pairit 0.1.5 → 0.1.7

package/README.md

@@ -8,7 +8,7 @@ A lightweight command line utility for working with Pairit experiment configurat
 - `config upload` — compile and upload a config through the manager service, optionally with per-experiment LLM provider keys
 - `config list` — list configs stored via the manager service
 - `config delete` — delete a stored config
-- `media upload` — upload a binary asset to Cloud Storage via the manager service (uploads are public unless `--private` is passed; the backend selects the bucket unless you override with `--bucket`)
+- `media upload` — upload a binary asset to Cloud Storage via the manager service (uploads are public unless `--private` is passed; public uploads return a stable asset URL when the backend supports it)
 - `media list` — list media objects in Cloud Storage
 - `media delete` — delete a media object from Cloud Storage
 - `data export` — export sessions, events, and chat messages for a config as CSV/JSON/JSONL
@@ -99,7 +99,16 @@ Notes:
 - `{configId}-events.{format}` — session ID, event type, component info, payload, timestamps
 - `{configId}-chat-messages.{format}` — group ID, session ID, sender, content, timestamps
 
-All hosted commands require the manager service to be reachable (Cloud Run deployment or local server). Set `PAIRIT_API_URL` to point to the desired target. When unset, the CLI defaults to `http://localhost:3002`.
+All hosted commands require the manager service to be reachable (Cloud Run deployment or local server). By default the CLI talks to the deployed manager. Override via shell environment variables when needed:
+
+- `PAIRIT_API_URL` — manager base URL (e.g. `http://localhost:3002` for local dev)
+- `PAIRIT_LAB_URL` — lab base URL used to print the survey link after `config upload`
+- `PAIRIT_CREDENTIALS_BACKEND` — `keychain` (default when available) or `file`
+- `PAIRIT_MAX_INLINE_MEDIA_BYTES` — switch to signed-URL upload above this size (default 5 MiB)
+
+```bash
+PAIRIT_API_URL=http://localhost:3002 pairit config list
+```
 
 ## Development
 

package/dist/index.js

@@ -29,450 +29,6 @@ var __export = (target, all) => {
 var __esm = (fn, res) => () => (fn && (res = fn(fn = 0)), res);
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
-// ../../../node_modules/.bun/dotenv@17.2.3/node_modules/dotenv/package.json
-var require_package = __commonJS((exports, module) => {
-  module.exports = {
-    name: "dotenv",
-    version: "17.2.3",
-    description: "Loads environment variables from .env file",
-    main: "lib/main.js",
-    types: "lib/main.d.ts",
-    exports: {
-      ".": {
-        types: "./lib/main.d.ts",
-        require: "./lib/main.js",
-        default: "./lib/main.js"
-      },
-      "./config": "./config.js",
-      "./config.js": "./config.js",
-      "./lib/env-options": "./lib/env-options.js",
-      "./lib/env-options.js": "./lib/env-options.js",
-      "./lib/cli-options": "./lib/cli-options.js",
-      "./lib/cli-options.js": "./lib/cli-options.js",
-      "./package.json": "./package.json"
-    },
-    scripts: {
-      "dts-check": "tsc --project tests/types/tsconfig.json",
-      lint: "standard",
-      pretest: "npm run lint && npm run dts-check",
-      test: "tap run tests/**/*.js --allow-empty-coverage --disable-coverage --timeout=60000",
-      "test:coverage": "tap run tests/**/*.js --show-full-coverage --timeout=60000 --coverage-report=text --coverage-report=lcov",
-      prerelease: "npm test",
-      release: "standard-version"
-    },
-    repository: {
-      type: "git",
-      url: "git://github.com/motdotla/dotenv.git"
-    },
-    homepage: "https://github.com/motdotla/dotenv#readme",
-    funding: "https://dotenvx.com",
-    keywords: [
-      "dotenv",
-      "env",
-      ".env",
-      "environment",
-      "variables",
-      "config",
-      "settings"
-    ],
-    readmeFilename: "README.md",
-    license: "BSD-2-Clause",
-    devDependencies: {
-      "@types/node": "^18.11.3",
-      decache: "^4.6.2",
-      sinon: "^14.0.1",
-      standard: "^17.0.0",
-      "standard-version": "^9.5.0",
-      tap: "^19.2.0",
-      typescript: "^4.8.4"
-    },
-    engines: {
-      node: ">=12"
-    },
-    browser: {
-      fs: false
-    }
-  };
-});
-
-// ../../../node_modules/.bun/dotenv@17.2.3/node_modules/dotenv/lib/main.js
-var require_main = __commonJS((exports, module) => {
-  var fs = __require("fs");
-  var path = __require("path");
-  var os = __require("os");
-  var crypto = __require("crypto");
-  var packageJson = require_package();
-  var version = packageJson.version;
-  var TIPS = [
-    "\uD83D\uDD10 encrypt with Dotenvx: https://dotenvx.com",
-    "\uD83D\uDD10 prevent committing .env to code: https://dotenvx.com/precommit",
-    "\uD83D\uDD10 prevent building .env in docker: https://dotenvx.com/prebuild",
-    "\uD83D\uDCE1 add observability to secrets: https://dotenvx.com/ops",
-    "\uD83D\uDC65 sync secrets across teammates & machines: https://dotenvx.com/ops",
-    "\uD83D\uDDC2️ backup and recover secrets: https://dotenvx.com/ops",
-    "✅ audit secrets and track compliance: https://dotenvx.com/ops",
-    "\uD83D\uDD04 add secrets lifecycle management: https://dotenvx.com/ops",
-    "\uD83D\uDD11 add access controls to secrets: https://dotenvx.com/ops",
-    "\uD83D\uDEE0️  run anywhere with `dotenvx run -- yourcommand`",
-    "⚙️  specify custom .env file path with { path: '/custom/path/.env' }",
-    "⚙️  enable debug logging with { debug: true }",
-    "⚙️  override existing env vars with { override: true }",
-    "⚙️  suppress all logs with { quiet: true }",
-    "⚙️  write to custom object with { processEnv: myObject }",
-    "⚙️  load multiple .env files with { path: ['.env.local', '.env'] }"
-  ];
-  function _getRandomTip() {
-    return TIPS[Math.floor(Math.random() * TIPS.length)];
-  }
-  function parseBoolean(value) {
-    if (typeof value === "string") {
-      return !["false", "0", "no", "off", ""].includes(value.toLowerCase());
-    }
-    return Boolean(value);
-  }
-  function supportsAnsi() {
-    return process.stdout.isTTY;
-  }
-  function dim(text) {
-    return supportsAnsi() ? `\x1B[2m${text}\x1B[0m` : text;
-  }
-  var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-  function parse(src) {
-    const obj = {};
-    let lines = src.toString();
-    lines = lines.replace(/\r\n?/mg, `
-`);
-    let match;
-    while ((match = LINE.exec(lines)) != null) {
-      const key = match[1];
-      let value = match[2] || "";
-      value = value.trim();
-      const maybeQuote = value[0];
-      value = value.replace(/^(['"`])([\s\S]*)\1$/mg, "$2");
-      if (maybeQuote === '"') {
-        value = value.replace(/\\n/g, `
-`);
-        value = value.replace(/\\r/g, "\r");
-      }
-      obj[key] = value;
-    }
-    return obj;
-  }
-  function _parseVault(options) {
-    options = options || {};
-    const vaultPath = _vaultPath(options);
-    options.path = vaultPath;
-    const result = DotenvModule.configDotenv(options);
-    if (!result.parsed) {
-      const err = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
-      err.code = "MISSING_DATA";
-      throw err;
-    }
-    const keys = _dotenvKey(options).split(",");
-    const length = keys.length;
-    let decrypted;
-    for (let i = 0;i < length; i++) {
-      try {
-        const key = keys[i].trim();
-        const attrs = _instructions(result, key);
-        decrypted = DotenvModule.decrypt(attrs.ciphertext, attrs.key);
-        break;
-      } catch (error) {
-        if (i + 1 >= length) {
-          throw error;
-        }
-      }
-    }
-    return DotenvModule.parse(decrypted);
-  }
-  function _warn(message) {
-    console.error(`[dotenv@${version}][WARN] ${message}`);
-  }
-  function _debug(message) {
-    console.log(`[dotenv@${version}][DEBUG] ${message}`);
-  }
-  function _log(message) {
-    console.log(`[dotenv@${version}] ${message}`);
-  }
-  function _dotenvKey(options) {
-    if (options && options.DOTENV_KEY && options.DOTENV_KEY.length > 0) {
-      return options.DOTENV_KEY;
-    }
-    if (process.env.DOTENV_KEY && process.env.DOTENV_KEY.length > 0) {
-      return process.env.DOTENV_KEY;
-    }
-    return "";
-  }
-  function _instructions(result, dotenvKey) {
-    let uri;
-    try {
-      uri = new URL(dotenvKey);
-    } catch (error) {
-      if (error.code === "ERR_INVALID_URL") {
-        const err = new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
-        err.code = "INVALID_DOTENV_KEY";
-        throw err;
-      }
-      throw error;
-    }
-    const key = uri.password;
-    if (!key) {
-      const err = new Error("INVALID_DOTENV_KEY: Missing key part");
-      err.code = "INVALID_DOTENV_KEY";
-      throw err;
-    }
-    const environment = uri.searchParams.get("environment");
-    if (!environment) {
-      const err = new Error("INVALID_DOTENV_KEY: Missing environment part");
-      err.code = "INVALID_DOTENV_KEY";
-      throw err;
-    }
-    const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
-    const ciphertext = result.parsed[environmentKey];
-    if (!ciphertext) {
-      const err = new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
-      err.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
-      throw err;
-    }
-    return { ciphertext, key };
-  }
-  function _vaultPath(options) {
-    let possibleVaultPath = null;
-    if (options && options.path && options.path.length > 0) {
-      if (Array.isArray(options.path)) {
-        for (const filepath of options.path) {
-          if (fs.existsSync(filepath)) {
-            possibleVaultPath = filepath.endsWith(".vault") ? filepath : `${filepath}.vault`;
-          }
-        }
-      } else {
-        possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
-      }
-    } else {
-      possibleVaultPath = path.resolve(process.cwd(), ".env.vault");
-    }
-    if (fs.existsSync(possibleVaultPath)) {
-      return possibleVaultPath;
-    }
-    return null;
-  }
-  function _resolveHome(envPath) {
-    return envPath[0] === "~" ? path.join(os.homedir(), envPath.slice(1)) : envPath;
-  }
-  function _configVault(options) {
-    const debug = parseBoolean(process.env.DOTENV_CONFIG_DEBUG || options && options.debug);
-    const quiet = parseBoolean(process.env.DOTENV_CONFIG_QUIET || options && options.quiet);
-    if (debug || !quiet) {
-      _log("Loading env from encrypted .env.vault");
-    }
-    const parsed = DotenvModule._parseVault(options);
-    let processEnv = process.env;
-    if (options && options.processEnv != null) {
-      processEnv = options.processEnv;
-    }
-    DotenvModule.populate(processEnv, parsed, options);
-    return { parsed };
-  }
-  function configDotenv(options) {
-    const dotenvPath = path.resolve(process.cwd(), ".env");
-    let encoding = "utf8";
-    let processEnv = process.env;
-    if (options && options.processEnv != null) {
-      processEnv = options.processEnv;
-    }
-    let debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || options && options.debug);
-    let quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || options && options.quiet);
-    if (options && options.encoding) {
-      encoding = options.encoding;
-    } else {
-      if (debug) {
-        _debug("No encoding is specified. UTF-8 is used by default");
-      }
-    }
-    let optionPaths = [dotenvPath];
-    if (options && options.path) {
-      if (!Array.isArray(options.path)) {
-        optionPaths = [_resolveHome(options.path)];
-      } else {
-        optionPaths = [];
-        for (const filepath of options.path) {
-          optionPaths.push(_resolveHome(filepath));
-        }
-      }
-    }
-    let lastError;
-    const parsedAll = {};
-    for (const path2 of optionPaths) {
-      try {
-        const parsed = DotenvModule.parse(fs.readFileSync(path2, { encoding }));
-        DotenvModule.populate(parsedAll, parsed, options);
-      } catch (e) {
-        if (debug) {
-          _debug(`Failed to load ${path2} ${e.message}`);
-        }
-        lastError = e;
-      }
-    }
-    const populated = DotenvModule.populate(processEnv, parsedAll, options);
-    debug = parseBoolean(processEnv.DOTENV_CONFIG_DEBUG || debug);
-    quiet = parseBoolean(processEnv.DOTENV_CONFIG_QUIET || quiet);
-    if (debug || !quiet) {
-      const keysCount = Object.keys(populated).length;
-      const shortPaths = [];
-      for (const filePath of optionPaths) {
-        try {
-          const relative = path.relative(process.cwd(), filePath);
-          shortPaths.push(relative);
-        } catch (e) {
-          if (debug) {
-            _debug(`Failed to load ${filePath} ${e.message}`);
-          }
-          lastError = e;
-        }
-      }
-      _log(`injecting env (${keysCount}) from ${shortPaths.join(",")} ${dim(`-- tip: ${_getRandomTip()}`)}`);
-    }
-    if (lastError) {
-      return { parsed: parsedAll, error: lastError };
-    } else {
-      return { parsed: parsedAll };
-    }
-  }
-  function config(options) {
-    if (_dotenvKey(options).length === 0) {
-      return DotenvModule.configDotenv(options);
-    }
-    const vaultPath = _vaultPath(options);
-    if (!vaultPath) {
-      _warn(`You set DOTENV_KEY but you are missing a .env.vault file at ${vaultPath}. Did you forget to build it?`);
-      return DotenvModule.configDotenv(options);
-    }
-    return DotenvModule._configVault(options);
-  }
-  function decrypt(encrypted, keyStr) {
-    const key = Buffer.from(keyStr.slice(-64), "hex");
-    let ciphertext = Buffer.from(encrypted, "base64");
-    const nonce = ciphertext.subarray(0, 12);
-    const authTag = ciphertext.subarray(-16);
-    ciphertext = ciphertext.subarray(12, -16);
-    try {
-      const aesgcm = crypto.createDecipheriv("aes-256-gcm", key, nonce);
-      aesgcm.setAuthTag(authTag);
-      return `${aesgcm.update(ciphertext)}${aesgcm.final()}`;
-    } catch (error) {
-      const isRange = error instanceof RangeError;
-      const invalidKeyLength = error.message === "Invalid key length";
-      const decryptionFailed = error.message === "Unsupported state or unable to authenticate data";
-      if (isRange || invalidKeyLength) {
-        const err = new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
-        err.code = "INVALID_DOTENV_KEY";
-        throw err;
-      } else if (decryptionFailed) {
-        const err = new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
-        err.code = "DECRYPTION_FAILED";
-        throw err;
-      } else {
-        throw error;
-      }
-    }
-  }
-  function populate(processEnv, parsed, options = {}) {
-    const debug = Boolean(options && options.debug);
-    const override = Boolean(options && options.override);
-    const populated = {};
-    if (typeof parsed !== "object") {
-      const err = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
-      err.code = "OBJECT_REQUIRED";
-      throw err;
-    }
-    for (const key of Object.keys(parsed)) {
-      if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
-        if (override === true) {
-          processEnv[key] = parsed[key];
-          populated[key] = parsed[key];
-        }
-        if (debug) {
-          if (override === true) {
-            _debug(`"${key}" is already defined and WAS overwritten`);
-          } else {
-            _debug(`"${key}" is already defined and was NOT overwritten`);
-          }
-        }
-      } else {
-        processEnv[key] = parsed[key];
-        populated[key] = parsed[key];
-      }
-    }
-    return populated;
-  }
-  var DotenvModule = {
-    configDotenv,
-    _configVault,
-    _parseVault,
-    config,
-    decrypt,
-    parse,
-    populate
-  };
-  exports.configDotenv = DotenvModule.configDotenv;
-  exports._configVault = DotenvModule._configVault;
-  exports._parseVault = DotenvModule._parseVault;
-  exports.config = DotenvModule.config;
-  exports.decrypt = DotenvModule.decrypt;
-  exports.parse = DotenvModule.parse;
-  exports.populate = DotenvModule.populate;
-  module.exports = DotenvModule;
-});
-
-// ../../../node_modules/.bun/dotenv@17.2.3/node_modules/dotenv/lib/env-options.js
-var require_env_options = __commonJS((exports, module) => {
-  var options = {};
-  if (process.env.DOTENV_CONFIG_ENCODING != null) {
-    options.encoding = process.env.DOTENV_CONFIG_ENCODING;
-  }
-  if (process.env.DOTENV_CONFIG_PATH != null) {
-    options.path = process.env.DOTENV_CONFIG_PATH;
-  }
-  if (process.env.DOTENV_CONFIG_QUIET != null) {
-    options.quiet = process.env.DOTENV_CONFIG_QUIET;
-  }
-  if (process.env.DOTENV_CONFIG_DEBUG != null) {
-    options.debug = process.env.DOTENV_CONFIG_DEBUG;
-  }
-  if (process.env.DOTENV_CONFIG_OVERRIDE != null) {
-    options.override = process.env.DOTENV_CONFIG_OVERRIDE;
-  }
-  if (process.env.DOTENV_CONFIG_DOTENV_KEY != null) {
-    options.DOTENV_KEY = process.env.DOTENV_CONFIG_DOTENV_KEY;
-  }
-  module.exports = options;
-});
-
-// ../../../node_modules/.bun/dotenv@17.2.3/node_modules/dotenv/lib/cli-options.js
-var require_cli_options = __commonJS((exports, module) => {
-  var re = /^dotenv_config_(encoding|path|quiet|debug|override|DOTENV_KEY)=(.+)$/;
-  module.exports = function optionMatcher(args) {
-    const options = args.reduce(function(acc, cur) {
-      const matches = cur.match(re);
-      if (matches) {
-        acc[matches[1]] = matches[2];
-      }
-      return acc;
-    }, {});
-    if (!("quiet" in options)) {
-      options.quiet = "true";
-    }
-    return options;
-  };
-});
-
-// ../../../node_modules/.bun/dotenv@17.2.3/node_modules/dotenv/config.js
-var require_config = __commonJS(() => {
-  (function() {
-    require_main().config(Object.assign({}, require_env_options(), require_cli_options()(process.argv)));
-  })();
-});
-
 // ../../../node_modules/.bun/commander@12.1.0/node_modules/commander/lib/error.js
 var require_error = __commonJS((exports) => {
   class CommanderError extends Error {
@@ -9899,7 +9455,6 @@ var init_open = __esm(() => {
 });
 
 // src/index.ts
-var import_config = __toESM(require_config(), 1);
 import { createHash } from "node:crypto";
 import { mkdir as mkdir2, readFile as readFile2, stat, writeFile as writeFile2 } from "node:fs/promises";
 import path2 from "node:path";
@@ -9973,9 +9528,9 @@ async function login() {
       });
       const redirectUri = `http://127.0.0.1:${port}`;
       const targetUrl = `${loginUrl}?cli_redirect_uri=${encodeURIComponent(redirectUri)}`;
-      console.log("Opening browser for authentication...");
+      console.log(`Opening ${loginUrl} in your browser...`);
       await open2(targetUrl);
-      console.log(`Waiting for authentication at ${redirectUri}...`);
+      console.log("Waiting for sign-in to complete...");
       const authCode = await new Promise((resolve, reject) => {
         const timeout = setTimeout(() => {
           server.close();
@@ -10111,7 +9666,7 @@ async function loadKeytar() {
 
 // src/index.ts
 var program2 = new Command;
-program2.name("pairit").description("CLI for Pairit experiment configs").version("0.1.3");
+program2.name("pairit").description("CLI for Pairit experiment configs").version("0.1.7");
 program2.command("login").description("Login to Pairit Manager").action(async () => {
   try {
     await login();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pairit",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "CLI for the Pairit behavioral science experiment platform",
   "type": "module",
   "bin": {
@@ -35,7 +35,6 @@
     "@types/open": "^6.2.1",
     "better-auth": "^1.4.7",
     "commander": "^12.1.0",
-    "dotenv": "^17.2.3",
     "open": "^11.0.0",
     "typescript": "^5.9.3",
     "yaml": "^2.6.0"