svamp-cli 0.1.85 → 0.1.87

package/dist/commands-DJo7kCIf.mjs

@@ -1,1899 +0,0 @@
-import { existsSync, readFileSync } from 'node:fs';
-import { execSync } from 'node:child_process';
-import { resolve, join } from 'node:path';
-import os from 'node:os';
-import { l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha } from './run-D0PoM5_v.mjs';
-import 'os';
-import 'fs/promises';
-import 'fs';
-import 'path';
-import 'url';
-import 'child_process';
-import 'crypto';
-import 'node:crypto';
-import '@agentclientprotocol/sdk';
-import '@modelcontextprotocol/sdk/client/index.js';
-import '@modelcontextprotocol/sdk/client/stdio.js';
-import '@modelcontextprotocol/sdk/types.js';
-import 'zod';
-import 'node:fs/promises';
-import 'node:util';
-
-function formatTime(ts) {
-  if (!ts) return "-";
-  const date = new Date(ts);
-  const now = /* @__PURE__ */ new Date();
-  const diffMs = now.getTime() - date.getTime();
-  const diffMin = Math.floor(diffMs / 6e4);
-  if (diffMin < 1) return "just now";
-  if (diffMin < 60) return `${diffMin}m ago`;
-  const diffHr = Math.floor(diffMin / 60);
-  if (diffHr < 24) return `${diffHr}h ago`;
-  const diffDay = Math.floor(diffHr / 24);
-  return `${diffDay}d ago`;
-}
-function toMarkdownInline(value) {
-  const escaped = value.replace(/`/g, "\\`");
-  return `\`${escaped}\``;
-}
-function formatSessionStatus(data) {
-  const lines = [
-    "## Session Status",
-    "",
-    `- Session ID: ${toMarkdownInline(data.sessionId)}`,
-    `- Agent: ${data.flavor}`
-  ];
-  if (data.name) lines.push(`- Name: ${data.name}`);
-  if (data.summary) lines.push(`- Summary: ${data.summary}`);
-  if (data.path) lines.push(`- Path: ${data.path}`);
-  if (data.host) lines.push(`- Host: ${data.host}`);
-  if (data.lifecycleState) lines.push(`- Lifecycle: ${data.lifecycleState}`);
-  lines.push(`- Active: ${data.active ? "yes" : "no"}`);
-  lines.push(`- Thinking: ${data.thinking ? "yes" : "no"}`);
-  lines.push(`- Agent Status: ${data.active ? "busy" : "idle"}`);
-  if (data.startedBy) lines.push(`- Started By: ${data.startedBy}`);
-  if (data.claudeSessionId) lines.push(`- Claude Session: ${data.claudeSessionId}`);
-  if (data.sessionLink) lines.push(`- Link: ${data.sessionLink}`);
-  if (data.pendingPermissions && data.pendingPermissions.length > 0) {
-    lines.push("");
-    lines.push("### Pending Permissions");
-    for (const p of data.pendingPermissions) {
-      const argsStr = JSON.stringify(p.arguments || {}).slice(0, 120);
-      lines.push(`  [${p.id.slice(0, 8)}] ${p.tool}(${argsStr})  ${formatTime(p.createdAt)}`);
-    }
-    lines.push("");
-    lines.push(`Use: svamp session approve ${data.sessionId.slice(0, 8)}`);
-  }
-  return lines.join("\n");
-}
-function formatJson(data) {
-  return JSON.stringify(data, null, 2);
-}
-
-const SESSION_RPC_PARAMS = {
-  getMessages: ["afterSeq", "limit"],
-  sendMessage: ["content", "localId", "meta"],
-  getMetadata: [],
-  updateMetadata: ["newMetadata", "expectedVersion"],
-  updateConfig: ["patch"],
-  getAgentState: [],
-  updateAgentState: ["newState", "expectedVersion"],
-  abort: [],
-  permissionResponse: ["params"],
-  switchMode: ["mode"],
-  restartClaude: [],
-  killSession: [],
-  keepAlive: ["thinking", "mode"],
-  sessionEnd: [],
-  getActivityState: [],
-  readFile: ["path"],
-  writeFile: ["path", "content"],
-  listDirectory: ["path"],
-  bash: ["command", "cwd", "timeout"],
-  ripgrep: ["args", "cwd"],
-  getDirectoryTree: ["path", "maxDepth"],
-  getSharing: [],
-  getEffectiveRole: [],
-  updateSharing: ["newSharing"],
-  updateSecurityContext: ["newSecurityContext"],
-  applySystemPrompt: ["prompt"],
-  sendInboxMessage: ["message"],
-  getInbox: ["opts"],
-  markInboxRead: ["messageId"],
-  clearInbox: ["opts"],
-  registerListener: ["callback"]
-};
-function getSessionProxy(machine, sessionId) {
-  return new Proxy({}, {
-    get(_target, method) {
-      return (...args) => {
-        const paramNames = SESSION_RPC_PARAMS[method];
-        if (paramNames) {
-          const kwargs = {};
-          for (let i = 0; i < paramNames.length && i < args.length; i++) {
-            if (args[i] !== void 0) {
-              kwargs[paramNames[i]] = args[i];
-            }
-          }
-          return machine.sessionRPC(sessionId, method, kwargs);
-        }
-        return machine.sessionRPC(sessionId, method, {});
-      };
-    }
-  });
-}
-const SVAMP_HOME = process.env.SVAMP_HOME || join(os.homedir(), ".svamp");
-const DAEMON_STATE_FILE = join(SVAMP_HOME, "daemon.state.json");
-const ENV_FILE = join(SVAMP_HOME, ".env");
-function loadDotEnv() {
-  if (!existsSync(ENV_FILE)) return;
-  const lines = readFileSync(ENV_FILE, "utf-8").split("\n");
-  for (const line of lines) {
-    const trimmed = line.trim();
-    if (!trimmed || trimmed.startsWith("#")) continue;
-    const eqIdx = trimmed.indexOf("=");
-    if (eqIdx === -1) continue;
-    const key = trimmed.slice(0, eqIdx).trim();
-    const value = trimmed.slice(eqIdx + 1).trim().replace(/^["']|["']$/g, "");
-    if (!process.env[key]) {
-      process.env[key] = value;
-    }
-  }
-}
-function readDaemonState() {
-  if (!existsSync(DAEMON_STATE_FILE)) return null;
-  try {
-    return JSON.parse(readFileSync(DAEMON_STATE_FILE, "utf-8"));
-  } catch {
-    return null;
-  }
-}
-function isDaemonAlive(state) {
-  try {
-    process.kill(state.pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function connectAndGetMachine(machineId) {
-  loadDotEnv();
-  const state = readDaemonState();
-  if (!state || !isDaemonAlive(state)) {
-    console.error('Daemon is not running. Start it with "svamp daemon start".');
-    process.exit(1);
-  }
-  const serverUrl = process.env.HYPHA_SERVER_URL || state.hyphaServerUrl;
-  const token = process.env.HYPHA_TOKEN;
-  if (!serverUrl) {
-    console.error('No Hypha server URL. Run "svamp login <url>" first.');
-    process.exit(1);
-  }
-  const origLog = console.log;
-  const origWarn = console.warn;
-  const origInfo = console.info;
-  const origError = console.error;
-  const stdoutWrite = process.stdout.write.bind(process.stdout);
-  const stderrWrite = process.stderr.write.bind(process.stderr);
-  const isHyphaLog = (chunk) => typeof chunk === "string" && (chunk.includes("WebSocket connection") || chunk.includes("Connection established") || chunk.includes("registering service built-in") || chunk.includes("registered service") || chunk.includes("registered all") || chunk.includes("Subscribing to client_") || chunk.includes("subscribed to client_") || chunk.includes("subscribe to client_") || chunk.includes("Cleaning up all sessions") || chunk.includes("WebSocket connection disconnected") || chunk.includes("local RPC disconnection") || chunk.includes("Timeout registering service") || chunk.includes("Failed to subscribe to client_disconnected") || chunk.includes("Timeout subscribing to client_disconnected"));
-  console.log = () => {
-  };
-  console.warn = () => {
-  };
-  console.info = () => {
-  };
-  console.error = (...args) => {
-    if (args.some((a) => isHyphaLog(a))) return;
-    origError(...args);
-  };
-  process.stdout.write = (chunk, ...args) => {
-    if (isHyphaLog(chunk)) return true;
-    return stdoutWrite(chunk, ...args);
-  };
-  process.stderr.write = (chunk, ...args) => {
-    if (isHyphaLog(chunk)) return true;
-    return stderrWrite(chunk, ...args);
-  };
-  const restoreConsole = () => {
-    console.log = origLog;
-    console.warn = origWarn;
-    console.info = origInfo;
-    console.error = origError;
-  };
-  let server;
-  try {
-    server = await connectToHypha({
-      serverUrl,
-      token,
-      name: "svamp-session-cli"
-    });
-  } catch (err) {
-    restoreConsole();
-    console.error(`Failed to connect to Hypha: ${err.message}`);
-    process.exit(1);
-  }
-  let machine;
-  try {
-    const services = await server.listServices({ query: { type: "svamp-machine" }, include_unlisted: true, _rkwargs: true });
-    if (services.length === 0) {
-      restoreConsole();
-      console.error("No machine service found. Is the daemon registered on Hypha?");
-      await server.disconnect();
-      process.exit(1);
-    }
-    let selectedService;
-    if (machineId) {
-      const exact = services.find((s) => (s.id || s.name) === machineId);
-      if (exact) {
-        selectedService = exact;
-      } else {
-        const prefixMatches = services.filter((s) => {
-          const id = s.id || s.name;
-          return id.startsWith(machineId);
-        });
-        if (prefixMatches.length === 1) {
-          selectedService = prefixMatches[0];
-        }
-      }
-      if (!selectedService) {
-        const query = machineId.toLowerCase();
-        const resolved = [];
-        await Promise.all(services.map(async (svc) => {
-          const svcId2 = svc.id || svc.name;
-          try {
-            const machineSvc = await server.getService(svcId2);
-            const info = await machineSvc.getMachineInfo();
-            resolved.push({
-              svc,
-              machineId: (info.machineId || svcId2).toLowerCase(),
-              host: (info.metadata?.host || "").toLowerCase(),
-              displayName: (info.metadata?.displayName || "").toLowerCase()
-            });
-          } catch {
-          }
-        }));
-        let matches = resolved.filter(
-          (r) => r.machineId === query || r.host === query || r.displayName === query
-        );
-        if (matches.length === 0) {
-          matches = resolved.filter(
-            (r) => r.machineId.startsWith(query) || r.host.startsWith(query) || r.displayName.startsWith(query)
-          );
-        }
-        if (matches.length === 0) {
-          matches = resolved.filter(
-            (r) => r.machineId.includes(query) || r.host.includes(query) || r.displayName.includes(query)
-          );
-        }
-        if (matches.length === 1) {
-          selectedService = matches[0].svc;
-        } else if (matches.length > 1) {
-          restoreConsole();
-          console.error(`Ambiguous machine "${machineId}". Matches:`);
-          for (const m of matches) {
-            console.error(`  ${m.machineId}  (${m.host})`);
-          }
-          await server.disconnect();
-          process.exit(1);
-        } else {
-          restoreConsole();
-          console.error(`No machine found matching: ${machineId}`);
-          if (resolved.length > 0) {
-            console.error("Available machines:");
-            for (const r of resolved) {
-              console.error(`  ${r.machineId}  (${r.host})`);
-            }
-          }
-          await server.disconnect();
-          process.exit(1);
-        }
-      }
-    } else {
-      if (state.hyphaClientId) {
-        const localMatch = services.find((s) => {
-          const id = s.id || s.name || "";
-          return id.includes(state.hyphaClientId);
-        });
-        selectedService = localMatch || services[0];
-      } else if (state.machineId) {
-        const localMatch = services.find((s) => {
-          const id = s.id || s.name || "";
-          return id.includes(state.machineId);
-        });
-        selectedService = localMatch || services[0];
-      } else {
-        selectedService = services[0];
-      }
-    }
-    const svcId = selectedService.id || selectedService.name;
-    machine = await server.getService(svcId);
-  } catch (err) {
-    restoreConsole();
-    console.error(`Failed to discover machine service: ${err.message}`);
-    await server.disconnect();
-    process.exit(1);
-  }
-  restoreConsole();
-  return { server, machine };
-}
-async function connectAndGetAllMachines() {
-  loadDotEnv();
-  const state = readDaemonState();
-  if (!state || !isDaemonAlive(state)) {
-    console.error('Daemon is not running. Start it with "svamp daemon start".');
-    process.exit(1);
-  }
-  const serverUrl = process.env.HYPHA_SERVER_URL || state.hyphaServerUrl;
-  const token = process.env.HYPHA_TOKEN;
-  if (!serverUrl) {
-    console.error('No Hypha server URL. Run "svamp login <url>" first.');
-    process.exit(1);
-  }
-  const origLog = console.log;
-  const origWarn = console.warn;
-  const origInfo = console.info;
-  const origError = console.error;
-  const stdoutWrite = process.stdout.write.bind(process.stdout);
-  const stderrWrite = process.stderr.write.bind(process.stderr);
-  const isHyphaLog = (chunk) => typeof chunk === "string" && (chunk.includes("WebSocket connection") || chunk.includes("Connection established") || chunk.includes("registering service built-in") || chunk.includes("registered service") || chunk.includes("registered all") || chunk.includes("Subscribing to client_") || chunk.includes("subscribed to client_") || chunk.includes("subscribe to client_") || chunk.includes("Cleaning up all sessions") || chunk.includes("WebSocket connection disconnected") || chunk.includes("local RPC disconnection") || chunk.includes("Timeout registering service") || chunk.includes("Failed to subscribe to client_disconnected") || chunk.includes("Timeout subscribing to client_disconnected"));
-  console.log = () => {
-  };
-  console.warn = () => {
-  };
-  console.info = () => {
-  };
-  console.error = (...args) => {
-    if (!args.some((a) => isHyphaLog(a))) origError(...args);
-  };
-  process.stdout.write = (chunk, ...args) => {
-    if (isHyphaLog(chunk)) return true;
-    return stdoutWrite(chunk, ...args);
-  };
-  process.stderr.write = (chunk, ...args) => {
-    if (isHyphaLog(chunk)) return true;
-    return stderrWrite(chunk, ...args);
-  };
-  const restoreConsole = () => {
-    console.log = origLog;
-    console.warn = origWarn;
-    console.info = origInfo;
-    console.error = origError;
-  };
-  let server;
-  try {
-    server = await connectToHypha({ serverUrl, token, name: "svamp-session-cli" });
-  } catch (err) {
-    restoreConsole();
-    console.error(`Failed to connect to Hypha: ${err.message}`);
-    process.exit(1);
-  }
-  const machines = [];
-  try {
-    const services = await server.listServices({ query: { type: "svamp-machine" }, include_unlisted: true, _rkwargs: true });
-    const results = await Promise.allSettled(
-      services.map((svc) => server.getService(svc.id || svc.name))
-    );
-    for (const r of results) {
-      if (r.status === "fulfilled") machines.push(r.value);
-    }
-  } catch (err) {
-    restoreConsole();
-    console.error(`Failed to discover machine services: ${err.message}`);
-    await server.disconnect();
-    process.exit(1);
-  }
-  restoreConsole();
-  if (machines.length === 0) {
-    console.error("No machine service found. Is the daemon registered on Hypha?");
-    await server.disconnect();
-    process.exit(1);
-  }
-  return { server, machines };
-}
-async function sessionMachines() {
-  loadDotEnv();
-  const state = readDaemonState();
-  if (!state || !isDaemonAlive(state)) {
-    console.error('Daemon is not running. Start it with "svamp daemon start".');
-    process.exit(1);
-  }
-  const serverUrl = process.env.HYPHA_SERVER_URL || state.hyphaServerUrl;
-  const token = process.env.HYPHA_TOKEN;
-  if (!serverUrl) {
-    console.error('No Hypha server URL. Run "svamp login <url>" first.');
-    process.exit(1);
-  }
-  const origLog = console.log;
-  const origWarn = console.warn;
-  const origInfo = console.info;
-  const origError = console.error;
-  const stdoutWrite = process.stdout.write.bind(process.stdout);
-  const stderrWrite = process.stderr.write.bind(process.stderr);
-  const isHyphaLog = (chunk) => typeof chunk === "string" && (chunk.includes("WebSocket connection") || chunk.includes("Connection established") || chunk.includes("registering service built-in") || chunk.includes("registered service") || chunk.includes("registered all") || chunk.includes("Subscribing to client_") || chunk.includes("subscribed to client_") || chunk.includes("subscribe to client_") || chunk.includes("Cleaning up all sessions") || chunk.includes("WebSocket connection disconnected") || chunk.includes("local RPC disconnection") || chunk.includes("Timeout registering service") || chunk.includes("Failed to subscribe to client_disconnected") || chunk.includes("Timeout subscribing to client_disconnected"));
-  console.log = () => {
-  };
-  console.warn = () => {
-  };
-  console.info = () => {
-  };
-  console.error = (...args) => {
-    if (args.some((a) => isHyphaLog(a))) return;
-    origError(...args);
-  };
-  process.stdout.write = (chunk, ...args) => {
-    if (isHyphaLog(chunk)) return true;
-    return stdoutWrite(chunk, ...args);
-  };
-  process.stderr.write = (chunk, ...args) => {
-    if (isHyphaLog(chunk)) return true;
-    return stderrWrite(chunk, ...args);
-  };
-  const restoreConsole = () => {
-    console.log = origLog;
-    console.warn = origWarn;
-    console.info = origInfo;
-    console.error = origError;
-  };
-  let server;
-  try {
-    server = await connectToHypha({
-      serverUrl,
-      token,
-      name: "svamp-session-cli"
-    });
-  } catch (err) {
-    restoreConsole();
-    console.error(`Failed to connect to Hypha: ${err.message}`);
-    process.exit(1);
-  }
-  try {
-    const services = await server.listServices({ query: { type: "svamp-machine" }, include_unlisted: true, _rkwargs: true });
-    restoreConsole();
-    if (services.length === 0) {
-      console.log("No machines found.");
-      return;
-    }
-    const machines = await Promise.all(
-      services.map(async (svc) => {
-        const svcId = svc.id || svc.name;
-        try {
-          const machineSvc = await server.getService(svcId);
-          const [info, sessions] = await Promise.all([
-            machineSvc.getMachineInfo(),
-            machineSvc.listSessions()
-          ]);
-          return {
-            serviceId: svcId,
-            machineId: info.machineId || svcId,
-            displayName: info.metadata?.displayName || info.metadata?.host || "-",
-            platform: info.metadata?.platform || "-",
-            host: info.metadata?.host || "-",
-            sessions: sessions.length,
-            status: info.daemonState?.status || "unknown"
-          };
-        } catch {
-          return {
-            serviceId: svcId,
-            machineId: svcId,
-            displayName: "-",
-            platform: "-",
-            host: "-",
-            sessions: -1,
-            status: "unreachable"
-          };
-        }
-      })
-    );
-    const header = `${"MACHINE ID".padEnd(20)} ${"NAME".padEnd(20)} ${"PLATFORM".padEnd(12)} ${"HOST".padEnd(25)} ${"SESSIONS".padEnd(10)} ${"STATUS"}`;
-    console.log(header);
-    console.log("-".repeat(header.length));
-    for (const m of machines) {
-      const id = truncate(m.machineId, 18).padEnd(20);
-      const name = truncate(m.displayName, 18).padEnd(20);
-      const platform = m.platform.padEnd(12);
-      const host = truncate(m.host, 23).padEnd(25);
-      const sessions = m.sessions >= 0 ? String(m.sessions).padEnd(10) : "-".padEnd(10);
-      const status = m.status === "running" ? `\x1B[32m${m.status}\x1B[0m` : m.status === "unreachable" ? `\x1B[31m${m.status}\x1B[0m` : m.status;
-      console.log(`${id} ${name} ${platform} ${host} ${sessions} ${status}`);
-    }
-    console.log(`
-${machines.length} machine(s) found.`);
-    console.log("Use --machine <id> to target a specific machine.");
-  } finally {
-    await server.disconnect();
-  }
-}
-function resolveSessionId(sessions, partial) {
-  const exact = sessions.find((s) => s.sessionId === partial);
-  if (exact) return exact;
-  const matches = sessions.filter((s) => s.sessionId.startsWith(partial));
-  if (matches.length === 1) return matches[0];
-  if (matches.length === 0) {
-    console.error(`No session found matching: ${partial}`);
-    console.error('Run "svamp session list" to see active sessions.');
-    process.exit(1);
-  }
-  console.error(`Ambiguous session ID "${partial}". Matches:`);
-  for (const s of matches) {
-    console.error(`  ${s.sessionId}`);
-  }
-  process.exit(1);
-}
-function truncate(str, max) {
-  if (str.length <= max) return str;
-  return "..." + str.slice(str.length - max + 3);
-}
-function renderMessage(msg) {
-  const content = msg.content;
-  if (!content) return;
-  const role = content.role;
-  if (role === "user") {
-    const data = content.content;
-    let text;
-    if (typeof data === "string") {
-      try {
-        const parsed = JSON.parse(data);
-        text = parsed?.text || parsed?.content?.text || data;
-      } catch {
-        text = data;
-      }
-    } else if (data?.text) {
-      text = data.text;
-    } else if (data?.type === "text") {
-      text = data.text || "";
-    } else {
-      text = typeof data === "object" ? JSON.stringify(data) : String(data || "");
-    }
-    console.log(`\x1B[36m[user]\x1B[0m ${text}`);
-  } else if (role === "agent" || role === "assistant") {
-    const data = content.content?.data || content.content;
-    if (!data) return;
-    const getBlocks = (d) => {
-      if (d.type === "assistant") {
-        const blocks2 = d.message?.content || d.content;
-        return Array.isArray(blocks2) ? blocks2 : null;
-      }
-      return null;
-    };
-    const renderBlocks = (blocks2) => {
-      for (const block of blocks2) {
-        if (block.type === "text" && block.text) {
-          process.stdout.write(block.text);
-          if (!block.text.endsWith("\n")) process.stdout.write("\n");
-        } else if (block.type === "tool_use") {
-          const argsStr = JSON.stringify(block.input || {}).slice(0, 120);
-          console.log(`\x1B[33m[tool]\x1B[0m ${block.name}(${argsStr})`);
-        } else if (block.type === "tool_result") {
-          const resultStr = typeof block.content === "string" ? block.content : JSON.stringify(block.content || "");
-          console.log(`\x1B[90m[result]\x1B[0m ${resultStr.slice(0, 200)}${resultStr.length > 200 ? "..." : ""}`);
-        } else if (block.type === "thinking") {
-          const text = block.thinking || block.text || "";
-          if (text) console.log(`\x1B[90m[thinking] ${text.slice(0, 200)}\x1B[0m`);
-        }
-      }
-    };
-    const blocks = getBlocks(data);
-    if (blocks) {
-      renderBlocks(blocks);
-    } else if (data.type === "result") {
-      if (data.result) console.log(`\x1B[32m[done]\x1B[0m ${data.result}`);
-    } else if (data.type === "output") {
-      const inner = data.data;
-      const innerBlocks = inner ? getBlocks(inner) : null;
-      if (innerBlocks) {
-        renderBlocks(innerBlocks);
-      } else if (inner?.type === "result") {
-        if (inner.result) console.log(`\x1B[32m[done]\x1B[0m ${inner.result}`);
-      }
-    }
-  } else if (role === "session") {
-    const data = content.content?.data;
-    if (data?.type === "system" && data?.subtype === "init") {
-      console.log(`\x1B[90m[session init]\x1B[0m`);
-    }
-  }
-}
-function extractContentBlocks(blocks) {
-  const parts = [];
-  for (const block of blocks) {
-    if (block.type === "text" && block.text) {
-      parts.push(block.text);
-    } else if (block.type === "tool_use") {
-      const argsStr = JSON.stringify(block.input || {}).slice(0, 200);
-      parts.push(`[tool: ${block.name}](${argsStr})`);
-    } else if (block.type === "tool_result") {
-      const r = typeof block.content === "string" ? block.content : JSON.stringify(block.content || "");
-      parts.push(`[result: ${r.slice(0, 200)}]`);
-    } else if (block.type === "thinking") {
-      const t = block.thinking || block.text || "";
-      if (t) parts.push(`[thinking: ${t.slice(0, 200)}]`);
-    }
-  }
-  return parts;
-}
-function extractMessageText(msg) {
-  const content = msg.content;
-  if (!content) return null;
-  const role = content.role || "unknown";
-  let text = "";
-  if (role === "user") {
-    const data = content.content;
-    if (typeof data === "string") {
-      try {
-        const parsed = JSON.parse(data);
-        text = parsed?.text || parsed?.content?.text || data;
-      } catch {
-        text = data;
-      }
-    } else if (data?.text) {
-      text = data.text;
-    } else if (data?.type === "text") {
-      text = data.text || "";
-    } else {
-      text = typeof data === "object" ? JSON.stringify(data) : String(data || "");
-    }
-  } else if (role === "agent" || role === "assistant") {
-    const data = content.content?.data || content.content;
-    if (!data) return null;
-    const getBlocks = (d) => {
-      if (d.type === "assistant") {
-        const blocks2 = d.message?.content || d.content;
-        return Array.isArray(blocks2) ? blocks2 : null;
-      }
-      return null;
-    };
-    const blocks = getBlocks(data);
-    if (blocks) {
-      text = extractContentBlocks(blocks).join("\n");
-    } else if (data.type === "result") {
-      text = data.result || "";
-    } else if (data.type === "output") {
-      const inner = data.data;
-      const innerBlocks = inner ? getBlocks(inner) : null;
-      if (innerBlocks) {
-        text = extractContentBlocks(innerBlocks).join("\n");
-      } else if (inner?.type === "result") {
-        text = inner.result || "";
-      }
-    }
-  } else if (role === "session") {
-    text = "[session event]";
-  }
-  return {
-    id: msg.id || "",
-    seq: msg.seq || 0,
-    role,
-    text,
-    createdAt: msg.createdAt || 0
-  };
-}
-async function waitForIdle(machine, sessionId, timeoutMs) {
-  const pollInterval = 2e3;
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    const activity = await machine.sessionRPC(sessionId, "getActivityState", {});
-    if (activity?.pendingPermissions?.length > 0) {
-      return { idle: false, pendingPermissions: activity.pendingPermissions };
-    }
-    if (activity && !activity.thinking) {
-      return { idle: true };
-    }
-    await new Promise((r) => setTimeout(r, pollInterval));
-  }
-  throw new Error("Timeout waiting for agent to become idle");
-}
-async function waitForBusyThenIdle(machine, sessionId, timeoutMs = 3e5, busyTimeoutMs = 1e4) {
-  const pollInterval = 2e3;
-  const deadline = Date.now() + timeoutMs;
-  const busyDeadline = Date.now() + busyTimeoutMs;
-  let sawBusy = false;
-  while (Date.now() < deadline) {
-    const activity = await machine.sessionRPC(sessionId, "getActivityState", {});
-    if (activity?.pendingPermissions?.length > 0) {
-      return { idle: false, pendingPermissions: activity.pendingPermissions };
-    }
-    const isBusy = activity?.thinking === true;
-    if (isBusy) {
-      sawBusy = true;
-    }
-    if (activity && !activity.active) {
-      return { idle: true };
-    }
-    if (sawBusy && !isBusy) {
-      return { idle: true };
-    }
-    if (!sawBusy && Date.now() > busyDeadline) {
-      return { idle: true };
-    }
-    await new Promise((r) => setTimeout(r, pollInterval));
-  }
-  throw new Error("Timeout waiting for agent to become idle");
-}
-async function sessionList(machineId, opts) {
-  if (machineId) {
-    const { server, machine } = await connectAndGetMachine(machineId);
-    try {
-      await listSessionsFromMachines(server, [machine], opts);
-    } finally {
-      await server.disconnect();
-    }
-  } else {
-    const { server, machines } = await connectAndGetAllMachines();
-    try {
-      await listSessionsFromMachines(server, machines, opts);
-    } finally {
-      await server.disconnect();
-    }
-  }
-}
-async function listSessionsFromMachines(_server, machines, opts) {
-  const allSessions = [];
-  const machineResults = await Promise.allSettled(
-    machines.map(async (machine) => {
-      const [info, sessions] = await Promise.all([
-        machine.getMachineInfo(),
-        machine.listSessions()
-      ]);
-      const host = info.metadata?.displayName || info.metadata?.host || info.machineId;
-      for (const s of sessions) {
-        s.machineHost = host;
-      }
-      return sessions;
-    })
-  );
-  for (const r of machineResults) {
-    if (r.status === "fulfilled") allSessions.push(...r.value);
-  }
-  const filtered = opts?.active ? allSessions.filter((s) => s.active) : allSessions;
-  if (filtered.length === 0) {
-    if (opts?.json) {
-      console.log(formatJson([]));
-    } else {
-      console.log("No active sessions.");
-    }
-    return;
-  }
-  const enriched = filtered.map((s) => {
-    const m = s.metadata || {};
-    return {
-      ...s,
-      flavor: m.flavor || "claude",
-      name: m.name || "",
-      path: m.path || s.directory || "",
-      host: m.host || s.machineHost || ""
-    };
-  });
-  if (opts?.json) {
-    console.log(formatJson(enriched.map((s) => ({
-      sessionId: s.sessionId,
-      agent: s.flavor,
-      name: s.name,
-      path: s.path,
-      host: s.host,
-      active: s.active,
-      directory: s.directory
-    }))));
-  } else {
-    const header = `${"ID".padEnd(10)} ${"AGENT".padEnd(10)} ${"STATUS".padEnd(9)} ${"NAME".padEnd(25)} ${"MACHINE".padEnd(18)} ${"DIRECTORY".padEnd(35)}`;
-    console.log(header);
-    console.log("-".repeat(header.length));
-    for (const s of enriched) {
-      const id = s.sessionId.slice(0, 8);
-      const agent = (s.flavor || "claude").padEnd(10);
-      const status = s.active ? "\x1B[32mactive\x1B[0m  " : "\x1B[90minactive\x1B[0m";
-      const name = truncate(s.name || "-", 25).padEnd(25);
-      const machine = truncate(s.host || "-", 16).padEnd(18);
-      const dir = truncate(s.directory || "-", 33).padEnd(35);
-      console.log(`${id.padEnd(10)} ${agent} ${status} ${name} ${machine} ${dir}`);
-    }
-  }
-}
-const WORKTREE_ADJECTIVES = [
-  "clever",
-  "happy",
-  "swift",
-  "bright",
-  "calm",
-  "bold",
-  "quiet",
-  "brave",
-  "wise",
-  "eager",
-  "gentle",
-  "quick",
-  "sharp",
-  "smooth",
-  "fresh"
-];
-const WORKTREE_NOUNS = [
-  "ocean",
-  "forest",
-  "cloud",
-  "star",
-  "river",
-  "mountain",
-  "valley",
-  "bridge",
-  "beacon",
-  "harbor",
-  "garden",
-  "meadow",
-  "canyon",
-  "island",
-  "desert"
-];
-function generateWorktreeName() {
-  const adj = WORKTREE_ADJECTIVES[Math.floor(Math.random() * WORKTREE_ADJECTIVES.length)];
-  const noun = WORKTREE_NOUNS[Math.floor(Math.random() * WORKTREE_NOUNS.length)];
-  return `${adj}-${noun}`;
-}
-function createWorktree(baseDir) {
-  const absBase = resolve(baseDir);
-  const marker = "/.dev/worktree/";
-  const idx = absBase.indexOf(marker);
-  const projectRoot = idx !== -1 ? absBase.substring(0, idx) : absBase;
-  try {
-    execSync("git rev-parse --git-dir", { cwd: projectRoot, stdio: "pipe" });
-  } catch {
-    throw new Error(`Not a git repository: ${projectRoot}`);
-  }
-  const name = generateWorktreeName();
-  const relPath = `.dev/worktree/${name}`;
-  try {
-    execSync(`git worktree add -b ${name} ${relPath}`, { cwd: projectRoot, stdio: "pipe" });
-  } catch (err) {
-    for (let i = 2; i <= 4; i++) {
-      const suffixed = `${name}-${i}`;
-      const suffixedPath = `.dev/worktree/${suffixed}`;
-      try {
-        execSync(`git worktree add -b ${suffixed} ${suffixedPath}`, { cwd: projectRoot, stdio: "pipe" });
-        return { path: join(projectRoot, suffixedPath), branch: suffixed };
-      } catch {
-        continue;
-      }
-    }
-    throw new Error(`Failed to create worktree: ${err.stderr?.toString() || err.message}`);
-  }
-  return { path: join(projectRoot, relPath), branch: name };
-}
-function parseShareArg(arg) {
-  const parts = arg.split(":");
-  const email = parts[0];
-  const role = parts[1] || "interact";
-  if (!["view", "interact", "admin"].includes(role)) {
-    throw new Error(`Invalid role "${role}" in --share ${arg}. Must be view, interact, or admin.`);
-  }
-  return { email, role };
-}
-async function sessionSpawn(agent, directory, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    let sharing;
-    if (opts?.share?.length) {
-      sharing = {
-        enabled: true,
-        owner: "",
-        // will be auto-set by machine service from Hypha context
-        allowedUsers: opts.share.map((s) => ({
-          email: s.email,
-          role: s.role || "interact",
-          addedAt: Date.now(),
-          addedBy: "cli"
-        }))
-      };
-    }
-    let securityContext;
-    if (opts?.securityContextPath) {
-      const configPath = resolve(opts.securityContextPath);
-      const config = loadSecurityContextConfig(configPath);
-      securityContext = resolveSecurityContext(config, void 0);
-    }
-    if (opts?.denyRead?.length || opts?.allowWrite?.length || opts?.denyNetwork || opts?.allowDomain?.length) {
-      const flagCtx = buildSecurityContextFromFlags({
-        denyRead: opts.denyRead,
-        allowWrite: opts.allowWrite,
-        denyNetwork: opts.denyNetwork,
-        allowDomain: opts.allowDomain
-      });
-      securityContext = mergeSecurityContexts(securityContext, flagCtx);
-    }
-    const forceIsolation = opts?.isolate || !!securityContext;
-    if (securityContext?.filesystem?.allowWrite?.length) {
-      const absDir = resolve(directory);
-      const writePaths = securityContext.filesystem.allowWrite;
-      const dirCovered = writePaths.some((p) => absDir.startsWith(resolve(p)) || resolve(p).startsWith(absDir));
-      if (!dirCovered) {
-        console.warn(`Warning: Working directory ${absDir} is not covered by allowWrite paths: ${writePaths.join(", ")}`);
-        console.warn(`  The agent may not be able to write files in the working directory.`);
-      }
-    }
-    if (opts?.worktree) {
-      try {
-        const wt = createWorktree(directory);
-        console.log(`Created worktree: ${wt.branch} \u2192 ${wt.path}`);
-        directory = wt.path;
-      } catch (err) {
-        console.error(`Failed to create worktree: ${err.message}`);
-        process.exit(1);
-      }
-    }
-    let effectiveParentSessionId = opts?.parentSessionId || process.env.SVAMP_SESSION_ID || void 0;
-    if (effectiveParentSessionId) {
-      try {
-        const sessions = await machine.listSessions();
-        if (opts?.parentSessionId) {
-          const match = resolveSessionId(sessions, effectiveParentSessionId);
-          effectiveParentSessionId = match.sessionId;
-        } else {
-          const found = sessions.find((s) => s.sessionId === effectiveParentSessionId);
-          if (!found) throw new Error("not found");
-        }
-      } catch (err) {
-        const source = opts?.parentSessionId ? "--parent" : "SVAMP_SESSION_ID";
-        console.error(`Error: Parent session ${effectiveParentSessionId} not found (from ${source}).`);
-        process.exit(1);
-      }
-    }
-    console.log(`Spawning ${agent} session in ${directory}...`);
-    if (effectiveParentSessionId) {
-      console.log(`Parent session: ${effectiveParentSessionId}${!opts?.parentSessionId ? " (auto-detected from SVAMP_SESSION_ID)" : ""}`);
-    }
-    if (opts?.tags?.length) {
-      console.log(`Tags: ${opts.tags.join(", ")}`);
-    }
-    if (forceIsolation) {
-      console.log(`Isolation: enabled (workspace: ${resolve(directory)})`);
-    }
-    if (securityContext) {
-      console.log(`Security context: ${JSON.stringify(securityContext, null, 2)}`);
-    }
-    if (sharing) {
-      console.log(`Sharing with: ${sharing.allowedUsers.map((u) => `${u.email} (${u.role})`).join(", ")}`);
-    }
-    const result = await machine.spawnSession({
-      directory,
-      agent,
-      sharing,
-      securityContext,
-      forceIsolation,
-      tags: opts?.tags,
-      parentSessionId: effectiveParentSessionId,
-      permissionMode: opts?.permissionMode
-    });
-    if (result.type === "success") {
-      console.log(`Session started: ${result.sessionId}`);
-      if (result.message) console.log(`  ${result.message}`);
-      const effectivePermMode = opts?.permissionMode || "default";
-      if (effectivePermMode !== "bypassPermissions") {
-        console.log(`\x1B[33m\u26A0 Permission mode: ${effectivePermMode}. Agent may pause for tool approval.\x1B[0m`);
-        console.log(`\x1B[33m  Use -p bypassPermissions to run without approval prompts.\x1B[0m`);
-      }
-      if (opts?.message && result.sessionId) {
-        const svc = getSessionProxy(machine, result.sessionId);
-        const sendResult = await svc.sendMessage(
-          JSON.stringify({
-            role: "user",
-            content: { type: "text", text: opts.message },
-            meta: { sentFrom: "svamp-cli" }
-          })
-        );
-        console.log(`Message sent (seq: ${sendResult.seq})`);
-        if (opts.wait) {
-          console.log("Waiting for agent to become idle...");
-          await waitForBusyThenIdle(machine, result.sessionId);
-          console.log("Agent is idle.");
-        }
-      }
-    } else if (result.type === "requestToApproveDirectoryCreation") {
-      console.error(`Directory ${result.directory} does not exist. Create it first or use an existing directory.`);
-      process.exit(1);
-    } else {
-      console.error(`Failed: ${result.errorMessage || "Unknown error"}`);
-      process.exit(1);
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionStop(sessionId, machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const success = await machine.stopSession(match.sessionId);
-    if (success) {
-      console.log(`Session ${match.sessionId.slice(0, 8)} stopped.`);
-    } else {
-      console.error("Failed to stop session (not found on daemon).");
-      process.exit(1);
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionInfo(sessionId, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const fullId = match.sessionId;
-    let metadata = {};
-    let activity = {};
-    try {
-      const svc = getSessionProxy(machine, fullId);
-      const metaResult = await svc.getMetadata();
-      metadata = metaResult.metadata || {};
-      activity = await svc.getActivityState();
-    } catch {
-    }
-    const pendingPermissions = activity.pendingPermissions || [];
-    const statusData = {
-      sessionId: fullId,
-      flavor: metadata.flavor || "claude",
-      name: metadata.name || "",
-      path: metadata.path || match.directory || "",
-      host: metadata.host || "",
-      lifecycleState: metadata.lifecycleState || "unknown",
-      active: activity.active ?? false,
-      thinking: activity.thinking ?? false,
-      startedBy: metadata.startedBy || match.startedBy || "",
-      summary: metadata.summary?.text || void 0,
-      claudeSessionId: metadata.claudeSessionId || void 0,
-      sessionLink: metadata.sessionLink?.url || void 0,
-      tags: metadata.tags?.length ? metadata.tags : void 0,
-      parentSessionId: metadata.parentSessionId || void 0,
-      pendingPermissions: pendingPermissions.length > 0 ? pendingPermissions : void 0,
-      ralphLoop: metadata.ralphLoop || void 0
-    };
-    if (opts?.json) {
-      console.log(formatJson(statusData));
-    } else {
-      console.log(formatSessionStatus(statusData));
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionMessages(sessionId, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    const afterSeq = opts?.after ?? 0;
-    const apiLimit = opts?.limit ?? 1e3;
-    const { messages } = await svc.getMessages(afterSeq, apiLimit);
-    const toShow = opts?.last ? messages.slice(-opts.last) : messages;
-    if (toShow.length === 0) {
-      if (opts?.json) {
-        console.log(formatJson([]));
-      } else {
-        console.log("No messages yet.");
-      }
-      return;
-    }
-    if (opts?.json && opts?.raw) {
-      console.log(formatJson(toShow));
-    } else if (opts?.json) {
-      const formatted = [];
-      for (const msg of toShow) {
-        const extracted = extractMessageText(msg);
-        if (extracted) {
-          formatted.push(extracted);
-        }
-      }
-      formatted.sort((a, b) => a.createdAt - b.createdAt);
-      console.log(formatJson(formatted));
-    } else {
-      for (const msg of toShow) {
-        renderMessage(msg);
-      }
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionApprove(sessionId, requestId, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    if (requestId) {
-      const activity = await svc.getActivityState();
-      const pending = activity.pendingPermissions || [];
-      const matched = pending.find((p) => p.id === requestId || p.id.startsWith(requestId));
-      if (!matched) {
-        console.error(`No pending permission matching "${requestId}".`);
-        process.exitCode = 1;
-        return;
-      }
-      await svc.permissionResponse({ id: matched.id, approved: true });
-      if (opts?.json) {
-        console.log(formatJson({ sessionId: fullId, approved: 1, requestIds: [matched.id] }));
-      } else {
-        console.log(`Approved: ${matched.tool} [${matched.id.slice(0, 8)}]`);
-      }
-    } else {
-      const activity = await svc.getActivityState();
-      const pending = activity.pendingPermissions || [];
-      if (pending.length === 0) {
-        if (opts?.json) {
-          console.log(formatJson({ sessionId: fullId, approved: 0, requestIds: [] }));
-        } else {
-          console.error("No pending permission requests.");
-        }
-        process.exitCode = 1;
-        return;
-      }
-      const approvedIds = [];
-      for (const p of pending) {
-        await svc.permissionResponse({ id: p.id, approved: true });
-        approvedIds.push(p.id);
-      }
-      if (opts?.json) {
-        console.log(formatJson({ sessionId: fullId, approved: approvedIds.length, requestIds: approvedIds }));
-      } else {
-        console.log(`Approved ${approvedIds.length} permission(s).`);
-      }
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionDeny(sessionId, requestId, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    if (requestId) {
-      const activity = await svc.getActivityState();
-      const pending = activity.pendingPermissions || [];
-      const matched = pending.find((p) => p.id === requestId || p.id.startsWith(requestId));
-      if (!matched) {
-        console.error(`No pending permission matching "${requestId}".`);
-        process.exitCode = 1;
-        return;
-      }
-      await svc.permissionResponse({ id: matched.id, approved: false });
-      if (opts?.json) {
-        console.log(formatJson({ sessionId: fullId, denied: 1, requestIds: [matched.id] }));
-      } else {
-        console.log(`Denied: ${matched.tool} [${matched.id.slice(0, 8)}]`);
-      }
-    } else {
-      const activity = await svc.getActivityState();
-      const pending = activity.pendingPermissions || [];
-      if (pending.length === 0) {
-        if (opts?.json) {
-          console.log(formatJson({ sessionId: fullId, denied: 0, requestIds: [] }));
-        } else {
-          console.error("No pending permission requests.");
-        }
-        process.exitCode = 1;
-        return;
-      }
-      const deniedIds = [];
-      for (const p of pending) {
-        await svc.permissionResponse({ id: p.id, approved: false });
-        deniedIds.push(p.id);
-      }
-      if (opts?.json) {
-        console.log(formatJson({ sessionId: fullId, denied: deniedIds.length, requestIds: deniedIds }));
-      } else {
-        console.log(`Denied ${deniedIds.length} permission(s).`);
-      }
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionAttach(sessionId, machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  const sessions = await machine.listSessions();
-  const match = resolveSessionId(sessions, sessionId);
-  const fullId = match.sessionId;
-  let svc;
-  try {
-    svc = getSessionProxy(machine, fullId);
-  } catch (err) {
-    console.error(`Could not find session service: ${err.message}`);
-    await server.disconnect();
-    process.exit(1);
-  }
-  const { metadata } = await svc.getMetadata();
-  const flavor = metadata?.flavor || "claude";
-  const name = metadata?.name || fullId.slice(0, 8);
-  console.log(`Attached to ${flavor} session "${name}". Commands: /quit /abort /kill
-`);
-  const seenMessageIds = /* @__PURE__ */ new Set();
-  let replayDone = false;
-  await svc.registerListener({
-    onUpdate: (update) => {
-      if (update.type === "new-message") {
-        const msg = update.message;
-        if (!msg?.id) return;
-        if (seenMessageIds.has(msg.id)) return;
-        seenMessageIds.add(msg.id);
-        if (!replayDone) return;
-        renderMessage(msg);
-      } else if (update.type === "activity") {
-        if (!replayDone) return;
-        if (update.thinking) {
-          process.stdout.write("\x1B[90m[thinking...]\x1B[0m\r");
-        } else if (!update.thinking) {
-          process.stdout.write("\n> ");
-        }
-      } else if (update.type === "update-session") ;
-    }
-  });
-  await new Promise((r) => setTimeout(r, 500));
-  replayDone = true;
-  console.log(`\x1B[90m(${seenMessageIds.size} messages in history)\x1B[0m`);
-  process.stdout.write("> ");
-  const readline = await import('readline');
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout,
-    terminal: true
-  });
-  rl.on("line", async (line) => {
-    const trimmed = line.trim();
-    if (!trimmed) {
-      process.stdout.write("> ");
-      return;
-    }
-    if (trimmed === "/quit" || trimmed === "/detach") {
-      console.log("Detaching (session continues running)...");
-      rl.close();
-      await server.disconnect();
-      process.exit(0);
-    }
-    if (trimmed === "/abort" || trimmed === "/cancel") {
-      try {
-        await svc.abort();
-        console.log("Abort sent.");
-      } catch (err) {
-        console.error(`Abort failed: ${err.message}`);
-      }
-      process.stdout.write("> ");
-      return;
-    }
-    if (trimmed === "/kill") {
-      try {
-        await svc.killSession();
-        console.log("Session killed.");
-      } catch (err) {
-        console.error(`Kill failed: ${err.message}`);
-      }
-      rl.close();
-      await server.disconnect();
-      process.exit(0);
-    }
-    if (trimmed === "/info") {
-      try {
-        const { metadata: m } = await svc.getMetadata();
-        const act = await svc.getActivityState();
-        console.log(`  Agent: ${m?.flavor || "claude"}, State: ${m?.lifecycleState || "?"}, Active: ${act?.active}, Thinking: ${act?.thinking}`);
-      } catch (err) {
-        console.error(`Info failed: ${err.message}`);
-      }
-      process.stdout.write("> ");
-      return;
-    }
-    try {
-      await svc.sendMessage(
-        JSON.stringify({
-          role: "user",
-          content: { type: "text", text: trimmed }
-        })
-      );
-    } catch (err) {
-      console.error(`Send failed: ${err.message}`);
-      process.stdout.write("> ");
-    }
-  });
-  rl.on("close", async () => {
-    await server.disconnect();
-    process.exit(0);
-  });
-  process.on("SIGINT", async () => {
-    console.log("\nDetaching (session continues running)...");
-    rl.close();
-    await server.disconnect();
-    process.exit(0);
-  });
-}
-async function sessionSend(sessionId, message, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const fullId = match.sessionId;
-    const { randomUUID } = await import('node:crypto');
-    const inboxMessage = {
-      messageId: randomUUID(),
-      body: message,
-      timestamp: Date.now(),
-      read: false,
-      from: `cli:${os.userInfo().username}`,
-      to: fullId,
-      subject: opts?.subject,
-      urgency: opts?.urgency || "urgent"
-    };
-    const result = await machine.sessionRPC(fullId, "sendInboxMessage", { message: inboxMessage });
-    let waitResult;
-    if (opts?.wait) {
-      const timeoutMs = (opts.timeout || 300) * 1e3;
-      waitResult = await waitForBusyThenIdle(machine, fullId, timeoutMs);
-    }
-    if (waitResult?.pendingPermissions?.length) {
-      if (opts?.json) {
-        console.log(formatJson({
-          sessionId: fullId,
-          message,
-          sent: true,
-          messageId: result.messageId,
-          status: "permission-pending",
-          pendingPermissions: waitResult.pendingPermissions
-        }));
-      } else {
-        console.log(`Message sent to session ${fullId.slice(0, 8)} (id: ${result.messageId.slice(0, 8)})`);
-        console.log("Agent is waiting for permission approval:");
-        for (const p of waitResult.pendingPermissions) {
-          const argsStr = JSON.stringify(p.arguments || {}).slice(0, 120);
-          console.log(`  [${p.id.slice(0, 8)}] ${p.tool}(${argsStr})`);
-        }
-        console.log(`
-Use: svamp session approve ${fullId.slice(0, 8)}`);
-      }
-      process.exitCode = 2;
-    } else if (opts?.json) {
-      console.log(formatJson({
-        sessionId: fullId,
-        message,
-        sent: true,
-        messageId: result.messageId,
-        waited: !!opts.wait,
-        status: opts.wait ? "idle" : "sent"
-      }));
-    } else {
-      console.log(`Message sent to session ${fullId.slice(0, 8)} (id: ${result.messageId.slice(0, 8)})`);
-      if (opts?.wait) {
-        console.log("Agent is idle.");
-      }
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionWait(sessionId, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionId);
-    const fullId = match.sessionId;
-    const timeoutMs = (opts?.timeout || 300) * 1e3;
-    const result = await waitForIdle(machine, fullId, timeoutMs);
-    if (result.pendingPermissions?.length) {
-      if (opts?.json) {
-        console.log(formatJson({
-          sessionId: fullId,
-          status: "permission-pending",
-          pendingPermissions: result.pendingPermissions
-        }));
-      } else {
-        console.log(`Session ${fullId.slice(0, 8)} is waiting for permission approval:`);
-        for (const p of result.pendingPermissions) {
-          const argsStr = JSON.stringify(p.arguments || {}).slice(0, 120);
-          console.log(`  [${p.id.slice(0, 8)}] ${p.tool}(${argsStr})`);
-        }
-        console.log(`
-Use: svamp session approve ${fullId.slice(0, 8)}`);
-      }
-      process.exitCode = 2;
-    } else {
-      if (opts?.json) {
-        console.log(formatJson({ sessionId: fullId, status: "idle" }));
-      } else {
-        console.log(`Session ${fullId.slice(0, 8)} is idle.`);
-      }
-    }
-  } catch (err) {
-    const msg = err instanceof Error ? err.message : String(err);
-    console.error(msg);
-    process.exitCode = 1;
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionShare(sessionIdPartial, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    if (opts.list) {
-      const metaResult = await svc.getMetadata();
-      const sharing = metaResult.metadata?.sharing;
-      if (!sharing || !sharing.enabled) {
-        console.log("Sharing is not enabled for this session.");
-        return;
-      }
-      console.log(`Owner: ${sharing.owner}`);
-      if (sharing.publicAccess) {
-        console.log(`Public access: ${sharing.publicAccess} (anyone with the link)`);
-      }
-      if (sharing.allowedUsers.length === 0) {
-        console.log("No shared users.");
-      } else {
-        console.log("Shared users:");
-        for (const u of sharing.allowedUsers) {
-          console.log(`  ${u.email.padEnd(30)} ${u.role.padEnd(10)} (added ${new Date(u.addedAt).toISOString().slice(0, 10)})`);
-        }
-      }
-      const secCtx = metaResult.metadata?.securityContext;
-      if (secCtx) {
-        console.log(`
-Security context:`);
-        console.log(JSON.stringify(secCtx, null, 2));
-      }
-      return;
-    }
-    if (opts.add) {
-      const { email, role } = parseShareArg(opts.add);
-      const metaResult = await svc.getMetadata();
-      let sharing = metaResult.metadata?.sharing || {
-        enabled: true,
-        owner: "",
-        allowedUsers: []
-      };
-      sharing.enabled = true;
-      sharing.allowedUsers = sharing.allowedUsers.filter(
-        (u) => u.email.toLowerCase() !== email.toLowerCase()
-      );
-      sharing.allowedUsers.push({
-        email,
-        role,
-        addedAt: Date.now(),
-        addedBy: "cli"
-      });
-      await svc.updateSharing(sharing);
-      console.log(`Shared session ${fullId.slice(0, 8)} with ${email} (${role}).`);
-      return;
-    }
-    if (opts.remove) {
-      const email = opts.remove;
-      const metaResult = await svc.getMetadata();
-      const sharing = metaResult.metadata?.sharing;
-      if (!sharing) {
-        console.error("Sharing is not enabled for this session.");
-        process.exit(1);
-      }
-      const before = sharing.allowedUsers.length;
-      sharing.allowedUsers = sharing.allowedUsers.filter(
-        (u) => u.email.toLowerCase() !== email.toLowerCase()
-      );
-      if (sharing.allowedUsers.length === before) {
-        console.error(`User ${email} is not in the shared users list.`);
-        process.exit(1);
-      }
-      await svc.updateSharing(sharing);
-      console.log(`Removed ${email} from session ${fullId.slice(0, 8)}.`);
-      return;
-    }
-    if (opts.public !== void 0) {
-      const value = opts.public.toLowerCase();
-      if (value === "off" || value === "none" || value === "no") {
-        const metaResult = await svc.getMetadata();
-        const sharing = metaResult.metadata?.sharing || {
-          enabled: true,
-          owner: "",
-          allowedUsers: []
-        };
-        sharing.publicAccess = null;
-        await svc.updateSharing(sharing);
-        console.log(`Public access disabled for session ${fullId.slice(0, 8)}.`);
-      } else if (value === "view" || value === "interact") {
-        const metaResult = await svc.getMetadata();
-        const sharing = metaResult.metadata?.sharing || {
-          enabled: true,
-          owner: "",
-          allowedUsers: []
-        };
-        sharing.enabled = true;
-        sharing.publicAccess = value;
-        await svc.updateSharing(sharing);
-        console.log(`Public access set to '${value}' for session ${fullId.slice(0, 8)}.`);
-      } else {
-        console.error("Invalid --public value. Use: view, interact, or off");
-        process.exit(1);
-      }
-      return;
-    }
-    console.error("Usage: svamp session share <id> --add <email>[:<role>] | --remove <email> | --list | --public <view|interact|off>");
-    process.exit(1);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function machineShare(machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    if (opts.list) {
-      const info = await machine.getMachineInfo();
-      const sharing = info.metadata?.sharing;
-      if (!sharing || !sharing.enabled) {
-        console.log("Sharing is not enabled for this machine.");
-      } else {
-        console.log(`Owner: ${sharing.owner}`);
-        if (sharing.allowedUsers.length === 0) {
-          console.log("No shared users.");
-        } else {
-          console.log("Shared users:");
-          for (const u of sharing.allowedUsers) {
-            console.log(`  ${u.email.padEnd(30)} ${u.role.padEnd(10)} (added ${new Date(u.addedAt).toISOString().slice(0, 10)})`);
-          }
-        }
-      }
-      const iso = info.metadata?.isolationCapabilities;
-      if (iso) {
-        console.log(`
-Isolation: ${iso.available.length > 0 ? iso.available.join(", ") : "none available"} (preferred: ${iso.preferred || "none"})`);
-      }
-      return;
-    }
-    if (opts.showConfig) {
-      const result = await machine.getSecurityContextConfig();
-      const config = result?.securityContextConfig;
-      if (!config) {
-        console.log("No security context config set for this machine.");
-      } else {
-        console.log(JSON.stringify(config, null, 2));
-      }
-      return;
-    }
-    if (opts.configPath) {
-      const configPath = resolve(opts.configPath);
-      const config = loadSecurityContextConfig(configPath);
-      await machine.updateSecurityContextConfig(config);
-      const userCount = config.users ? Object.keys(config.users).length : 0;
-      console.log(`Security context config applied to machine.`);
-      console.log(`  Default context: ${config.default ? "yes" : "none"}`);
-      console.log(`  User-specific entries: ${userCount}`);
-      if (config.users) {
-        for (const email of Object.keys(config.users)) {
-          const ctx = config.users[email];
-          console.log(`    ${email}: role=${ctx.role || "default"}`);
-        }
-      }
-      return;
-    }
-    if (opts.add) {
-      const { email, role } = parseShareArg(opts.add);
-      const info = await machine.getMachineInfo();
-      let sharing = info.metadata?.sharing || {
-        enabled: true,
-        owner: "",
-        allowedUsers: []
-      };
-      sharing.enabled = true;
-      sharing.allowedUsers = sharing.allowedUsers.filter(
-        (u) => u.email.toLowerCase() !== email.toLowerCase()
-      );
-      sharing.allowedUsers.push({
-        email,
-        role,
-        addedAt: Date.now(),
-        addedBy: "cli"
-      });
-      await machine.updateSharing(sharing);
-      console.log(`Shared machine with ${email} (${role}).`);
-      return;
-    }
-    if (opts.remove) {
-      const email = opts.remove;
-      const info = await machine.getMachineInfo();
-      const sharing = info.metadata?.sharing;
-      if (!sharing) {
-        console.error("Sharing is not enabled for this machine.");
-        process.exit(1);
-      }
-      const before = sharing.allowedUsers.length;
-      sharing.allowedUsers = sharing.allowedUsers.filter(
-        (u) => u.email.toLowerCase() !== email.toLowerCase()
-      );
-      if (sharing.allowedUsers.length === before) {
-        console.error(`User ${email} is not in the shared users list.`);
-        process.exit(1);
-      }
-      await machine.updateSharing(sharing);
-      console.log(`Removed ${email} from machine sharing.`);
-      return;
-    }
-    console.error("Usage: svamp machine share --add <email>[:<role>] | --remove <email> | --list | --config <path> | --show-config");
-    process.exit(1);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function machineExec(machineId, command, cwd) {
-  if (!command) {
-    console.error("Usage: svamp machine exec <command> [--cwd <path>]");
-    process.exit(1);
-  }
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const result = await machine.bash(command, cwd || void 0);
-    if (result.stdout) process.stdout.write(result.stdout);
-    if (result.stderr) process.stderr.write(result.stderr);
-    process.exit(result.exitCode);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function machineInfo(machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const info = await machine.getMachineInfo();
-    const meta = info.metadata || {};
-    const ds = info.daemonState || {};
-    console.log(`Machine: ${info.machineId}`);
-    if (meta.hostname) console.log(`Host:    ${meta.hostname}`);
-    if (meta.platform) console.log(`OS:      ${meta.platform} ${meta.arch || ""}`);
-    console.log(`Status:  ${ds.status || "unknown"}`);
-    const iso = meta.isolationCapabilities;
-    if (iso) {
-      console.log(`Isolation: ${iso.available?.length > 0 ? iso.available.join(", ") : "none"} (preferred: ${iso.preferred || "none"})`);
-    }
-    const sessions = await machine.listSessions();
-    console.log(`Sessions: ${Array.isArray(sessions) ? sessions.length : 0} active`);
-    const sharing = meta.sharing;
-    if (sharing?.enabled) {
-      console.log(`Sharing: enabled (owner: ${sharing.owner}, ${sharing.allowedUsers?.length || 0} users)`);
-    } else {
-      console.log(`Sharing: disabled`);
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function machineLs(machineId, path, showHidden) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const result = await machine.listDirectory(path || "", { showHidden: showHidden || false });
-    if (!result.success) {
-      console.error(`Error: ${result.error || "Failed to list directory"}`);
-      process.exit(1);
-    }
-    console.log(`${result.path}/`);
-    for (const entry of result.entries || []) {
-      const prefix = entry.type === "directory" ? "d " : "  ";
-      console.log(`${prefix}${entry.name}${entry.type === "directory" ? "/" : ""}`);
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionRalphStart(sessionIdPartial, task, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    const { metadata } = await svc.getMetadata();
-    if (metadata?.ralphLoop?.active) {
-      console.error(`Ralph loop is already active (iteration ${metadata.ralphLoop.currentIteration}). Cancel it first with: svamp session ralph-cancel ${sessionIdPartial}`);
-      process.exit(1);
-    }
-    const completionPromise = opts?.completionPromise || "DONE";
-    const maxIterations = opts?.maxIterations ?? 0;
-    const cooldownSeconds = opts?.cooldownSeconds ?? 1;
-    const contextMode = opts?.contextMode || void 0;
-    await svc.updateConfig({
-      ralph_loop: {
-        task,
-        completion_promise: completionPromise,
-        max_iterations: maxIterations,
-        cooldown_seconds: cooldownSeconds,
-        ...contextMode ? { context_mode: contextMode } : {}
-      }
-    });
-    console.log(`Ralph loop started on session ${fullId.slice(0, 8)}`);
-    console.log(`  Task: ${task.slice(0, 100)}${task.length > 100 ? "..." : ""}`);
-    console.log(`  Completion promise: ${completionPromise}`);
-    console.log(`  Max iterations: ${maxIterations > 0 ? maxIterations : "unlimited"}`);
-    if (contextMode) console.log(`  Context mode: ${contextMode}`);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionRalphCancel(sessionIdPartial, machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    const { metadata } = await svc.getMetadata();
-    if (!metadata?.ralphLoop?.active) {
-      console.log("No active Ralph loop on this session.");
-      return;
-    }
-    const iteration = metadata.ralphLoop.currentIteration;
-    await svc.updateConfig({ ralph_loop: null });
-    console.log(`Ralph loop cancelled on session ${fullId.slice(0, 8)} (was at iteration ${iteration})`);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionRalphStatus(sessionIdPartial, machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const svc = getSessionProxy(machine, fullId);
-    const { metadata } = await svc.getMetadata();
-    const ralph = metadata?.ralphLoop;
-    if (!ralph || !ralph.active) {
-      console.log("No Ralph loop configured on this session.");
-      return;
-    }
-    console.log(`Ralph loop on session ${fullId.slice(0, 8)}:`);
-    console.log(`  Active: ${ralph.active}`);
-    console.log(`  Task: ${ralph.task?.slice(0, 100)}${ralph.task?.length > 100 ? "..." : ""}`);
-    console.log(`  Completion promise: ${ralph.completionPromise}`);
-    console.log(`  Iteration: ${ralph.currentIteration}${ralph.maxIterations > 0 ? `/${ralph.maxIterations}` : " (unlimited)"}`);
-    console.log(`  Started at: ${ralph.startedAt}`);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionInboxSend(sessionIdPartial, body, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const { randomUUID } = await import('node:crypto');
-    const message = {
-      messageId: randomUUID(),
-      body,
-      timestamp: Date.now(),
-      read: false,
-      from: `cli:${os.userInfo().username}`,
-      to: fullId,
-      subject: opts?.subject,
-      urgency: opts?.urgency || "normal",
-      replyTo: opts?.replyTo,
-      threadId: opts?.threadId
-    };
-    const result = await machine.sessionRPC(fullId, "sendInboxMessage", { message });
-    if (opts?.json) {
-      console.log(formatJson({ sessionId: fullId, messageId: result.messageId, sent: true }));
-    } else {
-      console.log(`Inbox message sent to session ${fullId.slice(0, 8)} (id: ${result.messageId.slice(0, 8)})`);
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionInboxList(sessionIdPartial, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const result = await machine.sessionRPC(fullId, "getInbox", { opts: { unread: opts?.unread, limit: opts?.limit } });
-    const messages = result.messages;
-    if (opts?.json) {
-      console.log(formatJson({ sessionId: fullId, messages }));
-      return;
-    }
-    if (messages.length === 0) {
-      console.log(`Inbox for session ${fullId.slice(0, 8)} is empty.`);
-      return;
-    }
-    const unreadCount = messages.filter((m) => !m.read).length;
-    console.log(`Inbox for session ${fullId.slice(0, 8)} (${messages.length} message(s), ${unreadCount} unread):
-`);
-    for (const msg of messages) {
-      const status = msg.read ? " " : "\u25CF";
-      const from = msg.from ? ` from ${msg.from}` : "";
-      const subject = msg.subject ? ` \u2014 ${msg.subject}` : "";
-      const urgencyTag = msg.urgency === "urgent" ? " [URGENT]" : "";
-      const date = new Date(msg.timestamp).toLocaleString();
-      const preview = msg.body.length > 100 ? msg.body.slice(0, 97) + "..." : msg.body;
-      console.log(`  ${status} ${msg.messageId.slice(0, 8)}${urgencyTag}${from}${subject}`);
-      console.log(`    ${date}`);
-      console.log(`    ${preview}
-`);
-    }
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionInboxRead(sessionIdPartial, messageId, machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const result = await machine.sessionRPC(fullId, "getInbox", {});
-    const msg = result.messages.find((m) => m.messageId === messageId || m.messageId.startsWith(messageId));
-    if (!msg) {
-      console.error(`Message ${messageId} not found in inbox.`);
-      process.exit(1);
-    }
-    if (!msg.read) {
-      await machine.sessionRPC(fullId, "markInboxRead", { messageId: msg.messageId });
-    }
-    console.log(`From: ${msg.from || "(unknown)"}`);
-    if (msg.subject) console.log(`Subject: ${msg.subject}`);
-    console.log(`Date: ${new Date(msg.timestamp).toLocaleString()}`);
-    if (msg.urgency === "urgent") console.log("Urgency: URGENT");
-    if (msg.replyTo) console.log(`Reply-To: ${msg.replyTo.slice(0, 8)}`);
-    if (msg.threadId) console.log(`Thread: ${msg.threadId.slice(0, 8)}`);
-    console.log(`
-${msg.body}`);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionInboxReply(sessionIdPartial, messageId, body, machineId) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const result = await machine.sessionRPC(fullId, "getInbox", {});
-    const original = result.messages.find((m) => m.messageId === messageId || m.messageId.startsWith(messageId));
-    if (!original) {
-      console.error(`Message ${messageId} not found in inbox.`);
-      process.exit(1);
-    }
-    if (!original.fromSession) {
-      console.error("Cannot reply: original message has no fromSession.");
-      process.exit(1);
-    }
-    const { randomUUID } = await import('node:crypto');
-    const reply = {
-      messageId: randomUUID(),
-      body,
-      timestamp: Date.now(),
-      read: false,
-      from: `session:${fullId}`,
-      fromSession: fullId,
-      to: original.fromSession,
-      subject: original.subject ? `Re: ${original.subject}` : void 0,
-      urgency: "normal",
-      replyTo: original.messageId,
-      threadId: original.threadId || original.messageId
-    };
-    const sendResult = await machine.sessionRPC(original.fromSession, "sendInboxMessage", { message: reply });
-    console.log(`Reply sent to session ${original.fromSession.slice(0, 8)} (id: ${sendResult.messageId.slice(0, 8)})`);
-  } finally {
-    await server.disconnect();
-  }
-}
-async function sessionInboxClear(sessionIdPartial, machineId, opts) {
-  const { server, machine } = await connectAndGetMachine(machineId);
-  try {
-    const sessions = await machine.listSessions();
-    const match = resolveSessionId(sessions, sessionIdPartial);
-    const fullId = match.sessionId;
-    const result = await machine.sessionRPC(fullId, "clearInbox", { opts: { all: opts?.all } });
-    console.log(`Cleared inbox on session ${fullId.slice(0, 8)} (${result.remaining} remaining)`);
-  } finally {
-    await server.disconnect();
-  }
-}
-
-export { connectAndGetMachine, createWorktree, generateWorktreeName, machineExec, machineInfo, machineLs, machineShare, parseShareArg, renderMessage, resolveSessionId, sessionApprove, sessionAttach, sessionDeny, sessionInboxClear, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxSend, sessionInfo, sessionList, sessionMachines, sessionMessages, sessionRalphCancel, sessionRalphStart, sessionRalphStatus, sessionSend, sessionShare, sessionSpawn, sessionStop, sessionWait };