fix(files): retry transient upload transport errors

[cursor]

Summary

• retry direct presigned-storage PUTs after transient httpx.TransportError failures
• reopen and replay the file body with bounded exponential backoff for both sync and async uploads
• keep progress monotonic across retries and preserve the original exception after retries are exhausted

The Oct 4–5 CLI failure export contained six repeated files upload ReadError failures and one SSL read failure. These PUTs bypass the SDK request retry loop, and no existing open PR or main fix covered them.

Testing

• TOGETHER_TELEMETRY_DISABLED=1 uv run pytest -n 0 tests/unit/test_files_resource.py tests/unit/test_upload_progress.py tests/cli/test_files.py (87 passed)
• uv run pyright src/together/lib/resources/files.py tests/unit/test_files_resource.py
• uv run ruff check src/together/lib/resources/files.py tests/unit/test_files_resource.py
• uv run ruff format --check src/together/lib/resources/files.py tests/unit/test_files_resource.py

  

[broly-code-security-scanner]

Broly Security Scan

Warning

Latest baseline snapshot is stale. Broly is running in PR-only fallback mode until the next scheduled baseline refreshes. This does not block the PR.

Note

✅ Clean scan
No vulnerabilities detected in this PR.

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (GLM-5.3-Flash) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Attack Hypotheses · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.