@boxcompute/cli 0.2.3 → 0.2.4

package/CHANGELOG.md

@@ -0,0 +1,40 @@
+# Changelog
+
+This file records user-visible changes to the BoxCompute CLI. GitHub Releases
+use the same notes and bind them to the exact source commit.
+
+## [0.2.4] - 2026-09-09
+
+`bxc sandbox exec` now leaves arguments after `--` entirely to the program
+running inside the sandbox.
+
+### CLI users
+
+- Commands such as `bxc sandbox exec SANDBOX_ID -- python --version --json`
+  now pass `--version` and `--json` to Python instead of treating them as
+  global `bxc` options.
+- No configuration changes are required. Upgrade normally with `bxc update`.
+
+### Security
+
+No security-relevant changes.
+
+## [0.2.3] - 2026-09-06
+
+- Added access to retained sandbox logs after runtime deletion.
+
+## [0.2.2] - 2026-09-05
+
+- Added `bxc update` and its `bxc up` alias.
+
+## [0.2.1] - 2026-09-05
+
+- Improved release validation and managed skill updates.
+
+## [0.2.0] - 2026-09-04
+
+- Added the multi-instance Sandbox API v2 commands.
+
+## [0.1.1] - 2026-09-04
+
+- Initial public npm release with browser login and managed agent skills.

package/README.md

@@ -70,3 +70,30 @@ bxc update
 saved BoxCompute credential and refreshes untouched managed skills before the
 client's next agent session. The new CLI uses v2 for multi-instance sandboxes
 and gives a server-first upgrade message if it reaches an older deployment.
+
+## Development
+
+```sh
+bun install --frozen-lockfile
+bun run typecheck
+bun test
+bun run lint
+bun run build
+```
+
+The application-side authentication and customer Sandbox API implementations
+live in the private `boxcompute/web-agent` repository. Changes to either side of
+that contract must remain backward compatible during rollout: deploy the server
+first, then publish the CLI.
+
+## Releases
+
+Every user-visible change is recorded in [CHANGELOG.md](CHANGELOG.md). Releases
+use semantic `vMAJOR.MINOR.PATCH` tags and are published from `main` by the
+protected `Publish BoxCompute CLI` workflow. npm trusted publishing supplies a
+short-lived release credential; the repository stores no npm token.
+
+## License
+
+Copyright © 2026 BoxCompute. All rights reserved. The source is publicly
+visible, but it is not offered under an open-source license.

package/dist/cli.js

@@ -240,8 +240,10 @@ function flag(tokens, name) {
     tokens.splice(index, 1);
     return true;
 }
-function anyFlag(tokens, ...names) {
-    const index = tokens.findIndex((token) => names.includes(token));
+function globalFlag(tokens, ...names) {
+    const separator = tokens.indexOf("--");
+    const boundary = separator < 0 ? tokens.length : separator;
+    const index = tokens.findIndex((token, position) => position < boundary && names.includes(token));
     if (index < 0)
         return false;
     tokens.splice(index, 1);
@@ -398,13 +400,13 @@ export async function runCli(argv, supplied = {}) {
     const skillText = supplied.readSkill ?? readSkill;
     const syncSkills = supplied.syncManagedSkills ?? syncManagedSkills;
     const args = [...argv];
-    const json = flag(args, "json");
-    const versionRequested = args[0] === "version" || anyFlag(args, "--version", "-V", "-v");
+    const json = globalFlag(args, "--json");
+    const versionRequested = args[0] === "version" || globalFlag(args, "--version", "-V", "-v");
     if (versionRequested) {
         emit(io, json, { version: CLI_VERSION }, `${CLI_VERSION}\n`);
         return 0;
     }
-    const helpRequested = anyFlag(args, "--help", "-h");
+    const helpRequested = globalFlag(args, "--help", "-h");
     if (!args.length || args[0] === "help" || helpRequested) {
         const helpTarget = args[0] === "help" ? args[1] : args[0];
         write(io.stdout, helpFor(helpTarget));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@boxcompute/cli",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "Connect local AI agents to BoxCompute sandboxes",
   "keywords": [
     "boxcompute",
@@ -11,18 +11,19 @@
   "homepage": "https://app.boxcompute.ai",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/boxcompute/web-agent.git",
-    "directory": "apps/cli"
+    "url": "git+https://github.com/boxcompute/cli.git"
   },
   "bugs": {
-    "url": "https://github.com/boxcompute/web-agent/issues"
+    "url": "https://github.com/boxcompute/cli/issues"
   },
+  "license": "UNLICENSED",
   "type": "module",
   "bin": {
     "bxc": "dist/cli.js",
     "bcompute": "dist/cli.js"
   },
   "files": [
+    "CHANGELOG.md",
     "dist",
     "skills"
   ],
@@ -32,6 +33,7 @@
   "publishConfig": {
     "access": "public"
   },
+  "packageManager": "bun@1.3.14",
   "scripts": {
     "build": "tsc -p tsconfig.build.json",
     "lint": "oxlint --max-warnings 0 src test",