@agentuity/cli 0.1.16 → 0.1.18

package/src/cmd/cloud/sandbox/snapshot/create.ts

@@ -39,6 +39,10 @@ export const createSubcommand = createCommand({
 			),
 			description: 'Create a named snapshot with description',
 		},
+		{
+			command: getCommand('cloud sandbox snapshot create sbx_abc123 --public'),
+			description: 'Create a public snapshot',
+		},
 	],
 	schema: {
 		args: z.object({
@@ -51,6 +55,7 @@ export const createSubcommand = createCommand({
 				.describe('Display name for the snapshot (letters, numbers, underscores, dashes only)'),
 			description: z.string().optional().describe('Description of the snapshot'),
 			tag: z.string().optional().describe('Tag for the snapshot (defaults to "latest")'),
+			public: z.boolean().optional().default(false).describe('Make the snapshot publicly accessible'),
 		}),
 		response: SnapshotCreateResponseSchema,
 	},
@@ -86,17 +91,29 @@ export const createSubcommand = createCommand({
 			name: opts.name,
 			description: opts.description,
 			tag: opts.tag,
+			public: opts.public,
 			orgId,
 		});
 
 		if (!options.json) {
-			tui.success(`created snapshot ${tui.bold(snapshot.snapshotId)}`);
-			tui.info(`Name: ${snapshot.name}`);
-			if (snapshot.description) {
-				tui.info(`Description: ${snapshot.description}`);
-			}
-			tui.info(`Size: ${tui.formatBytes(snapshot.sizeBytes)}, Files: ${snapshot.fileCount}`);
-			tui.info(`Tag: ${snapshot.tag ?? 'latest'}`);
+			tui.success(`Created snapshot ${tui.bold(snapshot.snapshotId)}`);
+			console.log('');
+
+			tui.table(
+				[
+					{
+						Name: snapshot.name,
+						Description: snapshot.description ?? '-',
+						Tag: snapshot.tag ?? 'latest',
+						Size: tui.formatBytes(snapshot.sizeBytes),
+						Files: snapshot.fileCount.toFixed(),
+						Visibility: snapshot.public ? 'public' : 'private',
+						Created: snapshot.createdAt,
+					},
+				],
+				['Name', 'Description', 'Tag', 'Size', 'Files', 'Visibility', 'Created'],
+				{ layout: 'vertical', padStart: '  ' }
+			);
 		}
 
 		return {

package/src/cmd/cloud/sandbox/snapshot/get.ts

@@ -10,6 +10,9 @@ import { getGlobalCatalystAPIClient } from '../../../../config';
 const SnapshotFileSchema = z.object({
 	path: z.string(),
 	size: z.number(),
+	sha256: z.string(),
+	contentType: z.string(),
+	mode: z.number(),
 });
 
 const SandboxInfoSchema = z.object({
@@ -22,10 +25,15 @@ const SandboxInfoSchema = z.object({
 const SnapshotGetResponseSchema = z.object({
 	snapshotId: z.string().describe('Snapshot ID'),
 	name: z.string().describe('Snapshot name'),
+	fullName: z.string().optional().describe('Full name with org slug (@slug/name:tag)'),
 	tag: z.string().nullable().optional().describe('Snapshot tag'),
+	message: z.string().nullable().optional().describe('Build message'),
 	sizeBytes: z.number().describe('Snapshot size in bytes'),
 	fileCount: z.number().describe('Number of files'),
 	parentSnapshotId: z.string().nullable().optional().describe('Parent snapshot ID'),
+	public: z.boolean().optional().describe('Whether snapshot is publicly accessible'),
+	orgName: z.string().optional().describe('Organization name (for public snapshots)'),
+	orgSlug: z.string().optional().describe('Organization slug (for public snapshots)'),
 	createdAt: z.string().describe('Creation timestamp'),
 	downloadUrl: z.string().optional().describe('Presigned download URL'),
 	files: z.array(SnapshotFileSchema).nullable().optional().describe('Files in snapshot'),
@@ -85,8 +93,20 @@ export const getSubcommand = createCommand({
 			if (snapshot.tag) {
 				tableData['Tag'] = snapshot.tag;
 			}
+			if (snapshot.message) {
+				tableData['Message'] = snapshot.message;
+			}
 			tableData['Size'] = tui.formatBytes(snapshot.sizeBytes);
 			tableData['Files'] = snapshot.fileCount;
+			if (snapshot.public) {
+				tableData['Public'] = 'Yes';
+				if (snapshot.fullName) {
+					tableData['Full Name'] = snapshot.fullName;
+				}
+				if (snapshot.orgName) {
+					tableData['Publisher'] = snapshot.orgName;
+				}
+			}
 			tableData['Created'] = snapshot.createdAt;
 			if (snapshot.parentSnapshotId) {
 				tableData['Parent'] = snapshot.parentSnapshotId;

package/src/cmd/cloud/sandbox/snapshot/list.ts

@@ -8,11 +8,15 @@ import { getGlobalCatalystAPIClient } from '../../../../config';
 const SnapshotInfoSchema = z.object({
 	snapshotId: z.string(),
 	name: z.string().nullable().optional(),
+	fullName: z.string().nullable().optional(),
 	description: z.string().nullable().optional(),
 	tag: z.string().nullable().optional(),
 	sizeBytes: z.number(),
 	fileCount: z.number(),
 	parentSnapshotId: z.string().nullable().optional(),
+	public: z.boolean().optional(),
+	orgName: z.string().optional(),
+	orgSlug: z.string().optional(),
 	createdAt: z.string(),
 });
 

package/src/cmd/cloud/vector/stats.ts

@@ -21,12 +21,21 @@ const VectorNamespaceStatsSchema = z.object({
 	lastUsed: z.number().optional().describe('Last used timestamp (ms)'),
 });
 
+const VectorStatsPaginatedSchema = z.object({
+	namespaces: z.record(z.string(), VectorNamespaceStatsSchema).describe('Map of namespace names to their statistics'),
+	total: z.number().describe('Total number of namespaces across all pages'),
+	limit: z.number().describe('Number of namespaces requested per page'),
+	offset: z.number().describe('Number of namespaces skipped'),
+	hasMore: z.boolean().describe('Whether there are more namespaces available'),
+});
+
 const VectorStatsResponseSchema = z.union([
 	VectorNamespaceStatsSchema.extend({
 		namespace: z.string().describe('Namespace name'),
 		sampledResults: z.record(z.string(), VectorItemStatsSchema).optional(),
 	}),
 	z.record(z.string(), VectorNamespaceStatsSchema),
+	VectorStatsPaginatedSchema,
 ]);
 
 export const statsSubcommand = createCommand({

package/src/cmd/project/template-flow.ts

@@ -337,9 +337,7 @@ export async function runCreateFlow(options: CreateFlowOptions): Promise<CreateF
 			logger.debug(
 				`Resources for org ${orgId} in region ${region}: ${resources.db.length} databases, ${resources.s3.length} storage buckets`
 			);
-			logger.debug(
-				`Database names: ${resources.db.map((d) => d.name).join(', ') || '(none)'}`
-			);
+			logger.debug(`Database names: ${resources.db.map((d) => d.name).join(', ') || '(none)'}`);
 			logger.debug(
 				`Storage buckets: ${resources.s3.map((b) => b.bucket_name).join(', ') || '(none)'}`
 			);

package/src/env-util.ts

@@ -13,6 +13,12 @@ export interface EnvVars {
  */
 export const PUBLIC_VAR_PREFIXES = ['VITE_', 'AGENTUITY_PUBLIC_', 'PUBLIC_'] as const;
 
+/**
+ * Specific AGENTUITY_ keys that are allowed to be set by users.
+ * Note: There is also a whitelist in the API that must be kept in sync.
+ */
+export const AGENTUITY_ALLOWED_KEYS = ['AGENTUITY_AUTH_SECRET'] as const;
+
 /**
  * Check if a key is a public variable (exposed to frontend)
  */
@@ -22,11 +28,20 @@ export function isPublicVarKey(key: string): boolean {
 }
 
 /**
- * Check if a key is a reserved AGENTUITY key (except AGENTUITY_PUBLIC_)
+ * Check if a key is a reserved AGENTUITY key (except AGENTUITY_PUBLIC_ and allowed keys)
  */
 export function isReservedAgentuityKey(key: string): boolean {
 	const upperKey = key.toUpperCase();
-	return upperKey.startsWith('AGENTUITY_') && !upperKey.startsWith('AGENTUITY_PUBLIC_');
+	if (!upperKey.startsWith('AGENTUITY_')) {
+		return false;
+	}
+	if (upperKey.startsWith('AGENTUITY_PUBLIC_')) {
+		return false;
+	}
+	if (AGENTUITY_ALLOWED_KEYS.includes(key as (typeof AGENTUITY_ALLOWED_KEYS)[number])) {
+		return false;
+	}
+	return true;
 }
 
 /**

package/src/errors.ts

@@ -14,6 +14,7 @@ export enum ExitCode {
 	FILE_ERROR = 7,
 	USER_CANCELLED = 8,
 	BUILD_FAILED = 9,
+	SECURITY_ERROR = 10,
 }
 
 /**
@@ -75,6 +76,9 @@ export enum ErrorCode {
 
 	// Integration errors
 	INTEGRATION_FAILED = 'INTEGRATION_FAILED',
+
+	// Security errors
+	MALWARE_DETECTED = 'MALWARE_DETECTED',
 }
 
 /**
@@ -136,6 +140,10 @@ export function getExitCode(errorCode: ErrorCode): ExitCode {
 		case ErrorCode.INTEGRATION_FAILED:
 			return ExitCode.NETWORK_ERROR;
 
+		// Security errors
+		case ErrorCode.MALWARE_DETECTED:
+			return ExitCode.SECURITY_ERROR;
+
 		// Resource conflicts and other errors
 		case ErrorCode.RESOURCE_ALREADY_EXISTS:
 		case ErrorCode.RESOURCE_CONFLICT:

package/src/schema-parser.ts

@@ -85,12 +85,15 @@ function isBooleanStringUnion(schema: unknown): boolean {
 		// Zod 3: type is _def.typeName
 		const optUnknown = opt as unknown as Record<string, unknown>;
 		const optDef = optUnknown?._def as Record<string, unknown> | undefined;
-		const optType = (optUnknown?.type as string) || (optDef?.typeName as string) || (optDef?.type as string);
+		const optType =
+			(optUnknown?.type as string) || (optDef?.typeName as string) || (optDef?.type as string);
 		types.add(optType);
 	}
 
-	return (types.has('boolean') || types.has('ZodBoolean')) && 
-	       (types.has('string') || types.has('ZodString'));
+	return (
+		(types.has('boolean') || types.has('ZodBoolean')) &&
+		(types.has('string') || types.has('ZodString'))
+	);
 }
 
 function getShape(schema: ZodType): Record<string, unknown> {

package/src/tui/box.ts

@@ -198,3 +198,107 @@ export function note(message: string, title = ''): void {
 	});
 	console.log(output);
 }
+
+/**
+ * Draw an error box with red border
+ */
+export function errorBox(title: string, message: string): void {
+	const termWidth = getTerminalWidth();
+	const maxWidth = termWidth - 3;
+	const boxWidth = Math.min(60, maxWidth);
+	const innerWidth = Math.max(boxWidth - 2, 1);
+	const contentWidth = Math.max(innerWidth - 1, 0);
+	const padding = 2;
+
+	const lines: string[] = [];
+
+	// Title line with error symbol
+	const errorSymbol = colors.error('✗');
+	const titleText = colors.error(title);
+	const titleTextWidth = 1 + stringWidth(title); // symbol + title
+	const barsNeeded = Math.max(innerWidth - titleTextWidth - 3, 1);
+	const titleLine = `${errorSymbol}  ${titleText} ${colors.error(symbols.barH.repeat(barsNeeded) + symbols.cornerTR)}`;
+
+	lines.push(colors.error(symbols.bar));
+	lines.push(titleLine);
+
+	// Empty line
+	const emptyLine = `${colors.error(symbols.bar)}${' '.repeat(contentWidth)}${colors.error(symbols.bar)}`;
+	lines.push(emptyLine);
+
+	// Wrap and render content lines
+	const wrapWidth = Math.max(contentWidth - padding * 2, 0);
+	const contentLines = message.split('\n');
+	for (const line of contentLines) {
+		const wrapped = stringWidth(line) > wrapWidth ? wrapText(line, wrapWidth) : [line];
+		for (const wl of wrapped) {
+			const lineLen = stringWidth(wl);
+			const leftPad = padding;
+			const rightPad = Math.max(contentWidth - lineLen - leftPad, 0);
+			lines.push(
+				`${colors.error(symbols.bar)}${' '.repeat(leftPad)}${wl}${' '.repeat(rightPad)}${colors.error(symbols.bar)}`
+			);
+		}
+	}
+
+	lines.push(emptyLine);
+
+	// Bottom border
+	lines.push(
+		colors.error(symbols.connect + symbols.barH.repeat(innerWidth - 1) + symbols.cornerBR)
+	);
+
+	console.log(lines.join('\n'));
+}
+
+/**
+ * Draw a warning box with yellow border
+ */
+export function warningBox(title: string, message: string): void {
+	const termWidth = getTerminalWidth();
+	const maxWidth = termWidth - 3;
+	const boxWidth = Math.min(60, maxWidth);
+	const innerWidth = Math.max(boxWidth - 2, 1);
+	const contentWidth = Math.max(innerWidth - 1, 0);
+	const padding = 2;
+
+	const lines: string[] = [];
+
+	// Title line with warning symbol
+	const warnSymbol = colors.warning(symbols.warning);
+	const titleText = colors.warning(title);
+	const titleTextWidth = stringWidth(symbols.warning) + stringWidth(title);
+	const barsNeeded = Math.max(innerWidth - titleTextWidth - 3, 1);
+	const titleLine = `${warnSymbol}  ${titleText} ${colors.warning(symbols.barH.repeat(barsNeeded) + symbols.cornerTR)}`;
+
+	lines.push(colors.warning(symbols.bar));
+	lines.push(titleLine);
+
+	// Empty line
+	const emptyLine = `${colors.warning(symbols.bar)}${' '.repeat(contentWidth)}${colors.warning(symbols.bar)}`;
+	lines.push(emptyLine);
+
+	// Wrap and render content lines
+	const wrapWidth = Math.max(contentWidth - padding * 2, 0);
+	const contentLines = message.split('\n');
+	for (const line of contentLines) {
+		const wrapped = stringWidth(line) > wrapWidth ? wrapText(line, wrapWidth) : [line];
+		for (const wl of wrapped) {
+			const lineLen = stringWidth(wl);
+			const leftPad = padding;
+			const rightPad = Math.max(contentWidth - lineLen - leftPad, 0);
+			lines.push(
+				`${colors.warning(symbols.bar)}${' '.repeat(leftPad)}${wl}${' '.repeat(rightPad)}${colors.warning(symbols.bar)}`
+			);
+		}
+	}
+
+	lines.push(emptyLine);
+
+	// Bottom border
+	lines.push(
+		colors.warning(symbols.connect + symbols.barH.repeat(innerWidth - 1) + symbols.cornerBR)
+	);
+
+	console.log(lines.join('\n'));
+}

package/src/tui.ts

@@ -45,7 +45,7 @@ export { maskSecret };
 // Export new TUI components
 export { createPrompt, PromptFlow } from './tui/prompt';
 export { group } from './tui/group';
-export { note, drawBox } from './tui/box';
+export { note, drawBox, errorBox, warningBox } from './tui/box';
 export { symbols } from './tui/symbols';
 export { colors as tuiColors } from './tui/colors';
 export type {
@@ -834,7 +834,9 @@ export function showLoggedOutMessage(appBaseUrl: string, hasProfile = false): vo
 	// Box format: "║ " + content + "║" = 48 chars total
 	// Content area = 46 chars, with leading space = 45 chars for URL + padding
 	const urlPadding = Math.max(0, 45 - signupURL.length);
-	const showNewLine = showInline ? '' : `║ ${RESET}${link(signupURL)}${YELLOW}${' '.repeat(urlPadding)}║`;
+	const showNewLine = showInline
+		? ''
+		: `║ ${RESET}${link(signupURL)}${YELLOW}${' '.repeat(urlPadding)}║`;
 
 	const lines = [
 		'╔══════════════════════════════════════════════╗',
@@ -1057,6 +1059,11 @@ export interface SimpleSpinnerOptions<T> {
 	 * Defaults to false
 	 */
 	clearOnSuccess?: boolean;
+	/**
+	 * If true, suppress the error message display on failure (for custom error handling)
+	 * Defaults to false
+	 */
+	clearOnError?: boolean;
 }
 
 /**
@@ -1071,6 +1078,11 @@ export interface ProgressSpinnerOptions<T> {
 	 * Defaults to false
 	 */
 	clearOnSuccess?: boolean;
+	/**
+	 * If true, suppress the error message display on failure (for custom error handling)
+	 * Defaults to false
+	 */
+	clearOnError?: boolean;
 }
 
 /**
@@ -1196,8 +1208,12 @@ export async function spinner<T>(
 
 			return result;
 		} catch (err) {
-			const errorColor = getColor('error');
-			console.error(`${errorColor}${ICONS.error} ${message}${reset}`);
+			const clearOnError =
+				(options.type === 'progress' || options.type === 'simple') && options.clearOnError;
+			if (!clearOnError) {
+				const errorColor = getColor('error');
+				console.error(`${errorColor}${ICONS.error} ${message}${reset}`);
+			}
 			throw err;
 		}
 	}
@@ -1426,10 +1442,14 @@ export async function spinner<T>(
 		}
 		process.stderr.write('\x1B[?25h'); // Show cursor
 
-		// Show error
-		const errorColor = getColor('error');
-		const errorMessage = err instanceof Error ? err.message : String(err);
-		console.error(`${errorColor}${ICONS.error} ${message}: ${errorMessage}${reset}`);
+		// Show error (unless clearOnError is set for custom error handling)
+		const clearOnError =
+			(options.type === 'progress' || options.type === 'simple') && options.clearOnError;
+		if (!clearOnError) {
+			const errorColor = getColor('error');
+			const errorMessage = err instanceof Error ? err.message : String(err);
+			console.error(`${errorColor}${ICONS.error} ${message}: ${errorMessage}${reset}`);
+		}
 
 		throw err;
 	}

package/src/types.ts

@@ -62,7 +62,6 @@ export const ConfigSchema = zod.object({
 		})
 		.optional()
 		.describe('the gravity client information'),
-
 });
 
 export type Config = zod.infer<typeof ConfigSchema>;