@sechroom/cli 2026.6.239-rc.6418da97 → 2026.7.2

package/dist/index.js

@@ -433,6 +433,7 @@ async function requireToken(cfg) {
 import createClient from "openapi-fetch";
 
 // src/ui.ts
+import * as clack from "@clack/prompts";
 var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var quiet = false;
 function setQuiet(q) {
@@ -458,7 +459,7 @@ var err = (s) => style.red(s);
 function active() {
   return !quiet && Boolean(process.stderr.isTTY);
 }
-function spinner(text) {
+function spinner(text2) {
   if (!active()) {
     return { succeed() {
     }, fail() {
@@ -468,9 +469,9 @@ function spinner(text) {
   let i = 0;
   const render = () => {
     i = (i + 1) % FRAMES.length;
-    process.stderr.write(`\r${FRAMES[i]} ${text}`);
+    process.stderr.write(`\r${FRAMES[i]} ${text2}`);
   };
-  process.stderr.write(`\r${FRAMES[0]} ${text}`);
+  process.stderr.write(`\r${FRAMES[0]} ${text2}`);
   const timer = setInterval(render, 80);
   timer.unref?.();
   const clear = () => {
@@ -480,12 +481,12 @@ function spinner(text) {
   return {
     succeed(t) {
       clear();
-      process.stderr.write(`${ok("\u2713")} ${t ?? text}
+      process.stderr.write(`${ok("\u2713")} ${t ?? text2}
 `);
     },
     fail(t) {
       clear();
-      process.stderr.write(`${err("\u2717")} ${t ?? text}
+      process.stderr.write(`${err("\u2717")} ${t ?? text2}
 `);
     },
     stop: clear
@@ -496,31 +497,24 @@ function canPrompt() {
 }
 async function promptYesNo(question) {
   if (!canPrompt()) return false;
-  const { createInterface } = await import("readline");
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  try {
-    const answer = await new Promise((resolve3) => {
-      rl.question(`${question} [y/N] `, resolve3);
-    });
-    return /^y(es)?$/i.test(answer.trim());
-  } finally {
-    rl.close();
-  }
+  const r = await clack.confirm({
+    message: question,
+    initialValue: false,
+    output: process.stderr
+  });
+  return clack.isCancel(r) ? false : r;
 }
 async function promptText(question, def) {
   if (!canPrompt()) return def ?? "";
-  const { createInterface } = await import("readline");
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  try {
-    const suffix = def ? ` [${def}]` : "";
-    const answer = await new Promise((resolve3) => {
-      rl.question(`${question}${suffix} `, resolve3);
-    });
-    const trimmed = answer.trim();
-    return trimmed.length > 0 ? trimmed : def ?? "";
-  } finally {
-    rl.close();
-  }
+  const r = await clack.text({
+    message: question,
+    defaultValue: def,
+    placeholder: def,
+    output: process.stderr
+  });
+  if (clack.isCancel(r)) return def ?? "";
+  const trimmed = (r ?? "").trim();
+  return trimmed.length > 0 ? trimmed : def ?? "";
 }
 async function promptSelect(question, choices, def) {
   if (choices.length === 0) throw new Error("promptSelect: no choices");
@@ -529,74 +523,50 @@ async function promptSelect(question, choices, def) {
     def !== void 0 ? choices.findIndex((c) => c.value === def) : 0
   );
   if (!canPrompt()) return choices[defIdx].value;
-  const { createInterface } = await import("readline");
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  try {
-    process.stderr.write(`${style.bold(question)}
-`);
-    choices.forEach((c, i) => {
-      const marker = i === defIdx ? style.cyan("\u203A") : " ";
-      const hint = c.hint ? ` ${style.dim(`\u2014 ${c.hint}`)}` : "";
-      process.stderr.write(`  ${marker} ${style.bold(String(i + 1))}. ${c.label}${hint}
-`);
-    });
-    const answer = await new Promise((resolve3) => {
-      rl.question(`Choose ${style.dim(`[${defIdx + 1}]`)} `, resolve3);
-    });
-    const trimmed = answer.trim();
-    if (!trimmed) return choices[defIdx].value;
-    const n = Number(trimmed);
-    if (Number.isInteger(n) && n >= 1 && n <= choices.length) return choices[n - 1].value;
-    const byLabel = choices.find(
-      (c) => c.label.toLowerCase().startsWith(trimmed.toLowerCase())
-    );
-    return byLabel ? byLabel.value : choices[defIdx].value;
-  } finally {
-    rl.close();
-  }
+  const r = await clack.select({
+    message: question,
+    // Cast: clack's Option<T> is a conditional type (primitive vs not) that TS
+    // can't verify against a generic T; the runtime shape is correct.
+    options: choices.map((c) => ({ value: c.value, label: c.label, hint: c.hint })),
+    initialValue: choices[defIdx].value,
+    output: process.stderr
+  });
+  return clack.isCancel(r) ? choices[defIdx].value : r;
 }
 async function promptMultiSelect(question, choices, preselected = []) {
   if (choices.length === 0) return [];
-  const pre = (v) => preselected.includes(v);
-  const preValues = () => choices.filter((c) => pre(c.value)).map((c) => c.value);
-  if (!canPrompt()) return preValues();
-  const { createInterface } = await import("readline");
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  try {
-    process.stderr.write(
-      `${style.bold(question)} ${style.dim("(numbers or 'all', comma-separated; Enter keeps \u25C9)")}
-`
-    );
-    choices.forEach((c, i) => {
-      const box = pre(c.value) ? style.cyan("\u25C9") : "\u25CB";
-      const hint = c.hint ? ` ${style.dim(`\u2014 ${c.hint}`)}` : "";
-      process.stderr.write(`  ${box} ${style.bold(String(i + 1))}. ${c.label}${hint}
-`);
-    });
-    const answer = await new Promise((resolve3) => {
-      rl.question(`Select ${style.dim("[Enter = \u25C9]")} `, resolve3);
-    });
-    const trimmed = answer.trim().toLowerCase();
-    if (!trimmed) return preValues();
-    if (trimmed === "all") return choices.map((c) => c.value);
-    const picks = [];
-    for (const tok of trimmed.split(",").map((t) => t.trim()).filter(Boolean)) {
-      const n = Number(tok);
-      if (Number.isInteger(n) && n >= 1 && n <= choices.length) {
-        picks.push(choices[n - 1].value);
-        continue;
-      }
-      const byLabel = choices.find((c) => c.label.toLowerCase().startsWith(tok));
-      if (byLabel) picks.push(byLabel.value);
-    }
-    const uniq = [...new Set(picks)];
-    return uniq.length > 0 ? uniq : preValues();
-  } finally {
-    rl.close();
-  }
-}
-async function withSpinner(text, fn) {
-  const s = spinner(text);
+  const preValues = choices.filter((c) => preselected.includes(c.value)).map((c) => c.value);
+  if (!canPrompt()) return preValues;
+  const r = await clack.multiselect({
+    message: question,
+    // Cast: clack's Option<T> is a conditional type (primitive vs not) that TS
+    // can't verify against a generic T; the runtime shape is correct.
+    options: choices.map((c) => ({ value: c.value, label: c.label, hint: c.hint })),
+    initialValues: preValues,
+    required: false,
+    output: process.stderr
+  });
+  return clack.isCancel(r) ? preValues : r;
+}
+async function promptAutocomplete(question, choices, def) {
+  if (choices.length === 0) throw new Error("promptAutocomplete: no choices");
+  const defIdx = Math.max(
+    0,
+    def !== void 0 ? choices.findIndex((c) => c.value === def) : 0
+  );
+  if (!canPrompt()) return choices[defIdx].value;
+  const r = await clack.autocomplete({
+    message: question,
+    // Cast: clack's Option<T> is a conditional type (primitive vs not) that TS
+    // can't verify against a generic T; the runtime shape is correct.
+    options: choices.map((c) => ({ value: c.value, label: c.label, hint: c.hint })),
+    placeholder: "Type to filter\u2026",
+    output: process.stderr
+  });
+  return clack.isCancel(r) ? choices[defIdx].value : r;
+}
+async function withSpinner(text2, fn) {
+  const s = spinner(text2);
   try {
     const result = await fn();
     s.succeed();
@@ -1521,7 +1491,7 @@ Examples:
   $ sechroom chat replies 1718049600.123456 --surface slack
   $ sechroom chat stop-tracking 1718049600.123456 --surface slack`
   );
-  chat.command("send <channelId> <text>").description("Send a message to a channel (POST /chat/channel-messages/{surface})").option("--guild <guildId>", "Discord guild snowflake \u2014 required for --surface discord").option("--memory <memoryId>", "Attach a sechroom memory id").option("--no-track", "Don't capture replies to this message").option("--parent <parentMessage>", "Thread under a parent (Slack thread_ts / Discord message id)").option("--source <source>", "Source / lane stamp (renders an attribution footer)", "cli").option("--as <as>", "Slack only: 'bot' (default) or 'user' (your linked Slack identity)", "bot").action(async (channelId, text, opts, cmd) => {
+  chat.command("send <channelId> <text>").description("Send a message to a channel (POST /chat/channel-messages/{surface})").option("--guild <guildId>", "Discord guild snowflake \u2014 required for --surface discord").option("--memory <memoryId>", "Attach a sechroom memory id").option("--no-track", "Don't capture replies to this message").option("--parent <parentMessage>", "Thread under a parent (Slack thread_ts / Discord message id)").option("--source <source>", "Source / lane stamp (renders an attribution footer)", "cli").option("--as <as>", "Slack only: 'bot' (default) or 'user' (your linked Slack identity)", "bot").action(async (channelId, text2, opts, cmd) => {
     const { surface, ...globals } = cmd.optsWithGlobals();
     const json = Boolean(cmd.optsWithGlobals().json);
     const cfg = resolveConfig(globals);
@@ -1531,7 +1501,7 @@ Examples:
         params: { path: { surface: String(surface) } },
         body: {
           channelId,
-          text,
+          text: text2,
           guildId: opts.guild ?? null,
           attachedMemoryId: opts.memory ?? null,
           trackReplies: opts.track,
@@ -1666,9 +1636,9 @@ function readLocalSemValues(cwd = process.cwd()) {
   if (existsSync4(next)) return readSem(next)?.values ?? {};
   return {};
 }
-function parseLaneJson(text) {
+function parseLaneJson(text2) {
   try {
-    const parsed = JSON.parse(text);
+    const parsed = JSON.parse(text2);
     const out = {};
     for (const [k, v] of Object.entries(parsed)) {
       if (typeof v === "string") out[k] = v;
@@ -3224,7 +3194,10 @@ async function applyClient(cfg, setup, target, opts) {
     if (!section) {
       actions.push({ kind: "instruction", path: target.instruction.path, status: "skipped", note: `no instruction-file section on surface '${target.instruction.surfaceKey}'` });
     } else {
-      const resolved = await resolveInstruction(cfg, section, opts.personalWorkspaceId);
+      const resolved = await withSpinner(
+        `Resolving ${target.label} agent instructions`,
+        () => resolveInstruction(cfg, section, opts.personalWorkspaceId)
+      );
       if (!resolved) {
         actions.push({ kind: "instruction", path: target.instruction.path, status: "skipped", note: "no role template found in this tenant \u2014 install the SEM Starter bundle, then re-run `sechroom setup agent-files`" });
       } else {
@@ -3239,7 +3212,10 @@ async function applyClient(cfg, setup, target, opts) {
     }
     const conventionsSection = findSection(surface, SectionType.WorkspaceConventions);
     if (conventionsSection) {
-      const conventions = await resolveWorkspaceConventions(cfg, conventionsSection);
+      const conventions = await withSpinner(
+        `Composing ${target.label} workspace conventions`,
+        () => resolveWorkspaceConventions(cfg, conventionsSection)
+      );
       if (conventions) {
         const action = applyBlock(
           target.instruction.path,
@@ -3667,20 +3643,20 @@ Examples:
       fail("no workspace \u2014 pass --workspace <id> or bind one (`sechroom config set --local workspaceId <id>`).");
     const kind = String(opts.kind).toLowerCase() === "standard" ? "standard" : "reference";
     const body = typeof opts.body === "string" && opts.body.trim().length > 0 ? opts.body.trim() : "_TODO: write this section, then edit the memo and re-run the regen._";
-    const text = `# ${title}
+    const text2 = `# ${title}
 
 ${body}
 `;
     const tags = ["agent-setup-bundle", "scope:sechroom", `kind:${kind}`, "archetype:document"];
     if (opts.dryRun) {
-      emit({ dryRun: true, workspaceId, title, kind, tags, text }, json);
+      emit({ dryRun: true, workspaceId, title, kind, tags, text: text2 }, json);
       return;
     }
     const data = await runApi("Authoring convention memo", async () => {
       const client = await makeClient(cfg);
       return client.POST("/memories", {
         body: {
-          text,
+          text: text2,
           type: kind,
           content: "{}",
           confidence: 1,
@@ -4045,28 +4021,17 @@ async function pickWorkspace(client, opts = {}) {
   if (candidates.length === 0) candidates = all;
   const dirToks = new Set(nameTokens(dirName));
   const isMatch = (w) => nameTokens(w.name).some((t) => dirToks.has(t));
-  const suggestions = candidates.filter(isMatch);
-  let pool = candidates;
-  if (candidates.length > 12 && suggestions.length === 0) {
-    const q = (await promptText(`Filter ${candidates.length} workspaces (substring, Enter to list all)?`, "")).trim().toLowerCase();
-    if (q) {
-      const hits = candidates.filter((w) => `${w.name} ${workspacePath(w, byId)}`.toLowerCase().includes(q));
-      if (hits.length > 0) pool = hits;
-      else process.stderr.write(`no match for "${q}" \u2014 listing all
-`);
-    }
-  }
   const SKIP = "__skip__";
   const byPath = (a, b) => workspacePath(a, byId).localeCompare(workspacePath(b, byId));
-  const matched = pool.filter(isMatch).sort(byPath);
-  const rest = pool.filter((w) => !isMatch(w)).sort(byPath);
+  const matched = candidates.filter(isMatch).sort(byPath);
+  const rest = candidates.filter((w) => !isMatch(w)).sort(byPath);
   const choices = [
     ...matched.map((w) => ({ label: workspacePath(w, byId), value: w.id, hint: style.dim(`matches "${dirName}"`) })),
     ...rest.map((w) => ({ label: workspacePath(w, byId), value: w.id, hint: w.id })),
     { label: style.dim("skip \u2014 don't bind a workspace"), value: SKIP, hint: void 0 }
   ];
   const defaultValue = matched.length === 1 ? matched[0].id : SKIP;
-  const chosen = await promptSelect(promptLabel, choices, defaultValue);
+  const chosen = candidates.length > 12 ? await promptAutocomplete(promptLabel, choices, defaultValue) : await promptSelect(promptLabel, choices, defaultValue);
   if (chosen === SKIP) return void 0;
   const picked = byId.get(chosen);
   const collisions = all.filter((w) => w.id !== picked.id && namesCollide(w.name, picked.name));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.6.239-rc.6418da97",
+  "version": "2026.7.2",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",
@@ -24,11 +24,12 @@
     "registry": "https://registry.npmjs.org/"
   },
   "dependencies": {
+    "@clack/prompts": "^1.6.0",
     "@microsoft/signalr": "^10.0.0",
+    "@modelcontextprotocol/sdk": "^1.12.0",
     "commander": "^12.1.0",
     "open": "^10.1.0",
-    "openapi-fetch": "^0.13.0",
-    "@modelcontextprotocol/sdk": "^1.12.0"
+    "openapi-fetch": "^0.13.0"
   },
   "devDependencies": {
     "@types/node": "^20.14.0",