@rulvar/cli 1.24.0 → 1.24.1

package/dist/cli.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { r as runCli, t as processIo } from "./io-CL4wldEQ.js";
+import { r as runCli, t as processIo } from "./io-CV_G44A2.js";
 import { inspect } from "node:util";
 //#region src/cli.ts
 /**

package/dist/index.js

@@ -1,4 +1,4 @@
-import { a as resumeCommand, c as driveRun, d as renderEventLine, f as DEFAULT_STORE_DIR, g as looksLikeFile, h as loadWorkflowModule, i as inspectCommand, l as reportOutcome, m as loadCliConfig, n as HELP, o as runCommand, p as assembleEngine, r as runCli, s as runsLsCommand, t as processIo, u as attachProgress } from "./io-CL4wldEQ.js";
+import { a as resumeCommand, c as driveRun, d as renderEventLine, f as DEFAULT_STORE_DIR, g as looksLikeFile, h as loadWorkflowModule, i as inspectCommand, l as reportOutcome, m as loadCliConfig, n as HELP, o as runCommand, p as assembleEngine, r as runCli, s as runsLsCommand, t as processIo, u as attachProgress } from "./io-CV_G44A2.js";
 import { ConfigError, InvalidResolutionError, JournalCompatibilityError, LeaseHeldError, Replayer, RulvarError, buildDeriverRegistry, costReportFromJournal, maskSecrets, normalizeEntry, scanJournalCompatibility, validateSchemaSpec } from "@rulvar/core";
 //#region src/server.ts
 /**

package/dist/{io-CL4wldEQ.js → io-CV_G44A2.js}

@@ -641,14 +641,35 @@ async function loadCompanion(loading, specifier, command, missingMessage) {
 		throw new Error(`${command}: ${specifier} is installed but failed to load; the cause below is a defect in the installed package or its dependencies, not a missing install`, { cause: error });
 	}
 }
-/** Parses --args JSON into workflow arguments; undefined when absent. */
+/**
+* Parses --args JSON into workflow arguments; undefined when absent.
+*
+* CLI args must be representable in canonical JCS, i.e. finite JSON. A
+* numeric literal that overflows JavaScript's finite range parses to
+* Infinity, which `hashRunArgs` cannot canonicalize, so genesis would
+* record `argsProvided` WITHOUT a hash and the resume gate would soften
+* to an unverifiable warning that lets changed args through (v1.24.0
+* review P2-1). A CLI value always arrives as JSON text, so it can
+* always be canonicalized; reject the non-finite case here, before any
+* config, store, or adapter loads, instead of letting it defeat the gate
+* later. In-process hosts keep the wider engine contract (functions,
+* BigInt, cycles record presence without a hash); the CLI does not need
+* it.
+*/
 function parseArgsJson(raw) {
 	if (raw === void 0) return;
+	let parsed;
 	try {
-		return JSON.parse(raw);
+		parsed = JSON.parse(raw);
 	} catch {
 		throw new ConfigError(`--args is not valid JSON: ${raw}`);
 	}
+	try {
+		hashRunArgs(parsed);
+	} catch {
+		throw new ConfigError(`--args is not representable as canonical JSON: a numeric value overflows JavaScript's finite range (e.g. 1e400 parses to Infinity). Supply finite JSON so the run's args binding can be hashed and later verified on resume: ${raw}`);
+	}
+	return parsed;
 }
 async function runCommand(argv, context) {
 	const parsed = parseCommand(GRAMMAR.run, argv);
@@ -702,10 +723,16 @@ function enforceArgsBinding(input) {
 			return;
 		}
 		if (meta.argsHash === void 0) {
-			io.err(`warning: run '${meta.runId}' recorded args presence but no hash (the genesis args were not JCS-serializable); the supplied --args cannot be verified`);
+			if (!allowChange) throw new ConfigError(`run '${meta.runId}' started WITH args but recorded no verifiable hash (the genesis args were not JCS-serializable), so the CLI cannot confirm the supplied --args match the original; resuming risks silently changing the logical run and re-paying every args-dependent call. Force deliberately with --allow-args-change; ${usageOf(GRAMMAR.resume)}`);
+			io.err(`warning: run '${meta.runId}' recorded args presence but no hash (genesis args not JCS-serializable); the supplied --args cannot be verified (--allow-args-change)`);
 			return;
 		}
-		const supplied = hashRunArgs(args);
+		let supplied;
+		try {
+			supplied = hashRunArgs(args);
+		} catch {
+			throw new ConfigError(`--args cannot be canonicalized to compare against run '${meta.runId}' (a numeric value overflows the finite range, or the value is otherwise not canonical JSON); supply finite JSON, or force the resume with --allow-args-change; ${usageOf(GRAMMAR.resume)}`);
+		}
 		if (supplied !== meta.argsHash) {
 			if (!allowChange) throw new ConfigError(`--args does not match the args run '${meta.runId}' was started with (recorded hash ${meta.argsHash.slice(0, 12)}, supplied ${supplied?.slice(0, 12) ?? "none"}); changed args silently change the logical run and re-pay every args-dependent call. Force deliberately with --allow-args-change; ${usageOf(GRAMMAR.resume)}`);
 			io.err(`warning: resuming '${meta.runId}' with changed args (--allow-args-change)`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rulvar/cli",
-  "version": "1.24.0",
+  "version": "1.24.1",
   "description": "Rulvar shell: run/resume/runs/inspect/plan/kb commands, TUI progress, createServer, createWorker, OTel exporter.",
   "type": "module",
   "license": "Apache-2.0",
@@ -22,17 +22,17 @@
     "access": "public"
   },
   "dependencies": {
-    "@rulvar/core": "1.24.0"
+    "@rulvar/core": "1.24.1"
   },
   "devDependencies": {
     "@types/node": "^22.20.0",
     "tsdown": "^0.22.3",
     "typescript": "~6.0.3",
-    "@rulvar/testing": "1.24.0",
-    "@rulvar/store-sqlite": "1.24.0",
-    "@rulvar/planner": "1.24.0",
-    "@rulvar/evals": "1.24.0",
-    "@rulvar/plan": "1.24.0"
+    "@rulvar/store-sqlite": "1.24.1",
+    "@rulvar/testing": "1.24.1",
+    "@rulvar/planner": "1.24.1",
+    "@rulvar/plan": "1.24.1",
+    "@rulvar/evals": "1.24.1"
   },
   "bin": {
     "rulvar": "./dist/cli.js"