svamp-cli 0.2.314 → 0.2.317

package/dist/{cli-ahWO_ULm.mjs → cli-DGVQaDbd.mjs}

@@ -1,4 +1,4 @@
-import { a3 as clearStopMarker, a4 as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-Y3YLx8x7.mjs';
+import { a4 as clearStopMarker, a5 as stopMarkerExists, s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-RA4Vr6lj.mjs';
 import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';
 
 function flushAndExit(code) {
@@ -33,7 +33,7 @@ const subcommand = args[0];
 let daemonSubcommand = args[1];
 async function main() {
   try {
-    const { getLoadedConfig } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aq; });
+    const { getLoadedConfig } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.ar; });
     getLoadedConfig();
   } catch {
   }
@@ -52,7 +52,7 @@ async function main() {
       }
       const whenIdle = args.includes("--when-idle");
       const force = args.includes("--force");
-      const mod = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aD; });
+      const mod = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aE; });
       if (whenIdle && !force) {
         if (mod.isDaemonAlive()) {
           mod.writePendingRestart({ reason: "svamp daemon restart --when-idle" });
@@ -359,7 +359,7 @@ async function main() {
       console.error("svamp service: Service commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-BSHZGcCC.mjs');
+    const { handleServiceCommand } = await import('./commands-ino-Gtcu.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-DNTcbgWD.mjs');
@@ -367,7 +367,7 @@ async function main() {
       console.error("svamp serve: Serve commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-mnocpHcO.mjs');
+    const { handleServeCommand } = await import('./serveCommands-DQeSesYI.mjs');
     await handleServeCommand();
     process.exit(0);
   } else if (subcommand === "process" || subcommand === "proc") {
@@ -376,7 +376,7 @@ async function main() {
       console.error("svamp process: Process commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-Cl-TIip1.mjs');
+    const { processCommand } = await import('./commands-DUdStLKb.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -390,26 +390,26 @@ async function main() {
     }), machineId);
     process.exit(0);
   } else if (subcommand === "outpost") {
-    const { outpostCommand } = await import('./commands-CJmKY6Qo.mjs');
+    const { outpostCommand } = await import('./commands-C4p4v9eO.mjs');
     await outpostCommand(args.slice(1));
     process.exit(0);
   } else if (subcommand === "issue" || subcommand === "issues") {
-    const { issueCommand } = await import('./commands-Ce7MP6Ut.mjs');
+    const { issueCommand } = await import('./commands-DEsDSuMW.mjs');
     await issueCommand(args.slice(1));
     await flushAndExit(0);
   } else if (subcommand === "workflow" || subcommand === "workflows") {
-    const { workflowCommand } = await import('./commands-CuinsdU0.mjs');
+    const { workflowCommand } = await import('./commands-I9jHLkrI.mjs');
     await workflowCommand(args.slice(1));
     await flushAndExit(0);
   } else if (subcommand === "wise-agent" || subcommand === "wise") {
     await handleWiseAgentCommand(args.slice(1));
     process.exit(0);
   } else if (subcommand === "feature" || subcommand === "crew") {
-    const { crewCommand } = await import('./commands-bS4ErsEr.mjs');
+    const { crewCommand } = await import('./commands-CoBMjrtP.mjs');
     await crewCommand(args.slice(1));
     process.exit(0);
   } else if (subcommand === "notify") {
-    const { notifyUser } = await import('./notifyCommands-Dlm4RafU.mjs');
+    const { notifyUser } = await import('./notifyCommands-BFRuzxXP.mjs');
     const rest = args.slice(1);
     let email;
     const o = {};
@@ -426,7 +426,7 @@ async function main() {
   } else if (subcommand === "admin") {
     const adminSub = args[1];
     if (adminSub === "set-collection-config") {
-      const { setCollectionConfig } = await import('./adminCommands-DCttALYO.mjs');
+      const { setCollectionConfig } = await import('./adminCommands-fJVu-h9l.mjs');
       const rest = args.slice(2);
       let alias;
       let configJson;
@@ -436,10 +436,10 @@ async function main() {
       }
       await setCollectionConfig(alias, configJson);
     } else if (adminSub === "create-system-collections") {
-      const { createSystemCollections } = await import('./adminCommands-DCttALYO.mjs');
+      const { createSystemCollections } = await import('./adminCommands-fJVu-h9l.mjs');
       await createSystemCollections();
     } else if (adminSub === "migrate-collection-children") {
-      const { migrateCollectionChildren } = await import('./adminCommands-DCttALYO.mjs');
+      const { migrateCollectionChildren } = await import('./adminCommands-fJVu-h9l.mjs');
       const rest = args.slice(2).filter((a) => !a.startsWith("-"));
       await migrateCollectionChildren(rest[0], rest[1]);
     } else {
@@ -447,7 +447,7 @@ async function main() {
     }
     process.exit(0);
   } else if (subcommand === "events") {
-    const { listEvents, ackEvent } = await import('./notifyCommands-Dlm4RafU.mjs');
+    const { listEvents, ackEvent } = await import('./notifyCommands-BFRuzxXP.mjs');
     const sub = args[1];
     const rest = args.slice(2);
     let email;
@@ -468,7 +468,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-DO2e6EnU.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-DN_Oa_OT.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -477,7 +477,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-B6-6GYde.mjs');
+  const { runInteractive } = await import('./run-DKhnAl2f.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -522,7 +522,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_CODEX_AGENTS: KNOWN_CODEX_AGENTS2 } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aw; });
+    const { KNOWN_ACP_AGENTS, KNOWN_CODEX_AGENTS: KNOWN_CODEX_AGENTS2 } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.ax; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -534,7 +534,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_CODEX_AGENTS } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aw; });
+  const { resolveAcpAgentConfig, KNOWN_CODEX_AGENTS } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.ax; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -558,19 +558,19 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_CODEX_AGENTS[config.agentName]) {
-    const { CodexAppServerBackend } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ax; });
+    const { CodexAppServerBackend } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.ay; });
     backend = new CodexAppServerBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.av; });
-    const { GeminiTransport } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ay; });
-    const { KimiTransport } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.az; });
-    const { DefaultTransport } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.au; });
+    const { AcpBackend } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aw; });
+    const { GeminiTransport } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.az; });
+    const { KimiTransport } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aA; });
+    const { DefaultTransport } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.av; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : config.agentName === "kimi" ? new KimiTransport() : new DefaultTransport(config.agentName);
     let acpEnv;
     if (config.agentName === "kimi") {
-      const { ensureKimiProviderConfigured } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aB; });
-      const { kimiSpawnEnv } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aA; });
-      ensureKimiProviderConfigured(process.env, config.command, logFn);
+      const { ensureKimiProviderConfigured } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aC; });
+      const { kimiSpawnEnv } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aB; });
+      await ensureKimiProviderConfigured(process.env, config.command, logFn);
       acpEnv = kimiSpawnEnv(process.env);
     }
     backend = new AcpBackend({
@@ -699,7 +699,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionWhoami, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionLoopStart, sessionLoopCancel, sessionLoopStatus, sessionLoopExtend, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-r4QVEq12.mjs');
+  const { sessionList, sessionWhoami, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionLoopStart, sessionLoopCancel, sessionLoopStatus, sessionLoopExtend, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-wQYdc5EK.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -767,7 +767,13 @@ async function handleSessionCommand() {
         allowDomain.push(sessionArgs[++i]);
       }
     }
-    const { parseShareArg } = await import('./commands-r4QVEq12.mjs');
+    if (denyRead.length > 0) {
+      console.warn("Warning: --deny-read is NOT ENFORCED by the sandbox (#0878). The session workspace");
+      console.warn("         is granted wholesale, so denying a path inside it has no effect. Use");
+      console.warn("         --allow-write / a securityContext allowedDirectories, or keep the");
+      console.warn("         sensitive path outside the workspace.");
+    }
+    const { parseShareArg } = await import('./commands-wQYdc5EK.mjs');
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -858,7 +864,7 @@ async function handleSessionCommand() {
       console.error("  Rewinds history: rewrites the message + drops everything after it, then restarts Claude.");
       process.exit(1);
     }
-    const { sessionEditMessage } = await import('./commands-r4QVEq12.mjs');
+    const { sessionEditMessage } = await import('./commands-wQYdc5EK.mjs');
     await sessionEditMessage(sessionArgs[1], sessionArgs[2], sessionArgs[3], targetMachineId);
   } else if (sessionSubcommand === "refine") {
     if (!sessionArgs[1] || !sessionArgs[2]) {
@@ -866,7 +872,7 @@ async function handleSessionCommand() {
       console.error("  Asks the agent to revise its latest reply in place (no extra round).");
       process.exit(1);
     }
-    const { sessionRefineLastReply } = await import('./commands-r4QVEq12.mjs');
+    const { sessionRefineLastReply } = await import('./commands-wQYdc5EK.mjs');
     await sessionRefineLastReply(sessionArgs[1], sessionArgs[2], targetMachineId);
   } else if (sessionSubcommand === "undo-edit" || sessionSubcommand === "undo") {
     if (!sessionArgs[1]) {
@@ -874,7 +880,7 @@ async function handleSessionCommand() {
       console.error("  Reverts the most recent edit/refine, restoring the pre-edit history.");
       process.exit(1);
     }
-    const { sessionUndoEdit } = await import('./commands-r4QVEq12.mjs');
+    const { sessionUndoEdit } = await import('./commands-wQYdc5EK.mjs');
     await sessionUndoEdit(sessionArgs[1], targetMachineId);
   } else if (sessionSubcommand === "query") {
     const dir = sessionArgs[1];
@@ -884,7 +890,7 @@ async function handleSessionCommand() {
       console.error("  Spawns a stateless Claude session in <directory>, sends <prompt>, prints the answer, then deletes the session.");
       process.exit(1);
     }
-    const { sessionQuery } = await import('./commands-r4QVEq12.mjs');
+    const { sessionQuery } = await import('./commands-wQYdc5EK.mjs');
     await sessionQuery(dir, prompt, targetMachineId, {
       timeout: parseFlagInt("--timeout"),
       json: hasFlag("--json"),
@@ -917,7 +923,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session approve <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-r4QVEq12.mjs');
+    const { sessionApprove } = await import('./commands-wQYdc5EK.mjs');
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -927,7 +933,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session deny <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-r4QVEq12.mjs');
+    const { sessionDeny } = await import('./commands-wQYdc5EK.mjs');
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -979,7 +985,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-title <title>");
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-BUsSOz5M.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-DdOSpUEW.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-project-description" || sessionSubcommand === "set-project") {
     const desc = sessionArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
@@ -987,7 +993,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-project-description <text>");
       process.exit(1);
     }
-    const { sessionSetProjectDescription } = await import('./agentCommands-BUsSOz5M.mjs');
+    const { sessionSetProjectDescription } = await import('./agentCommands-DdOSpUEW.mjs');
     await sessionSetProjectDescription(desc);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -996,11 +1002,11 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-BUsSOz5M.mjs');
+    const { sessionSetLink } = await import('./agentCommands-DdOSpUEW.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "link") {
     const op = sessionArgs[1];
-    const lm = await import('./agentCommands-BUsSOz5M.mjs');
+    const lm = await import('./agentCommands-DdOSpUEW.mjs');
     if (op === "add") {
       const url = sessionArgs[2];
       if (!url || url.startsWith("--")) {
@@ -1035,7 +1041,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-BUsSOz5M.mjs');
+    const { sessionNotify } = await import('./agentCommands-DdOSpUEW.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -1043,7 +1049,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session broadcast <action> [args...]\nActions: open-canvas <url> [label], close-canvas, toast <message>");
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-BUsSOz5M.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-DdOSpUEW.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -1054,7 +1060,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-BUsSOz5M.mjs');
+        const { inboxSend } = await import('./agentCommands-DdOSpUEW.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
@@ -1071,7 +1077,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-BUsSOz5M.mjs');
+        const { inboxList } = await import('./agentCommands-DdOSpUEW.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -1093,7 +1099,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-BUsSOz5M.mjs');
+        const { inboxList } = await import('./agentCommands-DdOSpUEW.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -1103,7 +1109,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "reply") {
       if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-BUsSOz5M.mjs');
+        const { inboxReply } = await import('./agentCommands-DdOSpUEW.mjs');
         await inboxReply(sessionArgs[2], sessionArgs[3]);
       } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
         await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
@@ -1141,7 +1147,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-r4QVEq12.mjs');
+    const { machineShare } = await import('./commands-wQYdc5EK.mjs');
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -1192,14 +1198,14 @@ async function handleMachineCommand() {
       process.exit(1);
     }
     if (all) {
-      const { fleetExec } = await import('./fleet-CSwFR8B0.mjs');
+      const { fleetExec } = await import('./fleet-NRi2YMso.mjs');
       await fleetExec(command, { cwd });
     } else {
-      const { machineExec } = await import('./commands-r4QVEq12.mjs');
+      const { machineExec } = await import('./commands-wQYdc5EK.mjs');
       await machineExec(machineId, command, cwd);
     }
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-r4QVEq12.mjs');
+    const { machineInfo } = await import('./commands-wQYdc5EK.mjs');
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -1217,12 +1223,21 @@ async function handleMachineCommand() {
     for (let i = 2; i < machineArgs.length; i++) {
       if (machineArgs[i] === "--level" && i + 1 < machineArgs.length) {
         level = machineArgs[++i];
+        continue;
+      }
+      if (machineArgs[i] === "-m" || machineArgs[i] === "--machine" || machineArgs[i] === "--all") {
+        console.error(`svamp machine notify does not support ${machineArgs[i]} \u2014 it always notifies THIS machine's sessions.`);
+        console.error('  To reach another machine: svamp session send <id> "<message>" (or svamp machine exec -m <id>).');
+        process.exit(1);
       }
+      console.error(`Unknown option for 'svamp machine notify': ${machineArgs[i]}`);
+      console.error("Usage: svamp machine notify <message> [--level info|warning|error]");
+      process.exit(1);
     }
-    const { machineNotify } = await import('./agentCommands-BUsSOz5M.mjs');
+    const { machineNotify } = await import('./agentCommands-DdOSpUEW.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-r4QVEq12.mjs');
+    const { machineLs } = await import('./commands-wQYdc5EK.mjs');
     let machineId;
     let showHidden = false;
     let path;
@@ -1288,26 +1303,26 @@ Examples:
   };
   const hasFlag = (name) => fleetArgs.includes(`--${name}`);
   if (sub === "status") {
-    const { fleetStatus } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetStatus } = await import('./fleet-NRi2YMso.mjs');
     await fleetStatus();
   } else if (sub === "upgrade-claude") {
-    const { fleetUpgradeClaude } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetUpgradeClaude } = await import('./fleet-NRi2YMso.mjs');
     await fleetUpgradeClaude({ version: flag("version", "-v") });
   } else if (sub === "upgrade-codex") {
-    const { fleetUpgradeCodex } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetUpgradeCodex } = await import('./fleet-NRi2YMso.mjs');
     await fleetUpgradeCodex({ version: flag("version", "-v") });
   } else if (sub === "upgrade-kimi") {
-    const { fleetUpgradeKimi } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetUpgradeKimi } = await import('./fleet-NRi2YMso.mjs');
     await fleetUpgradeKimi({ version: flag("version", "-v") });
   } else if (sub === "upgrade-svamp") {
-    const { fleetUpgradeSvamp } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetUpgradeSvamp } = await import('./fleet-NRi2YMso.mjs');
     await fleetUpgradeSvamp({ version: flag("version", "-v"), excludeSelf: hasFlag("exclude-self"), force: hasFlag("force") });
   } else if (sub === "daemon-restart") {
-    const { fleetDaemonRestart } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetDaemonRestart } = await import('./fleet-NRi2YMso.mjs');
     await fleetDaemonRestart({ graceful: !hasFlag("cleanup") });
   } else if (sub === "push-skill") {
     const name = fleetArgs[1];
-    const { fleetPushSkill } = await import('./fleet-CSwFR8B0.mjs');
+    const { fleetPushSkill } = await import('./fleet-NRi2YMso.mjs');
     await fleetPushSkill(name);
   } else {
     console.error(`Unknown fleet subcommand: ${sub}`);
@@ -1323,7 +1338,7 @@ async function handleSkillsCommand() {
     await printSkillsHelp();
     return;
   }
-  const { skillsFind, skillsInstall, skillsList, skillsRemove, skillsPublish } = await import('./commands-ZML4FIzg.mjs');
+  const { skillsFind, skillsInstall, skillsList, skillsRemove, skillsPublish } = await import('./commands-Bx2JkNft.mjs');
   if (skillsSubcommand === "find" || skillsSubcommand === "search") {
     const query = skillsArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
     if (!query) {
@@ -1370,7 +1385,7 @@ async function loginToHypha() {
     process.exit(1);
   }
   const anchor = anchorArg.replace(/\/+$/, "");
-  const { loadInstanceConfig } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aq; });
+  const { loadInstanceConfig } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.ar; });
   let cfg = null;
   try {
     cfg = await loadInstanceConfig({ anchor, force: true });
@@ -1449,7 +1464,11 @@ Please open this URL in your browser:
     while (envLines.length > 0 && envLines[envLines.length - 1].trim() === "") {
       envLines.pop();
     }
-    fs.writeFileSync(envFile, envLines.join("\n") + "\n", "utf-8");
+    fs.writeFileSync(envFile, envLines.join("\n") + "\n", { encoding: "utf-8", mode: 384 });
+    try {
+      fs.chmodSync(envFile, 384);
+    } catch {
+    }
     console.log(`
 Login successful!`);
     console.log(`  User: ${userId}`);
@@ -1481,7 +1500,7 @@ async function logoutFromHypha() {
   } catch {
   }
   try {
-    const { clearInstanceConfigCache } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aq; });
+    const { clearInstanceConfigCache } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.ar; });
     clearInstanceConfigCache();
   } catch {
   }
@@ -1499,7 +1518,11 @@ async function logoutFromHypha() {
       kept.pop();
     }
     if (kept.length > 0) {
-      fs.writeFileSync(envFile, kept.join("\n") + "\n", "utf-8");
+      fs.writeFileSync(envFile, kept.join("\n") + "\n", { encoding: "utf-8", mode: 384 });
+      try {
+        fs.chmodSync(envFile, 384);
+      } catch {
+      }
     } else {
       fs.unlinkSync(envFile);
     }
@@ -1726,7 +1749,7 @@ Commands:
   svamp daemon --help                Show all daemon commands
 
   Session management (requires daemon running):
-  svamp session spawn <agent> [opts] Spawn a new agent session (agents: claude, gemini, codex)
+  svamp session spawn <agent> [opts] Spawn a new agent session (agents: claude, gemini, codex, kimi)
   svamp session send <id> <message>  Send message to a session (urgent by default \u2014 wakes the recipient; --when-idle to defer to their next idle turn)
   svamp session query <dir> <prompt> Stateless one-shot: spawn \u2192 ask \u2192 answer \u2192 delete
   svamp session wait <id>            Wait for agent to become idle
@@ -1764,6 +1787,7 @@ Commands:
   svamp skills --help                Skills marketplace (find, install, publish)
   svamp service --help               Service exposure (HTTP services from sandboxes)
   svamp outpost --help               Connect a remote machine (FDE outpost): up, exec, list, install
+  svamp wise --help                  WISE voice & meeting agent (ask, join-meeting, announce, meetings, voice)
   svamp notify <email> \u2026             Send a cross-user notification (bell inbox); --title/--body/--action/--level
   svamp events list|ack              Read / dismiss your notification bell inbox
   svamp admin \u2026                      System-collection ops (create-system-collections, set-collection-config, migrate-collection-children)
@@ -1802,6 +1826,8 @@ Usage:
                                       for the hypha-cloud cluster, or your own deployment's proxy.
   svamp daemon auth use-login         Use ~/.claude credentials (run "claude login" to set them)
   svamp daemon auth set <URL> <KEY>   Use a custom Anthropic gateway (base URL must not end in /v1)
+  svamp daemon codex-auth --help      Configure how Codex authenticates (status/set/use-openai/use-chatgpt/clear)
+  svamp daemon kimi-auth --help       Configure how Kimi Code authenticates (status/use-moonshot/use-coding/set/clear)
 
 Claude auth flags (take effect on next start/restart):
   svamp daemon start --use-hypha-proxy <URL>   (or --hypha-proxy-url URL)
@@ -1827,7 +1853,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ar; });
+  const mod = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.as; });
   if (hasHypha) {
     let url;
     const hyphaIdx = argv.indexOf("--use-hypha-proxy");
@@ -1881,7 +1907,7 @@ async function applyDaemonShareFlag(argv) {
     }
   }
   if (collected.length === 0) return;
-  const { updateEnvFile } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ar; });
+  const { updateEnvFile } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.as; });
   const seen = /* @__PURE__ */ new Set();
   const deduped = collected.filter((e) => {
     const k = e.toLowerCase();
@@ -1914,7 +1940,7 @@ async function handleWiseAgentCommand(rest) {
       }
     });
     const message = rest.slice(1).map((a, idx) => ({ a, idx: idx + 1 })).filter(({ a, idx }) => !a.startsWith("-") && !consumed.has(String(idx))).map(({ a }) => a).join(" ");
-    const { wiseAskCli } = await import('./commands-r4QVEq12.mjs');
+    const { wiseAskCli } = await import('./commands-wQYdc5EK.mjs');
     await wiseAskCli(machineId, message, sessionId, { json });
     return;
   }
@@ -1926,7 +1952,7 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { runWiseVoiceCli } = await import('./headlessCli-Dg-awx4h.mjs');
+    const { runWiseVoiceCli } = await import('./headlessCli-DpTQ00fL.mjs');
     await runWiseVoiceCli({ voice: valueOf(["--voice"]), wakeKeywordPath: valueOf(["--wake"]), model: valueOf(["--model"]) });
     return;
   }
@@ -1944,7 +1970,7 @@ async function handleWiseAgentCommand(rest) {
     const mode = valueOf(["--mode"]);
     const mission = valueOf(["--mission"]);
     const url = rest.slice(1).find((a) => /^https?:\/\//.test(a)) || "";
-    const { wiseJoinMeetingCli } = await import('./commands-r4QVEq12.mjs');
+    const { wiseJoinMeetingCli } = await import('./commands-wQYdc5EK.mjs');
     await wiseJoinMeetingCli(machineId, url, sessionId, { json, mode, mission });
     return;
   }
@@ -1956,7 +1982,7 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { wiseLeaveMeetingCli } = await import('./commands-r4QVEq12.mjs');
+    const { wiseLeaveMeetingCli } = await import('./commands-wQYdc5EK.mjs');
     await wiseLeaveMeetingCli(valueOf(["--machine", "-m"]), valueOf(["--session", "-s"]), { json: rest.includes("--json") });
     return;
   }
@@ -1980,7 +2006,7 @@ async function handleWiseAgentCommand(rest) {
       }
     });
     const text = rest.slice(1).map((a, idx) => ({ a, idx: idx + 1 })).filter(({ a, idx }) => !a.startsWith("-") && !consumed.has(String(idx))).map(({ a }) => a).join(" ");
-    const { wiseAnnounceCli } = await import('./commands-r4QVEq12.mjs');
+    const { wiseAnnounceCli } = await import('./commands-wQYdc5EK.mjs');
     await wiseAnnounceCli(machineId, text, sessionId, { json });
     return;
   }
@@ -1992,13 +2018,15 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { wiseMeetingsCli } = await import('./commands-r4QVEq12.mjs');
+    const { wiseMeetingsCli } = await import('./commands-wQYdc5EK.mjs');
     await wiseMeetingsCli(valueOf(["--machine", "-m"]), { json: rest.includes("--json") });
     return;
   }
   if (sub === "--help" || sub === "-h") {
     console.log(`Usage:
   svamp wise ask "<message>" [--session <id>] [-m <machine>] [--json]
+      Fast WISE turn \u2014 GLOBAL machine-manager by default (daemon status, run
+      commands, inspect/spawn/drive any session); --session <id> scopes to one.
   svamp wise join-meeting <zoom|meet|teams url> [--session <id>|--global] [--mode listen|text|voice] [--mission "<prompt>"] [-m <machine>]
       --mode listen=silent (transcribe only), text=reply in meeting chat, voice=speak aloud (default).
       --mission optional focus prompt for the agent; omit for a general meeting mission.
@@ -2007,8 +2035,7 @@ async function handleWiseAgentCommand(rest) {
       Post a chat message into the live meeting (defaults --session to
       $SVAMP_SESSION_ID, so the deep agent can announce when work is done).
   svamp wise meetings [-m <machine>]
-      Fast WISE turn \u2014 GLOBAL machine-manager by default (daemon status, run
-      commands, inspect/spawn/drive any session); --session <id> scopes to one.
+      List the meeting agents currently active on the machine.
 
   svamp wise voice [--voice <name>] [--wake <keyword.ppn>] [--model <id>]
       HEADLESS voice on this machine (mic + speaker, no browser). Needs \`sox\`.
@@ -2042,7 +2069,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
     return;
   }
   const authArgs = rest.slice(1);
-  const mod = await import('./auth-D5yTcsy2.mjs');
+  const mod = await import('./auth-B2XK13r-.mjs');
   let action;
   try {
     action = mod.parseWiseAgentAuthArgs(authArgs);
@@ -2052,7 +2079,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
     return;
   }
   if (action) {
-    const { updateEnvFile } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ar; });
+    const { updateEnvFile } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.as; });
     const updates = mod.buildWiseAgentEnvUpdates(action);
     updateEnvFile(updates);
     for (const [k, v] of Object.entries(updates)) {
@@ -2066,7 +2093,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
 }
 async function handleDaemonAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const mod = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ar; });
+  const mod = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.as; });
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate
@@ -2140,8 +2167,8 @@ one step: --use-hypha-proxy / --use-claude-login / --anthropic-base-url URL --an
 }
 async function handleDaemonCodexAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const { updateEnvFile } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ar; });
-  const { resolveCodexProvider } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.as; });
+  const { updateEnvFile } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.as; });
+  const { resolveCodexProvider } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.at; });
   const redact = (k) => k && k.length > 10 ? `${k.slice(0, 6)}\u2026${k.slice(-4)}` : k ? "***" : "(unset)";
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
@@ -2227,8 +2254,8 @@ The generic LLM_API_BASE / LLM_API_KEY / LLM_MODEL env vars are also honored if
 }
 async function handleDaemonKimiAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const { updateEnvFile } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.ar; });
-  const { resolveKimiProvider, buildKimiCatalogAddArgs, DEFAULT_KIMI_PROVIDER } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aA; });
+  const { updateEnvFile } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.as; });
+  const { resolveKimiProvider, buildKimiCatalogAddArgs, DEFAULT_KIMI_PROVIDER } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aB; });
   const redact = (k) => k && k.length > 10 ? `${k.slice(0, 6)}\u2026${k.slice(-4)}` : k ? "***" : "(unset)";
   const PRESETS = {
     "use-moonshot": { provider: "moonshotai", base: "https://api.moonshot.ai/v1", label: "Moonshot AI (moonshotai)" },
@@ -2361,6 +2388,7 @@ AGENTS:
   claude    Claude Code \u2014 full coding agent (default)
   gemini    Google Gemini via ACP protocol
   codex     OpenAI Codex via app-server (streaming, resume, custom providers)
+  kimi      MoonshotAI Kimi Code via ACP (auth: svamp daemon kimi-auth)
 
   Usage: svamp session spawn <agent> [options]
   The <agent> argument is required. Use "claude" if unsure.
@@ -2382,7 +2410,8 @@ COMMANDS:
                                           same-user sessions on other machines, and how to reach them (alias: env)
 
   Communicate:
-    send <id> <message> [--when-idle] [--wait] [--response] [--btw] [--require-approval] [--timeout N] [--json] [--urgency urgent|normal]
+    send <id> <message> [--model <id>] [--plain] [--subject "..."] [--when-idle] [--wait] [--response] [--btw]
+         [--require-approval] [--as-issue [--issue-title "..."]] [--timeout N] [--json] [--urgency urgent|normal]
                                           Send a message to a running session.
                                           By default this is URGENT: it wakes the recipient so they
                                           handle it promptly. Pass --when-idle to defer instead \u2014
@@ -2567,10 +2596,11 @@ Usage:
   svamp machine share --remove <email>               Remove shared user
   svamp machine share --config <path>                Apply security context config
   svamp machine share --show-config                  Show current security context config
-  svamp machine notify <message> [--level ...]       Send a machine notification (info|warning|error)
+  svamp machine notify <message> [--level ...]       Notify THIS machine's sessions (local-only, no -m/--all)
 
 Options:
-  --machine <id>, -m <id>  Target a specific machine (prefix match supported)
+  --machine <id>, -m <id>  Target a specific machine (prefix match supported).
+                           Applies to info/exec/ls \u2014 NOT to notify, which is local-only.
   --cwd <path>             Working directory for exec (default: home dir)
   --hidden, -a             Show hidden files in ls
 
@@ -2588,7 +2618,7 @@ Examples:
 async function printSkillsHelp() {
   let browseUrl = "<HYPHA_SERVER_URL>/<workspace>/artifacts/marketplace (set HYPHA_SERVER_URL)";
   try {
-    const { getArtifactBaseUrl, getSkillsCollectionName } = await import('./run-Y3YLx8x7.mjs').then(function (n) { return n.aC; });
+    const { getArtifactBaseUrl, getSkillsCollectionName } = await import('./run-RA4Vr6lj.mjs').then(function (n) { return n.aD; });
     browseUrl = `${getArtifactBaseUrl()}/${getSkillsCollectionName()}`;
   } catch {
   }