svamp-cli 0.2.80 → 0.2.82

package/dist/{run-W8JZkXIf.mjs → run-BvocESxe.mjs}

@@ -1,8 +1,8 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import os$1 from 'os';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import os from 'os';
 import fs, { mkdir as mkdir$1, readdir as readdir$1, readFile, writeFile as writeFile$1, rename, unlink } from 'fs/promises';
 import { readFileSync as readFileSync$1, mkdirSync, writeFileSync, renameSync, existsSync as existsSync$1, copyFileSync, unlinkSync as unlinkSync$1, watch, rmdirSync, readdirSync } from 'fs';
 import path__default, { join, dirname, resolve, basename } from 'path';
-import { fileURLToPath } from 'url';
+import { URL as URL$1, fileURLToPath } from 'url';
 import { execFile, spawn as spawn$1, execSync as execSync$1 } from 'child_process';
 import { randomUUID as randomUUID$1 } from 'crypto';
 import { existsSync, readFileSync, writeFileSync as writeFileSync$1, mkdirSync as mkdirSync$1, appendFileSync, unlinkSync } from 'node:fs';
@@ -11,7 +11,7 @@ import { randomUUID, createHash } from 'node:crypto';
 import { join as join$1 } from 'node:path';
 import { spawn, execSync, execFile as execFile$1, execFileSync } from 'node:child_process';
 import { ndJsonStream, ClientSideConnection } from '@agentclientprotocol/sdk';
-import os, { homedir, platform } from 'node:os';
+import os$1, { homedir, platform } from 'node:os';
 import { Client } from '@modelcontextprotocol/sdk/client/index.js';
 import { StdioClientTransport } from '@modelcontextprotocol/sdk/client/stdio.js';
 import { ElicitRequestSchema } from '@modelcontextprotocol/sdk/types.js';
@@ -63,7 +63,7 @@ function parseWorkspaceFromToken(token) {
     return void 0;
   }
 }
-function getHyphaServerUrl() {
+function getHyphaServerUrl$1() {
   return process.env.HYPHA_SERVER_URL || "http://localhost:9527";
 }
 
@@ -1393,7 +1393,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-j60b46eU.mjs');
+        const { FrpcTunnel } = await import('./frpc-DPfGAdlj.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -5350,13 +5350,33 @@ function shouldIsolate(input) {
   return input.optionsSecurityContext !== null && input.optionsSecurityContext !== void 0;
 }
 
-const HYPHA_PROXY_BASE_URL = "https://proxy.hypha.aicell.io";
+const EXAMPLE_HYPHA_PROXY_URL = "https://proxy.hypha.aicell.io";
 const MODE_KEY = "SVAMP_CLAUDE_PROXY";
+const HYPHA_PROXY_URL_KEY = "SVAMP_HYPHA_PROXY_URL";
 const MANAGED_KEYS = /* @__PURE__ */ new Set([
   MODE_KEY,
+  HYPHA_PROXY_URL_KEY,
   "ANTHROPIC_BASE_URL",
   "ANTHROPIC_API_KEY"
 ]);
+function normalizeProxyUrl(raw) {
+  const trimmed = raw.trim().replace(/\/+$/, "");
+  if (trimmed.endsWith("/v1")) {
+    throw new Error(
+      "Hypha proxy URL must not end in /v1 \u2014 the SDK appends it, producing double /v1/v1/messages"
+    );
+  }
+  return trimmed;
+}
+function resolveHyphaProxyUrl() {
+  const configured = (process.env[HYPHA_PROXY_URL_KEY] || "").trim();
+  if (!configured) return void 0;
+  try {
+    return normalizeProxyUrl(configured);
+  } catch {
+    return void 0;
+  }
+}
 function envFilePath() {
   const svampHome = process.env.SVAMP_HOME || join$1(homedir(), ".svamp");
   return join$1(svampHome, ".env");
@@ -5417,11 +5437,13 @@ function getClaudeAuthStatus() {
   const mode = currentMode();
   if (mode === "hypha") {
     const token = process.env.HYPHA_TOKEN;
+    const proxyUrl = resolveHyphaProxyUrl();
     return {
       mode,
-      baseUrl: HYPHA_PROXY_BASE_URL,
+      baseUrl: proxyUrl,
       apiKeyPreview: redactKey(token),
-      hyphaTokenMissing: !token
+      hyphaTokenMissing: !token,
+      hyphaProxyUrlMissing: !proxyUrl
     };
   }
   if (mode === "custom") {
@@ -5433,9 +5455,15 @@ function getClaudeAuthStatus() {
   }
   return { mode: "login" };
 }
-function setClaudeAuthHyphaProxy() {
+function setClaudeAuthHyphaProxy(url) {
+  if (!url || !url.trim()) {
+    throw new Error(
+      `A Hypha proxy URL is required (no default). Example: svamp daemon auth use-hypha-proxy ${EXAMPLE_HYPHA_PROXY_URL}`
+    );
+  }
   updateEnvFile({
     [MODE_KEY]: "hypha",
+    [HYPHA_PROXY_URL_KEY]: normalizeProxyUrl(url),
     // Hypha mode resolves token live at spawn — no stored copy.
     ANTHROPIC_BASE_URL: void 0,
     ANTHROPIC_API_KEY: void 0
@@ -5444,6 +5472,7 @@ function setClaudeAuthHyphaProxy() {
 function setClaudeAuthLogin() {
   updateEnvFile({
     [MODE_KEY]: void 0,
+    [HYPHA_PROXY_URL_KEY]: void 0,
     ANTHROPIC_BASE_URL: void 0,
     ANTHROPIC_API_KEY: void 0
   });
@@ -5459,6 +5488,7 @@ function setClaudeAuthCustom(baseUrl, apiKey) {
   }
   updateEnvFile({
     [MODE_KEY]: "custom",
+    [HYPHA_PROXY_URL_KEY]: void 0,
     ANTHROPIC_BASE_URL: trimmed,
     ANTHROPIC_API_KEY: apiKey
   });
@@ -5466,15 +5496,21 @@ function setClaudeAuthCustom(baseUrl, apiKey) {
 function applyClaudeProxyEnv(spawnEnv) {
   const mode = currentMode();
   if (mode === "hypha") {
+    const proxyUrl = resolveHyphaProxyUrl();
+    if (!proxyUrl) {
+      delete spawnEnv.ANTHROPIC_BASE_URL;
+      delete spawnEnv.ANTHROPIC_API_KEY;
+      return `hypha mode but ${HYPHA_PROXY_URL_KEY} not configured \u2014 run \`svamp daemon auth use-hypha-proxy <URL>\`; falling back to login`;
+    }
     const token = process.env.HYPHA_TOKEN;
     if (!token) {
       delete spawnEnv.ANTHROPIC_BASE_URL;
       delete spawnEnv.ANTHROPIC_API_KEY;
       return "hypha mode but HYPHA_TOKEN missing \u2014 falling back to login";
     }
-    spawnEnv.ANTHROPIC_BASE_URL = HYPHA_PROXY_BASE_URL;
+    spawnEnv.ANTHROPIC_BASE_URL = proxyUrl;
     spawnEnv.ANTHROPIC_API_KEY = token;
-    return `hypha proxy (${HYPHA_PROXY_BASE_URL})`;
+    return `hypha proxy (${proxyUrl})`;
   }
   if (mode === "custom") {
     const url = process.env.ANTHROPIC_BASE_URL;
@@ -5496,21 +5532,68 @@ const MANAGED_ENV_KEYS = Array.from(MANAGED_KEYS);
 
 var claudeAuth = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    HYPHA_PROXY_BASE_URL: HYPHA_PROXY_BASE_URL,
+    EXAMPLE_HYPHA_PROXY_URL: EXAMPLE_HYPHA_PROXY_URL,
     MANAGED_ENV_KEYS: MANAGED_ENV_KEYS,
     applyClaudeProxyEnv: applyClaudeProxyEnv,
     getClaudeAuthStatus: getClaudeAuthStatus,
+    resolveHyphaProxyUrl: resolveHyphaProxyUrl,
     setClaudeAuthCustom: setClaudeAuthCustom,
     setClaudeAuthHyphaProxy: setClaudeAuthHyphaProxy,
     setClaudeAuthLogin: setClaudeAuthLogin,
     updateEnvFile: updateEnvFile
 });
 
-const DEFAULT_WEB_BASE = "https://svamp.hypha.aicell.io";
+function getHyphaServerUrl() {
+  const raw = (process.env.HYPHA_SERVER_URL || "").trim();
+  return raw ? raw.replace(/\/+$/, "") : void 0;
+}
+function getHyphaHostname() {
+  const url = getHyphaServerUrl();
+  if (!url) return void 0;
+  try {
+    return new URL$1(url).hostname || void 0;
+  } catch {
+    return void 0;
+  }
+}
+function deriveOrThrow(prefix, envVar, purpose) {
+  const host = getHyphaHostname();
+  if (host) return prefix ? `${prefix}.${host}` : host;
+  throw new Error(
+    `Cannot determine ${purpose}: set ${envVar} explicitly, or set HYPHA_SERVER_URL so it can be derived. No hostname is hardcoded as a fallback.`
+  );
+}
+function getFrpsSubdomainHost() {
+  const explicit = (process.env.FRPS_SUBDOMAIN_HOST || "").trim();
+  if (explicit) return explicit;
+  return deriveOrThrow("svc", "FRPS_SUBDOMAIN_HOST", "frps subdomain host");
+}
+function getFrpsServerAddr() {
+  const explicit = (process.env.FRPS_SERVER_ADDR || "").trim();
+  if (explicit) return explicit;
+  return `frps-ctrl.${getFrpsSubdomainHost()}`;
+}
+function getSvampWebBaseUrl() {
+  const explicit = (process.env.SVAMP_WEB_URL || "").trim();
+  if (explicit) return explicit.replace(/\/+$/, "");
+  const host = getHyphaHostname();
+  if (host) return `https://svamp.${host}`;
+  throw new Error(
+    "Cannot determine Svamp web base URL: set SVAMP_WEB_URL explicitly, or set HYPHA_SERVER_URL so it can be derived (https://svamp.<host>). No hostname is hardcoded as a fallback."
+  );
+}
+function getSkillsServerUrl() {
+  const explicit = (process.env.HYPHA_SKILLS_SERVER || "").trim();
+  if (explicit) return explicit.replace(/\/+$/, "");
+  const server = getHyphaServerUrl();
+  if (server) return server;
+  throw new Error(
+    "Cannot determine skills marketplace server: set HYPHA_SKILLS_SERVER or HYPHA_SERVER_URL. No hostname is hardcoded as a fallback."
+  );
+}
+
 function getShareBaseUrl() {
-  const fromEnv = (process.env.SVAMP_WEB_URL || "").trim();
-  const base = fromEnv || DEFAULT_WEB_BASE;
-  return base.replace(/\/+$/, "");
+  return getSvampWebBaseUrl();
 }
 function buildSessionShareUrl(input) {
   const params = new URLSearchParams();
@@ -5893,6 +5976,170 @@ function escapeHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
 
+const SKILLS_WORKSPACE = process.env.HYPHA_SKILLS_WORKSPACE || "hypha-cloud";
+const SKILLS_COLLECTION = process.env.HYPHA_SKILLS_COLLECTION || "marketplace";
+const SKILLS_DIR = join(os.homedir(), ".claude", "skills");
+function getSkillsServer() {
+  return getSkillsServerUrl();
+}
+function getArtifactBaseUrl() {
+  return `${getSkillsServer()}/${SKILLS_WORKSPACE}/artifacts`;
+}
+async function fetchWithTimeout(url, options = {}, timeoutMs = 3e4) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), timeoutMs);
+  try {
+    return await fetch(url, { ...options, signal: controller.signal });
+  } catch (err) {
+    if (err.name === "AbortError") throw new Error(`Request timed out after ${timeoutMs}ms: ${url}`);
+    throw err;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+function parseFrontmatter(content) {
+  const match = content.match(/^---\s*\n([\s\S]*?)\n---/);
+  if (!match) return null;
+  const yaml = match[1];
+  const result = {};
+  let currentKey = null;
+  let nestedObj = null;
+  for (const line of yaml.split("\n")) {
+    if (!line.trim() || line.trim().startsWith("#")) continue;
+    const indentMatch = line.match(/^(\s*)/);
+    const indent = indentMatch ? indentMatch[1].length : 0;
+    if (indent > 0 && currentKey && nestedObj !== null) {
+      const kvMatch2 = line.trim().match(/^([^:]+):\s*(.*)$/);
+      if (kvMatch2) {
+        nestedObj[kvMatch2[1].trim()] = kvMatch2[2].trim().replace(/^["']|["']$/g, "");
+      }
+      continue;
+    }
+    if (nestedObj !== null && currentKey) {
+      result[currentKey] = nestedObj;
+      nestedObj = null;
+      currentKey = null;
+    }
+    const kvMatch = line.match(/^([^:]+):\s*(.*)$/);
+    if (!kvMatch) continue;
+    const key = kvMatch[1].trim();
+    const value = kvMatch[2].trim();
+    if (!value) {
+      currentKey = key;
+      nestedObj = {};
+    } else {
+      result[key] = value.replace(/^["']|["']$/g, "");
+    }
+  }
+  if (nestedObj !== null && currentKey) {
+    result[currentKey] = nestedObj;
+  }
+  if (!result.name || typeof result.name !== "string") return null;
+  if (!result.description || typeof result.description !== "string") return null;
+  return result;
+}
+async function searchSkills(query) {
+  const base = getArtifactBaseUrl();
+  const filters = encodeURIComponent(JSON.stringify({ type: "skill" }));
+  const url = `${base}/${SKILLS_COLLECTION}/children?keywords=${encodeURIComponent(query)}&filters=${filters}&limit=50`;
+  const resp = await fetchWithTimeout(url);
+  if (!resp.ok) {
+    if (resp.status === 404) return [];
+    throw new Error(`Search failed: ${resp.status} ${resp.statusText}`);
+  }
+  const data = await resp.json();
+  return normalizeSkillList(Array.isArray(data) ? data : data.items || []);
+}
+async function listAllSkills(offset = 0, limit = 100) {
+  const base = getArtifactBaseUrl();
+  const filters = encodeURIComponent(JSON.stringify({ type: "skill" }));
+  const url = `${base}/${SKILLS_COLLECTION}/children?filters=${filters}&offset=${offset}&limit=${limit}`;
+  const resp = await fetchWithTimeout(url);
+  if (!resp.ok) {
+    if (resp.status === 404) return [];
+    throw new Error(`List failed: ${resp.status} ${resp.statusText}`);
+  }
+  const data = await resp.json();
+  return normalizeSkillList(Array.isArray(data) ? data : data.items || []);
+}
+async function getSkillInfo(skillAlias) {
+  const base = getArtifactBaseUrl();
+  const url = `${base}/${skillAlias}`;
+  const resp = await fetchWithTimeout(url);
+  if (!resp.ok) {
+    if (resp.status === 404) return null;
+    throw new Error(`Get skill failed: ${resp.status} ${resp.statusText}`);
+  }
+  const data = await resp.json();
+  return normalizeSkill(data);
+}
+async function listSkillFiles(skillAlias, dir = "") {
+  const base = getArtifactBaseUrl();
+  const pathPart = dir ? `/${dir}/` : "/";
+  const url = `${base}/${skillAlias}/files${pathPart}`;
+  const resp = await fetchWithTimeout(url);
+  if (!resp.ok) {
+    throw new Error(`List files failed: ${resp.status} ${resp.statusText}`);
+  }
+  const data = await resp.json();
+  return Array.isArray(data) ? data : data.items || [];
+}
+async function downloadSkillFile(skillAlias, filePath) {
+  const base = getArtifactBaseUrl();
+  const url = `${base}/${skillAlias}/files/${filePath}`;
+  const resp = await fetchWithTimeout(url, { redirect: "follow" }, 6e4);
+  if (!resp.ok) {
+    throw new Error(`Download failed for ${filePath}: ${resp.status} ${resp.statusText}`);
+  }
+  return await resp.text();
+}
+async function downloadSkillZip(skillAlias) {
+  const base = getArtifactBaseUrl();
+  const url = `${base}/${skillAlias}/create-zip-file`;
+  const resp = await fetchWithTimeout(url, {}, 12e4);
+  if (!resp.ok) {
+    throw new Error(`Zip download failed: ${resp.status} ${resp.statusText}`);
+  }
+  const ab = await resp.arrayBuffer();
+  return Buffer.from(ab);
+}
+function normalizeSkillList(items) {
+  return items.map(normalizeSkill).filter((s) => s !== null);
+}
+function normalizeSkill(item) {
+  if (!item) return null;
+  const manifest = item.manifest || {};
+  return {
+    alias: item.alias || manifest.name || item.id || "unknown",
+    name: manifest.name || item.alias || "unknown",
+    description: manifest.description || "",
+    author: manifest.metadata?.author || manifest.author,
+    version: manifest.metadata?.version || manifest.version,
+    tags: manifest.tags,
+    created_at: item.created_at,
+    last_modified: item.last_modified,
+    versions: item.versions,
+    git_url: item.git_url
+  };
+}
+
+var api = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    SKILLS_COLLECTION: SKILLS_COLLECTION,
+    SKILLS_DIR: SKILLS_DIR,
+    SKILLS_WORKSPACE: SKILLS_WORKSPACE,
+    downloadSkillFile: downloadSkillFile,
+    downloadSkillZip: downloadSkillZip,
+    fetchWithTimeout: fetchWithTimeout,
+    getArtifactBaseUrl: getArtifactBaseUrl,
+    getSkillInfo: getSkillInfo,
+    getSkillsServer: getSkillsServer,
+    listAllSkills: listAllSkills,
+    listSkillFiles: listSkillFiles,
+    parseFrontmatter: parseFrontmatter,
+    searchSkills: searchSkills
+});
+
 const DEFAULT_PROBE_INTERVAL_S = 10;
 const DEFAULT_PROBE_TIMEOUT_S = 5;
 const DEFAULT_PROBE_FAILURE_THRESHOLD = 3;
@@ -6617,7 +6864,7 @@ function resolveContextWindow(opts) {
   return candidate;
 }
 
-const SVAMP_HOME$1 = process.env.SVAMP_HOME || join$1(os.homedir(), ".svamp");
+const SVAMP_HOME$1 = process.env.SVAMP_HOME || join$1(os$1.homedir(), ".svamp");
 function generateHookSettings(portOrOptions = {}) {
   const opts = typeof portOrOptions === "number" ? { sessionStartPort: portOrOptions } : portOrOptions;
   const hooksDir = join$1(SVAMP_HOME$1, "tmp", "hooks");
@@ -6811,7 +7058,7 @@ function checkTruncation(format, tail, fileSize, head) {
 
 const __filename$1 = fileURLToPath(import.meta.url);
 const __dirname$1 = dirname(__filename$1);
-const CLAUDE_SKILLS_DIR = join(os$1.homedir(), ".claude", "skills");
+const CLAUDE_SKILLS_DIR = join(os.homedir(), ".claude", "skills");
 function looksLikeClaudeError(line) {
   const l = line.toLowerCase();
   return l.includes("api error") || l.includes("request rejected") || l.includes("error:") || l.includes("overloaded") || l.includes("rate limit") || l.includes("unauthorized") || l.includes("forbidden") || /\b(4\d\d|5\d\d)\b/.test(l) && (l.includes("status") || l.includes("error") || l.includes("rejected"));
@@ -6892,7 +7139,7 @@ async function installSkillFromEndpoint(name, baseUrl) {
   }
 }
 async function installSkillFromMarketplace(name) {
-  const BASE = `https://hypha.aicell.io/hypha-cloud/artifacts/${name}`;
+  const BASE = `${getArtifactBaseUrl()}/${name}`;
   async function collectFiles(dir = "") {
     const url = dir ? `${BASE}/files/${dir}` : `${BASE}/files/`;
     const resp = await fetch(url, { signal: AbortSignal.timeout(15e3) });
@@ -7013,7 +7260,7 @@ function preventMachineSleep(logger) {
 }
 async function fetchMarketplaceSkillVersion(name) {
   try {
-    const url = `https://hypha.aicell.io/hypha-cloud/artifacts/${name}/files/SKILL.md`;
+    const url = `${getArtifactBaseUrl()}/${name}/files/SKILL.md`;
     const resp = await fetch(url, { signal: AbortSignal.timeout(1e4) });
     if (!resp.ok) return null;
     const md = await resp.text();
@@ -7035,7 +7282,7 @@ async function ensureAutoInstalledSkills(logger) {
     },
     {
       name: "hypha",
-      install: () => installSkillFromEndpoint("hypha", "https://hypha.aicell.io/ws/agent-skills/")
+      install: () => installSkillFromEndpoint("hypha", `${getSkillsServer()}/ws/agent-skills/`)
       // hypha skill ships from a different endpoint without a version probe yet.
     },
     {
@@ -7097,14 +7344,14 @@ function loadEnvFile(path) {
   return true;
 }
 function loadDotEnv() {
-  const svampEnv = join(process.env.SVAMP_HOME || os$1.homedir() + "/.svamp", ".env");
+  const svampEnv = join(process.env.SVAMP_HOME || os.homedir() + "/.svamp", ".env");
   if (!loadEnvFile(svampEnv)) {
-    const hyphaEnv = join(process.env.HYPHA_HOME || os$1.homedir() + "/.hypha", ".env");
+    const hyphaEnv = join(process.env.HYPHA_HOME || os.homedir() + "/.hypha", ".env");
     loadEnvFile(hyphaEnv);
   }
 }
 loadDotEnv();
-const SVAMP_HOME = process.env.SVAMP_HOME || join(os$1.homedir(), ".svamp");
+const SVAMP_HOME = process.env.SVAMP_HOME || join(os.homedir(), ".svamp");
 const DAEMON_STATE_FILE = join(SVAMP_HOME, "daemon.state.json");
 const DAEMON_LOCK_FILE = join(SVAMP_HOME, "daemon.lock");
 const LOGS_DIR = join(SVAMP_HOME, "logs");
@@ -7933,7 +8180,7 @@ async function startDaemon(options) {
       machineId = readFileSync$1(machineIdFile, "utf-8").trim();
     }
     if (!machineId) {
-      machineId = `machine-${os$1.hostname()}-${randomUUID$1().slice(0, 8)}`;
+      machineId = `machine-${os.hostname()}-${randomUUID$1().slice(0, 8)}`;
       try {
         writeFileSync(machineIdFile, machineId, "utf-8");
       } catch {
@@ -7976,7 +8223,7 @@ async function startDaemon(options) {
     const list = loadExposedTunnels().filter((t) => t.name !== name);
     saveExposedTunnels(list);
   }
-  const { ServeManager } = await import('./serveManager-DTR_TDIp.mjs');
+  const { ServeManager } = await import('./serveManager-bhh_rQ5M.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -8162,10 +8409,10 @@ async function startDaemon(options) {
         var parseBashPermission = parseBashPermission2, shouldAutoAllow = shouldAutoAllow2, killAndWaitForExit = killAndWaitForExit2, buildIsolationConfig = buildIsolationConfig2;
         let sessionMetadata = {
           path: directory,
-          host: os$1.hostname(),
+          host: os.hostname(),
           version: "0.1.0",
           machineId,
-          homeDir: os$1.homedir(),
+          homeDir: os.homedir(),
           svampHomeDir: SVAMP_HOME,
           svampLibDir: join(__dirname$1, ".."),
           svampToolsDir: join(__dirname$1, "..", "tools"),
@@ -9747,10 +9994,10 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
         var parseBashPermission = parseBashPermission2, shouldAutoAllow = shouldAutoAllow2;
         let sessionMetadata = {
           path: directory,
-          host: os$1.hostname(),
+          host: os.hostname(),
           version: "0.1.0",
           machineId,
-          homeDir: os$1.homedir(),
+          homeDir: os.homedir(),
           svampHomeDir: SVAMP_HOME,
           svampLibDir: join(__dirname$1, ".."),
           svampToolsDir: join(__dirname$1, "..", "tools"),
@@ -10445,7 +10692,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       logger.log(`Failed to detect isolation capabilities: ${err}`);
       isolationCapabilities = { available: [], preferred: null, details: { nono: { found: false }, srt: { found: false }, bwrap: { found: false }, docker: { found: false }, podman: { found: false } } };
     }
-    const defaultHomeDir = existsSync$1("/data") ? "/data" : os$1.homedir();
+    const defaultHomeDir = existsSync$1("/data") ? "/data" : os.homedir();
     const persistedMachineMeta = loadPersistedMachineMetadata(SVAMP_HOME);
     if (persistedMachineMeta) {
       logger.log(`Restored machine metadata (sharing=${!!persistedMachineMeta.sharing}, securityContextConfig=${!!persistedMachineMeta.securityContextConfig}, injectPlatformGuidance=${persistedMachineMeta.injectPlatformGuidance})`);
@@ -10474,8 +10721,8 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       }
     }
     const machineMetadata = {
-      host: os$1.hostname(),
-      platform: os$1.platform(),
+      host: os.hostname(),
+      platform: os.platform(),
       svampVersion: "0.1.0 (hypha)",
       homeDir: defaultHomeDir,
       svampHomeDir: SVAMP_HOME,
@@ -10549,7 +10796,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       const specs = loadExposedTunnels();
       if (specs.length === 0) return;
       logger.log(`[exposed-tunnels] Restoring ${specs.length} tunnel(s) from ${EXPOSED_TUNNELS_FILE}`);
-      const { FrpcTunnel } = await import('./frpc-j60b46eU.mjs');
+      const { FrpcTunnel } = await import('./frpc-DPfGAdlj.mjs');
       for (const spec of specs) {
         if (tunnels.has(spec.name)) continue;
         try {
@@ -10601,6 +10848,19 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       // Legacy; debug service uses session index now
     });
     logger.log(`Debug service registered: svamp-debug-${machineId}`);
+    const supervised = process.env.SVAMP_SUPERVISED === "1";
+    const localState = {
+      pid: process.pid,
+      startTime: (/* @__PURE__ */ new Date()).toISOString(),
+      version: DAEMON_VERSION,
+      hyphaServerUrl,
+      workspace: server.config.workspace,
+      machineId,
+      hyphaClientId: server.config.client_id,
+      supervised
+    };
+    writeDaemonStateFile(localState);
+    logger.log("Daemon state file written \u2014 daemon is up; restoring mounts/sessions in background");
     await serveManager.restore();
     const persistedSessions = loadPersistedSessions();
     try {
@@ -10762,18 +11022,6 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
     } catch (err) {
       logger.log("Could not generate token (server may not support it):", err);
     }
-    const supervised = process.env.SVAMP_SUPERVISED === "1";
-    const localState = {
-      pid: process.pid,
-      startTime: (/* @__PURE__ */ new Date()).toISOString(),
-      version: DAEMON_VERSION,
-      hyphaServerUrl,
-      workspace: server.config.workspace,
-      machineId,
-      hyphaClientId: server.config.client_id,
-      supervised
-    };
-    writeDaemonStateFile(localState);
     console.log("Svamp daemon started successfully!");
     console.log(`  Machine ID: ${machineId}`);
     console.log(`  Hypha server: ${hyphaServerUrl}`);
@@ -11252,7 +11500,7 @@ async function restartDaemon() {
 function daemonStatus() {
   const state = readDaemonStateFile();
   if (!state) {
-    const plistPath = join(os$1.homedir(), "Library", "LaunchAgents", "io.hypha.svamp.daemon.plist");
+    const plistPath = join(os.homedir(), "Library", "LaunchAgents", "io.hypha.svamp.daemon.plist");
     if (existsSync$1(plistPath)) {
       console.log("Status: Not running (launchd service installed \u2014 may be starting)");
     } else {
@@ -11291,4 +11539,4 @@ var run = /*#__PURE__*/Object.freeze({
     stopDaemon: stopDaemon
 });
 
-export { DefaultTransport$1 as D, GeminiTransport$1 as G, ServeAuth as S, registerSessionService as a, stopDaemon as b, connectToHypha as c, daemonStatus as d, resolveSecurityContext as e, buildSecurityContextFromFlags as f, getHyphaServerUrl as g, hasCookieToken as h, buildSessionShareUrl as i, buildMachineShareUrl as j, generateHookSettings as k, loadSecurityContextConfig as l, mergeSecurityContexts as m, normalizeAllowedUser as n, acpBackend as o, acpAgentConfig as p, codexMcpBackend as q, registerMachineService as r, startDaemon as s, claudeAuth as t, run as u };
+export { buildSessionShareUrl as A, buildMachineShareUrl as B, generateHookSettings as C, DefaultTransport$1 as D, acpBackend as E, acpAgentConfig as F, codexMcpBackend as G, GeminiTransport$1 as H, claudeAuth as I, api as J, run as K, ServeAuth as S, registerSessionService as a, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerAddr as f, getHyphaServerUrl$1 as g, getHyphaServerUrl as h, hasCookieToken as i, getSkillsServer as j, SKILLS_WORKSPACE as k, SKILLS_COLLECTION as l, fetchWithTimeout as m, searchSkills as n, SKILLS_DIR as o, parseFrontmatter as p, getSkillInfo as q, registerMachineService as r, startDaemon as s, downloadSkillFile as t, listSkillFiles as u, normalizeAllowedUser as v, loadSecurityContextConfig as w, resolveSecurityContext as x, buildSecurityContextFromFlags as y, mergeSecurityContexts as z };

package/dist/{run-DamsNf6r.mjs → run-CrOw9-WG.mjs}

@@ -2,7 +2,7 @@ import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(im
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';
-import { c as connectToHypha, a as registerSessionService, k as generateHookSettings } from './run-W8JZkXIf.mjs';
+import { c as connectToHypha, a as registerSessionService, C as generateHookSettings } from './run-BvocESxe.mjs';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
 import { createInterface } from 'node:readline';

package/dist/{serveCommands-DEik3hcu.mjs → serveCommands-DJUhkyLk.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-C6lrExeN.mjs');
+  const { connectAndGetMachine } = await import('./commands-BSfZg4aa.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-C6lrExeN.mjs');
+  const { connectAndGetMachine } = await import('./commands-BSfZg4aa.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-C6lrExeN.mjs');
+  const { connectAndGetMachine } = await import('./commands-BSfZg4aa.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-C6lrExeN.mjs');
+  const { connectAndGetMachine } = await import('./commands-BSfZg4aa.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-C6lrExeN.mjs');
+  const { connectAndGetMachine } = await import('./commands-BSfZg4aa.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-DTR_TDIp.mjs → serveManager-bhh_rQ5M.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { S as ServeAuth, h as hasCookieToken } from './run-W8JZkXIf.mjs';
+import { h as getHyphaServerUrl, S as ServeAuth, i as hasCookieToken } from './run-BvocESxe.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -83,7 +83,11 @@ class ServeManager {
   constructor(svampHome, logger, hyphaServerUrl) {
     this.persistFile = path.join(svampHome, "serve-mounts.json");
     this.log = logger || ((msg) => console.log(`[SERVE] ${msg}`));
-    this.hyphaServerUrl = hyphaServerUrl || process.env.HYPHA_SERVER_URL || "https://hypha.aicell.io";
+    const resolvedServerUrl = hyphaServerUrl || getHyphaServerUrl();
+    if (!resolvedServerUrl) {
+      throw new Error("ServeManager requires a Hypha server URL \u2014 set HYPHA_SERVER_URL.");
+    }
+    this.hyphaServerUrl = resolvedServerUrl;
     this.auth = new ServeAuth({ hyphaServerUrl: this.hyphaServerUrl });
   }
   // ── Public API ───────────────────────────────────────────────────────
@@ -708,7 +712,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, `static-${subdomainSafe}-${mount.linkToken}`]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-j60b46eU.mjs');
+      const { FrpcTunnel } = await import('./frpc-DPfGAdlj.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.80",
+  "version": "0.2.82",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",