@sechroom/cli 2026.7.24 → 2026.7.26

package/dist/index.js

@@ -1031,7 +1031,7 @@ async function resolveInstruction(cfg, section, personalWorkspaceId) {
     const { data } = await client.POST("/memories/search", {
       body: { query: null, textQuery: null, semanticQuery: null, hybrid: false, limit: 1, includeArchived: false, includeSystem: false, tags }
     });
-    const hits = data ?? [];
+    const hits = data?.items ?? [];
     if (hits.length === 0) continue;
     const templateId = hits[0].id;
     const template = await fetchMemoryFields(cfg, templateId);
@@ -1041,7 +1041,7 @@ async function resolveInstruction(cfg, section, personalWorkspaceId) {
       const { data: ovr } = await client.POST("/memories/search", {
         body: { query: null, textQuery: null, semanticQuery: null, hybrid: false, limit: 1, includeArchived: false, includeSystem: false, tags: ["sechroom:role:override", `sechroom:template-ref:${templateId}`], owner: { type: "Workspace", id: personalWorkspaceId } }
       });
-      const ovrHits = ovr ?? [];
+      const ovrHits = ovr?.items ?? [];
       if (ovrHits.length > 0) {
         const override = await fetchMemoryFields(cfg, ovrHits[0].id);
         if (typeof override?.text === "string" && override.text.length > 0) {
@@ -3557,6 +3557,7 @@ Examples:
 }
 
 // src/commands/decomposition.ts
+import { readFile } from "fs/promises";
 function registerDecomposition(program2) {
   const decomposition = program2.command("decomposition").description(
     "Drive a WLP decomposition: decompose a brief, then execute / accept / reject"
@@ -3566,6 +3567,8 @@ function registerDecomposition(program2) {
     `
 Examples:
   $ sechroom decomposition decompose mem_XXXX
+  $ sechroom decomposition from-plan mem_XXXX --file plan.json
+  $ sechroom decomposition plan wlp_XXXX
   $ sechroom decomposition execute sug_XXXX
   $ sechroom decomposition publish-run sug_XXXX
   $ sechroom decomposition accept sug_XXXX
@@ -3588,6 +3591,47 @@ Examples:
       cmd.optsWithGlobals().json
     );
   });
+  decomposition.command("from-plan <briefId>").description(
+    "Create a decomposition from a hand-authored JSON plan; tasks may carry Unix-millisecond wakeAtMs"
+  ).requiredOption(
+    "--file <path>",
+    "JSON file containing { project, tasks, source? }; use - for stdin"
+  ).action(async (briefId, opts, cmd) => {
+    const raw = opts.file === "-" ? await readStdin2() : await readFile(opts.file, "utf8");
+    const body = parsePlanInput(raw, opts.file);
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi(
+      "Creating decomposition from plan",
+      async () => {
+        const client = await makeClient(cfg);
+        return client.POST("/work-briefs/{id}/decompose-from-plan", {
+          params: { path: { id: briefId } },
+          body
+        });
+      }
+    );
+    emitAction(
+      `created ${style.bold(data.suggestionId)} from ${data.taskCount} hand-authored task(s)`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
+  decomposition.command("plan <decompositionId>").description(
+    "Inspect the compiled plan, including each scheduled step's Unix-millisecond wakeAtMs"
+  ).action(async (decompositionId, _opts, cmd) => {
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi("Reading decomposition plan", async () => {
+      const client = await makeClient(cfg);
+      return client.GET("/decompositions/{id}/plan", {
+        params: { path: { id: decompositionId } }
+      });
+    });
+    emitAction(
+      `read ${style.bold(decompositionId)} plan (${data.steps.length} step(s))`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
   decomposition.command("execute <decompositionId>").description(
     "Execute a decomposition's Task graph (POST /decompositions/{id}/execute)"
   ).action(async (decompositionId, _opts, cmd) => {
@@ -3657,6 +3701,24 @@ Examples:
     );
   });
 }
+function parsePlanInput(raw, sourceName = "plan input") {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch (error) {
+    throw new Error(
+      `${sourceName} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  if (!value || typeof value !== "object" || !Array.isArray(value.tasks))
+    throw new Error(`${sourceName} must contain an object with a tasks array`);
+  return value;
+}
+async function readStdin2() {
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(Buffer.from(chunk));
+  return Buffer.concat(chunks).toString("utf8");
+}
 
 // src/commands/filing.ts
 function registerFiling(program2) {
@@ -6491,7 +6553,7 @@ function registerTelemetry(program2) {
     "Per-turn telemetry self-report for Claude Code hooks \u2014 Stop/SubagentStop \u2192 parsed + terminal, Notification/PermissionDenied \u2192 approval (reads stdin; no-op unless bound). Fail-soft."
   ).action(async (_opts, cmd) => {
     try {
-      const raw = await readStdin2();
+      const raw = await readStdin3();
       const input = parseHookInput2(raw);
       const cwd = input.cwd ?? process.cwd();
       const binding = findBinding(cwd);
@@ -6683,7 +6745,7 @@ function isPermissionNotification(input) {
   if (t) return t.includes("permission");
   return (input.message ?? "").toLowerCase().includes("permission");
 }
-async function readStdin2() {
+async function readStdin3() {
   if (process.stdin.isTTY) return "";
   const chunks = [];
   for await (const chunk of process.stdin) chunks.push(chunk);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.24",
+  "version": "2026.7.26",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",