@repo-os/repoos 0.5.71 → 0.5.73

package/dist/.build-info.json

@@ -1,5 +1,5 @@
 {
-  "hash": "eacca03dfc8be35b1f9d1238a9ac18cbdaf50c0d39cab898568df9fc589d514a",
-  "version": "0.5.71",
+  "hash": "54182298d418b9bcc12c138af5d99c0470fb3a54a8a573775e600c2e37ab1669",
+  "version": "0.5.73",
   "devUi": false
 }

package/dist/.build-stamp.json

@@ -1,3 +1,3 @@
 {
-  "generatedAt": "2026-10-13T19:22:09.840Z"
+  "generatedAt": "2026-10-29T21:23:55.474Z"
 }

package/dist/cli/api-route-parity.js

@@ -7,11 +7,21 @@
  */
 const exact = (method, pattern) => (r) => r.method === method && r.pattern === pattern;
 const re = (method, patternSource) => (r) => r.method === method && r.pattern === patternSource;
+const under = (prefix) => (r) => r.pattern.startsWith(prefix) || r.pattern.replaceAll("\\/", "/").startsWith(`^${prefix}`);
 /** Routes implemented by the server-backed control CLI (#0723). */
 const CONTROL_API_MATCHERS = [
-    re("POST", /^\/api\/tasks\/([^/]+)\/(start|pause|message|done)$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/(send-back)$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/(start|pause|message|done|sync|hotfix|abandon|reopen|archive|unarchive|split|hold|unhold)$/
+        .source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/done\/cancel$/.source),
+    // `repoos attention dismiss <id>` dismisses the task's needs-input event.
+    re("POST", /^\/api\/tasks\/([^/]+)\/needs-input\/dismiss$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/review\/again$/.source),
+    re("GET", /^\/api\/tasks\/([^/]+)\/landable$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/preview$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/preview\/stop$/.source),
+    // `repoos shot` single-entry capture through the browser-capture policy (#0874).
+    re("POST", /^\/api\/tasks\/([^/]+)\/shots\/capture$/.source),
     // `repoos dev …` (#0747): list/status/get and start/stop/restart.
     exact("GET", "/api/dev/targets"),
     re("GET", /^\/api\/dev\/targets\/([^/]+)$/.source),
@@ -24,63 +34,90 @@ const CONTROL_API_MATCHERS = [
     exact("GET", "/api/stats/board"),
     exact("GET", "/api/driver/brief"),
     exact("GET", "/api/events"),
+    exact("GET", "/api/integration-jobs"),
+    exact("GET", "/api/integration/pipeline"),
+    re("POST", /^\/api\/integration\/pipeline\/retry\/([^/]+)$/.source),
+    re("POST", /^\/api\/integration\/pipeline\/refresh-install\/([^/]+)$/.source),
     exact("POST", "/api/cto/heartbeat"),
     // `repoos review` → PATCH status=review; `repoos override` → PATCH overrides
     re("PATCH", /^\/api\/tasks\/([^/]+)$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/bundle$/.source),
 ];
 /** Routes covered by existing file-level CLI commands (not HTTP). */
 const FILE_CLI_MATCHERS = [
+    // `repoos secrets …` — project environment metadata and writes (values never returned).
+    re("GET", /^\/api\/project-environments\/([^/]+)\/secrets$/.source),
+    re("PUT", /^\/api\/project-environments\/([^/]+)\/secrets$/.source),
+    exact("GET", "/api/project-environment-bindings"),
+    exact("PUT", "/api/project-environment-bindings"),
     exact("GET", "/api/health"),
     exact("GET", "/api/tasks"),
+    re("GET", /^\/api\/tasks\/([^/]+)\/context$/.source),
     re("GET", /^\/api\/tasks\/([^/]+)$/.source),
     exact("POST", "/api/tasks"),
     re("DELETE", /^\/api\/tasks\/([^/]+)$/.source),
     exact("GET", "/api/check-plan"),
+    // `repoos schedule …` (#0093): task schedule definitions under schedules/.
+    exact("GET", "/api/reminders"),
+    exact("POST", "/api/reminders"),
+    re("PATCH", /^\/api\/reminders\/([^/]+)$/.source),
+    re("DELETE", /^\/api\/reminders\/([^/]+)$/.source),
+    re("POST", /^\/api\/reminders\/([^/]+)\/done$/.source),
+    re("POST", /^\/api\/reminders\/([^/]+)\/snooze$/.source),
+    exact("GET", "/api/schedules"),
+    exact("POST", "/api/schedules"),
+    exact("POST", "/api/schedules/preview"),
+    re("PATCH", /^\/api\/schedules\/([^/]+)$/.source),
+    re("DELETE", /^\/api\/schedules\/([^/]+)$/.source),
+    re("POST", /^\/api\/schedules\/([^/]+)\/run$/.source),
 ];
 /** UI-only, SSE/hub, auth, or internal routes — no CLI required. */
 const UI_ONLY_MATCHERS = [
-    (r) => r.pattern.startsWith("/api/auth/"),
-    (r) => r.pattern.startsWith("/api/hub/"),
-    (r) => r.pattern.startsWith("/api/telegram/"),
+    under("/api/auth/"),
+    under("/api/hub/"),
+    under("/api/telegram/"),
     exact("GET", "/api/index"),
     exact("GET", "/api/board"),
     exact("GET", "/api/counts"),
     exact("GET", "/api/docs"),
-    (r) => r.pattern.startsWith("/api/repo/"),
-    (r) => r.pattern.startsWith("/api/inputs"),
-    (r) => r.pattern.startsWith("/api/skills"),
-    (r) => r.pattern.startsWith("/api/skill-registry"),
-    (r) => r.pattern.startsWith("/api/stories"),
+    under("/api/repo/"),
+    under("/api/inputs"),
+    under("/api/skills"),
+    under("/api/skill-registry"),
+    under("/api/stories"),
     exact("GET", "/api/system"),
     exact("GET", "/api/system/logs"),
-    (r) => r.pattern.startsWith("/api/support/"),
-    (r) => r.pattern.startsWith("/api/tunnel/"),
-    (r) => r.pattern.startsWith("/api/release"),
-    (r) => r.pattern.startsWith("/api/deployments"),
-    (r) => r.pattern.startsWith("/api/chat"),
-    (r) => r.pattern.startsWith("/api/debugger"),
+    under("/api/support/"),
+    under("/api/tunnel/"),
+    under("/api/release"),
+    under("/api/deployments"),
+    under("/api/chat"),
+    under("/api/debugger"),
     re("GET", /^\/api\/tasks\/([^/]+)\/debugger$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/message$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/interrupt$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/send-to-engineer$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/debugger\/send-to-pm$/.source),
     re("POST", /^\/api\/agents\/built-in\/([^/]+)\/run$/.source),
-    (r) => r.pattern.startsWith("/api/cto"),
+    under("/api/cto"),
     exact("GET", "/api/stats/by-type"),
     exact("GET", "/api/stats/daily"),
     exact("POST", "/api/system/kill-process"),
+    // Control page worktree cleanup preview and apply action.
+    exact("GET", "/api/system/worktree-gc"),
+    exact("POST", "/api/system/worktree-gc"),
     exact("GET", "/api/system/run-tests"),
     exact("POST", "/api/system/run-tests"),
     exact("GET", "/api/attention"),
     exact("GET", "/api/decisions"),
     exact("GET", "/api/check-runs"),
-    (r) => r.pattern.startsWith("/api/integration"),
+    exact("GET", "/api/local-check-slots"),
+    re("POST", /^\/api\/local-check-slots\/(\d+)\/release\/(\d+)$/.source),
+    exact("GET", "/api/resource-queues"),
     exact("GET", "/api/close-out/outcomes"),
     re("GET", /^\/api\/tasks\/([^/]+)\/integration-job$/.source),
-    re("POST", /^\/api\/tasks\/([^/]+)\/done\/cancel$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/worktree-handoff\/discard$/.source),
     re("GET", /^\/api\/tasks\/([^/]+)\/review$/.source),
-    re("POST", /^\/api\/tasks\/([^/]+)\/review\/again$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/review\/message$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/pm\/message$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/pm\/interrupt$/.source),
@@ -91,7 +128,7 @@ const UI_ONLY_MATCHERS = [
     re("GET", /^\/api\/tasks\/([^/]+)\/shots\/([^/]+)$/.source),
     re("DELETE", /^\/api\/tasks\/([^/]+)\/shots\/([^/]+)$/.source),
     re("GET", /^\/api\/tasks\/([^/]+)\/ui-verification$/.source),
-    re("POST", /^\/api\/tasks\/([^/]+)\/needs-input\/dismiss$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/verify$/.source),
     re("POST", /^\/api\/tasks\/([^/]+)\/clear-worktree$/.source),
     re("GET", /^\/api\/tasks\/([^/]+)\/output$/.source),
     re("GET", /^\/api\/tasks\/([^/]+)\/logs$/.source),
@@ -106,20 +143,30 @@ const UI_ONLY_MATCHERS = [
     re("GET", /^\/api\/tasks\/([^/]+)\/remote-validation\/events$/.source),
     exact("GET", "/api/config/raw"),
     exact("PUT", "/api/config/raw"),
-    (r) => r.pattern.startsWith("/api/dev/"),
-    (r) => r.pattern.startsWith("/api/models"),
-    (r) => r.pattern.startsWith("/api/playground"),
-    (r) => r.pattern.startsWith("/api/model-providers"),
+    under("/api/dev/"),
+    under("/api/models"),
+    under("/api/playground"),
+    under("/api/model-providers"),
+    exact("GET", "/api/model-routing/status"),
+    exact("GET", "/api/model-routing/decisions"),
+    exact("POST", "/api/model-routing/probe"),
+    // Secrets page: list safe environment labels and create an empty source; no CLI flow exists.
+    exact("GET", "/api/project-environments"),
+    exact("POST", "/api/project-environments"),
+    // Secrets page (#0953): open a registered environment source file in the
+    // administrator's configured editor. Browser-only by nature — it launches a
+    // GUI process on the machine running RepoOS, and the file is resolved from
+    // the registry, never from a client path.
+    re("POST", /^\/api\/project-environments\/([^/]+)\/open-in-editor$/.source),
     exact("GET", "/api/agents/queued"),
     exact("GET", "/api/agents/detect"),
     exact("GET", "/api/agents/detect/stream"),
     exact("POST", "/api/agents/updates"),
     re("GET", /^\/api\/agents\/([^/]+)\/logs$/.source),
-    (r) => r.pattern.startsWith("/api/ntfy/"),
+    under("/api/ntfy/"),
     exact("POST", "/api/transcribe"),
-    (r) => r.pattern.startsWith("/api/service/"),
+    under("/api/service/"),
     exact("POST", "/api/server/restart"),
-    re("POST", /^\/api\/tasks\/([^/]+)\/(sync|hotfix|abandon|reopen|archive|unarchive)$/.source),
     exact("POST", "/api/tasks/freeform"),
     exact("POST", "/api/docs/create"),
     exact("POST", "/api/docs/freeform"),
@@ -127,10 +174,15 @@ const UI_ONLY_MATCHERS = [
 ];
 const ALL_MATCHERS = [...CONTROL_API_MATCHERS, ...FILE_CLI_MATCHERS, ...UI_ONLY_MATCHERS];
 export function isApiRouteCovered(route) {
-    if (!route.pattern.startsWith("/api/"))
+    if (!isApiRoutePattern(route.pattern))
         return true;
     return ALL_MATCHERS.some((m) => m(route));
 }
+function isApiRoutePattern(pattern) {
+    // Router.listRoutes() stores RegExp routes as their `.source`, which begins
+    // with `^\\/api\\/` rather than the literal request path.
+    return pattern.startsWith("/api/") || pattern.replaceAll("\\/", "/").startsWith("^/api/");
+}
 export function uncoveredApiRoutes(routes) {
-    return routes.filter((r) => r.pattern.startsWith("/api/") && !isApiRouteCovered(r));
+    return routes.filter((r) => isApiRoutePattern(r.pattern) && !isApiRouteCovered(r));
 }

package/dist/cli/help.js

@@ -12,7 +12,14 @@ import { c } from "./colors.js";
 import { table, termWidth, visibleWidth, wrap } from "./layout.js";
 import { NEW_FLAG_HELP, UPDATE_FLAG_HELP, flagSummary, flagUsageTokens } from "./task-flags.js";
 /** Commands whose own argument parser already handles `--help`. */
-export const SELF_HELP_COMMANDS = new Set(["support", "tunnel", "shot", "uninstall", "override"]);
+export const SELF_HELP_COMMANDS = new Set([
+    "support",
+    "tunnel",
+    "shot",
+    "uninstall",
+    "override",
+    "bundle",
+]);
 const GROUPS = [
     {
         name: "Setup",
@@ -71,21 +78,39 @@ const GROUPS = [
             {
                 name: "mv",
                 usage: "mv <id> <status> [--note <text>] [--force-not-merged]",
-                desc: "Move a task to a new status (file write) — use review/done for handoff and close-out",
+                desc: "Move a task to a new status (file write) — --note only adds an activity note; it does not message the engineer",
                 flags: '--note "..." · --force-not-merged',
             },
+            {
+                name: "send-back",
+                usage: 'send-back <id> (--message "…" | --message-file <file|->) [--json] [--port N]',
+                desc: "Return a task to the engineer, start work, then queue feedback",
+                flags: "--message · --message-file · --json · --port",
+            },
             {
                 name: "start",
-                usage: "start <id> [--fresh] [--json] [--port N]",
-                desc: "Start or resume the engineer on a task (POST /api/tasks/:id/start)",
-                flags: "--fresh · --json · --port",
+                usage: "start <id> [--fresh] [--force] [--json] [--port N]",
+                desc: "Start or resume the engineer on a task (POST /api/tasks/:id/start). --force starts a held task (see hold below)",
+                flags: "--fresh · --force · --json · --port",
             },
             {
                 name: "pause",
                 usage: "pause <id> [--json] [--port N]",
-                desc: "Pause the running agent (POST /api/tasks/:id/pause)",
+                desc: "Pause the running agent (POST /api/tasks/:id/pause). To keep a task out of ALL automation — not just stop the current run — use hold instead",
                 flags: "--json · --port",
             },
+            {
+                name: "hold",
+                usage: 'hold <id> --reason "…" [--until <date>] [--by <who>] [--json] [--port N]',
+                desc: "Park a task out of ALL automation: stop any running engineer and block auto-dispatch, CTO nudges/restarts, watchdog resume, crash recovery and queued messages (POST /api/tasks/:id/hold)",
+                flags: "--reason · --until · --by · --json · --port",
+            },
+            {
+                name: "unhold",
+                usage: "unhold <id> [--start] [--json] [--port N]",
+                desc: "Release a hold: clear the flag, its reason/until, and any `hold` tag, re-enabling automation. --start also re-launches the engineer (POST /api/tasks/:id/unhold)",
+                flags: "--start · --json · --port",
+            },
             {
                 name: "message",
                 usage: 'message <id> "<text>" [--now] [--json] [--port N]',
@@ -94,15 +119,46 @@ const GROUPS = [
             },
             {
                 name: "review",
-                usage: "review <id> [--wait] [--json] [--port N]",
+                usage: "review <id> [--wait] [--json] [--port N] · review cancel <id> · review again <id>",
                 desc: "Request review synchronously (PATCH status=review; waits for handoff)",
                 flags: "--wait · --json · --port",
             },
+            {
+                name: "review again",
+                usage: "review again <id> [--json] [--port N]",
+                desc: "Start a fresh review run on a task already in review (POST /api/tasks/:id/review/again)",
+                flags: "--json · --port",
+            },
+            {
+                name: "sync",
+                usage: "sync <id> [--json] [--port N]",
+                desc: "Merge main into the task branch (POST /api/tasks/:id/sync)",
+                flags: "--json · --port",
+            },
+            {
+                name: "verify",
+                usage: "verify <id> [--json] [--port N]",
+                desc: "Refresh task shots and UI verification at the current branch HEAD",
+                flags: "--json · --port",
+            },
             {
                 name: "done",
-                usage: "done <id> [--commit-dirty] [--wait] [--json] [--port N]",
-                desc: "Move to done through the close-out pipeline (POST /api/tasks/:id/done)",
-                flags: "--commit-dirty · --wait · --json · --port",
+                usage: "done <id> [--cancel] [--commit-dirty] [--wait] [--json] [--port N]",
+                desc: "Run or cancel the close-out pipeline (POST /api/tasks/:id/done)",
+                flags: "--cancel · --commit-dirty · --wait · --json · --port",
+            },
+            { name: "abort", usage: "abort <id> [--json] [--port N]", desc: "Alias for done --cancel" },
+            {
+                name: "api",
+                usage: "api <METHOD> /api/<path> [--json body] [--port N]",
+                desc: "Authenticated API escape hatch for routes without a dedicated command",
+                flags: "--json body · --port",
+            },
+            {
+                name: "landable",
+                usage: "landable <id> [--json] [--port N]",
+                desc: "Read-only landing pre-checks (verdict, lock, worktree, merge, scope, main) — exits non-zero when not landable (GET /api/tasks/:id/landable)",
+                flags: "--json · --port",
             },
             {
                 name: "override",
@@ -118,9 +174,9 @@ const GROUPS = [
             },
             {
                 name: "dev",
-                usage: "dev [list] · dev <name> start|stop|restart|status|logs [--json] [--port N]",
-                desc: "Start, stop and inspect a declared dev target (GET/POST /api/dev/targets)",
-                flags: "--json · --port",
+                usage: "dev [list] · dev <name> start|stop|restart|status|logs [--service <name>] [--json] [--port N]",
+                desc: "Start, stop and inspect a declared dev target, including its companion services (--service, #0843)",
+                flags: "--service · --json · --port",
             },
             {
                 name: "config",
@@ -130,16 +186,28 @@ const GROUPS = [
             },
             {
                 name: "runners",
-                usage: "runners [--probe] [--json] [--port N]",
+                usage: "runners [check | setup <host> [--login <cli>]] [--probe] [--json] [--port N]",
                 desc: "Remote validation runner status (and optional probe)",
                 flags: "--probe · --json · --port",
             },
             {
-                name: "agents",
-                usage: "agents [--json] [--port N]",
-                desc: "List running agents (GET /api/agents/running)",
+                name: "integration",
+                usage: "integration list|pipeline|get <id>|retry <id>|refresh-install <id> [--json] [--port N]",
+                desc: "Inspect and retry integration jobs",
+                flags: "--json · --port",
+            },
+            {
+                name: "attention",
+                usage: "attention list|dismiss <task-id> [--json] [--port N]",
+                desc: "List attention items or dismiss a task's needs-input notice",
                 flags: "--json · --port",
             },
+            {
+                name: "agents",
+                usage: 'agents [list] · agents pause|resume <agent> [--model <model>] [--until <date>] [--reason "..."] [--json] [--port N]',
+                desc: "List running agents, or pause/resume an allowlist agent or model without removing it",
+                flags: "--model · --until · --reason · --json · --port",
+            },
             {
                 name: "stats",
                 usage: "stats [--json] [--port N]",
@@ -170,12 +238,24 @@ const GROUPS = [
                 desc: "Edit a task's metadata or body",
                 flags: flagSummary(UPDATE_FLAG_HELP),
             },
+            {
+                name: "bundle",
+                usage: 'bundle add <id> --title "…" --area … --fix "…" --source "…" [--test "…"] | bundle edit <id> <En> --section "…" --section-body <text|-> | bundle done|undo <id> <En>',
+                desc: "Edit one easter-eggs bundle item (POST /api/tasks/:id/bundle); task status unchanged",
+                flags: "--force · --json · --port",
+            },
             {
                 name: "story",
                 usage: 'story new "<name>" --body <text|-> | story list | story show <number|name> | story update <number|name> [--name …] [--body <text|->]',
                 desc: "Create, list, show or update story definitions verbatim (no PM agent)",
                 flags: "new/show/update: --body - · list/show: --json",
             },
+            {
+                name: "schedule",
+                usage: "schedule list | run <id> | enable|disable <id> | delete <id> --yes | new … | update <id> … | preview …",
+                desc: "Manage task schedules under schedules/ (Agents → Scheduled Tasks)",
+                flags: "new/update: --cadence --timezone --time-of-day --task-title --body - · list/preview: --json · delete: --yes",
+            },
             {
                 name: "index",
                 usage: "index [--json]",
@@ -188,6 +268,12 @@ const GROUPS = [
                 desc: "Collect leaked task worktrees and branches",
                 flags: "--yes · --dry-run",
             },
+            {
+                name: "migrate",
+                usage: "migrate [--dry-run]",
+                desc: "Move local attachment bytes to the configured cloud provider",
+                flags: "--dry-run",
+            },
         ],
     },
     {
@@ -216,12 +302,28 @@ const GROUPS = [
                 desc: "Definition-of-done gate: runs the plan declared in repoos.toml",
                 flags: "--profile <name> · --changed <ref> · --print-plan · --local-tests",
             },
+            {
+                name: "checks timings",
+                usage: "checks timings",
+                desc: "Show recent check durations and the slowest test files",
+            },
+            {
+                name: "checks slots",
+                usage: "checks slots [--release SLOT --confirm PID]",
+                desc: "Inspect local check slot holders and queue; explicitly release a wedged holder",
+                flags: "--release SLOT · --confirm PID",
+            },
             {
                 name: "doctor",
                 usage: "doctor [--json] [--verbose] [--probe <cli>] [--binary <path>]",
                 desc: "Readiness preflight: config, layout, tools, server and secrets",
                 flags: "--json · --verbose · --probe <cli> · --binary <path>",
             },
+            {
+                name: "secrets",
+                usage: "secrets <list|add|replace|delete> <environment> [KEY] | bind <consumer> <environment> [KEY ...]",
+                desc: "Manage project environment values and explicit per-consumer key grants",
+            },
             {
                 name: "certify",
                 usage: "certify <cli> [--yes] [--json] [--force] [--binary <path>]",
@@ -251,6 +353,12 @@ const GROUPS = [
                 desc: "Stop this repo's serve process (by its own lockfile)",
                 flags: "--port N",
             },
+            {
+                name: "servers",
+                usage: "servers [--json] [--prune]",
+                desc: "List locally running RepoOS servers from ~/.repoos/servers",
+                flags: "--json · --prune",
+            },
             {
                 name: "service",
                 usage: "service <sub>",
@@ -293,6 +401,8 @@ const EXAMPLES = [
     },
     { cmd: "repoos story list", comment: "registered stories, with numbers" },
     { cmd: "repoos story show 0007", comment: "definition + member tasks and their statuses" },
+    { cmd: "repoos schedule list", comment: "recurring task templates under schedules/" },
+    { cmd: "repoos schedule run 0001", comment: "create a task from a schedule now" },
     { cmd: "repoos list ready" },
     { cmd: "repoos outline src/server/agents.ts", comment: "then read only the range you need" },
     { cmd: "repoos doctor", comment: "passing checks are hidden; --verbose shows all" },