rubrkit 0.1.0 → 0.3.0

package/src/testingCli.js

@@ -1,431 +1,504 @@
-// @ts-check
-
-import fs from 'node:fs/promises';
-import path from 'node:path';
-
-import { authError, exitCodeForApiFailure, EXIT_CODES, RubrkitCliError, usageError } from './errors.js';
-import { scoreFromPayload, writeFormattedResult } from './formats.js';
-import { collectArtifactFilesForUpload, runLocalChecks } from './localChecks.js';
-import { Rubrkit, RubrkitApiError, RubrkitError } from './sdk.js';
-
-/**
- * @param {{
- *   config: Awaited<ReturnType<import('./config.js').resolveConfig>>,
- *   stdout?: NodeJS.WritableStream,
- *   stderr?: NodeJS.WritableStream,
- *   fetchImpl?: typeof fetch,
- * }} params
- */
-export async function runTestingCommand({
-    config,
-    stdout = process.stdout,
-    stderr = process.stderr,
-    fetchImpl = globalThis.fetch,
-}) {
-    if (config.command === 'validate') {
-        return runLocalCommand({ config, stdout });
-    }
-
-    if (config.command === 'test' && !config.remote) {
-        return runLocalCommand({ config, stdout });
-    }
-
-    if (config.command === 'report') {
-        return runReportCommand({ config, stdout, fetchImpl });
-    }
-
-    if (['test', 'audit', 'eval'].includes(config.command)) {
-        return runRemoteCommand({ config, stdout, stderr, fetchImpl });
-    }
-
-    throw usageError(`Unsupported command "${config.command}".`);
-}
-
-/**
- * @param {{ config: Awaited<ReturnType<import('./config.js').resolveConfig>>, stdout: NodeJS.WritableStream }} params
- */
-async function runLocalCommand({ config, stdout }) {
-    const payload = await runLocalChecks({
-        target: config.selector,
-        cwd: config.destination,
-        command: config.command,
-        failUnder: config.failUnder,
-        failOn: config.failOn,
-    });
-
-    await writeFormattedResult({
-        payload,
-        format: config.format,
-        output: config.output,
-        stdout,
-    });
-
-    return payload.passed ? 0 : EXIT_CODES.checksFailed;
-}
-
-/**
- * @param {{
- *   config: Awaited<ReturnType<import('./config.js').resolveConfig>>,
- *   stdout: NodeJS.WritableStream,
- *   stderr: NodeJS.WritableStream,
- *   fetchImpl: typeof fetch
- * }} params
- */
-async function runRemoteCommand({ config, stdout, stderr, fetchImpl }) {
-    const dryRun = createRemoteDryRunPayload(config);
-
-    if (config.dryRun) {
-        await writeFormattedResult({
-            payload: dryRun,
-            format: config.format,
-            output: config.output,
-            stdout,
-        });
-        return 0;
-    }
-
-    if (!config.apiKey) {
-        throw authError('Missing Rubrkit API key. Set RUBRKIT_API_KEY or pass --api-key for remote checks.');
-    }
-
-    const client = new Rubrkit({
-        apiKey: config.apiKey,
-        apiUrl: config.apiUrl,
-        fetchImpl,
-        userAgent: 'rubrkit-cli/0.0.0-local',
-    });
-
-    try {
-        const started = await startRemoteRun({ client, config });
-        const jobId = getJobId(started);
-
-        if (!jobId) {
-            throw new RubrkitCliError('Rubrkit API response did not include a jobId.', {
-                code: 'missing_job_id',
-                exitCode: EXIT_CODES.network,
-            });
-        }
-
-        const job = await client.jobs.wait(jobId, {
-            intervalMs: 1000,
-            onProgress: config.format === 'json' || config.ci ? undefined : jobProgress(stderr),
-        });
-        const payload = {
-            schemaVersion: 1,
-            command: config.command,
-            mode: 'remote',
-            target: config.selector ?? config.artifactBundle ?? null,
-            generatedAt: new Date().toISOString(),
-            started,
-            job,
-            jobId,
-            gates: evaluateRemoteGates({ config, started, job }),
-        };
-
-        await writeFormattedResult({
-            payload,
-            format: config.format,
-            output: config.output,
-            stdout,
-        });
-
-        return exitCodeForRemotePayload(payload);
-    } catch (error) {
-        throw mapSdkError(error);
-    }
-}
-
-/**
- * @param {{ config: Awaited<ReturnType<import('./config.js').resolveConfig>>, stdout: NodeJS.WritableStream, fetchImpl: typeof fetch }} params
- */
-async function runReportCommand({ config, stdout, fetchImpl }) {
-    if (!config.selector) {
-        throw usageError('The report command needs a job ID or run ID.');
-    }
-
-    if (!config.apiKey) {
-        throw authError('Missing Rubrkit API key. Set RUBRKIT_API_KEY or pass --api-key for reports.');
-    }
-
-    const client = new Rubrkit({
-        apiKey: config.apiKey,
-        apiUrl: config.apiUrl,
-        fetchImpl,
-        userAgent: 'rubrkit-cli/0.0.0-local',
-    });
-
-    try {
-        const data = await client.jobs.get(config.selector);
-        const payload = {
-            schemaVersion: 1,
-            command: config.command,
-            mode: 'report',
-            target: config.selector,
-            generatedAt: new Date().toISOString(),
-            ...data,
-        };
-
-        await writeFormattedResult({
-            payload,
-            format: config.format,
-            output: config.output,
-            stdout,
-        });
-
-        return 0;
-    } catch (error) {
-        throw mapSdkError(error);
-    }
-}
-
-/**
- * @param {{ client: Rubrkit, config: Awaited<ReturnType<import('./config.js').resolveConfig>> }} params
- */
-async function startRemoteRun({ client, config }) {
-    const body = remoteBody(config);
-
-    if (config.command === 'test') {
-        return startRemoteTestRun({ client, config, body });
-    }
-
-    if (config.command === 'audit') {
-        return client.audits.run({
-            artifactBundleId: getArtifactBundleSelector(config),
-            ...body,
-        });
-    }
-
-    if (config.command === 'eval') {
-        return client.evals.run({
-            artifactBundleId: getArtifactBundleSelector(config),
-            ...body,
-        });
-    }
-
-    throw usageError(`Unsupported remote command "${config.command}".`);
-}
-
-/**
- * @param {{ client: Rubrkit, config: Awaited<ReturnType<import('./config.js').resolveConfig>>, body: Record<string, unknown> }} params
- */
-async function startRemoteTestRun({ client, config, body }) {
-    if (await shouldUploadLocalTarget(config)) {
-        const files = await collectArtifactFilesForUpload({
-            target: /** @type {string} */ (config.selector),
-            cwd: config.destination,
-            message: 'Uploaded by rubrkit test --remote.',
-        });
-
-        return client.artifacts.test({
-            ...body,
-            artifactBundleId: config.artifactBundle ?? undefined,
-            name: remoteArtifactBundleName(config.selector),
-            description: 'Created by rubrkit test --remote from local project files.',
-            files,
-        });
-    }
-
-    return client.artifacts.test({
-        ...body,
-        artifactBundleId: getArtifactBundleSelector(config),
-    });
-}
-
-/**
- * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
- */
-function remoteBody(config) {
-    /** @type {Record<string, unknown>} */
-    const body = {};
-
-    if (config.selector) body.target = config.selector;
-    if (config.artifactBundle) body.artifactBundleId = config.artifactBundle;
-    if (config.artifact) body.artifact = config.artifact;
-    if (config.rubric) body.rubric = config.rubric;
-    if (config.noAi) body.noAi = true;
-    if (config.ci) body.ci = true;
-
-    return body;
-}
-
-/**
- * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
- */
-function getArtifactBundleSelector(config) {
-    const selector = config.artifactBundle ?? config.selector;
-
-    if (!selector) {
-        throw usageError(`The ${config.command} command needs an artifact bundle ID or selector for remote runs.`);
-    }
-
-    return selector;
-}
-
-/**
- * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
- */
-function createRemoteDryRunPayload(config) {
-    const artifactBundleId = config.command === 'test' ? (config.artifactBundle ?? '{artifactBundleId}') : (config.artifactBundle ?? config.selector ?? '{artifactBundleId}');
-    const endpoint =
-        config.command === 'test'
-            ? `/artifact-bundles/${artifactBundleId}/audits`
-            : config.command === 'audit'
-              ? `/artifact-bundles/${artifactBundleId}/audits`
-              : config.command === 'eval'
-                ? `/artifact-bundles/${artifactBundleId}/evals`
-                : `/jobs/${config.selector ?? '{jobId}'}`;
-
-    return {
-        schemaVersion: 1,
-        command: config.command,
-        mode: 'remote-dry-run',
-        target: config.selector ?? config.artifactBundle ?? null,
-        generatedAt: new Date().toISOString(),
-        method: config.command === 'report' ? 'GET' : 'POST',
-        endpoint,
-        composes: config.command === 'test'
-            ? [
-                  'POST /api/v1/artifact-bundles when testing local files without --artifact-bundle',
-                  'POST /api/v1/artifact-bundles/{artifactBundleId}/files when testing local files',
-                  'POST /api/v1/artifact-bundles/{artifactBundleId}/audits',
-                  'GET /api/v1/jobs/{jobId}',
-              ]
-            : undefined,
-        pollsJob: config.command !== 'report',
-        requiresApiKey: true,
-        request: redactRequest(remoteBody(config)),
-    };
-}
-
-/**
- * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
- */
-async function shouldUploadLocalTarget(config) {
-    if (config.command !== 'test' || !config.selector) {
-        return false;
-    }
-
-    if (hasGlob(config.selector)) {
-        return true;
-    }
-
-    try {
-        const stats = await fs.stat(path.resolve(config.destination, config.selector));
-        return stats.isFile() || stats.isDirectory();
-    } catch {
-        return false;
-    }
-}
-
-/**
- * @param {string | null} selector
- */
-function remoteArtifactBundleName(selector) {
-    const basename = selector ? path.basename(selector) || selector : 'artifact';
-    const name = `CLI remote test: ${basename}`;
-
-    return name.length <= 120 ? name : `${name.slice(0, 117)}...`;
-}
-
-/**
- * @param {string} value
- */
-function hasGlob(value) {
-    return /[*?[\]]/.test(value);
-}
-
-/**
- * @param {Record<string, unknown>} request
- */
-function redactRequest(request) {
-    const redacted = { ...request };
-    delete redacted.apiKey;
-    delete redacted['api-key'];
-    return redacted;
-}
-
-/**
- * @param {unknown} started
- */
-function getJobId(started) {
-    if (!started || typeof started !== 'object') {
-        return null;
-    }
-
-    const record = /** @type {Record<string, any>} */ (started);
-    return record.jobId ?? record.job?.id ?? record.data?.jobId ?? record.data?.job?.id ?? null;
-}
-
-/**
- * @param {NodeJS.WritableStream} stderr
- */
-function jobProgress(stderr) {
-    return (job) => {
-        const percent = Number.isFinite(Number(job.percent)) ? `${Number(job.percent)}%` : '';
-        stderr.write(`rubrkit: ${[job.state, job.phase, percent, job.message].filter(Boolean).join(' - ')}\n`);
-    };
-}
-
-/**
- * @param {{ config: Awaited<ReturnType<import('./config.js').resolveConfig>>, started: Record<string, any>, job: Record<string, any> }} params
- */
-function evaluateRemoteGates({ config, started, job }) {
-    const payload = { started, job };
-    const score = scoreFromPayload(payload);
-    const failures = [];
-
-    if (typeof config.failUnder === 'number' && typeof score === 'number' && score < config.failUnder) {
-        failures.push({
-            code: 'score_below_threshold',
-            message: `Score ${score} is below --fail-under ${config.failUnder}.`,
-        });
-    }
-
-    return {
-        passed: failures.length === 0,
-        score,
-        failUnder: config.failUnder,
-        failOn: config.failOn,
-        failures,
-    };
-}
-
-/**
- * @param {Record<string, any>} payload
- */
-function exitCodeForRemotePayload(payload) {
-    const job = payload.job ?? {};
-
-    if (['failed', 'cancelled', 'paused'].includes(job.state)) {
-        return exitCodeForApiFailure(job.error?.code, job.error?.code ? 400 : 500);
-    }
-
-    if (payload.gates && payload.gates.passed === false) {
-        return EXIT_CODES.checksFailed;
-    }
-
-    return 0;
-}
-
-/**
- * @param {unknown} error
- */
-function mapSdkError(error) {
-    if (error instanceof RubrkitApiError) {
-        return new RubrkitCliError(error.message, {
-            code: error.code,
-            exitCode: exitCodeForApiFailure(error.code, error.status),
-            details: error.details,
-        });
-    }
-
-    if (error instanceof RubrkitError) {
-        return new RubrkitCliError(error.message, {
-            code: error.code,
-            exitCode: error.code === 'missing_sdk_parameter' ? EXIT_CODES.usage : EXIT_CODES.network,
-            details: error.details,
-        });
-    }
-
-    return error;
-}
+// @ts-check
+
+import fs from 'node:fs/promises';
+import path from 'node:path';
+
+import { authError, exitCodeForApiFailure, EXIT_CODES, RubrkitCliError, usageError } from './errors.js';
+import { scoreFromPayload, writeFormattedResult } from './formats.js';
+import { collectArtifactFilesForUpload, runLocalChecks } from './localChecks.js';
+import { Rubrkit, RubrkitApiError, RubrkitError } from './sdk.js';
+
+/**
+ * @param {{
+ *   config: Awaited<ReturnType<import('./config.js').resolveConfig>>,
+ *   stdout?: NodeJS.WritableStream,
+ *   stderr?: NodeJS.WritableStream,
+ *   fetchImpl?: typeof fetch,
+ * }} params
+ */
+export async function runTestingCommand({
+    config,
+    stdout = process.stdout,
+    stderr = process.stderr,
+    fetchImpl = globalThis.fetch,
+}) {
+    if (config.command === 'validate') {
+        return runLocalCommand({ config, stdout });
+    }
+
+    if (config.command === 'test' && !config.remote) {
+        return runLocalCommand({ config, stdout });
+    }
+
+    if (config.command === 'report') {
+        return runReportCommand({ config, stdout, fetchImpl });
+    }
+
+    if (['test', 'audit', 'eval', 'audit-apply'].includes(config.command)) {
+        return runRemoteCommand({ config, stdout, stderr, fetchImpl });
+    }
+
+    throw usageError(`Unsupported command "${config.command}".`);
+}
+
+/**
+ * @param {{ config: Awaited<ReturnType<import('./config.js').resolveConfig>>, stdout: NodeJS.WritableStream }} params
+ */
+async function runLocalCommand({ config, stdout }) {
+    const payload = await runLocalChecks({
+        target: config.selector,
+        cwd: config.destination,
+        command: config.command,
+        failUnder: config.failUnder,
+        failOn: config.failOn,
+    });
+
+    await writeFormattedResult({
+        payload,
+        format: config.format,
+        output: config.output,
+        stdout,
+    });
+
+    return payload.passed ? 0 : EXIT_CODES.checksFailed;
+}
+
+/**
+ * @param {{
+ *   config: Awaited<ReturnType<import('./config.js').resolveConfig>>,
+ *   stdout: NodeJS.WritableStream,
+ *   stderr: NodeJS.WritableStream,
+ *   fetchImpl: typeof fetch
+ * }} params
+ */
+async function runRemoteCommand({ config, stdout, stderr, fetchImpl }) {
+    const dryRun = createRemoteDryRunPayload(config);
+
+    if (config.dryRun) {
+        await writeFormattedResult({
+            payload: dryRun,
+            format: config.format,
+            output: config.output,
+            stdout,
+        });
+        return 0;
+    }
+
+    if (!config.apiKey) {
+        throw authError('Missing Rubrkit API key. Set RUBRKIT_API_KEY or pass --api-key for remote checks.');
+    }
+
+    const client = new Rubrkit({
+        apiKey: config.apiKey,
+        apiUrl: config.apiUrl,
+        fetchImpl,
+        userAgent: 'rubrkit-cli/0.0.0-local',
+    });
+
+    try {
+        const started = await startRemoteRun({ client, config });
+
+        // audit-apply hits a SYNCHRONOUS endpoint that returns { appliedCount, files }
+        // immediately (200, no job). Render the applied summary and exit; never poll.
+        if (config.command === 'audit-apply') {
+            const apply = started && typeof started === 'object' ? /** @type {Record<string, any>} */ (started) : {};
+            const files = Array.isArray(apply.files) ? apply.files : [];
+            const appliedCount = typeof apply.appliedCount === 'number' ? apply.appliedCount : files.length;
+            const payload = {
+                schemaVersion: 1,
+                command: config.command,
+                mode: 'remote-apply',
+                target: config.selector ?? config.artifactBundle ?? null,
+                generatedAt: new Date().toISOString(),
+                appliedCount,
+                files,
+            };
+
+            await writeFormattedResult({
+                payload,
+                format: config.format,
+                output: config.output,
+                stdout,
+            });
+
+            return 0;
+        }
+
+        // A cache hit returns the stored audit result immediately (200, no job).
+        // Short-circuit polling and render the persisted run directly.
+        if (started && started.cached) {
+            const auditRun = started.auditRun ?? {};
+            const job = {
+                id: started.jobId ?? auditRun.jobId ?? null,
+                state: auditRun.status ?? 'succeeded',
+                result: auditRun.result,
+            };
+            const payload = {
+                schemaVersion: 1,
+                command: config.command,
+                mode: 'remote',
+                cached: true,
+                target: config.selector ?? config.artifactBundle ?? null,
+                generatedAt: new Date().toISOString(),
+                started,
+                job,
+                jobId: job.id,
+                gates: evaluateRemoteGates({ config, started, job }),
+            };
+
+            await writeFormattedResult({
+                payload,
+                format: config.format,
+                output: config.output,
+                stdout,
+            });
+
+            return exitCodeForRemotePayload(payload);
+        }
+
+        const jobId = getJobId(started);
+
+        if (!jobId) {
+            throw new RubrkitCliError('Rubrkit API response did not include a jobId.', {
+                code: 'missing_job_id',
+                exitCode: EXIT_CODES.network,
+            });
+        }
+
+        const job = await client.jobs.wait(jobId, {
+            intervalMs: 1000,
+            onProgress: config.format === 'json' || config.ci ? undefined : jobProgress(stderr),
+        });
+        const payload = {
+            schemaVersion: 1,
+            command: config.command,
+            mode: 'remote',
+            cached: false,
+            target: config.selector ?? config.artifactBundle ?? null,
+            generatedAt: new Date().toISOString(),
+            started,
+            job,
+            jobId,
+            gates: evaluateRemoteGates({ config, started, job }),
+        };
+
+        await writeFormattedResult({
+            payload,
+            format: config.format,
+            output: config.output,
+            stdout,
+        });
+
+        return exitCodeForRemotePayload(payload);
+    } catch (error) {
+        throw mapSdkError(error);
+    }
+}
+
+/**
+ * @param {{ config: Awaited<ReturnType<import('./config.js').resolveConfig>>, stdout: NodeJS.WritableStream, fetchImpl: typeof fetch }} params
+ */
+async function runReportCommand({ config, stdout, fetchImpl }) {
+    if (!config.selector) {
+        throw usageError('The report command needs a job ID or run ID.');
+    }
+
+    if (!config.apiKey) {
+        throw authError('Missing Rubrkit API key. Set RUBRKIT_API_KEY or pass --api-key for reports.');
+    }
+
+    const client = new Rubrkit({
+        apiKey: config.apiKey,
+        apiUrl: config.apiUrl,
+        fetchImpl,
+        userAgent: 'rubrkit-cli/0.0.0-local',
+    });
+
+    try {
+        const data = await client.jobs.get(config.selector);
+        const payload = {
+            schemaVersion: 1,
+            command: config.command,
+            mode: 'report',
+            target: config.selector,
+            generatedAt: new Date().toISOString(),
+            ...data,
+        };
+
+        await writeFormattedResult({
+            payload,
+            format: config.format,
+            output: config.output,
+            stdout,
+        });
+
+        return 0;
+    } catch (error) {
+        throw mapSdkError(error);
+    }
+}
+
+/**
+ * @param {{ client: Rubrkit, config: Awaited<ReturnType<import('./config.js').resolveConfig>> }} params
+ */
+async function startRemoteRun({ client, config }) {
+    const body = remoteBody(config);
+
+    if (config.command === 'test') {
+        return startRemoteTestRun({ client, config, body });
+    }
+
+    if (config.command === 'audit') {
+        return client.audits.run({
+            artifactBundleId: getArtifactBundleSelector(config),
+            ...body,
+        });
+    }
+
+    if (config.command === 'eval') {
+        return client.evals.run({
+            artifactBundleId: getArtifactBundleSelector(config),
+            ...body,
+        });
+    }
+
+    if (config.command === 'audit-apply') {
+        if (!config.auditRunId) {
+            throw usageError('The audit-apply command needs an audit run ID. Pass --audit-run-id <id>.');
+        }
+        return client.audits.apply({
+            artifactBundleId: getArtifactBundleSelector(config),
+            auditRunId: config.auditRunId,
+        });
+    }
+
+    throw usageError(`Unsupported remote command "${config.command}".`);
+}
+
+/**
+ * @param {{ client: Rubrkit, config: Awaited<ReturnType<import('./config.js').resolveConfig>>, body: Record<string, unknown> }} params
+ */
+async function startRemoteTestRun({ client, config, body }) {
+    if (await shouldUploadLocalTarget(config)) {
+        const files = await collectArtifactFilesForUpload({
+            target: /** @type {string} */ (config.selector),
+            cwd: config.destination,
+            message: 'Uploaded by rubrkit test --remote.',
+        });
+
+        return client.artifacts.test({
+            ...body,
+            artifactBundleId: config.artifactBundle ?? undefined,
+            name: remoteArtifactBundleName(config.selector),
+            description: 'Created by rubrkit test --remote from local project files.',
+            files,
+        });
+    }
+
+    return client.artifacts.test({
+        ...body,
+        artifactBundleId: getArtifactBundleSelector(config),
+    });
+}
+
+/**
+ * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
+ */
+function remoteBody(config) {
+    /** @type {Record<string, unknown>} */
+    const body = {};
+
+    if (config.selector) body.target = config.selector;
+    if (config.artifactBundle) body.artifactBundleId = config.artifactBundle;
+    if (config.artifact) body.artifact = config.artifact;
+    if (config.rubric) body.rubric = config.rubric;
+    if (config.noAi) body.noAi = true;
+    if (config.ci) body.ci = true;
+    if (config.noCache) body.force = true;
+
+    return body;
+}
+
+/**
+ * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
+ */
+function getArtifactBundleSelector(config) {
+    const selector = config.artifactBundle ?? config.selector;
+
+    if (!selector) {
+        throw usageError(`The ${config.command} command needs an artifact bundle ID or selector for remote runs.`);
+    }
+
+    return selector;
+}
+
+/**
+ * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
+ */
+function createRemoteDryRunPayload(config) {
+    const artifactBundleId = config.command === 'test' ? (config.artifactBundle ?? '{artifactBundleId}') : (config.artifactBundle ?? config.selector ?? '{artifactBundleId}');
+    const endpoint =
+        config.command === 'test'
+            ? `/artifact-bundles/${artifactBundleId}/audits`
+            : config.command === 'audit'
+              ? `/artifact-bundles/${artifactBundleId}/audits`
+              : config.command === 'eval'
+                ? `/artifact-bundles/${artifactBundleId}/evals`
+                : config.command === 'audit-apply'
+                  ? `/artifact-bundles/${artifactBundleId}/audits/${config.auditRunId ?? '{auditRunId}'}/apply`
+                  : `/jobs/${config.selector ?? '{jobId}'}`;
+
+    return {
+        schemaVersion: 1,
+        command: config.command,
+        mode: 'remote-dry-run',
+        target: config.selector ?? config.artifactBundle ?? null,
+        generatedAt: new Date().toISOString(),
+        method: config.command === 'report' ? 'GET' : 'POST',
+        endpoint,
+        composes: config.command === 'test'
+            ? [
+                  'POST /api/v1/artifact-bundles when testing local files without --artifact-bundle',
+                  'POST /api/v1/artifact-bundles/{artifactBundleId}/files when testing local files',
+                  'POST /api/v1/artifact-bundles/{artifactBundleId}/audits',
+                  'GET /api/v1/jobs/{jobId}',
+              ]
+            : undefined,
+        pollsJob: config.command !== 'report',
+        requiresApiKey: true,
+        request: redactRequest(remoteBody(config)),
+    };
+}
+
+/**
+ * @param {Awaited<ReturnType<import('./config.js').resolveConfig>>} config
+ */
+async function shouldUploadLocalTarget(config) {
+    if (config.command !== 'test' || !config.selector) {
+        return false;
+    }
+
+    if (hasGlob(config.selector)) {
+        return true;
+    }
+
+    try {
+        const stats = await fs.stat(path.resolve(config.destination, config.selector));
+        return stats.isFile() || stats.isDirectory();
+    } catch {
+        return false;
+    }
+}
+
+/**
+ * @param {string | null} selector
+ */
+function remoteArtifactBundleName(selector) {
+    const basename = selector ? path.basename(selector) || selector : 'artifact';
+    const name = `CLI remote test: ${basename}`;
+
+    return name.length <= 120 ? name : `${name.slice(0, 117)}...`;
+}
+
+/**
+ * @param {string} value
+ */
+function hasGlob(value) {
+    return /[*?[\]]/.test(value);
+}
+
+/**
+ * @param {Record<string, unknown>} request
+ */
+function redactRequest(request) {
+    const redacted = { ...request };
+    delete redacted.apiKey;
+    delete redacted['api-key'];
+    return redacted;
+}
+
+/**
+ * @param {unknown} started
+ */
+function getJobId(started) {
+    if (!started || typeof started !== 'object') {
+        return null;
+    }
+
+    const record = /** @type {Record<string, any>} */ (started);
+    return record.jobId ?? record.job?.id ?? record.data?.jobId ?? record.data?.job?.id ?? null;
+}
+
+/**
+ * @param {NodeJS.WritableStream} stderr
+ */
+function jobProgress(stderr) {
+    return (job) => {
+        const percent = Number.isFinite(Number(job.percent)) ? `${Number(job.percent)}%` : '';
+        stderr.write(`rubrkit: ${[job.state, job.phase, percent, job.message].filter(Boolean).join(' - ')}\n`);
+    };
+}
+
+/**
+ * @param {{ config: Awaited<ReturnType<import('./config.js').resolveConfig>>, started: Record<string, any>, job: Record<string, any> }} params
+ */
+function evaluateRemoteGates({ config, started, job }) {
+    const payload = { started, job };
+    const score = scoreFromPayload(payload);
+    const failures = [];
+
+    if (typeof config.failUnder === 'number' && typeof score === 'number' && score < config.failUnder) {
+        failures.push({
+            code: 'score_below_threshold',
+            message: `Score ${score} is below --fail-under ${config.failUnder}.`,
+        });
+    }
+
+    return {
+        passed: failures.length === 0,
+        score,
+        failUnder: config.failUnder,
+        failOn: config.failOn,
+        failures,
+    };
+}
+
+/**
+ * @param {Record<string, any>} payload
+ */
+function exitCodeForRemotePayload(payload) {
+    const job = payload.job ?? {};
+
+    if (['failed', 'cancelled', 'paused'].includes(job.state)) {
+        return exitCodeForApiFailure(job.error?.code, job.error?.code ? 400 : 500);
+    }
+
+    if (payload.gates && payload.gates.passed === false) {
+        return EXIT_CODES.checksFailed;
+    }
+
+    return 0;
+}
+
+/**
+ * @param {unknown} error
+ */
+function mapSdkError(error) {
+    if (error instanceof RubrkitApiError) {
+        return new RubrkitCliError(error.message, {
+            code: error.code,
+            exitCode: exitCodeForApiFailure(error.code, error.status),
+            details: error.details,
+        });
+    }
+
+    if (error instanceof RubrkitError) {
+        return new RubrkitCliError(error.message, {
+            code: error.code,
+            exitCode: error.code === 'missing_sdk_parameter' ? EXIT_CODES.usage : EXIT_CODES.network,
+            details: error.details,
+        });
+    }
+
+    return error;
+}