svamp-cli 0.2.68 → 0.2.71

package/dist/{run-HuBXfVSz.mjs → run-h-QVSVFd.mjs}

@@ -754,12 +754,36 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         }
         return result;
       },
-      // Stop a session
-      stopSession: async (sessionId, context) => {
+      // Archive a session (non-destructive — preserves claudeResumeId for resume)
+      archiveSession: async (sessionId, context) => {
         authorizeRequest(context, currentMetadata.sharing, "admin");
-        const result = handlers.stopSession(sessionId);
+        const result = handlers.archiveSession(sessionId);
         notifyListeners({
-          type: "session-stopped",
+          type: "session-archived",
+          sessionId,
+          machineId
+        });
+        return result;
+      },
+      // Resume an archived session (spawns the agent with --resume <claudeResumeId>)
+      resumeSession: async (sessionId, context) => {
+        authorizeRequest(context, currentMetadata.sharing, "admin");
+        const result = await handlers.resumeSession(sessionId);
+        if (result.success) {
+          notifyListeners({
+            type: "session-resumed",
+            sessionId,
+            machineId
+          });
+        }
+        return result;
+      },
+      // Permanently delete a session (wipes session.json + messages.jsonl + .svamp/{id}/)
+      deleteSession: async (sessionId, context) => {
+        authorizeRequest(context, currentMetadata.sharing, "admin");
+        const result = handlers.deleteSession(sessionId);
+        notifyListeners({
+          type: "session-deleted",
           sessionId,
           machineId
         });
@@ -1116,9 +1140,10 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const { join: join2, resolve } = await import('path');
         const { homedir } = await import('os');
         const targetPath = resolve(path || homedir());
+        const effectiveRole = getEffectiveRole(context, currentMetadata.sharing);
         const home = homedir();
-        const isOwner = !currentMetadata.sharing?.enabled || context?.user?.email && currentMetadata.sharing.owner && context.user.email.toLowerCase() === currentMetadata.sharing.owner.toLowerCase();
-        if (!isOwner && targetPath !== home && !targetPath.startsWith(home + "/")) {
+        const restrictedToHome = effectiveRole === "view";
+        if (restrictedToHome && targetPath !== home && !targetPath.startsWith(home + "/")) {
           throw new Error(`Access denied: path must be within ${home}`);
         }
         const showHidden = options?.showHidden ?? false;
@@ -1572,7 +1597,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
 }
 
 function isStructuredMessage(msg) {
-  return !!(msg.from && msg.subject);
+  return !!(msg.from || msg.fromSession || msg.subject || msg.replyTo || msg.threadId);
 }
 function escapeXml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
@@ -1960,9 +1985,9 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
       authorizeRequest(context, metadata.sharing, "admin");
       return await callbacks.onRestartClaude();
     },
-    killSession: async (context) => {
+    archiveSession: async (context) => {
       authorizeRequest(context, metadata.sharing, "admin");
-      callbacks.onKillSession();
+      callbacks.onArchiveSession();
       return { success: true };
     },
     // ── Activity ──
@@ -2240,6 +2265,8 @@ function createSessionStore(server, sessionId, initialMetadata, initialAgentStat
           claudeSessionId,
           "--fork-session",
           "--no-session-persistence",
+          "--permission-mode",
+          "bypassPermissions",
           "--output-format",
           "json",
           "--max-turns",
@@ -5676,10 +5703,16 @@ class ServeAuth {
     return access.some((e) => e.toLowerCase() === email.toLowerCase());
   }
   /**
-   * Generate the login page HTML. Loads the `hypha-rpc` JS SDK from CDN and
-   * calls `hyphaWebsocketClient.login({ server_url, login_callback })`, which
-   * handles opening the login URL, polling, and token retrieval internally.
-   * Matches the pattern used by bioimage.io — proven to work.
+   * Generate the login page HTML.
+   *
+   * Uses the Hypha-Login HTTP endpoints directly (no SDK / no WebSocket):
+   *   1. GET  /public/services/hypha-login/start          → { login_url, key }
+   *   2. open popup to login_url so the user signs in
+   *   3. GET  /public/services/hypha-login/check?key=…    → token (long-polled)
+   *
+   * This matches the proven pattern in svamp-app/.../share/[id].tsx and
+   * removes a class of hangs we previously saw when the JS SDK never
+   * invoked its `login_callback` (button-stuck-after-click symptom).
    */
   getLoginPageHtml(redirectUrl) {
     return `<!DOCTYPE html>
@@ -5702,7 +5735,6 @@ button:disabled{background:#94d3a2;cursor:wait}
 a{color:#0969da;text-decoration:none}
 a:hover{text-decoration:underline}
 </style>
-<script src="https://cdn.jsdelivr.net/npm/hypha-rpc@0.21.28/dist/hypha-rpc-websocket.min.js"><\/script>
 </head><body>
 <div class="card">
   <h1>Sign in required</h1>
@@ -5724,35 +5756,62 @@ function setError(msg) {
 }
 
 btn.addEventListener('click', async () => {
-    if (typeof hyphaWebsocketClient === 'undefined' || !hyphaWebsocketClient.login) {
-        setError('Hypha SDK failed to load. Check your network connection and retry.');
+    // Open the popup SYNCHRONOUSLY inside the click handler so the browser's
+    // popup blocker treats it as user-initiated. The HTTP request below is
+    // awaited, by which time the user-gesture flag has cleared and any
+    // window.open() call would be silently blocked.
+    const popup = window.open('about:blank', '_blank');
+    if (!popup) {
+        setError('Popup was blocked by the browser. Please allow popups for this site and retry.');
         return;
     }
+    try { popup.document.write('<html><body style="font-family:system-ui;padding:24px;color:#656d76">Opening Hypha sign-in\u2026</body></html>'); } catch (e) {}
 
     btn.disabled = true;
-    statusEl.textContent = 'Opening Hypha sign-in\u2026';
+    statusEl.textContent = 'Contacting Hypha\u2026';
 
     try {
-        const token = await hyphaWebsocketClient.login({
-            server_url: hyphaServer,
-            login_callback: (context) => {
-                statusEl.textContent = 'Waiting for you to sign in\u2026';
-                // Open the login URL in a new tab. Called synchronously from
-                // inside the SDK's login() after the user's button click, so
-                // popup blockers generally allow it.
-                window.open(context.login_url, '_blank');
-            },
-        });
+        // 1. Ask the Hypha-Login service for a login URL + polling key.
+        const startResp = await fetch(hyphaServer + '/public/services/hypha-login/start');
+        if (!startResp.ok) throw new Error('Login start failed: HTTP ' + startResp.status);
+        const ctx = await startResp.json();
+        if (!ctx || !ctx.login_url || !ctx.key) throw new Error('Login start returned no URL/key');
+
+        // 2. Redirect the popup to the actual login UI.
+        statusEl.textContent = 'Waiting for you to sign in\u2026';
+        try { popup.location.href = ctx.login_url; }
+        catch (e) { window.open(ctx.login_url, '_blank'); }
+
+        // 3. Long-poll the check endpoint until the user finishes signing in.
+        //    Each request waits up to 3 s server-side; we retry for ~3 minutes total.
+        const checkBase = ctx.check_url || (hyphaServer + '/public/services/hypha-login/check');
+        let token = null;
+        for (let i = 0; i < 60; i++) {
+            if (popup.closed) {
+                // User dismissed the popup before completing \u2014 keep polling briefly
+                // (the report endpoint may still fire even if window is gone).
+            }
+            try {
+                const r = await fetch(checkBase + '?key=' + encodeURIComponent(ctx.key) + '&timeout=3');
+                if (r.ok) {
+                    const body = await r.json();
+                    const t = typeof body === 'string' ? body : (body && (body.token || body));
+                    if (typeof t === 'string' && t.length > 20) { token = t; break; }
+                }
+            } catch (e) { /* transient \u2014 retry */ }
+        }
 
-        if (!token) throw new Error('No token returned from login');
+        if (!token) throw new Error('Timed out waiting for sign-in. Please try again.');
 
-        // Set the cookie so subsequent requests to this origin are authenticated.
+        // 4. Set the cookie so subsequent requests to this origin are authenticated.
         const secure = location.protocol === 'https:' ? '; Secure' : '';
         document.cookie = cookieName + '=' + token + '; path=/; SameSite=Lax' + secure;
 
+        try { popup.close(); } catch (e) {}
         statusEl.innerHTML = '<span class="ok">Signed in. Redirecting\u2026</span>';
         setTimeout(() => { window.location.replace(redirectUrl); }, 300);
     } catch (err) {
+        try { popup.close(); } catch (e) {}
         setError('Login failed: ' + (err && err.message ? err.message : err));
     }
 });
@@ -7470,6 +7529,43 @@ function deletePersistedSession(sessionId) {
     saveSessionIndex(index);
   }
 }
+function markSessionAsArchived(sessionId) {
+  const index = loadSessionIndex();
+  const entry = index[sessionId];
+  if (!entry) return false;
+  const filePath = getSessionFilePath(entry.directory, sessionId);
+  if (!existsSync$1(filePath)) return false;
+  try {
+    const data = JSON.parse(readFileSync$1(filePath, "utf-8"));
+    if (data.stopped === true) return true;
+    data.stopped = true;
+    const tmpPath = filePath + ".tmp";
+    writeFileSync(tmpPath, JSON.stringify(data, null, 2), "utf-8");
+    renameSync(tmpPath, filePath);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function clearSessionArchivedFlag(sessionId) {
+  const index = loadSessionIndex();
+  const entry = index[sessionId];
+  if (!entry) return null;
+  const filePath = getSessionFilePath(entry.directory, sessionId);
+  if (!existsSync$1(filePath)) return null;
+  try {
+    const data = JSON.parse(readFileSync$1(filePath, "utf-8"));
+    if (data.stopped) {
+      delete data.stopped;
+      const tmpPath = filePath + ".tmp";
+      writeFileSync(tmpPath, JSON.stringify(data, null, 2), "utf-8");
+      renameSync(tmpPath, filePath);
+    }
+    return data;
+  } catch {
+    return null;
+  }
+}
 function loadPersistedSessions() {
   const sessions = [];
   const index = loadSessionIndex();
@@ -7771,7 +7867,7 @@ async function startDaemon(options) {
     const list = loadExposedTunnels().filter((t) => t.name !== name);
     saveExposedTunnels(list);
   }
-  const { ServeManager } = await import('./serveManager-DWQtF8NK.mjs');
+  const { ServeManager } = await import('./serveManager-Bzjw2bO6.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -7956,6 +8052,7 @@ async function startDaemon(options) {
           startedFromDaemon: true,
           startedBy: "daemon",
           lifecycleState: resumeSessionId ? "idle" : "starting",
+          ...resumeSessionId && { claudeSessionId: resumeSessionId },
           sharing: options2.sharing,
           securityContext: options2.securityContext,
           tags: options2.tags,
@@ -7971,7 +8068,7 @@ async function startDaemon(options) {
         const allPersisted = loadPersistedSessions();
         const persisted = allPersisted.find((p) => p.sessionId === sessionId) || (resumeSessionId ? allPersisted.find((p) => p.claudeResumeId === resumeSessionId) : void 0);
         let claudeResumeId = persisted?.claudeResumeId || (resumeSessionId || void 0);
-        let currentPermissionMode = options2.permissionMode || persisted?.permissionMode || "default";
+        let currentPermissionMode = options2.permissionMode || persisted?.permissionMode || "bypassPermissions";
         const sessionCreatedAt = persisted?.createdAt || Date.now();
         let lastSpawnMeta = persisted?.spawnMeta || {};
         let sessionWasProcessing = !!options2.wasProcessing;
@@ -8679,7 +8776,16 @@ The automated loop has finished. Review the progress above and let me know if yo
                       artifactSync.scheduleDebouncedSync(sessionId, getSessionDir(directory, sessionId), sessionMetadata, machineId);
                     }
                     if (isResumeFailure) {
-                      logger.log(`[Session ${sessionId}] Resume failed \u2014 Claude started fresh session (tried: ${persisted?.claudeResumeId ?? "unknown"}, got: ${msg.session_id})`);
+                      const triedId = persisted?.claudeResumeId ?? "unknown";
+                      logger.log(`[Session ${sessionId}] Resume failed \u2014 Claude started fresh session (tried: ${triedId}, got: ${msg.session_id})`);
+                      sessionService.pushMessage(
+                        {
+                          type: "message",
+                          message: `Resume incomplete \u2014 Claude could not restore the previous conversation. A new Claude session was started (expected ${triedId.slice(0, 8)}\u2026, got ${msg.session_id.slice(0, 8)}\u2026). Earlier messages remain in the history above for reference, but Claude does not have them in its context.`,
+                          level: "warning"
+                        },
+                        "event"
+                      );
                     } else if (isConversationClear) {
                       logger.log(`[Session ${sessionId}] Conversation cleared (/clear) \u2014 new Claude session: ${msg.session_id}`);
                       sessionService.clearMessages();
@@ -8941,6 +9047,11 @@ The automated loop has finished. Review the progress above and let me know if yo
                   claudeResumeId,
                   "--fork-session",
                   "--no-session-persistence",
+                  // /btw is non-interactive; without bypass the
+                  // forked Claude pauses on tool prompts and the
+                  // user just sees a hanging side-channel.
+                  "--permission-mode",
+                  "bypassPermissions",
                   "--output-format",
                   "stream-json",
                   "--verbose"
@@ -9075,6 +9186,9 @@ The automated loop has finished. Review the progress above and let me know if yo
             },
             onSwitchMode: async (mode) => {
               const normalizedMode = toClaudePermissionMode(mode);
+              if (currentPermissionMode === normalizedMode) {
+                return;
+              }
               logger.log(`[Session ${sessionId}] Switch mode: ${mode}${mode !== normalizedMode ? ` \u2192 ${normalizedMode}` : ""}`);
               if (isRestartingClaude || isSwitchingMode) {
                 logger.log(`[Session ${sessionId}] Switch mode deferred \u2014 restart/switch already in progress`);
@@ -9153,15 +9267,14 @@ The automated loop has finished. Review the progress above and let me know if yo
               lastSpawnMeta = { ...lastSpawnMeta, appendSystemPrompt: prompt };
               return await restartClaudeHandler();
             },
-            onKillSession: () => {
-              logger.log(`[Session ${sessionId}] Kill session requested`);
-              stopSession(sessionId);
+            onArchiveSession: () => {
+              logger.log(`[Session ${sessionId}] Archive session requested`);
+              archiveSession(sessionId);
             },
             onInboxMessage: (message) => {
               if (trackedSession?.stopped) return;
               logger.log(`[Session ${sessionId}] Inbox message received (urgency: ${message.urgency || "normal"}, from: ${message.from || "unknown"})`);
               const formatted = formatInboxMessageXml(message);
-              sessionService.markInboxRead(message.messageId);
               if (message.urgency === "urgent") {
                 logger.log(`[Session ${sessionId}] Delivering urgent inbox message to agent`);
                 sessionService.pushMessage(formatted, "user");
@@ -9511,7 +9624,7 @@ The automated loop has finished. Review the progress above and let me know if yo
           tags: options2.tags,
           parentSessionId: options2.parentSessionId
         };
-        let currentPermissionMode = options2.permissionMode || "default";
+        let currentPermissionMode = options2.permissionMode || "bypassPermissions";
         const allowedTools = /* @__PURE__ */ new Set();
         const allowedBashLiterals = /* @__PURE__ */ new Set();
         const allowedBashPrefixes = /* @__PURE__ */ new Set();
@@ -9605,6 +9718,7 @@ The automated loop has finished. Review the progress above and let me know if yo
               agentBackend.respondToPermission?.(requestId, params.approved);
             },
             onSwitchMode: (mode) => {
+              if (currentPermissionMode === mode) return;
               logger.log(`[${agentName} Session ${sessionId}] Switch mode: ${mode}`);
               currentPermissionMode = mode;
             },
@@ -9624,15 +9738,14 @@ The automated loop has finished. Review the progress above and let me know if yo
             onApplySystemPrompt: async () => {
               return { success: false, message: "System prompt updates with restart are not yet supported for this agent type." };
             },
-            onKillSession: () => {
-              logger.log(`[${agentName} Session ${sessionId}] Kill session requested`);
-              stopSession(sessionId);
+            onArchiveSession: () => {
+              logger.log(`[${agentName} Session ${sessionId}] Archive session requested`);
+              archiveSession(sessionId);
             },
             onInboxMessage: (message) => {
               if (acpStopped) return;
               logger.log(`[${agentName} Session ${sessionId}] Inbox message received (urgency: ${message.urgency || "normal"}, from: ${message.from || "unknown"})`);
               const formatted = formatInboxMessageXml(message);
-              sessionService.markInboxRead(message.messageId);
               if (message.urgency === "urgent" && acpBackendReady) {
                 logger.log(`[${agentName} Session ${sessionId}] Delivering urgent inbox message to agent`);
                 sessionService.pushMessage(formatted, "user");
@@ -10082,7 +10195,7 @@ The automated loop has finished. Review the progress above and let me know if yo
             "event"
           );
           sessionService.sendSessionEnd();
-          stopSession(sessionId);
+          deleteSession(sessionId);
         });
         return {
           type: "success",
@@ -10097,8 +10210,7 @@ The automated loop has finished. Review the progress above and let me know if yo
         };
       }
     };
-    const stopSession = (sessionId) => {
-      logger.log(`Stopping session: ${sessionId}`);
+    const teardownTrackedSession = (sessionId) => {
       for (const [pid, session] of pidToTrackedSession) {
         if (session.svampSessionId === sessionId) {
           session.stopped = true;
@@ -10117,16 +10229,64 @@ The automated loop has finished. Review the progress above and let me know if yo
           session.cleanupSvampConfig?.();
           artifactSync.cancelSync(sessionId);
           pidToTrackedSession.delete(pid);
-          deletePersistedSession(sessionId);
-          logger.log(`Session ${sessionId} stopped`);
           return true;
         }
       }
       artifactSync.cancelSync(sessionId);
-      deletePersistedSession(sessionId);
-      logger.log(`Session ${sessionId} not found in memory, cleaned up persisted state`);
       return false;
     };
+    const archiveSession = (sessionId) => {
+      logger.log(`Archiving session: ${sessionId}`);
+      const wasInMemory = teardownTrackedSession(sessionId);
+      const markedArchived = markSessionAsArchived(sessionId);
+      if (wasInMemory || markedArchived) {
+        logger.log(`Session ${sessionId} archived (inMemory=${wasInMemory}, persisted=${markedArchived})`);
+        return true;
+      }
+      logger.log(`Session ${sessionId} not found in memory or on disk; nothing to archive`);
+      return false;
+    };
+    const resumeSession = async (sessionId) => {
+      logger.log(`Resuming session: ${sessionId}`);
+      for (const session of pidToTrackedSession.values()) {
+        if (session.svampSessionId === sessionId && !session.stopped) {
+          logger.log(`Session ${sessionId} already running \u2014 resume is a no-op`);
+          return { success: true, sessionId, message: "Session is already running" };
+        }
+      }
+      const persisted = clearSessionArchivedFlag(sessionId);
+      if (!persisted) {
+        return { success: false, message: `Session ${sessionId} has no persisted record to resume` };
+      }
+      try {
+        const result = await spawnSession({
+          directory: persisted.directory,
+          sessionId: persisted.sessionId,
+          resumeSessionId: persisted.claudeResumeId,
+          sharing: persisted.metadata?.sharing,
+          securityContext: persisted.metadata?.securityContext,
+          forceIsolation: !!persisted.metadata?.isolationMethod,
+          parentSessionId: persisted.metadata?.parentSessionId,
+          permissionMode: persisted.permissionMode
+        });
+        if (result.type === "success") {
+          logger.log(`Resumed session ${sessionId} (claudeResumeId=${persisted.claudeResumeId || "none"})`);
+          return { success: true, sessionId: result.sessionId };
+        }
+        markSessionAsArchived(sessionId);
+        return { success: false, message: result.errorMessage || `spawnSession returned ${result.type}` };
+      } catch (err) {
+        markSessionAsArchived(sessionId);
+        return { success: false, message: err.message };
+      }
+    };
+    const deleteSession = (sessionId) => {
+      logger.log(`Deleting session: ${sessionId}`);
+      teardownTrackedSession(sessionId);
+      deletePersistedSession(sessionId);
+      logger.log(`Session ${sessionId} deleted`);
+      return true;
+    };
     const restartSession = async (sessionId) => {
       for (const session of pidToTrackedSession.values()) {
         if (session.svampSessionId === sessionId && !session.stopped) {
@@ -10204,7 +10364,9 @@ The automated loop has finished. Review the progress above and let me know if yo
       initialDaemonState,
       {
         spawnSession,
-        stopSession,
+        archiveSession,
+        resumeSession,
+        deleteSession,
         restartSession,
         requestShutdown: () => {
           logger.log("Shutdown requested via hypha-app (ignored \u2014 daemon never self-terminates)");

package/dist/{serveCommands-DDlHXpPe.mjs → serveCommands-CM17DByZ.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-D5kCHCfX.mjs');
+  const { connectAndGetMachine } = await import('./commands-B0zqVia0.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-D5kCHCfX.mjs');
+  const { connectAndGetMachine } = await import('./commands-B0zqVia0.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-D5kCHCfX.mjs');
+  const { connectAndGetMachine } = await import('./commands-B0zqVia0.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-D5kCHCfX.mjs');
+  const { connectAndGetMachine } = await import('./commands-B0zqVia0.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-D5kCHCfX.mjs');
+  const { connectAndGetMachine } = await import('./commands-B0zqVia0.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-DWQtF8NK.mjs → serveManager-Bzjw2bO6.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { S as ServeAuth, h as hasCookieToken } from './run-HuBXfVSz.mjs';
+import { S as ServeAuth, h as hasCookieToken } from './run-h-QVSVFd.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.68",
+  "version": "0.2.71",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -20,7 +20,7 @@
   "scripts": {
     "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
+    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
     "dev": "tsx src/cli.ts",
     "dev:daemon": "tsx src/cli.ts daemon start-sync",