svamp-cli 0.2.135 → 0.2.137

package/dist/{agentCommands-DUGnqRQj.mjs → agentCommands-DTHW4R21.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, mkdirSync, writeFileSync, renameSync } from '
 import { join, dirname } from 'node:path';
 import os from 'node:os';
 import { requireNotSandboxed } from './sandboxDetect-DNTcbgWD.mjs';
-import { m as shortId } from './run-gpXzhDA6.mjs';
+import { m as shortId } from './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -96,7 +96,7 @@ async function sessionSetTitle(title) {
 }
 async function sessionSetProjectDescription(description) {
   const dir = process.cwd();
-  const { projectName, writeProjectInfo, sanitizeDescription, projectInfoPath } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n._; });
+  const { projectName, writeProjectInfo, sanitizeDescription, projectInfoPath } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a1; });
   const desc = sanitizeDescription(description, 240);
   if (!desc) {
     console.error("Project description is empty.");
@@ -180,7 +180,7 @@ async function sessionBroadcast(action, args) {
   console.log(`Broadcast sent: ${action}`);
 }
 async function connectToMachineService() {
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   return connectAndGetMachine();
 }
 async function inboxSend(targetSessionId, opts) {
@@ -197,7 +197,7 @@ async function inboxSend(targetSessionId, opts) {
   }
   const { server, machine } = await connectToMachineService();
   try {
-    const { resolveSessionId } = await import('./commands-K2-vteB-.mjs');
+    const { resolveSessionId } = await import('./commands-DsRfvxD-.mjs');
     const sessions = await machine.listSessions();
     const match = resolveSessionId(sessions, targetSessionId);
     const fullTargetId = match.sessionId;

package/dist/{auth-BWxPTz8i.mjs → auth-C9Sf8V6q.mjs}

@@ -1,4 +1,4 @@
-import { D as resolveModel } from './run-gpXzhDA6.mjs';
+import { D as resolveModel } from './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-gpXzhDA6.mjs';
+import { e as clearStopMarker, f as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-CsxZYCHX.mjs';
 import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';
 import 'os';
 import 'fs/promises';
@@ -34,7 +34,7 @@ const subcommand = args[0];
 let daemonSubcommand = args[1];
 async function main() {
   try {
-    const { getLoadedConfig } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a5; });
+    const { getLoadedConfig } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a8; });
     getLoadedConfig();
   } catch {
   }
@@ -51,7 +51,7 @@ async function main() {
         console.error(`svamp daemon restart: ${err.message || err}`);
         process.exit(1);
       }
-      const { restartDaemon } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a7; });
+      const { restartDaemon } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.aa; });
       await restartDaemon();
       process.exit(0);
     }
@@ -344,7 +344,7 @@ async function main() {
       console.error("svamp service: Service commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-372fH_Ye.mjs');
+    const { handleServiceCommand } = await import('./commands-CyDXCEep.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-DNTcbgWD.mjs');
@@ -352,7 +352,7 @@ async function main() {
       console.error("svamp serve: Serve commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-C6U7M8nI.mjs');
+    const { handleServeCommand } = await import('./serveCommands-BkmZ3DGf.mjs');
     await handleServeCommand();
     process.exit(0);
   } else if (subcommand === "process" || subcommand === "proc") {
@@ -361,7 +361,7 @@ async function main() {
       console.error("svamp process: Process commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-CqjHsfm4.mjs');
+    const { processCommand } = await import('./commands-C_X_NvsQ.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -375,14 +375,14 @@ async function main() {
     }), machineId);
     process.exit(0);
   } else if (subcommand === "trigger" || subcommand === "triggers" || subcommand === "routine" || subcommand === "routines") {
-    const { routineCommand } = await import('./commands-g87ont38.mjs');
+    const { routineCommand } = await import('./commands-BYPp9pFP.mjs');
     await routineCommand(args.slice(1));
     process.exit(0);
   } else if (subcommand === "wise-agent" || subcommand === "wise") {
     await handleWiseAgentCommand(args.slice(1));
     process.exit(0);
   } else if (subcommand === "feature" || subcommand === "crew") {
-    const { crewCommand } = await import('./commands-Du2aT4iG.mjs');
+    const { crewCommand } = await import('./commands-chWB1dqI.mjs');
     await crewCommand(args.slice(1));
     process.exit(0);
   } else if (subcommand === "--help" || subcommand === "-h") {
@@ -390,7 +390,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-B_ObzpnN.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-Bvc_HPUi.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -399,7 +399,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-EBzkqp4Y.mjs');
+  const { runInteractive } = await import('./run-vNXUrGj6.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -444,7 +444,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a1; });
+    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a4; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -456,7 +456,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a1; });
+  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a4; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -480,12 +480,12 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_MCP_AGENTS[config.agentName]) {
-    const { CodexMcpBackend } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a2; });
+    const { CodexMcpBackend } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a5; });
     backend = new CodexMcpBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a0; });
-    const { GeminiTransport } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a3; });
-    const { DefaultTransport } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.$; });
+    const { AcpBackend } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a3; });
+    const { GeminiTransport } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a6; });
+    const { DefaultTransport } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a2; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : new DefaultTransport(config.agentName);
     backend = new AcpBackend({
       agentName: config.agentName,
@@ -612,7 +612,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionWhoami, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionLoopStart, sessionLoopCancel, sessionLoopStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-K2-vteB-.mjs');
+  const { sessionList, sessionWhoami, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionLoopStart, sessionLoopCancel, sessionLoopStatus, sessionChecklist, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-DsRfvxD-.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -680,7 +680,7 @@ async function handleSessionCommand() {
         allowDomain.push(sessionArgs[++i]);
       }
     }
-    const { parseShareArg } = await import('./commands-K2-vteB-.mjs');
+    const { parseShareArg } = await import('./commands-DsRfvxD-.mjs');
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -765,7 +765,7 @@ async function handleSessionCommand() {
       console.error("  Rewinds history: rewrites the message + drops everything after it, then restarts Claude.");
       process.exit(1);
     }
-    const { sessionEditMessage } = await import('./commands-K2-vteB-.mjs');
+    const { sessionEditMessage } = await import('./commands-DsRfvxD-.mjs');
     await sessionEditMessage(sessionArgs[1], sessionArgs[2], sessionArgs[3], targetMachineId);
   } else if (sessionSubcommand === "refine") {
     if (!sessionArgs[1] || !sessionArgs[2]) {
@@ -773,7 +773,7 @@ async function handleSessionCommand() {
       console.error("  Asks the agent to revise its latest reply in place (no extra round).");
       process.exit(1);
     }
-    const { sessionRefineLastReply } = await import('./commands-K2-vteB-.mjs');
+    const { sessionRefineLastReply } = await import('./commands-DsRfvxD-.mjs');
     await sessionRefineLastReply(sessionArgs[1], sessionArgs[2], targetMachineId);
   } else if (sessionSubcommand === "undo-edit" || sessionSubcommand === "undo") {
     if (!sessionArgs[1]) {
@@ -781,7 +781,7 @@ async function handleSessionCommand() {
       console.error("  Reverts the most recent edit/refine, restoring the pre-edit history.");
       process.exit(1);
     }
-    const { sessionUndoEdit } = await import('./commands-K2-vteB-.mjs');
+    const { sessionUndoEdit } = await import('./commands-DsRfvxD-.mjs');
     await sessionUndoEdit(sessionArgs[1], targetMachineId);
   } else if (sessionSubcommand === "query") {
     const dir = sessionArgs[1];
@@ -791,7 +791,7 @@ async function handleSessionCommand() {
       console.error("  Spawns a stateless Claude session in <directory>, sends <prompt>, prints the answer, then deletes the session.");
       process.exit(1);
     }
-    const { sessionQuery } = await import('./commands-K2-vteB-.mjs');
+    const { sessionQuery } = await import('./commands-DsRfvxD-.mjs');
     await sessionQuery(dir, prompt, targetMachineId, {
       timeout: parseFlagInt("--timeout"),
       json: hasFlag("--json"),
@@ -824,7 +824,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session approve <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-K2-vteB-.mjs');
+    const { sessionApprove } = await import('./commands-DsRfvxD-.mjs');
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -834,7 +834,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session deny <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-K2-vteB-.mjs');
+    const { sessionDeny } = await import('./commands-DsRfvxD-.mjs');
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -870,13 +870,49 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     await sessionLoopStatus(sessionArgs[1], targetMachineId);
+  } else if (sessionSubcommand === "checklist") {
+    const id = sessionArgs[1];
+    if (!id) {
+      console.error('Usage: svamp session checklist <session-id> [get|set|add|rm|done|clear] [args] [--oracle "cmd"]');
+      console.error("  get (default)        show the checklist");
+      console.error('  set "<a>" "<b>" \u2026    replace the list with these inline items');
+      console.error('  add "<text>"         append one item (--oracle "cmd" attaches a gate)');
+      console.error("  done <id|#> \u2026        mark item(s) done");
+      console.error("  rm   <id|#> \u2026        remove item(s)");
+      console.error("  clear                clear the checklist and stop the loop");
+      console.error("  limits: --max N (rounds) \xB7 --max-tokens N \xB7 --max-runtime SEC");
+      process.exit(1);
+    }
+    const CHECKLIST_ACTIONS = ["get", "set", "add", "rm", "done", "clear"];
+    let action = "get";
+    let restStart = 2;
+    if (sessionArgs[2] && CHECKLIST_ACTIONS.includes(sessionArgs[2])) {
+      action = sessionArgs[2];
+      restStart = 3;
+    }
+    const valueFlags = /* @__PURE__ */ new Set(["--oracle", "--max", "--max-tokens", "--max-runtime", "-m", "--machine"]);
+    const rest = [];
+    for (let i = restStart; i < sessionArgs.length; i++) {
+      const a = sessionArgs[i];
+      if (a.startsWith("-")) {
+        if (valueFlags.has(a)) i++;
+        continue;
+      }
+      rest.push(a);
+    }
+    await sessionChecklist(id, action, rest, targetMachineId, {
+      oracle: parseFlagStr("--oracle"),
+      maxIterations: parseFlagInt("--max") ?? parseFlagInt("--max-iterations"),
+      maxTokens: parseFlagInt("--max-tokens"),
+      maxRuntimeSec: parseFlagInt("--max-runtime")
+    });
   } else if (sessionSubcommand === "set-title") {
     const title = sessionArgs[1];
     if (!title) {
       console.error("Usage: svamp session set-title <title>");
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-DUGnqRQj.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-DTHW4R21.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-project-description" || sessionSubcommand === "set-project") {
     const desc = sessionArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
@@ -884,7 +920,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-project-description <text>");
       process.exit(1);
     }
-    const { sessionSetProjectDescription } = await import('./agentCommands-DUGnqRQj.mjs');
+    const { sessionSetProjectDescription } = await import('./agentCommands-DTHW4R21.mjs');
     await sessionSetProjectDescription(desc);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -893,7 +929,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-DUGnqRQj.mjs');
+    const { sessionSetLink } = await import('./agentCommands-DTHW4R21.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "notify") {
     const message = sessionArgs[1];
@@ -902,7 +938,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-DUGnqRQj.mjs');
+    const { sessionNotify } = await import('./agentCommands-DTHW4R21.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -910,7 +946,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session broadcast <action> [args...]\nActions: open-canvas <url> [label], close-canvas, toast <message>");
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-DUGnqRQj.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-DTHW4R21.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -921,7 +957,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-DUGnqRQj.mjs');
+        const { inboxSend } = await import('./agentCommands-DTHW4R21.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
@@ -936,7 +972,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-DUGnqRQj.mjs');
+        const { inboxList } = await import('./agentCommands-DTHW4R21.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -958,7 +994,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-DUGnqRQj.mjs');
+        const { inboxList } = await import('./agentCommands-DTHW4R21.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -968,7 +1004,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "reply") {
       if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-DUGnqRQj.mjs');
+        const { inboxReply } = await import('./agentCommands-DTHW4R21.mjs');
         await inboxReply(sessionArgs[2], sessionArgs[3]);
       } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
         await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
@@ -1004,7 +1040,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-K2-vteB-.mjs');
+    const { machineShare } = await import('./commands-DsRfvxD-.mjs');
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -1055,14 +1091,14 @@ async function handleMachineCommand() {
       process.exit(1);
     }
     if (all) {
-      const { fleetExec } = await import('./fleet-BxQs8C8X.mjs');
+      const { fleetExec } = await import('./fleet-yhBX5aRm.mjs');
       await fleetExec(command, { cwd });
     } else {
-      const { machineExec } = await import('./commands-K2-vteB-.mjs');
+      const { machineExec } = await import('./commands-DsRfvxD-.mjs');
       await machineExec(machineId, command, cwd);
     }
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-K2-vteB-.mjs');
+    const { machineInfo } = await import('./commands-DsRfvxD-.mjs');
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -1082,10 +1118,10 @@ async function handleMachineCommand() {
         level = machineArgs[++i];
       }
     }
-    const { machineNotify } = await import('./agentCommands-DUGnqRQj.mjs');
+    const { machineNotify } = await import('./agentCommands-DTHW4R21.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-K2-vteB-.mjs');
+    const { machineLs } = await import('./commands-DsRfvxD-.mjs');
     let machineId;
     let showHidden = false;
     let path;
@@ -1141,20 +1177,20 @@ Examples:
   };
   const hasFlag = (name) => fleetArgs.includes(`--${name}`);
   if (sub === "status") {
-    const { fleetStatus } = await import('./fleet-BxQs8C8X.mjs');
+    const { fleetStatus } = await import('./fleet-yhBX5aRm.mjs');
     await fleetStatus();
   } else if (sub === "upgrade-claude") {
-    const { fleetUpgradeClaude } = await import('./fleet-BxQs8C8X.mjs');
+    const { fleetUpgradeClaude } = await import('./fleet-yhBX5aRm.mjs');
     await fleetUpgradeClaude({ version: flag("version", "-v") });
   } else if (sub === "upgrade-svamp") {
-    const { fleetUpgradeSvamp } = await import('./fleet-BxQs8C8X.mjs');
+    const { fleetUpgradeSvamp } = await import('./fleet-yhBX5aRm.mjs');
     await fleetUpgradeSvamp({ version: flag("version", "-v"), excludeSelf: hasFlag("exclude-self") });
   } else if (sub === "daemon-restart") {
-    const { fleetDaemonRestart } = await import('./fleet-BxQs8C8X.mjs');
+    const { fleetDaemonRestart } = await import('./fleet-yhBX5aRm.mjs');
     await fleetDaemonRestart({ graceful: !hasFlag("cleanup") });
   } else if (sub === "push-skill") {
     const name = fleetArgs[1];
-    const { fleetPushSkill } = await import('./fleet-BxQs8C8X.mjs');
+    const { fleetPushSkill } = await import('./fleet-yhBX5aRm.mjs');
     await fleetPushSkill(name);
   } else {
     console.error(`Unknown fleet subcommand: ${sub}`);
@@ -1170,7 +1206,7 @@ async function handleSkillsCommand() {
     await printSkillsHelp();
     return;
   }
-  const { skillsFind, skillsInstall, skillsList, skillsRemove, skillsPublish } = await import('./commands-C9_gRWF1.mjs');
+  const { skillsFind, skillsInstall, skillsList, skillsRemove, skillsPublish } = await import('./commands-DJudKZ5J.mjs');
   if (skillsSubcommand === "find" || skillsSubcommand === "search") {
     const query = skillsArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
     if (!query) {
@@ -1217,7 +1253,7 @@ async function loginToHypha() {
     process.exit(1);
   }
   const anchor = anchorArg.replace(/\/+$/, "");
-  const { loadInstanceConfig } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a5; });
+  const { loadInstanceConfig } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a8; });
   let cfg = null;
   try {
     cfg = await loadInstanceConfig({ anchor, force: true });
@@ -1328,7 +1364,7 @@ async function logoutFromHypha() {
   } catch {
   }
   try {
-    const { clearInstanceConfigCache } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a5; });
+    const { clearInstanceConfigCache } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a8; });
     clearInstanceConfigCache();
   } catch {
   }
@@ -1666,7 +1702,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a4; });
+  const mod = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a7; });
   if (hasHypha) {
     let url;
     const hyphaIdx = argv.indexOf("--use-hypha-proxy");
@@ -1720,7 +1756,7 @@ async function applyDaemonShareFlag(argv) {
     }
   }
   if (collected.length === 0) return;
-  const { updateEnvFile } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a4; });
+  const { updateEnvFile } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a7; });
   const seen = /* @__PURE__ */ new Set();
   const deduped = collected.filter((e) => {
     const k = e.toLowerCase();
@@ -1753,7 +1789,7 @@ async function handleWiseAgentCommand(rest) {
       }
     });
     const message = rest.slice(1).map((a, idx) => ({ a, idx: idx + 1 })).filter(({ a, idx }) => !a.startsWith("-") && !consumed.has(String(idx))).map(({ a }) => a).join(" ");
-    const { wiseAskCli } = await import('./commands-K2-vteB-.mjs');
+    const { wiseAskCli } = await import('./commands-DsRfvxD-.mjs');
     await wiseAskCli(machineId, message, sessionId, { json });
     return;
   }
@@ -1765,7 +1801,7 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { runWiseVoiceCli } = await import('./headlessCli-BZdzfGyK.mjs');
+    const { runWiseVoiceCli } = await import('./headlessCli-DBN-VqGk.mjs');
     await runWiseVoiceCli({ voice: valueOf(["--voice"]), wakeKeywordPath: valueOf(["--wake"]), model: valueOf(["--model"]) });
     return;
   }
@@ -1807,7 +1843,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
     return;
   }
   const authArgs = rest.slice(1);
-  const mod = await import('./auth-BWxPTz8i.mjs');
+  const mod = await import('./auth-C9Sf8V6q.mjs');
   let action;
   try {
     action = mod.parseWiseAgentAuthArgs(authArgs);
@@ -1817,7 +1853,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
     return;
   }
   if (action) {
-    const { updateEnvFile } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a4; });
+    const { updateEnvFile } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a7; });
     const updates = mod.buildWiseAgentEnvUpdates(action);
     updateEnvFile(updates);
     for (const [k, v] of Object.entries(updates)) {
@@ -1831,7 +1867,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
 }
 async function handleDaemonAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const mod = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a4; });
+  const mod = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a7; });
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate
@@ -2144,7 +2180,7 @@ Examples:
 async function printSkillsHelp() {
   let browseUrl = "<HYPHA_SERVER_URL>/<workspace>/artifacts/marketplace (set HYPHA_SERVER_URL)";
   try {
-    const { getArtifactBaseUrl, getSkillsCollectionName } = await import('./run-gpXzhDA6.mjs').then(function (n) { return n.a6; });
+    const { getArtifactBaseUrl, getSkillsCollectionName } = await import('./run-CsxZYCHX.mjs').then(function (n) { return n.a9; });
     browseUrl = `${getArtifactBaseUrl()}/${getSkillsCollectionName()}`;
   } catch {
   }

package/dist/{commands-g87ont38.mjs → commands-BYPp9pFP.mjs}

@@ -1,7 +1,7 @@
 import { execSync, execFileSync } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { createServer } from 'node:http';
-import { E as readChecklist, F as compileChecklist, G as RoutineStore, H as RoutineRunner } from './run-gpXzhDA6.mjs';
+import { E as readChecklist, F as compileChecklist, G as RoutineStore, H as RoutineRunner } from './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -104,7 +104,7 @@ Criteria: ${res.criteria || "(none)"}
       urgency: "normal",
       hopCount: 1
     };
-    const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+    const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.sessionRPC(reportTo, "sendInboxMessage", { message });

package/dist/{commands-CqjHsfm4.mjs → commands-C_X_NvsQ.mjs}

@@ -1,11 +1,11 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-K2-vteB-.mjs';
+import { connectAndGetMachine } from './commands-DsRfvxD-.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-gpXzhDA6.mjs';
+import './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/dist/{commands-372fH_Ye.mjs → commands-CyDXCEep.mjs}

@@ -58,7 +58,7 @@ async function serviceExpose(args) {
     process.exit(1);
   }
   if (foreground) {
-    const { runFrpcTunnel } = await import('./frpc-iVFYzz91.mjs');
+    const { runFrpcTunnel } = await import('./frpc-DD1dWpQ3.mjs');
     await runFrpcTunnel(name, ports, void 0, {
       group,
       groupKey,
@@ -68,7 +68,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -123,7 +123,7 @@ async function serviceServe(args) {
     };
     process.on("SIGINT", cleanup);
     process.on("SIGTERM", cleanup);
-    const { runFrpcTunnel } = await import('./frpc-iVFYzz91.mjs');
+    const { runFrpcTunnel } = await import('./frpc-DD1dWpQ3.mjs');
     await runFrpcTunnel(name, [caddyPort]);
   } catch (err) {
     console.error(`Error serving directory: ${err.message}`);
@@ -132,7 +132,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+    const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -172,7 +172,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+    const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/{commands-C9_gRWF1.mjs → commands-DJudKZ5J.mjs}

@@ -1,7 +1,7 @@
 import os from 'os';
 import fs__default from 'fs';
 import { resolve, join, relative } from 'path';
-import { p as parseFrontmatter, n as getSkillsServer, o as getSkillsWorkspaceName, q as getSkillsCollectionName, t as fetchWithTimeout, u as searchSkills, v as SKILLS_DIR, w as getSkillInfo, x as downloadSkillFile, y as listSkillFiles } from './run-gpXzhDA6.mjs';
+import { p as parseFrontmatter, n as getSkillsServer, o as getSkillsWorkspaceName, q as getSkillsCollectionName, t as fetchWithTimeout, u as searchSkills, v as SKILLS_DIR, w as getSkillInfo, x as downloadSkillFile, y as listSkillFiles } from './run-CsxZYCHX.mjs';
 import 'fs/promises';
 import 'url';
 import 'child_process';

package/dist/{commands-K2-vteB-.mjs → commands-DsRfvxD-.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { basename, resolve, join, isAbsolute } from 'node:path';
 import os from 'node:os';
-import { I as formatHandle, J as normalizeAllowedUser, K as loadSecurityContextConfig, L as resolveSecurityContext, M as buildSecurityContextFromFlags, N as mergeSecurityContexts, c as connectToHypha, O as buildSessionShareUrl, P as computeOutboundHop, m as shortId, Q as buildMachineShareUrl, T as parseHandle, U as handleMatchesMetadata } from './run-gpXzhDA6.mjs';
+import { I as formatHandle, J as normalizeAllowedUser, K as loadSecurityContextConfig, L as resolveSecurityContext, M as buildSecurityContextFromFlags, N as mergeSecurityContexts, c as connectToHypha, O as buildSessionShareUrl, P as validateChecklist, Q as computeOutboundHop, m as shortId, T as buildMachineShareUrl, U as summarize, V as newItem, W as parseHandle, X as handleMatchesMetadata } from './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -2460,6 +2460,123 @@ async function sessionLoopStatus(sessionIdPartial, machineId) {
     await server.disconnect();
   }
 }
+const CHECKLIST_MARK = {
+  todo: " ",
+  active: "~",
+  verifying: "?",
+  awaiting_review: "\u2026",
+  rework: "\u21BB",
+  blocked: "\u2717",
+  done: "x"
+};
+function printChecklist(items) {
+  if (!items.length) {
+    console.log("  (empty checklist)");
+    return;
+  }
+  items.forEach((it, i) => {
+    const crew = it.disposition === "delegated" ? ` [crew${it.child?.sessionId ? ` ${it.child.sessionId.slice(0, 8)}` : ""}]` : "";
+    const oracle = it.eval?.type === "oracle" ? ` (oracle: ${it.eval.cmd})` : "";
+    console.log(`  ${i + 1}. [${CHECKLIST_MARK[it.status] ?? " "}] ${it.text}${crew}${oracle}`);
+  });
+  const s = summarize(items);
+  console.log(`  \u2014 ${s.done}/${s.total} done${s.delegated ? `, ${s.delegated} delegated` : ""}${s.allDone ? " \u2713" : ""}`);
+}
+async function readChecklistItems(svc, fullId) {
+  try {
+    const raw = await svc.readFile(`.svamp/${fullId}/loop/checklist.json`);
+    const content = typeof raw === "string" ? raw : raw?.content;
+    if (content) {
+      const parsed = JSON.parse(Buffer.from(content, "base64").toString("utf-8"));
+      if (Array.isArray(parsed)) return parsed;
+      if (Array.isArray(parsed?.items)) return parsed.items;
+    }
+  } catch {
+  }
+  return [];
+}
+function resolveItemIds(items, tokens) {
+  const ids = [];
+  for (const tok of tokens) {
+    const byId = items.find((it) => it.id === tok);
+    if (byId) {
+      ids.push(byId.id);
+      continue;
+    }
+    const idx = parseInt(tok, 10);
+    if (!isNaN(idx) && idx >= 1 && idx <= items.length) ids.push(items[idx - 1].id);
+  }
+  return ids;
+}
+function mutateChecklistItems(items, action, args, opts, now = Date.now()) {
+  const evalOpt = opts?.oracle ? { eval: { type: "oracle", cmd: opts.oracle } } : {};
+  let next = items;
+  if (action === "set") {
+    next = args.map((text, i) => newItem(text, evalOpt, i, now));
+  } else if (action === "add") {
+    next = [...items, newItem(args.join(" ").trim(), evalOpt, items.length, now)];
+  } else if (action === "done" || action === "rm") {
+    const targetIds = new Set(resolveItemIds(items, args));
+    next = action === "rm" ? items.filter((it) => !targetIds.has(it.id)) : items.map((it) => targetIds.has(it.id) ? { ...it, status: "done", doneAt: now } : it);
+  }
+  return next.map((it, i) => ({ ...it, order: i }));
+}
+function checklistConfigPatch(opts) {
+  if (!opts) return void 0;
+  const budget = {};
+  if (opts.maxTokens && opts.maxTokens > 0) budget.max_tokens = opts.maxTokens;
+  if (opts.maxRuntimeSec && opts.maxRuntimeSec > 0) budget.max_runtime_sec = opts.maxRuntimeSec;
+  const hasBudget = Object.keys(budget).length > 0;
+  if (!opts.maxIterations && !hasBudget) return void 0;
+  return {
+    ...opts.maxIterations ? { maxIterations: opts.maxIterations } : {},
+    ...hasBudget ? { budget } : {}
+  };
+}
+async function sessionChecklist(sessionIdPartial, action, args, machineId, opts) {
+  const { server, machine, fullId } = await connectAndResolveSession(sessionIdPartial, machineId);
+  try {
+    const svc = getSessionProxy(machine, fullId);
+    if (action === "get") {
+      console.log(`Checklist on session ${fullId.slice(0, 8)}:`);
+      printChecklist(await readChecklistItems(svc, fullId));
+      return;
+    }
+    if (action === "clear") {
+      await svc.updateConfig({ checklist: [] });
+      console.log(`Checklist cleared on session ${fullId.slice(0, 8)} \u2014 loop stopped.`);
+      return;
+    }
+    const current = await readChecklistItems(svc, fullId);
+    if ((action === "set" || action === "add") && !args.join(" ").trim()) {
+      console.error(`Usage: svamp session checklist <id> ${action} "<text>" [--oracle "cmd"]`);
+      process.exit(1);
+    }
+    if (action === "done" || action === "rm") {
+      if (!args.length) {
+        console.error(`Usage: svamp session checklist <id> ${action} <id|#> [<id|#> \u2026]`);
+        process.exit(1);
+      }
+      if (!resolveItemIds(current, args).length) {
+        console.error("No matching items.");
+        process.exit(1);
+      }
+    }
+    const items = mutateChecklistItems(current, action, args, { oracle: opts?.oracle });
+    const errs = validateChecklist(items);
+    if (errs.length) {
+      console.error(`Checklist invalid: ${errs.join("; ")}`);
+      process.exit(1);
+    }
+    const ccfg = checklistConfigPatch(opts);
+    await svc.updateConfig({ checklist: items, ...ccfg ? { checklistConfig: ccfg } : {} });
+    console.log(`Checklist updated on session ${fullId.slice(0, 8)}:`);
+    printChecklist(items);
+    if (items.some((it) => it.status !== "done")) console.log("  \u{1F501} loop active \u2014 iterating until all done.");
+  } finally {
+    await server.disconnect();
+  }
+}
 async function sessionInboxSend(sessionIdPartial, body, machineId, opts) {
   const { server, machine, fullId } = await connectAndResolveSession(sessionIdPartial, machineId);
   try {
@@ -2600,4 +2717,4 @@ async function sessionInboxClear(sessionIdPartial, machineId, opts) {
   }
 }
 
-export { collectAssistantResponse, connectAndGetMachine, connectAndResolveSession, createWorktree, generateWorktreeName, machineExec, machineInfo, machineLs, machineShare, parseShareArg, queryCore, renderMessage, resolveSessionId, sendCore, sessionApprove, sessionArchive, sessionAttach, sessionDelete, sessionDeny, sessionEditMessage, sessionInboxClear, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxSend, sessionInfo, sessionList, sessionLoopCancel, sessionLoopStart, sessionLoopStatus, sessionMachines, sessionMessages, sessionQuery, sessionRefineLastReply, sessionResume, sessionSend, sessionShare, sessionSpawn, sessionUndoEdit, sessionWait, sessionWhoami, snapshotLatestSeq, validateSendOptions, wiseAskCli };
+export { checklistConfigPatch, collectAssistantResponse, connectAndGetMachine, connectAndResolveSession, createWorktree, generateWorktreeName, machineExec, machineInfo, machineLs, machineShare, mutateChecklistItems, parseShareArg, queryCore, renderMessage, resolveItemIds, resolveSessionId, sendCore, sessionApprove, sessionArchive, sessionAttach, sessionChecklist, sessionDelete, sessionDeny, sessionEditMessage, sessionInboxClear, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxSend, sessionInfo, sessionList, sessionLoopCancel, sessionLoopStart, sessionLoopStatus, sessionMachines, sessionMessages, sessionQuery, sessionRefineLastReply, sessionResume, sessionSend, sessionShare, sessionSpawn, sessionUndoEdit, sessionWait, sessionWhoami, snapshotLatestSeq, validateSendOptions, wiseAskCli };

package/dist/{commands-Du2aT4iG.mjs → commands-chWB1dqI.mjs}

@@ -1,7 +1,7 @@
 import { existsSync } from 'node:fs';
-import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-K2-vteB-.mjs';
+import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-DsRfvxD-.mjs';
 import { execSync } from 'node:child_process';
-import { m as shortId } from './run-gpXzhDA6.mjs';
+import { m as shortId } from './run-CsxZYCHX.mjs';
 import 'node:path';
 import 'node:os';
 import 'os';

package/dist/{fleet-BxQs8C8X.mjs → fleet-yhBX5aRm.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { c as connectToHypha } from './run-gpXzhDA6.mjs';
+import { c as connectToHypha } from './run-CsxZYCHX.mjs';
 import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-HydRNEt7.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{frpc-iVFYzz91.mjs → frpc-DD1dWpQ3.mjs}

@@ -4,7 +4,7 @@ import { mkdirSync, writeFileSync, unlinkSync, existsSync, chmodSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { randomUUID, createHash } from 'crypto';
-import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-gpXzhDA6.mjs';
+import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-CsxZYCHX.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:crypto';

package/dist/{headlessCli-BZdzfGyK.mjs → headlessCli-DBN-VqGk.mjs}

@@ -1,5 +1,5 @@
-import { D as resolveModel, V as describeMisconfiguration, W as buildMachineDeps } from './run-gpXzhDA6.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-v4GqYhGB.mjs';
+import { D as resolveModel, Y as describeMisconfiguration, Z as buildMachineDeps } from './run-CsxZYCHX.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-BMxeN8ks.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-gpXzhDA6.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{package-B_ObzpnN.mjs → package-Bvc_HPUi.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.135";
+var version = "0.2.137";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -19,7 +19,7 @@ var exports$1 = {
 var scripts = {
 	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/loop bin/skills/loop && cp -r ../../skills/crew bin/skills/crew && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-checklist-cli.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
 	dev: "tsx src/cli.ts",
 	"dev:daemon": "tsx src/cli.ts daemon start-sync",

package/dist/{run-gpXzhDA6.mjs → run-CsxZYCHX.mjs}

@@ -2677,7 +2677,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-iVFYzz91.mjs');
+        const { FrpcTunnel } = await import('./frpc-DD1dWpQ3.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -2975,7 +2975,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-v4GqYhGB.mjs');
+          const { toolsForRole } = await import('./sideband-BMxeN8ks.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -3074,7 +3074,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     if (r.error || !r.sender) return { error: r.error || "unauthorized" };
     const callId = "call_" + Math.random().toString(16).slice(2, 12);
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-K2-vteB-.mjs');
+    const { queryCore } = await import('./commands-DsRfvxD-.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -9838,6 +9838,17 @@ function summarize(items) {
     allDone: items.length > 0 && done === items.length
   };
 }
+function newItem(text, opts = {}, order = 0, now = Date.now()) {
+  return {
+    id: shortId(),
+    text: text.trim(),
+    disposition: opts.disposition ?? "inline",
+    ...opts.eval ? { eval: opts.eval } : {},
+    status: "todo",
+    order,
+    createdAt: now
+  };
+}
 function checklistPath(projectRoot, sessionId) {
   return join(projectRoot, ".svamp", sessionId, "loop", "checklist.json");
 }
@@ -10738,6 +10749,15 @@ function resolveLoopInit() {
   for (const c of candidates) if (existsSync$1(c)) return c;
   return null;
 }
+function parseLoopBudget(raw) {
+  if (!raw || typeof raw !== "object") return void 0;
+  const rt = Number(raw.max_runtime_sec);
+  const tok = Number(raw.max_tokens);
+  const out = {};
+  if (Number.isFinite(rt) && rt > 0) out.max_runtime_sec = rt;
+  if (Number.isFinite(tok) && tok > 0) out.max_tokens = tok;
+  return out.max_runtime_sec || out.max_tokens ? out : void 0;
+}
 function initLoop(directory, cfg) {
   const initScript = resolveLoopInit();
   if (!initScript) return false;
@@ -10746,6 +10766,8 @@ function initLoop(directory, cfg) {
   if (cfg.oracle) args.push("--oracle", cfg.oracle);
   if (typeof cfg.maxIterations === "number") args.push("--max", String(cfg.maxIterations));
   args.push("--evaluator", cfg.evaluator === false ? "off" : "on");
+  if (cfg.budget?.max_runtime_sec) args.push("--max-runtime", String(cfg.budget.max_runtime_sec));
+  if (cfg.budget?.max_tokens) args.push("--max-tokens", String(cfg.budget.max_tokens));
   if (cfg.model) args.push("--model", cfg.model);
   if (cfg.sessionId) args.push("--session", cfg.sessionId);
   const res = spawnSync(process.execPath, args, { encoding: "utf-8", timeout: 3e4 });
@@ -10927,6 +10949,7 @@ function createSvampConfigChecker(directory, sessionId, getMetadata, setMetadata
         const oracle = typeof cfg.oracle === "string" && cfg.oracle.trim() ? cfg.oracle.trim() : void 0;
         const evaluator = cfg.evaluator !== false;
         const maxIterations = typeof cfg.max_iterations === "number" ? cfg.max_iterations : typeof cfg.max_rounds === "number" ? cfg.max_rounds : 20;
+        const budget = parseLoopBudget(cfg.budget);
         const ok = initLoop(directory, {
           task: task || until,
           // LOOP.md goal = the task, or the until-criteria when hot-plugging
@@ -10934,6 +10957,7 @@ function createSvampConfigChecker(directory, sessionId, getMetadata, setMetadata
           oracle,
           maxIterations,
           evaluator,
+          budget,
           sessionId
         });
         if (ok) {
@@ -10973,6 +10997,7 @@ Or verify and finish \u2014 an independent Stop gate re-checks before you can st
     if ("checklist" in patch) {
       const raw = patch.checklist;
       const items = Array.isArray(raw) ? raw : [];
+      const ccfg = patch.checklistConfig && typeof patch.checklistConfig === "object" ? patch.checklistConfig : {};
       if (items.length) {
         const errs = validateChecklist(items);
         if (errs.length) {
@@ -10980,7 +11005,10 @@ Or verify and finish \u2014 an independent Stop gate re-checks before you can st
         } else {
           writeChecklist(directory, sessionId, items);
           const { criteria, oracle } = compileChecklist(items);
-          const ok = initLoop(directory, { task: criteria, criteria, oracle, maxIterations: 20, evaluator: true, sessionId });
+          const maxIterations = typeof ccfg.maxIterations === "number" ? ccfg.maxIterations : typeof ccfg.max_iterations === "number" ? ccfg.max_iterations : 20;
+          const evaluator = ccfg.evaluator !== false;
+          const budget = parseLoopBudget(ccfg.budget);
+          const ok = initLoop(directory, { task: criteria, criteria, oracle, maxIterations, evaluator, budget, sessionId });
           const s = summarize(items);
           if (ok) {
             const idle = getMetadata().lifecycleState === "idle";
@@ -10999,7 +11027,7 @@ Or verify and finish \u2014 an independent Stop gate re-checks before you can st
         deactivateLoop(directory, sessionId);
         sessionService.pushMessage({ type: "message", message: "Checklist cleared." }, "event");
       }
-      const { checklist: _c, ...restPatch } = patch;
+      const { checklist: _c, checklistConfig: _cc, ...restPatch } = patch;
       patch = restPatch;
     }
     if (Object.keys(patch).length > 0) {
@@ -11430,7 +11458,7 @@ async function startDaemon(options) {
     saveExposedTunnels(list);
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./frpc-iVFYzz91.mjs');
+    const { FrpcTunnel } = await import('./frpc-DD1dWpQ3.mjs');
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -11450,7 +11478,7 @@ async function startDaemon(options) {
     return tunnel;
   }
   const tunnelRecreateState = /* @__PURE__ */ new Map();
-  const { ServeManager } = await import('./serveManager-LSlxfyoD.mjs');
+  const { ServeManager } = await import('./serveManager-Dn5lyf7v.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -12112,6 +12140,9 @@ ${parts.join("\n")}`);
             "--permission-mode",
             permissionMode
           ];
+          const disallowedToolSet = new Set(effectiveMeta.disallowed_tools || []);
+          if (sessionMetadata.crew?.role === "feature") disallowedToolSet.add("AskUserQuestion");
+          if (disallowedToolSet.size) args.push("--disallowedTools", ...disallowedToolSet);
           if (model) args.push("--model", model);
           if (appendSystemPrompt) args.push("--append-system-prompt", appendSystemPrompt);
           if (claudeResumeId) args.push("--resume", claudeResumeId);
@@ -15051,4 +15082,4 @@ var run = /*#__PURE__*/Object.freeze({
     writeStopMarker: writeStopMarker
 });
 
-export { DefaultTransport$1 as $, buildMachineInstructions as A, machineToolsForRole as B, buildMachineTools as C, resolveModel as D, readChecklist as E, compileChecklist as F, RoutineStore as G, RoutineRunner as H, formatHandle as I, normalizeAllowedUser as J, loadSecurityContextConfig as K, resolveSecurityContext as L, buildSecurityContextFromFlags as M, mergeSecurityContexts as N, buildSessionShareUrl as O, computeOutboundHop as P, buildMachineShareUrl as Q, READ_ONLY_TOOLS as R, ServeAuth as S, parseHandle as T, handleMatchesMetadata as U, describeMisconfiguration as V, buildMachineDeps as W, composeSessionId as X, generateFriendlyName as Y, generateHookSettings as Z, projectInfo as _, createSessionStore as a, acpBackend as a0, acpAgentConfig as a1, codexMcpBackend as a2, GeminiTransport$1 as a3, claudeAuth as a4, instanceConfig as a5, api as a6, run as a7, stopDaemon as b, connectToHypha as c, daemonStatus as d, clearStopMarker as e, stopMarkerExists as f, getHyphaServerUrl$1 as g, getFrpsSubdomainHost as h, getFrpsServerPort as i, getFrpsServerAddr as j, getHyphaServerUrl as k, hasCookieToken as l, shortId as m, getSkillsServer as n, getSkillsWorkspaceName as o, parseFrontmatter as p, getSkillsCollectionName as q, registerMachineService as r, startDaemon as s, fetchWithTimeout as t, searchSkills as u, SKILLS_DIR as v, getSkillInfo as w, downloadSkillFile as x, listSkillFiles as y, loadMachineContext as z };
+export { generateFriendlyName as $, buildMachineInstructions as A, machineToolsForRole as B, buildMachineTools as C, resolveModel as D, readChecklist as E, compileChecklist as F, RoutineStore as G, RoutineRunner as H, formatHandle as I, normalizeAllowedUser as J, loadSecurityContextConfig as K, resolveSecurityContext as L, buildSecurityContextFromFlags as M, mergeSecurityContexts as N, buildSessionShareUrl as O, validateChecklist as P, computeOutboundHop as Q, READ_ONLY_TOOLS as R, ServeAuth as S, buildMachineShareUrl as T, summarize as U, newItem as V, parseHandle as W, handleMatchesMetadata as X, describeMisconfiguration as Y, buildMachineDeps as Z, composeSessionId as _, createSessionStore as a, generateHookSettings as a0, projectInfo as a1, DefaultTransport$1 as a2, acpBackend as a3, acpAgentConfig as a4, codexMcpBackend as a5, GeminiTransport$1 as a6, claudeAuth as a7, instanceConfig as a8, api as a9, run as aa, stopDaemon as b, connectToHypha as c, daemonStatus as d, clearStopMarker as e, stopMarkerExists as f, getHyphaServerUrl$1 as g, getFrpsSubdomainHost as h, getFrpsServerPort as i, getFrpsServerAddr as j, getHyphaServerUrl as k, hasCookieToken as l, shortId as m, getSkillsServer as n, getSkillsWorkspaceName as o, parseFrontmatter as p, getSkillsCollectionName as q, registerMachineService as r, startDaemon as s, fetchWithTimeout as t, searchSkills as u, SKILLS_DIR as v, getSkillInfo as w, downloadSkillFile as x, listSkillFiles as y, loadMachineContext as z };

package/dist/{run-EBzkqp4Y.mjs → run-vNXUrGj6.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { X as composeSessionId, Y as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, Z as generateHookSettings } from './run-gpXzhDA6.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { _ as composeSessionId, $ as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, a0 as generateHookSettings } from './run-CsxZYCHX.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{serveCommands-C6U7M8nI.mjs → serveCommands-BkmZ3DGf.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-K2-vteB-.mjs');
+  const { connectAndGetMachine } = await import('./commands-DsRfvxD-.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-LSlxfyoD.mjs → serveManager-Dn5lyf7v.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-gpXzhDA6.mjs';
+import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-CsxZYCHX.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -726,7 +726,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, `static-${subdomainSafe}-${mount.linkToken}`]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-iVFYzz91.mjs');
+      const { FrpcTunnel } = await import('./frpc-DD1dWpQ3.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,

package/dist/{sideband-v4GqYhGB.mjs → sideband-BMxeN8ks.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, z as loadMachineContext, A as buildMachineInstructions, B as machineToolsForRole, C as buildMachineTools } from './run-gpXzhDA6.mjs';
+import { R as READ_ONLY_TOOLS, z as loadMachineContext, A as buildMachineInstructions, B as machineToolsForRole, C as buildMachineTools } from './run-CsxZYCHX.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.135",
+  "version": "0.2.137",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -20,7 +20,7 @@
   "scripts": {
     "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/loop bin/skills/loop && cp -r ../../skills/crew bin/skills/crew && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
+    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-checklist-cli.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
     "dev": "tsx src/cli.ts",
     "dev:daemon": "tsx src/cli.ts daemon start-sync",