svamp-cli 0.2.356 → 0.2.358

package/dist/{run-DCq3aEiF.mjs → run-Bc81iurl.mjs}

@@ -1,12 +1,12 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { a as composeSessionId, g as generateFriendlyName } from './friendlyName-1UZcyDhu.mjs';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import { c as composeSessionId, g as generateFriendlyName } from './friendlyName-B-OEwt0t.mjs';
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';
 import { c as connectToHypha } from './hyphaClient-ybivOjZo.mjs';
-import { c as createSessionStore, r as registerMachineService, g as generateHookSettings } from './hookSettings-FFc1pi8j.mjs';
+import { c as createSessionStore, r as registerMachineService, g as generateHookSettings } from './hookSettings-CvvUhwCK.mjs';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
-import { applyClaudeProxyEnv } from './claudeAuth-C0wc1GTM.mjs';
+import { applyClaudeProxyEnv } from './claudeAuth-DMDvPNhO.mjs';
 import { createInterface } from 'node:readline';
 import 'node:crypto';
 import 'fs';
@@ -26,6 +26,7 @@ import './instance-CeHz5C8v.mjs';
 import './serveAuth-4M0vwMyj.mjs';
 import './envFlag-COOuJ3AH.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
+import './inboxGuard-CDqmIypF.mjs';
 import './fileLock-BMPwCrB6.mjs';
 import 'node:events';
 import './cron-hHGdb5kU.mjs';
@@ -321,6 +322,7 @@ async function runRemoteMode(opts) {
     opts.abort.addEventListener("abort", () => abortController.abort(), { once: true });
   }
   try {
+    let liveSessionId = opts.claudeSessionId;
     while (!exitReason && !abortController.signal.aborted) {
       const message = await Promise.race([
         opts.nextMessage(),
@@ -334,12 +336,25 @@ async function runRemoteMode(opts) {
         claudeBin,
         cwd,
         message,
-        sessionId: opts.claudeSessionId,
+        // #1703: read the LIVE id, not the one captured when runRemoteMode was called.
+        //
+        // This used to pass `opts.claudeSessionId`, which is frozen at entry — and the id
+        // discovered on turn 1 is written by onSessionFound into loop.ts's own variable,
+        // which this function will not re-read until it returns and is called again. So
+        // turn 2 spawned with NO --resume: the web app sent "read foo.ts" then "now
+        // refactor it", and the second turn had never heard of foo.ts. EVERY remote-mode
+        // turn after the first was amnesiac, and each one was a full uncached prefix.
+        // loop.ts's header states the intended contract: "Session ID is preserved across
+        // switches (same Claude conversation)."
+        sessionId: liveSessionId,
         permissionMode: opts.permissionMode,
         hookSettingsPath: opts.hookSettingsPath,
         claudeArgs: opts.claudeArgs,
         signal: abortController.signal,
-        onSessionFound: opts.onSessionFound,
+        onSessionFound: (id) => {
+          liveSessionId = id;
+          opts.onSessionFound(id);
+        },
         onThinkingChange,
         onMessage,
         log
@@ -385,6 +400,8 @@ async function runClaudeTurn(opts) {
 `);
   const spawnEnv = { ...process.env, CLAUDE_CODE_ENTRYPOINT: "sdk-ts" };
   delete spawnEnv.CLAUDECODE;
+  const proxyDesc = applyClaudeProxyEnv(spawnEnv);
+  if (proxyDesc) opts.log?.(`[remote] Claude auth: ${proxyDesc}`);
   const child = spawn(opts.claudeBin, args, {
     stdio: ["pipe", "pipe", "pipe"],
     cwd: opts.cwd,
@@ -526,7 +543,7 @@ function mapPermissionMode(mode) {
 async function loop(opts) {
   const { log } = opts;
   let mode = opts.startingMode;
-  let claudeSessionId = null;
+  let claudeSessionId = opts.resumeSessionId || null;
   const onSessionFound = (id) => {
     if (id !== claudeSessionId) {
       log(`[loop] Session ID: ${id}`);
@@ -872,7 +889,7 @@ async function runInteractive(options) {
   process.on("SIGTERM", handleExit);
   process.on("SIGINT", handleExit);
   const claudeArgs = [...options.claudeArgs || []];
-  if (options.resumeSessionId) ; else if (options.continueSession) {
+  if (!options.resumeSessionId && options.continueSession) {
     claudeArgs.push("--continue");
   }
   restoreConsoleLogs();
@@ -898,6 +915,8 @@ async function runInteractive(options) {
   try {
     const exitCode = await loop({
       cwd,
+      resumeSessionId: options.resumeSessionId,
+      // #1702
       startingMode: "local",
       hookSettingsPath: hookSettings?.settingsPath || "",
       permissionMode,

package/dist/{run-DDmeV9K3.mjs → run-DKOND4dO.mjs}

@@ -5,12 +5,13 @@ import { delimiter, join as join$1, resolve, dirname as dirname$1, basename as b
 import { fileURLToPath } from 'url';
 import { spawn as spawn$1, execFile, exec } from 'child_process';
 import { randomUUID, createHash } from 'crypto';
-import { a as authorizeRequest, b as countFileLines, P as ProcessSupervisor, d as retryStreakExhausted, e as computeRetryDelayMs, f as getRateLimitRetryConfig, g as generateHookSettings, h as getAccount, i as resolveAccountEnv, j as isRetryableRateLimit, c as createSessionStore, E as EXEC_MAX_BUFFER, k as execFailureOutcome, l as execSuccessOutcome, m as formatInboxMessageXml, n as loadInbox, o as isPending, p as ensureCodexHome, q as loadPersistedMachineMetadata, s as savePersistedMachineMetadata, r as registerMachineService, t as channelKeyGrantsFileAccess, C as ChannelStore, u as refreshDueAnthropicAccounts, v as refreshAnthropicToken } from './hookSettings-FFc1pi8j.mjs';
-import { a as composeSessionId, g as generateFriendlyName, d as friendlyNameFromId, f as formatHandle, e as clearInboundContext, w as writeInboundContext, i as isHopCapParked, j as classifyInbound, k as consumeAwaitingReply, l as peekAwaitingReply } from './friendlyName-1UZcyDhu.mjs';
+import { a as authorizeRequest, b as countFileLines, P as ProcessSupervisor, d as retryStreakExhausted, e as computeRetryDelayMs, f as getRateLimitRetryConfig, g as generateHookSettings, h as getAccount, i as resolveAccountEnv, j as isRetryableRateLimit, c as createSessionStore, E as EXEC_MAX_BUFFER, k as execFailureOutcome, l as execSuccessOutcome, m as formatInboxMessageXml, n as loadInbox, o as isPending, p as ensureCodexHome, q as loadPersistedMachineMetadata, s as savePersistedMachineMetadata, r as registerMachineService, t as channelKeyGrantsFileAccess, C as ChannelStore, u as refreshDueAnthropicAccounts, v as refreshAnthropicToken } from './hookSettings-CvvUhwCK.mjs';
+import { c as composeSessionId, g as generateFriendlyName, a as friendlyNameFromId, f as formatHandle } from './friendlyName-B-OEwt0t.mjs';
 import { w as withFileLock } from './fileLock-BMPwCrB6.mjs';
 import { mkdirSync, writeFileSync, rmSync, existsSync, renameSync, readFileSync, statSync, openSync, fstatSync, readSync, closeSync, readdirSync, unlinkSync, linkSync } from 'node:fs';
 import { join, dirname, basename, resolve as resolve$1 } from 'node:path';
 import { c as connectToHypha } from './hyphaClient-ybivOjZo.mjs';
+import { clearInboundContext, writeInboundContext, isHopCapParked, classifyInbound, consumeAwaitingReply, peekAwaitingReply } from './inboxGuard-CDqmIypF.mjs';
 import { execSync, execFileSync, spawn } from 'node:child_process';
 import { S as SharingNotificationSync } from './sharingNotificationSync-qGIQ-3yf.mjs';
 import { AcpBackend } from './acpBackend-UaBD4zL3.mjs';
@@ -27,14 +28,14 @@ import { w as wrapWithIsolation } from './wrapCommand-CdNawSaa.mjs';
 import { applySecurityContext } from './securityContext-Cm5UTCuD.mjs';
 import { mkdir, copyFile, writeFile, chmod, rm, readdir, stat, readFile, rename } from 'node:fs/promises';
 import { homedir, platform } from 'node:os';
-import { applyClaudeProxyEnv, probeLongContext1MEntitlement, LONG_CONTEXT_ENTITLEMENT_RECHECK_MS, updateEnvFile } from './claudeAuth-C0wc1GTM.mjs';
+import { applyClaudeProxyEnv, probeLongContext1MEntitlement, LONG_CONTEXT_ENTITLEMENT_RECHECK_MS, updateEnvFile } from './claudeAuth-DMDvPNhO.mjs';
 import { d as decodeTokenExpiry, i as isTokenExpired, c as classifyBootFailure, w as writeBootStatus, a as clearBootStatus, b as isAuthExpiryError, s as shouldRenewToken, T as TOKEN_LIFETIME_SEC, R as RENEW_CHECK_INTERVAL_MS } from './bootStatus-DqtNgJch.mjs';
 import { e as envFlagEnabled } from './envFlag-COOuJ3AH.mjs';
-import { r as resolveEvaluatorModel, c as backlogOraclePending, d as runLoopVerification, l as loopCancelledDuringVerify, e as resolveLoopDurable, f as decideLoopContinuation, g as resolveMaxAutoResumes, h as grantedExtensionCount, i as resolveMaxExtensions, j as resolveStuckLimit, k as decideVerifyErrorHandling, m as resolveVerifyErrorRetries, t as terminalPhaseForDone, n as accumulateLedger, s as sumUsageTokens, o as effectiveSoftCap, p as checkLoopBudget, q as isHardBudgetStop, u as isCostCeiling, v as summarizeExtensions, w as rearmStartedAt, x as oracleScopeSessionId, y as shouldRearmDormantLoop, z as parseDaemonShareEmails, D as DAEMON_SHARE_EMAILS_ENV, A as applyDaemonShareSeed, a as buildMachineShareUrl, B as recordProgressMarker, C as assessLoopProgress, E as resolveExtensionTurns, F as grantLoopExtension, G as buildGoalCondition, H as computeSoftTurnCap, U as UNBOUNDED_LOOP_ITERATIONS } from './loopVerify-DALtTk2V.mjs';
+import { r as resolveEvaluatorModel, c as backlogOraclePending, d as runLoopVerification, l as loopCancelledDuringVerify, e as resolveLoopDurable, f as decideLoopContinuation, g as resolveMaxAutoResumes, h as grantedExtensionCount, i as resolveMaxExtensions, j as resolveStuckLimit, k as decideVerifyErrorHandling, m as resolveVerifyErrorRetries, t as terminalPhaseForDone, n as accumulateLedger, s as sumUsageTokens, o as effectiveSoftCap, p as checkLoopBudget, q as isHardBudgetStop, u as isCostCeiling, v as summarizeExtensions, w as rearmStartedAt, x as oracleScopeSessionId, y as shouldRearmDormantLoop, z as parseDaemonShareEmails, D as DAEMON_SHARE_EMAILS_ENV, A as applyDaemonShareSeed, a as buildMachineShareUrl, B as recordProgressMarker, C as assessLoopProgress, E as resolveExtensionTurns, F as grantLoopExtension, G as buildGoalCondition, H as computeSoftTurnCap, U as UNBOUNDED_LOOP_ITERATIONS } from './loopVerify-CxAKJB5a.mjs';
 import { p as parseJwtEmail } from './serveAuth-4M0vwMyj.mjs';
 import { getSkillsServer, getArtifactBaseUrl } from './api-BHjyC0Ph.mjs';
 import { l as loadInstanceConfig } from './instance-CeHz5C8v.mjs';
-import { l as listIssues, i as addIssue, q as routeCrewVerdict, r as resolveProjectRoot$1 } from './store-B4E6NzG6.mjs';
+import { r as resolveProjectRoot$1, l as listIssues, i as addIssue, q as routeCrewVerdict } from './store-D8dok6_d.mjs';
 import { c as workflowSteps, d as workflowsDir, l as listWorkflows, i as isWorkflowEnabled } from './store-fi0f-ff1.mjs';
 import { randomBytes } from 'node:crypto';
 
@@ -1551,6 +1552,25 @@ function resolveContainedCwd(directory, cwd, hasSecurityContext) {
   return resolved;
 }
 
+function getLoopDir(directory, sessionId) {
+  let root = directory;
+  try {
+    root = resolveProjectRoot$1(directory);
+  } catch {
+  }
+  if (sessionId) {
+    const rooted = join(root, ".svamp", sessionId, "loop");
+    if (existsSync(join(rooted, "loop-state.json"))) return rooted;
+    const rawScoped = join(directory, ".svamp", sessionId, "loop");
+    if (existsSync(join(rawScoped, "loop-state.json"))) return rawScoped;
+    for (const legacy of [join(root, ".claude", "loop"), join(directory, ".claude", "loop")]) {
+      if (existsSync(join(legacy, "loop-state.json"))) return legacy;
+    }
+    return rooted;
+  }
+  return join(root, ".claude", "loop");
+}
+
 const DEFAULT_LOG_PRUNE_POLICY = {
   keepFiles: 10,
   maxAgeDays: 14,
@@ -1684,6 +1704,14 @@ function shortRunId(seed) {
 }
 const RECONCILE_GRACE_MS = 12e4;
 const reportedWriteErrnos = /* @__PURE__ */ new Set();
+const RUN_STORE_LOCK_OPTS = (where) => ({
+  deadlineMs: 3e3,
+  breakOnDeadOwner: true,
+  onFailOpen: (lockPath) => reportRunStoreWriteFailure(
+    `${where}/fail-open`,
+    Object.assign(new Error(`lock timeout on ${lockPath} \u2014 wrote UNLOCKED, a concurrent run record may have been lost`), { code: "ELOCKTIMEOUT" })
+  )
+});
 function reportRunStoreWriteFailure(where, err) {
   const code = String(err?.code || err?.name || "UNKNOWN");
   if (reportedWriteErrnos.has(code)) return;
@@ -1708,7 +1736,7 @@ function recordRun(projectRoot, run) {
       const tmp = `${file}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
       writeFileSync(tmp, kept.map((r) => JSON.stringify(r)).join("\n") + "\n");
       renameSync(tmp, file);
-    });
+    }, RUN_STORE_LOCK_OPTS("recordRun"));
   } catch (err) {
     reportRunStoreWriteFailure("recordRun", err);
   }
@@ -1786,7 +1814,7 @@ function reconcileInterruptedRuns(projectRoot) {
           const tmp = `${file}.tmp-${process.pid}-${randomBytes(4).toString("hex")}`;
           writeFileSync(tmp, kept.map((r) => JSON.stringify(r)).join("\n") + "\n");
           renameSync(tmp, file);
-        });
+        }, RUN_STORE_LOCK_OPTS("reconcileInterruptedRuns"));
       } catch (err) {
         reportRunStoreWriteFailure("reconcileInterruptedRuns", err);
       }
@@ -3210,16 +3238,6 @@ function writeSvampConfig(configPath, config) {
 }
 const DEFAULT_LOOP_MAX_ITERATIONS = UNBOUNDED_LOOP_ITERATIONS;
 const LOOP_CHECKPOINT_CADENCE = 25;
-function getLoopDir(directory, sessionId) {
-  if (sessionId) {
-    const scoped = join$1(directory, ".svamp", sessionId, "loop");
-    if (existsSync$1(join$1(scoped, "loop-state.json"))) return scoped;
-    const legacy = join$1(directory, ".claude", "loop");
-    if (existsSync$1(join$1(legacy, "loop-state.json"))) return legacy;
-    return scoped;
-  }
-  return join$1(directory, ".claude", "loop");
-}
 function readLoopState(directory, sessionId) {
   try {
     const p = join$1(getLoopDir(directory, sessionId), "loop-state.json");
@@ -4351,7 +4369,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-C_KvvYFp.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const entries = Array.from(urls.entries());
@@ -4373,7 +4391,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { reconcileServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
+      const { reconcileServiceLinks } = await import('./agentCommands-C_KvvYFp.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       const incoming = [{
@@ -4394,7 +4412,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { dropServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
+      const { dropServiceLinks } = await import('./agentCommands-C_KvvYFp.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       if (dropServiceLinks(config, "serve", mountName)) {
@@ -4410,7 +4428,7 @@ async function startDaemon(options) {
     try {
       const dir = loadSessionIndex()[sessionId]?.directory;
       if (!dir) return;
-      const { dropServiceLinks } = await import('./agentCommands-D91RcjqQ.mjs');
+      const { dropServiceLinks } = await import('./agentCommands-C_KvvYFp.mjs');
       const configPath = getSvampConfigPath(dir, sessionId);
       const config = readSvampConfig(configPath);
       if (dropServiceLinks(config, "tunnel", tunnelName)) {
@@ -4427,7 +4445,7 @@ async function startDaemon(options) {
   let managedLinkSessionsSeeded = false;
   async function reconcileAllServiceLinks() {
     try {
-      const { reconcileServiceLinksExact, hasManagedServiceLink } = await import('./agentCommands-D91RcjqQ.mjs');
+      const { reconcileServiceLinksExact, hasManagedServiceLink } = await import('./agentCommands-C_KvvYFp.mjs');
       const desiredBySession = /* @__PURE__ */ new Map();
       const push = (sessionId, entry) => {
         if (!sessionId || !entry.url) return;
@@ -4501,7 +4519,7 @@ async function startDaemon(options) {
     }, delayMs);
   }
   async function createExposedTunnel(spec) {
-    const { FrpcTunnel } = await import('./hookSettings-FFc1pi8j.mjs').then(function (n) { return n.w; });
+    const { FrpcTunnel } = await import('./hookSettings-CvvUhwCK.mjs').then(function (n) { return n.w; });
     const tunnel = new FrpcTunnel({
       name: spec.name,
       ports: spec.ports,
@@ -4522,7 +4540,7 @@ async function startDaemon(options) {
   }
   const tunnelRecreateState = /* @__PURE__ */ new Map();
   const tunnelRecreateInFlight = /* @__PURE__ */ new Set();
-  const { ServeManager } = await import('./hookSettings-FFc1pi8j.mjs').then(function (n) { return n.y; });
+  const { ServeManager } = await import('./hookSettings-CvvUhwCK.mjs').then(function (n) { return n.y; });
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   serveManager.setMountUnboundHook((sessionId, mountName) => {
     void dropMountSessionLink(sessionId, mountName);
@@ -6997,12 +7015,12 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-ccY7xvlo.mjs');
+              const { issueRpc } = await import('./rpc-CAlAHQAy.mjs');
               const issueCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return issueRpc(issueCwd, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-CBkSkzsI.mjs');
+              const { workflowRpc } = await import('./rpc-CacreLQ8.mjs');
               const wfCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return workflowRpc(wfCwd, params || {});
             },
@@ -7754,12 +7772,12 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
               });
             },
             onIssue: async (params) => {
-              const { issueRpc } = await import('./rpc-ccY7xvlo.mjs');
+              const { issueRpc } = await import('./rpc-CAlAHQAy.mjs');
               const issueCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return issueRpc(issueCwd, params || {}, { notifySession: notifyIssueOwner, rekickLoopOwner });
             },
             onWorkflow: async (params) => {
-              const { workflowRpc } = await import('./rpc-CBkSkzsI.mjs');
+              const { workflowRpc } = await import('./rpc-CacreLQ8.mjs');
               const wfCwd = resolveContainedCwd(directory, params?.cwd, !!sessionMetadata.securityContext);
               return workflowRpc(wfCwd, params || {});
             },
@@ -9133,7 +9151,7 @@ ${oracle.output.trim().slice(0, 500)}`, "\u{1F501} Continuing loop");
     const PING_TIMEOUT_MS = 15e3;
     const POST_RECONNECT_GRACE_MS = 2e4;
     const RECONNECT_JITTER_MS = 2500;
-    const { WorkflowScheduler } = await import('./scheduler-BkVJ27Ki.mjs');
+    const { WorkflowScheduler } = await import('./scheduler-IyLWBF8T.mjs');
     const workflowProjectRoots = () => {
       const roots = /* @__PURE__ */ new Set();
       for (const s of pidToTrackedSession.values()) {
@@ -9823,4 +9841,4 @@ var run = /*#__PURE__*/Object.freeze({
     writeStopMarker: writeStopMarker
 });
 
-export { stopDaemon as a, stopMarkerExists as b, clearStopMarker as c, daemonStatus as d, runStore as e, supervisorLock as f, getRun as g, run as h, listRuns as l, projectInfo as p, runWorkflow as r, startDaemon as s };
+export { stopDaemon as a, stopMarkerExists as b, clearStopMarker as c, daemonStatus as d, loadRuns as e, runStore as f, getRun as g, supervisorLock as h, run as i, listRuns as l, projectInfo as p, runWorkflow as r, startDaemon as s };

package/dist/{scheduler-BkVJ27Ki.mjs → scheduler-IyLWBF8T.mjs}

@@ -1,7 +1,7 @@
 import { i as inZone, c as cronMatches } from './cron-hHGdb5kU.mjs';
-import { r as resolveProjectRoot } from './store-B4E6NzG6.mjs';
+import { r as resolveProjectRoot } from './store-D8dok6_d.mjs';
 import { l as listWorkflows, i as isWorkflowEnabled, w as workflowSchedules } from './store-fi0f-ff1.mjs';
-import { r as runWorkflow } from './run-DDmeV9K3.mjs';
+import { r as runWorkflow, e as loadRuns } from './run-DKOND4dO.mjs';
 import 'node:fs';
 import 'node:path';
 import 'node:crypto';
@@ -15,7 +15,7 @@ import 'path';
 import 'url';
 import 'child_process';
 import 'crypto';
-import './hookSettings-FFc1pi8j.mjs';
+import './hookSettings-CvvUhwCK.mjs';
 import './types-57J3Re0n.mjs';
 import './securityContext-Cm5UTCuD.mjs';
 import './machineTools-DygM1jXW.mjs';
@@ -27,10 +27,11 @@ import './instance-CeHz5C8v.mjs';
 import './serveAuth-4M0vwMyj.mjs';
 import 'node:os';
 import './envFlag-COOuJ3AH.mjs';
-import './claudeAuth-C0wc1GTM.mjs';
+import './claudeAuth-DMDvPNhO.mjs';
 import './codexProvider-BtxYc5Rj.mjs';
-import './friendlyName-1UZcyDhu.mjs';
+import './inboxGuard-CDqmIypF.mjs';
 import 'node:events';
+import './friendlyName-B-OEwt0t.mjs';
 import './hyphaClient-ybivOjZo.mjs';
 import './sharingNotificationSync-qGIQ-3yf.mjs';
 import './acpBackend-UaBD4zL3.mjs';
@@ -50,7 +51,7 @@ import './detectIsolation-CrV8IFDv.mjs';
 import 'node:fs/promises';
 import './pinnedNono-5ZHb6328.mjs';
 import './bootStatus-DqtNgJch.mjs';
-import './loopVerify-DALtTk2V.mjs';
+import './loopVerify-CxAKJB5a.mjs';
 import './api-BHjyC0Ph.mjs';
 
 function cronMatchesSafe(expr, date) {
@@ -60,6 +61,18 @@ function cronMatchesSafe(expr, date) {
     return false;
   }
 }
+function alreadyFiredInMinute(root, name, minute) {
+  const boundary = Math.floor(minute.getTime() / 6e4);
+  try {
+    return loadRuns(root, name).some((r) => {
+      if (r.trigger !== "schedule") return false;
+      const started = Date.parse(String(r.startedAt || ""));
+      return Number.isFinite(started) && Math.floor(started / 6e4) === boundary;
+    });
+  } catch {
+    return false;
+  }
+}
 class WorkflowScheduler {
   constructor(deps) {
     this.deps = deps;
@@ -133,7 +146,12 @@ class WorkflowScheduler {
         if (!isWorkflowEnabled(wf)) continue;
         const schedules = workflowSchedules(wf);
         if (!schedules.length) continue;
-        if (minutes.some((m) => schedules.some((s) => cronMatchesSafe(s.cron, inZone(m, s.tz))))) {
+        const matched = minutes.find((m) => schedules.some((s) => cronMatchesSafe(s.cron, inZone(m, s.tz))));
+        if (matched) {
+          if (alreadyFiredInMinute(root, wf.name, matched)) {
+            this.deps.log?.(`[workflow] schedule skipped "${wf.name}" in ${root} \u2014 already fired this minute (persisted run history)`);
+            continue;
+          }
           this.fire(root, wf);
           fired.push(wf.name);
         }

package/dist/{serveCommands-CLhkccJM.mjs → serveCommands-B-Ym_QXc.mjs}

@@ -56,7 +56,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-yczgz_.mjs');
+  const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
     }
     if (sessionId && result?.url) {
       try {
-        const agentCommands = await import('./agentCommands-D91RcjqQ.mjs');
+        const agentCommands = await import('./agentCommands-C_KvvYFp.mjs');
         if (regenerateUrl) agentCommands.removeSessionLinkByService("serve", name, sessionId);
         agentCommands.autoAddSessionLink(String(result.url), name, void 0, { kind: "serve", name });
       } catch {
@@ -108,7 +108,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-yczgz_.mjs');
+  const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -193,7 +193,7 @@ async function serveApply(args, machineId) {
     console.log(`URL: ${result.url}`);
     if (params.sessionId && result?.url) {
       try {
-        const { autoAddSessionLink } = await import('./agentCommands-D91RcjqQ.mjs');
+        const { autoAddSessionLink } = await import('./agentCommands-C_KvvYFp.mjs');
         const prevSession = process.env.SVAMP_SESSION_ID;
         process.env.SVAMP_SESSION_ID = String(params.sessionId);
         try {
@@ -214,7 +214,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-yczgz_.mjs');
+  const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -224,7 +224,7 @@ async function serveRemove(args, machineId) {
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     await machine.serveRemove({ name });
-    const { removeSessionLinkByService } = await import('./agentCommands-D91RcjqQ.mjs');
+    const { removeSessionLinkByService } = await import('./agentCommands-C_KvvYFp.mjs');
     removeSessionLinkByService("serve", name);
     console.log(`Mount '${name}' removed.`);
   } catch (err) {
@@ -236,7 +236,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-yczgz_.mjs');
+  const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session") ?? process.env.SVAMP_SESSION_ID;
@@ -270,7 +270,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-B-yczgz_.mjs');
+  const { connectAndGetMachine } = await import('./commands-CcdoQIkb.mjs').then(function (n) { return n.d; });
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{store-B4E6NzG6.mjs → store-D8dok6_d.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync, statSync, mkdirSync, writeFileSync, readdirSync, unlinkSync, renameSync } from 'node:fs';
 import { join, dirname } from 'node:path';
 import { randomBytes } from 'node:crypto';
-import { execFileSync, execSync, exec } from 'node:child_process';
+import { execFileSync, spawnSync, exec } from 'node:child_process';
 import { w as withFileLock } from './fileLock-BMPwCrB6.mjs';
 
 function normalizeStatus(s) {
@@ -21,7 +21,14 @@ const FIELD_ORDER = ["id", "title", "status", "scope", "labels", "verify", "disp
 function resolveProjectRoot(start = process.cwd()) {
   let dir = start;
   for (let i = 0; i < 40; i++) {
-    if (existsSync(join(dir, ".git")) || existsSync(join(dir, ".svamp"))) return dir;
+    if (existsSync(join(dir, ".git"))) return dir;
+    const parent = dirname(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  dir = start;
+  for (let i = 0; i < 40; i++) {
+    if (existsSync(join(dir, ".svamp"))) return dir;
     const parent = dirname(dir);
     if (parent === dir) break;
     dir = parent;
@@ -211,7 +218,12 @@ function withIssueLock(projectRoot, id, fn) {
     mkdirSync(issuesDir(projectRoot), { recursive: true });
   } catch {
   }
-  return withFileLock(issueLockPath(projectRoot, id), fn, { deadlineMs: ISSUE_LOCK_DEADLINE_MS });
+  return withFileLock(issueLockPath(projectRoot, id), fn, {
+    deadlineMs: ISSUE_LOCK_DEADLINE_MS,
+    breakOnDeadOwner: true,
+    // #1226: a fail-open here means a concurrent mutation may have been LOST. It was silent.
+    onFailOpen: (p) => console.error(`[issue] lock timeout after ${ISSUE_LOCK_DEADLINE_MS}ms \u2014 proceeding UNSYNCHRONIZED, a concurrent update to this issue may be lost: ${p}`)
+  });
 }
 function _updateIssueUnlocked(projectRoot, id, patch) {
   const cur = getIssue(projectRoot, id);
@@ -319,32 +331,59 @@ function searchIssuesInMemory(projectRoot, q) {
   const ql = q.toLowerCase();
   return listIssues(projectRoot, { includeArchived: true }).filter((i) => i.title.toLowerCase().includes(ql) || (i.body || "").toLowerCase().includes(ql) || i.labels.some((l) => l.toLowerCase().includes(ql)));
 }
+const VERIFY_GATE_NOT_FOUND_STATUS = 127;
+function isUnrunnableVerifyResult(status, output) {
+  if (status === VERIFY_GATE_NOT_FOUND_STATUS) return true;
+  return /: (command not found|not found)\s*$/m.test(output);
+}
 function verifyGateCommand(issue) {
   return issue?.verify?.type === "command" ? (issue.verify.text || "").trim() : "";
 }
 const VERIFY_GATE_TIMEOUT_MS = 6e5;
 const VERIFY_GATE_MAX_BUFFER = 64 * 1024 * 1024;
-function verifyGateFailure(cmd, stdout, stderr) {
-  const output = (String(stdout || "") + String(stderr || "")).split("\n").slice(-15).join("\n").trim();
-  return { ok: false, cmd, output };
+function verifyOutputTail(stdout, stderr) {
+  return (String(stdout || "") + String(stderr || "")).split("\n").slice(-15).join("\n").trim();
+}
+function verifyTreeProvenance(projectRoot) {
+  try {
+    const opts = { cwd: projectRoot, stdio: "pipe", timeout: 5e3 };
+    const head = String(execFileSync("git", ["rev-parse", "--short", "HEAD"], opts)).trim();
+    if (!head) return null;
+    const st = String(execFileSync("git", ["status", "--porcelain"], opts)).trim();
+    const dirty = st ? st.split("\n").length : 0;
+    return dirty ? `${head} (+${dirty} dirty)` : `${head} (clean)`;
+  } catch {
+    return null;
+  }
+}
+function verifyGatePass(res) {
+  const where = res.tree ? `tree ${res.tree}` : "tree unknown (not a git worktree?)";
+  const out = res.output ? `
+${res.output}` : "\n(verify-cmd produced no output)";
+  return `\u2713 verify-cmd passed in ${where}
+  $ ${res.cmd}${out}`;
+}
+function verifyGateFailure(cmd, stdout, stderr, status) {
+  const output = verifyOutputTail(stdout, stderr);
+  const notRunnable = isUnrunnableVerifyResult(status, output);
+  return notRunnable ? { ok: false, cmd, output, notRunnable } : { ok: false, cmd, output };
 }
 function checkVerifyCommand(projectRoot, issue) {
   const cmd = verifyGateCommand(issue);
   if (!cmd) return { ok: true };
-  try {
-    execSync(cmd, { cwd: projectRoot, stdio: "pipe", timeout: VERIFY_GATE_TIMEOUT_MS, maxBuffer: VERIFY_GATE_MAX_BUFFER });
-    return { ok: true, cmd };
-  } catch (e) {
-    return verifyGateFailure(cmd, e?.stdout, e?.stderr);
+  const r = spawnSync(cmd, { cwd: projectRoot, shell: true, encoding: "utf8", timeout: VERIFY_GATE_TIMEOUT_MS, maxBuffer: VERIFY_GATE_MAX_BUFFER });
+  if (r.error || r.status !== 0) {
+    return verifyGateFailure(cmd, r.stdout, r.stderr, r.status ?? r.error?.code);
   }
+  return { ok: true, cmd, output: verifyOutputTail(r.stdout, r.stderr), tree: verifyTreeProvenance(projectRoot) ?? void 0 };
 }
 function checkVerifyCommandAsync(projectRoot, issue) {
   const cmd = verifyGateCommand(issue);
   if (!cmd) return Promise.resolve({ ok: true });
   return new Promise((resolve) => {
     exec(cmd, { cwd: projectRoot, timeout: VERIFY_GATE_TIMEOUT_MS, maxBuffer: VERIFY_GATE_MAX_BUFFER }, (err, stdout, stderr) => {
-      if (err) resolve(verifyGateFailure(cmd, stdout, stderr));
-      else resolve({ ok: true, cmd });
+      if (err) resolve(verifyGateFailure(cmd, stdout, stderr, err?.code));
+      else resolve({ ok: true, cmd, output: verifyOutputTail(stdout, stderr), tree: verifyTreeProvenance(projectRoot) ?? void 0 });
     });
   });
 }
@@ -353,4 +392,4 @@ function summarize(issues) {
   return { total: issues.length, ready: by("ready"), in_progress: by("in_progress"), paused: by("paused"), archived: by("archived") };
 }
 
-export { ISSUE_SCOPES as I, applyTriageStatus as a, parseStatusArg as b, checkVerifyCommandAsync as c, ISSUE_STATUSES as d, resumeIssue as e, pauseIssue as f, getIssue as g, addComment as h, addIssue as i, isPendingIssue as j, isVisibleTo as k, listIssues as l, checkVerifyCommand as m, summarize as n, resolveCrewIssueOnMerge as o, parseScopeArg as p, routeCrewVerdict as q, resolveProjectRoot as r, searchIssues as s, updateIssue as u };
+export { ISSUE_SCOPES as I, applyTriageStatus as a, addComment as b, checkVerifyCommandAsync as c, parseStatusArg as d, ISSUE_STATUSES as e, resumeIssue as f, getIssue as g, pauseIssue as h, addIssue as i, isPendingIssue as j, isVisibleTo as k, listIssues as l, checkVerifyCommand as m, summarize as n, resolveCrewIssueOnMerge as o, parseScopeArg as p, routeCrewVerdict as q, resolveProjectRoot as r, searchIssues as s, updateIssue as u, verifyGatePass as v };