

@@ -634,20 +634,13 @@ async function addTeamMember() {
     throw new Error('Usage: orizu teams members add --email <email> [--team <teamSlug>]')
   }
 
-  const response = await authedFetch(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
-    method: 'POST',
-    headers: { 'Content-Type': 'application/json' },
-    body: JSON.stringify({ email }),
-  })
-  if (!response.ok) {
-    throw new Error(`Failed to add team member: ${await response.text()}`)
-  }
-  const data = await parseJsonResponse<{ member: TeamMember }>(response, 'Team member add')
+  const { addTeamMemberWithDeadline } = await import('./team-member-add-workflow.js')
+  const member = await addTeamMemberWithDeadline(teamSlug, email, authedFetch)
   if (hasJsonFlag()) {
-    printJson({ member: data.member })
+    printJson({ member })
     return
   }
-  printLine(`Added team member ${sanitizeTerminalText(data.member.email)} (${sanitizeTerminalText(data.member.id)})`)
+  printLine(`Added team member ${sanitizeTerminalText(member.email)} (${sanitizeTerminalText(member.id)})`)
 }
 
 async function removeTeamMember() {

package/src/team-member-add-workflow.ts

@@ -0,0 +1,113 @@
+import { Cause, Effect, Exit, Result, Schema } from 'effect'
+
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js'
+import { extractErrorMessage } from './error-response.js'
+import { sanitizeTerminalText } from './json-response.js'
+import { appErrorOf, unreachedCode } from './request-outcome.js'
+
+// Loaded only through `await import(...)`, like the dataset workflows.
+
+const FAILED = 'Failed to add team member'
+// What the route says when it cannot tell whether the invite was saved (ORI-2383 slice A).
+const SERVER_MAY_BE_SAVED = 'Invite may already be saved. Refresh the member list before inviting again.'
+
+// The route saves the address trimmed and lowercased, so the check names that address.
+const mayBeInvited = (teamSlug: string, email: string) => {
+  const saved = sanitizeTerminalText(email.trim().toLowerCase())
+  return `${saved} may already be invited: run \`orizu teams members list --team ${teamSlug}\` and look for ${saved}. If they are listed, they were invited; don't invite them again.`
+}
+
+const AddReply = Schema.Struct({
+  member: Schema.Struct({
+    id: Schema.NonEmptyString,
+    email: Schema.String,
+  }),
+})
+
+/** The member as the server sent it; `--json` prints every field it has. */
+export type AddedMember = typeof AddReply.Type['member'] & Readonly<Record<string, unknown>>
+
+/** Sends one request; calls `onRequestStart` just before anything goes out. */
+export type TeamMemberAddRequest = (path: string, init: RequestInit, onRequestStart?: () => void) => Promise<Response>
+
+// The invite may be saved when the server says so, when the reply was lost,
+// late or unreadable after the request was sent, when a 5xx did not come from
+// the app (a gateway giving up while the app kept working), or when the reply
+// has no member. Any other error reply is a clear refusal.
+class TeamMemberAddFailure extends Error {
+  readonly _tag = 'TeamMemberAddFailure'
+  constructor(message: string, readonly mayBeSaved: boolean) { super(message) }
+}
+
+// One request, never retried: a retry after a saved invite is refused as
+// "already a member", which hides that the first one worked.
+function memberAdd(teamSlug: string, email: string, request: TeamMemberAddRequest, timeoutMs: number): Effect.Effect<AddedMember, TeamMemberAddFailure> {
+  return Effect.suspend(() => {
+    let sent = false
+    let timedOut = false
+    return Effect.tryPromise({
+      try: async signal => {
+        const controller = new AbortController()
+        const abort = () => controller.abort()
+        const timer = setTimeout(() => { timedOut = true; controller.abort() }, timeoutMs)
+        if (signal.aborted) abort()
+        else signal.addEventListener('abort', abort, { once: true })
+        try {
+          const response = await request(`/api/cli/teams/${encodeURIComponent(teamSlug)}/members`, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ email }),
+            signal: controller.signal,
+          }, () => { sent = true })
+          if (!response.ok) {
+            const appError = await appErrorOf(response.clone())
+            const detail = await extractErrorMessage(response)
+            if (appError === SERVER_MAY_BE_SAVED) throw new TeamMemberAddFailure(appError, true)
+            if (response.status < 400 || (response.status >= 500 && appError === null)) {
+              throw new TeamMemberAddFailure(`Member add got no clear answer (status ${response.status}).`, true)
+            }
+            // The route's own failures already say what failed.
+            throw new TeamMemberAddFailure(detail.startsWith('Failed to ') ? detail : `${FAILED}: ${detail}`, false)
+          }
+          // Reading the body can still fail or stall; that stays under the deadline.
+          const body = await response.text()
+          let data: unknown
+          try {
+            data = JSON.parse(body)
+          } catch {
+            data = undefined
+          }
+          if (Result.isFailure(Schema.decodeUnknownResult(AddReply)(data))) {
+            throw new TeamMemberAddFailure(`Member add returned an unexpected response (status ${response.status}).`, true)
+          }
+          // Decoding keeps only the named fields; the reply's member is returned whole.
+          return (data as { member: AddedMember }).member
+        } finally {
+          clearTimeout(timer)
+          signal.removeEventListener('abort', abort)
+          controller.abort()
+        }
+      },
+      catch: cause => {
+        if (cause instanceof TeamMemberAddFailure) return cause
+        if (timedOut) return new TeamMemberAddFailure('Member add exceeded its deadline.', sent)
+        const unreached = unreachedCode(cause)
+        if (unreached) return new TeamMemberAddFailure(`${FAILED}: could not reach the server (${unreached}).`, false)
+        const message = cause instanceof Error ? cause.message : String(cause)
+        if (!sent || message.startsWith('ORIZU_AUTH_CONTEXT_CHANGED:')) return new TeamMemberAddFailure(message, false)
+        // Also reached when a sign-in refresh fails after a 401: still told to
+        // check, so say only that the invite did not finish.
+        return new TeamMemberAddFailure(`Member add did not finish: ${message}`, true)
+      },
+    })
+  })
+}
+
+/** `orizu teams members add`: the invited member, or an error saying whether the invite may be saved. */
+export async function addTeamMemberWithDeadline(teamSlug: string, email: string, request: TeamMemberAddRequest): Promise<AddedMember> {
+  const exit = await Effect.runPromiseExit(memberAdd(teamSlug, email, request, datasetTransferTimeoutMs()).pipe(
+    Effect.mapError(failure => new Error(failure.mayBeSaved ? `${failure.message}\n${mayBeInvited(teamSlug, email)}` : failure.message)),
+  ))
+  if (Exit.isSuccess(exit)) return exit.value
+  throw Cause.squash(exit.cause)
+}