@tryarcanist/cli 0.1.153 → 0.1.154

package/dist/index.js

@@ -323,6 +323,16 @@ function applyColorEnvironment(options) {
 function randomIdempotencyKey() {
   return randomUUID();
 }
+function assertArcanistSessionMutationAllowed(subcommand) {
+  if (process.env.ARCANIST_AGENT_ROLE?.trim() !== "verification") return;
+  throw new CliError(
+    "user",
+    `\`arcanist sessions ${subcommand}\` is disabled inside verification sessions because nested Arcanist sessions are not observable to the verifier.`,
+    {
+      hint: "Use direct local/sandbox evidence instead, or report a verification gap rather than spawning another Arcanist session."
+    }
+  );
+}
 function normalizePromptChunk(chunk, carry) {
   const raw = carry + (Buffer.isBuffer(chunk) ? chunk.toString("utf8") : chunk);
   let text = "";
@@ -2679,6 +2689,7 @@ async function fetchSettledSessionResultFields(config, sessionId, pollIntervalMs
 }
 async function createCommand(repoUrl, promptArg, options, command) {
   const runtime = getRuntimeOptions(command, options);
+  assertArcanistSessionMutationAllowed("create");
   const config = requireConfig(runtime);
   let agentRuntimeBackend = CODEX_AGENT_RUNTIME_BACKEND;
   if (options.backend !== void 0) {
@@ -3009,6 +3020,7 @@ async function loginCommand(options, command) {
 // src/commands/message.ts
 async function messageCommand(sessionId, promptArg, options = {}, command) {
   const runtime = getRuntimeOptions(command, options);
+  assertArcanistSessionMutationAllowed("send");
   const config = requireConfig(runtime);
   const prompt = await resolvePromptInput(promptArg, options);
   const uploadedFiles = await resolveUploadedFileOptions(options.uploadedFile);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryarcanist/cli",
-  "version": "0.1.153",
+  "version": "0.1.154",
   "description": "CLI for Arcanist — create and manage coding agent sessions",
   "type": "module",
   "bin": {