@repo-os/repoos 0.5.72 → 0.5.73

package/dist/.build-info.json

@@ -1,5 +1,5 @@
 {
-  "hash": "ee834f2f12cd8d2344f949543dceca527efe7c9f2ca47b51fd1a46709a3cd4e1",
-  "version": "0.5.72",
+  "hash": "54182298d418b9bcc12c138af5d99c0470fb3a54a8a573775e600c2e37ab1669",
+  "version": "0.5.73",
   "devUi": false
 }

package/dist/.build-stamp.json

@@ -1,3 +1,3 @@
 {
-  "generatedAt": "2026-10-23T09:47:12.207Z"
+  "generatedAt": "2026-10-29T21:23:55.474Z"
 }

package/dist/cli/api-route-parity.js

@@ -10,7 +10,8 @@ const re = (method, patternSource) => (r) => r.method === method && r.pattern ==
 const under = (prefix) => (r) => r.pattern.startsWith(prefix) || r.pattern.replaceAll("\\/", "/").startsWith(`^${prefix}`);
 /** Routes implemented by the server-backed control CLI (#0723). */
 const CONTROL_API_MATCHERS = [
-    re("POST", /^\/api\/tasks\/([^/]+)\/(start|pause|message|done|sync|hotfix|abandon|reopen|archive|unarchive|split)$/
+    re("POST", /^\/api\/tasks\/([^/]+)\/(send-back)$/.source),
+    re("POST", /^\/api\/tasks\/([^/]+)\/(start|pause|message|done|sync|hotfix|abandon|reopen|archive|unarchive|split|hold|unhold)$/
         .source),
     re("POST", /^\/api\/tasks\/([^/]+)\/done\/cancel$/.source),
     // `repoos attention dismiss <id>` dismisses the task's needs-input event.
@@ -51,6 +52,7 @@ const FILE_CLI_MATCHERS = [
     exact("PUT", "/api/project-environment-bindings"),
     exact("GET", "/api/health"),
     exact("GET", "/api/tasks"),
+    re("GET", /^\/api\/tasks\/([^/]+)\/context$/.source),
     re("GET", /^\/api\/tasks\/([^/]+)$/.source),
     exact("POST", "/api/tasks"),
     re("DELETE", /^\/api\/tasks\/([^/]+)$/.source),
@@ -151,6 +153,11 @@ const UI_ONLY_MATCHERS = [
     // Secrets page: list safe environment labels and create an empty source; no CLI flow exists.
     exact("GET", "/api/project-environments"),
     exact("POST", "/api/project-environments"),
+    // Secrets page (#0953): open a registered environment source file in the
+    // administrator's configured editor. Browser-only by nature — it launches a
+    // GUI process on the machine running RepoOS, and the file is resolved from
+    // the registry, never from a client path.
+    re("POST", /^\/api\/project-environments\/([^/]+)\/open-in-editor$/.source),
     exact("GET", "/api/agents/queued"),
     exact("GET", "/api/agents/detect"),
     exact("GET", "/api/agents/detect/stream"),

package/dist/cli/help.js

@@ -78,21 +78,39 @@ const GROUPS = [
             {
                 name: "mv",
                 usage: "mv <id> <status> [--note <text>] [--force-not-merged]",
-                desc: "Move a task to a new status (file write) — use review/done for handoff and close-out",
+                desc: "Move a task to a new status (file write) — --note only adds an activity note; it does not message the engineer",
                 flags: '--note "..." · --force-not-merged',
             },
+            {
+                name: "send-back",
+                usage: 'send-back <id> (--message "…" | --message-file <file|->) [--json] [--port N]',
+                desc: "Return a task to the engineer, start work, then queue feedback",
+                flags: "--message · --message-file · --json · --port",
+            },
             {
                 name: "start",
-                usage: "start <id> [--fresh] [--json] [--port N]",
-                desc: "Start or resume the engineer on a task (POST /api/tasks/:id/start)",
-                flags: "--fresh · --json · --port",
+                usage: "start <id> [--fresh] [--force] [--json] [--port N]",
+                desc: "Start or resume the engineer on a task (POST /api/tasks/:id/start). --force starts a held task (see hold below)",
+                flags: "--fresh · --force · --json · --port",
             },
             {
                 name: "pause",
                 usage: "pause <id> [--json] [--port N]",
-                desc: "Pause the running agent (POST /api/tasks/:id/pause)",
+                desc: "Pause the running agent (POST /api/tasks/:id/pause). To keep a task out of ALL automation — not just stop the current run — use hold instead",
                 flags: "--json · --port",
             },
+            {
+                name: "hold",
+                usage: 'hold <id> --reason "…" [--until <date>] [--by <who>] [--json] [--port N]',
+                desc: "Park a task out of ALL automation: stop any running engineer and block auto-dispatch, CTO nudges/restarts, watchdog resume, crash recovery and queued messages (POST /api/tasks/:id/hold)",
+                flags: "--reason · --until · --by · --json · --port",
+            },
+            {
+                name: "unhold",
+                usage: "unhold <id> [--start] [--json] [--port N]",
+                desc: "Release a hold: clear the flag, its reason/until, and any `hold` tag, re-enabling automation. --start also re-launches the engineer (POST /api/tasks/:id/unhold)",
+                flags: "--start · --json · --port",
+            },
             {
                 name: "message",
                 usage: 'message <id> "<text>" [--now] [--json] [--port N]',
@@ -284,6 +302,11 @@ const GROUPS = [
                 desc: "Definition-of-done gate: runs the plan declared in repoos.toml",
                 flags: "--profile <name> · --changed <ref> · --print-plan · --local-tests",
             },
+            {
+                name: "checks timings",
+                usage: "checks timings",
+                desc: "Show recent check durations and the slowest test files",
+            },
             {
                 name: "checks slots",
                 usage: "checks slots [--release SLOT --confirm PID]",

package/dist/cli/index.js

@@ -27,7 +27,7 @@ import { cmdCertify } from "../commands/certify.js";
 import { cmdSupport } from "../commands/support.js";
 import { cmdService } from "../commands/service.js";
 import { cmdServers } from "../commands/servers.js";
-import { cmdAgentsRunning, cmdConfig, cmdDone, cmdLandable, cmdMessage, cmdOverride, cmdPause, cmdPreview, cmdDev, cmdReview, cmdVerify, cmdRunners, cmdStart, cmdSync, cmdStats, cmdDecisions, cmdApi, cmdIntegration, cmdAttention, } from "../commands/control-api.js";
+import { cmdAgentsRunning, cmdConfig, cmdDone, cmdLandable, cmdMessage, cmdSendBack, cmdOverride, cmdPause, cmdPreview, cmdDev, cmdReview, cmdVerify, cmdRunners, cmdStart, cmdSync, cmdStats, cmdDecisions, cmdApi, cmdIntegration, cmdAttention, cmdHold, cmdUnhold, } from "../commands/control-api.js";
 import { cmdWatch } from "../commands/watch.js";
 import { cmdDriver } from "../commands/driver.js";
 import { cmdBundle } from "../commands/bundle.js";
@@ -131,7 +131,7 @@ function main() {
             break;
         case "list":
         case "ls":
-            cmdList(rest[0]);
+            void cmdList(rest[0]);
             break;
         case "status":
             void cmdStatus(rest);
@@ -174,7 +174,7 @@ function main() {
             break;
         case "rm":
         case "delete":
-            cmdRm(rest);
+            void cmdRm(rest);
             break;
         case "update":
             cmdUpdate(rest);
@@ -255,6 +255,18 @@ function main() {
                     process.exitCode = code;
             });
             break;
+        case "hold":
+            void cmdHold(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
+        case "unhold":
+            void cmdUnhold(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
         case "sync":
             void cmdSync(rest).then((code) => {
                 if (code !== 0)
@@ -267,6 +279,12 @@ function main() {
                     process.exitCode = code;
             });
             break;
+        case "send-back":
+            void cmdSendBack(rest).then((code) => {
+                if (code !== 0)
+                    process.exitCode = code;
+            });
+            break;
         case "review":
             void cmdReview(rest).then((code) => {
                 if (code !== 0)

package/dist/commands/check.d.ts

@@ -1,6 +1,7 @@
+import { type TestFileTiming } from "../core/test-file-timings.js";
 import type { CheckContrastPair, CheckThemeScope, RepoOSConfig } from "../core/types.js";
 import { type CheckPlan, type CheckStep } from "../core/check-plan.js";
-import { type StepRunResult } from "../core/check-runner.js";
+import { type StepRunResult, type StepStatus } from "../core/check-runner.js";
 import { type CheckRunPhase } from "../core/check-store.js";
 /**
  * Bare `require(...)` calls guard (#0271 follow-up): this package is
@@ -228,6 +229,61 @@ export interface CheckOptions {
 }
 /** Parse `repoos check` flags. Unknown flags are ignored, never fatal. */
 export declare function parseCheckArgs(argv?: string[]): CheckOptions;
+interface PkgJson {
+    name?: string;
+    type?: string;
+    scripts?: Record<string, string>;
+    dependencies?: Record<string, unknown>;
+}
+/** Everything one step needs to run: repo root, its own cwd, config, manifest. */
+interface StepContext {
+    repoRoot: string;
+    env: NodeJS.ProcessEnv;
+    /** Absolute working directory for this step. */
+    cwd: string;
+    cfg: RepoOSConfig;
+    /** The repo-root package.json — RepoOS's own invariants are read from here. */
+    pkg: PkgJson;
+    /**
+     * The package.json in the step's own `cwd`. A monorepo step declared with
+     * `cwd = "web"` must read web's scripts, not the root's.
+     */
+    scriptPkg: PkgJson;
+    /**
+     * Binaries the step declared it needs. Checked only once the step knows it
+     * actually applies — see `prereqs`.
+     */
+    requires: string[];
+    /** Git ref for changed-path mode, when active. */
+    changedRef?: string;
+    /** Fix command to run before the check, when `--fix` is active. */
+    fixCommand?: string;
+    /**
+     * Failing test names (`file > suite > test`) from the previous run for this
+     * task/worktree (#0655). When present, the tests step re-runs those files
+     * first and stops early if they still fail. Ordering only — never a skip.
+     */
+    previousFailedTests?: string[];
+    /** Re-runs per failing file for the isolation label (#0655). 0 disables. */
+    isolationRuns?: number;
+    /** Echo step child output (default true, see RunPlanOptions.echo). */
+    echo: boolean;
+    /** Outer timeout from the check plan (`[[check.steps]].timeoutMs`). */
+    stepTimeoutMs?: number;
+    alwaysRun?: string[];
+}
+/** What a built-in `kind` handler returns. */
+interface BuiltinOutcome {
+    testFileTimings?: TestFileTiming[];
+    status: StepStatus;
+    /** The command it resolved to (so the results block can name it). */
+    command?: string;
+    detail?: string;
+    output?: string;
+    /** Informational isolation re-run label (#0655); never affects `status`. */
+    isolationNote?: string;
+}
+export declare function stepStaleness(ctx: StepContext): Promise<BuiltinOutcome>;
 /** Hard cap on failing files that get an isolation re-run (#0655). Above it,
  *  the failure is broad enough that per-file triage says nothing useful. */
 export declare const MAX_ISOLATION_TRIAGE_FILES = 3;
@@ -316,7 +372,7 @@ export declare function cmdCheck(argv?: string[]): Promise<void>;
  * Failing test names from this task's most recent run (#0655), or none. Only
  * when that most recent run actually failed — once a run is green, the next
  * `repoos check` starts from a clean slate. Interactive/CLI and pre-review
- * only: close-out and release always run the full suite. Fail-soft.
+ * only: close-out and release keep the normal suite ordering. Fail-soft.
  */
 export declare function previousFailedTestsForRun(opts: {
     root: string;
@@ -326,3 +382,4 @@ export declare function previousFailedTestsForRun(opts: {
     taskId: string | null;
     phase: CheckRunPhase;
 }): string[];
+export {};