svamp-cli 0.2.112 → 0.2.114

package/dist/{headlessCli-BBCGDutU.mjs → headlessCli-C6MzdWRW.mjs}

@@ -1,5 +1,5 @@
-import { F as resolveModel, O as describeMisconfiguration, P as buildMachineDeps } from './run-Bs_f2KsC.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-D1f0_8ao.mjs';
+import { F as resolveModel, O as describeMisconfiguration, P as buildMachineDeps } from './run-aNUfTpRW.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-BCKpph51.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';
@@ -13,8 +13,8 @@ import 'node:fs';
 import 'node:child_process';
 import 'util';
 import 'node:path';
-import 'node:os';
 import 'node:events';
+import 'node:os';
 import '@agentclientprotocol/sdk';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/stdio.js';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-Bs_f2KsC.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-aNUfTpRW.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -11,8 +11,8 @@ import 'node:fs';
 import 'node:child_process';
 import 'util';
 import 'node:path';
-import 'node:os';
 import 'node:events';
+import 'node:os';
 import '@agentclientprotocol/sdk';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/stdio.js';

package/dist/{package-BX6NFLve.mjs → package-PUmSILNZ.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.112";
+var version = "0.2.114";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -19,7 +19,7 @@ var exports$1 = {
 var scripts = {
 	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/loop bin/skills/loop && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
 	dev: "tsx src/cli.ts",
 	"dev:daemon": "tsx src/cli.ts daemon start-sync",

package/dist/{run-BGvBeuA4.mjs → run-CiiUhPNf.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { n as shortId, c as connectToHypha, a as createSessionStore, r as registerMachineService, Q as generateHookSettings } from './run-Bs_f2KsC.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { n as shortId, c as connectToHypha, a as createSessionStore, r as registerMachineService, Q as generateHookSettings } from './run-aNUfTpRW.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{run-Bs_f2KsC.mjs → run-aNUfTpRW.mjs}

@@ -10,8 +10,8 @@ import { existsSync, readFileSync, mkdirSync, readdirSync, writeFileSync, rename
 import { exec, execSync, spawn, execFile as execFile$1, execFileSync } from 'node:child_process';
 import { promisify } from 'util';
 import { join, basename, dirname } from 'node:path';
-import os, { homedir, platform } from 'node:os';
 import { EventEmitter } from 'node:events';
+import os, { homedir, platform } from 'node:os';
 import { ndJsonStream, ClientSideConnection } from '@agentclientprotocol/sdk';
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
@@ -1388,22 +1388,36 @@ function generateSkillBody(channel, ctx) {
   const bindNote = mode === "stateless" ? `**Stateless channel** \u2014 each call spawns a fresh, isolated one-shot session (cold-start: a few seconds), runs, replies, and closes. No shared memory between calls.` : mode === "fixed" ? `Routes to a **fixed session** (\`${rSession}\`); reachable only while that session is live.` : rSession ? `Routes to **session \`${rSession}\`** (the one this instruction was copied from); reachable only while it is live, else a fresh stateless run answers.` : `**Dynamic channel** \u2014 pass \`session: "<id>"\` to target a specific live session, else a fresh stateless run answers.`;
   const name = channel.skill?.name || channel.name;
   const desc = channel.skill?.description || channel.description || `Send a message to the "${channel.name}" channel.`;
-  const replyNote = isAgent ? `This is a **WISE Agent** channel: \`send()\` runs a fast assistant against the session's tools/skills and returns its answer synchronously in the result \`reply\`.` : isQueue ? `This is an **async** channel: \`send()\` returns a \`correlationId\` and the agent replies later \u2014 poll \`receive()\` (or GET /receive \xB7 /events) for replies addressed to you.` : `Delivery is fire-and-forget \u2014 the message lands in the agent's inbox, tagged with your verified identity (\`from\`).`;
+  const replyNote = isAgent ? `This is a **WISE Agent** channel: \`send()\` runs a fast assistant against the session's tools/skills and returns its answer synchronously in the result \`reply\`.` : isQueue ? `This is an **async** channel: \`send()\` usually returns \`{ status: "queued", correlationId }\` and the agent replies later \u2014 poll \`receive()\` (or GET /receive \xB7 /events) for replies addressed to you. **But it may also answer synchronously** with \`{ status: "completed", reply }\` (e.g. when the target session is gone and a fresh one-shot run handles the call) \u2014 always check \`status\` first and use \`reply\` directly when present; \`receive()\` has nothing to return for a one-shot.` : `Delivery is fire-and-forget \u2014 the message lands in the agent's inbox, tagged with your verified identity (\`from\`).`;
   const queueSection = isQueue ? `
 
-## Getting the reply (async)
-\`send()\` returns \`{ correlationId }\`. The agent answers later; retrieve replies addressed
-to you by **long-polling** \`receive\` with a cursor you advance each call:
+## Getting the reply
+\`send()\` returns one of two shapes \u2014 **check \`status\` first**:
+- \`{ status: "completed", reply, correlationId }\` \u2014 answered synchronously (e.g. a
+  dynamic channel whose target session is gone falls back to a fresh one-shot run).
+  Use \`reply\` directly; do **not** poll \`receive()\` \u2014 there is no persistent session
+  to poll and it will return an error.
+- \`{ status: "queued", correlationId }\` \u2014 a live session will answer later; long-poll
+  \`receive\` for replies addressed to you, advancing \`cursor\` each call:
 \`\`\`js
-const { correlationId } = await get_service("${svc}").send({ channel: "${channel.id}", message: "\u2026", from: "your-name" });
-let cursor = 0;
+const res = await get_service("${svc}").send({ channel: "${channel.id}", message: "\u2026", from: "your-name" });
+if (res.status === "completed") return res.reply;          // answered now \u2014 done
+let cursor = 0;                                            // else poll for the async reply
 while (true) {
   const r = await get_service("${svc}").receive({ channel: "${channel.id}", key: "${key}", cursor, wait: 25 });
   cursor = r.cursor;
-  for (const reply of r.replies) if (reply.correlationId === correlationId) return reply.body;
+  for (const reply of r.replies) if (reply.correlationId === res.correlationId) return reply.body;
 }
 \`\`\`
-**HTTP:** \`POST ${recvUrl}\` with \`{"kwargs": {"channel": "${channel.id}", "key": "${key}", "cursor": 0, "wait": 25}}\` (long-poll), or stream \`GET <channel-http>/channel/${channel.id}/events?key=${key}\` (SSE).` : "";
+**HTTP:** \`POST ${recvUrl}\` with \`{"kwargs": {"channel": "${channel.id}", "key": "${key}", "cursor": 0, "wait": 25}}\` (long-poll), or stream \`GET <channel-http>/channel/${channel.id}/events?key=${key}\` (SSE).
+
+### Agent-to-agent: get the reply in your own inbox
+If **you are a Svamp agent session**, pass \`reply_to: { session: "<your-session-id>" }\`
+to \`send()\`. The reply is then delivered straight to **your session's inbox**
+(\`inbox reply\`-able, persistent) \u2014 symmetric agent\u2194agent messaging. Without
+\`reply_to.session\` you are treated as an **external caller**: the reply goes to this
+channel's outbox and you must poll \`receive()\` (above) for it \u2014 it will **not** appear
+in your inbox.` : "";
   const rpcLine = hyphaOpen ? `**Hypha RPC** \u2014 preferred. Your verified Hypha identity is accepted, no key needed:` : `**Hypha RPC** \u2014 verified identity:`;
   return `---
 name: ${name}
@@ -1449,7 +1463,10 @@ function resolveSender(channel, input = {}) {
   }
   if (id.mode === "per-key") {
     const caller = (id.callers || []).find((c) => c.key && c.key === key);
-    if (!caller) return { error: "invalid or missing key" };
+    if (!caller) {
+      const acceptsHypha = Array.isArray(id.hypha_allow) && id.hypha_allow.length > 0;
+      return { error: acceptsHypha ? "invalid or missing key \u2014 supply a caller key issued by the channel owner, or call with an authenticated Hypha identity (this channel accepts hypha_allow callers; anonymous/keyless requests are rejected)" : "invalid or missing key \u2014 this channel requires a caller key issued by the channel owner" };
+    }
     return { sender: { name: caller.name, kind: caller.kind, verified: true } };
   }
   if (id.mode === "caller-supplied") {
@@ -1482,6 +1499,138 @@ function renderMessage(channel, { sender = {}, body = {}, query = {}, callId, no
   return renderTemplate(channel.template || DEFAULT_TEMPLATE, ctx);
 }
 
+const MAX_PER_CHANNEL = 200;
+const TTL_MS = 60 * 60 * 1e3;
+class ChannelOutbox {
+  file;
+  byChannel = /* @__PURE__ */ new Map();
+  seqByChannel = /* @__PURE__ */ new Map();
+  emitter = new EventEmitter();
+  constructor(projectDir) {
+    const dir = join(projectDir, ".svamp", "channels");
+    this.file = join(dir, "_outbox.jsonl");
+    this.emitter.setMaxListeners(0);
+    try {
+      mkdirSync(dir, { recursive: true });
+    } catch {
+    }
+    this._load();
+  }
+  _load() {
+    if (!existsSync(this.file)) return;
+    const cutoff = Date.now() - TTL_MS;
+    try {
+      for (const line of readFileSync(this.file, "utf8").split("\n")) {
+        if (!line.trim()) continue;
+        let rec = null;
+        try {
+          rec = JSON.parse(line);
+        } catch {
+          continue;
+        }
+        if (!rec || rec.ts < cutoff) continue;
+        const { channelId, ...reply } = rec;
+        const arr = this.byChannel.get(channelId) || [];
+        arr.push(reply);
+        this.byChannel.set(channelId, arr);
+        this.seqByChannel.set(channelId, Math.max(this.seqByChannel.get(channelId) || 0, reply.seq));
+      }
+      for (const [ch, arr] of this.byChannel) if (arr.length > MAX_PER_CHANNEL) this.byChannel.set(ch, arr.slice(-MAX_PER_CHANNEL));
+    } catch {
+    }
+  }
+  _evict(channelId) {
+    const cutoff = Date.now() - TTL_MS;
+    let arr = this.byChannel.get(channelId);
+    if (!arr) return;
+    if (arr.some((r) => r.ts < cutoff)) arr = arr.filter((r) => r.ts >= cutoff);
+    if (arr.length > MAX_PER_CHANNEL) arr = arr.slice(-MAX_PER_CHANNEL);
+    this.byChannel.set(channelId, arr);
+  }
+  /** Append a reply addressed to `to`. Assigns seq + ts, persists, and wakes waiters. */
+  append(channelId, r) {
+    const seq = (this.seqByChannel.get(channelId) || 0) + 1;
+    this.seqByChannel.set(channelId, seq);
+    const reply = { seq, ts: Date.now(), to: r.to, body: r.body, ...r.correlationId ? { correlationId: r.correlationId } : {} };
+    const arr = this.byChannel.get(channelId) || [];
+    arr.push(reply);
+    this.byChannel.set(channelId, arr);
+    this._evict(channelId);
+    try {
+      appendFileSync(this.file, JSON.stringify({ channelId, ...reply }) + "\n");
+    } catch {
+      try {
+        mkdirSync(join(this.file, ".."), { recursive: true });
+        appendFileSync(this.file, JSON.stringify({ channelId, ...reply }) + "\n");
+      } catch {
+      }
+    }
+    this.emitter.emit(channelId, reply);
+    return reply;
+  }
+  /** Replies for `to` on `channelId` with seq > cursor (optionally one correlationId). */
+  since(channelId, cursor, to, correlationId) {
+    this._evict(channelId);
+    return (this.byChannel.get(channelId) || []).filter((r) => r.seq > cursor && r.to === to && (!correlationId || r.correlationId === correlationId));
+  }
+  /** Highest seq on a channel (the cursor a caller gets back). */
+  cursor(channelId) {
+    return this.seqByChannel.get(channelId) || 0;
+  }
+  /**
+   * Long-poll: resolve immediately if there are replies after `cursor`, else wait for
+   * the next append (filtered to this channel + `to`) or `timeoutMs`, then return.
+   */
+  wait(channelId, cursor, to, timeoutMs, correlationId) {
+    const ready = this.since(channelId, cursor, to, correlationId);
+    if (ready.length) return Promise.resolve({ replies: ready, cursor: this.cursor(channelId) });
+    return new Promise((resolve) => {
+      const onReply = (r) => {
+        if (r.to !== to || correlationId && r.correlationId !== correlationId) return;
+        cleanup();
+        resolve({ replies: this.since(channelId, cursor, to, correlationId), cursor: this.cursor(channelId) });
+      };
+      const timer = setTimeout(() => {
+        cleanup();
+        resolve({ replies: [], cursor: this.cursor(channelId) });
+      }, Math.max(0, timeoutMs));
+      const cleanup = () => {
+        clearTimeout(timer);
+        this.emitter.off(channelId, onReply);
+      };
+      this.emitter.on(channelId, onReply);
+    });
+  }
+  /** Push subscription for SSE: calls onReply for each new reply addressed to `to`. */
+  subscribe(channelId, to, onReply) {
+    const handler = (r) => {
+      if (r.to === to) onReply(r);
+    };
+    this.emitter.on(channelId, handler);
+    return () => this.emitter.off(channelId, handler);
+  }
+  /** Drop a channel's outbox (on channel delete) — best-effort rewrite of the log. */
+  purge(channelId) {
+    this.byChannel.delete(channelId);
+    this.seqByChannel.delete(channelId);
+    if (!existsSync(this.file)) return;
+    try {
+      const kept = readFileSync(this.file, "utf8").split("\n").filter((l) => {
+        if (!l.trim()) return false;
+        try {
+          return JSON.parse(l).channelId !== channelId;
+        } catch {
+          return false;
+        }
+      });
+      const tmp = this.file + ".tmp";
+      writeFileSync(tmp, kept.join("\n") + (kept.length ? "\n" : ""));
+      renameSync(tmp, this.file);
+    } catch {
+    }
+  }
+}
+
 function getParamNames(fn) {
   const src = fn.toString();
   const match = src.match(/^(?:async\s+)?(?:function\s*\w*)?\s*\(([^)]*)\)/);
@@ -2527,7 +2676,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-BoPlePa3.mjs');
+        const { FrpcTunnel } = await import('./frpc-BjWZ129L.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -2788,7 +2937,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-D1f0_8ao.mjs');
+          const { toolsForRole } = await import('./sideband-BCKpph51.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -2887,7 +3036,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     if (r.error || !r.sender) return { error: r.error || "unauthorized" };
     const callId = "call_" + Math.random().toString(16).slice(2, 12);
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-P9-75WDZ.mjs');
+    const { queryCore } = await import('./commands-C29ciVUe.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -2904,7 +3053,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     }
     if (result.status === "error") return { ok: false, call_id: callId, status: "error", error: result.error };
     if (result.status === "permission-pending") return { ok: false, call_id: callId, status: "permission-pending", error: result.error };
-    return { ok: true, call_id: callId, status: "completed", reply: result.response };
+    return { ok: true, call_id: callId, correlationId: callId, status: "completed", reply: result.response };
   };
   const channelsServiceInfo = await server.registerService(
     {
@@ -2925,10 +3074,16 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
         }
         return out;
       },
-      describe: async (kwargs = {}) => {
-        const rpc = await findChannelOwner(kwargs.channel);
+      // Accept a plain `?channel=<id>` GET (positional, like `skill`) AS WELL AS
+      // the kwargs-wrapped form. The Hypha HTTP gateway only maps a `?channel=`
+      // query onto a param literally named `channel`; a kwargs-only signature left
+      // `channel` undefined on GET, so describe() 404'd on every channel that
+      // list() returned. Normalize both the string and `{channel}` object shapes.
+      describe: async (channel) => {
+        const id = typeof channel === "string" ? channel : channel?.channel;
+        const rpc = id ? await findChannelOwner(id) : void 0;
         if (!rpc?.channelDescribe) return { error: "channel not found" };
-        return rpc.channelDescribe(kwargs.channel);
+        return rpc.channelDescribe(id);
       },
       // Clean GET endpoint for the self-contained skill markdown. Param is
       // named `channel` (not `kwargs`) so the Hypha HTTP gateway maps a plain
@@ -2958,9 +3113,26 @@ ${d?.error || "not found"}`;
         trackInbound();
         const res = resolveChannel(kwargs.channel, kwargs.session);
         if ("error" in res) return { error: res.error };
-        if (res.tier === "stateless") return { error: "stateless channels have no async replies (no persistent session)" };
-        if ("stopped" in res) return { error: `session ${res.sessionId.slice(0, 8)} is stopped` };
-        return res.rpc.channelReceive({ channel: kwargs.channel, key: kwargs.key, from: kwargs.from, cursor: kwargs.cursor, correlationId: kwargs.correlationId, wait: kwargs.wait }, context);
+        if (res.tier === "session" && !("stopped" in res)) {
+          return res.rpc.channelReceive({ channel: kwargs.channel, key: kwargs.key, from: kwargs.from, cursor: kwargs.cursor, correlationId: kwargs.correlationId, wait: kwargs.wait }, context);
+        }
+        const { c, dir } = res;
+        if (c.reply?.mode !== "queue") {
+          return { error: "this channel has no async replies (not a queue-mode channel)" };
+        }
+        const u = context?.user;
+        const r = resolveSender(c, {
+          key: kwargs.key,
+          from: kwargs.from,
+          hyphaUser: u && u.is_anonymous !== true ? u.email || u.id : void 0,
+          hyphaAnonymous: u?.is_anonymous === true,
+          hyphaWorkspace: u?.scope?.current_workspace
+        });
+        if (r.error || !r.sender) return { error: r.error || "unauthorized" };
+        const cursor = Math.max(0, Number(kwargs.cursor) || 0);
+        const outbox = new ChannelOutbox(dir);
+        const replies = outbox.since(c.id, cursor, r.sender.name, kwargs.correlationId);
+        return { ok: true, replies, cursor: outbox.cursor(c.id) };
       }
     },
     { overwrite: true }
@@ -3202,138 +3374,6 @@ class RoutineRunner {
   }
 }
 
-const MAX_PER_CHANNEL = 200;
-const TTL_MS = 60 * 60 * 1e3;
-class ChannelOutbox {
-  file;
-  byChannel = /* @__PURE__ */ new Map();
-  seqByChannel = /* @__PURE__ */ new Map();
-  emitter = new EventEmitter();
-  constructor(projectDir) {
-    const dir = join(projectDir, ".svamp", "channels");
-    this.file = join(dir, "_outbox.jsonl");
-    this.emitter.setMaxListeners(0);
-    try {
-      mkdirSync(dir, { recursive: true });
-    } catch {
-    }
-    this._load();
-  }
-  _load() {
-    if (!existsSync(this.file)) return;
-    const cutoff = Date.now() - TTL_MS;
-    try {
-      for (const line of readFileSync(this.file, "utf8").split("\n")) {
-        if (!line.trim()) continue;
-        let rec = null;
-        try {
-          rec = JSON.parse(line);
-        } catch {
-          continue;
-        }
-        if (!rec || rec.ts < cutoff) continue;
-        const { channelId, ...reply } = rec;
-        const arr = this.byChannel.get(channelId) || [];
-        arr.push(reply);
-        this.byChannel.set(channelId, arr);
-        this.seqByChannel.set(channelId, Math.max(this.seqByChannel.get(channelId) || 0, reply.seq));
-      }
-      for (const [ch, arr] of this.byChannel) if (arr.length > MAX_PER_CHANNEL) this.byChannel.set(ch, arr.slice(-MAX_PER_CHANNEL));
-    } catch {
-    }
-  }
-  _evict(channelId) {
-    const cutoff = Date.now() - TTL_MS;
-    let arr = this.byChannel.get(channelId);
-    if (!arr) return;
-    if (arr.some((r) => r.ts < cutoff)) arr = arr.filter((r) => r.ts >= cutoff);
-    if (arr.length > MAX_PER_CHANNEL) arr = arr.slice(-MAX_PER_CHANNEL);
-    this.byChannel.set(channelId, arr);
-  }
-  /** Append a reply addressed to `to`. Assigns seq + ts, persists, and wakes waiters. */
-  append(channelId, r) {
-    const seq = (this.seqByChannel.get(channelId) || 0) + 1;
-    this.seqByChannel.set(channelId, seq);
-    const reply = { seq, ts: Date.now(), to: r.to, body: r.body, ...r.correlationId ? { correlationId: r.correlationId } : {} };
-    const arr = this.byChannel.get(channelId) || [];
-    arr.push(reply);
-    this.byChannel.set(channelId, arr);
-    this._evict(channelId);
-    try {
-      appendFileSync(this.file, JSON.stringify({ channelId, ...reply }) + "\n");
-    } catch {
-      try {
-        mkdirSync(join(this.file, ".."), { recursive: true });
-        appendFileSync(this.file, JSON.stringify({ channelId, ...reply }) + "\n");
-      } catch {
-      }
-    }
-    this.emitter.emit(channelId, reply);
-    return reply;
-  }
-  /** Replies for `to` on `channelId` with seq > cursor (optionally one correlationId). */
-  since(channelId, cursor, to, correlationId) {
-    this._evict(channelId);
-    return (this.byChannel.get(channelId) || []).filter((r) => r.seq > cursor && r.to === to && (!correlationId || r.correlationId === correlationId));
-  }
-  /** Highest seq on a channel (the cursor a caller gets back). */
-  cursor(channelId) {
-    return this.seqByChannel.get(channelId) || 0;
-  }
-  /**
-   * Long-poll: resolve immediately if there are replies after `cursor`, else wait for
-   * the next append (filtered to this channel + `to`) or `timeoutMs`, then return.
-   */
-  wait(channelId, cursor, to, timeoutMs, correlationId) {
-    const ready = this.since(channelId, cursor, to, correlationId);
-    if (ready.length) return Promise.resolve({ replies: ready, cursor: this.cursor(channelId) });
-    return new Promise((resolve) => {
-      const onReply = (r) => {
-        if (r.to !== to || correlationId && r.correlationId !== correlationId) return;
-        cleanup();
-        resolve({ replies: this.since(channelId, cursor, to, correlationId), cursor: this.cursor(channelId) });
-      };
-      const timer = setTimeout(() => {
-        cleanup();
-        resolve({ replies: [], cursor: this.cursor(channelId) });
-      }, Math.max(0, timeoutMs));
-      const cleanup = () => {
-        clearTimeout(timer);
-        this.emitter.off(channelId, onReply);
-      };
-      this.emitter.on(channelId, onReply);
-    });
-  }
-  /** Push subscription for SSE: calls onReply for each new reply addressed to `to`. */
-  subscribe(channelId, to, onReply) {
-    const handler = (r) => {
-      if (r.to === to) onReply(r);
-    };
-    this.emitter.on(channelId, handler);
-    return () => this.emitter.off(channelId, handler);
-  }
-  /** Drop a channel's outbox (on channel delete) — best-effort rewrite of the log. */
-  purge(channelId) {
-    this.byChannel.delete(channelId);
-    this.seqByChannel.delete(channelId);
-    if (!existsSync(this.file)) return;
-    try {
-      const kept = readFileSync(this.file, "utf8").split("\n").filter((l) => {
-        if (!l.trim()) return false;
-        try {
-          return JSON.parse(l).channelId !== channelId;
-        } catch {
-          return false;
-        }
-      });
-      const tmp = this.file + ".tmp";
-      writeFileSync(tmp, kept.join("\n") + (kept.length ? "\n" : ""));
-      renameSync(tmp, this.file);
-    } catch {
-    }
-  }
-}
-
 function channelPublicView(c) {
   return { id: c.id, name: c.name, description: c.description, identity: { mode: c.identity?.mode }, action: c.action?.kind, bind: c.bind };
 }
@@ -3870,7 +3910,7 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
           const result = await dispatchAgentChannel({ channel: c, sender: r.sender, message: rendered, deps, env: process.env });
           channelStore.recordCall(c.id, { sender: r.sender.name, verified: r.sender.verified, callId, outcome: result.status });
           syncChannelsToMetadata();
-          return { ok: result.status === "completed", call_id: callId, status: result.status, reply: result.reply, tool_calls: result.toolCalls, error: result.error };
+          return { ok: result.status === "completed", call_id: callId, correlationId: callId, status: result.status, reply: result.reply, tool_calls: result.toolCalls, error: result.error };
         }
         if (c.action?.kind === "loop") return { error: "loop channels are served by the channel server, not channelSend" };
         const queue = c.reply?.mode === "queue";
@@ -9950,26 +9990,25 @@ function createSvampConfigChecker(directory, sessionId, getMetadata, setMetadata
     } catch {
     }
   };
-  let lastLoopPhase = (() => {
+  let announcedLoopStart = (() => {
     const s = readLoopState(directory, sessionId);
-    return s ? s.phase ?? null : null;
+    return s && (s.phase === "done" || s.phase === "gave_up") ? s.started_at ?? "\u2205" : null;
   })();
   const loopChecker = () => {
     try {
       const s = readLoopState(directory, sessionId);
-      const phase = s ? s.phase ?? null : null;
-      const wasActive = lastLoopPhase === "running" || lastLoopPhase === "continue";
-      if (wasActive && (phase === "done" || phase === "gave_up")) {
-        const iter = typeof s?.iteration === "number" ? s.iteration : 0;
-        const plural = iter === 1 ? "" : "s";
-        const msg = phase === "done" ? `\u{1F501} Loop complete \u2705 \u2014 finished after ${iter} iteration${plural}.` : `\u{1F501} Loop stopped \u{1F6D1} \u2014 gave up after ${iter} iteration${plural}${s?.gave_up_reason ? ` (${s.gave_up_reason})` : ""}.`;
-        sessionService.pushMessage(
-          phase === "gave_up" ? { type: "message", message: msg, level: "warning" } : { type: "message", message: msg },
-          "event"
-        );
-        logger.log(`[svampConfig] ${phase === "done" ? "Loop complete" : "Loop gave up"} (iter ${iter})`);
-      }
-      lastLoopPhase = phase;
+      if (!s || s.phase !== "done" && s.phase !== "gave_up") return;
+      const key = s.started_at ?? "\u2205";
+      if (key === announcedLoopStart) return;
+      announcedLoopStart = key;
+      const iter = typeof s.iteration === "number" ? s.iteration : 0;
+      const plural = iter === 1 ? "" : "s";
+      const msg = s.phase === "done" ? `\u{1F501} Loop complete \u2705 \u2014 finished after ${iter} iteration${plural}.` : `\u{1F501} Loop stopped \u{1F6D1} \u2014 gave up after ${iter} iteration${plural}${s.gave_up_reason ? ` (${s.gave_up_reason})` : ""}.`;
+      sessionService.pushMessage(
+        s.phase === "gave_up" ? { type: "message", message: msg, level: "warning" } : { type: "message", message: msg },
+        "event"
+      );
+      logger.log(`[svampConfig] ${s.phase === "done" ? "Loop complete" : "Loop gave up"} (iter ${iter})`);
     } catch {
     }
   };
@@ -10452,7 +10491,7 @@ async function startDaemon(options) {
     const list = loadExposedTunnels().filter((t) => t.name !== name);
     saveExposedTunnels(list);
   }
-  const { ServeManager } = await import('./serveManager-D3sMgApm.mjs');
+  const { ServeManager } = await import('./serveManager-DrPFeC2o.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -12937,7 +12976,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       const specs = loadExposedTunnels();
       if (specs.length === 0) return;
       logger.log(`[exposed-tunnels] Restoring ${specs.length} tunnel(s) from ${EXPOSED_TUNNELS_FILE}`);
-      const { FrpcTunnel } = await import('./frpc-BoPlePa3.mjs');
+      const { FrpcTunnel } = await import('./frpc-BjWZ129L.mjs');
       for (const spec of specs) {
         if (tunnels.has(spec.name)) continue;
         try {

package/dist/{serveCommands-BgSqTBrB.mjs → serveCommands-BoFSdzkv.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-P9-75WDZ.mjs');
+  const { connectAndGetMachine } = await import('./commands-C29ciVUe.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-P9-75WDZ.mjs');
+  const { connectAndGetMachine } = await import('./commands-C29ciVUe.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-P9-75WDZ.mjs');
+  const { connectAndGetMachine } = await import('./commands-C29ciVUe.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-P9-75WDZ.mjs');
+  const { connectAndGetMachine } = await import('./commands-C29ciVUe.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-P9-75WDZ.mjs');
+  const { connectAndGetMachine } = await import('./commands-C29ciVUe.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-D3sMgApm.mjs → serveManager-DrPFeC2o.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-Bs_f2KsC.mjs';
+import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-aNUfTpRW.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -13,8 +13,8 @@ import 'node:fs';
 import 'node:child_process';
 import 'util';
 import 'node:path';
-import 'node:os';
 import 'node:events';
+import 'node:os';
 import '@agentclientprotocol/sdk';
 import '@modelcontextprotocol/sdk/client/index.js';
 import '@modelcontextprotocol/sdk/client/stdio.js';
@@ -713,7 +713,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, `static-${subdomainSafe}-${mount.linkToken}`]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-BoPlePa3.mjs');
+      const { FrpcTunnel } = await import('./frpc-BjWZ129L.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,