@super-one/cli 0.50.3-alpha → 0.50.4-alpha

package/MANIFEST.json

@@ -1,7 +1,7 @@
 {
   "name": "@super-one/cli",
-  "version": "0.50.3-alpha",
+  "version": "0.50.4-alpha",
   "kind": "npm",
   "minNodeMajor": 20,
-  "builtAt": "2026-08-07T01:09:21.908Z"
+  "builtAt": "2026-08-07T04:11:13.179Z"
 }

package/lib/cli.mjs

@@ -170,7 +170,7 @@ var init_host_action_superone_descriptors = __esm({
     HOST_ACTION_SUPERONE_TOOL_DESCRIPTORS = [
       {
         "name": "session_collab_list_agents",
-        "description": "List the built-in agent profiles (harness + config) available for user-approved child sessions. Each profile includes defaultConfig with the model/effort inherited when a request omits them. Call this before session_collab_request. The same profile may be requested more than once.",
+        "description": "List the agent profiles available for user-approved child sessions. Inspect each profile's harness and defaultConfig before session_collab_request. You may reuse one agentId for multiple launches.",
         "inputSchema": {
           "type": "object",
           "properties": {},
@@ -179,7 +179,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_request",
-        "description": 'Request approval for one or more child-agent launches. Repeat an agentId to launch multiple sessions from one profile. Every launch must include name (an agent-chosen human label, not the harness name) and role (for example, Reviewer or Implementer). config is optional; omitted model/effort fields inherit the selected profile defaultConfig, while explicit values override it. Session title becomes "Name - Role". The user reviews and may edit model/effort/AI provider/permission/sandbox (task, name, role, agent profile, cwd, worktree stay as requested). On approval each launch returns a bearer credential. Each credential can create exactly one session and must be kept private.',
+        "description": 'Request user approval for one or more child sessions. Call session_collab_list_agents first; repeat an agentId to reuse a profile. Invent a human-friendly name and a task-specific role for every launch. Omitted config fields inherit profile defaults. Before setting config.cwd or config.worktree, call read_manual({ domain: "product", topic: "collaboration" }); same-repo isolation belongs in config.worktree, not a worktree-leaf cwd. The user may edit model, effort, provider, permission, and sandbox settings. Each approved launch returns a private one-shot credential for session_collab_start.',
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -251,10 +251,12 @@ var init_host_action_superone_descriptors = __esm({
                         ]
                       },
                       "cwd": {
-                        "type": "string"
+                        "type": "string",
+                        "description": 'Set only to a genuinely different project root. Omit for the current project. Never pass ~/.worktrees/... or another same-repo worktree leaf; use config.worktree for same-repo isolation. See read_manual({ domain: "product", topic: "collaboration" }).'
                       },
                       "worktree": {
                         "type": "object",
+                        "description": 'Request a host-managed worktree for same-repo isolation while cwd stays omitted or at the project root. Set enabled, baseBranch, and mode; use a unique branchName with branch. See read_manual({ domain: "product", topic: "collaboration" }) for implementer and reviewer recipes.',
                         "properties": {
                           "enabled": {
                             "type": "boolean"
@@ -272,7 +274,7 @@ var init_host_action_superone_descriptors = __esm({
                           },
                           "branchName": {
                             "type": "string",
-                            "description": "Branch to create for this worktree. Must be unique across launches \u2014 git cannot check out one branch in two worktrees."
+                            "description": 'With mode "branch", create this unique branch. Git cannot check out one branch in two worktrees.'
                           },
                           "carryLocalChanges": {
                             "type": "boolean"
@@ -310,7 +312,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_start",
-        "description": "Create the real, user-visible collaboration child session authorized by one credential and deliver the approved launch task. Returns as soon as the child agent begins replying (does not wait for the full first turn). A credential creates at most one session; repeated calls are idempotent and return the same session id. The child then works asynchronously \u2014 start every child you need back to back, and never block on one before starting the next.",
+        "description": "Start the approved child session for one credential and deliver its task. The call returns when the child begins replying, not when its first turn finishes. A credential starts at most one session; retries return the same session id. Start all approved children back-to-back, then continue other work while they run asynchronously.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -326,7 +328,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_send",
-        "description": "Send a persistent mailbox message between the parent and child sessions authorized by a credential. Direction is derived from the calling session. Write content as Markdown (headings, lists, code fences, emphasis, tables when useful) so peer agents and the SuperOne UI can render a structured handoff. Use clientMessageId for retry-safe idempotency. Delivery is push-based both ways: the peer is woken by a task notification (even mid-turn), and when it replies the host wakes you the same way \u2014 a fresh turn starts, telling you to call session_collab_retrieve. So after sending, move on to other work or end your turn; ending the turn IS how you wait here, and no reply is missed. Never sleep, re-send, or poll session_collab_retrieve while waiting.",
+        "description": "Send a persistent Markdown message through one parent-child mailbox. Use clientMessageId for retry-safe delivery. The host wakes the peer and later wakes you when it replies. After sending, continue other work or end your turn. Never sleep, resend, or poll session_collab_retrieve while waiting.",
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -351,7 +353,7 @@ var init_host_action_superone_descriptors = __esm({
       },
       {
         "name": "session_collab_retrieve",
-        "description": 'Retrieve persistent mailbox messages addressed to this session. Non-blocking single read: returns the messages already waiting (status "messages") or nothing (status "empty"). Each message content is Markdown written by the peer \u2014 parse structure (headings, lists, code) rather than treating it as plain text. Pass multiple credentials to drain several parent/child mailboxes in one call. Returned messages advance only this agent endpoint cursor. Call it when a collaboration wake notification arrives, or once to drain the inbox before you act on peer input. Status "empty" means no peer has replied yet \u2014 it is NOT a retry signal: do not call again, do not sleep, do not spin. End your turn and the wake notification will start a new one the moment a message actually arrives.',
+        "description": 'Retrieve queued Markdown messages for this session from one or more parent-child mailboxes. Call after a collaboration wake, or once before acting on peer input. This is a non-blocking read: status "empty" is not a retry signal. Do not sleep or poll; end your turn and wait for the next wake.',
         "inputSchema": {
           "type": "object",
           "properties": {
@@ -3268,7 +3270,13 @@ var init_auth = __esm({
       /** WebSocket ticket: 30 seconds, single /ws upgrade. */
       wsTicketMs: 30 * 1e3,
       /** Refresh family expires after 90 days of inactivity. */
-      refreshInactivityMs: 90 * 24 * 60 * 60 * 1e3
+      refreshInactivityMs: 90 * 24 * 60 * 60 * 1e3,
+      /**
+       * Immediately-previous refresh token remains redeemable this long after
+       * rotation. Mitigates lost-response / concurrent-refresh races without
+       * disabling reuse detection for older generations (RFC 6819 §5.2.2.3).
+       */
+      refreshReuseGraceMs: 60 * 1e3
     };
     OPERATION_SCOPES = {
       readEnvironment: ["environment:read"],
@@ -57179,8 +57187,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.50.3-alpha".trim()) {
-    return "0.50.3-alpha".trim();
+  if ("0.50.4-alpha".trim()) {
+    return "0.50.4-alpha".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -57525,26 +57533,52 @@ var AuthService = class {
     return exchange();
   }
   /**
-   * Rotate refresh credential; reuse of an old refresh hash revokes the family.
-   * Requires proof signature over `proofPayload` with the registered device key
-   * (caller validates signature separately or passes already-verified flag).
+   * Rotate refresh credential.
+   *
+   * Reuse of a rotated refresh hash outside
+   * {@link AUTH_CREDENTIAL_LIFETIMES.refreshReuseGraceMs} is treated as theft
+   * and permanently revokes the family. Inside the grace window, presenting any
+   * previously rotated hash re-rotates the *current* session and returns a fresh
+   * pair (lost-response / concurrent-refresh races — RFC 6819 §5.2.2.3 style).
+   *
+   * Requires proof signature over `proofPayload` with the registered device key.
    */
   refreshAccess(input) {
     const refreshHash = this.hashSecret(input.refreshToken);
     const now = Date.now();
-    const row = this.db.prepare(
+    const loadByHash = (hash2) => this.db.prepare(
+      `SELECT client_session_id, device_public_key_pem, device_public_key_fingerprint,
+                  scopes_json, refresh_family_id, refresh_hash, refresh_expires_at, revoked_at
+           FROM client_sessions WHERE refresh_hash = ?`
+    ).get(hash2);
+    const loadBySessionId = (clientSessionId) => this.db.prepare(
       `SELECT client_session_id, device_public_key_pem, device_public_key_fingerprint,
-                scopes_json, refresh_family_id, refresh_hash, refresh_expires_at, revoked_at
-         FROM client_sessions WHERE refresh_hash = ?`
-    ).get(refreshHash);
+                  scopes_json, refresh_family_id, refresh_hash, refresh_expires_at, revoked_at
+           FROM client_sessions WHERE client_session_id = ?`
+    ).get(clientSessionId);
+    let row = loadByHash(refreshHash);
     if (!row) {
-      const reused = this.db.prepare("SELECT client_session_id FROM refresh_reuse_log WHERE refresh_hash = ?").get(refreshHash);
-      if (reused) {
-        this.db.prepare("UPDATE client_sessions SET revoked_at = ? WHERE client_session_id = ? AND revoked_at IS NULL").run(now, reused.client_session_id);
+      const reused = this.db.prepare(
+        `SELECT client_session_id, seen_at FROM refresh_reuse_log WHERE refresh_hash = ?`
+      ).get(refreshHash);
+      if (!reused) {
+        throw Object.assign(new Error("invalid refresh token"), { code: "unauthorized" });
+      }
+      const withinGrace = now - reused.seen_at <= AUTH_CREDENTIAL_LIFETIMES.refreshReuseGraceMs;
+      if (withinGrace) {
+        row = loadBySessionId(reused.client_session_id);
+        if (!row) {
+          throw Object.assign(new Error("invalid refresh token"), { code: "unauthorized" });
+        }
+      } else {
+        this.db.prepare(
+          "UPDATE client_sessions SET revoked_at = ? WHERE client_session_id = ? AND revoked_at IS NULL"
+        ).run(now, reused.client_session_id);
         this.onRevoke?.(reused.client_session_id);
-        throw Object.assign(new Error("refresh token reuse detected; session revoked"), { code: "unauthorized" });
+        throw Object.assign(new Error("refresh token reuse detected; session revoked"), {
+          code: "unauthorized"
+        });
       }
-      throw Object.assign(new Error("invalid refresh token"), { code: "unauthorized" });
     }
     if (row.revoked_at) throw Object.assign(new Error("client session revoked"), { code: "unauthorized" });
     if (row.refresh_expires_at < now) {
@@ -57566,20 +57600,21 @@ var AuthService = class {
     if (!Number.isFinite(proofTs) || Math.abs(now - proofTs) > 12e4) {
       throw Object.assign(new Error("proof timestamp out of window"), { code: "unauthorized" });
     }
+    const session = row;
     return this.db.transaction(() => {
-      const scopes = parseScopes(row.scopes_json);
+      const scopes = parseScopes(session.scopes_json);
       const newRefresh = randomToken(32);
       const newRefreshHash = this.hashSecret(newRefresh);
       const refreshExpiresAt = now + AUTH_CREDENTIAL_LIFETIMES.refreshInactivityMs;
       this.db.prepare(
         `INSERT OR IGNORE INTO refresh_reuse_log (refresh_hash, client_session_id, seen_at)
            VALUES (?, ?, ?)`
-      ).run(row.refresh_hash, row.client_session_id, now);
+      ).run(session.refresh_hash, session.client_session_id, now);
       const updated = this.db.prepare(
         `UPDATE client_sessions
            SET refresh_hash = ?, refresh_expires_at = ?, last_used_at = ?
            WHERE client_session_id = ? AND refresh_hash = ? AND revoked_at IS NULL`
-      ).run(newRefreshHash, refreshExpiresAt, now, row.client_session_id, row.refresh_hash);
+      ).run(newRefreshHash, refreshExpiresAt, now, session.client_session_id, session.refresh_hash);
       if (updated.changes !== 1) {
         throw Object.assign(new Error("refresh race; retry"), { code: "conflict" });
       }
@@ -57589,15 +57624,15 @@ var AuthService = class {
         aud: "superone",
         exp: expiresAt,
         iat: now,
-        clientSessionId: row.client_session_id,
+        clientSessionId: session.client_session_id,
         scopes,
-        proofKeyThumbprint: row.device_public_key_fingerprint
+        proofKeyThumbprint: session.device_public_key_fingerprint
       });
       return {
         accessToken,
         expiresAt,
         scopes,
-        clientSessionId: row.client_session_id,
+        clientSessionId: session.client_session_id,
         refreshToken: newRefresh
       };
     })();
@@ -61195,7 +61230,12 @@ function defaultProbeModels(ctx) {
   return async (harnessId, cwd) => {
     if (harnessId !== "claude") return [];
     const binaryPath = resolveClaudeBinaryPath({ harnesses: ctx.harnesses });
-    if (!binaryPath) return [];
+    if (!binaryPath) {
+      console.warn(
+        "[harness.resources] claude model probe skipped: no Agent SDK binary on this node (reinstall the optional platform package or set SUPERONE_CLAUDE_BINARY)"
+      );
+      return [];
+    }
     return getNodeClaudeModelCatalog({ cwd, binaryPath });
   };
 }
@@ -61233,6 +61273,9 @@ async function handleHarnessResources(payload, ctx) {
       const probe = ctx.probeModels ?? defaultProbeModels(ctx);
       const probed = await probe(hid, project.path);
       if (probed.length > 0) return probed;
+      console.warn(
+        `[harness.resources] ${hid} probe returned no models; serving the built-in fallback table`
+      );
       return listHarnessModels(ctx.providers, hid, apiProviderId ?? null);
     };
     const bundle = await collectHarnessResources({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-one/cli",
-  "version": "0.50.3-alpha",
+  "version": "0.50.4-alpha",
   "description": "SuperOne headless node CLI — remote execution environment (RPC, workspaces, sessions).",
   "type": "module",
   "license": "BUSL-1.1",