@sechroom/cli 2026.7.4 → 2026.7.6

package/dist/index.js

@@ -1545,6 +1545,7 @@ function registerChannel(program2) {
     const filter = readFilter(opts);
     const sub = await ensureSubscription(cfg, opts.name, filter);
     const conn = await openConnection(cfg, (payload) => {
+      if (!shouldDeliver(payload, filter)) return;
       process.stdout.write(
         (typeof payload === "string" ? payload : JSON.stringify(payload)) + "\n"
       );
@@ -1586,6 +1587,7 @@ function registerChannel(program2) {
     await mcp.connect(new StdioServerTransport());
     await ensureSubscription(cfg, opts.name, filter);
     const conn = await openConnection(cfg, (payload) => {
+      if (!shouldDeliver(payload, filter)) return;
       const { content, meta } = summarizeEvent(payload);
       void mcp.notification({
         method: "notifications/claude/channel",
@@ -1605,7 +1607,10 @@ function registerChannel(program2) {
   });
   channel.command("install").description(
     "Wire `sechroom channel mcp` into the project .mcp.json as a Claude Code channel MCP server (idempotent)"
-  ).option("--workspace <wsp...>", "Restrict dispatches to these workspace id(s)").option(
+  ).option(
+    "--workspace <wsp...>",
+    "Restrict dispatches to these workspace id(s)"
+  ).option(
     "--tag <tag...>",
     "Tag(s) a dispatch must carry to match (repeatable). Default targets WLP task dispatches.",
     ["kind:task"]
@@ -1726,20 +1731,58 @@ function holdOpen(conn) {
     process.on("SIGTERM", stop);
   });
 }
-function summarizeEvent(payload) {
+function parseEvent(payload) {
   let data = payload;
   if (typeof payload === "string") {
     try {
       data = JSON.parse(payload);
     } catch {
-      return { content: payload, meta: {} };
+      return { eventType: "", memoryId: "", workspaceId: "", tags: void 0 };
     }
   }
   const obj = data ?? {};
   const inner = obj.data ?? obj;
-  const eventType = str(inner.eventType ?? inner.EventType ?? obj.type) || "substrate.event";
-  const memoryId = str(inner.memoryId ?? inner.MemoryId);
-  const workspaceId = str(inner.workspaceId ?? inner.WorkspaceId);
+  const rawTags = inner.tags ?? inner.Tags;
+  return {
+    eventType: str(inner.eventType ?? inner.EventType ?? obj.type) || "substrate.event",
+    memoryId: str(inner.memoryId ?? inner.MemoryId),
+    workspaceId: str(inner.workspaceId ?? inner.WorkspaceId),
+    tags: Array.isArray(rawTags) ? rawTags.filter((t) => typeof t === "string") : void 0
+  };
+}
+function shouldDeliver(payload, filter) {
+  const { workspaceId, tags } = parseEvent(payload);
+  if (filter.workspaceScope.length > 0 && (!workspaceId || !filter.workspaceScope.includes(workspaceId)))
+    return false;
+  if (filter.tags.length > 0) {
+    if (!tags) return false;
+    return facetedTagMatch(tags, filter.tags);
+  }
+  return true;
+}
+function facetedTagMatch(eventTags, filterTags) {
+  const have = new Set(eventTags);
+  const groups = /* @__PURE__ */ new Map();
+  for (const f of filterTags) {
+    const ns = f.endsWith(":*") ? f.slice(0, -2) : namespaceOf(f);
+    const group = groups.get(ns) ?? [];
+    group.push(f);
+    groups.set(ns, group);
+  }
+  for (const [ns, group] of groups) {
+    const ok2 = group.some(
+      (f) => f.endsWith(":*") ? eventTags.some((t) => namespaceOf(t) === ns) : have.has(f)
+    );
+    if (!ok2) return false;
+  }
+  return true;
+}
+function namespaceOf(tag) {
+  const i = tag.indexOf(":");
+  return i >= 0 ? tag.slice(0, i) : tag;
+}
+function summarizeEvent(payload) {
+  const { eventType, memoryId, workspaceId } = parseEvent(payload);
   const content = memoryId ? `${eventType}: ${memoryId}${workspaceId ? ` (workspace ${workspaceId})` : ""}` : typeof payload === "string" ? payload : JSON.stringify(payload);
   const meta = {};
   if (eventType) meta.event_type = eventType;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.4",
+  "version": "2026.7.6",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",