Skip to content

fix(benchsdk-cli): per-command option allowlists + reliability table gaps - #564

Merged
dtice25 merged 2 commits into
masterfrom
devin/1793216040-reliability-cli-review-fixes
Oct 28, 2026
Merged

dtice25 merged 2 commits into
masterfrom
devin/1793216040-reliability-cli-review-fixes

Conversation

@dtice25

@dtice25 dtice25 commented Oct 28, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

Follow-up to #563 (merged before the fixes could be pushed): the three Devin Review findings on that PR.

  • Per-command option allowlists: parseSubcommandOptions(args, allowed?) rejects a flag the command doesn't understand. The option schema is global, so --from/--to/--bucket/--metrics/--breakdown were silently accepted — and ignored — on every subcommand; bench results --from printed unfiltered results.
  • --metrics/--breakdown now print: printReliability renders metric stats (p50/p95/p99 per participant) and per-key outcome breakdowns in the range view's table output.
  • Blank --source-org errors: --source-org ' ' previously trimmed to empty and fell back to the active org, where a shared slug could return another benchmark's reliability data.

Testing

  • npm run typecheck clean; benchsdk-cli 50/50 tests pass.
  • Verified via the built bench binary: results foo --from → Unknown option for this command; reliability foo --source-org ' ' → --source-org must name an organization slug.

Link to Devin session: https://app.devin.ai/sessions/fdf951a9b9184f11a6d65e3c5056e907
Open in Devin Desktop: https://app.devin.ai/desktop/session/fdf951a9b9184f11a6d65e3c5056e907?variant=devin
Requested by: @dtice25


Devin Review

…gaps

- parseSubcommandOptions takes an optional allowlist; every command now
  rejects flags it does not understand. Previously --from/--to/--bucket/
  --metrics/--breakdown were silently accepted (and ignored) everywhere,
  so e.g. 'bench results --from' printed unfiltered results.
- printReliability now renders the requested --metrics stats and
  --breakdown tables in the range view.
- A blank --source-org now errors instead of silently falling back to
  the active org, where a shared slug could return another benchmark's
  reliability data.

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@devin-ai-integration

Copy link
Copy Markdown
Contributor

I'll fix CI failures and address comments from users with write access. I'll skip comments containing "(aside)".

  • Disable automatic comment, CI, and merge conflict monitoring

@open-cla

open-cla Bot commented Oct 28, 2026

Copy link
Copy Markdown

Contributor License Agreement

All contributors are covered by a CLA.

@devin-ai-integration devin-ai-integration Bot left a comment •

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

✅ Devin resolved the finding on ad5ed92

Fixed by Devin (1)

  • Run details ignore accepted filters

View all findings in Devin Review

Devin Review

The runs subcommand union let --participant/--source-org/... parse on
'runs show', where handleRunsShow ignored them — a shared slug could
show another org's run silently. 'show' now rejects any option.

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
@dtice25
dtice25 merged commit 77fd1b6 into master Oct 28, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant