flightdesk 0.4.3 → 0.6.0

package/main.js

@@ -958,8 +958,8 @@ var require_command = __commonJS({
   "node_modules/.pnpm/commander@12.1.0/node_modules/commander/lib/command.js"(exports2) {
     var EventEmitter = require("node:events").EventEmitter;
     var childProcess = require("node:child_process");
-    var path3 = require("node:path");
-    var fs3 = require("node:fs");
+    var path4 = require("node:path");
+    var fs4 = require("node:fs");
     var process2 = require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -1891,11 +1891,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path3.resolve(baseDir, baseName);
-          if (fs3.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path3.extname(baseName))) return void 0;
+          const localBin = path4.resolve(baseDir, baseName);
+          if (fs4.existsSync(localBin)) return localBin;
+          if (sourceExt.includes(path4.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
-            (ext) => fs3.existsSync(`${localBin}${ext}`)
+            (ext) => fs4.existsSync(`${localBin}${ext}`)
           );
           if (foundExt) return `${localBin}${foundExt}`;
           return void 0;
@@ -1907,21 +1907,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs3.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs4.realpathSync(this._scriptPath);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path3.resolve(
-            path3.dirname(resolvedScriptPath),
+          executableDir = path4.resolve(
+            path4.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path3.basename(
+            const legacyName = path4.basename(
               this._scriptPath,
-              path3.extname(this._scriptPath)
+              path4.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1932,7 +1932,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path3.extname(executableFile));
+        launchWithNode = sourceExt.includes(path4.extname(executableFile));
         let proc;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -2772,7 +2772,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path3.basename(filename, path3.extname(filename));
+        this._name = path4.basename(filename, path4.extname(filename));
         return this;
       }
       /**
@@ -2786,9 +2786,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path4) {
-        if (path4 === void 0) return this._executableDir;
-        this._executableDir = path4;
+      executableDir(path5) {
+        if (path5 === void 0) return this._executableDir;
+        this._executableDir = path5;
         return this;
       }
       /**
@@ -3018,28 +3018,45 @@ var require_commander = __commonJS({
   }
 });
 
-// node_modules/.pnpm/commander@12.1.0/node_modules/commander/esm.mjs
-var import_index = __toESM(require_commander(), 1);
-var {
-  program,
-  createCommand,
-  createArgument,
-  createOption,
-  CommanderError,
-  InvalidArgumentError,
-  InvalidOptionArgumentError,
-  // deprecated old name
-  Command,
-  Argument,
-  Option,
-  Help
-} = import_index.default;
-
 // apps/cli/src/lib/config.ts
 var fs = __toESM(require("fs"));
 var path = __toESM(require("path"));
 var os = __toESM(require("os"));
 var CONFIG_FILE = path.join(os.homedir(), ".flightdeskrc");
+var FOLDER_RC = ".flightdeskrc";
+function readFolderCredential() {
+  const envKey = process.env["FLIGHTDESK_API_KEY"];
+  if (envKey) {
+    return {
+      apiKey: envKey,
+      apiUrl: process.env["FLIGHTDESK_API_URL"],
+      organizationId: process.env["FLIGHTDESK_ORGANIZATION_ID"],
+      source: "env"
+    };
+  }
+  let dir = process.cwd();
+  const home = os.homedir();
+  for (; ; ) {
+    const candidate = path.join(dir, FOLDER_RC);
+    if (candidate !== CONFIG_FILE && fs.existsSync(candidate)) {
+      try {
+        const parsed = JSON.parse(fs.readFileSync(candidate, "utf-8"));
+        if (typeof parsed.apiKey === "string" && parsed.apiKey && !("organizations" in parsed))
+          return { ...parsed, apiKey: parsed.apiKey, source: candidate };
+      } catch {
+      }
+    }
+    const parent = path.dirname(dir);
+    if (parent === dir || dir === home) break;
+    dir = parent;
+  }
+  return null;
+}
+var folderCredential;
+function folder() {
+  if (folderCredential === void 0) folderCredential = readFolderCredential();
+  return folderCredential;
+}
 var DEFAULT_API_URL = "https://api.flightdesk.dev";
 var DEV_API_URL = "http://localhost:3000";
 var apiUrlOverride = null;
@@ -3052,9 +3069,20 @@ function setApiUrl(url) {
   apiUrlOverride = url;
 }
 function getApiUrl() {
-  return apiUrlOverride ?? DEFAULT_API_URL;
+  return apiUrlOverride ?? process.env["FLIGHTDESK_API_URL"] ?? folder()?.apiUrl ?? DEFAULT_API_URL;
 }
+var TOKEN_SCOPED_ORG = "token-scoped";
 function loadConfig() {
+  const scoped = folder();
+  if (scoped) {
+    const id = scoped.organizationId ?? TOKEN_SCOPED_ORG;
+    return {
+      apiKey: scoped.apiKey,
+      activeOrganization: id,
+      organizations: [{ id, name: `agent (${scoped.source})` }],
+      repoMapping: {}
+    };
+  }
   try {
     if (fs.existsSync(CONFIG_FILE)) {
       const content = fs.readFileSync(CONFIG_FILE, "utf-8");
@@ -3074,6 +3102,8 @@ function loadConfig() {
   };
 }
 function saveConfig(config) {
+  if (folder())
+    throw new Error("Refusing to write the home config while a folder credential is active");
   fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2));
 }
 function getActiveOrganization() {
@@ -3088,7 +3118,9 @@ function getActiveOrganization() {
 }
 function setActiveOrganization(orgId) {
   const config = loadConfig();
-  const org2 = config.organizations.find((o) => o.id === orgId || o.name.toLowerCase() === orgId.toLowerCase());
+  const org2 = config.organizations.find(
+    (o) => o.id === orgId || o.name.toLowerCase() === orgId.toLowerCase()
+  );
   if (!org2) {
     throw new Error(`Organization not found: ${orgId}`);
   }
@@ -3137,10 +3169,10 @@ function requireActiveOrg() {
   return { config, org: org2 };
 }
 
-// apps/cli/src/commands/init.ts
-var readline = __toESM(require("readline"));
-
 // apps/cli/src/lib/api.ts
+var fs2 = __toESM(require("node:fs"));
+var path2 = __toESM(require("node:path"));
+var import_node_crypto = require("node:crypto");
 var FlightDeskAPI = class _FlightDeskAPI {
   constructor(config, org2) {
     if (!config.apiKey) {
@@ -3156,6 +3188,32 @@ var FlightDeskAPI = class _FlightDeskAPI {
   static fromConfig(config, org2) {
     return new _FlightDeskAPI(config, org2);
   }
+  /**
+   * F23: transport failures (network, 5xx) are retried with backoff. GraphQL-level errors are
+   * not — they are the API's answer. When `outbox` is set and every attempt fails, the call is
+   * written to `<FLIGHTDESK_OUTBOX_DIR ?? cwd>/.flightdesk-outbox/<id>.json` as
+   * `{ query, variables, attemptedAt }` for the runtime to flush on its next tick, and the
+   * function resolves to `{ queued: true }` so an agent turn can still end.
+   */
+  async graphqlWithRetry(query, variables, options = {}) {
+    const attempts = options.attempts ?? 3;
+    let lastError;
+    for (let attempt = 1; attempt <= attempts; attempt++) {
+      try {
+        return await this.graphql(query, variables);
+      } catch (error) {
+        lastError = error;
+        if (!isTransportError(error)) throw error;
+        if (attempt < attempts) await sleep(1e3 * 3 ** (attempt - 1));
+      }
+    }
+    if (!options.outbox) throw lastError;
+    const file = writeOutbox(query, variables);
+    console.error(
+      `\u26A0\uFE0F  FlightDesk unreachable after ${attempts} attempts; queued to ${file} for the runtime to flush.`
+    );
+    return { queued: true, file };
+  }
   async graphql(query, variables) {
     const verbose = process.env.FLIGHTDESK_DEBUG === "1";
     if (verbose) {
@@ -3167,7 +3225,7 @@ var FlightDeskAPI = class _FlightDeskAPI {
       method: "POST",
       headers: {
         "Content-Type": "application/json",
-        "Authorization": `Bearer ${this.apiKey}`
+        Authorization: `Bearer ${this.apiKey}`
       },
       body: JSON.stringify({ query, variables })
     });
@@ -3178,7 +3236,11 @@ var FlightDeskAPI = class _FlightDeskAPI {
         console.log("Status:", response.status, response.statusText);
         console.log("Body:", body);
       }
-      throw new Error(`API request failed: ${response.status} ${response.statusText}${verbose ? "" : " (set FLIGHTDESK_DEBUG=1 for details)"}`);
+      const error = new Error(
+        `API request failed: ${response.status} ${response.statusText}${verbose ? "" : " (set FLIGHTDESK_DEBUG=1 for details)"}`
+      );
+      error.status = response.status;
+      throw error;
     }
     const result = await response.json();
     if (verbose) {
@@ -3416,6 +3478,12 @@ var FlightDeskAPI = class _FlightDeskAPI {
             url
             primary
           }
+          freshness
+          isStale
+          builtCommitSha
+          builtCommitAt
+          headCommitSha
+          headCommitAt
         }
       }
     `;
@@ -3430,7 +3498,10 @@ var FlightDeskAPI = class _FlightDeskAPI {
         }
       }
     `;
-    const result = await this.graphql(query, { taskId, lines });
+    const result = await this.graphql(query, {
+      taskId,
+      lines
+    });
     return result.userInstanceLogs;
   }
   async restartInstance(taskId) {
@@ -3466,7 +3537,7 @@ async function fetchUserInfo(apiKey, apiUrl = "https://api.flightdesk.dev") {
     method: "POST",
     headers: {
       "Content-Type": "application/json",
-      "Authorization": `Bearer ${apiKey}`
+      Authorization: `Bearer ${apiKey}`
     },
     body: JSON.stringify({
       query: `{
@@ -3498,8 +3569,197 @@ async function fetchUserInfo(apiKey, apiUrl = "https://api.flightdesk.dev") {
   }
   return result.data.me;
 }
+function isTransportError(error) {
+  const status = error?.status;
+  if (typeof status === "number") return status >= 500 || status === 429;
+  return !(error instanceof Error && error.message.startsWith("GraphQL error"));
+}
+function sleep(ms) {
+  return new Promise((resolve) => setTimeout(resolve, ms));
+}
+var lastOutboxStamp = 0;
+function outboxId() {
+  lastOutboxStamp = Math.max(Date.now(), lastOutboxStamp + 1);
+  const stamp = lastOutboxStamp.toString(36).padStart(10, "0");
+  return `${stamp}-${(0, import_node_crypto.randomBytes)(6).toString("hex")}`;
+}
+function writeOutbox(query, variables) {
+  const dir = path2.join(process.env["FLIGHTDESK_OUTBOX_DIR"] ?? process.cwd(), ".flightdesk-outbox");
+  fs2.mkdirSync(dir, { recursive: true });
+  const file = path2.join(dir, `${outboxId()}.json`);
+  fs2.writeFileSync(
+    file,
+    JSON.stringify({ query, variables, attemptedAt: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)
+  );
+  return file;
+}
+
+// apps/cli/src/commands/questions.ts
+async function execute(query, variables) {
+  const { config, org: org2 } = requireActiveOrg();
+  const api = FlightDeskAPI.fromConfig(config, org2);
+  const outbox = query.trimStart().startsWith("mutation");
+  console.log(JSON.stringify(await api.graphqlWithRetry(query, variables, { outbox }), null, 2));
+}
+function registerQuestionCommands(program3) {
+  const questions = program3.command("questions").description("Ask roles, poll questions, and consume answers");
+  questions.command("ask <taskId>").option("--to-role <role>", "requester, product_owner, tech_owner, client_contact, triager").option("--to-user <id>", "Address a specific human member directly").requiredOption("--key <key>", "Stable retry key").requiredOption("--body <text>", "Question").requiredOption("--context <text>", "Short answer context").option("--default <text>", "Proposed default; required for agents").option("--options <values...>", "Suggested answer choices").option("--due-at <iso>", "Optional due timestamp").option("--nonblocking", "Allow work to continue").action(
+    (taskId, options) => execute("mutation($input:JSON!){userAskQuestion(input:$input)}", {
+      input: {
+        taskId,
+        toRole: options.toRole,
+        toUserId: options.toUser,
+        requestKey: options.key,
+        body: options.body,
+        context: options.context,
+        proposedDefault: options.default,
+        blocking: !options.nonblocking,
+        options: options.options,
+        dueAt: options.dueAt
+      }
+    })
+  );
+  questions.command("list").option("--task <id>", "Task id").option("--assignee <id>", "Assignee user id").option("--status <status>", "OPEN, ANSWERED, DEFERRED, WITHDRAWN").action(
+    (options) => execute("query($input:JSON!){userQuestions(input:$input)}", {
+      input: { taskId: options.task, assignee: options.assignee, status: options.status }
+    })
+  );
+  questions.command("answers <taskId>").description("Consume answers as the assigned agent; freezes answered and deferred records").action(
+    (taskId) => execute("mutation($taskId:String!){userConsumeAnswers(taskId:$taskId)}", { taskId })
+  );
+  questions.command("withdraw <id>").action((id) => execute("mutation($id:String!){userWithdrawQuestion(id:$id)}", { id }));
+}
+
+// apps/cli/src/commands/plan.ts
+var import_node_fs = require("node:fs");
+async function execute2(query, variables, attempts = 3) {
+  const { config, org: org2 } = requireActiveOrg();
+  const api = FlightDeskAPI.fromConfig(config, org2);
+  console.log(
+    JSON.stringify(
+      await api.graphqlWithRetry(query, variables, { outbox: false, attempts }),
+      null,
+      2
+    )
+  );
+}
+function registerPlanCommands(program3) {
+  const plan = program3.command("plan").description("Task plans held in FlightDesk");
+  plan.command("submit <taskId>").description("Submit a plan revision from a markdown file (or --body)").option("-f, --file <path>", "Markdown file holding the plan").option("--body <markdown>", "Plan body inline (prefer --file)").option("--summary <text>", "One-paragraph summary").action(async (taskId, options) => {
+    const body = options.file ? (0, import_node_fs.readFileSync)(options.file, "utf8") : options.body;
+    if (!body?.trim()) {
+      console.error("Provide --file <path> or --body <markdown>");
+      process.exit(1);
+    }
+    await execute2(
+      "mutation($input:JSON!){userSubmitPlan(input:$input)}",
+      { input: { taskId, body, summary: options.summary } },
+      1
+    );
+  });
+  plan.command("show <taskId>").description("Print the plan revisions and approval state").action(
+    (taskId) => execute2("query($taskId:String!){userTaskPlan(taskId:$taskId)}", { taskId })
+  );
+  plan.command("approve <taskId>").description("Approve a plan revision (latest by default); humans only").option("--revision <n>", "Revision number").action(
+    (taskId, options) => execute2("mutation($input:JSON!){userApprovePlan(input:$input)}", {
+      input: {
+        taskId,
+        revision: options.revision ? Number.parseInt(options.revision, 10) : void 0
+      }
+    })
+  );
+}
+
+// apps/cli/src/commands/dispatch.ts
+var os2 = __toESM(require("node:os"));
+async function execute3(query, variables) {
+  const { config, org: org2 } = requireActiveOrg();
+  const api = FlightDeskAPI.fromConfig(config, org2);
+  const mutation = query.trimStart().startsWith("mutation");
+  const idempotent = mutation && !query.includes("userAddTaskComment");
+  const options = idempotent ? { outbox: true } : { outbox: false, attempts: mutation ? 1 : 3 };
+  console.log(JSON.stringify(await api.graphqlWithRetry(query, variables, options), null, 2));
+}
+function registerDispatchCommands(program3) {
+  const dispatch = program3.command("dispatch").description("Qalatra dispatch polling and reporting");
+  dispatch.command("list").option("--since <iso>", "Only requests updated after this time").action(
+    (options) => execute3("query($since: String) { userDispatchRequests(since: $since) }", {
+      since: options.since
+    })
+  );
+  dispatch.command("poll").description("Envelope form: { requests, serverTime, pollAfterSeconds }").option("--since <iso>", "Only requests updated after this time").action(
+    (options) => execute3("query($since: String) { userDispatchPoll(since: $since) }", {
+      since: options.since
+    })
+  );
+  dispatch.command("update <id>").requiredOption("--status <status>", "ACKNOWLEDGED, RUNNING, DONE, or FAILED").option("--job <id>", "Runtime job id").option("--result-tail <text>", "Last \u22648 KB of the job output (DONE/FAILED)").option("--result-length <n>", "Full output length in characters").option("--diagnostics-kind <kind>", "error|timed_out|orphaned|launch_failed|dependency_down").option("--diagnostics-text <text>", "Sanitised diagnostics (\u22644 KB)").option("--resumable", "A session id was captured; the turn can be resumed").action(
+    (id, options) => execute3("mutation($input: JSON!) { userUpdateDispatch(input: $input) }", {
+      input: {
+        id,
+        status: options.status,
+        agentJobId: options.job,
+        resultTail: options.resultTail,
+        resultLength: options.resultLength ? Number(options.resultLength) : void 0,
+        diagnostics: options.diagnosticsKind ? { kind: options.diagnosticsKind, text: options.diagnosticsText ?? "" } : void 0,
+        resumable: options.resumable
+      }
+    })
+  );
+  dispatch.command("request <taskId>").requiredOption("--agent <id>", "Agent user id").option("--kind <kind>", "PLAN, EXECUTE, ANSWER, CUSTOM", "EXECUTE").option("--prompt <text>", "Request context").action(
+    (taskId, options) => execute3("mutation($input: JSON!) { userRequestDispatch(input: $input) }", {
+      input: { taskId, agentUserId: options.agent, kind: options.kind, prompt: options.prompt }
+    })
+  );
+  program3.command("comment <taskId>").requiredOption("--body <text>", "Internal comment").option("--ask-agent", "Ask the assigned agent; requires human owner/admin").action(
+    (taskId, options) => execute3("mutation($input: JSON!) { userAddTaskComment(input: $input) }", {
+      input: { taskId, body: options.body, askAgent: options.askAgent ?? false }
+    })
+  );
+  program3.command("agent-bind").requiredOption("--path <path>", "Agent folder on the runtime box").option("--node <url>", "Runtime node URL (unused under pull-only; recorded for reference)").option("--box <id>", "Box identifier (defaults to the runtime hostname)").action((options) => {
+    const { org: org2 } = requireActiveOrg();
+    return execute3("mutation($input: JSON!) { userBindAgent(input: $input) }", {
+      input: {
+        // A folder credential without organizationId relies on the token's organization.
+        organizationId: org2.id === TOKEN_SCOPED_ORG ? void 0 : org2.id,
+        agentPath: options.path,
+        agentNodeUrl: options.node,
+        boxId: options.box ?? os2.hostname()
+      }
+    });
+  });
+  const turn = program3.command("turn").description("Report the outcome of an agent turn");
+  turn.command("end").requiredOption("--dispatch <id>", "Dispatch id ($FLIGHTDESK_DISPATCH_ID)").requiredOption("--outcome <outcome>", "done | waiting | failed | blocked").option("--waiting-on <what>", "session | ci | review | qa | merge | deploy | dependency").option("--ref <url>", "PR URL or other reference").option("--summary <text>", "One-paragraph summary").action(
+    (options) => execute3("mutation($input: JSON!) { userEndTurn(input: $input) }", {
+      input: {
+        dispatchId: options.dispatch,
+        outcome: options.outcome,
+        waitingOn: options.waitingOn,
+        ref: options.ref,
+        summary: options.summary
+      }
+    })
+  );
+}
+
+// node_modules/.pnpm/commander@12.1.0/node_modules/commander/esm.mjs
+var import_index = __toESM(require_commander(), 1);
+var {
+  program,
+  createCommand,
+  createArgument,
+  createOption,
+  CommanderError,
+  InvalidArgumentError,
+  InvalidOptionArgumentError,
+  // deprecated old name
+  Command,
+  Argument,
+  Option,
+  Help
+} = import_index.default;
 
 // apps/cli/src/commands/init.ts
+var readline = __toESM(require("readline"));
 function question(rl, prompt) {
   return new Promise((resolve) => {
     rl.question(prompt, (answer) => {
@@ -3563,8 +3823,11 @@ async function initCommand() {
         organizations.forEach((org2, i) => {
           console.log(`  ${i + 1}. ${org2.name}`);
         });
-        const choice = await question(rl, `
-Select active organization (1-${organizations.length}): `);
+        const choice = await question(
+          rl,
+          `
+Select active organization (1-${organizations.length}): `
+        );
         const choiceIndex = Number.parseInt(choice, 10) - 1;
         if (choiceIndex < 0 || choiceIndex >= organizations.length) {
           console.error("Invalid selection, using first organization");
@@ -3575,7 +3838,6 @@ Select active organization (1-${organizations.length}): `);
       }
       const config = loadConfig();
       config.apiKey = apiKey;
-      config.apiUrl = apiUrl;
       config.organizations = organizations;
       config.activeOrganization = activeOrganization;
       saveConfig(config);
@@ -3640,7 +3902,7 @@ function parseGitRemoteUrl(remoteUrl) {
 
 // apps/cli/src/commands/register.ts
 var import_node_child_process2 = require("node:child_process");
-var import_node_fs = require("node:fs");
+var import_node_fs2 = require("node:fs");
 var import_node_os = require("node:os");
 var import_node_path = require("node:path");
 async function registerCommand(taskId, options) {
@@ -3676,19 +3938,29 @@ async function registerCommand(taskId, options) {
       const task2 = await api.createTask({
         projectId,
         title: options.title,
-        description: options.description,
-        subprojectId: options.subproject
+        // Launch-first orchestrators do not know the FlightDesk UUID when the
+        // cloud prompt is sent. Persisting that same prompt on the task lets
+        // the API derive its durable Linear/Notion source identity instead.
+        description: options.description ?? options.prompt,
+        subprojectId: options.subproject,
+        sourceSystem: options.sourceSystem,
+        sourceRef: options.sourceRef,
+        sourceUrl: options.sourceUrl
       });
       actualTaskId = task2.id;
       console.log(`\u2705 Created task: ${task2.id}`);
     }
     if (viewUrl || teleportId) {
       console.log("Registering session with task...");
-      await api.updateTask(actualTaskId, {
-        sessionViewUrl: viewUrl,
-        sessionTeleportId: teleportId,
-        status: "DISPATCHED"
-      });
+      if (viewUrl && teleportId) {
+        await api.registerSession(actualTaskId, { viewUrl, teleportId });
+      } else {
+        await api.updateTask(actualTaskId, {
+          sessionViewUrl: viewUrl,
+          sessionTeleportId: teleportId,
+          status: "DISPATCHED"
+        });
+      }
       console.log("\u2705 Session registered");
     }
     console.log(`
@@ -3705,7 +3977,7 @@ Task ID: ${actualTaskId}`);
   }
 }
 function spawnClaudeRemote(prompt) {
-  const tmpDir = (0, import_node_fs.mkdtempSync)((0, import_node_path.join)((0, import_node_os.tmpdir)(), "fd-claude-"));
+  const tmpDir = (0, import_node_fs2.mkdtempSync)((0, import_node_path.join)((0, import_node_os.tmpdir)(), "fd-claude-"));
   const tmpFile = (0, import_node_path.join)(tmpDir, "output.txt");
   const isMac = process.platform === "darwin";
   const escaped = prompt.replaceAll("'", `'"'"'`);
@@ -3719,14 +3991,18 @@ function spawnClaudeRemote(prompt) {
       try {
         let raw = "";
         try {
-          raw = (0, import_node_fs.readFileSync)(tmpFile, "utf8");
+          raw = (0, import_node_fs2.readFileSync)(tmpFile, "utf8");
         } catch {
         }
         try {
-          (0, import_node_fs.rmSync)(tmpDir, { recursive: true });
+          (0, import_node_fs2.rmSync)(tmpDir, { recursive: true });
         } catch {
         }
-        const output = raw.replace(/\x1b\[[0-9;]*[mGKHFJABCDr]/g, "").replace(/\r/g, "");
+        const ansiEscape = new RegExp(
+          String.raw`${String.fromCodePoint(27)}\[[0-9;]*[mGKHFJABCDr]`,
+          "g"
+        );
+        const output = raw.replace(ansiEscape, "").replace(/\r/g, "");
         if (code !== 0) {
           reject(new Error(`claude exited with code ${code}
 Output: ${output.slice(0, 500)}`));
@@ -3794,14 +4070,20 @@ async function autoDetectProject(api, activeOrg) {
   if (!mappedOrg) {
     console.error(`\u274C Repository "${repoInfo.remote}" is not mapped to any organization.`);
     console.error("   Run: flightdesk sync");
-    console.error("   Or provide a project ID: flightdesk register --project <project-id> [task-id]");
+    console.error(
+      "   Or provide a project ID: flightdesk register --project <project-id> [task-id]"
+    );
     process.exit(1);
   }
   if (mappedOrg.id !== activeOrg.id) {
-    console.error(`\u274C Repository "${repoInfo.remote}" is mapped to organization "${mappedOrg.name}",`);
+    console.error(
+      `\u274C Repository "${repoInfo.remote}" is mapped to organization "${mappedOrg.name}",`
+    );
     console.error(`   but your active organization is "${activeOrg.name}".`);
     console.error("   Switch with: flightdesk org switch " + mappedOrg.name);
-    console.error("   Or provide a project ID: flightdesk register --project <project-id> [task-id]");
+    console.error(
+      "   Or provide a project ID: flightdesk register --project <project-id> [task-id]"
+    );
     process.exit(1);
   }
   const projects = await api.listProjects();
@@ -3949,7 +4231,10 @@ async function handleCreate(api, options) {
     projectId: options.project,
     title: options.title,
     description: options.description,
-    subprojectId: options.subproject
+    subprojectId: options.subproject,
+    sourceSystem: options.sourceSystem,
+    sourceRef: options.sourceRef,
+    sourceUrl: options.sourceUrl
   });
   console.log(`
 \u2705 Task created`);
@@ -3989,7 +4274,9 @@ async function handleStatus(api, options) {
   console.log(`ID:       ${task2.id}`);
   console.log(`Status:   ${getStatusEmoji2(task2.status)} ${task2.status}`);
   if (task2.project) {
-    console.log(`Project:  ${task2.project.name}${task2.project.githubRepo ? ` (${task2.project.githubRepo})` : ""}`);
+    console.log(
+      `Project:  ${task2.project.name}${task2.project.githubRepo ? ` (${task2.project.githubRepo})` : ""}`
+    );
   }
   if (task2.description) {
     console.log(`
@@ -4023,18 +4310,13 @@ async function handleUpdate(api, options) {
     input.prUrl = options.prUrl;
     const prNumberMatch = options.prUrl.match(/\/pull\/(\d+)/);
     if (prNumberMatch) {
-      input.prNumber = parseInt(prNumberMatch[1], 10);
+      input.prNumber = Number.parseInt(prNumberMatch[1], 10);
     }
   }
   if (options.prNumber) {
-    input.prNumber = parseInt(options.prNumber, 10);
+    input.prNumber = Number.parseInt(options.prNumber, 10);
   }
-  if (options.session) {
-    const sessionId = parseSessionId(options.session);
-    input.sessionViewUrl = `https://claude.ai/code/${sessionId}`;
-    input.sessionTeleportId = sessionId;
-  }
-  if (Object.keys(input).length === 0) {
+  if (Object.keys(input).length === 0 && !options.session) {
     console.error("No updates specified. Use --status, --branch, --pr-url, or --session");
     process.exit(1);
   }
@@ -4046,7 +4328,18 @@ async function handleUpdate(api, options) {
     }
   }
   console.log(`Updating task ${options.taskId}...`);
-  const task2 = await api.updateTask(options.taskId, input);
+  let task2;
+  if (options.session) {
+    const sessionId = parseSessionId(options.session);
+    task2 = await api.registerSession(options.taskId, {
+      viewUrl: `https://claude.ai/code/${sessionId}`,
+      teleportId: sessionId
+    });
+  }
+  if (Object.keys(input).length > 0) {
+    task2 = await api.updateTask(options.taskId, input);
+  }
+  if (!task2) return;
   console.log(`
 \u2705 Task updated`);
   console.log(`   Status: ${task2.status}`);
@@ -4407,11 +4700,39 @@ async function listProjects(api) {
 ${projects.length} project(s)`);
 }
 
+// apps/cli/src/lib/preview-freshness.ts
+var SHORT_SHA_LENGTH = 7;
+var UNKNOWN_SHA_LABEL = "unknown";
+function short(value) {
+  if (typeof value !== "string") return UNKNOWN_SHA_LABEL;
+  const trimmed = value.trim();
+  return trimmed ? trimmed.slice(0, SHORT_SHA_LENGTH) : UNKNOWN_SHA_LABEL;
+}
+var UNKNOWN_LINES = [
+  "   \u2754 Freshness unknown \u2014 this preview cannot be confirmed to contain the latest commits"
+];
+function formatFreshnessLines(view) {
+  switch (view.freshness) {
+    case "FRESH":
+      return [`   \u2705 Up to date with ${short(view.builtCommitSha)}`];
+    case "STALE":
+      return [
+        "   \u26A0\uFE0F  STALE \u2014 this preview does NOT contain the latest commits",
+        `      Built from: ${short(view.builtCommitSha)}`,
+        `      Branch head: ${short(view.headCommitSha)}`
+      ];
+    // UNKNOWN and anything unrecognised. A future server-side enum value
+    // degrades to "unknown" rather than to silence.
+    default:
+      return UNKNOWN_LINES;
+  }
+}
+
 // apps/cli/src/commands/preview.ts
 var import_node_child_process3 = require("node:child_process");
-var path2 = __toESM(require("node:path"));
-var os2 = __toESM(require("node:os"));
-var fs2 = __toESM(require("node:fs"));
+var path3 = __toESM(require("node:path"));
+var os3 = __toESM(require("node:os"));
+var fs3 = __toESM(require("node:fs"));
 function isValidContainerId(id) {
   return /^[a-fA-F0-9]+$/.test(id) && id.length >= 12 && id.length <= 64;
 }
@@ -4494,6 +4815,9 @@ async function handleStatus2(api, options) {
   } else {
     console.log(`   Preview URL: ${instance.previewUrl}`);
   }
+  for (const line of formatFreshnessLines(instance)) {
+    console.log(line);
+  }
   console.log(`   SSH: ${instance.sshConnectionString}`);
   console.log(`   Container: ${instance.containerId.substring(0, 12)}`);
   if (instance.lastActivityAt) {
@@ -4577,10 +4901,10 @@ async function handleMount(api, options) {
     process.exit(1);
   }
   const rawTaskIdPrefix = options.taskId.substring(0, 8);
-  const safeTaskId = path2.basename(rawTaskIdPrefix).replaceAll(/[^a-zA-Z0-9_-]/g, "") || "task";
-  const mountDir = options.directory || path2.join(os2.homedir(), "flightdesk-mounts", safeTaskId);
-  if (!fs2.existsSync(mountDir)) {
-    fs2.mkdirSync(mountDir, { recursive: true });
+  const safeTaskId = path3.basename(rawTaskIdPrefix).replaceAll(/[^a-zA-Z0-9_-]/g, "") || "task";
+  const mountDir = options.directory || path3.join(os3.homedir(), "flightdesk-mounts", safeTaskId);
+  if (!fs3.existsSync(mountDir)) {
+    fs3.mkdirSync(mountDir, { recursive: true });
   }
   try {
     const mounted = (0, import_node_child_process3.execSync)("mount", { encoding: "utf8" });
@@ -4633,9 +4957,9 @@ async function handleMount(api, options) {
 }
 async function handleUnmount(_api, options) {
   const rawTaskIdPrefix = options.taskId.substring(0, 8);
-  const safeTaskId = path2.basename(rawTaskIdPrefix).replaceAll(/[^a-zA-Z0-9_-]/g, "") || "task";
-  const mountDir = path2.join(os2.homedir(), "flightdesk-mounts", safeTaskId);
-  if (!fs2.existsSync(mountDir)) {
+  const safeTaskId = path3.basename(rawTaskIdPrefix).replaceAll(/[^a-zA-Z0-9_-]/g, "") || "task";
+  const mountDir = path3.join(os3.homedir(), "flightdesk-mounts", safeTaskId);
+  if (!fs3.existsSync(mountDir)) {
     console.log("Mount directory does not exist");
     return;
   }
@@ -4652,7 +4976,7 @@ async function handleUnmount(_api, options) {
     }
     console.log("\u2705 Unmounted successfully");
     try {
-      fs2.rmSync(mountDir, { recursive: true, force: true });
+      fs3.rmSync(mountDir, { recursive: true, force: true });
     } catch {
     }
   } catch (error) {
@@ -4685,7 +5009,10 @@ async function handleTeardown(api, options) {
 
 // apps/cli/src/main.ts
 var program2 = new Command();
-program2.name("flightdesk").description("FlightDesk CLI - AI task management for Claude Code sessions").version("0.4.3").option("--dev", "Use local development API (localhost:3000)").option("--api <url>", "Use custom API URL");
+registerDispatchCommands(program2);
+registerQuestionCommands(program2);
+registerPlanCommands(program2);
+program2.name("flightdesk").description("FlightDesk CLI - AI task management for Claude Code sessions").version("0.6.0").option("--dev", "Use local development API (localhost:3000)").option("--api <url>", "Use custom API URL");
 program2.hook("preAction", () => {
   const opts = program2.opts();
   if (opts.api) {
@@ -4698,11 +5025,13 @@ program2.hook("preAction", () => {
   }
 });
 program2.command("init").description("Configure FlightDesk CLI with your API credentials").action(initCommand);
-program2.command("register [task-id]").description("Register a Claude Code session with a FlightDesk task (auto-detects project from git repo)").option("-p, --project <id>", "Project ID (auto-detected from git repo if not provided)").option("--subproject <id>", "Subproject ID (required if project has subprojects configured)").option("--view-url <url>", "Claude Code session view URL").option("--teleport-id <id>", "Claude Code teleport ID").option("--title <title>", "Task title (creates new task if task-id not provided)").option("--description <description>", "Task description").option("--prompt <prompt>", "Prompt to pass to claude --remote (avoids pipe detection issues)").action(registerCommand);
+program2.command("register [task-id]").description(
+  "Register a Claude Code session with a FlightDesk task (auto-detects project from git repo)"
+).option("-p, --project <id>", "Project ID (auto-detected from git repo if not provided)").option("--subproject <id>", "Subproject ID (required if project has subprojects configured)").option("--view-url <url>", "Claude Code session view URL").option("--teleport-id <id>", "Claude Code teleport ID").option("--title <title>", "Task title (creates new task if task-id not provided)").option("--description <description>", "Task description").option("--prompt <prompt>", "Prompt to pass to claude --remote (avoids pipe detection issues)").option("--source-system <system>", "External source system (for example notion or linear)").option("--source-ref <ref>", "External source reference or page ID").option("--source-url <url>", "External source URL used for deterministic branch binding").action(registerCommand);
 var project = program2.command("project").description("Project management commands");
 project.command("list").description("List projects in the active organization").action(() => projectCommand("list", {}));
 var task = program2.command("task").description("Task management commands");
-task.command("create").description("Create a new task").requiredOption("-p, --project <id>", "Project ID").requiredOption("-t, --title <title>", "Task title").option("-d, --description <description>", "Task description").option("--subproject <id>", "Subproject ID (required if project has subprojects configured)").action((options) => taskCommand("create", options));
+task.command("create").description("Create a new task").requiredOption("-p, --project <id>", "Project ID").requiredOption("-t, --title <title>", "Task title").option("-d, --description <description>", "Task description").option("--subproject <id>", "Subproject ID (required if project has subprojects configured)").option("--source-system <system>", "External source system (for example notion or linear)").option("--source-ref <ref>", "External source reference or page ID").option("--source-url <url>", "External source URL used for deterministic branch binding").action((options) => taskCommand("create", options));
 task.command("list").description("List tasks").option("-p, --project <id>", "Filter by project ID").option("--status <status>", "Filter by status").action((options) => taskCommand("list", options));
 task.command("status <task-id>").description("Get task status").action((taskId) => taskCommand("status", { taskId }));
 task.command("update <task-id>").description("Update task").option("-s, --status <status>", "New status").option("--branch <branch>", "Branch name").option("--pr-url <url>", "Pull request URL").option("--pr-number <number>", "Pull request number (use if --pr-url is not enough)").option("--session <session>", "Claude Code session (URL or session ID)").action((taskId, options) => taskCommand("update", { taskId, ...options }));