chainlesschain 0.165.4 → 0.165.5

package/src/commands/cowork.js

@@ -75,9 +75,8 @@ function renderWorkflowPreflight(preflight) {
 }
 
 async function loadCoworkWorkflowRecord(cwd, id, definitionDigest) {
-  const { getWorkflowRecord, getWorkflowVersion } = await import(
-    "../lib/cowork-workflow.js"
-  );
+  const { getWorkflowRecord, getWorkflowVersion } =
+    await import("../lib/cowork-workflow.js");
   return definitionDigest
     ? getWorkflowVersion(cwd, id, definitionDigest)
     : getWorkflowRecord(cwd, id);
@@ -135,9 +134,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .option("--model <name>", "LLM model to use")
     .option("--json", "Output as JSON")
     .action(async (target, options) => {
-      const { startDebate, DEFAULT_PERSPECTIVES } = await import(
-        "../lib/cowork/debate-review-cli.js"
-      );
+      const { startDebate, DEFAULT_PERSPECTIVES } =
+        await import("../lib/cowork/debate-review-cli.js");
 
       const perspectives = options.perspectives
         .split(",")
@@ -346,9 +344,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
         let result;
 
         if (options.type === "style") {
-          const { analyzeProjectStyle } = await import(
-            "../lib/cowork/project-style-analyzer-cli.js"
-          );
+          const { analyzeProjectStyle } =
+            await import("../lib/cowork/project-style-analyzer-cli.js");
           const llmOptions = {};
           if (options.provider) llmOptions.provider = options.provider;
           if (options.model) llmOptions.model = options.model;
@@ -357,14 +354,12 @@ export function registerCoworkCommand(program, commandDeps = {}) {
             llmOptions,
           });
         } else if (options.type === "knowledge-graph") {
-          const { buildKnowledgeGraph } = await import(
-            "../lib/cowork/code-knowledge-graph-cli.js"
-          );
+          const { buildKnowledgeGraph } =
+            await import("../lib/cowork/code-knowledge-graph-cli.js");
           result = await buildKnowledgeGraph({ targetPath: resolved });
         } else if (options.type === "decisions") {
-          const { extractDecisions } = await import(
-            "../lib/cowork/decision-kb-cli.js"
-          );
+          const { extractDecisions } =
+            await import("../lib/cowork/decision-kb-cli.js");
           const llmOptions = {};
           if (options.provider) llmOptions.provider = options.provider;
           if (options.model) llmOptions.model = options.model;
@@ -413,9 +408,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .option("--limit <n>", "Max results", "20")
     .option("--json", "Output as JSON")
     .action(async (query, options) => {
-      const { searchTemplatesInHub } = await import(
-        "../lib/cowork-evomap-adapter.js"
-      );
+      const { searchTemplatesInHub } =
+        await import("../lib/cowork-evomap-adapter.js");
       try {
         const results = await searchTemplatesInHub(query || "", {
           hubUrl: options.hub,
@@ -461,9 +455,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
       (value, prev) => (prev ? [...prev, value] : [value]),
     )
     .action(async (geneId, options) => {
-      const { installTemplateFromHub } = await import(
-        "../lib/cowork-evomap-adapter.js"
-      );
+      const { installTemplateFromHub } =
+        await import("../lib/cowork-evomap-adapter.js");
       try {
         const template = await installTemplateFromHub(process.cwd(), geneId, {
           hubUrl: options.hub,
@@ -486,9 +479,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .description("List locally installed Cowork templates")
     .option("--json", "Output as JSON")
     .action(async (options) => {
-      const { listUserTemplates } = await import(
-        "../lib/cowork-template-marketplace.js"
-      );
+      const { listUserTemplates } =
+        await import("../lib/cowork-template-marketplace.js");
       const templates = listUserTemplates(process.cwd());
       if (options.json) {
         console.log(JSON.stringify(templates, null, 2));
@@ -511,9 +503,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .command("remove <id>")
     .description("Remove an installed Cowork template")
     .action(async (id) => {
-      const { removeUserTemplate } = await import(
-        "../lib/cowork-template-marketplace.js"
-      );
+      const { removeUserTemplate } =
+        await import("../lib/cowork-template-marketplace.js");
       if (removeUserTemplate(process.cwd(), id)) {
         logger.log(chalk.green(`✓ Removed '${id}'`));
       } else {
@@ -937,9 +928,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
               : {}),
           });
         }
-        const { generateDynamicWorkflowDraft } = await import(
-          "../lib/dynamic-workflow-draft.js"
-        );
+        const { generateDynamicWorkflowDraft } =
+          await import("../lib/dynamic-workflow-draft.js");
         const draft = await generateDynamicWorkflowDraft(
           { prompt, provider, model },
           { chat },
@@ -1019,12 +1009,13 @@ export function registerCoworkCommand(program, commandDeps = {}) {
   workflow
     .command("runtime-status <run-id>")
     .description("Read a durable workflow run without invoking a task provider")
+    .option("--cwd <path>", "Project root containing the durable run")
     .option("--json", "Machine-readable JSON output")
     .action(async (runId, options) => {
       try {
         const runtime = await import("../lib/dynamic-workflow-runtime.js");
         const statePath = runtime.dynamicWorkflowRunStatePath(
-          process.cwd(),
+          options.cwd || process.cwd(),
           runId,
         );
         const projection = runtime.projectDynamicWorkflowRuntime(statePath, {
@@ -1068,6 +1059,46 @@ export function registerCoworkCommand(program, commandDeps = {}) {
       }
     });
 
+  workflow
+    .command("runtime-recovery-plan")
+    .description(
+      "Dry-run the bounded startup/periodic recovery policy for this project",
+    )
+    .option("--cwd <path>", "Project root containing durable runs")
+    .option("-n, --limit <n>", "Maximum durable runs to inspect", "100")
+    .option("--json", "Machine-readable JSON output")
+    .action(async (options) => {
+      try {
+        const runtime = await import("../lib/dynamic-workflow-runtime.js");
+        const plan = runtime.buildDynamicWorkflowRecoveryPlan(
+          options.cwd || process.cwd(),
+          {
+            limit: Math.max(1, parseInt(options.limit) || 100),
+            ...(Object.hasOwn(commandDeps, "workflowCheckpointStore")
+              ? { checkpointStore: commandDeps.workflowCheckpointStore }
+              : {}),
+          },
+        );
+        if (options.json) {
+          console.log(JSON.stringify(plan, null, 2));
+          return;
+        }
+        logger.log(
+          `${plan.summary.attention}/${plan.summary.total} durable runs need attention; plan ${plan.planDigest}`,
+        );
+        for (const item of plan.items.filter(
+          (entry) => entry.risk !== "none",
+        )) {
+          logger.log(
+            `  ${item.runId}  ${item.risk}  action=${item.recommendedAction}  revision=${item.revision}`,
+          );
+        }
+      } catch (err) {
+        logger.error(`WORKFLOW_RUNTIME_RECOVERY_PLAN_FAILED: ${err.message}`);
+        process.exitCode = 2;
+      }
+    });
+
   for (const action of ["pause", "stop", "resume"]) {
     workflow
       .command(`runtime-${action} <run-id>`)
@@ -1078,12 +1109,13 @@ export function registerCoworkCommand(program, commandDeps = {}) {
         "--expected-revision <n>",
         "Exact runtime revision shown by runtime-status",
       )
+      .option("--cwd <path>", "Project root containing the durable run")
       .option("--json", "Machine-readable JSON output")
       .action(async (runId, options) => {
         try {
           const runtime = await import("../lib/dynamic-workflow-runtime.js");
           const statePath = runtime.dynamicWorkflowRunStatePath(
-            process.cwd(),
+            options.cwd || process.cwd(),
             runId,
           );
           const operation =
@@ -1119,12 +1151,13 @@ export function registerCoworkCommand(program, commandDeps = {}) {
       "--expected-revision <n>",
       "Exact runtime revision shown by runtime-status",
     )
+    .option("--cwd <path>", "Project root containing the durable run")
     .option("--json", "Machine-readable JSON output")
     .action(async (runId, callRecordId, options) => {
       try {
         const runtime = await import("../lib/dynamic-workflow-runtime.js");
         const statePath = runtime.dynamicWorkflowRunStatePath(
-          process.cwd(),
+          options.cwd || process.cwd(),
           runId,
         );
         const state = runtime.recoverDurableWorkflowCheckpointCall(
@@ -1162,12 +1195,13 @@ export function registerCoworkCommand(program, commandDeps = {}) {
       "--expected-revision <n>",
       "Exact runtime revision shown by runtime-status",
     )
+    .option("--cwd <path>", "Project root containing the durable run")
     .option("--json", "Machine-readable JSON output")
     .action(async (runId, options) => {
       try {
         const runtime = await import("../lib/dynamic-workflow-runtime.js");
         const statePath = runtime.dynamicWorkflowRunStatePath(
-          process.cwd(),
+          options.cwd || process.cwd(),
           runId,
         );
         const state = runtime.recoverDurableWorkflowCheckpointCalls(
@@ -1202,12 +1236,13 @@ export function registerCoworkCommand(program, commandDeps = {}) {
       "--expected-revision <n>",
       "Exact runtime revision shown by runtime-status",
     )
+    .option("--cwd <path>", "Project root containing the durable run")
     .option("--json", "Machine-readable JSON output")
     .action(async (runId, requestId, responseFile, options) => {
       try {
         const runtime = await import("../lib/dynamic-workflow-runtime.js");
         const statePath = runtime.dynamicWorkflowRunStatePath(
-          process.cwd(),
+          options.cwd || process.cwd(),
           runId,
         );
         const answer =
@@ -1240,12 +1275,13 @@ export function registerCoworkCommand(program, commandDeps = {}) {
       "--expected-revision <n>",
       "Exact runtime revision shown by runtime-status",
     )
+    .option("--cwd <path>", "Project root containing the durable run")
     .option("--json", "Machine-readable JSON output")
     .action(async (runId, effectId, resultFile, options) => {
       try {
         const runtime = await import("../lib/dynamic-workflow-runtime.js");
         const statePath = runtime.dynamicWorkflowRunStatePath(
-          process.cwd(),
+          options.cwd || process.cwd(),
           runId,
         );
         const result = runtime.readDynamicWorkflowEffectResultFile(resultFile);
@@ -1311,9 +1347,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .option("--json", "Machine-readable JSON output")
     .action(async (id, options) => {
       try {
-        const { listWorkflowVersions } = await import(
-          "../lib/cowork-workflow.js"
-        );
+        const { listWorkflowVersions } =
+          await import("../lib/cowork-workflow.js");
         const versions = listWorkflowVersions(process.cwd(), id);
         if (options.json) {
           console.log(JSON.stringify(versions, null, 2));
@@ -1558,9 +1593,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
             getVerifiedSessionExecutionLocationAuthority: descriptor.value,
           });
         } else {
-          workflowExecutionAuthorityModule = import(
-            "../harness/jsonl-session-store.js"
-          );
+          workflowExecutionAuthorityModule =
+            import("../harness/jsonl-session-store.js");
         }
         let workflowRunTaskModule;
         if (Object.hasOwn(commandDeps, "workflowRunTask")) {
@@ -1662,9 +1696,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
                   runTask: runCoworkTask,
                 });
               }
-              const runtime = await import(
-                "../lib/dynamic-workflow-runtime.js"
-              );
+              const runtime =
+                await import("../lib/dynamic-workflow-runtime.js");
               return runtime.executeDurableDynamicWorkflow(
                 {
                   statePath: runtime.dynamicWorkflowRunStatePath(
@@ -1829,9 +1862,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .description("Per-template aggregate stats across all runs")
     .option("--json", "Output as JSON")
     .action(async (options) => {
-      const { loadHistory, computeTemplateStats } = await import(
-        "../lib/cowork-learning.js"
-      );
+      const { loadHistory, computeTemplateStats } =
+        await import("../lib/cowork-learning.js");
       const stats = computeTemplateStats(loadHistory(process.cwd()));
       if (options.json) {
         console.log(JSON.stringify(stats, null, 2));
@@ -1864,9 +1896,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .option("--min-runs <n>", "Only consider templates with ≥N past runs", "1")
     .option("--json", "Output as JSON")
     .action(async (messageParts, options) => {
-      const { loadHistory, recommendTemplate } = await import(
-        "../lib/cowork-learning.js"
-      );
+      const { loadHistory, recommendTemplate } =
+        await import("../lib/cowork-learning.js");
       const message = messageParts.join(" ");
       const rec = recommendTemplate(message, loadHistory(process.cwd()), {
         minRuns: parseInt(options.minRuns, 10) || 1,
@@ -1895,9 +1926,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .option("--limit <n>", "Max examples per template", "3")
     .option("--json", "Output as JSON")
     .action(async (options) => {
-      const { loadHistory, summarizeFailures } = await import(
-        "../lib/cowork-learning.js"
-      );
+      const { loadHistory, summarizeFailures } =
+        await import("../lib/cowork-learning.js");
       const out = summarizeFailures(loadHistory(process.cwd()), {
         limit: parseInt(options.limit, 10) || 3,
       });
@@ -1924,9 +1954,8 @@ export function registerCoworkCommand(program, commandDeps = {}) {
     .description("Suggest systemPromptExtension patches from failure history")
     .option("--json", "Output as JSON")
     .action(async (options) => {
-      const { loadHistory, suggestPromptPatch } = await import(
-        "../lib/cowork-learning.js"
-      );
+      const { loadHistory, suggestPromptPatch } =
+        await import("../lib/cowork-learning.js");
       const patches = suggestPromptPatch(loadHistory(process.cwd()));
       if (options.json) {
         console.log(JSON.stringify(patches, null, 2));

package/src/commands/session-location.js

@@ -5,6 +5,7 @@ import {
   buildExecutionLocationCatalog,
   buildExecutionLocationHandoffPreview,
   computeExecutionLocationTargetFactsDigest,
+  createExecutionLocationTargetAttestation,
 } from "../lib/execution-location-contract.js";
 import { captureAmbientExecutionLocation } from "../lib/execution-location-runtime.js";
 import {
@@ -333,6 +334,24 @@ export function prepareSessionReplicaHandoff(sessionId, options, deps = {}) {
   if (targetFactsDigest !== String(options.expectedTargetFactsDigest || "")) {
     throw new Error("target facts changed before location handoff append");
   }
+  if (!/^sha256:[a-f0-9]{64}$/u.test(String(options.attestationDigest || ""))) {
+    throw new Error("source target attestation digest is invalid");
+  }
+  // observedAt is intentionally excluded from targetFactsDigest but included
+  // in attestationDigest. The source-side probe and this target-side prepare
+  // are separate process invocations, so a real target can never reproduce
+  // the source probe's timestamp. Bind the handoff event to this fresh target
+  // observation; the source rehashes its receipt and immediately verifies the
+  // canonical target projection before it is allowed to resume.
+  const targetAttestation = createExecutionLocationTargetAttestation({
+    profileDigest: options.profileDigest,
+    sourceSessionId: sessionId,
+    sourceHeadHash: options.expectedHeadHash,
+    sourceEventCount: Number(options.expectedEventCount),
+    targetEvidenceId: options.targetEvidenceId,
+    baseCommit: binding.source.git.commit,
+    binding,
+  });
   return (
     deps.installSessionReplicaWithLocationHandoff ||
     installSessionReplicaWithLocationHandoff
@@ -348,7 +367,7 @@ export function prepareSessionReplicaHandoff(sessionId, options, deps = {}) {
       profileDigest: options.profileDigest,
       targetEvidenceId: options.targetEvidenceId,
       targetFactsDigest,
-      attestationDigest: options.attestationDigest,
+      attestationDigest: targetAttestation.attestationDigest,
       binding,
     },
   );

package/src/commands/session.js

@@ -104,9 +104,8 @@ function _sessionEpoch(ts) {
  * @returns {{statusBar:string, autoMerge:{allow:boolean,reason:string,unmet:string[]}, lines:string[]}}
  */
 export async function renderPrStatus(signals = {}, opts = {}) {
-  const { strictAutoMergeDecision, describePrStatusBar } = await import(
-    "../lib/pr-automation-policy.js"
-  );
+  const { strictAutoMergeDecision, describePrStatusBar } =
+    await import("../lib/pr-automation-policy.js");
   const autoMerge = strictAutoMergeDecision({
     enabled: opts.enabled === true,
     hasOpenPr: signals.hasOpenPr,
@@ -321,6 +320,7 @@ export function registerSessionCommand(program) {
         let remote = [];
         let team = [];
         let workflow = [];
+        let dynamicWorkflow = [];
         let artifacts = [];
         let prLinks = {};
 
@@ -350,25 +350,22 @@ export function registerSessionCommand(program) {
           sourceErrors.local = error?.message || String(error);
         }
         try {
-          const { listBackgroundAgents } = await import(
-            "../lib/background-agent-supervisor.js"
-          );
+          const { listBackgroundAgents } =
+            await import("../lib/background-agent-supervisor.js");
           background = listBackgroundAgents({ all: true });
         } catch (error) {
           sourceErrors.background = error?.message || String(error);
         }
         try {
-          const { readRemoteControlStates } = await import(
-            "../lib/remote-control.js"
-          );
+          const { readRemoteControlStates } =
+            await import("../lib/remote-control.js");
           remote = readRemoteControlStates();
         } catch (error) {
           sourceErrors.remote = error?.message || String(error);
         }
         try {
-          const { listCollaborationRuns } = await import(
-            "../lib/collaboration-run-store.js"
-          );
+          const { listCollaborationRuns } =
+            await import("../lib/collaboration-run-store.js");
           team = listCollaborationRuns({ limit }).filter(
             (run) => run?.kind === "team",
           );
@@ -388,14 +385,29 @@ export function registerSessionCommand(program) {
         } catch (error) {
           sourceErrors.workflow = error?.message || String(error);
         }
+        try {
+          const { listDynamicWorkflowWorkbenchStates } =
+            await import("../lib/dynamic-workflow-runtime.js");
+          const discovered = listDynamicWorkflowWorkbenchStates(projectRoot, {
+            limit,
+          });
+          dynamicWorkflow = discovered.runs.map((item) => ({
+            ...item,
+            cwd: projectRoot,
+          }));
+          if (discovered.invalidCount > 0) {
+            sourceErrors.dynamicWorkflow = `${discovered.invalidCount} durable workflow state file(s) failed validation`;
+          }
+        } catch (error) {
+          sourceErrors.dynamicWorkflow = error?.message || String(error);
+        }
         try {
           // A file checkpoint is advertised only after the existing CLI git
           // engine proves that the exact worktree is supported. Copy-mode
           // checkpoints need explicit paths and therefore cannot truthfully be
           // offered as a one-click session action.
-          const { isCheckpointAvailable } = await import(
-            "../lib/checkpoint-store.js"
-          );
+          const { isCheckpointAvailable } =
+            await import("../lib/checkpoint-store.js");
           const capability = new Map();
           const decorate = (items, pathFor, sessionFor) =>
             items.map((item) => {
@@ -438,9 +450,8 @@ export function registerSessionCommand(program) {
           // checkpoint action unavailable with its explicit reason.
         }
         try {
-          const { ArtifactStore, publicArtifactMetadata } = await import(
-            "../lib/artifact-store.js"
-          );
+          const { ArtifactStore, publicArtifactMetadata } =
+            await import("../lib/artifact-store.js");
           artifacts = new ArtifactStore().list().map(publicArtifactMetadata);
         } catch {
           // Summaries are optional; absence never removes a session.
@@ -452,15 +463,15 @@ export function registerSessionCommand(program) {
           // Summaries are optional; absence never removes a session.
         }
 
-        const { buildSessionProjection } = await import(
-          "../lib/session-projection.js"
-        );
+        const { buildSessionProjection } =
+          await import("../lib/session-projection.js");
         const projection = buildSessionProjection({
           local,
           background,
           remote,
           team,
           workflow,
+          dynamicWorkflow,
           artifacts,
           prLinks,
           sourceErrors,
@@ -478,9 +489,8 @@ export function registerSessionCommand(program) {
           }
         }
       } catch (error) {
-        const { disconnectedSessionProjection } = await import(
-          "../lib/session-projection.js"
-        );
+        const { disconnectedSessionProjection } =
+          await import("../lib/session-projection.js");
         if (options.json) {
           jsonPayload = JSON.stringify(
             disconnectedSessionProjection(error?.message || String(error)),
@@ -530,9 +540,8 @@ export function registerSessionCommand(program) {
         } else {
           // Live path: resolve the session's linked PR and fetch via gh.
           const { getPrLinks } = await import("../lib/pr-link-ledger.js");
-          const { getLastSessionId } = await import(
-            "../harness/jsonl-session-store.js"
-          );
+          const { getLastSessionId } =
+            await import("../harness/jsonl-session-store.js");
           const sid = !id || id === "last" ? getLastSessionId() : id;
           const links = sid ? getPrLinks(sid) : [];
           if (links.length === 0) {
@@ -610,9 +619,8 @@ export function registerSessionCommand(program) {
         // (single / non-TTY / Ctrl-C). Same helper as `cc agent --resume`.
         if (!id) {
           ctx = await bootstrap({ verbose: program.opts().verbose });
-          const { pickRecentSession } = await import(
-            "../lib/session-picker.js"
-          );
+          const { pickRecentSession } =
+            await import("../lib/session-picker.js");
           const picked = await pickRecentSession(ctx);
           if (!picked.id) {
             logger.error(
@@ -642,9 +650,8 @@ export function registerSessionCommand(program) {
         if (jsonlId) {
           // Tamper gate: a broken hash chain means the transcript was edited
           // outside the store — never silently rebuild it as trusted context.
-          const { verifySession } = await import(
-            "../harness/jsonl-session-store.js"
-          );
+          const { verifySession } =
+            await import("../harness/jsonl-session-store.js");
           const trust = verifySession(jsonlId);
           if (["missing", "conflict"].includes(trust.status)) {
             logger.error(
@@ -757,9 +764,8 @@ export function registerSessionCommand(program) {
           );
         }
         if (sid) {
-          const { renderAgentSessionMarkdown } = await import(
-            "../lib/agent-session-export.js"
-          );
+          const { renderAgentSessionMarkdown } =
+            await import("../lib/agent-session-export.js");
           markdown = renderAgentSessionMarkdown(sid, store.readEvents(sid), {
             exportedAt: new Date().toISOString(),
           });
@@ -1012,9 +1018,8 @@ export function registerSessionCommand(program) {
         }
         let result;
         if (jsonlId) {
-          const { renameSession } = await import(
-            "../harness/jsonl-session-store.js"
-          );
+          const { renameSession } =
+            await import("../harness/jsonl-session-store.js");
           result = renameSession(jsonlId, normalized);
         } else {
           ctx = await bootstrap({ verbose: program.opts().verbose });
@@ -1053,9 +1058,8 @@ export function registerSessionCommand(program) {
     .option("--json", "Output as JSON")
     .action(async (options) => {
       try {
-        const { pruneJsonlSessions } = await import(
-          "../harness/jsonl-session-store.js"
-        );
+        const { pruneJsonlSessions } =
+          await import("../harness/jsonl-session-store.js");
         const result = pruneJsonlSessions({
           olderThanDays: Number(options.olderThan),
           keep: options.keep != null ? Number(options.keep) : undefined,
@@ -1433,9 +1437,8 @@ export function registerSessionCommand(program) {
     .option("--json", "Output as JSON")
     .action(async (id, options) => {
       try {
-        const { getApprovalGate } = await import(
-          "../lib/session-core-singletons.js"
-        );
+        const { getApprovalGate } =
+          await import("../lib/session-core-singletons.js");
         const gate = await getApprovalGate();
         if (options.set) {
           gate.setSessionPolicy(id, options.set);
@@ -1471,9 +1474,8 @@ export function registerSessionCommand(program) {
     .option("--json", "Output as JSON")
     .action(async (options) => {
       try {
-        const { getSessionManager } = await import(
-          "../lib/session-core-singletons.js"
-        );
+        const { getSessionManager } =
+          await import("../lib/session-core-singletons.js");
         const mgr = getSessionManager();
         const live = mgr.list({
           agentId: options.agent,
@@ -1517,9 +1519,8 @@ export function registerSessionCommand(program) {
     .argument("<id>", "Session ID")
     .action(async (id) => {
       try {
-        const { getSessionManager } = await import(
-          "../lib/session-core-singletons.js"
-        );
+        const { getSessionManager } =
+          await import("../lib/session-core-singletons.js");
         const mgr = getSessionManager();
         if (!mgr.has(id)) {
           logger.error(`Session ${id} is not active in this process`);
@@ -1544,9 +1545,8 @@ export function registerSessionCommand(program) {
     .argument("<id>", "Session ID")
     .action(async (id) => {
       try {
-        const { getSessionManager } = await import(
-          "../lib/session-core-singletons.js"
-        );
+        const { getSessionManager } =
+          await import("../lib/session-core-singletons.js");
         const mgr = getSessionManager();
         const ok = await mgr.resume(id);
         if (!ok) {
@@ -1575,14 +1575,12 @@ export function registerSessionCommand(program) {
     .option("--agent-id <id>", "Agent id for scope=agent")
     .action(async (id, options) => {
       try {
-        const { getSessionManager } = await import(
-          "../lib/session-core-singletons.js"
-        );
+        const { getSessionManager } =
+          await import("../lib/session-core-singletons.js");
         if (options.consolidate) {
           try {
-            const { consolidateJsonlSession } = await import(
-              "../lib/session-consolidator.js"
-            );
+            const { consolidateJsonlSession } =
+              await import("../lib/session-consolidator.js");
             const res = await consolidateJsonlSession(id, {
               scope: options.scope,
               scopeId: options.scopeId || null,
@@ -1801,9 +1799,8 @@ export function registerSessionCommand(program) {
           );
           process.exit(1);
         }
-        const { sessionUsage, allSessionsUsage } = await import(
-          "../lib/session-usage.js"
-        );
+        const { sessionUsage, allSessionsUsage } =
+          await import("../lib/session-usage.js");
         const result = id
           ? sessionUsage(id)
           : allSessionsUsage({ limit: parseInt(options.limit, 10) || 1000 });
@@ -1876,9 +1873,8 @@ export function registerSessionCommand(program) {
     .option("--json", "Machine-readable JSON output")
     .action(async (id) => {
       try {
-        const { getVerifiedSessionObservabilityAuthority } = await import(
-          "../harness/jsonl-session-store.js"
-        );
+        const { getVerifiedSessionObservabilityAuthority } =
+          await import("../harness/jsonl-session-store.js");
         const authority = getVerifiedSessionObservabilityAuthority(id);
         console.log(
           JSON.stringify(
@@ -2316,9 +2312,8 @@ async function mirrorPruneSessions() {
  * (`session.mirror.encryption`). Requires both to be configured.
  */
 async function mirrorRotateKey() {
-  const { createMirror, createMirrorCipher, rotateMirrorKey } = await import(
-    "../harness/session-mirror.js"
-  );
+  const { createMirror, createMirrorCipher, rotateMirrorKey } =
+    await import("../harness/session-mirror.js");
   const { cfg } = await loadConfiguredMirror();
   if (!cfg || !cfg.kind || cfg.kind === "none") {
     return { target: null };