svamp-cli 0.2.331 → 0.2.332

package/dist/{run-CSNL62FQ.mjs → run-DGhVoN3s.mjs}

@@ -3738,7 +3738,7 @@ class ServeManager {
   /**
    * Get the public URL for a mount (mount-specific subdomain).
    * For `access: 'link'` mounts, the subdomain itself carries the capability —
-   * the tunnel registers a long random suffix (~128 bits of entropy), so the
+   * the tunnel registers a long random suffix (~88 bits of entropy (randomBytes(11), 22 hex chars)), so the
    * URL is identical in shape to other tiers, just longer. Content serves
    * from the root, so HTML with absolute paths (`/style.css`, `/app.js`)
    * works unchanged.
@@ -8332,7 +8332,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
           }
           const deps = buildSessionDeps(rpc, { cwd, ownerEmail: owner });
           const sender = { name: context?.user?.email || context?.user?.id || "user", kind: "user", verified: true };
-          const { toolsForRole } = await import('./sideband-S3ycJa01.mjs');
+          const { toolsForRole } = await import('./sideband--9vWYqKA.mjs');
           const r2 = await runWiseAgent({ message: params.message, sender, config: { tools: toolsForRole(role2) }, deps, transport, model: resolved.model });
           return fmt(r2);
         }
@@ -8421,6 +8421,33 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
   };
   const _caps = statelessDispatchCaps();
   const statelessLimiter = new StatelessDispatchLimiter(_caps.concurrent, _caps.perSender);
+  const MAX_RECEIVE_POLLS_PER_CHANNEL = Math.max(
+    1,
+    Number(process.env.SVAMP_MAX_CHANNEL_RECEIVE_POLLS) || 16
+  );
+  const _receivePolls = /* @__PURE__ */ new Map();
+  const acquireReceiveSlot = (channelId) => {
+    const n = _receivePolls.get(channelId) || 0;
+    if (n >= MAX_RECEIVE_POLLS_PER_CHANNEL) return false;
+    _receivePolls.set(channelId, n + 1);
+    return true;
+  };
+  const releaseReceiveSlot = (channelId) => {
+    const n = (_receivePolls.get(channelId) || 1) - 1;
+    if (n <= 0) _receivePolls.delete(channelId);
+    else _receivePolls.set(channelId, n);
+  };
+  const _outboxCache = /* @__PURE__ */ new Map();
+  const getOutbox = (dir) => {
+    let ob = _outboxCache.get(dir);
+    if (!ob) {
+      ob = new ChannelOutbox(dir);
+      _outboxCache.set(dir, ob);
+    } else {
+      ob.reload();
+    }
+    return ob;
+  };
   const dispatchStateless = async (c, dir, kwargs, context) => {
     const u = context?.user;
     const r = resolveSender(c, {
@@ -8437,7 +8464,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
       return { ok: false, call_id: callId, status: "busy", error: "channel is busy (too many concurrent requests) \u2014 retry shortly" };
     }
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-CWkWkrZF.mjs');
+    const { queryCore } = await import('./commands-C2X-uElg.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     let thrownSessionId;
@@ -8539,15 +8566,22 @@ ${d?.error || "not found"}`;
         const waitRaw = Number(kwargs.wait ?? 25);
         const waitSec = Number.isFinite(waitRaw) ? waitRaw : 25;
         const waitMs = Math.min(Math.max(0, waitSec * 1e3), 6e4);
-        const outbox = new ChannelOutbox(dir);
-        const deadline = Date.now() + waitMs;
-        for (; ; ) {
-          const replies = outbox.since(c.id, cursor, r.sender.name, kwargs.correlationId);
-          if (replies.length || Date.now() >= deadline) {
-            return { ok: true, replies, cursor: outbox.cursor(c.id) };
+        if (!acquireReceiveSlot(c.id)) {
+          return { error: "busy: too many concurrent receive polls on this channel \u2014 retry shortly", retryable: true };
+        }
+        try {
+          const outbox = getOutbox(dir);
+          const deadline = Date.now() + waitMs;
+          for (; ; ) {
+            const replies = outbox.since(c.id, cursor, r.sender.name, kwargs.correlationId);
+            if (replies.length || Date.now() >= deadline) {
+              return { ok: true, replies, cursor: outbox.cursor(c.id) };
+            }
+            await new Promise((resolve) => setTimeout(resolve, 500));
+            outbox.reload();
           }
-          await new Promise((resolve) => setTimeout(resolve, 500));
-          outbox.reload();
+        } finally {
+          releaseReceiveSlot(c.id);
         }
       },
       // Safety-restricted file upload (#0093). Deny-by-default: only channels whose
@@ -15783,8 +15817,28 @@ const SENSITIVE_ENV_VARS = [
   "GH_TOKEN",
   "NPM_TOKEN",
   "DOCKER_PASSWORD",
-  "DOCKER_CONFIG"
+  "DOCKER_CONFIG",
+  // #1110: svamp's own persisted credentials (written by `svamp daemon codex-auth` /
+  // `kimi-auth` / `wise-agent auth`, and by the generic LLM_* aliases).
+  "OPENAI_API_KEY",
+  "GEMINI_API_KEY",
+  "XAI_API_KEY",
+  "ANTHROPIC_ADMIN_KEY",
+  "LLM_API_KEY",
+  "CLOUDFLARE_API_TOKEN",
+  "R2_ACCESS_KEY_ID",
+  "R2_SECRET_ACCESS_KEY",
+  "X_API_KEY"
 ];
+const CREDENTIAL_NAME_RE = /(^|_)(KEY|APIKEY|TOKEN|SECRET|PASSWORD|CREDENTIALS)$/;
+const CREDENTIAL_SWEEP_ALLOWLIST = /* @__PURE__ */ new Set([
+  "ANTHROPIC_API_KEY",
+  "ANTHROPIC_AUTH_TOKEN"
+]);
+function isCredentialEnvName(key) {
+  if (CREDENTIAL_SWEEP_ALLOWLIST.has(key)) return false;
+  return CREDENTIAL_NAME_RE.test(key);
+}
 async function stageCredentialsForSharing(sessionId) {
   const realHome = homedir$1();
   const realClaudeDir = join$1(realHome, ".claude");
@@ -15858,6 +15912,9 @@ function sanitizeEnvForSharing(env) {
   for (const key of SENSITIVE_ENV_VARS) {
     delete sanitized[key];
   }
+  for (const key of Object.keys(sanitized)) {
+    if (isCredentialEnvName(key)) delete sanitized[key];
+  }
   return sanitized;
 }
 async function sweepOrphanedStagedHomes(activeSessionIds) {
@@ -15900,6 +15957,7 @@ async function copyDirRecursive(src, dest) {
 
 var credentialStaging = /*#__PURE__*/Object.freeze({
     __proto__: null,
+    isCredentialEnvName: isCredentialEnvName,
     sanitizeEnvForSharing: sanitizeEnvForSharing,
     stageCredentialsForSharing: stageCredentialsForSharing,
     sweepOrphanedStagedHomes: sweepOrphanedStagedHomes
@@ -17092,7 +17150,8 @@ function planLogPrune(files, policy = DEFAULT_LOG_PRUNE_POLICY, nowMs = Date.now
   const overCount = keepFiles > 0 ? perStart.slice(keepFiles) : perStart;
   const tooOld = maxAgeMs > 0 ? perStart.filter((f) => nowMs - f.mtimeMs > maxAgeMs) : [];
   const deleteFiles = [...new Set([...overCount, ...tooOld].map((f) => f.name))];
-  const truncateFiles = files.filter((f) => APPEND_ONLY_LOGS.includes(f.name) && !excluded.has(f.name)).filter((f) => policy.maxBytes > 0 && f.size > policy.maxBytes).map((f) => ({ name: f.name, size: f.size }));
+  const doomed = new Set(deleteFiles);
+  const truncateFiles = files.filter((f) => (APPEND_ONLY_LOGS.includes(f.name) || isPerStartLog(f.name)) && !doomed.has(f.name)).filter((f) => policy.maxBytes > 0 && f.size > policy.maxBytes).map((f) => ({ name: f.name, size: f.size }));
   return { deleteFiles, truncateFiles };
 }
 function resolveLogPrunePolicy(env = process.env) {
@@ -17114,6 +17173,40 @@ function tailSlice(buf, tailBytes) {
   return nl >= 0 && nl + 1 < cut.length ? cut.subarray(nl + 1) : cut;
 }
 
+const CARRIER_FIELDS = ["message", "error", "detail", "reason", "description"];
+function formatLogArg(a) {
+  if (typeof a === "string") return a;
+  if (a instanceof Error) return a.stack || `${a.name}: ${a.message}`;
+  if (a === void 0) return "undefined";
+  if (a === null) return "null";
+  try {
+    const s = JSON.stringify(a);
+    if (s === void 0 || s === "{}") return String(a);
+    return s;
+  } catch {
+    try {
+      return String(a);
+    } catch {
+      return "[unserializable]";
+    }
+  }
+}
+function formatLogArgs(args) {
+  return args.map(formatLogArg).join(" ");
+}
+function describeRejectionReason(reason) {
+  if (typeof reason === "string") return reason;
+  if (reason instanceof Error) return `${reason.name}: ${reason.message}`;
+  if (reason && typeof reason === "object") {
+    for (const f of CARRIER_FIELDS) {
+      const v = reason[f];
+      if (typeof v === "string" && v.trim() !== "") return v;
+      if (v instanceof Error) return `${v.name}: ${v.message}`;
+    }
+  }
+  return formatLogArg(reason);
+}
+
 function isWorkflowEnabled(wf) {
   return wf.enabled !== false;
 }
@@ -17135,6 +17228,12 @@ function validateWorkflowName(name) {
 function workflowPath(projectRoot, name) {
   return join$1(workflowsDir(projectRoot), `${validateWorkflowName(name)}.yaml`);
 }
+function resolveWorkflowPath(projectRoot, name) {
+  const canonical = workflowPath(projectRoot, name);
+  if (existsSync(canonical)) return canonical;
+  const alt = join$1(workflowsDir(projectRoot), `${validateWorkflowName(name)}.yml`);
+  return existsSync(alt) ? alt : canonical;
+}
 function normalizeOn(on) {
   if (!on || typeof on !== "object") {
     return void 0;
@@ -17231,7 +17330,7 @@ function listWorkflows(projectRoot) {
 function getWorkflow(projectRoot, name) {
   let p;
   try {
-    p = workflowPath(projectRoot, name);
+    p = resolveWorkflowPath(projectRoot, name);
   } catch {
     return null;
   }
@@ -17245,7 +17344,7 @@ function getWorkflow(projectRoot, name) {
 function rawWorkflow(projectRoot, name) {
   let p;
   try {
-    p = workflowPath(projectRoot, name);
+    p = resolveWorkflowPath(projectRoot, name);
   } catch {
     return null;
   }
@@ -17258,6 +17357,13 @@ function saveWorkflow(projectRoot, wf) {
   const tmp = `${path}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
   writeFileSync$1(tmp, serializeWorkflow(wf));
   renameSync(tmp, path);
+  const alt = join$1(dir, `${validateWorkflowName(wf.name)}.yml`);
+  if (alt !== path && existsSync(alt)) {
+    try {
+      unlinkSync$1(alt);
+    } catch {
+    }
+  }
 }
 function setWorkflowEnabled(projectRoot, name, enabled) {
   const wf = getWorkflow(projectRoot, name);
@@ -17269,7 +17375,7 @@ function setWorkflowEnabled(projectRoot, name, enabled) {
   return next;
 }
 function removeWorkflow(projectRoot, name) {
-  const p = workflowPath(projectRoot, name);
+  const p = resolveWorkflowPath(projectRoot, name);
   if (!existsSync(p)) return false;
   try {
     unlinkSync$1(p);
@@ -19328,17 +19434,23 @@ function isLoopActive(directory, sessionId) {
   const s = readLoopState(directory, sessionId);
   return !!s && s.active !== false && s.phase !== "dormant" && !isTerminalLoopPhase(s.phase);
 }
-function loopOwnerSession(directory, sessionId) {
-  const s = readLoopState(directory, sessionId);
-  if (!s || s.active === false || s.phase === "dormant" || isTerminalLoopPhase(s.phase)) return null;
-  return typeof s.session_id === "string" ? s.session_id : null;
-}
 function isLoopActiveForSession(directory, sessionId) {
   const s = readLoopState(directory, sessionId);
   if (!s || s.active === false || s.phase === "dormant" || isTerminalLoopPhase(s.phase)) return false;
   if (typeof s.session_id !== "string") return true;
   return s.session_id === sessionId;
 }
+function loopExistsForSession(directory, sessionId) {
+  const s = readLoopState(directory, sessionId);
+  if (!s || s.active === false || isTerminalLoopPhase(s.phase)) return false;
+  if (typeof s.session_id !== "string") return true;
+  return s.session_id === sessionId;
+}
+function loopOwnerSessionIncludingDormant(directory, sessionId) {
+  const s = readLoopState(directory, sessionId);
+  if (!s || s.active === false || isTerminalLoopPhase(s.phase)) return null;
+  return typeof s.session_id === "string" ? s.session_id : null;
+}
 function isLoopArmedForSession(directory, sessionId) {
   const s = readLoopState(directory, sessionId);
   if (!s || s.active === false || s.phase !== "dormant") return false;
@@ -20052,7 +20164,7 @@ function ensureHomeDir() {
     mkdirSync(LOGS_DIR, { recursive: true });
   }
 }
-function pruneDaemonLogs() {
+function pruneDaemonLogs(exclude = []) {
   try {
     const policy = resolveLogPrunePolicy(process.env);
     const entries = readdirSync$1(LOGS_DIR).map((name) => {
@@ -20063,7 +20175,7 @@ function pruneDaemonLogs() {
         return null;
       }
     }).filter((e) => e !== null);
-    const plan = planLogPrune(entries, policy);
+    const plan = planLogPrune(entries, policy, Date.now(), exclude);
     for (const name of plan.deleteFiles) {
       try {
         unlinkSync(join(LOGS_DIR, name));
@@ -20085,10 +20197,13 @@ function createLogger() {
   ensureHomeDir();
   pruneDaemonLogs();
   const logFile = join(LOGS_DIR, `daemon-${(/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-")}.log`);
+  const sweepMs = Math.max(6e4, Number(process.env.SVAMP_LOG_PRUNE_INTERVAL_MS) || 36e5);
+  const sweepTimer = setInterval(() => pruneDaemonLogs([basename$1(logFile)]), sweepMs);
+  if (typeof sweepTimer.unref === "function") sweepTimer.unref();
   return {
     logFilePath: logFile,
     log: (...args) => {
-      const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
+      const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] ${formatLogArgs(args)}
 `;
       fs$1.appendFile(logFile, line).catch(() => {
       });
@@ -20097,7 +20212,7 @@ function createLogger() {
       }
     },
     error: (...args) => {
-      const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${args.map((a) => typeof a === "string" ? a : JSON.stringify(a)).join(" ")}
+      const line = `[${(/* @__PURE__ */ new Date()).toISOString()}] ERROR: ${formatLogArgs(args)}
 `;
       fs$1.appendFile(logFile, line).catch(() => {
       });
@@ -20254,7 +20369,7 @@ async function startDaemon(options) {
   const UNHANDLED_REJECTION_WINDOW_MS = 6e4;
   process.on("unhandledRejection", (reason) => {
     if (shutdownRequested) return;
-    const msg = String(reason);
+    const msg = describeRejectionReason(reason);
     logger.error("Unhandled rejection:", reason);
     const isTransient = TRANSIENT_REJECTION_PATTERNS.some((p) => msg.toLowerCase().includes(p.toLowerCase()));
     const isSessionLoss = msg.toLowerCase().includes("session does not exist");
@@ -20383,7 +20498,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-CovUtOYv.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-DD47Krr1.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -20405,7 +20520,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-CovUtOYv.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-DD47Krr1.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const incoming = [{
@@ -20426,7 +20541,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { dropServiceLinks } = await import('./agentCommands-CovUtOYv.mjs');
+      const { dropServiceLinks } = await import('./agentCommands-DD47Krr1.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       if (dropServiceLinks(config, "serve", mountName)) {
@@ -22879,11 +22994,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-CVBhR9Cj.mjs');
+              const { issueRpc } = await import('./rpc-DObWvEis.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-OmhzsDGP.mjs');
+              const { workflowRpc } = await import('./rpc-Bv6_c-xW.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -23108,8 +23223,21 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
                 verify_errors: 0,
                 // fresh verification budget on re-arm
                 stall_hinted: false,
-                resumed_at: Date.now()
+                resumed_at: Date.now(),
                 // #0156: re-arm the stall hint
+                // A re-arm starts a NEW work batch, so the previous batch's progress
+                // baseline must not carry over. assessLoopProgress tracks a MONOTONIC
+                // MINIMUM over the retained history, and a durable loop only parks
+                // dormant once the oracle reads 0 pending — so the old tail is
+                // `pending: 0` and best === 0 forever. Without this reset the first
+                // new marker (pending >= 1) can never beat it, the loop reads STUCK
+                // from checkpoint 3 onward while it is genuinely resolving issues,
+                // `auto_resumes` never resets (updateLoopProgress keys that off the
+                // same signal), and the finite #0958 cap burns down to a terminal
+                // gave_up. That contradicts the invariant that a slow-but-PRODUCTIVE
+                // loop is never killed by the cap.
+                progress_history: [],
+                auto_resumes: 0
               });
             } catch {
             }
@@ -23591,11 +23719,11 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-CVBhR9Cj.mjs');
+              const { issueRpc } = await import('./rpc-DObWvEis.mjs');
               return issueRpc(params?.cwd || directory, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-OmhzsDGP.mjs');
+              const { workflowRpc } = await import('./rpc-Bv6_c-xW.mjs');
               return workflowRpc(params?.cwd || directory, params || {});
             },
             onRipgrep: async (args, cwd) => {
@@ -23938,7 +24066,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
           };
           try {
             if (!ls.acp_budget_warned && acpCumTokens === 0 && (ledger?.turns || 0) >= 1 && ls.budget && (ls.budget.max_tokens || ls.budget.max_tokens_per_hour)) {
-              sessionService.pushMessage({ type: "message", message: "\u26A0\uFE0F A token/rate cost cap (--max-tokens / --max-tokens-per-hour) is INERT for this agent \u2014 it exposes no token usage, so this loop is bounded only by --max (iterations) and --max-runtime-sec. Set one of those to cap cost.", level: "warning" }, "event");
+              sessionService.pushMessage({ type: "message", message: "\u26A0\uFE0F The token/rate cost cap (--max-tokens-per-hour) is INERT for this agent \u2014 it exposes no token usage, so this loop is bounded only by --max (iterations) and --max-runtime-sec. Set one of those to cap cost.", level: "warning" }, "event");
               ls.acp_budget_warned = true;
             }
             const acpMaxExt = resolveMaxExtensions(process.env.SVAMP_LOOP_MAX_EXTENSIONS);
@@ -24259,7 +24387,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
       const wasInMemory = teardownTrackedSession(sessionId);
       idleTriggerTracker.forget(sessionId);
       const markedArchived = markSessionAsArchived(sessionId);
-      if (loopDir && isLoopActiveForSession(loopDir, sessionId)) {
+      if (loopDir && loopExistsForSession(loopDir, sessionId)) {
         deactivateLoop(loopDir, sessionId);
         logger.log(`Deactivated loop for archived session ${sessionId}`);
       }
@@ -24317,7 +24445,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
       teardownTrackedSession(sessionId);
       idleTriggerTracker.forget(sessionId);
       deletePersistedSession(sessionId);
-      if (loopDir && isLoopActiveForSession(loopDir, sessionId)) {
+      if (loopDir && loopExistsForSession(loopDir, sessionId)) {
         deactivateLoop(loopDir, sessionId);
       }
       logger.log(`Session ${sessionId} deleted`);
@@ -24658,7 +24786,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
         try {
           for (const ent of readdirSync$1(join(p.directory, ".svamp"), { withFileTypes: true })) {
             if (!ent.isDirectory() || knownSessionIds.has(ent.name)) continue;
-            const owner = loopOwnerSession(p.directory, ent.name);
+            const owner = loopOwnerSessionIncludingDormant(p.directory, ent.name);
             if (owner && !knownSessionIds.has(owner)) {
               deactivateLoop(p.directory, ent.name);
               logger.log(`[loop] Deactivated stale loop-state for ${ent.name} in ${p.directory} (owner no longer known)`);
@@ -24666,7 +24794,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
           }
         } catch {
         }
-        const legacyOwner = loopOwnerSession(p.directory);
+        const legacyOwner = loopOwnerSessionIncludingDormant(p.directory);
         if (legacyOwner && !knownSessionIds.has(legacyOwner)) {
           deactivateLoop(p.directory);
           logger.log(`[loop] Deactivated stale legacy loop-state in ${p.directory} (owner session ${legacyOwner} no longer known)`);
@@ -24727,7 +24855,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
                 try {
                   const lp = join(getLoopDir(persisted.directory, persisted.sessionId), "loop-state.json");
                   const cur = readLoopState(persisted.directory, persisted.sessionId);
-                  if (cur) atomicWriteLoopState(lp, { ...cur, active: true, phase: "continue", completed_at: void 0, verify_errors: 0, resumed_at: Date.now() });
+                  if (cur) atomicWriteLoopState(lp, { ...cur, active: true, phase: "continue", completed_at: void 0, verify_errors: 0, resumed_at: Date.now(), progress_history: [], auto_resumes: 0 });
                 } catch {
                 }
               }
@@ -24865,13 +24993,16 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     }
     if (sessionsToLoopResume.length > 0 && !options?.noAutoContinue) {
       logger.log(`Resuming loop for ${sessionsToLoopResume.length} session(s)...`);
-      for (const { sessionId, directory: sessDir } of sessionsToLoopResume) {
+      const LOOP_RESUME_STEP_MS = Number(process.env.SVAMP_AUTO_CONTINUE_STEP_MS) || 300;
+      const LOOP_RESUME_MAX_SPREAD_MS = Number(process.env.SVAMP_AUTO_CONTINUE_MAX_SPREAD_MS) || 6e4;
+      sessionsToLoopResume.forEach(({ sessionId, directory: sessDir }, loopResumeIndex) => {
+        const loopResumeDelay = 2e3 + Math.min(loopResumeIndex * LOOP_RESUME_STEP_MS, LOOP_RESUME_MAX_SPREAD_MS) + Math.floor(Math.random() * LOOP_RESUME_STEP_MS);
         try {
           const tracked = Array.from(pidToTrackedSession.values()).find((s) => s.svampSessionId === sessionId);
           const rpc = tracked?.sessionRPCHandlers;
           if (!rpc) {
             logger.log(`Session ${sessionId} RPC handlers not found for loop resume`);
-            continue;
+            return;
           }
           const loopTurnFingerprint = () => {
             try {
@@ -24897,7 +25028,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
               if (!isLoopActiveForSession(sessDir, sessionId)) return;
               const fpBefore = loopTurnFingerprint();
               await sendResume("");
-              const graceMs = Math.max(5e3, Number(process.env.SVAMP_LOOP_RESUME_WATCHDOG_MS) || 45e3);
+              const graceMs = Math.max(5e3, Number(process.env.SVAMP_LOOP_RESUME_WATCHDOG_MS) || 45e3) + Math.min(loopResumeIndex * LOOP_RESUME_STEP_MS, LOOP_RESUME_MAX_SPREAD_MS);
               setTimeout(() => {
                 try {
                   if (!isLoopActiveForSession(sessDir, sessionId)) return;
@@ -24914,11 +25045,11 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
             } catch (err) {
               logger.log(`Failed to resume loop for session ${sessionId}: ${err.message}`);
             }
-          }, 2e3);
+          }, loopResumeDelay);
         } catch (err) {
           logger.log(`Failed to find session service for loop resume ${sessionId}: ${err.message}`);
         }
-      }
+      });
     }
     (async () => {
       try {
@@ -24928,27 +25059,17 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
         logger.log(`[ARTIFACT SYNC] Background init failed: ${err.message}`);
       }
     })();
-    let appToken;
-    try {
-      appToken = await server.generateToken({});
-      logger.log(`App connection token generated`);
-    } catch (err) {
-      logger.log("Could not generate token (server may not support it):", err);
-    }
     console.log("Svamp daemon started successfully!");
     console.log(`  Machine ID: ${machineId}`);
     console.log(`  Hypha server: ${hyphaServerUrl}`);
     console.log(`  Workspace: ${server.config.workspace}`);
-    if (appToken) {
-      console.log(`  App token: ${appToken}`);
-    }
     console.log(`  Service: svamp-machine-${machineId}`);
     console.log(`  Log file: ${logger.logFilePath}`);
     const HEARTBEAT_INTERVAL_MS = 1e4;
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-DDw3YLzH.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-BvtNZ0pl.mjs');
     const workflowProjectRoots = () => {
       const dirs = /* @__PURE__ */ new Set();
       for (const s of pidToTrackedSession.values()) {

package/dist/{scheduler-DDw3YLzH.mjs → scheduler-BvtNZ0pl.mjs}

@@ -1,4 +1,4 @@
-import { f as resolveProjectRoot, D as listWorkflows, E as isWorkflowEnabled, F as workflowSchedules, G as inZone, w as runWorkflow, H as cronMatches } from './run-CSNL62FQ.mjs';
+import { f as resolveProjectRoot, D as listWorkflows, E as isWorkflowEnabled, F as workflowSchedules, G as inZone, w as runWorkflow, H as cronMatches } from './run-DGhVoN3s.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{serveCommands-BQ0jhFUR.mjs → serveCommands-CEM708Ls.mjs}

@@ -1,6 +1,6 @@
 import * as path from 'path';
-import { w as wantsHelp } from './cli-Cd_6Xp2x.mjs';
-import './run-CSNL62FQ.mjs';
+import { w as wantsHelp } from './cli-CdYVO7ce.mjs';
+import './run-DGhVoN3s.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -77,7 +77,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CWkWkrZF.mjs');
+  const { connectAndGetMachine } = await import('./commands-C2X-uElg.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -110,7 +110,7 @@ async function serveAdd(args, machineId) {
     }
     if (sessionId && result?.url) {
       try {
-        const { autoAddSessionLink } = await import('./agentCommands-CovUtOYv.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-DD47Krr1.mjs');
         autoAddSessionLink(String(result.url), name, void 0, { kind: "serve", name });
       } catch {
       }
@@ -124,7 +124,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CWkWkrZF.mjs');
+  const { connectAndGetMachine } = await import('./commands-C2X-uElg.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -209,7 +209,7 @@ async function serveApply(args, machineId) {
     console.log(`URL: ${result.url}`);
     if (params.sessionId && result?.url) {
       try {
-        const { autoAddSessionLink } = await import('./agentCommands-CovUtOYv.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-DD47Krr1.mjs');
         const prevSession = process.env.SVAMP_SESSION_ID;
         process.env.SVAMP_SESSION_ID = String(params.sessionId);
         try {
@@ -230,7 +230,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CWkWkrZF.mjs');
+  const { connectAndGetMachine } = await import('./commands-C2X-uElg.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -240,7 +240,7 @@ async function serveRemove(args, machineId) {
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     await machine.serveRemove({ name });
-    const { removeSessionLinkByService } = await import('./agentCommands-CovUtOYv.mjs');
+    const { removeSessionLinkByService } = await import('./agentCommands-DD47Krr1.mjs');
     removeSessionLinkByService("serve", name);
     console.log(`Mount '${name}' removed.`);
   } catch (err) {
@@ -252,7 +252,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-CWkWkrZF.mjs');
+  const { connectAndGetMachine } = await import('./commands-C2X-uElg.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -286,7 +286,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-CWkWkrZF.mjs');
+  const { connectAndGetMachine } = await import('./commands-C2X-uElg.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{sideband-S3ycJa01.mjs → sideband--9vWYqKA.mjs}

@@ -1,4 +1,4 @@
-import { R as READ_ONLY_TOOLS, N as loadMachineContext, O as buildMachineInstructions, P as machineToolsForRole, Q as buildMachineTools } from './run-CSNL62FQ.mjs';
+import { R as READ_ONLY_TOOLS, N as loadMachineContext, O as buildMachineInstructions, P as machineToolsForRole, Q as buildMachineTools } from './run-DGhVoN3s.mjs';
 import 'node:child_process';
 import 'os';
 import 'fs/promises';