@super-one/cli 0.51.2-alpha → 0.52.0-alpha

package/MANIFEST.json

@@ -1,7 +1,7 @@
 {
   "name": "@super-one/cli",
-  "version": "0.51.2-alpha",
+  "version": "0.52.0-alpha",
   "kind": "npm",
   "minNodeMajor": 20,
-  "builtAt": "2026-08-09T22:39:13.017Z"
+  "builtAt": "2026-08-10T10:37:56.328Z"
 }

package/lib/cli.mjs

@@ -666,6 +666,269 @@ var init_host_action_superone_descriptors = __esm({
           "additionalProperties": false
         }
       },
+      {
+        "name": "project_list",
+        "description": "List SuperOne projects (id, name, path, lastActiveAt). Call this to discover projectId before session_list/session_search with projectId. Default order is last-active desc. Filter with query (name/path substring). isCurrent marks the project of the calling session.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "query": {
+              "type": "string",
+              "description": "Case-insensitive substring filter on project name or path."
+            },
+            "limit": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 100,
+              "description": "Max rows. Default 50, max 100."
+            },
+            "offset": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Pagination offset. Default 0."
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "session_list",
+        "description": "List SuperOne sessions (metadata only). Default: current project. Pass projectId (from project_list) for another project, or allProjects=true for every project. Rows include projectId only \u2014 use project_list for path/name. Use before session_read/session_search to find ids. Filter by title query, harness, pin/hidden, dates. Sort with order (default last_active_desc; last_active_asc oldest-first; also created_*, message_count_*, size_*). When order is size_*, rows include sizeBytes (approx character length of stored message JSON for ranking \u2014 not disk page-file bytes). Paginate with limit/offset. Not live collab or harness resume.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "query": {
+              "type": "string",
+              "description": "Case-insensitive title substring filter."
+            },
+            "harness": {
+              "type": "string",
+              "enum": [
+                "claude",
+                "codex",
+                "acp",
+                "opencode"
+              ],
+              "description": "Filter by harness."
+            },
+            "includeHidden": {
+              "type": "boolean",
+              "description": "Include hidden sessions. Default false."
+            },
+            "includePinnedOnly": {
+              "type": "boolean",
+              "description": "Only pinned sessions. Default false."
+            },
+            "parentOnly": {
+              "type": "boolean",
+              "description": "Exclude collab child sessions. Default false."
+            },
+            "olderThan": {
+              "type": "string",
+              "description": "ISO timestamp \u2014 only sessions last active before this."
+            },
+            "newerThan": {
+              "type": "string",
+              "description": "ISO timestamp \u2014 only sessions last active after this."
+            },
+            "projectId": {
+              "type": "string",
+              "description": "List sessions in this SuperOne project id only (from project_list). Mutually exclusive with allProjects. Default: current project."
+            },
+            "allProjects": {
+              "type": "boolean",
+              "description": "List sessions across every SuperOne project. Mutually exclusive with projectId. Default false."
+            },
+            "order": {
+              "type": "string",
+              "enum": [
+                "last_active_desc",
+                "last_active_asc",
+                "created_desc",
+                "created_asc",
+                "message_count_desc",
+                "message_count_asc",
+                "size_desc",
+                "size_asc"
+              ],
+              "description": "Sort order. Default last_active_desc. last_active_asc = oldest first. created_* by createdAt; message_count_* by message count; size_* ranks by approx transcript size and includes sizeBytes (character length of message JSON, not disk page-file bytes)."
+            },
+            "limit": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 50,
+              "description": "Max rows. Default 20, max 50."
+            },
+            "offset": {
+              "type": "integer",
+              "minimum": 0,
+              "description": "Pagination offset. Default 0."
+            }
+          },
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "session_search",
+        "description": "Search SuperOne chat transcripts by text. Default: current project; projectId (from project_list) or allProjects for cross-project. Returns matching message hits with short snippets and projectId. Then call session_read with sessionId/messageId for full content. Snippets are pointers only \u2014 not full message bodies.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "query": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Search terms (AND). Matches title and message text."
+            },
+            "harness": {
+              "type": "string",
+              "enum": [
+                "claude",
+                "codex",
+                "acp",
+                "opencode"
+              ]
+            },
+            "sessionIds": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "maxItems": 32,
+              "description": "Optional: restrict search to these session ids."
+            },
+            "role": {
+              "type": "string",
+              "enum": [
+                "user",
+                "assistant",
+                "any"
+              ],
+              "description": "Message role filter. Default any."
+            },
+            "projectId": {
+              "type": "string",
+              "description": "Search this SuperOne project id only (from project_list). Mutually exclusive with allProjects. Default: current project."
+            },
+            "allProjects": {
+              "type": "boolean",
+              "description": "Search every SuperOne project. Mutually exclusive with projectId. Default false."
+            },
+            "limit": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 50,
+              "description": "Max hits. Default 20, max 50."
+            }
+          },
+          "required": [
+            "query"
+          ],
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "session_read",
+        "description": "Read any SuperOne session's saved transcript by id (any project; harness-agnostic content; does not resume provider threads). Views: meta | user | assistant | text | tools | tool_detail. user/assistant/text are pure conversation (no tool lines; assistant/text include toolCount). tools = index; tool_detail needs toolUseId. Paginate with limit/cursor; anchor with messageId/around. Prefer user then on-demand assistant/tools. meta includes projectId (use project_list for path/name).",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "sessionId": {
+              "type": "string",
+              "minLength": 1,
+              "description": "Target SuperOne session id from session_list or session_search (any project)."
+            },
+            "view": {
+              "type": "string",
+              "enum": [
+                "meta",
+                "user",
+                "assistant",
+                "text",
+                "tools",
+                "tool_detail"
+              ],
+              "description": "meta=metadata; user=user text only; assistant=assistant text + toolCount; text=both; tools=tool index; tool_detail=one tool (needs toolUseId). Default text."
+            },
+            "messageId": {
+              "type": "string",
+              "description": "Anchor page at this message id (from search or a prior read)."
+            },
+            "around": {
+              "type": "integer",
+              "minimum": 0,
+              "maximum": 50,
+              "description": "With messageId: include this many messages before and after on the global timeline."
+            },
+            "cursor": {
+              "type": [
+                "integer",
+                "null"
+              ],
+              "description": "Exclusive end index for the next older page (from a prior read). Omit for newest page."
+            },
+            "limit": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 50,
+              "description": "Max messages this page. Default 20, max 50."
+            },
+            "includeThinking": {
+              "type": "boolean",
+              "description": "Include thinking blocks in text views. Default false."
+            },
+            "toolUseId": {
+              "type": "string",
+              "description": "Required for view=tool_detail."
+            }
+          },
+          "required": [
+            "sessionId"
+          ],
+          "additionalProperties": false
+        }
+      },
+      {
+        "name": "session_cleanup",
+        "description": "Hide, unhide, or delete SuperOne sessions by id (from session_list; ids may be from any project). hide/unhide need no confirmation. delete always opens a user confirmation dialog. Never deletes the current session; skips pinned unless includePinned. Prefer session_list to choose ids first.",
+        "inputSchema": {
+          "type": "object",
+          "properties": {
+            "action": {
+              "type": "string",
+              "enum": [
+                "hide",
+                "unhide",
+                "delete"
+              ],
+              "description": "hide/unhide soft-archive (no confirm). delete permanently removes after user approval dialog."
+            },
+            "sessionIds": {
+              "type": "array",
+              "items": {
+                "type": "string"
+              },
+              "minItems": 1,
+              "maxItems": 50,
+              "description": "Session ids from session_list to act on."
+            },
+            "includePinned": {
+              "type": "boolean",
+              "description": "Allow acting on pinned sessions. Default false (pinned are skipped)."
+            },
+            "maxDelete": {
+              "type": "integer",
+              "minimum": 1,
+              "maximum": 50,
+              "description": "Hard cap on sessions acted on. Default 50."
+            }
+          },
+          "required": [
+            "action",
+            "sessionIds"
+          ],
+          "additionalProperties": false
+        }
+      },
       {
         "name": "media_list_providers",
         "description": "List configured media providers that have usable credentials. Filter by image or video. Use a returned provider id with media_generate_image or media_generate_video; use kind to select the matching media manual topic. Honor returned sizing and sizeNote constraints.",
@@ -9063,6 +9326,11 @@ var init_superone_host_owned_tools = __esm({
       "miniapp_dev_pack",
       "miniapp_dev_update_types",
       "session_rename",
+      "project_list",
+      "session_list",
+      "session_search",
+      "session_read",
+      "session_cleanup",
       "session_collab_list_agents",
       "session_collab_request",
       "session_collab_start",
@@ -11660,10 +11928,10 @@ var init_capability_prompt_tags = __esm({
 // ../../packages/shared/src/miniapp-prompt-tags.ts
 function stripMiniAppMarkup(text) {
   return stripCapabilityMarkup(
-    text.replace(MINIAPP_REMINDER_REGEX, "").replace(MINIAPP_TAG_REGEX, (_2, appName) => `@${String(appName).trim()}`)
+    text.replace(MINIAPP_REMINDER_REGEX, "").replace(SESSION_REMINDER_REGEX, "").replace(DESKTOP_APP_REMINDER_REGEX, "").replace(MINIAPP_TAG_REGEX, (_2, appName) => `@${String(appName).trim()}`).replace(SESSION_TAG_REGEX, (_2, title) => `@${String(title).trim()}`).replace(DESKTOP_APP_TAG_REGEX, (_2, name) => `@${String(name).trim()}`)
   );
 }
-var MINIAPP_TAG_REGEX, MINIAPP_REMINDER_REGEX;
+var MINIAPP_TAG_REGEX, MINIAPP_REMINDER_REGEX, SESSION_TAG_REGEX, SESSION_REMINDER_REGEX, DESKTOP_APP_TAG_REGEX, DESKTOP_APP_REMINDER_REGEX;
 var init_miniapp_prompt_tags = __esm({
   "../../packages/shared/src/miniapp-prompt-tags.ts"() {
     "use strict";
@@ -11671,6 +11939,10 @@ var init_miniapp_prompt_tags = __esm({
     init_capability_prompt_tags();
     MINIAPP_TAG_REGEX = /<superone-miniapp>\s*<appname>([\s\S]*?)<\/appname>\s*<appid>([\s\S]*?)<\/appid>\s*<\/superone-miniapp>/g;
     MINIAPP_REMINDER_REGEX = /\n*<superone-miniapp-reminder>[\s\S]*?<\/superone-miniapp-reminder>\n*/g;
+    SESSION_TAG_REGEX = /<superone-session>\s*<title>([\s\S]*?)<\/title>\s*<sessionId>([\s\S]*?)<\/sessionId>\s*<\/superone-session>/g;
+    SESSION_REMINDER_REGEX = /\n*<superone-session-reminder>[\s\S]*?<\/superone-session-reminder>\n*/g;
+    DESKTOP_APP_TAG_REGEX = /<superone-desktop-app>\s*<name>([\s\S]*?)<\/name>\s*<bundleId>([\s\S]*?)<\/bundleId>\s*<\/superone-desktop-app>/g;
+    DESKTOP_APP_REMINDER_REGEX = /\n*<superone-desktop-app-reminder>[\s\S]*?<\/superone-desktop-app-reminder>\n*/g;
   }
 });
 
@@ -12127,6 +12399,75 @@ function createSqliteHostActionStore(db) {
       }
       return cancelled;
     },
+    rebindSessionController(input) {
+      const now = input.now ?? Date.now();
+      const to = input.toControllerClientSessionId.trim();
+      if (!to) {
+        throw Object.assign(new Error("toControllerClientSessionId required"), {
+          code: "invalid_argument"
+        });
+      }
+      const migrated = [];
+      const cancelled = [];
+      db.prepare("BEGIN IMMEDIATE").run();
+      try {
+        const raw = db.prepare(
+          `SELECT action_id, session_id, turn_id, controller_client_session_id, tool_name, tool_group,
+                    args_json, replay_policy, state, version, created_at, deadline,
+                    claim_token_hash, claimed_at, claim_expires_at, result_json, error_json,
+                    response_payload_hash, finished_at
+             FROM host_actions
+             WHERE session_id = ? AND state IN ('pending', 'claimed')`
+        ).all(input.sessionId);
+        for (const r of raw) {
+          const row = mapRow(r);
+          if (row.controllerClientSessionId === to) continue;
+          if (row.state === "claimed" && row.replayPolicy !== "safe") {
+            const nextVersion2 = row.version + 1;
+            const errorJson = JSON.stringify({
+              code: "cancelled",
+              reason: "controller_rebound_unsafe_claim"
+            });
+            const result2 = db.prepare(
+              `UPDATE host_actions SET
+                   state = 'cancelled', version = ?, error_json = ?, finished_at = ?,
+                   claim_token_hash = NULL, claim_expires_at = NULL, claimed_at = NULL
+                 WHERE action_id = ? AND version = ? AND state = 'claimed'`
+            ).run(nextVersion2, errorJson, now, row.actionId, row.version);
+            if (result2.changes === 1) {
+              const updated = load(row.actionId);
+              insertChange(updated, now);
+              cancelled.push(updated);
+            }
+            continue;
+          }
+          const nextVersion = row.version + 1;
+          const result = db.prepare(
+            `UPDATE host_actions SET
+                 controller_client_session_id = ?,
+                 state = 'pending',
+                 version = ?,
+                 claim_token_hash = NULL,
+                 claimed_at = NULL,
+                 claim_expires_at = NULL
+               WHERE action_id = ? AND version = ? AND state IN ('pending', 'claimed')`
+          ).run(to, nextVersion, row.actionId, row.version);
+          if (result.changes === 1) {
+            const updated = load(row.actionId);
+            insertChange(updated, now);
+            migrated.push(updated);
+          }
+        }
+        db.prepare("COMMIT").run();
+      } catch (err) {
+        try {
+          db.prepare("ROLLBACK").run();
+        } catch {
+        }
+        throw err;
+      }
+      return { migrated, cancelled };
+    },
     reconcileExpired(nowInput) {
       const now = nowInput ?? Date.now();
       const changed = [];
@@ -12598,6 +12939,56 @@ var init_session_runtime = __esm({
         this.persist(session);
         return this.clone(session);
       }
+      /**
+       * Move Host Action controller identity to the client that just acquired control.
+       *
+       * Session.create stamps controllerClientSessionId once. Normal refresh keeps the
+       * same clientSessionId, but re-pair / revoke+pair issues a new id. Control lease
+       * can follow the new desktop while host_actions stay addressed to the revoked
+       * controller — every SuperOne MCP then times out with deadline_exceeded.
+       *
+       * Call this from session.acquireControl after a successful lease acquire.
+       * Idempotent when the controller is already the new client.
+       */
+      rebindHostActionController(sessionId, controllerClientSessionId) {
+        const session = this.live.get(sessionId);
+        if (!session) {
+          throw Object.assign(new Error("session not found"), { code: "not_found" });
+        }
+        if (session.closed || session.status === "ended") {
+          throw Object.assign(new Error("session is closed"), { code: "failed_precondition" });
+        }
+        const next = typeof controllerClientSessionId === "string" ? controllerClientSessionId.trim() : "";
+        if (!next) {
+          throw Object.assign(new Error("controllerClientSessionId required"), {
+            code: "invalid_argument"
+          });
+        }
+        const prev = session.controllerClientSessionId;
+        if (prev === next) {
+          return this.clone(session);
+        }
+        session.controllerClientSessionId = next;
+        if (session.hostActionCapabilityVersion < 1) {
+          session.hostActionCapabilityVersion = HOST_ACTION_CAPABILITY_VERSION;
+        }
+        if (!session.hostActionToolGroups.length) {
+          session.hostActionToolGroups = [...DEFAULT_HOST_ACTION_TOOL_GROUPS];
+        }
+        session.updatedAt = Date.now();
+        this.persist(session);
+        if (this.hostActions) {
+          const { cancelled } = this.hostActions.rebindSessionController({
+            sessionId: session.sessionId,
+            toControllerClientSessionId: next
+          });
+          for (const row of cancelled) {
+            this.settleHostActionWaiter(this.hostActions.toTerminal(row));
+          }
+          this.wakeHostActionPollers();
+        }
+        return this.clone(session);
+      }
       /**
        * Patch durable per-session turn defaults.
        * Only keys present in `patch` are updated; null clears a stored default.
@@ -41663,6 +42054,23 @@ var init_tool_normalization = __esm({
   }
 });
 
+// ../../packages/shared/src/session-archive-result-shape.ts
+function isSessionArchiveToolName(toolName) {
+  if (!toolName) return false;
+  return /(?:^|__)(?:project_list|session_(?:list|search|read|cleanup))$/.test(toolName);
+}
+function looksLikeSessionArchiveToon(summary) {
+  return /(?:^|\n)(?:projects|sessions|hits)\[\d+\]/.test(summary.trim());
+}
+function looksLikeSessionArchiveJson(obj) {
+  return Array.isArray(obj.sessions) || Array.isArray(obj.hits) || Array.isArray(obj.projects) || typeof obj.action === "string" && (Array.isArray(obj.deleted) || Array.isArray(obj.affected) || Array.isArray(obj.candidates) || Array.isArray(obj.failed));
+}
+var init_session_archive_result_shape = __esm({
+  "../../packages/shared/src/session-archive-result-shape.ts"() {
+    "use strict";
+  }
+});
+
 // ../../packages/acp/src/tool-result-map.ts
 function formatAcpRawOutput(raw) {
   return formatAgentToolOutput(raw);
@@ -41764,11 +42172,13 @@ function looksLikeCollabResult(obj) {
 function shouldKeepFullToolResult(summary, toolName) {
   if (summary.length <= 4e3) return true;
   if (isCollabToolName(toolName)) return true;
+  if (isSessionArchiveToolName(toolName)) return true;
+  if (looksLikeSessionArchiveToon(summary)) return true;
   const trimmed = summary.trim();
   if (!trimmed.startsWith("{")) return false;
   try {
     const obj = JSON.parse(trimmed);
-    return typeof obj.widget_code === "string" && obj.widget_code.length > 0 || looksLikeCollabResult(obj);
+    return typeof obj.widget_code === "string" && obj.widget_code.length > 0 || looksLikeCollabResult(obj) || looksLikeSessionArchiveJson(obj);
   } catch {
     return false;
   }
@@ -41780,6 +42190,7 @@ var init_tool_result_map = __esm({
   "../../packages/acp/src/tool-result-map.ts"() {
     "use strict";
     init_capability_prompt_tags();
+    init_session_archive_result_shape();
     init_tool_ui();
     init_tool_normalization();
   }
@@ -58244,8 +58655,8 @@ import { fileURLToPath } from "node:url";
 function resolveCliReleaseVersion() {
   const fromEnv = process.env.SUPERONE_CLI_VERSION?.trim();
   if (fromEnv) return fromEnv;
-  if ("0.51.2-alpha".trim()) {
-    return "0.51.2-alpha".trim();
+  if ("0.52.0-alpha".trim()) {
+    return "0.52.0-alpha".trim();
   }
   const fromDist = readDistManifestVersion();
   if (fromDist) return fromDist;
@@ -63988,7 +64399,8 @@ function handleSessionCreate(payload, ctx) {
       harnessId,
       providerId,
       title: typeof p2.title === "string" ? p2.title : void 0,
-      // Pairing-level identity survives token refresh; control lease is a fence, not identity.
+      // Initial HA controller = creating client. Token refresh keeps the same
+      // clientSessionId; re-pair does not — acquireControl rebinds (see above).
       controllerClientSessionId: ctx.client.clientSessionId
     });
     if (model || effort || permissionMode || sandboxMode) {
@@ -64075,6 +64487,11 @@ function handleSessionAcquireControl(payload, ctx) {
       holderClientId: ctx.client.clientSessionId,
       ttlMs: typeof p2.ttlMs === "number" ? p2.ttlMs : void 0
     });
+    try {
+      ctx.sessions.rebindHostActionController(sessionId, ctx.client.clientSessionId);
+    } catch (err) {
+      if (err.code !== "not_found") throw err;
+    }
     return { result: lease };
   } catch (err) {
     return mapThrown6(err);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@super-one/cli",
-  "version": "0.51.2-alpha",
+  "version": "0.52.0-alpha",
   "description": "SuperOne headless node CLI — remote execution environment (RPC, workspaces, sessions).",
   "type": "module",
   "license": "BUSL-1.1",