svamp-cli 0.2.346 → 0.2.358

package/dist/{commands-D69mnkYu.mjs → commands-B19lVZjm.mjs}

@@ -1,4 +1,4 @@
-import { r as resolveProjectRoot } from './store-Bn0ByYev.mjs';
+import { r as resolveProjectRoot } from './store-D8dok6_d.mjs';
 import { w as wantsHelp } from './wantsHelp-6bMOeNUz.mjs';
 import { s as setWorkflowEnabled, i as isWorkflowEnabled, r as removeWorkflow, g as getWorkflow, l as listWorkflows, c as workflowSteps, a as saveWorkflow, b as rawWorkflow } from './store-fi0f-ff1.mjs';
 import { v as validateCronExpr, d as describeNextFire } from './cron-hHGdb5kU.mjs';
@@ -21,7 +21,7 @@ function positional(args) {
   for (let i = 0; i < args.length; i++) {
     const a = args[i];
     if (a.startsWith("--")) {
-      if (a !== "--json") i++;
+      if (a !== "--json" && a !== "--force" && a !== "--replace") i++;
       continue;
     }
     out.push(a);
@@ -75,6 +75,13 @@ async function workflowCommand(args) {
       if (onKinds.includes("idle")) on.idle = true;
       const owner = flag(rest, "--session") || process.env.SVAMP_SESSION_ID || null;
       const wf = { name, on: Object.keys(on).length ? on : void 0, jobs: { run: { steps: runs.map((r) => ({ run: r })) } }, session: owner };
+      if (!rest.includes("--force") && !rest.includes("--replace") && getWorkflow(root, name)) {
+        console.error(`Workflow "${name}" already exists \u2014 refusing to replace it (that would discard its steps, schedule and owning session).`);
+        console.error(`  svamp workflow show ${name}          # see what is there now`);
+        console.error(`  svamp workflow add ${name} --force \u2026  # deliberately replace it`);
+        console.error(`  svamp workflow remove ${name}        # or remove it first`);
+        process.exit(1);
+      }
       saveWorkflow(root, wf);
       const nSteps = workflowSteps(wf).length;
       if (json) console.log(JSON.stringify(wf));
@@ -147,7 +154,7 @@ async function workflowCommand(args) {
         console.error(`Workflow not found: ${name}`);
         process.exit(1);
       }
-      const { runWorkflow } = await import('./run-DkjwF-zA.mjs').then(function (n) { return n.e; });
+      const { runWorkflow } = await import('./run-DKOND4dO.mjs').then(function (n) { return n.f; });
       const run = await runWorkflow(root, wf, { trigger: "manual", actor: process.env.SVAMP_SESSION_ID || null });
       console.log(`\u25B6 ran workflow "${wf.name}" (${run.steps.length} step${run.steps.length === 1 ? "" : "s"}) \u2192 ${run.status}`);
       for (const st of run.steps) {

package/dist/{commands-BB1Kcyt-.mjs → commands-Bmoy6Rlw.mjs}

@@ -1,21 +1,22 @@
-import { connectAndResolveSession } from './commands-D1pZq3d4.mjs';
+import { a as connectAndResolveSession } from './commands-CcdoQIkb.mjs';
 import { w as wantsHelp } from './wantsHelp-6bMOeNUz.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
 import './hyphaClient-ybivOjZo.mjs';
-import './friendlyName-1UZcyDhu.mjs';
+import './friendlyName-B-OEwt0t.mjs';
 import 'node:crypto';
 import './types-57J3Re0n.mjs';
 import './securityContext-Cm5UTCuD.mjs';
-import './loopVerify-B47sSjxe.mjs';
+import './loopVerify-CxAKJB5a.mjs';
 import './instance-CeHz5C8v.mjs';
 import 'fs';
 import 'path';
 import 'os';
-import './store-Bn0ByYev.mjs';
+import './store-D8dok6_d.mjs';
 import './fileLock-BMPwCrB6.mjs';
+import './inboxGuard-CDqmIypF.mjs';
 import './flushExit-C-i6SGjj.mjs';
 
 function argVal(args, name) {
@@ -111,6 +112,27 @@ async function outpostInstall(args) {
     if (info.downloadBase) console.log("Direct download: " + info.downloadBase);
   }
 }
+async function outpostRotate(args) {
+  const dl = argVal(args, "--download-base");
+  if (!args.includes("--yes") && !args.includes("-y")) {
+    console.log("This REVOKES this session's outpost token and mints a new one.");
+    console.log("Every currently-connected outpost will stop working until it re-runs the new");
+    console.log("install command. Re-run with --yes to proceed.");
+    process.exit(1);
+  }
+  const info = await withSession((m, id) => m.sessionRPC(id, "outpostRotateToken", dl ? { params: { downloadBase: dl } } : {}));
+  if (!info || info.error) {
+    console.error(`Could not rotate the outpost token: ${info?.error || "unknown error"}`);
+    process.exit(1);
+  }
+  console.log("\u2713 outpost token rotated \u2014 the previous token no longer works.\n");
+  console.log("Any machine that was connected must re-run the install command below:\n");
+  const gen = info.install || {};
+  if (gen.unix) console.log("  macOS / Linux:\n    " + gen.unix + "\n");
+  if (gen.windows) console.log("  Windows (PowerShell):\n    " + gen.windows + "\n");
+  if (info.pairingCode) console.log(`  \u2026or the short pairing code:  ${info.pairingCode}
+`);
+}
 function usage() {
   console.log(`svamp outpost \u2014 drive a connected remote machine (FDE outpost)
 
@@ -121,6 +143,10 @@ function usage() {
                                         stdout/stderr/exit code synchronously (like a local command).
                                         With one outpost connected, --machine is optional.
   svamp outpost install [--os <os>]     Reprint the install one-liner(s) for this session's outpost
+  svamp outpost rotate [--yes]          REVOKE this session's outpost token and mint a new one.
+                                        Use after the install one-liner has been shared somewhere it
+                                        should not have been. Every currently-connected outpost stops
+                                        working and must re-run the new install command.
 
   With several machines connected, target each by id, e.g.:
     svamp outpost exec --machine build-mac "uname -a"
@@ -149,6 +175,10 @@ async function outpostCommand(args) {
     await outpostInstall(args.slice(1));
     return;
   }
+  if (sub === "rotate" || sub === "revoke") {
+    await outpostRotate(args.slice(1));
+    return;
+  }
   console.error(`unknown outpost command: ${sub}`);
   usage();
   process.exit(1);

package/dist/{commands-CiRCwjkJ.mjs → commands-CFBKkfX8.mjs}

@@ -61,7 +61,7 @@ async function serviceExpose(args) {
     process.exit(1);
   }
   if (foreground) {
-    const { runFrpcTunnel } = await import('./hookSettings-DYMTUgVA.mjs').then(function (n) { return n.w; });
+    const { runFrpcTunnel } = await import('./hookSettings-CvvUhwCK.mjs').then(function (n) { return n.w; });
     await runFrpcTunnel(name, ports, void 0, {
       group,
       groupKey,
@@ -71,7 +71,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-D1pZq3d4.mjs');
+  const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -93,7 +93,7 @@ async function serviceExpose(args) {
         console.log(`  port ${port}: ${url}`);
       }
       if (process.env.SVAMP_SESSION_ID) {
-        const { autoAddSessionLink } = await import('./agentCommands-B2Nl7Fof.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-C_KvvYFp.mjs');
         let added = 0;
         for (const [port, url] of urlEntries) {
           const label = urlEntries.length > 1 ? `${name}:${port}` : name;
@@ -129,8 +129,8 @@ async function serviceServe(args) {
     const resolvedDir = path.resolve(directory);
     console.log(`Serving ${resolvedDir}`);
     const http = await import('http');
-    const { serveStaticMount } = await import('./hookSettings-DYMTUgVA.mjs').then(function (n) { return n.x; });
-    const { getFreePort } = await import('./hookSettings-DYMTUgVA.mjs').then(function (n) { return n.w; });
+    const { serveStaticMount } = await import('./hookSettings-CvvUhwCK.mjs').then(function (n) { return n.x; });
+    const { getFreePort } = await import('./hookSettings-CvvUhwCK.mjs').then(function (n) { return n.w; });
     const server = http.createServer((req, res) => {
       const u = new URL(req.url || "/", "http://127.0.0.1");
       let rel = u.pathname;
@@ -153,7 +153,7 @@ async function serviceServe(args) {
         resolve(18080);
       });
     });
-    const { runFrpcTunnel } = await import('./hookSettings-DYMTUgVA.mjs').then(function (n) { return n.w; });
+    const { runFrpcTunnel } = await import('./hookSettings-CvvUhwCK.mjs').then(function (n) { return n.w; });
     void server;
     await runFrpcTunnel(name, [servePort]);
   } catch (err) {
@@ -163,7 +163,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-D1pZq3d4.mjs');
+    const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -203,11 +203,11 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-D1pZq3d4.mjs');
+    const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });
-      const { removeSessionLinkByService } = await import('./agentCommands-B2Nl7Fof.mjs');
+      const { removeSessionLinkByService } = await import('./agentCommands-C_KvvYFp.mjs');
       removeSessionLinkByService("tunnel", name);
       console.log(`Stopped tunnel '${name}'.`);
     } catch (err) {

package/dist/{commands-D1pZq3d4.mjs → commands-CcdoQIkb.mjs}

@@ -3,18 +3,12 @@ import { execSync, execFileSync } from 'node:child_process';
 import { basename, resolve, join, isAbsolute } from 'node:path';
 import os from 'node:os';
 import { c as connectToHypha } from './hyphaClient-ybivOjZo.mjs';
-import { f as formatHandle, c as computeOutboundHop, s as shortId, r as registerAwaitingReply, p as parseHandle, h as handleMatchesMetadata } from './friendlyName-1UZcyDhu.mjs';
+import { f as formatHandle, s as shortId, p as parseHandle, h as handleMatchesMetadata } from './friendlyName-B-OEwt0t.mjs';
 import { n as normalizeAllowedUser } from './types-57J3Re0n.mjs';
 import { loadSecurityContextConfig, resolveSecurityContext, buildSecurityContextFromFlags, mergeSecurityContexts } from './securityContext-Cm5UTCuD.mjs';
-import { b as buildSessionShareUrl, U as UNBOUNDED_LOOP_ITERATIONS, a as buildMachineShareUrl } from './loopVerify-B47sSjxe.mjs';
+import { b as buildSessionShareUrl, U as UNBOUNDED_LOOP_ITERATIONS, a as buildMachineShareUrl } from './loopVerify-CxAKJB5a.mjs';
+import { computeOutboundHop, resolveOutboundUrgency, registerAwaitingReply } from './inboxGuard-CDqmIypF.mjs';
 import { f as flushStdout } from './flushExit-C-i6SGjj.mjs';
-import 'node:crypto';
-import './instance-CeHz5C8v.mjs';
-import 'fs';
-import 'path';
-import 'os';
-import './store-Bn0ByYev.mjs';
-import './fileLock-BMPwCrB6.mjs';
 
 function formatTime(ts) {
   if (!ts) return "-";
@@ -83,6 +77,23 @@ function formatJson(data) {
   return JSON.stringify(data, null, 2);
 }
 
+function positionalArgs(args, valueFlags) {
+  const out = [];
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (a === "--") break;
+    if (a.startsWith("-") && a !== "-") {
+      if (!a.includes("=") && valueFlags.has(a)) i++;
+      continue;
+    }
+    out.push(a);
+  }
+  return out;
+}
+function firstPositional(args, valueFlags) {
+  return positionalArgs(args, valueFlags)[0];
+}
+
 function machineLabelOf(machine, index) {
   return String(
     machine?.metadata?.displayName || machine?.metadata?.host || machine?.machineId || machine?.id || `machine #${index}`
@@ -1835,6 +1846,7 @@ async function sendCore(machine, fullId, message, opts) {
     } catch {
     }
     await new Promise((r) => setTimeout(r, 2e3));
+    const modelPreSeq = wantResponse ? await snapshotLatestSeq(machine, fullId) : 0;
     const meta = { model: opts.model, sentFrom: "svamp-cli" };
     const contentStr = JSON.stringify({ role: "user", content: { type: "text", text: message }, meta });
     const sendRes = await machine.sessionRPC(fullId, "sendMessage", {
@@ -1860,7 +1872,7 @@ async function sendCore(machine, fullId, message, opts) {
     }
     let mResponse;
     if (wantResponse) {
-      mResponse = await collectAssistantResponse(machine, fullId, 0);
+      mResponse = await collectAssistantResponse(machine, fullId, modelPreSeq);
     }
     return {
       sessionId: fullId,
@@ -1884,8 +1896,14 @@ async function sendCore(machine, fullId, message, opts) {
   const preSeq = wantResponse ? await snapshotLatestSeq(machine, fullId) : 0;
   const callerSessionId = process.env.SVAMP_SESSION_ID;
   const hop = computeOutboundHop(callerSessionId);
-  let urgency = opts?.urgency ? opts.urgency : opts?.whenIdle ? "normal" : "urgent";
-  if (hop.fromInboxTurn) urgency = "normal";
+  const { urgency, downgraded } = resolveOutboundUrgency({
+    explicit: opts?.urgency,
+    whenIdle: opts?.whenIdle,
+    fromInboxTurn: hop.fromInboxTurn
+  });
+  if (downgraded) {
+    console.error("note: sent non-urgent \u2014 this turn was inbox-triggered (anti-cascade safeguard C). Pass --urgency urgent to override.");
+  }
   const inboxMessage = {
     messageId: shortId(),
     body: message,
@@ -2680,16 +2698,19 @@ async function sessionLoopStatus(sessionIdPartial, machineId) {
       return;
     }
     const config = await readJsonFile(`${base}/loop.config.json`);
-    const verdict = await readJsonFile(`${base}/evaluator-verdict.json`);
     console.log(`Loop on session ${fullId.slice(0, 8)}:`);
-    const maxN = config?.max_iterations;
+    const maxRaw = state.max_iterations ?? config?.max_iterations;
+    const maxN = typeof maxRaw === "number" && maxRaw > 0 && maxRaw < 1e6 ? maxRaw : null;
+    const turns = state.ledger?.turns ?? state.iteration ?? 0;
     console.log(`  Phase: ${state.phase || (state.active === false ? "inactive" : "running")}`);
-    console.log(`  Iteration: ${state.iteration ?? 0}${maxN ? ` / ${maxN}` : ""}`);
-    if (config?.oracle?.command) console.log(`  Oracle: ${config.oracle.command}`);
+    console.log(`  Iteration: ${turns}${maxN ? ` / ${maxN}` : " (no iteration cap)"}`);
+    const oracleCmd = state.oracle?.command ?? state.oracle ?? config?.oracle?.command;
+    if (typeof oracleCmd === "string" && oracleCmd) console.log(`  Oracle: ${oracleCmd}`);
     if (state.last_oracle) console.log(`  Last oracle: ${String(state.last_oracle).split("\n")[0]}`);
-    if (config && config.evaluator?.enabled !== false) {
-      console.log(`  Evaluator: ${verdict ? `${verdict.verdict}${verdict.reason ? ` \u2014 ${verdict.reason}` : ""}` : "on (no verdict yet)"}`);
-    }
+    const verdict = state.last_verdict ?? state.verdict;
+    console.log(`  Evaluator: ${verdict ? `${verdict.verdict ?? verdict}${verdict.reason ? ` \u2014 ${verdict.reason}` : ""}` : "on (no verdict yet)"}`);
+    if (Number.isFinite(state.auto_resumes) && state.auto_resumes > 0) console.log(`  Auto-resumes: ${state.auto_resumes}`);
+    if (Number.isFinite(state.holds) && state.holds > 0) console.log(`  Holds: ${state.holds}`);
     if (state.gave_up_reason) console.log(`  Gave up: ${state.gave_up_reason}`);
     if (Array.isArray(state.extensions) && state.extensions.length) {
       const totalTurns = state.extensions.reduce((s, e) => s + (Number.isFinite(e?.grantedTurns) && e.grantedTurns > 0 ? Math.floor(e.grantedTurns) : 0), 0);
@@ -2709,8 +2730,14 @@ async function sessionInboxSend(sessionIdPartial, body, machineId, opts) {
   try {
     const callerSessionId = process.env.SVAMP_SESSION_ID;
     const hop = computeOutboundHop(callerSessionId);
-    let urgency = opts?.urgency ? opts.urgency : opts?.whenIdle ? "normal" : "urgent";
-    if (hop.fromInboxTurn) urgency = "normal";
+    const { urgency, downgraded } = resolveOutboundUrgency({
+      explicit: opts?.urgency,
+      whenIdle: opts?.whenIdle,
+      fromInboxTurn: hop.fromInboxTurn
+    });
+    if (downgraded) {
+      console.error("note: sent non-urgent \u2014 this turn was inbox-triggered (anti-cascade safeguard C). Pass --urgency urgent to override.");
+    }
     const message = {
       messageId: shortId(),
       body,
@@ -2797,7 +2824,21 @@ ${msg.body}`);
     await server.disconnect();
   }
 }
-async function sessionInboxReply(sessionIdPartial, messageId, body, machineId) {
+const REPLY_VALUE_FLAGS = /* @__PURE__ */ new Set(["--urgency", "--subject"]);
+function replyPositionals(args) {
+  return positionalArgs(args, REPLY_VALUE_FLAGS);
+}
+const SEND_VALUE_FLAGS = /* @__PURE__ */ new Set([
+  "--timeout",
+  "--subject",
+  "--urgency",
+  "--model",
+  "--issue-title"
+]);
+function sendPositionals(args) {
+  return positionalArgs(args, SEND_VALUE_FLAGS);
+}
+async function sessionInboxReply(sessionIdPartial, messageId, body, machineId, opts) {
   const { server, machine, fullId } = await connectAndResolveSession(sessionIdPartial, machineId);
   try {
     const result = await machine.sessionRPC(fullId, "getInbox", {});
@@ -2831,10 +2872,12 @@ async function sessionInboxReply(sessionIdPartial, messageId, body, machineId) {
           fromSession: fullId,
           to: original.fromSession,
           subject: original.subject ? `Re: ${original.subject}` : void 0,
-          // A reply wakes the party who is WAITING for it — deliver urgent by default
+          // A reply wakes the party who is WAITING for it — deliver urgent by DEFAULT
           // (owner directive: replies default urgent). The hop cap + circuit breaker still
           // bound any runaway A→B→A cascade; hopCount below carries the depth for that cap.
-          urgency: "urgent",
+          // The default is deliberate and safeguard C does NOT apply here (#0290); an
+          // explicit --urgency / --when-idle is honoured so a caller can opt out by hand.
+          urgency: opts?.urgency ?? (opts?.whenIdle ? "normal" : "urgent"),
           hopCount: hop.hopCount,
           replyTo: original.messageId,
           threadId: original.threadId || original.messageId
@@ -2868,4 +2911,62 @@ async function sessionInboxClear(sessionIdPartial, machineId, opts) {
   }
 }
 
-export { collectAssistantResponse, connectAndGetMachine, connectAndResolveSession, createWorktree, generateWorktreeName, isSelfBtw, machineExec, machineInfo, machineLs, machineShare, parseShareArg, queryCore, renderMessage, resolveSessionId, sendCore, sessionApprove, sessionArchive, sessionAttach, sessionDelete, sessionDeny, sessionEditMessage, sessionInboxClear, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxSend, sessionInfo, sessionList, sessionLoopCancel, sessionLoopExtend, sessionLoopStart, sessionLoopStatus, sessionMachines, sessionMessages, sessionQuery, sessionRefineLastReply, sessionResume, sessionSend, sessionShare, sessionSpawn, sessionUndoEdit, sessionWait, sessionWhoami, snapshotLatestSeq, validateSendOptions, wiseAnnounceCli, wiseAskCli, wiseJoinMeetingCli, wiseLeaveMeetingCli, wiseMeetingsCli };
+var commands = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    REPLY_VALUE_FLAGS: REPLY_VALUE_FLAGS,
+    SEND_VALUE_FLAGS: SEND_VALUE_FLAGS,
+    collectAssistantResponse: collectAssistantResponse,
+    connectAndGetMachine: connectAndGetMachine,
+    connectAndResolveSession: connectAndResolveSession,
+    createWorktree: createWorktree,
+    generateWorktreeName: generateWorktreeName,
+    isSelfBtw: isSelfBtw,
+    machineExec: machineExec,
+    machineInfo: machineInfo,
+    machineLs: machineLs,
+    machineShare: machineShare,
+    parseShareArg: parseShareArg,
+    queryCore: queryCore,
+    renderMessage: renderMessage,
+    replyPositionals: replyPositionals,
+    resolveSessionId: resolveSessionId,
+    sendCore: sendCore,
+    sendPositionals: sendPositionals,
+    sessionApprove: sessionApprove,
+    sessionArchive: sessionArchive,
+    sessionAttach: sessionAttach,
+    sessionDelete: sessionDelete,
+    sessionDeny: sessionDeny,
+    sessionEditMessage: sessionEditMessage,
+    sessionInboxClear: sessionInboxClear,
+    sessionInboxList: sessionInboxList,
+    sessionInboxRead: sessionInboxRead,
+    sessionInboxReply: sessionInboxReply,
+    sessionInboxSend: sessionInboxSend,
+    sessionInfo: sessionInfo,
+    sessionList: sessionList,
+    sessionLoopCancel: sessionLoopCancel,
+    sessionLoopExtend: sessionLoopExtend,
+    sessionLoopStart: sessionLoopStart,
+    sessionLoopStatus: sessionLoopStatus,
+    sessionMachines: sessionMachines,
+    sessionMessages: sessionMessages,
+    sessionQuery: sessionQuery,
+    sessionRefineLastReply: sessionRefineLastReply,
+    sessionResume: sessionResume,
+    sessionSend: sessionSend,
+    sessionShare: sessionShare,
+    sessionSpawn: sessionSpawn,
+    sessionUndoEdit: sessionUndoEdit,
+    sessionWait: sessionWait,
+    sessionWhoami: sessionWhoami,
+    snapshotLatestSeq: snapshotLatestSeq,
+    validateSendOptions: validateSendOptions,
+    wiseAnnounceCli: wiseAnnounceCli,
+    wiseAskCli: wiseAskCli,
+    wiseJoinMeetingCli: wiseJoinMeetingCli,
+    wiseLeaveMeetingCli: wiseLeaveMeetingCli,
+    wiseMeetingsCli: wiseMeetingsCli
+});
+
+export { connectAndResolveSession as a, createWorktree as b, connectAndGetMachine as c, commands as d, firstPositional as f, resolveSessionId as r };

package/dist/{commands-BOpoVBOM.mjs → commands-DH_YQrAP.mjs}

@@ -1,40 +1,24 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-D1pZq3d4.mjs';
+import { f as firstPositional, c as connectAndGetMachine } from './commands-CcdoQIkb.mjs';
 import { w as wantsHelp } from './wantsHelp-6bMOeNUz.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
 import './hyphaClient-ybivOjZo.mjs';
-import './friendlyName-1UZcyDhu.mjs';
+import './friendlyName-B-OEwt0t.mjs';
 import 'node:crypto';
 import './types-57J3Re0n.mjs';
 import './securityContext-Cm5UTCuD.mjs';
-import './loopVerify-B47sSjxe.mjs';
+import './loopVerify-CxAKJB5a.mjs';
 import './instance-CeHz5C8v.mjs';
 import 'os';
-import './store-Bn0ByYev.mjs';
+import './store-D8dok6_d.mjs';
 import './fileLock-BMPwCrB6.mjs';
+import './inboxGuard-CDqmIypF.mjs';
 import './flushExit-C-i6SGjj.mjs';
 
-function positionalArgs(args, valueFlags) {
-  const out = [];
-  for (let i = 0; i < args.length; i++) {
-    const a = args[i];
-    if (a === "--") break;
-    if (a.startsWith("-") && a !== "-") {
-      if (!a.includes("=") && valueFlags.has(a)) i++;
-      continue;
-    }
-    out.push(a);
-  }
-  return out;
-}
-function firstPositional(args, valueFlags) {
-  return positionalArgs(args, valueFlags)[0];
-}
-
 const PROCESS_VALUE_FLAGS = /* @__PURE__ */ new Set([
   "-o",
   "--output",

package/dist/{commands-H4PsTGn8.mjs → commands-DRxANaS5.mjs}

@@ -1,11 +1,18 @@
 import { existsSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
+import { join, delimiter } from 'node:path';
 import { a as flushAndExit } from './flushExit-C-i6SGjj.mjs';
-import { r as resolveProjectRoot, s as searchIssues, l as listIssues, i as isPendingIssue, d as resumeIssue, e as pauseIssue, f as addComment, u as updateIssue, p as parseScopeArg, I as ISSUE_SCOPES, a as parseStatusArg, b as ISSUE_STATUSES, g as getIssue, k as checkVerifyCommand, j as isVisibleTo, m as summarize, h as addIssue } from './store-Bn0ByYev.mjs';
+import { r as resolveProjectRoot, s as searchIssues, l as listIssues, j as isPendingIssue, f as resumeIssue, h as pauseIssue, b as addComment, a as applyTriageStatus, u as updateIssue, p as parseScopeArg, I as ISSUE_SCOPES, d as parseStatusArg, e as ISSUE_STATUSES, g as getIssue, m as checkVerifyCommand, v as verifyGatePass, k as isVisibleTo, n as summarize, i as addIssue } from './store-D8dok6_d.mjs';
 import 'node:crypto';
 import 'node:child_process';
 import './fileLock-BMPwCrB6.mjs';
 
+function commandExistsOnPath(name) {
+  if (name === "true" || name === "false") return true;
+  for (const dir of (process.env.PATH || "").split(delimiter)) {
+    if (dir && existsSync(join(dir, name))) return true;
+  }
+  return false;
+}
 const STATUS_GLYPH = {
   ready: "\u25C9",
   in_progress: "\u25D0",
@@ -55,6 +62,7 @@ const VALUE_FLAGS = /* @__PURE__ */ new Set([
   "--label",
   "--option",
   "--question",
+  "--root",
   "--scope",
   "--session",
   "--status",
@@ -81,17 +89,42 @@ function shortSess(s) {
 }
 function fmtIssue(i) {
   const tri = i.triaged === false ? " \u25B3triage" : "";
-  const owner = i.status === "in_progress" && i.session ? shortSess(i.session) : "";
-  const disp = i.disposition === "crew" ? owner ? ` {crew:${owner}}` : " {crew}" : owner ? ` {session:${owner}}` : "";
+  const holder = shortSess(i.session);
+  const disp = i.disposition === "crew" ? holder ? ` {crew:${holder}}` : " {crew}" : holder ? ` {session:${holder}}` : "";
   const label = i.labels.length ? ` [${i.labels.join(", ")}]` : "";
   const v = i.verify ? ` (verify:${i.verify.type})` : "";
   const br = i.branch ? ` {branch:${i.branch}}` : "";
   const ans = i.answer ? " \u21A9answered" : "";
   return `#${i.id} ${STATUS_GLYPH[i.status]} ${i.title}${tri}${disp}${label}${v}${br}${ans}`;
 }
+function verifyGateRefusal(verb, id, res) {
+  const via = verb === "archive" ? " via edit" : "";
+  const escape = verb === "archive" ? "Use `svamp issue archive` for an obsolete/duplicate item, or pass --force to override." : "Fix the issue, or pass --force to override.";
+  if (res.notRunnable) {
+    return `Refusing to ${verb} #${id}${via}: its verify-cmd could not be RUN (command not found) \u2014 the ORACLE is mis-specified, not the fix.
+  $ ${res.cmd}
+${res.output || ""}
+Repair it, then ${verb} again:
+  svamp issue edit ${id} --verify-cmd "<a command that fails while the bug stands>"
+  svamp issue edit ${id} --verify "<a criterion>"   # when no shell command can express it
+(${escape})`;
+  }
+  return `Refusing to ${verb} #${id}${via}: its verify-cmd failed \u2014 the fix is not verified.
+  $ ${res.cmd}
+${res.output || ""}
+(${escape})`;
+}
 function buildVerify(args) {
   const cmd = flag(args, "--verify-cmd");
-  if (cmd) return { type: "command", text: cmd };
+  if (cmd) {
+    const bare = cmd.trim();
+    if (/^[A-Za-z_][A-Za-z0-9_-]*$/.test(bare) && !commandExistsOnPath(bare)) {
+      console.error(`Refusing to set --verify-cmd "${bare}": that is a single word and it is not an executable on PATH, so the gate could never pass and the issue could never be closed.`);
+      console.error(`Did you mean --verify "${bare}" (an evaluator criterion), or a real command?`);
+      process.exit(1);
+    }
+    return { type: "command", text: cmd };
+  }
   const agent = flag(args, "--verify");
   if (agent) return { type: "agent", text: agent };
   if (has(args, "--manual")) return { type: "manual" };
@@ -100,7 +133,12 @@ function buildVerify(args) {
 async function issueCommand(args) {
   const sub = args.some((a) => a === "--help" || a === "-h") ? "help" : args[0];
   const rest = args.slice(1);
-  const root = resolveProjectRoot();
+  const rootFlag = flag(rest, "--root");
+  if (rootFlag !== void 0 && !existsSync(join(rootFlag, ".svamp", "issues"))) {
+    console.error(`svamp issue: no tracker at ${rootFlag} \u2014 expected ${join(rootFlag, ".svamp", "issues")}`);
+    process.exit(1);
+  }
+  const root = rootFlag ?? resolveProjectRoot();
   const json = has(args, "--json");
   const sessionId = process.env.SVAMP_SESSION_ID || null;
   const out = (text) => console.log(text);
@@ -126,7 +164,12 @@ async function issueCommand(args) {
       }
       const labels = rest.filter((a, idx) => rest[idx - 1] === "--label");
       const owner = flag(rest, "--session") || sessionId;
-      const scope = flag(rest, "--scope") || (owner ? "session" : "project");
+      const rawScope = flag(rest, "--scope");
+      const scope = rawScope == null ? owner ? "session" : "project" : parseScopeArg(rawScope);
+      if (!scope) {
+        console.error(`Invalid --scope "${rawScope}". Must be one of: ${ISSUE_SCOPES.join(", ")}.`);
+        process.exit(1);
+      }
       const issue = addIssue(root, {
         title,
         // New issues are actionable immediately (#0049) — there is no backlog to promote from.
@@ -241,12 +284,10 @@ ${issue.body}`);
           } else {
             const res = checkVerifyCommand(root, current);
             if (!res.ok) {
-              console.error(`Refusing to close #${id}: its verify-cmd failed \u2014 the fix is not verified.
-  $ ${res.cmd}
-${res.output || ""}
-(Fix the issue, or pass --force to override.)`);
+              console.error(verifyGateRefusal("close", id, res));
               process.exit(1);
             }
+            console.error(verifyGatePass(res));
           }
         }
       }
@@ -297,12 +338,10 @@ ${res.output || ""}
             } else {
               const res = checkVerifyCommand(root, current);
               if (!res.ok) {
-                console.error(`Refusing to archive #${id} via edit: its verify-cmd failed \u2014 the fix is not verified.
-  $ ${res.cmd}
-${res.output || ""}
-(Use \`svamp issue archive\` for an obsolete/duplicate item, or pass --force to override.)`);
+                console.error(verifyGateRefusal("archive", id, res));
                 process.exit(1);
               }
+              console.error(verifyGatePass(res));
             }
           }
         }
@@ -334,7 +373,10 @@ ${res.output || ""}
       const tv = buildVerify(rest);
       if (tv) patch.verify = tv;
       if (flag(rest, "--body")) patch.body = flag(rest, "--body");
-      patch.status = "ready";
+      applyTriageStatus(root, id, patch, (m) => {
+        console.error(m);
+        process.exit(1);
+      });
       const updated = updateIssue(root, id, patch);
       if (!updated) {
         console.error(`Issue not found: ${id}`);
@@ -407,6 +449,7 @@ the user explicitly reserved): re-run with \`--blocked "<the specific blocker>"\
       const pending = listIssues(root).filter(inScope).filter(isPendingIssue);
       if (json) console.log(JSON.stringify(pending));
       else out(pending.length ? `${pending.length} pending: ${pending.map((i) => "#" + i.id).join(" ")}` : "No pending issues.");
+      console.error(`tracker: ${join(root, ".svamp", "issues")}${mine ? `  scope: session ${mine}` : "  scope: all"}`);
       await flushAndExit(pending.length ? 1 : 0);
       break;
     }
@@ -528,8 +571,11 @@ the user explicitly reserved): re-run with \`--blocked "<the specific blocker>"\
         "          # A paused issue drops out of `pending`, so a loop converges cleanly instead",
         '          # of spinning on it. NOT for "please check my work" \u2014 close finished work.',
         '  resume <id> [--answer "\u2026"]   # un-pause (the user answering a --question resumes it automatically)',
-        "  pending [--session <id>] [--mine]   # exit 0 when NO issue is open \u2014 i.e. every issue is",
-        "          # archived or paused. Counted by EXCLUSION, not an allow-list (#107). The loop oracle.",
+        "  pending [--session <id>] [--mine] [--root <path>]   # exit 0 when NO issue is open \u2014 i.e. every",
+        "          # issue is archived or paused. Counted by EXCLUSION, not an allow-list (#107). The loop oracle.",
+        "          # It names the tracker it read on stderr. Pass --root to PIN that tracker instead of",
+        "          # walking up from the cwd: from the wrong directory the verdict is a clean exit 0 about",
+        "          # somebody else's backlog, and it reads identically to your own being done (#0315).",
         '  search "<query>" [--json]',
         "  guide <triage|work>   # the triage / work-loop procedure (so triggers can stay short)"
       ].join("\n"));
@@ -540,4 +586,4 @@ the user explicitly reserved): re-run with \`--blocked "<the specific blocker>"\
   }
 }
 
-export { VALUE_FLAGS, issueCommand, loopActiveForCwd, positional };
+export { VALUE_FLAGS, fmtIssue, issueCommand, loopActiveForCwd, positional };