@sechroom/cli 2026.6.1 → 2026.6.2

package/README.md

@@ -54,15 +54,27 @@ npm i -g @sechroom/cli@next
 npx @sechroom/cli login
 ```
 
+## Develop
+
+This is a **pnpm workspace member** (`frontend/apps/cli`). Install from the repo root
+(`pnpm install`), then run scripts via the filter (or `pnpm <script>` from this dir):
+
+```bash
+pnpm --filter @sechroom/cli run gen          # regenerate the typed client
+pnpm --filter @sechroom/cli run check-types
+pnpm --filter @sechroom/cli run build
+pnpm --filter @sechroom/cli run dev -- --help # tsx, no build
+```
+
 ## Generate the client (once, and after any API change)
 
 ```bash
 # defaults to https://app.sechroom.ai/api/openapi/v1.json
-npm run gen
-SECHROOM_OPENAPI_URL=https://<host>/api/openapi/v1.json npm run gen   # other envs
+pnpm --filter @sechroom/cli run gen
+SECHROOM_OPENAPI_URL=https://<host>/api/openapi/v1.json pnpm --filter @sechroom/cli run gen   # other envs
 ```
 
-`npm run gen` overwrites `src/generated/api.d.ts`. The **real generated types are
+`gen` overwrites `src/generated/api.d.ts`. The **real generated types are
 committed** (regenerated from the live prod spec) so builds are hermetic — no
 live-API dependency at compile time; re-run `gen` after any API change. Generating
 against the live schema is what caught the original placeholder's shape drift
@@ -82,6 +94,9 @@ sechroom memory get mem_XXXX
 sechroom memory search "convention lifecycle drift" --limit 5
 sechroom worklog append --text "shipped CLI skeleton; pointers: ..." --source claude-code-chris
 
+sechroom lookup mem_XXXX                 # what is this id? -> kind / title / view URL
+sechroom lookup sechroom:mem_XXXX --json # namespaced form also resolves
+
 sechroom --json memory get mem_XXXX     # agent-friendly
 ```
 
@@ -101,10 +116,11 @@ src/
   auth.ts             OAuth auth-code+PKCE loopback (fixed-port DCR) + refresh + cache
   client.ts           openapi-fetch client (auth + tenant middleware) + emit/fail
   config.ts           base-url / tenant / token resolution + persistence
-  generated/api.d.ts  typed client — `npm run gen`; real types committed (hermetic)
+  generated/api.d.ts  typed client — `pnpm run gen`; real types committed (hermetic)
   commands/
     memory.ts         create / get / search
     worklog.ts        append
+    lookup.ts         resolve any id (mem_…/unprefixed/sechroom:<id>) -> kind/title/url
 ```
 
 ## Remaining before ship
@@ -123,9 +139,9 @@ Public **npmjs** under the `@sechroom` org is the host; **TeamCity** is the
 publisher (build config `Sechroom_PublishCli`). The full pipeline — steps,
 parameters, npm auth, provisioning, and how to run a publish — is documented in
 [`ci/PUBLISHING.md`](./ci/PUBLISHING.md). In short: a manual-trigger config runs
-`npm ci → gen → typecheck → build → publish` in a `node:20` container, authed by
-a masked `NPM_TOKEN` param; `next` stamps a per-build prerelease, `latest` ships
-`BASE_CLI_VERSION`.
+`pnpm install → gen → check-types → build → publish` (filtered to `@sechroom/cli`)
+in a `node:20` container, authed by a masked `NPM_TOKEN` param. Every publish gets a
+fresh calendar version `YYYY.M.<n>` (own counter); the dist-tag separates next/latest.
 
 Why public npmjs: the CLI is customer-facing, and `npx @sechroom/cli` must work
 with zero `.npmrc`/token on the customer side. GitHub Packages or a private

package/dist/index.js

@@ -309,6 +309,26 @@ function registerWorklog(program2) {
   });
 }
 
+// src/commands/lookup.ts
+function registerLookup(program2) {
+  program2.command("lookup <id>").description(
+    "Resolve a sechroom id to its kind, title, and view URL (mem_\u2026/wsp_\u2026/prj_\u2026, unprefixed, or sechroom:<id>)"
+  ).action(async (id, _opts, cmd) => {
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const client = await makeClient(cfg);
+    const { data, error } = await client.GET("/lookup/{id}", {
+      params: { path: { id } }
+    });
+    if (error) fail(error);
+    if (data == null) {
+      process.stderr.write(`not found: ${id}
+`);
+      process.exit(1);
+    }
+    emit(data, cmd.optsWithGlobals().json);
+  });
+}
+
 // src/index.ts
 var program = new Command();
 program.name("sechroom").description("Sechroom CLI \u2014 thin generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.").version("0.0.0").option("--base-url <url>", "API base URL (overrides config / SECHROOM_BASE_URL)").option("--tenant <tenant>", "Tenant id (required by the API; overrides config / SECHROOM_TENANT)").option("--json", "Emit compact JSON (for scripts and agents)", false);
@@ -334,6 +354,7 @@ config.command("show").description("Print persisted config").action(() => {
 });
 registerMemory(program);
 registerWorklog(program);
+registerLookup(program);
 program.parseAsync().catch((err) => {
   process.stderr.write(`error: ${err instanceof Error ? err.message : String(err)}
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.6.1",
+  "version": "2026.6.2",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",
@@ -8,7 +8,7 @@
   "repository": {
     "type": "git",
     "url": "git+https://github.com/OcdLimited/sechroom.git",
-    "directory": "tools/sechroom-cli"
+    "directory": "frontend/apps/cli"
   },
   "bin": {
     "sechroom": "./dist/index.js"
@@ -23,13 +23,6 @@
     "access": "public",
     "registry": "https://registry.npmjs.org/"
   },
-  "scripts": {
-    "gen": "openapi-typescript \"${SECHROOM_OPENAPI_URL:-https://app.sechroom.ai/api/openapi/v1.json}\" -o src/generated/api.d.ts",
-    "build": "tsup src/index.ts --format esm --target node20 --clean",
-    "dev": "tsx src/index.ts",
-    "typecheck": "tsc --noEmit",
-    "prepublishOnly": "npm run build"
-  },
   "dependencies": {
     "commander": "^12.1.0",
     "open": "^10.1.0",
@@ -41,5 +34,11 @@
     "tsup": "^8.3.0",
     "tsx": "^4.19.0",
     "typescript": "^5.6.0"
+  },
+  "scripts": {
+    "gen": "openapi-typescript \"${SECHROOM_OPENAPI_URL:-https://app.sechroom.ai/api/openapi/v1.json}\" -o src/generated/api.d.ts",
+    "build": "tsup src/index.ts --format esm --target node20 --clean",
+    "dev": "tsx src/index.ts",
+    "check-types": "tsc --noEmit"
   }
-}
+}