@sdods/cli 0.8.0 → 0.10.0

package/dist/commands/schedule.js

@@ -279,7 +279,7 @@ export function register(program) {
             if (opts.target === 'github') {
                 const file = join(ctx.rootDir, '.github', 'workflows', `scheduled-${e.project}-${e.name}.yml`);
                 mkdirSync(join(ctx.rootDir, '.github', 'workflows'), { recursive: true });
-                writeFileSync(file, `name: scheduled ${e.project} ${e.name}\non:\n  schedule:\n    - cron: '${e.cron}'\n  workflow_dispatch: {}\njobs:\n  run:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v4\n      - uses: oven-sh/setup-bun@v2\n      - uses: actions/setup-node@v4\n        with: { node-version: 22 }\n      - run: bun install\n      - run: bun run sdods browsers install --with-deps\n      - run: bun run sdods run ${e.args.join(' ')} --trigger schedule --run-id sched-${e.name}-\${{ github.run_id }}\n        env:\n          SDODS_SERVER_URL: \${{ secrets.SDODS_SERVER_URL }}\n          SDODS_TOKEN: \${{ secrets.SDODS_TOKEN }}\n      - uses: actions/upload-artifact@v4\n        if: always()\n        with: { name: sdods-${e.project}-${e.name}, path: .sdods/runs }\n`);
+                writeFileSync(file, `name: scheduled ${e.project} ${e.name}\non:\n  schedule:\n    - cron: '${e.cron}'\n  workflow_dispatch: {}\njobs:\n  run:\n    runs-on: ubuntu-latest\n    steps:\n      - uses: actions/checkout@v7\n      - uses: oven-sh/setup-bun@v2\n      - uses: actions/setup-node@v7\n        with: { node-version: 22 }\n      - run: bun install\n      - run: bun run sdods browsers install --with-deps\n      - run: bun run sdods run ${e.args.join(' ')} --trigger schedule --run-id sched-${e.name}-\${{ github.run_id }}\n        env:\n          SDODS_SERVER_URL: \${{ secrets.SDODS_SERVER_URL }}\n          SDODS_TOKEN: \${{ secrets.SDODS_TOKEN }}\n      - uses: actions/upload-artifact@v7\n        if: always()\n        with: { name: sdods-${e.project}-${e.name}, path: .sdods/runs }\n`);
                 written.push(file);
             }
             else if (opts.target === 'launchd') {

package/dist/commands/trace.js

@@ -56,8 +56,8 @@ export function register(program) {
         .option('--list', 'list trace files instead of opening them')
         .action(async (zip, opts, cmd) => {
         const ctx = createContext(cmd);
-        let zips = [];
-        let source = '';
+        let zips;
+        let source;
         if (zip) {
             const p = resolvePath(ctx.opts.cwd ?? process.cwd(), zip);
             if (!existsSync(p))

package/dist/gates.d.ts

@@ -0,0 +1,11 @@
+import type { GateResult } from '@sdods/contracts';
+import { SdodsError } from '@sdods/core';
+/**
+ * How a process gate verdict reads on the terminal, and the error a breach fails with. Shared by
+ * `sdods run --process` (an unsharded run) and `sdods report merge --process` (the shards of one),
+ * so a gate looks the same wherever it was judged.
+ */
+export declare function printGates(gates: GateResult): void;
+/** The `GATE_FAILED` error for a verdict that did not pass. Exit 1: a gate not met is a failure. */
+export declare function gateFailedError(gates: GateResult, verdictFile: string): SdodsError;
+//# sourceMappingURL=gates.d.ts.map

package/dist/gates.js

@@ -0,0 +1,29 @@
+import pc from 'picocolors';
+import { SdodsError } from '@sdods/core';
+import { out, table } from './ui.js';
+/**
+ * How a process gate verdict reads on the terminal, and the error a breach fails with. Shared by
+ * `sdods run --process` (an unsharded run) and `sdods report merge --process` (the shards of one),
+ * so a gate looks the same wherever it was judged.
+ */
+export function printGates(gates) {
+    out('');
+    out(pc.bold(`gates · process ${gates.process}`));
+    table(gates.rows.map((r) => ({
+        gate: r.gate,
+        threshold: r.threshold,
+        actual: r.actual,
+        result: r.passed ? 'pass' : 'FAIL',
+        detail: r.detail ?? '',
+    })));
+}
+/** The `GATE_FAILED` error for a verdict that did not pass. Exit 1: a gate not met is a failure. */
+export function gateFailedError(gates, verdictFile) {
+    const failed = gates.rows.filter((r) => !r.passed);
+    return new SdodsError('GATE_FAILED', `Process "${gates.process}" did not meet ${failed.length} gate(s): ${failed.map((r) => `${r.gate} (${r.actual}, needs ${r.threshold})`).join('; ')}.`, {
+        hint: `The verdict is in ${verdictFile}. Gates are set under processes[].gates in sdods.project.yaml.`,
+        docsPath: '/docs/guides/processes-and-testing-types',
+        exitCode: 1,
+    });
+}
+//# sourceMappingURL=gates.js.map

package/dist/program.js

@@ -24,6 +24,7 @@ import { register as registerCoverage } from './commands/coverage.js';
 import { register as registerBrowsers } from './commands/browsers.js';
 import { register as registerWatch } from './commands/watch.js';
 import { register as registerTrace } from './commands/trace.js';
+import { register as registerBaselines } from './commands/baselines.js';
 import { register as registerAgent } from './commands/agent.js';
 import { register as registerProposals } from './commands/proposals.js';
 import { register as registerMcp } from './commands/mcp.js';
@@ -80,6 +81,7 @@ export function buildProgram() {
     registerBrowsers(program);
     registerWatch(program);
     registerTrace(program);
+    registerBaselines(program);
     registerAgent(program);
     registerProposals(program);
     registerMcp(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdods/cli",
-  "version": "0.8.0",
+  "version": "0.10.0",
   "description": "SDODS command line: run, record, analyze, agents, MCP server, scheduler and the web server.",
   "license": "Apache-2.0",
   "author": "SDODS <admin@sdods.com>",
@@ -24,22 +24,22 @@
     "node": ">=22"
   },
   "dependencies": {
-    "@sdods/contracts": "0.8.0",
-    "@sdods/core": "0.8.0",
+    "@sdods/contracts": "0.10.0",
+    "@sdods/core": "0.10.0",
     "commander": "^15.0.0",
     "execa": "^10.0.1",
     "picocolors": "^1.1.1",
     "semver": "^7.8.5",
-    "yaml": "^2.9.0",
-    "zod": "^4.5.4",
+    "yaml": "^2.9.1",
+    "zod": "^4.6.5",
     "@playwright/test": "^1.63.0",
     "playwright-core": "^1.63.0",
-    "@sdods/integrations": "0.8.0",
-    "@sdods/mcp": "0.8.0",
-    "@sdods/agents": "0.8.0",
-    "@sdods/db": "0.8.0",
+    "@sdods/integrations": "0.10.0",
+    "@sdods/mcp": "0.10.0",
+    "@sdods/agents": "0.10.0",
+    "@sdods/db": "0.10.0",
     "csv-parse": "^7.0.2",
-    "@sdods/server": "0.8.0"
+    "@sdods/server": "0.10.0"
   },
   "homepage": "https://sdods.com",
   "bugs": {

package/skills/sdods-start-ui/SKILL.md

@@ -161,11 +161,12 @@ Defaults: **`http://127.0.0.1:4444`** for the CLI, **`http://localhost:8080`** f
 image binds `0.0.0.0:8080`). `--open` launches the browser (`open` / `start` / `xdg-open` by
 platform). `--host 0.0.0.0` exposes it on the LAN — only do that deliberately.
 
-On Apple silicon the published image is `linux/amd64` only, and Docker refuses the pull rather
-than emulating. Add the platform flag:
+The image is published for `linux/amd64` and `linux/arm64`, so the same command runs natively on
+Apple silicon and arm64 servers. Tags up to `0.9.0` carry amd64 only, and Docker refuses that pull
+on arm64 rather than emulating; for those, add the platform flag:
 
 ```bash
-docker run --rm --platform linux/amd64 -p 8080:8080 -v sdods-data:/data ghcr.io/siri1410/sdods-server
+docker run --rm --platform linux/amd64 -p 8080:8080 -v sdods-data:/data ghcr.io/siri1410/sdods-server:0.9.0
 ```
 
 If the run must come from a source checkout, `bun run web:build` is not optional — see
@@ -278,7 +279,7 @@ the API running **without** the UI bundle — that is the source-checkout case,
 | Fresh install, but `/login` says "ask an admin" | the login page does not redirect to `/setup` | open the `/setup?token=…` URL from the `serve` output, or `sdods users create --admin` |
 | Global CLI errors on a repo project (`CONFIG_INVALID`, unknown browser) | version skew between the global CLI and the checkout | use `bun run sdods` inside a checkout; upgrade the global one otherwise |
 | `sdods: command not found` after installing | the bin dir is not on PATH — `~/.local/bin`, or `%LOCALAPPDATA%\SDODS\bin` on Windows | add it, or re-run the installer with `--modify-path` / `-ModifyPath` |
-| Docker: `no matching manifest for linux/arm64/v8` | amd64-only image on Apple silicon | add `--platform linux/amd64` |
+| Docker: `no matching manifest for linux/arm64/v8` | an amd64-only tag (`0.9.0` or earlier) on Apple silicon or arm64 | pull a newer tag, or add `--platform linux/amd64` |
 | UI loads, runs never start | browser engines missing | `sdods browsers install -b chromium` (the positional `sdods browsers install chromium` also works on current versions, and failed with `too many arguments` before). Bare `sdods browsers install` installs all engines; on Linux `--with-deps` needs root |
 | Node too old | SDODS needs Node 22+ | `nvm use 22` / `fnm use 22`. On macOS/Linux the installer also takes `--install-node`; **`install.ps1` has no such flag** — it exits and tells you to run `winget install OpenJS.NodeJS.LTS`, `scoop install nodejs-lts` or `nvm install 22` |
 | Anything else | — | `sdods doctor` first; it reports what it found, not what it expected |

package/templates/projects/demo-shop/features/auth/user-pool.feature

@@ -1,6 +1,6 @@
 @ui @auth @pool
 Feature: User pool
-  Accounts are leased per worker from the pool dataset; login state is cached as storageState.
+  Accounts are leased per scenario from the pool dataset; login state is cached as storageState.
 
   @sanity @user:standard
   Scenario: A leased standard user starts logged in through cached storage state

package/templates/projects/demo-shop/features/cart/performance.feature

@@ -0,0 +1,14 @@
+@ui @cart @perf
+Feature: Cart performance
+  The @perf tag records the vitals of every document the scenario loads and judges them against
+  perf.budgets (pageLoadMs and lcpMs from the project, pageLoadMs overridden in envs/staging.yaml).
+
+  # WebKit does not implement largest-contentful-paint, and a vital a budget applies to that never
+  # fired fails the scenario rather than passing it, so this runs on Chromium and Firefox only.
+  @regression @skip:webkit
+  Scenario: The login and cart pages load within their budgets
+    Given I am on the login page
+    When I login with "standard_user" and "{{standardPassword}}"
+    And I add "{{defaultProduct}}" to the cart
+    And I navigate to the "cart" page
+    Then the cart should list "{{defaultProduct}}"

package/templates/projects/demo-shop/features/inventory/accessibility.feature

@@ -0,0 +1,12 @@
+@ui @inventory @a11y
+Feature: Inventory accessibility
+  The @a11y tag audits the page each scenario ends on with axe (WCAG 2.x A and AA) and fails on
+  anything at or above a11y.failOn (serious by default). SauceDemo's login, inventory and cart
+  pages have no WCAG A/AA violation axe can detect, so nothing is scoped out with include/exclude.
+
+  @regression
+  Scenario: The inventory page has no serious accessibility violations
+    Given I am on the login page
+    When I login with "standard_user" and "{{standardPassword}}"
+    Then I should be on the inventory page
+    And there should be 6 products listed

package/templates/projects/demo-shop/features/inventory/visual.feature

@@ -1,6 +1,7 @@
 @ui @inventory @visual
 Feature: Inventory visual baseline
-  Pixel comparison against a per-browser baseline (run once with --update-snapshots).
+  Pixel comparison against a per-browser, per-platform baseline. Review a failure with
+  `sdods baselines diff` and accept it with `sdods baselines accept inventory --run <id>`.
 
   @regression
   Scenario: Inventory page matches its baseline

package/templates/projects/demo-shop/sdods.project.yaml

@@ -101,6 +101,9 @@ data:
     roleColumn: role
     leaseStore: file
     leaseTtlMs: 600000
+    # One account per role after poolSize, and `release:check:live` runs three browsers in one
+    # invocation: release each account when its scenario ends so the browsers queue for it (#153).
+    leaseScope: scenario
 
 auth:
   strategy: form