svamp-cli 0.2.256 → 0.2.258

package/dist/{serveManager-CQGY6nFz.mjs → serveManager-BszV0oIl.mjs}

@@ -1,10 +1,11 @@
-import { spawn } from 'child_process';
+import { spawn, execSync } from 'child_process';
 import * as crypto from 'crypto';
 import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { l as getHyphaServerUrl, S as ServeAuth, m as hasCookieToken } from './run-BDX-RaEm.mjs';
+import { serveStaticMount } from './staticFileServer-FCEOLIYH.mjs';
+import { l as getHyphaServerUrl, S as ServeAuth, m as hasCookieToken } from './run-C1Unk4Zx.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -56,6 +57,27 @@ async function tryReservePort(preferred) {
     });
   });
 }
+function killOrphanedCaddy(log) {
+  if (process.platform === "win32") return;
+  try {
+    const out = execSync("ps -axo pid=,command=", { encoding: "utf-8" });
+    const pids = [];
+    for (const line of out.split("\n")) {
+      const m = /^\s*(\d+)\s+(.*)$/.exec(line);
+      if (!m) continue;
+      const [, pid, cmd] = m;
+      if (cmd.includes(".svamp/bin/caddy") && pid !== String(process.pid)) pids.push(pid);
+    }
+    for (const pid of pids) {
+      try {
+        process.kill(Number(pid), "SIGKILL");
+      } catch {
+      }
+    }
+    if (pids.length) log(`Reaped ${pids.length} orphaned Caddy process(es) \u2014 retired in favor of the native file server (#0358).`);
+  } catch {
+  }
+}
 const MOUNT_NAME_RE = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
 function validateMountName(name) {
   if (!name || name.length > 128) {
@@ -68,18 +90,14 @@ function validateMountName(name) {
 class ServeManager {
   mounts = /* @__PURE__ */ new Map();
   port = 0;
-  // auth proxy public port
-  caddyPort = 0;
-  // Caddy internal port
-  /** Last-used ports loaded from disk — used as preferred values on next start
+  // public HTTP server port (serves static files natively — #0358)
+  /** Last-used port loaded from disk — used as the preferred value on next start
    *  so external configs (tunnels, cron, bookmarks) survive daemon restarts. */
   persistedPort;
-  persistedCaddyPort;
   /** Per-mount frpc tunnel — each mount gets its own subdomain `static-<name>-<hash>`. */
   mountTunnels = /* @__PURE__ */ new Map();
   /** hostname (lowercased, no port) → mount name. Updated when tunnels connect. */
   hostToMount = /* @__PURE__ */ new Map();
-  caddy = null;
   proxyServer = null;
   auth = null;
   /** Live child processes for managed mounts. Keyed by mount name. */
@@ -159,9 +177,6 @@ class ServeManager {
     };
     this.mounts.set(spec.name, mount);
     await this.ensureRunning();
-    if (resolvedDir && this.caddy?.isRunning) {
-      await this.caddy.addMount(spec.name, resolvedDir);
-    }
     await this.startMountTunnel(spec.name);
     if (spec.process && !spec.process.wakeOnRequest) {
       try {
@@ -198,13 +213,6 @@ class ServeManager {
     for (const [host, mountName] of this.hostToMount.entries()) {
       if (mountName === name) this.hostToMount.delete(host);
     }
-    if (this.caddy?.isRunning) {
-      try {
-        await this.caddy.removeMount(name);
-      } catch (err) {
-        this.log(`Warning: Caddy mount removal failed: ${err.message}`);
-      }
-    }
     this.persist();
     this.log(`Mount removed: ${name}`);
     if (this.mounts.size === 0) {
@@ -225,12 +233,12 @@ class ServeManager {
    * Get server info — each mount has its own URL (per-mount subdomain).
    */
   getInfo() {
-    const running = this.caddy?.isRunning ?? false;
+    const running = this.proxyServer != null;
     const firstMount = this.mounts.values().next().value;
     const firstUrl = firstMount ? this.getMountUrl(firstMount.name) : null;
     return {
       url: firstUrl,
-      port: running ? this.caddy?.port ?? this.port : 0,
+      port: running ? this.port : 0,
       authProxyPort: running ? this.port : 0,
       running,
       mountCount: this.mounts.size,
@@ -249,7 +257,6 @@ class ServeManager {
       if (!fs.existsSync(this.persistFile)) return;
       const raw = JSON.parse(fs.readFileSync(this.persistFile, "utf-8"));
       this.persistedPort = raw.port;
-      this.persistedCaddyPort = raw.caddyPort;
       if (!raw.mounts || raw.mounts.length === 0) return;
       let restoredCount = 0;
       for (const m of raw.mounts) {
@@ -327,11 +334,6 @@ class ServeManager {
       await new Promise((resolve) => this.proxyServer.close(() => resolve()));
       this.proxyServer = null;
     }
-    if (this.caddy) {
-      await this.caddy.stop();
-      this.caddy = null;
-      this.log("Caddy stopped");
-    }
     this.auth?.destroy();
   }
   // ── Managed-process lifecycle ─────────────────────────────────────────
@@ -488,8 +490,7 @@ class ServeManager {
   persist() {
     const state = {
       mounts: Array.from(this.mounts.values()),
-      ...this.port > 0 ? { port: this.port } : {},
-      ...this.caddyPort > 0 ? { caddyPort: this.caddyPort } : {}
+      ...this.port > 0 ? { port: this.port } : {}
     };
     try {
       fs.writeFileSync(this.persistFile, JSON.stringify(state, null, 2));
@@ -499,32 +500,24 @@ class ServeManager {
   }
   /** Start auth proxy + Caddy if not already running. Per-mount tunnels are started separately. */
   async ensureRunning() {
-    if (this.caddy?.isRunning) return;
-    this.caddyPort = await tryReservePort(this.persistedCaddyPort);
+    if (this.proxyServer) return;
+    killOrphanedCaddy((m) => this.log(m));
     this.port = await tryReservePort(this.persistedPort);
-    const adminPort = await findFreePort();
     if (this.persistedPort && this.port !== this.persistedPort) {
       this.log(`\u26A0 Previous serve port ${this.persistedPort} unavailable \u2014 using ${this.port}. Downstream configs referencing the old port will need updating.`);
     }
-    if (this.persistedCaddyPort && this.caddyPort !== this.persistedCaddyPort) {
-      this.log(`\u26A0 Previous Caddy port ${this.persistedCaddyPort} unavailable \u2014 using ${this.caddyPort} (Caddy is internal; no downstream impact).`);
-    }
-    const { CaddyManager } = await import('./caddy-CuTbE3NY.mjs');
-    this.caddy = new CaddyManager({
-      listenPort: this.caddyPort,
-      adminPort,
-      configDir: path.join(path.dirname(this.persistFile), "caddy"),
-      log: (msg) => this.log(`[Caddy] ${msg}`)
-    });
-    for (const mount of this.mounts.values()) {
-      if (mount.directory) {
-        await this.caddy.addMount(mount.name, mount.directory);
-      }
-    }
-    await this.caddy.start();
-    this.log(`Caddy file server started on 127.0.0.1:${this.caddyPort}`);
     await this.startAuthProxy();
-    this.log(`Auth proxy started on 127.0.0.1:${this.port}`);
+    this.log(`Static file server started on 127.0.0.1:${this.port}`);
+  }
+  /** Minimal mount-listing page for the server root (replaces Caddy's root route). */
+  mountListHtml() {
+    const esc = (s) => s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+    const items = Array.from(this.mounts.values()).filter((m) => m.directory).map((m) => `<li><a href="/${esc(m.name)}/">${esc(m.name)}</a> \u2014 ${esc(m.directory || "")}</li>`).join("\n");
+    return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>Svamp File Server</title>
+<style>body{font-family:system-ui,sans-serif;max-width:700px;margin:40px auto;padding:0 20px;color:#333}
+h1{font-size:1.3rem}ul{list-style:none;padding:0}li{padding:8px 0;border-bottom:1px solid #eee}
+a{color:#0969da;text-decoration:none;font-weight:500}a:hover{text-decoration:underline}</style></head>
+<body><h1>Svamp File Server</h1><ul>${items || "<li>No mounts registered.</li>"}</ul></body></html>`;
   }
   /** Start a lightweight Node.js HTTP proxy with auth + upload support. */
   startAuthProxy() {
@@ -658,7 +651,7 @@ class ServeManager {
           const handle = this.managedProcs.get(mount.name);
           if (handle) handle.lastRequestAt = Date.now();
           const targetPath = mountResolvedByHost ? req.url || "/" : (basePath || "/") + (url.search || "");
-          const proxyReq2 = http.request({
+          const proxyReq = http.request({
             hostname: "127.0.0.1",
             port: cfg.port,
             path: targetPath,
@@ -668,37 +661,32 @@ class ServeManager {
             res.writeHead(proxyRes.statusCode || 200, proxyRes.headers);
             proxyRes.pipe(res);
           });
-          proxyReq2.on("error", (err) => {
+          proxyReq.on("error", (err) => {
             if (!res.headersSent) {
               res.writeHead(502);
               res.end(`Backend error: ${err.message}`);
             }
           });
-          req.pipe(proxyReq2);
+          req.pipe(proxyReq);
           return;
         }
-        let proxyPath = req.url || "/";
-        if (mountResolvedByHost && mountName) {
-          const search = url.search || "";
-          proxyPath = `/${mountName}${basePath === "/" ? "/" : basePath}${search}`;
+        if (mount && mount.directory) {
+          serveStaticMount(req, res, {
+            rootDir: mount.directory,
+            relPath: basePath || "/",
+            // Path-based access is prefixed with /<mountName>; host-based has no prefix.
+            mountUrlPrefix: mountResolvedByHost ? "" : `/${mountName}`,
+            browse: true});
+          return;
+        }
+        const cors = { "Access-Control-Allow-Origin": "*", "Access-Control-Allow-Methods": "GET, HEAD, OPTIONS", "Access-Control-Allow-Headers": "*" };
+        if (url.pathname === "/" || basePath === "/") {
+          res.writeHead(200, { ...cors, "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+          res.end(this.mountListHtml());
+        } else {
+          res.writeHead(404, { ...cors, "Content-Type": "text/plain" });
+          res.end("Not found");
         }
-        const proxyReq = http.request({
-          hostname: "127.0.0.1",
-          port: this.caddyPort,
-          path: proxyPath,
-          method: req.method,
-          headers: req.headers
-        }, (proxyRes) => {
-          res.writeHead(proxyRes.statusCode || 200, proxyRes.headers);
-          proxyRes.pipe(res);
-        });
-        proxyReq.on("error", (err) => {
-          if (!res.headersSent) {
-            res.writeHead(502);
-            res.end("Proxy error");
-          }
-        });
-        req.pipe(proxyReq);
       });
       this.proxyServer = server;
       server.listen(this.port, "127.0.0.1", () => resolve());
@@ -751,7 +739,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, buildLinkSubdomain(subdomainSafe, mount.linkToken)]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc--8kUn3Em.mjs');
+      const { FrpcTunnel } = await import('./frpc-IXxyfgPn.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,

package/dist/{sideband-BQ4pkLIQ.mjs → sideband-DMPZ-ZoR.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, N as loadMachineContext, O as buildMachineInstructions, P as machineToolsForRole, Q as buildMachineTools } from './run-BDX-RaEm.mjs';
+import { R as READ_ONLY_TOOLS, N as loadMachineContext, O as buildMachineInstructions, P as machineToolsForRole, Q as buildMachineTools } from './run-C1Unk4Zx.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';

package/dist/staticFileServer-FCEOLIYH.mjs

@@ -0,0 +1,239 @@
+import * as fs from 'fs';
+import * as path from 'path';
+
+const MIME = {
+  ".html": "text/html; charset=utf-8",
+  ".htm": "text/html; charset=utf-8",
+  ".js": "text/javascript; charset=utf-8",
+  ".mjs": "text/javascript; charset=utf-8",
+  ".css": "text/css; charset=utf-8",
+  ".json": "application/json; charset=utf-8",
+  ".map": "application/json; charset=utf-8",
+  ".txt": "text/plain; charset=utf-8",
+  ".md": "text/plain; charset=utf-8",
+  ".xml": "application/xml; charset=utf-8",
+  ".csv": "text/csv; charset=utf-8",
+  ".svg": "image/svg+xml",
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".gif": "image/gif",
+  ".webp": "image/webp",
+  ".avif": "image/avif",
+  ".ico": "image/x-icon",
+  ".bmp": "image/bmp",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".mov": "video/quicktime",
+  ".m4v": "video/mp4",
+  ".mp3": "audio/mpeg",
+  ".wav": "audio/wav",
+  ".ogg": "audio/ogg",
+  ".m4a": "audio/mp4",
+  ".flac": "audio/flac",
+  ".pdf": "application/pdf",
+  ".wasm": "application/wasm",
+  ".zip": "application/zip",
+  ".gz": "application/gzip",
+  ".tar": "application/x-tar",
+  ".woff": "font/woff",
+  ".woff2": "font/woff2",
+  ".ttf": "font/ttf",
+  ".otf": "font/otf",
+  ".docx": "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+  ".xlsx": "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+  ".pptx": "application/vnd.openxmlformats-officedocument.presentationml.presentation"
+};
+function contentTypeFor(filePath) {
+  return MIME[path.extname(filePath).toLowerCase()] || "application/octet-stream";
+}
+function containedPath(rootDir, relPath) {
+  const base = path.resolve(rootDir);
+  const decoded = safeDecode(relPath);
+  const fp = path.resolve(path.join(base, decoded));
+  if (fp !== base && !fp.startsWith(base + path.sep)) return null;
+  return fp;
+}
+function safeDecode(p) {
+  try {
+    return decodeURIComponent(p);
+  } catch {
+    return p;
+  }
+}
+function parseRange(header, size) {
+  if (!header) return null;
+  const m = /^bytes=(\d*)-(\d*)$/.exec(header.trim());
+  if (!m) return null;
+  const [, s, e] = m;
+  if (s === "" && e === "") return null;
+  let start, end;
+  if (s === "") {
+    const n = parseInt(e, 10);
+    if (n <= 0) return "unsatisfiable";
+    start = Math.max(0, size - n);
+    end = size - 1;
+  } else {
+    start = parseInt(s, 10);
+    end = e === "" ? size - 1 : parseInt(e, 10);
+  }
+  if (Number.isNaN(start) || Number.isNaN(end) || start > end || start >= size) return "unsatisfiable";
+  if (end >= size) end = size - 1;
+  return { start, end };
+}
+function directoryListingHtml(mountRelUrl, entries) {
+  const esc = (s) => s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+  const base = mountRelUrl.endsWith("/") ? mountRelUrl : mountRelUrl + "/";
+  const rows = entries.sort((a, b) => a.isDir === b.isDir ? a.name.localeCompare(b.name) : a.isDir ? -1 : 1).map((e) => {
+    const href = base + encodeURIComponent(e.name) + (e.isDir ? "/" : "");
+    return `<li><a href="${esc(href)}">${esc(e.name)}${e.isDir ? "/" : ""}</a></li>`;
+  }).join("\n");
+  return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>${esc(base)}</title>
+<style>body{font-family:system-ui,sans-serif;max-width:760px;margin:40px auto;padding:0 20px;color:#333}
+h1{font-size:1.15rem;word-break:break-all}ul{list-style:none;padding:0}li{padding:6px 0;border-bottom:1px solid #eee}
+a{color:#0969da;text-decoration:none}a:hover{text-decoration:underline}</style></head>
+<body><h1>${esc(base)}</h1><ul>${rows || "<li>(empty)</li>"}</ul></body></html>`;
+}
+const CORS = {
+  "Access-Control-Allow-Origin": "*",
+  "Access-Control-Allow-Methods": "GET, HEAD, OPTIONS",
+  "Access-Control-Allow-Headers": "*"
+};
+function serveStaticMount(req, res, opts) {
+  const { rootDir, relPath, mountUrlPrefix } = opts;
+  const browse = opts.browse !== false;
+  const method = (req.method || "GET").toUpperCase();
+  if (method === "OPTIONS") {
+    res.writeHead(204, CORS);
+    res.end();
+    return;
+  }
+  if (method !== "GET" && method !== "HEAD") {
+    res.writeHead(405, { ...CORS, Allow: "GET, HEAD, OPTIONS" });
+    res.end("Method Not Allowed");
+    return;
+  }
+  let rootStat;
+  try {
+    rootStat = fs.statSync(rootDir);
+  } catch {
+    res.writeHead(404, CORS);
+    res.end("Not Found");
+    return;
+  }
+  if (rootStat.isFile()) {
+    sendFile(req, res, rootDir, rootStat);
+    return;
+  }
+  const target = containedPath(rootDir, relPath.replace(/^\/+/, ""));
+  if (!target) {
+    res.writeHead(403, { ...CORS, "Content-Type": "text/plain" });
+    res.end("Forbidden");
+    return;
+  }
+  let st;
+  try {
+    st = fs.statSync(target);
+  } catch {
+    res.writeHead(404, { ...CORS, "Content-Type": "text/plain" });
+    res.end("Not Found");
+    return;
+  }
+  if (st.isDirectory()) {
+    const reqPath = (req.url || "/").split("?")[0];
+    if (!reqPath.endsWith("/")) {
+      res.writeHead(302, { ...CORS, Location: reqPath + "/" });
+      res.end();
+      return;
+    }
+    const indexPath = path.join(target, "index.html");
+    if (fs.existsSync(indexPath) && fs.statSync(indexPath).isFile()) {
+      sendFile(req, res, indexPath, fs.statSync(indexPath));
+      return;
+    }
+    if (!browse) {
+      res.writeHead(403, { ...CORS, "Content-Type": "text/plain" });
+      res.end("Directory listing disabled");
+      return;
+    }
+    let entries;
+    try {
+      entries = fs.readdirSync(target, { withFileTypes: true }).filter((d) => !d.name.startsWith(".")).map((d) => ({ name: d.name, isDir: d.isDirectory() }));
+    } catch {
+      res.writeHead(500, CORS);
+      res.end("Listing failed");
+      return;
+    }
+    const listUrl = mountUrlPrefix + (relPath === "/" ? "/" : relPath);
+    const html = directoryListingHtml(listUrl, entries);
+    res.writeHead(200, { ...CORS, "Content-Type": "text/html; charset=utf-8", "Cache-Control": "no-store" });
+    res.end(method === "HEAD" ? void 0 : html);
+    return;
+  }
+  if (st.isFile()) {
+    sendFile(req, res, target, st);
+    return;
+  }
+  res.writeHead(404, CORS);
+  res.end("Not Found");
+}
+function etagFor(st) {
+  return `"${st.size.toString(16)}-${Math.floor(st.mtimeMs).toString(16)}"`;
+}
+function sendFile(req, res, filePath, st) {
+  const method = (req.method || "GET").toUpperCase();
+  const etag = etagFor(st);
+  const lastMod = new Date(st.mtimeMs).toUTCString();
+  const baseHeaders = {
+    ...CORS,
+    "Content-Type": contentTypeFor(filePath),
+    "Accept-Ranges": "bytes",
+    ETag: etag,
+    "Last-Modified": lastMod,
+    "Cache-Control": "no-cache"
+    // revalidate via ETag; content can change under a mount
+  };
+  const inm = req.headers["if-none-match"];
+  const ims = req.headers["if-modified-since"];
+  if (inm && inm === etag || !inm && ims && new Date(ims).getTime() >= Math.floor(st.mtimeMs / 1e3) * 1e3) {
+    res.writeHead(304, baseHeaders);
+    res.end();
+    return;
+  }
+  const range = parseRange(req.headers.range, st.size);
+  if (range === "unsatisfiable") {
+    res.writeHead(416, { ...baseHeaders, "Content-Range": `bytes */${st.size}` });
+    res.end();
+    return;
+  }
+  if (range) {
+    const len = range.end - range.start + 1;
+    res.writeHead(206, { ...baseHeaders, "Content-Range": `bytes ${range.start}-${range.end}/${st.size}`, "Content-Length": String(len) });
+    if (method === "HEAD") {
+      res.end();
+      return;
+    }
+    pipeStream(fs.createReadStream(filePath, { start: range.start, end: range.end }), res);
+    return;
+  }
+  res.writeHead(200, { ...baseHeaders, "Content-Length": String(st.size) });
+  if (method === "HEAD") {
+    res.end();
+    return;
+  }
+  pipeStream(fs.createReadStream(filePath), res);
+}
+function pipeStream(stream, res) {
+  stream.on("error", () => {
+    try {
+      res.destroy();
+    } catch {
+    }
+  });
+  res.on("close", () => {
+    stream.destroy();
+  });
+  stream.pipe(res);
+}
+
+export { containedPath, contentTypeFor, directoryListingHtml, parseRange, serveStaticMount };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.256",
+  "version": "0.2.258",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -20,7 +20,7 @@
   "scripts": {
     "build": "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-cron.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-workflow-idle.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs && npx tsx test/test-artifact-guard.mjs && npx tsx test/test-graceful-restart.mjs",
+    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-cron.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-workflow-idle.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-static-file-server.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs && npx tsx test/test-artifact-guard.mjs && npx tsx test/test-graceful-restart.mjs",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
     "dev": "tsx src/cli.ts",
     "dev:daemon": "tsx src/cli.ts daemon start-sync",