svamp-cli 0.2.83 → 0.2.84

package/dist/{agentCommands-Bf00Irxu.mjs → agentCommands-C10NivHS.mjs}

@@ -148,7 +148,7 @@ async function sessionBroadcast(action, args) {
   console.log(`Broadcast sent: ${action}`);
 }
 async function connectToMachineService() {
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   return connectAndGetMachine();
 }
 async function inboxSend(targetSessionId, opts) {
@@ -165,7 +165,7 @@ async function inboxSend(targetSessionId, opts) {
   }
   const { server, machine } = await connectToMachineService();
   try {
-    const { resolveSessionId } = await import('./commands-Bd1H83bg.mjs');
+    const { resolveSessionId } = await import('./commands-B75aXb6C.mjs');
     const sessions = await machine.listSessions();
     const match = resolveSessionId(sessions, targetSessionId);
     const fullTargetId = match.sessionId;

package/dist/cli.mjs

@@ -1,4 +1,4 @@
-import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-C90uN1y2.mjs';
+import { s as startDaemon, b as stopDaemon, d as daemonStatus } from './run-MQKWgYFS.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';
@@ -31,6 +31,11 @@ const args = process.argv.slice(2);
 const subcommand = args[0];
 let daemonSubcommand = args[1];
 async function main() {
+  try {
+    const { getLoadedConfig } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.K; });
+    getLoadedConfig();
+  } catch {
+  }
   if (subcommand === "login") {
     await loginToHypha();
   } else if (subcommand === "logout") {
@@ -44,7 +49,7 @@ async function main() {
         console.error(`svamp daemon restart: ${err.message || err}`);
         process.exit(1);
       }
-      const { restartDaemon } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.K; });
+      const { restartDaemon } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.M; });
       await restartDaemon();
       process.exit(0);
     }
@@ -296,7 +301,7 @@ async function main() {
       console.error("svamp service: Service commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServiceCommand } = await import('./commands-iW8jm4vc.mjs');
+    const { handleServiceCommand } = await import('./commands-CtYB14Y-.mjs');
     await handleServiceCommand();
   } else if (subcommand === "serve") {
     const { isSandboxed: isSandboxedServe } = await import('./sandboxDetect-DNTcbgWD.mjs');
@@ -304,7 +309,7 @@ async function main() {
       console.error("svamp serve: Serve commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { handleServeCommand } = await import('./serveCommands-DgG_ZFt7.mjs');
+    const { handleServeCommand } = await import('./serveCommands-9D4WCoJR.mjs');
     await handleServeCommand();
     process.exit(0);
   } else if (subcommand === "process" || subcommand === "proc") {
@@ -313,7 +318,7 @@ async function main() {
       console.error("svamp process: Process commands are not available in sandboxed sessions.");
       process.exit(1);
     }
-    const { processCommand } = await import('./commands-D8fkJXXU.mjs');
+    const { processCommand } = await import('./commands-biNfOPRI.mjs');
     let machineId;
     const processArgs = args.slice(1);
     const mIdx = processArgs.findIndex((a) => a === "--machine" || a === "-m");
@@ -331,7 +336,7 @@ async function main() {
   } else if (!subcommand || subcommand === "start") {
     await handleInteractiveCommand();
   } else if (subcommand === "--version" || subcommand === "-v") {
-    const pkg = await import('./package-Cf8yLCTr.mjs').catch(() => ({ default: { version: "unknown" } }));
+    const pkg = await import('./package-CUo2nRNC.mjs').catch(() => ({ default: { version: "unknown" } }));
     console.log(`svamp version: ${pkg.default.version}`);
   } else {
     console.error(`Unknown command: ${subcommand}`);
@@ -340,7 +345,7 @@ async function main() {
   }
 }
 async function handleInteractiveCommand() {
-  const { runInteractive } = await import('./run-X3V7bQwE.mjs');
+  const { runInteractive } = await import('./run-Xk8il2Yz.mjs');
   const interactiveArgs = subcommand === "start" ? args.slice(1) : args;
   let directory = process.cwd();
   let resumeSessionId;
@@ -385,7 +390,7 @@ async function handleAgentCommand() {
     return;
   }
   if (agentArgs[0] === "list") {
-    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.F; });
+    const { KNOWN_ACP_AGENTS, KNOWN_MCP_AGENTS: KNOWN_MCP_AGENTS2 } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.G; });
     console.log("Known agents:");
     for (const [name, config2] of Object.entries(KNOWN_ACP_AGENTS)) {
       console.log(`  ${name.padEnd(12)} ${config2.command} ${config2.args.join(" ")}  (ACP)`);
@@ -397,7 +402,7 @@ async function handleAgentCommand() {
     console.log('Use "svamp agent -- <command> [args]" for a custom ACP agent.');
     return;
   }
-  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.F; });
+  const { resolveAcpAgentConfig, KNOWN_MCP_AGENTS } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.G; });
   let cwd = process.cwd();
   const filteredArgs = [];
   for (let i = 0; i < agentArgs.length; i++) {
@@ -421,12 +426,12 @@ async function handleAgentCommand() {
   console.log(`Starting ${config.agentName} agent in ${cwd}...`);
   let backend;
   if (KNOWN_MCP_AGENTS[config.agentName]) {
-    const { CodexMcpBackend } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.G; });
+    const { CodexMcpBackend } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.H; });
     backend = new CodexMcpBackend({ cwd, log: logFn });
   } else {
-    const { AcpBackend } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.E; });
-    const { GeminiTransport } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.H; });
-    const { DefaultTransport } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.D; });
+    const { AcpBackend } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.F; });
+    const { GeminiTransport } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.I; });
+    const { DefaultTransport } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.E; });
     const transportHandler = config.agentName === "gemini" ? new GeminiTransport() : new DefaultTransport(config.agentName);
     backend = new AcpBackend({
       agentName: config.agentName,
@@ -553,7 +558,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
   }
-  const { sessionList, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-Bd1H83bg.mjs');
+  const { sessionList, sessionSpawn, sessionArchive, sessionResume, sessionDelete, sessionInfo, sessionMessages, sessionAttach, sessionMachines, sessionSend, sessionWait, sessionShare, sessionRalphStart, sessionRalphCancel, sessionRalphStatus, sessionInboxSend, sessionInboxList, sessionInboxRead, sessionInboxReply, sessionInboxClear } = await import('./commands-B75aXb6C.mjs');
   const parseFlagStr = (flag, shortFlag) => {
     for (let i = 1; i < sessionArgs.length; i++) {
       if ((sessionArgs[i] === flag || shortFlag) && i + 1 < sessionArgs.length) {
@@ -619,7 +624,7 @@ async function handleSessionCommand() {
         allowDomain.push(sessionArgs[++i]);
       }
     }
-    const { parseShareArg } = await import('./commands-Bd1H83bg.mjs');
+    const { parseShareArg } = await import('./commands-B75aXb6C.mjs');
     const shareEntries = share.map((s) => parseShareArg(s));
     await sessionSpawn(agent, dir, targetMachineId, {
       message,
@@ -705,7 +710,7 @@ async function handleSessionCommand() {
       console.error("  Spawns a stateless Claude session in <directory>, sends <prompt>, prints the answer, then deletes the session.");
       process.exit(1);
     }
-    const { sessionQuery } = await import('./commands-Bd1H83bg.mjs');
+    const { sessionQuery } = await import('./commands-B75aXb6C.mjs');
     await sessionQuery(dir, prompt, targetMachineId, {
       timeout: parseFlagInt("--timeout"),
       json: hasFlag("--json"),
@@ -738,7 +743,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session approve <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionApprove } = await import('./commands-Bd1H83bg.mjs');
+    const { sessionApprove } = await import('./commands-B75aXb6C.mjs');
     const approveReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionApprove(sessionArgs[1], approveReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -748,7 +753,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session deny <session-id> [request-id] [--json]");
       process.exit(1);
     }
-    const { sessionDeny } = await import('./commands-Bd1H83bg.mjs');
+    const { sessionDeny } = await import('./commands-B75aXb6C.mjs');
     const denyReqId = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
     await sessionDeny(sessionArgs[1], denyReqId, targetMachineId, {
       json: hasFlag("--json")
@@ -784,7 +789,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session set-title <title>");
       process.exit(1);
     }
-    const { sessionSetTitle } = await import('./agentCommands-Bf00Irxu.mjs');
+    const { sessionSetTitle } = await import('./agentCommands-C10NivHS.mjs');
     await sessionSetTitle(title);
   } else if (sessionSubcommand === "set-link") {
     const url = sessionArgs[1];
@@ -793,7 +798,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const label = sessionArgs[2] && !sessionArgs[2].startsWith("--") ? sessionArgs[2] : void 0;
-    const { sessionSetLink } = await import('./agentCommands-Bf00Irxu.mjs');
+    const { sessionSetLink } = await import('./agentCommands-C10NivHS.mjs');
     await sessionSetLink(url, label);
   } else if (sessionSubcommand === "notify") {
     const message = sessionArgs[1];
@@ -802,7 +807,7 @@ async function handleSessionCommand() {
       process.exit(1);
     }
     const level = parseFlagStr("--level") || "info";
-    const { sessionNotify } = await import('./agentCommands-Bf00Irxu.mjs');
+    const { sessionNotify } = await import('./agentCommands-C10NivHS.mjs');
     await sessionNotify(message, level);
   } else if (sessionSubcommand === "broadcast") {
     const action = sessionArgs[1];
@@ -810,7 +815,7 @@ async function handleSessionCommand() {
       console.error("Usage: svamp session broadcast <action> [args...]\nActions: open-canvas <url> [label], close-canvas, toast <message>");
       process.exit(1);
     }
-    const { sessionBroadcast } = await import('./agentCommands-Bf00Irxu.mjs');
+    const { sessionBroadcast } = await import('./agentCommands-C10NivHS.mjs');
     await sessionBroadcast(action, sessionArgs.slice(2).filter((a) => !a.startsWith("--")));
   } else if (sessionSubcommand === "inbox") {
     const inboxSubcmd = sessionArgs[1];
@@ -821,7 +826,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId) {
-        const { inboxSend } = await import('./agentCommands-Bf00Irxu.mjs');
+        const { inboxSend } = await import('./agentCommands-C10NivHS.mjs');
         await inboxSend(sessionArgs[2], {
           body: sessionArgs[3],
           subject: parseFlagStr("--subject"),
@@ -836,7 +841,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "list" || inboxSubcmd === "ls") {
       if (agentSessionId && !sessionArgs[2]) {
-        const { inboxList } = await import('./agentCommands-Bf00Irxu.mjs');
+        const { inboxList } = await import('./agentCommands-C10NivHS.mjs');
         await inboxList({
           unread: hasFlag("--unread"),
           limit: parseFlagInt("--limit"),
@@ -858,7 +863,7 @@ async function handleSessionCommand() {
         process.exit(1);
       }
       if (agentSessionId && !sessionArgs[3]) {
-        const { inboxList } = await import('./agentCommands-Bf00Irxu.mjs');
+        const { inboxList } = await import('./agentCommands-C10NivHS.mjs');
         await sessionInboxRead(agentSessionId, sessionArgs[2], targetMachineId);
       } else if (sessionArgs[3]) {
         await sessionInboxRead(sessionArgs[2], sessionArgs[3], targetMachineId);
@@ -868,7 +873,7 @@ async function handleSessionCommand() {
       }
     } else if (inboxSubcmd === "reply") {
       if (agentSessionId && sessionArgs[2] && sessionArgs[3] && !sessionArgs[4]) {
-        const { inboxReply } = await import('./agentCommands-Bf00Irxu.mjs');
+        const { inboxReply } = await import('./agentCommands-C10NivHS.mjs');
         await inboxReply(sessionArgs[2], sessionArgs[3]);
       } else if (sessionArgs[2] && sessionArgs[3] && sessionArgs[4]) {
         await sessionInboxReply(sessionArgs[2], sessionArgs[3], sessionArgs[4], targetMachineId);
@@ -904,7 +909,7 @@ async function handleMachineCommand() {
     return;
   }
   if (machineSubcommand === "share") {
-    const { machineShare } = await import('./commands-Bd1H83bg.mjs');
+    const { machineShare } = await import('./commands-B75aXb6C.mjs');
     let machineId;
     const shareArgs = [];
     for (let i = 1; i < machineArgs.length; i++) {
@@ -934,7 +939,7 @@ async function handleMachineCommand() {
     }
     await machineShare(machineId, { add, remove, list, configPath, showConfig });
   } else if (machineSubcommand === "exec") {
-    const { machineExec } = await import('./commands-Bd1H83bg.mjs');
+    const { machineExec } = await import('./commands-B75aXb6C.mjs');
     let machineId;
     let cwd;
     const cmdParts = [];
@@ -954,7 +959,7 @@ async function handleMachineCommand() {
     }
     await machineExec(machineId, command, cwd);
   } else if (machineSubcommand === "info") {
-    const { machineInfo } = await import('./commands-Bd1H83bg.mjs');
+    const { machineInfo } = await import('./commands-B75aXb6C.mjs');
     let machineId;
     for (let i = 1; i < machineArgs.length; i++) {
       if ((machineArgs[i] === "--machine" || machineArgs[i] === "-m") && i + 1 < machineArgs.length) {
@@ -974,10 +979,10 @@ async function handleMachineCommand() {
         level = machineArgs[++i];
       }
     }
-    const { machineNotify } = await import('./agentCommands-Bf00Irxu.mjs');
+    const { machineNotify } = await import('./agentCommands-C10NivHS.mjs');
     await machineNotify(message, level);
   } else if (machineSubcommand === "ls") {
-    const { machineLs } = await import('./commands-Bd1H83bg.mjs');
+    const { machineLs } = await import('./commands-B75aXb6C.mjs');
     let machineId;
     let showHidden = false;
     let path;
@@ -1035,24 +1040,24 @@ Examples:
   };
   const hasFlag = (name) => fleetArgs.includes(`--${name}`);
   if (sub === "status") {
-    const { fleetStatus } = await import('./fleet-CCCPxbz-.mjs');
+    const { fleetStatus } = await import('./fleet-D_sem31C.mjs');
     await fleetStatus();
   } else if (sub === "exec") {
     const command = fleetArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
-    const { fleetExec } = await import('./fleet-CCCPxbz-.mjs');
+    const { fleetExec } = await import('./fleet-D_sem31C.mjs');
     await fleetExec(command, { cwd: flag("cwd") });
   } else if (sub === "upgrade-claude") {
-    const { fleetUpgradeClaude } = await import('./fleet-CCCPxbz-.mjs');
+    const { fleetUpgradeClaude } = await import('./fleet-D_sem31C.mjs');
     await fleetUpgradeClaude({ version: flag("version", "-v") });
   } else if (sub === "upgrade-svamp") {
-    const { fleetUpgradeSvamp } = await import('./fleet-CCCPxbz-.mjs');
+    const { fleetUpgradeSvamp } = await import('./fleet-D_sem31C.mjs');
     await fleetUpgradeSvamp({ version: flag("version", "-v"), excludeSelf: hasFlag("exclude-self") });
   } else if (sub === "daemon-restart") {
-    const { fleetDaemonRestart } = await import('./fleet-CCCPxbz-.mjs');
+    const { fleetDaemonRestart } = await import('./fleet-D_sem31C.mjs');
     await fleetDaemonRestart({ graceful: !hasFlag("cleanup") });
   } else if (sub === "push-skill") {
     const name = fleetArgs[1];
-    const { fleetPushSkill } = await import('./fleet-CCCPxbz-.mjs');
+    const { fleetPushSkill } = await import('./fleet-D_sem31C.mjs');
     await fleetPushSkill(name);
   } else {
     console.error(`Unknown fleet subcommand: ${sub}`);
@@ -1068,7 +1073,7 @@ async function handleSkillsCommand() {
     await printSkillsHelp();
     return;
   }
-  const { skillsFind, skillsInstall, skillsList, skillsRemove, skillsPublish } = await import('./commands-B3omCaQt.mjs');
+  const { skillsFind, skillsInstall, skillsList, skillsRemove, skillsPublish } = await import('./commands-BeZMEZhQ.mjs');
   if (skillsSubcommand === "find" || skillsSubcommand === "search") {
     const query = skillsArgs.slice(1).filter((a) => !a.startsWith("--")).join(" ");
     if (!query) {
@@ -1107,12 +1112,28 @@ async function handleSkillsCommand() {
   process.exit(0);
 }
 async function loginToHypha() {
-  const serverUrl = args[1] || process.env.HYPHA_SERVER_URL;
-  if (!serverUrl) {
-    console.error("Usage: svamp login <server-url>");
-    console.error("  Or set HYPHA_SERVER_URL environment variable");
+  const anchorArg = args[1] || process.env.SVAMP_INSTANCE_URL || process.env.HYPHA_SERVER_URL;
+  if (!anchorArg) {
+    console.error("Usage: svamp login <frontend-url>   (e.g. https://svamp.aicell.io)");
+    console.error("  The frontend serves /svamp.json, which carries the Hypha server URL and");
+    console.error("  routing config. A Hypha server URL also works as a legacy fallback.");
     process.exit(1);
   }
+  const anchor = anchorArg.replace(/\/+$/, "");
+  const { loadInstanceConfig } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.K; });
+  let cfg = null;
+  try {
+    cfg = await loadInstanceConfig({ anchor, force: true });
+  } catch {
+  }
+  const configMode = !!(cfg && typeof cfg.hyphaServerUrl === "string" && cfg.hyphaServerUrl.trim());
+  const serverUrl = configMode ? cfg.hyphaServerUrl.trim().replace(/\/+$/, "") : anchor;
+  if (configMode) {
+    console.log(`Found Svamp instance config at ${anchor}`);
+    console.log(`  Hypha server: ${serverUrl}`);
+  } else {
+    console.log(`No svamp.json found at ${anchor} \u2014 using it as the Hypha server (legacy mode).`);
+  }
   console.log(`Logging in to Hypha server: ${serverUrl}`);
   console.log("A browser window will open for authentication...");
   try {
@@ -1162,13 +1183,17 @@ Please open this URL in your browser:
       const existing = fs.readFileSync(envFile, "utf-8").split("\n");
       for (const line of existing) {
         const trimmed = line.trim();
-        if (trimmed.startsWith("HYPHA_TOKEN=") || trimmed.startsWith("HYPHA_WORKSPACE=") || trimmed.startsWith("HYPHA_SERVER_URL=")) {
+        if (trimmed.startsWith("HYPHA_TOKEN=") || trimmed.startsWith("HYPHA_WORKSPACE=") || trimmed.startsWith("HYPHA_SERVER_URL=") || trimmed.startsWith("SVAMP_INSTANCE_URL=")) {
           continue;
         }
         envLines.push(line);
       }
     }
-    envLines.push(`HYPHA_SERVER_URL=${serverUrl}`);
+    if (configMode) {
+      envLines.push(`SVAMP_INSTANCE_URL=${anchor}`);
+    } else {
+      envLines.push(`HYPHA_SERVER_URL=${serverUrl}`);
+    }
     envLines.push(`HYPHA_TOKEN=${longLivedToken}`);
     envLines.push(`HYPHA_WORKSPACE=${workspace}`);
     while (envLines.length > 0 && envLines[envLines.length - 1].trim() === "") {
@@ -1205,12 +1230,17 @@ async function logoutFromHypha() {
     await stopDaemon();
   } catch {
   }
+  try {
+    const { clearInstanceConfigCache } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.K; });
+    clearInstanceConfigCache();
+  } catch {
+  }
   if (fs.existsSync(envFile)) {
     const existing = fs.readFileSync(envFile, "utf-8").split("\n");
     const kept = [];
     for (const line of existing) {
       const trimmed = line.trim();
-      if (trimmed.startsWith("HYPHA_TOKEN=") || trimmed.startsWith("HYPHA_WORKSPACE=") || trimmed.startsWith("HYPHA_SERVER_URL=")) {
+      if (trimmed.startsWith("HYPHA_TOKEN=") || trimmed.startsWith("HYPHA_WORKSPACE=") || trimmed.startsWith("HYPHA_SERVER_URL=") || trimmed.startsWith("SVAMP_INSTANCE_URL=")) {
         continue;
       }
       kept.push(line);
@@ -1514,7 +1544,7 @@ async function applyClaudeAuthFlags(argv) {
       "--use-hypha-proxy, --use-claude-login, and --anthropic-base-url/--anthropic-api-key are mutually exclusive"
     );
   }
-  const mod = await import('./run-C90uN1y2.mjs').then(function (n) { return n.I; });
+  const mod = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.J; });
   if (hasHypha) {
     let url;
     const hyphaIdx = argv.indexOf("--use-hypha-proxy");
@@ -1568,7 +1598,7 @@ async function applyDaemonShareFlag(argv) {
     }
   }
   if (collected.length === 0) return;
-  const { updateEnvFile } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.I; });
+  const { updateEnvFile } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.J; });
   const seen = /* @__PURE__ */ new Set();
   const deduped = collected.filter((e) => {
     const k = e.toLowerCase();
@@ -1581,7 +1611,7 @@ async function applyDaemonShareFlag(argv) {
 }
 async function handleDaemonAuthCommand(argv) {
   const sub = (argv[0] || "status").toLowerCase();
-  const mod = await import('./run-C90uN1y2.mjs').then(function (n) { return n.I; });
+  const mod = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.J; });
   if (sub === "--help" || sub === "-h" || sub === "help") {
     console.log(`
 svamp daemon auth \u2014 Configure how Claude subprocesses authenticate
@@ -1874,8 +1904,8 @@ Examples:
 async function printSkillsHelp() {
   let browseUrl = "<HYPHA_SERVER_URL>/<workspace>/artifacts/marketplace (set HYPHA_SERVER_URL)";
   try {
-    const { getArtifactBaseUrl, SKILLS_COLLECTION } = await import('./run-C90uN1y2.mjs').then(function (n) { return n.J; });
-    browseUrl = `${getArtifactBaseUrl()}/${SKILLS_COLLECTION}`;
+    const { getArtifactBaseUrl, getSkillsCollectionName } = await import('./run-MQKWgYFS.mjs').then(function (n) { return n.L; });
+    browseUrl = `${getArtifactBaseUrl()}/${getSkillsCollectionName()}`;
   } catch {
   }
   console.log(`

package/dist/{commands-Bd1H83bg.mjs → commands-B75aXb6C.mjs}

@@ -2,7 +2,7 @@ import { existsSync, readFileSync } from 'node:fs';
 import { execSync } from 'node:child_process';
 import { resolve, join } from 'node:path';
 import os from 'node:os';
-import { v as normalizeAllowedUser, w as loadSecurityContextConfig, x as resolveSecurityContext, y as buildSecurityContextFromFlags, z as mergeSecurityContexts, c as connectToHypha, A as buildSessionShareUrl, B as buildMachineShareUrl } from './run-C90uN1y2.mjs';
+import { w as normalizeAllowedUser, x as loadSecurityContextConfig, y as resolveSecurityContext, z as buildSecurityContextFromFlags, A as mergeSecurityContexts, c as connectToHypha, B as buildSessionShareUrl, C as buildMachineShareUrl } from './run-MQKWgYFS.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/{commands-B3omCaQt.mjs → commands-BeZMEZhQ.mjs}

@@ -1,7 +1,7 @@
 import os from 'os';
 import fs__default from 'fs';
 import { resolve, join, relative } from 'path';
-import { p as parseFrontmatter, j as getSkillsServer, k as SKILLS_WORKSPACE, l as SKILLS_COLLECTION, m as fetchWithTimeout, n as searchSkills, o as SKILLS_DIR, q as getSkillInfo, t as downloadSkillFile, u as listSkillFiles } from './run-C90uN1y2.mjs';
+import { p as parseFrontmatter, k as getSkillsServer, l as getSkillsWorkspaceName, m as getSkillsCollectionName, n as fetchWithTimeout, o as searchSkills, q as SKILLS_DIR, t as getSkillInfo, u as downloadSkillFile, v as listSkillFiles } from './run-MQKWgYFS.mjs';
 import 'fs/promises';
 import 'url';
 import 'child_process';
@@ -276,7 +276,7 @@ async function skillsPublish(skillPath, opts) {
     server = await connectToServer({
       server_url: serverUrl,
       token,
-      workspace: SKILLS_WORKSPACE
+      workspace: getSkillsWorkspaceName()
     });
   } catch (err) {
     console.error(`Failed to connect to Hypha: ${err.message}`);
@@ -295,7 +295,7 @@ async function skillsPublish(skillPath, opts) {
   let existingArtifact = null;
   try {
     existingArtifact = await am.read({
-      artifact_id: `${SKILLS_WORKSPACE}/${manifest.name}`,
+      artifact_id: `${getSkillsWorkspaceName()}/${manifest.name}`,
       _rkwargs: true
     });
   } catch {
@@ -325,7 +325,7 @@ async function skillsPublish(skillPath, opts) {
       const created = await am.create({
         alias: manifest.name,
         type: "skill",
-        parent_id: `${SKILLS_WORKSPACE}/${SKILLS_COLLECTION}`,
+        parent_id: `${getSkillsWorkspaceName()}/${getSkillsCollectionName()}`,
         manifest: {
           name: manifest.name,
           description: manifest.description,
@@ -400,8 +400,8 @@ async function skillsPublish(skillPath, opts) {
   }
   const skillsServer = getSkillsServer();
   console.log(`Published "${manifest.name}" (${uploaded} files)${versionTag ? ` as ${versionTag}` : ""}`);
-  console.log(`  View: ${skillsServer}/${SKILLS_WORKSPACE}/artifacts/${manifest.name}`);
-  const gitUrl = `${skillsServer}/${SKILLS_WORKSPACE}/git/${manifest.name}`;
+  console.log(`  View: ${skillsServer}/${getSkillsWorkspaceName()}/artifacts/${manifest.name}`);
+  const gitUrl = `${skillsServer}/${getSkillsWorkspaceName()}/git/${manifest.name}`;
   console.log(`  Git:  ${gitUrl}`);
   if (isUpdate) {
     console.log(`  Tip: Use --version <tag> to publish a named version.`);

package/dist/{commands-iW8jm4vc.mjs → commands-CtYB14Y-.mjs}

@@ -58,7 +58,7 @@ async function serviceExpose(args) {
     process.exit(1);
   }
   if (foreground) {
-    const { runFrpcTunnel } = await import('./frpc-F50mVRLL.mjs');
+    const { runFrpcTunnel } = await import('./frpc-D3LiH7GX.mjs');
     await runFrpcTunnel(name, ports, void 0, {
       group,
       groupKey,
@@ -68,7 +68,7 @@ async function serviceExpose(args) {
     });
     return;
   }
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   const { server, machine } = await connectAndGetMachine();
   try {
     const status = await machine.tunnelStart({
@@ -123,7 +123,7 @@ async function serviceServe(args) {
     };
     process.on("SIGINT", cleanup);
     process.on("SIGTERM", cleanup);
-    const { runFrpcTunnel } = await import('./frpc-F50mVRLL.mjs');
+    const { runFrpcTunnel } = await import('./frpc-D3LiH7GX.mjs');
     await runFrpcTunnel(name, [caddyPort]);
   } catch (err) {
     console.error(`Error serving directory: ${err.message}`);
@@ -132,7 +132,7 @@ async function serviceServe(args) {
 }
 async function serviceList(_args) {
   try {
-    const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+    const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       const tunnels = await machine.tunnelList({});
@@ -161,7 +161,7 @@ async function serviceDelete(args) {
     process.exit(1);
   }
   try {
-    const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+    const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
     const { server, machine } = await connectAndGetMachine();
     try {
       await machine.tunnelStop({ name });

package/dist/{commands-D8fkJXXU.mjs → commands-biNfOPRI.mjs}

@@ -1,11 +1,11 @@
 import { writeFileSync, readFileSync } from 'fs';
 import { resolve } from 'path';
-import { connectAndGetMachine } from './commands-Bd1H83bg.mjs';
+import { connectAndGetMachine } from './commands-B75aXb6C.mjs';
 import 'node:fs';
 import 'node:child_process';
 import 'node:path';
 import 'node:os';
-import './run-C90uN1y2.mjs';
+import './run-MQKWgYFS.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';

package/dist/{fleet-CCCPxbz-.mjs → fleet-D_sem31C.mjs}

@@ -1,7 +1,7 @@
 import { existsSync, readFileSync } from 'node:fs';
 import { join } from 'node:path';
 import os from 'node:os';
-import { c as connectToHypha } from './run-C90uN1y2.mjs';
+import { c as connectToHypha } from './run-MQKWgYFS.mjs';
 import { PINNED_CLAUDE_CODE_VERSION } from './pinnedClaudeCode-HydRNEt7.mjs';
 import 'os';
 import 'fs/promises';

package/dist/{frpc-F50mVRLL.mjs → frpc-D3LiH7GX.mjs}

@@ -3,7 +3,7 @@ import { mkdirSync, writeFileSync, unlinkSync, existsSync, chmodSync, readFileSy
 import { join } from 'path';
 import { homedir, platform, arch } from 'os';
 import { createHash, randomUUID } from 'crypto';
-import { e as getFrpsSubdomainHost, f as getFrpsServerAddr } from './run-C90uN1y2.mjs';
+import { e as getFrpsSubdomainHost, f as getFrpsServerPort, h as getFrpsServerAddr } from './run-MQKWgYFS.mjs';
 import 'fs/promises';
 import 'url';
 import 'node:fs';
@@ -229,7 +229,7 @@ class FrpcTunnel {
     const hyphaToken = options.serverConfig?.hyphaToken || process.env.HYPHA_TOKEN || "";
     this.serverConfig = {
       serverAddr: options.serverConfig?.serverAddr || process.env.FRPS_SERVER_ADDR || (isInCluster() ? FRPS_CLUSTER_ADDR : getFrpsServerAddr()),
-      serverPort: options.serverConfig?.serverPort || parseInt(process.env.FRPS_SERVER_PORT || "", 10) || DEFAULT_FRPS_PORT,
+      serverPort: options.serverConfig?.serverPort || getFrpsServerPort() || DEFAULT_FRPS_PORT,
       authToken: options.serverConfig?.authToken || process.env.FRPS_AUTH_TOKEN || FRPS_PUBLIC_TOKEN,
       hyphaToken,
       subDomainHost: options.serverConfig?.subDomainHost || process.env.FRPS_SUBDOMAIN_HOST || getFrpsSubdomainHost()

package/dist/index.mjs

@@ -1,4 +1,4 @@
-export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-C90uN1y2.mjs';
+export { c as connectToHypha, d as daemonStatus, g as getHyphaServerUrl, r as registerMachineService, a as registerSessionService, s as startDaemon, b as stopDaemon } from './run-MQKWgYFS.mjs';
 import 'os';
 import 'fs/promises';
 import 'fs';

package/dist/package-CUo2nRNC.mjs

@@ -0,0 +1,63 @@
+var name = "svamp-cli";
+var version = "0.2.84";
+var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
+var author = "Amun AI AB";
+var license = "SEE LICENSE IN LICENSE";
+var type = "module";
+var bin = {
+	svamp: "./bin/svamp.mjs"
+};
+var files = [
+	"dist",
+	"bin"
+];
+var main = "./dist/index.mjs";
+var exports$1 = {
+	".": "./dist/index.mjs",
+	"./cli": "./dist/cli.mjs"
+};
+var scripts = {
+	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
+	typecheck: "tsc --noEmit",
+	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs",
+	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
+	dev: "tsx src/cli.ts",
+	"dev:daemon": "tsx src/cli.ts daemon start-sync",
+	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
+	"test:frpc": "npx tsx test/test-frpc-e2e.mjs"
+};
+var dependencies = {
+	"@agentclientprotocol/sdk": "^0.14.1",
+	"@modelcontextprotocol/sdk": "^1.25.3",
+	"hypha-rpc": "0.21.40",
+	"node-pty": "1.2.0-beta.11",
+	ws: "^8.18.0",
+	yaml: "^2.8.2",
+	zod: "^3.24.4"
+};
+var devDependencies = {
+	"@types/node": ">=20",
+	"@types/ws": "^8.5.14",
+	pkgroll: "^2.14.2",
+	tsx: "^4.20.6",
+	typescript: "5.9.3"
+};
+var packageManager = "yarn@1.22.22";
+var _package = {
+	name: name,
+	version: version,
+	description: description,
+	author: author,
+	license: license,
+	type: type,
+	bin: bin,
+	files: files,
+	main: main,
+	exports: exports$1,
+	scripts: scripts,
+	dependencies: dependencies,
+	devDependencies: devDependencies,
+	packageManager: packageManager
+};
+
+export { author, bin, _package as default, dependencies, description, devDependencies, exports$1 as exports, files, license, main, name, packageManager, scripts, type, version };

package/dist/{run-C90uN1y2.mjs → run-MQKWgYFS.mjs}

@@ -1,6 +1,6 @@
-import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import os from 'os';
+import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(import.meta.url);import os, { homedir as homedir$1 } from 'os';
 import fs, { mkdir as mkdir$1, readdir as readdir$1, readFile, writeFile as writeFile$1, rename, unlink } from 'fs/promises';
-import { readFileSync as readFileSync$1, mkdirSync, writeFileSync, renameSync, existsSync as existsSync$1, copyFileSync, unlinkSync as unlinkSync$1, watch, rmdirSync, readdirSync } from 'fs';
+import { readFileSync as readFileSync$1, mkdirSync, writeFileSync, renameSync, existsSync as existsSync$1, rmSync, copyFileSync, unlinkSync as unlinkSync$1, watch, rmdirSync, readdirSync } from 'fs';
 import path__default, { join, dirname, resolve, basename } from 'path';
 import { fileURLToPath } from 'url';
 import { execFile, spawn as spawn$1, execSync as execSync$1 } from 'child_process';
@@ -1393,7 +1393,7 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         const tunnels = handlers.tunnels;
         if (!tunnels) throw new Error("Tunnel management not available");
         if (tunnels.has(params.name)) throw new Error(`Tunnel '${params.name}' already running`);
-        const { FrpcTunnel } = await import('./frpc-F50mVRLL.mjs');
+        const { FrpcTunnel } = await import('./frpc-D3LiH7GX.mjs');
         const tunnel = new FrpcTunnel({
           name: params.name,
           ports: params.ports,
@@ -1522,9 +1522,22 @@ async function registerMachineService(server, machineId, metadata, daemonState,
         await sm.recreateTunnel();
         return { success: true, health: sm.getTunnelHealth() };
       },
-      // WISE voice — create ephemeral token for OpenAI Realtime API
+      // WISE voice — create ephemeral token for OpenAI Realtime API.
+      //
+      // Minting is intentionally NOT gated on machine sharing. The mint only
+      // exchanges an OpenAI key for a short-lived ephemeral token; anything the
+      // resulting WISE agent actually does flows back through the session/machine
+      // RPCs (sendMessage=interact, bash/terminal=admin, …), each authorized on
+      // its own. Gating the mint on `interact` here added no real protection —
+      // an interact user can already drive the agent to do anything on this box —
+      // but it DID cause false failures when the resolved machine wasn't shared
+      // to the caller's identity (e.g. a machine with sharing disabled). We only
+      // require a signed-in, non-anonymous user so the daemon isn't an open
+      // OpenAI relay. (No context at all = internal call → allowed.)
       wiseCreateEphemeralToken: async (params, context) => {
-        authorizeRequest(context, currentMetadata.sharing, "interact");
+        if (context && (!context.user || context.user.is_anonymous)) {
+          return { success: false, error: "Sign in to use WISE voice." };
+        }
         const apiKey = params.apiKey || process.env.OPENAI_API_KEY;
         if (!apiKey) {
           return { success: false, error: "No OpenAI API key found. Set OPENAI_API_KEY or pass apiKey." };
@@ -5543,38 +5556,177 @@ var claudeAuth = /*#__PURE__*/Object.freeze({
     updateEnvFile: updateEnvFile
 });
 
+const SVAMP_HOME$2 = process.env.SVAMP_HOME || join(homedir$1(), ".svamp");
+const CACHE_FILE = join(SVAMP_HOME$2, "instance-config.json");
+const CONFIG_FILENAME = "svamp.json";
+let _config = null;
+let _loaded = false;
+function stripSlash$1(u) {
+  return u.replace(/\/+$/, "");
+}
+function getInstanceUrl() {
+  const raw = (process.env.SVAMP_INSTANCE_URL || "").trim();
+  return raw ? stripSlash$1(raw) : void 0;
+}
+function configUrlsFor(anchor) {
+  const base = stripSlash$1(anchor);
+  return [`${base}/${CONFIG_FILENAME}`, `${base}/.well-known/${CONFIG_FILENAME}`];
+}
+async function fetchConfig(anchor) {
+  for (const url of configUrlsFor(anchor)) {
+    try {
+      const resp = await fetch(url, { signal: AbortSignal.timeout(8e3) });
+      if (!resp.ok) continue;
+      const data = await resp.json();
+      if (data && typeof data === "object" && !Array.isArray(data)) {
+        return data;
+      }
+    } catch {
+    }
+  }
+  return null;
+}
+function readCache() {
+  try {
+    if (existsSync$1(CACHE_FILE)) {
+      const data = JSON.parse(readFileSync$1(CACHE_FILE, "utf-8"));
+      if (data && typeof data === "object" && !Array.isArray(data)) return data;
+    }
+  } catch {
+  }
+  return null;
+}
+function writeCache(cfg) {
+  try {
+    mkdirSync(SVAMP_HOME$2, { recursive: true });
+    writeFileSync(CACHE_FILE, JSON.stringify(cfg, null, 2) + "\n", "utf-8");
+  } catch {
+  }
+}
+function applyConfig(cfg) {
+  _config = cfg;
+  if (cfg.hyphaServerUrl && typeof cfg.hyphaServerUrl === "string") {
+    process.env.HYPHA_SERVER_URL = stripSlash$1(cfg.hyphaServerUrl.trim());
+  }
+}
+async function loadInstanceConfig(opts = {}) {
+  if (_loaded && !opts.force) return _config;
+  const anchor = opts.anchor ? stripSlash$1(opts.anchor) : getInstanceUrl();
+  if (anchor) {
+    const fetched = await fetchConfig(anchor);
+    if (fetched) {
+      applyConfig(fetched);
+      writeCache(fetched);
+      _loaded = true;
+      return _config;
+    }
+  }
+  const cached = readCache();
+  if (cached) applyConfig(cached);
+  _loaded = true;
+  return _config;
+}
+function getLoadedConfig() {
+  if (!_loaded) {
+    const cached = readCache();
+    if (cached) applyConfig(cached);
+    _loaded = true;
+  }
+  return _config;
+}
+function clearInstanceConfigCache() {
+  _config = null;
+  _loaded = false;
+  try {
+    if (existsSync$1(CACHE_FILE)) rmSync(CACHE_FILE);
+  } catch {
+  }
+}
+function __setConfigForTest(cfg) {
+  _config = cfg;
+  _loaded = true;
+  if (cfg) applyConfig(cfg);
+}
+function __resetForTest() {
+  _config = null;
+  _loaded = false;
+}
+
+var instanceConfig = /*#__PURE__*/Object.freeze({
+    __proto__: null,
+    CONFIG_FILENAME: CONFIG_FILENAME,
+    __resetForTest: __resetForTest,
+    __setConfigForTest: __setConfigForTest,
+    clearInstanceConfigCache: clearInstanceConfigCache,
+    configUrlsFor: configUrlsFor,
+    getInstanceUrl: getInstanceUrl,
+    getLoadedConfig: getLoadedConfig,
+    loadInstanceConfig: loadInstanceConfig
+});
+
+function stripSlash(u) {
+  return u.replace(/\/+$/, "");
+}
 function getHyphaServerUrl() {
-  const raw = (process.env.HYPHA_SERVER_URL || "").trim();
-  return raw ? raw.replace(/\/+$/, "") : void 0;
+  const fromCfg = getLoadedConfig()?.hyphaServerUrl;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return stripSlash(fromCfg.trim());
+  const env = (process.env.HYPHA_SERVER_URL || "").trim();
+  return env ? stripSlash(env) : void 0;
 }
 function getFrpsSubdomainHost() {
-  const explicit = (process.env.FRPS_SUBDOMAIN_HOST || "").trim();
-  if (explicit) return explicit;
+  const fromCfg = getLoadedConfig()?.frps?.subdomainHost;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return fromCfg.trim();
+  const env = (process.env.FRPS_SUBDOMAIN_HOST || "").trim();
+  if (env) return env;
   throw new Error(
-    "frps subdomain host is not configured: set FRPS_SUBDOMAIN_HOST (e.g. svc.<your-domain>). It is deployment-specific and intentionally not derived from HYPHA_SERVER_URL, because a guessed host would silently mis-route tunnels."
+    'frps subdomain host is not configured. Serve a svamp.json with "frps.subdomainHost" at your frontend URL (svamp login <frontend-url>), or set FRPS_SUBDOMAIN_HOST (legacy). It is deployment-specific and never guessed.'
   );
 }
 function getFrpsServerAddr() {
-  const explicit = (process.env.FRPS_SERVER_ADDR || "").trim();
-  if (explicit) return explicit;
+  const fromCfg = getLoadedConfig()?.frps?.serverAddr;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return fromCfg.trim();
+  const env = (process.env.FRPS_SERVER_ADDR || "").trim();
+  if (env) return env;
   return `frps-ctrl.${getFrpsSubdomainHost()}`;
 }
+function getFrpsServerPort() {
+  const fromCfg = getLoadedConfig()?.frps?.serverPort;
+  if (typeof fromCfg === "number" && Number.isFinite(fromCfg)) return fromCfg;
+  const env = parseInt(process.env.FRPS_SERVER_PORT || "", 10);
+  return Number.isFinite(env) ? env : void 0;
+}
 function getSvampWebBaseUrl() {
-  const explicit = (process.env.SVAMP_WEB_URL || "").trim();
-  if (explicit) return explicit.replace(/\/+$/, "");
+  const fromCfg = getLoadedConfig()?.web?.baseUrl;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return stripSlash(fromCfg.trim());
+  const env = (process.env.SVAMP_WEB_URL || "").trim();
+  if (env) return stripSlash(env);
+  const instance = getInstanceUrl();
+  if (instance) return instance;
   throw new Error(
-    "Svamp web base URL is not configured: set SVAMP_WEB_URL (e.g. https://svamp.<your-domain>). It is deployment-specific and intentionally not derived from HYPHA_SERVER_URL."
+    'Svamp web base URL is not configured. Serve a svamp.json with "web.baseUrl", log in with your frontend URL (svamp login <frontend-url>), or set SVAMP_WEB_URL (legacy).'
   );
 }
 function getSkillsServerUrl() {
-  const explicit = (process.env.HYPHA_SKILLS_SERVER || "").trim();
-  if (explicit) return explicit.replace(/\/+$/, "");
+  const fromCfg = getLoadedConfig()?.skills?.server;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return stripSlash(fromCfg.trim());
+  const env = (process.env.HYPHA_SKILLS_SERVER || "").trim();
+  if (env) return stripSlash(env);
   const server = getHyphaServerUrl();
   if (server) return server;
   throw new Error(
-    "Cannot determine skills marketplace server: set HYPHA_SKILLS_SERVER or HYPHA_SERVER_URL."
+    "Cannot determine skills marketplace server. Serve a svamp.json or set HYPHA_SERVER_URL."
   );
 }
+function getSkillsWorkspace() {
+  const fromCfg = getLoadedConfig()?.skills?.workspace;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return fromCfg.trim();
+  return (process.env.HYPHA_SKILLS_WORKSPACE || "").trim() || "hypha-cloud";
+}
+function getSkillsCollection() {
+  const fromCfg = getLoadedConfig()?.skills?.collection;
+  if (typeof fromCfg === "string" && fromCfg.trim()) return fromCfg.trim();
+  return (process.env.HYPHA_SKILLS_COLLECTION || "").trim() || "marketplace";
+}
 
 function getShareBaseUrl() {
   return getSvampWebBaseUrl();
@@ -5960,14 +6112,18 @@ function escapeHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
 
-const SKILLS_WORKSPACE = process.env.HYPHA_SKILLS_WORKSPACE || "hypha-cloud";
-const SKILLS_COLLECTION = process.env.HYPHA_SKILLS_COLLECTION || "marketplace";
 const SKILLS_DIR = join(os.homedir(), ".claude", "skills");
+function getSkillsWorkspaceName() {
+  return getSkillsWorkspace();
+}
+function getSkillsCollectionName() {
+  return getSkillsCollection();
+}
 function getSkillsServer() {
   return getSkillsServerUrl();
 }
 function getArtifactBaseUrl() {
-  return `${getSkillsServer()}/${SKILLS_WORKSPACE}/artifacts`;
+  return `${getSkillsServer()}/${getSkillsWorkspaceName()}/artifacts`;
 }
 async function fetchWithTimeout(url, options = {}, timeoutMs = 3e4) {
   const controller = new AbortController();
@@ -6025,7 +6181,7 @@ function parseFrontmatter(content) {
 async function searchSkills(query) {
   const base = getArtifactBaseUrl();
   const filters = encodeURIComponent(JSON.stringify({ type: "skill" }));
-  const url = `${base}/${SKILLS_COLLECTION}/children?keywords=${encodeURIComponent(query)}&filters=${filters}&limit=50`;
+  const url = `${base}/${getSkillsCollectionName()}/children?keywords=${encodeURIComponent(query)}&filters=${filters}&limit=50`;
   const resp = await fetchWithTimeout(url);
   if (!resp.ok) {
     if (resp.status === 404) return [];
@@ -6037,7 +6193,7 @@ async function searchSkills(query) {
 async function listAllSkills(offset = 0, limit = 100) {
   const base = getArtifactBaseUrl();
   const filters = encodeURIComponent(JSON.stringify({ type: "skill" }));
-  const url = `${base}/${SKILLS_COLLECTION}/children?filters=${filters}&offset=${offset}&limit=${limit}`;
+  const url = `${base}/${getSkillsCollectionName()}/children?filters=${filters}&offset=${offset}&limit=${limit}`;
   const resp = await fetchWithTimeout(url);
   if (!resp.ok) {
     if (resp.status === 404) return [];
@@ -6109,15 +6265,15 @@ function normalizeSkill(item) {
 
 var api = /*#__PURE__*/Object.freeze({
     __proto__: null,
-    SKILLS_COLLECTION: SKILLS_COLLECTION,
     SKILLS_DIR: SKILLS_DIR,
-    SKILLS_WORKSPACE: SKILLS_WORKSPACE,
     downloadSkillFile: downloadSkillFile,
     downloadSkillZip: downloadSkillZip,
     fetchWithTimeout: fetchWithTimeout,
     getArtifactBaseUrl: getArtifactBaseUrl,
     getSkillInfo: getSkillInfo,
+    getSkillsCollectionName: getSkillsCollectionName,
     getSkillsServer: getSkillsServer,
+    getSkillsWorkspaceName: getSkillsWorkspaceName,
     listAllSkills: listAllSkills,
     listSkillFiles: listSkillFiles,
     parseFrontmatter: parseFrontmatter,
@@ -8144,10 +8300,16 @@ async function startDaemon(options) {
       process.exit(0);
     }
   }
+  try {
+    await loadInstanceConfig();
+  } catch (err) {
+    logger.log(`[config] Instance config load failed (continuing with env): ${err?.message || err}`);
+  }
   const hyphaServerUrl = process.env.HYPHA_SERVER_URL;
   if (!hyphaServerUrl) {
-    console.error("HYPHA_SERVER_URL is required.");
-    console.error('Run "svamp login <server-url>" first, or set it in .env or environment.');
+    console.error("No Hypha server configured.");
+    console.error('Run "svamp login <frontend-url>" first (e.g. https://svamp.aicell.io),');
+    console.error("or set SVAMP_INSTANCE_URL / HYPHA_SERVER_URL in .env or the environment.");
     process.exit(1);
   }
   const hyphaToken = process.env.HYPHA_TOKEN;
@@ -8207,7 +8369,7 @@ async function startDaemon(options) {
     const list = loadExposedTunnels().filter((t) => t.name !== name);
     saveExposedTunnels(list);
   }
-  const { ServeManager } = await import('./serveManager-DBjlwnv7.mjs');
+  const { ServeManager } = await import('./serveManager-j2Z-hrHL.mjs');
   const serveManager = new ServeManager(SVAMP_HOME, (msg) => logger.log(`[SERVE] ${msg}`), hyphaServerUrl);
   ensureAutoInstalledSkills(logger).catch(() => {
   });
@@ -10780,7 +10942,7 @@ ${capturedError}${buildClaudeErrorHint(capturedError)}`;
       const specs = loadExposedTunnels();
       if (specs.length === 0) return;
       logger.log(`[exposed-tunnels] Restoring ${specs.length} tunnel(s) from ${EXPOSED_TUNNELS_FILE}`);
-      const { FrpcTunnel } = await import('./frpc-F50mVRLL.mjs');
+      const { FrpcTunnel } = await import('./frpc-D3LiH7GX.mjs');
       for (const spec of specs) {
         if (tunnels.has(spec.name)) continue;
         try {
@@ -11527,4 +11689,4 @@ var run = /*#__PURE__*/Object.freeze({
     stopDaemon: stopDaemon
 });
 
-export { buildSessionShareUrl as A, buildMachineShareUrl as B, generateHookSettings as C, DefaultTransport$1 as D, acpBackend as E, acpAgentConfig as F, codexMcpBackend as G, GeminiTransport$1 as H, claudeAuth as I, api as J, run as K, ServeAuth as S, registerSessionService as a, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerAddr as f, getHyphaServerUrl$1 as g, getHyphaServerUrl as h, hasCookieToken as i, getSkillsServer as j, SKILLS_WORKSPACE as k, SKILLS_COLLECTION as l, fetchWithTimeout as m, searchSkills as n, SKILLS_DIR as o, parseFrontmatter as p, getSkillInfo as q, registerMachineService as r, startDaemon as s, downloadSkillFile as t, listSkillFiles as u, normalizeAllowedUser as v, loadSecurityContextConfig as w, resolveSecurityContext as x, buildSecurityContextFromFlags as y, mergeSecurityContexts as z };
+export { mergeSecurityContexts as A, buildSessionShareUrl as B, buildMachineShareUrl as C, generateHookSettings as D, DefaultTransport$1 as E, acpBackend as F, acpAgentConfig as G, codexMcpBackend as H, GeminiTransport$1 as I, claudeAuth as J, instanceConfig as K, api as L, run as M, ServeAuth as S, registerSessionService as a, stopDaemon as b, connectToHypha as c, daemonStatus as d, getFrpsSubdomainHost as e, getFrpsServerPort as f, getHyphaServerUrl$1 as g, getFrpsServerAddr as h, getHyphaServerUrl as i, hasCookieToken as j, getSkillsServer as k, getSkillsWorkspaceName as l, getSkillsCollectionName as m, fetchWithTimeout as n, searchSkills as o, parseFrontmatter as p, SKILLS_DIR as q, registerMachineService as r, startDaemon as s, getSkillInfo as t, downloadSkillFile as u, listSkillFiles as v, normalizeAllowedUser as w, loadSecurityContextConfig as x, resolveSecurityContext as y, buildSecurityContextFromFlags as z };

package/dist/{run-X3V7bQwE.mjs → run-Xk8il2Yz.mjs}

@@ -2,7 +2,7 @@ import{createRequire as _pkgrollCR}from"node:module";const require=_pkgrollCR(im
 import os from 'node:os';
 import { resolve, join } from 'node:path';
 import { existsSync, readFileSync, watch } from 'node:fs';
-import { c as connectToHypha, a as registerSessionService, C as generateHookSettings } from './run-C90uN1y2.mjs';
+import { c as connectToHypha, a as registerSessionService, D as generateHookSettings } from './run-MQKWgYFS.mjs';
 import { createServer } from 'node:http';
 import { spawn } from 'node:child_process';
 import { createInterface } from 'node:readline';

package/dist/{serveCommands-DgG_ZFt7.mjs → serveCommands-9D4WCoJR.mjs}

@@ -54,7 +54,7 @@ async function handleServeCommand() {
   }
 }
 async function serveAdd(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -93,7 +93,7 @@ async function serveAdd(args, machineId) {
   }
 }
 async function serveApply(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   const fs = await import('fs');
   const yaml = await import('yaml');
   const file = positionalArgs(args)[0];
@@ -182,7 +182,7 @@ async function serveApply(args, machineId) {
   }
 }
 async function serveRemove(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   const pos = positionalArgs(args);
   const name = pos[0];
   if (!name) {
@@ -202,7 +202,7 @@ async function serveRemove(args, machineId) {
   }
 }
 async function serveList(args, machineId) {
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   const all = hasFlag(args, "--all", "-a");
   const json = hasFlag(args, "--json");
   const sessionId = getFlag(args, "--session");
@@ -235,7 +235,7 @@ async function serveList(args, machineId) {
   }
 }
 async function serveInfo(machineId) {
-  const { connectAndGetMachine } = await import('./commands-Bd1H83bg.mjs');
+  const { connectAndGetMachine } = await import('./commands-B75aXb6C.mjs');
   const { machine, server } = await connectAndGetMachine(machineId);
   try {
     const info = await machine.serveInfo();

package/dist/{serveManager-DBjlwnv7.mjs → serveManager-j2Z-hrHL.mjs}

@@ -4,7 +4,7 @@ import * as fs from 'fs';
 import * as http from 'http';
 import * as net from 'net';
 import * as path from 'path';
-import { h as getHyphaServerUrl, S as ServeAuth, i as hasCookieToken } from './run-C90uN1y2.mjs';
+import { i as getHyphaServerUrl, S as ServeAuth, j as hasCookieToken } from './run-MQKWgYFS.mjs';
 import 'os';
 import 'fs/promises';
 import 'url';
@@ -712,7 +712,7 @@ class ServeManager {
     const mount = this.mounts.get(mountName);
     const subdomainOverride = mount?.access === "link" && mount.linkToken ? /* @__PURE__ */ new Map([[this.port, `static-${subdomainSafe}-${mount.linkToken}`]]) : void 0;
     try {
-      const { FrpcTunnel } = await import('./frpc-F50mVRLL.mjs');
+      const { FrpcTunnel } = await import('./frpc-D3LiH7GX.mjs');
       let tunnel;
       tunnel = new FrpcTunnel({
         name: tunnelName,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "svamp-cli",
-  "version": "0.2.83",
+  "version": "0.2.84",
   "description": "Svamp CLI — AI workspace daemon on Hypha Cloud",
   "author": "Amun AI AB",
   "license": "SEE LICENSE IN LICENSE",
@@ -20,7 +20,7 @@
   "scripts": {
     "build": "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
     "typecheck": "tsc --noEmit",
-    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs",
+    "test": "npx tsx test/test-context-window.mjs && npx tsx test/test-instance-config.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs",
     "test:hypha": "node --no-warnings test/test-hypha-service.mjs",
     "dev": "tsx src/cli.ts",
     "dev:daemon": "tsx src/cli.ts daemon start-sync",

package/dist/package-Cf8yLCTr.mjs

@@ -1,63 +0,0 @@
-var name = "svamp-cli";
-var version = "0.2.83";
-var description = "Svamp CLI — AI workspace daemon on Hypha Cloud";
-var author = "Amun AI AB";
-var license = "SEE LICENSE IN LICENSE";
-var type = "module";
-var bin = {
-	svamp: "./bin/svamp.mjs"
-};
-var files = [
-	"dist",
-	"bin"
-];
-var main = "./dist/index.mjs";
-var exports$1 = {
-	".": "./dist/index.mjs",
-	"./cli": "./dist/cli.mjs"
-};
-var scripts = {
-	build: "rm -rf dist bin/skills && mkdir -p bin/skills && cp -r ../../skills/artifact bin/skills/artifact && tsc --noEmit && pkgroll",
-	typecheck: "tsc --noEmit",
-	test: "npx tsx test/test-context-window.mjs && npx tsx test/test-authorize.mjs && npx tsx test/test-normalize-allowed-user.mjs && npx tsx test/test-share-url.mjs && npx tsx test/test-update-sharing-normalization.mjs && npx tsx test/test-staged-homes-sweep.mjs && npx tsx test/test-session-helpers.mjs && npx tsx test/test-cli-routing.mjs && npx tsx test/test-security-context.mjs && npx tsx test/test-isolation-decision.mjs && npx tsx test/test-ralph-loop.mjs && npx tsx test/test-message-helpers.mjs && npx tsx test/test-agent-config.mjs && npx tsx test/test-wrap-command.mjs && npx tsx test/test-credential-staging.mjs && npx tsx test/test-claude-auth.mjs && npx tsx test/test-output-formatters.mjs && npx tsx test/test-agent-types.mjs && npx tsx test/test-transport.mjs && npx tsx test/test-session-update-handlers.mjs && npx tsx test/test-session-scanner.mjs && npx tsx test/test-hypha-client.mjs && npx tsx test/test-hook-settings.mjs && npx tsx test/test-session-service-logic.mjs && npx tsx test/test-daemon-persistence.mjs && npx tsx test/test-detect-isolation.mjs && npx tsx test/test-machine-service-logic.mjs && npx tsx test/test-interactive-helpers.mjs && npx tsx test/test-codex-backend.mjs && npx tsx test/test-acp-backend.mjs && npx tsx test/test-acp-bridge.mjs && npx tsx test/test-hook-server.mjs && npx tsx test/test-session-commands.mjs && npx tsx test/test-interactive-console.mjs && npx tsx test/test-session-messages.mjs && npx tsx test/test-session-send-query.mjs && npx tsx test/test-skills.mjs && npx tsx test/test-agent-grouping.mjs && npx tsx test/test-ralph-loop-integration.mjs && npx tsx test/test-ralph-loop-modes.mjs && npx tsx test/test-machine-list-directory.mjs && npx tsx test/test-service-commands.mjs && npx tsx test/test-supervisor.mjs && npx tsx test/test-supervisor-lock.mjs && npx tsx test/test-clear-detection.mjs && npx tsx test/test-session-consolidation.mjs && npx tsx test/test-inbox.mjs && npx tsx test/test-session-rpc-dispatch.mjs && npx tsx test/test-sandbox-cli.mjs && npx tsx test/test-serve-manager.mjs && npx tsx test/test-serve-stability.mjs && npx tsx test/test-frpc-e2e.mjs --unit-only && node test/pinnedClaudeCode.test.mjs && node test/fleet.test.mjs",
-	"test:hypha": "node --no-warnings test/test-hypha-service.mjs",
-	dev: "tsx src/cli.ts",
-	"dev:daemon": "tsx src/cli.ts daemon start-sync",
-	"test:e2e": "node --no-warnings test/e2e-session-tests.mjs",
-	"test:frpc": "npx tsx test/test-frpc-e2e.mjs"
-};
-var dependencies = {
-	"@agentclientprotocol/sdk": "^0.14.1",
-	"@modelcontextprotocol/sdk": "^1.25.3",
-	"hypha-rpc": "0.21.40",
-	"node-pty": "1.2.0-beta.11",
-	ws: "^8.18.0",
-	yaml: "^2.8.2",
-	zod: "^3.24.4"
-};
-var devDependencies = {
-	"@types/node": ">=20",
-	"@types/ws": "^8.5.14",
-	pkgroll: "^2.14.2",
-	tsx: "^4.20.6",
-	typescript: "5.9.3"
-};
-var packageManager = "yarn@1.22.22";
-var _package = {
-	name: name,
-	version: version,
-	description: description,
-	author: author,
-	license: license,
-	type: type,
-	bin: bin,
-	files: files,
-	main: main,
-	exports: exports$1,
-	scripts: scripts,
-	dependencies: dependencies,
-	devDependencies: devDependencies,
-	packageManager: packageManager
-};
-
-export { author, bin, _package as default, dependencies, description, devDependencies, exports$1 as exports, files, license, main, name, packageManager, scripts, type, version };