@tryarcanist/cli 0.1.303 → 0.1.305

package/dist/index.js

@@ -22995,13 +22995,24 @@ function parseEgressAllowlistSourceFile(content, key = EGRESS_ALLOWLIST_SOURCE_P
 }
 
 // ../../shared/github/repo-url.ts
+var REPO_SEGMENT_PATTERN = /^[A-Za-z0-9_.][A-Za-z0-9_.-]*$/;
+var MAX_REPO_SEGMENT_LENGTH = 100;
+function isValidGithubRepoSegment(value) {
+  if (typeof value !== "string") return false;
+  if (!value || value.length > MAX_REPO_SEGMENT_LENGTH) return false;
+  if (value === "." || value === "..") return false;
+  return REPO_SEGMENT_PATTERN.test(value);
+}
+function parseGithubRepoCoordinate(owner, repo) {
+  return isValidGithubRepoSegment(owner) && isValidGithubRepoSegment(repo) ? { owner, repo } : null;
+}
 function parseGithubRepoFullName(value) {
   const shorthand = value.match(/^([a-zA-Z0-9_.-]+)\/([a-zA-Z0-9_.-]+)$/);
-  if (shorthand) return { owner: shorthand[1], repo: shorthand[2] };
+  if (shorthand) return parseGithubRepoCoordinate(shorthand[1], shorthand[2]);
   const ssh = value.match(/^git@github\.com:([^/]+)\/([^/]+?)(?:\.git)?$/);
-  if (ssh) return { owner: ssh[1], repo: ssh[2] };
+  if (ssh) return parseGithubRepoCoordinate(ssh[1], ssh[2]);
   const https = value.match(/^https?:\/\/github\.com\/([^/]+)\/([^/]+?)(?:\.git)?\/?$/);
-  if (https) return { owner: https[1], repo: https[2] };
+  if (https) return parseGithubRepoCoordinate(https[1], https[2]);
   return null;
 }
 
@@ -24487,6 +24498,103 @@ async function parseSandboxLayerSource(input) {
   };
 }
 
+// ../../shared/types/sandbox-layer-api.ts
+var sandboxLayerBuildActorSchema = external_exports.object({
+  userId: external_exports.number(),
+  login: external_exports.string().nullable(),
+  name: external_exports.string().nullable()
+});
+var sandboxLayerFailureSummarySchema = external_exports.object({
+  phase: external_exports.enum(["validation", "provider_build", "smoke", "runtime", "unknown"]),
+  reason: external_exports.string(),
+  command: external_exports.string().optional(),
+  commandIndex: external_exports.number().optional(),
+  exitCode: external_exports.number().optional(),
+  stdoutPreview: external_exports.string().optional(),
+  stderrPreview: external_exports.string().optional(),
+  activeTemplateUnchanged: external_exports.boolean()
+});
+var baseSourceSchema = external_exports.enum(["registry", "env_fallback"]);
+var baseVersionQualitySchema = external_exports.enum(["versioned", "unversioned"]);
+var sandboxLayerBuildRequestSchema = external_exports.object({
+  id: external_exports.string(),
+  status: external_exports.string(),
+  repo: external_exports.string(),
+  sourceRepo: external_exports.string(),
+  targetRepo: external_exports.string(),
+  requestedRef: external_exports.string(),
+  commitSha: external_exports.string(),
+  manifestPath: external_exports.string(),
+  layerPath: external_exports.string(),
+  sourceContentHash: external_exports.string(),
+  baseTemplateRef: external_exports.string(),
+  baseVersion: external_exports.string(),
+  baseSource: baseSourceSchema,
+  baseVersionQuality: baseVersionQualitySchema,
+  resourceProfileKey: external_exports.string(),
+  promotionEligibility: external_exports.enum(["default_branch_head", "non_default_ref", "unknown"]),
+  willPromote: external_exports.number().optional(),
+  providerArtifactRef: external_exports.string().nullable().optional(),
+  activeTemplateRef: external_exports.string().nullable().optional(),
+  createdBy: sandboxLayerBuildActorSchema,
+  failureSummary: sandboxLayerFailureSummarySchema.nullable().optional()
+});
+var sandboxLayerBuildHistoryItemSchema = external_exports.object({
+  id: external_exports.string(),
+  status: external_exports.string(),
+  sourceRepo: external_exports.string(),
+  commitSha: external_exports.string(),
+  resourceProfileKey: external_exports.string(),
+  templateId: external_exports.string().nullable(),
+  baseTemplateRef: external_exports.string(),
+  baseVersion: external_exports.string(),
+  baseSource: baseSourceSchema,
+  baseVersionQuality: baseVersionQualitySchema,
+  createdBy: sandboxLayerBuildActorSchema,
+  createdAt: external_exports.number(),
+  startedAt: external_exports.number().nullable(),
+  completedAt: external_exports.number().nullable(),
+  smokeStatus: external_exports.enum(["passed", "failed"]).nullable(),
+  failureSummary: sandboxLayerFailureSummarySchema.nullable()
+});
+var sandboxLayerBuildLogSchema = external_exports.object({
+  id: external_exports.string(),
+  build_id: external_exports.string(),
+  sequence: external_exports.number(),
+  message: external_exports.string(),
+  created_at: external_exports.number()
+});
+var sandboxLayerBuildRequestResponseSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  buildRequest: sandboxLayerBuildRequestSchema
+});
+var sandboxLayerBuildHistoryResponseSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  builds: external_exports.array(sandboxLayerBuildHistoryItemSchema)
+});
+var sandboxLayerBuildLogsResponseSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  logs: external_exports.array(sandboxLayerBuildLogSchema)
+});
+var sandboxLayerCliBuildRequestSchema = sandboxLayerBuildRequestSchema.partial().required({ id: true, status: true }).extend({ createdBy: sandboxLayerBuildActorSchema.nullable().optional() });
+var sandboxLayerCliBuildHistoryItemSchema = sandboxLayerBuildHistoryItemSchema.extend({
+  startedAt: external_exports.number().nullable().optional(),
+  failureSummary: sandboxLayerFailureSummarySchema.nullable().optional()
+});
+var sandboxLayerCliBuildLogSchema = sandboxLayerBuildLogSchema.partial().required({ sequence: true, message: true }).extend({ created_at: external_exports.union([external_exports.string(), external_exports.number()]).optional() });
+var sandboxLayerCliBuildRequestResponseSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  buildRequest: sandboxLayerCliBuildRequestSchema
+});
+var sandboxLayerCliBuildHistoryResponseSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  builds: external_exports.array(sandboxLayerCliBuildHistoryItemSchema)
+});
+var sandboxLayerCliBuildLogsResponseSchema = external_exports.object({
+  ok: external_exports.boolean(),
+  logs: external_exports.array(sandboxLayerCliBuildLogSchema)
+});
+
 // src/commands/sandbox.ts
 var DEFAULT_MANIFEST_PATH = SANDBOX_LAYER_MANIFEST_PATH;
 var DEFAULT_POLL_INTERVAL_MS = 2500;
@@ -24636,9 +24744,11 @@ function buildLogsPath(businessId, buildId, options = {}) {
   )}/logs${suffix}`;
 }
 async function fetchAndEmitBuildLogs(config2, businessId, buildId, options) {
-  const logs = await apiFetch(
-    config2,
-    buildLogsPath(businessId, buildId, { afterSequence: options.afterSequence, limit: options.limit })
+  const logs = sandboxLayerCliBuildLogsResponseSchema.parse(
+    await apiFetch(
+      config2,
+      buildLogsPath(businessId, buildId, { afterSequence: options.afterSequence, limit: options.limit })
+    )
   );
   if (logs.logs.length === 0) return { afterSequence: options.afterSequence, count: 0 };
   if (options.json) writeJson({ type: "logs", logs: logs.logs });
@@ -24664,9 +24774,11 @@ async function waitForBuild(config2, businessId, buildId, options) {
       const result = await fetchAndEmitBuildLogs(config2, businessId, buildId, { afterSequence, json: options.json });
       afterSequence = result.afterSequence;
     }
-    const status = await apiFetch(
-      config2,
-      `/api/businesses/${encodeURIComponent(businessId)}/sandbox-layer/build-requests/${encodeURIComponent(buildId)}`
+    const status = sandboxLayerCliBuildRequestResponseSchema.parse(
+      await apiFetch(
+        config2,
+        `/api/businesses/${encodeURIComponent(businessId)}/sandbox-layer/build-requests/${encodeURIComponent(buildId)}`
+      )
     );
     if (TERMINAL_BUILD_STATUSES.has(status.buildRequest.status)) {
       if (options.follow) {
@@ -24786,20 +24898,22 @@ async function sandboxBuildCommand(sourceRepoArg, options = {}, command) {
   const ref = options.ref ?? currentRef();
   let payload;
   try {
-    payload = await apiFetch(
-      config2,
-      `/api/businesses/${encodeURIComponent(businessId)}/repos/${encodeURIComponent(sourceRepo.owner)}/${encodeURIComponent(
-        sourceRepo.repo
-      )}/sandbox-layer/build-requests`,
-      {
-        method: "POST",
-        headers: { "Idempotency-Key": options.idempotencyKey ?? randomIdempotencyKey() },
-        body: JSON.stringify({
-          ref,
-          manifestPath,
-          ...targetRepo ? { targetRepo: { owner: targetRepo.owner, name: targetRepo.repo } } : {}
-        })
-      }
+    payload = sandboxLayerCliBuildRequestResponseSchema.parse(
+      await apiFetch(
+        config2,
+        `/api/businesses/${encodeURIComponent(businessId)}/repos/${encodeURIComponent(sourceRepo.owner)}/${encodeURIComponent(
+          sourceRepo.repo
+        )}/sandbox-layer/build-requests`,
+        {
+          method: "POST",
+          headers: { "Idempotency-Key": options.idempotencyKey ?? randomIdempotencyKey() },
+          body: JSON.stringify({
+            ref,
+            manifestPath,
+            ...targetRepo ? { targetRepo: { owner: targetRepo.owner, name: targetRepo.repo } } : {}
+          })
+        }
+      )
     );
   } catch (err) {
     if (err instanceof ApiError && err.status === 409 && err.data?.serverCode === "duplicate_request") {
@@ -24859,9 +24973,11 @@ async function sandboxHistoryCommand(sourceRepoArg, options = {}, command) {
     }
     params.set("limit", String(limit));
   }
-  const payload = await apiFetch(
-    config2,
-    `/api/businesses/${encodeURIComponent(businessId)}/sandbox-layer/build-requests?${params.toString()}`
+  const payload = sandboxLayerCliBuildHistoryResponseSchema.parse(
+    await apiFetch(
+      config2,
+      `/api/businesses/${encodeURIComponent(businessId)}/sandbox-layer/build-requests?${params.toString()}`
+    )
   );
   emit(command, options, payload, (historyPayload) => printBuildHistory(historyPayload.builds));
 }
@@ -24935,9 +25051,8 @@ async function sandboxLogsCommand(buildId, options = {}, command) {
     throw new CliError("user", "--limit must be a positive integer.");
   }
   for (; ; ) {
-    const payload = await apiFetch(
-      config2,
-      buildLogsPath(businessId, buildId, { afterSequence, limit })
+    const payload = sandboxLayerCliBuildLogsResponseSchema.parse(
+      await apiFetch(config2, buildLogsPath(businessId, buildId, { afterSequence, limit }))
     );
     if (payload.logs.length > 0 || !options.follow) {
       if (isJson(command, options)) writeJson(options.follow ? { type: "logs", logs: payload.logs } : payload);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryarcanist/cli",
-  "version": "0.1.303",
+  "version": "0.1.305",
   "description": "CLI for Arcanist - create and manage coding agent sessions",
   "type": "module",
   "bin": {