syntaur 0.13.0 → 0.14.0

package/dist/index.js

@@ -9672,6 +9672,65 @@ function createServersRouter(serversDir2, projectsDir2, assignmentsDir2) {
 import { Router as Router3 } from "express";
 import { resolve as resolve16 } from "path";
 init_fs();
+
+// src/utils/transcript.ts
+import { open } from "fs/promises";
+var MAX_LINES_SCANNED = 50;
+async function derivePathFromTranscript(transcriptPath) {
+  if (!transcriptPath) return null;
+  let handle;
+  try {
+    handle = await open(transcriptPath, "r");
+  } catch {
+    return null;
+  }
+  try {
+    const stream = handle.createReadStream({ encoding: "utf-8" });
+    let buffer = "";
+    let scanned = 0;
+    for await (const chunk of stream) {
+      buffer += chunk;
+      let nl = buffer.indexOf("\n");
+      while (nl !== -1) {
+        const line = buffer.slice(0, nl);
+        buffer = buffer.slice(nl + 1);
+        const cwd = extractCwd(line);
+        if (cwd) {
+          stream.destroy();
+          return cwd;
+        }
+        scanned++;
+        if (scanned >= MAX_LINES_SCANNED) {
+          stream.destroy();
+          return null;
+        }
+        nl = buffer.indexOf("\n");
+      }
+    }
+    if (buffer.length > 0) {
+      const cwd = extractCwd(buffer);
+      if (cwd) return cwd;
+    }
+    return null;
+  } finally {
+    await handle.close().catch(() => {
+    });
+  }
+}
+function extractCwd(line) {
+  const trimmed = line.trim();
+  if (trimmed.length === 0 || trimmed[0] !== "{") return null;
+  try {
+    const parsed = JSON.parse(trimmed);
+    if (typeof parsed.cwd === "string" && parsed.cwd.length > 0) {
+      return parsed.cwd;
+    }
+  } catch {
+  }
+  return null;
+}
+
+// src/dashboard/api-agent-sessions.ts
 function createAgentSessionsRouter(projectsDir2, broadcast, assignmentsDir2) {
   const router = Router3();
   router.get("/", async (_req, res) => {
@@ -9719,6 +9778,8 @@ function createAgentSessionsRouter(projectsDir2, broadcast, assignmentsDir2) {
           return;
         }
       }
+      const derivedPath = await derivePathFromTranscript(transcriptPath);
+      const recordedPath = derivedPath ?? path ?? "";
       const session = {
         projectSlug: projectSlug || null,
         assignmentSlug: assignmentSlug || null,
@@ -9726,7 +9787,7 @@ function createAgentSessionsRouter(projectsDir2, broadcast, assignmentsDir2) {
         sessionId,
         started: (/* @__PURE__ */ new Date()).toISOString(),
         status: "active",
-        path: path || "",
+        path: recordedPath,
         description: description || null,
         transcriptPath: transcriptPath || null
       };
@@ -10216,6 +10277,33 @@ function listLeases(filter) {
        ORDER BY granted_at DESC`
   ).all(...params2);
 }
+function listMembers(inventory_slug) {
+  const database = getLeasesDb();
+  const inv = database.prepare("SELECT slug FROM inventories WHERE slug = ?").get(inventory_slug);
+  if (!inv) throw new NotFoundError(inventory_slug);
+  return database.prepare(
+    `SELECT inventory_slug, member_id, status, generation, metadata_json, last_used_at, retired_at
+       FROM inventory_members WHERE inventory_slug = ?
+       ORDER BY member_id`
+  ).all(inventory_slug);
+}
+function getLeaseEvents(lease_id, limit = 50) {
+  const database = getLeasesDb();
+  if (lease_id) {
+    return database.prepare(
+      `SELECT id, lease_id, event, at, detail_json
+         FROM lease_events WHERE lease_id = ?
+         ORDER BY at ASC, id ASC
+         LIMIT ?`
+    ).all(lease_id, limit);
+  }
+  return database.prepare(
+    `SELECT id, lease_id, event, at, detail_json
+       FROM lease_events
+       ORDER BY at DESC, id DESC
+       LIMIT ?`
+  ).all(limit);
+}
 function gcExpiredLeases() {
   const database = getLeasesDb();
   try {
@@ -10289,6 +10377,96 @@ function forceReleaseLease(lease_id) {
     throw err2;
   }
 }
+function updateInventory(slug, input4) {
+  if ("kind" in input4) {
+    throw new Error("inventory kind is immutable");
+  }
+  if (input4.default_ttl_s === void 0 && input4.display_name === void 0) {
+    throw new Error("nothing to update");
+  }
+  if (input4.default_ttl_s !== void 0 && input4.default_ttl_s <= 0) {
+    throw new Error("default_ttl_s must be positive");
+  }
+  const database = getLeasesDb();
+  const fn = database.transaction(() => {
+    const existing = database.prepare("SELECT slug FROM inventories WHERE slug = ?").get(slug);
+    if (!existing) throw new NotFoundError(slug);
+    const sets = [];
+    const params2 = [];
+    if (input4.default_ttl_s !== void 0) {
+      sets.push("default_ttl_s = ?");
+      params2.push(input4.default_ttl_s);
+    }
+    if (input4.display_name !== void 0) {
+      sets.push("display_name = ?");
+      params2.push(input4.display_name);
+    }
+    params2.push(slug);
+    database.prepare(`UPDATE inventories SET ${sets.join(", ")} WHERE slug = ?`).run(...params2);
+    return database.prepare(
+      `SELECT slug, kind, display_name, default_ttl_s, created_at
+         FROM inventories WHERE slug = ?`
+    ).get(slug);
+  });
+  try {
+    return fn.immediate();
+  } catch (err2) {
+    if (isBusyError(err2)) throw new LeaseContentionError(slug);
+    throw err2;
+  }
+}
+function deleteInventory(slug, opts = {}) {
+  const database = getLeasesDb();
+  let revoked = 0;
+  const fn = database.transaction(() => {
+    const existing = database.prepare("SELECT slug FROM inventories WHERE slug = ?").get(slug);
+    if (!existing) throw new NotFoundError(slug);
+    const activeLeases = database.prepare(
+      `SELECT lease_id FROM leases
+          WHERE inventory_slug = ? AND state = 'active'`
+    ).all(slug);
+    if (activeLeases.length > 0 && !opts.force) {
+      throw new MemberInUseError(slug, "*");
+    }
+    revoked = activeLeases.length;
+    database.prepare(
+      `DELETE FROM lease_events
+          WHERE lease_id IN (SELECT lease_id FROM leases WHERE inventory_slug = ?)`
+    ).run(slug);
+    database.prepare("DELETE FROM leases WHERE inventory_slug = ?").run(slug);
+    database.prepare("DELETE FROM inventory_members WHERE inventory_slug = ?").run(slug);
+    database.prepare("DELETE FROM inventories WHERE slug = ?").run(slug);
+  });
+  try {
+    fn.immediate();
+  } catch (err2) {
+    if (isBusyError(err2)) throw new LeaseContentionError(slug);
+    throw err2;
+  }
+  return { deleted: true, revoked };
+}
+function releaseLeasesByRequestedFor(tag) {
+  const database = getLeasesDb();
+  const rows = database.prepare(
+    `SELECT lease_id FROM leases
+        WHERE state = 'active' AND requested_for = ?`
+  ).all(tag);
+  const released = [];
+  const stale = [];
+  for (const { lease_id } of rows) {
+    try {
+      releaseLease(lease_id);
+      released.push(lease_id);
+    } catch (err2) {
+      if (err2 instanceof StaleLeaseError) {
+        stale.push(lease_id);
+        continue;
+      }
+      throw err2;
+    }
+  }
+  return { released, stale };
+}
 
 // src/dashboard/api-leases.ts
 function createLeasesRouter(broadcast) {
@@ -12061,7 +12239,7 @@ init_fs();
 init_config2();
 import { execFile as execFile2 } from "child_process";
 import { promisify as promisify2 } from "util";
-import { cp, mkdtemp, rm as rm2, readFile as readFile15, writeFile as writeFile4, unlink as unlink3, stat, open, rename as rename5 } from "fs/promises";
+import { cp, mkdtemp, rm as rm2, readFile as readFile15, writeFile as writeFile4, unlink as unlink3, stat, open as open2, rename as rename5 } from "fs/promises";
 import { resolve as resolve21, join as join2 } from "path";
 import { tmpdir } from "os";
 var exec2 = promisify2(execFile2);
@@ -12116,7 +12294,7 @@ async function acquireLock() {
   const lockPath = resolve21(syntaurRoot(), LOCK_FILE_NAME);
   await ensureDir(syntaurRoot());
   try {
-    const handle = await open(lockPath, "wx");
+    const handle = await open2(lockPath, "wx");
     await handle.write(String(process.pid));
     await handle.close();
     return lockPath;
@@ -14382,7 +14560,11 @@ var KNOWN_SKILL_NAMES = [
   "add-memory",
   "list-assignments",
   "log-progress",
-  "set-workspace"
+  "set-workspace",
+  "claim-resource",
+  "release-resource",
+  "extend-resource",
+  "list-resources"
 ];
 var KNOWN_SKILLS = KNOWN_SKILL_NAMES;
 async function getSkillsDir() {
@@ -14445,8 +14627,8 @@ async function skillMatches(srcDir, destDir) {
 }
 async function isSymlink(path) {
   try {
-    const stat9 = await lstat2(path);
-    return stat9.isSymbolicLink();
+    const stat10 = await lstat2(path);
+    return stat10.isSymbolicLink();
   } catch {
     return false;
   }
@@ -15631,6 +15813,8 @@ async function trackSessionCommand(options) {
   }
   initSessionDb();
   const { sessionId } = options;
+  const derivedPath = await derivePathFromTranscript(options.transcriptPath);
+  const recordedPath = derivedPath ?? options.path ?? process.cwd();
   await appendSession("", {
     projectSlug: options.project || null,
     assignmentSlug: options.assignment || null,
@@ -15638,7 +15822,7 @@ async function trackSessionCommand(options) {
     sessionId,
     started: (/* @__PURE__ */ new Date()).toISOString(),
     status: "active",
-    path: options.path || process.cwd(),
+    path: recordedPath,
     description: options.description || null,
     transcriptPath: options.transcriptPath ?? null
   });
@@ -19281,7 +19465,7 @@ ${entry}`;
 
 // src/commands/capture.ts
 import { resolve as resolve52, relative as relative4 } from "path";
-import { copyFile as copyFile3, mkdir as mkdir7, realpath as realpath2, stat as stat6 } from "fs/promises";
+import { copyFile as copyFile3, mkdir as mkdir7, realpath as realpath2, stat as stat7 } from "fs/promises";
 
 // src/utils/assignment-target.ts
 init_paths();
@@ -19461,6 +19645,80 @@ function isArtifactKind(value) {
 // src/commands/capture.ts
 init_fs();
 
+// src/utils/screencapture.ts
+import { spawn as spawn4 } from "child_process";
+import { mkdtemp as mkdtemp2, rm as rm6, stat as stat6 } from "fs/promises";
+import { tmpdir as tmpdir2 } from "os";
+import { join as join7 } from "path";
+function argsFor(mode, pngPath) {
+  switch (mode) {
+    case "interactive":
+      return ["-i", pngPath];
+    case "window":
+      return ["-iWo", pngPath];
+    case "fullscreen":
+      return ["-x", pngPath];
+  }
+}
+function runScreencapture(args) {
+  return new Promise((resolvePromise, reject) => {
+    const child = spawn4("screencapture", args, { stdio: ["ignore", "pipe", "pipe"] });
+    let settled = false;
+    child.once("error", (err2) => {
+      if (settled) return;
+      settled = true;
+      reject(err2);
+    });
+    child.once("close", (code) => {
+      if (settled) return;
+      settled = true;
+      resolvePromise(code ?? -1);
+    });
+  });
+}
+async function captureScreenshot(mode) {
+  if (process.platform !== "darwin") {
+    throw new Error(
+      "screencapture is only available on macOS. Use --file <path> to attach an existing image."
+    );
+  }
+  const tmpDir = await mkdtemp2(join7(tmpdir2(), "syntaur-screenshot-"));
+  const pngPath = join7(tmpDir, "shot.png");
+  const cleanup = async () => {
+    await rm6(tmpDir, { recursive: true, force: true }).catch(() => {
+    });
+  };
+  try {
+    let code;
+    try {
+      code = await runScreencapture(argsFor(mode, pngPath));
+    } catch (err2) {
+      if (err2 && typeof err2 === "object" && err2.code === "ENOENT") {
+        throw new Error(
+          "screencapture binary not found. Is this macOS with the system utility on PATH?"
+        );
+      }
+      throw err2;
+    }
+    if (code !== 0) {
+      throw new Error(`Screenshot canceled or failed (exit ${code}).`);
+    }
+    let size = 0;
+    try {
+      size = (await stat6(pngPath)).size;
+    } catch {
+      throw new Error("screencapture exited 0 but produced no image.");
+    }
+    if (size === 0) {
+      throw new Error("screencapture exited 0 but produced no image.");
+    }
+    return { pngPath, cleanup };
+  } catch (err2) {
+    await cleanup();
+    throw err2;
+  }
+}
+
 // src/db/proof-db.ts
 init_paths();
 import Database4 from "better-sqlite3";
@@ -19565,6 +19823,27 @@ async function captureCommand(target, options = {}) {
     );
   }
   const kind = options.kind;
+  const shelloutFlagCount = [
+    options.interactive,
+    options.window,
+    options.fullscreen
+  ].filter(Boolean).length;
+  if (shelloutFlagCount > 1) {
+    throw new Error("--interactive, --window, --fullscreen are mutually exclusive.");
+  }
+  const shelloutMode = options.interactive ? "interactive" : options.window ? "window" : options.fullscreen ? "fullscreen" : null;
+  if (shelloutMode) {
+    if (kind !== "screenshot") {
+      throw new Error(
+        "--interactive, --window, and --fullscreen require --kind=screenshot."
+      );
+    }
+    if (options.file) {
+      throw new Error(
+        "--file cannot be combined with --interactive, --window, or --fullscreen."
+      );
+    }
+  }
   if (kind === "text") {
     if (options.file) {
       throw new Error("--kind=text forbids --file. Use --note for text payloads.");
@@ -19573,7 +19852,7 @@ async function captureCommand(target, options = {}) {
       throw new Error("--kind=text requires --note.");
     }
   } else {
-    if (kind !== "http" && !options.file) {
+    if (kind !== "http" && !options.file && !shelloutMode) {
       throw new Error(`--kind=${kind} requires --file.`);
     }
     if (kind === "http" && !options.file && (!options.note || options.note.trim() === "")) {
@@ -19587,6 +19866,7 @@ async function captureCommand(target, options = {}) {
     cwd: options.cwd
   });
   let resolvedSource = null;
+  let shelloutCleanup = null;
   if (options.file) {
     const expanded = options.file.startsWith("~/") ? resolve52(process.env.HOME ?? "", options.file.slice(2)) : resolve52(options.file);
     if (!await fileExists(expanded)) {
@@ -19600,71 +19880,92 @@ async function captureCommand(target, options = {}) {
         `--file is unreadable: ${options.file} (${e instanceof Error ? e.message : String(e)})`
       );
     }
-    const st = await stat6(real);
+    const st = await stat7(real);
     if (!st.isFile()) {
       throw new Error(`--file is not a regular file: ${options.file}`);
     }
     resolvedSource = real;
+  } else if (shelloutMode) {
+    const { pngPath, cleanup } = await captureScreenshot(shelloutMode);
+    resolvedSource = pngPath;
+    shelloutCleanup = cleanup;
   }
-  if (!resolved.id || resolved.id.trim() === "") {
-    throw new Error(
-      `Resolved assignment is missing a frontmatter \`id\`: ${resolved.assignmentDir}. Cannot record artifact.`
-    );
-  }
-  initProofDb();
-  const subdir = criterionIndex === null ? "untagged" : String(criterionIndex);
-  const destDir = resolve52(proofDir(resolved.assignmentDir), subdir);
-  if (resolvedSource) await mkdir7(destDir, { recursive: true });
-  const ext = resolvedSource ? extensionForKind(kind) : null;
-  let id = null;
-  let relativeFilePath = null;
-  let absPath = null;
-  let lastErr = null;
-  for (let attempt = 0; attempt < MAX_ID_RETRIES; attempt += 1) {
-    const candidate = generateArtifactId();
-    const candidateAbsPath = resolvedSource && ext ? resolve52(destDir, `${candidate}.${ext}`) : null;
-    const candidateRel = candidateAbsPath ? relative4(resolved.assignmentDir, candidateAbsPath) : null;
-    try {
-      insertArtifact({
-        id: candidate,
-        assignmentId: resolved.id,
-        assignmentDir: resolved.assignmentDir,
-        criterionIndex,
-        kind,
-        filePath: candidateRel,
-        note: options.note ?? null
-      });
-      id = candidate;
-      absPath = candidateAbsPath;
-      relativeFilePath = candidateRel;
-      break;
-    } catch (e) {
-      if (isUniqueConstraintError(e)) {
-        lastErr = e;
-        continue;
+  try {
+    if (!resolved.id || resolved.id.trim() === "") {
+      throw new Error(
+        `Resolved assignment is missing a frontmatter \`id\`: ${resolved.assignmentDir}. Cannot record artifact.`
+      );
+    }
+    initProofDb();
+    const subdir = criterionIndex === null ? "untagged" : String(criterionIndex);
+    const destDir = resolve52(proofDir(resolved.assignmentDir), subdir);
+    if (resolvedSource) await mkdir7(destDir, { recursive: true });
+    const ext = resolvedSource ? extensionForKind(kind) : null;
+    let id = null;
+    let relativeFilePath = null;
+    let absPath = null;
+    let lastErr = null;
+    for (let attempt = 0; attempt < MAX_ID_RETRIES; attempt += 1) {
+      const candidate = generateArtifactId();
+      const candidateAbsPath = resolvedSource && ext ? resolve52(destDir, `${candidate}.${ext}`) : null;
+      const candidateRel = candidateAbsPath ? relative4(resolved.assignmentDir, candidateAbsPath) : null;
+      try {
+        insertArtifact({
+          id: candidate,
+          assignmentId: resolved.id,
+          assignmentDir: resolved.assignmentDir,
+          criterionIndex,
+          kind,
+          filePath: candidateRel,
+          note: options.note ?? null
+        });
+        id = candidate;
+        absPath = candidateAbsPath;
+        relativeFilePath = candidateRel;
+        break;
+      } catch (e) {
+        if (isUniqueConstraintError(e)) {
+          lastErr = e;
+          continue;
+        }
+        throw e;
       }
-      throw e;
     }
-  }
-  if (!id) {
-    throw new Error(
-      `Failed to generate a unique artifact id after ${MAX_ID_RETRIES} attempts: ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`
-    );
-  }
-  if (resolvedSource && absPath) {
-    await copyFile3(resolvedSource, absPath);
-  }
-  const ref = resolved.standalone ? resolved.id : `${resolved.projectSlug}/${resolved.assignmentSlug}`;
-  const tagSuffix = criterionIndex === null ? "untagged" : `criterion ${criterionIndex}`;
-  console.log(`Captured artifact ${id} (${kind}) for ${ref} \u2014 ${tagSuffix}.`);
-  if (relativeFilePath) {
-    console.log(`  file: ${resolve52(resolved.assignmentDir, relativeFilePath)}`);
+    if (!id) {
+      throw new Error(
+        `Failed to generate a unique artifact id after ${MAX_ID_RETRIES} attempts: ${lastErr instanceof Error ? lastErr.message : String(lastErr)}`
+      );
+    }
+    if (resolvedSource && absPath) {
+      try {
+        await copyFile3(resolvedSource, absPath);
+      } catch (err2) {
+        if (shelloutCleanup) {
+          console.error(
+            `Screenshot saved at ${resolvedSource} \u2014 DB row inserted but copy to proof dir failed. Recover with: mv ${resolvedSource} ${absPath}`
+          );
+          shelloutCleanup = null;
+        }
+        throw err2;
+      }
+    }
+    const ref = resolved.standalone ? resolved.id : `${resolved.projectSlug}/${resolved.assignmentSlug}`;
+    const tagSuffix = criterionIndex === null ? "untagged" : `criterion ${criterionIndex}`;
+    console.log(`Captured artifact ${id} (${kind}) for ${ref} \u2014 ${tagSuffix}.`);
+    if (relativeFilePath) {
+      console.log(`  file: ${resolve52(resolved.assignmentDir, relativeFilePath)}`);
+    }
+  } finally {
+    if (shelloutCleanup) {
+      await shelloutCleanup();
+      shelloutCleanup = null;
+    }
   }
 }
 
 // src/commands/proof.ts
 import { Command as Command5 } from "commander";
-import { readFile as readFile34, writeFile as writeFile10, rename as rename7, stat as stat7 } from "fs/promises";
+import { readFile as readFile34, writeFile as writeFile10, rename as rename7, stat as stat8 } from "fs/promises";
 import { resolve as resolve53, relative as relative5, isAbsolute as isAbsolute8 } from "path";
 import { randomBytes as randomBytes3 } from "crypto";
 
@@ -19928,7 +20229,7 @@ async function loadInlineFiles(rows, assignmentDir) {
       out.set(r.file_path, null);
       continue;
     }
-    const st = await stat7(abs);
+    const st = await stat8(abs);
     if (st.size > INLINE_TEXT_LIMIT_BYTES) {
       out.set(r.file_path, null);
       continue;
@@ -20075,38 +20376,75 @@ memberCommand.command("retire").description("Retire a member (no longer claimabl
     process.exit(1);
   }
 });
-leaseCommand.command("claim").description("Claim an idle member of an inventory. Fail-fast if none idle.").argument("<inventory>", "Inventory slug").option("--ttl <duration>", "Lease TTL (overrides inventory default)").option("--for <tag>", "Free-form requester tag (session id, assignment slug, etc.)").option("--json", "Output JSON instead of a one-line summary").action(async (inventory, opts) => {
-  try {
-    initLeasesDb();
-    const detail = getInventoryDetail(inventory);
-    if (!detail) {
-      console.error(`Error: inventory '${inventory}' not found`);
-      process.exit(1);
-      return;
-    }
-    const ttl_s = parseDuration(opts.ttl, detail.inventory.default_ttl_s);
-    const result = claimLease(inventory, ttl_s, opts.for);
-    if (opts.json) {
-      console.log(JSON.stringify(result, null, 2));
-    } else {
-      console.log(
-        `Claimed ${result.member_id} as ${result.lease_id} (expires ${result.expires_at})`
-      );
-    }
-  } catch (error) {
-    if (error instanceof NoIdleMemberError) {
-      console.error(`Error: no idle members in '${error.inventorySlug}'`);
-      process.exit(1);
-    }
-    if (error instanceof LeaseContentionError) {
-      console.error(`Error: contention timeout on '${error.inventorySlug}'; retry`);
+leaseCommand.command("claim").description("Claim an idle member of an inventory. Fail-fast unless --wait is set.").argument("<inventory>", "Inventory slug").option("--ttl <duration>", "Lease TTL (overrides inventory default)").option("--for <tag>", "Free-form requester tag (session id, assignment slug, etc.)").option(
+  "--wait <duration>",
+  "Block up to <duration> waiting for an idle member. Backoff: 100ms \u2192 200ms \u2192 400ms \u2192 800ms \u2192 1s cap."
+).option("--json", "Output JSON instead of a one-line summary").action(
+  async (inventory, opts) => {
+    try {
+      initLeasesDb();
+      const detail = getInventoryDetail(inventory);
+      if (!detail) {
+        console.error(`Error: inventory '${inventory}' not found`);
+        process.exit(1);
+        return;
+      }
+      const ttl_s = parseDuration(opts.ttl, detail.inventory.default_ttl_s);
+      const waitBudgetMs = opts.wait !== void 0 ? parseDuration(opts.wait, 0) * 1e3 : 0;
+      const tryClaim = () => claimLease(inventory, ttl_s, opts.for);
+      let result;
+      if (waitBudgetMs <= 0) {
+        result = tryClaim();
+      } else {
+        const deadline = Date.now() + waitBudgetMs;
+        const backoffSchedule = [100, 200, 400, 800];
+        let attempt = 0;
+        while (true) {
+          try {
+            result = tryClaim();
+            break;
+          } catch (err2) {
+            if (!(err2 instanceof NoIdleMemberError)) throw err2;
+            const remaining = deadline - Date.now();
+            if (remaining <= 0) {
+              console.error(
+                `Error: timed out waiting ${opts.wait} for an idle member of '${inventory}'`
+              );
+              process.exit(1);
+              return;
+            }
+            const delay = Math.min(
+              backoffSchedule[Math.min(attempt, backoffSchedule.length - 1)] ?? 1e3,
+              1e3,
+              remaining
+            );
+            attempt += 1;
+            await new Promise((r) => setTimeout(r, delay));
+          }
+        }
+      }
+      if (opts.json) {
+        console.log(JSON.stringify(result, null, 2));
+      } else {
+        console.log(
+          `Claimed ${result.member_id} as ${result.lease_id} (expires ${result.expires_at})`
+        );
+      }
+    } catch (error) {
+      if (error instanceof NoIdleMemberError) {
+        console.error(`Error: no idle members in '${error.inventorySlug}'`);
+        process.exit(1);
+      }
+      if (error instanceof LeaseContentionError) {
+        console.error(`Error: contention timeout on '${error.inventorySlug}'; retry`);
+        process.exit(1);
+      }
+      const message = error instanceof Error ? error.message : String(error);
+      console.error(`Error: ${message}`);
       process.exit(1);
     }
-    const message = error instanceof Error ? error.message : String(error);
-    console.error(`Error: ${message}`);
-    process.exit(1);
   }
-});
+);
 leaseCommand.command("release").description("Release a lease by its lease_id").argument("<lease-id>", "Opaque lease id returned by `claim`").action(async (leaseId) => {
   try {
     initLeasesDb();
@@ -20239,6 +20577,186 @@ leaseCommand.command("gc").description("Sweep expired leases across all inventor
     process.exit(1);
   }
 });
+leaseCommand.command("revoke").description(
+  "Force-release a lease (administrative). Idempotent \u2014 already-revoked exits 0."
+).argument("<lease-id>", "Lease id to revoke").action(async (leaseId) => {
+  try {
+    initLeasesDb();
+    const existing = getLease(leaseId);
+    if (!existing) {
+      console.error(`Error: lease ${leaseId} not found`);
+      process.exit(1);
+      return;
+    }
+    if (existing.state === "revoked") {
+      console.log(`already revoked ${leaseId}`);
+      return;
+    }
+    const res = forceReleaseLease(leaseId);
+    console.log(`revoked ${leaseId} (member_freed=${res.member_freed})`);
+  } catch (error) {
+    if (error instanceof NotFoundError) {
+      console.error(`Error: lease ${error.id} not found`);
+      process.exit(1);
+    }
+    if (error instanceof LeaseContentionError) {
+      console.error(`Error: contention timeout; retry`);
+      process.exit(1);
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`Error: ${message}`);
+    process.exit(1);
+  }
+});
+leaseCommand.command("release-all").description("Release every active lease matching --for <tag>.").requiredOption("--for <tag>", "Requester tag to match against `requested_for`").option("--json", "Output JSON {released, stale} as id arrays").action(async (opts) => {
+  try {
+    initLeasesDb();
+    const res = releaseLeasesByRequestedFor(opts.for);
+    if (opts.json) {
+      console.log(JSON.stringify(res, null, 2));
+      return;
+    }
+    for (const lid of res.released) {
+      console.log(`released ${lid}`);
+    }
+    for (const lid of res.stale) {
+      console.log(`skipped ${lid} (stale)`);
+    }
+    console.log(
+      `released ${res.released.length} lease(s) for tag "${opts.for}" (${res.stale.length} stale skipped)`
+    );
+  } catch (error) {
+    if (error instanceof LeaseContentionError) {
+      console.error(`Error: contention timeout; retry`);
+      process.exit(1);
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`Error: ${message}`);
+    process.exit(1);
+  }
+});
+leaseCommand.command("history").description(
+  "Show lease_events. With a lease-id, print that lease's timeline; without, print the last N events across all leases."
+).argument("[lease-id]", "Optional lease id to filter on").option("--limit <n>", "Max events to return (default 50)", "50").option("--json", "Output JSON rows").action(
+  async (leaseId, opts) => {
+    try {
+      initLeasesDb();
+      const limit = Number.parseInt(opts.limit, 10);
+      if (!Number.isFinite(limit) || limit <= 0) {
+        throw new Error("--limit must be a positive integer");
+      }
+      const rows = getLeaseEvents(leaseId, limit);
+      if (opts.json) {
+        console.log(JSON.stringify(rows, null, 2));
+        return;
+      }
+      if (rows.length === 0) {
+        console.log("(no events)");
+        return;
+      }
+      for (const r of rows) {
+        const detail = r.detail_json ? ` ${r.detail_json}` : "";
+        console.log(`${r.at}  ${r.event.padEnd(16)} ${r.lease_id}${detail}`);
+      }
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      console.error(`Error: ${message}`);
+      process.exit(1);
+    }
+  }
+);
+var inventoryCommand = leaseCommand.command("inventory").description("Manage existing inventories (update, delete)");
+inventoryCommand.command("update").description(
+  "Update mutable inventory fields. `kind` is immutable in v1."
+).argument("<slug>", "Inventory slug").option("--default-ttl <duration>", "New default TTL (e.g. 30m, 2h)").option("--display-name <text>", "New display name").action(
+  async (slug, opts) => {
+    try {
+      initLeasesDb();
+      if (opts.defaultTtl === void 0 && opts.displayName === void 0) {
+        throw new Error(
+          "nothing to update \u2014 pass --default-ttl or --display-name"
+        );
+      }
+      const patch = {};
+      if (opts.defaultTtl !== void 0) {
+        patch.default_ttl_s = parseDuration(opts.defaultTtl, 0);
+      }
+      if (opts.displayName !== void 0) {
+        patch.display_name = opts.displayName;
+      }
+      const row = updateInventory(slug, patch);
+      console.log(
+        `Updated inventory '${row.slug}' (kind=${row.kind}, default_ttl=${row.default_ttl_s}s, display_name=${row.display_name ?? "(none)"}).`
+      );
+    } catch (error) {
+      if (error instanceof NotFoundError) {
+        console.error(`Error: inventory '${slug}' not found`);
+        process.exit(1);
+      }
+      const message = error instanceof Error ? error.message : String(error);
+      console.error(`Error: ${message}`);
+      process.exit(1);
+    }
+  }
+);
+inventoryCommand.command("delete").description(
+  "Delete an inventory. Refuses if any lease is active unless --force is set."
+).argument("<slug>", "Inventory slug").option("--force", "Revoke all active leases first, then cascade delete").action(async (slug, opts) => {
+  try {
+    initLeasesDb();
+    const res = deleteInventory(slug, { force: opts.force });
+    console.log(
+      `deleted "${slug}" (revoked ${res.revoked} active lease(s))`
+    );
+  } catch (error) {
+    if (error instanceof MemberInUseError) {
+      console.error(
+        `Error: inventory "${slug}" has active leases \u2014 use --force to revoke and delete`
+      );
+      process.exit(1);
+    }
+    if (error instanceof NotFoundError) {
+      console.error(`Error: inventory '${slug}' not found`);
+      process.exit(1);
+    }
+    if (error instanceof LeaseContentionError) {
+      console.error(`Error: contention timeout; retry`);
+      process.exit(1);
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`Error: ${message}`);
+    process.exit(1);
+  }
+});
+memberCommand.command("list").description("List all members of an inventory (pure roster \u2014 no lease state).").argument("<inventory>", "Inventory slug").option("--json", "Output JSON rows").action(async (inventory, opts) => {
+  try {
+    initLeasesDb();
+    const rows = listMembers(inventory);
+    if (opts.json) {
+      console.log(JSON.stringify(rows, null, 2));
+      return;
+    }
+    if (rows.length === 0) {
+      console.log("(no members)");
+      return;
+    }
+    for (const r of rows) {
+      const meta = r.metadata_json ? ` ${r.metadata_json}` : "";
+      const last = r.last_used_at ? ` last_used=${r.last_used_at}` : "";
+      console.log(
+        `${r.member_id.padEnd(24)} ${r.status.padEnd(8)} gen=${r.generation}${last}${meta}`
+      );
+    }
+  } catch (error) {
+    if (error instanceof NotFoundError) {
+      console.error(`Error: inventory '${inventory}' not found`);
+      process.exit(1);
+    }
+    const message = error instanceof Error ? error.message : String(error);
+    console.error(`Error: ${message}`);
+    process.exit(1);
+  }
+});
 
 // src/commands/request.ts
 init_paths();
@@ -20515,7 +21033,7 @@ planCommand.command("version").description(
 // src/commands/session.ts
 init_fs();
 import { Command as Command8 } from "commander";
-import { readFile as readFile37, readdir as readdir19, stat as stat8 } from "fs/promises";
+import { readFile as readFile37, readdir as readdir19, stat as stat9 } from "fs/promises";
 import { resolve as resolve56 } from "path";
 async function readContext(cwd) {
   const path = resolve56(cwd, ".syntaur", "context.json");
@@ -20536,7 +21054,7 @@ async function findLatestSessionSummary(assignmentDir) {
     if (!entry.isDirectory()) continue;
     const summaryPath = resolve56(sessionsRoot, entry.name, "summary.md");
     if (!await fileExists(summaryPath)) continue;
-    const st = await stat8(summaryPath);
+    const st = await stat9(summaryPath);
     if (best === null || st.mtime.getTime() > best.mtime.getTime()) {
       best = { sessionId: entry.name, path: summaryPath, mtime: st.mtime };
     }
@@ -21127,19 +21645,19 @@ init_paths();
 init_fs();
 import { fileURLToPath as fileURLToPath8 } from "url";
 import { readFile as readFile42 } from "fs/promises";
-import { dirname as dirname16, join as join8, resolve as resolve62 } from "path";
-import { spawn as spawn4 } from "child_process";
+import { dirname as dirname16, join as join9, resolve as resolve62 } from "path";
+import { spawn as spawn5 } from "child_process";
 import { createInterface as createInterface2 } from "readline/promises";
 
 // src/utils/version.ts
 import { fileURLToPath as fileURLToPath7 } from "url";
 import { readFile as readFile41 } from "fs/promises";
-import { dirname as dirname15, join as join7 } from "path";
+import { dirname as dirname15, join as join8 } from "path";
 async function readPackageVersion(scriptUrl) {
   try {
     const scriptPath = fileURLToPath7(scriptUrl);
     const pkgRoot = dirname15(dirname15(scriptPath));
-    const raw = await readFile41(join7(pkgRoot, "package.json"), "utf-8");
+    const raw = await readFile41(join8(pkgRoot, "package.json"), "utf-8");
     const parsed = JSON.parse(raw);
     return typeof parsed.version === "string" ? parsed.version : null;
   } catch {
@@ -21183,7 +21701,7 @@ async function resolveNpmBin() {
   const nodeDir = dirname16(process.execPath);
   const isWin = process.platform === "win32";
   const npmName = isWin ? "npm.cmd" : "npm";
-  const nearNode = join8(nodeDir, npmName);
+  const nearNode = join9(nodeDir, npmName);
   if (await fileExists(nearNode)) {
     return { cmd: nearNode, shell: false };
   }
@@ -21192,7 +21710,7 @@ async function resolveNpmBin() {
 async function installGlobally() {
   const { cmd, shell } = await resolveNpmBin();
   return new Promise((resolvePromise) => {
-    const child = spawn4(cmd, ["install", "-g", "syntaur"], {
+    const child = spawn5(cmd, ["install", "-g", "syntaur"], {
       stdio: "inherit",
       shell
     });
@@ -21203,7 +21721,7 @@ async function installGlobally() {
 async function readGlobalVersion() {
   const { cmd, shell } = await resolveNpmBin();
   const rootPath = await new Promise((resolvePromise) => {
-    const child = spawn4(cmd, ["root", "-g"], {
+    const child = spawn5(cmd, ["root", "-g"], {
       shell,
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -21226,7 +21744,7 @@ async function readGlobalVersion() {
   });
   if (!rootPath) return null;
   try {
-    const manifestPath = join8(rootPath, "syntaur", "package.json");
+    const manifestPath = join9(rootPath, "syntaur", "package.json");
     if (!await fileExists(manifestPath)) return null;
     const raw = await readFile42(manifestPath, "utf-8");
     const parsed = JSON.parse(raw);
@@ -21398,7 +21916,7 @@ program.command("comment").description("Add a comment to an assignment (CLI-medi
     process.exit(1);
   }
 });
-program.command("capture").description("Capture a typed proof artifact for an assignment").argument("[target]", "Assignment slug (with --project) or UUID; falls back to .syntaur/context.json").option("--kind <type>", "Artifact kind: screenshot | video | asciinema | http | text").option("--file <path>", "Source file to ingest (forbidden for --kind=text)").option("--criterion <index>", "Optional 0-based criterion index to tag").option("--note <text>", "Optional note (required for --kind=text)").option("--project <slug>", "Project slug if the target is project-nested").option("--dir <path>", "Override default project directory").action(async (target, options) => {
+program.command("capture").description("Capture a typed proof artifact for an assignment").argument("[target]", "Assignment slug (with --project) or UUID; falls back to .syntaur/context.json").option("--kind <type>", "Artifact kind: screenshot | video | asciinema | http | text").option("--file <path>", "Source file to ingest (forbidden for --kind=text)").option("--criterion <index>", "Optional 0-based criterion index to tag").option("--note <text>", "Optional note (required for --kind=text)").option("--project <slug>", "Project slug if the target is project-nested").option("--dir <path>", "Override default project directory").option("--interactive", "Screenshot mode: drag a region (macOS only)").option("--window", "Screenshot mode: window picker (macOS only)").option("--fullscreen", "Screenshot mode: silent full-screen capture (macOS only)").action(async (target, options) => {
   try {
     await captureCommand(target, options);
   } catch (error) {