svamp-cli 0.2.284 → 0.2.290

package/dist/{run-CRTzyKbn.mjs → run-BNiSOlBf.mjs}

@@ -2973,7 +2973,7 @@ Connection: close\r
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, buildLinkSubdomain(subdomainSafe, mount.linkToken)]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-BsR6aGNJ.mjs');
+      const { FrpcTunnel } = await import('./frpc-B8zTErxt.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,
@@ -3269,11 +3269,17 @@ function buildCodexProviderArgs(cfg) {
   if (cfg.model) configArgs.push("-c", `model=${JSON.stringify(cfg.model)}`);
   return { configArgs, env: { [CODEX_PROVIDER_KEY_ENV]: cfg.apiKey }, model: cfg.model };
 }
+function codexForcedModel(env = process.env) {
+  const f = (env.SVAMP_CODEX_FORCE_MODEL || "").toLowerCase();
+  if (!f || f === "0" || f === "false" || f === "no" || f === "off") return void 0;
+  return env.SVAMP_CODEX_MODEL || env.LLM_MODEL || void 0;
+}
 
 var codexProvider = /*#__PURE__*/Object.freeze({
     __proto__: null,
     CODEX_PROVIDER_KEY_ENV: CODEX_PROVIDER_KEY_ENV,
     buildCodexProviderArgs: buildCodexProviderArgs,
+    codexForcedModel: codexForcedModel,
     codexPermissionSettings: codexPermissionSettings,
     hasCustomProvider: hasCustomProvider,
     resolveCodexProvider: resolveCodexProvider
@@ -4361,6 +4367,48 @@ function renderMessage(channel, { sender = {}, body = {}, query = {}, callId, no
   return renderTemplate(channel.template || DEFAULT_TEMPLATE, ctx);
 }
 
+class StatelessDispatchLimiter {
+  constructor(maxConcurrent, maxPerSender) {
+    this.maxConcurrent = maxConcurrent;
+    this.maxPerSender = maxPerSender;
+  }
+  inflight = 0;
+  perSender = /* @__PURE__ */ new Map();
+  /** Try to reserve a dispatch slot for `sender`. Returns false (reserve nothing) if either cap
+   *  is already at its limit. On true, the caller MUST call release(sender) exactly once. */
+  tryAcquire(sender) {
+    const key = sender || "anonymous";
+    if (this.inflight >= this.maxConcurrent) return false;
+    const s = this.perSender.get(key) || 0;
+    if (s >= this.maxPerSender) return false;
+    this.inflight++;
+    this.perSender.set(key, s + 1);
+    return true;
+  }
+  /** Release a slot previously reserved by tryAcquire. Clamped so a double-release can't drive
+   *  the counters negative. */
+  release(sender) {
+    const key = sender || "anonymous";
+    if (this.inflight > 0) this.inflight--;
+    const s = (this.perSender.get(key) || 0) - 1;
+    if (s > 0) this.perSender.set(key, s);
+    else this.perSender.delete(key);
+  }
+  /** Current total in-flight dispatches (for diagnostics/tests). */
+  get active() {
+    return this.inflight;
+  }
+}
+function statelessDispatchCaps(env = process.env) {
+  const num = (v, dflt) => {
+    const n = Number(v);
+    return Number.isFinite(n) && n > 0 ? Math.floor(n) : dflt;
+  };
+  const concurrent = num(env.SVAMP_CHANNEL_MAX_CONCURRENT, 6);
+  const perSender = Math.min(num(env.SVAMP_CHANNEL_MAX_PER_SENDER, 2), concurrent);
+  return { concurrent, perSender };
+}
+
 const MAX_PER_CHANNEL = 200;
 const TTL_MS = 60 * 60 * 1e3;
 const COMPACT_EVERY = 500;
@@ -4588,6 +4636,11 @@ class ChannelOutbox {
   }
 }
 
+var outbox = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    ChannelOutbox: ChannelOutbox
+});
+
 function getParamNames(fn) {
   const src = fn.toString();
   const match = src.match(/^(?:async\s+)?(?:function\s*\w*)?\s*\(([^)]*)\)/);
@@ -5816,7 +5869,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-BsR6aGNJ.mjs');
+        const { FrpcTunnel } = await import('./frpc-B8zTErxt.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -6292,7 +6345,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-CKmZxwY6.mjs');
+          const { toolsForRole } = await import('./sideband-Dnuy9-IL.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -6379,6 +6432,8 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
       return handler(...callArgs);
     }
   };
+  const _caps = statelessDispatchCaps();
+  const statelessLimiter = new StatelessDispatchLimiter(_caps.concurrent, _caps.perSender);
   const dispatchStateless = async (c, dir, kwargs, context) => {
     const u = context?.user;
     const r = resolveSender(c, {
@@ -6390,8 +6445,12 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     });
     if (r.error || !r.sender) return { error: r.error || "unauthorized" };
     const callId = "call_" + Math.random().toString(16).slice(2, 12);
+    const senderKey = (r.sender.name || "anonymous").toLowerCase();
+    if (!statelessLimiter.tryAcquire(senderKey)) {
+      return { ok: false, call_id: callId, status: "busy", error: "channel is busy (too many concurrent requests) \u2014 retry shortly" };
+    }
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-BABblJRp.mjs');
+    const { queryCore } = await import('./commands-Dc9t_OeY.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -6399,6 +6458,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
     } catch (e) {
       return { ok: false, call_id: callId, status: "error", error: e?.message || String(e) };
     } finally {
+      statelessLimiter.release(senderKey);
       if (result?.sessionId) {
         try {
           handlers.deleteSession?.(result.sessionId);
@@ -6723,7 +6783,9 @@ function recordWake(now) {
 }
 function senderIsHuman(message) {
   const f = message.from || "";
-  return f.startsWith("cli:") || f.startsWith("user:");
+  if (!(f.startsWith("cli:") || f.startsWith("user:"))) return false;
+  if (message.verified === false) return false;
+  return true;
 }
 function senderKey(message) {
   return message.fromSession || message.from || "unknown";
@@ -9388,10 +9450,27 @@ class SessionArtifactSync {
   async listRemoteSessions() {
     if (!this.initialized || !this.artifactManager || !this.collectionId) return [];
     try {
-      const children = await this.artifactManager.list({
-        parent_id: this.collectionId,
-        _rkwargs: true
-      });
+      const PAGE = 100;
+      const children = [];
+      const seen = /* @__PURE__ */ new Set();
+      for (let offset = 0; ; offset += PAGE) {
+        const page = await this.artifactManager.list({
+          parent_id: this.collectionId,
+          offset,
+          limit: PAGE,
+          _rkwargs: true
+        });
+        if (!Array.isArray(page) || page.length === 0) break;
+        let fresh = 0;
+        for (const c of page) {
+          const k = String(c?.id ?? c?.manifest?.id ?? c?.alias ?? `${offset}:${fresh}`);
+          if (seen.has(k)) continue;
+          seen.add(k);
+          children.push(c);
+          fresh++;
+        }
+        if (page.length < PAGE || fresh === 0) break;
+      }
       return (children || []).map((child) => ({
         sessionId: child.manifest?.sessionId || child.alias?.replace("session-", ""),
         machineId: child.manifest?.machineId,
@@ -9624,22 +9703,63 @@ class SharingNotificationSync {
       this.log(`[USER EVENT] Failed to publish ${event.type} for ${event.recipientEmail}: ${err.message}`);
     }
   }
+  /**
+   * List ALL children of a collection, paginating past hypha's default page cap (`limit=100`,
+   * server hypha/artifact.py list_children). The svamp-user-events / svamp-shared-sessions
+   * collections are GLOBAL across every deployment user, so a single unpaginated list() would
+   * return only the newest ~100 rows across ALL recipients — silently hiding a given user's
+   * events past that page. We page offset+=100 until a short/empty/duplicate page.
+   */
+  async listAllChildren(parentId) {
+    const PAGE = 100;
+    const all = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (let offset = 0; ; offset += PAGE) {
+      const page = await this.artifactManager.list({ parent_id: parentId, offset, limit: PAGE, _rkwargs: true });
+      if (!Array.isArray(page) || page.length === 0) break;
+      let fresh = 0;
+      for (const c of page) {
+        const k = String(c?.id ?? c?.manifest?.id ?? c?.alias ?? `${offset}:${fresh}`);
+        if (seen.has(k)) continue;
+        seen.add(k);
+        all.push(c);
+        fresh++;
+      }
+      if (page.length < PAGE || fresh === 0) break;
+    }
+    return all;
+  }
   /**
    * List user events addressed to `recipientEmail` (the bell inbox), newest first, excluding
    * expired ones. Reuses the global svamp-user-events collection — cross-workspace by design.
-   * Mirrors the webapp's fetchUserEvents so the CLI reads the same source of truth.
+   * Mirrors the webapp's fetchUserEvents so the CLI reads the same source of truth. Paginated
+   * so a recipient's events past the first 100 global rows are not silently dropped; expired
+   * events the caller owns are best-effort pruned (a no-op until the collection's
+   * recipient_can_delete is active — swallowed on PermissionError).
    */
   async listUserEvents(recipientEmail) {
     if (!this.initialized || !this.eventCollectionId) return [];
     const normalized = recipientEmail.toLowerCase();
     try {
-      const children = await this.artifactManager.list({
-        parent_id: this.eventCollectionId,
-        _rkwargs: true
-      });
+      const children = await this.listAllChildren(this.eventCollectionId);
       if (!Array.isArray(children)) return [];
       const now = Date.now();
-      return children.map((c) => c?.manifest).filter((m) => !!m && typeof m.recipientEmail === "string" && m.recipientEmail.toLowerCase() === normalized && (!m.expiresAt || m.expiresAt > now)).sort((a, b) => (b.createdAt || 0) - (a.createdAt || 0));
+      const live = [];
+      const expiredOwnedIds = [];
+      for (const c of children) {
+        const m = c?.manifest;
+        if (!m || typeof m.recipientEmail !== "string" || m.recipientEmail.toLowerCase() !== normalized) continue;
+        if (m.expiresAt && m.expiresAt <= now) {
+          if (c?.id) expiredOwnedIds.push(c.id);
+          continue;
+        }
+        live.push(m);
+      }
+      for (const id of expiredOwnedIds) {
+        this.artifactManager.delete({ artifact_id: id, _rkwargs: true }).catch(() => {
+        });
+      }
+      return live.sort((a, b) => (b.createdAt || 0) - (a.createdAt || 0));
     } catch (err) {
       this.log(`[USER EVENT] listUserEvents failed for ${recipientEmail}: ${err.message}`);
       return [];
@@ -9654,7 +9774,7 @@ class SharingNotificationSync {
     if (!this.initialized || !this.eventCollectionId) return false;
     const normalized = recipientEmail.toLowerCase();
     try {
-      const children = await this.artifactManager.list({ parent_id: this.eventCollectionId, _rkwargs: true });
+      const children = await this.listAllChildren(this.eventCollectionId);
       if (!Array.isArray(children)) return false;
       const short = eventId.slice(0, 8);
       const match = children.find((c) => {
@@ -9944,6 +10064,7 @@ function startToolCall(toolCallId, toolKind, update, ctx, source) {
       ctx.activeToolCalls.delete(toolCallId);
       ctx.toolCallStartTimes.delete(toolCallId);
       ctx.toolCallTimeouts.delete(toolCallId);
+      ctx.toolCallIdToNameMap.delete(toolCallId);
       ctx.log(`Tool call TIMEOUT: ${toolCallId} (${toolKind}) after ${(timeoutMs / 1e3).toFixed(0)}s`);
       if (ctx.activeToolCalls.size === 0) {
         ctx.emitIdleStatus();
@@ -12455,6 +12576,13 @@ function shouldIsolate(input) {
   return input.optionsSecurityContext !== null && input.optionsSecurityContext !== void 0;
 }
 
+function classifyRestoreContinuation(opts) {
+  if (opts.isOrphaned) return "none";
+  if (opts.loopActive) return "loop-resume";
+  if (opts.wasProcessing && opts.hasResumeId) return "auto-continue";
+  return "none";
+}
+
 function getShareBaseUrl() {
   return getSvampWebBaseUrl();
 }
@@ -14409,7 +14537,7 @@ You are running inside a Svamp session (id: ${sessionId}${handle ? `, handle: ${
 - \`svamp session link add "<url>" --label "<label>" [--icon "\u{1F517}"]\` \u2014 surface viewable artifacts (dashboards, reports, apps) as buttons in the composer "Launch Pad". Manage many: \`link list\` \xB7 \`link update <id> [--url|--label|--icon]\` \xB7 \`link remove <id>\`. Adding the same URL again UPDATES that entry (URL is the dedup key \u2014 no duplicates). Tunnel/exposed URLs from \`svamp service expose\` are added to the Launch Pad AUTOMATICALLY, so do NOT \`session link add\` a URL you just exposed. A session can have MANY links (the Launch Pad); \`session set-link "<url>" "<label>"\` also appends + dedupes by URL (alias of \`link add\`).
 - \`svamp session notify "<msg>" [--level info|warning|error]\` \u2014 send a user notification
 
-**Artifacts (rich inline output):** Write HTML to a file (\`.svamp/<sessionId>/outputs/\` for disposable, \`./outputs/\` for persistent) and emit \`<artifact src="./outputs/viz.html" title="..." />\` \u2014 the Svamp client renders it inline as a sandboxed iframe with theme CSS vars, auto-resize, file inlining, and a header with Reload/Fullscreen/\u22EE menu. Modes: \`default\`, \`bare\` (controls on hover), \`immersive\` (no chrome), \`card\` (click-to-open preview with \`description\`+\`poster\`). Use \`<artifact src="https://..." height="540" />\` to embed a live server. Run \`svamp serve <name> <dir>\` to share. Use a real backend server (\`svamp service expose\`) when you need persistence/auth. **Inline artifacts (\`<artifact>\u2026HTML\u2026</artifact>\` with a body) are for SMALL self-contained HTML only \u2014 anything large (images, datasets, big reports, base64) MUST be written to a file and referenced via \`<artifact src="./outputs/<file>" />\`, never pasted inline. An inline body over 512 KB is rejected (error card + stripped) because it bloats stored history.** See the \`artifact\` skill.
+**Artifacts (rich inline output):** Write HTML to a file (\`.svamp/<sessionId>/outputs/\` for disposable, \`./outputs/\` for persistent) and emit \`<artifact src="./outputs/viz.html" title="..." />\` \u2014 the Svamp client renders it inline as a sandboxed iframe with theme CSS vars, auto-resize, file inlining, and a header with Reload/Fullscreen/\u22EE menu. Modes: \`default\`, \`bare\` (controls on hover), \`immersive\` (no chrome), \`card\` (click-to-open preview with \`description\`+\`poster\`). Use \`<artifact src="https://..." height="540" />\` to embed a live server. To share it as a link, DEFAULT to a persistent, lazy mount \u2014 \`svamp serve apply <yaml>\` (a static dir, or a \`process:\` block with \`wake_on_request: true\` + \`idle_timeout_sec\` for a dynamic server): it survives daemon restarts, idles to near-zero memory, and wakes on the next visit (the serverless pattern users expect). Reserve ad-hoc \`svamp serve <name> <dir>\` / \`svamp service expose\` for genuinely throwaway demos ONLY \u2014 those vanish on restart, which confuses users who revisit. **Inline artifacts (\`<artifact>\u2026HTML\u2026</artifact>\` with a body) are for SMALL self-contained HTML only \u2014 anything large (images, datasets, big reports, base64) MUST be written to a file and referenced via \`<artifact src="./outputs/<file>" />\`, never pasted inline. An inline body over 512 KB is rejected (error card + stripped) because it bloats stored history.** See the \`artifact\` skill.
 
 ## Shared environment
 
@@ -16145,7 +16273,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-B23M4vER.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-fY4keaFA.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -16163,7 +16291,7 @@ async function startDaemon(options) {
     }
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./frpc-BsR6aGNJ.mjs');
+    const { FrpcTunnel } = await import('./frpc-B8zTErxt.mjs');
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -18379,11 +18507,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-B5BRaVsS.mjs');
+              const { issueRpc } = await import('./rpc-olai-LcU.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BjrKqEib.mjs');
+              const { workflowRpc } = await import('./rpc-D3Hg4y67.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -18755,7 +18883,8 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
                 logger.log(`[${agentName} Session ${sessionId}] Ignoring meta.permissionMode='${msgMeta.permissionMode}' from sendMessage (current: ${currentPermissionMode}; use switchMode to change)`);
               }
               {
-                const rawModel = typeof msgMeta?.model === "string" && msgMeta.model ? msgMeta.model : void 0;
+                const forcedModel = agentName === "codex" ? codexForcedModel() : void 0;
+                const rawModel = forcedModel || (typeof msgMeta?.model === "string" && msgMeta.model ? msgMeta.model : void 0);
                 const desiredModel = rawModel || agentConfig?.default_model || void 0;
                 if (desiredModel !== appliedAgentModel) {
                   agentBackend?.setModel?.(desiredModel);
@@ -18995,11 +19124,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-B5BRaVsS.mjs');
+              const { issueRpc } = await import('./rpc-olai-LcU.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BjrKqEib.mjs');
+              const { workflowRpc } = await import('./rpc-D3Hg4y67.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -19175,7 +19304,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               }
             }
           }
-          const codexModel = options2.model || agentConfig?.default_model || provider.model || void 0;
+          const codexModel = codexForcedModel() || options2.model || agentConfig?.default_model || provider.model || void 0;
           const codexPerm = codexPermissionSettings(currentPermissionMode);
           logger.log(`[Agent Session ${sessionId}] Codex backend: app-server (model=${codexModel ?? "default"}${provider.apiBase ? `, provider=${provider.apiBase}` : ""}${accountDesc ? `, account=${accountDesc}` : ""}, mode=${currentPermissionMode} \u2192 approval=${codexPerm.approvalPolicy}/sandbox=${codexPerm.sandbox})`);
           if (acpResumeThreadId) logger.log(`[Agent Session ${sessionId}] Resuming Codex thread ${acpResumeThreadId} (restart recovery)`);
@@ -19950,10 +20079,15 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
                 break;
               }
             }
-            if (persisted.wasProcessing && persisted.claudeResumeId && !isOrphaned) {
+            const _restoreAction = classifyRestoreContinuation({
+              wasProcessing: !!persisted.wasProcessing,
+              hasResumeId: !!persisted.claudeResumeId,
+              isOrphaned: !!isOrphaned,
+              loopActive: isLoopActiveForSession(persisted.directory, persisted.sessionId)
+            });
+            if (_restoreAction === "auto-continue") {
               sessionsToAutoContinue.push(persisted.sessionId);
-            }
-            if (!isOrphaned && !persisted.wasProcessing && isLoopActiveForSession(persisted.directory, persisted.sessionId)) {
+            } else if (_restoreAction === "loop-resume") {
               sessionsToLoopResume.push({ sessionId: persisted.sessionId, directory: persisted.directory });
             }
           } else {
@@ -20114,7 +20248,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-QYMtbUDe.mjs');
+    const { WorkflowScheduler } = await import('./scheduler--MbVadb0.mjs');
     const workflowScheduler = new WorkflowScheduler({
       projectRoots: () => {
         const dirs = /* @__PURE__ */ new Set();
@@ -20737,4 +20871,4 @@ var run = /*#__PURE__*/Object.freeze({
     writeStopMarker: writeStopMarker
 });
 
-export { listSkillFiles as $, removeWorkflow as A, saveWorkflow as B, rawWorkflow as C, listWorkflows as D, isWorkflowEnabled as E, workflowCrons as F, cronMatches as G, summarize as H, workflowSteps as I, parseJwtEmail as J, computeCollectionConfigUpdate as K, SYSTEM_COLLECTION_CONFIG as L, loadMachineContext as M, buildMachineInstructions as N, machineToolsForRole as O, buildMachineTools as P, parseFrontmatter as Q, READ_ONLY_TOOLS as R, SharingNotificationSync as S, getSkillsServer as T, getSkillsWorkspaceName as U, getSkillsCollectionName as V, fetchWithTimeout as W, searchSkills as X, SKILLS_DIR as Y, getSkillInfo as Z, downloadSkillFile as _, createSessionStore as a, resolveModel as a0, clearStopMarker as a1, stopMarkerExists as a2, formatHandle as a3, normalizeAllowedUser as a4, loadSecurityContextConfig as a5, resolveSecurityContext as a6, buildSecurityContextFromFlags as a7, mergeSecurityContexts as a8, buildSessionShareUrl as a9, computeOutboundHop as aa, registerAwaitingReply as ab, buildMachineShareUrl as ac, parseHandle as ad, handleMatchesMetadata as ae, describeMisconfiguration as af, buildMachineDeps as ag, applyClaudeProxyEnv as ah, composeSessionId as ai, generateFriendlyName as aj, generateHookSettings as ak, staticFileServer as al, instanceConfig as am, claudeAuth as an, codexProvider as ao, projectInfo as ap, DefaultTransport$1 as aq, acpBackend as ar, acpAgentConfig as as, codexAppServerBackend as at, GeminiTransport$1 as au, api as av, run as aw, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerPort as f, getHyphaServerUrl$1 as g, getFrpsServerAddr as h, shortId as i, resolveProjectRoot as j, getIssue as k, resumeIssue as l, addComment as m, addIssue as n, listIssues as o, pauseIssue as p, searchIssues as q, registerMachineService as r, startDaemon as s, isVisibleTo as t, updateIssue as u, getRun as v, listRuns as w, getWorkflow as x, runWorkflow as y, setWorkflowEnabled as z };
+export { listSkillFiles as $, removeWorkflow as A, saveWorkflow as B, rawWorkflow as C, listWorkflows as D, isWorkflowEnabled as E, workflowCrons as F, cronMatches as G, summarize as H, workflowSteps as I, parseJwtEmail as J, computeCollectionConfigUpdate as K, SYSTEM_COLLECTION_CONFIG as L, loadMachineContext as M, buildMachineInstructions as N, machineToolsForRole as O, buildMachineTools as P, parseFrontmatter as Q, READ_ONLY_TOOLS as R, SharingNotificationSync as S, getSkillsServer as T, getSkillsWorkspaceName as U, getSkillsCollectionName as V, fetchWithTimeout as W, searchSkills as X, SKILLS_DIR as Y, getSkillInfo as Z, downloadSkillFile as _, createSessionStore as a, resolveModel as a0, clearStopMarker as a1, stopMarkerExists as a2, ChannelStore as a3, gatewayBase as a4, genKey as a5, formatHandle as a6, normalizeAllowedUser as a7, loadSecurityContextConfig as a8, resolveSecurityContext as a9, run as aA, buildSecurityContextFromFlags as aa, mergeSecurityContexts as ab, buildSessionShareUrl as ac, computeOutboundHop as ad, registerAwaitingReply as ae, buildMachineShareUrl as af, parseHandle as ag, handleMatchesMetadata as ah, describeMisconfiguration as ai, buildMachineDeps as aj, applyClaudeProxyEnv as ak, composeSessionId as al, generateFriendlyName as am, generateHookSettings as an, staticFileServer as ao, instanceConfig as ap, claudeAuth as aq, codexProvider as ar, outbox as as, projectInfo as at, DefaultTransport$1 as au, acpBackend as av, acpAgentConfig as aw, codexAppServerBackend as ax, GeminiTransport$1 as ay, api as az, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerPort as f, getHyphaServerUrl$1 as g, getFrpsServerAddr as h, shortId as i, resolveProjectRoot as j, getIssue as k, resumeIssue as l, addComment as m, addIssue as n, listIssues as o, pauseIssue as p, searchIssues as q, registerMachineService as r, startDaemon as s, isVisibleTo as t, updateIssue as u, getRun as v, listRuns as w, getWorkflow as x, runWorkflow as y, setWorkflowEnabled as z };

package/dist/{scheduler-QYMtbUDe.mjs → scheduler--MbVadb0.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, D as listWorkflows, E as isWorkflowEnabled, F as workflowCrons, y as runWorkflow, G as cronMatches } from './run-CRTzyKbn.mjs';
+import { j as resolveProjectRoot, D as listWorkflows, E as isWorkflowEnabled, F as workflowCrons, y as runWorkflow, G as cronMatches } from './run-BNiSOlBf.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{serveCommands-Cj3MLbZb.mjs → serveCommands-BONMg_af.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BABblJRp.mjs');
+  const { connectAndGetMachine } = await import('./commands-Dc9t_OeY.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BABblJRp.mjs');
+  const { connectAndGetMachine } = await import('./commands-Dc9t_OeY.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BABblJRp.mjs');
+  const { connectAndGetMachine } = await import('./commands-Dc9t_OeY.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BABblJRp.mjs');
+  const { connectAndGetMachine } = await import('./commands-Dc9t_OeY.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-BABblJRp.mjs');
+  const { connectAndGetMachine } = await import('./commands-Dc9t_OeY.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{sideband-CKmZxwY6.mjs → sideband-Dnuy9-IL.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, M as loadMachineContext, N as buildMachineInstructions, O as machineToolsForRole, P as buildMachineTools } from './run-CRTzyKbn.mjs';
+import { R as READ_ONLY_TOOLS, M as loadMachineContext, N as buildMachineInstructions, O as machineToolsForRole, P as buildMachineTools } from './run-BNiSOlBf.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';

package/package.json

@@ -1,48 +1,48 @@
 {
-  "name": "svamp-cli",
-  "version": "0.2.284",
-  "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
-  "author": "Amun AI AB",
-  "license": "SEE LICENSE IN LICENSE",
-  "type": "module",
-  "bin": {
-    "svamp": "./bin/svamp.mjs"
-  },
-  "files": [
-    "dist",
-    "bin"
-  ],
-  "main": "./dist/index.mjs",
-  "exports": {
-    ".": "./dist/index.mjs",
-    "./cli": "./dist/cli.mjs"
-  },
-  "scripts": {
-    "build": "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
-    "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-backend-accounts.mjs && npx tsx test/test-backend-oauth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-user-events.mjs && npx tsx test/test-migrate-children.mjs && npx tsx test/test-inbox-reconcile.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-isolation-disable.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-session-access-fallback.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-app-server.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-compact-detect.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-cron.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-workflow-idle.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-ws-upgrade.mjs && npx tsx test/test-serve-auth.mjs && npx tsx test/test-static-file-server.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-outbox-reload.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs && npx tsx test/test-artifact-guard.mjs && npx tsx test/test-graceful-restart.mjs && npx tsx test/test-flush-exit.mjs",
-    "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
-    "dev": "tsx src/cli.ts",
-    "dev:daemon": "tsx src/cli.ts daemon start-sync",
-    "test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
-    "test:frpc": "npx tsx test/test-frpc-e2e.mjs",
-    "prepublishOnly": "yarn build"
-  },
-  "dependencies": {
-    "@agentclientprotocol/sdk": "^0.14.1",
-    "@modelcontextprotocol/sdk": "^1.25.3",
-    "hypha-rpc": "0.21.42",
-    "node-pty": "1.2.0-beta.11",
-    "ws": "^8.18.0",
-    "yaml": "^2.8.2",
-    "zod": "^3.24.4"
-  },
-  "devDependencies": {
-    "@types/node": ">=20",
-    "@types/ws": "^8.5.14",
-    "pkgroll": "^2.14.2",
-    "tsx": "^4.20.6",
-    "typescript": "5.9.3"
-  },
-  "packageManager": "yarn@1.22.22"
+    "name": "svamp-cli",
+    "version": "0.2.290",
+    "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
+    "author": "Amun AI AB",
+    "license": "SEE LICENSE IN LICENSE",
+    "type": "module",
+    "bin": {
+        "svamp": "./bin/svamp.mjs"
+    },
+    "files": [
+        "dist",
+        "bin"
+    ],
+    "main": "./dist/index.mjs",
+    "exports": {
+        ".": "./dist/index.mjs",
+        "./cli": "./dist/cli.mjs"
+    },
+    "scripts": {
+        "build": "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
+        "typecheck": "tsc --noEmit",
+        "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-backend-accounts.mjs && npx tsx test/test-codex-force-model.mjs && npx tsx test/test-backend-oauth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-user-events.mjs && npx tsx test/test-migrate-children.mjs && npx tsx test/test-outpost-install.mjs && npx tsx test/test-inbox-reconcile.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-isolation-disable.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-session-access-fallback.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-app-server.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-compact-detect.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-restore-decision.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-cron.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-workflow-idle.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-ws-upgrade.mjs && npx tsx test/test-serve-auth.mjs && npx tsx test/test-static-file-server.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-outbox-reload.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-stateless-dispatch-limiter.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs && npx tsx test/test-artifact-guard.mjs && npx tsx test/test-artifact-sync-pagination.mjs && npx tsx test/test-graceful-restart.mjs && npx tsx test/test-flush-exit.mjs",
+        "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
+        "dev": "tsx src/cli.ts",
+        "dev:daemon": "tsx src/cli.ts daemon start-sync",
+        "test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
+        "test:frpc": "npx tsx test/test-frpc-e2e.mjs",
+        "prepublishOnly": "yarn build"
+    },
+    "dependencies": {
+        "@agentclientprotocol/sdk": "^0.14.1",
+        "@modelcontextprotocol/sdk": "^1.25.3",
+        "hypha-rpc": "0.21.42",
+        "node-pty": "1.2.0-beta.11",
+        "ws": "^8.18.0",
+        "yaml": "^2.8.2",
+        "zod": "^3.24.4"
+    },
+    "devDependencies": {
+        "@types/node": ">=20",
+        "@types/ws": "^8.5.14",
+        "pkgroll": "^2.14.2",
+        "tsx": "^4.20.6",
+        "typescript": "5.9.3"
+    },
+    "packageManager": "yarn@1.22.22"
 }