@tryarcanist/cli 0.1.130 → 0.1.132

package/README.md

@@ -123,6 +123,7 @@ printf "add tests" | arcanist sessions create your-org/your-repo --prompt-stdin
 arcanist sessions create your-org/your-repo - --model gpt-5.5
 arcanist sessions create your-org/your-repo "port to claude" --backend claude_code --model claude-opus-4-8
 arcanist sessions create your-org/your-repo "refactor auth" --reasoning-effort xhigh
+arcanist sessions create your-org/your-repo "fix release branch" --base-branch release/2026-06
 arcanist sessions create your-org/your-repo "review the trace" --uploaded-file trace.txt
 arcanist sessions create your-org/your-repo "verify the deployed change" --cold
 arcanist sessions create your-org/your-repo "retry-safe create" --idempotency-key 1f0e6f1a-...
@@ -132,6 +133,8 @@ arcanist sessions create your-org/your-repo "retry-safe create" --idempotency-ke
 
 `--wait` blocks until the created prompt finishes and exits non-zero if the prompt finishes with `status: failed`, making it suitable for cron or other schedulers that alert on command failure. `--poll-interval <ms>` tunes the completion check frequency.
 
+Use `--base-branch <branch>` to target a non-default base branch. The CLI only validates that the branch value is non-empty; branch existence is checked later by the session runtime.
+
 Repeatable `--uploaded-file <path>` flags attach local UTF-8 text files to the prompt. Uploaded file names come from the local basename; directory components are not sent.
 
 `--cold` is a deprecated no-op retained for backward compatibility. Sessions always start from a fresh sandbox (the warm sandbox pool was removed), so the flag has no effect.
@@ -140,7 +143,7 @@ Repeatable `--uploaded-file <path>` flags attach local UTF-8 text files to the p
 
 `--onboarding` creates an onboarding session: the agent authors the repo's `.arcanist.json`, `.arcanist/` runtime files, `ARCANIST.md`, and conditionally `.arcanist/sandbox.yaml` + `.arcanist/sandbox.layer.Dockerfile` (when the base sandbox lacks a needed toolchain), proves what it can inside its sandbox, and opens the setup PR ready for review. Team use; not part of the external API surface.
 
-JSON mode returns `{sessionId, sessionUrl?, repoUrl, model?, agentRuntimeBackend?, reasoningEffort?, promptId?}`. `sessionUrl` is emitted only when the server returns it; `agentRuntimeBackend` only when `--backend` is passed.
+JSON mode returns `{sessionId, sessionUrl?, repoUrl, model?, agentRuntimeBackend?, reasoningEffort?, baseBranch?, promptId?}`. `sessionUrl` is emitted only when the server returns it; `agentRuntimeBackend` only when `--backend` is passed.
 
 ### `arcanist sessions send <session-id> [prompt]`
 
@@ -235,6 +238,38 @@ arcanist sessions usage abc123
 arcanist sessions usage abc123 --json
 ```
 
+### `arcanist automations create <repo-url> [prompt]`
+
+Creates a scheduled automation for a GitHub repo. Create/delete require a write-scoped CLI token; read-scoped tokens can list automations. The server validates repo access, normalizes cron expressions, dedupes retries by repo+cron+prompt, and caps each business at 20 enabled rules.
+
+```bash
+arcanist automations create your-org/your-repo "summarize new regressions" --cron "*/15 * * * *"
+printf "summarize new regressions" | arcanist automations create your-org/your-repo --prompt-stdin --cron "*/15 * * * *" --json
+arcanist automations create https://github.com/your-org/your-repo - --cron "0 14 * * 1-5" --name "Weekday summary"
+```
+
+JSON mode prints the created rule. Human-readable mode prints the rule ID, repo, normalized cron, and next fire time.
+
+### `arcanist automations list`
+
+```bash
+arcanist automations list
+arcanist automations list --limit 20 --json
+arcanist automations list --cursor <cursor>
+arcanist automations list --all --json
+```
+
+Default output reads one page. `--all` follows pagination until completion. JSON mode returns `{items, nextCursor}`.
+
+### `arcanist automations delete <id>`
+
+Deletes a scheduled automation. Interactive mode prompts for confirmation; pass `--yes` for non-interactive use. `--json` requires `--yes`.
+
+```bash
+arcanist automations delete rule_123
+arcanist automations delete rule_123 --yes --json
+```
+
 ### `arcanist tokens list`
 
 ```bash

package/dist/index.js

@@ -378,6 +378,161 @@ async function whoamiCommand(options, command) {
   if (payload.tokenScope) console.log(`Token scope: ${String(payload.tokenScope)}`);
 }
 
+// ../../shared/github/repo-url.ts
+function parseGithubRepoFullName(value) {
+  const shorthand = value.match(/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.-]+)$/);
+  if (shorthand) return { owner: shorthand[1], repo: shorthand[2] };
+  const ssh = value.match(/git@[^:]+:([^/]+)\/([^/]+?)(?:\.git)?$/);
+  if (ssh) return { owner: ssh[1], repo: ssh[2] };
+  const https = value.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/);
+  if (https) return { owner: https[1], repo: https[2] };
+  return null;
+}
+
+// src/commands/automations.ts
+var AUTOMATION_ERROR_HINTS = {
+  invalid_cron: "Use a standard five-field cron expression, for example: */15 * * * *",
+  repo_not_available: "Check that the token owner has GitHub access and Arcanist is installed for that repo.",
+  duplicate_rule: "An enabled automation already exists for this repo, cron, and prompt.",
+  rule_cap_reached: "Delete or disable an existing automation before creating another one. The cap is 20 enabled rules.",
+  installation_unresolved: "Reconnect or reinstall the GitHub integration for that repository, then retry."
+};
+async function createAutomationCommand(repoUrl, promptArg, options, command) {
+  const repo = parseAutomationRepo(repoUrl);
+  const prompt = await resolvePromptInput(promptArg, options);
+  const runtime = getRuntimeOptions(command, options);
+  const config = requireConfig(runtime);
+  const body = {
+    repoOwner: repo.owner,
+    repoName: repo.repo,
+    cron: options.cron,
+    prompt
+  };
+  if (options.name !== void 0) body.name = options.name;
+  const payload = await automationApiFetch(config, "/api/automation/schedules", {
+    method: "POST",
+    body: JSON.stringify(body)
+  });
+  if (isJson(command, options)) {
+    writeJson(payload.data);
+    return;
+  }
+  printAutomationRule(payload.data);
+}
+async function listAutomationsCommand(options, command) {
+  const runtime = getRuntimeOptions(command, options);
+  const config = requireConfig(runtime);
+  const items = [];
+  let cursor = options.cursor;
+  let nextCursor = null;
+  do {
+    const query = new URLSearchParams();
+    if (options.limit) query.set("limit", options.limit);
+    if (cursor) query.set("cursor", cursor);
+    const payload = await automationApiFetch(
+      config,
+      `/api/automation/schedules${query.size ? `?${query.toString()}` : ""}`
+    );
+    items.push(...payload.data.items);
+    nextCursor = payload.data.nextCursor;
+    cursor = nextCursor ?? void 0;
+  } while (options.all === true && nextCursor);
+  const output = { items, nextCursor: options.all === true ? null : nextCursor };
+  if (isJson(command, options)) {
+    writeJson(output);
+    return;
+  }
+  if (items.length === 0) {
+    console.log("No automations found.");
+    return;
+  }
+  for (const rule of items) {
+    console.log(
+      `${rule.id}	${rule.repoOwner}/${rule.repoName}	${rule.normalizedCron}	${String(rule.enabled)}	${formatTime(rule.nextFireAt)}`
+    );
+  }
+  if (output.nextCursor) console.log(`Next cursor: ${output.nextCursor}`);
+}
+async function deleteAutomationCommand(id, options, command) {
+  if (isJson(command, options) && options.yes !== true) {
+    throw new CliError("user", "`automations delete --json` requires --yes.");
+  }
+  if (options.yes !== true) {
+    await confirmOrThrow(`Delete automation ${id}?`);
+  }
+  const runtime = getRuntimeOptions(command, options);
+  const config = requireConfig(runtime);
+  await automationApiFetchText(config, `/api/automation/schedules/${encodeURIComponent(id)}`, { method: "DELETE" });
+  if (isJson(command, options)) {
+    writeJson({ ok: true, id });
+    return;
+  }
+  console.log(`Deleted automation ${id}.`);
+}
+function parseAutomationRepo(value) {
+  if (/^git@/i.test(value) && !/^git@github\.com:/i.test(value)) {
+    throw new CliError("user", "repo-url must be owner/name or a GitHub URL.");
+  }
+  const parsed = parseGithubRepoFullName(value);
+  if (!parsed) throw new CliError("user", "repo-url must be owner/name or a GitHub URL.");
+  return { owner: parsed.owner, repo: parsed.repo };
+}
+async function automationApiFetch(config, path, init) {
+  try {
+    return await apiFetch(config, path, init);
+  } catch (err) {
+    throw mapAutomationApiError(err);
+  }
+}
+async function automationApiFetchText(config, path, init) {
+  try {
+    return await apiFetchText(config, path, init);
+  } catch (err) {
+    throw mapAutomationApiError(err);
+  }
+}
+function mapAutomationApiError(err) {
+  if (!(err instanceof ApiError)) {
+    return err instanceof CliError ? err : new CliError("server", err instanceof Error ? err.message : String(err));
+  }
+  const parsed = parseApiErrorBody2(err.body);
+  const serverCode = parsed?.error;
+  return new CliError(codeForStatus(err.status), parsed?.message || serverCode || err.message, {
+    exitCode: err.exitCode,
+    hint: serverCode ? AUTOMATION_ERROR_HINTS[serverCode] : void 0,
+    requestId: err.requestId
+  });
+}
+function parseApiErrorBody2(body) {
+  try {
+    const parsed = JSON.parse(body);
+    if (!parsed || typeof parsed !== "object") return null;
+    const record = parsed;
+    return {
+      error: typeof record.error === "string" ? record.error : void 0,
+      message: typeof record.message === "string" ? record.message : void 0
+    };
+  } catch {
+    return null;
+  }
+}
+function codeForStatus(status) {
+  if (status === 401 || status === 403) return "auth";
+  if (status === 404) return "not_found";
+  if (status === 409) return "conflict";
+  if (status >= 500) return "server";
+  return "user";
+}
+function printAutomationRule(rule) {
+  console.log(`ID: ${rule.id}`);
+  console.log(`Repo: ${rule.repoOwner}/${rule.repoName}`);
+  console.log(`Cron: ${rule.normalizedCron}`);
+  console.log(`Next fire: ${formatTime(rule.nextFireAt)}`);
+}
+function formatTime(value) {
+  return typeof value === "number" ? new Date(value).toISOString() : "none";
+}
+
 // ../../shared/agent/agent-runtime-backend.ts
 var CODEX_AGENT_RUNTIME_BACKEND = "codex";
 var CLAUDE_CODE_AGENT_RUNTIME_BACKEND = "claude_code";
@@ -2416,6 +2571,10 @@ async function createCommand(repoUrl, promptArg, options, command) {
   if (repoError) {
     throw new CliError("user", repoError);
   }
+  const baseBranch = options.baseBranch?.trim();
+  if (options.baseBranch !== void 0 && !baseBranch) {
+    throw new CliError("user", "--base-branch must not be empty.");
+  }
   const uploadedFiles = await resolveUploadedFileOptions(options.uploadedFile);
   const idempotencyKey = options.idempotencyKey ?? randomIdempotencyKey();
   const sessionIdempotencyKey = `${idempotencyKey}:session`;
@@ -2424,6 +2583,7 @@ async function createCommand(repoUrl, promptArg, options, command) {
   if (options.model) body.model = options.model;
   if (options.backend) body.agentRuntimeBackend = agentRuntimeBackend;
   if (options.reasoningEffort) body.reasoningEffort = options.reasoningEffort;
+  if (baseBranch) body.baseBranch = baseBranch;
   if (options.cold) body.cold = true;
   if (options.onboarding) body.onboarding = true;
   const sessionData = await apiFetch(config, "/api/sessions", {
@@ -2469,6 +2629,7 @@ async function createCommand(repoUrl, promptArg, options, command) {
     if (options.model) output.model = options.model;
     if (options.backend) output.agentRuntimeBackend = agentRuntimeBackend;
     if (options.reasoningEffort) output.reasoningEffort = options.reasoningEffort;
+    if (baseBranch) output.baseBranch = baseBranch;
     if (options.onboarding) output.onboarding = true;
     if (promptId) output.promptId = promptId;
     writeJson(output);
@@ -2551,17 +2712,6 @@ import { execFileSync } from "child_process";
 import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
 import { dirname } from "path";
 
-// ../../shared/github/repo-url.ts
-function parseGithubRepoFullName(value) {
-  const shorthand = value.match(/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.-]+)$/);
-  if (shorthand) return { owner: shorthand[1], repo: shorthand[2] };
-  const ssh = value.match(/git@[^:]+:([^/]+)\/([^/]+?)(?:\.git)?$/);
-  if (ssh) return { owner: ssh[1], repo: ssh[2] };
-  const https = value.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/);
-  if (https) return { owner: https[1], repo: https[2] };
-  return null;
-}
-
 // ../../shared/sandbox-layer/parser.ts
 import { isMap, isScalar, isSeq, parseDocument } from "yaml";
 
@@ -4002,7 +4152,7 @@ program.hook("preAction", (_thisCommand, actionCommand) => {
   applyColorEnvironment(getRuntimeOptions(actionCommand));
 });
 function addCreateOptions(cmd) {
-  return cmd.argument("<repo-url>", "Repository URL").argument("[prompt]", "Prompt to send, or '-' to read stdin").option("--model <model>", "Model to use").option("--backend <backend>", "Agent runtime backend: codex (default) or claude_code").option("--reasoning-effort <effort>", "Reasoning effort to use for models that support it").option("--prompt-stdin", "Read prompt from stdin").option(
+  return cmd.argument("<repo-url>", "Repository URL").argument("[prompt]", "Prompt to send, or '-' to read stdin").option("--model <model>", "Model to use").option("--backend <backend>", "Agent runtime backend: codex (default) or claude_code").option("--reasoning-effort <effort>", "Reasoning effort to use for models that support it").option("--base-branch <branch>", "Base branch to create the session against (defaults to the repo default branch)").option("--prompt-stdin", "Read prompt from stdin").option(
     "--uploaded-file <path>",
     "Attach a local text file to the prompt as uploadedFiles; repeat for multiple files",
     collectUploadedFileOption
@@ -4129,6 +4279,32 @@ Examples:
   arcanist sessions usage <session-id> --json
 `
 ).action((sessionId, options, command) => usageCommand(sessionId, options, command));
+var automations = program.command("automations").description("Automation commands");
+automations.command("create").description("Create a scheduled automation").argument("<repo-url>", "Repository URL").argument("[prompt]", "Prompt to run, or '-' to read stdin").requiredOption("--cron <expr>", "Cron expression").option("--name <name>", "Automation display name").option("--prompt-stdin", "Read prompt from stdin").addHelpText(
+  "after",
+  `
+Examples:
+  arcanist automations create tryarcanist/arcanist "summarize regressions" --cron "*/15 * * * *"
+  printf "summarize regressions" | arcanist automations create tryarcanist/arcanist --prompt-stdin --cron "*/15 * * * *" --json
+`
+).action((repoUrl, prompt, options, command) => createAutomationCommand(repoUrl, prompt, options, command));
+automations.command("list").description("List scheduled automations").option("--limit <n>", "Maximum automations to return").option("--cursor <cursor>", "Pagination cursor").option("--all", "Fetch all pages").addHelpText(
+  "after",
+  `
+Examples:
+  arcanist automations list
+  arcanist automations list --limit 20 --json
+  arcanist automations list --all --json
+`
+).action((options, command) => listAutomationsCommand(options, command));
+automations.command("delete").description("Delete a scheduled automation").argument("<id>", "Automation ID").option("--yes", "Confirm deletion without prompting").addHelpText(
+  "after",
+  `
+Examples:
+  arcanist automations delete auto_123
+  arcanist automations delete auto_123 --yes --json
+`
+).action((id, options, command) => deleteAutomationCommand(id, options, command));
 var sandbox = program.command("sandbox").description("Sandbox layer commands");
 sandbox.command("init").description("Create sandbox layer source files").action((options, command) => sandboxInitCommand(options, command));
 sandbox.command("validate").description("Validate local sandbox layer source files").option("--manifest <path>", "Manifest path", ".arcanist/sandbox.yaml").action((options, command) => sandboxValidateCommand(options, command));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryarcanist/cli",
-  "version": "0.1.130",
+  "version": "0.1.132",
   "description": "CLI for Arcanist — create and manage coding agent sessions",
   "type": "module",
   "bin": {