deepflow-openagent-cli 0.1.6__tar.gz → 0.1.8__tar.gz

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deepflow-openagent-cli
-Version: 0.1.6
+Version: 0.1.8
 Summary: Command-line client for OpenAgent OpenAPI (agents, conversations, SSE chat, tools, channels, knowledge bases).
 Author: DeepFlow AI
 Project-URL: Repository, https://github.com/DeepFlowAI/OpenAgent
@@ -158,6 +158,30 @@ selected version does not exist; use `--from base` for a fresh environment.
 Version ID is different from the `x.y.z` version label. First save automatically
 publishes; later saves require a separate `versions publish` command.
 
+Binary uploads (including PDF) use the same sandbox upload writer as the workbench:
+
+```bash
+deepflow_openagent_cli cloudpc files upload 123 --file ./report.pdf
+# After retry exhaustion, reuse BOTH printed IDs and the same local file:
+deepflow_openagent_cli cloudpc files upload 123 --file ./report.pdf \
+  --upload-id UPLOAD_ID --sandbox-id SANDBOX_ID
+```
+
+Uploads accept 1 byte–50 MiB and create `/workspace/files/uploads` automatically.
+The returned path is `/workspace/files/uploads/<upload_id>-<original_filename>`;
+use that path in subsequent OCR or chat commands. The ID prefix prevents duplicate
+files after a lost response. Reusing the same ID/name with different bytes is
+rejected. The sandbox ID pins retries to the original development environment.
+This admin/config API accepts binary content; channel visitor format restrictions
+still apply only to visitor uploads. Uploading does not automatically start OCR.
+
+Uploads and `dev exec` submission/status/stop retry connection failures and HTTP
+408/429/502/503/504 up to four times (1/2/4/8 second delays). Execution retries keep
+the same execution ID and output cursor. Upload retries resend the whole binary
+body; chunk resume is not implemented. Other mutating commands are not retried.
+Requires updated CLI, API server and Cloud PC control plane; no VM image rebuild
+is needed for the upload writer.
+
 Additional operations:
 
 ```bash
@@ -176,8 +200,9 @@ Config update replaces configuration: provide `model_name`, `thinking_enabled`
 and the complete `env_vars` list; omitted thinking/env fields reset to defaults.
 Config queries include environment variable values. File mutation and snapshot
 operations share the per-agent management lock; direct writes by the sandbox's
-Agent or terminal are outside that lock. Cloud PC HTTP requests have a 900-second
-timeout and are not automatically retried. After a timeout, inspect sandbox or
+Agent or terminal are outside that lock. Upload and execution requests have a
+120-second per-attempt timeout and the retries described above. Other Cloud PC
+HTTP requests have a 900-second timeout and are not automatically retried. After a timeout, inspect sandbox or
 version state before retrying a mutation. Conversation logs and chat-control
 routes still require an administrator session.
 
@@ -255,3 +280,93 @@ After installation or Agent edits, use `cloudpc versions save` and optionally
 `versions publish` to preserve and publish the environment. Deploy the updated
 OpenAgent backend, cloudpc VM service, and bridge bundle together; update the CLI
 package as well. No database migration is required.
+
+### Cloud PC channels
+
+Cloud PC channel settings use `cloudpc channels`, separately from Agent settings
+(`cloudpc config`) and Web SDK channels (`channels`). These commands require an
+API key with `config` scope and Cloud PC enabled for the tenant. The backend must
+also include support for API key authentication on `/api/v1/cloudpc/channels`;
+older backends accept administrator sessions only.
+
+```bash
+deepflow_openagent_cli cloudpc channels list --page 1 --per-page 20
+deepflow_openagent_cli cloudpc channels create --name "Cloud workspace"
+deepflow_openagent_cli cloudpc channels agent-options
+deepflow_openagent_cli cloudpc channels get 7
+deepflow_openagent_cli docs show cloudpc.channels.update --json
+```
+
+Update uses the existing PUT replacement contract. Read the current channel
+first and prepare `channel.json` with the complete name, description, ordered
+`agent_ids` and `appearance`. Convert the returned `bindings` to their `id`
+values; the GET response is not itself an update payload.
+
+```json
+{
+  "name": "Cloud workspace",
+  "description": "Team assistant",
+  "agent_ids": [123, 456],
+  "appearance": {
+    "pageTitle": "Workspace",
+    "title": "Assistant",
+    "embedButtonBgColor": "#18181B",
+    "embedButtonIconColor": "#FFFFFF",
+    "userMessageStyle": {
+      "backgroundColor": "#1A1A1A",
+      "borderColor": "#CCCCCC",
+      "textColor": "#FFFFFF",
+      "borderRadius": {
+        "topLeft": 14,
+        "topRight": 14,
+        "bottomLeft": 14,
+        "bottomRight": 4
+      }
+    }
+  },
+  "require_auth": false,
+  "file_upload": {
+    "enabled": true,
+    "allowed_extensions": [".pdf", ".txt"]
+  }
+}
+```
+
+```bash
+deepflow_openagent_cli cloudpc channels update 7 --json-file ./channel.json
+deepflow_openagent_cli cloudpc channels get 7
+```
+
+`--json` also accepts an inline JSON object. `name` is required; omitted
+`description`, `agent_ids` and `appearance` reset to null, an empty list and
+empty appearance respectively. Omitted/null `require_auth` and `file_upload`
+preserve the current values. Enabling uploads requires at least one extension.
+Only Cloud PCs belonging to the current tenant can be bound (up to 20).
+
+User message styles are configured under `appearance.userMessageStyle` in the
+same update payload. They apply to both main and follow-up messages, including
+history and SDK embeds, after opening or refreshing the channel. They do not
+change Agent replies or the admin workbench.
+
+| Field | Value | Reset behavior |
+| --- | --- | --- |
+| `backgroundColor` | `#RRGGBB` | Empty string, null or omission restores each bubble's default |
+| `borderColor` | `#RRGGBB`, rendered as a 1px solid border | Empty string, null or omission removes the border |
+| `textColor` | `#RRGGBB`, also applied to the follow-up label | Empty string, null or omission restores the default |
+| `borderRadius` | Object containing all four integer corners, 0–100 px | Null or omission restores each bubble's default |
+
+The server trims and uppercases colors. Radius keys are `topLeft`, `topRight`,
+`bottomLeft`, and `bottomRight`; partial groups, negative/fractional/out-of-range
+values, strings and booleans are rejected with HTTP 422 (CLI exits nonzero).
+To clear only one override, set that field to null while retaining the other
+settings. To reset all user message styles, set `"userMessageStyle": null` in
+the complete `channel.json`, then run the same update command. The outer PUT
+still replaces `appearance` and bindings: keep all unrelated settings from the
+GET response in the payload. Reading the channel returns the saved style under
+`appearance.userMessageStyle`.
+
+`deepflow_openagent_cli cloudpc channels delete 7` deletes the channel and
+destroys its instances. The server entry point
+`python -m app.openapi_cli cloudpc channels ...` supports the same commands.
+This feature requires updating the backend and CLI; no database migration or
+Cloud PC sandbox image update is needed.

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/README.md

@@ -137,6 +137,30 @@ selected version does not exist; use `--from base` for a fresh environment.
 Version ID is different from the `x.y.z` version label. First save automatically
 publishes; later saves require a separate `versions publish` command.
 
+Binary uploads (including PDF) use the same sandbox upload writer as the workbench:
+
+```bash
+deepflow_openagent_cli cloudpc files upload 123 --file ./report.pdf
+# After retry exhaustion, reuse BOTH printed IDs and the same local file:
+deepflow_openagent_cli cloudpc files upload 123 --file ./report.pdf \
+  --upload-id UPLOAD_ID --sandbox-id SANDBOX_ID
+```
+
+Uploads accept 1 byte–50 MiB and create `/workspace/files/uploads` automatically.
+The returned path is `/workspace/files/uploads/<upload_id>-<original_filename>`;
+use that path in subsequent OCR or chat commands. The ID prefix prevents duplicate
+files after a lost response. Reusing the same ID/name with different bytes is
+rejected. The sandbox ID pins retries to the original development environment.
+This admin/config API accepts binary content; channel visitor format restrictions
+still apply only to visitor uploads. Uploading does not automatically start OCR.
+
+Uploads and `dev exec` submission/status/stop retry connection failures and HTTP
+408/429/502/503/504 up to four times (1/2/4/8 second delays). Execution retries keep
+the same execution ID and output cursor. Upload retries resend the whole binary
+body; chunk resume is not implemented. Other mutating commands are not retried.
+Requires updated CLI, API server and Cloud PC control plane; no VM image rebuild
+is needed for the upload writer.
+
 Additional operations:
 
 ```bash
@@ -155,8 +179,9 @@ Config update replaces configuration: provide `model_name`, `thinking_enabled`
 and the complete `env_vars` list; omitted thinking/env fields reset to defaults.
 Config queries include environment variable values. File mutation and snapshot
 operations share the per-agent management lock; direct writes by the sandbox's
-Agent or terminal are outside that lock. Cloud PC HTTP requests have a 900-second
-timeout and are not automatically retried. After a timeout, inspect sandbox or
+Agent or terminal are outside that lock. Upload and execution requests have a
+120-second per-attempt timeout and the retries described above. Other Cloud PC
+HTTP requests have a 900-second timeout and are not automatically retried. After a timeout, inspect sandbox or
 version state before retrying a mutation. Conversation logs and chat-control
 routes still require an administrator session.
 
@@ -234,3 +259,93 @@ After installation or Agent edits, use `cloudpc versions save` and optionally
 `versions publish` to preserve and publish the environment. Deploy the updated
 OpenAgent backend, cloudpc VM service, and bridge bundle together; update the CLI
 package as well. No database migration is required.
+
+### Cloud PC channels
+
+Cloud PC channel settings use `cloudpc channels`, separately from Agent settings
+(`cloudpc config`) and Web SDK channels (`channels`). These commands require an
+API key with `config` scope and Cloud PC enabled for the tenant. The backend must
+also include support for API key authentication on `/api/v1/cloudpc/channels`;
+older backends accept administrator sessions only.
+
+```bash
+deepflow_openagent_cli cloudpc channels list --page 1 --per-page 20
+deepflow_openagent_cli cloudpc channels create --name "Cloud workspace"
+deepflow_openagent_cli cloudpc channels agent-options
+deepflow_openagent_cli cloudpc channels get 7
+deepflow_openagent_cli docs show cloudpc.channels.update --json
+```
+
+Update uses the existing PUT replacement contract. Read the current channel
+first and prepare `channel.json` with the complete name, description, ordered
+`agent_ids` and `appearance`. Convert the returned `bindings` to their `id`
+values; the GET response is not itself an update payload.
+
+```json
+{
+  "name": "Cloud workspace",
+  "description": "Team assistant",
+  "agent_ids": [123, 456],
+  "appearance": {
+    "pageTitle": "Workspace",
+    "title": "Assistant",
+    "embedButtonBgColor": "#18181B",
+    "embedButtonIconColor": "#FFFFFF",
+    "userMessageStyle": {
+      "backgroundColor": "#1A1A1A",
+      "borderColor": "#CCCCCC",
+      "textColor": "#FFFFFF",
+      "borderRadius": {
+        "topLeft": 14,
+        "topRight": 14,
+        "bottomLeft": 14,
+        "bottomRight": 4
+      }
+    }
+  },
+  "require_auth": false,
+  "file_upload": {
+    "enabled": true,
+    "allowed_extensions": [".pdf", ".txt"]
+  }
+}
+```
+
+```bash
+deepflow_openagent_cli cloudpc channels update 7 --json-file ./channel.json
+deepflow_openagent_cli cloudpc channels get 7
+```
+
+`--json` also accepts an inline JSON object. `name` is required; omitted
+`description`, `agent_ids` and `appearance` reset to null, an empty list and
+empty appearance respectively. Omitted/null `require_auth` and `file_upload`
+preserve the current values. Enabling uploads requires at least one extension.
+Only Cloud PCs belonging to the current tenant can be bound (up to 20).
+
+User message styles are configured under `appearance.userMessageStyle` in the
+same update payload. They apply to both main and follow-up messages, including
+history and SDK embeds, after opening or refreshing the channel. They do not
+change Agent replies or the admin workbench.
+
+| Field | Value | Reset behavior |
+| --- | --- | --- |
+| `backgroundColor` | `#RRGGBB` | Empty string, null or omission restores each bubble's default |
+| `borderColor` | `#RRGGBB`, rendered as a 1px solid border | Empty string, null or omission removes the border |
+| `textColor` | `#RRGGBB`, also applied to the follow-up label | Empty string, null or omission restores the default |
+| `borderRadius` | Object containing all four integer corners, 0–100 px | Null or omission restores each bubble's default |
+
+The server trims and uppercases colors. Radius keys are `topLeft`, `topRight`,
+`bottomLeft`, and `bottomRight`; partial groups, negative/fractional/out-of-range
+values, strings and booleans are rejected with HTTP 422 (CLI exits nonzero).
+To clear only one override, set that field to null while retaining the other
+settings. To reset all user message styles, set `"userMessageStyle": null` in
+the complete `channel.json`, then run the same update command. The outer PUT
+still replaces `appearance` and bindings: keep all unrelated settings from the
+GET response in the payload. Reading the channel returns the saved style under
+`appearance.userMessageStyle`.
+
+`deepflow_openagent_cli cloudpc channels delete 7` deletes the channel and
+destroys its instances. The server entry point
+`python -m app.openapi_cli cloudpc channels ...` supports the same commands.
+This feature requires updating the backend and CLI; no database migration or
+Cloud PC sandbox image update is needed.

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "deepflow-openagent-cli"
-version = "0.1.6"
+version = "0.1.8"
 description = "Command-line client for OpenAgent OpenAPI (agents, conversations, SSE chat, tools, channels, knowledge bases)."
 readme = "README.md"
 requires-python = ">=3.11"

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/src/deepflow_openagent_cli/__init__.py

@@ -1,3 +1,3 @@
 """DeepFlow OpenAgent CLI — published PyPI package."""
 
-__version__ = "0.1.6"
+__version__ = "0.1.8"

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/src/deepflow_openagent_cli/cli.py

@@ -8,6 +8,7 @@ Run with:
 from __future__ import annotations
 
 import argparse
+from http.client import HTTPException
 import json
 import mimetypes
 import os
@@ -129,6 +130,73 @@ def _param(name: str, type_: str, required: bool, description: str) -> ParamDoc:
 
 
 ENDPOINTS: tuple[EndpointDoc, ...] = (
+    EndpointDoc(
+        key="cloudpc.channels.list", method="GET", path="/api/v1/cloudpc/channels", scope="config",
+        summary="List Cloud PC channels for the current tenant.",
+        query_params=[_param("page", "integer", False, "Page number (default 1)."), _param("per_page", "integer", False, "Page size, 1-100 (default 20).")],
+        response="CloudPcChannelListResponse.",
+        example="deepflow_openagent_cli cloudpc channels list --page 1 --per-page 20",
+    ),
+    EndpointDoc(
+        key="cloudpc.channels.create", method="POST", path="/api/v1/cloudpc/channels", scope="config",
+        summary="Create a Cloud PC channel; use update to configure bindings and appearance.",
+        body_fields=[_param("name", "string", True, "Channel name, 1-64 characters."), _param("description", "string", False, "Description, max 500 characters.")],
+        response="CloudPcChannelDetail, HTTP 201.",
+        example='deepflow_openagent_cli cloudpc channels create --name "Cloud workspace"',
+    ),
+    EndpointDoc(
+        key="cloudpc.channels.agent_options", method="GET", path="/api/v1/cloudpc/channels/agent-options", scope="config",
+        summary="List enabled Cloud PCs available for binding, including unpublished ones.",
+        response="CloudPcAgentOptionList: items with id, name, description, version and status.",
+        example="deepflow_openagent_cli cloudpc channels agent-options",
+    ),
+    EndpointDoc(
+        key="cloudpc.channels.get", method="GET", path="/api/v1/cloudpc/channels/{channel_id}", scope="config",
+        summary="Get Cloud PC channel settings and ordered bindings.",
+        path_params=[_param("channel_id", "integer", True, "Cloud PC channel ID.")],
+        response="CloudPcChannelDetail: id, name, description, token, appearance, bindings, require_auth, has_secret_key, file_upload and timestamps.",
+        example="deepflow_openagent_cli cloudpc channels get 1",
+    ),
+    EndpointDoc(
+        key="cloudpc.channels.update", method="PUT", path="/api/v1/cloudpc/channels/{channel_id}", scope="config",
+        summary="Replace channel name, description, bindings and appearance; omitted require_auth/file_upload are preserved.",
+        path_params=[_param("channel_id", "integer", True, "Cloud PC channel ID.")],
+        body_fields=[
+            _param("name", "string", True, "Channel name, 1-64 characters."),
+            _param("description", "string", False, "Description, max 500 characters; omitted resets to null."),
+            _param("agent_ids", "array", False, "Complete ordered list of Cloud PC Agent IDs, max 20 unique IDs; omitted clears bindings. Convert GET bindings to their id values."),
+            _param("appearance", "object", False, "Complete appearance: favicon, pageTitle, logo, title, embedButtonBgColor, embedButtonIconColor, userMessageStyle; omitted clears appearance. Titles max 32 characters; colors #RRGGBB."),
+            _param("appearance.userMessageStyle", "object|null", False, "Overrides main and follow-up user bubbles in this channel, including history and embeds. Omitted/null restores defaults; other appearance fields must still be supplied."),
+            _param("appearance.userMessageStyle.backgroundColor", "string|null", False, "Background #RRGGBB. Server trims and uppercases; empty string/null restores each bubble's default."),
+            _param("appearance.userMessageStyle.borderColor", "string|null", False, "Border #RRGGBB; 1px solid when set. Empty string/null removes the border."),
+            _param("appearance.userMessageStyle.textColor", "string|null", False, "Text #RRGGBB, including the follow-up label. Empty string/null restores the default."),
+            _param("appearance.userMessageStyle.borderRadius", "object|null", False, "All four corners are required when set: topLeft, topRight, bottomLeft, bottomRight, each an integer 0-100 px. Null restores each bubble's default; partial groups, strings, floats and booleans are rejected."),
+            _param("require_auth", "boolean", False, "Require signed visitor authentication; omitted/null preserves current value."),
+            _param("file_upload", "object", False, "enabled and allowed_extensions; enabled uploads require at least one extension. Omitted/null preserves current value."),
+        ],
+        response="CloudPcChannelDetail.",
+        errors=["400 invalid bindings or duplicate name", "401 invalid API key", "403 config scope missing, non-admin session or Cloud PC disabled", "404 channel not found in current tenant", "422 validation error"],
+        example="deepflow_openagent_cli cloudpc channels update 1 --json-file channel.json",
+    ),
+    EndpointDoc(
+        key="cloudpc.channels.delete", method="DELETE", path="/api/v1/cloudpc/channels/{channel_id}", scope="config",
+        summary="Delete a Cloud PC channel and destroy its instances.",
+        path_params=[_param("channel_id", "integer", True, "Cloud PC channel ID.")],
+        response="Deletion message.",
+        example="deepflow_openagent_cli cloudpc channels delete 1",
+    ),
+    EndpointDoc(
+        key="cloudpc.files.upload", method="POST",
+        path="/api/v1/cloudpc/agents/{agent_id}/dev-sandbox/files/upload", scope="config",
+        summary="Upload binary content (1 byte–50 MiB) into /workspace/files/uploads; safe to retry with the same upload ID and sandbox ID.",
+        path_params=[_param("agent_id", "integer", True, "Cloud PC Agent ID.")],
+        query_params=[_param("filename", "string", True, "Original basename."),
+                      _param("upload_id", "string", True, "32 lowercase hex characters; prefixes the saved filename."),
+                      _param("sandbox_id", "integer", True, "Pinned development sandbox ID from dev get.")],
+        response="Saved filename, absolute path and size.",
+        example="deepflow_openagent_cli cloudpc files upload 1 --file ./report.pdf",
+    ),
+
     EndpointDoc(
         key="cloudpc.dev.exec", method="POST", path="/api/v1/cloudpc/agents/{agent_id}/dev-sandbox/executions", scope="config",
         summary='Start an idempotent shell execution. Output remains in the sandbox runtime until restart or eviction (32 retained).',
@@ -1254,6 +1322,38 @@ class OpenApiClient:
         except (URLError, OSError, UnicodeError, ValueError) as exc:
             raise CliError(f"Chat stream interrupted: {exc}") from exc
 
+    def _read_retryable(self, request: Request) -> bytes:
+        """Only for operations whose server contract makes replay safe."""
+        for attempt in range(5):
+            try:
+                with urlopen(request, timeout=120) as response:
+                    return response.read()
+            except HTTPError as exc:
+                if exc.code not in {408, 429, 502, 503, 504} or attempt == 4:
+                    raise CliError(f"HTTP {exc.code}: {exc.read().decode('utf-8', errors='replace')}") from exc
+            except (URLError, OSError, HTTPException) as exc:
+                if attempt == 4:
+                    raise CliError(f"Connection failed after 5 attempts: {exc}") from exc
+            print(f"Connection interrupted; retry {attempt + 1}/4…", file=sys.stderr)
+            time.sleep(2 ** attempt)
+
+    def upload(self, agent_id: int, file: Path, upload_id: str, sandbox_id: int) -> bytes:
+        if not self.api_key:
+            raise CliError(f"Missing API key. Set {ENV_API_KEY} or pass --api-key.")
+        try:
+            with file.open("rb") as source:
+                content = source.read(50 * 1024 * 1024 + 1)
+        except OSError as exc:
+            raise CliError(f"Cannot read upload: {exc}") from exc
+        if not 0 < len(content) <= 50 * 1024 * 1024:
+            raise CliError("Upload must be between 1 byte and 50 MiB.")
+        url = self._build_url(get_endpoint("cloudpc.files.upload"), {"agent_id": agent_id},
+                              {"filename": file.name, "upload_id": upload_id, "sandbox_id": sandbox_id})
+        request = Request(url, data=content, method="POST", headers={
+            "Authorization": f"Bearer {self.api_key}", "Content-Type": "application/octet-stream",
+        })
+        return self._read_retryable(request)
+
     def request(
         self,
         endpoint_key: str,
@@ -1262,6 +1362,7 @@ class OpenApiClient:
         body: dict[str, Any] | None = None,
         *,
         stream: bool = False,
+        retry: bool = False,
     ) -> bytes | None:
         endpoint = get_endpoint(endpoint_key)
         if endpoint.scope and not self.api_key:
@@ -1277,6 +1378,8 @@ class OpenApiClient:
             headers["Content-Type"] = "application/json"
 
         request = Request(url, data=data, headers=headers, method=endpoint.method)
+        if not stream and (retry or endpoint_key in {"cloudpc.dev.exec", "cloudpc.dev.exec_status", "cloudpc.dev.exec_cancel"}):
+            return self._read_retryable(request)
         try:
             options = {"timeout": 900} if endpoint_key.startswith("cloudpc.") else {}
             with urlopen(request, **options) as response:  # noqa: S310 - CLI calls user-provided API host.
@@ -1877,9 +1980,32 @@ def handle_cloudpc_chat(args: argparse.Namespace) -> int:
         raise
 
 
+def handle_cloudpc_channels(args: argparse.Namespace) -> int:
+    """Manage Cloud PC channels through their dedicated API."""
+    action = args.cloudpc_action
+    endpoint = f"cloudpc.channels.{action.replace('-', '_')}"
+    if action == "list":
+        return run_request(args, endpoint, query={"page": args.page, "per_page": args.per_page})
+    if action == "agent-options":
+        return run_request(args, endpoint)
+    if action == "create":
+        return run_request(args, endpoint, body={"name": args.name, "description": args.description})
+    body = None
+    if action == "update":
+        try:
+            body = merge_payload(args)
+        except (OSError, UnicodeError) as exc:
+            raise CliError(f"Cannot read channel configuration file: {exc}") from exc
+        if not body.get("name"):
+            raise CliError("Channel update requires name in --json or --json-file.")
+    return run_request(args, endpoint, {"channel_id": args.channel_id}, body=body)
+
+
 def handle_cloudpc(args: argparse.Namespace) -> int:
     """Manage Cloud PC configuration, development files and saved versions."""
     group = args.cloudpc_group
+    if group == "channels":
+        return handle_cloudpc_channels(args)
     if group == "capability":
         return run_request(args, "cloudpc.capability")
     if group == "create":
@@ -1919,6 +2045,21 @@ def handle_cloudpc(args: argparse.Namespace) -> int:
                 raise CliError("Version ID must be positive.")
         body = {"from_version_id": version_id}
     elif group == "files":
+        if action == "upload":
+            if bool(args.upload_id) != (args.sandbox_id is not None):
+                raise CliError("Use --upload-id and --sandbox-id together when resuming an upload.")
+            client = client_from_args(args)
+            upload_id = args.upload_id or uuid4().hex
+            sandbox_id = args.sandbox_id
+            if sandbox_id is None:
+                dev = json.loads(client.request("cloudpc.dev.get", path_params, retry=True))
+                sandbox_id = dev.get("sandbox_id")
+                if sandbox_id is None:
+                    raise CliError("No upload-capable development sandbox; create/resume it and update the server.")
+            print(f"upload_id={upload_id} sandbox_id={sandbox_id}; reuse both IDs to retry this upload.", file=sys.stderr)
+            data = client.upload(args.agent_id, Path(args.file).expanduser(), upload_id, sandbox_id)
+            print_output(data, pretty=args.pretty, raw=args.raw)
+            return 0
         if action in {"read", "delete"}:
             query = {"path": args.path}
         elif action == "write":
@@ -2076,6 +2217,20 @@ def build_parser() -> argparse.ArgumentParser:
 
     cloudpc = subparsers.add_parser("cloudpc", help="Cloud PC management (requires config scope).")
     cloudpc_sub = cloudpc.add_subparsers(dest="cloudpc_group", required=True)
+    cloudpc_channels = cloudpc_sub.add_parser("channels", help="Cloud PC channel configuration.").add_subparsers(dest="cloudpc_action", required=True)
+    channel_list = cloudpc_channels.add_parser("list")
+    channel_list.add_argument("--page", type=int)
+    channel_list.add_argument("--per-page", type=int)
+    cloudpc_channels.add_parser("agent-options")
+    channel_create = cloudpc_channels.add_parser("create")
+    channel_create.add_argument("--name", required=True)
+    channel_create.add_argument("--description")
+    for action in ("get", "delete"):
+        cloudpc_channels.add_parser(action).add_argument("channel_id", type=int)
+    channel_update_help = "Replace name/description/bindings/appearance; omitted bindings/appearance are cleared. Omitted require_auth/file_upload are preserved. Set appearance.userMessageStyle in --json or --json-file for user bubble colors and four-corner radius; null restores defaults. See docs show cloudpc.channels.update."
+    channel_update = cloudpc_channels.add_parser("update", help=channel_update_help, description=channel_update_help)
+    channel_update.add_argument("channel_id", type=int)
+    add_json_args(channel_update)
     cloudpc_sub.add_parser("capability")
     cloudpc_create = cloudpc_sub.add_parser("create")
     cloudpc_create.add_argument("--name", required=True)
@@ -2129,6 +2284,11 @@ def build_parser() -> argparse.ArgumentParser:
         elif action == "rename":
             command.add_argument("--src", required=True)
             command.add_argument("--dst", required=True)
+    upload = cloudpc_files.add_parser("upload", help="Upload binary files to /workspace/files/uploads (max 50 MiB).")
+    upload.add_argument("agent_id", type=int)
+    upload.add_argument("--file", required=True)
+    upload.add_argument("--upload-id", help="Reuse the printed ID when retrying an interrupted upload.")
+    upload.add_argument("--sandbox-id", type=int, help="Reuse the printed sandbox ID on manual retry.")
     cloudpc_versions = cloudpc_sub.add_parser("versions").add_subparsers(dest="cloudpc_action", required=True)
     for action in ("list", "save", "publish"):
         command = cloudpc_versions.add_parser(action)

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/src/deepflow_openagent_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: deepflow-openagent-cli
-Version: 0.1.6
+Version: 0.1.8
 Summary: Command-line client for OpenAgent OpenAPI (agents, conversations, SSE chat, tools, channels, knowledge bases).
 Author: DeepFlow AI
 Project-URL: Repository, https://github.com/DeepFlowAI/OpenAgent
@@ -158,6 +158,30 @@ selected version does not exist; use `--from base` for a fresh environment.
 Version ID is different from the `x.y.z` version label. First save automatically
 publishes; later saves require a separate `versions publish` command.
 
+Binary uploads (including PDF) use the same sandbox upload writer as the workbench:
+
+```bash
+deepflow_openagent_cli cloudpc files upload 123 --file ./report.pdf
+# After retry exhaustion, reuse BOTH printed IDs and the same local file:
+deepflow_openagent_cli cloudpc files upload 123 --file ./report.pdf \
+  --upload-id UPLOAD_ID --sandbox-id SANDBOX_ID
+```
+
+Uploads accept 1 byte–50 MiB and create `/workspace/files/uploads` automatically.
+The returned path is `/workspace/files/uploads/<upload_id>-<original_filename>`;
+use that path in subsequent OCR or chat commands. The ID prefix prevents duplicate
+files after a lost response. Reusing the same ID/name with different bytes is
+rejected. The sandbox ID pins retries to the original development environment.
+This admin/config API accepts binary content; channel visitor format restrictions
+still apply only to visitor uploads. Uploading does not automatically start OCR.
+
+Uploads and `dev exec` submission/status/stop retry connection failures and HTTP
+408/429/502/503/504 up to four times (1/2/4/8 second delays). Execution retries keep
+the same execution ID and output cursor. Upload retries resend the whole binary
+body; chunk resume is not implemented. Other mutating commands are not retried.
+Requires updated CLI, API server and Cloud PC control plane; no VM image rebuild
+is needed for the upload writer.
+
 Additional operations:
 
 ```bash
@@ -176,8 +200,9 @@ Config update replaces configuration: provide `model_name`, `thinking_enabled`
 and the complete `env_vars` list; omitted thinking/env fields reset to defaults.
 Config queries include environment variable values. File mutation and snapshot
 operations share the per-agent management lock; direct writes by the sandbox's
-Agent or terminal are outside that lock. Cloud PC HTTP requests have a 900-second
-timeout and are not automatically retried. After a timeout, inspect sandbox or
+Agent or terminal are outside that lock. Upload and execution requests have a
+120-second per-attempt timeout and the retries described above. Other Cloud PC
+HTTP requests have a 900-second timeout and are not automatically retried. After a timeout, inspect sandbox or
 version state before retrying a mutation. Conversation logs and chat-control
 routes still require an administrator session.
 
@@ -255,3 +280,93 @@ After installation or Agent edits, use `cloudpc versions save` and optionally
 `versions publish` to preserve and publish the environment. Deploy the updated
 OpenAgent backend, cloudpc VM service, and bridge bundle together; update the CLI
 package as well. No database migration is required.
+
+### Cloud PC channels
+
+Cloud PC channel settings use `cloudpc channels`, separately from Agent settings
+(`cloudpc config`) and Web SDK channels (`channels`). These commands require an
+API key with `config` scope and Cloud PC enabled for the tenant. The backend must
+also include support for API key authentication on `/api/v1/cloudpc/channels`;
+older backends accept administrator sessions only.
+
+```bash
+deepflow_openagent_cli cloudpc channels list --page 1 --per-page 20
+deepflow_openagent_cli cloudpc channels create --name "Cloud workspace"
+deepflow_openagent_cli cloudpc channels agent-options
+deepflow_openagent_cli cloudpc channels get 7
+deepflow_openagent_cli docs show cloudpc.channels.update --json
+```
+
+Update uses the existing PUT replacement contract. Read the current channel
+first and prepare `channel.json` with the complete name, description, ordered
+`agent_ids` and `appearance`. Convert the returned `bindings` to their `id`
+values; the GET response is not itself an update payload.
+
+```json
+{
+  "name": "Cloud workspace",
+  "description": "Team assistant",
+  "agent_ids": [123, 456],
+  "appearance": {
+    "pageTitle": "Workspace",
+    "title": "Assistant",
+    "embedButtonBgColor": "#18181B",
+    "embedButtonIconColor": "#FFFFFF",
+    "userMessageStyle": {
+      "backgroundColor": "#1A1A1A",
+      "borderColor": "#CCCCCC",
+      "textColor": "#FFFFFF",
+      "borderRadius": {
+        "topLeft": 14,
+        "topRight": 14,
+        "bottomLeft": 14,
+        "bottomRight": 4
+      }
+    }
+  },
+  "require_auth": false,
+  "file_upload": {
+    "enabled": true,
+    "allowed_extensions": [".pdf", ".txt"]
+  }
+}
+```
+
+```bash
+deepflow_openagent_cli cloudpc channels update 7 --json-file ./channel.json
+deepflow_openagent_cli cloudpc channels get 7
+```
+
+`--json` also accepts an inline JSON object. `name` is required; omitted
+`description`, `agent_ids` and `appearance` reset to null, an empty list and
+empty appearance respectively. Omitted/null `require_auth` and `file_upload`
+preserve the current values. Enabling uploads requires at least one extension.
+Only Cloud PCs belonging to the current tenant can be bound (up to 20).
+
+User message styles are configured under `appearance.userMessageStyle` in the
+same update payload. They apply to both main and follow-up messages, including
+history and SDK embeds, after opening or refreshing the channel. They do not
+change Agent replies or the admin workbench.
+
+| Field | Value | Reset behavior |
+| --- | --- | --- |
+| `backgroundColor` | `#RRGGBB` | Empty string, null or omission restores each bubble's default |
+| `borderColor` | `#RRGGBB`, rendered as a 1px solid border | Empty string, null or omission removes the border |
+| `textColor` | `#RRGGBB`, also applied to the follow-up label | Empty string, null or omission restores the default |
+| `borderRadius` | Object containing all four integer corners, 0–100 px | Null or omission restores each bubble's default |
+
+The server trims and uppercases colors. Radius keys are `topLeft`, `topRight`,
+`bottomLeft`, and `bottomRight`; partial groups, negative/fractional/out-of-range
+values, strings and booleans are rejected with HTTP 422 (CLI exits nonzero).
+To clear only one override, set that field to null while retaining the other
+settings. To reset all user message styles, set `"userMessageStyle": null` in
+the complete `channel.json`, then run the same update command. The outer PUT
+still replaces `appearance` and bindings: keep all unrelated settings from the
+GET response in the payload. Reading the channel returns the saved style under
+`appearance.userMessageStyle`.
+
+`deepflow_openagent_cli cloudpc channels delete 7` deletes the channel and
+destroys its instances. The server entry point
+`python -m app.openapi_cli cloudpc channels ...` supports the same commands.
+This feature requires updating the backend and CLI; no database migration or
+Cloud PC sandbox image update is needed.

{deepflow_openagent_cli-0.1.6 → deepflow_openagent_cli-0.1.8}/tests/test_cloudpc_cli.py

@@ -44,6 +44,12 @@ def run(cli, *args):
 
 
 @pytest.mark.parametrize(("arguments", "method", "suffix", "body"), [
+    (["channels", "list", "--page", "2", "--per-page", "5"], "GET", "/channels?page=2&per_page=5", None),
+    (["channels", "create", "--name", "渠道", "--description", "Demo"], "POST", "/channels", {"name": "渠道", "description": "Demo"}),
+    (["channels", "agent-options"], "GET", "/channels/agent-options", None),
+    (["channels", "get", "7"], "GET", "/channels/7", None),
+    (["channels", "update", "7", "--json", '{"name":"渠道","agent_ids":[3,2],"appearance":{"title":"助手"},"require_auth":false,"file_upload":{"enabled":true,"allowed_extensions":[".pdf"]}}'], "PUT", "/channels/7", {"name": "渠道", "agent_ids": [3, 2], "appearance": {"title": "助手"}, "require_auth": False, "file_upload": {"enabled": True, "allowed_extensions": [".pdf"]}}),
+    (["channels", "delete", "7"], "DELETE", "/channels/7", None),
     (["capability"], "GET", "/capability", None),
     (["create", "--name", "Test"], "POST", "/agents", {"name": "Test", "description": None}),
     (["config", "get", "7"], "GET", "/agents/7/config", None),
@@ -79,6 +85,100 @@ def test_agents_kind_filter(cli, transport):
     assert "kind=cloudpc" in calls[0][0].full_url
 
 
+def test_channel_update_from_file(cli, transport, tmp_path):
+    payload = {"name": "渠道", "description": None, "agent_ids": [], "appearance": {}}
+    source = tmp_path / "channel.json"
+    source.write_text(json.dumps(payload), encoding="utf-8")
+    assert run(cli, "cloudpc", "channels", "update", "7", "--json-file", str(source)) == 0
+    calls, _ = transport
+    assert len(calls) == 1
+    assert json.loads(calls[0][0].data) == payload
+
+
+@pytest.mark.parametrize("payload", ["{}", "[]", "{invalid"])
+def test_invalid_channel_update_does_not_send_request(cli, transport, payload):
+    assert run(cli, "cloudpc", "channels", "update", "7", "--json", payload) == 1
+    assert transport[0] == []
+
+
+def test_missing_channel_file_has_clean_error(cli, transport, tmp_path, capsys):
+    assert run(cli, "cloudpc", "channels", "update", "7", "--json-file", str(tmp_path / "missing.json")) == 1
+    assert transport[0] == []
+    assert "Cannot read channel configuration file" in capsys.readouterr().err
+
+
+def test_channel_docs_describe_replacement(cli, capsys):
+    assert cli.main(["docs", "show", "cloudpc.channels.update", "--json"]) == 0
+    doc = json.loads(capsys.readouterr().out)
+    assert doc["scope"] == "config"
+    assert doc["path"] == "/api/v1/cloudpc/channels/{channel_id}"
+    fields = {field["name"]: field for field in doc["body_fields"]}
+    assert fields["name"]["required"]
+    assert "omitted clears" in fields["agent_ids"]["description"]
+    assert "preserves" in fields["file_upload"]["description"]
+
+
+@pytest.mark.parametrize("source", ["--json", "--json-file"])
+@pytest.mark.parametrize("style", [
+    {"backgroundColor": "#123456", "borderColor": "#ABCDEF", "textColor": "#FFFFFF",
+     "borderRadius": {"topLeft": 0, "topRight": 100, "bottomLeft": 12, "bottomRight": 4}},
+    {"textColor": " #aabbcc "},
+    {"backgroundColor": "#123456", "borderColor": None, "textColor": "", "borderRadius": None},
+    None,
+])
+def test_channel_message_style_update_payload(cli, transport, tmp_path, source, style):
+    payload = {
+        "name": "Workspace", "description": "Keep", "agent_ids": [3, 2],
+        "appearance": {"title": "Assistant", "embedButtonBgColor": "#1A1A1A", "userMessageStyle": style},
+        "require_auth": True, "file_upload": {"enabled": True, "allowed_extensions": [".pdf"]},
+    }
+    value = json.dumps(payload)
+    if source == "--json-file":
+        path = tmp_path / "channel.json"
+        path.write_text(value, encoding="utf-8")
+        value = str(path)
+    assert run(cli, "cloudpc", "channels", "update", "7", source, value) == 0
+    calls, _ = transport
+    assert len(calls) == 1
+    assert calls[0][0].method == "PUT"
+    assert json.loads(calls[0][0].data) == payload
+
+
+def test_channel_message_style_read(cli, transport, capsys):
+    detail = {"id": 7, "appearance": {"userMessageStyle": {"textColor": "#AABBCC", "borderRadius": None}}}
+    transport[1]["http://test/api/v1/cloudpc/channels/7"] = json.dumps(detail).encode()
+    assert run(cli, "cloudpc", "channels", "get", "7") == 0
+    assert json.loads(capsys.readouterr().out) == detail
+
+
+def test_channel_message_style_validation_failure_is_reported_without_retry(cli, transport, capsys):
+    url = "http://test/api/v1/cloudpc/channels/7"
+    body = {"detail": [{"loc": ["body", "appearance", "userMessageStyle", "borderRadius", "topRight"], "msg": "Field required"}]}
+    transport[1][url] = HTTPError(url, 422, "Unprocessable Entity", {}, io.BytesIO(json.dumps(body).encode()))
+    payload = {"name": "Workspace", "appearance": {"userMessageStyle": {"borderRadius": {"topLeft": 1}}}}
+    assert run(cli, "cloudpc", "channels", "update", "7", "--json", json.dumps(payload)) == 1
+    assert len(transport[0]) == 1
+    error = capsys.readouterr().err
+    assert "HTTP 422" in error and "userMessageStyle" in error and "topRight" in error
+
+
+def test_channel_message_style_docs_and_help(cli, capsys):
+    assert cli.main(["docs", "show", "cloudpc.channels.update", "--json"]) == 0
+    fields = {field["name"]: field for field in json.loads(capsys.readouterr().out)["body_fields"]}
+    assert "userMessageStyle" in fields["appearance"]["description"]
+    prefix = "appearance.userMessageStyle"
+    for key in ["backgroundColor", "borderColor", "textColor", "borderRadius"]:
+        assert not fields[f"{prefix}.{key}"]["required"]
+        assert "null" in fields[f"{prefix}.{key}"]["description"].lower()
+    radius = fields[f"{prefix}.borderRadius"]["description"]
+    for key in ["topLeft", "topRight", "bottomLeft", "bottomRight", "0-100"]:
+        assert key in radius
+    with pytest.raises(SystemExit) as exc:
+        cli.main(["cloudpc", "channels", "update", "--help"])
+    assert exc.value.code == 0
+    assert "appearance.userMessageStyle" in capsys.readouterr().out
+
+
 @pytest.mark.parametrize(("source", "expected"), [("latest", 23), ("published", 19)])
 def test_resolve_version_and_report_actual_source(cli, transport, capsys, source, expected):
     calls, responses = transport
@@ -254,3 +354,83 @@ def test_dev_chat_requires_message_or_existing_round(cli, transport):
     assert run(cli, 'cloudpc', 'dev', 'chat', '7') == 1
     assert run(cli, 'cloudpc', 'dev', 'chat', '7', '--attach') == 1
     assert transport[0] == []
+
+
+def test_binary_upload_replays_exact_body_after_ssl_eof(cli, monkeypatch, tmp_path, capsys):
+    import ssl
+    source = tmp_path / '报告.pdf'
+    content = b'%PDF-1.7\n\x00\xff' + b'x' * (2 * 1024 * 1024)
+    source.write_bytes(content)
+    calls = []
+    def send(request, **kwargs):
+        calls.append(request)
+        if request.method == 'GET':
+            return io.BytesIO(b'{"sandbox_id":42,"exists":true}')
+        if len(calls) == 2:
+            raise ssl.SSLEOFError('UNEXPECTED_EOF_WHILE_READING')
+        return io.BytesIO(b'{"path":"/workspace/files/uploads/saved.pdf"}')
+    monkeypatch.setattr(cli, 'urlopen', send)
+    monkeypatch.setattr(cli.time, 'sleep', lambda _: None)
+    assert run(cli, 'cloudpc', 'files', 'upload', '7', '--file', str(source)) == 0
+    assert calls[1].data == calls[2].data == content
+    assert calls[1].full_url == calls[2].full_url
+    assert 'sandbox_id=42' in calls[1].full_url
+    assert 'upload_id=' in capsys.readouterr().err
+
+
+def test_exec_retries_same_submission_and_cursor(cli, monkeypatch, capsys):
+    from http.client import IncompleteRead
+    calls = []
+    def send(request, **kwargs):
+        calls.append(request)
+        if len(calls) in {1, 3}:
+            raise IncompleteRead(b'partial')
+        if request.method == 'POST':
+            return io.BytesIO(b'{}')
+        return io.BytesIO(b'{"events":[{"event":{"type":"stdout","text":"once"}}],"cursor":1,"state":"exited","exit_code":0}')
+    monkeypatch.setattr(cli, 'urlopen', send)
+    monkeypatch.setattr(cli.time, 'sleep', lambda _: None)
+    assert run(cli, 'cloudpc', 'dev', 'exec', '7', '--command', 'echo once', '--execution-id', 'job') == 0
+    assert calls[0].data == calls[1].data
+    assert calls[2].full_url == calls[3].full_url
+    assert capsys.readouterr().out == 'once'
+
+
+@pytest.mark.parametrize('code', [400, 401, 403, 409, 413])
+def test_upload_permanent_errors_not_retried(cli, monkeypatch, tmp_path, code):
+    file = tmp_path / 'x.pdf'
+    file.write_bytes(b'\xff\x00')
+    calls = []
+    def send(request, **kwargs):
+        calls.append(request)
+        raise HTTPError(request.full_url, code, 'rejected', {}, io.BytesIO(b'rejected'))
+    monkeypatch.setattr(cli, 'urlopen', send)
+    assert run(cli, 'cloudpc', 'files', 'upload', '7', '--file', str(file), '--sandbox-id', '42', '--upload-id', 'a' * 32) == 1
+    assert len(calls) == 1
+
+
+def test_exec_retry_exhaustion_preserves_attach_hint(cli, monkeypatch, capsys):
+    calls = []
+    def send(request, **kwargs):
+        calls.append(request)
+        raise ConnectionResetError('reset')
+    monkeypatch.setattr(cli, 'urlopen', send)
+    monkeypatch.setattr(cli.time, 'sleep', lambda _: None)
+    assert run(cli, 'cloudpc', 'dev', 'exec-attach', '7', 'job', '--after', '8') == 1
+    assert len(calls) == 5
+    assert all('after=8' in request.full_url for request in calls)
+    assert 'exec-attach 7 job --after 8' in capsys.readouterr().err
+
+
+@pytest.mark.parametrize('size', [0, 50 * 1024 * 1024 + 1])
+def test_upload_size_rejected_before_send(cli, transport, tmp_path, size):
+    source = tmp_path / 'x.pdf'
+    with source.open('wb') as file:
+        file.truncate(size)
+    assert run(cli, 'cloudpc', 'files', 'upload', '7', '--file', str(source), '--upload-id', 'a' * 32, '--sandbox-id', '42') == 1
+    assert transport[0] == []
+
+
+def test_upload_manual_retry_requires_both_ids(cli, transport):
+    assert run(cli, 'cloudpc', 'files', 'upload', '7', '--file', 'x.pdf', '--upload-id', 'a' * 32) == 1
+    assert transport[0] == []