@sechroom/cli 2026.7.20 → 2026.7.21-rc.59d9df67

package/dist/index.js

@@ -2213,7 +2213,7 @@ function registerExecutor(program2) {
       );
   });
   executor.command("refresh <id>").description("Refresh one advertisement lease once").option("--ttl <seconds>", "Advertisement TTL (30-600)", parseInteger, 120).action(async (id, opts, cmd) => {
-    const data = await refresh(
+    const data = await refreshExecutorInstance(
       resolveConfig(cmd.optsWithGlobals()),
       id,
       opts.ttl
@@ -2224,13 +2224,13 @@ function registerExecutor(program2) {
     if (opts.interval >= opts.ttl)
       fail("heartbeat interval must be shorter than the TTL");
     const cfg = resolveConfig(cmd.optsWithGlobals());
-    await refresh(cfg, id, opts.ttl);
+    await refreshExecutorInstance(cfg, id, opts.ttl);
     process.stderr.write(
       style.green("executor heartbeat active") + style.dim(` \u2014 ${id}
 `)
     );
     await holdHeartbeat(async () => {
-      await refresh(cfg, id, opts.ttl);
+      await refreshExecutorInstance(cfg, id, opts.ttl);
     }, opts.interval * 1e3);
   });
   executor.command("offers <id>").description("List live dispatch offers addressed to this exact instance").action(async (id, _opts, cmd) => {
@@ -2275,7 +2275,7 @@ function parseTransport(value) {
       return fail("transport must be push or pull");
   }
 }
-async function refresh(cfg, id, ttlSeconds) {
+async function refreshExecutorInstance(cfg, id, ttlSeconds) {
   return api(
     cfg,
     `/me/executor-instances/${encodeURIComponent(id)}/refresh`,
@@ -2367,8 +2367,7 @@ function registerChannel(program2) {
   );
   const withFilterOpts = (c) => c.option(
     "--name <name>",
-    "Subscription name (idempotent per name)",
-    "wlp-dispatch"
+    "Deprecated: ignored; the installed executor selects its delivery subscription"
   ).option(
     "--tag <tag...>",
     "Deprecated: executor eligibility comes from the installed capability advertisement"
@@ -2404,6 +2403,11 @@ function registerChannel(program2) {
       instance.id
     );
     await drain();
+    const stopReconciliation = startOfferReconciliation(drain);
+    const stopHeartbeat = startExecutorHeartbeat(
+      () => refreshExecutorInstance(cfg, instance.id, located.state.ttlSeconds),
+      located.state.refreshAfterSeconds * 1e3
+    );
     if (json) {
       emit(
         {
@@ -2423,7 +2427,12 @@ function registerChannel(program2) {
         ) + style.dim("streaming matched events to stdout; Ctrl-C to stop.\n")
       );
     }
-    await holdOpen(conn);
+    try {
+      await holdOpen(conn);
+    } finally {
+      stopReconciliation();
+      stopHeartbeat();
+    }
   });
   withFilterOpts(
     channel.command("mcp").description(
@@ -2464,13 +2473,23 @@ function registerChannel(program2) {
       instance.id
     );
     await drain();
+    const stopReconciliation = startOfferReconciliation(drain);
+    const stopHeartbeat = startExecutorHeartbeat(
+      () => refreshExecutorInstance(cfg, instance.id, located.state.ttlSeconds),
+      located.state.refreshAfterSeconds * 1e3
+    );
     process.stderr.write(
       style.dim(
         `sechroom channel (mcp) \u2014 tenant ${cfg.tenant}, executor ${located.state.instanceKey}
 `
       )
     );
-    await holdOpen(conn);
+    try {
+      await holdOpen(conn);
+    } finally {
+      stopReconciliation();
+      stopHeartbeat();
+    }
   });
   channel.command("install").description(
     "Wire `sechroom channel mcp` into the project .mcp.json as a Claude Code channel MCP server (idempotent)"
@@ -2487,7 +2506,7 @@ function registerChannel(program2) {
   ).option("--dry-run", "Print what would change; write nothing").action((opts) => {
     const path = join9(process.cwd(), ".mcp.json");
     const dryRun = Boolean(opts.dryRun);
-    const args = ["channel", "mcp", "--name", opts.name];
+    const args = ["channel", "mcp"];
     const entry = { command: "sechroom", args };
     const config2 = readMcpConfig(path);
     config2.mcpServers ??= {};
@@ -2544,11 +2563,11 @@ function requireExecutorState() {
   return located;
 }
 function warnLegacyChannelOptions(opts) {
-  if ((opts.workspace?.length ?? 0) === 0 && (opts.tag?.length ?? 0) === 0 && !opts.executorInstance)
+  if (!opts.name && (opts.workspace?.length ?? 0) === 0 && (opts.tag?.length ?? 0) === 0 && !opts.executorInstance)
     return;
   process.stderr.write(
     style.dim(
-      "channel: --workspace, --tag, and --executor-instance are retired; eligibility and identity come from the installed executor advertisement.\n"
+      "channel: --name, --workspace, --tag, and --executor-instance are retired; delivery, eligibility, and identity come from the installed executor advertisement.\n"
     )
   );
 }
@@ -2565,6 +2584,26 @@ function createClaimDrain(cfg, executorInstanceId, deliver, dependencies = {}) {
     return active2;
   };
 }
+function startOfferReconciliation(drain, intervalMilliseconds = 5e3, dependencies = {}) {
+  const schedule = dependencies.setInterval ?? setInterval;
+  const cancel = dependencies.clearInterval ?? clearInterval;
+  const onError = dependencies.onError ?? ((error) => process.stderr.write(err(`channel claim failed: ${String(error)}
+`)));
+  const timer = schedule(() => {
+    void drain().catch(onError);
+  }, intervalMilliseconds);
+  return () => cancel(timer);
+}
+function startExecutorHeartbeat(refresh, intervalMilliseconds, dependencies = {}) {
+  const schedule = dependencies.setInterval ?? setInterval;
+  const cancel = dependencies.clearInterval ?? clearInterval;
+  const onError = dependencies.onError ?? ((error) => process.stderr.write(err(`channel heartbeat failed: ${String(error)}
+`)));
+  const timer = schedule(() => {
+    void refresh().catch(onError);
+  }, intervalMilliseconds);
+  return () => cancel(timer);
+}
 async function drainClaims(cfg, executorInstanceId, deliver, dependencies = {}) {
   const request = dependencies.request ?? api;
   const sleep = dependencies.sleep ?? ((milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds)));
@@ -3518,6 +3557,7 @@ Examples:
 }
 
 // src/commands/decomposition.ts
+import { readFile } from "fs/promises";
 function registerDecomposition(program2) {
   const decomposition = program2.command("decomposition").description(
     "Drive a WLP decomposition: decompose a brief, then execute / accept / reject"
@@ -3527,6 +3567,8 @@ function registerDecomposition(program2) {
     `
 Examples:
   $ sechroom decomposition decompose mem_XXXX
+  $ sechroom decomposition from-plan mem_XXXX --file plan.json
+  $ sechroom decomposition plan wlp_XXXX
   $ sechroom decomposition execute sug_XXXX
   $ sechroom decomposition publish-run sug_XXXX
   $ sechroom decomposition accept sug_XXXX
@@ -3549,6 +3591,47 @@ Examples:
       cmd.optsWithGlobals().json
     );
   });
+  decomposition.command("from-plan <briefId>").description(
+    "Create a decomposition from a hand-authored JSON plan; tasks may carry Unix-millisecond wakeAtMs"
+  ).requiredOption(
+    "--file <path>",
+    "JSON file containing { project, tasks, source? }; use - for stdin"
+  ).action(async (briefId, opts, cmd) => {
+    const raw = opts.file === "-" ? await readStdin2() : await readFile(opts.file, "utf8");
+    const body = parsePlanInput(raw, opts.file);
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi(
+      "Creating decomposition from plan",
+      async () => {
+        const client = await makeClient(cfg);
+        return client.POST("/work-briefs/{id}/decompose-from-plan", {
+          params: { path: { id: briefId } },
+          body
+        });
+      }
+    );
+    emitAction(
+      `created ${style.bold(data.suggestionId)} from ${data.taskCount} hand-authored task(s)`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
+  decomposition.command("plan <decompositionId>").description(
+    "Inspect the compiled plan, including each scheduled step's Unix-millisecond wakeAtMs"
+  ).action(async (decompositionId, _opts, cmd) => {
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi("Reading decomposition plan", async () => {
+      const client = await makeClient(cfg);
+      return client.GET("/decompositions/{id}/plan", {
+        params: { path: { id: decompositionId } }
+      });
+    });
+    emitAction(
+      `read ${style.bold(decompositionId)} plan (${data.steps.length} step(s))`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
   decomposition.command("execute <decompositionId>").description(
     "Execute a decomposition's Task graph (POST /decompositions/{id}/execute)"
   ).action(async (decompositionId, _opts, cmd) => {
@@ -3618,6 +3701,24 @@ Examples:
     );
   });
 }
+function parsePlanInput(raw, sourceName = "plan input") {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch (error) {
+    throw new Error(
+      `${sourceName} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  if (!value || typeof value !== "object" || !Array.isArray(value.tasks))
+    throw new Error(`${sourceName} must contain an object with a tasks array`);
+  return value;
+}
+async function readStdin2() {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf8");
+}
 
 // src/commands/filing.ts
 function registerFiling(program2) {
@@ -5883,23 +5984,23 @@ Examples:
     });
     emit(data, cmd.optsWithGlobals().json);
   });
-  suggestion.command("accept <id>").description("Accept a suggestion (POST /relationship-suggestions/{id}/accept)").action(async (id, _opts, cmd) => {
+  suggestion.command("accept <id>").description("Accept a suggestion (POST /relationship-suggestions/{instanceId}/accept)").action(async (id, _opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const data = await runApi("Accepting suggestion", async () => {
       const client = await makeClient(cfg);
-      return client.POST("/relationship-suggestions/{id}/accept", {
-        params: { path: { id } },
+      return client.POST("/relationship-suggestions/{instanceId}/accept", {
+        params: { path: { instanceId: id } },
         body: {}
       });
     });
     emitAction(`accepted suggestion ${style.bold(id)}`, data, cmd.optsWithGlobals().json);
   });
-  suggestion.command("reject <id>").description("Reject a suggestion (POST /relationship-suggestions/{id}/reject)").option("--reason <reason>", "Why it's being rejected").option("--reason-code <code>", "Structured reason code").action(async (id, opts, cmd) => {
+  suggestion.command("reject <id>").description("Reject a suggestion (POST /relationship-suggestions/{instanceId}/reject)").option("--reason <reason>", "Why it's being rejected").option("--reason-code <code>", "Structured reason code").action(async (id, opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const data = await runApi("Rejecting suggestion", async () => {
       const client = await makeClient(cfg);
-      return client.POST("/relationship-suggestions/{id}/reject", {
-        params: { path: { id } },
+      return client.POST("/relationship-suggestions/{instanceId}/reject", {
+        params: { path: { instanceId: id } },
         body: {
           reason: opts.reason ?? null,
           ...opts.reasonCode ? { reasonCode: opts.reasonCode } : {}
@@ -6452,7 +6553,7 @@ function registerTelemetry(program2) {
     "Per-turn telemetry self-report for Claude Code hooks \u2014 Stop/SubagentStop \u2192 parsed + terminal, Notification/PermissionDenied \u2192 approval (reads stdin; no-op unless bound). Fail-soft."
   ).action(async (_opts, cmd) => {
     try {
-      const raw = await readStdin2();
+      const raw = await readStdin3();
       const input = parseHookInput2(raw);
       const cwd = input.cwd ?? process.cwd();
       const binding = findBinding(cwd);
@@ -6644,7 +6745,7 @@ function isPermissionNotification(input) {
   if (t) return t.includes("permission");
   return (input.message ?? "").toLowerCase().includes("permission");
 }
-async function readStdin2() {
+async function readStdin3() {
   if (process.stdin.isTTY) return "";
   const chunks = [];
   for await (const chunk of process.stdin) chunks.push(chunk);
@@ -6874,6 +6975,56 @@ Examples:
   });
 }
 
+// src/commands/work-brief.ts
+function registerWorkBrief(program2) {
+  const workBrief = program2.command("work-brief").description("Control an active work brief run");
+  workBrief.addHelpText(
+    "after",
+    `
+Examples:
+  $ sechroom work-brief pause mem_XXXX --reason-code operator-hold --source claude-code-chris
+  $ sechroom work-brief resume mem_XXXX --reason-code operator-resume --source claude-code-chris --reason "Ready to continue"
+  $ sechroom work-brief cancel mem_XXXX --reason-code operator-stopped --source claude-code-chris --reason "Work no longer required"`
+  );
+  registerLifecycleAction(workBrief, "pause");
+  registerLifecycleAction(workBrief, "resume");
+  registerLifecycleAction(workBrief, "cancel");
+}
+function registerLifecycleAction(workBrief, action) {
+  const presentParticiple = action === "pause" ? "Pausing" : action === "resume" ? "Resuming" : "Cancelling";
+  const pastTense = action === "pause" ? "paused" : action === "resume" ? "resumed" : "cancelled";
+  workBrief.command(`${action} <briefId>`).description(`${capitalize(action)} an active work brief run`).requiredOption(
+    "--reason-code <code>",
+    "Stable machine-readable reason code"
+  ).requiredOption(
+    "--source <source>",
+    "Calling surface or lane recorded in the audit"
+  ).option("--reason <text>", "Optional human-readable reason").action(async (briefId, opts, cmd) => {
+    const globals = cmd.optsWithGlobals();
+    const cfg = resolveConfig(globals);
+    const data = await runApi(`${presentParticiple} work brief`, async () => {
+      const client = await makeClient(cfg);
+      return client.POST("/work-briefs/{id}/lifecycle", {
+        params: { path: { id: briefId } },
+        body: {
+          action,
+          reasonCode: opts.reasonCode,
+          source: opts.source,
+          reasonText: opts.reason ?? null
+        }
+      });
+    });
+    emitAction(
+      `${pastTense} work brief ${style.bold(briefId)} \u2192 ${data.outcome}`,
+      data,
+      globals.json
+    );
+  });
+}
+function capitalize(value) {
+  return value.charAt(0).toUpperCase() + value.slice(1);
+}
+
 // src/index.ts
 function resolveVersion() {
   try {
@@ -7036,6 +7187,7 @@ registerLookup(program);
 registerRelationships(program);
 registerWorkspace(program);
 registerProject(program);
+registerWorkBrief(program);
 registerDecomposition(program);
 registerExecutor(program);
 registerClose(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.20",
+  "version": "2026.7.21-rc.59d9df67",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",