svamp-cli 0.1.39 → 0.1.41

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-CXrEt0TM.mjs';
+import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-YG1Pb9dY.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -6,8 +6,8 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import 'node:crypto';
 import 'node:fs';
+import 'node:crypto';
 import 'node:path';
 import 'node:child_process';
 import '@agentclientprotocol/sdk';
@@ -28,13 +28,16 @@ async function main() {
   } else if (subcommand === "daemon") {
     if (daemonSubcommand === "start") {
       const { spawn } = await import('child_process');
+      const extraArgs = [];
+      if (args.includes("--no-auto-continue")) extraArgs.push("--no-auto-continue");
       const child = spawn(process.execPath, [
         "--no-warnings",
         "--no-deprecation",
         ...process.argv.slice(1, 2),
         // the script path
         "daemon",
-        "start-sync"
+        "start-sync",
+        ...extraArgs
       ], {
         detached: true,
         stdio: "ignore",
@@ -64,7 +67,8 @@ async function main() {
       }
       process.exit(0);
     } else if (daemonSubcommand === "start-sync") {
-      await startDaemon();
+      const noAutoContinue = args.includes("--no-auto-continue");
+      await startDaemon({ noAutoContinue });
       process.exit(0);
     } else if (daemonSubcommand === "stop") {
       const cleanup = args.includes("--cleanup");
@@ -86,12 +90,14 @@ async function main() {
     await handleAgentCommand();
   } else if (subcommand === "session") {
     await handleSessionCommand();
+  } else if (subcommand === "machine") {
+    await handleMachineCommand();
   } else if (subcommand === "--help" || subcommand === "-h") {
     printHelp();
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-BbzWWqQK.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-BkBE6ZdN.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -100,7 +106,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-D19RL_zw.mjs');
+  const { runInteractive } = await import('./run-Di3I0USw.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -145,7 +151,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-CXrEt0TM.mjs').then(function (n) { return n.f; });
+    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-YG1Pb9dY.mjs').then(function (n) { return n.i; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -157,7 +163,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-CXrEt0TM.mjs').then(function (n) { return n.f; });
+  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-YG1Pb9dY.mjs').then(function (n) { return n.i; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -181,12 +187,12 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_MCP_AGENTS[config.agentName]) {
-    const { CodexMcpBackend } = await import('./run-CXrEt0TM.mjs').then(function (n) { return n.h; });
+    const { CodexMcpBackend } = await import('./run-YG1Pb9dY.mjs').then(function (n) { return n.j; });
     backend = new CodexMcpBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-CXrEt0TM.mjs').then(function (n) { return n.e; });
-    const { GeminiTransport } = await import('./run-CXrEt0TM.mjs').then(function (n) { return n.G; });
-    const { DefaultTransport } = await import('./run-CXrEt0TM.mjs').then(function (n) { return n.D; });
+    const { AcpBackend } = await import('./run-YG1Pb9dY.mjs').then(function (n) { return n.h; });
+    const { GeminiTransport } = await import('./run-YG1Pb9dY.mjs').then(function (n) { return n.G; });
+    const { DefaultTransport } = await import('./run-YG1Pb9dY.mjs').then(function (n) { return n.D; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : new DefaultTransport(config.agentName);
     backend = new AcpBackend({
       agentName: config.agentName,
@@ -304,7 +310,7 @@ async function handleSessionCommand() {
     printSessionHelp();
     return;
   }
-  const { sessionList, sessionSpawn, sessionStop, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait } = await import('./commands-Du-fdLLu.mjs');
+  const { sessionList, sessionSpawn, sessionStop, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare } = await import('./commands-CwC2aVzu.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -338,7 +344,37 @@ async function handleSessionCommand() {
     }
     const message = parseFlagStr("--message");
     const wait = hasFlag("--wait");
-    await sessionSpawn(agent, dir, targetMachineId, { message, wait });
+    const isolate = hasFlag("--isolate");
+    const securityContextPath = parseFlagStr("--security-context");
+    const denyNetwork = hasFlag("--deny-network");
+    const share = [];
+    const denyRead = [];
+    const allowWrite = [];
+    const allowDomain = [];
+    for (let i = 1; i < sessionArgs.length; i++) {
+      if (sessionArgs[i] === "--share" && i + 1 < sessionArgs.length) {
+        share.push(sessionArgs[++i]);
+      } else if (sessionArgs[i] === "--deny-read" && i + 1 < sessionArgs.length) {
+        denyRead.push(sessionArgs[++i]);
+      } else if (sessionArgs[i] === "--allow-write" && i + 1 < sessionArgs.length) {
+        allowWrite.push(sessionArgs[++i]);
+      } else if (sessionArgs[i] === "--allow-domain" && i + 1 < sessionArgs.length) {
+        allowDomain.push(sessionArgs[++i]);
+      }
+    }
+    const { parseShareArg } = await import('./commands-CwC2aVzu.mjs');
+    const shareEntries = share.map((s) => parseShareArg(s));
+    await sessionSpawn(agent, dir, targetMachineId, {
+      message,
+      wait,
+      isolate,
+      securityContextPath,
+      share: shareEntries.length > 0 ? shareEntries : void 0,
+      denyRead: denyRead.length > 0 ? denyRead : void 0,
+      allowWrite: allowWrite.length > 0 ? allowWrite : void 0,
+      denyNetwork,
+      allowDomain: allowDomain.length > 0 ? allowDomain : void 0
+    });
   } else if (sessionSubcommand === "stop") {
     if (!sessionArgs[1]) {
       console.error("Usage: svamp session stop <session-id>");
@@ -388,6 +424,16 @@ async function handleSessionCommand() {
     await sessionWait(sessionArgs[1], targetMachineId, {
       timeout: parseFlagInt("--timeout")
     });
+  } else if (sessionSubcommand === "share") {
+    if (!sessionArgs[1]) {
+      console.error("Usage: svamp session share <session-id> --add <email>[:<role>] | --remove <email> | --list");
+      process.exit(1);
+    }
+    await sessionShare(sessionArgs[1], targetMachineId, {
+      add: parseFlagStr("--add"),
+      remove: parseFlagStr("--remove"),
+      list: hasFlag("--list")
+    });
   } else {
     console.error(`Unknown session command: ${sessionSubcommand}`);
     printSessionHelp();
@@ -395,6 +441,50 @@ async function handleSessionCommand() {
   }
   process.exit(0);
 }
+async function handleMachineCommand() {
+  const machineArgs = args.slice(1);
+  const machineSubcommand = machineArgs[0];
+  if (!machineSubcommand || machineSubcommand === "--help" || machineSubcommand === "-h") {
+    printMachineHelp();
+    return;
+  }
+  if (machineSubcommand === "share") {
+    const { machineShare } = await import('./commands-CwC2aVzu.mjs');
+    let machineId;
+    const shareArgs = [];
+    for (let i = 1; i < machineArgs.length; i++) {
+      if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
+        machineId = machineArgs[++i];
+      } else {
+        shareArgs.push(machineArgs[i]);
+      }
+    }
+    let add;
+    let remove;
+    let configPath;
+    let list = false;
+    let showConfig = false;
+    for (let i = 0; i < shareArgs.length; i++) {
+      if (shareArgs[i] === "--add" && i + 1 < shareArgs.length) {
+        add = shareArgs[++i];
+      } else if (shareArgs[i] === "--remove" && i + 1 < shareArgs.length) {
+        remove = shareArgs[++i];
+      } else if (shareArgs[i] === "--config" && i + 1 < shareArgs.length) {
+        configPath = shareArgs[++i];
+      } else if (shareArgs[i] === "--list") {
+        list = true;
+      } else if (shareArgs[i] === "--show-config") {
+        showConfig = true;
+      }
+    }
+    await machineShare(machineId, { add, remove, list, configPath, showConfig });
+  } else {
+    console.error(`Unknown machine command: ${machineSubcommand}`);
+    printMachineHelp();
+    process.exit(1);
+  }
+  process.exit(0);
+}
 async function loginToHypha() {
   const serverUrl = args[1] || process.env.HYPHA_SERVER_URL;
   if (!serverUrl) {
@@ -706,8 +796,11 @@ Usage:
   svamp daemon install       Install as system service (launchd/systemd/wrapper)
   svamp session list         List active sessions
   svamp session spawn        Spawn a new session on the daemon
+  svamp session share <id>   Manage session sharing
   svamp session attach <id>  Attach to a session
   svamp session --help       Show all session commands
+  svamp machine share        Manage machine sharing & security contexts
+  svamp machine --help       Show all machine commands
   svamp agent list           List known agents
   svamp agent <name>         Start local agent session (gemini, codex)
   svamp --version            Show version
@@ -732,12 +825,13 @@ function printDaemonHelp() {
 svamp daemon \u2014 Daemon management
 
 Usage:
-  svamp daemon start         Start the daemon (detached)
-  svamp daemon stop          Stop the daemon (sessions preserved for restart)
-  svamp daemon stop --cleanup  Stop and mark all sessions as stopped
-  svamp daemon status        Show daemon status
-  svamp daemon install       Install as launchd service (macOS) \u2014 auto-restart on crash
-  svamp daemon uninstall     Remove launchd service
+  svamp daemon start                  Start the daemon (detached)
+  svamp daemon start --no-auto-continue  Start without auto-continuing interrupted sessions
+  svamp daemon stop                   Stop the daemon (sessions preserved for restart)
+  svamp daemon stop --cleanup         Stop and mark all sessions as stopped
+  svamp daemon status                 Show daemon status
+  svamp daemon install                Install as launchd service (macOS) \u2014 auto-restart on crash
+  svamp daemon uninstall              Remove launchd service
 `);
 }
 function printSessionHelp() {
@@ -757,10 +851,22 @@ Usage:
   svamp session messages <id> [--last N] [--json] [--after N] [--limit N]
                                                               Show messages (alias: msgs)
   svamp session attach <id>                                   Attach to session (interactive)
+  svamp session share <id> --list                            List shared users
+  svamp session share <id> --add <email>[:<role>]            Share with user
+  svamp session share <id> --remove <email>                  Remove shared user
 
 Options:
   --machine <id>, -m <id>  Target a specific machine (prefix match supported)
 
+Spawn isolation options:
+  --share <email>[:<role>]    Share session (repeatable). Role: view, interact, admin
+  --security-context <path>   Path to security context JSON config file
+  --isolate                   Force OS-level isolation even without sharing
+  --deny-read <path>          Deny read access to path (repeatable)
+  --allow-write <path>        Allow write access to path (repeatable)
+  --deny-network              Deny all network access
+  --allow-domain <domain>     Allow network access to domain (repeatable)
+
 Agents: claude (default), gemini, codex
 
 Session and machine IDs can be abbreviated (prefix match, like Docker).
@@ -772,13 +878,49 @@ Attach commands:
   /info             Show session status
 
 Examples:
-  svamp session list --active --json
   svamp session spawn claude -d ~/projects/myapp --message "Fix the bug" --wait
-  svamp session send abc12345 "Run the tests" --wait --timeout 600
-  svamp session wait abc12345 --timeout 120
-  svamp session info abc12345 --json
-  svamp session messages abc12345 --last 10 --json
-  svamp session attach abc12345
+  svamp session spawn claude -d /tmp/sandbox --isolate --deny-network
+  svamp session spawn claude -d /tmp/proj --share alice@example.com:admin --deny-read /etc
+  svamp session spawn claude --security-context ./security.json
+  svamp session share abc12345 --add bob@example.com:view
+  svamp session share abc12345 --list
+`);
+}
+function printMachineHelp() {
+  console.log(`
+svamp machine \u2014 Machine management
+
+Usage:
+  svamp machine share --list                         List shared users
+  svamp machine share --add <email>[:<role>]         Share machine with user
+  svamp machine share --remove <email>               Remove shared user
+  svamp machine share --config <path>                Apply security context config
+  svamp machine share --show-config                  Show current security context config
+
+Options:
+  --machine <id>, -m <id>  Target a specific machine (prefix match supported)
+
+Security context config file format (JSON):
+  {
+    "default": {
+      "role": "interact",
+      "filesystem": { "denyRead": ["/etc/shadow"], "denyWrite": ["/usr"] },
+      "network": { "allowedDomains": ["api.anthropic.com"] }
+    },
+    "users": {
+      "alice@example.com": { "role": "admin" },
+      "bob@example.com": { "role": "view", "denyAllNetwork": true }
+    }
+  }
+
+The "default" entry applies to all users. Per-user entries override defaults.
+Machine-level config is merged with session-level config at spawn time.
+
+Examples:
+  svamp machine share --add alice@example.com:admin
+  svamp machine share --config ./security-context.json
+  svamp machine share --show-config
+  svamp machine share --list
 `);
 }
 function printInteractiveHelp() {