svamp-cli 0.2.346 → 0.2.356

package/dist/{hookSettings-DYMTUgVA.mjs → hookSettings-FFc1pi8j.mjs}

@@ -1,5 +1,5 @@
 import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import * as fs from 'fs';
-import { mkdirSync, chmodSync, writeFileSync, unlinkSync, existsSync, readFileSync, renameSync as renameSync$1 } from 'fs';
+import { statSync, mkdirSync, chmodSync, writeFileSync, unlinkSync, existsSync, readFileSync, renameSync as renameSync$1 } from 'fs';
 import * as path from 'path';
 import path__default, { join } from 'path';
 import { randomUUID as randomUUID$1, randomBytes as randomBytes$1, createHash as createHash$1, timingSafeEqual } from 'node:crypto';
@@ -17,12 +17,12 @@ import * as net from 'net';
 import { createServer } from 'net';
 import { homedir, platform, arch } from 'os';
 import { d as getFrpsSubdomainHost, e as getFrpsServerPort, f as getFrpsServerAddr, h as getHyphaServerUrl } from './instance-CeHz5C8v.mjs';
-import { S as ServeAuth, s as sanitizeLoginReturn, h as hasCookieToken, a as stripServeTokenParam, b as sanitizeForwardHeaders, c as stripServeAuthCookie } from './serveAuth-DbVLRCRR.mjs';
-import { existsSync as existsSync$1, mkdirSync as mkdirSync$1, readFileSync as readFileSync$1, writeFileSync as writeFileSync$1, chmodSync as chmodSync$1, rmSync, cpSync, realpathSync, readdirSync, statSync, renameSync, appendFileSync, openSync, readSync, closeSync, fstatSync, writeSync, unlinkSync as unlinkSync$1 } from 'node:fs';
+import { S as ServeAuth, s as sanitizeLoginReturn, h as hasCookieToken, a as stripServeTokenParam, b as sanitizeForwardHeaders, c as stripServeAuthCookie } from './serveAuth-4M0vwMyj.mjs';
+import { existsSync as existsSync$1, mkdirSync as mkdirSync$1, readFileSync as readFileSync$1, writeFileSync as writeFileSync$1, chmodSync as chmodSync$1, renameSync, rmSync, cpSync, realpathSync, readdirSync, statSync as statSync$1, appendFileSync, openSync, readSync, closeSync, fstatSync, writeSync, unlinkSync as unlinkSync$1 } from 'node:fs';
 import os, { homedir as homedir$1 } from 'node:os';
 import { join as join$1, extname, resolve, sep, basename, dirname } from 'node:path';
 import { e as envFlagEnabled, a as envFlagDisabled } from './envFlag-COOuJ3AH.mjs';
-import { normalizeProxyUrl, resolveHyphaProxyUrl, applyClaudeProxyEnv } from './claudeAuth-iAerdaMr.mjs';
+import { normalizeProxyUrl, resolveHyphaProxyUrl, applyClaudeProxyEnv } from './claudeAuth-C0wc1GTM.mjs';
 import { CODEX_PROVIDER_KEY_ENV } from './codexProvider-BtxYc5Rj.mjs';
 import { spawn as spawn$1 } from 'node:child_process';
 import { b as applyInboxClear } from './friendlyName-1UZcyDhu.mjs';
@@ -74,6 +74,19 @@ function levelToRole(level) {
   const entry = Object.entries(ROLE_HIERARCHY).find(([, v]) => v === level);
   return entry?.[0] ?? null;
 }
+function isOwnerEquivalentStrict(context, sharing) {
+  if (!context?.user) return true;
+  if (isSameOwnerWorkspace(context)) return true;
+  if (!sharing) return false;
+  const userEmail = context.user.email;
+  if (userEmail && sharing.owner && userEmail.toLowerCase() === sharing.owner.toLowerCase()) return true;
+  return false;
+}
+function isAdminEquivalentStrict(context, sharing) {
+  if (!context?.user) return true;
+  if (isSameOwnerWorkspace(context)) return true;
+  return !!sharing && getEffectiveRole(context, sharing) === "admin";
+}
 function authorizeRequest(context, sharing, requiredRole = "view") {
   if (!context?.user) return;
   if (isSameOwnerWorkspace(context)) return;
@@ -124,6 +137,18 @@ function workflowOpMinRole(op) {
   if (typeof op === "string" && WORKFLOW_READ_OPS.has(op)) return "view";
   return "admin";
 }
+function issueVerifyRefusalReason(params, isOwner) {
+  if (isOwner) return null;
+  const p = params;
+  if (!p || typeof p !== "object") return null;
+  const op = typeof p.op === "string" ? p.op : "";
+  if (op !== "add" && op !== "edit" && op !== "triage") return null;
+  const v = p.verify;
+  const structuredIsCommand = !!v && typeof v === "object" && v.type === "command";
+  const flatCommand = typeof p.verifyCmd === "string" && p.verifyCmd.length > 0;
+  if (!structuredIsCommand && !flatCommand) return null;
+  return "Access denied: only the session owner may attach a command verify-cmd. It is executed by the daemon outside the sandbox when the issue is closed. Use --verify '<criterion>' (an agent-evaluated check) or --manual instead.";
+}
 
 function toSchema(t) {
   return { name: t.name, description: t.description, parameters: t.parameters || { type: "object", properties: {} } };
@@ -279,6 +304,17 @@ const DEFAULT_PROBE_FAILURE_THRESHOLD = 3;
 const MAX_RESTART_DELAY_S = 300;
 const BACKOFF_RESET_WINDOW_MS = 6e4;
 const MAX_LOG_LINES = 300;
+function checkWorkdir(workdir, stat = statSync) {
+  if (!workdir) return null;
+  try {
+    if (!stat(workdir).isDirectory()) return `workdir is not a directory: ${workdir}`;
+    return null;
+  } catch (err) {
+    if (err?.code === "ENOENT") return `workdir does not exist: ${workdir}`;
+    if (err?.code === "EACCES") return `workdir is not accessible: ${workdir}`;
+    return null;
+  }
+}
 const CRASH_LOOP_FAILURE_THRESHOLD = 10;
 function accumulateCrashLoopFailure(prev, healthy, now) {
   if (healthy) return { consecutiveFailures: 0, failureWindowStart: void 0 };
@@ -654,6 +690,16 @@ class ProcessSupervisor {
     const { spec, state } = entry;
     if (entry.deleted) return;
     state.consecutiveProbeFailures = 0;
+    const workdirProblem = checkWorkdir(spec.workdir);
+    if (workdirProblem) {
+      state.status = "failed";
+      state.stoppedAt = Date.now();
+      entry.logBuffer.push(`[supervisor] ${workdirProblem}`);
+      console.error(
+        `[SUPERVISOR] Not starting '${spec.name}': ${workdirProblem} (permanent \u2014 not retrying; fix the path or run 'svamp process restart ${spec.name}')`
+      );
+      return;
+    }
     try {
       const env = { ...process.env, ...spec.env ?? {} };
       const child = spawn(spec.command, spec.args, {
@@ -2068,9 +2114,10 @@ function serveStaticMount(req, res, opts) {
     return;
   }
   if (st.isDirectory()) {
-    const reqPath = (req.url || "/").split("?")[0];
-    if (!reqPath.endsWith("/")) {
-      res.writeHead(302, { ...CORS, Location: reqPath + "/" });
+    const normalizedPath = (relPath || "/").split("?")[0];
+    const redirectTo = ("/" + normalizedPath.replace(/^\/+/, "")).replace(/\/+$/, "") + "/";
+    if (!normalizedPath.endsWith("/")) {
+      res.writeHead(302, { ...CORS, Location: mountUrlPrefix ? mountUrlPrefix.replace(/\/$/, "") + redirectTo : redirectTo });
       res.end();
       return;
     }
@@ -2251,7 +2298,13 @@ function resolveMountOwnerEmail(suppliedOwnerEmail, callerEmail, machineOwnerEma
 function sanitizeMountForRole(mount, isAdmin) {
   if (isAdmin) return mount;
   const { linkToken: _lt, directory: _dir, process: proc, url, ...rest } = mount;
-  const safeProcess = proc ? { ...proc, env: proc.env ? Object.fromEntries(Object.keys(proc.env).map((k) => [k, "***"])) : proc.env } : proc;
+  const safeProcess = proc ? (() => {
+    const { env, workdir: _wd, command: _cmd, args: _args, ...procRest } = proc;
+    return {
+      ...procRest,
+      env: env ? Object.fromEntries(Object.keys(env).map((k) => [k, "***"])) : env
+    };
+  })() : proc;
   const safeUrl = mount.access === "link" ? void 0 : url;
   return { ...rest, process: safeProcess, ...safeUrl !== void 0 ? { url: safeUrl } : {} };
 }
@@ -3410,6 +3463,13 @@ a{color:#0969da;text-decoration:none;font-weight:500}a:hover{text-decoration:und
               res.end("Write access denied: public mounts are read-only.");
               return;
             }
+            const writeBadSeg = hiddenSegmentOf(basePath);
+            if (writeBadSeg) {
+              this.log(`Write DENY '${mountName}': blocked dotfile segment '${writeBadSeg}' (${basePath})`);
+              res.writeHead(403, { "Content-Type": "text/plain" });
+              res.end("Forbidden: hidden/dot-prefixed paths are not writable.");
+              return;
+            }
             const filePath = resolveContained();
             if (!filePath) {
               this.log(`Write DENY '${mountName}': path escapes mount root (${basePath})`);
@@ -3419,13 +3479,17 @@ a{color:#0969da;text-decoration:none;font-weight:500}a:hover{text-decoration:und
             }
             if (req.method === "PUT") {
               fs.mkdirSync(path.dirname(filePath), { recursive: true });
-              const ws = fs.createWriteStream(filePath);
+              const tmpPath = path.join(
+                path.dirname(filePath),
+                `.svamp-put-${process.pid}-${crypto.randomBytes(6).toString("hex")}.part`
+              );
+              const ws = fs.createWriteStream(tmpPath);
               let done = false;
               const cleanupPartial = () => {
                 if (done) return;
                 done = true;
                 ws.destroy();
-                fs.unlink(filePath, () => {
+                fs.unlink(tmpPath, () => {
                 });
               };
               req.on("aborted", cleanupPartial);
@@ -3434,13 +3498,25 @@ a{color:#0969da;text-decoration:none;font-weight:500}a:hover{text-decoration:und
               });
               req.pipe(ws);
               ws.on("finish", () => {
+                if (done) return;
                 done = true;
+                try {
+                  fs.renameSync(tmpPath, filePath);
+                } catch (err) {
+                  fs.unlink(tmpPath, () => {
+                  });
+                  res.writeHead(500);
+                  res.end(err?.message || "rename failed");
+                  return;
+                }
                 res.writeHead(201);
                 res.end();
               });
               ws.on("error", (err) => {
                 if (done) return;
                 done = true;
+                fs.unlink(tmpPath, () => {
+                });
                 res.writeHead(500);
                 res.end(err.message);
               });
@@ -3823,9 +3899,13 @@ function loadAccounts(svampHome) {
   if (!existsSync$1(file)) return [];
   try {
     const parsed = JSON.parse(readFileSync$1(file, "utf-8"));
-    if (!parsed || !Array.isArray(parsed.accounts)) return [];
+    if (!parsed || !Array.isArray(parsed.accounts)) {
+      console.warn(`[accounts] ${file} is present but malformed \u2014 treating as empty. Configured backend accounts will appear to have vanished; restore from a backup rather than re-adding blindly. (#1629)`);
+      return [];
+    }
     return parsed.accounts;
-  } catch {
+  } catch (err) {
+    console.warn(`[accounts] failed to read ${file}: ${err?.message || err}. Treating as empty \u2014 every configured backend account will appear to have vanished. (#1629)`);
     return [];
   }
 }
@@ -3834,7 +3914,13 @@ function saveAccounts(accounts, svampHome) {
   const dir = join$1(file, "..");
   if (!existsSync$1(dir)) mkdirSync$1(dir, { recursive: true });
   const payload = { version: 1, accounts };
-  writeFileSync$1(file, JSON.stringify(payload, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+  const tmp = `${file}.tmp-${process.pid}`;
+  writeFileSync$1(tmp, JSON.stringify(payload, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+  try {
+    chmodSync$1(tmp, 384);
+  } catch {
+  }
+  renameSync(tmp, file);
   try {
     chmodSync$1(file, 384);
   } catch {
@@ -4520,7 +4606,7 @@ function validateUpload(input) {
     if (existsSync$1(destDir)) {
       const count = readdirSync(destDir).filter((f) => {
         try {
-          return statSync(join$1(destDir, f)).isFile();
+          return statSync$1(join$1(destDir, f)).isFile();
         } catch {
           return false;
         }
@@ -4733,7 +4819,7 @@ class ChannelStore {
   list() {
     let st;
     try {
-      const s = statSync(this.dir);
+      const s = statSync$1(this.dir);
       st = { mtimeMs: s.mtimeMs, size: s.size };
     } catch {
       _channelListCache.delete(this.dir);
@@ -5202,7 +5288,7 @@ class ChannelOutbox {
   /** Current on-disk (mtimeMs, size), or (0, -1) if the file does not exist. */
   _stat() {
     try {
-      const st = statSync(this.file);
+      const st = statSync$1(this.file);
       return { mtimeMs: st.mtimeMs, size: st.size };
     } catch {
       return { mtimeMs: 0, size: -1 };
@@ -5442,6 +5528,9 @@ const SESSION_METHOD_MIN_ROLE = {
   channelReply: "admin",
   updateAgentState: "admin",
   switchMode: "admin",
+  // #1628: rotating the outpost token DESTROYS a live capability and mints a new one — admin,
+  // like outpostConnectInfo which hands the same capability out.
+  outpostRotateToken: "admin",
   restartClaude: "admin",
   archiveSession: "admin",
   readFile: "admin",
@@ -6014,7 +6103,11 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         } else if (options.sharing?.enabled && !options.sharing.owner && callerEmail) {
           options = {
             ...options,
-            sharing: { ...options.sharing, owner: callerEmail }
+            sharing: {
+              ...options.sharing,
+              owner: callerEmail,
+              ...options.sharing.allowedUsers ? { allowedUsers: options.sharing.allowedUsers.map((u) => normalizeAllowedUser(u, "spawn-explicit")) } : {}
+            }
           };
         }
         if (currentMetadata.securityContextConfig && callerEmail) {
@@ -6356,12 +6449,12 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         return { success: true };
       },
       // Shell access
-      bash: async (command, cwd, context) => {
+      bash: async (command, cwd, timeoutMs, context) => {
         authorizeRequest(context, currentMetadata.sharing, "admin");
         const { exec } = await import('child_process');
         const { homedir } = await import('os');
         return new Promise((resolve) => {
-          exec(command, { cwd: cwd || homedir(), timeout: 3e4, maxBuffer: EXEC_MAX_BUFFER }, (err, stdout, stderr) => {
+          exec(command, { cwd: cwd || homedir(), timeout: timeoutMs ?? 3e4, maxBuffer: EXEC_MAX_BUFFER }, (err, stdout, stderr) => {
             if (err) resolve(execFailureOutcome(err, stdout, stderr));
             else resolve(execSuccessOutcome(stdout, stderr));
           });
@@ -7477,7 +7570,7 @@ QUESTION: ${params.question || "Summarize this concisely."}` }
       return { ok: false, call_id: callId, status: "busy", error: "channel is busy (too many concurrent requests) \u2014 retry shortly" };
     }
     const rendered = renderMessage(c, { sender: r.sender, body: { message: kwargs.message }, callId });
-    const { queryCore } = await import('./commands-D1pZq3d4.mjs');
+    const { queryCore } = await import('./commands-B-yczgz_.mjs');
     const timeout = c.reply?.timeout_sec || 120;
     let result;
     let thrownSessionId;
@@ -7746,7 +7839,7 @@ ${d?.error || "not found"}`;
 const CHUNK_BYTES$1 = 1024 * 1024;
 const LF = 10;
 function countFileLines(path) {
-  const size = statSync(path).size;
+  const size = statSync$1(path).size;
   if (size === 0) return 0;
   const fd = openSync(path, "r");
   try {
@@ -7984,6 +8077,17 @@ function ensureOutpostToken(projectDir, session) {
   }
   return rec;
 }
+function rotateOutpostToken(projectDir, session) {
+  const rec = { version: 1, session, token: genToken(), createdAt: Date.now() };
+  const file = tokenPath(projectDir, session);
+  mkdirSync$1(dirname(file), { recursive: true });
+  writeFileSync$1(file, JSON.stringify(rec, null, 2) + "\n", { encoding: "utf-8", mode: 384 });
+  try {
+    chmodSync$1(file, 384);
+  } catch {
+  }
+  return rec;
+}
 function outpostTokenMatches(rec, presented) {
   if (!rec || typeof presented !== "string" || presented.length !== rec.token.length) return false;
   let diff = 0;
@@ -8430,10 +8534,10 @@ function formatInboxMessageXml(msg) {
   }
   if (msg.to) attrs.push(`to="${escapeXml(msg.to)}"`);
   if (msg.subject) attrs.push(`subject="${escapeXml(msg.subject)}"`);
-  if (msg.urgency) attrs.push(`urgency="${msg.urgency}"`);
+  if (msg.urgency) attrs.push(`urgency="${escapeXml(String(msg.urgency))}"`);
   if (msg.replyTo) attrs.push(`reply-to="${escapeXml(msg.replyTo)}"`);
   if (msg.threadId) attrs.push(`thread-id="${escapeXml(msg.threadId)}"`);
-  attrs.push(`timestamp="${msg.timestamp}"`);
+  attrs.push(`timestamp="${escapeXml(String(msg.timestamp))}"`);
   return `<svamp-message ${attrs.join(" ")}>
 ${msg.body}
 </svamp-message>`;
@@ -8544,7 +8648,7 @@ function countMessagesOnDisk(messagesDir, fallbackInMemory) {
   const filePath = join$1(messagesDir, "messages.jsonl");
   if (!existsSync$1(filePath)) return fallbackInMemory;
   try {
-    const st = statSync(filePath);
+    const st = statSync$1(filePath);
     const cached = messageCountCache.get(filePath);
     if (cached && cached.size === st.size && cached.mtimeMs === st.mtimeMs) return cached.count;
     let count;
@@ -8803,7 +8907,8 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
     } else if (role === "session") {
       wrappedContent = { role: "session", content: { type: "session", data: content } };
     } else {
-      const text = typeof content === "string" ? content : content?.text || content?.content || JSON.stringify(content);
+      const rawText = typeof content === "string" ? content : content?.text ?? content?.content ?? content;
+      const text = typeof rawText === "string" ? rawText : rawText && typeof rawText === "object" && typeof rawText.text === "string" ? rawText.text : JSON.stringify(content);
       wrappedContent = { role: "user", content: { type: "text", text } };
     }
     const msg = {
@@ -9099,7 +9204,21 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       }
     }
     const isBtwEcho = !!(parsed && parsed.meta && parsed.meta.btw) || !!(meta && meta.btw);
-    const coerceUserContent = (c) => typeof c === "string" ? { type: "text", text: c } : c;
+    const coerceUserText = (t, depth = 0) => {
+      if (typeof t === "string") return t;
+      if (t && typeof t === "object" && depth < 4) {
+        if (typeof t.text === "string") return t.text;
+        if (t.text && typeof t.text === "object") return coerceUserText(t.text, depth + 1);
+      }
+      return typeof t === "undefined" ? "" : JSON.stringify(t);
+    };
+    const coerceUserContent = (c) => {
+      if (typeof c === "string") return { type: "text", text: c };
+      if (c && typeof c === "object" && c.type === "text") {
+        return { ...c, text: coerceUserText(c.text) };
+      }
+      return c;
+    };
     const wrappedContent = parsed && parsed.role === "user" ? { role: "user", content: coerceUserContent(parsed.content) } : { role: "user", content: { type: "text", text: typeof parsed === "string" ? parsed : JSON.stringify(parsed) } };
     if (isBtwEcho) wrappedContent.meta = { btw: true };
     const msg = {
@@ -9276,6 +9395,32 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
     // `svamp outpost up`, so the install command never drifts. NO channel is created — the remote
     // dials the machine's public `:outpost` gateway and this session's token authenticates it.
     // Admin-gated: the returned token is a capability to run commands on whatever machine connects.
+    // #1628: REVOKE this session's outpost token by minting a fresh one, then return the new
+    // install info. The durable token is a capability ("whoever holds it can run commands on
+    // connected outposts") that never expired and had no rotate path — and the documented
+    // workflow PRINTS it in an install one-liner meant to be pasted into someone else's
+    // terminal, so it routinely lands in shell history, chat and screen shares. Every prior
+    // outpost fix (#0757, #0778, #1035, #1374) closed a LEAK; none gave the operator a way to
+    // invalidate a token that had already leaked.
+    //
+    // Admin-gated like outpostConnectInfo — this both destroys a capability and mints a new one.
+    // Live pairing codes for the session are burned in the same act: leaving a code that
+    // resolves to the OLD token would defeat the rotation.
+    outpostRotateToken: async (params, context) => {
+      authorizeRequest(context, metadata.sharing, "admin");
+      if (!outpostServiceId) return { error: "the outpost service is not available on this machine" };
+      try {
+        rotateOutpostToken(outpostProjectDir(), sessionId);
+        try {
+          const am = await server.getService("public/artifact-manager");
+          if (am) await burnSessionPairings(am, sessionId, void 0, (m) => console.log(m));
+        } catch {
+        }
+      } catch (err) {
+        return { error: `could not rotate the outpost token: ${err?.message || err}` };
+      }
+      return await rpcHandlers.outpostConnectInfo(params, context);
+    },
     outpostConnectInfo: async (params, context) => {
       authorizeRequest(context, metadata.sharing, "admin");
       if (!outpostServiceId) return { error: "the outpost service is not available on this machine" };
@@ -9694,7 +9839,7 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       authorizeRequest(context, metadata.sharing, "interact");
       let forwarded = params;
       if (params && (params.mode !== void 0 || params.allowTools !== void 0)) {
-        if (!roleAtLeast(getEffectiveRole(context, metadata.sharing), "admin")) {
+        if (!isAdminEquivalentStrict(context, metadata.sharing)) {
           const { mode: _droppedMode, allowTools: _droppedTools, ...rest } = params;
           forwarded = rest;
           console.warn(
@@ -9812,6 +9957,8 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
     // workflow writes 'admin' (direct server-side command exec). See issueOpMinRole above.
     issue: async (params, context) => {
       authorizeRequest(context, metadata.sharing, issueOpMinRole(params?.op));
+      const refusal = issueVerifyRefusalReason(params, isOwnerEquivalentStrict(context, metadata.sharing));
+      if (refusal) throw new Error(refusal);
       if (!callbacks.onIssue) throw new Error("issue not supported");
       return await callbacks.onIssue(params);
     },

package/dist/index.mjs

@@ -1,6 +1,6 @@
 export { c as connectToHypha, g as getHyphaServerUrl } from './hyphaClient-ybivOjZo.mjs';
-export { c as createSessionStore, r as registerMachineService } from './hookSettings-DYMTUgVA.mjs';
-export { d as daemonStatus, s as startDaemon, a as stopDaemon } from './run-DkjwF-zA.mjs';
+export { c as createSessionStore, r as registerMachineService } from './hookSettings-FFc1pi8j.mjs';
+export { d as daemonStatus, s as startDaemon, a as stopDaemon } from './run-DDmeV9K3.mjs';
 import 'fs';
 import 'path';
 import 'node:crypto';
@@ -18,11 +18,11 @@ import 'http';
 import 'net';
 import 'os';
 import './instance-CeHz5C8v.mjs';
-import './serveAuth-DbVLRCRR.mjs';
+import './serveAuth-4M0vwMyj.mjs';
 import 'node:os';
 import 'node:path';
 import './envFlag-COOuJ3AH.mjs';
-import './claudeAuth-iAerdaMr.mjs';
+import './claudeAuth-C0wc1GTM.mjs';
 import './fileLock-BMPwCrB6.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
 import './friendlyName-1UZcyDhu.mjs';
@@ -30,7 +30,7 @@ import 'node:events';
 import './cron-hHGdb5kU.mjs';
 import 'url';
 import './sharingNotificationSync-qGIQ-3yf.mjs';
-import './acpBackend-BZ1MJhQV.mjs';
+import './acpBackend-UaBD4zL3.mjs';
 import '@agentclientprotocol/sdk';
 import './DefaultTransport-vfp78fug.mjs';
 import './wrapCommand-CdNawSaa.mjs';
@@ -43,12 +43,12 @@ import './GeminiTransport-3OkhtFRO.mjs';
 import './KimiTransport-D8n009Tr.mjs';
 import './kimiProvider-DbxODebR.mjs';
 import './kimiSetup-NGsoYB5h.mjs';
-import './detectIsolation-CzoDCEnh.mjs';
+import './detectIsolation-CrV8IFDv.mjs';
 import 'node:fs/promises';
 import './pinnedNono-5ZHb6328.mjs';
 import './bootStatus-DqtNgJch.mjs';
-import './loopVerify-B47sSjxe.mjs';
-import './store-Bn0ByYev.mjs';
+import './loopVerify-DALtTk2V.mjs';
+import './store-B4E6NzG6.mjs';
 import './api-BHjyC0Ph.mjs';
 import './store-fi0f-ff1.mjs';
 import 'yaml';

package/dist/{loopVerify-B47sSjxe.mjs → loopVerify-DALtTk2V.mjs}

@@ -1,6 +1,6 @@
 import { n as normalizeAllowedUser } from './types-57J3Re0n.mjs';
 import { c as getSvampWebBaseUrl } from './instance-CeHz5C8v.mjs';
-import { l as listIssues, i as isPendingIssue, j as isVisibleTo } from './store-Bn0ByYev.mjs';
+import { l as listIssues, j as isPendingIssue, k as isVisibleTo } from './store-B4E6NzG6.mjs';
 
 function getShareBaseUrl() {
   return getSvampWebBaseUrl();

package/dist/{notifyCommands-D-IKIxiq.mjs → notifyCommands-CCUE18Q-.mjs}

@@ -1,6 +1,6 @@
 import { c as connectToHypha } from './hyphaClient-ybivOjZo.mjs';
 import { S as SharingNotificationSync } from './sharingNotificationSync-qGIQ-3yf.mjs';
-import { p as parseJwtEmail } from './serveAuth-DbVLRCRR.mjs';
+import { p as parseJwtEmail } from './serveAuth-4M0vwMyj.mjs';
 import { randomUUID } from 'node:crypto';
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';

package/dist/package-BrsiNutS.mjs

@@ -0,0 +1,64 @@
+var name = "svamp-cli";
+var version = "0.2.356";
+var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
+var author = "Amun AI AB";
+var license = "SEE LICENSE IN LICENSE";
+var type = "module";
+var bin = {
+	svamp: "./bin/svamp.mjs"
+};
+var files = [
+	"dist",
+	"bin"
+];
+var main = "./dist/index.mjs";
+var exports$1 = {
+	".": "./dist/index.mjs",
+	"./cli": "./dist/cli.mjs"
+};
+var scripts = {
+	build: "rm -rf dist bin/skills bin/commands && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && cp -r ../../skills/crew bin/skills/crew && cp -r ../../commands bin/commands && tsc --noEmit && pkgroll",
+	typecheck: "tsc --noEmit",
+	test: "node test/with-timeout.mjs 420 npx tsx test/test-context-window.mjs && node test/with-timeout.mjs 420 npx tsx test/test-ratelimit-retry.mjs && node test/with-timeout.mjs 420 npx tsx test/test-completed-requests.mjs && node test/with-timeout.mjs 420 npx tsx test/test-reconnect-health.mjs &&node test/with-timeout.mjs 420 npx tsx test/test-fleet-version-parse.mjs &&node test/with-timeout.mjs 420 npx tsx test/test-instance-config.mjs && node test/with-timeout.mjs 420 npx tsx test/test-authorize.mjs && node test/with-timeout.mjs 420 npx tsx test/test-normalize-allowed-user.mjs && node test/with-timeout.mjs 420 npx tsx test/test-share-url.mjs && node test/with-timeout.mjs 420 npx tsx test/test-update-sharing-normalization.mjs && node test/with-timeout.mjs 420 npx tsx test/test-sharing-notify-sync.mjs && node test/with-timeout.mjs 420 npx tsx test/test-sharing-notify-resolve.mjs && node test/with-timeout.mjs 420 npx tsx test/test-staged-homes-sweep.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-helpers.mjs && node test/with-timeout.mjs 420 npx tsx test/test-cli-routing.mjs && node test/with-timeout.mjs 420 npx tsx test/test-security-context.mjs && node test/with-timeout.mjs 420 npx tsx test/test-isolation-decision.mjs && node test/with-timeout.mjs 420 npx tsx test/test-message-helpers.mjs && node test/with-timeout.mjs 420 npx tsx test/test-stdin-delivery.mjs && node test/with-timeout.mjs 420 npx tsx test/test-agent-config.mjs && node test/with-timeout.mjs 420 npx tsx test/test-wrap-command.mjs && node test/with-timeout.mjs 420 npx tsx test/test-credential-staging.mjs && node test/with-timeout.mjs 420 npx tsx test/test-claude-auth.mjs && node test/with-timeout.mjs 420 npx tsx test/test-backend-accounts.mjs && node test/with-timeout.mjs 420 npx tsx test/test-codex-force-model.mjs && node test/with-timeout.mjs 420 npx tsx test/test-backend-oauth.mjs && node test/with-timeout.mjs 420 npx tsx test/test-btw-proxy-env.mjs && node test/with-timeout.mjs 420 npx tsx test/test-output-formatters.mjs && node test/with-timeout.mjs 420 npx tsx test/test-inbox-guard.mjs && node test/with-timeout.mjs 420 npx tsx test/test-user-events.mjs && node test/with-timeout.mjs 420 npx tsx test/test-migrate-children.mjs && node test/with-timeout.mjs 420 npx tsx test/test-outpost-install.mjs && node test/with-timeout.mjs 420 npx tsx test/test-outpost-setup.mjs && node test/with-timeout.mjs 420 npx tsx test/test-outpost-pairing.mjs && node test/with-timeout.mjs 420 npx tsx test/test-outpost-coordinator.mjs && node test/with-timeout.mjs 420 npx tsx test/e2e-outpost-transport.mjs && node test/with-timeout.mjs 420 npx tsx test/test-inbox-reconcile.mjs && node test/with-timeout.mjs 420 npx tsx test/test-auto-topic.mjs && node test/with-timeout.mjs 420 npx tsx test/test-project-info.mjs && node test/with-timeout.mjs 420 npx tsx test/test-agent-types.mjs && node test/with-timeout.mjs 420 npx tsx test/test-transport.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-update-handlers.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-scanner.mjs && node test/with-timeout.mjs 420 npx tsx test/test-hypha-client.mjs && node test/with-timeout.mjs 420 npx tsx test/test-hook-settings.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-service-logic.mjs && node test/with-timeout.mjs 420 npx tsx test/test-daemon-persistence.mjs && node test/with-timeout.mjs 420 npx tsx test/test-detect-isolation.mjs && node test/with-timeout.mjs 420 npx tsx test/test-isolation-disable.mjs && node test/with-timeout.mjs 420 npx tsx test/test-machine-service-logic.mjs && node test/with-timeout.mjs 420 npx tsx test/test-machine-session-visibility.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-access-fallback.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-rpc-role-map.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-workflow-op-roles.mjs && npx tsx test/test-issue-verify-cmd-authorship.mjs && node test/with-timeout.mjs 420 npx tsx test/test-interactive-helpers.mjs && node test/with-timeout.mjs 420 npx tsx test/test-pinned-codex.mjs && node test/with-timeout.mjs 420 npx tsx test/test-pinned-hypha-rpc.mjs && node test/with-timeout.mjs 420 npx tsx test/test-pinned-kimi.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-receive-cap.mjs && node test/with-timeout.mjs 420 npx tsx test/test-dns-shadowing.mjs && node test/with-timeout.mjs 420 npx tsx test/test-codex-request-timeout.mjs && node test/with-timeout.mjs 420 npx tsx test/test-codex-app-server.mjs && node test/with-timeout.mjs 420 npx tsx test/test-kimi-provider.mjs && node test/with-timeout.mjs 420 npx tsx test/test-acp-backend.mjs && node test/with-timeout.mjs 420 npx tsx test/test-acp-bridge.mjs && node test/with-timeout.mjs 420 npx tsx test/test-listener-backoff.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-identity-env.mjs && node test/with-timeout.mjs 420 npx tsx test/test-hook-server.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-commands.mjs && node test/with-timeout.mjs 420 npx tsx test/test-interactive-console.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-messages.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-send-query.mjs && node test/with-timeout.mjs 420 npx tsx test/test-skills.mjs && node test/with-timeout.mjs 420 npx tsx test/test-agent-grouping.mjs && node test/with-timeout.mjs 420 npx tsx test/test-machine-list-directory.mjs && node test/with-timeout.mjs 420 npx tsx test/test-service-commands.mjs && node test/with-timeout.mjs 420 npx tsx test/test-supervisor.mjs && node test/with-timeout.mjs 420 npx tsx test/test-supervisor-lock.mjs && node test/with-timeout.mjs 420 node test/test-supervisor-restart.mjs && node test/with-timeout.mjs 420 npx tsx test/test-clear-detection.mjs && node test/with-timeout.mjs 420 npx tsx test/test-compact-detect.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-consolidation.mjs && node test/with-timeout.mjs 420 npx tsx test/test-inbox-store.mjs && node test/with-timeout.mjs 420 npx tsx test/test-inbox.mjs && npx tsx test/test-inbox-xml-escaping.mjs && node test/with-timeout.mjs 420 npx tsx test/test-inbox-cross-machine.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-store.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-store-lock.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-close-gate.mjs && node test/with-timeout.mjs 420 npx tsx test/test-loop-verify.mjs && npx tsx test/test-loop-verify-error-guards.mjs && node test/with-timeout.mjs 420 npx tsx test/test-restore-decision.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-rpc.mjs && npx tsx test/test-verify-gate-async.mjs && npx tsx test/test-process-env-redaction.mjs && npx tsx test/test-provisioner-pin-published.mjs && npx tsx test/test-pinned-nono.mjs && npx tsx test/test-nono-install-executability.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-pause.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-store.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-rpc.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-scheduler.mjs && node test/with-timeout.mjs 420 npx tsx test/test-cron.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-runs.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-runs-lock.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-idle.mjs && node test/with-timeout.mjs 420 npx tsx test/test-workflow-reconcile.mjs && npx tsx test/test-workflow-reconcile-grace.mjs && node test/with-timeout.mjs 420 npx tsx test/test-serve-link-subdomain.mjs &&node test/with-timeout.mjs 420 npx tsx test/test-frpc-footprint.mjs && npx tsx test/test-serve-regenerate-url.mjs && node test/with-timeout.mjs 420 npx tsx test/test-short-id.mjs && node test/with-timeout.mjs 420 npx tsx test/test-transcript-edit.mjs && node test/with-timeout.mjs 420 npx tsx test/test-edit-history.mjs && node test/with-timeout.mjs 420 npx tsx test/test-friendly-name.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-rpc-dispatch.mjs && node test/with-timeout.mjs 420 npx tsx test/test-nightly-1615-1630.mjs && node test/with-timeout.mjs 420 npx tsx test/test-sandbox-cli.mjs && node test/with-timeout.mjs 420 npx tsx test/test-serve-manager.mjs && node test/with-timeout.mjs 420 npx tsx test/test-serve-listen-failure.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-files-gateway.mjs && node test/with-timeout.mjs 420 npx tsx test/test-serve-ws-upgrade.mjs && node test/with-timeout.mjs 420 npx tsx test/test-serve-auth.mjs && node test/with-timeout.mjs 420 npx tsx test/test-static-file-server.mjs && node test/with-timeout.mjs 420 npx tsx test/test-serve-stability.mjs && node test/with-timeout.mjs 420 npx tsx test/test-frpc-e2e.mjs --unit-only && node test/with-timeout.mjs 420 npx tsx test/test-frpc-status.mjs && node test/with-timeout.mjs 420 npx tsx test/test-frpc-orphan-reap.mjs && node test/with-timeout.mjs 420 node test/pinnedClaudeCode.test.mjs && node test/with-timeout.mjs 420 npx tsx test/test-claude-version-recheck.mjs && node test/with-timeout.mjs 420 node test/fleet.test.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-file.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-rpc.mjs && node test/with-timeout.mjs 420 npx tsx test/test-wise-agent.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-agent.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channels-service.mjs && node test/with-timeout.mjs 420 npx tsx test/test-hotreload-seam.mjs && node test/with-timeout.mjs 420 npx tsx test/test-hot-reload.mjs && node test/with-timeout.mjs 420 npx tsx test/test-hot-reload-live.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-core.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-async-reply.mjs && node test/with-timeout.mjs 420 npx tsx test/test-outbox-reload.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-binding.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-store-lock.mjs && npx tsx test/test-channel-lost-update.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-identity.mjs && node test/with-timeout.mjs 420 npx tsx test/test-stateless-dispatch-limiter.mjs && node test/with-timeout.mjs 420 npx tsx test/test-shared-session-identity.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-authz-boundaries.mjs && node test/with-timeout.mjs 420 npx tsx test/test-wise-agent-auth.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-http.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-upload.mjs && node test/with-timeout.mjs 420 npx tsx test/test-channel-file-access.mjs && node test/with-timeout.mjs 420 npx tsx test/test-wise-voice.mjs && node test/with-timeout.mjs 420 npx tsx test/test-wise-headless.mjs && node test/with-timeout.mjs 420 npx tsx test/test-wise-machine.mjs && node test/with-timeout.mjs 420 npx tsx test/test-crew-merge.mjs && node test/with-timeout.mjs 420 npx tsx test/test-crew-merge-closes-issue.mjs && node test/with-timeout.mjs 420 npx tsx test/test-crew-verdict-routing.mjs && node test/with-timeout.mjs 420 npx tsx test/test-crew-standalone.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-links.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-loop-pause-guard.mjs && node test/with-timeout.mjs 420 npx tsx test/test-artifact-guard.mjs && node test/with-timeout.mjs 420 npx tsx test/test-artifact-sync-pagination.mjs && node test/with-timeout.mjs 420 npx tsx test/test-graceful-restart.mjs && node test/with-timeout.mjs 420 npx tsx test/test-flush-exit.mjs && node test/with-timeout.mjs 420 npx tsx test/test-codex-skills.mjs && node test/with-timeout.mjs 420 npx tsx test/test-nightly-0807-fixes.mjs && node test/with-timeout.mjs 420 npx tsx test/test-nightly-0814-fixes.mjs && node test/with-timeout.mjs 420 npx tsx test/test-log-prune.mjs && node test/with-timeout.mjs 420 node test/test-message-count-cache.mjs && node test/with-timeout.mjs 420 node test/test-serve-link-gate.mjs && node test/with-timeout.mjs 420 node test/test-security-context-unenforceable.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-id-resolution.mjs && node test/with-timeout.mjs 420 npx tsx test/test-issue-positional.mjs && npx tsx test/test-issue-status-validation.mjs && npx tsx test/test-issue-triage-reopen-guard.mjs && npx tsx test/test-process-positional.mjs && npx tsx test/test-crew-root-and-max.mjs && npx tsx test/test-channel-sse-close.mjs && node test/with-timeout.mjs 420 npx tsx test/test-help-flag-never-acts.mjs && node test/with-timeout.mjs 420 npx tsx test/test-with-timeout.mjs && node test/with-timeout.mjs 420 npx tsx test/test-message-queue-cap.mjs && node test/with-timeout.mjs 420 npx tsx test/test-compaction-backstop.mjs && tsx test/test-launchpad-reconcile.mjs && tsx test/test-file-lock-failopen.mjs && node test/with-timeout.mjs 420 npx tsx test/test-log-format.mjs && npx tsx test/test-deploy-manifests.mjs && npx tsx test/test-kimi-default-model-1169.mjs && npx tsx test/test-loop-dormant-runtime-1170.mjs && npx tsx test/test-skill-install-atomic.mjs && node test/test-version-unpublished.mjs && node test/test-pin-holds.mjs && node test/test-hypha-token-renewal.mjs && node test/with-timeout.mjs 420 npx tsx test/test-boot-status.mjs && node test/with-timeout.mjs 420 npx tsx test/test-stream-log-policy.mjs && node test/with-timeout.mjs 420 npx tsx test/test-count-file-lines.mjs && node test/with-timeout.mjs 420 npx tsx test/test-read-jsonl-lines.mjs && node test/with-timeout.mjs 420 npx tsx test/test-messages-reverse-pager.mjs && node test/with-timeout.mjs 420 npx tsx test/test-spawn-index-scans.mjs && node test/with-timeout.mjs 420 npx tsx test/test-session-cwd-containment.mjs && node test/with-timeout.mjs 420 npx tsx test/test-register-listener.mjs && node test/with-timeout.mjs 420 npx tsx test/test-unreachable-machines.mjs",
+	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
+	dev: "tsx src/cli.ts",
+	"dev:daemon": "tsx src/cli.ts daemon start-sync",
+	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs && npx tsx test/e2e-codex-midturn-steer.mjs && npx tsx test/e2e-serve-iframe-login.mjs && npx tsx test/test-archive-preserves-claude-file.mjs && npx tsx test/test-daemon-e2e.mjs && npx tsx test/test-hypha-service.mjs && npx tsx test/test-permission-e2e.mjs && npx tsx test/test-serve-e2e.mjs && npx tsx test/test-session-archive-resume.mjs && npx tsx test/test-session-rpc-e2e.mjs && npx tsx test/test-skills-integration.mjs && npx tsx test/test-wm-refresh.mjs && npx tsx test/e2e-session-files-gateway.mjs && npx tsx test/e2e-dns-production-hosts.mjs && npx tsx test/e2e-cluster-manifest-drift.mjs && node test/with-timeout.mjs 600 npx tsx test/test-rev-lock-contention.mjs && npx tsx test/test-embed-headers.mjs && bash tests/test-sandbox-isolation.sh && bash tests/test-credential-staging.sh && bash tests/test-claude-sandbox-e2e.sh",
+	"test:frpc": "npx tsx test/test-frpc-e2e.mjs",
+	prepublishOnly: "node ../../scripts/bump-cli-version.mjs --check && yarn build && yarn test"
+};
+var dependencies = {
+	"@agentclientprotocol/sdk": "^0.14.1",
+	"@modelcontextprotocol/sdk": "^1.25.3",
+	"hypha-rpc": "0.21.46",
+	"node-pty": "1.2.0-beta.11",
+	ws: "^8.18.0",
+	yaml: "^2.8.2",
+	zod: "^3.24.4"
+};
+var devDependencies = {
+	"@types/node": ">=20",
+	"@types/ws": "^8.5.14",
+	pkgroll: "^2.14.2",
+	tsx: "^4.20.6",
+	typescript: "5.9.3"
+};
+var packageManager = "yarn@1.22.22";
+var _package = {
+	name: name,
+	version: version,
+	description: description,
+	author: author,
+	license: license,
+	type: type,
+	bin: bin,
+	files: files,
+	main: main,
+	exports: exports$1,
+	scripts: scripts,
+	dependencies: dependencies,
+	devDependencies: devDependencies,
+	packageManager: packageManager
+};
+
+export { author, bin, _package as default, dependencies, description, devDependencies, exports$1 as exports, files, license, main, name, packageManager, scripts, type, version };

package/dist/{rpc-BB6RF4-F.mjs → rpc-CBkSkzsI.mjs}

@@ -1,6 +1,6 @@
-import { r as resolveProjectRoot } from './store-Bn0ByYev.mjs';
+import { r as resolveProjectRoot } from './store-B4E6NzG6.mjs';
 import { g as getWorkflow, s as setWorkflowEnabled, r as removeWorkflow, v as validateWorkflowName, a as saveWorkflow, b as rawWorkflow, l as listWorkflows } from './store-fi0f-ff1.mjs';
-import { g as getRun, l as listRuns, r as runWorkflow } from './run-DkjwF-zA.mjs';
+import { g as getRun, l as listRuns, r as runWorkflow } from './run-DDmeV9K3.mjs';
 import { v as validateCronExpr } from './cron-hHGdb5kU.mjs';
 import 'node:fs';
 import 'node:path';
@@ -15,7 +15,7 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import './hookSettings-DYMTUgVA.mjs';
+import './hookSettings-FFc1pi8j.mjs';
 import './types-57J3Re0n.mjs';
 import './securityContext-Cm5UTCuD.mjs';
 import './machineTools-DygM1jXW.mjs';
@@ -24,16 +24,16 @@ import 'util';
 import 'http';
 import 'net';
 import './instance-CeHz5C8v.mjs';
-import './serveAuth-DbVLRCRR.mjs';
+import './serveAuth-4M0vwMyj.mjs';
 import 'node:os';
 import './envFlag-COOuJ3AH.mjs';
-import './claudeAuth-iAerdaMr.mjs';
+import './claudeAuth-C0wc1GTM.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
 import './friendlyName-1UZcyDhu.mjs';
 import 'node:events';
 import './hyphaClient-ybivOjZo.mjs';
 import './sharingNotificationSync-qGIQ-3yf.mjs';
-import './acpBackend-BZ1MJhQV.mjs';
+import './acpBackend-UaBD4zL3.mjs';
 import '@agentclientprotocol/sdk';
 import './DefaultTransport-vfp78fug.mjs';
 import './wrapCommand-CdNawSaa.mjs';
@@ -46,11 +46,11 @@ import './GeminiTransport-3OkhtFRO.mjs';
 import './KimiTransport-D8n009Tr.mjs';
 import './kimiProvider-DbxODebR.mjs';
 import './kimiSetup-NGsoYB5h.mjs';
-import './detectIsolation-CzoDCEnh.mjs';
+import './detectIsolation-CrV8IFDv.mjs';
 import 'node:fs/promises';
 import './pinnedNono-5ZHb6328.mjs';
 import './bootStatus-DqtNgJch.mjs';
-import './loopVerify-B47sSjxe.mjs';
+import './loopVerify-DALtTk2V.mjs';
 import './api-BHjyC0Ph.mjs';
 
 async function workflowRpc(cwd, params) {