svamp-cli 0.2.164 → 0.2.166

package/dist/{commands-C8uqsoRM.mjs → commands-D51uPoPK.mjs}

@@ -1,7 +1,25 @@
-import { r as resolveProjectRoot, s as searchIssues, l as listIssues, a as addComment, u as updateIssue, b as summarize, c as addIssue, g as getIssue } from './store-BQxdRyuI.mjs';
+import { execSync } from 'node:child_process';
+import { m as resolveProjectRoot, n as searchIssues, o as listIssues, p as addComment, u as updateIssue, q as getIssue, t as summarize, v as addIssue } from './run-DEfioSLJ.mjs';
+import 'os';
+import 'fs/promises';
+import 'fs';
+import 'path';
+import 'url';
+import 'child_process';
+import 'crypto';
+import 'node:crypto';
 import 'node:fs';
+import 'util';
 import 'node:path';
-import 'node:child_process';
+import 'node:events';
+import 'node:os';
+import '@agentclientprotocol/sdk';
+import '@modelcontextprotocol/sdk/client/index.js';
+import '@modelcontextprotocol/sdk/client/stdio.js';
+import '@modelcontextprotocol/sdk/types.js';
+import 'zod';
+import 'node:fs/promises';
+import 'node:util';
 
 const STATUS_GLYPH = {
   backlog: "\u25CB",
@@ -166,6 +184,26 @@ ${issue.body}`);
         archive: "archived",
         backlog: "backlog"
       };
+      if (sub === "close" || sub === "done") {
+        const current = getIssue(root, id);
+        const vc = current?.verify?.type === "command" ? current.verify.text?.trim() : "";
+        if (vc) {
+          if (has(rest, "--force")) {
+            console.error(`\u26A0 #${id}: closing WITHOUT running verify-cmd (--force): \`${vc}\``);
+          } else {
+            try {
+              execSync(vc, { cwd: root, stdio: "pipe", timeout: 6e5, maxBuffer: 64 * 1024 * 1024 });
+            } catch (e) {
+              const tail = (String(e?.stdout || "") + String(e?.stderr || "")).split("\n").slice(-15).join("\n").trim();
+              console.error(`Refusing to close #${id}: its verify-cmd failed \u2014 the fix is not verified.
+  $ ${vc}
+${tail}
+(Fix the issue, or pass --force to override.)`);
+              process.exit(1);
+            }
+          }
+        }
+      }
       const updated = updateIssue(root, id, { status: map[sub] });
       if (!updated) {
         console.error(`Issue not found: ${id}`);

package/dist/{commands-D2Zpi3G8.mjs → commands-DbEd_EMK.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { basename, resolve, join, isAbsolute } from 'node:path';
 import os from 'node:os';
-import { I as formatHandle, J as normalizeAllowedUser, K as loadSecurityContextConfig, L as resolveSecurityContext, M as buildSecurityContextFromFlags, N as mergeSecurityContexts, c as connectToHypha, O as buildSessionShareUrl, P as validateChecklist, Q as computeOutboundHop, m as shortId, T as buildMachineShareUrl, U as summarize, V as newItem, W as parseHandle, X as handleMatchesMetadata } from './run-KCqpMQJZ.mjs';
+import { Q as formatHandle, T as normalizeAllowedUser, U as loadSecurityContextConfig, V as resolveSecurityContext, W as buildSecurityContextFromFlags, X as mergeSecurityContexts, c as connectToHypha, Y as buildSessionShareUrl, Z as validateChecklist, _ as computeOutboundHop, w as shortId, $ as buildMachineShareUrl, a0 as summarize, a1 as newItem, a2 as parseHandle, a3 as handleMatchesMetadata } from './run-DEfioSLJ.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-DVA2p60j.mjs → commands-Df6MbSt-.mjs}

@@ -1,7 +1,7 @@
 import { existsSync } from 'node:fs';
-import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-D2Zpi3G8.mjs';
+import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-DbEd_EMK.mjs';
 import { execSync } from 'node:child_process';
-import { m as shortId } from './run-KCqpMQJZ.mjs';
+import { u as updateIssue, p as addComment, v as addIssue, w as shortId } from './run-DEfioSLJ.mjs';
 import 'node:path';
 import 'node:os';
 import 'os';
@@ -191,6 +191,36 @@ async function featureStart(brief, opts = {}) {
       process.exit(1);
     }
     const childId = result.sessionId;
+    try {
+      let linkedId = opts.issueId;
+      if (linkedId) {
+        const u = updateIssue(projectRoot, linkedId, { disposition: "crew", session: childId, branch: wt.branch, status: "in_progress" });
+        if (!u) {
+          console.warn(`Note: issue ${linkedId} not found \u2014 creating a new crew issue instead.`);
+          linkedId = void 0;
+        } else {
+          addComment(projectRoot, u.id, `Delegated to crew child ${childId.slice(0, 8)} on \`${wt.branch}\` (base \`${base}\`).`);
+          linkedId = u.id;
+        }
+      }
+      if (!linkedId) {
+        const created = addIssue(projectRoot, {
+          title: brief.trim().split("\n")[0].slice(0, 80),
+          status: "in_progress",
+          disposition: "crew",
+          triaged: true,
+          session: childId,
+          scope: "project",
+          ...opts.oracle?.trim() ? { verify: { type: "command", text: opts.oracle.trim() } } : {},
+          body: brief.trim()
+        });
+        updateIssue(projectRoot, created.id, { branch: wt.branch });
+        linkedId = created.id;
+      }
+      console.log(`  issue:  #${linkedId} (crew, child ${childId.slice(0, 8)})`);
+    } catch (e) {
+      console.warn(`Note: could not link a crew issue (${e.message}).`);
+    }
     if (!lead.metadata?.crew) {
       try {
         await rpc(machine, lead.sessionId, "updateConfig", { patch: { crew: { role: "lead" } } });
@@ -470,7 +500,7 @@ async function crewCommand(args) {
     return;
   }
   if (sub === "start") {
-    const valueFlags = ["--oracle", "--base", "--action", "--max", "--dir", "-d", "--lead", "-m", "--machine"];
+    const valueFlags = ["--oracle", "--base", "--action", "--max", "--dir", "-d", "--lead", "-m", "--machine", "--issue"];
     const brief = positionals(rest, valueFlags).join(" ");
     const maxStr = flag(rest, "--max");
     const action = flag(rest, "--action");
@@ -480,6 +510,7 @@ async function crewCommand(args) {
       directory: flag(rest, "--dir", "-d"),
       oracle: flag(rest, "--oracle"),
       baseBranch: flag(rest, "--base"),
+      issueId: flag(rest, "--issue"),
       action: action === "block" ? "block" : action === "nudge" ? "nudge" : void 0,
       maxRounds: maxStr ? parseInt(maxStr, 10) : void 0
     });

package/dist/{commands-PsObXuzm.mjs → commands-DumGHsHS.mjs}

@@ -1,7 +1,7 @@
 import { execSync, execFileSync } from 'node:child_process';
 import { randomUUID } from 'node:crypto';
 import { createServer } from 'node:http';
-import { E as readChecklist, F as compileChecklist, G as RoutineStore, H as RoutineRunner } from './run-KCqpMQJZ.mjs';
+import { M as readChecklist, N as compileChecklist, O as RoutineStore, P as RoutineRunner } from './run-DEfioSLJ.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -104,7 +104,7 @@ Criteria: ${res.criteria || "(none)"}
       urgency: "normal",
       hopCount: 1
     };
-    const { connectAndGetMachine } = await import('./commands-D2Zpi3G8.mjs');
+    const { connectAndGetMachine } = await import('./commands-DbEd_EMK.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.sessionRPC(reportTo, "sendInboxMessage", { message });

package/dist/{commands-mAHn_FPb.mjs → commands-l8v1VLPp.mjs}

@@ -1,8 +1,26 @@
 import { spawnSync } from 'node:child_process';
-import { r as resolveProjectRoot } from './store-BQxdRyuI.mjs';
+import { m as resolveProjectRoot } from './run-DEfioSLJ.mjs';
 import { existsSync, unlinkSync, readFileSync, readdirSync, mkdirSync, writeFileSync, renameSync } from 'node:fs';
 import { join } from 'node:path';
 import { parse, stringify } from 'yaml';
+import 'os';
+import 'fs/promises';
+import 'fs';
+import 'path';
+import 'url';
+import 'child_process';
+import 'crypto';
+import 'node:crypto';
+import 'util';
+import 'node:events';
+import 'node:os';
+import '@agentclientprotocol/sdk';
+import '@modelcontextprotocol/sdk/client/index.js';
+import '@modelcontextprotocol/sdk/client/stdio.js';
+import '@modelcontextprotocol/sdk/types.js';
+import 'zod';
+import 'node:fs/promises';
+import 'node:util';
 
 function workflowsDir(projectRoot) {
   return join(projectRoot, ".svamp", "workflows");

package/dist/{fleet-BgpaxJ3S.mjs → fleet-Dwk-C37I.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { c as connectToHypha } from './run-KCqpMQJZ.mjs';
+import { c as connectToHypha } from './run-DEfioSLJ.mjs';
 import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-HydRNEt7.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{frpc-BbpARLqP.mjs → frpc-B6KtYbVe.mjs}

@@ -4,7 +4,7 @@ import { mkdirSync, writeFileSync, unlinkSync, existsSync, chmodSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { randomUUID, createHash } from 'crypto';
-import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-KCqpMQJZ.mjs';
+import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-DEfioSLJ.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:crypto';

package/dist/{headlessCli-BQKqriom.mjs → headlessCli-B7MIr4r2.mjs}

@@ -1,5 +1,5 @@
-import { D as resolveModel, Y as describeMisconfiguration, Z as buildMachineDeps } from './run-KCqpMQJZ.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-XblR5fr5.mjs';
+import { L as resolveModel, a4 as describeMisconfiguration, a5 as buildMachineDeps } from './run-DEfioSLJ.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-BuMjm0m2.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-KCqpMQJZ.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-DEfioSLJ.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{package-Dwhojj-r.mjs → package-Cu7Ik_Mk.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.163";
+var version = "0.2.166";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -19,7 +19,7 @@ var exports$1 = {
 var scripts = {
 	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/loop bin/skills/loop && cp -r ../../skills/crew bin/skills/crew && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-checklist-cli.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-loop-activation.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-checklist.mjs && npx tsx test/test-checklist-cli.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-routine.mjs && npx tsx test/test-routine-rpc.mjs && npx tsx test/test-checklist-watchdog.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
 	dev: "tsx src/cli.ts",
 	"dev:daemon": "tsx src/cli.ts daemon start-sync",

package/dist/{run-Dfj1qf30.mjs → run-D2AdmLLH.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { _ as composeSessionId, $ as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, a0 as generateHookSettings } from './run-KCqpMQJZ.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { a6 as composeSessionId, a7 as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, a8 as generateHookSettings } from './run-DEfioSLJ.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{run-KCqpMQJZ.mjs → run-DEfioSLJ.mjs}

@@ -2772,7 +2772,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-BbpARLqP.mjs');
+        const { FrpcTunnel } = await import('./frpc-B6KtYbVe.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -3213,7 +3213,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-XblR5fr5.mjs');
+          const { toolsForRole } = await import('./sideband-BuMjm0m2.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -3312,7 +3312,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     if (r.error || !r.sender) return { error: r.error || "unauthorized" };
     const callId = "call_" + Math.random().toString(16).slice(2, 12);
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-D2Zpi3G8.mjs');
+    const { queryCore } = await import('./commands-DbEd_EMK.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -5415,7 +5415,7 @@ function classifyInbound(message, now = Date.now()) {
   return { action: "wake", reason: "urgent", breakerTripped: tripped };
 }
 
-function resolveProjectRoot(directory) {
+function resolveProjectRoot$1(directory) {
   try {
     const top = execSync("git rev-parse --show-toplevel", {
       cwd: directory,
@@ -5427,10 +5427,10 @@ function resolveProjectRoot(directory) {
   return directory.replace(/[/\\]+$/, "") || directory;
 }
 function projectInfoPath(directory) {
-  return join(resolveProjectRoot(directory), ".svamp", "project.json");
+  return join(resolveProjectRoot$1(directory), ".svamp", "project.json");
 }
 function projectName(directory) {
-  return basename(resolveProjectRoot(directory).replace(/[/\\]+$/, "")) || "project";
+  return basename(resolveProjectRoot$1(directory).replace(/[/\\]+$/, "")) || "project";
 }
 function readProjectInfo(directory) {
   try {
@@ -5457,7 +5457,7 @@ function sanitizeDescription(raw, maxLen = 240) {
   return t || null;
 }
 function extractDescriptionFromDocs(directory) {
-  const root = resolveProjectRoot(directory);
+  const root = resolveProjectRoot$1(directory);
   const candidates = [
     [join(root, "CLAUDE.md"), "claude.md"],
     [join(root, "README.md"), "readme"],
@@ -5501,7 +5501,7 @@ var projectInfo = /*#__PURE__*/Object.freeze({
     projectInfoPath: projectInfoPath,
     projectName: projectName,
     readProjectInfo: readProjectInfo,
-    resolveProjectRoot: resolveProjectRoot,
+    resolveProjectRoot: resolveProjectRoot$1,
     sanitizeDescription: sanitizeDescription,
     writeProjectInfo: writeProjectInfo
 });
@@ -10127,7 +10127,7 @@ function renderCriteria(items) {
     }
     return `- [${STATUS_TO_MARKER[it.status] ?? " "}] ${it.text}${tag}${how}`;
   });
-  const { done, total } = summarize(items);
+  const { done, total } = summarize$1(items);
   return `Success criteria \u2014 drive this checklist to all-done (${done}/${total}):
 ${lines.join("\n")}`;
 }
@@ -10137,22 +10137,6 @@ function compileChecklist(items) {
   const oracle = oracleItem && oracleItem.eval?.type === "oracle" ? oracleItem.eval.cmd : void 0;
   return { criteria, ...oracle ? { oracle } : {} };
 }
-function routeVerdictToChecklist(items, v) {
-  let matched = false;
-  const next = items.map((it) => {
-    if (it.child?.sessionId && it.child.sessionId === v.sessionId) {
-      matched = true;
-      return applyVerdict(it, v);
-    }
-    return it;
-  });
-  return { items: next, matched };
-}
-function applyVerdict(item, v) {
-  const lastVerdict = { verdict: v.verdict, ...v.guidance ? { guidance: v.guidance } : {}, round: v.round, ts: v.ts };
-  if (v.verdict === "approved") return { ...item, status: "done", doneAt: Date.parse(v.ts) || item.createdAt, lastVerdict };
-  return { ...item, status: "rework", lastVerdict };
-}
 const VALID_STATUS = /* @__PURE__ */ new Set(["todo", "active", "verifying", "awaiting_review", "rework", "blocked", "done"]);
 function validateChecklist(items) {
   const errs = [];
@@ -10168,7 +10152,7 @@ function validateChecklist(items) {
   }
   return errs;
 }
-function summarize(items) {
+function summarize$1(items) {
   const by = (s) => items.filter((i) => i.status === s).length;
   const done = by("done");
   return {
@@ -10229,11 +10213,196 @@ function clearChecklist(projectRoot, sessionId) {
   } catch {
   }
 }
-function mutateChecklist(projectRoot, sessionId, fn) {
-  const next = fn(readChecklist(projectRoot, sessionId));
-  writeChecklist(projectRoot, sessionId, next);
+
+const FIELD_ORDER = ["id", "title", "status", "scope", "labels", "verify", "disposition", "triaged", "branch", "session", "original", "created", "closed"];
+function resolveProjectRoot(start = process.cwd()) {
+  let dir = start;
+  for (let i = 0; i < 40; i++) {
+    if (existsSync(join(dir, ".git")) || existsSync(join(dir, ".svamp"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return start;
+}
+function issuesDir(projectRoot) {
+  return join(projectRoot, ".svamp", "issues");
+}
+function archiveDir(projectRoot) {
+  return join(issuesDir(projectRoot), "archive");
+}
+function issuePath(projectRoot, id, archived = false) {
+  return join(archived ? archiveDir(projectRoot) : issuesDir(projectRoot), `${id}.md`);
+}
+function serializeIssue(issue) {
+  const lines = ["---"];
+  for (const k of FIELD_ORDER) {
+    const v = issue[k];
+    if (v === void 0) continue;
+    lines.push(`${k}: ${JSON.stringify(v)}`);
+  }
+  lines.push("---", "");
+  return lines.join("\n") + (issue.body ? issue.body.replace(/\s+$/, "") + "\n" : "");
+}
+function parseIssue(content) {
+  const m = content.match(/^---\n([\s\S]*?)\n---\n?([\s\S]*)$/);
+  if (!m) return null;
+  const fm = {};
+  for (const line of m[1].split("\n")) {
+    const idx = line.indexOf(": ");
+    if (idx === -1) continue;
+    const key = line.slice(0, idx).trim();
+    const raw = line.slice(idx + 2).trim();
+    try {
+      fm[key] = JSON.parse(raw);
+    } catch {
+      fm[key] = raw;
+    }
+  }
+  if (!fm.id) return null;
+  return {
+    id: String(fm.id),
+    title: String(fm.title ?? ""),
+    status: fm.status ?? "backlog",
+    scope: fm.scope ?? "session",
+    labels: Array.isArray(fm.labels) ? fm.labels.map(String) : [],
+    verify: fm.verify ?? null,
+    disposition: fm.disposition === "crew" ? "crew" : "inline",
+    triaged: fm.triaged === true,
+    branch: fm.branch ?? null,
+    session: fm.session ?? null,
+    original: fm.original ?? null,
+    created: String(fm.created ?? (/* @__PURE__ */ new Date()).toISOString()),
+    closed: fm.closed ?? null,
+    body: (m[2] || "").trim() || void 0
+  };
+}
+function readDir(dir) {
+  if (!existsSync(dir)) return [];
+  const out = [];
+  for (const name of readdirSync(dir)) {
+    if (!name.endsWith(".md")) continue;
+    try {
+      const issue = parseIssue(readFileSync(join(dir, name), "utf-8"));
+      if (issue) out.push(issue);
+    } catch {
+    }
+  }
+  return out;
+}
+function listIssues(projectRoot, opts = {}) {
+  let items = readDir(issuesDir(projectRoot));
+  if (opts.includeArchived) items = items.concat(readDir(archiveDir(projectRoot)));
+  if (opts.status) items = items.filter((i) => i.status === opts.status);
+  if (opts.label) items = items.filter((i) => i.labels.includes(opts.label));
+  if (opts.scope) items = items.filter((i) => i.scope === opts.scope);
+  return items.sort((a, b) => Number(a.id) - Number(b.id));
+}
+function getIssue(projectRoot, id) {
+  const padded = /^\d+$/.test(id) ? id.padStart(4, "0") : id;
+  for (const p of [issuePath(projectRoot, padded), issuePath(projectRoot, padded, true)]) {
+    if (existsSync(p)) {
+      try {
+        return parseIssue(readFileSync(p, "utf-8"));
+      } catch {
+        return null;
+      }
+    }
+  }
+  return null;
+}
+function atomicWrite(path, content) {
+  mkdirSync(dirname(path), { recursive: true });
+  const tmp = `${path}.tmp-${process.pid}`;
+  writeFileSync(tmp, content);
+  renameSync(tmp, path);
+}
+function nextId(projectRoot) {
+  const all = listIssues(projectRoot, { includeArchived: true });
+  const max = all.reduce((acc, i) => Math.max(acc, Number(i.id) || 0), 0);
+  return String(max + 1).padStart(4, "0");
+}
+function addIssue(projectRoot, fields) {
+  const issue = {
+    id: nextId(projectRoot),
+    title: fields.title.trim(),
+    status: fields.status ?? "backlog",
+    scope: fields.scope ?? "session",
+    labels: fields.labels ?? [],
+    verify: fields.verify ?? null,
+    disposition: fields.disposition ?? "inline",
+    triaged: fields.triaged ?? false,
+    branch: null,
+    session: fields.session ?? null,
+    original: fields.original ?? null,
+    created: (/* @__PURE__ */ new Date()).toISOString(),
+    closed: null,
+    body: fields.body
+  };
+  atomicWrite(issuePath(projectRoot, issue.id), serializeIssue(issue));
+  return issue;
+}
+function updateIssue(projectRoot, id, patch) {
+  const cur = getIssue(projectRoot, id);
+  if (!cur) return null;
+  const wasArchived = cur.status === "archived";
+  const next = { ...cur, ...patch, id: cur.id };
+  const nowArchived = next.status === "archived";
+  if ((next.status === "done" || nowArchived) && !next.closed) next.closed = (/* @__PURE__ */ new Date()).toISOString();
+  if (next.status !== "done" && !nowArchived) next.closed = null;
+  atomicWrite(issuePath(projectRoot, next.id, nowArchived), serializeIssue(next));
+  if (wasArchived !== nowArchived) {
+    const oldPath = issuePath(projectRoot, cur.id, wasArchived);
+    try {
+      if (existsSync(oldPath)) unlinkSync(oldPath);
+    } catch {
+    }
+  }
   return next;
 }
+function addComment(projectRoot, id, text) {
+  const cur = getIssue(projectRoot, id);
+  if (!cur || !text.trim()) return cur;
+  const entry = `
+
+---
+**Follow-up \xB7 ${(/* @__PURE__ */ new Date()).toISOString()}**
+
+${text.trim()}`;
+  const body = (cur.body ? cur.body.replace(/\s+$/, "") : "") + entry;
+  return updateIssue(projectRoot, id, { body });
+}
+function routeCrewVerdict(projectRoot, childSessionId, v) {
+  const linked = listIssues(projectRoot, { includeArchived: true }).find((i) => i.disposition === "crew" && i.session === childSessionId);
+  if (!linked) return null;
+  const meta = [v.round != null ? `round ${v.round}` : "", v.judge ? `judge:${v.judge}` : ""].filter(Boolean).join(", ");
+  addComment(projectRoot, linked.id, `Crew child ${childSessionId.slice(0, 8)} \u2192 ${v.verdict}${meta ? ` (${meta})` : ""}.${v.guidance ? " " + v.guidance : ""}`);
+  return v.verdict === "approved" ? updateIssue(projectRoot, linked.id, { status: "done" }) ?? null : getIssue(projectRoot, linked.id);
+}
+function searchIssues(projectRoot, query) {
+  const q = query.trim();
+  if (!q) return [];
+  try {
+    const out = execFileSync("rg", ["-l", "-i", "--no-messages", q, issuesDir(projectRoot)], { encoding: "utf-8" });
+    const files = out.split("\n").filter(Boolean);
+    const issues = [];
+    for (const f of files) {
+      try {
+        const i = parseIssue(readFileSync(f, "utf-8"));
+        if (i) issues.push(i);
+      } catch {
+      }
+    }
+    return issues.sort((a, b) => Number(a.id) - Number(b.id));
+  } catch {
+    const ql = q.toLowerCase();
+    return listIssues(projectRoot, { includeArchived: true }).filter((i) => i.title.toLowerCase().includes(ql) || (i.body || "").toLowerCase().includes(ql) || i.labels.some((l) => l.toLowerCase().includes(ql)));
+  }
+}
+function summarize(issues) {
+  const by = (s) => issues.filter((i) => i.status === s).length;
+  return { total: issues.length, backlog: by("backlog"), ready: by("ready"), in_progress: by("in_progress"), done: by("done"), archived: by("archived") };
+}
 
 const OAUTH_TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
 const OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
@@ -11366,7 +11535,7 @@ Or verify and finish \u2014 an independent Stop gate re-checks before you can st
           const evaluator = ccfg.evaluator !== false;
           const budget = parseLoopBudget(ccfg.budget);
           const ok = initLoop(directory, { task, criteria, oracle, maxIterations, evaluator, budget, sessionId });
-          const s = summarize(items);
+          const s = summarize$1(items);
           if (ok) {
             const idle = getMetadata().lifecycleState === "idle";
             if (idle) {
@@ -11816,7 +11985,7 @@ async function startDaemon(options) {
     saveExposedTunnels(list);
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./frpc-BbpARLqP.mjs');
+    const { FrpcTunnel } = await import('./frpc-B6KtYbVe.mjs');
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -11836,7 +12005,7 @@ async function startDaemon(options) {
     return tunnel;
   }
   const tunnelRecreateState = /* @__PURE__ */ new Map();
-  const { ServeManager } = await import('./serveManager-fwaBwmlm.mjs');
+  const { ServeManager } = await import('./serveManager-BH7mQRkn.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -11898,9 +12067,13 @@ ${v.guidance ? v.guidance + "\n" : ""}Criteria: ${v.criteria || "(none)"}
         })).catch(() => {
         });
         try {
-          if (parent?.directory) {
-            const res = mutateChecklist(parent.directory, parentId, (items) => routeVerdictToChecklist(items, { sessionId: v.sessionId, verdict: v.verdict, guidance: v.guidance, round: v.round, ts: v.ts }).items);
-            if (res.some((i) => i.child?.sessionId === v.sessionId)) logger.log(`[supervision] reflected '${v.verdict}' onto parent ${parentId.slice(0, 8)} checklist`);
+          if (parent?.directory && (v.verdict === "approved" || v.verdict === "rework")) {
+            const linked = routeCrewVerdict(
+              parent.directory,
+              v.sessionId,
+              { verdict: v.verdict, guidance: v.guidance, round: v.round, judge: v.judge }
+            );
+            if (linked) logger.log(`[supervision] routed '${v.verdict}' onto parent ${parentId.slice(0, 8)} issue #${linked.id}`);
           }
         } catch {
         }
@@ -15440,4 +15613,4 @@ var run = /*#__PURE__*/Object.freeze({
     writeStopMarker: writeStopMarker
 });
 
-export { generateFriendlyName as $, buildMachineInstructions as A, machineToolsForRole as B, buildMachineTools as C, resolveModel as D, readChecklist as E, compileChecklist as F, RoutineStore as G, RoutineRunner as H, formatHandle as I, normalizeAllowedUser as J, loadSecurityContextConfig as K, resolveSecurityContext as L, buildSecurityContextFromFlags as M, mergeSecurityContexts as N, buildSessionShareUrl as O, validateChecklist as P, computeOutboundHop as Q, READ_ONLY_TOOLS as R, ServeAuth as S, buildMachineShareUrl as T, summarize as U, newItem as V, parseHandle as W, handleMatchesMetadata as X, describeMisconfiguration as Y, buildMachineDeps as Z, composeSessionId as _, createSessionStore as a, generateHookSettings as a0, projectInfo as a1, DefaultTransport$1 as a2, acpBackend as a3, acpAgentConfig as a4, codexMcpBackend as a5, GeminiTransport$1 as a6, claudeAuth as a7, instanceConfig as a8, api as a9, run as aa, stopDaemon as b, connectToHypha as c, daemonStatus as d, clearStopMarker as e, stopMarkerExists as f, getHyphaServerUrl$1 as g, getFrpsSubdomainHost as h, getFrpsServerPort as i, getFrpsServerAddr as j, getHyphaServerUrl as k, hasCookieToken as l, shortId as m, getSkillsServer as n, getSkillsWorkspaceName as o, parseFrontmatter as p, getSkillsCollectionName as q, registerMachineService as r, startDaemon as s, fetchWithTimeout as t, searchSkills as u, SKILLS_DIR as v, getSkillInfo as w, downloadSkillFile as x, listSkillFiles as y, loadMachineContext as z };
+export { buildMachineShareUrl as $, getSkillsCollectionName as A, fetchWithTimeout as B, searchSkills as C, SKILLS_DIR as D, getSkillInfo as E, downloadSkillFile as F, listSkillFiles as G, loadMachineContext as H, buildMachineInstructions as I, machineToolsForRole as J, buildMachineTools as K, resolveModel as L, readChecklist as M, compileChecklist as N, RoutineStore as O, RoutineRunner as P, formatHandle as Q, READ_ONLY_TOOLS as R, ServeAuth as S, normalizeAllowedUser as T, loadSecurityContextConfig as U, resolveSecurityContext as V, buildSecurityContextFromFlags as W, mergeSecurityContexts as X, buildSessionShareUrl as Y, validateChecklist as Z, computeOutboundHop as _, createSessionStore as a, summarize$1 as a0, newItem as a1, parseHandle as a2, handleMatchesMetadata as a3, describeMisconfiguration as a4, buildMachineDeps as a5, composeSessionId as a6, generateFriendlyName as a7, generateHookSettings as a8, projectInfo as a9, DefaultTransport$1 as aa, acpBackend as ab, acpAgentConfig as ac, codexMcpBackend as ad, GeminiTransport$1 as ae, claudeAuth as af, instanceConfig as ag, api as ah, run as ai, stopDaemon as b, connectToHypha as c, daemonStatus as d, clearStopMarker as e, stopMarkerExists as f, getHyphaServerUrl$1 as g, getFrpsSubdomainHost as h, getFrpsServerPort as i, getFrpsServerAddr as j, getHyphaServerUrl as k, hasCookieToken as l, resolveProjectRoot as m, searchIssues as n, listIssues as o, addComment as p, getIssue as q, registerMachineService as r, startDaemon as s, summarize as t, updateIssue as u, addIssue as v, shortId as w, parseFrontmatter as x, getSkillsServer as y, getSkillsWorkspaceName as z };