svamp-cli 0.2.324 → 0.2.326

package/dist/{run-CEp9YpUZ.mjs → run-BBBr4jkI.mjs}

@@ -8,15 +8,15 @@ import { fileURLToPath } from 'url';
 import { execFile, execSync, spawn, exec as exec$1 } from 'child_process';
 import * as crypto from 'crypto';
 import { randomUUID, createHash } from 'crypto';
-import { randomUUID as randomUUID$1, randomBytes, createHash as createHash$1, timingSafeEqual } from 'node:crypto';
 import { existsSync, readFileSync, mkdirSync as mkdirSync$1, writeFileSync as writeFileSync$1, chmodSync as chmodSync$1, rmSync as rmSync$1, cpSync, statSync, realpathSync, readdirSync, renameSync, appendFileSync, openSync, readSync, closeSync, unlinkSync as unlinkSync$1, writeSync } from 'node:fs';
+import { join as join$1, extname, resolve, sep, basename, dirname } from 'node:path';
+import { randomUUID as randomUUID$1, randomBytes, createHash as createHash$1, timingSafeEqual } from 'node:crypto';
 import { exec, spawn as spawn$1, execSync as execSync$1, execFile as execFile$1, execFileSync } from 'node:child_process';
 import { promisify } from 'util';
 import * as http from 'http';
 import * as net from 'net';
 import { createServer } from 'net';
 import os, { homedir as homedir$1, platform as platform$1 } from 'node:os';
-import { join as join$1, extname, resolve, sep, basename, dirname } from 'node:path';
 import { EventEmitter } from 'node:events';
 import { ndJsonStream, ClientSideConnection } from '@agentclientprotocol/sdk';
 import { promisify as promisify$1 } from 'node:util';
@@ -3160,6 +3160,9 @@ class ServeManager {
   hyphaServerUrl;
   /** #126: daemon-provided lookup of sessionId → { cwd, sharing, ownerEmail } for the files gateway. */
   sessionResolver = null;
+  /** Channel-capability authorizer: a `fileAccess`-enabled channel's caller key grants
+   *  whole-project file management for its session. Checked BEFORE email auth. */
+  capabilityAuthorizer = null;
   /**
    * #0944/#0945: daemon-provided "this mount no longer backs that session's Launch Pad entry"
    * hook. Fired with the OWNING session id, which is the only correct target — the CLI-side
@@ -3189,6 +3192,30 @@ class ServeManager {
   setSessionResolver(fn) {
     this.sessionResolver = fn;
   }
+  /**
+   * Register the channel-capability authorizer used by the session-files gateway to admit
+   * a `fileAccess`-enabled channel's caller key (ck_… bearer). Call once at daemon start.
+   */
+  setCapabilityAuthorizer(fn) {
+    this.capabilityAuthorizer = fn;
+  }
+  /**
+   * Extract a channel capability token from the request, if one is present. A channel caller
+   * key is `ck_`-prefixed; we ONLY return a token that carries that prefix so a Hypha JWT
+   * bearer (used by the email-identity path) never collides with the capability authorizer.
+   * Accepted carriers: `Authorization: Bearer ck_…` header, or `?key=ck_…` query param.
+   * Returns null when no capability token is presented. NEVER log the returned value.
+   */
+  extractCapabilityToken(req, url) {
+    const auth = req.headers["authorization"];
+    if (typeof auth === "string") {
+      const m = /^Bearer\s+(\S+)$/i.exec(auth.trim());
+      if (m && m[1].startsWith("ck_")) return m[1];
+    }
+    const q = url.searchParams.get("key");
+    if (q && q.startsWith("ck_")) return q;
+    return null;
+  }
   /**
    * #0944/#0945: register the daemon's "drop this session's Launch Pad link for this mount"
    * callback. Fired when a mount stops backing a session's Pad entry — on a real removal, and
@@ -3785,26 +3812,47 @@ a{color:#0969da;text-decoration:none;font-weight:500}a:hover{text-decoration:und
       deny(404, "Unknown session");
       return;
     }
-    const userEmail = this.auth ? await this.auth.authenticate(req).catch(() => null) : null;
-    if (!userEmail) {
-      deny(401, "Authentication required");
-      return;
+    let capabilityGranted = false;
+    const capToken = this.extractCapabilityToken(req, url);
+    if (capToken && this.capabilityAuthorizer) {
+      try {
+        capabilityGranted = this.capabilityAuthorizer(sessionId, capToken);
+      } catch {
+        capabilityGranted = false;
+      }
     }
-    const ownerEmail = (target.ownerEmail || "").toLowerCase();
-    const isOwner = !!ownerEmail && userEmail.toLowerCase() === ownerEmail;
-    if (!isOwner) {
-      const sharing = target.sharing;
-      if (!sharing || !sharing.enabled) {
-        this.log(`Files-gateway DENY '${sessionId}': ${userEmail} not owner and session not shared`);
-        deny(403, "Access denied");
+    if (!capabilityGranted) {
+      const userEmail = this.auth ? await this.auth.authenticate(req).catch(() => null) : null;
+      if (!userEmail) {
+        deny(401, "Authentication required");
         return;
       }
-      try {
-        authorizeRequest({ user: { email: userEmail } }, sharing, "admin");
-      } catch (err) {
-        this.log(`Files-gateway DENY '${sessionId}': ${userEmail} \u2014 ${err?.message || "not admin"}`);
-        deny(403, "Access denied");
-        return;
+      const ownerEmail = (target.ownerEmail || "").toLowerCase();
+      const isOwner = !!ownerEmail && userEmail.toLowerCase() === ownerEmail;
+      if (!isOwner) {
+        const principal = { user: { email: userEmail } };
+        let granted = false;
+        const sharing = target.sharing;
+        if (sharing && sharing.enabled) {
+          try {
+            authorizeRequest(principal, sharing, "admin");
+            granted = true;
+          } catch {
+          }
+        }
+        const machineSharing = target.machineSharing;
+        if (!granted && machineSharing && machineSharing.enabled) {
+          try {
+            authorizeRequest(principal, machineSharing, "admin");
+            granted = true;
+          } catch {
+          }
+        }
+        if (!granted) {
+          this.log(`Files-gateway DENY '${sessionId}': ${userEmail} not owner and not a session/machine admin`);
+          deny(403, "Access denied");
+          return;
+        }
       }
     }
     const rootDir = target.cwd;
@@ -5603,6 +5651,12 @@ function validateChannel(c) {
   if (m === "fixed" && c.identity.fixed?.name && unsafe.test(c.identity.fixed.name)) errs.push(`identity.fixed.name must not contain < > " ' & or newlines`);
   for (const cl of c.identity?.callers || []) if (unsafe.test(cl.name || "")) errs.push(`caller name "${cl.name}" must not contain < > " ' & or newlines`);
   errs.push(...validateUploadConfig(c));
+  if (c.fileAccess !== void 0) {
+    if (typeof c.fileAccess !== "object" || c.fileAccess === null || Array.isArray(c.fileAccess))
+      errs.push("fileAccess must be an object");
+    else if (c.fileAccess.enabled !== void 0 && typeof c.fileAccess.enabled !== "boolean")
+      errs.push("fileAccess.enabled must be a boolean");
+  }
   return errs;
 }
 function normalizeBind(c) {
@@ -5626,6 +5680,24 @@ function channelAsyncRepliable(c) {
   if ((c.action?.kind ?? "message") !== "message") return false;
   return bindMode(c) !== "stateless";
 }
+function channelKeyGrantsFileAccess(channels, token) {
+  if (!token || !token.startsWith("ck_")) return false;
+  const presented = createHash$1("sha256").update(token).digest();
+  const eq = (candidate) => {
+    if (!candidate) return false;
+    try {
+      return timingSafeEqual(presented, createHash$1("sha256").update(candidate).digest());
+    } catch {
+      return false;
+    }
+  };
+  for (const ch of channels) {
+    if (!ch.fileAccess?.enabled) continue;
+    if (eq(ch.identity?.shared_key)) return true;
+    for (const caller of ch.identity?.callers || []) if (eq(caller.key)) return true;
+  }
+  return false;
+}
 class ChannelStore {
   dir;
   constructor(projectDir) {
@@ -5654,7 +5726,7 @@ class ChannelStore {
     if (errs.length) throw new Error("invalid channel: " + errs.join("; "));
     mkdirSync$1(this.dir, { recursive: true });
     const tmp = `${this._path(c.id)}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
-    writeFileSync$1(tmp, JSON.stringify(c, null, 2));
+    writeFileSync$1(tmp, JSON.stringify(c, null, 2), { mode: 384 });
     renameSync(tmp, this._path(c.id));
     return c;
   }
@@ -5836,6 +5908,32 @@ curl -X POST "${uploadUrl}" \\
   -d '{"kwargs": {"channel": "${channel.id}", "filename": "report.pdf", "content_base64": "<base64>", "content_type": "application/pdf", "from": "your-name", "key": "${key}"}}'
 \`\`\``;
   })() : "";
+  const filesBase = ctx?.filesEndpoint;
+  const fileSection = channel.fileAccess?.enabled && filesBase ? `
+
+## Managing project files
+This channel also grants **full file management of the whole project folder** \u2014 list,
+download, upload, and delete any file in the working directory (this is NOT the sandboxed
+\`upload\` above). Authenticate every request with your channel key as a Bearer token:
+
+Base: \`${filesBase}\` \u2014 append a project-relative path (URL-encode as needed).
+
+- **List a directory:** \`GET ${filesBase}/<dir>/?list=1\` \u2192 JSON of entries
+- **Download a file:** \`GET ${filesBase}/<path>\`
+- **Upload / overwrite:** \`PUT ${filesBase}/<path>\` with the raw file bytes as the body
+- **Delete a file:** \`DELETE ${filesBase}/<path>\`
+
+\`\`\`bash
+# list the project root
+curl -H "Authorization: Bearer ${key}" "${filesBase}/?list=1"
+# download a file
+curl -H "Authorization: Bearer ${key}" "${filesBase}/README.md" -o README.md
+# upload / overwrite a file (raw bytes)
+curl -X PUT -H "Authorization: Bearer ${key}" --data-binary @local.txt "${filesBase}/notes/local.txt"
+# delete a file
+curl -X DELETE -H "Authorization: Bearer ${key}" "${filesBase}/notes/local.txt"
+\`\`\`
+> \u26A0\uFE0F Anyone holding this key can read, write, and **delete** any file in this project. Revoke it when you're done.` : "";
   return `---
 name: ${name}
 description: ${desc}
@@ -5868,7 +5966,7 @@ curl -X POST "${sendUrl}" \\
   -d '{"kwargs": {"channel": "${channel.id}", "message": "your message here", "from": "your-name", "key": "${key}"${sessionKv}}}'
 \`\`\`
 
-Always-current copy of this skill (all ids filled in): ${skillUrl}${uploadSection}${queueSection}`;
+Always-current copy of this skill (all ids filled in): ${skillUrl}${uploadSection}${fileSection}${queueSection}`;
 }
 
 function keysMatch(a, b) {
@@ -8091,7 +8189,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-C83128hf.mjs');
+          const { toolsForRole } = await import('./sideband-5ck3CDWM.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -8196,7 +8294,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
       return { ok: false, call_id: callId, status: "busy", error: "channel is busy (too many concurrent requests) \u2014 retry shortly" };
     }
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-GRfwAHgR.mjs');
+    const { queryCore } = await import('./commands-CxfUr2Qr.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     try {
@@ -9664,7 +9762,11 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
     key: c.identity?.shared_key,
     // The session this skill is being copied FROM — baked into `dynamic` channel
     // instructions as the routing target so the copied link lands in THIS session.
-    session: sessionId
+    session: sessionId,
+    // For a fileAccess-enabled channel, the session-files REST gateway prefix
+    // (`<base>/s/<sessionId>/`) so generateSkillBody can render the file curl block.
+    // Null until the always-on gateway tunnel is up ⇒ the file section is omitted.
+    filesEndpoint: callbacks.onFilesEndpoint?.() ?? void 0
   });
   const skillUrlsFor = (c) => {
     if (!channelsServiceId) return { skillUrl: void 0, sendUrl: void 0 };
@@ -10240,10 +10342,17 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
         return { error: e?.message || String(e) };
       }
     },
-    recordMeetingActivity: async (params) => {
+    recordMeetingActivity: async (params, context) => {
       const c = channelStore.get(params.channel);
       if (!c || c.enabled === false) return { error: "channel not found" };
-      const r = resolveSender(c, { key: params.key, from: params.from });
+      const u = context?.user;
+      const r = resolveSender(c, {
+        key: params.key,
+        from: params.from,
+        hyphaUser: u && u.is_anonymous !== true ? u.email || u.id : void 0,
+        hyphaAnonymous: u?.is_anonymous === true,
+        hyphaWorkspace: u?.scope?.current_workspace
+      });
       if (r.error || !r.sender) return { error: r.error || "unauthorized" };
       const text = String(params.text || "").replace(/\s+/g, " ").trim().slice(0, 1e3);
       if (!text) return { ok: true };
@@ -11453,6 +11562,25 @@ function handleClaudeMessage(ctx, msg) {
   }
 }
 
+function sessionQueueMax(env = process.env) {
+  return Math.max(10, Number(env.SVAMP_SESSION_QUEUE_MAX) || 200);
+}
+function appendToMessageQueue(existing, entry, max = sessionQueueMax()) {
+  const next = [...existing, entry];
+  if (next.length <= max) return { queue: next, dropped: 0 };
+  const overflow = next.length - max;
+  let budget = overflow;
+  const kept = [];
+  for (const item of next) {
+    if (budget > 0 && item !== entry && item.inboxHop !== void 0) {
+      budget--;
+      continue;
+    }
+    kept.push(item);
+  }
+  return { queue: kept, dropped: overflow - budget };
+}
+
 const KNOWN_AGENT_LAUNCHERS = ["claude", "codex", "gemini", "kimi"];
 function agentLauncherExists(cmd, env = process.env) {
   if (!cmd) return false;
@@ -19954,7 +20082,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-D7CV6DKL.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-DUHUBzrj.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -19976,7 +20104,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-D7CV6DKL.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-DUHUBzrj.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const incoming = [{
@@ -19997,7 +20125,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { dropServiceLinks } = await import('./agentCommands-D7CV6DKL.mjs');
+      const { dropServiceLinks } = await import('./agentCommands-DUHUBzrj.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       if (dropServiceLinks(config, "serve", mountName)) {
@@ -20040,7 +20168,7 @@ async function startDaemon(options) {
   ensureAutoInstalledCommands(logger);
   (async () => {
     try {
-      const { beginClaudeVersionReconcile } = await import('./pinnedClaudeCode-8SZDu7O-.mjs');
+      const { beginClaudeVersionReconcile } = await import('./pinnedClaudeCode-BO0Qs_kE.mjs');
       beginClaudeVersionReconcile((msg) => logger.log(msg));
     } catch (e) {
       logger.log(`[claude-version] check failed: ${e?.message || e}`);
@@ -22304,11 +22432,13 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               } else {
                 logger.log(`[Session ${sessionId}] Queuing inbox message for idle processing`);
                 const existingQueue = sessionMetadata.messageQueue || [];
-                sessionMetadata = {
-                  ...sessionMetadata,
-                  messageQueue: [...existingQueue, { id: message.messageId, text: formatted, displayText: formatted, createdAt: Date.now(), inboxHop: message.hopCount ?? 0, inboxThreadId: message.threadId || message.messageId }]
-                };
+                const { queue: cappedQueue, dropped } = appendToMessageQueue(existingQueue, { id: message.messageId, text: formatted, displayText: formatted, createdAt: Date.now(), inboxHop: message.hopCount ?? 0, inboxThreadId: message.threadId || message.messageId });
+                sessionMetadata = { ...sessionMetadata, messageQueue: cappedQueue };
                 sessionService.updateMetadata(sessionMetadata);
+                if (dropped > 0) {
+                  logger.log(`[Session ${sessionId}] Inbox queue over ${sessionQueueMax()}; dropped ${dropped} oldest queued inbox message(s)`);
+                  sessionService.pushMessage({ type: "message", message: `Inbox queue full (${sessionQueueMax()}) \u2014 dropped ${dropped} older queued message(s).`, level: "warning" }, "event");
+                }
                 if (!sessionWasProcessing) {
                   setTimeout(() => processMessageQueueRef?.(), 200);
                 }
@@ -22367,11 +22497,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-BIzMNjqC.mjs');
+              const { issueRpc } = await import('./rpc-Qcj4M_LQ.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-C1KIoUyz.mjs');
+              const { workflowRpc } = await import('./rpc-27xBajCe.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -22982,11 +23112,13 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               } else {
                 logger.log(`[${agentName} Session ${sessionId}] Queuing inbox message for idle processing`);
                 const existingQueue = sessionMetadata.messageQueue || [];
-                sessionMetadata = {
-                  ...sessionMetadata,
-                  messageQueue: [...existingQueue, { id: message.messageId, text: formatted, displayText: formatted, createdAt: Date.now(), inboxHop: message.hopCount ?? 0, inboxThreadId: message.threadId || message.messageId }]
-                };
+                const { queue: cappedQueue, dropped } = appendToMessageQueue(existingQueue, { id: message.messageId, text: formatted, displayText: formatted, createdAt: Date.now(), inboxHop: message.hopCount ?? 0, inboxThreadId: message.threadId || message.messageId });
+                sessionMetadata = { ...sessionMetadata, messageQueue: cappedQueue };
                 sessionService.updateMetadata(sessionMetadata);
+                if (dropped > 0) {
+                  logger.log(`[${agentName} Session ${sessionId}] Inbox queue over ${sessionQueueMax()}; dropped ${dropped} oldest queued inbox message(s)`);
+                  sessionService.pushMessage({ type: "message", message: `Inbox queue full (${sessionQueueMax()}) \u2014 dropped ${dropped} older queued message(s).`, level: "warning" }, "event");
+                }
                 if (sessionMetadata.lifecycleState === "idle" && acpBackendReady) {
                   const queue = sessionMetadata.messageQueue;
                   if (queue && queue.length > 0) {
@@ -23075,11 +23207,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-BIzMNjqC.mjs');
+              const { issueRpc } = await import('./rpc-Qcj4M_LQ.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-C1KIoUyz.mjs');
+              const { workflowRpc } = await import('./rpc-27xBajCe.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -24087,20 +24219,43 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
           } catch {
             sharing = null;
           }
+          let machineSharing = null;
+          try {
+            machineSharing = machineService.getCurrentMetadata()?.sharing ?? null;
+          } catch {
+            machineSharing = null;
+          }
           return {
             cwd: session.directory,
             sharing,
-            ownerEmail: sharing?.owner || daemonOwnerEmail
+            ownerEmail: sharing?.owner || daemonOwnerEmail,
+            machineSharing
           };
         }
       }
       return null;
     });
+    serveManager$1.setCapabilityAuthorizer((sessionId, token) => {
+      if (!token || !token.startsWith("ck_")) return false;
+      let cwd = null;
+      for (const [, session] of pidToTrackedSession) {
+        if (session.svampSessionId === sessionId && !session.stopped && session.directory) {
+          cwd = session.directory;
+          break;
+        }
+      }
+      if (!cwd) return false;
+      try {
+        return channelKeyGrantsFileAccess(new ChannelStore(cwd).list(), token);
+      } catch {
+        return false;
+      }
+    });
     const sessionFilesToken = createHash("sha256").update(`session-files:${machineId}`).digest("hex").slice(0, 20);
     serveManager$1.ensureSessionFilesGateway(sessionFilesToken).then((base) => logger.log(`[serve] session-files gateway: ${base || "(tunnel pending)"}`)).catch((err) => logger.error(`[serve] session-files gateway failed: ${err?.message || err}`));
     const persistedSessions = loadPersistedSessions();
+    const knownIds = new Set(persistedSessions.map((s) => s.sessionId).concat(Object.keys(loadSessionIndex())));
     try {
-      const knownIds = new Set(persistedSessions.map((s) => s.sessionId).concat(Object.keys(loadSessionIndex())));
       const { removed } = await sweepOrphanedStagedHomes(knownIds);
       if (removed.length > 0) {
         logger.log(`Cleaned up ${removed.length} orphaned staged home(s) from prior runs.`);
@@ -24111,7 +24266,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const sessionsToAutoContinue = [];
     const sessionsToLoopResume = [];
     {
-      const knownSessionIds = new Set(persistedSessions.map((p) => p.sessionId));
+      const knownSessionIds = knownIds;
       const sweptDirs = /* @__PURE__ */ new Set();
       for (const p of persistedSessions) {
         if (sweptDirs.has(p.directory)) continue;
@@ -24136,7 +24291,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     }
     if (persistedSessions.length > 0) {
       try {
-        const { awaitClaudeVersionReady } = await import('./pinnedClaudeCode-8SZDu7O-.mjs');
+        const { awaitClaudeVersionReady } = await import('./pinnedClaudeCode-BO0Qs_kE.mjs');
         await awaitClaudeVersionReady();
       } catch {
       }
@@ -24393,7 +24548,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-DIYulmdV.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-DjAVEyn3.mjs');
     const workflowProjectRoots = () => {
       const dirs = /* @__PURE__ */ new Set();
       for (const s of pidToTrackedSession.values()) {

package/dist/{run-DKAROgSg.mjs → run-CocRShOR.mjs}

@@ -1,4 +1,4 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { aj as applyClaudeProxyEnv, ak as composeSessionId, al as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, am as generateHookSettings } from './run-CEp9YpUZ.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { aj as applyClaudeProxyEnv, ak as composeSessionId, al as generateFriendlyName, c as connectToHypha, a as createSessionStore, r as registerMachineService, am as generateHookSettings } from './run-BBBr4jkI.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';

package/dist/{scheduler-DIYulmdV.mjs → scheduler-DjAVEyn3.mjs}

@@ -1,4 +1,4 @@
-import { f as resolveProjectRoot, C as listWorkflows, D as isWorkflowEnabled, E as workflowSchedules, F as inZone, w as runWorkflow, G as cronMatches } from './run-CEp9YpUZ.mjs';
+import { f as resolveProjectRoot, C as listWorkflows, D as isWorkflowEnabled, E as workflowSchedules, F as inZone, w as runWorkflow, G as cronMatches } from './run-BBBr4jkI.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -6,14 +6,14 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import 'node:crypto';
 import 'node:fs';
+import 'node:path';
+import 'node:crypto';
 import 'node:child_process';
 import 'util';
 import 'http';
 import 'net';
 import 'node:os';
-import 'node:path';
 import 'node:events';
 import '@agentclientprotocol/sdk';
 import 'node:util';

package/dist/{serveCommands-Bq5Cw3mE.mjs → serveCommands-BK-wWc_i.mjs}

@@ -1,20 +1,20 @@
 import * as path from 'path';
-import { w as wantsHelp } from './cli-Dv0vM2P7.mjs';
-import './run-CEp9YpUZ.mjs';
+import { w as wantsHelp } from './cli-PWoHWBkF.mjs';
+import './run-BBBr4jkI.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
 import 'url';
 import 'child_process';
 import 'crypto';
-import 'node:crypto';
 import 'node:fs';
+import 'node:path';
+import 'node:crypto';
 import 'node:child_process';
 import 'util';
 import 'http';
 import 'net';
 import 'node:os';
-import 'node:path';
 import 'node:events';
 import '@agentclientprotocol/sdk';
 import 'node:util';
@@ -77,7 +77,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-GRfwAHgR.mjs');
+  const { connectAndGetMachine } = await import('./commands-CxfUr2Qr.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -110,7 +110,7 @@ async function serveAdd(args, machineId) {
     }
     if (sessionId && result?.url) {
       try {
-        const { autoAddSessionLink } = await import('./agentCommands-D7CV6DKL.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-DUHUBzrj.mjs');
         autoAddSessionLink(String(result.url), name, void 0, { kind: "serve", name });
       } catch {
       }
@@ -124,7 +124,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-GRfwAHgR.mjs');
+  const { connectAndGetMachine } = await import('./commands-CxfUr2Qr.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -206,7 +206,7 @@ async function serveApply(args, machineId) {
     console.log(`URL: ${result.url}`);
     if (params.sessionId && result?.url) {
       try {
-        const { autoAddSessionLink } = await import('./agentCommands-D7CV6DKL.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-DUHUBzrj.mjs');
         const prevSession = process.env.SVAMP_SESSION_ID;
         process.env.SVAMP_SESSION_ID = String(params.sessionId);
         try {
@@ -227,7 +227,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-GRfwAHgR.mjs');
+  const { connectAndGetMachine } = await import('./commands-CxfUr2Qr.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -237,7 +237,7 @@ async function serveRemove(args, machineId) {
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     await machine.serveRemove({ name });
-    const { removeSessionLinkByService } = await import('./agentCommands-D7CV6DKL.mjs');
+    const { removeSessionLinkByService } = await import('./agentCommands-DUHUBzrj.mjs');
     removeSessionLinkByService("serve", name);
     console.log(`Mount '${name}' removed.`);
   } catch (err) {
@@ -249,7 +249,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-GRfwAHgR.mjs');
+  const { connectAndGetMachine } = await import('./commands-CxfUr2Qr.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -283,7 +283,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-GRfwAHgR.mjs');
+  const { connectAndGetMachine } = await import('./commands-CxfUr2Qr.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{sideband-C83128hf.mjs → sideband-5ck3CDWM.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, M as loadMachineContext, N as buildMachineInstructions, O as machineToolsForRole, P as buildMachineTools } from './run-CEp9YpUZ.mjs';
+import { R as READ_ONLY_TOOLS, M as loadMachineContext, N as buildMachineInstructions, O as machineToolsForRole, P as buildMachineTools } from './run-BBBr4jkI.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';
@@ -7,13 +7,13 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import 'node:crypto';
 import 'node:fs';
+import 'node:path';
+import 'node:crypto';
 import 'util';
 import 'http';
 import 'net';
 import 'node:os';
-import 'node:path';
 import 'node:events';
 import '@agentclientprotocol/sdk';
 import 'node:util';