@archme/cli 0.12.0 → 0.12.2

package/dist/cli.js

@@ -9967,7 +9967,6 @@ var init_install = __esm({
       "ARCHME_SANDBOX_PROJECTS",
       "ARCHME_SANDBOX_RUNTIME",
       "ARCHME_SANDBOX_IMAGE",
-      "ARCHME_SANDBOX_SLOTS",
       "ARCHME_SANDBOX_BOX_MEMORY_MIB",
       "ARCHME_SANDBOX_VOLUME_GIB",
       "ARCHME_SANDBOX_MAX_MODEL_REQUESTS",
@@ -18110,7 +18109,7 @@ function expandHome(p, home2) {
   if (p.startsWith("~/")) return join20(home2, p.slice(2));
   return p;
 }
-function readSandboxSettings(env, home2 = homedir6(), shippedImage = () => null) {
+function readSandboxSettings(env, concurrency, home2 = homedir6(), shippedImage = () => null) {
   const modeRaw = (env.ARCHME_SANDBOX ?? "").trim().toLowerCase() || "off";
   if (modeRaw !== "off" && modeRaw !== "shadow" && modeRaw !== "required") {
     throw new SandboxSettingsError(`ARCHME_SANDBOX must be off, shadow or required (got "${env.ARCHME_SANDBOX}")`);
@@ -18120,7 +18119,7 @@ function readSandboxSettings(env, home2 = homedir6(), shippedImage = () => null)
     projects: /* @__PURE__ */ new Set(),
     runtime: "apple-container",
     image: "",
-    slots: SANDBOX_DEFAULTS.slots,
+    slots: concurrency,
     boxMemoryMiB: SANDBOX_DEFAULTS.boxMemoryMiB,
     boxCpus: SANDBOX_DEFAULTS.boxCpus,
     volumeGiB: SANDBOX_DEFAULTS.volumeGiB,
@@ -18133,6 +18132,14 @@ function readSandboxSettings(env, home2 = homedir6(), shippedImage = () => null)
       "ARCHME_SANDBOX=required needs network confinement (pf + the GitHub gatekeeper, step 19.3), which this release does not have; use ARCHME_SANDBOX=shadow"
     );
   }
+  if (!Number.isInteger(concurrency)) {
+    throw new SandboxSettingsError(`MAX_CONCURRENT_JOBS must be a whole number (got ${concurrency})`);
+  }
+  if (concurrency > MAX_SLOTS) {
+    throw new SandboxSettingsError(
+      `the sandbox supports at most ${MAX_SLOTS} concurrent jobs, but MAX_CONCURRENT_JOBS is ${concurrency}; lower MAX_CONCURRENT_JOBS to ${MAX_SLOTS} or less, or set ARCHME_SANDBOX=off`
+    );
+  }
   const runtime = (env.ARCHME_SANDBOX_RUNTIME ?? "").trim() || "apple-container";
   if (runtime !== "apple-container") {
     throw new SandboxSettingsError(`ARCHME_SANDBOX_RUNTIME must be apple-container (got "${runtime}")`);
@@ -18153,16 +18160,13 @@ function readSandboxSettings(env, home2 = homedir6(), shippedImage = () => null)
   const projects = new Set(
     (env.ARCHME_SANDBOX_PROJECTS ?? "").split(",").map((s) => s.trim()).filter(Boolean)
   );
-  if (projects.size === 0) {
-    throw new SandboxSettingsError("ARCHME_SANDBOX=shadow needs ARCHME_SANDBOX_PROJECTS (comma-separated project ids)");
-  }
   const tokenRaw = (env.ARCHME_SANDBOX_CLAUDE_TOKEN_FILE ?? "").trim();
   return {
     mode,
     projects,
     runtime: "apple-container",
     image,
-    slots: intEnv(env, "ARCHME_SANDBOX_SLOTS", SANDBOX_DEFAULTS.slots, { min: 1, max: MAX_SLOTS }),
+    slots: concurrency,
     boxMemoryMiB: intEnv(env, "ARCHME_SANDBOX_BOX_MEMORY_MIB", SANDBOX_DEFAULTS.boxMemoryMiB, {
       min: SANDBOX_DEFAULTS.minBoxMemoryMiB
     }),
@@ -18175,7 +18179,7 @@ function readSandboxSettings(env, home2 = homedir6(), shippedImage = () => null)
 function shouldSandbox(settings, job, { isLocalRepo }) {
   if (settings.mode === "off") return { boxed: false, reason: "mode_off" };
   if (job.job_kind === "digest") return { boxed: false, reason: "digest" };
-  if (settings.mode === "shadow" && !settings.projects.has(job.project_id)) {
+  if (settings.mode === "shadow" && settings.projects.size > 0 && !settings.projects.has(job.project_id)) {
     return { boxed: false, reason: "project_not_enrolled" };
   }
   if (isLocalRepo) return { boxed: false, reason: "local_repo" };
@@ -18193,7 +18197,6 @@ var init_setting = __esm({
       }
     };
     SANDBOX_DEFAULTS = {
-      slots: 2,
       boxMemoryMiB: 2048,
       boxCpus: 2,
       volumeGiB: 8,
@@ -21942,7 +21945,7 @@ async function runDaemon() {
   console.log(`  max concurrent jobs: ${MAX_CONCURRENT_JOBS}`);
   let sandboxSettings;
   try {
-    sandboxSettings = readSandboxSettings(process.env, void 0, () => readShippedImage());
+    sandboxSettings = readSandboxSettings(process.env, MAX_CONCURRENT_JOBS, void 0, () => readShippedImage());
   } catch (err4) {
     if (!(err4 instanceof SandboxSettingsError)) throw err4;
     console.error(err4.message);
@@ -21954,7 +21957,10 @@ async function runDaemon() {
     }
     exitDaemon(1);
   }
-  console.log(`  sandbox: ${sandboxSettings.mode}${sandboxSettings.mode === "shadow" ? ` (projects: ${[...sandboxSettings.projects].join(", ")}; ${sandboxSettings.slots} slot(s))` : ""}`);
+  if (process.env.ARCHME_SANDBOX_SLOTS !== void 0) {
+    console.log("  ARCHME_SANDBOX_SLOTS is no longer read; sandbox slots follow MAX_CONCURRENT_JOBS");
+  }
+  console.log(`  sandbox: ${sandboxSettings.mode}${sandboxSettings.mode === "shadow" ? ` (projects: ${sandboxSettings.projects.size ? [...sandboxSettings.projects].join(", ") : "all"}; ${sandboxSettings.slots} slot(s))` : ""}`);
   const bearerCfg = {
     supabaseUrl: SUPABASE_URL,
     anonKey: SUPABASE_ANON_KEY,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@archme/cli",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "Map your codebase into a living architecture diagram: run `archme init` in a repo to scan it, `archme daemon start` to keep it current on every commit.",
   "type": "module",
   "license": "SEE LICENSE IN LICENSE",

package/sandbox-image.json

@@ -1,4 +1,4 @@
 {
   "image": "ghcr.io/architectme/archme-job",
-  "digest": "sha256:3fdadf0491e1b3c684731c07cde23c9fe02e7d434505523eb1f2d88609af44ed"
+  "digest": "sha256:473c98e945f5825d49df4f1a1c8c384e24133182ac200d87d3161309816aaef3"
 }