svamp-cli 0.2.48 → 0.2.49

package/dist/{agentCommands-BuGwfYhd.mjs → agentCommands-CpR_jpWk.mjs}

@@ -148,7 +148,7 @@ async function sessionBroadcast(action, args) {
   console.log(`Broadcast sent: ${action}`);
 }
 async function connectToMachineService() {
-  const { connectAndGetMachine } = await import('./commands-JWrmpGcs.mjs');
+  const { connectAndGetMachine } = await import('./commands-CTQAVadm.mjs');
   return connectAndGetMachine();
 }
 async function inboxSend(targetSessionId, opts) {
@@ -165,7 +165,7 @@ async function inboxSend(targetSessionId, opts) {
   }
   const { server, machine } = await connectToMachineService();
   try {
-    const { resolveSessionId } = await import('./commands-JWrmpGcs.mjs');
+    const { resolveSessionId } = await import('./commands-CTQAVadm.mjs');
     const sessions = await machine.listSessions();
     const match = resolveSessionId(sessions, targetSessionId);
     const fullTargetId = match.sessionId;

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-6umeTX-K.mjs';
+import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-V2qpcN7f.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -38,17 +38,19 @@ async function main() {
     if (daemonSubcommand === "restart") {
       try {
         await applyClaudeAuthFlags(args);
+        await applyDaemonShareFlag(args);
       } catch (err) {
         console.error(`svamp daemon restart: ${err.message || err}`);
         process.exit(1);
       }
-      const { restartDaemon } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.o; });
+      const { restartDaemon } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.u; });
       await restartDaemon();
       process.exit(0);
     }
     if (daemonSubcommand === "start") {
       try {
         await applyClaudeAuthFlags(args);
+        await applyDaemonShareFlag(args);
       } catch (err) {
         console.error(`svamp daemon start: ${err.message || err}`);
         process.exit(1);
@@ -277,7 +279,7 @@ async function main() {
       console.error("svamp service: Service commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-TyAIFJx-.mjs');
+    const { handleServiceCommand } = await import('./commands-BswZUToD.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-DNTcbgWD.mjs');
@@ -285,7 +287,7 @@ async function main() {
       console.error("svamp serve: Serve commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-FUE8m232.mjs');
+    const { handleServeCommand } = await import('./serveCommands-Cj-P-FeY.mjs');
     await handleServeCommand();
     process.exit(0);
   } else if (subcommand === "process" || subcommand === "proc") {
@@ -294,7 +296,7 @@ async function main() {
       console.error("svamp process: Process commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-BJR_98XX.mjs');
+    const { processCommand } = await import('./commands-DmxhoO5X.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -312,7 +314,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-DVfaovNL.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-DnTJGm-n.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -321,7 +323,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-DR7E3IZL.mjs');
+  const { runInteractive } = await import('./run-mXTPYgtc.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -366,7 +368,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.j; });
+    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.p; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -378,7 +380,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.j; });
+  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.p; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -402,12 +404,12 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_MCP_AGENTS[config.agentName]) {
-    const { CodexMcpBackend } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.k; });
+    const { CodexMcpBackend } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.q; });
     backend = new CodexMcpBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.i; });
-    const { GeminiTransport } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.G; });
-    const { DefaultTransport } = await import('./run-6umeTX-K.mjs').then(function (n) { return n.D; });
+    const { AcpBackend } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.o; });
+    const { GeminiTransport } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.G; });
+    const { DefaultTransport } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.D; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : new DefaultTransport(config.agentName);
     backend = new AcpBackend({
       agentName: config.agentName,
@@ -534,7 +536,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionSpawn, sessionStop, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-JWrmpGcs.mjs');
+  const { sessionList, sessionSpawn, sessionStop, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-CTQAVadm.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -594,7 +596,7 @@ async function handleSessionCommand() {
         allowDomain.push(sessionArgs[++i]);
       }
     }
-    const { parseShareArg } = await import('./commands-JWrmpGcs.mjs');
+    const { parseShareArg } = await import('./commands-CTQAVadm.mjs');
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -680,7 +682,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session approve <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-JWrmpGcs.mjs');
+    const { sessionApprove } = await import('./commands-CTQAVadm.mjs');
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -690,7 +692,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session deny <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-JWrmpGcs.mjs');
+    const { sessionDeny } = await import('./commands-CTQAVadm.mjs');
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -726,7 +728,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-title <title>");
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-BuGwfYhd.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-CpR_jpWk.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -735,7 +737,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-BuGwfYhd.mjs');
+    const { sessionSetLink } = await import('./agentCommands-CpR_jpWk.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "notify") {
     const message = sessionArgs[1];
@@ -744,7 +746,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-BuGwfYhd.mjs');
+    const { sessionNotify } = await import('./agentCommands-CpR_jpWk.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -752,7 +754,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session broadcast <action> [args...]\nActions: open-canvas <url> [label], close-canvas, toast <message>");
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-BuGwfYhd.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-CpR_jpWk.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -763,7 +765,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-BuGwfYhd.mjs');
+        const { inboxSend } = await import('./agentCommands-CpR_jpWk.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
@@ -778,7 +780,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-BuGwfYhd.mjs');
+        const { inboxList } = await import('./agentCommands-CpR_jpWk.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -800,7 +802,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-BuGwfYhd.mjs');
+        const { inboxList } = await import('./agentCommands-CpR_jpWk.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -810,7 +812,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "reply") {
       if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-BuGwfYhd.mjs');
+        const { inboxReply } = await import('./agentCommands-CpR_jpWk.mjs');
         await inboxReply(sessionArgs[2], sessionArgs[3]);
       } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
         await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
@@ -846,7 +848,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-JWrmpGcs.mjs');
+    const { machineShare } = await import('./commands-CTQAVadm.mjs');
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -876,7 +878,7 @@ async function handleMachineCommand() {
     }
     await machineShare(machineId, { add, remove, list, configPath, showConfig });
   } else if (machineSubcommand === "exec") {
-    const { machineExec } = await import('./commands-JWrmpGcs.mjs');
+    const { machineExec } = await import('./commands-CTQAVadm.mjs');
     let machineId;
     let cwd;
     const cmdParts = [];
@@ -896,7 +898,7 @@ async function handleMachineCommand() {
     }
     await machineExec(machineId, command, cwd);
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-JWrmpGcs.mjs');
+    const { machineInfo } = await import('./commands-CTQAVadm.mjs');
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -916,10 +918,10 @@ async function handleMachineCommand() {
         level = machineArgs[++i];
       }
     }
-    const { machineNotify } = await import('./agentCommands-BuGwfYhd.mjs');
+    const { machineNotify } = await import('./agentCommands-CpR_jpWk.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-JWrmpGcs.mjs');
+    const { machineLs } = await import('./commands-CTQAVadm.mjs');
     let machineId;
     let showHidden = false;
     let path;
@@ -1366,6 +1368,11 @@ Claude auth flags (take effect on next start/restart):
   svamp daemon start --use-hypha-proxy
   svamp daemon start --use-claude-login
   svamp daemon start --anthropic-base-url URL --anthropic-api-key KEY
+
+Machine sharing (seed at boot \u2014 equivalent to running 'svamp machine share --add'
+for each email; idempotent, never removes):
+  svamp daemon start --share alice@example.com,bob@example.com
+  svamp daemon start --share alice@example.com --share bob@example.com
 `);
 }
 async function applyClaudeAuthFlags(argv) {
@@ -1381,7 +1388,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./run-6umeTX-K.mjs').then(function (n) { return n.n; });
+  const mod = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.t; });
   if (hasHypha) {
     mod.setClaudeAuthHyphaProxy();
     console.log("Claude auth configured: hypha-proxy (uses HYPHA_TOKEN live at each spawn).");
@@ -1402,9 +1409,37 @@ async function applyClaudeAuthFlags(argv) {
   mod.setClaudeAuthCustom(baseUrl, apiKey);
   console.log(`Claude auth configured: custom (base URL ${baseUrl}).`);
 }
+const DAEMON_SHARE_ENV_KEY = "SVAMP_SHARE_EMAILS";
+async function applyDaemonShareFlag(argv) {
+  const collected = [];
+  for (let i = 0; i < argv.length; i++) {
+    if (argv[i] === "--share" && i + 1 < argv.length) {
+      const value = argv[++i];
+      for (const part of value.split(",")) {
+        const email = part.trim();
+        if (!email) continue;
+        if (!email.includes("@")) {
+          throw new Error(`--share value "${email}" is not a valid email address`);
+        }
+        collected.push(email);
+      }
+    }
+  }
+  if (collected.length === 0) return;
+  const { updateEnvFile } = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.t; });
+  const seen = /* @__PURE__ */ new Set();
+  const deduped = collected.filter((e) => {
+    const k = e.toLowerCase();
+    if (seen.has(k)) return false;
+    seen.add(k);
+    return true;
+  });
+  updateEnvFile({ [DAEMON_SHARE_ENV_KEY]: deduped.join(",") });
+  console.log(`Machine sharing seed updated: ${deduped.join(", ")} (will be added at next daemon start).`);
+}
 async function handleDaemonAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const mod = await import('./run-6umeTX-K.mjs').then(function (n) { return n.n; });
+  const mod = await import('./run-V2qpcN7f.mjs').then(function (n) { return n.t; });
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate
@@ -1559,7 +1594,7 @@ PERMISSION WORKFLOW (only relevant for "default" and "acceptEdits" modes):
 ISOLATION & SHARING OPTIONS (for spawn):
   --isolate                       Force OS-level sandbox (even without sharing)
   --security-context <path>       Apply security context config (JSON file)
-  --share <email>[:<role>]        Share session (repeatable). Role: view|interact|admin
+  --share <email>                 Share session with user (repeatable). Added users have full access; the legacy :role suffix is accepted but ignored.
   --deny-network                  Block all network access
   --deny-read <path>              Deny reading path (repeatable)
   --allow-write <path>            Allow writing path (repeatable)

package/dist/{commands-TyAIFJx-.mjs → commands-BswZUToD.mjs}

@@ -97,7 +97,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-JWrmpGcs.mjs');
+    const { connectAndGetMachine } = await import('./commands-CTQAVadm.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -126,7 +126,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-JWrmpGcs.mjs');
+    const { connectAndGetMachine } = await import('./commands-CTQAVadm.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/{commands-JWrmpGcs.mjs → commands-CTQAVadm.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { resolve, join } from 'node:path';
 import os from 'node:os';
-import { l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha } from './run-6umeTX-K.mjs';
+import { n as normalizeAllowedUser, l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha, i as buildSessionShareUrl, j as buildMachineShareUrl } from './run-V2qpcN7f.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -894,11 +894,16 @@ function createWorktree(baseDir) {
 function parseShareArg(arg) {
   const parts = arg.split(":");
   const email = parts[0];
-  const role = parts[1] || "interact";
-  if (!["view", "interact", "admin"].includes(role)) {
-    throw new Error(`Invalid role "${role}" in --share ${arg}. Must be view, interact, or admin.`);
+  const suppliedRole = parts[1];
+  if (suppliedRole) {
+    if (!["view", "interact", "admin"].includes(suppliedRole)) {
+      throw new Error(`Invalid role "${suppliedRole}" in --share ${arg}. Per-user roles are deprecated; omit the :role suffix.`);
+    }
+    if (suppliedRole !== "admin") {
+      console.warn(`Note: per-user role "${suppliedRole}" is deprecated. Added users have full (owner-equivalent) access.`);
+    }
   }
-  return { email, role };
+  return { email, role: "admin" };
 }
 async function sessionSpawn(agent, directory, machineId, opts) {
   const { server, machine } = await connectAndGetMachine(machineId);
@@ -909,12 +914,9 @@ async function sessionSpawn(agent, directory, machineId, opts) {
         enabled: true,
         owner: "",
         // will be auto-set by machine service from Hypha context
-        allowedUsers: opts.share.map((s) => ({
-          email: s.email,
-          role: s.role || "interact",
-          addedAt: Date.now(),
-          addedBy: "cli"
-        }))
+        allowedUsers: opts.share.map(
+          (s) => normalizeAllowedUser({ email: s.email, addedBy: "cli" }, "cli")
+        )
       };
     }
     let securityContext;
@@ -983,7 +985,7 @@ async function sessionSpawn(agent, directory, machineId, opts) {
       console.log(`Security context: ${JSON.stringify(securityContext, null, 2)}`);
     }
     if (sharing) {
-      console.log(`Sharing with: ${sharing.allowedUsers.map((u) => `${u.email} (${u.role})`).join(", ")}`);
+      console.log(`Sharing with: ${sharing.allowedUsers.map((u) => u.email).join(", ")} (full access)`);
     }
     const result = await machine.spawnSession({
       directory,
@@ -1441,9 +1443,9 @@ async function sessionShare(sessionIdPartial, machineId, opts) {
       if (sharing.allowedUsers.length === 0) {
         console.log("No shared users.");
       } else {
-        console.log("Shared users:");
+        console.log("Shared users (each has full access):");
         for (const u of sharing.allowedUsers) {
-          console.log(`  ${u.email.padEnd(30)} ${u.role.padEnd(10)} (added ${new Date(u.addedAt).toISOString().slice(0, 10)})`);
+          console.log(`  ${u.email.padEnd(30)} (added ${new Date(u.addedAt).toISOString().slice(0, 10)})`);
         }
       }
       const secCtx = metaResult.metadata?.securityContext;
@@ -1452,10 +1454,16 @@ async function sessionShare(sessionIdPartial, machineId, opts) {
 Security context:`);
         console.log(JSON.stringify(secCtx, null, 2));
       }
+      console.log(`
+Share link: ${buildSessionShareUrl({
+        sessionId: fullId,
+        workspace: server.config?.workspace,
+        machineServiceId: machine.id || `${server.config?.workspace}/${server.config?.client_id}:default`
+      })}`);
       return;
     }
     if (opts.add) {
-      const { email, role } = parseShareArg(opts.add);
+      const { email } = parseShareArg(opts.add);
       const metaResult = await svc.getMetadata();
       let sharing = metaResult.metadata?.sharing || {
         enabled: true,
@@ -1466,14 +1474,15 @@ Security context:`);
       sharing.allowedUsers = sharing.allowedUsers.filter(
         (u) => u.email.toLowerCase() !== email.toLowerCase()
       );
-      sharing.allowedUsers.push({
-        email,
-        role,
-        addedAt: Date.now(),
-        addedBy: "cli"
-      });
+      sharing.allowedUsers.push(normalizeAllowedUser({ email, addedBy: "cli" }, "cli"));
       await svc.updateSharing(sharing);
-      console.log(`Shared session ${fullId.slice(0, 8)} with ${email} (${role}).`);
+      const shareUrl = buildSessionShareUrl({
+        sessionId: fullId,
+        workspace: server.config?.workspace,
+        machineServiceId: machine.id || `${server.config?.workspace}/${server.config?.client_id}:default`
+      });
+      console.log(`Shared session ${fullId.slice(0, 8)} with ${email} (full access).`);
+      console.log(`Share link: ${shareUrl}`);
       return;
     }
     if (opts.remove) {
@@ -1544,11 +1553,16 @@ async function machineShare(machineId, opts) {
         if (sharing.allowedUsers.length === 0) {
           console.log("No shared users.");
         } else {
-          console.log("Shared users:");
+          console.log("Shared users (each has full machine access):");
           for (const u of sharing.allowedUsers) {
-            console.log(`  ${u.email.padEnd(30)} ${u.role.padEnd(10)} (added ${new Date(u.addedAt).toISOString().slice(0, 10)})`);
+            console.log(`  ${u.email.padEnd(30)} (added ${new Date(u.addedAt).toISOString().slice(0, 10)})`);
           }
         }
+        console.log(`
+Share link: ${buildMachineShareUrl({
+          machineId: info.machineId,
+          workspace: server.config?.workspace
+        })}`);
       }
       const iso = info.metadata?.isolationCapabilities;
       if (iso) {
@@ -1584,7 +1598,7 @@ Isolation: ${iso.available.length > 0 ? iso.available.join(", ") : "none availab
       return;
     }
     if (opts.add) {
-      const { email, role } = parseShareArg(opts.add);
+      const { email } = parseShareArg(opts.add);
       const info = await machine.getMachineInfo();
       let sharing = info.metadata?.sharing || {
         enabled: true,
@@ -1595,14 +1609,14 @@ Isolation: ${iso.available.length > 0 ? iso.available.join(", ") : "none availab
       sharing.allowedUsers = sharing.allowedUsers.filter(
         (u) => u.email.toLowerCase() !== email.toLowerCase()
       );
-      sharing.allowedUsers.push({
-        email,
-        role,
-        addedAt: Date.now(),
-        addedBy: "cli"
-      });
+      sharing.allowedUsers.push(normalizeAllowedUser({ email, addedBy: "cli" }, "cli"));
       await machine.updateSharing(sharing);
-      console.log(`Shared machine with ${email} (${role}).`);
+      const shareUrl = buildMachineShareUrl({
+        machineId: info.machineId,
+        workspace: server.config?.workspace
+      });
+      console.log(`Shared machine with ${email} (full access).`);
+      console.log(`Share link: ${shareUrl}`);
       return;
     }
     if (opts.remove) {

package/dist/{commands-BJR_98XX.mjs → commands-DmxhoO5X.mjs}

@@ -1,11 +1,11 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-JWrmpGcs.mjs';
+import { connectAndGetMachine } from './commands-CTQAVadm.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-6umeTX-K.mjs';
+import './run-V2qpcN7f.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-6umeTX-K.mjs';
+export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-V2qpcN7f.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/package-DnTJGm-n.mjs

@@ -0,0 +1,63 @@
+var name = "svamp-cli";
+var version = "0.2.49";
+var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
+var author = "Amun AI AB";
+var license = "SEE LICENSE IN LICENSE";
+var type = "module";
+var bin = {
+	svamp: "./bin/svamp.mjs"
+};
+var files = [
+	"dist",
+	"bin"
+];
+var main = "./dist/index.mjs";
+var exports$1 = {
+	".": "./dist/index.mjs",
+	"./cli": "./dist/cli.mjs"
+};
+var scripts = {
+	build: "rm -rf dist && tsc --noEmit && pkgroll",
+	typecheck: "tsc --noEmit",
+	test: "npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
+	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
+	dev: "tsx src/cli.ts",
+	"dev:daemon": "tsx src/cli.ts daemon start-sync",
+	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
+	"test:frpc": "npx tsx test/test-frpc-e2e.mjs"
+};
+var dependencies = {
+	"@agentclientprotocol/sdk": "^0.14.1",
+	"@modelcontextprotocol/sdk": "^1.25.3",
+	"hypha-rpc": "0.21.40",
+	"node-pty": "1.2.0-beta.11",
+	ws: "^8.18.0",
+	yaml: "^2.8.2",
+	zod: "^3.24.4"
+};
+var devDependencies = {
+	"@types/node": ">=20",
+	"@types/ws": "^8.5.14",
+	pkgroll: "^2.14.2",
+	tsx: "^4.20.6",
+	typescript: "5.9.3"
+};
+var packageManager = "yarn@1.22.22";
+var _package = {
+	name: name,
+	version: version,
+	description: description,
+	author: author,
+	license: license,
+	type: type,
+	bin: bin,
+	files: files,
+	main: main,
+	exports: exports$1,
+	scripts: scripts,
+	dependencies: dependencies,
+	devDependencies: devDependencies,
+	packageManager: packageManager
+};
+
+export { author, bin, _package as default, dependencies, description, devDependencies, exports$1 as exports, files, license, main, name, packageManager, scripts, type, version };