@sechroom/cli 2026.7.11 → 2026.7.12

package/dist/index.js

@@ -2566,6 +2566,9 @@ function registerClose(program2) {
   ).option(
     "--no-status-flip",
     "Skip the status flip on a BARE task. (Managed runs never flip here \u2014 the run engine reflects the verdict onto the task on resume.)"
+  ).option(
+    "--to-version <n>",
+    "Pin the Reference edge at this task version \u2014 the DISPATCHED version the executor worked against (D-continuity-2). Default: the task's current version (status flips are metadata edits that don't bump the version, so current == dispatched in the normal case; pass this when the task's content changed between dispatch and close)."
   ).option("--source <source>", "Source / lane stamp", "cli").addHelpText(
     "after",
     `
@@ -2599,6 +2602,7 @@ Examples:
       );
     const client = await makeClient(cfg);
     let matchTags;
+    let dispatchedVersion;
     if (opts.decomposition) {
       const run = await runApi(
         "Reading run contract",
@@ -2616,6 +2620,8 @@ Examples:
           `run ${opts.decomposition} is awaiting task ${run.awaitingTaskId}, not ${opts.task} \u2014 refusing to mis-key the resume.`
         );
       matchTags = await_.matchTags;
+      if (typeof await_.dispatchedTaskVersion === "number")
+        dispatchedVersion = await_.dispatchedTaskVersion;
     } else {
       matchTags = [`wlp-task:${opts.task}`];
     }
@@ -2642,11 +2648,34 @@ Examples:
         }
       })
     );
+    let toVersion;
+    if (opts.toVersion !== void 0) {
+      toVersion = Number(opts.toVersion);
+      if (!Number.isInteger(toVersion) || toVersion < 1)
+        fail(
+          `--to-version must be an integer >= 1 \u2014 got '${opts.toVersion}'`
+        );
+    } else if (dispatchedVersion !== void 0) {
+      toVersion = dispatchedVersion;
+    } else {
+      const task = await runApi(
+        "Reading task version",
+        async () => client.GET("/memories/{memoryId}", {
+          params: { path: { memoryId: opts.task } }
+        })
+      );
+      const v = task?.item?.currentVersion ?? task?.currentVersion;
+      if (typeof v !== "number" || v < 1)
+        fail(
+          `could not read task ${opts.task} version to pin the Reference edge \u2014 pass --to-version <n>`
+        );
+      toVersion = v;
+    }
     const edge = await runApi(
       "Wiring Reference edge",
       async () => client.POST("/memories/{memoryId}/relationships", {
         params: { path: { memoryId: closeout.id } },
-        body: { toMemoryId: opts.task, type: "Reference" }
+        body: { toMemoryId: opts.task, type: "Reference", toVersion }
       })
     );
     let taskStatus;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.11",
+  "version": "2026.7.12",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",