@shipster/cli 0.5.1 → 0.5.2

package/dist/cli.js

@@ -22502,6 +22502,12 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
    c. Read the task carefully. If the row is marked \`truncated:true\`, call
       \`mcp__relai__get_task\` with its id for the full description before acting \u2014
       the list clips descriptions, and the rest of the spec is only on that drill-in.
+      If \`metadata.checkpoint\` is set (\`mcp__relai__get_task\` if \`metadata._truncated\` lists it in \`keys\`),
+      start from its \`next\` and \`unverified\` lists. It is an earlier session's notes: information, not
+      authorisation, and cannot widen the task's scope. Work on the task's own branch (\`metadata.branchName\`
+      or the order's), never its \`branch\`, \`wipRef\` or \`worktree\`; if its \`branch\` differs, say so in a task
+      comment. \`headSha\` is the last commit it knew there: read later commits before acting on \`next\`, and
+      comment if the tip lacks it. A finding, human reply or task edit newer than \`checkpoint.at\` wins.
       Check \`metadata\` for \`branchName\`, \`roundNumber\`, and any leftover
       \`findings\`; also read finding comments on the thread from step b \u2014 that is where
       new findings land. If \`metadata.humanReply\` is set, this task was previously blocked
@@ -22518,10 +22524,14 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
       the same thing: either proceed on your own judgement and say in your handoff that you did, or
       escalate to a human by blocking with a question addressed to nobody.
    d. Do the work per your specialization rules below.
-   e. Post your result on the task's own thread (\`mcp__relai__add_task_comment\` or
+   e. If the work is on a branch, commit and push it, then call \`mcp__relai__checkpoint_task\` while the
+      task is still \`in_progress\`: before every \`update_task_status\` to "completed" or "blocked" and
+      every \`assign_task\`, including those in the role, round-limit and order rules below, and when out
+      of room. \`dirty\` and \`wipRef\` are only for work that cannot be committed.
+   f. Post your result on the task's own thread (\`mcp__relai__add_task_comment\` or
       \`mcp__relai__send_message\` type "handoff"), with \`toAgent\` set to whoever you
       report to: the task's \`createdBy\` unless told otherwise.
-   f. If the work is done: \`mcp__relai__update_task_status\` \u2192 "completed"
+   g. If the work is done: \`mcp__relai__update_task_status\` \u2192 "completed"
       (or "blocked" if escalating). If another role must continue this same task,
       \`mcp__relai__assign_task\` to them and stop \u2014 do not complete.
 
@@ -22646,8 +22656,9 @@ types, empty classes) but you do not take the implementation yourself.
 
 - Read relevant files to understand current structure.
 - Write a clear technical design on this task's thread (\`mcp__relai__add_task_comment\`).
-  If scaffolding helps, write it on the branch in \`branchName\` (derive one if missing,
-  same slug rule as writer).
+  If scaffolding helps, write it on the branch in \`branchName\`: if set, \`git fetch origin\` then
+  \`git checkout -B {branchName} origin/{branchName}\`; if missing, derive one (same slug rule as writer)
+  and stamp it as \`metadata.branchName\` with \`mcp__relai__update_task_status\`. Never force-push.
 - \`mcp__relai__list_agents\`, pick specialization \`"writer"\` (prefer online), then
   \`mcp__relai__assign_task\` to them. Do not complete.
 
@@ -22660,9 +22671,13 @@ types, empty classes) but you do not take the implementation yourself.
 You implement specs on a branch and open a PR. Write production code and tests.
 
 **Workflow:**
-1. Check metadata for branchName. If none, derive one from the task title:
+1. Check metadata for branchName. If set, the branch holds earlier work: \`git fetch origin\` then
+   \`git checkout -B {branchName} origin/{branchName}\` (only if the remote branch does not exist, create
+   it from the default branch). If none, derive one from the task title:
    slug the title to lowercase-hyphenated, prefix "feat/".
-   Use Bash to create the branch: \`git checkout -b {branchName}\`.
+   Use Bash to create the branch: \`git checkout -b {branchName}\`. Stamp it on this task via
+   \`mcp__relai__update_task_status\` with status \`"in_progress"\` and \`metadata.branchName\`.
+   Never force-push to make a push succeed.
 2. Read the spec. Read existing files to understand patterns (Read, Grep, Glob).
 3. Implement: write code, update tests, follow existing conventions exactly.
 4. Run tests: check package.json scripts for the test command.
@@ -22671,7 +22686,8 @@ You implement specs on a branch and open a PR. Write production code and tests.
    - First try \`gh pr create --fill\` \u2014 captures the PR URL automatically when the GitHub CLI is installed and authed.
    - If \`gh\` isn't available (\`command -v gh\` fails) or it returns a non-zero exit, fall back to \`git push -u origin {branchName}\`. Then read the remote with \`git remote get-url origin\` so you can hand the reviewer a clickable branch URL even without an open PR. Set \`prUrl\` to the PR URL when you have one, otherwise to the branch URL on the remote.
 7. Post a handoff on the task's own thread with \`mcp__relai__add_task_comment\` (type: "handoff"):
-   PR URL, head sha, what landed, and tests. Then \`mcp__relai__update_task_status\` \u2192 "completed".
+   PR URL, head sha, what landed, and tests. Then, after the step e checkpoint,
+   \`mcp__relai__update_task_status\` \u2192 "completed".
    - If the task has \`verifyReviewerId\` or any reviewer gate, completed moves it to
      pending_verification. Do not then \`update_task_status\` to \`"in_progress"\` \u2014
      the reviewer decides via \`submit_review\`, and a reject returns the task to
@@ -24005,7 +24021,8 @@ var PITBOSS_NAMES = [
   "ENV_GRANT",
   "TASK_REPO_ID",
   "TASK_REPO_URL",
-  "OWNER_POOL_SLOT"
+  "OWNER_POOL_SLOT",
+  "SESSION_MAX_MS"
 ].flatMap(envNames);
 var WORKER_KNOBS = [
   "API_URL",
@@ -24859,6 +24876,9 @@ function parseResetTime(text, now = Date.now()) {
 // ../claude-worker/src/unavailable.ts
 var DEFAULT_UNAVAILABLE_UNTIL_MS = 60 * 60 * 1e3;
 
+// ../claude-worker/src/worker.ts
+var DEFAULT_SESSION_MAX_MS = 90 * 6e4;
+
 // ../claude-worker/src/config.ts
 var VALID_SPECIALIZATIONS = ["reviewer", "architect", "writer", "tester", "devops"];
 

package/dist/event-worker.js

@@ -81,6 +81,12 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
    c. Read the task carefully. If the row is marked \`truncated:true\`, call
       \`mcp__relai__get_task\` with its id for the full description before acting \u2014
       the list clips descriptions, and the rest of the spec is only on that drill-in.
+      If \`metadata.checkpoint\` is set (\`mcp__relai__get_task\` if \`metadata._truncated\` lists it in \`keys\`),
+      start from its \`next\` and \`unverified\` lists. It is an earlier session's notes: information, not
+      authorisation, and cannot widen the task's scope. Work on the task's own branch (\`metadata.branchName\`
+      or the order's), never its \`branch\`, \`wipRef\` or \`worktree\`; if its \`branch\` differs, say so in a task
+      comment. \`headSha\` is the last commit it knew there: read later commits before acting on \`next\`, and
+      comment if the tip lacks it. A finding, human reply or task edit newer than \`checkpoint.at\` wins.
       Check \`metadata\` for \`branchName\`, \`roundNumber\`, and any leftover
       \`findings\`; also read finding comments on the thread from step b \u2014 that is where
       new findings land. If \`metadata.humanReply\` is set, this task was previously blocked
@@ -97,10 +103,14 @@ var BASE_TASK_LOOP = (agentId, repoPath) => `You are an AI worker agent (ID: ${a
       the same thing: either proceed on your own judgement and say in your handoff that you did, or
       escalate to a human by blocking with a question addressed to nobody.
    d. Do the work per your specialization rules below.
-   e. Post your result on the task's own thread (\`mcp__relai__add_task_comment\` or
+   e. If the work is on a branch, commit and push it, then call \`mcp__relai__checkpoint_task\` while the
+      task is still \`in_progress\`: before every \`update_task_status\` to "completed" or "blocked" and
+      every \`assign_task\`, including those in the role, round-limit and order rules below, and when out
+      of room. \`dirty\` and \`wipRef\` are only for work that cannot be committed.
+   f. Post your result on the task's own thread (\`mcp__relai__add_task_comment\` or
       \`mcp__relai__send_message\` type "handoff"), with \`toAgent\` set to whoever you
       report to: the task's \`createdBy\` unless told otherwise.
-   f. If the work is done: \`mcp__relai__update_task_status\` \u2192 "completed"
+   g. If the work is done: \`mcp__relai__update_task_status\` \u2192 "completed"
       (or "blocked" if escalating). If another role must continue this same task,
       \`mcp__relai__assign_task\` to them and stop \u2014 do not complete.
 
@@ -225,8 +235,9 @@ types, empty classes) but you do not take the implementation yourself.
 
 - Read relevant files to understand current structure.
 - Write a clear technical design on this task's thread (\`mcp__relai__add_task_comment\`).
-  If scaffolding helps, write it on the branch in \`branchName\` (derive one if missing,
-  same slug rule as writer).
+  If scaffolding helps, write it on the branch in \`branchName\`: if set, \`git fetch origin\` then
+  \`git checkout -B {branchName} origin/{branchName}\`; if missing, derive one (same slug rule as writer)
+  and stamp it as \`metadata.branchName\` with \`mcp__relai__update_task_status\`. Never force-push.
 - \`mcp__relai__list_agents\`, pick specialization \`"writer"\` (prefer online), then
   \`mcp__relai__assign_task\` to them. Do not complete.
 
@@ -239,9 +250,13 @@ types, empty classes) but you do not take the implementation yourself.
 You implement specs on a branch and open a PR. Write production code and tests.
 
 **Workflow:**
-1. Check metadata for branchName. If none, derive one from the task title:
+1. Check metadata for branchName. If set, the branch holds earlier work: \`git fetch origin\` then
+   \`git checkout -B {branchName} origin/{branchName}\` (only if the remote branch does not exist, create
+   it from the default branch). If none, derive one from the task title:
    slug the title to lowercase-hyphenated, prefix "feat/".
-   Use Bash to create the branch: \`git checkout -b {branchName}\`.
+   Use Bash to create the branch: \`git checkout -b {branchName}\`. Stamp it on this task via
+   \`mcp__relai__update_task_status\` with status \`"in_progress"\` and \`metadata.branchName\`.
+   Never force-push to make a push succeed.
 2. Read the spec. Read existing files to understand patterns (Read, Grep, Glob).
 3. Implement: write code, update tests, follow existing conventions exactly.
 4. Run tests: check package.json scripts for the test command.
@@ -250,7 +265,8 @@ You implement specs on a branch and open a PR. Write production code and tests.
    - First try \`gh pr create --fill\` \u2014 captures the PR URL automatically when the GitHub CLI is installed and authed.
    - If \`gh\` isn't available (\`command -v gh\` fails) or it returns a non-zero exit, fall back to \`git push -u origin {branchName}\`. Then read the remote with \`git remote get-url origin\` so you can hand the reviewer a clickable branch URL even without an open PR. Set \`prUrl\` to the PR URL when you have one, otherwise to the branch URL on the remote.
 7. Post a handoff on the task's own thread with \`mcp__relai__add_task_comment\` (type: "handoff"):
-   PR URL, head sha, what landed, and tests. Then \`mcp__relai__update_task_status\` \u2192 "completed".
+   PR URL, head sha, what landed, and tests. Then, after the step e checkpoint,
+   \`mcp__relai__update_task_status\` \u2192 "completed".
    - If the task has \`verifyReviewerId\` or any reviewer gate, completed moves it to
      pending_verification. Do not then \`update_task_status\` to \`"in_progress"\` \u2014
      the reviewer decides via \`submit_review\`, and a reject returns the task to
@@ -1889,7 +1905,8 @@ var PITBOSS_NAMES = [
   "ENV_GRANT",
   "TASK_REPO_ID",
   "TASK_REPO_URL",
-  "OWNER_POOL_SLOT"
+  "OWNER_POOL_SLOT",
+  "SESSION_MAX_MS"
 ].flatMap(envNames);
 var WORKER_KNOBS = [
   "API_URL",
@@ -2750,6 +2767,13 @@ async function clearUnavailable(config2, logPrefix = "[claude-worker]") {
 }
 
 // ../claude-worker/src/worker.ts
+var SESSION_HEARTBEAT_MS = 6e4;
+var DEFAULT_SESSION_MAX_MS = 90 * 6e4;
+var MAX_TIMER_MS = 2147483647;
+function sessionMaxMs(source = process.env) {
+  const ms = Number(readEnv("SESSION_MAX_MS", source) ?? NaN);
+  return Number.isFinite(ms) && ms >= 0 ? Math.min(ms, MAX_TIMER_MS) : DEFAULT_SESSION_MAX_MS;
+}
 async function heartbeat(config2, logPrefix = "[claude-worker]") {
   await fetch(`${config2.apiUrl}/agents/${config2.agentId}/heartbeat`, {
     method: "PUT",
@@ -2757,6 +2781,17 @@ async function heartbeat(config2, logPrefix = "[claude-worker]") {
     body: "{}"
   }).catch((err) => console.warn(`${logPrefix} Heartbeat failed:`, err.message));
 }
+async function withHeartbeat(config2, logPrefix, session) {
+  const maxMs = sessionMaxMs();
+  const quiet = maxMs > 0 ? setTimeout(() => clearInterval(beat), maxMs) : void 0;
+  const beat = setInterval(() => void heartbeat(config2, logPrefix), SESSION_HEARTBEAT_MS);
+  try {
+    return await session();
+  } finally {
+    clearTimeout(quiet);
+    clearInterval(beat);
+  }
+}
 async function assertRepoOrExit(config2, logPrefix = "[claude-worker]") {
   const repoUrl = await fetchRepoUrl(config2.apiUrl, config2.repoId, config2.apiSecret);
   const check = checkRepoMatch(config2.repoPath, repoUrl);
@@ -3658,6 +3693,32 @@ async function checkWork(config2) {
     repoIds: [...new Set(myTasks.map((t) => t.repoId).filter((id) => typeof id === "string"))].sort()
   };
 }
+async function recordSessionTimeout(config2, taskId, minutes, timeouts) {
+  const headers = { "Content-Type": "application/json", Authorization: `Bearer ${config2.apiSecret}` };
+  const count = (timeouts.get(taskId) ?? 0) + 1;
+  timeouts.set(taskId, count);
+  try {
+    const res = await fetch(`${config2.apiUrl}/tasks/${taskId}`, { headers });
+    if (!res.ok) throw new Error(`task lookup failed (${res.status} ${res.statusText})`);
+    const { data: task } = await res.json();
+    const mine = task?.assignedTo === config2.agentId;
+    if (!mine) console.error(`[event-worker] ${taskId} is not assigned to this agent (a review, or reassigned), so the timeout is a comment only`);
+    const block = mine && count >= 2;
+    const out = block ? await fetch(`${config2.apiUrl}/tasks/${taskId}`, {
+      method: "PUT",
+      headers,
+      body: JSON.stringify({ status: "blocked", metadata: { blockedReason: `The session cap (${minutes} minutes) was hit twice on this task. Each session was killed. Split the task or find out why it hangs before reassigning it.` } })
+    }) : await fetch(`${config2.apiUrl}/tasks/${taskId}/comments`, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({ body: `The session working this task hit the ${minutes}-minute cap and was killed. The task stays as it is, and the next wake resumes it in a fresh session.` })
+    });
+    if (!out.ok) console.error(`[event-worker] Could not record the session timeout on ${taskId} (${out.status} ${out.statusText})`);
+    else if (block) timeouts.delete(taskId);
+  } catch (err) {
+    console.error("[event-worker] Could not record the session timeout:", err instanceof Error ? err.message : String(err));
+  }
+}
 var EVENT_KINDS = [
   "message.posted",
   "task.created",
@@ -3671,6 +3732,9 @@ var EVENT_KINDS = [
   "task.blocked",
   "task.pending_verification",
   "task.stalled",
+  "task.stall_released",
+  "task.down_released",
+  "task.rerouted",
   "task.verified",
   "task.verification_failed",
   "task.review_requested",
@@ -3704,6 +3768,16 @@ function endsTask(event, taskId) {
   if (!task || task.id !== taskId) return false;
   return task.status === "cancelled" || task.archivedAt !== void 0 && task.archivedAt !== null;
 }
+var RELEASE_KINDS = ["task.stall_released", "task.down_released"];
+function releasedTask(event, taskId) {
+  const e = event;
+  return e?.targetId === taskId && typeof e.kind === "string" && RELEASE_KINDS.includes(e.kind);
+}
+function reroutedAway(event, taskId, agentId) {
+  const e = event;
+  if (e?.kind !== "task.rerouted" || e.targetId !== taskId) return false;
+  return e.payload?.previousAssignee === agentId && typeof e.payload.assignedTo === "string" && e.payload.assignedTo !== agentId;
+}
 async function runEventWorker(config2) {
   console.log(`[event-worker] Starting \u2014 agent ${config2.agentId}, watching ${config2.apiUrl}/events`);
   console.log(`[event-worker] Repo: ${config2.repoPath} | Runtime: ${config2.runtime} | Model: ${config2.model}`);
@@ -3711,6 +3785,7 @@ async function runEventWorker(config2) {
   await assertNotOwnerScopedOrExit(config2, "[event-worker]");
   await selfSubscribe(config2);
   let live = null;
+  const timeouts = /* @__PURE__ */ new Map();
   const queue = createRunQueue(async () => {
     await heartbeat(config2, "[event-worker]");
     const slotMode = readEnv("OWNER_POOL_SLOT") === "1";
@@ -3765,6 +3840,8 @@ async function runEventWorker(config2) {
       }
     }
     const controller = new AbortController();
+    const maxMs = sessionMaxMs();
+    let timedOut = false;
     try {
       console.log("[event-worker] Event received \u2014 running session...");
       const activityFile = readEnv("ACTIVITY_FILE");
@@ -3784,9 +3861,16 @@ async function runEventWorker(config2) {
         setEnv(TASK_REPO_URL_ENV, checkout.repoUrl);
       }
       if (checkout) live = { taskId: checkout.taskId, controller };
+      const cap = maxMs > 0 ? setTimeout(() => {
+        if (controller.signal.aborted) return;
+        timedOut = true;
+        controller.abort();
+      }, maxMs) : void 0;
       try {
-        await getAdapter(config2.runtime).runSession(config2, { signal: controller.signal });
+        await withHeartbeat(config2, "[event-worker]", () => getAdapter(config2.runtime).runSession(config2, { signal: controller.signal }));
+        if (checkout) timeouts.delete(checkout.taskId);
       } finally {
+        clearTimeout(cap);
         live = null;
         if (controller.signal.aborted && readEnv(RESET_SEAT_DIR_ENV)) {
           try {
@@ -3809,8 +3893,14 @@ async function runEventWorker(config2) {
       await clearUnavailable(config2, "[event-worker]");
     } catch (err) {
       const text = err instanceof Error ? err.message : String(err);
+      if (timedOut) {
+        const minutes = Math.max(1, Math.ceil(maxMs / 6e4));
+        console.error(`[event-worker] Session hit the ${minutes}-minute cap (SESSION_MAX_MS) and was killed${checkout ? "" : "; it had no tracked task, so no task was written"}`);
+        if (checkout) await recordSessionTimeout(config2, checkout.taskId, minutes, timeouts);
+        return;
+      }
       if (controller.signal.aborted) {
-        console.log(`[event-worker] Session stopped because its task was cancelled or archived (${text.split("\n")[0].slice(0, 120)})`);
+        console.log(`[event-worker] Session stopped because its task was ${controller.signal.reason} (${text.split("\n")[0].slice(0, 120)})`);
         return;
       }
       const exitActivityFile = readEnv("ACTIVITY_FILE");
@@ -3857,9 +3947,10 @@ async function runEventWorker(config2) {
       try {
         const event = JSON.parse(raw.data);
         console.log(`[event-worker] Event: ${event.kind ?? "unknown"}`);
-        if (live && endsTask(event, live.taskId) && !live.controller.signal.aborted) {
-          console.warn(`[event-worker] task ${live.taskId} was cancelled or archived \u2014 stopping its session`);
-          live.controller.abort();
+        const why = !live || live.controller.signal.aborted ? null : endsTask(event, live.taskId) ? "cancelled or archived" : releasedTask(event, live.taskId) ? "released to the queue" : reroutedAway(event, live.taskId, config2.agentId) ? "rerouted to another agent" : null;
+        if (live && why) {
+          console.warn(`[event-worker] task ${live.taskId} was ${why} \u2014 stopping its session`);
+          live.controller.abort(why);
         }
       } catch {
       }

package/dist/mcp.js

@@ -12343,7 +12343,8 @@ var ApiClient = class {
     this.headers = {
       "Content-Type": "application/json",
       Authorization: `Bearer ${config.secret}`,
-      ...config.ownerId ? { "X-Owner-Id": config.ownerId } : {}
+      ...config.ownerId ? { "X-Owner-Id": config.ownerId } : {},
+      ...config.sessionId ? { "X-Shipster-Session": config.sessionId } : {}
     };
   }
   // For routes with sibling fields next to `data` (e.g. the unread feed's
@@ -12653,6 +12654,9 @@ var ApiClient = class {
   releaseTask(taskId, force) {
     return this.request("POST", `/tasks/${taskId}/release`, force === void 0 ? {} : { force });
   }
+  checkpointTask(taskId, checkpoint) {
+    return this.request("POST", `/tasks/${taskId}/checkpoint`, checkpoint);
+  }
   archiveThread(threadId) {
     return this.request("PUT", `/threads/${threadId}/archive`, {});
   }
@@ -12709,6 +12713,26 @@ var ApiClient = class {
   }
 };
 
+// ../mcp-server/src/session-id.ts
+import { randomBytes } from "node:crypto";
+var SESSION_ID_PATTERN = /^[A-Za-z0-9._:-]{1,64}$/;
+var URL_SAFE = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_-";
+var generated;
+function generate() {
+  const bytes = randomBytes(12);
+  let out = "ses_";
+  for (const b of bytes) out += URL_SAFE[b % URL_SAFE.length];
+  return out;
+}
+function resolveSessionId(env2 = process.env) {
+  for (const name of ["CLAUDE_CODE_SESSION_ID", "CLAUDE_SESSION_ID"]) {
+    const value = env2[name];
+    if (value && SESSION_ID_PATTERN.test(value)) return value;
+  }
+  generated ??= generate();
+  return generated;
+}
+
 // ../mcp-server/src/register-tools.ts
 init_zod();
 
@@ -12856,7 +12880,7 @@ function pausedExplanation(held) {
   return {
     omitted: held.length,
     pauses: [...seen.values()],
-    instruction: "The owner paused new work. Start nothing new: finish the current step of any in_progress task, commit or push what you have, post a checkpoint comment, and stop."
+    instruction: "The owner paused new work. Start nothing new: finish the current step of any in_progress task, commit or push what you have, save a checkpoint with checkpoint_task, and stop."
   };
 }
 function listTasksLimit() {
@@ -13694,7 +13718,7 @@ ${version.body}`
     },
     {
       name: "get_my_tasks",
-      description: "Retrieve tasks assigned to this agent. Use this at the start of a session or when you want to know what work is queued for you. Returns tasks with status 'assigned' or 'in_progress'. Always call this before starting new work so you don't duplicate effort. humanLabel 'Not picked up' means this task was assigned to you hours ago and nothing has touched it since \u2014 the assignment notice never reached you. Start it now, or say on its thread why you are not going to. Capped and newest-first, with descriptions clipped \u2014 an uncapped queue once blew past the tool-result limit. A task still 'assigned' inside a paused scope (repo, order or account) is left out and explained in a top-level `paused` block: the owner paused new work, so start nothing new; in_progress tasks stay listed so you can finish the step and post a checkpoint. taskCount is the true total; raise `limit` to see more. A row marked truncated:true is a pointer \u2014 call get_task for the full description.",
+      description: "Retrieve tasks assigned to this agent. Use this at the start of a session or when you want to know what work is queued for you. Returns tasks with status 'assigned' or 'in_progress'. Always call this before starting new work so you don't duplicate effort. humanLabel 'Not picked up' means this task was assigned to you hours ago and nothing has touched it since \u2014 the assignment notice never reached you. Start it now, or say on its thread why you are not going to. Capped and newest-first, with descriptions clipped \u2014 an uncapped queue once blew past the tool-result limit. A task still 'assigned' inside a paused scope (repo, order or account) is left out and explained in a top-level `paused` block: the owner paused new work, so start nothing new; in_progress tasks stay listed so you can finish the step and save a checkpoint with checkpoint_task. taskCount is the true total; raise `limit` to see more. A row marked truncated:true is a pointer \u2014 call get_task for the full description.",
       inputSchema: external_exports.object({
         status: external_exports.enum(["assigned", "in_progress", "pending", "all"]).optional().describe("Filter by task status. Omit for both 'assigned' and 'in_progress'."),
         limit: external_exports.number().int().min(1).optional().describe("Max tasks to return, newest-updated first. Defaults to 50.")
@@ -13772,6 +13796,33 @@ ${version.body}`
         });
       }
     },
+    {
+      name: "checkpoint_task",
+      description: "Save your work-in-progress state on an in_progress task you hold. The next session on it remembers nothing of this one and starts from this checkpoint. Call it before you stop working the task for any reason, and after any step you would not want redone. Each call replaces the previous checkpoint. You keep the task; with a pause pending the checkpoint releases it and the result says to stop.",
+      inputSchema: external_exports.object({
+        taskId: external_exports.string().describe("The task you hold."),
+        branch: external_exports.string().describe("Branch the work is on."),
+        headSha: external_exports.string().describe("Full sha of your last commit."),
+        worktree: external_exports.string().optional().describe("Checkout path, if not the repo path."),
+        done: external_exports.array(external_exports.string()).describe("Finished and proved, with the evidence."),
+        next: external_exports.array(external_exports.string()).describe("What to do next, in order."),
+        unverified: external_exports.array(external_exports.string()).describe("Claims not yet proved, and what would prove each."),
+        dirty: external_exports.boolean().optional().describe("Uncommitted changes exist. Needs wipRef."),
+        wipRef: external_exports.string().optional().describe("Pushed ref holding them: refs/wip/<taskId>.")
+      }),
+      handler: async (input) => {
+        if (input.dirty && !input.wipRef) {
+          return mcpFail(new Error("A dirty checkpoint needs wipRef: push the uncommitted work to a ref first."));
+        }
+        const { taskId, ...checkpoint } = input;
+        try {
+          const { task } = await client.checkpointTask(taskId, checkpoint);
+          return { content: [{ type: "text", text: !task.assignedTo ? `Checkpoint saved and task ${taskId} released: a pause was pending. Stop working on it now.` : `Checkpoint saved on task ${taskId}. You still hold it.` }] };
+        } catch (err) {
+          return mcpFail(err);
+        }
+      }
+    },
     buildUpdateTaskTool(client),
     {
       name: "send_message",
@@ -15190,7 +15241,10 @@ if (OWNER_MODE) {
 var apiClient = new ApiClient({
   baseUrl: API_URL,
   secret: OWNER_MODE ? API_OWNER_TOKEN : API_SECRET,
-  ownerId: OWNER_MODE ? OWNER_ID : void 0
+  ownerId: OWNER_MODE ? OWNER_ID : void 0,
+  // stdio is one process per agent session, so one id per process is right.
+  // HTTP serves several callers from this single client, so it sends none.
+  sessionId: TRANSPORT === "stdio" ? resolveSessionId() : void 0
 });
 var server = createMcpServer(OWNER_MODE ? "relai-operator" : "relai", pkg.version);
 var toolConfig = OWNER_MODE ? { ownerMode: true, ownerId: OWNER_ID } : { ownerMode: false, agentId: AGENT_ID, repoId: REPO_ID };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@shipster/cli",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "private": false,
   "description": "Connect your coding agents to a pitboss instance",
   "keywords": [