svamp-cli 0.2.309 → 0.2.310

package/dist/{commands-DGbLwT_h.mjs → commands-DrVsg0Q1.mjs}

@@ -60,7 +60,7 @@ async function serviceExpose(args) {
     process.exit(1);
   }
   if (foreground) {
-    const { runFrpcTunnel } = await import('./frpc-Cv6J2Mex.mjs');
+    const { runFrpcTunnel } = await import('./frpc-DxIjZ8o_.mjs');
     await runFrpcTunnel(name, ports, void 0, {
       group,
       groupKey,
@@ -70,7 +70,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-BTN9XxVx.mjs');
+  const { connectAndGetMachine } = await import('./commands-D-RsuMqs.mjs');
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -92,7 +92,7 @@ async function serviceExpose(args) {
         console.log(`  port ${port}: ${url}`);
       }
       if (process.env.SVAMP_SESSION_ID) {
-        const { autoAddSessionLink } = await import('./agentCommands-DdNUACV8.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-9GHpj3mp.mjs');
         let added = 0;
         for (const [port, url] of urlEntries) {
           const label = urlEntries.length > 1 ? `${name}:${port}` : name;
@@ -128,8 +128,8 @@ async function serviceServe(args) {
     const resolvedDir = path.resolve(directory);
     console.log(`Serving ${resolvedDir}`);
     const http = await import('http');
-    const { serveStaticMount } = await import('./run-DLG-_xa7.mjs').then(function (n) { return n.ap; });
-    const { getFreePort } = await import('./frpc-Cv6J2Mex.mjs');
+    const { serveStaticMount } = await import('./run-CqO23ro_.mjs').then(function (n) { return n.ap; });
+    const { getFreePort } = await import('./frpc-DxIjZ8o_.mjs');
     const server = http.createServer((req, res) => {
       const u = new URL(req.url || "/", "http://127.0.0.1");
       let rel = u.pathname;
@@ -152,7 +152,7 @@ async function serviceServe(args) {
         resolve(18080);
       });
     });
-    const { runFrpcTunnel } = await import('./frpc-Cv6J2Mex.mjs');
+    const { runFrpcTunnel } = await import('./frpc-DxIjZ8o_.mjs');
     void server;
     await runFrpcTunnel(name, [servePort]);
   } catch (err) {
@@ -162,7 +162,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-BTN9XxVx.mjs');
+    const { connectAndGetMachine } = await import('./commands-D-RsuMqs.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -202,7 +202,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-BTN9XxVx.mjs');
+    const { connectAndGetMachine } = await import('./commands-D-RsuMqs.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/{commands-BPgxgkXW.mjs → commands-DuLlH97k.mjs}

@@ -1,9 +1,9 @@
-import { connectAndResolveSession } from './commands-BTN9XxVx.mjs';
+import { connectAndResolveSession } from './commands-D-RsuMqs.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-DLG-_xa7.mjs';
+import './run-CqO23ro_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-2uOorIjB.mjs → commands-Dx4S6f_G.mjs}

@@ -1,5 +1,5 @@
 import { spawnSync } from 'node:child_process';
-import { j as resolveProjectRoot, K as workflowSteps, z as setWorkflowEnabled, F as isWorkflowEnabled, A as removeWorkflow, x as getWorkflow, E as listWorkflows, C as saveWorkflow, D as rawWorkflow } from './run-DLG-_xa7.mjs';
+import { j as resolveProjectRoot, K as workflowSteps, z as setWorkflowEnabled, F as isWorkflowEnabled, A as removeWorkflow, x as getWorkflow, E as listWorkflows, C as saveWorkflow, D as rawWorkflow } from './run-CqO23ro_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-Bb0oF3eZ.mjs → commands-Eo0kocpm.mjs}

@@ -1,8 +1,8 @@
 import { existsSync } from 'node:fs';
 import { join, resolve } from 'node:path';
-import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-BTN9XxVx.mjs';
+import { connectAndGetMachine, resolveSessionId, createWorktree, connectAndResolveSession } from './commands-D-RsuMqs.mjs';
 import { execFileSync } from 'node:child_process';
-import { ai as withFileLock, u as updateIssue, m as addComment, n as addIssue, i as shortId } from './run-DLG-_xa7.mjs';
+import { ai as withFileLock, u as updateIssue, m as addComment, n as addIssue, i as shortId } from './run-CqO23ro_.mjs';
 import 'node:os';
 import 'os';
 import 'fs/promises';

package/dist/{fleet-CeLE0t97.mjs → fleet-CFpET-T5.mjs}

@@ -1,8 +1,8 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { U as PINNED_CODEX_VERSION, c as connectToHypha } from './run-DLG-_xa7.mjs';
-import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-C6MSkqS9.mjs';
+import { U as PINNED_CODEX_VERSION, c as connectToHypha } from './run-CqO23ro_.mjs';
+import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-zDzkOTi2.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{frpc-Cv6J2Mex.mjs → frpc-DxIjZ8o_.mjs}

@@ -4,7 +4,7 @@ import { mkdirSync, chmodSync, writeFileSync, unlinkSync, existsSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { randomUUID, createHash } from 'crypto';
-import { e as getFrpsSubdomainHost, f as getFrpsServerPort, h as getFrpsServerAddr } from './run-DLG-_xa7.mjs';
+import { e as getFrpsSubdomainHost, f as getFrpsServerPort, h as getFrpsServerAddr } from './run-CqO23ro_.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:crypto';

package/dist/{headlessCli-BXc9Fvzb.mjs → headlessCli-BIY-YePw.mjs}

@@ -1,5 +1,5 @@
-import { a3 as resolveModel, aj as describeMisconfiguration, ak as buildMachineDeps } from './run-DLG-_xa7.mjs';
-import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-C_3PVGh-.mjs';
+import { a3 as resolveModel, aj as describeMisconfiguration, ak as buildMachineDeps } from './run-CqO23ro_.mjs';
+import { handleRealtimeEvent, initMachineVoiceSession } from './sideband-Dv3qNlQN.mjs';
 import { WebSocket } from 'ws';
 import { execSync, spawn } from 'child_process';
 import 'os';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-DLG-_xa7.mjs';
+export { c as connectToHypha, a as createSessionStore, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, s as startDaemon, b as stopDaemon } from './run-CqO23ro_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{notifyCommands-iVnI_Lb2.mjs → notifyCommands-DldLQlDU.mjs}

@@ -1,4 +1,4 @@
-import { c as connectToHypha, S as SharingNotificationSync, L as parseJwtEmail } from './run-DLG-_xa7.mjs';
+import { c as connectToHypha, S as SharingNotificationSync, L as parseJwtEmail } from './run-CqO23ro_.mjs';
 import { randomUUID } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';

package/dist/package-BKmrvBsb.mjs

@@ -0,0 +1,64 @@
+var name = "svamp-cli";
+var version = "0.2.310";
+var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
+var author = "Amun AI AB";
+var license = "SEE LICENSE IN LICENSE";
+var type = "module";
+var bin = {
+	svamp: "./bin/svamp.mjs"
+};
+var files = [
+	"dist",
+	"bin"
+];
+var main = "./dist/index.mjs";
+var exports$1 = {
+	".": "./dist/index.mjs",
+	"./cli": "./dist/cli.mjs"
+};
+var scripts = {
+	build: "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
+	typecheck: "tsc --noEmit",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-ratelimit-retry.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-sharing-notify-sync.mjs && npx tsx test/test-sharing-notify-resolve.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-backend-accounts.mjs && npx tsx test/test-codex-force-model.mjs && npx tsx test/test-backend-oauth.mjs && npx tsx test/test-btw-proxy-env.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-inbox-guard.mjs && npx tsx test/test-user-events.mjs && npx tsx test/test-migrate-children.mjs && npx tsx test/test-outpost-install.mjs && npx tsx test/test-outpost-setup.mjs && npx tsx test/test-outpost-pairing.mjs && npx tsx test/test-outpost-coordinator.mjs && npx tsx test/e2e-outpost-transport.mjs && npx tsx test/test-inbox-reconcile.mjs && npx tsx test/test-auto-topic.mjs && npx tsx test/test-project-info.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-isolation-disable.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-machine-session-visibility.mjs && npx tsx test/test-session-access-fallback.mjs && npx tsx test/test-session-rpc-role-map.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-pinned-codex.mjs && npx tsx test/test-codex-request-timeout.mjs && npx tsx test/test-codex-app-server.mjs && npx tsx test/e2e-codex-midturn-steer.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-listener-backoff.mjs && npx tsx test/test-session-identity-env.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && node test/test-supervisor-restart.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-compact-detect.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox-store.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-cross-machine.mjs && npx tsx test/test-issue-store.mjs && npx tsx test/test-issue-store-lock.mjs && npx tsx test/test-issue-close-gate.mjs && npx tsx test/test-loop-verify.mjs && npx tsx test/test-restore-decision.mjs && npx tsx test/test-issue-rpc.mjs && npx tsx test/test-issue-pause.mjs && npx tsx test/test-workflow-store.mjs && npx tsx test/test-workflow-rpc.mjs && npx tsx test/test-workflow-scheduler.mjs && npx tsx test/test-cron.mjs && npx tsx test/test-workflow-runs.mjs && npx tsx test/test-workflow-runs-lock.mjs && npx tsx test/test-workflow-idle.mjs && npx tsx test/test-workflow-reconcile.mjs && npx tsx test/test-serve-link-subdomain.mjs && npx tsx test/test-short-id.mjs && npx tsx test/test-transcript-edit.mjs && npx tsx test/test-edit-history.mjs && npx tsx test/test-friendly-name.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-ws-upgrade.mjs && npx tsx test/test-serve-auth.mjs && npx tsx test/test-static-file-server.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && npx tsx test/test-frpc-status.mjs && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs && npx tsx test/test-session-file.mjs && npx tsx test/test-channel-rpc.mjs && npx tsx test/test-wise-agent.mjs && npx tsx test/test-channel-agent.mjs && npx tsx test/test-channels-service.mjs && npx tsx test/test-hotreload-seam.mjs && npx tsx test/test-hot-reload.mjs && npx tsx test/test-hot-reload-live.mjs && npx tsx test/test-session-core.mjs && npx tsx test/test-channel-async-reply.mjs && npx tsx test/test-outbox-reload.mjs && npx tsx test/test-channel-binding.mjs && npx tsx test/test-channel-store-lock.mjs && npx tsx test/test-channel-identity.mjs && npx tsx test/test-stateless-dispatch-limiter.mjs && npx tsx test/test-shared-session-identity.mjs && npx tsx test/test-wise-agent-auth.mjs && npx tsx test/test-channel-http.mjs && npx tsx test/test-channel-upload.mjs && npx tsx test/test-wise-voice.mjs && npx tsx test/test-wise-headless.mjs && npx tsx test/test-wise-machine.mjs && npx tsx test/test-crew-merge.mjs && npx tsx test/test-crew-verdict-routing.mjs && npx tsx test/test-crew-standalone.mjs && npx tsx test/test-session-links.mjs && npx tsx test/test-issue-loop-pause-guard.mjs && npx tsx test/test-artifact-guard.mjs && npx tsx test/test-artifact-sync-pagination.mjs && npx tsx test/test-graceful-restart.mjs && npx tsx test/test-flush-exit.mjs && npx tsx test/test-codex-skills.mjs",
+	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
+	dev: "tsx src/cli.ts",
+	"dev:daemon": "tsx src/cli.ts daemon start-sync",
+	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
+	"test:frpc": "npx tsx test/test-frpc-e2e.mjs",
+	prepublishOnly: "yarn build"
+};
+var dependencies = {
+	"@agentclientprotocol/sdk": "^0.14.1",
+	"@modelcontextprotocol/sdk": "^1.25.3",
+	"hypha-rpc": "0.21.42",
+	"node-pty": "1.2.0-beta.11",
+	ws: "^8.18.0",
+	yaml: "^2.8.2",
+	zod: "^3.24.4"
+};
+var devDependencies = {
+	"@types/node": ">=20",
+	"@types/ws": "^8.5.14",
+	pkgroll: "^2.14.2",
+	tsx: "^4.20.6",
+	typescript: "5.9.3"
+};
+var packageManager = "yarn@1.22.22";
+var _package = {
+	name: name,
+	version: version,
+	description: description,
+	author: author,
+	license: license,
+	type: type,
+	bin: bin,
+	files: files,
+	main: main,
+	exports: exports$1,
+	scripts: scripts,
+	dependencies: dependencies,
+	devDependencies: devDependencies,
+	packageManager: packageManager
+};
+
+export { author, bin, _package as default, dependencies, description, devDependencies, exports$1 as exports, files, license, main, name, packageManager, scripts, type, version };

package/dist/{pinnedClaudeCode-C6MSkqS9.mjs → pinnedClaudeCode-zDzkOTi2.mjs}

@@ -1,7 +1,7 @@
 import { spawn, exec as exec$1 } from 'node:child_process';
 import { promisify } from 'node:util';
 
-const PINNED_CLAUDE_CODE_VERSION = "2.1.221";
+const PINNED_CLAUDE_CODE_VERSION = "2.1.222";
 const exec = promisify(exec$1);
 let _reconcile = null;
 function beginClaudeVersionReconcile(log) {

package/dist/{rpc-BwxwusfB.mjs → rpc-BVw8Tv9l.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, v as getRun, w as listRuns, x as getWorkflow, y as runWorkflow, z as setWorkflowEnabled, A as removeWorkflow, B as validateWorkflowName, C as saveWorkflow, D as rawWorkflow, E as listWorkflows } from './run-DLG-_xa7.mjs';
+import { j as resolveProjectRoot, v as getRun, w as listRuns, x as getWorkflow, y as runWorkflow, z as setWorkflowEnabled, A as removeWorkflow, B as validateWorkflowName, C as saveWorkflow, D as rawWorkflow, E as listWorkflows } from './run-CqO23ro_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{rpc-CkcBAtcs.mjs → rpc-D7_Gj0Kt.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, u as updateIssue, k as getIssue, l as resumeIssue, p as pauseIssue, m as addComment, n as addIssue, o as listIssues, q as searchIssues, t as isVisibleTo } from './run-DLG-_xa7.mjs';
+import { j as resolveProjectRoot, u as updateIssue, k as getIssue, l as resumeIssue, p as pauseIssue, m as addComment, n as addIssue, o as listIssues, q as searchIssues, t as isVisibleTo } from './run-CqO23ro_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{run-DLG-_xa7.mjs → run-CqO23ro_.mjs}

@@ -2379,10 +2379,8 @@ class ServeManager {
    */
   listMounts(sessionId) {
     const all = Array.from(this.mounts.values());
-    if (sessionId) {
-      return all.filter((m) => m.sessionId === sessionId);
-    }
-    return all;
+    const filtered = sessionId ? all.filter((m) => m.sessionId === sessionId) : all;
+    return filtered.map((m) => ({ ...m, url: this.getMountUrl(m.name) || void 0 }));
   }
   /** #0649: look up a single mount by name (for ownership checks before remove/replace). */
   getMount(name) {
@@ -2393,10 +2391,8 @@ class ServeManager {
    */
   getInfo() {
     const running = this.proxyServer != null;
-    const firstMount = this.mounts.values().next().value;
-    const firstUrl = firstMount ? this.getMountUrl(firstMount.name) : null;
     return {
-      url: firstUrl,
+      url: null,
       port: running ? this.port : 0,
       authProxyPort: running ? this.port : 0,
       running,
@@ -3151,7 +3147,7 @@ Connection: close\r
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, buildLinkSubdomain(subdomainSafe, mount.linkToken)]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-Cv6J2Mex.mjs');
+      const { FrpcTunnel } = await import('./frpc-DxIjZ8o_.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,
@@ -4093,7 +4089,8 @@ function inZone(date, tz) {
       o[x.type] = x.value;
       return o;
     }, {});
-    return new Date(+p.year, +p.month - 1, +p.day, +(p.hour === "24" ? 0 : p.hour), +p.minute);
+    const midnight24 = p.hour === "24";
+    return new Date(+p.year, +p.month - 1, +p.day + (midnight24 ? 1 : 0), midnight24 ? 0 : +p.hour, +p.minute);
   } catch {
     return date;
   }
@@ -4926,10 +4923,16 @@ class ChannelOutbox {
       this.emitter.on(channelId, onReply);
     });
   }
-  /** Push subscription for SSE: calls onReply for each new reply addressed to `to`. */
-  subscribe(channelId, to, onReply) {
+  /**
+   * Push subscription for SSE: calls onReply for each new matching reply.
+   * Same key rule as since()/wait(): correlationId-first (knowing the unguessable reply
+   * key proves ownership of that conversation), identity (`to`) only as the fallback.
+   * Without this, several callers sharing a `to` (e.g. caller-supplied/'anonymous'
+   * senders) would receive each other's replies — the cross-caller leak class of #0786.
+   */
+  subscribe(channelId, to, onReply, correlationId) {
     const handler = (r) => {
-      if (r.to === to) onReply(r);
+      if (correlationId ? r.correlationId === correlationId : r.to === to) onReply(r);
     };
     this.emitter.on(channelId, handler);
     return () => this.emitter.off(channelId, handler);
@@ -5020,6 +5023,17 @@ const SESSION_VIEW_METHODS = /* @__PURE__ */ new Set([
   "reregister",
   "recordMeetingActivity"
 ]);
+const MACHINE_MEMBER_READABLE = /* @__PURE__ */ new Set([
+  "getMetadata",
+  "getAgentState",
+  "getActivityState",
+  "getMessages",
+  "getLatestMessages",
+  "getMessageCount",
+  "getSharing",
+  "listChannels",
+  "registerListener"
+]);
 function sessionMethodMinRole(method) {
   const mapped = SESSION_METHOD_MIN_ROLE[method];
   if (mapped) return mapped;
@@ -5362,11 +5376,12 @@ async function registerMachineService(server, machineId, metadata, daemonState,
           const rpc = handlers.getSessionRPCHandlers?.(sid);
           if (!rpc) continue;
           if (!hasMachineAccess && !await hasExplicitSessionAccess(rpc, "view", context)) continue;
+          const readCtx = hasMachineAccess ? void 0 : context;
           try {
             const [metaResult, stateResult, activity] = await Promise.all([
-              rpc.getMetadata(context),
-              rpc.getAgentState(context),
-              rpc.getActivityState(context).catch(() => ({
+              rpc.getMetadata(readCtx),
+              rpc.getAgentState(readCtx),
+              rpc.getActivityState(readCtx).catch(() => ({
                 active: false,
                 thinking: false,
                 time: Date.now()
@@ -5382,7 +5397,10 @@ async function registerMachineService(server, machineId, metadata, daemonState,
               thinking: activity.thinking ?? false,
               activeAt: activity.time || Date.now()
             });
-          } catch {
+          } catch (err) {
+            console.debug(
+              `[HYPHA MACHINE] getSessions: skipped session ${sid} (${hasMachineAccess ? "machine-access" : "session-shared"}): ${err?.message ?? err}`
+            );
           }
         }
         return sessions;
@@ -5402,8 +5420,10 @@ async function registerMachineService(server, machineId, metadata, daemonState,
           throw new Error(`Session ${sessionId} not found on this machine`);
         }
         const requiredRole = sessionMethodMinRole(method);
+        let machineAuthorized = false;
         try {
           authorizeRequest(context, currentMetadata.sharing, requiredRole);
+          machineAuthorized = true;
         } catch (machineErr) {
           if (!await hasExplicitSessionAccess(rpc, requiredRole, context)) throw machineErr;
         }
@@ -5411,9 +5431,10 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         if (typeof handler !== "function") {
           throw new Error(`Unknown session method: ${method}`);
         }
+        const dispatchCtx = machineAuthorized && MACHINE_MEMBER_READABLE.has(method) ? void 0 : context;
         const paramNames = getParamNames(handler);
         const callArgs = paramNames.map(
-          (name) => name === "context" ? context : kwargs?.[name] ?? void 0
+          (name) => name === "context" ? dispatchCtx : kwargs?.[name] ?? void 0
         );
         return await handler(...callArgs);
       },
@@ -5427,14 +5448,16 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         if (!rpc) {
           throw new Error(`Session ${sessionId} not found on this machine`);
         }
+        let machineAuthorized = false;
         try {
           authorizeRequest(context, currentMetadata.sharing, "view");
+          machineAuthorized = true;
         } catch (machineErr) {
           if (!await hasExplicitSessionAccess(rpc, "view", context)) {
             throw machineErr;
           }
         }
-        return await rpc.registerListener(callback, context);
+        return await rpc.registerListener(callback, machineAuthorized ? void 0 : context);
       },
       // Spawn a new session
       spawnSession: async (options, context) => {
@@ -5810,9 +5833,11 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const { exec } = await import('child_process');
         const { homedir } = await import('os');
         return new Promise((resolve) => {
-          exec(command, { cwd: cwd || homedir(), timeout: 3e4, maxBuffer: 1024 * 1024 }, (err, stdout, stderr) => {
+          exec(command, { cwd: cwd || homedir(), timeout: 3e4, maxBuffer: 16 * 1024 * 1024 }, (err, stdout, stderr) => {
             if (err) {
-              resolve({ success: false, stdout: stdout || "", stderr: stderr || err.message, exitCode: err.code ?? 1 });
+              const enobufs = err.code === "ENOBUFS";
+              const errText = enobufs ? `output exceeded the 16 MB buffer and was truncated (the command may have completed): ${stderr || err.message}` : stderr || err.message;
+              resolve({ success: false, stdout: stdout || "", stderr: errText, exitCode: err.code ?? 1 });
             } else {
               resolve({ success: true, stdout, stderr: stderr || "", exitCode: 0 });
             }
@@ -5823,6 +5848,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
       /** Start a new terminal PTY session. Returns { sessionId, cols, rows }. */
       terminalStart: async (params = {}, context) => {
         authorizeRequest(context, currentMetadata.sharing, "admin");
+        const terminalClient = context?.from;
         const pty = await getPtyModule();
         const { homedir: getHomedir } = await import('os');
         const cols = params.cols || 80;
@@ -5877,7 +5903,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
             server.emit({
               type: "svamp:terminal-output",
               data: { type: "output", content: batch, sessionId },
-              to: "*"
+              to: terminalClient ?? "*"
             });
           } catch {
           }
@@ -5896,7 +5922,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
             server.emit({
               type: "svamp:terminal-output",
               data: { type: "exit", content: "", sessionId, exitCode, signal },
-              to: "*"
+              to: terminalClient ?? "*"
             });
           } catch {
           }
@@ -6254,7 +6280,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-Cv6J2Mex.mjs');
+        const { FrpcTunnel } = await import('./frpc-DxIjZ8o_.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -6421,8 +6447,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const info = sm.getInfo();
         const isAdmin = serveCallerTrusted(context);
         const mounts = (info.mounts || []).map((m) => sanitizeMountForRole(m, isAdmin));
-        const topUrl = isAdmin ? info.url : mounts[0]?.url ?? null;
-        return { ...info, url: topUrl, mounts };
+        return { ...info, url: null, mounts };
       },
       /**
        * Aggregate frpc tunnel health for all serve mounts.
@@ -6748,7 +6773,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-C_3PVGh-.mjs');
+          const { toolsForRole } = await import('./sideband-Dv3qNlQN.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -6853,7 +6878,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
       return { ok: false, call_id: callId, status: "busy", error: "channel is busy (too many concurrent requests) \u2014 retry shortly" };
     }
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-BTN9XxVx.mjs');
+    const { queryCore } = await import('./commands-D-RsuMqs.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -8891,7 +8916,7 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       const ownerCtx = ownerEmail ? { user: { email: ownerEmail, id: ownerEmail } } : void 0;
       try {
         if (c.system && c.action?.kind !== "agent") {
-          const role = ownerEmail && r.sender.name.toLowerCase() === ownerEmail.toLowerCase() ? "owner" : "collaborator";
+          const role = r.sender.verified && ownerEmail && r.sender.name.toLowerCase() === ownerEmail.toLowerCase() ? "owner" : "collaborator";
           const envelope = renderMessage(c, {
             sender: r.sender,
             body: { message: params.message },
@@ -15219,6 +15244,7 @@ function runsFile(projectRoot, workflow) {
   const safe = workflow.replace(/[^\w.-]+/g, "_");
   return join$1(runsDir(projectRoot), `${safe}.jsonl`);
 }
+let _runSeq = 0;
 function shortRunId(seed) {
   let h = 2166136261;
   for (let i = 0; i < seed.length; i++) {
@@ -15444,7 +15470,7 @@ async function runWorkflowInner(projectRoot, wf, opts) {
   });
   const exec = opts.execStep || defaultExecStep;
   const start = now();
-  const id = shortRunId(`${wf.name}:${start.iso}:${start.ms}`);
+  const id = shortRunId(`${wf.name}:${start.iso}:${start.ms}:${_runSeq++}`);
   const env = wf.session ? { ...process.env, SVAMP_SESSION_ID: wf.session } : process.env;
   const run = {
     id,
@@ -17206,7 +17232,7 @@ function createSvampConfigChecker(directory, sessionId, getMetadata, setMetadata
       const gaveUpCfg = readLoopJson(directory, sessionId, "loop.config.json") || {};
       const curMax = typeof gaveUpCfg.max_iterations === "number" ? gaveUpCfg.max_iterations : iter;
       const nextMax = Math.max(curMax * 2, iter + 10);
-      const msg = s.phase === "done" ? `\u{1F501} Loop complete \u2705 \u2014 finished after ${iter} iteration${plural}.` : `\u{1F501} Loop paused \u{1F6D1} \u2014 did NOT finish after ${iter} iteration${plural}${s.gave_up_reason ? ` (${s.gave_up_reason})` : ""}. Resume & extend with:  svamp session loop-resume ${sessionId} --max ${nextMax}`;
+      const msg = s.phase === "done" ? `\u{1F501} Loop complete \u2705 \u2014 finished after ${iter} iteration${plural}.` : `\u{1F501} Loop paused \u{1F6D1} \u2014 did NOT finish after ${iter} iteration${plural}${s.gave_up_reason ? ` (${s.gave_up_reason})` : ""}. Resume & extend with:  svamp session loop-extend ${sessionId} --reason "<why more turns are needed>" --turns ${Math.max(10, nextMax - iter)}`;
       sessionService.pushMessage(
         s.phase === "gave_up" ? { type: "message", message: msg, level: "warning" } : { type: "message", message: msg },
         "event"
@@ -17275,7 +17301,7 @@ function createSvampConfigChecker(directory, sessionId, getMetadata, setMetadata
             maxExtensions
           });
           if (!grant.granted) {
-            sessionService.pushMessage({ type: "message", message: `\u{1F6D1} Extension refused \u2014 this loop already used all ${grant.max} allowed extension${grant.max === 1 ? "" : "s"} (${grant.used}/${grant.max}). A hard cap is a hard cap; do the remaining work or raise the limit manually: svamp session loop-resume ${sessionId} --max <N>`, level: "warning" }, "event");
+            sessionService.pushMessage({ type: "message", message: `\u{1F6D1} Extension refused \u2014 this loop already used all ${grant.max} allowed extension${grant.max === 1 ? "" : "s"} (${grant.used}/${grant.max}). A hard cap is a hard cap; do the remaining work or raise the limit manually: svamp session loop-extend ${sessionId} --reason "<why>" --turns <N>`, level: "warning" }, "event");
             logger.log(`[svampConfig] loop-extend refused (bounded ${grant.used}/${grant.max})`);
           } else {
             const wasStopped = existing.active === false || existing.phase === "done" || existing.phase === "gave_up" || existing.phase === "cancelled";
@@ -17829,7 +17855,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-DdNUACV8.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-9GHpj3mp.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -17847,7 +17873,7 @@ async function startDaemon(options) {
     }
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./frpc-Cv6J2Mex.mjs');
+    const { FrpcTunnel } = await import('./frpc-DxIjZ8o_.mjs');
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -17875,7 +17901,7 @@ async function startDaemon(options) {
   ensureAutoInstalledCommands(logger);
   (async () => {
     try {
-      const { beginClaudeVersionReconcile } = await import('./pinnedClaudeCode-C6MSkqS9.mjs');
+      const { beginClaudeVersionReconcile } = await import('./pinnedClaudeCode-zDzkOTi2.mjs');
       beginClaudeVersionReconcile((msg) => logger.log(msg));
     } catch (e) {
       logger.log(`[claude-version] check failed: ${e?.message || e}`);
@@ -19194,7 +19220,7 @@ ${parts.join("\n")}`);
                             auto_resumes: prog.auto_resumes
                           });
                           const extNote = summarizeExtensions(ls.extensions, maxExt);
-                          const resumeHint = iterStop ? `Extend with a reason:  svamp session loop-extend ${sessionId} --reason "<why>"  \xB7 or set a new cap:  svamp session loop-resume ${sessionId} --max <N>` : `Raise the cost cap to resume (--max won't \u2014 it only raises the iteration cap):  svamp session loop ${sessionId} --max-runtime-sec <N>  and/or  --max-tokens-per-hour <N>`;
+                          const resumeHint = iterStop ? `Extend with a reason:  svamp session loop-extend ${sessionId} --reason "<why>" [--turns <N>]` : `Raise the cost cap to resume (--max won't \u2014 it only raises the iteration cap):  svamp session loop ${sessionId} --max-runtime-sec <N>  and/or  --max-tokens-per-hour <N>`;
                           const detail = `${budgetCheck.reason} (hard ${iterStop ? "iteration ceiling" : "cost ceiling"} \u2014 will not auto-resume)${extNote ? ` [${extNote}]` : ""}. ${resumeHint}`;
                           sessionService.pushMessage({ type: "message", message: `\u{1F6D1} Loop stopped \u2014 ${detail}`, level: "warning" }, "event");
                           checkSvampConfig?.();
@@ -20081,11 +20107,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-CkcBAtcs.mjs');
+              const { issueRpc } = await import('./rpc-D7_Gj0Kt.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BwxwusfB.mjs');
+              const { workflowRpc } = await import('./rpc-BVw8Tv9l.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -20755,11 +20781,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-CkcBAtcs.mjs');
+              const { issueRpc } = await import('./rpc-D7_Gj0Kt.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BwxwusfB.mjs');
+              const { workflowRpc } = await import('./rpc-BVw8Tv9l.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -21089,7 +21115,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               const iterStop = !isCostCeiling(budgetCheck.kind);
               writeGoalLoopState(directory, sessionId, { ...ls, active: false, phase: "gave_up", completed_at: now, gave_up_reason: `resource budget exhausted \u2014 ${budgetCheck.reason}`, ledger });
               const acpExtNote = summarizeExtensions(ls.extensions, acpMaxExt);
-              const acpResumeHint = iterStop ? `Extend with a reason:  svamp session loop-extend ${sessionId} --reason "<why>"  \xB7 or set a new cap:  svamp session loop-resume ${sessionId} --max <N>` : `Raise the cost cap to resume (--max won't \u2014 it only raises the iteration cap):  svamp session loop ${sessionId} --max-runtime-sec <N>  and/or  --max-tokens-per-hour <N>`;
+              const acpResumeHint = iterStop ? `Extend with a reason:  svamp session loop-extend ${sessionId} --reason "<why>" [--turns <N>]` : `Raise the cost cap to resume (--max won't \u2014 it only raises the iteration cap):  svamp session loop ${sessionId} --max-runtime-sec <N>  and/or  --max-tokens-per-hour <N>`;
               sessionService.pushMessage({ type: "message", message: `\u{1F6D1} Loop stopped \u2014 ${budgetCheck.reason} (hard ${iterStop ? "iteration ceiling" : "cost ceiling"} \u2014 will not auto-resume)${acpExtNote ? ` [${acpExtNote}]` : ""}. ${acpResumeHint}`, level: "warning" }, "event");
               checkSvampConfig?.();
               return;
@@ -21717,7 +21743,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     }
     if (persistedSessions.length > 0) {
       try {
-        const { awaitClaudeVersionReady } = await import('./pinnedClaudeCode-C6MSkqS9.mjs');
+        const { awaitClaudeVersionReady } = await import('./pinnedClaudeCode-zDzkOTi2.mjs');
         await awaitClaudeVersionReady();
       } catch {
       }
@@ -21922,7 +21948,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-CurN4UtP.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-q7Refevo.mjs');
     const workflowProjectRoots = () => {
       const dirs = /* @__PURE__ */ new Set();
       for (const s of pidToTrackedSession.values()) {

package/dist/{run-2Stz5l7J.mjs → run-DLk7NGih.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { al as applyClaudeProxyEnv, am as composeSessionId, an as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, ao as generateHookSettings } from './run-DLG-_xa7.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { al as applyClaudeProxyEnv, am as composeSessionId, an as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, ao as generateHookSettings } from './run-CqO23ro_.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{scheduler-CurN4UtP.mjs → scheduler-q7Refevo.mjs}

@@ -1,4 +1,4 @@
-import { j as resolveProjectRoot, E as listWorkflows, F as isWorkflowEnabled, G as workflowSchedules, H as inZone, y as runWorkflow, I as cronMatches } from './run-DLG-_xa7.mjs';
+import { j as resolveProjectRoot, E as listWorkflows, F as isWorkflowEnabled, G as workflowSchedules, H as inZone, y as runWorkflow, I as cronMatches } from './run-CqO23ro_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';