svamp-cli 0.2.346 → 0.2.356

package/dist/{rpc-Cf0grcru.mjs → rpc-ccY7xvlo.mjs}

@@ -1,4 +1,4 @@
-import { r as resolveProjectRoot, u as updateIssue, p as parseScopeArg, I as ISSUE_SCOPES, g as getIssue, c as checkVerifyCommandAsync, a as parseStatusArg, b as ISSUE_STATUSES, d as resumeIssue, e as pauseIssue, f as addComment, h as addIssue, l as listIssues, i as isPendingIssue, s as searchIssues, j as isVisibleTo } from './store-Bn0ByYev.mjs';
+import { r as resolveProjectRoot, a as applyTriageStatus, u as updateIssue, p as parseScopeArg, I as ISSUE_SCOPES, g as getIssue, c as checkVerifyCommandAsync, b as parseStatusArg, d as ISSUE_STATUSES, e as resumeIssue, f as pauseIssue, h as addComment, i as addIssue, l as listIssues, j as isPendingIssue, s as searchIssues, k as isVisibleTo } from './store-B4E6NzG6.mjs';
 import 'node:fs';
 import 'node:path';
 import 'node:crypto';
@@ -66,7 +66,8 @@ async function issueRpc(cwd, params, deps = {}) {
     }
     case "add": {
       const owner = params.session || null;
-      const scope = params.scope || (owner ? "session" : "project");
+      const scope = params.scope == null ? owner ? "session" : "project" : parseScopeArg(params.scope);
+      if (!scope) throw new Error(`issue add: invalid --scope "${String(params.scope)}" (expected one of: ${ISSUE_SCOPES.join(", ")})`);
       let title = params.title ? String(params.title) : "";
       let body = params.body ? String(params.body) : void 0;
       let original;
@@ -201,7 +202,9 @@ ${res.output || ""}
       const v = buildVerify(params);
       if (v) patch.verify = v;
       if (params.body != null) patch.body = String(params.body);
-      patch.status = "ready";
+      applyTriageStatus(root, String(params.id), patch, (m) => {
+        throw new Error(m);
+      });
       const updated = updateIssue(root, String(params.id), patch);
       if (!updated) throw new Error(`Issue not found: ${params.id}`);
       return updated;

package/dist/{run-ChdsgaSD.mjs → run-DCq3aEiF.mjs}

@@ -3,10 +3,10 @@ import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';
 import { c as connectToHypha } from './hyphaClient-ybivOjZo.mjs';
-import { c as createSessionStore, r as registerMachineService, g as generateHookSettings } from './hookSettings-DYMTUgVA.mjs';
+import { c as createSessionStore, r as registerMachineService, g as generateHookSettings } from './hookSettings-FFc1pi8j.mjs';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
-import { applyClaudeProxyEnv } from './claudeAuth-iAerdaMr.mjs';
+import { applyClaudeProxyEnv } from './claudeAuth-C0wc1GTM.mjs';
 import { createInterface } from 'node:readline';
 import 'node:crypto';
 import 'fs';
@@ -23,7 +23,7 @@ import 'http';
 import 'net';
 import 'os';
 import './instance-CeHz5C8v.mjs';
-import './serveAuth-DbVLRCRR.mjs';
+import './serveAuth-4M0vwMyj.mjs';
 import './envFlag-COOuJ3AH.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
 import './fileLock-BMPwCrB6.mjs';

package/dist/{run-DkjwF-zA.mjs → run-DDmeV9K3.mjs}

@@ -1,11 +1,11 @@
 import os from 'os';
 import fs from 'fs/promises';
-import fs__default, { existsSync as existsSync$1, readFileSync as readFileSync$1, realpathSync, writeFileSync as writeFileSync$1, renameSync as renameSync$1, rmSync as rmSync$1, mkdirSync as mkdirSync$1, copyFileSync, unlinkSync as unlinkSync$1, readdirSync as readdirSync$1, watch, rmdirSync, statSync as statSync$1 } from 'fs';
+import fs__default, { existsSync as existsSync$1, readFileSync as readFileSync$1, realpathSync, writeFileSync as writeFileSync$1, renameSync as renameSync$1, rmSync as rmSync$1, mkdirSync as mkdirSync$1, copyFileSync, unlinkSync as unlinkSync$1, readdirSync as readdirSync$1, watch, rmdirSync, statSync as statSync$1, chmodSync } from 'fs';
 import { delimiter, join as join$1, resolve, dirname as dirname$1, basename as basename$1 } from 'path';
 import { fileURLToPath } from 'url';
 import { spawn as spawn$1, execFile, exec } from 'child_process';
 import { randomUUID, createHash } from 'crypto';
-import { a as authorizeRequest, b as countFileLines, P as ProcessSupervisor, d as retryStreakExhausted, e as computeRetryDelayMs, f as getRateLimitRetryConfig, g as generateHookSettings, h as getAccount, i as resolveAccountEnv, j as isRetryableRateLimit, c as createSessionStore, E as EXEC_MAX_BUFFER, k as execFailureOutcome, l as execSuccessOutcome, m as formatInboxMessageXml, n as loadInbox, o as isPending, p as ensureCodexHome, q as loadPersistedMachineMetadata, s as savePersistedMachineMetadata, r as registerMachineService, t as channelKeyGrantsFileAccess, C as ChannelStore, u as refreshDueAnthropicAccounts, v as refreshAnthropicToken } from './hookSettings-DYMTUgVA.mjs';
+import { a as authorizeRequest, b as countFileLines, P as ProcessSupervisor, d as retryStreakExhausted, e as computeRetryDelayMs, f as getRateLimitRetryConfig, g as generateHookSettings, h as getAccount, i as resolveAccountEnv, j as isRetryableRateLimit, c as createSessionStore, E as EXEC_MAX_BUFFER, k as execFailureOutcome, l as execSuccessOutcome, m as formatInboxMessageXml, n as loadInbox, o as isPending, p as ensureCodexHome, q as loadPersistedMachineMetadata, s as savePersistedMachineMetadata, r as registerMachineService, t as channelKeyGrantsFileAccess, C as ChannelStore, u as refreshDueAnthropicAccounts, v as refreshAnthropicToken } from './hookSettings-FFc1pi8j.mjs';
 import { a as composeSessionId, g as generateFriendlyName, d as friendlyNameFromId, f as formatHandle, e as clearInboundContext, w as writeInboundContext, i as isHopCapParked, j as classifyInbound, k as consumeAwaitingReply, l as peekAwaitingReply } from './friendlyName-1UZcyDhu.mjs';
 import { w as withFileLock } from './fileLock-BMPwCrB6.mjs';
 import { mkdirSync, writeFileSync, rmSync, existsSync, renameSync, readFileSync, statSync, openSync, fstatSync, readSync, closeSync, readdirSync, unlinkSync, linkSync } from 'node:fs';
@@ -13,7 +13,7 @@ import { join, dirname, basename, resolve as resolve$1 } from 'node:path';
 import { c as connectToHypha } from './hyphaClient-ybivOjZo.mjs';
 import { execSync, execFileSync, spawn } from 'node:child_process';
 import { S as SharingNotificationSync } from './sharingNotificationSync-qGIQ-3yf.mjs';
-import { AcpBackend } from './acpBackend-BZ1MJhQV.mjs';
+import { AcpBackend } from './acpBackend-UaBD4zL3.mjs';
 import { KNOWN_ACP_AGENTS, KNOWN_CODEX_AGENTS } from './acpAgentConfig-CObOPlA8.mjs';
 import { c as codexAppServerAvailable, C as CodexAppServerBackend } from './codexAppServerBackend-VGsYtbqg.mjs';
 import { codexPermissionSettings, codexForcedModel, codexModelMenu, codexClampModel, resolveCodexProvider, codexDefaultModel } from './codexProvider-BtxYc5Rj.mjs';
@@ -22,19 +22,19 @@ import { GeminiTransport } from './GeminiTransport-3OkhtFRO.mjs';
 import { KimiTransport } from './KimiTransport-D8n009Tr.mjs';
 import { kimiModelMenu, kimiClampModel, kimiSpawnEnv, kimiDefaultModel } from './kimiProvider-DbxODebR.mjs';
 import { ensureKimiProviderConfigured } from './kimiSetup-NGsoYB5h.mjs';
-import { detectIsolationCapabilities } from './detectIsolation-CzoDCEnh.mjs';
+import { detectIsolationCapabilities } from './detectIsolation-CrV8IFDv.mjs';
 import { w as wrapWithIsolation } from './wrapCommand-CdNawSaa.mjs';
 import { applySecurityContext } from './securityContext-Cm5UTCuD.mjs';
-import { mkdir, copyFile, writeFile, rm, readdir, stat, readFile, rename } from 'node:fs/promises';
+import { mkdir, copyFile, writeFile, chmod, rm, readdir, stat, readFile, rename } from 'node:fs/promises';
 import { homedir, platform } from 'node:os';
-import { applyClaudeProxyEnv, updateEnvFile } from './claudeAuth-iAerdaMr.mjs';
+import { applyClaudeProxyEnv, probeLongContext1MEntitlement, LONG_CONTEXT_ENTITLEMENT_RECHECK_MS, updateEnvFile } from './claudeAuth-C0wc1GTM.mjs';
 import { d as decodeTokenExpiry, i as isTokenExpired, c as classifyBootFailure, w as writeBootStatus, a as clearBootStatus, b as isAuthExpiryError, s as shouldRenewToken, T as TOKEN_LIFETIME_SEC, R as RENEW_CHECK_INTERVAL_MS } from './bootStatus-DqtNgJch.mjs';
 import { e as envFlagEnabled } from './envFlag-COOuJ3AH.mjs';
-import { r as resolveEvaluatorModel, c as backlogOraclePending, d as runLoopVerification, l as loopCancelledDuringVerify, e as resolveLoopDurable, f as decideLoopContinuation, g as resolveMaxAutoResumes, h as grantedExtensionCount, i as resolveMaxExtensions, j as resolveStuckLimit, k as decideVerifyErrorHandling, m as resolveVerifyErrorRetries, t as terminalPhaseForDone, n as accumulateLedger, s as sumUsageTokens, o as effectiveSoftCap, p as checkLoopBudget, q as isHardBudgetStop, u as isCostCeiling, v as summarizeExtensions, w as rearmStartedAt, x as oracleScopeSessionId, y as shouldRearmDormantLoop, z as parseDaemonShareEmails, D as DAEMON_SHARE_EMAILS_ENV, A as applyDaemonShareSeed, a as buildMachineShareUrl, B as recordProgressMarker, C as assessLoopProgress, E as resolveExtensionTurns, F as grantLoopExtension, G as buildGoalCondition, H as computeSoftTurnCap, U as UNBOUNDED_LOOP_ITERATIONS } from './loopVerify-B47sSjxe.mjs';
-import { p as parseJwtEmail } from './serveAuth-DbVLRCRR.mjs';
+import { r as resolveEvaluatorModel, c as backlogOraclePending, d as runLoopVerification, l as loopCancelledDuringVerify, e as resolveLoopDurable, f as decideLoopContinuation, g as resolveMaxAutoResumes, h as grantedExtensionCount, i as resolveMaxExtensions, j as resolveStuckLimit, k as decideVerifyErrorHandling, m as resolveVerifyErrorRetries, t as terminalPhaseForDone, n as accumulateLedger, s as sumUsageTokens, o as effectiveSoftCap, p as checkLoopBudget, q as isHardBudgetStop, u as isCostCeiling, v as summarizeExtensions, w as rearmStartedAt, x as oracleScopeSessionId, y as shouldRearmDormantLoop, z as parseDaemonShareEmails, D as DAEMON_SHARE_EMAILS_ENV, A as applyDaemonShareSeed, a as buildMachineShareUrl, B as recordProgressMarker, C as assessLoopProgress, E as resolveExtensionTurns, F as grantLoopExtension, G as buildGoalCondition, H as computeSoftTurnCap, U as UNBOUNDED_LOOP_ITERATIONS } from './loopVerify-DALtTk2V.mjs';
+import { p as parseJwtEmail } from './serveAuth-4M0vwMyj.mjs';
 import { getSkillsServer, getArtifactBaseUrl } from './api-BHjyC0Ph.mjs';
 import { l as loadInstanceConfig } from './instance-CeHz5C8v.mjs';
-import { l as listIssues, h as addIssue, o as routeCrewVerdict, r as resolveProjectRoot$1 } from './store-Bn0ByYev.mjs';
+import { l as listIssues, i as addIssue, q as routeCrewVerdict, r as resolveProjectRoot$1 } from './store-B4E6NzG6.mjs';
 import { c as workflowSteps, d as workflowsDir, l as listWorkflows, i as isWorkflowEnabled } from './store-fi0f-ff1.mjs';
 import { randomBytes } from 'node:crypto';
 
@@ -1390,7 +1390,8 @@ async function stageCredentialsForSharing(sessionId) {
           "-w"
         ], { encoding: "utf-8", timeout: 5e3 }).trim();
         if (keychainData.startsWith("{") || keychainData.startsWith("[")) {
-          await writeFile(stagedCredFile, keychainData);
+          await writeFile(stagedCredFile, keychainData, { mode: 384 });
+          await chmod(stagedCredFile, 384);
         }
       } catch {
       }
@@ -1682,6 +1683,17 @@ function shortRunId(seed) {
   return (h >>> 0).toString(36).padStart(7, "0").slice(0, 7);
 }
 const RECONCILE_GRACE_MS = 12e4;
+const reportedWriteErrnos = /* @__PURE__ */ new Set();
+function reportRunStoreWriteFailure(where, err) {
+  const code = String(err?.code || err?.name || "UNKNOWN");
+  if (reportedWriteErrnos.has(code)) return;
+  reportedWriteErrnos.add(code);
+  const hint = code === "ENOSPC" ? " \u2014 THE DISK IS FULL. Workflow run records are being DROPPED, and session transcripts are likely failing to persist too. This also mimics a concurrency bug (#0681/#1631)." : code === "EROFS" ? " \u2014 the filesystem is read-only." : code === "EACCES" || code === "EPERM" ? " \u2014 permission denied on the runs directory." : "";
+  console.error(`[workflow] run-store write failed in ${where} (${code})${hint} Further ${code} failures will not be repeated. (#1631)`);
+}
+function __resetRunStoreWriteFailureReporting() {
+  reportedWriteErrnos.clear();
+}
 function recordRun(projectRoot, run) {
   try {
     const dir = runsDir(projectRoot);
@@ -1697,7 +1709,8 @@ function recordRun(projectRoot, run) {
       writeFileSync(tmp, kept.map((r) => JSON.stringify(r)).join("\n") + "\n");
       renameSync(tmp, file);
     });
-  } catch {
+  } catch (err) {
+    reportRunStoreWriteFailure("recordRun", err);
   }
 }
 function loadRuns(projectRoot, workflow) {
@@ -1740,40 +1753,47 @@ function reconcileInterruptedRuns(projectRoot) {
     for (const entry of readdirSync(dir)) {
       if (!entry.endsWith(".jsonl")) continue;
       const file = join(dir, entry);
-      let runs;
+      let fixedHere = 0;
       try {
-        runs = readFileSync(file, "utf-8").split("\n").filter(Boolean).map((l) => {
+        withFileLock(`${file}.lock`, () => {
+          let runs;
           try {
-            return JSON.parse(l);
+            runs = readFileSync(file, "utf-8").split("\n").filter(Boolean).map((l) => {
+              try {
+                return JSON.parse(l);
+              } catch {
+                return null;
+              }
+            }).filter((r) => !!r);
           } catch {
-            return null;
+            return;
           }
-        }).filter((r) => !!r);
-      } catch {
-        continue;
-      }
-      let changed = false;
-      for (const r of runs) {
-        if (r.status !== "running") continue;
-        if (isWorkflowInFlight(projectRoot, r.workflow)) continue;
-        if (typeof r.startedAt === "number" && Date.now() - r.startedAt < RECONCILE_GRACE_MS) continue;
-        r.status = "failed";
-        r.error = r.error || "interrupted by daemon restart";
-        r.finishedAt = r.finishedAt || r.startedAt;
-        changed = true;
-        fixed++;
-      }
-      if (!changed) continue;
-      try {
-        withFileLock(`${file}.lock`, () => {
+          let changed = false;
+          for (const r of runs) {
+            if (r.status !== "running") continue;
+            if (isWorkflowInFlight(projectRoot, r.workflow)) continue;
+            const raw = r.startedAt;
+            const startedMs = typeof raw === "number" ? raw : Date.parse(String(raw ?? ""));
+            if (Number.isFinite(startedMs) && Date.now() - startedMs < RECONCILE_GRACE_MS) continue;
+            r.status = "failed";
+            r.error = r.error || "interrupted by daemon restart";
+            r.finishedAt = r.finishedAt || r.startedAt;
+            changed = true;
+            fixedHere++;
+          }
+          if (!changed) return;
+          const kept = runs.slice(-maxRunsPerWorkflow());
           const tmp = `${file}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
-          writeFileSync(tmp, runs.map((r) => JSON.stringify(r)).join("\n") + "\n");
+          writeFileSync(tmp, kept.map((r) => JSON.stringify(r)).join("\n") + "\n");
           renameSync(tmp, file);
         });
-      } catch {
+      } catch (err) {
+        reportRunStoreWriteFailure("reconcileInterruptedRuns", err);
       }
+      fixed += fixedHere;
     }
-  } catch {
+  } catch (err) {
+    reportRunStoreWriteFailure("reconcileInterruptedRuns/outer", err);
   }
   return fixed;
 }
@@ -1960,6 +1980,7 @@ var runStore = /*#__PURE__*/Object.freeze({
     MAX_RUNS_PER_WORKFLOW: MAX_RUNS_PER_WORKFLOW,
     MAX_STREAM_CHARS: MAX_STREAM_CHARS,
     STEP_TIMEOUT_MS: STEP_TIMEOUT_MS,
+    __resetRunStoreWriteFailureReporting: __resetRunStoreWriteFailureReporting,
     capStream: capStream,
     escalateWorkflowFailure: escalateWorkflowFailure,
     getRun: getRun,
@@ -1969,6 +1990,7 @@ var runStore = /*#__PURE__*/Object.freeze({
     maxRunsPerWorkflow: maxRunsPerWorkflow,
     reconcileInterruptedRuns: reconcileInterruptedRuns,
     recordRun: recordRun,
+    reportRunStoreWriteFailure: reportRunStoreWriteFailure,
     runWorkflow: runWorkflow,
     runsDir: runsDir,
     stepTimeoutMs: stepTimeoutMs
@@ -2353,7 +2375,16 @@ function acquireSupervisorLock(pidFile, pid = process.pid) {
     }
     return { acquired: false, staleCleaned: true };
   }
-  if (isPidAlive(existingPid)) {
+  const alive = isPidAlive(existingPid);
+  const verdict = classifyLockHolder({
+    pid: existingPid,
+    alive,
+    // Only interrogate a live pid — a dead one is already stale, and `ps` costs a fork.
+    holderStartedMs: alive ? readProcessStartMs(existingPid) : null,
+    lockWrittenMs: getFileWrittenMs(pidFile),
+    bootTimeMs: getBootTimeMs()
+  });
+  if (verdict === "held") {
     return { acquired: false, heldBy: existingPid };
   }
   try {
@@ -2362,6 +2393,62 @@ function acquireSupervisorLock(pidFile, pid = process.pid) {
   }
   return { acquired: false, staleCleaned: true };
 }
+const RECYCLED_PID_TOLERANCE_MS = 5e3;
+function classifyLockHolder(opts) {
+  const { pid, alive, holderStartedMs = null, lockWrittenMs = null, bootTimeMs = null } = opts;
+  if (!pid || Number.isNaN(pid) || pid <= 0) return "stale";
+  if (!alive) return "stale";
+  if (bootTimeMs !== null && lockWrittenMs !== null && lockWrittenMs < bootTimeMs) return "stale";
+  if (holderStartedMs !== null && lockWrittenMs !== null && holderStartedMs > lockWrittenMs + RECYCLED_PID_TOLERANCE_MS) {
+    return "stale";
+  }
+  return "held";
+}
+function readProcessStartMs(pid) {
+  if (!pid || Number.isNaN(pid) || pid <= 0) return null;
+  if (process.platform === "win32") return null;
+  try {
+    const out = execFileSync("ps", ["-ww", "-o", "lstart=", "-p", String(pid)], {
+      encoding: "utf-8",
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    }).trim();
+    if (!out) return null;
+    const ms = Date.parse(out);
+    return Number.isFinite(ms) ? ms : null;
+  } catch {
+    return null;
+  }
+}
+function getFileWrittenMs(file) {
+  try {
+    return statSync(file).mtimeMs;
+  } catch {
+    return null;
+  }
+}
+function getBootTimeMs() {
+  if (process.platform === "win32") return null;
+  try {
+    if (process.platform === "linux") {
+      const uptimeSec = parseFloat(readFileSync("/proc/uptime", "utf-8").trim().split(/\s+/)[0]);
+      if (!Number.isFinite(uptimeSec) || uptimeSec < 0) return null;
+      return Date.now() - uptimeSec * 1e3;
+    }
+    const out = execFileSync("sysctl", ["-n", "kern.boottime"], {
+      encoding: "utf-8",
+      timeout: 5e3,
+      stdio: ["ignore", "pipe", "ignore"]
+    });
+    const m = out.match(/sec\s*=\s*(\d+)/);
+    if (!m) return null;
+    const sec = parseInt(m[1], 10);
+    if (!Number.isFinite(sec) || sec <= 0) return null;
+    return sec * 1e3;
+  } catch {
+    return null;
+  }
+}
 function acquireSupervisorLockWithRetry(pidFile, pid = process.pid) {
   let result = acquireSupervisorLock(pidFile, pid);
   if (!result.acquired && result.staleCleaned) {
@@ -2390,7 +2477,7 @@ function isSupervisorPid(pid) {
   if (!pid || Number.isNaN(pid) || pid <= 0) return false;
   if (process.platform === "win32") return null;
   try {
-    const out = execFileSync("ps", ["-o", "command=", "-p", String(pid)], {
+    const out = execFileSync("ps", ["-ww", "-o", "command=", "-p", String(pid)], {
       encoding: "utf-8",
       timeout: 5e3,
       stdio: ["ignore", "pipe", "ignore"]
@@ -2510,11 +2597,15 @@ var supervisorLock = /*#__PURE__*/Object.freeze({
     __proto__: null,
     acquireSupervisorLock: acquireSupervisorLock,
     acquireSupervisorLockWithRetry: acquireSupervisorLockWithRetry,
+    classifyLockHolder: classifyLockHolder,
     findOrphanedSyncPids: findOrphanedSyncPids,
+    getBootTimeMs: getBootTimeMs,
+    getFileWrittenMs: getFileWrittenMs,
     getPpid: getPpid,
     isPidAlive: isPidAlive,
     isSupervisorPid: isSupervisorPid,
     killOrphanedSyncs: killOrphanedSyncs,
+    readProcessStartMs: readProcessStartMs,
     releaseSupervisorLock: releaseSupervisorLock,
     shouldSignalSupervisor: shouldSignalSupervisor,
     watchParentLiveness: watchParentLiveness
@@ -4237,7 +4328,11 @@ async function startDaemon(options) {
   function saveExposedTunnels(specs) {
     try {
       mkdirSync$1(SVAMP_HOME, { recursive: true });
-      writeFileSync$1(EXPOSED_TUNNELS_FILE, JSON.stringify({ tunnels: specs }, null, 2));
+      writeFileSync$1(EXPOSED_TUNNELS_FILE, JSON.stringify({ tunnels: specs }, null, 2), { mode: 384 });
+      try {
+        chmodSync(EXPOSED_TUNNELS_FILE, 384);
+      } catch {
+      }
     } catch (err) {
       logger.log(`[exposed-tunnels] Persist failed: ${err.message}`);
     }
@@ -4256,7 +4351,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-B2Nl7Fof.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -4278,7 +4373,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-B2Nl7Fof.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const incoming = [{
@@ -4299,7 +4394,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { dropServiceLinks } = await import('./agentCommands-B2Nl7Fof.mjs');
+      const { dropServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       if (dropServiceLinks(config, "serve", mountName)) {
@@ -4315,7 +4410,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { dropServiceLinks } = await import('./agentCommands-B2Nl7Fof.mjs');
+      const { dropServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       if (dropServiceLinks(config, "tunnel", tunnelName)) {
@@ -4332,7 +4427,7 @@ async function startDaemon(options) {
   let managedLinkSessionsSeeded = false;
   async function reconcileAllServiceLinks() {
     try {
-      const { reconcileServiceLinksExact, hasManagedServiceLink } = await import('./agentCommands-B2Nl7Fof.mjs');
+      const { reconcileServiceLinksExact, hasManagedServiceLink } = await import('./agentCommands-D91RcjqQ.mjs');
       const desiredBySession = /* @__PURE__ */ new Map();
       const push = (sessionId, entry) => {
         if (!sessionId || !entry.url) return;
@@ -4406,7 +4501,7 @@ async function startDaemon(options) {
     }, delayMs);
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./hookSettings-DYMTUgVA.mjs').then(function (n) { return n.w; });
+    const { FrpcTunnel } = await import('./hookSettings-FFc1pi8j.mjs').then(function (n) { return n.w; });
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -4427,7 +4522,7 @@ async function startDaemon(options) {
   }
   const tunnelRecreateState = /* @__PURE__ */ new Map();
   const tunnelRecreateInFlight = /* @__PURE__ */ new Set();
-  const { ServeManager } = await import('./hookSettings-DYMTUgVA.mjs').then(function (n) { return n.y; });
+  const { ServeManager } = await import('./hookSettings-FFc1pi8j.mjs').then(function (n) { return n.y; });
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   serveManager.setMountUnboundHook((sessionId, mountName) => {
     void dropMountSessionLink(sessionId, mountName);
@@ -5354,21 +5449,34 @@ ${parts.join("\n")}`);
           } catch (e) {
             logger.log(`[Session ${sessionId}] verifyGoalCompletion threw \u2014 failing closed (retry/park): ${e?.message || e}`);
             try {
+              const curLsErr = readLoopState(directory, sessionId);
+              if (loopCancelledDuringVerify(curLsErr)) {
+                logger.log(`[Session ${sessionId}] loop was cancelled during a FAILED verification \u2014 not re-kicking (#0308/#1542)`);
+                return;
+              }
+              const freshErr = curLsErr || ls;
+              const carry = {
+                ledger: freshErr.ledger ?? ls.ledger,
+                progress_history: freshErr.progress_history ?? ls.progress_history,
+                extensions: freshErr.extensions ?? ls.extensions,
+                auto_resumes: freshErr.auto_resumes ?? ls.auto_resumes,
+                holds: freshErr.holds ?? ls.holds
+              };
               const durable2 = resolveLoopDurable({ durable: ls.durable, oracle: oracleCmd });
               const decision = decideVerifyErrorHandling({
-                priorErrors: ls.verify_errors,
+                priorErrors: freshErr.verify_errors ?? ls.verify_errors,
                 maxRetries: resolveVerifyErrorRetries(process.env.SVAMP_LOOP_VERIFY_ERROR_RETRIES),
                 reason: `verify threw: ${e?.message || e}`
               });
               if (decision.action === "retry") {
                 const cond = ls.task || "";
-                writeGoalLoopState(directory, sessionId, { ...ls, active: true, phase: "continue", started_at: startedAt, verify_errors: decision.attempt });
+                writeGoalLoopState(directory, sessionId, { ...ls, ...carry, active: true, phase: "continue", started_at: startedAt, verify_errors: decision.attempt });
                 sessionService.pushMessage({ type: "message", message: `\u26A0\uFE0F Loop verification error \u2014 ${decision.reason}`, level: "warning" }, "event");
                 enqueueLoopMessage(`/goal ${cond} \u2014 the completion check could not run; CONTINUE and it will be re-verified. Not done.`, "\u26A0\uFE0F Re-verifying loop");
                 if (!trackedSession.stopped) setTimeout(() => processMessageQueueRef?.(), 200);
               } else {
                 const parkPhase = terminalPhaseForDone(durable2);
-                writeGoalLoopState(directory, sessionId, { ...ls, active: parkPhase === "dormant", phase: parkPhase, completed_at: Date.now(), verify_errors: 0 });
+                writeGoalLoopState(directory, sessionId, { ...ls, ...carry, active: parkPhase === "dormant", phase: parkPhase, completed_at: Date.now(), verify_errors: 0 });
                 checkSvampConfig?.();
               }
             } catch {
@@ -5851,7 +5959,7 @@ ${parts.join("\n")}`);
                       const hasBackgroundTasks = backgroundTaskCount > 0;
                       if (hasBackgroundTasks) {
                         const taskInfo = `Background tasks still running (${backgroundTaskCount}): ${backgroundTaskNames.join(", ")}`;
-                        sessionService.pushMessage({ type: "session_event", message: taskInfo }, "session");
+                        sessionService.pushMessage({ type: "message", message: taskInfo, level: "warning" }, "event");
                       }
                       signalProcessing(false);
                       sessionWasProcessing = false;
@@ -5974,7 +6082,7 @@ ${parts.join("\n")}`);
                     if (backgroundTaskCount > 0) {
                       const taskInfo = `Background tasks still running (${backgroundTaskCount}): ${backgroundTaskNames.join(", ")}`;
                       logger.log(`[Session ${sessionId}] ${taskInfo}`);
-                      sessionService.pushMessage({ type: "session_event", message: taskInfo }, "session");
+                      sessionService.pushMessage({ type: "message", message: taskInfo, level: "warning" }, "event");
                     }
                     justCompactedTurn = false;
                     compactTurnLatch = false;
@@ -6889,12 +6997,12 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-Cf0grcru.mjs');
+              const { issueRpc } = await import('./rpc-ccY7xvlo.mjs');
               const issueCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return issueRpc(issueCwd, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BB6RF4-F.mjs');
+              const { workflowRpc } = await import('./rpc-CBkSkzsI.mjs');
               const wfCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return workflowRpc(wfCwd, params || {});
             },
@@ -7646,12 +7754,12 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-Cf0grcru.mjs');
+              const { issueRpc } = await import('./rpc-ccY7xvlo.mjs');
               const issueCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return issueRpc(issueCwd, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-BB6RF4-F.mjs');
+              const { workflowRpc } = await import('./rpc-CBkSkzsI.mjs');
               const wfCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return workflowRpc(wfCwd, params || {});
             },
@@ -8391,6 +8499,24 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
       }
       return { success: false, message: `Session ${sessionId} not found or already stopped.` };
     };
+    {
+      let lastEntitlementState;
+      const runEntitlementProbe = (first) => {
+        const env = {};
+        applyClaudeProxyEnv(env);
+        void probeLongContext1MEntitlement(env.ANTHROPIC_BASE_URL, env.ANTHROPIC_API_KEY).then((state) => {
+          if (!first && state === lastEntitlementState) return;
+          lastEntitlementState = state;
+          if (state === "entitled") logger.log("[1m-context] entitlement confirmed \u2014 sessions will request the 1M window");
+          else if (state === "not-entitled") logger.log("[1m-context] NOT entitled for this account \u2014 NOT requesting the 1M beta (sessions compact at the 200K window). See #1585.");
+          else logger.log("[1m-context] entitlement could not be determined \u2014 NOT requesting the 1M beta (safe default). See #1585.");
+        }).catch(() => {
+        });
+      };
+      runEntitlementProbe(true);
+      const entitlementTimer = setInterval(() => runEntitlementProbe(false), LONG_CONTEXT_ENTITLEMENT_RECHECK_MS);
+      if (typeof entitlementTimer.unref === "function") entitlementTimer.unref();
+    }
     let isolationCapabilities;
     try {
       isolationCapabilities = await detectIsolationCapabilities();
@@ -9007,13 +9133,18 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-BY30ZrB9.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-BkVJ27Ki.mjs');
     const workflowProjectRoots = () => {
-      const dirs = /* @__PURE__ */ new Set();
+      const roots = /* @__PURE__ */ new Set();
       for (const s of pidToTrackedSession.values()) {
-        if (!s.stopped && s.directory) dirs.add(s.directory);
+        if (s.stopped || !s.directory) continue;
+        try {
+          roots.add(resolveProjectRoot$1(s.directory));
+        } catch {
+          roots.add(s.directory);
+        }
       }
-      return [...dirs];
+      return [...roots];
     };
     try {
       const { reconcileInterruptedRuns } = await Promise.resolve().then(function () { return runStore; });

package/dist/{scheduler-BY30ZrB9.mjs → scheduler-BkVJ27Ki.mjs}

@@ -1,7 +1,7 @@
 import { i as inZone, c as cronMatches } from './cron-hHGdb5kU.mjs';
-import { r as resolveProjectRoot } from './store-Bn0ByYev.mjs';
+import { r as resolveProjectRoot } from './store-B4E6NzG6.mjs';
 import { l as listWorkflows, i as isWorkflowEnabled, w as workflowSchedules } from './store-fi0f-ff1.mjs';
-import { r as runWorkflow } from './run-DkjwF-zA.mjs';
+import { r as runWorkflow } from './run-DDmeV9K3.mjs';
 import 'node:fs';
 import 'node:path';
 import 'node:crypto';
@@ -15,7 +15,7 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import './hookSettings-DYMTUgVA.mjs';
+import './hookSettings-FFc1pi8j.mjs';
 import './types-57J3Re0n.mjs';
 import './securityContext-Cm5UTCuD.mjs';
 import './machineTools-DygM1jXW.mjs';
@@ -24,16 +24,16 @@ import 'util';
 import 'http';
 import 'net';
 import './instance-CeHz5C8v.mjs';
-import './serveAuth-DbVLRCRR.mjs';
+import './serveAuth-4M0vwMyj.mjs';
 import 'node:os';
 import './envFlag-COOuJ3AH.mjs';
-import './claudeAuth-iAerdaMr.mjs';
+import './claudeAuth-C0wc1GTM.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
 import './friendlyName-1UZcyDhu.mjs';
 import 'node:events';
 import './hyphaClient-ybivOjZo.mjs';
 import './sharingNotificationSync-qGIQ-3yf.mjs';
-import './acpBackend-BZ1MJhQV.mjs';
+import './acpBackend-UaBD4zL3.mjs';
 import '@agentclientprotocol/sdk';
 import './DefaultTransport-vfp78fug.mjs';
 import './wrapCommand-CdNawSaa.mjs';
@@ -46,11 +46,11 @@ import './GeminiTransport-3OkhtFRO.mjs';
 import './KimiTransport-D8n009Tr.mjs';
 import './kimiProvider-DbxODebR.mjs';
 import './kimiSetup-NGsoYB5h.mjs';
-import './detectIsolation-CzoDCEnh.mjs';
+import './detectIsolation-CrV8IFDv.mjs';
 import 'node:fs/promises';
 import './pinnedNono-5ZHb6328.mjs';
 import './bootStatus-DqtNgJch.mjs';
-import './loopVerify-B47sSjxe.mjs';
+import './loopVerify-DALtTk2V.mjs';
 import './api-BHjyC0Ph.mjs';
 
 function cronMatchesSafe(expr, date) {