svamp-cli 0.2.120 → 0.2.122

package/dist/{commands-DOtJfJG7.mjs → commands-D7O-bNzm.mjs}

@@ -58,7 +58,7 @@ async function serviceExpose(args) {
     process.exit(1);
   }
   if (foreground) {
-    const { runFrpcTunnel } = await import('./frpc-DlsBjcRf.mjs');
+    const { runFrpcTunnel } = await import('./frpc-1YwDchv1.mjs');
     await runFrpcTunnel(name, ports, void 0, {
       group,
       groupKey,
@@ -68,7 +68,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+  const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -123,7 +123,7 @@ async function serviceServe(args) {
     };
     process.on("SIGINT", cleanup);
     process.on("SIGTERM", cleanup);
-    const { runFrpcTunnel } = await import('./frpc-DlsBjcRf.mjs');
+    const { runFrpcTunnel } = await import('./frpc-1YwDchv1.mjs');
     await runFrpcTunnel(name, [caddyPort]);
   } catch (err) {
     console.error(`Error serving directory: ${err.message}`);
@@ -132,7 +132,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+    const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -161,7 +161,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+    const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/{commands-BFpGoTq8.mjs → commands-c88PiQcd.mjs}

@@ -1,6 +1,7 @@
-import { execFileSync } from 'node:child_process';
+import { execSync, execFileSync } from 'node:child_process';
+import { randomUUID } from 'node:crypto';
 import { createServer } from 'node:http';
-import { R as RoutineStore, m as RoutineRunner } from './run-C4BsPJ_p.mjs';
+import { E as readChecklist, F as compileChecklist, G as RoutineStore, H as RoutineRunner } from './run-PlINWUZp.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -8,7 +9,6 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import 'node:crypto';
 import 'node:fs';
 import 'util';
 import 'node:path';
@@ -22,6 +22,41 @@ import 'zod';
 import 'node:fs/promises';
 import 'node:util';
 
+function runOracle(cmd, cwd, timeoutSec = 600) {
+  try {
+    execSync(cmd, { cwd, stdio: "pipe", maxBuffer: 16 * 1024 * 1024, timeout: timeoutSec * 1e3 });
+    return true;
+  } catch {
+    return false;
+  }
+}
+function itemOracle(item) {
+  if (item.eval?.type === "oracle" && item.eval.cmd?.trim()) return item.eval.cmd;
+  const legacy = item.oracle;
+  return typeof legacy === "string" && legacy.trim() ? legacy : void 0;
+}
+function verifyChecklistOracles(projectRoot, sessionId, timeoutSec = 600) {
+  const items = readChecklist(projectRoot, sessionId).filter((i) => i.disposition !== "delegated" && i.status !== "done");
+  const criteria = compileChecklist(items).criteria;
+  const failing = [];
+  let oracleTotal = 0, oraclePass = 0, agentSkipped = 0;
+  for (const it of items) {
+    const cmd = itemOracle(it);
+    if (cmd) {
+      oracleTotal++;
+      if (runOracle(cmd, projectRoot, timeoutSec)) oraclePass++;
+      else failing.push({ id: it.id, text: it.text });
+    } else if (it.eval?.type === "agent") {
+      agentSkipped++;
+    }
+  }
+  const verdict = failing.length === 0 ? "approved" : "rework";
+  const parts = [`Watchdog: ${oraclePass}/${oracleTotal} oracle check${oracleTotal === 1 ? "" : "s"} pass.`];
+  if (failing.length) parts.push(`Failing: ${failing.map((f) => f.text).join("; ")}.`);
+  if (agentSkipped) parts.push(`${agentSkipped} agent-judged item(s) need a live session (not checked).`);
+  return { verdict, criteria, guidance: parts.join(" "), oracleTotal, oraclePass, failing, agentSkipped, itemCount: items.length };
+}
+
 function parseArgs(argv) {
   const a = { _: [] };
   for (let i = 0; i < argv.length; i++) {
@@ -41,6 +76,43 @@ function isSessionLive(sid) {
   }
 }
 async function cliDeliver({ routine, resolved }) {
+  if (resolved.kind === "verify") {
+    const dir = routine.dir;
+    if (!dir) {
+      console.error(`[trigger] skip ${routine.id || routine.name}: verify action has no dir`);
+      return { skipped: "verify: no dir" };
+    }
+    const target = routine.action.verify?.target_session || routine.session_id;
+    const reportTo = routine.action.verify?.report_to || routine.session_id;
+    if (!isSessionLive(reportTo)) {
+      console.error(`[trigger] skip ${routine.id || routine.name}: report session ${reportTo} not live (inbox is in-memory)`);
+      return { skipped: "verify: report session not live" };
+    }
+    const res = verifyChecklistOracles(dir, target);
+    const message = {
+      messageId: randomUUID(),
+      from: `watchdog:${routine.name || routine.id}`,
+      fromSession: target,
+      to: reportTo,
+      subject: `watchdog: ${res.verdict} \u2014 ${routine.name || routine.id}`,
+      body: `<supervision-verdict source="watchdog" session="${target}" verdict="${res.verdict}" judge="oracle" round="0">
+${res.guidance}
+Criteria: ${res.criteria || "(none)"}
+</supervision-verdict>`,
+      timestamp: Date.now(),
+      read: false,
+      urgency: "normal",
+      hopCount: 1
+    };
+    const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
+    const { server, machine } = await connectAndGetMachine();
+    try {
+      await machine.sessionRPC(reportTo, "sendInboxMessage", { message });
+    } finally {
+      await server.disconnect();
+    }
+    return;
+  }
   if (routine.bind === "stateless") {
     const dir = routine.dir;
     if (!dir) {
@@ -71,7 +143,8 @@ function buildRoutineFromArgs(a) {
   if (a.schedule) r.trigger = { type: "schedule", cron: a.schedule, missed: a.missed || "skip", tz: a.tz };
   else if (a.webhook || a.api) r.trigger = { type: a.api ? "api" : "webhook", methods: a.get ? ["GET"] : ["GET", "POST"], public: !!a.public };
   else r.trigger = { type: "manual" };
-  if (a.loop) r.action = { kind: "loop", task_template: a.task || "", loop: { dir: a.dir, oracle: a.oracle, evaluator: a.evaluator || "off" } };
+  if (a.verify) r.action = { kind: "verify", verify: { target_session: a["target-session"], report_to: a["report-to"] } };
+  else if (a.loop) r.action = { kind: "loop", task_template: a.task || "", loop: { dir: a.dir, oracle: a.oracle, evaluator: a.evaluator || "off" } };
   else r.action = { kind: "message", template: a.message || a.task || "run" };
   if (a.dir) r.dir = a.dir;
   if (a.stateless) r.bind = "stateless";

package/dist/{fleet-CEAB4PS0.mjs → fleet-Cul9jrbU.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { c as connectToHypha } from './run-C4BsPJ_p.mjs';
+import { c as connectToHypha } from './run-PlINWUZp.mjs';
 import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-HydRNEt7.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{frpc-DlsBjcRf.mjs → frpc-1YwDchv1.mjs}

@@ -3,7 +3,7 @@ import { mkdirSync, writeFileSync, unlinkSync, existsSync, chmodSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { createHash, randomUUID } from 'crypto';
-import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-C4BsPJ_p.mjs';
+import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-PlINWUZp.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:crypto';

package/dist/{headlessCli-DuY4WQVa.mjs → headlessCli-CQZIDygq.mjs}

@@ -1,5 +1,5 @@
-import { F as resolveModel, T as describeMisconfiguration, U as buildMachineDeps } from './run-C4BsPJ_p.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-Wfli3n7U.mjs';
+import { D as resolveModel, V as describeMisconfiguration, W as buildMachineDeps } from './run-PlINWUZp.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-DF2mZOOx.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-C4BsPJ_p.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-PlINWUZp.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{package-DS33M8qt.mjs → package-D6yiDaV4.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.120";
+var version = "0.2.121";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -19,7 +19,7 @@ var exports$1 = {
 var scripts = {
 	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/loop bin/skills/loop && cp -r ../../skills/crew bin/skills/crew && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
 	dev: "tsx src/cli.ts",
 	"dev:daemon": "tsx src/cli.ts daemon start-sync",

package/dist/{run-C4BsPJ_p.mjs → run-PlINWUZp.mjs}

@@ -1199,7 +1199,7 @@ function renderTemplate(template, ctx) {
   });
 }
 const TRIGGER_TYPES = ["manual", "schedule", "webhook", "api"];
-const ACTION_KINDS = ["message", "loop"];
+const ACTION_KINDS = ["message", "loop", "verify"];
 const OVERLAP = ["queue", "skip", "replace"];
 function validateRoutine(r) {
   const errs = [];
@@ -1220,6 +1220,7 @@ function validateRoutine(r) {
   if (!a || !ACTION_KINDS.includes(a.kind)) errs.push(`action.kind must be one of ${ACTION_KINDS.join("|")}`);
   if (a?.kind === "message" && !a.template) errs.push("action.template required for message action");
   if (a?.kind === "loop" && !a.loop && !a.task_template) errs.push("action.loop or action.task_template required for loop action");
+  if (a?.kind === "verify" && !r.dir) errs.push("a verify (checklist watchdog) action requires a dir (the project root holding .svamp/<sid>/loop/checklist.json)");
   if (r.overlap && !OVERLAP.includes(r.overlap)) errs.push(`overlap must be one of ${OVERLAP.join("|")}`);
   if (r.bind && r.bind !== "stateful" && r.bind !== "stateless") errs.push('bind must be "stateful" or "stateless"');
   if (r.bind === "stateless") {
@@ -2676,7 +2677,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-DlsBjcRf.mjs');
+        const { FrpcTunnel } = await import('./frpc-1YwDchv1.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -2937,7 +2938,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-Wfli3n7U.mjs');
+          const { toolsForRole } = await import('./sideband-DF2mZOOx.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -3036,7 +3037,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     if (r.error || !r.sender) return { error: r.error || "unauthorized" };
     const callId = "call_" + Math.random().toString(16).slice(2, 12);
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-CuY9G_88.mjs');
+    const { queryCore } = await import('./commands-BKrGv74d.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -3113,9 +3114,6 @@ ${d?.error || "not found"}`;
         trackInbound();
         const res = resolveChannel(kwargs.channel, kwargs.session);
         if ("error" in res) return { error: res.error };
-        if (res.tier === "session" && !("stopped" in res)) {
-          return res.rpc.channelReceive({ channel: kwargs.channel, key: kwargs.key, from: kwargs.from, cursor: kwargs.cursor, correlationId: kwargs.correlationId, wait: kwargs.wait }, context);
-        }
         const { c, dir } = res;
         if (c.reply?.mode !== "queue") {
           return { error: "this channel has no async replies (not a queue-mode channel)" };
@@ -3130,9 +3128,16 @@ ${d?.error || "not found"}`;
         });
         if (r.error || !r.sender) return { error: r.error || "unauthorized" };
         const cursor = Math.max(0, Number(kwargs.cursor) || 0);
-        const outbox = new ChannelOutbox(dir);
-        const replies = outbox.since(c.id, cursor, r.sender.name, kwargs.correlationId);
-        return { ok: true, replies, cursor: outbox.cursor(c.id) };
+        const waitMs = Math.min(Math.max(0, Number(kwargs.wait ?? 25) * 1e3), 6e4);
+        const deadline = Date.now() + waitMs;
+        for (; ; ) {
+          const outbox = new ChannelOutbox(dir);
+          const replies = outbox.since(c.id, cursor, r.sender.name, kwargs.correlationId);
+          if (replies.length || Date.now() >= deadline) {
+            return { ok: true, replies, cursor: outbox.cursor(c.id) };
+          }
+          await new Promise((resolve) => setTimeout(resolve, 500));
+        }
       }
     },
     { overwrite: true }
@@ -3257,6 +3262,7 @@ class RoutineRunner {
     const ctx = { ...payload, now: this.now().toISOString(), routine: { id: routine.id, name: routine.name } };
     const a = routine.action;
     if (a.kind === "message") return { kind: "message", text: renderTemplate(a.template || "", ctx) };
+    if (a.kind === "verify") return { kind: "verify" };
     const task = renderTemplate(a.task_template || a.loop?.task || "", ctx);
     return { kind: "loop", task, loop: a.loop };
   }
@@ -9686,6 +9692,118 @@ class ProcessSupervisor {
   }
 }
 
+const STATUS_TO_MARKER = {
+  todo: " ",
+  active: "~",
+  verifying: "*",
+  awaiting_review: "?",
+  rework: "r",
+  blocked: "!",
+  done: "x"
+};
+function renderCriteria(items) {
+  if (!items.length) return "";
+  const lines = items.map((it) => {
+    const tag = it.disposition === "delegated" ? " (delegated)" : "";
+    return `- [${STATUS_TO_MARKER[it.status] ?? " "}] ${it.text}${tag}`;
+  });
+  const { done, total } = summarize(items);
+  return `Success criteria \u2014 drive this checklist to all-done (${done}/${total}):
+${lines.join("\n")}`;
+}
+function compileChecklist(items) {
+  const criteria = renderCriteria(items);
+  const oracleItem = items.find((i) => i.disposition === "inline" && i.eval?.type === "oracle");
+  const oracle = oracleItem && oracleItem.eval?.type === "oracle" ? oracleItem.eval.cmd : void 0;
+  return { criteria, ...oracle ? { oracle } : {} };
+}
+function routeVerdictToChecklist(items, v) {
+  let matched = false;
+  const next = items.map((it) => {
+    if (it.child?.sessionId && it.child.sessionId === v.sessionId) {
+      matched = true;
+      return applyVerdict(it, v);
+    }
+    return it;
+  });
+  return { items: next, matched };
+}
+function applyVerdict(item, v) {
+  const lastVerdict = { verdict: v.verdict, ...v.guidance ? { guidance: v.guidance } : {}, round: v.round, ts: v.ts };
+  if (v.verdict === "approved") return { ...item, status: "done", doneAt: Date.parse(v.ts) || item.createdAt, lastVerdict };
+  return { ...item, status: "rework", lastVerdict };
+}
+const VALID_STATUS = /* @__PURE__ */ new Set(["todo", "active", "verifying", "awaiting_review", "rework", "blocked", "done"]);
+function validateChecklist(items) {
+  const errs = [];
+  const ids = /* @__PURE__ */ new Set();
+  for (const it of items) {
+    if (!it.id) errs.push("item missing id");
+    else if (ids.has(it.id)) errs.push(`duplicate item id "${it.id}"`);
+    else ids.add(it.id);
+    if (!it.text || !it.text.trim()) errs.push(`item "${it.id}" has empty text`);
+    if (it.disposition !== "inline" && it.disposition !== "delegated") errs.push(`item "${it.id}" bad disposition`);
+    if (!VALID_STATUS.has(it.status)) errs.push(`item "${it.id}" bad status "${it.status}"`);
+    if (it.eval?.type === "oracle" && !it.eval.cmd.trim()) errs.push(`item "${it.id}" oracle eval needs a cmd`);
+  }
+  return errs;
+}
+function summarize(items) {
+  const by = (s) => items.filter((i) => i.status === s).length;
+  const done = by("done");
+  return {
+    total: items.length,
+    done,
+    todo: by("todo"),
+    active: by("active"),
+    blocked: by("blocked"),
+    awaiting_review: by("awaiting_review"),
+    delegated: items.filter((i) => i.disposition === "delegated").length,
+    allDone: items.length > 0 && done === items.length
+  };
+}
+function checklistPath(projectRoot, sessionId) {
+  return join(projectRoot, ".svamp", sessionId, "loop", "checklist.json");
+}
+function legacyChecklistPath(projectRoot, sessionId) {
+  return join(projectRoot, ".svamp", sessionId, "checklist.json");
+}
+
+function readChecklist(projectRoot, sessionId) {
+  let p = checklistPath(projectRoot, sessionId);
+  if (!existsSync(p)) {
+    const legacy = legacyChecklistPath(projectRoot, sessionId);
+    if (!existsSync(legacy)) return [];
+    p = legacy;
+  }
+  try {
+    const parsed = JSON.parse(readFileSync(p, "utf8"));
+    return Array.isArray(parsed?.items) ? parsed.items : [];
+  } catch {
+    return [];
+  }
+}
+function writeChecklist(projectRoot, sessionId, items) {
+  const p = checklistPath(projectRoot, sessionId);
+  mkdirSync(dirname(p), { recursive: true });
+  const file = { version: 1, items, updatedAt: Date.now() };
+  const tmp = p + ".tmp";
+  writeFileSync(tmp, JSON.stringify(file, null, 2));
+  renameSync(tmp, p);
+}
+function clearChecklist(projectRoot, sessionId) {
+  const p = checklistPath(projectRoot, sessionId);
+  try {
+    if (existsSync(p)) rmSync(p);
+  } catch {
+  }
+}
+function mutateChecklist(projectRoot, sessionId, fn) {
+  const next = fn(readChecklist(projectRoot, sessionId));
+  writeChecklist(projectRoot, sessionId, next);
+  return next;
+}
+
 const OAUTH_TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
 const OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
 const OAUTH_SCOPES = "user:profile user:inference user:sessions:claude_code user:mcp_servers user:file_upload";
@@ -10778,6 +10896,38 @@ Continue working until they are met, or verify and finish \u2014 an independent
       const { supervisor: _s, ...restPatch } = patch;
       patch = restPatch;
     }
+    if ("checklist" in patch) {
+      const raw = patch.checklist;
+      const items = Array.isArray(raw) ? raw : [];
+      if (items.length) {
+        const errs = validateChecklist(items);
+        if (errs.length) {
+          sessionService.pushMessage({ type: "message", message: `Checklist rejected: ${errs.join("; ")}`, level: "error" }, "event");
+        } else {
+          writeChecklist(directory, sessionId, items);
+          const { criteria, oracle } = compileChecklist(items);
+          const ok = initLoop(directory, { task: criteria, criteria, oracle, maxIterations: 20, evaluator: true, sessionId });
+          const s = summarize(items);
+          if (ok) {
+            const idle = getMetadata().lifecycleState === "idle";
+            if (idle) {
+              const q = getMetadata().messageQueue || [];
+              const nudge = `Your goal checklist was updated (${s.done}/${s.total} done). Work the open items in order; an independent Stop gate re-checks the criteria before you can stop.`;
+              setMetadata((m) => ({ ...m, messageQueue: [...q, { id: randomUUID$1(), text: nudge, displayText: `\u{1F4CB} Checklist updated`, createdAt: Date.now() }] }));
+              onLoopActivated?.();
+            }
+            sessionService.pushMessage({ type: "message", message: `\u{1F4CB} Checklist set \u2014 ${s.total} item${s.total === 1 ? "" : "s"} (${s.delegated} delegated), ${s.done} done.` }, "event");
+            logger.log(`[svampConfig] Checklist set (${s.total} items, ${s.delegated} delegated)`);
+          }
+        }
+      } else {
+        clearChecklist(directory, sessionId);
+        deactivateLoop(directory, sessionId);
+        sessionService.pushMessage({ type: "message", message: "Checklist cleared." }, "event");
+      }
+      const { checklist: _c, ...restPatch } = patch;
+      patch = restPatch;
+    }
     if (Object.keys(patch).length > 0) {
       const config = readSvampConfig(configPath);
       for (const [key, value] of Object.entries(patch)) {
@@ -11205,7 +11355,7 @@ async function startDaemon(options) {
     const list = loadExposedTunnels().filter((t) => t.name !== name);
     saveExposedTunnels(list);
   }
-  const { ServeManager } = await import('./serveManager-QZooKtI4.mjs');
+  const { ServeManager } = await import('./serveManager-DymHllAS.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -11266,6 +11416,13 @@ ${v.guidance ? v.guidance + "\n" : ""}Criteria: ${v.criteria || "(none)"}
           hopCount: 1
         })).catch(() => {
         });
+        try {
+          if (parent?.directory) {
+            const res = mutateChecklist(parent.directory, parentId, (items) => routeVerdictToChecklist(items, { sessionId: v.sessionId, verdict: v.verdict, guidance: v.guidance, round: v.round, ts: v.ts }).items);
+            if (res.some((i) => i.child?.sessionId === v.sessionId)) logger.log(`[supervision] reflected '${v.verdict}' onto parent ${parentId.slice(0, 8)} checklist`);
+          }
+        } catch {
+        }
         logger.log(`[supervision] verdict '${v.verdict}' for ${v.sessionId.slice(0, 8)} \u2192 parent ${parentId.slice(0, 8)}`);
       } catch {
       }
@@ -13874,7 +14031,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       const specs = loadExposedTunnels();
       if (specs.length === 0) return;
       logger.log(`[exposed-tunnels] Restoring ${specs.length} tunnel(s) from ${EXPOSED_TUNNELS_FILE}`);
-      const { FrpcTunnel } = await import('./frpc-DlsBjcRf.mjs');
+      const { FrpcTunnel } = await import('./frpc-1YwDchv1.mjs');
       for (const spec of specs) {
         if (tunnels.has(spec.name)) continue;
         try {
@@ -14650,4 +14807,4 @@ var run = /*#__PURE__*/Object.freeze({
     writeStopMarker: writeStopMarker
 });
 
-export { GeminiTransport$1 as $, READ_ONLY_TOOLS as A, loadMachineContext as B, buildMachineInstructions as C, machineToolsForRole as D, buildMachineTools as E, resolveModel as F, formatHandle as G, normalizeAllowedUser as H, loadSecurityContextConfig as I, resolveSecurityContext as J, buildSecurityContextFromFlags as K, mergeSecurityContexts as L, buildSessionShareUrl as M, computeOutboundHop as N, buildMachineShareUrl as O, parseHandle as P, handleMatchesMetadata as Q, RoutineStore as R, ServeAuth as S, describeMisconfiguration as T, buildMachineDeps as U, generateHookSettings as V, projectInfo as W, DefaultTransport$1 as X, acpBackend as Y, acpAgentConfig as Z, codexMcpBackend as _, createSessionStore as a, claudeAuth as a0, instanceConfig as a1, api as a2, run as a3, stopDaemon as b, connectToHypha as c, daemonStatus as d, clearStopMarker as e, stopMarkerExists as f, getHyphaServerUrl$1 as g, getFrpsSubdomainHost as h, getFrpsServerPort as i, getFrpsServerAddr as j, getHyphaServerUrl as k, hasCookieToken as l, RoutineRunner as m, shortId as n, getSkillsServer as o, parseFrontmatter as p, getSkillsWorkspaceName as q, registerMachineService as r, startDaemon as s, getSkillsCollectionName as t, fetchWithTimeout as u, searchSkills as v, SKILLS_DIR as w, getSkillInfo as x, downloadSkillFile as y, listSkillFiles as z };
+export { acpAgentConfig as $, buildMachineInstructions as A, machineToolsForRole as B, buildMachineTools as C, resolveModel as D, readChecklist as E, compileChecklist as F, RoutineStore as G, RoutineRunner as H, formatHandle as I, normalizeAllowedUser as J, loadSecurityContextConfig as K, resolveSecurityContext as L, buildSecurityContextFromFlags as M, mergeSecurityContexts as N, buildSessionShareUrl as O, computeOutboundHop as P, buildMachineShareUrl as Q, READ_ONLY_TOOLS as R, ServeAuth as S, parseHandle as T, handleMatchesMetadata as U, describeMisconfiguration as V, buildMachineDeps as W, generateHookSettings as X, projectInfo as Y, DefaultTransport$1 as Z, acpBackend as _, createSessionStore as a, codexMcpBackend as a0, GeminiTransport$1 as a1, claudeAuth as a2, instanceConfig as a3, api as a4, run as a5, stopDaemon as b, connectToHypha as c, daemonStatus as d, clearStopMarker as e, stopMarkerExists as f, getHyphaServerUrl$1 as g, getFrpsSubdomainHost as h, getFrpsServerPort as i, getFrpsServerAddr as j, getHyphaServerUrl as k, hasCookieToken as l, shortId as m, getSkillsServer as n, getSkillsWorkspaceName as o, parseFrontmatter as p, getSkillsCollectionName as q, registerMachineService as r, startDaemon as s, fetchWithTimeout as t, searchSkills as u, SKILLS_DIR as v, getSkillInfo as w, downloadSkillFile as x, listSkillFiles as y, loadMachineContext as z };

package/dist/{run-6Pp8yTPw.mjs → run-yxK4M2Ni.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { n as shortId, c as connectToHypha, a as createSessionStore, r as registerMachineService, V as generateHookSettings } from './run-C4BsPJ_p.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { m as shortId, c as connectToHypha, a as createSessionStore, r as registerMachineService, X as generateHookSettings } from './run-PlINWUZp.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{serveCommands-UDH0noeg.mjs → serveCommands-DkgE7eM3.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+  const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+  const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+  const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+  const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-CuY9G_88.mjs');
+  const { connectAndGetMachine } = await import('./commands-BKrGv74d.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-QZooKtI4.mjs → serveManager-DymHllAS.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-C4BsPJ_p.mjs';
+import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-PlINWUZp.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -713,7 +713,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, `static-${subdomainSafe}-${mount.linkToken}`]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-DlsBjcRf.mjs');
+      const { FrpcTunnel } = await import('./frpc-1YwDchv1.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,

package/dist/{sideband-Wfli3n7U.mjs → sideband-DF2mZOOx.mjs}

@@ -1,4 +1,4 @@
-import { A as READ_ONLY_TOOLS, B as loadMachineContext, C as buildMachineInstructions, D as machineToolsForRole, E as buildMachineTools } from './run-C4BsPJ_p.mjs';
+import { R as READ_ONLY_TOOLS, z as loadMachineContext, A as buildMachineInstructions, B as machineToolsForRole, C as buildMachineTools } from './run-PlINWUZp.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.120",
+  "version": "0.2.122",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -20,7 +20,7 @@
   "scripts": {
     "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/loop bin/skills/loop && cp -r ../../skills/crew bin/skills/crew && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
+    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
     "dev": "tsx src/cli.ts",
     "dev:daemon": "tsx src/cli.ts daemon start-sync",