svamp-cli 0.2.228 → 0.2.229-canary.1

package/dist/{fleet-_dhjB0Yg.mjs → fleet-DkANyXBc.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { c as connectToHypha } from './run-CWjO2BDp.mjs';
+import { c as connectToHypha } from './run-CXQ-NEsY.mjs';
 import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-VIupR1NK.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{frpc-Bspx1xH-.mjs → frpc-DLHENjxp.mjs}

@@ -4,7 +4,7 @@ import { mkdirSync, writeFileSync, unlinkSync, existsSync, chmodSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { randomUUID, createHash } from 'crypto';
-import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-CWjO2BDp.mjs';
+import { h as getFrpsSubdomainHost, i as getFrpsServerPort, j as getFrpsServerAddr } from './run-CXQ-NEsY.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:crypto';

package/dist/{headlessCli-BVCGQu3M.mjs → headlessCli-DDJv4_nj.mjs}

@@ -1,5 +1,5 @@
-import { P as resolveModel, a2 as describeMisconfiguration, a3 as buildMachineDeps } from './run-CWjO2BDp.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-CkrdMDh7.mjs';
+import { P as resolveModel, a2 as describeMisconfiguration, a3 as buildMachineDeps } from './run-CXQ-NEsY.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-BFQr64jf.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-CWjO2BDp.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-CXQ-NEsY.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{package-VYP3g593.mjs → package-Co7XlSE3.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.227";
+var version = "0.2.229-canary.1";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -19,7 +19,7 @@ var exports$1 = {
 var scripts = {
 	build: "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
 	dev: "tsx src/cli.ts",
 	"dev:daemon": "tsx src/cli.ts daemon start-sync",

package/dist/{rpc-DvPmbys_.mjs → rpc-D1_ae6MP.mjs}

@@ -1,4 +1,4 @@
-import { m as resolveProjectRoot, u as updateIssue, n as getIssue, o as resumeIssue, p as pauseIssue, q as addComment, t as addIssue, v as listIssues, w as searchIssues, x as isVisibleTo } from './run-CWjO2BDp.mjs';
+import { m as resolveProjectRoot, u as updateIssue, n as getIssue, o as resumeIssue, p as pauseIssue, q as addComment, t as addIssue, v as listIssues, w as searchIssues, x as isVisibleTo } from './run-CXQ-NEsY.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{rpc-BZNJ2PWu.mjs → rpc-DBDPUPj4.mjs}

@@ -1,4 +1,4 @@
-import { m as resolveProjectRoot } from './run-CWjO2BDp.mjs';
+import { m as resolveProjectRoot } from './run-CXQ-NEsY.mjs';
 import { g as getWorkflow, s as setWorkflowEnabled, r as removeWorkflow, a as saveWorkflow, b as rawWorkflow, l as listWorkflows } from './store-BTs0H_y0.mjs';
 import { g as getRun, l as listRuns, r as runWorkflow } from './runStore-CtptN7US.mjs';
 import 'os';

package/dist/{run-CWjO2BDp.mjs → run-CXQ-NEsY.mjs}

@@ -3,7 +3,7 @@ import fs, { mkdir as mkdir$1, readdir as readdir$1, readFile, writeFile as writ
 import fs__default, { readFileSync as readFileSync$1, mkdirSync as mkdirSync$1, writeFileSync as writeFileSync$1, renameSync as renameSync$1, existsSync as existsSync$1, realpathSync as realpathSync$1, rmSync as rmSync$1, copyFileSync, unlinkSync as unlinkSync$1, readdirSync as readdirSync$1, watch, rmdirSync } from 'fs';
 import path__default, { join as join$1, resolve as resolve$1, dirname as dirname$1, basename as basename$1 } from 'path';
 import { fileURLToPath } from 'url';
-import { execFile, spawn as spawn$1, execSync as execSync$1 } from 'child_process';
+import { execFile, spawn as spawn$1, execSync as execSync$1, exec as exec$1 } from 'child_process';
 import { randomUUID as randomUUID$1 } from 'crypto';
 import { randomBytes, createHash, randomUUID } from 'node:crypto';
 import { existsSync, readFileSync, realpathSync, readdirSync, statSync, mkdirSync, writeFileSync, renameSync, rmSync, appendFileSync, unlinkSync } from 'node:fs';
@@ -2916,7 +2916,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-Bspx1xH-.mjs');
+        const { FrpcTunnel } = await import('./frpc-DLHENjxp.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -3363,7 +3363,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-CkrdMDh7.mjs');
+          const { toolsForRole } = await import('./sideband-BFQr64jf.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -3462,7 +3462,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     if (r.error || !r.sender) return { error: r.error || "unauthorized" };
     const callId = "call_" + Math.random().toString(16).slice(2, 12);
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-sCptO4oM.mjs');
+    const { queryCore } = await import('./commands-Cb4O-FK1.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -10695,6 +10695,139 @@ function summarize(issues) {
   return { total: issues.length, ready: by("ready"), in_progress: by("in_progress"), archived: by("archived") };
 }
 
+function backlogOraclePending(projectRoot, sessionId) {
+  const inScope = (i) => !sessionId || isVisibleTo(i, sessionId);
+  return listIssues(projectRoot).filter(inScope).filter((i) => i.status === "ready" || i.status === "in_progress").map((i) => ({ id: i.id }));
+}
+function issuesClosedSince(projectRoot, sinceMs) {
+  const all = listIssues(projectRoot, { includeArchived: true, status: "archived" });
+  if (!sinceMs || !Number.isFinite(sinceMs)) return all;
+  return all.filter((i) => {
+    if (!i.closed) return false;
+    const t = Date.parse(i.closed);
+    return Number.isFinite(t) && t >= sinceMs;
+  });
+}
+function buildEvaluatorPrompt(o) {
+  const lines = [];
+  lines.push("You are an INDEPENDENT, skeptical reviewer. You did NOT write the code under review.");
+  lines.push('A self-verifying loop has just reported its work COMPLETE. Decide whether it is GENUINELY and COMPLETELY done. Default to "continue" on ANY doubt \u2014 a false "done" is far worse than one more iteration.');
+  lines.push("");
+  if (o.task) lines.push(`LOOP TASK / GOAL:
+${o.task.trim()}`);
+  if (o.until) lines.push(`DONE-WHEN CRITERIA:
+${o.until.trim()}`);
+  lines.push("");
+  lines.push("Use your tools (Read, Bash, Grep, Glob) to inspect the ACTUAL repository state \u2014 do NOT trust the transcript. Check the working tree, git log/diff, build/test output, and whether changes were actually built/published/deployed where the request implied it.");
+  if (o.oracle) {
+    lines.push("");
+    lines.push(`The loop oracle is \`${o.oracle.trim()}\` and it currently PASSES${o.oracleOutput ? ` (output: ${o.oracleOutput.trim().slice(0, 400)})` : ""}. A green oracle here only means "no OPEN issues" \u2014 it does NOT mean each CLOSED issue actually works.`);
+  }
+  if (o.closedIssues.length) {
+    lines.push("");
+    lines.push("ISSUES CLOSED DURING THIS LOOP \u2014 verify EACH was genuinely resolved by the real change (not closed by self-assertion). Re-read the ORIGINAL request behind each, not just its title:");
+    for (const i of o.closedIssues.slice(0, 40)) {
+      const orig = (i.original || "").trim().replace(/\s+/g, " ").slice(0, 200);
+      const vtype = i.verify?.type ? ` [verify:${i.verify.type}]` : "";
+      lines.push(`  - #${i.id} ${i.title}${vtype}${orig ? ` \u2014 original: "${orig}"` : ""}`);
+    }
+    lines.push('Reject "done" if ANY closed issue was not genuinely resolved by the actual change.');
+  } else {
+    lines.push("");
+    lines.push("No issues were closed during this loop. Judge whether the task/criteria are genuinely met from the USER's perspective, end-to-end.");
+  }
+  lines.push("");
+  lines.push("Return ONLY a JSON object on the LAST line, nothing after it:");
+  lines.push('{"verdict":"done"|"continue","reason":"<concise>","guidance":"<what to fix if continue>"}');
+  return lines.join("\n");
+}
+function buildGoalCondition(o) {
+  const parts = [];
+  if (o.task) parts.push(o.task.trim());
+  if (o.until) parts.push(`Done when: ${o.until.trim()}.`);
+  if (o.oracle) parts.push(`Verify by running \`${o.oracle.trim()}\` at the end of every turn and pasting its output; it must succeed (exit 0 / no pending work).`);
+  if (!o.until && !o.oracle && o.task) parts.push("Done when the task is fully complete and you have shown the evidence that proves it.");
+  parts.push(`Or stop after ${o.maxIterations && o.maxIterations > 0 ? o.maxIterations : 20} turns.`);
+  if (o.inboxDrain !== false) {
+    parts.push("(\u{1F4EC} Inbox: at the start of each turn, run `svamp session inbox list` and handle any unread peer message \u2014 reply/triage/merge \u2014 before continuing the task above. This is how a long loop drains queued non-urgent mail; it is NOT a completion criterion.)");
+  }
+  return parts.join(" ");
+}
+function parseEvaluatorVerdict(text) {
+  if (!text) return null;
+  const candidates = [];
+  let depth = 0, start = -1;
+  for (let i = 0; i < text.length; i++) {
+    const c = text[i];
+    if (c === "{") {
+      if (depth === 0) start = i;
+      depth++;
+    } else if (c === "}") {
+      depth--;
+      if (depth === 0 && start >= 0) {
+        candidates.push(text.slice(start, i + 1));
+        start = -1;
+      }
+    }
+  }
+  for (let i = candidates.length - 1; i >= 0; i--) {
+    try {
+      const o = JSON.parse(candidates[i]);
+      if (o && (o.verdict === "done" || o.verdict === "continue")) {
+        return { verdict: o.verdict, reason: typeof o.reason === "string" ? o.reason : void 0, guidance: typeof o.guidance === "string" ? o.guidance : void 0 };
+      }
+    } catch {
+    }
+  }
+  return null;
+}
+async function runLoopVerification(cfg, deps) {
+  const log = deps.log || (() => {
+  });
+  const maxHolds = typeof cfg.maxHolds === "number" && cfg.maxHolds > 0 ? cfg.maxHolds : 3;
+  const holds = typeof cfg.holds === "number" && cfg.holds > 0 ? cfg.holds : 0;
+  let oracleOutput = "";
+  try {
+    const o = await deps.runOracle(cfg.oracle);
+    oracleOutput = o.output || "";
+    if (!o.ok) {
+      if (holds + 1 > maxHolds) {
+        return { action: "gave_up", reason: `oracle still reports pending work after ${holds} verification hold(s): ${oracleOutput.trim().slice(0, 200)}` };
+      }
+      log(`[loopVerify] oracle reports pending work \u2014 re-kicking instead of marking done`);
+      return { action: "rekick", reason: "oracle reports pending work", guidance: `The loop oracle still reports unfinished work, so the goal is NOT complete:
+${oracleOutput.trim().slice(0, 500)}
+Keep working until it is genuinely empty.` };
+    }
+  } catch (e) {
+    log(`[loopVerify] oracle runner error (continuing to evaluator): ${e?.message || e}`);
+  }
+  const closed = issuesClosedSince(deps.projectRoot, cfg.startedAt);
+  const prompt = buildEvaluatorPrompt({ task: cfg.task, until: cfg.until, oracle: cfg.oracle, oracleOutput, closedIssues: closed });
+  let raw = "";
+  try {
+    raw = await deps.runEvaluator(prompt);
+  } catch (e) {
+    log(`[loopVerify] evaluator spawn failed \u2014 failing OPEN (marking done): ${e?.message || e}`);
+    return { action: "done" };
+  }
+  const verdict = parseEvaluatorVerdict(raw);
+  if (!verdict) {
+    log(`[loopVerify] could not parse evaluator verdict \u2014 failing OPEN (marking done)`);
+    return { action: "done" };
+  }
+  if (verdict.verdict === "done") {
+    log(`[loopVerify] evaluator confirms done${verdict.reason ? `: ${verdict.reason}` : ""}`);
+    return { action: "done" };
+  }
+  if (holds + 1 > maxHolds) {
+    return { action: "gave_up", reason: `evaluator held "continue" past the limit (${maxHolds})${verdict.reason ? `: ${verdict.reason}` : ""}` };
+  }
+  const guidance = [verdict.reason ? `Independent reviewer says NOT done: ${verdict.reason}` : "Independent reviewer says NOT done.", verdict.guidance ? `Fix: ${verdict.guidance}` : ""].filter(Boolean).join("\n");
+  log(`[loopVerify] evaluator says continue \u2014 re-kicking (hold ${holds + 1}/${maxHolds})`);
+  return { action: "rekick", reason: verdict.reason || "evaluator says continue", guidance };
+}
+
 const OAUTH_TOKEN_ENDPOINT = "https://platform.claude.com/v1/oauth/token";
 const OAUTH_CLIENT_ID = "9d1c250a-e61b-44d9-88ed-5944d1962f5e";
 const OAUTH_SCOPES = "user:profile user:inference user:sessions:claude_code user:mcp_servers user:file_upload";
@@ -11555,15 +11688,6 @@ function classifyOptsForMessage(sessionId, message, ownerEmail) {
   const openThreadReply = takeAwaitingReply(sessionId, message.threadId);
   return { self, openThreadReply };
 }
-function buildGoalCondition(o) {
-  const parts = [];
-  if (o.task) parts.push(o.task.trim());
-  if (o.until) parts.push(`Done when: ${o.until.trim()}.`);
-  if (o.oracle) parts.push(`Verify by running \`${o.oracle.trim()}\` at the end of every turn and pasting its output; it must succeed (exit 0 / no pending work).`);
-  if (!o.until && !o.oracle && o.task) parts.push("Done when the task is fully complete and you have shown the evidence that proves it.");
-  parts.push(`Or stop after ${o.maxIterations && o.maxIterations > 0 ? o.maxIterations : 20} turns.`);
-  return parts.join(" ");
-}
 function writeGoalLoopState(directory, sessionId, state) {
   try {
     const dir = getLoopDir(directory, sessionId);
@@ -11845,7 +11969,7 @@ function createSvampConfigChecker(directory, sessionId, getMetadata, setMetadata
           stripOldLoopHooks(directory);
         } catch {
         }
-        writeGoalLoopState(directory, sessionId, { active: true, phase: "running", iteration: 0, task: condition, until, oracle, max_iterations: maxIterations, started_at: Date.now() });
+        writeGoalLoopState(directory, sessionId, { active: true, phase: "running", iteration: 0, task: condition, goal_task: task, until, oracle, max_iterations: maxIterations, started_at: Date.now(), holds: 0 });
         const existingQueue = getMetadata().messageQueue || [];
         setMetadata((m) => ({ ...m, messageQueue: [...existingQueue, { id: randomUUID$1(), text: `/goal ${condition}`, displayText: `\u{1F3AF} Goal: ${(task || until || "").slice(0, 100)}`, createdAt: Date.now() }] }));
         onLoopActivated?.();
@@ -12294,7 +12418,7 @@ async function startDaemon(options) {
     saveExposedTunnels(list);
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./frpc-Bspx1xH-.mjs');
+    const { FrpcTunnel } = await import('./frpc-DLHENjxp.mjs');
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -12314,7 +12438,7 @@ async function startDaemon(options) {
     return tunnel;
   }
   const tunnelRecreateState = /* @__PURE__ */ new Map();
-  const { ServeManager } = await import('./serveManager--_kLrbpK.mjs');
+  const { ServeManager } = await import('./serveManager-BKTiO1hi.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -12937,6 +13061,161 @@ ${parts.join("\n")}`);
           };
           sessionService.updateMetadata(sessionMetadata);
         };
+        const enqueueLoopMessage = (text, displayText) => {
+          const existingQueue = sessionMetadata.messageQueue || [];
+          sessionMetadata = {
+            ...sessionMetadata,
+            messageQueue: [...existingQueue, { id: randomUUID$1(), text, displayText, createdAt: Date.now() }]
+          };
+          sessionService.updateMetadata(sessionMetadata);
+        };
+        const runHeadlessEvaluator = (prompt) => new Promise((resolve2, reject) => {
+          const evalArgs = [
+            "--print",
+            prompt,
+            // Read-only reviewer (mirrors .claude/agents/loop-evaluator.md): it inspects
+            // real repo state but must not mutate the working tree it's judging.
+            "--allowedTools",
+            "Read",
+            "Bash",
+            "Grep",
+            "Glob",
+            "--disallowedTools",
+            "Write",
+            "Edit",
+            "MultiEdit",
+            "NotebookEdit",
+            "--permission-mode",
+            "bypassPermissions",
+            "--output-format",
+            "stream-json",
+            "--verbose"
+          ];
+          const evalEnv = { ...process.env };
+          applyClaudeProxyEnv(evalEnv);
+          delete evalEnv.CLAUDECODE;
+          let proc;
+          try {
+            proc = spawn$1("claude", evalArgs, { cwd: directory, env: evalEnv, stdio: ["pipe", "pipe", "pipe"] });
+          } catch (e) {
+            reject(e);
+            return;
+          }
+          let out = "", buf = "", stderr = "", settled = false;
+          const timer = setTimeout(() => {
+            if (settled) return;
+            settled = true;
+            try {
+              proc.kill("SIGTERM");
+            } catch {
+            }
+            reject(new Error("evaluator timeout"));
+          }, 3e5);
+          proc.stderr?.on("data", (c) => {
+            stderr += c.toString();
+          });
+          proc.stdout.on("data", (chunk) => {
+            buf += chunk.toString();
+            let nl;
+            while ((nl = buf.indexOf("\n")) !== -1) {
+              const line = buf.slice(0, nl);
+              buf = buf.slice(nl + 1);
+              if (!line.trim()) continue;
+              try {
+                const m = JSON.parse(line);
+                if (m.type === "assistant" && m.message?.content) {
+                  for (const b of m.message.content) if (b.type === "text" && b.text) out += b.text;
+                } else if (m.type === "result") {
+                  if (settled) continue;
+                  settled = true;
+                  clearTimeout(timer);
+                  if (m.is_error) reject(new Error(String(m.result || "evaluator error")));
+                  else resolve2(out || String(m.result || ""));
+                }
+              } catch {
+              }
+            }
+          });
+          proc.on("exit", (code) => {
+            if (settled) return;
+            settled = true;
+            clearTimeout(timer);
+            if (code === 0) resolve2(out);
+            else reject(new Error(stderr.trim() || `evaluator exited with code ${code}`));
+          });
+          proc.on("error", (e) => {
+            if (settled) return;
+            settled = true;
+            clearTimeout(timer);
+            reject(e);
+          });
+        });
+        let goalVerifyInFlight = false;
+        const verifyGoalCompletion = async (ls) => {
+          if (goalVerifyInFlight) return;
+          goalVerifyInFlight = true;
+          const projectRoot = resolveProjectRoot(directory);
+          const startedAt = typeof ls.started_at === "number" ? ls.started_at : typeof ls.resumed_at === "number" ? ls.resumed_at : void 0;
+          const holds = typeof ls.holds === "number" ? ls.holds : 0;
+          const oracleCmd = typeof ls.oracle === "string" && ls.oracle.trim() ? ls.oracle.trim() : void 0;
+          try {
+            sessionService.pushMessage({ type: "message", message: "\u{1F50D} Verifying loop completion (independent review)\u2026" }, "event");
+            const result = await runLoopVerification(
+              { task: ls.goal_task || ls.task, until: ls.until, oracle: oracleCmd, startedAt, holds, maxHolds: 3 },
+              {
+                projectRoot,
+                runOracle: async (cmd) => {
+                  if (cmd) {
+                    return await new Promise((resolve2) => {
+                      exec$1(cmd, { cwd: directory, timeout: 12e4, maxBuffer: 16 * 1024 * 1024 }, (err, stdout, stderr) => {
+                        if (err) resolve2({ ok: false, output: (String(stdout || "") + String(stderr || "")).slice(-500) });
+                        else resolve2({ ok: true, output: "" });
+                      });
+                    });
+                  }
+                  const pending = backlogOraclePending(projectRoot, sessionId);
+                  return { ok: pending.length === 0, output: pending.length ? `${pending.length} pending: ${pending.map((i) => "#" + i.id).join(" ")}` : "No pending issues." };
+                },
+                runEvaluator: (prompt) => runHeadlessEvaluator(prompt),
+                log: (m) => logger.log(`[Session ${sessionId}] ${m}`)
+              }
+            );
+            if (result.action === "rekick") {
+              const cond = ls.task || "";
+              writeGoalLoopState(directory, sessionId, {
+                active: true,
+                phase: "continue",
+                iteration: ls.iteration || 0,
+                task: ls.task,
+                goal_task: ls.goal_task,
+                until: ls.until,
+                oracle: oracleCmd,
+                max_iterations: ls.max_iterations,
+                started_at: startedAt,
+                holds: holds + 1
+              });
+              const guidance = result.guidance.replace(/\s+/g, " ").slice(0, 1200);
+              sessionService.pushMessage({ type: "message", message: `\u{1F501} Loop not done \u2014 independent review: ${result.reason}`, level: "warning" }, "event");
+              enqueueLoopMessage(`/goal ${cond} \u2014 INDEPENDENT REVIEW FEEDBACK (resolve before declaring done): ${guidance}`, "\u{1F501} Re-verifying loop");
+              if (!trackedSession.stopped) setTimeout(() => processMessageQueueRef?.(), 200);
+            } else if (result.action === "gave_up") {
+              writeGoalLoopState(directory, sessionId, { active: false, phase: "gave_up", completed_at: Date.now(), gave_up_reason: result.reason, holds });
+              checkSvampConfig?.();
+            } else {
+              writeGoalLoopState(directory, sessionId, { active: false, phase: "done", completed_at: Date.now(), holds });
+              checkSvampConfig?.();
+            }
+          } catch (e) {
+            logger.log(`[Session ${sessionId}] verifyGoalCompletion error \u2014 failing open (done): ${e?.message || e}`);
+            try {
+              writeGoalLoopState(directory, sessionId, { active: false, phase: "done", completed_at: Date.now() });
+              checkSvampConfig?.();
+            } catch {
+            }
+          } finally {
+            goalVerifyInFlight = false;
+          }
+        };
         const signalProcessing = (processing) => {
           sessionService.sendKeepAlive(processing);
           const newState = processing ? "running" : "idle";
@@ -13383,8 +13662,12 @@ ${parts.join("\n")}`);
                     clearInboundContext(sessionId);
                     try {
                       const ls = readLoopState(directory, sessionId);
-                      if (ls && ls.engine === "goal" && ls.active !== false) {
-                        writeGoalLoopState(directory, sessionId, { active: false, phase: "done", completed_at: Date.now() });
+                      if (ls && ls.engine === "goal" && ls.active !== false && ls.phase !== "done" && ls.phase !== "gave_up" && ls.phase !== "cancelled") {
+                        if (process.env.SVAMP_LOOP_VERIFY === "0") {
+                          writeGoalLoopState(directory, sessionId, { active: false, phase: "done", completed_at: Date.now() });
+                        } else {
+                          void verifyGoalCompletion(ls);
+                        }
                       }
                     } catch {
                     }
@@ -14207,9 +14490,9 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
             onBash: async (command, cwd, timeout) => {
               const execTimeout = timeout || 12e4;
               logger.log(`[Session ${sessionId}] Bash: ${command} (cwd: ${cwd || directory}, timeout: ${execTimeout}ms)`);
-              const { exec } = await import('child_process');
+              const { exec: exec2 } = await import('child_process');
               return new Promise((resolve2) => {
-                exec(command, { cwd: cwd || directory, timeout: execTimeout, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
+                exec2(command, { cwd: cwd || directory, timeout: execTimeout, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
                   if (err) {
                     resolve2({ success: false, stdout: stdout || "", stderr: stderr || err.message, exitCode: err.code ?? 1 });
                   } else {
@@ -14219,18 +14502,18 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-DvPmbys_.mjs');
+              const { issueRpc } = await import('./rpc-D1_ae6MP.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BZNJ2PWu.mjs');
+              const { workflowRpc } = await import('./rpc-DBDPUPj4.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
-              const { exec } = await import('child_process');
+              const { exec: exec2 } = await import('child_process');
               const rgCwd = cwd || directory;
               return new Promise((resolve2, reject) => {
-                exec(`rg ${args}`, { cwd: rgCwd, timeout: 3e4, maxBuffer: 5 * 1024 * 1024 }, (err, stdout) => {
+                exec2(`rg ${args}`, { cwd: rgCwd, timeout: 3e4, maxBuffer: 5 * 1024 * 1024 }, (err, stdout) => {
                   if (err && !stdout) {
                     reject(new Error(err.message));
                   } else {
@@ -14744,9 +15027,9 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
             },
             onBash: async (command, cwd, timeout) => {
               const execTimeout = timeout || 12e4;
-              const { exec } = await import('child_process');
+              const { exec: exec2 } = await import('child_process');
               return new Promise((resolve2) => {
-                exec(command, { cwd: cwd || directory, timeout: execTimeout, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
+                exec2(command, { cwd: cwd || directory, timeout: execTimeout, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
                   if (err) {
                     resolve2({ success: false, stdout: stdout || "", stderr: stderr || err.message, exitCode: err.code ?? 1 });
                   } else {
@@ -14756,18 +15039,18 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-DvPmbys_.mjs');
+              const { issueRpc } = await import('./rpc-D1_ae6MP.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BZNJ2PWu.mjs');
+              const { workflowRpc } = await import('./rpc-DBDPUPj4.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
-              const { exec } = await import('child_process');
+              const { exec: exec2 } = await import('child_process');
               const rgCwd = cwd || directory;
               return new Promise((resolve2, reject) => {
-                exec(`rg ${args}`, { cwd: rgCwd, timeout: 3e4, maxBuffer: 5 * 1024 * 1024 }, (err, stdout) => {
+                exec2(`rg ${args}`, { cwd: rgCwd, timeout: 3e4, maxBuffer: 5 * 1024 * 1024 }, (err, stdout) => {
                   if (err && !stdout) {
                     reject(new Error(err.message));
                   } else {
@@ -15534,7 +15817,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-DifzWtwa.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-DPwwX1fQ.mjs');
     const workflowScheduler = new WorkflowScheduler({
       projectRoots: () => {
         const dirs = /* @__PURE__ */ new Set();

package/dist/{run-CqxwSYnZ.mjs → run-DBB1tUY1.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { a4 as applyClaudeProxyEnv, a5 as composeSessionId, a6 as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, a7 as generateHookSettings } from './run-CWjO2BDp.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { a4 as applyClaudeProxyEnv, a5 as composeSessionId, a6 as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, a7 as generateHookSettings } from './run-CXQ-NEsY.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{scheduler-DifzWtwa.mjs → scheduler-DPwwX1fQ.mjs}

@@ -1,4 +1,4 @@
-import { m as resolveProjectRoot, y as cronMatches } from './run-CWjO2BDp.mjs';
+import { m as resolveProjectRoot, y as cronMatches } from './run-CXQ-NEsY.mjs';
 import { l as listWorkflows, i as isWorkflowEnabled, w as workflowCrons } from './store-BTs0H_y0.mjs';
 import { r as runWorkflow } from './runStore-CtptN7US.mjs';
 import 'os';

package/dist/{serveCommands-BUJk44dn.mjs → serveCommands-DuhXXuPg.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-sCptO4oM.mjs');
+  const { connectAndGetMachine } = await import('./commands-Cb4O-FK1.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-sCptO4oM.mjs');
+  const { connectAndGetMachine } = await import('./commands-Cb4O-FK1.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-sCptO4oM.mjs');
+  const { connectAndGetMachine } = await import('./commands-Cb4O-FK1.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-sCptO4oM.mjs');
+  const { connectAndGetMachine } = await import('./commands-Cb4O-FK1.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-sCptO4oM.mjs');
+  const { connectAndGetMachine } = await import('./commands-Cb4O-FK1.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager--_kLrbpK.mjs → serveManager-BKTiO1hi.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-CWjO2BDp.mjs';
+import { k as getHyphaServerUrl, S as ServeAuth, l as hasCookieToken } from './run-CXQ-NEsY.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -733,7 +733,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, buildLinkSubdomain(subdomainSafe, mount.linkToken)]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-Bspx1xH-.mjs');
+      const { FrpcTunnel } = await import('./frpc-DLHENjxp.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,

package/dist/{sideband-CkrdMDh7.mjs → sideband-BFQr64jf.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, B as loadMachineContext, C as buildMachineInstructions, D as machineToolsForRole, E as buildMachineTools } from './run-CWjO2BDp.mjs';
+import { R as READ_ONLY_TOOLS, B as loadMachineContext, C as buildMachineInstructions, D as machineToolsForRole, E as buildMachineTools } from './run-CXQ-NEsY.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';