@mutagent/cli 0.2.141 → 0.2.143

package/dist/bin/cli.js

@@ -455,9 +455,12 @@ function sandboxScopedFailure(failure, commandPath) {
     return failure;
   const command = commandPath === "" ? "This command" : `\`mutagent ${commandPath}\``;
   const alternative = SANDBOX_ALTERNATIVES[commandPath.split(" ")[0] ?? ""];
-  return new MutagentError("SANDBOX_SCOPE", `${command} isn't available inside a cloud session: this session is signed in with its own session token, which covers the Factory, traces, pushing, updating, listing and showing reports, and this session.`, alternative === undefined ? "Inside this session use the Factory and traces commands, or reports push, reports update, reports list or reports show (mutagent --help lists them)." : `Run: ${alternative}`);
+  return new MutagentError("SANDBOX_SCOPE", `${command} isn't available inside a cloud session: this session is signed in with its own session token, which covers ${TOKEN_COVERS}.`, alternative === undefined ? IN_SESSION_COMMANDS : `Run: ${alternative}`);
 }
-var SANDBOX_TOKEN_VAR2 = "MUTAGENT_SANDBOX_TOKEN", SANDBOX_ALTERNATIVES;
+function sandboxSignInRefusal() {
+  return new MutagentError("SANDBOX_SCOPE", `There is nothing to sign in to inside a cloud session: this session is signed in with its own session token, the only credential a sandbox uses, which covers ${TOKEN_COVERS}.`, IN_SESSION_COMMANDS);
+}
+var SANDBOX_TOKEN_VAR2 = "MUTAGENT_SANDBOX_TOKEN", SANDBOX_ALTERNATIVES, TOKEN_COVERS = "the Factory, traces, pushing, updating, listing and showing reports, and this session", IN_SESSION_COMMANDS = "Inside this session use the Factory and traces commands, or reports push, reports update, reports list or reports show (mutagent --help lists them).";
 var init_sandbox_scope_error = __esm(() => {
   init_config();
   init_errors();
@@ -19043,6 +19046,9 @@ class BrowserAuthError extends Error {
   }
 }
 
+// src/lib/auth-flow.ts
+init_sandbox_scope_error();
+
 // src/lib/gateway-poll.ts
 function sleep2(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
@@ -19080,6 +19086,8 @@ async function pollUntil(fetchOnce, isDone, opts = {}) {
 
 // src/lib/auth-flow.ts
 async function performLoginAction(opts) {
+  if (inSandboxSession())
+    throw sandboxSignInRefusal();
   const { isJson, output } = opts;
   const wasFirstLogin = !hasCredentials();
   const envApiKey = process.env.MUTAGENT_API_KEY;
@@ -31236,6 +31244,7 @@ init_output();
 init_known_secrets();
 import chalk41 from "chalk";
 init_errors();
+init_sandbox_scope_error();
 
 // src/lib/gateway-notices.ts
 var FILED_AS_TRIAGE = "filed_as_triage";
@@ -31427,8 +31436,9 @@ function printHuman2(error) {
 }
 function handleGatewayError(error, isJson, provider, resource) {
   const gwError = toGatewayCliError(error, provider, resource);
-  if (isJson)
-    handleError(gwError, true);
+  const scoped = sandboxScopedFailure(gwError, runningCommandPath());
+  if (isJson || scoped !== gwError)
+    handleError(scoped, isJson);
   printHuman2(gwError);
   process.exit(gwError.exitCode);
 }
@@ -33152,6 +33162,8 @@ function nextForRun(run) {
 }
 function printRunStatus(run) {
   console.log(`${chalk49.bold(run.eventId)}  ${run.phase}`);
+  if (run.runId)
+    console.log(chalk49.dim(`  run: ${run.runId} (session and model: mutagent gateway runs show ${run.runId})`));
   if (run.sandbox)
     console.log(chalk49.dim(`  sandbox: ${run.sandbox.kind} (${run.sandbox.environment})`));
   if (run.startedAt)
@@ -33205,6 +33217,15 @@ function printRunSummary(r) {
   console.log(`  ${r.id}  ${chalk49.dim(r.state)}  ${r.origin.kind}${r.origin.id ? `:${r.origin.id}` : ""}  ${r.repository?.name ?? ""}`);
   printRunError(r.error, "    ");
 }
+function printRunDetail(r) {
+  printRunSummary(r);
+  if (typeof r.sessionRef === "string" && r.sessionRef !== "") {
+    console.log(chalk49.dim(`    session: ${r.sessionRef} (traces: mutagent traces get --session ${r.sessionRef})`));
+  }
+  if (r.model !== undefined) {
+    console.log(chalk49.dim(`    model: ${r.model ?? "platform default (not pinned; Helix chose its default)"}`));
+  }
+}
 function assertUntil(value) {
   const v = value.trim();
   if (v === "now" || /^[1-9][0-9]{0,3}[mhd]$/.test(v) || /^\d{4}-\d{2}-\d{2}/.test(v) && !Number.isNaN(Date.parse(v)))
@@ -33281,7 +33302,9 @@ AI Agent Directive:
   --json returns { success, ok, data }. An event-id hit has 'phase'; a run-id hit has 'state'
   — branch on whichever key is present. Once the event started a run, the event-id hit
   also has runId (the primary run) and runIds (every run, primary first): the ids
-  'runs logs' and 'runs cancel' take. data.error.code filed_as_triage is not a failure:
+  'runs logs' and 'runs cancel' take. A run-id hit also has sessionRef (the hs1_ that
+  'mutagent traces get --session' takes; null until the run starts) and model (null: not
+  pinned by the platform, Helix chose its default). data.error.code filed_as_triage is not a failure:
   read data.error.triageItem { id, link } (null when the server did not name them) and
   run 'next' to show the item.
       `).action(async (id) => {
@@ -33299,7 +33322,7 @@ AI Agent Directive:
       const run = await asRunId(found.runId, (runId) => getRun(runId, workspaceId));
       const display = withDisplayError(run);
       printGatewayOk(isJson, display, { human: () => {
-        printRunSummary(display);
+        printRunDetail(display);
       } });
       return;
     });
@@ -40641,4 +40664,4 @@ if (process.env.CLI_VERSION) {
 }
 runCli(process.argv.slice(2), cliVersion);
 
-//# debugId=B184832158B4433E64756E2164756E21
+//# debugId=2B91AA42173EBAAE64756E2164756E21

package/dist/index.js

@@ -454,9 +454,12 @@ function sandboxScopedFailure(failure, commandPath) {
     return failure;
   const command = commandPath === "" ? "This command" : `\`mutagent ${commandPath}\``;
   const alternative = SANDBOX_ALTERNATIVES[commandPath.split(" ")[0] ?? ""];
-  return new MutagentError("SANDBOX_SCOPE", `${command} isn't available inside a cloud session: this session is signed in with its own session token, which covers the Factory, traces, pushing, updating, listing and showing reports, and this session.`, alternative === undefined ? "Inside this session use the Factory and traces commands, or reports push, reports update, reports list or reports show (mutagent --help lists them)." : `Run: ${alternative}`);
+  return new MutagentError("SANDBOX_SCOPE", `${command} isn't available inside a cloud session: this session is signed in with its own session token, which covers ${TOKEN_COVERS}.`, alternative === undefined ? IN_SESSION_COMMANDS : `Run: ${alternative}`);
 }
-var SANDBOX_TOKEN_VAR2 = "MUTAGENT_SANDBOX_TOKEN", SANDBOX_ALTERNATIVES;
+function sandboxSignInRefusal() {
+  return new MutagentError("SANDBOX_SCOPE", `There is nothing to sign in to inside a cloud session: this session is signed in with its own session token, the only credential a sandbox uses, which covers ${TOKEN_COVERS}.`, IN_SESSION_COMMANDS);
+}
+var SANDBOX_TOKEN_VAR2 = "MUTAGENT_SANDBOX_TOKEN", SANDBOX_ALTERNATIVES, TOKEN_COVERS = "the Factory, traces, pushing, updating, listing and showing reports, and this session", IN_SESSION_COMMANDS = "Inside this session use the Factory and traces commands, or reports push, reports update, reports list or reports show (mutagent --help lists them).";
 var init_sandbox_scope_error = __esm(() => {
   init_config();
   init_errors();
@@ -2088,4 +2091,4 @@ export {
   version
 };
 
-//# debugId=844723769E2CA5CA64756E2164756E21
+//# debugId=37053E84CDADCCC664756E2164756E21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutagent/cli",
-  "version": "0.2.141",
+  "version": "0.2.143",
   "description": "Bun-native CLI for the MutagenT AI platform - auth, provider config, and lifecycle-tool installer for AI-native workflows",
   "type": "module",
   "bin": {
@@ -94,5 +94,5 @@
   "bugs": {
     "url": "https://docs.mutagent.io/support"
   },
-  "gitHead": "d159c4e85665c2edff575dad47469f6ab44894a6"
+  "gitHead": "1209716461bf91e99c7bff99b9ccd1396f91b952"
 }