svamp-cli 0.2.291 → 0.2.293

package/dist/{commands-B9puiDBS.mjs → commands-1FEhmtlI.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { join } from 'node:path';
 import os from 'node:os';
-import { a3 as ChannelStore, a4 as gatewayBase, a5 as genKey } from './run-CKLU1B02.mjs';
+import { H as buildOutpostInstall, I as ChannelStore, J as DEFAULT_OUTPOST_DOWNLOAD_BASE, K as setupOutpostChannel } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -21,24 +21,6 @@ import 'node:fs/promises';
 import 'node:util';
 import 'yaml';
 
-const DEFAULT_DOWNLOAD_BASE = "https://github.com/amun-ai/hypha-cloud/releases/latest/download";
-function shq(v) {
-  return `'${String(v).replace(/'/g, `'\\''`)}'`;
-}
-function psq(v) {
-  return `'${String(v).replace(/'/g, `''`)}'`;
-}
-function buildOutpostInstall(params) {
-  const base = params.serverBase.replace(/\/$/, "");
-  const dl = (params.downloadBase || DEFAULT_DOWNLOAD_BASE).replace(/\/$/, "");
-  const session = params.session || params.channel;
-  const q = `channel=${encodeURIComponent(params.channel)}&token=${encodeURIComponent(params.token)}&session=${encodeURIComponent(session)}&dl=${encodeURIComponent(dl)}`;
-  const unix = `curl -fsSL ${shq(`${base}/outpost/install.sh?${q}`)} | SVAMP_OUTPOST_SERVER=${shq(base)} SVAMP_OUTPOST_CHANNEL=${shq(params.channel)} SVAMP_OUTPOST_TOKEN=${shq(params.token)} SVAMP_OUTPOST_SESSION=${shq(session)} sh`;
-  const windows = `$env:SVAMP_OUTPOST_SERVER=${psq(base)}; $env:SVAMP_OUTPOST_CHANNEL=${psq(params.channel)}; $env:SVAMP_OUTPOST_TOKEN=${psq(params.token)}; $env:SVAMP_OUTPOST_SESSION=${psq(session)}; irm ${psq(`${base}/outpost/install.ps1?${q}`)} | iex`;
-  const direct = `svamp-outpost --server ${shq(base)} --channel ${shq(params.channel)} --token ${shq(params.token)} --session ${shq(session)}`;
-  return { unix, windows, direct };
-}
-
 function loadConfig() {
   const p = join(os.homedir(), ".svamp", "outpost.json");
   if (!existsSync(p)) return null;
@@ -119,28 +101,10 @@ async function outpostUp(args) {
     console.error("Could not resolve workspace/machine (HYPHA_WORKSPACE / daemon.state.json).");
     process.exit(1);
   }
-  const channelsServiceId = `${workspace}/${mid}:channels`;
-  const gw = gatewayBase(channelsServiceId, serverUrl);
-  const channelId = `outpost-${session}`;
-  const store = new ChannelStore(projectDir());
-  const existing = store.get(channelId);
-  let token = existing?.identity?.callers?.find((c) => c.name === "outpost")?.key;
-  if (!token) token = genKey();
-  const channel = {
-    id: channelId,
-    name: `Remote outpost \u2014 ${session}`,
-    description: "FDE remote machine: a svamp-outpost binary connects here and the agent runs commands on it.",
-    enabled: true,
-    bind: { session },
-    identity: { mode: "per-key", callers: [{ name: "outpost", kind: "agent", key: token }] },
-    action: { kind: "message" },
-    reply: { mode: "queue" },
-    skill: { name: "remote-outpost", description: "Run commands on the connected remote machine." }
-  };
-  store.save(channel);
-  const dl = argVal(args, "--download-base") || envVar("SVAMP_OUTPOST_DL") || "https://static-outpost-bin-08c08c38.svc.hypha.aicell.io";
+  const dl = argVal(args, "--download-base") || envVar("SVAMP_OUTPOST_DL") || DEFAULT_OUTPOST_DOWNLOAD_BASE;
+  const info = setupOutpostChannel({ session, projectDir: projectDir(), channelsServiceId: `${workspace}/${mid}:channels`, serverUrl, downloadBase: dl });
+  const { channelId, token, serverBase: gw, install: gen } = info;
   saveConfig({ control: "", serverBase: gw, serveBase: dl, token, channel: channelId, session });
-  const gen = buildOutpostInstall({ serverBase: gw, channel: channelId, token, session, downloadBase: dl });
   console.log(`\u2713 outpost channel ready for session ${session} (channel "${channelId}", gateway transport)
 `);
   console.log("Give this to the person at the remote machine:\n");
@@ -223,7 +187,7 @@ async function outpostCommand(args) {
       console.error('usage: svamp outpost exec [--machine <id>] "<command>"');
       process.exit(1);
     }
-    const { ChannelOutbox } = await import('./run-CKLU1B02.mjs').then(function (n) { return n.as; });
+    const { ChannelOutbox } = await import('./run-P_rX5hRP.mjs').then(function (n) { return n.at; });
     const outbox = new ChannelOutbox(projectDir());
     const id = "x" + Date.now().toString(36);
     outbox.append(cfg.channel, { to: "outpost", body: JSON.stringify({ type: "exec", id, cmd, target: target || "" }) });

package/dist/{commands-kahqMkYE.mjs → commands-Ba3H8r0_.mjs}

@@ -60,7 +60,7 @@ async function serviceExpose(args) {
     process.exit(1);
   }
   if (foreground) {
-    const { runFrpcTunnel } = await import('./frpc-BeGCyERl.mjs');
+    const { runFrpcTunnel } = await import('./frpc-D_Z7ezPz.mjs');
     await runFrpcTunnel(name, ports, void 0, {
       group,
       groupKey,
@@ -70,7 +70,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+  const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -92,7 +92,7 @@ async function serviceExpose(args) {
         console.log(`  port ${port}: ${url}`);
       }
       if (process.env.SVAMP_SESSION_ID) {
-        const { autoAddSessionLink } = await import('./agentCommands-CoPsnzwK.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-Ct_y-kUT.mjs');
         let added = 0;
         for (const [port, url] of urlEntries) {
           const label = urlEntries.length > 1 ? `${name}:${port}` : name;
@@ -129,7 +129,7 @@ async function serviceServe(args) {
     console.log(`Serving ${resolvedDir}`);
     const servePort = 18080;
     const http = await import('http');
-    const { serveStaticMount } = await import('./run-CKLU1B02.mjs').then(function (n) { return n.ao; });
+    const { serveStaticMount } = await import('./run-P_rX5hRP.mjs').then(function (n) { return n.ap; });
     const server = http.createServer((req, res) => {
       const u = new URL(req.url || "/", "http://127.0.0.1");
       let rel = u.pathname;
@@ -140,7 +140,7 @@ async function serviceServe(args) {
       server.once("error", reject);
       server.listen(servePort, "127.0.0.1", () => resolve());
     });
-    const { runFrpcTunnel } = await import('./frpc-BeGCyERl.mjs');
+    const { runFrpcTunnel } = await import('./frpc-D_Z7ezPz.mjs');
     void server;
     await runFrpcTunnel(name, [servePort]);
   } catch (err) {
@@ -150,7 +150,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+    const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -190,7 +190,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+    const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/{commands-eBqn9KgI.mjs → commands-BeHqLet1.mjs}

@@ -1,5 +1,5 @@
 import { spawnSync } from 'node:child_process';
-import { j as resolveProjectRoot, I as workflowSteps, z as setWorkflowEnabled, E as isWorkflowEnabled, A as removeWorkflow, x as getWorkflow, D as listWorkflows, B as saveWorkflow, C as rawWorkflow } from './run-CKLU1B02.mjs';
+import { j as resolveProjectRoot, M as workflowSteps, z as setWorkflowEnabled, E as isWorkflowEnabled, A as removeWorkflow, x as getWorkflow, D as listWorkflows, B as saveWorkflow, C as rawWorkflow } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-B-VYM4sA.mjs → commands-BuYofggg.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync, writeFileSync } from 'node:fs';
 import { execSync, execFileSync } from 'node:child_process';
 import { basename, resolve, join, isAbsolute } from 'node:path';
 import os from 'node:os';
-import { a6 as formatHandle, a7 as normalizeAllowedUser, a8 as loadSecurityContextConfig, a9 as resolveSecurityContext, aa as buildSecurityContextFromFlags, ab as mergeSecurityContexts, c as connectToHypha, ac as buildSessionShareUrl, ad as computeOutboundHop, i as shortId, ae as registerAwaitingReply, af as buildMachineShareUrl, ag as parseHandle, ah as handleMatchesMetadata } from './run-CKLU1B02.mjs';
+import { a7 as formatHandle, a8 as normalizeAllowedUser, a9 as loadSecurityContextConfig, aa as resolveSecurityContext, ab as buildSecurityContextFromFlags, ac as mergeSecurityContexts, c as connectToHypha, ad as buildSessionShareUrl, ae as computeOutboundHop, i as shortId, af as registerAwaitingReply, ag as buildMachineShareUrl, ah as parseHandle, ai as handleMatchesMetadata } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-Bfgme-kK.mjs → commands-DioFG-T8.mjs}

@@ -1,8 +1,8 @@
 import { execSync } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
-import { f as flushAndExit } from './cli-CuzIOUig.mjs';
-import { j as resolveProjectRoot, q as searchIssues, o as listIssues, l as resumeIssue, p as pauseIssue, m as addComment, u as updateIssue, k as getIssue, t as isVisibleTo, H as summarize, n as addIssue } from './run-CKLU1B02.mjs';
+import { f as flushAndExit } from './cli-CFNupfRe.mjs';
+import { j as resolveProjectRoot, q as searchIssues, o as listIssues, l as resumeIssue, p as pauseIssue, m as addComment, u as updateIssue, k as getIssue, t as isVisibleTo, L as summarize, n as addIssue } from './run-P_rX5hRP.mjs';
 import './serviceManager-hlOVxkhW.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{commands-Cx8mEjjt.mjs → commands-S9ugb6eO.mjs}

@@ -1,8 +1,8 @@
 import { existsSync } from 'node:fs';
 import { resolve } from 'node:path';
-import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-B-VYM4sA.mjs';
+import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-BuYofggg.mjs';
 import { execFileSync } from 'node:child_process';
-import { u as updateIssue, m as addComment, n as addIssue, i as shortId } from './run-CKLU1B02.mjs';
+import { u as updateIssue, m as addComment, n as addIssue, i as shortId } from './run-P_rX5hRP.mjs';
 import 'node:os';
 import 'os';
 import 'fs/promises';

package/dist/{commands-DwQIShcm.mjs → commands-sLeyJvvR.mjs}

@@ -1,11 +1,11 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-B-VYM4sA.mjs';
+import { connectAndGetMachine } from './commands-BuYofggg.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-CKLU1B02.mjs';
+import './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/dist/{commands-DSI9ZUTG.mjs → commands-spXLzJrp.mjs}

@@ -1,7 +1,7 @@
 import os from 'os';
 import fs__default from 'fs';
 import { resolve, join, relative } from 'path';
-import { Q as parseFrontmatter, T as getSkillsServer, U as getSkillsWorkspaceName, V as getSkillsCollectionName, W as fetchWithTimeout, X as searchSkills, Y as SKILLS_DIR, Z as getSkillInfo, _ as downloadSkillFile, $ as listSkillFiles } from './run-CKLU1B02.mjs';
+import { W as parseFrontmatter, X as getSkillsServer, Y as getSkillsWorkspaceName, Z as getSkillsCollectionName, _ as fetchWithTimeout, $ as searchSkills, a0 as SKILLS_DIR, a1 as getSkillInfo, a2 as downloadSkillFile, a3 as listSkillFiles } from './run-P_rX5hRP.mjs';
 import 'fs/promises';
 import 'url';
 import 'child_process';

package/dist/{fleet-CqbZhBG2.mjs → fleet-BDH5YnGz.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { c as connectToHypha } from './run-CKLU1B02.mjs';
+import { c as connectToHypha } from './run-P_rX5hRP.mjs';
 import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-BaMR97BE.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{frpc-BeGCyERl.mjs → frpc-D_Z7ezPz.mjs}

@@ -4,7 +4,7 @@ import { mkdirSync, chmodSync, writeFileSync, unlinkSync, existsSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { randomUUID, createHash } from 'crypto';
-import { e as getFrpsSubdomainHost, f as getFrpsServerPort, h as getFrpsServerAddr } from './run-CKLU1B02.mjs';
+import { e as getFrpsSubdomainHost, f as getFrpsServerPort, h as getFrpsServerAddr } from './run-P_rX5hRP.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:crypto';

package/dist/{headlessCli-CJiHG0gu.mjs → headlessCli-fqWKn6GX.mjs}

@@ -1,5 +1,5 @@
-import { a0 as resolveModel, ai as describeMisconfiguration, aj as buildMachineDeps } from './run-CKLU1B02.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-BCMGW33d.mjs';
+import { a4 as resolveModel, aj as describeMisconfiguration, ak as buildMachineDeps } from './run-P_rX5hRP.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-BhOX0Gs4.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-CKLU1B02.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{notifyCommands-CXjWSZHe.mjs → notifyCommands-BFKffk8w.mjs}

@@ -1,4 +1,4 @@
-import { c as connectToHypha, S as SharingNotificationSync, J as parseJwtEmail } from './run-CKLU1B02.mjs';
+import { c as connectToHypha, S as SharingNotificationSync, N as parseJwtEmail } from './run-P_rX5hRP.mjs';
 import { randomUUID } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';

package/dist/package-DVTZQWn9.mjs

@@ -0,0 +1,64 @@
+var name = "svamp-cli";
+var version = "0.2.293";
+var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
+var author = "Amun AI AB";
+var license = "SEE LICENSE IN LICENSE";
+var type = "module";
+var bin = {
+	svamp: "./bin/svamp.mjs"
+};
+var files = [
+	"dist",
+	"bin"
+];
+var main = "./dist/index.mjs";
+var exports$1 = {
+	".": "./dist/index.mjs",
+	"./cli": "./dist/cli.mjs"
+};
+var scripts = {
+	build: "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
+	typecheck: "tsc --noEmit",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-backend-accounts.mjs && npx tsx test/test-codex-force-model.mjs && npx tsx test/test-backend-oauth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-user-events.mjs && npx tsx test/test-migrate-children.mjs && npx tsx test/test-outpost-install.mjs && npx tsx test/test-outpost-setup.mjs && npx tsx test/test-inbox-reconcile.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-isolation-disable.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-session-access-fallback.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-app-server.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-compact-detect.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-restore-decision.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-cron.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-workflow-idle.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-ws-upgrade.mjs && npx tsx test/test-serve-auth.mjs && npx tsx test/test-static-file-server.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-outbox-reload.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-stateless-dispatch-limiter.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs && npx tsx test/test-artifact-guard.mjs && npx tsx test/test-artifact-sync-pagination.mjs && npx tsx test/test-graceful-restart.mjs && npx tsx test/test-flush-exit.mjs",
+	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
+	dev: "tsx src/cli.ts",
+	"dev:daemon": "tsx src/cli.ts daemon start-sync",
+	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
+	"test:frpc": "npx tsx test/test-frpc-e2e.mjs",
+	prepublishOnly: "yarn build"
+};
+var dependencies = {
+	"@agentclientprotocol/sdk": "^0.14.1",
+	"@modelcontextprotocol/sdk": "^1.25.3",
+	"hypha-rpc": "0.21.42",
+	"node-pty": "1.2.0-beta.11",
+	ws: "^8.18.0",
+	yaml: "^2.8.2",
+	zod: "^3.24.4"
+};
+var devDependencies = {
+	"@types/node": ">=20",
+	"@types/ws": "^8.5.14",
+	pkgroll: "^2.14.2",
+	tsx: "^4.20.6",
+	typescript: "5.9.3"
+};
+var packageManager = "yarn@1.22.22";
+var _package = {
+	name: name,
+	version: version,
+	description: description,
+	author: author,
+	license: license,
+	type: type,
+	bin: bin,
+	files: files,
+	main: main,
+	exports: exports$1,
+	scripts: scripts,
+	dependencies: dependencies,
+	devDependencies: devDependencies,
+	packageManager: packageManager
+};
+
+export { author, bin, _package as default, dependencies, description, devDependencies, exports$1 as exports, files, license, main, name, packageManager, scripts, type, version };

package/dist/{rpc-1Ic_yDzC.mjs → rpc-BnQ5dQm_.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, u as updateIssue, k as getIssue, l as resumeIssue, p as pauseIssue, m as addComment, n as addIssue, o as listIssues, q as searchIssues, t as isVisibleTo } from './run-CKLU1B02.mjs';
+import { j as resolveProjectRoot, u as updateIssue, k as getIssue, l as resumeIssue, p as pauseIssue, m as addComment, n as addIssue, o as listIssues, q as searchIssues, t as isVisibleTo } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{rpc-DiG_DaMK.mjs → rpc-DAnM-lOr.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, v as getRun, w as listRuns, x as getWorkflow, y as runWorkflow, z as setWorkflowEnabled, A as removeWorkflow, B as saveWorkflow, C as rawWorkflow, D as listWorkflows } from './run-CKLU1B02.mjs';
+import { j as resolveProjectRoot, v as getRun, w as listRuns, x as getWorkflow, y as runWorkflow, z as setWorkflowEnabled, A as removeWorkflow, B as saveWorkflow, C as rawWorkflow, D as listWorkflows } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{run-DZJuuuAu.mjs → run-Cv0X_muz.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { ak as applyClaudeProxyEnv, al as composeSessionId, am as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, an as generateHookSettings } from './run-CKLU1B02.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { al as applyClaudeProxyEnv, am as composeSessionId, an as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, ao as generateHookSettings } from './run-P_rX5hRP.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{run-CKLU1B02.mjs → run-P_rX5hRP.mjs}

@@ -2973,7 +2973,7 @@ Connection: close\r
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, buildLinkSubdomain(subdomainSafe, mount.linkToken)]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-BeGCyERl.mjs');
+      const { FrpcTunnel } = await import('./frpc-D_Z7ezPz.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,
@@ -5869,7 +5869,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-BeGCyERl.mjs');
+        const { FrpcTunnel } = await import('./frpc-D_Z7ezPz.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -6345,7 +6345,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-BCMGW33d.mjs');
+          const { toolsForRole } = await import('./sideband-BhOX0Gs4.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -6450,7 +6450,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
       return { ok: false, call_id: callId, status: "busy", error: "channel is busy (too many concurrent requests) \u2014 retry shortly" };
     }
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-B-VYM4sA.mjs');
+    const { queryCore } = await import('./commands-BuYofggg.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -6901,6 +6901,65 @@ function isRetryableRateLimit(text, apiErrorStatus) {
   return networkTransient;
 }
 
+const DEFAULT_DOWNLOAD_BASE = "https://github.com/amun-ai/hypha-cloud/releases/latest/download";
+function shq(v) {
+  return `'${String(v).replace(/'/g, `'\\''`)}'`;
+}
+function psq(v) {
+  return `'${String(v).replace(/'/g, `''`)}'`;
+}
+function buildOutpostInstall(params) {
+  const base = params.serverBase.replace(/\/$/, "");
+  const dl = (params.downloadBase || DEFAULT_DOWNLOAD_BASE).replace(/\/$/, "");
+  const session = params.session || params.channel;
+  const unix = `curl -fsSL ${shq(`${dl}/install.sh`)} | SVAMP_OUTPOST_SERVER=${shq(base)} SVAMP_OUTPOST_CHANNEL=${shq(params.channel)} SVAMP_OUTPOST_TOKEN=${shq(params.token)} SVAMP_OUTPOST_SESSION=${shq(session)} SVAMP_OUTPOST_DL=${shq(dl)} sh`;
+  const windows = `$env:SVAMP_OUTPOST_SERVER=${psq(base)}; $env:SVAMP_OUTPOST_CHANNEL=${psq(params.channel)}; $env:SVAMP_OUTPOST_TOKEN=${psq(params.token)}; $env:SVAMP_OUTPOST_SESSION=${psq(session)}; $env:SVAMP_OUTPOST_DL=${psq(dl)}; irm ${psq(`${dl}/install.ps1`)} | iex`;
+  const direct = `svamp-outpost --server ${shq(base)} --channel ${shq(params.channel)} --token ${shq(params.token)} --session ${shq(session)}`;
+  return { unix, windows, direct };
+}
+
+const DEFAULT_OUTPOST_DOWNLOAD_BASE = "https://static-outpost-bin-08c08c38.svc.hypha.aicell.io";
+const OUTPOST_BINARIES = [
+  { label: "macOS (Apple Silicon)", file: "svamp-outpost-darwin-arm64" },
+  { label: "macOS (Intel)", file: "svamp-outpost-darwin-amd64" },
+  { label: "Linux (x86-64)", file: "svamp-outpost-linux-amd64" },
+  { label: "Linux (arm64)", file: "svamp-outpost-linux-arm64" },
+  { label: "Windows (x86-64)", file: "svamp-outpost-windows-amd64.exe" }
+];
+function setupOutpostChannel(params) {
+  const serverUrl = params.serverUrl || "https://hypha.aicell.io";
+  const downloadBase = (params.downloadBase || DEFAULT_OUTPOST_DOWNLOAD_BASE).replace(/\/$/, "");
+  const serverBase = gatewayBase(params.channelsServiceId, serverUrl);
+  const channelId = `outpost-${params.session}`;
+  const store = new ChannelStore(params.projectDir);
+  const existing = store.get(channelId);
+  let token = existing?.identity?.callers?.find((c) => c.name === "outpost")?.key;
+  if (!token) token = genKey();
+  const channel = {
+    id: channelId,
+    name: `Remote outpost \u2014 ${params.session}`,
+    description: "FDE remote machine: a svamp-outpost binary connects here and the agent runs commands on it.",
+    enabled: true,
+    bind: { session: params.session },
+    identity: { mode: "per-key", callers: [{ name: "outpost", kind: "agent", key: token }] },
+    action: { kind: "message" },
+    reply: { mode: "queue" },
+    skill: { name: "remote-outpost", description: "Run commands on the connected remote machine." }
+  };
+  store.save(channel);
+  const install = buildOutpostInstall({ serverBase, channel: channelId, token, session: params.session, downloadBase });
+  const connectedCount = (store.get(channelId)?.last_calls || []).filter((c) => c.sender === "outpost").length;
+  return {
+    channelId,
+    token,
+    serverBase,
+    downloadBase,
+    install,
+    binaries: OUTPOST_BINARIES.map((b) => ({ label: b.label, url: `${downloadBase}/${b.file}` })),
+    connectedCount
+  };
+}
+
 const PARTICIPANTS_CHANNEL_ID = "sys-participants";
 function channelPublicView(c) {
   const u = c.upload;
@@ -7599,6 +7658,10 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       authorizeRequest(context, metadata.sharing, "view");
       return { channels: channelStore.list().filter((c) => !c.system) };
     },
+    // FDE outpost (#0589/#0593): idempotently ensure this session's outpost channel + return the
+    // install one-liners and per-OS download links for the "Connect a remote machine" UI. Admin-gated
+    // because the returned command carries a channel-scoped COMMAND-EXECUTION token — only the machine
+    // admin/owner should onboard a remotely-controllable machine. Mirrors the CLI `svamp outpost up`.
     saveChannel: async (channel, context) => {
       authorizeRequest(context, metadata.sharing, "admin");
       try {
@@ -7636,6 +7699,28 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       syncChannelsToMetadata();
       return { success: !!caller, caller };
     },
+    // FDE outpost (#0589): provision (idempotently) this session's outpost channel and return the
+    // install one-liners + direct binary download links + a best-effort connected count. The app's
+    // "Connect a remote machine" panel calls this; it reuses the SAME setupOutpostChannel core as
+    // `svamp outpost up`, so the channel shape + install command never drift. Admin-gated: the
+    // returned token is a capability to run commands on whatever machine connects.
+    outpostConnectInfo: async (params, context) => {
+      authorizeRequest(context, metadata.sharing, "admin");
+      if (!channelsServiceId) return { error: "the channels service is not available on this machine" };
+      try {
+        const info = setupOutpostChannel({
+          session: sessionId,
+          projectDir: metadata.path || process.cwd(),
+          channelsServiceId,
+          serverUrl: channelsBaseUrl,
+          downloadBase: params?.downloadBase || process.env.SVAMP_OUTPOST_DL
+        });
+        syncChannelsToMetadata();
+        return { ok: true, ...info };
+      } catch (e) {
+        return { error: e?.message || String(e) };
+      }
+    },
     getChannelSkill: async (id, context) => {
       authorizeRequest(context, metadata.sharing, "view");
       const c = channelStore.get(id);
@@ -16274,7 +16359,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-CoPsnzwK.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-Ct_y-kUT.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -16292,7 +16377,7 @@ async function startDaemon(options) {
     }
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./frpc-BeGCyERl.mjs');
+    const { FrpcTunnel } = await import('./frpc-D_Z7ezPz.mjs');
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -18508,11 +18593,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-1Ic_yDzC.mjs');
+              const { issueRpc } = await import('./rpc-BnQ5dQm_.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-DiG_DaMK.mjs');
+              const { workflowRpc } = await import('./rpc-DAnM-lOr.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -19125,11 +19210,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-1Ic_yDzC.mjs');
+              const { issueRpc } = await import('./rpc-BnQ5dQm_.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-DiG_DaMK.mjs');
+              const { workflowRpc } = await import('./rpc-DAnM-lOr.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -19306,6 +19391,13 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
             }
           }
           const codexModel = codexForcedModel() || options2.model || agentConfig?.default_model || provider.model || void 0;
+          if (codexModel && (provider.apiBase || codexForcedModel())) {
+            sessionMetadata.models = [{ code: codexModel, value: codexModel, description: "Configured on this machine" }];
+            try {
+              sessionService.updateMetadata(sessionMetadata);
+            } catch {
+            }
+          }
           const codexPerm = codexPermissionSettings(currentPermissionMode);
           logger.log(`[Agent Session ${sessionId}] Codex backend: app-server (model=${codexModel ?? "default"}${provider.apiBase ? `, provider=${provider.apiBase}` : ""}${accountDesc ? `, account=${accountDesc}` : ""}, mode=${currentPermissionMode} \u2192 approval=${codexPerm.approvalPolicy}/sandbox=${codexPerm.sandbox})`);
           if (acpResumeThreadId) logger.log(`[Agent Session ${sessionId}] Resuming Codex thread ${acpResumeThreadId} (restart recovery)`);
@@ -20249,7 +20341,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-C5Gk_hYP.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-DdfPXpWh.mjs');
     const workflowScheduler = new WorkflowScheduler({
       projectRoots: () => {
         const dirs = /* @__PURE__ */ new Set();
@@ -20872,4 +20964,4 @@ var run = /*#__PURE__*/Object.freeze({
     writeStopMarker: writeStopMarker
 });
 
-export { listSkillFiles as $, removeWorkflow as A, saveWorkflow as B, rawWorkflow as C, listWorkflows as D, isWorkflowEnabled as E, workflowCrons as F, cronMatches as G, summarize as H, workflowSteps as I, parseJwtEmail as J, computeCollectionConfigUpdate as K, SYSTEM_COLLECTION_CONFIG as L, loadMachineContext as M, buildMachineInstructions as N, machineToolsForRole as O, buildMachineTools as P, parseFrontmatter as Q, READ_ONLY_TOOLS as R, SharingNotificationSync as S, getSkillsServer as T, getSkillsWorkspaceName as U, getSkillsCollectionName as V, fetchWithTimeout as W, searchSkills as X, SKILLS_DIR as Y, getSkillInfo as Z, downloadSkillFile as _, createSessionStore as a, resolveModel as a0, clearStopMarker as a1, stopMarkerExists as a2, ChannelStore as a3, gatewayBase as a4, genKey as a5, formatHandle as a6, normalizeAllowedUser as a7, loadSecurityContextConfig as a8, resolveSecurityContext as a9, run as aA, buildSecurityContextFromFlags as aa, mergeSecurityContexts as ab, buildSessionShareUrl as ac, computeOutboundHop as ad, registerAwaitingReply as ae, buildMachineShareUrl as af, parseHandle as ag, handleMatchesMetadata as ah, describeMisconfiguration as ai, buildMachineDeps as aj, applyClaudeProxyEnv as ak, composeSessionId as al, generateFriendlyName as am, generateHookSettings as an, staticFileServer as ao, instanceConfig as ap, claudeAuth as aq, codexProvider as ar, outbox as as, projectInfo as at, DefaultTransport$1 as au, acpBackend as av, acpAgentConfig as aw, codexAppServerBackend as ax, GeminiTransport$1 as ay, api as az, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerPort as f, getHyphaServerUrl$1 as g, getFrpsServerAddr as h, shortId as i, resolveProjectRoot as j, getIssue as k, resumeIssue as l, addComment as m, addIssue as n, listIssues as o, pauseIssue as p, searchIssues as q, registerMachineService as r, startDaemon as s, isVisibleTo as t, updateIssue as u, getRun as v, listRuns as w, getWorkflow as x, runWorkflow as y, setWorkflowEnabled as z };
+export { searchSkills as $, removeWorkflow as A, saveWorkflow as B, rawWorkflow as C, listWorkflows as D, isWorkflowEnabled as E, workflowCrons as F, cronMatches as G, buildOutpostInstall as H, ChannelStore as I, DEFAULT_OUTPOST_DOWNLOAD_BASE as J, setupOutpostChannel as K, summarize as L, workflowSteps as M, parseJwtEmail as N, computeCollectionConfigUpdate as O, SYSTEM_COLLECTION_CONFIG as P, loadMachineContext as Q, READ_ONLY_TOOLS as R, SharingNotificationSync as S, buildMachineInstructions as T, machineToolsForRole as U, buildMachineTools as V, parseFrontmatter as W, getSkillsServer as X, getSkillsWorkspaceName as Y, getSkillsCollectionName as Z, fetchWithTimeout as _, createSessionStore as a, SKILLS_DIR as a0, getSkillInfo as a1, downloadSkillFile as a2, listSkillFiles as a3, resolveModel as a4, clearStopMarker as a5, stopMarkerExists as a6, formatHandle as a7, normalizeAllowedUser as a8, loadSecurityContextConfig as a9, api as aA, run as aB, resolveSecurityContext as aa, buildSecurityContextFromFlags as ab, mergeSecurityContexts as ac, buildSessionShareUrl as ad, computeOutboundHop as ae, registerAwaitingReply as af, buildMachineShareUrl as ag, parseHandle as ah, handleMatchesMetadata as ai, describeMisconfiguration as aj, buildMachineDeps as ak, applyClaudeProxyEnv as al, composeSessionId as am, generateFriendlyName as an, generateHookSettings as ao, staticFileServer as ap, instanceConfig as aq, claudeAuth as ar, codexProvider as as, outbox as at, projectInfo as au, DefaultTransport$1 as av, acpBackend as aw, acpAgentConfig as ax, codexAppServerBackend as ay, GeminiTransport$1 as az, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerPort as f, getHyphaServerUrl$1 as g, getFrpsServerAddr as h, shortId as i, resolveProjectRoot as j, getIssue as k, resumeIssue as l, addComment as m, addIssue as n, listIssues as o, pauseIssue as p, searchIssues as q, registerMachineService as r, startDaemon as s, isVisibleTo as t, updateIssue as u, getRun as v, listRuns as w, getWorkflow as x, runWorkflow as y, setWorkflowEnabled as z };

package/dist/{scheduler-C5Gk_hYP.mjs → scheduler-DdfPXpWh.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, D as listWorkflows, E as isWorkflowEnabled, F as workflowCrons, y as runWorkflow, G as cronMatches } from './run-CKLU1B02.mjs';
+import { j as resolveProjectRoot, D as listWorkflows, E as isWorkflowEnabled, F as workflowCrons, y as runWorkflow, G as cronMatches } from './run-P_rX5hRP.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{serveCommands-Dipn0QHs.mjs → serveCommands-I-wRHtX4.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+  const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+  const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+  const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+  const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-VYM4sA.mjs');
+  const { connectAndGetMachine } = await import('./commands-BuYofggg.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{sideband-BCMGW33d.mjs → sideband-BhOX0Gs4.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, M as loadMachineContext, N as buildMachineInstructions, O as machineToolsForRole, P as buildMachineTools } from './run-CKLU1B02.mjs';
+import { R as READ_ONLY_TOOLS, Q as loadMachineContext, T as buildMachineInstructions, U as machineToolsForRole, V as buildMachineTools } from './run-P_rX5hRP.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';