simulo 0.26.0__tar.gz → 0.28.0__tar.gz

{simulo-0.26.0/src/simulo.egg-info → simulo-0.28.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: simulo
-Version: 0.26.0
+Version: 0.28.0
 Summary: Simulo SDK and CLI — define robotics simulation and training apps in Python and run them on the Simulo cloud.
 Author-email: Simulo Team <team@simulo.ai>
 License: BSD-3-Clause
@@ -15,7 +15,7 @@ Classifier: Programming Language :: Python :: 3.12
 Classifier: Typing :: Typed
 Requires-Python: >=3.11
 Description-Content-Type: text/markdown
-Requires-Dist: simulo-interfaces<0.20,>=0.19.0
+Requires-Dist: simulo-interfaces<0.21,>=0.20.0
 Requires-Dist: mcap<2,>=1.3
 Requires-Dist: defusedxml>=0.7.1
 Requires-Dist: usd-core<27,>=26.5
@@ -75,6 +75,19 @@ To download a curated collection of runnable projects, use `simulo install sampl
 It creates `./simulo-samples` as a normal Git clone, so `cd simulo-samples` and
 `cat README.md` open the sample index.
 
+Choose a destination with `--directory` and a Git branch, tag, or commit with
+`--ref`. You can use either option on its own or combine them:
+
+```bash
+simulo install samples --directory robotics-examples --ref main
+cd robotics-examples
+```
+
+The destination must not exist, and its parent directory must already exist.
+The directory appears only after the clone and requested checkout succeed.
+Use a tag or full commit ID instead of `main` to select a fixed revision.
+With `--ref`, the checkout is detached at the selected commit.
+
 ### Or write an app by hand
 
 ```python

{simulo-0.26.0 → simulo-0.28.0}/PYPI.md

@@ -35,6 +35,19 @@ To download a curated collection of runnable projects, use `simulo install sampl
 It creates `./simulo-samples` as a normal Git clone, so `cd simulo-samples` and
 `cat README.md` open the sample index.
 
+Choose a destination with `--directory` and a Git branch, tag, or commit with
+`--ref`. You can use either option on its own or combine them:
+
+```bash
+simulo install samples --directory robotics-examples --ref main
+cd robotics-examples
+```
+
+The destination must not exist, and its parent directory must already exist.
+The directory appears only after the clone and requested checkout succeed.
+Use a tag or full commit ID instead of `main` to select a fixed revision.
+With `--ref`, the checkout is detached at the selected commit.
+
 ### Or write an app by hand
 
 ```python

{simulo-0.26.0 → simulo-0.28.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "simulo"
-version = "0.26.0"
+version = "0.28.0"
 description = "Simulo SDK and CLI — define robotics simulation and training apps in Python and run them on the Simulo cloud."
 readme = "PYPI.md"
 requires-python = ">=3.11"
@@ -26,7 +26,7 @@ classifiers = [
 # mcap: used by `simulo recordings` to read back a downloaded recording and
 # verify it (message count) — MIT-licensed, deps only lz4+zstandard.
 dependencies = [
-    "simulo-interfaces>=0.19.0,<0.20",
+    "simulo-interfaces>=0.20.0,<0.21",
     "mcap>=1.3,<2",
     # Hardened XML parsing for URDF ingestion (USD Asset Catalogs, PR-12 fix
     # loop 2, security NIT): stdlib xml.etree.ElementTree relies on

{simulo-0.26.0 → simulo-0.28.0}/src/simulo/_client/_runner.py

@@ -27,14 +27,26 @@ from typing import Any, NoReturn, Optional
 
 from simulo.interfaces.ids import JobId, JobPublicId
 from simulo.interfaces.platform.enums import JobStatus
-from simulo.interfaces.platform.runs import JOB_SCOPE_MINE, TERMINAL_JOB_STATUSES
+from simulo.interfaces.platform.runs import JOB_SCOPE_MINE
 
 #: Poll cadence for cloud ``.get()``. Module-level so tests can shrink it.
 _POLL_INTERVAL_S = 1.0
 
-_TERMINAL_STATUS_STRINGS = frozenset(str(status) for status in TERMINAL_JOB_STATUSES)
 _COMPLETED_STATUS = str(JobStatus.COMPLETED)
 
+#: The tolerant-client check (`M55-org-runtime-policy`, issue #1537):
+#: EVERY status this client can observe outside these two live values is
+#: terminal, whether or not it is one this client's own ``JobStatus`` happens
+#: to know by name. Membership is checked as "not one of the known LIVE
+#: values", never "is one of the known TERMINAL values" — a closed terminal
+#: set silently treats a FUTURE value it has never heard of as still-live
+#: and polls forever (:class:`JobTimeoutError` only fires when the caller
+#: passed a ``timeout``; with none, :meth:`JobHandle._get_cloud` hangs).
+#: Mirrors the existing precedent for an unrecognized ``kind``
+#: (``simulo.interfaces.platform.submit``): a value outside the known set is
+#: treated as data to render, never as grounds to keep waiting on it.
+_LIVE_STATUS_STRINGS = frozenset({str(JobStatus.QUEUED), str(JobStatus.RUNNING)})
+
 
 class JobFailedError(RuntimeError):
     """A cloud job reached a terminal ``failed``/``cancelled`` status.
@@ -154,7 +166,7 @@ class JobHandle:
         while True:
             record = client.get_job(str(self._job_id), scope=JOB_SCOPE_MINE)
             status = str(record.get("status"))
-            if status in _TERMINAL_STATUS_STRINGS:
+            if status not in _LIVE_STATUS_STRINGS:
                 if status == _COMPLETED_STATUS:
                     return client.get_result(str(self._job_id), scope=JOB_SCOPE_MINE)
                 exit_code = record.get("exit_code")

{simulo-0.26.0 → simulo-0.28.0}/src/simulo/_client/app.py

@@ -514,6 +514,26 @@ def _spawn_cloud(
     # already lives there, keyed by this same `job_name`.
     job_entry = manifest.get("jobs", {}).get(job_name) or {}
     system = (job_entry.get("resources") or {}).get("system")
+    # The job's own manifest-declared `timeout` (`M55-org-runtime-policy`,
+    # issue #1537) — already validated at `@app.job(timeout=...)` decoration
+    # time and recorded on THIS job's own manifest entry, exactly like
+    # `system` just above. Forwarded explicitly to `create_job` because the
+    # control plane never parses the uploaded manifest archive itself (see
+    # `JobSubmitRequest.manifest_timeout_s`'s own docstring).
+    manifest_timeout_s = job_entry.get("timeout")
+    if manifest_timeout_s is not None and (
+        isinstance(manifest_timeout_s, bool) or not isinstance(manifest_timeout_s, int)
+    ):
+        # This manifest was just written by THIS process (see the comment on
+        # `Manifest.from_json` re-parsing above) — a non-integer `timeout`
+        # here would mean `@app.job`'s own decoration-time validation
+        # somehow let one through, not an untrusted value to degrade
+        # silently on. Fail loudly rather than send a malformed wire field.
+        raise RuntimeError(
+            f"Package at {package_path} has a non-integer jobs[{job_name!r}].timeout "
+            f"({manifest_timeout_s!r}) in its manifest — this should be impossible; "
+            "please report this as a bug."
+        )
 
     tar_path = ensure_tar(package_path)
     archive_bytes = tar_path.read_bytes()
@@ -568,6 +588,7 @@ def _spawn_cloud(
         assets=asset_pins,
         app_name=app_name,
         system=system,
+        timeout_s=manifest_timeout_s,
     )
 
     raw_public_id = record.get("public_id")
@@ -590,9 +611,24 @@ def _spawn_cloud(
         # the ref resolved to the intended source job. Seed provenance still
         # carries machine UUIDs only, so keep this confirmation neutral rather
         # than leaking a UUID while that response contract catches up.
+        #
+        # `seed["name"]`/`seed["kind"]` are server-supplied text: a
+        # compromised control plane — or a user pointed at an attacker-run
+        # `SIMULO_API_URL` — could embed ANSI/OSC sequences here, so both
+        # route through the same module `cli.py`'s own sanitizers are built
+        # on (`preflight_render`) rather than a second one.
+        # `sanitize_server_text` alone is NOT enough here (cross-vendor
+        # review): it deliberately preserves TAB/LF for its usual
+        # multi-line preflight-finding callers, but this confirmation is a
+        # single line — an unstripped LF would forge an extra line this
+        # code never printed. `_single_line` collapses it instead.
+        from simulo._client.preflight_render import sanitize_server_text_single_line
+
         seed = record.get("seed") or {}
+        seed_name = sanitize_server_text_single_line(str(seed.get("name")))
+        seed_kind = sanitize_server_text_single_line(str(seed.get("kind")))
         print(
-            f"Continuing from selected job ({seed.get('name')}, {seed.get('kind')} checkpoint)",
+            f"Continuing from selected job ({seed_name}, {seed_kind} checkpoint)",
             file=sys.stderr,
         )
 

{simulo-0.26.0 → simulo-0.28.0}/src/simulo/_client/asset_api.py

@@ -296,6 +296,7 @@ class AssetApiClient:
                 api_base_url=self._base_url,
                 timeout=_ARCHIVE_DOWNLOAD_TIMEOUT_S,
                 unavailable_hint=_UNAVAILABLE_HINT,
+                validate_download_url=True,
             )
         except http.HttpError as exc:
             raise _translate(exc) from exc

{simulo-0.26.0 → simulo-0.28.0}/src/simulo/_client/bundle.py

@@ -20,7 +20,7 @@ from pathlib import Path
 from typing import TYPE_CHECKING, Any, Optional, Sequence
 
 from simulo._client.asset import Asset
-from simulo._client.packaging import canonical_args, package, read_bundle_package_id
+from simulo._client.packaging import assert_credentials_outside_project, canonical_args, package, read_bundle_package_id
 from simulo._client.volume import Volume
 from simulo.interfaces.platform import is_platform_pinned
 from simulo.interfaces.platform.manifest import Manifest
@@ -222,6 +222,7 @@ def ensure_bundle(
     (deterministically restoring the correct content for this exact
     submission), never served as a silently wrong package.
     """
+    assert_credentials_outside_project(project_root)
     extra_asset_uris = tuple(sorted({asset.uri for asset in extra_assets}))
     cache_key = (id(app), job_name, canonical_args(args), extra_asset_uris)
     cached = _BUNDLE_CACHE.get(cache_key)