spexcode 0.5.5 → 0.5.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spexcode",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "type": "module",
   "description": "SpexCode — a spec-driven, self-developing dev tool. The `spex` CLI + spec server reads the .spec tree and its git history, and serves the dashboard.",
   "license": "MIT",

package/spec-cli/src/cli.ts

@@ -50,7 +50,7 @@ function flushExit(code = 0): Promise<never> {
 }
 const has = (name: string) => process.argv.includes(`--${name}`)
 // bare positionals after argv index `from`, skipping flags and their values (selectors for ls/watch).
-const VALUE_FLAGS = new Set(['--status', '--as', '--interval', '--propose', '--note', '--node', '--prompt', '--prompt-file', '--timeout', '--reason', '--out', '--password', '--tls-cert', '--tls-key', '--harness', '--launcher', '--harness-session', '--port', '--api', '--api-port', '--host', '--preset', '--limit', '--session', '--depth', '--focus', '--keys', '--allow-stop', '--allow-resume', '--ttl-ms', '--wait-ms'])
+const VALUE_FLAGS = new Set(['--status', '--as', '--interval', '--propose', '--note', '--node', '--prompt', '--prompt-file', '--timeout', '--reason', '--out', '--password', '--tls-cert', '--tls-key', '--harness', '--launcher', '--harness-session', '--port', '--api', '--api-port', '--host', '--preset', '--limit', '--session', '--depth', '--focus', '--keys', '--allow-stop', '--allow-resume', '--ttl-ms', '--wait-ms', '--adapter', '--thread', '--tmux', '--worktree', '--branch'])
 function positionals(from: number): string[] {
   const out: string[] = []
   for (let i = from; i < process.argv.length; i++) {
@@ -873,6 +873,23 @@ if (cmd === 'serve') {
       const closed = await c.clientClose(full)
       if (!closed) { console.error(`spex session close: no such session ${full} (record remains; no close was committed)`); process.exit(1) }
       console.log(`closed ${full}`)
+    } else if (sub === 'quarantine') {
+      rejectUnknownFlags('spex session quarantine', 4, ['adapter', 'thread', 'tmux', 'worktree', 'branch', 'restore', 'api', 'port'])
+      if (!id) { console.error('usage: spex session quarantine <ID> --adapter <harness> [--thread <native-id>] --tmux <session-id> --worktree <absent-path> --branch <absent-branch>') ; process.exit(2) }
+      if (has('restore')) {
+        // Quarantine addresses an unreadable row which selector resolution intentionally excludes. Both the
+        // move and its reverse therefore take the literal exact id, with the backend proving record state.
+        const restored = await c.clientRestoreQuarantine(id)
+        console.log(`restored quarantined record ${restored.id} from ${restored.bundle}`)
+      } else {
+        const adapter = flag('adapter'), tmux = flag('tmux'), worktree = flag('worktree'), branch = flag('branch')
+        if (!adapter || !tmux || !worktree || !branch) {
+          console.error('usage: spex session quarantine <ID> --adapter <harness> [--thread <native-id>] --tmux <session-id> --worktree <absent-path> --branch <absent-branch>')
+          process.exit(2)
+        }
+        const quarantined = await c.clientQuarantine(id, { adapter, thread: flag('thread') ?? null, tmux, worktree, branch })
+        console.log(`quarantined ${quarantined.id} -> ${quarantined.bundle}`)
+      }
     } else if (sub === 'send') {
       const full = await resolveSelectorOrExit(id)
       if (has('keys')) {

package/spec-cli/src/client.ts

@@ -276,6 +276,27 @@ export async function clientClose(id: string): Promise<boolean> {
   return !!(await r.json().catch(() => ({ ok: false })))?.ok
 }
 
+export async function clientQuarantine(
+  id: string,
+  witness: { adapter: string; thread: string | null; tmux: string; worktree: string; branch: string },
+): Promise<{ id: string; bundle: string; sha256: string; observedAt: string }> {
+  await guarded('session quarantine')
+  const r = await apiFetch(`/api/sessions/${seg(id)}/quarantine`, post(witness))
+  if (!r.ok) throw new BackendError(`backend refused to quarantine ${id}: ${await r.text()}`, r.status)
+  const body = await r.json() as { ok?: boolean; id?: string; bundle?: string; sha256?: string; observedAt?: string }
+  if (!body.ok || !body.id || !body.bundle || !body.sha256 || !body.observedAt) throw new BackendError(`backend returned an invalid quarantine result for ${id}`, r.status)
+  return { id: body.id, bundle: body.bundle, sha256: body.sha256, observedAt: body.observedAt }
+}
+
+export async function clientRestoreQuarantine(id: string): Promise<{ id: string; bundle: string; sha256: string; observedAt: string }> {
+  await guarded('session quarantine')
+  const r = await apiFetch(`/api/sessions/${seg(id)}/quarantine/restore`, post({}))
+  if (!r.ok) throw new BackendError(`backend refused to restore ${id}: ${await r.text()}`, r.status)
+  const body = await r.json() as { ok?: boolean; id?: string; bundle?: string; sha256?: string; observedAt?: string }
+  if (!body.ok || !body.id || !body.bundle || !body.sha256 || !body.observedAt) throw new BackendError(`backend returned an invalid quarantine restore for ${id}`, r.status)
+  return { id: body.id, bundle: body.bundle, sha256: body.sha256, observedAt: body.observedAt }
+}
+
 // POST /api/sessions/:id/archive — cold-archive the session ([[archive]]). The legacy on=false spelling is a
 // signpost to the same resume transition; it never performs a record-only unarchive.
 export async function clientArchive(id: string, on = true): Promise<boolean> {