sentinelayer-cli 0.10.1 → 0.11.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sentinelayer-cli",
-  "version": "0.10.1",
+  "version": "0.11.0",
   "description": "Scaffold Sentinelayer spec/prompt/guide artifacts with secure browser auth and token bootstrap.",
   "type": "module",
   "scripts": {

package/src/commands/session.js

@@ -2474,7 +2474,8 @@ export function registerSessionCommand(program) {
         const remote = await listSessionsFromApi({
           targetPath,
           includeArchived,
-          limit,
+          limit: emitJson ? 200 : limit,
+          fetchAll: emitJson,
         });
         const trimmed = emitJson ? remote.sessions : remote.sessions.slice(0, limit);
         const payload = {
@@ -2485,6 +2486,8 @@ export function registerSessionCommand(program) {
           ok: remote.ok,
           reason: remote.reason || "",
           count: remote.count,
+          nextCursor: remote.nextCursor || null,
+          hasMore: Boolean(remote.hasMore),
           sessions: trimmed,
         };
         if (emitJson) {
@@ -2519,10 +2522,12 @@ export function registerSessionCommand(program) {
             `${item.sessionId} status=${item.status}${archive} created=${created}${lastActivity}`,
           );
         }
-        if (remote.count > trimmed.length) {
+        if (remote.count > trimmed.length || remote.hasMore) {
           console.log(
             pc.gray(
-              `… ${remote.count - trimmed.length} more (raise --limit or use --json).`,
+              remote.hasMore
+                ? "… more sessions are available (raise --limit or use --json)."
+                : `… ${remote.count - trimmed.length} more (raise --limit or use --json).`,
             ),
           );
         }

package/src/legacy-cli.js

@@ -2316,7 +2316,7 @@ jobs:
           fi
       - name: Run Omar Gate
         id: omar
-        uses: mrrCarter/sentinelayer-v1-action@b13504565105b2496c5b1dbb7a3e9bf914c2a9f8
+        uses: mrrCarter/sentinelayer-v1-action@4cb3063e04e3b899981b25f6918b26f70d35a8d4
         with:
           sentinelayer_token: \${{ secrets.${normalizedSecret} }}${specIdBindingLine}
           scan_mode: \${{ github.event_name == 'workflow_dispatch' && inputs.scan_mode || 'deep' }}

package/src/scan/generator.js

@@ -2,7 +2,7 @@ import YAML from "yaml";
 
 export const DEFAULT_SCAN_WORKFLOW_PATH = ".github/workflows/omar-gate.yml";
 export const DEFAULT_SCAN_SECRET_NAME = "SENTINELAYER_TOKEN";
-export const SENTINELAYER_ACTION_REF = "mrrCarter/sentinelayer-v1-action@b13504565105b2496c5b1dbb7a3e9bf914c2a9f8";
+export const SENTINELAYER_ACTION_REF = "mrrCarter/sentinelayer-v1-action@4cb3063e04e3b899981b25f6918b26f70d35a8d4";
 export const SUPPORTED_E2E_HINTS = Object.freeze(["auto", "yes", "no"]);
 export const SUPPORTED_PLAYWRIGHT_MODES = Object.freeze(["auto", "off", "baseline", "audit"]);
 

package/src/session/sync.js

@@ -1243,21 +1243,27 @@ export async function pollSessionEventsBefore(
  *
  * Mirrors the failure shape of `pollHumanMessages` so callers can render
  * a single error path: `{ ok, reason, sessions, count }`. Sessions are
- * returned in API order (newest-first per the server's contract); the
+ * returned in API order (most-recently-active first per the server's contract); the
  * caller is responsible for any further sort or filter.
  *
  * @param {object} [options]
  * @param {string} [options.targetPath]
  * @param {boolean} [options.includeArchived]
  * @param {number} [options.limit]
+ * @param {string|null} [options.cursor]
+ * @param {boolean} [options.fetchAll]
+ * @param {number} [options.maxPages]
  * @param {Function} [options.resolveAuthSession]
  * @param {Function} [options.fetchImpl]
- * @returns {Promise<{ok: boolean, reason: string, sessions: Array<object>, count: number}>}
+ * @returns {Promise<{ok: boolean, reason: string, sessions: Array<object>, count: number, nextCursor: string|null, hasMore: boolean}>}
  */
 export async function listSessionsFromApi({
   targetPath = process.cwd(),
   includeArchived = false,
   limit = 50,
+  cursor = null,
+  fetchAll = false,
+  maxPages = 50,
   resolveAuthSession = resolveActiveAuthSession,
   fetchImpl = fetchWithTimeout,
   timeoutMs = DEFAULT_SYNC_TIMEOUT_MS,
@@ -1270,52 +1276,93 @@ export async function listSessionsFromApi({
       autoRotate: false,
     });
   } catch {
-    return { ok: false, reason: "no_session", sessions: [], count: 0 };
-  }
-  if (!session || !session.token) {
-    return { ok: false, reason: "not_authenticated", sessions: [], count: 0 };
-  }
-
-  const apiBaseUrl = resolveApiBaseUrl(session);
-  const query = new URLSearchParams();
-  if (includeArchived) query.set("include_archived", "true");
-  const normalizedLimit = Math.max(1, Math.min(200, normalizePositiveInteger(limit, 50)));
-  query.set("limit", String(normalizedLimit));
-  const endpoint = `${apiBaseUrl}/api/v1/sessions?${query.toString()}`;
-
-  let response;
-  try {
-    response = await fetchImpl(
-      endpoint,
-      {
-        method: "GET",
-        headers: { Authorization: `Bearer ${session.token}` },
-      },
-      normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
-    );
-  } catch (err) {
     return {
       ok: false,
-      reason: normalizeString(err?.message) || "list_failed",
+      reason: "no_session",
       sessions: [],
       count: 0,
+      nextCursor: null,
+      hasMore: false,
     };
   }
-  if (!response || !response.ok) {
+  if (!session || !session.token) {
     return {
       ok: false,
-      reason: `api_${response ? response.status : "no_response"}`,
+      reason: "not_authenticated",
       sessions: [],
       count: 0,
+      nextCursor: null,
+      hasMore: false,
     };
   }
-  const payload = await response.json().catch(() => ({}));
-  const sessions = Array.isArray(payload?.sessions) ? payload.sessions : [];
+
+  const apiBaseUrl = resolveApiBaseUrl(session);
+  const normalizedLimit = Math.max(1, Math.min(200, normalizePositiveInteger(limit, 50)));
+  const normalizedMaxPages = Math.max(1, Math.min(100, normalizePositiveInteger(maxPages, 50)));
+  let nextCursor = normalizeString(cursor) || null;
+  let hasMore = false;
+  const sessions = [];
+  const seenSessionIds = new Set();
+  let count = 0;
+
+  for (let page = 0; page < normalizedMaxPages; page += 1) {
+    const query = new URLSearchParams();
+    if (includeArchived) query.set("include_archived", "true");
+    query.set("limit", String(normalizedLimit));
+    if (nextCursor) query.set("cursor", nextCursor);
+    const endpoint = `${apiBaseUrl}/api/v1/sessions?${query.toString()}`;
+
+    let response;
+    try {
+      response = await fetchImpl(
+        endpoint,
+        {
+          method: "GET",
+          headers: { Authorization: `Bearer ${session.token}` },
+        },
+        normalizePositiveInteger(timeoutMs, DEFAULT_SYNC_TIMEOUT_MS),
+      );
+    } catch (err) {
+      return {
+        ok: false,
+        reason: normalizeString(err?.message) || "list_failed",
+        sessions: [],
+        count: 0,
+        nextCursor: null,
+        hasMore: false,
+      };
+    }
+    if (!response || !response.ok) {
+      return {
+        ok: false,
+        reason: `api_${response ? response.status : "no_response"}`,
+        sessions: [],
+        count: 0,
+        nextCursor: null,
+        hasMore: false,
+      };
+    }
+    const payload = await response.json().catch(() => ({}));
+    const pageSessions = Array.isArray(payload?.sessions) ? payload.sessions : [];
+    for (const item of pageSessions) {
+      const sessionId = normalizeString(item?.sessionId || item?.id);
+      if (sessionId && seenSessionIds.has(sessionId)) continue;
+      if (sessionId) seenSessionIds.add(sessionId);
+      sessions.push(item);
+    }
+    count = sessions.length;
+    nextCursor = normalizeString(payload?.next_cursor || payload?.nextCursor);
+    hasMore = Boolean(payload?.has_more && nextCursor);
+    if (!fetchAll || !hasMore) break;
+  }
+
   return {
     ok: true,
     reason: "",
     sessions,
-    count: typeof payload?.count === "number" ? payload.count : sessions.length,
+    count,
+    nextCursor: nextCursor || null,
+    hasMore,
   };
 }