pairit 0.1.3 → 0.1.5

package/README.md

@@ -5,7 +5,7 @@ A lightweight command line utility for working with Pairit experiment configurat
 - `login` — authenticate with Google OAuth (required for all hosted commands)
 - `config lint` — run minimal validation (schema_version, initialPageId, pages)
 - `config compile` — normalize a YAML config and emit sibling canonical JSON
-- `config upload` — compile and upload a config through the manager service
+- `config upload` — compile and upload a config through the manager service, optionally with per-experiment LLM provider keys
 - `config list` — list configs stored via the manager service
 - `config delete` — delete a stored config
 - `media upload` — upload a binary asset to Cloud Storage via the manager service (uploads are public unless `--private` is passed; the backend selects the bucket unless you override with `--bucket`)
@@ -42,8 +42,9 @@ pairit login                                       # Authenticate (required firs
 
 pairit config lint path/to/config.yaml
 pairit config compile path/to/config.yaml
-pairit config upload configs/simple-survey-basic.yaml --owner you@example.com
-pairit config list --owner you@example.com
+pairit config upload configs/simple-survey-basic.yaml --config-id simple-survey-basic
+pairit config upload configs/agent-study.yaml --config-id agent-study --openai-api-key sk-...
+pairit config list
 pairit config delete 2f3c4d5e...
 
 pairit media upload assets/video.mp4 --content-type video/mp4
@@ -64,7 +65,8 @@ Add `--private` if you need to keep an object private. Use `--bucket <name>` onl
 # Point to local manager server (default is http://localhost:3002)
 export PAIRIT_API_URL=http://localhost:3002
 
-bun run apps/manager/cli/src/index.ts config upload configs/simple-survey-basic.yaml --owner you@example.com
+bun run apps/manager/cli/src/index.ts config upload configs/simple-survey-basic.yaml --config-id simple-survey-basic
+bun run apps/manager/cli/src/index.ts config upload configs/agent-study.yaml --config-id agent-study --openai-api-key sk-...
 bun run apps/manager/cli/src/index.ts config list
 bun run apps/manager/cli/src/index.ts config delete 2f3c4d5e... --force
 
@@ -75,6 +77,23 @@ bun run apps/manager/cli/src/index.ts media delete onboarding/logo.png --force
 
 `config compile` writes `configs/simple-survey-basic.json` next to the source YAML. `config upload` defaults the config id to a 16-character base64url string derived from the SHA-256 hash of the compiled JSON (unless `--config-id` overrides it).
 
+## Per-experiment LLM credentials
+
+If your config uses AI agents, attach provider credentials when uploading:
+
+```bash
+pairit config upload path/to/config.yaml --config-id my-exp --openai-api-key sk-...
+pairit config upload path/to/config.yaml --config-id my-exp --anthropic-api-key sk-ant-...
+```
+
+Notes:
+- Keys are stored per config, encrypted at rest by the manager server.
+- Re-uploading the same `configId` without a new key keeps the previously stored key for that config.
+- That means billing continues on the experimenter's previously uploaded key, not on a shared platform key.
+- If an agent uses `gpt-*` and the config has no OpenAI key, the run fails.
+- If an agent uses `claude*` and the config has no Anthropic key, the run fails.
+- There is no global platform-key fallback for experiment agent execution.
+
 `data export` creates three files in the output directory:
 - `{configId}-sessions.{format}` — session ID, user_state fields (flattened), timestamps, status
 - `{configId}-events.{format}` — session ID, event type, component info, payload, timestamps

package/dist/index.js

@@ -10111,7 +10111,7 @@ async function loadKeytar() {
 
 // src/index.ts
 var program2 = new Command;
-program2.name("pairit").description("CLI for Pairit experiment configs").version("0.1.0");
+program2.name("pairit").description("CLI for Pairit experiment configs").version("0.1.3");
 program2.command("login").description("Login to Pairit Manager").action(async () => {
   try {
     await login();
@@ -10146,7 +10146,7 @@ configCommand.command("compile").argument("<config>", "Path to YAML config").des
     process9.exitCode = 1;
   }
 });
-configCommand.command("upload").argument("<config>", "Path to YAML config").option("--config-id <configId>", "Config id (defaults to hash)").option("--metadata <json>", "Optional metadata JSON string").description("Compile and upload config via Pairit Functions").action(async (configPath, options) => {
+configCommand.command("upload").argument("<config>", "Path to YAML config").option("--config-id <configId>", "Config id (defaults to hash)").option("--metadata <json>", "Optional metadata JSON string").option("--openai-api-key <key>", "OpenAI API key for this experiment").option("--anthropic-api-key <key>", "Anthropic API key for this experiment").description("Compile and upload config via Pairit Functions").action(async (configPath, options) => {
   try {
     const { payload, checksum } = await buildUploadPayload(configPath, options);
     const response = await callFunctions("/configs/upload", {
@@ -10357,12 +10357,19 @@ async function buildUploadPayload(configPath, options) {
   if (!metadata.originalFilename) {
     metadata.originalFilename = path2.basename(configPath);
   }
+  const llmCredentials = {
+    ...options.openaiApiKey && { openaiApiKey: options.openaiApiKey },
+    ...options.anthropicApiKey && {
+      anthropicApiKey: options.anthropicApiKey
+    }
+  };
   return {
     payload: {
       configId,
       checksum,
       metadata: metadata ?? null,
       config: parsed,
+      ...Object.keys(llmCredentials).length > 0 && { llmCredentials },
       allowRetake,
       ...requireAuth !== undefined && { requireAuth }
     },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pairit",
-  "version": "0.1.3",
+  "version": "0.1.5",
   "description": "CLI for the Pairit behavioral science experiment platform",
   "type": "module",
   "bin": {