@mutagent/cli 0.2.116 → 0.2.118

package/dist/bin/cli.js

@@ -305,14 +305,16 @@ function loadConfig() {
   const fileSelection = fileDescribesKey ? credentials?.defaultWorkspace : undefined;
   const selected = fileSelection ?? rcConfig?.defaultWorkspace;
   const defaultWorkspace = envWorkspace !== "" ? envWorkspace : selected;
-  const storedKey = inCloudSandbox() ? undefined : credentials?.apiKey ?? rcConfig?.apiKey;
+  const inSandbox = inCloudSandbox();
+  const storedKey = inSandbox ? undefined : credentials?.apiKey ?? rcConfig?.apiKey;
+  const storedEndpoint = inSandbox ? undefined : credentials?.endpoint ?? rcConfig?.endpoint;
   const merged = {
     providers: {},
     environment: "production",
     ...rcConfig,
     ...credentials,
     apiKey: envKey ?? storedKey,
-    endpoint: process.env.MUTAGENT_ENDPOINT ?? credentials?.endpoint ?? rcConfig?.endpoint,
+    endpoint: process.env.MUTAGENT_ENDPOINT ?? storedEndpoint,
     defaultWorkspace,
     workspaceOrigin: envWorkspace !== "" ? "override" : selected ? "selection" : undefined,
     workspaceName: envWorkspace === "" && fileSelection !== undefined && fileSelection === selected ? credentials?.workspaceName : undefined,
@@ -372,6 +374,8 @@ function clearCredentials() {
 function hasCredentials() {
   if (process.env.MUTAGENT_API_KEY)
     return true;
+  if (inCloudSandbox())
+    return true;
   if (!existsSync(CREDENTIALS_FILE))
     return false;
   const credentials = parseJsonSafe(readFileSync(CREDENTIALS_FILE, "utf-8"), credentialsSchema);
@@ -440,6 +444,9 @@ var init_config = __esm(() => {
 function present(value) {
   return value !== undefined && value.trim() !== "";
 }
+function inSandboxSession(env = process.env) {
+  return present(env[SANDBOX_TOKEN_VAR2]);
+}
 function signedInWithSessionToken(env = process.env) {
   return present(env[SANDBOX_TOKEN_VAR2]) && !present(getApiKey());
 }
@@ -713,7 +720,7 @@ function errorBody(error) {
   if (error instanceof WorkspaceContextError) {
     body.remediation = { setWorkspace: "mutagent workspaces use <name>", listWorkspaces: "mutagent workspaces list" };
   }
-  if (error instanceof ApiError && error.statusCode === 403) {
+  if (error instanceof ApiError && error.statusCode === 403 && !inSandboxSession()) {
     body.remediation = {
       interactive: SIGN_IN_COMMAND,
       nonInteractive: "export MUTAGENT_API_KEY=<your-key>",
@@ -735,7 +742,7 @@ function printHuman(error) {
   } else if (error instanceof WorkspaceContextError) {
     console.error("");
     console.error(WORKSPACE_REMEDIATION_MESSAGE);
-  } else if (error instanceof ApiError && error.statusCode === 403) {
+  } else if (error instanceof ApiError && error.statusCode === 403 && !inSandboxSession()) {
     console.error("");
     console.error("Access denied. To fix:");
     console.error(`  ${SIGN_IN_COMMAND}             # Re-authenticate`);
@@ -27210,31 +27217,6 @@ async function runNativeSession(options) {
   }
 }
 
-// src/commands/helix/sub-session.ts
-init_errors();
-init_output();
-function isSandboxSubSession(plan) {
-  return plan.factory !== undefined && plan.sandbox === undefined && resolveCredential().kind === "sandbox-token";
-}
-function followCommands(target) {
-  return ["mutagent traces sessions --since 1h", `mutagent factory stage list ${target.subject} --stage ${target.stage}`];
-}
-function subSessionFollowRefusal(mode, target) {
-  if (mode === "text")
-    return;
-  return new MutagentError("SUBSESSION_DETACHED", `A sub-session runs in its own sandbox, which this sandbox's token cannot attach to, so --${mode === "rpc" ? "rpc" : "mode json"} cannot follow it.`, `Launch it with -p "<task>" (detached), then follow it with: ${followCommands(target).join("  or  ")}`);
-}
-function printSubSessionReceipt(reference, target, isJson) {
-  const output = new OutputFormatter(isJson ? "json" : "table");
-  const next = followCommands(target);
-  if (isJson) {
-    output.output({ success: true, session: reference, subject: target.subject, stage: target.stage, detached: true, next });
-    return;
-  }
-  output.success(`Launched sub-session ${reference} for ${target.subject} (${target.stage}); it runs in its own sandbox.`);
-  output.info(`Follow it with: ${next.join("  or  ")}`);
-}
-
 // src/commands/helix/run-cloud.ts
 function repositoryFields(flags) {
   return {
@@ -27242,7 +27224,7 @@ function repositoryFields(flags) {
     ...flags.branch === undefined ? {} : { branch: flags.branch }
   };
 }
-async function runCloudLaunch(plan, mode, options = {}) {
+async function runCloudLaunch(plan, mode) {
   checkSandboxId(plan.sandbox);
   checkArgsForRoute(plan.args);
   const sandbox = plan.sandbox?.trim();
@@ -27270,33 +27252,21 @@ async function runCloudLaunch(plan, mode, options = {}) {
     ...plan.environment === undefined ? {} : { environment: plan.environment },
     ...plan.cwd === undefined ? {} : { cwd: plan.cwd }
   };
-  const launch = () => launchHelixSession({
-    ...body,
-    ...plan.preset === undefined ? {} : { preset: plan.preset },
-    ...plan.sandboxProvider === undefined ? {} : { sandboxProvider: plan.sandboxProvider },
-    ...repositoryFields(plan),
-    ...plan.factory === undefined ? {} : { subject: plan.factory.subject, stage: plan.factory.stage }
-  }).catch((error) => {
-    throw entryRefusal(launchRepositoryRefusal(error));
-  });
-  if (plan.factory !== undefined && isSandboxSubSession(plan)) {
-    const refusal = subSessionFollowRefusal(mode, plan.factory);
-    if (refusal !== undefined)
-      throw refusal;
-    const session = await launch();
-    if (!session.reference) {
-      throw new MutagentError("INVALID_RESPONSE", "The server did not return a session reference.", "Run: mutagent traces sessions --since 1h");
-    }
-    printSubSessionReceipt(session.reference, plan.factory, options.json === true);
-    return;
-  }
   let interruptRequested = false;
   const queueInterrupt = () => {
     interruptRequested = true;
   };
   process.on("SIGINT", queueInterrupt);
   try {
-    const session = sandbox ? await startSession(sandbox, body) : await launch();
+    const session = sandbox ? await startSession(sandbox, body) : await launchHelixSession({
+      ...body,
+      ...plan.preset === undefined ? {} : { preset: plan.preset },
+      ...plan.sandboxProvider === undefined ? {} : { sandboxProvider: plan.sandboxProvider },
+      ...repositoryFields(plan),
+      ...plan.factory === undefined ? {} : { subject: plan.factory.subject, stage: plan.factory.stage }
+    }).catch((error) => {
+      throw entryRefusal(launchRepositoryRefusal(error));
+    });
     if (!session.reference) {
       throw new MutagentError("INVALID_RESPONSE", "The server did not return a session reference.", "Run: mutagent helix doctor");
     }
@@ -27867,9 +27837,6 @@ function registerAgentCommand(parent, registration, deps = defaultPlanDeps()) {
     "  Without --subject the entry is MUTAGENT_SUBJECT_ID, else the session's, else this checkout's .mutagent/factory.json.",
     "  Errors: FLAG_CONFLICT (--subject without --stage, or either with @id); MISSING_ARGUMENTS (no entry inferred: pass --subject);",
     "  ENTRY_NOT_FOUND (run: mutagent factory list); VALIDATION_ERROR (--stage is one of the six stages).",
-    "  Inside a cloud sandbox (its own token), this launches a sub-session for the bound entry, detached:",
-    "  it runs in its own sandbox; the receipt names its hs1_ id and how to follow it",
-    "  (mutagent traces sessions). --mode json and --rpc are refused there: SUBSESSION_DETACHED.",
     "",
     "Definition and task:",
     "  The first argument (or --prompt, --file, --name) defines the agent; -p gives the task.",
@@ -27954,7 +27921,7 @@ function registerAgentCommand(parent, registration, deps = defaultPlanDeps()) {
           ...plan.prime ? ["--prime"] : [],
           ...plan.nativeArgs
         ]
-      }, mode, { json: isJson });
+      }, mode);
     } catch (error) {
       handleLaunchFailure(error, {
         isJson: isJson && !hasNativeMode(argv) && options.rpc !== true,
@@ -40516,4 +40483,4 @@ if (process.env.CLI_VERSION) {
 }
 runCli(process.argv.slice(2), cliVersion);
 
-//# debugId=21A90EDDA00A444E64756E2164756E21
+//# debugId=7B351CAFF933F24B64756E2164756E21

package/dist/index.js

@@ -285,14 +285,16 @@ function loadConfig() {
   const fileSelection = fileDescribesKey ? credentials?.defaultWorkspace : undefined;
   const selected = fileSelection ?? rcConfig?.defaultWorkspace;
   const defaultWorkspace = envWorkspace !== "" ? envWorkspace : selected;
-  const storedKey = inCloudSandbox() ? undefined : credentials?.apiKey ?? rcConfig?.apiKey;
+  const inSandbox = inCloudSandbox();
+  const storedKey = inSandbox ? undefined : credentials?.apiKey ?? rcConfig?.apiKey;
+  const storedEndpoint = inSandbox ? undefined : credentials?.endpoint ?? rcConfig?.endpoint;
   const merged = {
     providers: {},
     environment: "production",
     ...rcConfig,
     ...credentials,
     apiKey: envKey ?? storedKey,
-    endpoint: process.env.MUTAGENT_ENDPOINT ?? credentials?.endpoint ?? rcConfig?.endpoint,
+    endpoint: process.env.MUTAGENT_ENDPOINT ?? storedEndpoint,
     defaultWorkspace,
     workspaceOrigin: envWorkspace !== "" ? "override" : selected ? "selection" : undefined,
     workspaceName: envWorkspace === "" && fileSelection !== undefined && fileSelection === selected ? credentials?.workspaceName : undefined,
@@ -352,6 +354,8 @@ function clearCredentials() {
 function hasCredentials() {
   if (process.env.MUTAGENT_API_KEY)
     return true;
+  if (inCloudSandbox())
+    return true;
   if (!existsSync(CREDENTIALS_FILE))
     return false;
   const credentials = parseJsonSafe(readFileSync(CREDENTIALS_FILE, "utf-8"), credentialsSchema);
@@ -439,6 +443,9 @@ var runningPath;
 function present(value) {
   return value !== undefined && value.trim() !== "";
 }
+function inSandboxSession(env = process.env) {
+  return present(env[SANDBOX_TOKEN_VAR2]);
+}
 function signedInWithSessionToken(env = process.env) {
   return present(env[SANDBOX_TOKEN_VAR2]) && !present(getApiKey());
 }
@@ -712,7 +719,7 @@ function errorBody(error) {
   if (error instanceof WorkspaceContextError) {
     body.remediation = { setWorkspace: "mutagent workspaces use <name>", listWorkspaces: "mutagent workspaces list" };
   }
-  if (error instanceof ApiError && error.statusCode === 403) {
+  if (error instanceof ApiError && error.statusCode === 403 && !inSandboxSession()) {
     body.remediation = {
       interactive: SIGN_IN_COMMAND,
       nonInteractive: "export MUTAGENT_API_KEY=<your-key>",
@@ -734,7 +741,7 @@ function printHuman(error) {
   } else if (error instanceof WorkspaceContextError) {
     console.error("");
     console.error(WORKSPACE_REMEDIATION_MESSAGE);
-  } else if (error instanceof ApiError && error.statusCode === 403) {
+  } else if (error instanceof ApiError && error.statusCode === 403 && !inSandboxSession()) {
     console.error("");
     console.error("Access denied. To fix:");
     console.error(`  ${SIGN_IN_COMMAND}             # Re-authenticate`);
@@ -2081,4 +2088,4 @@ export {
   version
 };
 
-//# debugId=F5264F0D7925E0B164756E2164756E21
+//# debugId=2497007B7285F9A164756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutagent/cli",
-  "version": "0.2.116",
+  "version": "0.2.118",
   "description": "Bun-native CLI for the MutagenT AI platform - auth, provider config, and lifecycle-tool installer for AI-native workflows",
   "type": "module",
   "bin": {
@@ -45,7 +45,7 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^8.7.2",
-    "@mutagent/sdk": "0.8.60",
+    "@mutagent/sdk": "0.8.61",
     "@sinclair/typebox": "^0.34.0",
     "chalk": "^5.3.0",
     "commander": "^12.1.0",