@sechroom/cli 2026.6.207-rc.d880366d → 2026.6.209-rc.175abeb8

package/dist/index.js

@@ -1947,15 +1947,25 @@ var SectionType = {
    *  carried a workspaceId and that workspace has agent-setup-bundle memories. */
   WorkspaceConventions: "workspace-conventions"
 };
-async function fetchSetup(cfg) {
+async function fetchSetup(cfg, namespaceSlug) {
   const client = await makeClient(cfg);
+  const query = {};
+  if (cfg.workspaceId) query.workspaceId = cfg.workspaceId;
+  if (namespaceSlug) query.namespaceSlug = namespaceSlug;
+  const hasQuery = query.workspaceId !== void 0 || query.namespaceSlug !== void 0;
   const { data, error } = await client.GET(
     "/operator-surface/setup",
-    cfg.workspaceId ? { params: { query: { workspaceId: cfg.workspaceId } } } : {}
+    hasQuery ? { params: { query } } : {}
   );
   if (error) throw new Error(`GET /operator-surface/setup failed: ${JSON.stringify(error)}`);
   return data;
 }
+async function listNamespaces(cfg) {
+  const client = await makeClient(cfg);
+  const { data } = await client.GET("/mcp-aggregator/namespaces", {});
+  const rows = data ?? [];
+  return rows.filter((r) => typeof r.slug === "string").map((r) => ({ slug: r.slug, displayName: r.displayName ?? r.slug }));
+}
 function findSurface(setup, surfaceKey) {
   return setup.surfaces.find((s) => s.surfaceKey === surfaceKey);
 }
@@ -3187,8 +3197,28 @@ ${client.label} (${client.key}):
 `);
   }
 }
+var GLOBAL_NAMESPACE = "__global__";
+async function resolveNamespaceChoice(cfg, flag) {
+  if (flag) return flag;
+  if (!canPrompt()) return null;
+  const namespaces = await listNamespaces(cfg);
+  if (namespaces.length === 0) return null;
+  const picked = await promptSelect(
+    "Which namespace should this connection use?",
+    [
+      { label: "Global (whole tenant)", value: GLOBAL_NAMESPACE },
+      ...namespaces.map((n) => ({
+        label: n.displayName,
+        value: n.slug,
+        hint: n.slug
+      }))
+    ],
+    GLOBAL_NAMESPACE
+  );
+  return picked === GLOBAL_NAMESPACE ? null : picked;
+}
 function registerInit(program2) {
-  program2.command("init").description("Wire this project for sechroom: write MCP config + agent instruction files from the server's setup descriptors").option("--client <list>", `comma-separated clients (${ALL_CLIENT_KEYS.join(", ")}) or 'all'`, DEFAULT_CLIENT_KEY).option("--dry-run", "print what would be written without writing", false).option("--mcp-only", "only write MCP config (skip agent files)", false).option("--agent-files-only", "only write agent instruction files (skip MCP config)", false).option("--copy", "make a personal copy of the agent instructions you can edit (default: prompt on a TTY, else skip)").addHelpText(
+  program2.command("init").description("Wire this project for sechroom: write MCP config + agent instruction files from the server's setup descriptors").option("--client <list>", `comma-separated clients (${ALL_CLIENT_KEYS.join(", ")}) or 'all'`, DEFAULT_CLIENT_KEY).option("--dry-run", "print what would be written without writing", false).option("--mcp-only", "only write MCP config (skip agent files)", false).option("--agent-files-only", "only write agent instruction files (skip MCP config)", false).option("--copy", "make a personal copy of the agent instructions you can edit (default: prompt on a TTY, else skip)").option("--namespace <slug>", "MCP namespace for the connection URL (interactive picker if omitted on a TTY; defaults to tenant-global)").addHelpText(
     "after",
     `
 Examples:
@@ -3199,7 +3229,11 @@ Examples:
   $ sechroom init --dry-run --json      preview the writes, change nothing`
   ).action(async (opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
-    const setup = await withSpinner("Fetching setup descriptors", () => fetchSetup(cfg));
+    const namespaceSlug = await resolveNamespaceChoice(cfg, opts.namespace);
+    const setup = await withSpinner(
+      "Fetching setup descriptors",
+      () => fetchSetup(cfg, namespaceSlug ?? void 0)
+    );
     const targets = clientTargets(process.cwd());
     const keys = resolveClientKeys(opts.client);
     const json = cmd.optsWithGlobals().json;
@@ -3244,8 +3278,8 @@ Next \u2014 verify: ${verify.description}
 }
 function registerSetup(program2) {
   const setup = program2.command("setup").description("Granular onboarding steps (init runs these together)");
-  setup.command("mcp <clients...>").description(`Write only the MCP config for one or more clients (${ALL_CLIENT_KEYS.join(", ")}, or 'all')`).option("--dry-run", "print what would be written without writing", false).addHelpText("after", "\nExamples:\n  $ sechroom setup mcp codex\n  $ sechroom setup mcp claude-code codex\n  $ sechroom setup mcp all").action(async (clients, opts, cmd) => {
-    await runClients(clients, cmd, { dryRun: Boolean(opts.dryRun), mcp: true, agentFiles: false });
+  setup.command("mcp <clients...>").description(`Write only the MCP config for one or more clients (${ALL_CLIENT_KEYS.join(", ")}, or 'all')`).option("--dry-run", "print what would be written without writing", false).option("--namespace <slug>", "MCP namespace for the connection URL (interactive picker if omitted on a TTY; defaults to tenant-global)").addHelpText("after", "\nExamples:\n  $ sechroom setup mcp codex\n  $ sechroom setup mcp claude-code codex\n  $ sechroom setup mcp all").action(async (clients, opts, cmd) => {
+    await runClients(clients, cmd, { dryRun: Boolean(opts.dryRun), mcp: true, agentFiles: false, namespace: opts.namespace });
   });
   setup.command("agent-files <clients...>").description(`Write only the agent instruction file(s) for one or more clients (${ALL_CLIENT_KEYS.join(", ")}, or 'all')`).option("--dry-run", "print what would be written without writing", false).option("--copy", "make a personal copy you can edit (default: prompt on a TTY, else skip)").addHelpText("after", "\nExamples:\n  $ sechroom setup agent-files claude-code        CLAUDE.md\n  $ sechroom setup agent-files claude-code codex  CLAUDE.md + AGENTS.md in one run\n  $ sechroom setup agent-files all").action(async (clients, opts, cmd) => {
     await runClients(clients, cmd, { dryRun: Boolean(opts.dryRun), mcp: false, agentFiles: true, copy: opts.copy });
@@ -3255,7 +3289,11 @@ async function runClients(clients, cmd, opts) {
   const cfg = resolveConfig(cmd.optsWithGlobals());
   const targets = clientTargets(process.cwd());
   const keys = resolveClientKeys(clients.join(","));
-  const setupData = await withSpinner("Fetching setup descriptors", () => fetchSetup(cfg));
+  const namespaceSlug = opts.mcp ? await resolveNamespaceChoice(cfg, opts.namespace) : null;
+  const setupData = await withSpinner(
+    "Fetching setup descriptors",
+    () => fetchSetup(cfg, namespaceSlug ?? void 0)
+  );
   const personalWorkspaceId = await getPersonalWorkspaceId(cfg);
   if (opts.agentFiles && !opts.dryRun) {
     await maybeOfferCopies(cfg, setupData, targets, keys, personalWorkspaceId, copyChoice(opts));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.6.207-rc.d880366d",
+  "version": "2026.6.209-rc.175abeb8",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",