svamp-cli 0.2.356 → 0.2.358

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { c as clearStopMarker, b as stopMarkerExists, s as startDaemon, a as stopDaemon, d as daemonStatus } from './run-DDmeV9K3.mjs';
+import { c as clearStopMarker, b as stopMarkerExists, s as startDaemon, a as stopDaemon, d as daemonStatus } from './run-DKOND4dO.mjs';
 import { ensureSupervisorViaServiceManager, LAUNCHD_LABEL } from './serviceManager-hlOVxkhW.mjs';
 import { f as flushStdout, a as flushAndExit } from './flushExit-C-i6SGjj.mjs';
 import { w as wantsHelp } from './wantsHelp-6bMOeNUz.mjs';
@@ -9,7 +9,7 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import './hookSettings-FFc1pi8j.mjs';
+import './hookSettings-CvvUhwCK.mjs';
 import 'node:crypto';
 import './types-57J3Re0n.mjs';
 import './securityContext-Cm5UTCuD.mjs';
@@ -25,12 +25,13 @@ import './serveAuth-4M0vwMyj.mjs';
 import 'node:os';
 import 'node:path';
 import './envFlag-COOuJ3AH.mjs';
-import './claudeAuth-C0wc1GTM.mjs';
+import './claudeAuth-DMDvPNhO.mjs';
 import './fileLock-BMPwCrB6.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
-import './friendlyName-1UZcyDhu.mjs';
+import './inboxGuard-CDqmIypF.mjs';
 import 'node:events';
 import './cron-hHGdb5kU.mjs';
+import './friendlyName-B-OEwt0t.mjs';
 import './hyphaClient-ybivOjZo.mjs';
 import './sharingNotificationSync-qGIQ-3yf.mjs';
 import './acpBackend-UaBD4zL3.mjs';
@@ -50,8 +51,8 @@ import './detectIsolation-CrV8IFDv.mjs';
 import 'node:fs/promises';
 import './pinnedNono-5ZHb6328.mjs';
 import './bootStatus-DqtNgJch.mjs';
-import './loopVerify-DALtTk2V.mjs';
-import './store-B4E6NzG6.mjs';
+import './loopVerify-CxAKJB5a.mjs';
+import './store-D8dok6_d.mjs';
 import './api-BHjyC0Ph.mjs';
 import './store-fi0f-ff1.mjs';
 import 'yaml';
@@ -89,7 +90,7 @@ async function main() {
       }
       const whenIdle = args.includes("--when-idle");
       const force = args.includes("--force");
-      const mod = await import('./run-DDmeV9K3.mjs').then(function (n) { return n.h; });
+      const mod = await import('./run-DKOND4dO.mjs').then(function (n) { return n.i; });
       if (whenIdle && !force) {
         if (mod.isDaemonAlive()) {
           mod.writePendingRestart({ reason: "svamp daemon restart --when-idle" });
@@ -255,7 +256,7 @@ async function main() {
         releaseSupervisorLock,
         findOrphanedSyncPids,
         killOrphanedSyncs
-      } = await import('./run-DDmeV9K3.mjs').then(function (n) { return n.f; });
+      } = await import('./run-DKOND4dO.mjs').then(function (n) { return n.h; });
       const supervisorPidFile = pathJoin(svampHome, "supervisor.pid");
       const lock = acquireSupervisorLockWithRetry(supervisorPidFile, process.pid);
       if (!lock.acquired) {
@@ -473,7 +474,7 @@ async function main() {
       await flushStdout();
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-sPvRcG3J.mjs');
+    const { handleServiceCommand } = await import('./commands-CFBKkfX8.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-Cdzsj5TC.mjs');
@@ -482,7 +483,7 @@ async function main() {
       await flushStdout();
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-CLhkccJM.mjs');
+    const { handleServeCommand } = await import('./serveCommands-B-Ym_QXc.mjs');
     await handleServeCommand();
     await flushStdout();
     process.exit(0);
@@ -493,7 +494,7 @@ async function main() {
       await flushStdout();
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-BMeDrpSv.mjs');
+    const { processCommand } = await import('./commands-DH_YQrAP.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -508,16 +509,16 @@ async function main() {
     await flushStdout();
     process.exit(0);
   } else if (subcommand === "outpost") {
-    const { outpostCommand } = await import('./commands-C13-yE2R.mjs');
+    const { outpostCommand } = await import('./commands-Bmoy6Rlw.mjs');
     await outpostCommand(args.slice(1));
     await flushStdout();
     process.exit(0);
   } else if (subcommand === "issue" || subcommand === "issues") {
-    const { issueCommand } = await import('./commands-BbmypSgx.mjs');
+    const { issueCommand } = await import('./commands-DRxANaS5.mjs');
     await issueCommand(args.slice(1));
     await flushAndExit(0);
   } else if (subcommand === "workflow" || subcommand === "workflows") {
-    const { workflowCommand } = await import('./commands-CoOc4qiw.mjs');
+    const { workflowCommand } = await import('./commands-B19lVZjm.mjs');
     await workflowCommand(args.slice(1));
     await flushAndExit(0);
   } else if (subcommand === "wise-agent" || subcommand === "wise") {
@@ -525,7 +526,7 @@ async function main() {
     await flushStdout();
     process.exit(0);
   } else if (subcommand === "feature" || subcommand === "crew") {
-    const { crewCommand } = await import('./commands-BkdbelFo.mjs');
+    const { crewCommand } = await import('./commands-nkvTnUJj.mjs');
     await crewCommand(args.slice(1));
     await flushStdout();
     process.exit(0);
@@ -592,7 +593,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-BrsiNutS.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-DTTWvJbp.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -602,7 +603,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-DCq3aEiF.mjs');
+  const { runInteractive } = await import('./run-Bc81iurl.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -657,15 +658,19 @@ async function handleAgentCommand() {
     }
     console.log('\nUse "svamp agent <name>" to start an interactive session.');
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
+    console.log("Tool calls are prompted on a terminal; add --auto-approve (-y) to allow them unattended.");
     return;
   }
   const { resolveAcpAgentConfig, KNOWN_CODEX_AGENTS } = await import('./acpAgentConfig-CObOPlA8.mjs');
   let cwd = process.cwd();
+  let autoApprove = false;
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
     if ((agentArgs[i] === "-d" || agentArgs[i] === "--directory") && i + 1 < agentArgs.length) {
       cwd = agentArgs[i + 1];
       i++;
+    } else if (agentArgs[i] === "--auto-approve" || agentArgs[i] === "--yes" || agentArgs[i] === "-y") {
+      autoApprove = true;
     } else {
       filteredArgs.push(agentArgs[i]);
     }
@@ -682,6 +687,48 @@ async function handleAgentCommand() {
     if (process.env.DEBUG) console.error("[debug]", ...logArgs);
   };
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
+  let replRl = null;
+  const stdinIsTty = Boolean(process.stdin.isTTY);
+  let approveAllForSession = autoApprove;
+  const permissionHandler = {
+    async handleToolCall(_toolCallId, toolName, input) {
+      if (approveAllForSession) {
+        return { decision: "approved" };
+      }
+      if (!stdinIsTty || !replRl) {
+        console.error(
+          `
+[permission] DENIED ${toolName}: no terminal to ask on. Re-run with --auto-approve to allow tool calls unattended, or use \`svamp session spawn ${config.agentName}\` for a managed session.`
+        );
+        return { decision: "denied" };
+      }
+      const preview = (() => {
+        try {
+          const j = JSON.stringify(input);
+          return j && j.length > 200 ? j.slice(0, 200) + "\u2026" : j || "";
+        } catch {
+          return "";
+        }
+      })();
+      const answer = await new Promise((resolve) => {
+        replRl.question(
+          `
+[permission] ${toolName} ${preview}
+  allow? [y]es / [n]o / [a]ll for this session: `,
+          (a) => resolve(String(a || "").trim().toLowerCase())
+        );
+      });
+      if (answer === "a" || answer === "all") {
+        approveAllForSession = true;
+        return { decision: "approved_for_session" };
+      }
+      if (answer === "y" || answer === "yes") return { decision: "approved" };
+      return { decision: "denied" };
+    }
+  };
+  console.log(
+    autoApprove ? "Tool calls: AUTO-APPROVED (--auto-approve)." : stdinIsTty ? "Tool calls: you will be asked to approve each one (y / n / a)." : "Tool calls: DENIED \u2014 stdin is not a terminal. Re-run with --auto-approve to allow them."
+  );
   let backend;
   if (KNOWN_CODEX_AGENTS[config.agentName]) {
     const { CodexAppServerBackend } = await import('./codexAppServerBackend-VGsYtbqg.mjs').then(function (n) { return n.a; });
@@ -706,7 +753,9 @@ async function handleAgentCommand() {
       args: config.args,
       transportHandler,
       env: acpEnv,
-      log: logFn
+      log: logFn,
+      permissionHandler
+      // #1715 — without one, AcpBackend cancels every tool call (#1630)
     });
   }
   let currentText = "";
@@ -772,6 +821,7 @@ Agent stopped: ${msg.detail || ""}`);
     output: process.stdout,
     terminal: false
   });
+  replRl = rl;
   rl.on("line", async (line) => {
     const trimmed = line.trim();
     if (!trimmed) return;
@@ -829,7 +879,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionWhoami, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionLoopStart, sessionLoopCancel, sessionLoopStatus, sessionLoopExtend, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-B-yczgz_.mjs');
+  const { sessionList, sessionWhoami, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionLoopStart, sessionLoopCancel, sessionLoopStatus, sessionLoopExtend, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, replyPositionals, sendPositionals, sessionInboxClear } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -845,6 +895,16 @@ async function handleSessionCommand() {
     return isNaN(n) ? void 0 : n;
   };
   const hasFlag = (flag) => sessionArgs.includes(flag);
+  const { parseUrgencyValue } = await import('./inboxGuard-CDqmIypF.mjs');
+  const urgencyFlag = async () => {
+    const parsed = parseUrgencyValue(parseFlagStr("--urgency"), { present: hasFlag("--urgency") });
+    if (!parsed.ok) {
+      console.error(parsed.message);
+      await flushStdout();
+      process.exit(1);
+    }
+    return parsed.value;
+  };
   if (sessionSubcommand === "machines" || sessionSubcommand === "machine") {
     await sessionMachines();
   } else if (sessionSubcommand === "list" || sessionSubcommand === "ls") {
@@ -902,7 +962,7 @@ async function handleSessionCommand() {
       const warning = describeUnenforceable("nono", { filesystem: { denyRead } });
       if (warning) console.warn(`Warning: ${warning}`);
     }
-    const { parseShareArg } = await import('./commands-B-yczgz_.mjs');
+    const { parseShareArg } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -971,7 +1031,8 @@ async function handleSessionCommand() {
     }
     await sessionAttach(sessionArgs[1], targetMachineId);
   } else if (sessionSubcommand === "send") {
-    if (!sessionArgs[1] || !sessionArgs[2]) {
+    const sendPos = sendPositionals(sessionArgs.slice(1));
+    if (!sendPos[0] || !sendPos[1]) {
       console.error('Usage: svamp session send <session-id> <message> [--model <id>] [--plain] [--subject "..."] [--when-idle] [--urgency urgent|normal] [--wait] [--response] [--btw] [--require-approval] [--as-issue [--issue-title "..."]] [--timeout N] [--json]');
       console.error("  --when-idle    Deferred delivery: park the message and let the recipient handle it on its next idle turn (default is urgent \u2014 wakes immediately).");
       console.error("  --model <id>   Switch the session model (e.g. claude-opus-4-7, claude-sonnet-4-6) before delivering the message \u2014 forces a respawn.");
@@ -979,7 +1040,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    await sessionSend(sessionArgs[1], sessionArgs[2], targetMachineId, {
+    await sessionSend(sendPos[0], sendPos[1], targetMachineId, {
       wait: hasFlag("--wait"),
       response: hasFlag("--response"),
       btw: hasFlag("--btw"),
@@ -988,7 +1049,7 @@ async function handleSessionCommand() {
       json: hasFlag("--json"),
       subject: parseFlagStr("--subject"),
       whenIdle: hasFlag("--when-idle"),
-      urgency: parseFlagStr("--urgency"),
+      urgency: await urgencyFlag(),
       model: parseFlagStr("--model"),
       plain: hasFlag("--plain"),
       asIssue: hasFlag("--as-issue"),
@@ -1001,7 +1062,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionEditMessage } = await import('./commands-B-yczgz_.mjs');
+    const { sessionEditMessage } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await sessionEditMessage(sessionArgs[1], sessionArgs[2], sessionArgs[3], targetMachineId);
   } else if (sessionSubcommand === "refine") {
     if (!sessionArgs[1] || !sessionArgs[2]) {
@@ -1010,7 +1071,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionRefineLastReply } = await import('./commands-B-yczgz_.mjs');
+    const { sessionRefineLastReply } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await sessionRefineLastReply(sessionArgs[1], sessionArgs[2], targetMachineId);
   } else if (sessionSubcommand === "undo-edit" || sessionSubcommand === "undo") {
     if (!sessionArgs[1]) {
@@ -1019,7 +1080,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionUndoEdit } = await import('./commands-B-yczgz_.mjs');
+    const { sessionUndoEdit } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await sessionUndoEdit(sessionArgs[1], targetMachineId);
   } else if (sessionSubcommand === "query") {
     const dir = sessionArgs[1];
@@ -1030,7 +1091,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionQuery } = await import('./commands-B-yczgz_.mjs');
+    const { sessionQuery } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await sessionQuery(dir, prompt, targetMachineId, {
       timeout: parseFlagInt("--timeout"),
       json: hasFlag("--json"),
@@ -1066,7 +1127,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-B-yczgz_.mjs');
+    const { sessionApprove } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -1077,7 +1138,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-B-yczgz_.mjs');
+    const { sessionDeny } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -1134,7 +1195,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-C_KvvYFp.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-project-description" || sessionSubcommand === "set-project") {
     const desc = sessionArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
@@ -1143,7 +1204,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionSetProjectDescription } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { sessionSetProjectDescription } = await import('./agentCommands-C_KvvYFp.mjs');
     await sessionSetProjectDescription(desc);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -1153,11 +1214,11 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { sessionSetLink } = await import('./agentCommands-C_KvvYFp.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "link") {
     const op = sessionArgs[1];
-    const lm = await import('./agentCommands-D91RcjqQ.mjs');
+    const lm = await import('./agentCommands-C_KvvYFp.mjs');
     if (op === "add") {
       const url = sessionArgs[2];
       if (!url || url.startsWith("--")) {
@@ -1194,7 +1255,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { sessionNotify } = await import('./agentCommands-C_KvvYFp.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -1203,7 +1264,7 @@ async function handleSessionCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-C_KvvYFp.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -1215,24 +1276,24 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-D91RcjqQ.mjs');
+        const { inboxSend } = await import('./agentCommands-C_KvvYFp.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
-          urgency: parseFlagStr("--urgency"),
+          urgency: await urgencyFlag(),
           whenIdle: hasFlag("--when-idle")
         });
       } else {
         await sessionInboxSend(sessionArgs[2], sessionArgs[3], targetMachineId, {
           subject: parseFlagStr("--subject"),
-          urgency: parseFlagStr("--urgency"),
+          urgency: await urgencyFlag(),
           whenIdle: hasFlag("--when-idle"),
           json: hasFlag("--json")
         });
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-D91RcjqQ.mjs');
+        const { inboxList } = await import('./agentCommands-C_KvvYFp.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -1256,7 +1317,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-D91RcjqQ.mjs');
+        const { inboxList } = await import('./agentCommands-C_KvvYFp.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -1266,13 +1327,15 @@ async function handleSessionCommand() {
         process.exit(1);
       }
     } else if (inboxSubcmd === "reply") {
-      if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-D91RcjqQ.mjs');
-        await inboxReply(sessionArgs[2], sessionArgs[3]);
-      } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
-        await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
+      const pos = replyPositionals(sessionArgs.slice(2));
+      const replyOpts = { urgency: await urgencyFlag(), whenIdle: hasFlag("--when-idle") };
+      if (agentSessionId && pos[0] && pos[1] && !pos[2]) {
+        const { inboxReply } = await import('./agentCommands-C_KvvYFp.mjs');
+        await inboxReply(pos[0], pos[1], replyOpts);
+      } else if (pos[0] && pos[1] && pos[2]) {
+        await sessionInboxReply(pos[0], pos[1], pos[2], targetMachineId, replyOpts);
       } else {
-        console.error('Usage: svamp session inbox reply <session-id> <message-id> "<body>"');
+        console.error('Usage: svamp session inbox reply <session-id> <message-id> "<body>" [--urgency urgent|normal] [--when-idle]');
         await flushStdout();
         process.exit(1);
       }
@@ -1310,7 +1373,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-B-yczgz_.mjs');
+    const { machineShare } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -1365,11 +1428,11 @@ async function handleMachineCommand() {
       const { fleetExec } = await import('./fleet-Ca-UjJNL.mjs');
       await fleetExec(command, { cwd });
     } else {
-      const { machineExec } = await import('./commands-B-yczgz_.mjs');
+      const { machineExec } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
       await machineExec(machineId, command, cwd);
     }
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-B-yczgz_.mjs');
+    const { machineInfo } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -1401,10 +1464,10 @@ async function handleMachineCommand() {
       await flushStdout();
       process.exit(1);
     }
-    const { machineNotify } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { machineNotify } = await import('./agentCommands-C_KvvYFp.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-B-yczgz_.mjs');
+    const { machineLs } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     let machineId;
     let showHidden = false;
     let path;
@@ -2082,7 +2145,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./claudeAuth-C0wc1GTM.mjs');
+  const mod = await import('./claudeAuth-DMDvPNhO.mjs');
   if (hasHypha) {
     let url;
     const hyphaIdx = argv.indexOf("--use-hypha-proxy");
@@ -2136,7 +2199,7 @@ async function applyDaemonShareFlag(argv) {
     }
   }
   if (collected.length === 0) return;
-  const { updateEnvFile } = await import('./claudeAuth-C0wc1GTM.mjs');
+  const { updateEnvFile } = await import('./claudeAuth-DMDvPNhO.mjs');
   const seen = /* @__PURE__ */ new Set();
   const deduped = collected.filter((e) => {
     const k = e.toLowerCase();
@@ -2169,7 +2232,7 @@ async function handleWiseAgentCommand(rest) {
       }
     });
     const message = rest.slice(1).map((a, idx) => ({ a, idx: idx + 1 })).filter(({ a, idx }) => !a.startsWith("-") && !consumed.has(String(idx))).map(({ a }) => a).join(" ");
-    const { wiseAskCli } = await import('./commands-B-yczgz_.mjs');
+    const { wiseAskCli } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await wiseAskCli(machineId, message, sessionId, { json });
     return;
   }
@@ -2181,7 +2244,7 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { runWiseVoiceCli } = await import('./headlessCli-C8HzQvis.mjs');
+    const { runWiseVoiceCli } = await import('./headlessCli-BpTXz6FD.mjs');
     await runWiseVoiceCli({ voice: valueOf(["--voice"]), wakeKeywordPath: valueOf(["--wake"]), model: valueOf(["--model"]) });
     return;
   }
@@ -2199,7 +2262,7 @@ async function handleWiseAgentCommand(rest) {
     const mode = valueOf(["--mode"]);
     const mission = valueOf(["--mission"]);
     const url = rest.slice(1).find((a) => /^https?:\/\//.test(a)) || "";
-    const { wiseJoinMeetingCli } = await import('./commands-B-yczgz_.mjs');
+    const { wiseJoinMeetingCli } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await wiseJoinMeetingCli(machineId, url, sessionId, { json, mode, mission });
     return;
   }
@@ -2211,7 +2274,7 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { wiseLeaveMeetingCli } = await import('./commands-B-yczgz_.mjs');
+    const { wiseLeaveMeetingCli } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await wiseLeaveMeetingCli(valueOf(["--machine", "-m"]), valueOf(["--session", "-s"]), { json: rest.includes("--json") });
     return;
   }
@@ -2235,7 +2298,7 @@ async function handleWiseAgentCommand(rest) {
       }
     });
     const text = rest.slice(1).map((a, idx) => ({ a, idx: idx + 1 })).filter(({ a, idx }) => !a.startsWith("-") && !consumed.has(String(idx))).map(({ a }) => a).join(" ");
-    const { wiseAnnounceCli } = await import('./commands-B-yczgz_.mjs');
+    const { wiseAnnounceCli } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await wiseAnnounceCli(machineId, text, sessionId, { json });
     return;
   }
@@ -2247,7 +2310,7 @@ async function handleWiseAgentCommand(rest) {
       }
       return void 0;
     };
-    const { wiseMeetingsCli } = await import('./commands-B-yczgz_.mjs');
+    const { wiseMeetingsCli } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
     await wiseMeetingsCli(valueOf(["--machine", "-m"]), { json: rest.includes("--json") });
     return;
   }
@@ -2308,7 +2371,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
     return;
   }
   if (action) {
-    const { updateEnvFile } = await import('./claudeAuth-C0wc1GTM.mjs');
+    const { updateEnvFile } = await import('./claudeAuth-DMDvPNhO.mjs');
     const updates = mod.buildWiseAgentEnvUpdates(action);
     updateEnvFile(updates);
     for (const [k, v] of Object.entries(updates)) {
@@ -2322,7 +2385,7 @@ If none is set, hitting a WISE Agent channel returns a clear "not configured" er
 }
 async function handleDaemonAuthCommand(argv) {
   const sub = wantsHelp(argv) ? "--help" : (argv[0] || "status").toLowerCase();
-  const mod = await import('./claudeAuth-C0wc1GTM.mjs');
+  const mod = await import('./claudeAuth-DMDvPNhO.mjs');
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate
@@ -2399,7 +2462,7 @@ one step: --use-hypha-proxy / --use-claude-login / --anthropic-base-url URL --an
 }
 async function handleDaemonCodexAuthCommand(argv) {
   const sub = wantsHelp(argv) ? "--help" : (argv[0] || "status").toLowerCase();
-  const { updateEnvFile } = await import('./claudeAuth-C0wc1GTM.mjs');
+  const { updateEnvFile } = await import('./claudeAuth-DMDvPNhO.mjs');
   const { resolveCodexProvider } = await import('./codexProvider-BtxYc5Rj.mjs');
   const redact = (k) => k && k.length > 10 ? `${k.slice(0, 6)}\u2026${k.slice(-4)}` : k ? "***" : "(unset)";
   if (sub === "--help" || sub === "-h" || sub === "help") {
@@ -2488,7 +2551,7 @@ The generic LLM_API_BASE / LLM_API_KEY / LLM_MODEL env vars are also honored if
 }
 async function handleDaemonKimiAuthCommand(argv) {
   const sub = wantsHelp(argv) ? "--help" : (argv[0] || "status").toLowerCase();
-  const { updateEnvFile } = await import('./claudeAuth-C0wc1GTM.mjs');
+  const { updateEnvFile } = await import('./claudeAuth-DMDvPNhO.mjs');
   const { resolveKimiProvider, buildKimiCatalogAddArgs, DEFAULT_KIMI_PROVIDER } = await import('./kimiProvider-DbxODebR.mjs');
   const redact = (k) => k && k.length > 10 ? `${k.slice(0, 6)}\u2026${k.slice(-4)}` : k ? "***" : "(unset)";
   const PRESETS = {
@@ -2655,9 +2718,13 @@ COMMANDS:
                                           the message lands in the peer's inbox and is processed on
                                           their next idle turn (no interrupt). Loop safeguard: a send
                                           issued from a turn that was itself triggered by an inbox
-                                          message is always forced non-urgent (no recursive wake
-                                          cascades); the daemon's per-sender rate limit + circuit
-                                          breaker further bound any storm.
+                                          message DEFAULTS to non-urgent (no recursive wake cascades)
+                                          and says so on stderr; pass --urgency urgent to override.
+                                          This safeguard covers "send" and "inbox send" only \u2014
+                                          "inbox reply" deliberately defaults urgent (it wakes a party
+                                          that is waiting) and is bounded by the hop cap instead.
+                                          The daemon's per-sender rate limit + circuit breaker
+                                          further bound any storm.
                                             --when-idle         defer: handle on the recipient's
                                                                 next idle turn (opposite of the
                                                                 urgent default)
@@ -2719,7 +2786,9 @@ COMMANDS:
     inbox send <id> "<body>" [opts]       Send a message to session inbox
     inbox list <id> [--unread] [--json]   List inbox messages
     inbox read <id> <msg-id>              Read and mark a message
-    inbox reply <id> <msg-id> "<body>"    Reply to sender's session
+    inbox reply <id> <msg-id> "<body>"    Reply to sender's session (urgent by default \u2014
+        [--urgency urgent|normal]         it wakes a party that is waiting; --when-idle or
+        [--when-idle]                     --urgency normal defers to their next idle turn)
     inbox clear <id> [--all]              Clear read (or all) messages
 
 SPAWN OPTIONS:

package/dist/{commands-CoOc4qiw.mjs → commands-B19lVZjm.mjs}

@@ -1,4 +1,4 @@
-import { r as resolveProjectRoot } from './store-B4E6NzG6.mjs';
+import { r as resolveProjectRoot } from './store-D8dok6_d.mjs';
 import { w as wantsHelp } from './wantsHelp-6bMOeNUz.mjs';
 import { s as setWorkflowEnabled, i as isWorkflowEnabled, r as removeWorkflow, g as getWorkflow, l as listWorkflows, c as workflowSteps, a as saveWorkflow, b as rawWorkflow } from './store-fi0f-ff1.mjs';
 import { v as validateCronExpr, d as describeNextFire } from './cron-hHGdb5kU.mjs';
@@ -21,7 +21,7 @@ function positional(args) {
   for (let i = 0; i < args.length; i++) {
     const a = args[i];
     if (a.startsWith("--")) {
-      if (a !== "--json") i++;
+      if (a !== "--json" && a !== "--force" && a !== "--replace") i++;
       continue;
     }
     out.push(a);
@@ -75,6 +75,13 @@ async function workflowCommand(args) {
       if (onKinds.includes("idle")) on.idle = true;
       const owner = flag(rest, "--session") || process.env.SVAMP_SESSION_ID || null;
       const wf = { name, on: Object.keys(on).length ? on : void 0, jobs: { run: { steps: runs.map((r) => ({ run: r })) } }, session: owner };
+      if (!rest.includes("--force") && !rest.includes("--replace") && getWorkflow(root, name)) {
+        console.error(`Workflow "${name}" already exists \u2014 refusing to replace it (that would discard its steps, schedule and owning session).`);
+        console.error(`  svamp workflow show ${name}          # see what is there now`);
+        console.error(`  svamp workflow add ${name} --force \u2026  # deliberately replace it`);
+        console.error(`  svamp workflow remove ${name}        # or remove it first`);
+        process.exit(1);
+      }
       saveWorkflow(root, wf);
       const nSteps = workflowSteps(wf).length;
       if (json) console.log(JSON.stringify(wf));
@@ -147,7 +154,7 @@ async function workflowCommand(args) {
         console.error(`Workflow not found: ${name}`);
         process.exit(1);
       }
-      const { runWorkflow } = await import('./run-DDmeV9K3.mjs').then(function (n) { return n.e; });
+      const { runWorkflow } = await import('./run-DKOND4dO.mjs').then(function (n) { return n.f; });
       const run = await runWorkflow(root, wf, { trigger: "manual", actor: process.env.SVAMP_SESSION_ID || null });
       console.log(`\u25B6 ran workflow "${wf.name}" (${run.steps.length} step${run.steps.length === 1 ? "" : "s"}) \u2192 ${run.status}`);
       for (const st of run.steps) {