@sechroom/cli 2026.7.27 → 2026.7.28

package/dist/index.js

@@ -3568,6 +3568,7 @@ function registerWorkPlan(program2) {
 Examples:
   $ sechroom work-plan create mem_XXXX
   $ sechroom work-plan create-from-tasks mem_XXXX --file plan.json
+  $ sechroom work-plan append wlp_XXXX --file append.json
   $ sechroom work-plan get-plan wlp_XXXX
   $ sechroom work-plan execute wlp_XXXX
   $ sechroom work-plan publish-context-pack wlp_XXXX
@@ -3616,6 +3617,28 @@ Examples:
       cmd.optsWithGlobals().json
     );
   });
+  workPlan.command("append <decompositionId>").description(
+    "Append hand-authored task(s) to a running work plan; they land proposed until ratified (POST /decompositions/{id}/append-tasks)"
+  ).requiredOption(
+    "--file <path>",
+    "JSON file containing { tasks, gates? } (the AppendTasksInput shape); use - for stdin"
+  ).action(async (decompositionId, opts, cmd) => {
+    const raw = opts.file === "-" ? await readStdin2() : await readFile(opts.file, "utf8");
+    const body = parseAppendInput(raw, opts.file);
+    const cfg = resolveConfig(cmd.optsWithGlobals());
+    const data = await runApi("Appending tasks to work plan", async () => {
+      const client = await makeClient(cfg);
+      return client.POST("/decompositions/{id}/append-tasks", {
+        params: { path: { id: decompositionId } },
+        body
+      });
+    });
+    emitAction(
+      `appended ${style.bold(String(data.appendedTaskIds.length))} task(s) to ${style.bold(decompositionId)}`,
+      data,
+      cmd.optsWithGlobals().json
+    );
+  });
   workPlan.command("get-plan <decompositionId>").description(
     "Inspect the compiled plan, including each scheduled step's Unix-millisecond wakeAtMs"
   ).action(async (decompositionId, _opts, cmd) => {
@@ -3701,6 +3724,19 @@ Examples:
     );
   });
 }
+function parseAppendInput(raw, sourceName = "append input") {
+  let value;
+  try {
+    value = JSON.parse(raw);
+  } catch (error) {
+    throw new Error(
+      `${sourceName} is not valid JSON: ${error instanceof Error ? error.message : String(error)}`
+    );
+  }
+  if (!value || typeof value !== "object" || !Array.isArray(value.tasks))
+    throw new Error(`${sourceName} must contain an object with a tasks array`);
+  return value;
+}
 function parsePlanInput(raw, sourceName = "plan input") {
   let value;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.27",
+  "version": "2026.7.28",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",