@sechroom/cli 2026.7.21 → 2026.7.23

package/dist/index.js

@@ -2213,7 +2213,7 @@ function registerExecutor(program2) {
       );
   });
   executor.command("refresh <id>").description("Refresh one advertisement lease once").option("--ttl <seconds>", "Advertisement TTL (30-600)", parseInteger, 120).action(async (id, opts, cmd) => {
-    const data = await refresh(
+    const data = await refreshExecutorInstance(
       resolveConfig(cmd.optsWithGlobals()),
       id,
       opts.ttl
@@ -2224,13 +2224,13 @@ function registerExecutor(program2) {
     if (opts.interval >= opts.ttl)
       fail("heartbeat interval must be shorter than the TTL");
     const cfg = resolveConfig(cmd.optsWithGlobals());
-    await refresh(cfg, id, opts.ttl);
+    await refreshExecutorInstance(cfg, id, opts.ttl);
     process.stderr.write(
       style.green("executor heartbeat active") + style.dim(` \u2014 ${id}
 `)
     );
     await holdHeartbeat(async () => {
-      await refresh(cfg, id, opts.ttl);
+      await refreshExecutorInstance(cfg, id, opts.ttl);
     }, opts.interval * 1e3);
   });
   executor.command("offers <id>").description("List live dispatch offers addressed to this exact instance").action(async (id, _opts, cmd) => {
@@ -2275,7 +2275,7 @@ function parseTransport(value) {
       return fail("transport must be push or pull");
   }
 }
-async function refresh(cfg, id, ttlSeconds) {
+async function refreshExecutorInstance(cfg, id, ttlSeconds) {
   return api(
     cfg,
     `/me/executor-instances/${encodeURIComponent(id)}/refresh`,
@@ -2404,6 +2404,10 @@ function registerChannel(program2) {
     );
     await drain();
     const stopReconciliation = startOfferReconciliation(drain);
+    const stopHeartbeat = startExecutorHeartbeat(
+      () => refreshExecutorInstance(cfg, instance.id, located.state.ttlSeconds),
+      located.state.refreshAfterSeconds * 1e3
+    );
     if (json) {
       emit(
         {
@@ -2427,6 +2431,7 @@ function registerChannel(program2) {
       await holdOpen(conn);
     } finally {
       stopReconciliation();
+      stopHeartbeat();
     }
   });
   withFilterOpts(
@@ -2469,6 +2474,10 @@ function registerChannel(program2) {
     );
     await drain();
     const stopReconciliation = startOfferReconciliation(drain);
+    const stopHeartbeat = startExecutorHeartbeat(
+      () => refreshExecutorInstance(cfg, instance.id, located.state.ttlSeconds),
+      located.state.refreshAfterSeconds * 1e3
+    );
     process.stderr.write(
       style.dim(
         `sechroom channel (mcp) \u2014 tenant ${cfg.tenant}, executor ${located.state.instanceKey}
@@ -2479,6 +2488,7 @@ function registerChannel(program2) {
       await holdOpen(conn);
     } finally {
       stopReconciliation();
+      stopHeartbeat();
     }
   });
   channel.command("install").description(
@@ -2584,6 +2594,16 @@ function startOfferReconciliation(drain, intervalMilliseconds = 5e3, dependencie
   }, intervalMilliseconds);
   return () => cancel(timer);
 }
+function startExecutorHeartbeat(refresh, intervalMilliseconds, dependencies = {}) {
+  const schedule = dependencies.setInterval ?? setInterval;
+  const cancel = dependencies.clearInterval ?? clearInterval;
+  const onError = dependencies.onError ?? ((error) => process.stderr.write(err(`channel heartbeat failed: ${String(error)}
+`)));
+  const timer = schedule(() => {
+    void refresh().catch(onError);
+  }, intervalMilliseconds);
+  return () => cancel(timer);
+}
 async function drainClaims(cfg, executorInstanceId, deliver, dependencies = {}) {
   const request = dependencies.request ?? api;
   const sleep = dependencies.sleep ?? ((milliseconds) => new Promise((resolve3) => setTimeout(resolve3, milliseconds)));
@@ -5902,23 +5922,23 @@ Examples:
     });
     emit(data, cmd.optsWithGlobals().json);
   });
-  suggestion.command("accept <id>").description("Accept a suggestion (POST /relationship-suggestions/{id}/accept)").action(async (id, _opts, cmd) => {
+  suggestion.command("accept <id>").description("Accept a suggestion (POST /relationship-suggestions/{instanceId}/accept)").action(async (id, _opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const data = await runApi("Accepting suggestion", async () => {
       const client = await makeClient(cfg);
-      return client.POST("/relationship-suggestions/{id}/accept", {
-        params: { path: { id } },
+      return client.POST("/relationship-suggestions/{instanceId}/accept", {
+        params: { path: { instanceId: id } },
         body: {}
       });
     });
     emitAction(`accepted suggestion ${style.bold(id)}`, data, cmd.optsWithGlobals().json);
   });
-  suggestion.command("reject <id>").description("Reject a suggestion (POST /relationship-suggestions/{id}/reject)").option("--reason <reason>", "Why it's being rejected").option("--reason-code <code>", "Structured reason code").action(async (id, opts, cmd) => {
+  suggestion.command("reject <id>").description("Reject a suggestion (POST /relationship-suggestions/{instanceId}/reject)").option("--reason <reason>", "Why it's being rejected").option("--reason-code <code>", "Structured reason code").action(async (id, opts, cmd) => {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const data = await runApi("Rejecting suggestion", async () => {
       const client = await makeClient(cfg);
-      return client.POST("/relationship-suggestions/{id}/reject", {
-        params: { path: { id } },
+      return client.POST("/relationship-suggestions/{instanceId}/reject", {
+        params: { path: { instanceId: id } },
         body: {
           reason: opts.reason ?? null,
           ...opts.reasonCode ? { reasonCode: opts.reasonCode } : {}
@@ -6893,6 +6913,54 @@ Examples:
   });
 }
 
+// src/commands/work-brief.ts
+function registerWorkBrief(program2) {
+  const workBrief = program2.command("work-brief").description("Control an active work brief run");
+  workBrief.addHelpText(
+    "after",
+    `
+Examples:
+  $ sechroom work-brief pause mem_XXXX --reason-code operator-hold --source claude-code-chris
+  $ sechroom work-brief resume mem_XXXX --reason-code operator-resume --source claude-code-chris --reason "Ready to continue"`
+  );
+  registerLifecycleAction(workBrief, "pause");
+  registerLifecycleAction(workBrief, "resume");
+}
+function registerLifecycleAction(workBrief, action) {
+  const presentParticiple = action === "pause" ? "Pausing" : "Resuming";
+  const pastTense = action === "pause" ? "paused" : "resumed";
+  workBrief.command(`${action} <briefId>`).description(`${capitalize(action)} an active work brief run`).requiredOption(
+    "--reason-code <code>",
+    "Stable machine-readable reason code"
+  ).requiredOption(
+    "--source <source>",
+    "Calling surface or lane recorded in the audit"
+  ).option("--reason <text>", "Optional human-readable reason").action(async (briefId, opts, cmd) => {
+    const globals = cmd.optsWithGlobals();
+    const cfg = resolveConfig(globals);
+    const data = await runApi(`${presentParticiple} work brief`, async () => {
+      const client = await makeClient(cfg);
+      return client.POST("/work-briefs/{id}/lifecycle", {
+        params: { path: { id: briefId } },
+        body: {
+          action,
+          reasonCode: opts.reasonCode,
+          source: opts.source,
+          reasonText: opts.reason ?? null
+        }
+      });
+    });
+    emitAction(
+      `${pastTense} work brief ${style.bold(briefId)} \u2192 ${data.outcome}`,
+      data,
+      globals.json
+    );
+  });
+}
+function capitalize(value) {
+  return value.charAt(0).toUpperCase() + value.slice(1);
+}
+
 // src/index.ts
 function resolveVersion() {
   try {
@@ -7055,6 +7123,7 @@ registerLookup(program);
 registerRelationships(program);
 registerWorkspace(program);
 registerProject(program);
+registerWorkBrief(program);
 registerDecomposition(program);
 registerExecutor(program);
 registerClose(program);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.21",
+  "version": "2026.7.23",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",