svamp-cli 0.2.67 → 0.2.70

package/dist/{agentCommands-CVmNxFdC.mjs → agentCommands-BaQIO1T2.mjs}

@@ -148,7 +148,7 @@ async function sessionBroadcast(action, args) {
   console.log(`Broadcast sent: ${action}`);
 }
 async function connectToMachineService() {
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   return connectAndGetMachine();
 }
 async function inboxSend(targetSessionId, opts) {
@@ -165,7 +165,7 @@ async function inboxSend(targetSessionId, opts) {
   }
   const { server, machine } = await connectToMachineService();
   try {
-    const { resolveSessionId } = await import('./commands-BO8gl_-u.mjs');
+    const { resolveSessionId } = await import('./commands-BMOelGYC.mjs');
     const sessions = await machine.listSessions();
     const match = resolveSessionId(sessions, targetSessionId);
     const fullTargetId = match.sessionId;

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-DZq12r28.mjs';
+import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-BqAe7GgA.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -44,7 +44,7 @@ async function main() {
         console.error(`svamp daemon restart: ${err.message || err}`);
         process.exit(1);
       }
-      const { restartDaemon } = await import('./run-DZq12r28.mjs').then(function (n) { return n.u; });
+      const { restartDaemon } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.u; });
       await restartDaemon();
       process.exit(0);
     }
@@ -280,7 +280,7 @@ async function main() {
       console.error("svamp service: Service commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-B6yUtg85.mjs');
+    const { handleServiceCommand } = await import('./commands-CdGLuwtQ.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-DNTcbgWD.mjs');
@@ -288,7 +288,7 @@ async function main() {
       console.error("svamp serve: Serve commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-B-Ij7oce.mjs');
+    const { handleServeCommand } = await import('./serveCommands-DpKi_PuD.mjs');
     await handleServeCommand();
     process.exit(0);
   } else if (subcommand === "process" || subcommand === "proc") {
@@ -297,7 +297,7 @@ async function main() {
       console.error("svamp process: Process commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-D7A1aWC1.mjs');
+    const { processCommand } = await import('./commands-CB03m9-Z.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -315,7 +315,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-wAsRM-Wx.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-Cw40xKCx.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -324,7 +324,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-B4a6wAxf.mjs');
+  const { runInteractive } = await import('./run-Di-48dsY.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -369,7 +369,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-DZq12r28.mjs').then(function (n) { return n.p; });
+    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.p; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -381,7 +381,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-DZq12r28.mjs').then(function (n) { return n.p; });
+  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.p; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -405,12 +405,12 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_MCP_AGENTS[config.agentName]) {
-    const { CodexMcpBackend } = await import('./run-DZq12r28.mjs').then(function (n) { return n.q; });
+    const { CodexMcpBackend } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.q; });
     backend = new CodexMcpBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-DZq12r28.mjs').then(function (n) { return n.o; });
-    const { GeminiTransport } = await import('./run-DZq12r28.mjs').then(function (n) { return n.G; });
-    const { DefaultTransport } = await import('./run-DZq12r28.mjs').then(function (n) { return n.D; });
+    const { AcpBackend } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.o; });
+    const { GeminiTransport } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.G; });
+    const { DefaultTransport } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.D; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : new DefaultTransport(config.agentName);
     backend = new AcpBackend({
       agentName: config.agentName,
@@ -537,7 +537,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-BO8gl_-u.mjs');
+  const { sessionList, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-BMOelGYC.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -573,7 +573,13 @@ async function handleSessionCommand() {
     const wait = hasFlag("--wait");
     const worktree = hasFlag("--worktree");
     const isolate = hasFlag("--isolate");
-    const permissionMode = parseFlagStr("--permission-mode") || parseFlagStr("-p");
+    let permissionMode = parseFlagStr("--permission-mode") || parseFlagStr("-p");
+    if (!permissionMode && hasFlag("--require-approval")) {
+      permissionMode = "default";
+    }
+    if (!permissionMode) {
+      permissionMode = "bypassPermissions";
+    }
     const securityContextPath = parseFlagStr("--security-context");
     const denyNetwork = hasFlag("--deny-network");
     const parentSessionId = parseFlagStr("--parent");
@@ -597,7 +603,7 @@ async function handleSessionCommand() {
         allowDomain.push(sessionArgs[++i]);
       }
     }
-    const { parseShareArg } = await import('./commands-BO8gl_-u.mjs');
+    const { parseShareArg } = await import('./commands-BMOelGYC.mjs');
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -660,16 +666,35 @@ async function handleSessionCommand() {
     await sessionAttach(sessionArgs[1], targetMachineId);
   } else if (sessionSubcommand === "send") {
     if (!sessionArgs[1] || !sessionArgs[2]) {
-      console.error('Usage: svamp session send <session-id> <message> [--subject "..."] [--urgency urgent|normal] [--wait] [--timeout N] [--json]');
+      console.error('Usage: svamp session send <session-id> <message> [--subject "..."] [--urgency urgent|normal] [--wait] [--response] [--btw] [--require-approval] [--timeout N] [--json]');
       process.exit(1);
     }
     await sessionSend(sessionArgs[1], sessionArgs[2], targetMachineId, {
       wait: hasFlag("--wait"),
+      response: hasFlag("--response"),
+      btw: hasFlag("--btw"),
+      requireApproval: hasFlag("--require-approval"),
       timeout: parseFlagInt("--timeout"),
       json: hasFlag("--json"),
       subject: parseFlagStr("--subject"),
       urgency: parseFlagStr("--urgency")
     });
+  } else if (sessionSubcommand === "query") {
+    const dir = sessionArgs[1];
+    const prompt = sessionArgs[2];
+    if (!dir || !prompt) {
+      console.error("Usage: svamp session query <directory> <prompt> [--timeout N] [--keep] [--json] [--permission-mode MODE] [--tag NAME]");
+      console.error("  Spawns a stateless Claude session in <directory>, sends <prompt>, prints the answer, then deletes the session.");
+      process.exit(1);
+    }
+    const { sessionQuery } = await import('./commands-BMOelGYC.mjs');
+    await sessionQuery(dir, prompt, targetMachineId, {
+      timeout: parseFlagInt("--timeout"),
+      json: hasFlag("--json"),
+      keep: hasFlag("--keep"),
+      permissionMode: parseFlagStr("--permission-mode"),
+      tag: parseFlagStr("--tag")
+    });
   } else if (sessionSubcommand === "wait") {
     if (!sessionArgs[1]) {
       console.error("Usage: svamp session wait <session-id> [--timeout N] [--json]");
@@ -695,7 +720,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session approve <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-BO8gl_-u.mjs');
+    const { sessionApprove } = await import('./commands-BMOelGYC.mjs');
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -705,7 +730,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session deny <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-BO8gl_-u.mjs');
+    const { sessionDeny } = await import('./commands-BMOelGYC.mjs');
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -741,7 +766,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-title <title>");
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-CVmNxFdC.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-BaQIO1T2.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -750,7 +775,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-CVmNxFdC.mjs');
+    const { sessionSetLink } = await import('./agentCommands-BaQIO1T2.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "notify") {
     const message = sessionArgs[1];
@@ -759,7 +784,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-CVmNxFdC.mjs');
+    const { sessionNotify } = await import('./agentCommands-BaQIO1T2.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -767,7 +792,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session broadcast <action> [args...]\nActions: open-canvas <url> [label], close-canvas, toast <message>");
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-CVmNxFdC.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-BaQIO1T2.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -778,7 +803,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-CVmNxFdC.mjs');
+        const { inboxSend } = await import('./agentCommands-BaQIO1T2.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
@@ -793,7 +818,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-CVmNxFdC.mjs');
+        const { inboxList } = await import('./agentCommands-BaQIO1T2.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -815,7 +840,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-CVmNxFdC.mjs');
+        const { inboxList } = await import('./agentCommands-BaQIO1T2.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -825,7 +850,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "reply") {
       if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-CVmNxFdC.mjs');
+        const { inboxReply } = await import('./agentCommands-BaQIO1T2.mjs');
         await inboxReply(sessionArgs[2], sessionArgs[3]);
       } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
         await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
@@ -861,7 +886,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-BO8gl_-u.mjs');
+    const { machineShare } = await import('./commands-BMOelGYC.mjs');
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -891,7 +916,7 @@ async function handleMachineCommand() {
     }
     await machineShare(machineId, { add, remove, list, configPath, showConfig });
   } else if (machineSubcommand === "exec") {
-    const { machineExec } = await import('./commands-BO8gl_-u.mjs');
+    const { machineExec } = await import('./commands-BMOelGYC.mjs');
     let machineId;
     let cwd;
     const cmdParts = [];
@@ -911,7 +936,7 @@ async function handleMachineCommand() {
     }
     await machineExec(machineId, command, cwd);
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-BO8gl_-u.mjs');
+    const { machineInfo } = await import('./commands-BMOelGYC.mjs');
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -931,10 +956,10 @@ async function handleMachineCommand() {
         level = machineArgs[++i];
       }
     }
-    const { machineNotify } = await import('./agentCommands-CVmNxFdC.mjs');
+    const { machineNotify } = await import('./agentCommands-BaQIO1T2.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-BO8gl_-u.mjs');
+    const { machineLs } = await import('./commands-BMOelGYC.mjs');
     let machineId;
     let showHidden = false;
     let path;
@@ -1307,12 +1332,12 @@ function printHelp() {
   console.log(`
 svamp \u2014 AI workspace on Hypha Cloud
 
-Quick start \u2014 spawn an agent to do a task (use -p bypassPermissions to run autonomously):
-  svamp session spawn claude -d ./project -p bypassPermissions --message "fix tests" --wait
+Quick start \u2014 spawn an agent to do a task (autonomous by default):
+  svamp session spawn claude -d ./project --message "fix tests" --wait
 
-  Note: without -p bypassPermissions the agent PAUSES waiting for human approval of each
-  tool use. This will cause it to hang in automated/agent contexts. Use bypassPermissions
-  for autonomous work, or "default" only when a human is actively watching.
+  Note: as of 0.2.69 spawn defaults to permission mode "bypassPermissions" so the
+  child agent doesn't get stuck on tool-approval prompts. Pass --require-approval
+  (or -p default / -p acceptEdits) when you want a human to gate tool use.
 
 Commands:
   svamp                              Start interactive Claude session (synced to cloud)
@@ -1324,7 +1349,8 @@ Commands:
 
   Session management (requires daemon running):
   svamp session spawn <agent> [opts] Spawn a new agent session (agents: claude, gemini, codex)
-  svamp session send <id> <message>  Send message to a session (--wait to block until done)
+  svamp session send <id> <message>  Send message to a session (--wait, --response, --btw)
+  svamp session query <dir> <prompt> Stateless one-shot: spawn \u2192 ask \u2192 answer \u2192 delete
   svamp session wait <id>            Wait for agent to become idle
   svamp session messages <id>        Show message history (--last N, --json, --raw)
   svamp session info <id>            Show session status & pending permissions
@@ -1403,7 +1429,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./run-DZq12r28.mjs').then(function (n) { return n.t; });
+  const mod = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.t; });
   if (hasHypha) {
     mod.setClaudeAuthHyphaProxy();
     console.log("Claude auth configured: hypha-proxy (uses HYPHA_TOKEN live at each spawn).");
@@ -1441,7 +1467,7 @@ async function applyDaemonShareFlag(argv) {
     }
   }
   if (collected.length === 0) return;
-  const { updateEnvFile } = await import('./run-DZq12r28.mjs').then(function (n) { return n.t; });
+  const { updateEnvFile } = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.t; });
   const seen = /* @__PURE__ */ new Set();
   const deduped = collected.filter((e) => {
     const k = e.toLowerCase();
@@ -1454,7 +1480,7 @@ async function applyDaemonShareFlag(argv) {
 }
 async function handleDaemonAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const mod = await import('./run-DZq12r28.mjs').then(function (n) { return n.t; });
+  const mod = await import('./run-BqAe7GgA.mjs').then(function (n) { return n.t; });
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate
@@ -1520,9 +1546,8 @@ svamp session \u2014 Spawn and manage AI agent sessions
 
 QUICK START \u2014 Spawn a session, give it a task, get results:
 
-  # One-liner: spawn agent, send task, wait for completion
-  svamp session spawn claude -d ./my-project -p bypassPermissions \\
-    --message "fix the failing tests" --wait
+  # One-liner: spawn agent, send task, wait for completion (autonomous by default)
+  svamp session spawn claude -d ./my-project --message "fix the failing tests" --wait
 
   # The command prints the session ID (e.g., "abc12345-..."). Use it to:
   svamp session messages abc1 --last 10         # read output (prefix match on ID)
@@ -1553,8 +1578,24 @@ COMMANDS:
     info <id> [--json]                    Show status & pending permissions
 
   Communicate:
-    send <id> <message> [--wait] [--timeout N] [--json]
-                                          Send a message to a running session
+    send <id> <message> [--wait] [--response] [--btw] [--require-approval] [--timeout N] [--json]
+                                          Send a message to a running session.
+                                            --wait              block until the agent goes idle
+                                            --response          block AND print the agent's
+                                                                text answer (implies --wait)
+                                            --btw               side-channel one-shot query via
+                                                                /btw \u2014 does NOT touch the
+                                                                running session's context window
+                                            --require-approval  do NOT pre-flight the target to
+                                                                bypassPermissions. Without this,
+                                                                send with --wait/--response auto-
+                                                                ensures bypass so the agent does
+                                                                not stall on tool prompts.
+    query <directory> <prompt> [--timeout N] [--keep] [--json] [--permission-mode MODE] [--tag NAME]
+                                          Stateless one-shot: spawn fresh Claude in
+                                          <directory>, send <prompt>, print answer,
+                                          delete the session. No existing session is
+                                          affected. Use for reproducible Q&A.
     messages <id> [--last N] [--json]     Read message history (alias: msgs)
     wait <id> [--timeout N] [--json]      Wait for agent to become idle
     attach <id>                           Attach interactive terminal (stdin/stdout)
@@ -1583,7 +1624,9 @@ COMMANDS:
 
 SPAWN OPTIONS:
   -d, --directory <path>          Working directory (REQUIRED for meaningful work)
-  -p, --permission-mode <mode>    Permission mode (see below). Default: "default"
+  -p, --permission-mode <mode>    Permission mode (see below). Default: "bypassPermissions"
+  --require-approval              Opt into human-in-the-loop approval (alias for -p default).
+                                  Without this flag, the agent runs autonomously.
   --message <msg>                 Send this message to the agent immediately after spawn
   --wait                          Block until agent finishes (idle). Combine with --message
                                   for fire-and-forget: spawn \u2192 task \u2192 wait \u2192 done.
@@ -1593,15 +1636,14 @@ SPAWN OPTIONS:
   --parent <sessionId>            Set parent session (auto-set from SVAMP_SESSION_ID env)
 
 PERMISSION MODES:
+  bypassPermissions    \u2605 Default. Auto-approve everything. No prompts, no pauses.
+                       Right choice for automation, CI, agent-spawning-agent.
+  acceptEdits          Auto-approve file edits. Still pauses for bash & dangerous tools.
   default              \u26A0 Agent PAUSES and waits for human approval before each tool use.
                        The agent will be stuck (exit code 2) until you run approve/deny.
-                       DO NOT use default mode in automated pipelines \u2014 the agent will hang.
-  acceptEdits          Auto-approve file edits. Still pauses for bash & dangerous tools.
-  bypassPermissions    Auto-approve everything. No prompts, no pauses. Fully autonomous.
-                       Use this for automation, CI, or when spawning from another agent.
+                       Use only when a human is actively watching the session.
 
-  \u26A1 For agents/scripts: ALWAYS pass -p bypassPermissions unless you have a human
-     monitoring the session who can approve/deny tool requests in real time.
+  Tip: pass --require-approval (or -p default) when you want a human gate.
 
 PERMISSION WORKFLOW (only relevant for "default" and "acceptEdits" modes):
   1. svamp session wait <id> --json    \u2192 exit code 2 means permission pending
@@ -1652,32 +1694,32 @@ ID MATCHING:
 EXAMPLES:
 
   # === Common: Spawn agent to do a task and wait ===
-  svamp session spawn claude -d ./my-project -p bypassPermissions \\
+  # Default is bypassPermissions \u2014 no -p flag needed for autonomous runs.
+  svamp session spawn claude -d ./my-project \\
     --message "fix all TypeScript errors, run tsc to verify" --wait
 
   # === Multi-step: Spawn, then send messages interactively ===
-  ID=$(svamp session spawn claude -d ./proj -p bypassPermissions)
+  ID=$(svamp session spawn claude -d ./proj)
   svamp session send $ID "first, read the README" --wait
   svamp session send $ID "now implement the feature described there" --wait
   svamp session messages $ID --last 20
 
   # === Spawn child session from another agent (e.g., in a bash tool) ===
-  # Use -p bypassPermissions so the child doesn't get stuck on approvals.
-  # Use --wait so your script blocks until the child finishes.
-  svamp session spawn claude -d /tmp/test-project -p bypassPermissions \\
+  # bypassPermissions is the default; --wait blocks until done.
+  svamp session spawn claude -d /tmp/test-project \\
     --message "run the test suite and report results" --wait
-  # Then read the child's output:
   svamp session messages <child-id> --last 5
 
-  # === Monitor with permissions (default mode) ===
-  svamp session spawn claude -d ./proj --message "refactor auth module"
+  # === Human-in-the-loop: require approval for every tool ===
+  svamp session spawn claude -d ./proj --require-approval \\
+    --message "refactor auth module"
   svamp session wait abc1 --json       # exit code 2 = permission pending
   svamp session approve abc1           # approve all pending
   svamp session wait abc1              # wait for completion
 
   # === Spawn on a remote machine ===
   svamp session spawn claude -d /workspace -m my-cloud-box \\
-    -p bypassPermissions --message "deploy to staging" --wait
+    --message "deploy to staging" --wait
 
   # === Isolated session with network restrictions ===
   svamp session spawn claude -d /tmp/sandbox --isolate --deny-network

package/dist/{commands-BO8gl_-u.mjs → commands-BMOelGYC.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { resolve, join } from 'node:path';
 import os from 'node:os';
-import { n as normalizeAllowedUser, l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha, i as buildSessionShareUrl, j as buildMachineShareUrl } from './run-DZq12r28.mjs';
+import { n as normalizeAllowedUser, l as loadSecurityContextConfig, e as resolveSecurityContext, f as buildSecurityContextFromFlags, m as mergeSecurityContexts, c as connectToHypha, i as buildSessionShareUrl, j as buildMachineShareUrl } from './run-BqAe7GgA.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -73,7 +73,10 @@ function formatJson(data) {
 
 const SESSION_RPC_PARAMS = {
   getMessages: ["afterSeq", "limit"],
+  getMessageCount: [],
+  getLatestMessages: ["beforeSeq", "limit"],
   sendMessage: ["content", "localId", "meta"],
+  btw: ["question"],
   getMetadata: [],
   updateMetadata: ["newMetadata", "expectedVersion"],
   updateConfig: ["patch"],
@@ -97,6 +100,7 @@ const SESSION_RPC_PARAMS = {
   getEffectiveRole: [],
   updateSharing: ["newSharing"],
   updateSecurityContext: ["newSecurityContext"],
+  setClaudeChrome: ["enabled"],
   applySystemPrompt: ["prompt"],
   sendInboxMessage: ["message"],
   getInbox: ["opts"],
@@ -1001,10 +1005,10 @@ async function sessionSpawn(agent, directory, machineId, opts) {
     if (result.type === "success") {
       console.log(`Session started: ${result.sessionId}`);
       if (result.message) console.log(`  ${result.message}`);
-      const effectivePermMode = opts?.permissionMode || "default";
-      if (effectivePermMode !== "bypassPermissions") {
-        console.log(`\x1B[33m\u26A0 Permission mode: ${effectivePermMode}. Agent may pause for tool approval.\x1B[0m`);
-        console.log(`\x1B[33m  Use -p bypassPermissions to run without approval prompts.\x1B[0m`);
+      const explicitPermMode = opts?.permissionMode;
+      if (explicitPermMode && explicitPermMode !== "bypassPermissions") {
+        console.log(`\x1B[33m\u26A0 Permission mode: ${explicitPermMode}. Agent will pause for tool approval.\x1B[0m`);
+        console.log(`\x1B[33m  Use \`svamp session approve <id>\` to unblock, or drop the flag to run autonomously.\x1B[0m`);
       }
       if (opts?.message && result.sessionId) {
         const svc = getSessionProxy(machine, result.sessionId);
@@ -1357,63 +1361,356 @@ async function sessionAttach(sessionId, machineId) {
     process.exit(0);
   });
 }
+async function snapshotLatestSeq(machine, fullId) {
+  try {
+    const r = await machine.sessionRPC(fullId, "getMessageCount", {});
+    return Math.max(0, Number(r?.latestSeq ?? 0));
+  } catch {
+    try {
+      const r = await machine.sessionRPC(fullId, "getLatestMessages", { limit: 1 });
+      const msgs = r?.messages || [];
+      return msgs.length > 0 ? Number(msgs[msgs.length - 1].seq || 0) : 0;
+    } catch {
+      return 0;
+    }
+  }
+}
+async function collectAssistantResponse(machine, fullId, afterSeq) {
+  const pageLimit = 500;
+  let cursor = afterSeq;
+  const collected = [];
+  const seqs = [];
+  for (let i = 0; i < 20; i++) {
+    const { messages, hasMore } = await machine.sessionRPC(
+      fullId,
+      "getMessages",
+      { afterSeq: cursor, limit: pageLimit }
+    );
+    if (!messages || messages.length === 0) break;
+    for (const msg of messages) {
+      const role = msg?.content?.role;
+      if (role === "agent" || role === "assistant") {
+        const data = msg.content?.content?.data || msg.content?.content;
+        if (!data) continue;
+        let blocks = null;
+        if (data.type === "assistant") {
+          const b = data.message?.content || data.content;
+          blocks = Array.isArray(b) ? b : null;
+        } else if (data.type === "output" && data.data?.type === "assistant") {
+          const b = data.data.message?.content || data.data.content;
+          blocks = Array.isArray(b) ? b : null;
+        }
+        if (blocks) {
+          for (const block of blocks) {
+            if (block.type === "text" && typeof block.text === "string" && block.text) {
+              collected.push(block.text);
+              if (!seqs.includes(msg.seq)) seqs.push(msg.seq);
+            }
+          }
+        } else if (data.type === "result" && typeof data.result === "string" && data.result) {
+          collected.push(data.result);
+          if (!seqs.includes(msg.seq)) seqs.push(msg.seq);
+        } else if (data.type === "output" && data.data?.type === "result" && typeof data.data.result === "string" && data.data.result) {
+          collected.push(data.data.result);
+          if (!seqs.includes(msg.seq)) seqs.push(msg.seq);
+        }
+      }
+      cursor = Math.max(cursor, Number(msg.seq || 0));
+    }
+    if (!hasMore) break;
+  }
+  return { text: collected.join("\n").trim(), messageSeqs: seqs };
+}
+function validateSendOptions(opts) {
+  if (!opts?.btw) return [];
+  const incompatible = [];
+  if (opts.subject) incompatible.push("--subject");
+  if (opts.urgency) incompatible.push("--urgency");
+  if (opts.wait) incompatible.push("--wait");
+  if (opts.response) incompatible.push("--response");
+  return incompatible;
+}
+async function sendCore(machine, fullId, message, opts) {
+  if (opts?.btw) {
+    const btwResult = await machine.sessionRPC(fullId, "btw", { question: message });
+    if (!btwResult?.success) {
+      return {
+        sessionId: fullId,
+        mode: "btw",
+        sent: false,
+        waited: false,
+        status: "error",
+        error: btwResult?.error || "btw failed"
+      };
+    }
+    return {
+      sessionId: fullId,
+      mode: "btw",
+      sent: true,
+      waited: true,
+      status: "idle",
+      response: String(btwResult.answer || "")
+    };
+  }
+  const wantResponse = !!opts?.response;
+  const shouldWait = !!opts?.wait || wantResponse;
+  let bypassEnsured = false;
+  if (shouldWait && !opts?.requireApproval) {
+    try {
+      await machine.sessionRPC(fullId, "switchMode", { mode: "bypassPermissions" });
+      bypassEnsured = true;
+    } catch {
+    }
+  }
+  const preSeq = wantResponse ? await snapshotLatestSeq(machine, fullId) : 0;
+  const { randomUUID } = await import('node:crypto');
+  const inboxMessage = {
+    messageId: randomUUID(),
+    body: message,
+    timestamp: Date.now(),
+    read: false,
+    from: `cli:${os.userInfo().username}`,
+    to: fullId,
+    subject: opts?.subject,
+    urgency: opts?.urgency || "urgent"
+  };
+  const result = await machine.sessionRPC(fullId, "sendInboxMessage", { message: inboxMessage });
+  let waitResult;
+  if (shouldWait) {
+    const timeoutMs = (opts?.timeout || 300) * 1e3;
+    waitResult = await waitForBusyThenIdle(machine, fullId, timeoutMs);
+  }
+  if (waitResult?.pendingPermissions?.length) {
+    return {
+      sessionId: fullId,
+      mode: "send",
+      sent: true,
+      messageId: result.messageId,
+      waited: true,
+      status: "permission-pending",
+      pendingPermissions: waitResult.pendingPermissions,
+      bypassEnsured
+    };
+  }
+  let response;
+  if (wantResponse) {
+    response = await collectAssistantResponse(machine, fullId, preSeq);
+  }
+  return {
+    sessionId: fullId,
+    mode: "send",
+    sent: true,
+    messageId: result.messageId,
+    waited: shouldWait,
+    status: shouldWait ? "idle" : "sent",
+    bypassEnsured,
+    ...wantResponse && response ? { response: response.text, responseSeqs: response.messageSeqs } : {}
+  };
+}
 async function sessionSend(sessionId, message, machineId, opts) {
+  const incompatible = validateSendOptions(opts);
+  if (incompatible.length) {
+    console.error(`Error: --btw is incompatible with: ${incompatible.join(", ")}`);
+    console.error("  --btw runs as a one-shot forked query that returns the answer directly.");
+    process.exit(1);
+  }
   const { server, machine, fullId } = await connectAndResolveSession(sessionId, machineId);
   try {
-    const { randomUUID } = await import('node:crypto');
-    const inboxMessage = {
-      messageId: randomUUID(),
-      body: message,
-      timestamp: Date.now(),
-      read: false,
-      from: `cli:${os.userInfo().username}`,
-      to: fullId,
-      subject: opts?.subject,
-      urgency: opts?.urgency || "urgent"
-    };
-    const result = await machine.sessionRPC(fullId, "sendInboxMessage", { message: inboxMessage });
-    let waitResult;
-    if (opts?.wait) {
-      const timeoutMs = (opts.timeout || 300) * 1e3;
-      waitResult = await waitForBusyThenIdle(machine, fullId, timeoutMs);
+    const r = await sendCore(machine, fullId, message, opts);
+    if (r.mode === "btw") {
+      if (r.status === "error") {
+        if (opts?.json) {
+          console.log(formatJson({
+            sessionId: r.sessionId,
+            mode: "btw",
+            message,
+            success: false,
+            error: r.error
+          }));
+        } else {
+          console.error(`btw failed: ${r.error || "unknown error"}`);
+        }
+        process.exitCode = 1;
+        return;
+      }
+      if (opts?.json) {
+        console.log(formatJson({
+          sessionId: r.sessionId,
+          mode: "btw",
+          message,
+          success: true,
+          response: r.response || ""
+        }));
+      } else if (r.response) {
+        console.log(r.response);
+      }
+      return;
     }
-    if (waitResult?.pendingPermissions?.length) {
+    if (r.status === "permission-pending") {
       if (opts?.json) {
         console.log(formatJson({
-          sessionId: fullId,
+          sessionId: r.sessionId,
           message,
           sent: true,
-          messageId: result.messageId,
+          messageId: r.messageId,
           status: "permission-pending",
-          pendingPermissions: waitResult.pendingPermissions
+          pendingPermissions: r.pendingPermissions
         }));
       } else {
-        console.log(`Message sent to session ${fullId.slice(0, 8)} (id: ${result.messageId.slice(0, 8)})`);
+        console.log(`Message sent to session ${r.sessionId.slice(0, 8)} (id: ${(r.messageId || "").slice(0, 8)})`);
         console.log("Agent is waiting for permission approval:");
-        for (const p of waitResult.pendingPermissions) {
+        for (const p of r.pendingPermissions || []) {
           const argsStr = JSON.stringify(p.arguments || {}).slice(0, 120);
           console.log(`  [${p.id.slice(0, 8)}] ${p.tool}(${argsStr})`);
         }
         console.log(`
-Use: svamp session approve ${fullId.slice(0, 8)}`);
+Use: svamp session approve ${r.sessionId.slice(0, 8)}`);
       }
       process.exitCode = 2;
-    } else if (opts?.json) {
+      return;
+    }
+    if (opts?.json) {
       console.log(formatJson({
-        sessionId: fullId,
+        sessionId: r.sessionId,
         message,
         sent: true,
-        messageId: result.messageId,
-        waited: !!opts.wait,
-        status: opts.wait ? "idle" : "sent"
+        messageId: r.messageId,
+        waited: r.waited,
+        status: r.status,
+        ...r.bypassEnsured ? { bypassEnsured: true } : {},
+        ...opts.response ? { response: r.response || "", responseSeqs: r.responseSeqs || [] } : {}
       }));
     } else {
-      console.log(`Message sent to session ${fullId.slice(0, 8)} (id: ${result.messageId.slice(0, 8)})`);
-      if (opts?.wait) {
+      console.log(`Message sent to session ${r.sessionId.slice(0, 8)} (id: ${(r.messageId || "").slice(0, 8)})`);
+      if (r.waited) {
         console.log("Agent is idle.");
       }
+      if (opts?.response) {
+        if (r.response) {
+          console.log("");
+          console.log(r.response);
+        } else {
+          console.log("(no text response captured)");
+        }
+      }
+    }
+  } finally {
+    await server.disconnect();
+  }
+}
+async function queryCore(machine, directory, prompt, opts) {
+  const absDir = resolve(directory);
+  const spawnOpts = {
+    directory: absDir,
+    agent: "claude",
+    permissionMode: opts?.permissionMode || "bypassPermissions",
+    tags: opts?.tag ? [opts.tag] : ["svamp-query"]
+  };
+  const spawn = await machine.spawnSession(spawnOpts);
+  if (spawn.type !== "success" || !spawn.sessionId) {
+    return {
+      sessionId: "",
+      mode: "query",
+      sent: false,
+      waited: false,
+      status: "error",
+      error: spawn.errorMessage || `spawn returned type=${spawn.type}`,
+      directory: absDir
+    };
+  }
+  const spawnedId = spawn.sessionId;
+  const svc = getSessionProxy(machine, spawnedId);
+  await svc.sendMessage(
+    JSON.stringify({
+      role: "user",
+      content: { type: "text", text: prompt },
+      meta: { sentFrom: "svamp-cli-query" }
+    })
+  );
+  const timeoutMs = (opts?.timeout || 300) * 1e3;
+  const waitResult = await waitForBusyThenIdle(machine, spawnedId, timeoutMs);
+  if (waitResult.pendingPermissions?.length) {
+    return {
+      sessionId: spawnedId,
+      mode: "query",
+      sent: true,
+      waited: true,
+      status: "permission-pending",
+      pendingPermissions: waitResult.pendingPermissions,
+      error: `Agent paused for tool approval (${waitResult.pendingPermissions.length} pending). Pass --permission-mode bypassPermissions or approve the request manually.`,
+      directory: absDir
+    };
+  }
+  const response = await collectAssistantResponse(machine, spawnedId, 0);
+  return {
+    sessionId: spawnedId,
+    mode: "query",
+    sent: true,
+    waited: true,
+    status: "idle",
+    response: response.text,
+    responseSeqs: response.messageSeqs,
+    directory: absDir
+  };
+}
+async function sessionQuery(directory, prompt, machineId, opts) {
+  const { server, machine } = await connectAndGetMachine(machineId);
+  let spawnedId;
+  try {
+    const r = await queryCore(machine, directory, prompt, opts);
+    spawnedId = r.sessionId || void 0;
+    if (r.status === "error") {
+      if (opts?.json) {
+        console.log(formatJson({
+          success: false,
+          error: r.error,
+          directory: r.directory
+        }));
+      } else {
+        console.error(`Failed to spawn query session: ${r.error}`);
+      }
+      process.exitCode = 1;
+      return;
+    }
+    if (r.status === "permission-pending") {
+      if (opts?.json) {
+        console.log(formatJson({
+          success: false,
+          sessionId: r.sessionId,
+          directory: r.directory,
+          error: r.error,
+          pendingPermissions: r.pendingPermissions
+        }));
+      } else {
+        console.error(r.error);
+      }
+      process.exitCode = 2;
+      return;
+    }
+    if (opts?.json) {
+      console.log(formatJson({
+        success: true,
+        sessionId: r.sessionId,
+        directory: r.directory,
+        prompt,
+        response: r.response || "",
+        responseSeqs: r.responseSeqs || []
+      }));
+    } else {
+      if (r.response) {
+        console.log(r.response);
+      } else {
+        console.log("(no text response captured)");
+      }
     }
   } finally {
+    if (spawnedId && !opts?.keep) {
+      try {
+        await machine.deleteSession(spawnedId);
+      } catch (err) {
+        console.error(`Warning: failed to delete query session ${spawnedId}: ${err?.message || err}`);
+      }
+    }
     await server.disconnect();
   }
 }
@@ -1924,4 +2221,4 @@ async function sessionInboxClear(sessionIdPartial, machineId, opts) {
   }
 }
 
-export { connectAndGetMachine, connectAndResolveSession, createWorktree, generateWorktreeName, machineExec, machineInfo, machineLs, machineShare, parseShareArg, renderMessage, resolveSessionId, sessionApprove, sessionArchive, sessionAttach, sessionDelete, sessionDeny, sessionInboxClear, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxSend, sessionInfo, sessionList, sessionMachines, sessionMessages, sessionRalphCancel, sessionRalphStart, sessionRalphStatus, sessionResume, sessionSend, sessionShare, sessionSpawn, sessionWait };
+export { collectAssistantResponse, connectAndGetMachine, connectAndResolveSession, createWorktree, generateWorktreeName, machineExec, machineInfo, machineLs, machineShare, parseShareArg, queryCore, renderMessage, resolveSessionId, sendCore, sessionApprove, sessionArchive, sessionAttach, sessionDelete, sessionDeny, sessionInboxClear, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxSend, sessionInfo, sessionList, sessionMachines, sessionMessages, sessionQuery, sessionRalphCancel, sessionRalphStart, sessionRalphStatus, sessionResume, sessionSend, sessionShare, sessionSpawn, sessionWait, snapshotLatestSeq, validateSendOptions };

package/dist/{commands-D7A1aWC1.mjs → commands-CB03m9-Z.mjs}

@@ -1,11 +1,11 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-BO8gl_-u.mjs';
+import { connectAndGetMachine } from './commands-BMOelGYC.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-DZq12r28.mjs';
+import './run-BqAe7GgA.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/dist/{commands-B6yUtg85.mjs → commands-CdGLuwtQ.mjs}

@@ -68,7 +68,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -132,7 +132,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+    const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -161,7 +161,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+    const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-DZq12r28.mjs';
+export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-BqAe7GgA.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{package-wAsRM-Wx.mjs → package-Cw40xKCx.mjs}

@@ -1,5 +1,5 @@
 var name = "svamp-cli";
-var version = "0.2.67";
+var version = "0.2.70";
 var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
 var author = "Amun AI AB";
 var license = "SEE LICENSE IN LICENSE";
@@ -19,12 +19,11 @@ var exports$1 = {
 var scripts = {
 	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
 	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
 	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
 	dev: "tsx src/cli.ts",
 	"dev:daemon": "tsx src/cli.ts daemon start-sync",
 	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
-	"test:archive-resume": "node --no-warnings test/test-session-archive-resume.mjs",
 	"test:frpc": "npx tsx test/test-frpc-e2e.mjs"
 };
 var dependencies = {

package/dist/{run-DZq12r28.mjs → run-BqAe7GgA.mjs}

@@ -1140,9 +1140,10 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const { join: join2, resolve } = await import('path');
         const { homedir } = await import('os');
         const targetPath = resolve(path || homedir());
+        const effectiveRole = getEffectiveRole(context, currentMetadata.sharing);
         const home = homedir();
-        const isOwner = !currentMetadata.sharing?.enabled || context?.user?.email && currentMetadata.sharing.owner && context.user.email.toLowerCase() === currentMetadata.sharing.owner.toLowerCase();
-        if (!isOwner && targetPath !== home && !targetPath.startsWith(home + "/")) {
+        const restrictedToHome = effectiveRole === "view";
+        if (restrictedToHome && targetPath !== home && !targetPath.startsWith(home + "/")) {
           throw new Error(`Access denied: path must be within ${home}`);
         }
         const showHidden = options?.showHidden ?? false;
@@ -2116,6 +2117,22 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       });
       return await callbacks.onUpdateSecurityContext(resolvedContext);
     },
+    /** Toggle the Claude --chrome flag and restart the agent process.
+     *  Admin tier (owner or admin-shared user) can perform this. */
+    setClaudeChrome: async (enabled, context) => {
+      authorizeRequest(context, metadata.sharing, "admin");
+      if (!callbacks.onSetClaudeChrome) {
+        throw new Error("Chrome integration toggle is not supported for this session");
+      }
+      metadata = { ...metadata, claudeChrome: !!enabled };
+      metadataVersion++;
+      notifyListeners({
+        type: "update-session",
+        sessionId,
+        metadata: { value: metadata, version: metadataVersion }
+      });
+      return await callbacks.onSetClaudeChrome(!!enabled);
+    },
     /** Apply a new system prompt and restart the agent process */
     applySystemPrompt: async (prompt, context) => {
       authorizeRequest(context, metadata.sharing, "admin");
@@ -2248,6 +2265,8 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
           claudeSessionId,
           "--fork-session",
           "--no-session-persistence",
+          "--permission-mode",
+          "bypassPermissions",
           "--output-format",
           "json",
           "--max-turns",
@@ -5737,6 +5756,19 @@ btn.addEventListener('click', async () => {
         return;
     }
 
+    // Open the popup SYNCHRONOUSLY inside the click handler so the browser's
+    // popup blocker treats it as user-initiated. The hypha SDK awaits a
+    // network round-trip before invoking login_callback, by which time the
+    // user-gesture flag has cleared and any window.open() call is silently
+    // blocked \u2014 especially inside sandboxed iframes (canvas, artifact view).
+    // We point it at about:blank first and rewrite the URL once we have it.
+    const popup = window.open('about:blank', '_blank');
+    if (!popup) {
+        setError('Popup was blocked by the browser. Please allow popups for this site and retry.');
+        return;
+    }
+    try { popup.document.write('<html><body style="font-family:system-ui;padding:24px;color:#656d76">Opening Hypha sign-in\u2026</body></html>'); } catch (e) {}
+
     btn.disabled = true;
     statusEl.textContent = 'Opening Hypha sign-in\u2026';
 
@@ -5745,10 +5777,8 @@ btn.addEventListener('click', async () => {
             server_url: hyphaServer,
             login_callback: (context) => {
                 statusEl.textContent = 'Waiting for you to sign in\u2026';
-                // Open the login URL in a new tab. Called synchronously from
-                // inside the SDK's login() after the user's button click, so
-                // popup blockers generally allow it.
-                window.open(context.login_url, '_blank');
+                try { popup.location.href = context.login_url; }
+                catch (e) { window.open(context.login_url, '_blank'); }
             },
         });
 
@@ -5758,9 +5788,11 @@ btn.addEventListener('click', async () => {
         const secure = location.protocol === 'https:' ? '; Secure' : '';
         document.cookie = cookieName + '=' + token + '; path=/; SameSite=Lax' + secure;
 
+        try { popup.close(); } catch (e) {}
         statusEl.innerHTML = '<span class="ok">Signed in. Redirecting\u2026</span>';
         setTimeout(() => { window.location.replace(redirectUrl); }, 300);
     } catch (err) {
+        try { popup.close(); } catch (e) {}
         setError('Login failed: ' + (err && err.message ? err.message : err));
     }
 });
@@ -7816,7 +7848,7 @@ async function startDaemon(options) {
     const list = loadExposedTunnels().filter((t) => t.name !== name);
     saveExposedTunnels(list);
   }
-  const { ServeManager } = await import('./serveManager-D4f3wiSO.mjs');
+  const { ServeManager } = await import('./serveManager-Dy4afaLH.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -8010,13 +8042,14 @@ async function startDaemon(options) {
             const parentTracked = Array.from(pidToTrackedSession.values()).find((t) => t.svampSessionId === options2.parentSessionId);
             return parentTracked?.directory ? { parentSessionPath: parentTracked.directory } : {};
           })(),
-          ...options2.injectPlatformGuidance !== void 0 && { injectPlatformGuidance: options2.injectPlatformGuidance }
+          ...options2.injectPlatformGuidance !== void 0 && { injectPlatformGuidance: options2.injectPlatformGuidance },
+          ...options2.claudeChrome !== void 0 && { claudeChrome: options2.claudeChrome }
         };
         let claudeProcess = null;
         const allPersisted = loadPersistedSessions();
         const persisted = allPersisted.find((p) => p.sessionId === sessionId) || (resumeSessionId ? allPersisted.find((p) => p.claudeResumeId === resumeSessionId) : void 0);
         let claudeResumeId = persisted?.claudeResumeId || (resumeSessionId || void 0);
-        let currentPermissionMode = options2.permissionMode || persisted?.permissionMode || "default";
+        let currentPermissionMode = options2.permissionMode || persisted?.permissionMode || "bypassPermissions";
         const sessionCreatedAt = persisted?.createdAt || Date.now();
         let lastSpawnMeta = persisted?.spawnMeta || {};
         let sessionWasProcessing = !!options2.wasProcessing;
@@ -8172,6 +8205,13 @@ async function startDaemon(options) {
           if (model) args.push("--model", model);
           if (appendSystemPrompt) args.push("--append-system-prompt", appendSystemPrompt);
           if (claudeResumeId) args.push("--resume", claudeResumeId);
+          if (sessionMetadata.claudeChrome) {
+            if (shouldIsolateSession()) {
+              logger.log(`[Session ${sessionId}] claudeChrome=true but session is isolated; skipping --chrome (Chrome IPC not reachable from sandbox)`);
+            } else {
+              args.push("--chrome");
+            }
+          }
           if (!hookSettings) {
             try {
               hookSettings = generateHookSettings({ id: sessionId });
@@ -8988,6 +9028,11 @@ The automated loop has finished. Review the progress above and let me know if yo
                   claudeResumeId,
                   "--fork-session",
                   "--no-session-persistence",
+                  // /btw is non-interactive; without bypass the
+                  // forked Claude pauses on tool prompts and the
+                  // user just sees a hanging side-channel.
+                  "--permission-mode",
+                  "bypassPermissions",
                   "--output-format",
                   "stream-json",
                   "--verbose"
@@ -9122,6 +9167,9 @@ The automated loop has finished. Review the progress above and let me know if yo
             },
             onSwitchMode: async (mode) => {
               const normalizedMode = toClaudePermissionMode(mode);
+              if (currentPermissionMode === normalizedMode) {
+                return;
+              }
               logger.log(`[Session ${sessionId}] Switch mode: ${mode}${mode !== normalizedMode ? ` \u2192 ${normalizedMode}` : ""}`);
               if (isRestartingClaude || isSwitchingMode) {
                 logger.log(`[Session ${sessionId}] Switch mode deferred \u2014 restart/switch already in progress`);
@@ -9148,6 +9196,24 @@ The automated loop has finished. Review the progress above and let me know if yo
               sessionMetadata = { ...sessionMetadata, securityContext: newSecurityContext };
               return await restartClaudeHandler();
             },
+            onSetClaudeChrome: async (enabled) => {
+              logger.log(`[Session ${sessionId}] Chrome integration ${enabled ? "enabled" : "disabled"} \u2014 restarting agent`);
+              sessionMetadata = { ...sessionMetadata, claudeChrome: enabled };
+              if (claudeResumeId && !trackedSession.stopped) {
+                saveSession({
+                  sessionId,
+                  directory,
+                  claudeResumeId,
+                  permissionMode: currentPermissionMode,
+                  spawnMeta: lastSpawnMeta,
+                  metadata: sessionMetadata,
+                  createdAt: sessionCreatedAt,
+                  machineId,
+                  wasProcessing: sessionWasProcessing
+                });
+              }
+              return await restartClaudeHandler();
+            },
             onSharingUpdate: (newSharing) => {
               logger.log(`[Session ${sessionId}] Sharing config updated \u2014 persisting to disk`);
               const oldSharing = sessionMetadata.sharing;
@@ -9190,7 +9256,6 @@ The automated loop has finished. Review the progress above and let me know if yo
               if (trackedSession?.stopped) return;
               logger.log(`[Session ${sessionId}] Inbox message received (urgency: ${message.urgency || "normal"}, from: ${message.from || "unknown"})`);
               const formatted = formatInboxMessageXml(message);
-              sessionService.markInboxRead(message.messageId);
               if (message.urgency === "urgent") {
                 logger.log(`[Session ${sessionId}] Delivering urgent inbox message to agent`);
                 sessionService.pushMessage(formatted, "user");
@@ -9540,7 +9605,7 @@ The automated loop has finished. Review the progress above and let me know if yo
           tags: options2.tags,
           parentSessionId: options2.parentSessionId
         };
-        let currentPermissionMode = options2.permissionMode || "default";
+        let currentPermissionMode = options2.permissionMode || "bypassPermissions";
         const allowedTools = /* @__PURE__ */ new Set();
         const allowedBashLiterals = /* @__PURE__ */ new Set();
         const allowedBashPrefixes = /* @__PURE__ */ new Set();
@@ -9634,6 +9699,7 @@ The automated loop has finished. Review the progress above and let me know if yo
               agentBackend.respondToPermission?.(requestId, params.approved);
             },
             onSwitchMode: (mode) => {
+              if (currentPermissionMode === mode) return;
               logger.log(`[${agentName} Session ${sessionId}] Switch mode: ${mode}`);
               currentPermissionMode = mode;
             },
@@ -9661,7 +9727,6 @@ The automated loop has finished. Review the progress above and let me know if yo
               if (acpStopped) return;
               logger.log(`[${agentName} Session ${sessionId}] Inbox message received (urgency: ${message.urgency || "normal"}, from: ${message.from || "unknown"})`);
               const formatted = formatInboxMessageXml(message);
-              sessionService.markInboxRead(message.messageId);
               if (message.urgency === "urgent" && acpBackendReady) {
                 logger.log(`[${agentName} Session ${sessionId}] Delivering urgent inbox message to agent`);
                 sessionService.pushMessage(formatted, "user");

package/dist/{run-B4a6wAxf.mjs → run-Di-48dsY.mjs}

@@ -2,7 +2,7 @@ import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(im
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';
-import { c as connectToHypha, a as registerSessionService, k as generateHookSettings } from './run-DZq12r28.mjs';
+import { c as connectToHypha, a as registerSessionService, k as generateHookSettings } from './run-BqAe7GgA.mjs';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
 import { createInterface } from 'node:readline';

package/dist/{serveCommands-B-Ij7oce.mjs → serveCommands-DpKi_PuD.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-BO8gl_-u.mjs');
+  const { connectAndGetMachine } = await import('./commands-BMOelGYC.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-D4f3wiSO.mjs → serveManager-Dy4afaLH.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { S as ServeAuth, h as hasCookieToken } from './run-DZq12r28.mjs';
+import { S as ServeAuth, h as hasCookieToken } from './run-BqAe7GgA.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.67",
+  "version": "0.2.70",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -20,12 +20,11 @@
   "scripts": {
     "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
+    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
     "dev": "tsx src/cli.ts",
     "dev:daemon": "tsx src/cli.ts daemon start-sync",
     "test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
-    "test:archive-resume": "node --no-warnings test/test-session-archive-resume.mjs",
     "test:frpc": "npx tsx test/test-frpc-e2e.mjs"
   },
   "dependencies": {