svamp-cli 0.2.55 → 0.2.57

package/bin/skills/{html-output → artifact}/SKILL.md

@@ -1,46 +1,50 @@
 ---
-name: html-output
-version: 0.5.0
-description: Render rich inline visual output in chat. Write an HTML file (or point at a URL) and emit a single self-closing `<html-output src="..." />` tag — the Svamp client renders it as a sandboxed iframe.
+name: artifact
+version: 1.0.0
+description: Embed a rendered HTML file or live URL inline in chat via a single self-closing `<artifact src="..." />` tag — the Svamp client renders it as a sandboxed iframe with modes for inline, card, bare, and immersive.
 tags:
   - svamp
-  - html
+  - artifact
   - rendering
   - visualization
 author: svamp
 license: MIT
 ---
 
-# HTML Output
+# Artifact
 
-Render rich visual output by writing an HTML file (or pointing at a running server's URL) and emitting a single self-closing tag:
+Embed rich visual output inline by writing an HTML file (or pointing at a running server's URL) and emitting a single self-closing tag:
 
 ```
-<html-output src="./outputs/dashboard.html" title="Dashboard" />
+<artifact src="./outputs/dashboard.html" title="Dashboard" />
 ```
 
 The client reads the file, inlines relative refs (`./image.png` etc.) as data URIs, and renders it in a sandboxed iframe — like a Jupyter cell output. **Default to plain markdown for ordinary answers.**
 
 ## Strategy: which mechanism?
 
-Three options, pick the lightest that works:
+Four options, pick the lightest that works:
 
 | Mechanism | When |
 |---|---|
-| **Inline `<html-output src="./viz.html" />`** | Self-contained visualization. Cards, charts, animations, prototypes. Files live on disk; the chat marker is tiny. |
-| **URL `<html-output src="https://my-app.example.com/" height="540" />`** | Embed a live server you're running, or any external site. Like a Canvas panel inline. |
-| **Standalone server (`svamp serve` / `svamp service expose`)** | Real apps with backend, database, multi-user state. Post the URL as a normal markdown link. |
+| **Inline body** `<artifact title="…">…html…</artifact>` | Tiny self-contained widgets: a styled metric card, an SVG diagram, a small Chart.js plot. No file needed; the HTML lives in the chat message. Keep under ~10 KB. |
+| **File `<artifact src="./viz.html" />`** | Substantial visualization (dashboards, 3D scenes, multi-section explorers). Persists on disk, supports relative-ref inlining for `./image.png`, can be `svamp serve`-shared as a stable URL, iterates cleanly via singleton dedupe. |
+| **URL `<artifact src="https://my-app.example.com/" height="540" />`** | Embed a live server you're running, or any external site. Canvas-panel-style. |
+| **Standalone server (`svamp serve` / `svamp service expose`)** | Real apps with backend, database, multi-user state. Post the URL as a normal markdown link, no artifact tag needed. |
 
 **Decision tree:**
 1. Need a backend / database / persistent state? → standalone server.
-2. Iterating on a single artifact (HTML file, dashboard, dataviz)? → write to file, emit `<html-output src="..." />`.
-3. Want to embed a running server inline (preview a dev server, show a deployed app)? → URL src.
+2. ~10 KB or less, throwaway widget? → **inline body** (`<artifact>...html...</artifact>`).
+3. Will you iterate on it across messages? → **file** (write file, emit `<artifact src="..." />`).
+4. Embed a running server or external site? → **URL src**.
+
+While the agent is still emitting the body content (closing `</artifact>` not yet received), the client shows a "Generating… N chars" placeholder. The iframe only mounts once the close tag arrives — no flashing of half-rendered HTML.
 
 ## Attributes
 
 ```html
-<html-output
-    src="./outputs/viz.html"     <!-- REQUIRED: relative file path or absolute URL -->
+<artifact
+    src="./outputs/viz.html"     <!-- file path OR absolute URL; OR omit and use inline body -->
     title="Dashboard"            <!-- header label -->
     height="540"                 <!-- fixed pixel height (10..4000); default = auto-size for files -->
     wide                         <!-- extend beyond bubble width -->
@@ -50,7 +54,7 @@ Three options, pick the lightest that works:
 />
 ```
 
-Only `src` is required.
+Either `src` or an inline body is required. All other attributes optional.
 
 ### Modes
 
@@ -75,6 +79,28 @@ In `default` and `bare` modes, the user gets a header (or hover bar) with three
 - **Fullscreen** (⛶) — toggles iframe fullscreen. Hidden automatically on browsers that don't support it (some mobile WebViews).
 - **⋮ menu** — *Open in new window* (standalone tab), *Reload* (same as the icon), *Show as card* (only when the agent originally emitted `mode="card"` and the user expanded it).
 
+## Going inline (no file)
+
+For widgets that don't deserve a file — a metric card, a small SVG diagram, a single Chart.js plot — omit `src` and put the HTML directly inside the tag:
+
+```
+<artifact title="Quarterly revenue">
+<div style="font-family:system-ui;padding:16px;background:var(--svamp-surface);border-radius:8px;color:var(--svamp-text)">
+  <div style="font-size:11px;color:var(--svamp-text-secondary);text-transform:uppercase;letter-spacing:0.05em">Q4 revenue</div>
+  <div style="font-size:28px;font-weight:600;margin-top:4px">$4.2M</div>
+  <div style="font-size:12px;color:#059669;margin-top:2px">↑ 18% vs Q3</div>
+</div>
+</artifact>
+```
+
+Inline body works exactly like file content — same sandbox, same theme bridge, same CSP, same auto-resize, same modes. Differences:
+
+- **No relative file refs.** Inline body has no associated directory, so `<img src="./local.png">` won't resolve. If you need files, use `src=`.
+- **Bloats chat history.** Inline content lives in the message JSONL, so every replay/sync sends it. Keep under ~10 KB. For anything substantial, write to a file.
+- **No `svamp serve`-style stable URL.** Inline blobs are ephemeral. Use `src=` to a file if you want shareable URLs.
+
+When in doubt: inline for tiny standalone widgets, file for anything you might iterate on or share.
+
 ## Writing the file
 
 Use the standard Write tool. Two storage conventions:
@@ -95,7 +121,7 @@ Pick disposable when the output is throwaway (one-off charts, scratch demos). Pi
 
 ## Iteration
 
-When you iterate on the same artifact, **edit the file in place** and emit a new `<html-output src="..." />` tag. The client auto-detects that two blocks share a `src` and:
+When you iterate on the same artifact, **edit the file in place** and emit a new `<artifact src="..." />` tag. The client auto-detects that two blocks share a `src` and:
 - Renders only the **latest** block inline.
 - Collapses older ones into a "Newer version below ↓" pill that scrolls to the latest on click.
 
@@ -227,7 +253,7 @@ Lean on what HTML does well — flow layout, typography, animation — without o
 
 Then write it to `./outputs/comparison.html` and emit:
 ```
-<html-output src="./outputs/comparison.html" title="Comparison" />
+<artifact src="./outputs/comparison.html" title="Comparison" />
 ```
 
 ### 2. Animated entry (no JS framework)
@@ -280,7 +306,7 @@ Then write it to `./outputs/comparison.html` and emit:
 
 Emit:
 ```
-<html-output src="./outputs/3d.html" title="3D viewer" height="540" mode="card" poster="./outputs/3d-thumb.png" description="Click to launch the rotating cube demo" />
+<artifact src="./outputs/3d.html" title="3D viewer" height="540" mode="card" poster="./outputs/3d-thumb.png" description="Click to launch the rotating cube demo" />
 ```
 
 ### 4. Live data from agent-spawned API
@@ -312,7 +338,7 @@ svamp service expose sales-api --port 8000
 
 Then emit:
 ```
-<html-output src="./outputs/sales-dashboard.html" title="Sales (live)" />
+<artifact src="./outputs/sales-dashboard.html" title="Sales (live)" />
 ```
 
 ### 5. URL embed (CanvasPanel-style)
@@ -320,23 +346,23 @@ Then emit:
 For a running dev server, deployed app, or external site:
 
 ```
-<html-output src="https://my-app.example.com/" title="My app" height="640" />
+<artifact src="https://my-app.example.com/" title="My app" height="640" />
 ```
 
 No file needed. Auto-resize doesn't work for URL embeds — set `height` explicitly.
 
 ## Anti-patterns
 
-- **Don't put HTML inline** — `<html-output>...HTML body...</html-output>` is not supported. Always use `src="./file.html"`.
+- **Don't put HTML inline** — `<artifact>...HTML body...</artifact>` is not supported. Always use `src="./file.html"`.
 - **Don't fetch from non-CORS endpoints.** If you don't control the server, the iframe can't reach it. Pre-compute and embed.
 - **Don't omit `<!doctype html>`** in your HTML file. Quirks mode breaks CSS.
-- **Don't open multiple `<html-output>`s back-to-back** for content that could be one. One artifact = one file = one tag.
+- **Don't open multiple `<artifact>`s back-to-back** for content that could be one. One artifact = one file = one tag.
 - **Don't write huge files** (>5 MB total inlined assets). The block won't render past the cap.
 - **Don't put visualization assets in git** when they're disposable — use `.svamp/<sessionId>/outputs/`.
 
 ## Checklist
 
-Before emitting `<html-output src="..." />`:
+Before emitting `<artifact src="..." />`:
 1. Did you actually write the file? (Use the Write tool.)
 2. Is the path relative to the session cwd, OR an absolute `https://` URL?
 3. For fullscreen-only content, set `mode="card"` with a `poster`.

package/dist/{agentCommands-D3sy9AT2.mjs → agentCommands-3F23ymKC.mjs}

@@ -148,7 +148,7 @@ async function sessionBroadcast(action, args) {
   console.log(`Broadcast sent: ${action}`);
 }
 async function connectToMachineService() {
-  const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+  const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
   return connectAndGetMachine();
 }
 async function inboxSend(targetSessionId, opts) {
@@ -165,7 +165,7 @@ async function inboxSend(targetSessionId, opts) {
   }
   const { server, machine } = await connectToMachineService();
   try {
-    const { resolveSessionId } = await import('./commands-DMK1Aj5z.mjs');
+    const { resolveSessionId } = await import('./commands-CEq6IsUJ.mjs');
     const sessions = await machine.listSessions();
     const match = resolveSessionId(sessions, targetSessionId);
     const fullTargetId = match.sessionId;

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-3bGmfj05.mjs';
+import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-a3tcb38_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -43,7 +43,7 @@ async function main() {
         console.error(`svamp daemon restart: ${err.message || err}`);
         process.exit(1);
       }
-      const { restartDaemon } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.u; });
+      const { restartDaemon } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.u; });
       await restartDaemon();
       process.exit(0);
     }
@@ -279,7 +279,7 @@ async function main() {
       console.error("svamp service: Service commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-Dv0QB3Lt.mjs');
+    const { handleServiceCommand } = await import('./commands-DfifaEbW.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-DNTcbgWD.mjs');
@@ -287,7 +287,7 @@ async function main() {
       console.error("svamp serve: Serve commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-Dx8qGlqL.mjs');
+    const { handleServeCommand } = await import('./serveCommands-C77qUVpI.mjs');
     await handleServeCommand();
     process.exit(0);
   } else if (subcommand === "process" || subcommand === "proc") {
@@ -296,7 +296,7 @@ async function main() {
       console.error("svamp process: Process commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-BtZQY_f4.mjs');
+    const { processCommand } = await import('./commands-DR7o1R2b.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -314,7 +314,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-CQXxJuAV.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-DUJlW79s.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -323,7 +323,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-CV4UIwhB.mjs');
+  const { runInteractive } = await import('./run-D-yYK3EG.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -368,7 +368,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.p; });
+    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.p; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -380,7 +380,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.p; });
+  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.p; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -404,12 +404,12 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_MCP_AGENTS[config.agentName]) {
-    const { CodexMcpBackend } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.q; });
+    const { CodexMcpBackend } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.q; });
     backend = new CodexMcpBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.o; });
-    const { GeminiTransport } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.G; });
-    const { DefaultTransport } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.D; });
+    const { AcpBackend } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.o; });
+    const { GeminiTransport } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.G; });
+    const { DefaultTransport } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.D; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : new DefaultTransport(config.agentName);
     backend = new AcpBackend({
       agentName: config.agentName,
@@ -536,7 +536,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionSpawn, sessionStop, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-DMK1Aj5z.mjs');
+  const { sessionList, sessionSpawn, sessionStop, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-CEq6IsUJ.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -596,7 +596,7 @@ async function handleSessionCommand() {
         allowDomain.push(sessionArgs[++i]);
       }
     }
-    const { parseShareArg } = await import('./commands-DMK1Aj5z.mjs');
+    const { parseShareArg } = await import('./commands-CEq6IsUJ.mjs');
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -682,7 +682,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session approve <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-DMK1Aj5z.mjs');
+    const { sessionApprove } = await import('./commands-CEq6IsUJ.mjs');
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -692,7 +692,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session deny <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-DMK1Aj5z.mjs');
+    const { sessionDeny } = await import('./commands-CEq6IsUJ.mjs');
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -728,7 +728,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-title <title>");
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-D3sy9AT2.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-3F23ymKC.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -737,7 +737,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-D3sy9AT2.mjs');
+    const { sessionSetLink } = await import('./agentCommands-3F23ymKC.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "notify") {
     const message = sessionArgs[1];
@@ -746,7 +746,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-D3sy9AT2.mjs');
+    const { sessionNotify } = await import('./agentCommands-3F23ymKC.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -754,7 +754,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session broadcast <action> [args...]\nActions: open-canvas <url> [label], close-canvas, toast <message>");
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-D3sy9AT2.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-3F23ymKC.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -765,7 +765,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-D3sy9AT2.mjs');
+        const { inboxSend } = await import('./agentCommands-3F23ymKC.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
@@ -780,7 +780,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-D3sy9AT2.mjs');
+        const { inboxList } = await import('./agentCommands-3F23ymKC.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -802,7 +802,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-D3sy9AT2.mjs');
+        const { inboxList } = await import('./agentCommands-3F23ymKC.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -812,7 +812,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "reply") {
       if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-D3sy9AT2.mjs');
+        const { inboxReply } = await import('./agentCommands-3F23ymKC.mjs');
         await inboxReply(sessionArgs[2], sessionArgs[3]);
       } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
         await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
@@ -848,7 +848,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-DMK1Aj5z.mjs');
+    const { machineShare } = await import('./commands-CEq6IsUJ.mjs');
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -878,7 +878,7 @@ async function handleMachineCommand() {
     }
     await machineShare(machineId, { add, remove, list, configPath, showConfig });
   } else if (machineSubcommand === "exec") {
-    const { machineExec } = await import('./commands-DMK1Aj5z.mjs');
+    const { machineExec } = await import('./commands-CEq6IsUJ.mjs');
     let machineId;
     let cwd;
     const cmdParts = [];
@@ -898,7 +898,7 @@ async function handleMachineCommand() {
     }
     await machineExec(machineId, command, cwd);
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-DMK1Aj5z.mjs');
+    const { machineInfo } = await import('./commands-CEq6IsUJ.mjs');
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -918,10 +918,10 @@ async function handleMachineCommand() {
         level = machineArgs[++i];
       }
     }
-    const { machineNotify } = await import('./agentCommands-D3sy9AT2.mjs');
+    const { machineNotify } = await import('./agentCommands-3F23ymKC.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-DMK1Aj5z.mjs');
+    const { machineLs } = await import('./commands-CEq6IsUJ.mjs');
     let machineId;
     let showHidden = false;
     let path;
@@ -1388,7 +1388,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./run-3bGmfj05.mjs').then(function (n) { return n.t; });
+  const mod = await import('./run-a3tcb38_.mjs').then(function (n) { return n.t; });
   if (hasHypha) {
     mod.setClaudeAuthHyphaProxy();
     console.log("Claude auth configured: hypha-proxy (uses HYPHA_TOKEN live at each spawn).");
@@ -1426,7 +1426,7 @@ async function applyDaemonShareFlag(argv) {
     }
   }
   if (collected.length === 0) return;
-  const { updateEnvFile } = await import('./run-3bGmfj05.mjs').then(function (n) { return n.t; });
+  const { updateEnvFile } = await import('./run-a3tcb38_.mjs').then(function (n) { return n.t; });
   const seen = /* @__PURE__ */ new Set();
   const deduped = collected.filter((e) => {
     const k = e.toLowerCase();
@@ -1439,7 +1439,7 @@ async function applyDaemonShareFlag(argv) {
 }
 async function handleDaemonAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const mod = await import('./run-3bGmfj05.mjs').then(function (n) { return n.t; });
+  const mod = await import('./run-a3tcb38_.mjs').then(function (n) { return n.t; });
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate

package/dist/{commands-DMK1Aj5z.mjs → commands-CEq6IsUJ.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { resolve, join } from 'node:path';
 import os from 'node:os';
-import { n as normalizeAllowedUser, l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha, i as buildSessionShareUrl, j as buildMachineShareUrl } from './run-3bGmfj05.mjs';
+import { n as normalizeAllowedUser, l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha, i as buildSessionShareUrl, j as buildMachineShareUrl } from './run-a3tcb38_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-BtZQY_f4.mjs → commands-DR7o1R2b.mjs}

@@ -1,11 +1,11 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-DMK1Aj5z.mjs';
+import { connectAndGetMachine } from './commands-CEq6IsUJ.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-3bGmfj05.mjs';
+import './run-a3tcb38_.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/dist/{commands-Dv0QB3Lt.mjs → commands-DfifaEbW.mjs}

@@ -97,7 +97,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+    const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -126,7 +126,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+    const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-3bGmfj05.mjs';
+export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-a3tcb38_.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{package-CQXxJuAV.mjs → package-DUJlW79s.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.55";
+var version = "0.2.57";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -17,7 +17,7 @@ var exports$1 = {
 	"./cli": "./dist/cli.mjs"
 };
 var scripts = {
-	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/html-output bin/skills/html-output && tsc --noEmit && pkgroll",
+	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
 	test: "npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",

package/dist/{run-CV4UIwhB.mjs → run-D-yYK3EG.mjs}

@@ -2,7 +2,7 @@ import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(im
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';
-import { c as connectToHypha, a as registerSessionService, k as generateHookSettings } from './run-3bGmfj05.mjs';
+import { c as connectToHypha, a as registerSessionService, k as generateHookSettings } from './run-a3tcb38_.mjs';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
 import { createInterface } from 'node:readline';

package/dist/{run-3bGmfj05.mjs → run-a3tcb38_.mjs}

@@ -6126,7 +6126,7 @@ You are running inside a Svamp session (id: ${sessionId}) on Hypha Cloud. Use th
 - \`svamp session set-link "<url>" "<label>"\` \u2014 surface any viewable artifact as a button
 - \`svamp session notify "<msg>" [--level info|warning|error]\` \u2014 send a user notification
 
-**Rich HTML output:** Write HTML to a file (\`.svamp/<sessionId>/outputs/\` for disposable, \`./outputs/\` for persistent) and emit \`<html-output src="./outputs/viz.html" title="..." />\` \u2014 the Svamp client renders it inline as a sandboxed iframe with theme CSS vars, auto-resize, file inlining, and a header with Reload/Fullscreen/\u22EE menu. Modes: \`default\`, \`bare\` (controls on hover), \`immersive\` (no chrome), \`card\` (click-to-open preview with \`description\`+\`poster\`). Use \`<html-output src="https://..." height="540" />\` to embed a live server. Run \`svamp serve <name> <dir>\` to share. Use a real backend server (\`svamp service expose\`) when you need persistence/auth. See the \`html-output\` skill.
+**Artifacts (rich inline output):** Write HTML to a file (\`.svamp/<sessionId>/outputs/\` for disposable, \`./outputs/\` for persistent) and emit \`<artifact src="./outputs/viz.html" title="..." />\` \u2014 the Svamp client renders it inline as a sandboxed iframe with theme CSS vars, auto-resize, file inlining, and a header with Reload/Fullscreen/\u22EE menu. Modes: \`default\`, \`bare\` (controls on hover), \`immersive\` (no chrome), \`card\` (click-to-open preview with \`description\`+\`poster\`). Use \`<artifact src="https://..." height="540" />\` to embed a live server. Run \`svamp serve <name> <dir>\` to share. Use a real backend server (\`svamp service expose\`) when you need persistence/auth. See the \`artifact\` skill.
 
 ## Parallel Agents
 
@@ -6519,20 +6519,20 @@ async function ensureAutoInstalledSkills(logger) {
       // hypha skill ships from a different endpoint without a version probe yet.
     },
     {
-      // `<html-output>` block rendering — see packages/svamp-app/.../HtmlOutput.tsx.
-      // Bundled inside the npm package (bin/skills/html-output/) so it's installed
+      // `<artifact>` block rendering — see packages/svamp-app/.../Artifact.tsx.
+      // Bundled inside the npm package (bin/skills/artifact/) so it's installed
       // by default even before the marketplace artifact is published, and even offline.
       // Optional: also publish to the marketplace via:
-      //   HYPHA_TOKEN=$HYPHA_SKILLS_TOKEN node scripts/publish-skills.mjs html-output
-      name: "html-output",
+      //   HYPHA_TOKEN=$HYPHA_SKILLS_TOKEN node scripts/publish-skills.mjs artifact
+      name: "artifact",
       install: async () => {
         try {
-          installBundledSkill("html-output");
+          installBundledSkill("artifact");
         } catch {
-          await installSkillFromMarketplace("html-output");
+          await installSkillFromMarketplace("artifact");
         }
       },
-      marketplaceVersion: async () => readBundledSkillVersion("html-output")
+      marketplaceVersion: async () => readBundledSkillVersion("artifact")
     }
   ];
   for (const task of tasks) {
@@ -7375,7 +7375,7 @@ async function startDaemon(options) {
   const supervisor = new ProcessSupervisor(join(SVAMP_HOME, "processes"));
   await supervisor.init();
   const tunnels = /* @__PURE__ */ new Map();
-  const { ServeManager } = await import('./serveManager-BHwz3pu2.mjs');
+  const { ServeManager } = await import('./serveManager-D0rSoflf.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });

package/dist/{serveCommands-Dx8qGlqL.mjs → serveCommands-C77qUVpI.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+  const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -86,7 +86,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+  const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -171,7 +171,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+  const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -191,7 +191,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+  const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -224,7 +224,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-DMK1Aj5z.mjs');
+  const { connectAndGetMachine } = await import('./commands-CEq6IsUJ.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-BHwz3pu2.mjs → serveManager-D0rSoflf.mjs}

@@ -3,7 +3,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { S as ServeAuth, h as hasCookieToken } from './run-3bGmfj05.mjs';
+import { S as ServeAuth, h as hasCookieToken } from './run-a3tcb38_.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.55",
+  "version": "0.2.57",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -18,7 +18,7 @@
     "./cli": "./dist/cli.mjs"
   },
   "scripts": {
-    "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/html-output bin/skills/html-output && tsc --noEmit && pkgroll",
+    "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
     "test": "npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",