runcloud 0.1.123 → 0.1.124

package/dist/commands/run-cloud.js

@@ -853,6 +853,7 @@ async function pushAsset(path, opts = {}) {
     const api = client();
     const prepared = await api.post('/run-cloud/assets/uploads', {
         filename: name,
+        ...(opts.orgId ? { orgId: opts.orgId } : {}),
         ...(opts.name ? { name: opts.name } : {}),
         contentType: blob.type || 'application/octet-stream',
         byteSize: blob.size,
@@ -886,6 +887,7 @@ async function createSimulatorSession(platform, opts) {
             .filter((id) => typeof id === 'string' && id.length > 0),
     ];
     return await client().post(`/run-cloud/${platform}`, {
+        ...(opts.orgId ? { orgId: opts.orgId } : {}),
         model: opts.model,
         region: opts.region,
         displayName: opts.displayName,
@@ -965,6 +967,7 @@ function registerSimulatorCommands(program, platform) {
         .option('--model <model>', platform === 'ios' ? 'simulator model' : 'emulator model', platform === 'ios' ? 'iphone' : 'pixel')
         .option('--region <region>', 'fleet region')
         .option('--display-name <name>', 'human-readable name')
+        .option('--org-id <id>', 'organization to own the session')
         .option('--label <key=value>', 'label to attach to the session', (v, p) => [...p, v], [])
         .option('--install <file>', 'local app artifact to upload and install', (v, p) => [...p, v], [])
         .option('--install-asset <name-or-id>', 'previously uploaded asset to install', (v, p) => [...p, v], [])
@@ -1416,6 +1419,7 @@ export function registerRunCloud(program) {
         .description('Upload an app asset for simulator installation')
         .argument('<file>')
         .option('-n, --name <name>', 'asset name')
+        .option('--org-id <id>', 'organization to own the Asset')
         .option('--json', 'output JSON', false)
         .action((file, opts) => action(async () => {
         print(await pushAsset(file, opts), opts);
@@ -1423,9 +1427,11 @@ export function registerRunCloud(program) {
     asset
         .command('list')
         .description('List uploaded assets')
+        .option('--org-id <id>', 'organization ID')
         .option('--json', 'output JSON', false)
         .action((opts) => action(async () => {
-        print(await client().get('/run-cloud/assets'), opts);
+        const query = opts.orgId ? `?orgId=${encodeURIComponent(opts.orgId)}` : '';
+        print(await client().get(`/run-cloud/assets${query}`), opts);
     }));
     asset
         .command('pull')
@@ -1446,6 +1452,113 @@ export function registerRunCloud(program) {
         .action((id, opts) => action(async () => {
         print(await client().delete(`/run-cloud/assets/${encodeURIComponent(id)}`), opts);
     }));
+    const capability = program
+        .command('capability')
+        .alias('capabilities')
+        .description('Mint, inspect, and revoke short-lived resource capabilities');
+    capability
+        .command('create')
+        .description('Mint a bearer token bound to explicit org resources')
+        .requiredOption('--scope <scope>', 'asset.read, mobile.launch, xcode.build.create, or xcode.build.read; repeatable', (value, previous) => [...previous, value], [])
+        .option('--asset <id>', 'allowed Asset ID; repeatable', (value, previous) => [...previous, value], [])
+        .option('--build <id>', 'allowed Xcode build ID; repeatable', (value, previous) => [...previous, value], [])
+        .option('--idempotency-key <key>', 'allowed build or launch idempotency key; repeatable', (value, previous) => [...previous, value], [])
+        .option('--org-id <id>', 'organization ID')
+        .option('--name <name>', 'human-readable capability name')
+        .option('--expires-in <seconds>', 'lifetime from 60 to 3600 seconds', '900')
+        .option('--json', 'output JSON, including the one-time token', false)
+        .action((opts) => action(async () => {
+        const expiresInSeconds = Number(opts.expiresIn);
+        if (!Number.isInteger(expiresInSeconds) || expiresInSeconds < 60 || expiresInSeconds > 3600) {
+            throw new Error('--expires-in must be an integer from 60 to 3600');
+        }
+        const resources = {
+            ...(opts.asset?.length ? { assetIds: opts.asset } : {}),
+            ...(opts.build?.length ? { buildIds: opts.build } : {}),
+            ...(opts.idempotencyKey?.length ? { idempotencyKeys: opts.idempotencyKey } : {}),
+        };
+        if (Object.keys(resources).length === 0) {
+            throw new Error('Provide at least one --asset, --build, or --idempotency-key resource');
+        }
+        print(await client().post('/run-cloud/capabilities', {
+            scopes: opts.scope,
+            resources,
+            expiresInSeconds,
+            ...(opts.orgId ? { orgId: opts.orgId } : {}),
+            ...(opts.name ? { name: opts.name } : {}),
+        }), opts);
+    }));
+    capability
+        .command('list')
+        .description('List capability metadata; secret token values are never returned')
+        .option('--org-id <id>', 'organization ID')
+        .option('--all', 'include expired and revoked capabilities', false)
+        .option('--json', 'output JSON', false)
+        .action((opts) => action(async () => {
+        const query = new URLSearchParams();
+        if (opts.orgId)
+            query.set('orgId', opts.orgId);
+        if (opts.all)
+            query.set('active', '0');
+        print(await client().get(`/run-cloud/capabilities${query.size ? `?${query}` : ''}`), opts);
+    }));
+    capability
+        .command('revoke')
+        .description('Revoke a capability immediately')
+        .argument('<id>')
+        .option('--json', 'output JSON', false)
+        .action((id, opts) => action(async () => {
+        print(await client().delete(`/run-cloud/capabilities/${encodeURIComponent(id)}`), opts);
+    }));
+    const mobile = program
+        .command('mobile')
+        .description('Idempotently launch an Asset or Xcode build in a mobile session');
+    mobile
+        .command('launch')
+        .description('Create one session and install one reusable output')
+        .option('--asset <id>', 'Asset ID to install')
+        .option('--build <id>', 'successful Xcode simulator build to install')
+        .requiredOption('--idempotency-key <key>', 'stable retry key owned by this launch intent')
+        .option('--platform <ios|android>', 'mobile platform', 'ios')
+        .option('--org-id <id>', 'organization ID')
+        .option('--model <model>', 'simulator or emulator model')
+        .option('--region <region>', 'fleet region')
+        .option('--display-name <name>', 'human-readable session name')
+        .option('--label <key=value>', 'session tag; repeatable', (value, previous) => [...previous, value], [])
+        .option('--inactivity-timeout <duration>', 'idle timeout such as 60s, 3m, or none')
+        .option('--hard-timeout <duration>', 'maximum lifetime such as 10m or 1h')
+        .option('--codec <auto|mjpeg|webrtc>', 'viewer codec', 'auto')
+        .option('--json', 'output JSON', false)
+        .action((opts) => action(async () => {
+        if (Boolean(opts.asset) === Boolean(opts.build)) {
+            throw new Error('Provide exactly one of --asset or --build');
+        }
+        if (opts.platform !== 'ios' && opts.platform !== 'android') {
+            throw new Error('--platform must be ios or android');
+        }
+        print(await client().postWithHeaders('/run-cloud/mobile/launch', {
+            ...(opts.asset ? { assetId: opts.asset } : { buildId: opts.build }),
+            platform: opts.platform,
+            ...(opts.orgId ? { orgId: opts.orgId } : {}),
+            session: {
+                ...(opts.model ? { model: opts.model } : {}),
+                ...(opts.region ? { region: opts.region } : {}),
+                ...(opts.displayName ? { displayName: opts.displayName } : {}),
+                tags: parseTags(opts.label),
+                ...(opts.inactivityTimeout ? { inactivityTimeout: opts.inactivityTimeout } : {}),
+                ...(opts.hardTimeout ? { hardTimeout: opts.hardTimeout } : {}),
+                ...(opts.codec ? { codec: opts.codec } : {}),
+            },
+        }, { 'Idempotency-Key': opts.idempotencyKey }), opts);
+    }));
+    mobile
+        .command('get')
+        .description('Read one mobile launch operation and its session or failure')
+        .argument('<id>')
+        .option('--json', 'output JSON', false)
+        .action((id, opts) => action(async () => {
+        print(await client().get(`/run-cloud/mobile/launches/${encodeURIComponent(id)}`), opts);
+    }));
     const skills = program.command('skills').description('Install run.cloud skills for AI coding agents');
     skills
         .command('install')

package/dist/commands/xcode.js

@@ -309,20 +309,22 @@ export async function requestFor(flags) {
         timeoutSeconds,
     };
 }
-async function logChunk(client, id, offset) {
-    return await retryXcodeRequest(async () => await client.get(`/run-cloud/xcode/builds/${encodeURIComponent(id)}/logs?offset=${offset}`));
+async function logChunk(client, id, offset, source) {
+    return await retryXcodeRequest(async () => await client.get(`/run-cloud/xcode/builds/${encodeURIComponent(id)}/logs?offset=${offset}${source ? `&source=${source}` : ''}`));
 }
 async function waitForBuild(client, id, flags) {
     const timeout = integerFlag(flags.waitTimeout, '--wait-timeout', 1, 23400, 22500);
     const deadline = Date.now() + timeout * 1000;
     let offset = 0;
+    let source;
     for (;;) {
         const build = await retryXcodeRequest(async () => await client.get(`/run-cloud/xcode/builds/${encodeURIComponent(id)}`));
         if (build.logs.available || build.status === 'queued' || build.status === 'running') {
-            const chunk = await logChunk(client, id, offset);
+            const chunk = await logChunk(client, id, offset, source);
             if (chunk.text)
                 (flags.json ? process.stderr : process.stdout).write(chunk.text);
             offset = chunk.nextOffset;
+            source = chunk.source ?? source;
             if (TERMINAL.has(build.status) && chunk.complete)
                 return build;
         }
@@ -369,7 +371,7 @@ export function registerXcode(program) {
         .option('--provisioning-profile <path>', 'provisioning profile; repeatable', repeated, [])
         .option('--signing-method <method>', 'app-store-connect, release-testing, or debugging')
         .option('--team-id <id>', 'Apple Developer team ID for cloud signing')
-        .option('--upload <filename>', 'filename for the retained run.cloud artifact')
+        .option('--upload <filename>', 'public filename for the retained run.cloud artifact')
         .option('--signed-upload-url <url>', 'also PUT the artifact to this presigned HTTPS URL')
         .option('--upload-to-appstore', 'upload the signed IPA to App Store Connect', false)
         .option('--asc-key-id <id>', 'App Store Connect API key ID')
@@ -425,6 +427,64 @@ export function registerXcode(program) {
             throw new Error(`${reason}\n${next}\nBuild ID: ${build.id}`);
         }
     }));
+    xcode
+        .command('rebundle')
+        .description('Reuse a compatible React Native native shell and replace only its JavaScript bundle')
+        .argument('[path]', 'local Expo or React Native source directory', '.')
+        .requiredOption('--basis-build <id>', 'successful simulator build providing the native shell')
+        .option('--expo-app-dir <path>', 'relative Expo app directory in a monorepo')
+        .option('--ignore <regex>', 'exclude source paths matching a regular expression; repeatable', repeated, [])
+        .option('--include <regex>', 'force-include matching source paths; repeatable', repeated, [])
+        .option('--additional-file <local=remote>', 'include an extra file; repeatable', repeated, [])
+        .option('--org-id <id>', 'organization to own the build')
+        .option('--idempotency-key <key>', 'stable key for retry-safe submission')
+        .option('--timeout-seconds <seconds>', 'remote bundle timeout, max 21600', '3600')
+        .option('--wait-timeout <seconds>', 'client wait timeout, max 23400', '22500')
+        .option('--no-wait', 'return after the control plane accepts the build')
+        .option('--detach', 'alias for --no-wait; terminal state remains queryable', false)
+        .option('-o, --output <path>', 'download the rebundled app here after success')
+        .option('--force', 'overwrite --output if it exists', false)
+        .option('--json', 'print the build record as JSON; streamed logs go to stderr', false)
+        .action((sourcePath, flags) => action(async () => {
+        if (!/^xcb_[A-Za-z0-9]+$/.test(flags.basisBuild)) {
+            throw new Error('--basis-build must be a run.cloud Xcode build ID');
+        }
+        const request = await requestFor({
+            ...flags,
+            sdk: 'iphonesimulator',
+            configuration: 'Release',
+        });
+        request.reactNative = { ...(flags.expoAppDir ? { expoAppDir: flags.expoAppDir } : {}) };
+        request.reuse = { basisBuildId: flags.basisBuild };
+        const source = await packSource(sourcePath, flags);
+        const archiveBuffer = new ArrayBuffer(source.body.byteLength);
+        new Uint8Array(archiveBuffer).set(source.body);
+        const form = new FormData();
+        form.append('request', JSON.stringify(request));
+        form.append('source', new Blob([archiveBuffer], { type: 'application/gzip' }), source.filename);
+        const client = api();
+        const idempotencyKey = flags.idempotencyKey ?? `xcode_rebundle_${randomUUID()}`;
+        let build = await retryXcodeRequest(async () => await client.uploadForm('/run-cloud/xcode/builds', form, { 'Idempotency-Key': idempotencyKey }));
+        if (flags.detach || flags.wait === false) {
+            print(build, flags.json);
+            return;
+        }
+        if (!flags.json)
+            console.error(`Rebundle ${build.id} accepted; streaming remote logs.`);
+        build = await waitForBuild(client, build.id, flags);
+        const artifactPath = flags.output && build.artifact.available
+            ? await downloadArtifact(client, build, flags.output, flags.force)
+            : undefined;
+        if (flags.json)
+            print({ ...build, ...(artifactPath ? { artifactPath } : {}) }, true);
+        else if (build.status === 'succeeded') {
+            console.log(`Rebundle ${build.id} succeeded.`);
+            console.log(artifactPath ? `Artifact: ${artifactPath}` : `Asset: ${build.artifact.assetId}`);
+        }
+        if (build.status !== 'succeeded') {
+            throw new Error(`${build.failure?.reason ?? `Rebundle ended with ${build.status}`}\n${build.failure?.action ?? `Inspect logs with runcloud xcode logs ${build.id}`}\nBuild ID: ${build.id}`);
+        }
+    }));
     xcode
         .command('get')
         .description('Show product-visible Xcode build state')
@@ -447,6 +507,30 @@ export function registerXcode(program) {
         const result = await retryXcodeRequest(async () => await api().get(`/run-cloud/xcode/builds?${query}`));
         print(flags.json ? result : result.items, flags.json);
     }));
+    xcode
+        .command('events')
+        .description('Read ordered replayable Xcode build events after a durable cursor')
+        .option('--org-id <id>', 'organization ID')
+        .option('--build-id <id>', 'filter to one build')
+        .option('--after <cursor>', 'last processed event sequence', '0')
+        .option('--limit <count>', 'maximum events, 1 to 500', '100')
+        .option('--json', 'print the page, including nextCursor, as JSON', false)
+        .action((flags) => action(async () => {
+        const after = integerFlag(flags.after, '--after', 0, Number.MAX_SAFE_INTEGER, 0);
+        const limit = integerFlag(flags.limit, '--limit', 1, 500, 100);
+        const query = new URLSearchParams({ after: String(after), limit: String(limit) });
+        if (flags.orgId)
+            query.set('orgId', flags.orgId);
+        if (flags.buildId)
+            query.set('buildId', flags.buildId);
+        const page = await retryXcodeRequest(async () => await api().get(`/run-cloud/xcode/events?${query}`));
+        if (flags.json)
+            print(page, true);
+        else {
+            print(page.items);
+            console.error(`nextCursor: ${page.nextCursor}`);
+        }
+    }));
     xcode
         .command('logs')
         .description('Read the sanitized live or retained Xcode build log')
@@ -456,13 +540,15 @@ export function registerXcode(program) {
         .action((id, flags) => action(async () => {
         const client = api();
         let offset = 0;
+        let source;
         for (;;) {
-            const chunk = await logChunk(client, id, offset);
+            const chunk = await logChunk(client, id, offset, source);
             if (flags.json)
                 console.log(JSON.stringify(chunk));
             else if (chunk.text)
                 process.stdout.write(chunk.text);
             offset = chunk.nextOffset;
+            source = chunk.source ?? source;
             if (!flags.follow || chunk.complete)
                 return;
             await new Promise((resolvePromise) => setTimeout(resolvePromise, 1000));

package/dist/version.js

@@ -1 +1 @@
-export const CLI_VERSION = '0.1.123';
+export const CLI_VERSION = '0.1.124';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "runcloud",
-  "version": "0.1.123",
+  "version": "0.1.124",
   "description": "Create and control run.cloud remote mobile simulators and cloud sandboxes",
   "license": "Apache-2.0",
   "keywords": [