chainlesschain 0.162.188 → 0.162.193

package/src/commands/update.js

@@ -7,6 +7,10 @@ import { askConfirm } from "../lib/prompts.js";
 import logger from "../lib/logger.js";
 import { executionBroker } from "../lib/process-execution-broker/index.js";
 import { resolveNpmInvocation } from "../lib/npm-invocation.js";
+import {
+  rollbackLastKnownGood,
+  ApplyError,
+} from "../lib/packer/pack-update-applier.js";
 
 export const _deps = {
   platform: process.platform,
@@ -106,12 +110,17 @@ export async function selfUpdateCli(targetVersion) {
         `CLI update ran but version is still ${newVersion}. Please run manually:\n  npm install -g chainlesschain@${targetVersion}`,
       );
       return false;
-    } catch (_verifyErr) {
-      // Cannot verify, assume success
-      logger.success(`CLI updated to v${targetVersion}`);
-      return true;
+    } catch (verifyErr) {
+      // Installation success is not update success. A stale shim on PATH, a
+      // broken executable, or a policy-denied verification spawn must never be
+      // reported as a verified update.
+      logger.warn(
+        `CLI package installation completed, but the installed version could not be verified: ${verifyErr?.message || "unknown verification error"}. ` +
+          `Please verify or reinstall manually:\n  npm install -g chainlesschain@${targetVersion}`,
+      );
+      return false;
     }
-  } catch (_err) {
+  } catch {
     // npm global install may fail due to permissions; guide the user
     logger.warn(
       `CLI self-update failed. Please run manually:\n  npm install -g chainlesschain@${targetVersion}`,
@@ -121,7 +130,7 @@ export async function selfUpdateCli(targetVersion) {
 }
 
 export function registerUpdateCommand(program) {
-  program
+  const update = program
     .command("update")
     .description("Check for and install updates")
     .option("--check", "Only check for updates (do not download)")
@@ -235,4 +244,57 @@ export function registerUpdateCommand(program) {
         process.exit(1);
       }
     });
+
+  update
+    .command("rollback")
+    .description("Restore the last-known-good signed native CLI binary")
+    .option(
+      "--target-exe <path>",
+      "Native executable to restore (required outside a packed CLI)",
+    )
+    .option("--restart", "Restart the restored CLI after switching")
+    .option("--yes", "Skip confirmation")
+    .option("--json", "Output the rollback plan as JSON")
+    .action(async (options) => {
+      const targetExePath =
+        options.targetExe || (process.pkg ? process.execPath : null);
+      if (!targetExePath) {
+        logger.error(
+          "Rollback is for signed native installations. Provide --target-exe explicitly when invoking it from npm.",
+        );
+        process.exitCode = 2;
+        return;
+      }
+      if (!options.yes) {
+        const accepted = await askConfirm(
+          `Restore ${targetExePath}.previous over ${targetExePath}?`,
+          false,
+        );
+        if (!accepted) {
+          logger.info("Rollback cancelled");
+          return;
+        }
+      }
+      try {
+        const plan = await rollbackLastKnownGood({
+          targetExePath,
+          restart: Boolean(options.restart),
+          verify: true,
+        });
+        if (options.json) logger.log(JSON.stringify(plan, null, 2));
+        else
+          logger.success(`Rollback scheduled from ${targetExePath}.previous`);
+        if (plan.action === "sidecar-cmd") {
+          setTimeout(() => process.exit(0), 500).unref?.();
+        }
+      } catch (error) {
+        const code = error instanceof ApplyError ? error.code : "UNKNOWN";
+        if (options.json) {
+          logger.log(JSON.stringify({ error: error.message, code }));
+        } else {
+          logger.error(`Rollback failed [${code}]: ${error.message}`);
+        }
+        process.exitCode = 1;
+      }
+    });
 }

package/src/constants.js

@@ -166,6 +166,17 @@ export const DEFAULT_CONFIG = {
     channel: "stable",
     autoCheck: true,
   },
+  cli: {
+    promptSuggestions: true,
+    keybindings: {},
+  },
+  voice: {
+    backends: {},
+    allowCloud: false,
+  },
+  advisor: {
+    enabled: false,
+  },
 };
 
 export const MIN_NODE_VERSION = "22.12.0";

package/src/data/changelog.json

@@ -1,6 +1,32 @@
 {
   "source": "CHANGELOG.md",
   "releases": [
+    {
+      "productVersion": null,
+      "cliVersion": "0.162.193",
+      "cliVersions": ["0.162.189", "0.162.193"],
+      "date": "2026-08-03",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added — cc CLI 0.162.193: durable sessions, MCP recovery, and checkpoint safety",
+          "body": "> `chainlesschain` **0.162.189 → 0.162.193** (release candidate,\n> 2026-08-03; `0.162.190`, `0.162.191`, and `0.162.192` were never published). CLI-only release metadata;\n> `@chainlesschain/personal-data-hub`\n> remains **0.4.57** and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Safer configuration defaults**: for CLI config writes, schema-declared\n  secrets are refused by `config set` and must use `config set-secret` through\n  hidden TTY/stdin and OS-store or owner-only fallback paths. Explicit\n  `workspace-write` / `strict` isolation and managed-required sandbox policies\n  fail closed when unavailable. `mcp add` now defaults to local scope; both\n  human and JSON `status` use bounded quick probes, while full Docker Compose\n  detail requires `--deep`.\n- **MCP transports and uncertain-outcome recovery**: scoped WebSocket MCP,\n  trusted dynamic headers, timeout notifications, and durable recovery records\n  cover REPL, stream, Cowork/host, and WebSocket paths through shared verified\n  recovery authority. Ambiguous MCP outcomes require verification or\n  adjudication instead of blind replay.\n- **Canonical sessions and resource budgets**: covered REPL, stream,\n  WebSocket, and headless paths use verified transcript projections,\n  transactional summary/compaction state, and reject stale or corrupt resume\n  authority. A persistent session-budget foundation plus background/Team\n  adapters adds fenced token/USD/wall-clock accounting and cleanup; it is not\n  yet a universal cross-host budget authority.\n- **Agent workflow controls**: durable plan/todo state with revision and\n  authority ceilings, controlled skill subagents, background launch profiles,\n  semantic handoff, ephemeral side questions, manifest-driven help, and\n  deterministic shell completions improve Claude Code-style daily workflows.\n  CLI-owned canonical session/checkpoint/delivery projections are consumed by\n  VS Code and JetBrains while mutations stay CLI-authoritative; this CLI-only\n  metadata bump does not bump either IDE package.\n- **Signed native update recovery**: immutable release identity, signed updater\n  rollback chains, atomic download replacement, and portable recovery/cleanup\n  paths add fail-closed activation, rollback, and recovery fences for stale,\n  replaced, or partial payloads.\n- **Checkpoint restore durability**: canonical workspace prestate binding,\n  lifetime locks, immutable Git/copy target identity, copy tombstones and\n  owner-private safety arms feed a hash-chained CAS restore saga shared by\n  direct and timeline restores. A real Git/copy kill/restart matrix covers\n  both the post-completion, pre-lock-release window and mutation-phase partial\n  rollback recovery.\n- **Conservative recovery CLI**: `cc checkpoint recovery`\n  `list/show/abort/resume/rollback/release` derives mutation authority from the\n  current live owner digest or verified owner absence plus exact seq/head\n  fences. `resume` remains limited to a verified already-completed settlement;\n  `rollback --yes` only accepts a verified partial-mutation rollback cycle and\n  dispatches the persisted Git/copy engine rather than re-detecting it.\n- **Verified partial restore rollback**: production Git and copy adapters,\n  crash-safe rollback v2 phase boundaries, and the transaction-fenced\n  `checkpoint_restore_recovery_resolution` event bind workspace and session\n  settlement in both directions. Checkpoint delete, clear, and prune now retain\n  active original/safety authority with expected-identity transactions,\n  no-replace copy publication, and root-bound maintenance locks. This is a\n  narrow partial-restore recovery path, not general multi-resource atomicity,\n  power-loss proof, or checkpoint recovery GA.\n- **Release retry identity**: tags `v-npm-0-162-190`,\n  `v-npm-0-162-191`, and `v-npm-0-162-192` remain immutable records of\n  pre-publication failures.\n  Run `30790359741` exposed an Agent SDK E2E fixture that used its owner-private\n  `CHAINLESSCHAIN_HOME` as the active workspace; the fixture now uses sibling\n  control-state and workspace roots while production path safety remains fail\n  closed. Run `30793513643` passed all tests but exposed root-monorepo\n  `npm sbom` contamination from unrelated desktop/mobile peer graphs; SBOM\n  generation now resolves an ignore-scripts lock from the immutable CLI\n  tarball and validates its CycloneDX package/version identity. Run\n  `30799974832` exposed that the exact-SHA gate queried jobs with\n  `filter=all`, so an earlier failed CLI CI attempt overrode the successful\n  rerun; it now verifies only GitHub's latest attempt. The first `0.162.193`\n  candidate then exposed a recurring macOS two-process CAS race in run\n  `30800530258`: a cooperating owner could remove its lock between the\n  unlocked safety inspection steps, and the loser reported `LOCK_FAILED`\n  instead of reaching the serialized stale-head `CONFLICT`. Unlocked\n  pre/postflight inspection now retries that exact disappearance, while\n  owner-required critical-section checks still fail closed. Deterministic\n  directory/owner disappearance regressions, the full 105-test checkpoint\n  saga suite, and five repeated real-process CAS runs pass locally. None of\n  these runs reached npm publication.\n- **Release status**: `0.162.193` is not published. The exact\n  version/changelog/fix commit must pass `CLI CI` and `CLI Strict Sandbox` on\n  Ubuntu, Windows, and macOS, plus affected `Session Host Consistency`,\n  `CLI Background Interaction E2E`, and immutable npm tarball verification,\n  before tag `v-npm-0-162-193` or npm publication is allowed. Local,\n  older-SHA, and partial results are supplementary only."
+        }
+      ]
+    },
+    {
+      "productVersion": null,
+      "cliVersion": "0.162.189",
+      "cliVersions": ["0.162.188", "0.162.189"],
+      "date": "2026-07-31",
+      "title": "",
+      "sections": [
+        {
+          "heading": "Added — cc CLI 0.162.189: managed rollback and distributed Agent Teams closure",
+          "body": "> `chainlesschain` **0.162.188 → 0.162.189** (2026-07-31).\n> CLI-only release metadata; `@chainlesschain/personal-data-hub` remains\n> **0.4.57** and `@chainlesschain/agent-sdk` remains **0.1.7**.\n\n- **Managed workspace rollback**: Process Broker-managed workspace write paths\n  record durable recovery evidence, establish checkpoints at accepted\n  boundaries, and apply fenced rollback after failure, cancellation, or\n  timeout. `full`, `partial`, and `none` coverage outcomes remain explicit,\n  while unsupported external side effects stay outside the rollback guarantee.\n- **Distributed Agent Teams authority**: local schema v6 is the current state\n  authority, with v5 accepted only through CLI-owned resume migration. The\n  separate distributed queue schema v1 uses queue authority digests, leases,\n  and compare-and-swap fences for supported shared-filesystem coordination; it\n  is not a consensus or network-partition-tolerant queue.\n- **Wall-clock lifecycle fence**: linearized `startedAt` and `observedAt`\n  checks surround executor activity, active managed shell and agent work is\n  aborted when the wall-clock budget expires, and commit/checkpoint publication\n  is fenced so late results cannot become completed tasks. Accepted committed\n  evidence instead enters explicit adjudication.\n- **CLI-owned IDE controls**: VS Code and JetBrains surfaces observe the raw\n  local v6 or distributed queue v1 JSON as read-only state and route takeover,\n  recovery, and adjudication through CLI-owned authority, digest, lease, and\n  evidence fences.\n- **Validated implementation candidate**: candidate\n  `7df6feced4670ac71d19548752d18ac4cc225025` completed the\n  [CLI CI](https://github.com/chainlesschain/chainlesschain/actions/runs/30549100935),\n  [CLI Strict Sandbox](https://github.com/chainlesschain/chainlesschain/actions/runs/30549100289),\n  [short distributed soak](https://github.com/chainlesschain/chainlesschain/actions/runs/30549100307),\n  and [long distributed soak](https://github.com/chainlesschain/chainlesschain/actions/runs/30549142504)\n  gates successfully.\n- **Published release evidence**: exact release commit\n  [`2607af0dadeb951583139942e5f2add3e95e1208`](https://github.com/chainlesschain/chainlesschain/commit/2607af0dadeb951583139942e5f2add3e95e1208)\n  passed [CLI CI](https://github.com/chainlesschain/chainlesschain/actions/runs/30586603353),\n  [CLI Strict Sandbox](https://github.com/chainlesschain/chainlesschain/actions/runs/30586603019),\n  the [long Agent Team soak](https://github.com/chainlesschain/chainlesschain/actions/runs/30564377629),\n  and [npm publication](https://github.com/chainlesschain/chainlesschain/actions/runs/30588174291).\n  `chainlesschain@0.162.189` is public on npm; candidate and local results remain\n  supplementary and do not replace these exact-release-SHA gates."
+        }
+      ]
+    },
     {
       "productVersion": null,
       "cliVersion": "0.162.188",

package/src/gateways/ws/action-protocol.js

@@ -55,6 +55,7 @@ export async function handleCoworkTask(server, id, ws, message) {
       cwd: server.projectRoot || process.cwd(),
       llmOptions: {},
       signal: ac.signal,
+      ...(message.mcpSessionId ? { mcpSessionId: message.mcpSessionId } : {}),
       ...(useParallel
         ? {
             agents: message.agents || 3,
@@ -72,6 +73,14 @@ export async function handleCoworkTask(server, id, ws, message) {
           tool: progress.tool,
           iterationCount: progress.iterationCount,
           tokenCount: progress.tokenCount,
+          ...(progress.sessionId ? { mcpSessionId: progress.sessionId } : {}),
+          ...(Number.isInteger(progress.unsettled)
+            ? { unsettled: progress.unsettled }
+            : {}),
+          ...(Number.isInteger(progress.incidents)
+            ? { incidents: progress.incidents }
+            : {}),
+          ...(progress.recovery ? { recovery: progress.recovery } : {}),
         });
       },
     });
@@ -90,6 +99,7 @@ export async function handleCoworkTask(server, id, ws, message) {
       tokenCount: result.result?.tokenCount || 0,
       parallel: result.parallel || false,
       subtaskCount: result.result?.subtaskCount || 0,
+      ...(result.mcpSessionId ? { mcpSessionId: result.mcpSessionId } : {}),
       mode: result.mode || (useDebate ? "debate" : "agent"),
       ...(useDebate
         ? {