orizu 0.5.52 → 0.5.54

package/dist/app-commands.d.ts

@@ -20,7 +20,8 @@ declare function readPromptSidecars(manifest: Record<string, unknown>, promptDir
 declare function writeTextFileEnsuringDir(pathArg: string, content: string): void;
 declare function readManifestFile(dirArg: string): Record<string, unknown>;
 declare function createAppFromFile(): Promise<void>;
-declare function previewAppFromFile(): Promise<void>;
+/** Resolves to the exit code of a stop (130 or 143), or undefined when the preview ended normally. */
+declare function previewAppFromFile(): Promise<number | undefined>;
 declare function updateAppFromFile(): Promise<void>;
 declare function linkAppDataset(): Promise<void>;
 declare function appDetail(): Promise<void>;

package/dist/app-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app-commands.d.ts","sourceRoot":"","sources":["../src/app-commands.ts"],"names":[],"mappings":"AAuCA,iBAAe,QAAQ,kBActB;AAED,iBAAS,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAU/C;AAED,iBAAS,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,iBAAS,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9D;AAeD,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAElE;AAED,iBAAS,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG1F;AAED,iBAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUjE;AAED,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEjD;AAED,iBAAS,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG;IACpF,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb,CAeA;AAED,iBAAS,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM;;;;;IAoB/E;AAED,iBAAS,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,QAGjE;AAED,iBAAS,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjE;AAyED,iBAAe,iBAAiB,kBAmG/B;AAED,iBAAe,kBAAkB,kBAiDhC;AAED,iBAAe,iBAAiB,kBAwF/B;AAED,iBAAe,cAAc,kBAiC5B;AA+CD,iBAAe,SAAS,kBA2CvB;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,CAK3G;AAED,iBAAe,eAAe,kBAmD7B;AAED,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,EACR,gBAAgB,EAChB,wBAAwB,EACxB,SAAS,EACT,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,eAAe,GAChB,CAAA"}
+{"version":3,"file":"app-commands.d.ts","sourceRoot":"","sources":["../src/app-commands.ts"],"names":[],"mappings":"AAuCA,iBAAe,QAAQ,kBActB;AAED,iBAAS,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAU/C;AAED,iBAAS,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUhD;AAED,iBAAS,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9D;AAeD,iBAAS,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAElE;AAED,iBAAS,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG1F;AAED,iBAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAUjE;AAED,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAEjD;AAED,iBAAS,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG;IACpF,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;CACb,CAeA;AAED,iBAAS,kBAAkB,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM;;;;;IAoB/E;AAED,iBAAS,wBAAwB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,QAGjE;AAED,iBAAS,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjE;AAyED,iBAAe,iBAAiB,kBAmG/B;AAED,sGAAsG;AACtG,iBAAe,kBAAkB,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAwD/D;AAED,iBAAe,iBAAiB,kBAwF/B;AAED,iBAAe,cAAc,kBAiC5B;AA+CD,iBAAe,SAAS,kBA2CvB;AAED,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,eAAe,EAAE,MAAM,GAAG,MAAM,CAK3G;AAED,iBAAe,eAAe,kBAmD7B;AAED,OAAO,EACL,cAAc,EACd,YAAY,EACZ,gBAAgB,EAChB,qBAAqB,EACrB,kBAAkB,EAClB,gBAAgB,EAChB,QAAQ,EACR,gBAAgB,EAChB,wBAAwB,EACxB,SAAS,EACT,eAAe,EACf,QAAQ,EACR,iBAAiB,EACjB,kBAAkB,EAClB,iBAAiB,EACjB,cAAc,EACd,SAAS,EACT,eAAe,GAChB,CAAA"}

package/dist/app-commands.js

@@ -13,7 +13,6 @@ import { inspectAppDestination } from './app-publish-paths.js';
 import { authedFetch, getBaseUrl } from './http.js';
 import { appPageUrl } from './app-page-url.js';
 import { parseJsonResponse, sanitizeHumanInlineText, sanitizeTerminalText } from './json-response.js';
-import { runLocalAppPreview } from './preview-runtime.js';
 import { findWorkspaceRoot } from './workspace.js';
 async function listApps() {
     const project = getArg('--project') || await resolveProjectSlug(null);
@@ -289,6 +288,7 @@ async function createAppFromFile() {
         throw new Error(`${getErrorMessage(error)}\nApp ID: ${appId}\nFolder: ${recoveryFolder}\nRetry: ${retryArgs.map(shellSingleQuote).join(' ')}`);
     }
 }
+/** Resolves to the exit code of a stop (130 or 143), or undefined when the preview ended normally. */
 async function previewAppFromFile() {
     const filePath = getArg('--file');
     const inputSchemaPath = getArg('--input-schema');
@@ -306,7 +306,29 @@ async function previewAppFromFile() {
     const outputJsonSchema = readJsonFile(outputSchemaPath);
     const sampleRow = readJsonFile(sampleRowPath);
     const expandedScreenshotPath = screenshotPath ? expandHomePath(screenshotPath) : undefined;
-    const result = await runLocalAppPreview({
+    const printRendered = (result) => {
+        if (hasJsonFlag()) {
+            printJson({
+                url: result.url,
+                screenshotPath: result.screenshotPath || null,
+                warnings: result.warnings,
+            });
+            return;
+        }
+        printLine(`Preview rendered: ${formatTerminalLink(result.url)}`);
+        if (result.screenshotPath) {
+            printLine(`Screenshot: ${sanitizeTerminalText(result.screenshotPath)}`);
+        }
+        if (headed || keepOpen) {
+            printLine('Headed preview is running. Close Chromium or stop the command when you are done.');
+        }
+        if (result.warnings.length > 0) {
+            printLine(`Warnings: ${sanitizeTerminalText(result.warnings.join('; '))}`);
+        }
+    };
+    const { runPreviewCommand } = await import('./preview-workflow.js');
+    // Printed once the page is ready, so a keep-open preview says so while it is open.
+    const outcome = await runPreviewCommand({
         filePath: expandedFilePath,
         inputSchema: inputJsonSchema,
         outputSchema: outputJsonSchema,
@@ -315,25 +337,10 @@ async function previewAppFromFile() {
         componentName: component,
         headed,
         keepOpen,
+        onRendered: printRendered,
     });
-    if (hasJsonFlag()) {
-        printJson({
-            url: result.url,
-            screenshotPath: result.screenshotPath || null,
-            warnings: result.warnings,
-        });
-        return;
-    }
-    printLine(`Preview rendered: ${formatTerminalLink(result.url)}`);
-    if (result.screenshotPath) {
-        printLine(`Screenshot: ${sanitizeTerminalText(result.screenshotPath)}`);
-    }
-    if (headed || keepOpen) {
-        printLine('Headed preview is running. Close Chromium or stop the command when you are done.');
-    }
-    if (result.warnings.length > 0) {
-        printLine(`Warnings: ${sanitizeTerminalText(result.warnings.join('; '))}`);
-    }
+    // A stop prints nothing more.
+    return 'interrupted' in outcome ? outcome.interrupted : undefined;
 }
 async function updateAppFromFile() {
     const workspaceRoot = hostedWorkspaceRoot();

package/dist/auth-commands.js

@@ -4,7 +4,7 @@ import { sanitizeTerminalText, parseJsonResponse } from './json-response.js';
 import { isInteractiveTerminal, hasArg, hasJsonFlag, getArg } from './command-line-arguments.js';
 import { getBaseUrl, resolveLoginTarget, resolveLogoutTarget, assertSecureTokenTransport, authedFetch, } from './http.js';
 import { clearUnreadableServerCredentials, hasResolvableAuth, rememberProcessSecret, saveServerCredentials, getServerCredentials, resolveAuthTokenForBaseUrl, } from './credentials.js';
-import { printJson, printLine, printLoginProgress } from './cli-console-output.js';
+import { printJson, printJsonWithHeldSecrets, printLine, printLoginProgress } from './cli-console-output.js';
 import { resolveProjectSelection } from './account-directory.js';
 function isNodeError(error) {
     return error instanceof Error;
@@ -196,7 +196,7 @@ async function printEnv() {
     const projectId = project?.id || getArg('--project-id') || process.env.ORIZU_PROJECT_ID || '';
     const projectSlug = project ? `${project.teamSlug}/${project.slug}` : process.env.ORIZU_PROJECT || '';
     if (hasJsonFlag()) {
-        printJson({
+        printJsonWithHeldSecrets({
             ORIZU_API_URL: baseUrl,
             ORIZU_TOKEN: token,
             ORIZU_PROJECT_ID: projectId,

package/dist/cli-console-output.d.ts

@@ -8,5 +8,11 @@ declare function printError(message: string): void;
 declare function printLoginProgress(message: string): void;
 declare function printPushDisclosures(data: Record<string, unknown>): void;
 declare function printJson(value: Record<string, unknown>): void;
-export { getErrorMessage, printJson, printLine, printPushDisclosures, getCliVersion, printBannerIfInteractive, printVersion, printUsage, printError, printLoginProgress, };
+/**
+ * The one --json output allowed to carry a held secret: `orizu env --json`
+ * prints the token so a script can export it. Any new caller needs its own
+ * reviewed change and a case in cli-json-output-scrub-process.test.ts.
+ */
+declare function printJsonWithHeldSecrets(value: Record<string, unknown>): void;
+export { getErrorMessage, printJson, printJsonWithHeldSecrets, printLine, printPushDisclosures, getCliVersion, printBannerIfInteractive, printVersion, printUsage, printError, printLoginProgress, };
 //# sourceMappingURL=cli-console-output.d.ts.map

package/dist/cli-console-output.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-console-output.d.ts","sourceRoot":"","sources":["../src/cli-console-output.ts"],"names":[],"mappings":"AAUA,iBAAS,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED,iBAAS,aAAa,IAAI,MAAM,CAU/B;AAED,iBAAS,SAAS,CAAC,OAAO,SAAK,QAE9B;AAED,iBAAS,YAAY,SAEpB;AAED,iBAAS,wBAAwB,SAMhC;AAED,iBAAS,UAAU,SAGlB;AAED,iBAAS,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEzC;AAED,iBAAS,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMjD;AAED,iBAAS,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAMjE;AAED,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAEhD;AAED,OAAO,EACL,eAAe,EACf,SAAS,EACT,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,CAAA"}
+{"version":3,"file":"cli-console-output.d.ts","sourceRoot":"","sources":["../src/cli-console-output.ts"],"names":[],"mappings":"AAWA,iBAAS,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE/C;AAED,iBAAS,aAAa,IAAI,MAAM,CAU/B;AAGD,iBAAS,SAAS,CAAC,OAAO,SAAK,QAE9B;AAED,iBAAS,YAAY,SAEpB;AAED,iBAAS,wBAAwB,SAMhC;AAED,iBAAS,UAAU,SAGlB;AAED,iBAAS,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAEzC;AAED,iBAAS,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAMjD;AAED,iBAAS,oBAAoB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAMjE;AAED,iBAAS,SAAS,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAEhD;AAED;;;;GAIG;AACH,iBAAS,wBAAwB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,QAI/D;AAED,OAAO,EACL,eAAe,EACf,SAAS,EACT,wBAAwB,EACxB,SAAS,EACT,oBAAoB,EACpB,aAAa,EACb,wBAAwB,EACxB,YAAY,EACZ,UAAU,EACV,UAAU,EACV,kBAAkB,GACnB,CAAA"}

package/dist/cli-console-output.js

@@ -4,7 +4,8 @@ import { stdout as output } from 'process';
 import { renderBanner } from './banner.js';
 import { renderRootHelp } from './help.js';
 import { sanitizeTerminalText } from './json-response.js';
-import { hasJsonFlag } from './command-line-arguments.js';
+import { cliArgs, hasJsonFlag } from './command-line-arguments.js';
+import { hideHeldSecrets } from './json-output-scrub.js';
 import { reportReplacementWarning } from './report-replacement-warning.js';
 function getErrorMessage(error) {
     return error instanceof Error ? error.message : String(error);
@@ -16,8 +17,9 @@ function getCliVersion() {
     }
     return packageJson.version;
 }
+// ORI-2744: under --json, stdout never carries a secret this process holds.
 function printLine(message = '') {
-    output.write(`${message}\n`);
+    output.write(`${hasJsonFlag() ? hideHeldSecrets(message) : message}\n`);
 }
 function printVersion() {
     printLine(`orizu ${getCliVersion()}`);
@@ -54,4 +56,15 @@ function printPushDisclosures(data) {
 function printJson(value) {
     printLine(JSON.stringify(value));
 }
-export { getErrorMessage, printJson, printLine, printPushDisclosures, getCliVersion, printBannerIfInteractive, printVersion, printUsage, printError, printLoginProgress, };
+/**
+ * The one --json output allowed to carry a held secret: `orizu env --json`
+ * prints the token so a script can export it. Any new caller needs its own
+ * reviewed change and a case in cli-json-output-scrub-process.test.ts.
+ */
+function printJsonWithHeldSecrets(value) {
+    // Any other command is scrubbed as usual, so a wrong caller can't leak.
+    if (cliArgs[0] !== 'env')
+        return printJson(value);
+    output.write(`${JSON.stringify(value)}\n`);
+}
+export { getErrorMessage, printJson, printJsonWithHeldSecrets, printLine, printPushDisclosures, getCliVersion, printBannerIfInteractive, printVersion, printUsage, printError, printLoginProgress, };

package/dist/cli-stops.d.ts

@@ -0,0 +1,14 @@
+import { Effect } from 'effect';
+export interface Interrupted {
+    interrupted: 130 | 143;
+}
+/**
+ * Runs the program with Ctrl-C and SIGTERM turned into an interrupt, and says
+ * which stop arrived, if any. `once`: a second signal falls through to Node's
+ * default kill. The handlers are removed before this returns.
+ */
+export declare function runWithStops<A>(program: (signal: AbortSignal) => Effect.Effect<A, unknown>): Promise<{
+    exit: import("effect/Exit").Exit<A, unknown>;
+    interrupted: 130 | 143 | undefined;
+}>;
+//# sourceMappingURL=cli-stops.d.ts.map

package/dist/cli-stops.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-stops.d.ts","sourceRoot":"","sources":["../src/cli-stops.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAK/B,MAAM,WAAW,WAAW;IAAG,WAAW,EAAE,GAAG,GAAG,GAAG,CAAA;CAAE;AAEvD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC;;;GAchG"}

package/dist/cli-stops.js

@@ -0,0 +1,22 @@
+import { Effect } from 'effect';
+/**
+ * Runs the program with Ctrl-C and SIGTERM turned into an interrupt, and says
+ * which stop arrived, if any. `once`: a second signal falls through to Node's
+ * default kill. The handlers are removed before this returns.
+ */
+export async function runWithStops(program) {
+    const controller = new AbortController();
+    let interrupted;
+    const handleInterrupt = () => { interrupted ??= 130; controller.abort(); };
+    const handleTerminate = () => { interrupted ??= 143; controller.abort(); };
+    process.once('SIGINT', handleInterrupt);
+    process.once('SIGTERM', handleTerminate);
+    try {
+        const exit = await Effect.runPromiseExit(program(controller.signal), { signal: controller.signal });
+        return { exit, interrupted };
+    }
+    finally {
+        process.removeListener('SIGINT', handleInterrupt);
+        process.removeListener('SIGTERM', handleTerminate);
+    }
+}

package/dist/egress-allowlist-cli.d.ts

@@ -9,15 +9,42 @@
  * The BASE allowlist (Orizu API + model provider + git host) is code-owned and
  * NOT shown/managed here — this surface only widens a team's egress with domains
  * a customer workflow needs. Human ADMIN only: the server rejects agent bearers
- * and non-admins (the definer RPC gates on is_team_admin). Pure command logic
- * with an injected fetcher.
+ * and non-admins (the definer RPC gates on is_team_admin). The arguments and
+ * output live here; the requests run on Effect in egress-allowlist-workflow.ts
+ * (ORI-2764), loaded only when this command runs.
  */
 export type CliFetcher = (path: string, init?: RequestInit) => Promise<Response>;
 export interface EgressAllowlistCommandIo {
     json: boolean;
     print: (line: string) => void;
     printErr?: (line: string) => void;
+    /** Stands in for `authedFetch` in tests. */
     fetcher?: CliFetcher;
 }
+export declare function splitDomains(value: string): string[];
+export interface CurrentAllowlist {
+    domains: string[];
+    /** ALI-1174: legacy entries the server flags as failing the tightened
+     *  validator — stored, shown by GET, but silently dropped by the
+     *  coordinator at policy compose. Surfaced so "configured" never silently
+     *  means "inert". */
+    invalid: string[];
+    /** Valid entries beyond the 100-domain cap — equally inert at compose. */
+    capped: string[];
+}
+export declare function stringArray(value: unknown): string[];
+/**
+ * Re-derive the "beyond the 100-domain cap" entries from a stored set the
+ * SAME way the GET route does (positional over UNIQUE VALID domains): the
+ * coordinator applies only the first MAX_ADDITIVE_EGRESS_DOMAINS valid
+ * domains, so every valid entry past that index is configured-but-inert.
+ * Stored entries are already canonical + deduped by the write RPC, and the
+ * invalid (grandfathered) ones — flagged by the server — are not "valid"
+ * and so never consume a cap slot. Used for the PUT response, where a
+ * shrink-by-one on an oversized legacy row leaves the returned set still
+ * over-cap and the server does not send cappedDomains back.
+ */
+export declare function deriveCapped(stored: readonly string[], invalid: readonly string[]): string[];
+export declare function emit(io: EgressAllowlistCommandIo, teamSlug: string, current: CurrentAllowlist): void;
 export declare function egressAllowlistCommand(args: string[], io: EgressAllowlistCommandIo): Promise<number>;
 //# sourceMappingURL=egress-allowlist-cli.d.ts.map

package/dist/egress-allowlist-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"egress-allowlist-cli.d.ts","sourceRoot":"","sources":["../src/egress-allowlist-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAWH,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,OAAO,CAAC,EAAE,UAAU,CAAA;CACrB;AAiID,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CA4D1G"}
+{"version":3,"file":"egress-allowlist-cli.d.ts","sourceRoot":"","sources":["../src/egress-allowlist-cli.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AASH,MAAM,MAAM,UAAU,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;AAEhF,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,OAAO,CAAA;IACb,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IACjC,4CAA4C;IAC5C,OAAO,CAAC,EAAE,UAAU,CAAA;CACrB;AA0BD,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAKpD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB;;;yBAGqB;IACrB,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,0EAA0E;IAC1E,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAEpD;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAU5F;AAED,wBAAgB,IAAI,CAAC,EAAE,EAAE,wBAAwB,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,GAAG,IAAI,CA6BpG;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CAe1G"}

package/dist/egress-allowlist-cli.js

@@ -9,19 +9,16 @@
  * The BASE allowlist (Orizu API + model provider + git host) is code-owned and
  * NOT shown/managed here — this surface only widens a team's egress with domains
  * a customer workflow needs. Human ADMIN only: the server rejects agent bearers
- * and non-admins (the definer RPC gates on is_team_admin). Pure command logic
- * with an injected fetcher.
+ * and non-admins (the definer RPC gates on is_team_admin). The arguments and
+ * output live here; the requests run on Effect in egress-allowlist-workflow.ts
+ * (ORI-2764), loaded only when this command runs.
  */
-import { authedFetch } from './http.js';
 /** Mirrors MAX_TEAM_EGRESS_DOMAINS in the shared read-side validator
  *  (workers/session-coordinator/src/egress-domains.ts). The coordinator only
  *  applies the first this-many UNIQUE valid domains at policy compose; the
  *  CLI is a standalone package and cannot import the worker module, so the
  *  cap constant is duplicated here (kept in sync via that file's tests). */
 const MAX_ADDITIVE_EGRESS_DOMAINS = 100;
-function fetcherFrom(io) {
-    return io.fetcher ?? authedFetch;
-}
 function argValue(args, flag) {
     const index = args.indexOf(flag);
     if (index === -1 || index + 1 >= args.length || args[index + 1].startsWith('--')) {
@@ -45,23 +42,13 @@ function printErr(io, message) {
     ;
     (io.printErr ?? io.print)(message);
 }
-async function responseMessage(response) {
-    try {
-        const data = (await response.clone().json());
-        const error = typeof data.error === 'string' ? data.error : null;
-        return error || response.statusText || String(response.status);
-    }
-    catch {
-        return response.statusText || String(response.status);
-    }
-}
-function splitDomains(value) {
+export function splitDomains(value) {
     return value
         .split(',')
         .map(d => d.trim())
         .filter(d => d.length > 0);
 }
-function stringArray(value) {
+export function stringArray(value) {
     return Array.isArray(value) ? value.filter((d) => typeof d === 'string') : [];
 }
 /**
@@ -75,7 +62,7 @@ function stringArray(value) {
  * shrink-by-one on an oversized legacy row leaves the returned set still
  * over-cap and the server does not send cappedDomains back.
  */
-function deriveCapped(stored, invalid) {
+export function deriveCapped(stored, invalid) {
     const invalidSet = new Set(invalid);
     const capped = [];
     let validCount = 0;
@@ -88,19 +75,7 @@ function deriveCapped(stored, invalid) {
     }
     return capped;
 }
-async function fetchCurrent(fetcher, path) {
-    const response = await fetcher(path, { method: 'GET' });
-    if (!response.ok) {
-        throw new Error(`show failed (${response.status}): ${await responseMessage(response)}`);
-    }
-    const data = (await response.json());
-    return {
-        domains: stringArray(data.extraDomains),
-        invalid: stringArray(data.invalidDomains),
-        capped: stringArray(data.cappedDomains),
-    };
-}
-function emit(io, teamSlug, current) {
+export function emit(io, teamSlug, current) {
     if (io.json) {
         io.print(JSON.stringify({
             teamSlug,
@@ -134,61 +109,13 @@ export async function egressAllowlistCommand(args, io) {
         printErr(io, 'Usage: orizu team egress-allowlist <team> [--add <domain>|--remove <domain>|--set a.com,b.com|--clear] [--json]');
         return 1;
     }
-    const path = `/api/cli/teams/${encodeURIComponent(teamSlug)}/egress-allowlist`;
-    const fetcher = fetcherFrom(io);
-    const setValue = argValue(args, '--set');
-    const addValue = argValue(args, '--add');
-    const removeValue = argValue(args, '--remove');
-    const clear = args.includes('--clear');
-    const isMutation = setValue !== null || addValue !== null || removeValue !== null || clear;
-    try {
-        if (!isMutation) {
-            emit(io, teamSlug, await fetchCurrent(fetcher, path));
-            return 0;
-        }
-        // Compute the next set. --set/--clear replace; --add/--remove mutate current.
-        let next;
-        if (setValue !== null) {
-            next = splitDomains(setValue);
-        }
-        else if (clear) {
-            next = [];
-        }
-        else {
-            const current = await fetchCurrent(fetcher, path);
-            const set = new Set(current.domains);
-            if (addValue)
-                for (const d of splitDomains(addValue))
-                    set.add(d);
-            if (removeValue)
-                for (const d of splitDomains(removeValue))
-                    set.delete(d);
-            next = [...set];
-        }
-        const response = await fetcher(path, {
-            method: 'PUT',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ domains: next }),
-        });
-        if (!response.ok) {
-            printErr(io, `egress-allowlist update failed (${response.status}): ${await responseMessage(response)}`);
-            return 1;
-        }
-        const data = (await response.json());
-        const stored = Array.isArray(data.extraDomains) ? stringArray(data.extraDomains) : next;
-        const invalid = stringArray(data.invalidDomains);
-        // Grandfathered retention: a successful PUT may still STORE legacy
-        // invalid entries the admin retained — the server flags them and we show
-        // it. Round 5 (P2): a >100-entry legacy row can only shrink one entry per
-        // PUT (the write RPC's GREATEST(100, stored-1) bound), so the returned
-        // set can still be OVER the cap. Re-derive the cap annotations from the
-        // returned set — same positional logic GET uses — instead of assuming
-        // the RPC left it at/under 100.
-        emit(io, teamSlug, { domains: stored, invalid, capped: deriveCapped(stored, invalid) });
-        return 0;
-    }
-    catch (error) {
-        printErr(io, error instanceof Error ? error.message : String(error));
-        return 1;
-    }
+    const { runEgressAllowlist } = await import('./egress-allowlist-workflow.js');
+    return await runEgressAllowlist({
+        teamSlug,
+        path: `/api/cli/teams/${encodeURIComponent(teamSlug)}/egress-allowlist`,
+        setValue: argValue(args, '--set'),
+        addValue: argValue(args, '--add'),
+        removeValue: argValue(args, '--remove'),
+        clear: args.includes('--clear'),
+    }, io);
 }

package/dist/egress-allowlist-workflow.d.ts

@@ -0,0 +1,17 @@
+import { type EgressAllowlistCommandIo } from './egress-allowlist-cli.js';
+/** What one run does: show the list, or change it. */
+export interface EgressAllowlistRun {
+    teamSlug: string;
+    path: string;
+    setValue: string | null;
+    addValue: string | null;
+    removeValue: string | null;
+    clear: boolean;
+}
+/**
+ * Runs one `orizu team egress-allowlist` command to its exit code. Ctrl-C or
+ * SIGTERM ends the wait with 130 or 143; once the PUT was sent the person is
+ * told the update may be saved.
+ */
+export declare function runEgressAllowlist(run: EgressAllowlistRun, io: EgressAllowlistCommandIo): Promise<number>;
+//# sourceMappingURL=egress-allowlist-workflow.d.ts.map

package/dist/egress-allowlist-workflow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"egress-allowlist-workflow.d.ts","sourceRoot":"","sources":["../src/egress-allowlist-workflow.ts"],"names":[],"mappings":"AAaA,OAAO,EAML,KAAK,wBAAwB,EAE9B,MAAM,2BAA2B,CAAA;AAoFlC,sDAAsD;AACtD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,KAAK,EAAE,OAAO,CAAA;CACf;AAkDD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,kBAAkB,EAAE,EAAE,EAAE,wBAAwB,GAAG,OAAO,CAAC,MAAM,CAAC,CA6B/G"}

package/dist/egress-allowlist-workflow.js

@@ -0,0 +1,183 @@
+// ORI-2764 (ORI-2735c): `orizu team egress-allowlist` on Effect. Loaded only
+// through `await import(...)` from egress-allowlist-cli.ts, so other commands
+// never load Effect.
+//
+// - Each request has the dataset-transfer deadline (120 s by default).
+// - The PUT is the only write. Once it was sent, a lost or late reply may
+//   still be saved. Every change is safe to repeat (`--set`/`--clear` replace
+//   the list, `--add`/`--remove` read it again first), so the CLI says
+//   running the same command again is safe.
+// - Ctrl-C and SIGTERM stop a wait with 130 and 143.
+import { Cause, Effect, Exit } from 'effect';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
+import { deriveCapped, emit, splitDomains, stringArray, } from './egress-allowlist-cli.js';
+import { authedFetch } from './http.js';
+import { mayAlreadyBeSavedLine } from './one-request-write.js';
+import { unreachedCode } from './request-outcome.js';
+const MAY_BE = mayAlreadyBeSavedLine('egress allowlist', 'updated', 'running the same command again is safe');
+/** A failure the command prints as one message, plus the may-be line when the update may be saved. */
+class EgressFailure {
+    message;
+    mayBeSaved;
+    constructor(message, mayBeSaved = false) {
+        this.message = message;
+        this.mayBeSaved = mayBeSaved;
+    }
+}
+/** The server's `{ error }`, else the status text, else the status, as before. */
+function replyMessage(reply) {
+    try {
+        const data = JSON.parse(reply.text);
+        const error = typeof data.error === 'string' ? data.error : null;
+        return error || reply.statusText || String(reply.status);
+    }
+    catch {
+        return reply.statusText || String(reply.status);
+    }
+}
+/**
+ * One request. A deadline says so under `label`; any other failure keeps
+ * today's text. For the PUT, a failure after sending may be saved.
+ */
+function request(fetcher, path, init, label, timeoutMs, progress) {
+    return Effect.suspend(() => {
+        let sent = false;
+        let timedOut = false;
+        return Effect.tryPromise({
+            try: async (signal) => {
+                const controller = new AbortController();
+                const abort = () => controller.abort();
+                const timer = setTimeout(() => { timedOut = true; controller.abort(); }, timeoutMs);
+                if (signal.aborted)
+                    abort();
+                else
+                    signal.addEventListener('abort', abort, { once: true });
+                const markSent = () => { sent = true; if (progress)
+                    progress.putSent = true; };
+                try {
+                    const requestInit = { ...init, signal: controller.signal };
+                    const response = fetcher
+                        ? (markSent(), await fetcher(path, requestInit))
+                        : await authedFetch(path, requestInit, markSent);
+                    return { status: response.status, ok: response.ok, statusText: response.statusText, text: await response.text() };
+                }
+                finally {
+                    clearTimeout(timer);
+                    signal.removeEventListener('abort', abort);
+                    controller.abort();
+                }
+            },
+            catch: cause => {
+                const mayBeSaved = progress !== null && sent;
+                if (timedOut)
+                    return new EgressFailure(`${label}: the request exceeded its deadline`, mayBeSaved);
+                // Refused before it reached the server, or a 401 whose sign-in could not be renewed: nothing saved.
+                const refused = unreachedCode(cause) !== null || cause?.requestRejected === true;
+                return new EgressFailure(cause instanceof Error ? cause.message : String(cause), mayBeSaved && !refused);
+            },
+        });
+    });
+}
+/** A 2xx reply's JSON object; a non-JSON reply fails with the parse error, as before. */
+function parseReply(reply) {
+    return Effect.try({
+        try: () => JSON.parse(reply.text),
+        catch: cause => new EgressFailure(cause instanceof Error ? cause.message : String(cause)),
+    });
+}
+function readCurrent(fetcher, path, timeoutMs) {
+    return Effect.gen(function* () {
+        const reply = yield* request(fetcher, path, { method: 'GET' }, 'show failed', timeoutMs, null);
+        if (!reply.ok)
+            return yield* Effect.fail(new EgressFailure(`show failed (${reply.status}): ${replyMessage(reply)}`));
+        const data = yield* parseReply(reply);
+        return { domains: stringArray(data.extraDomains), invalid: stringArray(data.invalidDomains), capped: stringArray(data.cappedDomains) };
+    });
+}
+const isMutation = (run) => run.setValue !== null || run.addValue !== null || run.removeValue !== null || run.clear;
+function egressAllowlist(run, io, timeoutMs, progress) {
+    return Effect.gen(function* () {
+        if (!isMutation(run)) {
+            emit(io, run.teamSlug, yield* readCurrent(io.fetcher, run.path, timeoutMs));
+            return 0;
+        }
+        // --set/--clear replace; --add/--remove change the list read first.
+        let next;
+        if (run.setValue !== null) {
+            next = splitDomains(run.setValue);
+        }
+        else if (run.clear) {
+            next = [];
+        }
+        else {
+            const current = yield* readCurrent(io.fetcher, run.path, timeoutMs);
+            const set = new Set(current.domains);
+            if (run.addValue)
+                for (const d of splitDomains(run.addValue))
+                    set.add(d);
+            if (run.removeValue)
+                for (const d of splitDomains(run.removeValue))
+                    set.delete(d);
+            next = [...set];
+        }
+        const label = 'egress-allowlist update failed';
+        const reply = yield* request(io.fetcher, run.path, {
+            method: 'PUT',
+            headers: { 'Content-Type': 'application/json' },
+            body: JSON.stringify({ domains: next }),
+        }, label, timeoutMs, progress);
+        if (!reply.ok) {
+            // A refusal (4xx) saved nothing; a 5xx after the PUT may have.
+            return yield* Effect.fail(new EgressFailure(`${label} (${reply.status}): ${replyMessage(reply)}`, reply.status >= 500));
+        }
+        const data = yield* parseReply(reply);
+        const stored = Array.isArray(data.extraDomains) ? stringArray(data.extraDomains) : next;
+        const invalid = stringArray(data.invalidDomains);
+        // Grandfathered retention: a successful PUT may still STORE legacy
+        // invalid entries the admin retained — the server flags them and we show
+        // it. Round 5 (P2): a >100-entry legacy row can only shrink one entry per
+        // PUT (the write RPC's GREATEST(100, stored-1) bound), so the returned
+        // set can still be OVER the cap. Re-derive the cap annotations from the
+        // returned set — same positional logic GET uses — instead of assuming
+        // the RPC left it at/under 100.
+        emit(io, run.teamSlug, { domains: stored, invalid, capped: deriveCapped(stored, invalid) });
+        return 0;
+    });
+}
+/**
+ * Runs one `orizu team egress-allowlist` command to its exit code. Ctrl-C or
+ * SIGTERM ends the wait with 130 or 143; once the PUT was sent the person is
+ * told the update may be saved.
+ */
+export async function runEgressAllowlist(run, io) {
+    const printErr = io.printErr ?? io.print;
+    const controller = new AbortController();
+    const progress = { putSent: false };
+    let interrupted;
+    const interrupt = () => { interrupted ??= 130; controller.abort(); };
+    const terminate = () => { interrupted ??= 143; controller.abort(); };
+    process.on('SIGINT', interrupt);
+    process.on('SIGTERM', terminate);
+    try {
+        const exit = await Effect.runPromiseExit(egressAllowlist(run, io, datasetTransferTimeoutMs(), progress), { signal: controller.signal });
+        if (Exit.isSuccess(exit))
+            return exit.value;
+        if (interrupted !== undefined) {
+            const message = isMutation(run) ? 'Egress allowlist update interrupted.' : 'Egress allowlist read interrupted.';
+            printErr(progress.putSent ? `${message}\n${MAY_BE}` : message);
+            return interrupted;
+        }
+        // Anything else that went wrong prints its message with exit 1, as before.
+        const failure = Cause.squash(exit.cause);
+        if (!(failure instanceof EgressFailure)) {
+            printErr(failure instanceof Error ? failure.message : String(failure));
+            return 1;
+        }
+        printErr(failure.mayBeSaved ? `${failure.message}\n${MAY_BE}` : failure.message);
+        return 1;
+    }
+    finally {
+        process.removeListener('SIGINT', interrupt);
+        process.removeListener('SIGTERM', terminate);
+    }
+}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAuLA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAEhE,eAAO,MAAM,wBAAwB,GAAI,iBAAiB,MAAM;;;EACJ,CAAA;AAE5D,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAmqCtD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0B1G;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAA;AACxC,eAAO,MAAM,uBAAuB,QAAkB,CAAA;AACtD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAexH;AAmMD,wBAAsB,IAAI,CAAC,OAAO,WAAwB,iBAiiBzD;AAuED,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEhF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAuLA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAEhE,eAAO,MAAM,wBAAwB,GAAI,iBAAiB,MAAM;;;EACJ,CAAA;AAE5D,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAmqCtD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0B1G;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAA;AACxC,eAAO,MAAM,uBAAuB,QAAkB,CAAA;AACtD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAexH;AAmMD,wBAAsB,IAAI,CAAC,OAAO,WAAwB,iBAuiBzD;AAuED,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEhF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -1565,7 +1565,13 @@ export async function main(rawArgs = process.argv.slice(2)) {
         return;
     }
     if (command === 'apps' && subcommand === 'preview') {
-        await previewAppFromFile();
+        const stopped = await previewAppFromFile();
+        if (stopped !== undefined) {
+            process.exitCode = stopped;
+            // A Chromium launch can't be cancelled; one still starting holds the process
+            // until it arrives and is closed. Exit anyway once the 10 s budget is spent.
+            setTimeout(() => process.exit(stopped), 10_000).unref();
+        }
         return;
     }
     if (command === 'apps' && subcommand === 'update') {