@beryl-so/cli 0.62.1 → 0.63.2

package/dist/beryl-test-skill.js

@@ -198,14 +198,16 @@ The trade is drift — run 200 has 200 of everything run 1 created. So:
     uploads or toggles a record or setting that is still different once the test ends. A
     \`write\` must undo itself: end \`after\` with an \`expect\` proving the undo: \`gone\`,
     \`hidden\`, \`have_count\` or \`count_delta\` for a removal, \`have_text\`,
-    \`have_value\` or \`persisted\` for a restore.
+    \`have_value\` or \`persisted\` for a restore. Type what it creates with
+    \`{{unique}}\` (\`Report {{unique}}\`) and target that same name in \`after\` and in
+    the proof: a teardown or count that targets a fixed typed name is refused.
   - **\`read\`** = it only observes: navigating, searching, filtering, sorting, opening a
     menu or dialog and reading it, or clicking a destructive button and then CANCELLING.
     Nothing is committed. Opening a confirm dialog and cancelling is a \`read\`; a submit
     that stays disabled is a \`read\`.
   A flow that both changes and reads is a \`write\`. Only the \`write\` label is checked
-  (its closing teardown proof, and a \`write\` whose teardown removes nothing fails the
-  run); \`read\` is taken at your word, so a real write you mislabel \`read\` silently
+  (its closing teardown proof and its \`{{unique}}\` names, and a \`write\` whose teardown
+  removes nothing fails the run); \`read\` is taken at your word, so a real write you mislabel \`read\` silently
   drifts the account. Label deliberately, and flip a banked test with \`tests_set_access\`.
 
 ### If there is no account yet

package/dist/commands/tests.js

@@ -134,7 +134,7 @@ export const testCommands = [
                 name: "access",
                 type: "string",
                 description: "The label the plan will be banked with: read (default) or write. It is yours to " +
-                    "set; Beryl does not infer it. Only a write is checked (its closing teardown proof)",
+                    "set; Beryl does not infer it. Only a write is checked (its closing teardown proof and {{unique}} names)",
             },
         ],
         examples: [

package/dist/commands/workspaces.js

@@ -111,7 +111,7 @@ export const workspaceCommands = [
         scope: "workspace",
         args: [
             { name: "user-id", description: "Member's user id", required: true },
-            { name: "role", description: "OWNER or USER", required: true },
+            { name: "role", description: "OWNER, USER or VIEWER", required: true },
         ],
         async run(ctx, input) {
             const ws = await ctx.requireWorkspace(input);
@@ -142,7 +142,7 @@ export const workspaceCommands = [
         scope: "workspace",
         args: [{ name: "email", description: "Invitee email", required: true }],
         flags: [
-            { name: "role", type: "string", enum: ["OWNER", "USER"], description: "Role (default USER)" },
+            { name: "role", type: "string", enum: ["OWNER", "USER", "VIEWER"], description: "Role (default USER)" },
         ],
         async run(ctx, input) {
             const ws = await ctx.requireWorkspace(input);

package/dist/lint.js

@@ -13,6 +13,10 @@ export const WRITE_NEEDS_CLOSING_TEARDOWN = (detail) => "A 'write' test must end
     "proves it: the last step of 'after' is an expect with expect_kind 'gone', 'hidden', " +
     "'have_count', 'count_delta' (something removed) or 'have_text', 'have_value', " +
     `'persisted' (something restored). ${detail}`;
+export const WRITE_NEEDS_UNIQUE = (detail) => "A 'write' test must tie what it creates, cleans up and counts to {{unique}}, so a " +
+    "record another run left behind can never match: type the record's name with " +
+    "{{unique}} (e.g. 'Report {{unique}}') and target it by that same name in " +
+    `'after' and in the closing proof. ${detail}`;
 export const OPTIONAL_TEARDOWN_ACTION_MUST_BE_LAST = (label, action) => `${label} (${action}) is optional but not the last step of 'after'. An optional step ` +
     "that misses ends the teardown, so the steps after it would silently not run. Guard " +
     "them with an optional 'wait_for' or 'expect' instead, or move this step to the end.";
@@ -234,12 +238,63 @@ function accessIssues(plan, access) {
         const detail = `Its last step is ${String(last.action)}${kind ? ` ${kind}` : ""}.`;
         return [{ path: "(root)", message: WRITE_NEEDS_CLOSING_TEARDOWN(detail) }];
     }
-    return [];
+    return uniqueAnchorIssues(plan);
+}
+const COUNT_KINDS = new Set(["gone", "have_count"]);
+// Shorter typed values ("1", "ok") would "name" half the page's buttons.
+const MIN_TYPED_NAME_LEN = 3;
+const SELECTOR_TEXT_RE = /text=["']?([^"'>]+?)["']?\s*(?:>>|$)|(?:has-text|text-is|text)\(\s*["']([^"']+)["']\s*\)|\[(?:name|title|aria-label)\s*[*^$]?=\s*["']([^"']+)["']/g;
+// {{inbox_address}} is minted fresh per execution too, so a record named by it is its own.
+const anchored = (text) => typeof text === "string" && /\{\{\s*(unique|uuid|inbox_address)\s*\}\}/.test(text);
+const selectorTexts = (selector) => typeof selector === "string"
+    ? [...selector.matchAll(SELECTOR_TEXT_RE)].map((m) => m[1] ?? m[2] ?? m[3] ?? "")
+    : [];
+const hasWords = (needle, haystack) => new RegExp(`(?<![\\p{L}\\p{N}_])${needle.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![\\p{L}\\p{N}_])`, "u").test(haystack);
+// "Delete Seed" names a typed "Seed", and `text=Seed` names a typed "Seed alpha".
+const names = (text, typed) => hasWords(typed, text) || (typed.startsWith(text) && hasWords(text, typed));
+// The server words the selector with Python's repr; match it so the messages agree.
+const pyRepr = (v) => typeof v !== "string" ? "None" : v.includes("'") && !v.includes('"') ? `"${v}"` : `'${v}'`;
+// Mirrors _assert_unique_anchors in api/app/ta_shared/schemas.py.
+function uniqueAnchorIssues(plan) {
+    const body = [...steps(plan.before), ...steps(plan.steps)];
+    const after = steps(plan.after);
+    const labelled = ["before", "steps", "after"].flatMap((name) => steps(plan[name]).map((s, i) => [`${name}[${i}]`, s, name === "after"]));
+    const typed = body
+        .filter((s) => s.action === "fill" && typeof s.value === "string" && s.value.length >= MIN_TYPED_NAME_LEN)
+        .map((s) => s.value);
+    const refuse = (label, s, why) => [
+        {
+            path: label,
+            message: WRITE_NEEDS_UNIQUE(`${label} (${String(s.action)} ${pyRepr(s.selector)}) ${why}`),
+        },
+    ];
+    for (const [label, s, inAfter] of labelled) {
+        if (!inAfter && !COUNT_KINDS.has(String(s.expect_kind)))
+            continue;
+        for (const text of selectorTexts(s.selector)) {
+            for (const value of typed) {
+                if (!names(text, value))
+                    continue;
+                if (!anchored(value)) {
+                    return refuse(label, s, `targets ${pyRepr(value)}, typed without {{unique}}.`);
+                }
+                if (!anchored(text))
+                    return refuse(label, s, "targets a fixed name.");
+            }
+        }
+    }
+    const last = after[after.length - 1] ?? {};
+    const named = typed.some((v) => anchored(v) &&
+        (String(last.selector ?? "").includes(v) ||
+            selectorTexts(last.selector).some((t) => names(t, v))));
+    return anchored(last.selector) && !named
+        ? refuse(`after[${after.length - 1}]`, last, "names a {{unique}} record the test never typed.")
+        : [];
 }
 // `provisioning`: the plan is an account's own signup or sign-in plan, the one place
 // {{mailbox_address}} is legal (mirrors the server's validate_editable_plan flag).
 // `access`: the label the plan will be banked with. It is the author's call (Beryl no
-// longer infers it from the plan); given, only a `write` is checked, for its closing proof.
+// longer infers it from the plan); given, only a `write` is checked: its closing proof and {{unique}} names.
 export function lintPlan(plan, opts = {}) {
     const issues = validate(plan, ACTION_PLAN_SCHEMA, ACTION_PLAN_SCHEMA, "");
     // The identity rules read a well-formed plan; a shape error is reported alone.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@beryl-so/cli",
-  "version": "0.62.1",
+  "version": "0.63.2",
   "description": "Beryl on the command line: projects, runs, the exploring agent, and an MCP server over the same commands.",
   "license": "MIT",
   "type": "module",