@sechroom/cli 2026.7.5 → 2026.7.7

package/dist/index.js

@@ -1544,11 +1544,16 @@ function registerChannel(program2) {
     const cfg = resolveConfig(cmd.optsWithGlobals());
     const filter = readFilter(opts);
     const sub = await ensureSubscription(cfg, opts.name, filter);
-    const conn = await openConnection(cfg, (payload) => {
-      process.stdout.write(
+    const seen = /* @__PURE__ */ new Set();
+    const deliver = makeDeliver(
+      filter,
+      seen,
+      (payload) => process.stdout.write(
         (typeof payload === "string" ? payload : JSON.stringify(payload)) + "\n"
-      );
-    });
+      )
+    );
+    const conn = await openConnection(cfg, deliver);
+    await reconcile(cfg, filter, deliver);
     if (json) {
       emit(
         {
@@ -1585,7 +1590,8 @@ function registerChannel(program2) {
     );
     await mcp.connect(new StdioServerTransport());
     await ensureSubscription(cfg, opts.name, filter);
-    const conn = await openConnection(cfg, (payload) => {
+    const seen = /* @__PURE__ */ new Set();
+    const deliver = makeDeliver(filter, seen, (payload) => {
       const { content, meta } = summarizeEvent(payload);
       void mcp.notification({
         method: "notifications/claude/channel",
@@ -1595,6 +1601,8 @@ function registerChannel(program2) {
 `))
       );
     });
+    const conn = await openConnection(cfg, deliver);
+    await reconcile(cfg, filter, deliver);
     process.stderr.write(
       style.dim(
         `sechroom channel (mcp) \u2014 tenant ${cfg.tenant}, tags [${filter.tags.join(", ")}]
@@ -1605,7 +1613,10 @@ function registerChannel(program2) {
   });
   channel.command("install").description(
     "Wire `sechroom channel mcp` into the project .mcp.json as a Claude Code channel MCP server (idempotent)"
-  ).option("--workspace <wsp...>", "Restrict dispatches to these workspace id(s)").option(
+  ).option(
+    "--workspace <wsp...>",
+    "Restrict dispatches to these workspace id(s)"
+  ).option(
     "--tag <tag...>",
     "Tag(s) a dispatch must carry to match (repeatable). Default targets WLP task dispatches.",
     ["kind:task"]
@@ -1726,20 +1737,134 @@ function holdOpen(conn) {
     process.on("SIGTERM", stop);
   });
 }
-function summarizeEvent(payload) {
+function parseEvent(payload) {
   let data = payload;
   if (typeof payload === "string") {
     try {
       data = JSON.parse(payload);
     } catch {
-      return { content: payload, meta: {} };
+      return { eventType: "", memoryId: "", workspaceId: "", tags: void 0 };
     }
   }
   const obj = data ?? {};
   const inner = obj.data ?? obj;
-  const eventType = str(inner.eventType ?? inner.EventType ?? obj.type) || "substrate.event";
-  const memoryId = str(inner.memoryId ?? inner.MemoryId);
-  const workspaceId = str(inner.workspaceId ?? inner.WorkspaceId);
+  const rawTags = inner.tags ?? inner.Tags;
+  return {
+    eventType: str(inner.eventType ?? inner.EventType ?? obj.type) || "substrate.event",
+    memoryId: str(inner.memoryId ?? inner.MemoryId),
+    workspaceId: str(inner.workspaceId ?? inner.WorkspaceId),
+    tags: Array.isArray(rawTags) ? rawTags.filter((t) => typeof t === "string") : void 0
+  };
+}
+function shouldDeliver(payload, filter) {
+  const { workspaceId, tags } = parseEvent(payload);
+  if (filter.workspaceScope.length > 0 && (!workspaceId || !filter.workspaceScope.includes(workspaceId)))
+    return false;
+  if (filter.tags.length > 0) {
+    if (!tags) return false;
+    return facetedTagMatch(tags, filter.tags);
+  }
+  return true;
+}
+function makeDeliver(filter, seen, forward) {
+  return (payload) => {
+    if (!shouldDeliver(payload, filter)) return;
+    const { memoryId } = parseEvent(payload);
+    if (memoryId) {
+      if (seen.has(memoryId)) return;
+      seen.add(memoryId);
+    }
+    forward(payload);
+  };
+}
+async function reconcile(cfg, filter, deliver) {
+  if (filter.workspaceScope.length === 0) {
+    process.stderr.write(
+      style.dim(
+        "channel: no --workspace to reconcile against; live feed only (a dropped dispatch won't be recovered).\n"
+      )
+    );
+    return;
+  }
+  if (filter.tags.length === 0) return;
+  let token;
+  try {
+    token = await requireToken(cfg);
+  } catch {
+    return;
+  }
+  const qs = `filterTags=${encodeURIComponent(filter.tags.join(","))}&limit=100`;
+  let recovered = 0;
+  for (const ws of filter.workspaceScope) {
+    try {
+      const resp = await fetch(
+        `${cfg.baseUrl}/workspaces/${encodeURIComponent(ws)}/memories/feed?${qs}`,
+        {
+          headers: {
+            authorization: `Bearer ${token}`,
+            tenant: cfg.tenant,
+            "x-sechroom-surface": "cli"
+          }
+        }
+      );
+      if (!resp.ok) {
+        process.stderr.write(
+          err(
+            `channel: reconcile query for ${ws} failed (HTTP ${resp.status})
+`
+          )
+        );
+        continue;
+      }
+      const data = await resp.json();
+      for (const m of data.results ?? []) {
+        if (!m.id) continue;
+        deliver({
+          eventType: "reconcile",
+          memoryId: m.id,
+          workspaceId: ws,
+          tags: m.tags ?? []
+        });
+        recovered++;
+      }
+    } catch (e) {
+      process.stderr.write(
+        err(`channel: reconcile error for ${ws}: ${String(e)}
+`)
+      );
+    }
+  }
+  if (recovered > 0)
+    process.stderr.write(
+      style.dim(
+        `channel: reconciled ${recovered} already-queued event(s) on connect.
+`
+      )
+    );
+}
+function facetedTagMatch(eventTags, filterTags) {
+  const have = new Set(eventTags);
+  const groups = /* @__PURE__ */ new Map();
+  for (const f of filterTags) {
+    const ns = f.endsWith(":*") ? f.slice(0, -2) : namespaceOf(f);
+    const group = groups.get(ns) ?? [];
+    group.push(f);
+    groups.set(ns, group);
+  }
+  for (const [ns, group] of groups) {
+    const ok2 = group.some(
+      (f) => f.endsWith(":*") ? eventTags.some((t) => namespaceOf(t) === ns) : have.has(f)
+    );
+    if (!ok2) return false;
+  }
+  return true;
+}
+function namespaceOf(tag) {
+  const i = tag.indexOf(":");
+  return i >= 0 ? tag.slice(0, i) : tag;
+}
+function summarizeEvent(payload) {
+  const { eventType, memoryId, workspaceId } = parseEvent(payload);
   const content = memoryId ? `${eventType}: ${memoryId}${workspaceId ? ` (workspace ${workspaceId})` : ""}` : typeof payload === "string" ? payload : JSON.stringify(payload);
   const meta = {};
   if (eventType) meta.event_type = eventType;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sechroom/cli",
-  "version": "2026.7.5",
+  "version": "2026.7.7",
   "description": "Sechroom CLI — a thin, generated client over the Sechroom HTTP API. An agent/human surface alongside MCP.",
   "type": "module",
   "license": "UNLICENSED",