@sechroom/cli 2026.7.21 → 2026.7.22-rc.f3ceef6d

package/dist/index.js

@@ -1031,7 +1031,7 @@ async function resolveInstruction(cfg, section, personalWorkspaceId) {
     const { data } = await client.POST("/memories/search", {
       body: { query: null, textQuery: null, semanticQuery: null, hybrid: false, limit: 1, includeArchived: false, includeSystem: false, tags }
     });
-    const hits = data ?? [];
+    const hits = data?.items ?? [];
     if (hits.length === 0) continue;
     const templateId = hits[0].id;
     const template = await fetchMemoryFields(cfg, templateId);
@@ -1041,7 +1041,7 @@ async function resolveInstruction(cfg, section, personalWorkspaceId) {
       const { data: ovr } = await client.POST("/memories/search", {
         body: { query: null, textQuery: null, semanticQuery: null, hybrid: false, limit: 1, includeArchived: false, includeSystem: false, tags: ["sechroom:role:override", `sechroom:template-ref:${templateId}`], owner: { type: "Workspace", id: personalWorkspaceId } }
       });
-      const ovrHits = ovr ?? [];
+      const ovrHits = ovr?.items ?? [];
       if (ovrHits.length > 0) {
         const override = await fetchMemoryFields(cfg, ovrHits[0].id);
         if (typeof override?.text === "string" && override.text.length > 0) {
@@ -2213,7 +2213,7 @@ function registerExecutor(program2) {
       );
   });
   executor.command("refresh <id>").description("Refresh one advertisement lease once").option("--ttl <seconds>", "Advertisement TTL (30-600)", parseInteger, 120).action(async (id, opts, cmd) => {
-    const data = await refresh(
+    const data = await refreshExecutorInstance(
       resolveConfig(cmd.optsWithGlobals()),
       id,
       opts.ttl
@@ -2224,13 +2224,13 @@ function registerExecutor(program2) {
     if (opts.interval >= opts.ttl)
       fail("heartbeat interval must be shorter than the TTL");
     const cfg = resolveConfig(cmd.optsWithGlobals());
-    await refresh(cfg, id, opts.ttl);
+    await refreshExecutorInstance(cfg, id, opts.ttl);
     process.stderr.write(
       style.green("executor heartbeat active") + style.dim(` \u2014 ${id}
 `)
     );
     await holdHeartbeat(async () => {
-      await refresh(cfg, id, opts.ttl);
+      await refreshExecutorInstance(cfg, id, opts.ttl);
     }, opts.interval * 1e3);
   });
   executor.command("offers <id>").description("List live dispatch offers addressed to this exact instance").action(async (id, _opts, cmd) => {
@@ -2275,7 +2275,7 @@ function parseTransport(value) {
       return fail("transport must be push or pull");
   }
 }
-async function refresh(cfg, id, ttlSeconds) {
+async function refreshExecutorInstance(cfg, id, ttlSeconds) {
   return api(
     cfg,
     `/me/executor-instances/${encodeURIComponent(id)}/refresh`,
@@ -2404,6 +2404,10 @@ function registerChannel(program2) {
     );
     await drain();
     const stopReconciliation = startOfferReconciliation(drain);
+    const stopHeartbeat = startExecutorHeartbeat(
+      () => refreshExecutorInstance(cfg, instance.id, located.state.ttlSeconds),
+      located.state.refreshAfterSeconds * 1e3
+    );
     if (json) {
       emit(
         {
@@ -2427,6 +2431,7 @@ function registerChannel(program2) {
       await holdOpen(conn);
     } finally {
       stopReconciliation();
+      stopHeartbeat();
     }
   });
   withFilterOpts(
@@ -2469,6 +2474,10 @@ function registerChannel(program2) {
     );
     await drain();
     const stopReconciliation = startOfferReconciliation(drain);
+    const stopHeartbeat = startExecutorHeartbeat(
+      () => refreshExecutorInstance(cfg, instance.id, located.state.ttlSeconds),
+      located.state.refreshAfterSeconds * 1e3
+    );
     process.stderr.write(
       style.dim(
         `sechroom channel (mcp) \u2014 tenant ${cfg.tenant}, executor ${located.state.instanceKey}
@@ -2479,6 +2488,7 @@ function registerChannel(program2) {
       await holdOpen(conn);
     } finally {
       stopReconciliation();
+      stopHeartbeat();
     }
   });
   channel.command("install").description(
@@ -2584,6 +2594,16 @@ function startOfferReconciliation(drain, intervalMilliseconds = 5e3, dependencie
   }, intervalMilliseconds);
   return () => cancel(timer);
 }
+function startExecutorHeartbeat(refresh, intervalMilliseconds, dependencies = {}) {
+  const schedule = dependencies.setInterval ?? setInterval;
+  const cancel = dependencies.clearInterval ?? clearInterval;
+  const onError = dependencies.onError ?? ((error) => process.stderr.write(err(`channel heartbeat failed: ${String(error)}
+`)));
+  const timer = schedule(() => {
+    void refresh().catch(onError);
+  }, intervalMilliseconds);
+  return () => cancel(timer);
+}
 async function drainClaims(cfg, executorInstanceId, deliver, dependencies = {}) {
   const request = dependencies.request ?? api;
   const sleep = dependencies.sleep ?? ((milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds)));
@@ -3537,6 +3557,7 @@ Examples:
 }
 
 // src/commands/decomposition.ts
+import { readFile } from "fs/promises";
 function registerDecomposition(program2) {
   const decomposition = program2.command("decomposition").description(
     "Drive a WLP decomposition: decompose a brief, then execute / accept / reject"
@@ -3546,6 +3567,8 @@ function registerDecomposition(program2) {
     `
 Examples:
   $ sechroom decomposition decompose mem_XXXX
+  $ sechroom decomposition from-plan mem_XXXX --file plan.json
+  $ sechroom decomposition plan wlp_XXXX
   $ sechroom decomposition execute sug_XXXX
   $ sechroom decomposition publish-run sug_XXXX
   $ sechroom decomposition accept sug_XXXX
@@ -3568,6 +3591,47 @@ Examples:
       cmd.optsWithGlobals().json
     );
   });
+  decomposition.command("from-plan <briefId>").description(
+    "Create a decomposition from a hand-authored JSON plan; tasks may carry Unix-millisecond wakeAtMs"
+  ).requiredOption(
+    "--file <path>",
+    "JSON file containing { project, tasks, source? }; use - for stdin"
+  ).action(async (briefId, opts, cmd) => {
+    const raw = opts.file === "-" ? await readStdin2() : await readFile(opts.file, "utf8");
+    const body = parsePlanInput(raw, opts.file);
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi(
+      "Creating decomposition from plan",
+      async () => {
+        const client = await makeClient(cfg);
+        return client.POST("/work-briefs/{id}/decompose-from-plan", {
+          params: { path: { id: briefId } },
+          body
+        });
+      }
+    );
+    emitAction(
+      `created ${style.bold(data.suggestionId)} from ${data.taskCount} hand-authored task(s)`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
+  decomposition.command("plan <decompositionId>").description(
+    "Inspect the compiled plan, including each scheduled step's Unix-millisecond wakeAtMs"
+  ).action(async (decompositionId, _opts, cmd) => {
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi("Reading decomposition plan", async () => {
+      const client = await makeClient(cfg);
+      return client.GET("/decompositions/{id}/plan", {
+        params: { path: { id: decompositionId } }
+      });
+    });
+    emitAction(
+      `read ${style.bold(decompositionId)} plan (${data.steps.length} step(s))`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
   decomposition.command("execute <decompositionId>").description(
     "Execute a decomposition's Task graph (POST /decompositions/{id}/execute)"
   ).action(async (decompositionId, _opts, cmd) => {
@@ -3637,6 +3701,24 @@ Examples:
     );
   });
 }
+function parsePlanInput(raw, sourceName = "plan input") {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch (error) {
+    throw new Error(
+      `${sourceName} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  if (!value || typeof value !== "object" || !Array.isArray(value.tasks))
+    throw new Error(`${sourceName} must contain an object with a tasks array`);
+  return value;
+}
+async function readStdin2() {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf8");
+}
 
 // src/commands/filing.ts
 function registerFiling(program2) {
@@ -5902,23 +5984,23 @@ Examples:
     });
     emit(data, cmd.optsWithGlobals().json);
   });
-  suggestion.command("accept <id>").description("Accept a suggestion (POST /relationship-suggestions/{id}/accept)").action(async (id, _opts, cmd) => {
+  suggestion.command("accept <id>").description("Accept a suggestion (POST /relationship-suggestions/{instanceId}/accept)").action(async (id, _opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const data = await runApi("Accepting suggestion", async () => {
       const client = await makeClient(cfg);
-      return client.POST("/relationship-suggestions/{id}/accept", {
-        params: { path: { id } },
+      return client.POST("/relationship-suggestions/{instanceId}/accept", {
+        params: { path: { instanceId: id } },
         body: {}
       });
     });
     emitAction(`accepted suggestion ${style.bold(id)}`, data, cmd.optsWithGlobals().json);
   });
-  suggestion.command("reject <id>").description("Reject a suggestion (POST /relationship-suggestions/{id}/reject)").option("--reason <reason>", "Why it's being rejected").option("--reason-code <code>", "Structured reason code").action(async (id, opts, cmd) => {
+  suggestion.command("reject <id>").description("Reject a suggestion (POST /relationship-suggestions/{instanceId}/reject)").option("--reason <reason>", "Why it's being rejected").option("--reason-code <code>", "Structured reason code").action(async (id, opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const data = await runApi("Rejecting suggestion", async () => {
       const client = await makeClient(cfg);
-      return client.POST("/relationship-suggestions/{id}/reject", {
-        params: { path: { id } },
+      return client.POST("/relationship-suggestions/{instanceId}/reject", {
+        params: { path: { instanceId: id } },
         body: {
           reason: opts.reason ?? null,
           ...opts.reasonCode ? { reasonCode: opts.reasonCode } : {}
@@ -6471,7 +6553,7 @@ function registerTelemetry(program2) {
     "Per-turn telemetry self-report for Claude Code hooks \u2014 Stop/SubagentStop \u2192 parsed + terminal, Notification/PermissionDenied \u2192 approval (reads stdin; no-op unless bound). Fail-soft."
   ).action(async (_opts, cmd) => {
     try {
-      const raw = await readStdin2();
+      const raw = await readStdin3();
       const input = parseHookInput2(raw);
       const cwd = input.cwd ?? process.cwd();
       const binding = findBinding(cwd);
@@ -6663,7 +6745,7 @@ function isPermissionNotification(input) {
   if (t) return t.includes("permission");
   return (input.message ?? "").toLowerCase().includes("permission");
 }
-async function readStdin2() {
+async function readStdin3() {
   if (process.stdin.isTTY) return "";
   const chunks = [];
   for await (const chunk of process.stdin) chunks.push(chunk);
@@ -6893,6 +6975,56 @@ Examples:
   });
 }
 
+// src/commands/work-brief.ts
+function registerWorkBrief(program2) {
+  const workBrief = program2.command("work-brief").description("Control an active work brief run");
+  workBrief.addHelpText(
+    "after",
+    `
+Examples:
+  $ sechroom work-brief pause mem_XXXX --reason-code operator-hold --source claude-code-chris
+  $ sechroom work-brief resume mem_XXXX --reason-code operator-resume --source claude-code-chris --reason "Ready to continue"
+  $ sechroom work-brief cancel mem_XXXX --reason-code operator-stopped --source claude-code-chris --reason "Work no longer required"`
+  );
+  registerLifecycleAction(workBrief, "pause");
+  registerLifecycleAction(workBrief, "resume");
+  registerLifecycleAction(workBrief, "cancel");
+}
+function registerLifecycleAction(workBrief, action) {
+  const presentParticiple = action === "pause" ? "Pausing" : action === "resume" ? "Resuming" : "Cancelling";
+  const pastTense = action === "pause" ? "paused" : action === "resume" ? "resumed" : "cancelled";
+  workBrief.command(`${action} <briefId>`).description(`${capitalize(action)} an active work brief run`).requiredOption(
+    "--reason-code <code>",
+    "Stable machine-readable reason code"
+  ).requiredOption(
+    "--source <source>",
+    "Calling surface or lane recorded in the audit"
+  ).option("--reason <text>", "Optional human-readable reason").action(async (briefId, opts, cmd) => {
+    const globals = cmd.optsWithGlobals();
+    const cfg = resolveConfig(globals);
+    const data = await runApi(`${presentParticiple} work brief`, async () => {
+      const client = await makeClient(cfg);
+      return client.POST("/work-briefs/{id}/lifecycle", {
+        params: { path: { id: briefId } },
+        body: {
+          action,
+          reasonCode: opts.reasonCode,
+          source: opts.source,
+          reasonText: opts.reason ?? null
+        }
+      });
+    });
+    emitAction(
+      `${pastTense} work brief ${style.bold(briefId)} \u2192 ${data.outcome}`,
+      data,
+      globals.json
+    );
+  });
+}
+function capitalize(value) {
+  return value.charAt(0).toUpperCase() + value.slice(1);
+}
+
 // src/index.ts
 function resolveVersion() {
   try {
@@ -7055,6 +7187,7 @@ registerLookup(program);
 registerRelationships(program);
 registerWorkspace(program);
 registerProject(program);
+registerWorkBrief(program);
 registerDecomposition(program);
 registerExecutor(program);
 registerClose(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.21",
+  "version": "2026.7.22-rc.f3ceef6d",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",