@tryarcanist/cli 0.1.343 → 0.1.345

package/README.md

@@ -128,7 +128,7 @@ arcanist environments prepare --wait --json
 arcanist environments prepare owner/repo --wait --poll-interval 5000 --json
 ```
 
-Agents should follow `repository.nextAction` and request a Zeus review only when it is `review`. `--wait` waits through internal handoffs until setup is ready or there is a real action for the user or Arcanist.
+Agents should follow `repository.nextAction` and `repository.command`. Request a Zeus review only when `nextAction` is `review`. When `command` is `null`, do not invent an API call; surface `question` / `secretRequest` to a human. `--wait` waits through internal handoffs until setup is ready or there is a real action for the user or Arcanist.
 
 ### `arcanist environments status`
 
@@ -139,7 +139,7 @@ arcanist environments status owner/repo --json
 arcanist environments status owner/repo --wait --poll-interval 5000 --json
 ```
 
-Agents should follow `repository.nextAction` and request a Zeus review only when it is `review`. `--wait` waits through internal handoffs until setup is ready or there is a real action for the user or Arcanist.
+Agents should follow `repository.nextAction` and `repository.command`. Request a Zeus review only when `nextAction` is `review`. When `command` is `null`, do not invent an API call; surface `question` / `secretRequest` to a human. `--wait` waits through internal handoffs until setup is ready or there is a real action for the user or Arcanist.
 
 ### `arcanist environments retry`
 
@@ -171,7 +171,7 @@ printf "arc_..." | arcanist auth login --token-stdin
 arcanist auth login --api-url https://api.tryarcanist.com
 ```
 
-The default flow prints a browser authorization URL and waits for human approval. `--json` writes the action immediately as JSONL on stderr and writes one final result to stdout. `ARCANIST_TOKEN` authenticates later commands through the same config loader as `~/.arcanist/config.json`. `arcanist auth login --token-stdin` or `--token` persists a token for later use.
+The default flow prints a browser authorization URL and waits for human approval. `--json` writes the action immediately as JSONL on stderr and writes one final result to stdout. `ARCANIST_TOKEN` authenticates later commands through the same config loader as `~/.arcanist/config.json`. `arcanist auth login --token-stdin`, `--token`, or `ARCANIST_TOKEN` persists a token for later use.
 
 ### `arcanist auth whoami`
 

package/dist/index.js

@@ -7409,7 +7409,7 @@ function isTerminalPhase(phase, _sessionKind) {
 // package.json
 var package_default = {
   name: "@tryarcanist/cli",
-  version: "0.1.343",
+  version: "0.1.345",
   description: "Command-line interface for Arcanist: inspect sessions, prepare Zeus environments, and trigger reviews",
   type: "module",
   bin: {
@@ -23149,11 +23149,33 @@ async function fetchSetupState(config2, fullName) {
     status: "not_started",
     stage: null
   };
-  return { ...state, nextAction: nextAction(state) };
+  const action = nextAction(state);
+  return { ...state, nextAction: action, command: commandForNextAction(action, state.fullName) };
 }
 function isActive(state) {
   return state.nextAction === "wait";
 }
+function commandForNextAction(action, fullName) {
+  switch (action) {
+    case "prepare":
+      return `arcanist environments prepare ${fullName}`;
+    case "wait":
+      return `arcanist environments status ${fullName} --wait`;
+    case "retry":
+      return `arcanist environments retry ${fullName}`;
+    case "review":
+      return null;
+    case "add_credentials":
+    case "answer_question":
+    case "authorize_github":
+    case "wait_for_arcanist":
+      return null;
+    default: {
+      const _exhaustive = action;
+      return _exhaustive;
+    }
+  }
+}
 function nextAction(state) {
   if (state.status === "not_started") return "prepare";
   if (state.status === "ready") return "review";
@@ -23219,11 +23241,13 @@ async function environmentPrepareCommand(repoArg, options = {}, command) {
     emit(command, options, { repository: state2 }, ({ repository }) => printState(repository));
     return;
   }
+  const action = result.status === "already_ready" ? "review" : "wait";
   const state = {
     fullName: result.fullName,
     status: result.status === "already_ready" ? "ready" : "pending",
     stage: null,
-    nextAction: result.status === "already_ready" ? "review" : "wait"
+    nextAction: action,
+    command: commandForNextAction(action, result.fullName)
   };
   emit(command, options, { repository: state }, ({ repository }) => printState(repository));
 }
@@ -23259,11 +23283,12 @@ var DEVICE_AUTH_TOKEN_PATH = "/api/auth/cli/device/token";
 async function loginCommand(options, command) {
   const runtime = getRuntimeOptions(command, options);
   const apiUrl = resolveLoginApiUrl(runtime.apiUrl);
+  const envOrFlag = resolveEnvOrFlagConfig(runtime, false);
   let token = null;
   if (options.tokenStdin) {
     token = await readStdinTrimmed();
-  } else if (runtime.token) {
-    token = runtime.token;
+  } else if (envOrFlag?.token) {
+    token = envOrFlag.token;
   } else {
     token = await loginWithDeviceAuthorization(apiUrl, runtime);
   }
@@ -23873,6 +23898,19 @@ async function reviewCommand(prUrl, options = {}, command) {
         config2,
         `/api/pr-reviews/status?prUrl=${encodeURIComponent(prUrl)}`
       );
+      if (status.status === "cancelled" || status.status === "admission_rejected") {
+        assertSameAttempt(triggeredSessionId, status.sessionId, "PR review");
+        if (status.status === "cancelled") {
+          throw new CliError(
+            "conflict",
+            status.terminalReason ? `Zeus review was cancelled: ${status.terminalReason}` : "Zeus review was cancelled."
+          );
+        }
+        throw new CliError(
+          "user",
+          status.terminalReason ? `Zeus review was rejected at admission: ${status.terminalReason}` : "Zeus review was rejected at admission."
+        );
+      }
       if (status.status !== "completed") return null;
       assertSameAttempt(triggeredSessionId, status.sessionId, "PR review");
       return {
@@ -27021,7 +27059,13 @@ async function setupCommand(repoArgs = [], options = {}, command) {
   }
   const runtime = getRuntimeOptions(command, options);
   let config2 = loadConfig(runtime);
-  if (!config2) config2 = await loginCommand({ ...runtime, emitResult: false }, command);
+  if (!config2) {
+    const envOrFlag = resolveEnvOrFlagConfig(runtime, false);
+    if ((process.stdin.isTTY !== true || process.stdout.isTTY !== true) && !envOrFlag?.token) {
+      throw new CliError("auth", "Not logged in.", { hint: "Run `arcanist auth login` or set `ARCANIST_TOKEN`." });
+    }
+    config2 = await loginCommand({ ...runtime, emitResult: false }, command);
+  }
   const requested = repoArgs.map((value) => {
     const repo = parseRepoArg(value);
     return `${repo.owner}/${repo.repo}`;
@@ -27163,7 +27207,7 @@ function emitSetupAction(runtime, action) {
 `);
 }
 function trackingCommands(repositories) {
-  return repositories.map((repository) => `Track later: arcanist environments status ${repository} --wait`);
+  return repositories.map((repository) => `Track later: ${commandForNextAction("wait", repository)}`);
 }
 
 // src/commands/stop.ts
@@ -27461,7 +27505,7 @@ codex.command("use <state>").description("Turn using your saved Codex subscripti
 codex.command("status").description("Show Codex subscription availability and whether auth is saved").action((options, command) => codexStatusCommand(options, command));
 codex.command("logout").description("Deactivate the selector and remove the stored Codex subscription auth for your user").action((options, command) => codexLogoutCommand(options, command));
 var sessions = program.command("sessions").description("Session commands");
-program.command("review <pr-url>").description("Run a Zeus review for a GitHub pull request").option("--focus <text>", "Ignored. Zeus always reviews the full pull request").option("--model <model>", "Pin the reviewer model (Arcanist members only); defaults to the Codex reviewer").option("--sandbox-runtime <runtime>", "Force the sandbox runtime (Arcanist members only): modal, e2b, or sailbox").option("--wait", "Wait for the review and print its verdict and findings").option("--poll-interval <ms>", "Polling interval in milliseconds while waiting (default 10000)").addHelpText(
+program.command("review <pr-url>").description("Run a Zeus review for a GitHub pull request").option("--focus <text>", "Ignored. Zeus always reviews the full pull request").option("--model <model>", "Pin the reviewer model (Arcanist members only); defaults to the Codex reviewer").option("--sandbox-runtime <runtime>", "Force the sandbox runtime (Arcanist members only): modal, e2b, or sailbox").option("--wait", "Wait until the review is published, cancelled, or admission-rejected").option("--poll-interval <ms>", "Polling interval in milliseconds while waiting (default 10000)").addHelpText(
   "after",
   `
 Examples:
@@ -27469,6 +27513,7 @@ Examples:
   arcanist review https://github.com/org/repo/pull/123 --model gpt-5.5 --wait
   arcanist review https://github.com/org/repo/pull/123 --sandbox-runtime sailbox --wait
 
+--wait returns when the review is published, cancelled, or admission-rejected. The 30-minute timeout applies only while status is in_flight.
 Zeus reviews with a pinned Codex reviewer model. --model pins a different reviewer model
 instead (members only).
 Zeus review is currently available to Arcanist members only.
@@ -27603,7 +27648,8 @@ environments.command("status").description("Show repository environment setup st
   "after",
   `
 JSON:
-Returns {repository: {fullName, status, stage, nextAction, buildStatus?, failureReason?, secretRequest?, question?}}.
+Returns {repository: {fullName, status, stage, nextAction, command, buildStatus?, failureReason?, secretRequest?, question?}}.
+command is the CLI argv to run, or null when the next step is the web UI or Arcanist.
 The stable status values are not_started, pending, running, escalated, succeeded, failed, and ready.
 `
 ).action((repo, options, command) => environmentStatusCommand(repo, options, command));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tryarcanist/cli",
-  "version": "0.1.343",
+  "version": "0.1.345",
   "description": "Command-line interface for Arcanist: inspect sessions, prepare Zeus environments, and trigger reviews",
   "type": "module",
   "bin": {