@agentsky/sky 2.22.0 → 2.23.0

package/dist/{chunk-YMYQT6KR.js → chunk-HDPDY77W.js}

@@ -18978,7 +18978,7 @@ var CATALOG_MODELS = [
         "maxPromptTokens": 1048576,
         "input": 0.09284,
         "output": 0.58025,
-        "cachedInput": 0.09284
+        "cachedInput": 9284e-6
       }
     ],
     "maxPrice": {
@@ -22372,7 +22372,7 @@ var ACP_AGENTS = {
     "registryId": "grok-build",
     "label": "Grok Build",
     "description": "xAI's coding agent and CLI",
-    "version": "1.0.67",
+    "version": "1.0.70",
     "website": "https://x.ai/cli"
   },
   "harn": {
@@ -22563,7 +22563,7 @@ var MINIMAX = ["minimax-m3", "minimax-m3.1-flash"];
 var GEMINI = ["gemini-4-argon", "gemini-3.8-flash", "gemini-3.5-flash-lite"];
 var CLAUDE_5_5 = ["claude-sonnet-5-5", "claude-haiku-5-5"];
 var HARNESS_MODEL_ADDITIONS = {
-  claude_code: [{ models: CLAUDE_5_5, releases: ["2.1.295", "2.1.296", "2.1.303"] }, {
+  claude_code: [{ models: CLAUDE_5_5, releases: ["2.1.295", "2.1.296", "2.1.303", "2.1.310"] }, {
     models: [
       "gpt-6.1-sol",
       "gpt-6-sol",
@@ -22585,7 +22585,7 @@ var HARNESS_MODEL_ADDITIONS = {
       ...MINIMAX,
       ...CATALOG_IDS
     ],
-    releases: ["2.1.303"]
+    releases: ["2.1.303", "2.1.310"]
   }],
   codex: [{ models: [...CLAUDE_5_5, ...GEMINI, "grok-4.7", ...MUSE, ...MINIMAX, ...CATALOG_IDS], releases: ["0.163.0"] }],
   hermes: [
@@ -22606,7 +22606,7 @@ var HARNESS_MODEL_ADDITIONS = {
   kilo: [{ models: ["grok-4.7"], releases: ["7.8.8", "7.8.12", "7.8.15", "7.8.17"] }, { models: ["claude-sonnet-5-5", "claude-haiku-5-5"], releases: ["7.8.8", "7.8.12", "7.8.15", "7.8.17"] }],
   docker_cagent: [{ models: ["grok-4.7"], releases: ["1.150.0", "1.151.0", "1.152.0"] }, { models: ["claude-sonnet-5-5", "claude-haiku-5-5"], releases: ["1.150.0", "1.151.0", "1.152.0"] }],
   cline: [{ models: ["grok-4.7"], releases: ["3.0.70", "3.0.73"] }],
-  grok_build: [{ models: ["grok-4.7"], releases: ["1.0.50", "1.0.62", "1.0.67"] }],
+  grok_build: [{ models: ["grok-4.7"], releases: ["1.0.50", "1.0.62", "1.0.67", "1.0.70"] }],
   mistral_vibe: [{ models: ["grok-4.7"], releases: ["2.26.1"] }],
   sigit: [{ models: ["grok-4.7"], releases: ["1.6.5", "1.7.2", "1.7.3", "1.7.4"] }],
   cursor: [{ models: ["kimi-k2.7-code"], releases: ["2026.10.01"] }],

package/dist/{chunk-EBH3KXSU.js → chunk-HQPOCQRQ.js}

@@ -3,7 +3,7 @@ import {
   apiBase,
   apiToken,
   currentUniverse
-} from "./chunk-XT3W75V3.js";
+} from "./chunk-V5XLV37X.js";
 
 // src/api.ts
 import { createWriteStream, writeFileSync } from "fs";
@@ -145,7 +145,7 @@ async function resolveSessionRef(ref) {
   return agent.defaultSessionId;
 }
 async function* streamEvents(sessionId, signal) {
-  const { parseSseStream } = await import("./src-TGRDQ5XR.js");
+  const { parseSseStream } = await import("./src-UMT6FHLG.js");
   const res = await fetch(
     `${apiBase()}/sessions/${encodeURIComponent(sessionId)}/stream`,
     {

package/dist/{chunk-XT3W75V3.js → chunk-V5XLV37X.js}

@@ -38,7 +38,7 @@ function currentUniverse() {
 }
 
 // src/version.ts
-var CLI_VERSION = "2.22.0";
+var CLI_VERSION = "2.23.0";
 var USER_AGENT = `sky-cli/${CLI_VERSION} (${process.platform}; node/${process.versions.node})`;
 
 export {

package/dist/index.js

@@ -9,7 +9,7 @@ import {
   resolveSessionRef,
   streamEvents,
   uploadFile
-} from "./chunk-EBH3KXSU.js";
+} from "./chunk-HQPOCQRQ.js";
 import {
   CLI_VERSION,
   USER_AGENT,
@@ -20,7 +20,7 @@ import {
   currentUniverse,
   loadConfig,
   saveConfig
-} from "./chunk-XT3W75V3.js";
+} from "./chunk-V5XLV37X.js";
 import {
   AGENT_TYPES,
   MODEL_SUBSCRIPTION_PLAN_PHRASE,
@@ -42,7 +42,7 @@ import {
   skillRefSchema,
   splitMcpServers,
   supersededBy
-} from "./chunk-YMYQT6KR.js";
+} from "./chunk-HDPDY77W.js";
 import "./chunk-MLKGABMK.js";
 
 // src/index.ts
@@ -410,6 +410,52 @@ function renderApiKey(key) {
   return `${key.id}  ${key.token_prefix}\u2026  ${key.status.padEnd(7)} ${key.scopes.join(",").padEnd(16)} ${where}  ${used}  ${key.name}${key.current ? "  (this key)" : ""}`;
 }
 
+// src/account-access.ts
+function linkToken(ref) {
+  const fromUrl = /\/s\/([A-Za-z0-9_-]+)\/?(?:[?#].*)?$/.exec(ref.trim());
+  const token = fromUrl ? fromUrl[1] : ref.trim();
+  if (!/^[A-Za-z0-9_-]{16,64}$/.test(token)) throw new ApiError(400, "invalid_request", "a share link is a /s/<token> URL or its token");
+  return token;
+}
+async function sendViaLink(ref, text, idempotencyKey) {
+  await api("POST", `/links/${encodeURIComponent(linkToken(ref))}/messages`, { text }, { idempotencyKey });
+}
+async function stopViaLink(ref) {
+  await api("POST", `/links/${encodeURIComponent(linkToken(ref))}/interrupt`);
+}
+function inviteCode(ref) {
+  const fromUrl = /\/i\/([^/?#]+)\/?(?:[?#].*)?$/.exec(ref.trim());
+  const code = fromUrl ? decodeURIComponent(fromUrl[1]) : ref.trim();
+  if (!code) throw new ApiError(400, "invalid_request", "a credit invite is an /i/<code> URL or its code");
+  return code;
+}
+async function claimCreditInvite(ref) {
+  return api("POST", "/billing/credit-invites/claim", { code: inviteCode(ref) });
+}
+function renderCreditInviteClaim(claim) {
+  const amount = `$${claim.amount_usd.toFixed(2)}`;
+  return claim.status === "granted" ? `Added ${amount} of credit to your balance` : `Already claimed: this link added ${amount} to your balance`;
+}
+async function listAppGrants() {
+  return (await api("GET", "/oauth_grants")).oauth_grants;
+}
+async function revokeAppGrant(clientId) {
+  await api("DELETE", `/oauth_grants/${encodeURIComponent(clientId)}`);
+}
+function renderAppGrant(grant) {
+  const since = grant.allowed_at ? `  since ${grant.allowed_at.slice(0, 10)}` : "";
+  const review = grant.review_status === "approved" ? "" : "  (unreviewed)";
+  return `${grant.client_id}  ${grant.name || "(unnamed)"}  ${grant.scopes.join(" ")}${since}${review}`;
+}
+async function unsubscribeMarketing() {
+  const { notification_preferences } = await api(
+    "PATCH",
+    "/notification-preferences",
+    { email: { marketing: false } }
+  );
+  return { marketing: notification_preferences.email.marketing };
+}
+
 // src/context.ts
 function memoryBody(operation, version) {
   return { ...operation, expectedVersion: version };
@@ -682,9 +728,9 @@ function readClaudeCode() {
     sources.push("global CLAUDE.md");
   }
   for (const name of ["CLAUDE.md", "AGENTS.md"]) {
-    const project = readIfExists(join3(process.cwd(), name));
-    if (project?.trim()) {
-      parts.push({ label: `Project ${name}`, content: project });
+    const project2 = readIfExists(join3(process.cwd(), name));
+    if (project2?.trim()) {
+      parts.push({ label: `Project ${name}`, content: project2 });
       sources.push(`project ${name}`);
       break;
     }
@@ -739,11 +785,11 @@ function linkPath(configRoot) {
   return join3(configRoot, "agentsky-link.json");
 }
 function readLink(configRoot) {
-  const link = readJson(linkPath(configRoot));
-  return link?.agentId ? link : void 0;
+  const link2 = readJson(linkPath(configRoot));
+  return link2?.agentId ? link2 : void 0;
 }
-function writeLink(configRoot, link) {
-  writeFileSync3(linkPath(configRoot), `${JSON.stringify(link, null, 2)}
+function writeLink(configRoot, link2) {
+  writeFileSync3(linkPath(configRoot), `${JSON.stringify(link2, null, 2)}
 `);
 }
 var DEFAULT_VAULT_NAME = "default";
@@ -909,14 +955,14 @@ async function createClone(local, opts) {
   await confirmAndVaultSecrets(local.secretCandidates, opts.yes ?? false);
   if (opts.open) openBrowser(url);
 }
-async function syncClone(local, link, opts) {
-  const since = link.lastSyncedAt ?? link.clonedAt;
+async function syncClone(local, link2, opts) {
+  const since = link2.lastSyncedAt ?? link2.clonedAt;
   console.log(
-    `Syncing ${link.agentId} from ${local.configRoot} (last synced ${since ? new Date(since).toLocaleDateString() : "never"})`
+    `Syncing ${link2.agentId} from ${local.configRoot} (last synced ${since ? new Date(since).toLocaleDateString() : "never"})`
   );
   if (opts.dryRun) {
     console.log(
-      `  would push prompt (${kb(local.prompt)}) to ${link.agentId}. Dry run \u2014 nothing sent.`
+      `  would push prompt (${kb(local.prompt)}) to ${link2.agentId}. Dry run \u2014 nothing sent.`
     );
     return;
   }
@@ -924,24 +970,24 @@ async function syncClone(local, link, opts) {
   try {
     ({ agent: agent2 } = await api(
       "GET",
-      `/agents/${encodeURIComponent(link.agentId)}`
+      `/agents/${encodeURIComponent(link2.agentId)}`
     ));
   } catch (error) {
     if (error instanceof ApiError && error.status === 404) {
       throw new Error(
-        `linked agent ${link.agentId} no longer exists \u2014 run \`sky clone --new\` to launch a fresh one`
+        `linked agent ${link2.agentId} no longer exists \u2014 run \`sky clone --new\` to launch a fresh one`
       );
     }
     throw error;
   }
   if (agent2.agentType !== local.harness) {
     throw new Error(
-      `linked agent ${link.agentId} is ${agent2.agentType}, this machine runs ${local.harness} \u2014 run \`sky clone --new\` to launch a fresh agent`
+      `linked agent ${link2.agentId} is ${agent2.agentType}, this machine runs ${local.harness} \u2014 run \`sky clone --new\` to launch a fresh agent`
     );
   }
   const result = await api(
     "PUT",
-    `/agents/${encodeURIComponent(link.agentId)}/prompt`,
+    `/agents/${encodeURIComponent(link2.agentId)}/prompt`,
     { prompt: local.prompt }
   );
   console.log(
@@ -949,11 +995,11 @@ async function syncClone(local, link, opts) {
   );
   const drift = [];
   const localModel = local.model ?? null;
-  const linkedModel = link.llm ?? agent2.llm;
+  const linkedModel = link2.llm ?? agent2.llm;
   if (localModel && linkedModel && localModel !== linkedModel) {
     drift.push(`model changed ${linkedModel} \u2192 ${localModel}`);
   }
-  const before = new Set(link.mcpServers ?? []);
+  const before = new Set(link2.mcpServers ?? []);
   const nowKept = Object.keys(local.keptServers);
   const newServers = nowKept.filter((n) => !before.has(n));
   const goneServers = [...before].filter((n) => !nowKept.includes(n));
@@ -968,16 +1014,16 @@ async function syncClone(local, link, opts) {
       `  left out of clone (secret-bearing): ${local.droppedServers.map((d) => `${d.name} MCP`).join(", ")}`
     );
   }
-  writeLink(local.configRoot, { ...link, lastSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
-  console.log(`Synced ${link.agentId}.`);
+  writeLink(local.configRoot, { ...link2, lastSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
+  console.log(`Synced ${link2.agentId}.`);
   await confirmAndVaultSecrets(local.secretCandidates, opts.yes ?? false);
-  if (opts.open) openBrowser(`${apiBase()}/agents/${link.agentId}`);
+  if (opts.open) openBrowser(`${apiBase()}/agents/${link2.agentId}`);
 }
 async function clone(opts) {
   const harness2 = detectHarness(opts.harness);
   const local = readLocal(harness2);
-  const link = opts.new ? void 0 : readLink(local.configRoot);
-  if (link) await syncClone(local, link, opts);
+  const link2 = opts.new ? void 0 : readLink(local.configRoot);
+  if (link2) await syncClone(local, link2, opts);
   else await createClone(local, opts);
 }
 
@@ -1000,7 +1046,7 @@ import { homedir as homedir2 } from "os";
 import { basename as basename4, dirname as dirname3, join as join4, relative, sep } from "path";
 import { parse as parseToml2 } from "smol-toml";
 var MAX_TREE = 5e3;
-var SKILL_LINE = /Base directory for this skill: (\/[^\s"'\\<>]+)/g;
+var SKILL_LINE = /Base directory for this skill: (\/[^\n\r"'\\<>]+)/g;
 function git(cwd, ...args) {
   const run2 = spawnSync("git", ["-C", cwd, ...args], { encoding: "utf8", timeout: 1e4, maxBuffer: 32 * 1024 * 1024 });
   return run2.status === 0 ? run2.stdout : null;
@@ -1046,8 +1092,7 @@ function skillRoots(cwd, home) {
   ];
 }
 function pluginSkill(plugin, skill, home) {
-  const base = join4(process.env.CLAUDE_CONFIG_DIR ?? join4(home, ".claude"), "plugins");
-  const walk = (dir, depth) => {
+  const walk = (dir, depth, underPlugin) => {
     if (depth > 7) return null;
     let entries;
     try {
@@ -1058,13 +1103,13 @@ function pluginSkill(plugin, skill, home) {
     for (const entry2 of entries) {
       if (!entry2.isDirectory() || entry2.name === "node_modules" || entry2.name === ".git") continue;
       const path = join4(dir, entry2.name);
-      if (entry2.name === skill && basename4(dir) === "skills" && path.includes(`${sep}${plugin}${sep}`) && isFile(join4(path, "SKILL.md"))) return path;
-      const found = walk(path, depth + 1);
+      if (entry2.name === skill && basename4(dir) === "skills" && (underPlugin || path.includes(`${sep}${plugin}${sep}`)) && isFile(join4(path, "SKILL.md"))) return realpathSync(path);
+      const found = walk(path, depth + 1, underPlugin);
       if (found) return found;
     }
     return null;
   };
-  return walk(base, 0);
+  return walk(join4(process.env.CLAUDE_CONFIG_DIR ?? join4(home, ".claude"), "plugins"), 0, false) ?? walk(join4(home, "Library", "Application Support", "Claude", "local-agent-mode-sessions", "skills-plugin"), 0, true);
 }
 function findSkill(name, cwd, home) {
   const [scope, skill] = name.includes(":") ? name.split(":", 2) : [null, name];
@@ -1084,23 +1129,24 @@ function loadedSkills(records, touched, cwd, home = homedir2()) {
     if (![...dirs.values()].includes(real)) dirs.set(name, real);
     return true;
   };
+  const called = [];
   for (const record of records) {
     const texts = [];
     strings(record, texts);
-    for (const text of texts) for (const match of text.matchAll(SKILL_LINE)) add(match[1].replace(/[.,;:)]+$/, ""));
+    for (const text of texts) for (const match of text.matchAll(SKILL_LINE)) add(match[1].trim().replace(/[.,;:)]+$/, ""));
     const content = record?.message?.content;
     if (!Array.isArray(content)) continue;
     for (const block of content) {
       const b = block;
-      if (b?.type !== "tool_use" || b.name !== "Skill" || typeof b.input?.skill !== "string") continue;
-      const name = b.input.skill.replace(/^\//, "");
-      if (!name || dirs.has(name) || [...dirs.keys()].some((key) => key.endsWith(`:${name}`) || name.endsWith(`:${key}`))) continue;
-      const dir = findSkill(name, cwd, home);
-      if (!dir || !add(dir, name)) missing.add(name);
+      if (b?.type === "tool_use" && b.name === "Skill" && typeof b.input?.skill === "string") called.push(b.input.skill.replace(/^\//, ""));
     }
   }
   for (const path of touched) if (basename4(path) === "SKILL.md") add(dirname3(path));
-  for (const name of dirs.keys()) missing.delete(name);
+  for (const name of called) {
+    if (!name || dirs.has(name) || [...dirs.keys()].some((key) => key.endsWith(`:${name}`) || name.endsWith(`:${key}`))) continue;
+    const dir = findSkill(name, cwd, home);
+    if (!dir || !add(dir, name)) missing.add(name);
+  }
   return { found: [...dirs].map(([name, dir]) => ({ name: name.replace(/[^A-Za-z0-9._:-]/g, "-"), dir })), missing: [...missing] };
 }
 function readJson2(path) {
@@ -4961,6 +5007,44 @@ function renderBrowserProfile(profile) {
   return lines.join("\n");
 }
 
+// src/mac.ts
+var REACH_KINDS = ["folder", "browser", "screen", "host"];
+var OPEN = /* @__PURE__ */ new Set(["pending", "asking"]);
+var MAX_WAIT_SECONDS = 25;
+async function listMacs() {
+  return (await api("GET", "/desktop/machines")).machines;
+}
+async function askMac(machine, kind, reason) {
+  if (!REACH_KINDS.includes(kind)) throw new Error(`kind must be one of ${REACH_KINDS.join(", ")}`);
+  return api("POST", `/desktop/machines/${encodeURIComponent(machine)}/reach-requests`, { kind, reason });
+}
+async function readReachRequest(id, waitSeconds = 0) {
+  const wait = Math.min(Math.max(Math.floor(waitSeconds), 0), MAX_WAIT_SECONDS);
+  return (await api("GET", `/desktop/reach-requests/${encodeURIComponent(id)}${wait ? `?wait=${wait}` : ""}`)).reach_request;
+}
+async function waitForAnswer(id, budgetSeconds) {
+  const until = Date.now() + budgetSeconds * 1e3;
+  for (; ; ) {
+    const left = Math.ceil((until - Date.now()) / 1e3);
+    const request = await readReachRequest(id, Math.max(left, 0));
+    if (!OPEN.has(request.status) || left <= 0) return request;
+  }
+}
+async function takeBack(mount) {
+  await api("DELETE", `/desktop/mounts/${encodeURIComponent(mount)}`);
+}
+function renderMac(mac2) {
+  const lends = mac2.reach ? mac2.reach.kinds.join(", ") || "nothing" : "unknown (update the Mac app)";
+  const screen = mac2.reach && !mac2.reach.kinds.includes("screen") ? `  screen: ${mac2.reach.screen}` : "";
+  const lines = [`${mac2.id}  ${mac2.name}  ${mac2.online ? "online" : "offline"}  can lend: ${lends}${screen}`];
+  for (const mount of mac2.mounts ?? []) lines.push(`  ${mount.id}  ${mount.kind.padEnd(7)}  ${mount.root ?? mount.label}`);
+  return lines.join("\n");
+}
+function renderReachRequest(request) {
+  if (request.status === "granted" && request.mount) return `${request.id}  granted  ${request.mount.id} (${request.mount.kind}${request.mount.root ? ` ${request.mount.root}` : ""})`;
+  return `${request.id}  ${request.status}${request.error ? `  ${request.error.code}: ${request.error.message}` : ""}`;
+}
+
 // src/compare.ts
 async function listComparisons(opts = {}) {
   const qs = opts.archived ? "?archived=true" : "";
@@ -4981,6 +5065,53 @@ async function listThreads2(opts = {}) {
   const { threads } = await api("GET", `/threads${qs}`);
   return threads;
 }
+async function startThread(body) {
+  return api("POST", "/threads", body);
+}
+var threadPath = (id) => `/threads/${encodeURIComponent(id)}`;
+async function getThread(id) {
+  return api("GET", threadPath(id));
+}
+async function organizeThread(id, change) {
+  return api("PATCH", threadPath(id), change);
+}
+async function deleteThread(id) {
+  return api("DELETE", threadPath(id));
+}
+async function sendThreadMessage(id, body) {
+  return api("POST", `${threadPath(id)}/messages`, body);
+}
+async function addThreadAgent(id, body) {
+  return api("POST", `${threadPath(id)}/agents`, body);
+}
+async function removeThreadAgent(id, columnId) {
+  return api("DELETE", `${threadPath(id)}/agents/${encodeURIComponent(columnId)}`);
+}
+async function interruptThread(id, columnId) {
+  return api("POST", `${threadPath(id)}/interrupt`, columnId ? { columnId } : {});
+}
+async function forkThread(id, body) {
+  return api("POST", `${threadPath(id)}/fork`, body);
+}
+async function changeThreadModel(id, change, columnId) {
+  return api("PATCH", `${threadPath(id)}/engine${columnId ? `?column=${encodeURIComponent(columnId)}` : ""}`, change);
+}
+async function searchThreads(q, opts = {}) {
+  const params = new URLSearchParams({ q, ...opts.threads ? { threads: opts.threads } : {}, ...opts.cursor ? { cursor: opts.cursor } : {} });
+  return api("GET", `/threads/search?${params}`);
+}
+async function threadOptions() {
+  return api("GET", "/threads/options");
+}
+async function joinThread(sessionId) {
+  return api("POST", "/threads/joinable", { sessionId });
+}
+async function listProjects() {
+  return api("GET", "/projects");
+}
+async function rememberProject(project2) {
+  return api("PUT", "/projects", { project: project2 });
+}
 function renderComparisonSummary(c) {
   const agents = c.agents.map((a) => `${a.agentType}/${a.llm}`).join(" vs ");
   const status = c.statusLine ?? c.attention ?? (c.archived ? "archived" : "active");
@@ -4993,6 +5124,115 @@ function renderThreadSummary(t) {
   return `${t.id.slice(0, 12)}  ${flag}${t.title.slice(0, 40).padEnd(44)} [${agents}]  ${status}`;
 }
 
+// src/library.ts
+var artifactPath = (id) => `/library/artifacts/${encodeURIComponent(id)}`;
+async function listLibrary(query = {}) {
+  const params = new URLSearchParams(Object.entries(query).filter((entry2) => Boolean(entry2[1])));
+  const qs = params.size ? `?${params}` : "";
+  return api("GET", `/library/artifacts${qs}`);
+}
+async function uploadToLibrary(file, requestId, workspace2) {
+  const form = new FormData();
+  form.append("file", new Blob([new Uint8Array(file.bytes)], { type: file.mediaType }), file.name);
+  form.append("requestId", requestId);
+  if (workspace2) form.append("workspace", workspace2);
+  return apiForm("POST", "/library/artifacts", form);
+}
+async function getLibraryArtifact(id) {
+  return api("GET", artifactPath(id));
+}
+async function deleteLibraryArtifact(id, revision) {
+  return api("DELETE", artifactPath(id), { revision });
+}
+async function shareLibraryArtifact(id, enabled) {
+  const { currentVersion } = await getLibraryArtifact(id);
+  return api("PATCH", `${artifactPath(id)}/share`, { enabled, revision: currentVersion });
+}
+async function placeLibraryArtifact(id, workspace2) {
+  return api("PATCH", `${artifactPath(id)}/workspace`, { workspace: workspace2 });
+}
+async function downloadLibraryArtifact(id, version) {
+  return apiBytes("GET", `${artifactPath(id)}/download${version ? `?version=${version}` : ""}`);
+}
+function renderLibraryArtifact(artifact2) {
+  const version = artifact2.currentVersion ? `v${artifact2.currentVersion}` : "";
+  return `${artifact2.id}  ${artifact2.name}  ${version}${artifact2.shared ? "  shared" : ""}`;
+}
+
+// src/billing-plans.ts
+var readCodingPlan = () => api("GET", "/billing/coding-plan");
+function joinCodingPlan(dollars2, requestId) {
+  const amount = Number(dollars2.trim().replace(/^\$/, ""));
+  if (!Number.isInteger(amount) || amount <= 0) throw new Error(`<dollars> must be whole dollars, got ${JSON.stringify(dollars2)}`);
+  return api("POST", "/billing/coding-plan", { amount_usd: amount, request_id: requestId });
+}
+var cancelCodingPlan = () => api("DELETE", "/billing/coding-plan");
+function renderCodingPlan(plan) {
+  if (!plan.active) {
+    const lines2 = [`coding plan: not a member (enrollment ${plan.enrollment}; monthly amounts $${plan.amounts_usd.join(", $")})`];
+    if (plan.charge_failure) lines2.push(`  last charge failed: ${plan.charge_failure}`);
+    return lines2.join("\n");
+  }
+  const until = plan.current_period_end?.slice(0, 10) ?? "?";
+  const lines = [`coding plan: $${plan.monthly_credit_usd}/month, paid until ${until}, ${plan.renews ? "renews" : "does not renew"}`];
+  if (plan.charge_failure) lines.push(`  last charge failed: ${plan.charge_failure}`);
+  return lines.join("\n");
+}
+function readRequestUsage(opts) {
+  const query = usageQuery(opts);
+  const cursor = opts.cursor ? `${query ? "&" : "?"}cursor=${encodeURIComponent(opts.cursor)}` : "";
+  return api("GET", `/billing/usage/requests${query}${cursor}`);
+}
+function renderRequestUsage(page) {
+  const lines = page.rows.map((row) => `${row.at.slice(0, 19).replace("T", " ")}  ${(row.apiKeyName ?? "").padEnd(16).slice(0, 16)} ${(row.model ?? "-").padEnd(28).slice(0, 28)} ${String(row.httpStatus ?? "-").padStart(3)} ${String(row.inputTokens ?? 0).padStart(9)} in ${String(row.outputTokens ?? 0).padStart(8)} out ${`$${(row.billedCostUsd ?? 0).toFixed(6)}`.padStart(11)}`);
+  if (!lines.length) lines.push("no API requests in this range");
+  if (page.nextCursor) lines.push(`more: --cursor ${page.nextCursor}`);
+  return lines.join("\n");
+}
+var readReferralLinks = () => api("GET", "/billing/referral-links");
+function referralLinkBody(opts) {
+  if (opts.price === void 0 === !opts.sku?.length) throw new Error("pass --price for every model, or --sku id=multiplier for each SKU, not both");
+  const body = {};
+  if (opts.price !== void 0) body.customer_multiplier = multiplier("--price", opts.price);
+  if (opts.sku?.length) {
+    body.sku_prices = opts.sku.map((pair) => {
+      const at = pair.lastIndexOf("=");
+      if (at <= 0) throw new Error(`--sku must be id=multiplier, got ${JSON.stringify(pair)}`);
+      return { sku_id: pair.slice(0, at), multiplier: multiplier("--sku", pair.slice(at + 1)) };
+    });
+  }
+  if (opts.email) body.audience_email = opts.email;
+  if (opts.uses) body.max_redemptions = wholeNumber2("--uses", opts.uses);
+  if (opts.days) body.expires_in_days = wholeNumber2("--days", opts.days);
+  return body;
+}
+var createReferralLink = (opts) => api("POST", "/billing/referral-links", referralLinkBody(opts));
+var disableReferralLink = (id) => api("POST", `/billing/referral-links/${encodeURIComponent(id)}/disable`);
+function renderReferralLinks(dashboard) {
+  const lines = [`priced from ${dashboard.source_plan.name}: customers pay at least ${Math.round(dashboard.source_plan.multiplier * 100)}% of public price`];
+  for (const link2 of dashboard.links) {
+    const state = link2.disabled_at ? "disabled" : `expires ${link2.expires_at.slice(0, 10)}`;
+    const audience = link2.audience_email ? ` for ${link2.audience_email} (${link2.email_status})` : "";
+    lines.push(`  ${link2.id}  ${Math.round(link2.customer_multiplier * 100)}%  ${link2.redeemed_count}/${link2.max_redemptions} used  ${state}${audience}`);
+    lines.push(`    ${link2.url}`);
+  }
+  if (!dashboard.links.length) lines.push("  no links yet");
+  const earned = dashboard.earnings.reduce((sum, earning) => sum + earning.amount_usd, 0);
+  lines.push(`earned $${earned.toFixed(2)} from ${dashboard.earnings.length} customer${dashboard.earnings.length === 1 ? "" : "s"}`);
+  return lines.join("\n");
+}
+function multiplier(flag, value) {
+  const trimmed = value.trim();
+  const percent = trimmed.endsWith("%");
+  const number = Number(percent ? trimmed.slice(0, -1) : trimmed);
+  if (!Number.isFinite(number) || number <= 0) throw new Error(`${flag} must be a share of public price like 0.8 or 80%, got ${JSON.stringify(value)}`);
+  return percent ? number / 100 : number;
+}
+function wholeNumber2(flag, value) {
+  if (!/^\d+$/.test(value.trim())) throw new Error(`${flag} must be a whole number, got ${JSON.stringify(value)}`);
+  return Number(value.trim());
+}
+
 // src/harness.ts
 import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
 import { dirname as dirname9, join as join18, resolve as resolve8 } from "path";
@@ -5231,6 +5471,19 @@ auth.command("usage <provider>").description("plan allowance left on a connected
 auth.command("switch-to-credits <provider>").description("move the agents on a model subscription onto platform credits (do this before disconnecting)").option("--account <id>", "an additional account (default: the provider's first account)").option("-y, --yes", "skip the confirmation prompt").action(run(async (name, opts) => switchToCredits(name, opts)));
 auth.command("accounts").description("list connected model subscriptions and the agents they power").action(run(async () => listSubscriptions()));
 auth.command("disconnect <provider>").description("disconnect a model subscription (agents on it fail until switched)").option("-y, --yes", "skip the confirmation prompt").action(run(async (name, opts) => disconnect(name, opts)));
+auth.command("apps").description("the registered apps you let into your account, with the scopes you allowed").action(
+  run(async () => {
+    const grants = await listAppGrants();
+    if (!grants.length) console.log("No apps have access to your account.");
+    for (const grant of grants) console.log(renderAppGrant(grant));
+  })
+);
+auth.command("revoke-app <clientId>").description("remove an app's access to your account; its tokens stop working at once (admin scope)").action(
+  run(async (clientId) => {
+    await revokeAppGrant(clientId);
+    console.log(`Removed ${clientId}'s access to your account`);
+  })
+);
 var universe = program.command("universe").description("grouping boundary for agents");
 universe.command("list").action(
   run(async () => {
@@ -5277,7 +5530,7 @@ universe.command("invite <emails...>").description("invite people by email; prin
   run(async (emails, opts) => {
     const result = await invite(await workspaceSlug(opts.universe), emails, opts);
     for (const i of result.invites) console.log(`invited ${i.email} as ${i.role}  ${i.id}`);
-    for (const link of result.links) console.log(`  ${link.email} joins with: sky universe join ${link.token}`);
+    for (const link2 of result.links) console.log(`  ${link2.email} joins with: sky universe join ${link2.token}`);
     if (!result.invites.length) console.log("nobody new to invite \u2014 everyone listed is already a member");
   })
 );
@@ -5594,12 +5847,12 @@ session.command("share <ref>").description("print the session's share link, turn
       console.log(`Sharing is off for ${id}`);
       return;
     }
-    const link = await api("POST", path, {
+    const link2 = await api("POST", path, {
       access: opts.view ? "view" : "prompt",
       ...opts.rotate ? { rotate: true } : {}
     });
-    if (link.shareUrl) console.log(link.shareUrl);
-    else console.log(`view-only token: ${link.token} \u2014 read with GET /links/${link.token}/events`);
+    if (link2.shareUrl) console.log(link2.shareUrl);
+    else console.log(`view-only token: ${link2.token} \u2014 read with GET /links/${link2.token}/events`);
   })
 );
 session.command("usage <ref>").description("what the session has cost so far, and its newest billed entries").option("--limit <n>", "entries to list (default 20)").option("--json", "print the API's answer as JSON").action(
@@ -6416,6 +6669,56 @@ reflections.command("list").description("the workspace's proposals, newest first
 );
 reflections.command("approve <id>").description("write the proposal through the skill or memory store").action(run(async (id) => decideReflection(id, "approve")));
 reflections.command("reject <id>").description("decline the proposal; nothing is written").action(run(async (id) => decideReflection(id, "reject")));
+var library = program.command("library").description("your artifact Library on agentsky.dev: files and sites your agents saved or you uploaded");
+library.command("list").description("your Library, newest first").option("--search <text>", "only names that match").option("--cursor <cursor>", "the next page").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const page = await listLibrary({ q: opts.search, cursor: opts.cursor });
+    if (opts.json) {
+      console.log(JSON.stringify(page, null, 2));
+      return;
+    }
+    if (!page.artifacts.length) console.log("no artifacts");
+    for (const a of page.artifacts) console.log(renderLibraryArtifact(a));
+    if (page.nextCursor) console.log(`more: --cursor ${page.nextCursor}`);
+  })
+);
+library.command("upload <path>").description("save a file from this computer to your Library").option("--workspace <key>", "place it in this workspace").action(
+  run(async (path, opts) => {
+    const bytes = readFileSync17(path);
+    const { artifact: artifact2 } = await uploadToLibrary({ bytes, name: basename9(path), mediaType: "application/octet-stream" }, `sky-upload-${crypto.randomUUID()}`, opts.workspace);
+    console.log(renderLibraryArtifact(artifact2));
+  })
+);
+library.command("show <id>").description("one artifact and its saved versions").action(run(async (id) => {
+  console.log(JSON.stringify(await getLibraryArtifact(id), null, 2));
+}));
+library.command("delete <id>").description("delete your artifact with all its versions").action(
+  run(async (id) => {
+    const { currentVersion } = await getLibraryArtifact(id);
+    await deleteLibraryArtifact(id, currentVersion ?? 0);
+    console.log(`deleted ${id}`);
+  })
+);
+for (const [verb, enabled, description] of [
+  ["share", true, "turn on the artifact's public link"],
+  ["unshare", false, "turn off the artifact's public link"]
+]) {
+  library.command(`${verb} <id>`).description(description).action(run(async (id) => {
+    const state = await shareLibraryArtifact(id, enabled);
+    console.log(state.url ?? `${verb}: ${id}`);
+  }));
+}
+library.command("place <id> <workspace>").description('place your artifact in a workspace, or "me" to take it back to you alone').action(run(async (id, workspace2) => {
+  await placeLibraryArtifact(id, workspace2 === "me" ? null : workspace2);
+  console.log(`placed ${id}`);
+}));
+library.command("download <id> <out>").description("save one version's bytes to a file").option("--version <n>", "a saved version (the current one when omitted)").action(
+  run(async (id, out, opts) => {
+    const { bytes } = await downloadLibraryArtifact(id, opts.version ? Number(opts.version) : void 0);
+    writeFileSync10(out, bytes);
+    console.log(`wrote ${bytes.length} bytes to ${out}`);
+  })
+);
 var artifact = program.command("artifact").description("artifacts: publish a task's files as a named, shareable result");
 artifact.command("list").description("the workspace's artifacts, or one task's with --task").option("--task <task>", "only this task's artifacts").action(
   run(async (opts) => {
@@ -6683,6 +6986,19 @@ program.command("config").description("show the CLI config location and current
   console.log(`  token:    ${config.token ? `${config.token.slice(0, 10)}\u2026` : "(none)"}`);
   console.log(`  universe: ${config.currentUniverse ?? "(default)"}`);
 });
+var link = program.command("link").description("a session someone shared with you by a guest link: send to it and stop it");
+link.command("send <link> <text...>").description("send a message through a guest link (/s/<token> URL or token); it runs and bills as the session's owner").option("--idempotency-key <key>", "repeat a send without sending twice (default: a new key)").action(
+  run(async (ref, words, opts) => {
+    await sendViaLink(ref, words.join(" "), opts.idempotencyKey ?? `sky-${crypto.randomUUID()}`);
+    console.log("Sent. Read the reply with GET /links/<token>/events.");
+  })
+);
+link.command("stop <link>").description("stop the turn running on the session a guest link opens").action(
+  run(async (ref) => {
+    await stopViaLink(ref);
+    console.log("Stopped.");
+  })
+);
 var billing = program.command("billing").description("your balance, auto top-up, usage across sessions and API keys, and buying credit");
 billing.command("show").description("balance, whether a card is saved, and auto top-up").action(
   run(async () => {
@@ -6709,6 +7025,11 @@ billing.command("topup <dollars>").description("buy credit with your saved card:
     console.log(renderTopup(result));
   })
 );
+billing.command("claim <link>").description("claim a credit invite link (agentsky.dev/i/<code>, or just the code) for your own balance").action(
+  run(async (link2) => {
+    console.log(renderCreditInviteClaim(await claimCreditInvite(link2)));
+  })
+);
 billing.command("auto-topup").description("show auto top-up, or change it: --on/--off, --threshold <5|10|20>, --amount <10|20|50|100>").option("--on", "charge the saved card when the balance falls under the threshold").option("--off", "stop charging automatically").option("--threshold <dollars>", "the balance that triggers a charge").option("--amount <dollars>", "the credit each charge adds").action(
   run(async (opts) => {
     const body = autoTopupBody(opts);
@@ -6738,6 +7059,35 @@ usageOptions(
     }
   })
 );
+billing.command("requests").description("one row per API request your developer API keys made, newest first, a page at a time").option("--from <day>", "first UTC day, YYYY-MM-DD (default: 29 days ago)").option("--to <day>", "first UTC day not included (default: tomorrow)").option("--key <id>", "only this API key").option("--cursor <cursor>", "the next page, as printed after the previous one").option("--json", "print the API's answer as JSON").action(
+  run(async (opts) => {
+    const page = await readRequestUsage(opts);
+    console.log(opts.json ? JSON.stringify(page, null, 2) : renderRequestUsage(page));
+  })
+);
+var codingPlan = billing.command("coding-plan").description("the coding plan: monthly credit on your saved card, API gateway calls billed at cost");
+codingPlan.command("show").description("whether you are a member, the monthly amount, and whether it renews").action(run(async () => console.log(renderCodingPlan(await readCodingPlan()))));
+codingPlan.command("join <dollars>").description("join with your saved card (charged now), or change your monthly amount from the next renewal").option("--request-id <id>", "repeat a request without charging twice (default: a new id)").action(
+  run(async (dollars2, opts) => {
+    console.log(renderCodingPlan(await joinCodingPlan(dollars2, opts.requestId ?? `sky-${crypto.randomUUID()}`)));
+  })
+);
+codingPlan.command("cancel").description("stop the plan renewing; the paid month stays").action(run(async () => console.log(renderCodingPlan(await cancelCodingPlan()))));
+var referralLinks = billing.command("referral-links").description("customer discount links for the API gateway (accounts on a discount plan)");
+referralLinks.command("list").description("your links, their use, and what referred customers earned you").action(run(async () => console.log(renderReferralLinks(await readReferralLinks()))));
+referralLinks.command("create").description("create a link priced at no less than your own price; --email sends it to one customer").option("--price <share>", "what the customer pays for every model, as a share of public price: 0.8 or 80%").option("--sku <id=share>", "a price for one SKU; repeat for several", collect).option("--email <address>", "email the link to this customer; it then redeems once").option("--uses <n>", "how many customers can redeem it (default 100)").option("--days <n>", "days until it expires (default 30)").action(
+  run(async (opts) => {
+    const { url, email_status: emailStatus } = await createReferralLink(opts);
+    console.log(emailStatus ? `${url}
+email: ${emailStatus}` : url);
+  })
+);
+referralLinks.command("disable <id>").description("stop a link being redeemed; customers already enrolled keep their price").action(
+  run(async (id) => {
+    await disableReferralLink(id);
+    console.log(`Disabled ${id}`);
+  })
+);
 var keys = program.command("keys").description("your own API keys: list, create, revoke, restore (admin scope)");
 keys.command("list").action(
   run(async () => {
@@ -7058,6 +7408,48 @@ vendor.command("usage <id>").description("the agents and tasks that used this ve
     for (const t of tasks) console.log(`  task   ${t.session_id}  ${t.title ?? "(untitled)"}  ${t.last_used_at.slice(0, 10)}`);
   })
 );
+var mac = program.command("mac").description("your Macs: what each lends to agents now, and asking one for a folder, a browser window, its screen or its apps and files");
+mac.command("list").description("your Macs: online or not, what each can lend, and the folders, browser windows and screens lent now").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const macs = await listMacs();
+    if (opts.json) {
+      console.log(JSON.stringify(macs, null, 2));
+      return;
+    }
+    if (!macs.length) console.log("no Macs connected; sign in to the AgentSky Mac app");
+    for (const entry2 of macs) console.log(renderMac(entry2));
+  })
+);
+mac.command("ask <machine> <kind>").description("ask a Mac to lend a folder, a browser window, its screen or its apps and files (host: local chats, call notes, uploads, saves, local git); the person answers on the Mac. Prints the MCP URL a session attaches once it is granted").requiredOption("--reason <text>", "why, in one sentence the person reads on their Mac").option("--no-wait", "return as soon as the Mac has the ask").option("--json", "print as JSON").action(
+  run(async (machine, kind, opts) => {
+    const asked = await askMac(machine, kind, opts.reason);
+    const answer = opts.wait ? await waitForAnswer(asked.reach_request.id, 240) : asked.reach_request;
+    if (opts.json) {
+      console.log(JSON.stringify({ reach_request: answer, mcp_url: asked.mcp_url }, null, 2));
+      return;
+    }
+    console.log(renderReachRequest(answer));
+    console.log(`mcp_url: ${asked.mcp_url}`);
+    if (answer.status === "granted") console.log("attach it as an MCP server: mcp_servers on POST /v1/sessions (MCP start_session: sources), or PATCH /v1/sessions/{id}");
+    else if (!["pending", "asking"].includes(answer.status)) process.exitCode = 1;
+  })
+);
+mac.command("ask-status <id>").description("where an ask stands: pending, asking, granted, denied, unavailable or expired").option("--wait <seconds>", "wait up to this long (at most 25) for the person to answer", "0").option("--json", "print as JSON").action(
+  run(async (id, opts) => {
+    const answer = await readReachRequest(id, Number(opts.wait) || 0);
+    if (opts.json) {
+      console.log(JSON.stringify(answer, null, 2));
+      return;
+    }
+    console.log(renderReachRequest(answer));
+  })
+);
+mac.command("take-back <mount>").description("end a folder, browser window, screen or apps and files lent from a Mac; every later call to it fails").action(
+  run(async (mount) => {
+    await takeBack(mount);
+    console.log(`took back ${mount}`);
+  })
+);
 var browserProfile = program.command("browser-profile").description("saved-login profiles: the sites your agents stay signed in to");
 browserProfile.command("list").description("your workspace's browser profiles: the sites your agents stay signed in to").option("--json", "print as JSON").action(
   run(async (opts) => {
@@ -7121,10 +7513,16 @@ notifications.command("get").description("show the current notification preferen
       console.log(JSON.stringify(prefs, null, 2));
       return;
     }
-    console.log(`email:  needs_you=${prefs.email.needs_you}  done=${prefs.email.done}`);
+    console.log(`email:  needs_you=${prefs.email.needs_you}  done=${prefs.email.done}  marketing=${prefs.email.marketing}`);
     console.log(`push:   needs_you=${prefs.push.needs_you}  done=${prefs.push.done}`);
   })
 );
+notifications.command("unsubscribe-marketing").description("stop AgentSky marketing email to your address; login and account email continue").action(
+  run(async () => {
+    const { marketing } = await unsubscribeMarketing();
+    console.log(marketing ? "Marketing email is still on." : "Unsubscribed from AgentSky marketing email.");
+  })
+);
 notifications.command("set").description("update notification preferences (pass at least one flag)").option("--email-needs-you <bool>", "email when the task needs your input: true or false").option("--email-done <bool>", "email when the task finishes: true or false").option("--push-needs-you <bool>", "push notification when the task needs your input: true or false").option("--push-done <bool>", "push notification when the task finishes: true or false").action(
   run(async (opts) => {
     const parseBool = (v) => v === void 0 ? void 0 : v === "true" ? true : v === "false" ? false : (() => {
@@ -7282,7 +7680,7 @@ harness.command("connect").description("run an ACP agent (the command after --)
 }));
 var traceCmd = program.command("trace").description("correlate this machine's agent work with the cloud sessions it starts (metadata only unless you choose content)");
 traceCmd.command("start").description("start a trace: a grant for this machine, a root span, and the spool the hooks write to").option("--name <name>", "a name for the task").option("--source <source>", "how this machine reports itself", "claude-code").option("--hooks [settings]", "also install the Claude Code hooks (default: ./.claude/settings.local.json)").option("--capture <scopes>", "also send content, redacted on this machine first: any of prompts,tool_output,files").option("--file <path>", "a file the files scope may send (repeatable)", collect).option("--dir <path>", "a folder whose files the files scope may send when a file tool touches them (repeatable)", collect).action(run(async (opts) => {
-  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-PDIOL2TC.js");
+  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-ZRU624EY.js");
   if (readState()) throw new Error("a trace is already running here \u2014 `sky trace stop` it first");
   const scopes = parseContentScopes(opts.capture);
   const chosen = chosenPaths(opts.file ?? [], opts.dir ?? []);
@@ -7317,7 +7715,7 @@ traceCmd.command("start").description("start a trace: a grant for this machine,
 }));
 traceCmd.command("hook").description("record one Claude Code hook event read from stdin (run by the installed hooks; never fails, prints nothing)").action(async () => {
   try {
-    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-PDIOL2TC.js");
+    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-ZRU624EY.js");
     const chunks = [];
     for await (const chunk of process.stdin) chunks.push(chunk);
     const input = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
@@ -7330,14 +7728,14 @@ traceCmd.command("hook").description("record one Claude Code hook event read fro
   }
 });
 traceCmd.command("flush").description("send what the spool holds, retrying with backoff").action(run(async () => {
-  const { readState, flush, grantSender } = await import("./trace-PDIOL2TC.js");
+  const { readState, flush, grantSender } = await import("./trace-ZRU624EY.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   const outcome = await flush(grantSender(state), { attempts: 4 });
   console.log(`sent ${outcome.sent}, refused ${outcome.refused}, given up ${outcome.expired}, still pending ${outcome.pending}${outcome.stopped ? ` (stopped: ${outcome.stopped})` : ""}`);
 }));
 traceCmd.command("status").description("the running trace and its spool").action(run(async () => {
-  const { readState, spoolStatus } = await import("./trace-PDIOL2TC.js");
+  const { readState, spoolStatus } = await import("./trace-ZRU624EY.js");
   const state = readState();
   if (!state) {
     console.log("No trace is running here.");
@@ -7347,7 +7745,7 @@ traceCmd.command("status").description("the running trace and its spool").action
   console.log(`${state.trace_id} as ${state.source}: ${spool.pending} pending, ${spool.dropped_full} dropped (spool full), ${spool.dropped_expired} given up, ${spool.refused} refused`);
 }));
 traceCmd.command("show [id]").description("the trace bundle: spans, the sessions they reach, cost counted once per session").option("--json", "print the bundle as JSON").action(run(async (id, opts) => {
-  const { readState } = await import("./trace-PDIOL2TC.js");
+  const { readState } = await import("./trace-ZRU624EY.js");
   const ref = id ?? readState()?.trace_id;
   if (!ref) throw new Error("name a trace, or start one here");
   const bundle = await api("GET", `/traces/${ref}`);
@@ -7374,7 +7772,7 @@ traceCmd.command("show [id]").description("the trace bundle: spans, the sessions
   for (const gap of bundle.gaps) console.log(`  gap: ${gap.span_id} ${gap.reason}`);
 }));
 traceCmd.command("stop").description("end the root span, send what is left, and revoke this machine's grant").action(run(async () => {
-  const { readState, record, flush, grantSender, clearState } = await import("./trace-PDIOL2TC.js");
+  const { readState, record, flush, grantSender, clearState } = await import("./trace-ZRU624EY.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   if (state.root_span) record(() => [{ span_id: state.root_span, kind: "end", outcome: "completed" }]);
@@ -7384,7 +7782,7 @@ traceCmd.command("stop").description("end the root span, send what is left, and
   console.log(`Stopped ${state.trace_id}${outcome.pending ? ` (${outcome.pending} events could not be sent)` : ""}`);
 }));
 traceCmd.command("sync [payload]").description("upload this machine's agent sessions (Claude Code, Codex, Cursor, Gemini CLI and every other agent `--agents` lists) to the matching workspace's trace library, redacted here first").option("--enable", "turn sync on for this machine").option("--disable", "turn sync off; nothing more is uploaded").option("--route <match=workspace>", "send sessions whose folder path contains <match> to <workspace> (repeatable; replaces the saved rules)", collect).option("--default <workspace>", "where a session no rule matches goes").option("--keep-local", "keep sessions no rule matches on this machine (the default)").option("--session <ref>", "only this session: its id or transcript path (repeatable)", collect).option("--import <export>", "add a downloaded cloud export (claude.ai, ChatGPT, Gemini, Grok, DeepSeek \u2026: its .zip, folder or file) so sync uploads it (repeatable)", collect).option("--agents", "list the agents sync reads and which are on this machine").option("--full", "re-read every session, not only files that changed").option("--limit <n>", "at most this many changed sessions this run", (v) => Number.parseInt(v, 10)).option("--dry-run", "show what would be uploaded without uploading").option("--hook", "run from a Claude Code SessionEnd hook or Codex notify: upload that session in the background and return at once").option("--install-schedule", "also sweep every 15 minutes (macOS launchd)").option("--status", "what sync has done on this machine").option("--quiet", "print only failures").action(async (payload, opts) => {
-  const lib = await import("./trace-library-TA3QUBHJ.js");
+  const lib = await import("./trace-library-QOQUAL5H.js");
   if (opts.hook) {
     try {
       let raw = payload ?? "";
@@ -7493,7 +7891,7 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
   })();
 });
 traceCmd.command("search <query...>").description("search every session in a workspace's trace library (literal substring)").option("--workspace <slug>", "the workspace to search (default: the current one)").option("--limit <n>", "hits per page", (v) => Number.parseInt(v, 10), 20).option("--cursor <cursor>", "the next page of an earlier search").option("--json", "print the page as JSON").action(run(async (words, opts) => {
-  const { libraryRequest } = await import("./trace-library-TA3QUBHJ.js");
+  const { libraryRequest } = await import("./trace-library-QOQUAL5H.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const params = new URLSearchParams({ q: words.join(" "), scope: "traces", limit: String(opts.limit), ...opts.cursor ? { cursor: opts.cursor } : {} });
@@ -7510,7 +7908,7 @@ traceCmd.command("search <query...>").description("search every session in a wor
   if (page.nextCursor) console.log(`More: sky trace search ${JSON.stringify(words.join(" "))} --workspace ${workspace2} --cursor ${page.nextCursor}`);
 }));
 traceCmd.command("library").description("list the sessions in a workspace's trace library, most recently updated first").option("--workspace <slug>", "the workspace (default: the current one)").option("--limit <n>", "how many", (v) => Number.parseInt(v, 10), 20).option("--json", "print the page as JSON").action(run(async (opts) => {
-  const { libraryRequest } = await import("./trace-library-TA3QUBHJ.js");
+  const { libraryRequest } = await import("./trace-library-QOQUAL5H.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const page = await libraryRequest("GET", `/trace-library?limit=${opts.limit}`, workspace2);
@@ -7626,6 +8024,140 @@ thread.command("list").description("your workspace threads, most recently update
     for (const t of threads) console.log(renderThreadSummary(t));
   })
 );
+thread.command("start <text>").description("start a thread and send it its first message, as the web composer does").requiredOption("--agent <type>", "the agent's harness type (e.g. claude_code, codex)").option("--llm <model>", "the model (the harness default when omitted)").option("--effort <level>", "thinking level").option("--vs <type:model...>", "more agents that get the same message, side by side", (val, acc) => [...acc, val], []).option("--saved-agent <id>", "run on one of your saved agents").option("--workspace <slug>", "start it in this team workspace").option("--plan", "send the first message in Plan mode").option("--json", "print the new thread as JSON").action(
+  run(async (text, opts) => {
+    const compared = (opts.vs ?? []).map((v) => {
+      const [agentType, llm] = v.split(":");
+      if (!agentType) throw new ApiError(400, "invalid_request", `--vs must be type[:model], got "${v}"`);
+      return { agentType, ...llm ? { llm } : {} };
+    });
+    const result = await startThread({
+      requestId: `sky-thread-${crypto.randomUUID()}`,
+      agentType: opts.agent,
+      text,
+      ...opts.llm ? { llm: opts.llm } : {},
+      ...opts.effort ? { reasoningEffort: opts.effort } : {},
+      ...compared.length ? { compare: compared } : {},
+      ...opts.savedAgent ? { agentId: opts.savedAgent } : {},
+      ...opts.workspace ? { workspace: opts.workspace } : {},
+      ...opts.plan ? { interactionMode: "plan" } : {}
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    console.log(`started ${result.playgroundId}`);
+    for (const col of result.columns) console.log(`  agent ${col.columnId}  session ${col.sessionId}`);
+  })
+);
+thread.command("show <id>").description("one thread with every agent and the session each one runs in").option("--json", "print as JSON").action(
+  run(async (id, opts) => {
+    const detail = await getThread(id);
+    if (opts.json) {
+      console.log(JSON.stringify(detail, null, 2));
+      return;
+    }
+    console.log(`thread ${detail.id}  ${detail.title}`);
+    for (const col of detail.columns) console.log(`  agent ${col.id}  session ${col.sessionId}  ${col.blind ? "(hidden until the vote)" : `${col.agentType}/${col.llm}`}  ${col.status ?? col.podStatus ?? ""}`);
+  })
+);
+thread.command("rename <id> <title>").description("rename a thread").action(run(async (id, title) => {
+  await organizeThread(id, { title });
+  console.log(`renamed ${id}`);
+}));
+for (const [verb, change, description] of [
+  ["pin", { pinned: true }, "pin a thread to the top of the rail"],
+  ["unpin", { pinned: false }, "unpin a thread"],
+  ["archive", { archived: true }, "put a thread away"],
+  ["unarchive", { archived: false }, "bring an archived thread back"],
+  ["mark-read", { seen: true }, "mark a thread read"],
+  ["mark-unread", { seen: false }, "mark a thread unread"]
+]) {
+  thread.command(`${verb} <id>`).description(description).action(run(async (id) => {
+    await organizeThread(id, change);
+    console.log(`${verb}: ${id}`);
+  }));
+}
+thread.command("delete <id>").description("delete a thread with its sessions").action(run(async (id) => {
+  await deleteThread(id);
+  console.log(`deleted ${id}`);
+}));
+thread.command("send <id> <text>").description("send one message to every agent of the thread, or to the ones --agent names").option("--agent <columnId...>", "only these agents (column ids from `sky thread show`)").option("--json", "print each agent's outcome as JSON").action(
+  run(async (id, text, opts) => {
+    const { results } = await sendThreadMessage(id, { text, deliveryId: crypto.randomUUID(), ...opts.agent?.length ? { columnIds: opts.agent } : {} });
+    if (opts.json) {
+      console.log(JSON.stringify(results, null, 2));
+      return;
+    }
+    for (const [column, outcome] of Object.entries(results)) console.log(`  ${column}  ${outcome.ok ? "sent" : `not sent: ${outcome.error ?? "refused"}`}`);
+  })
+);
+thread.command("add-agent <id>").description("add an agent to the thread, in a session of its own").requiredOption("--agent <type>", "the agent's harness type").option("--llm <model>", "the model").option("--effort <level>", "thinking level").action(
+  run(async (id, opts) => {
+    const { columns } = await addThreadAgent(id, { requestId: `sky-agent-${crypto.randomUUID()}`, agentType: opts.agent, ...opts.llm ? { llm: opts.llm } : {}, ...opts.effort ? { reasoningEffort: opts.effort } : {} });
+    for (const col of columns) console.log(`added agent ${col.columnId}  session ${col.sessionId}`);
+  })
+);
+thread.command("remove-agent <id> <columnId>").description("take one agent out of the thread; its session is left as it is").action(run(async (id, columnId) => {
+  await removeThreadAgent(id, columnId);
+  console.log(`removed ${columnId}`);
+}));
+thread.command("stop <id>").description("stop what the thread's agents are doing").option("--agent <columnId>", "stop only this agent").action(run(async (id, opts) => {
+  await interruptThread(id, opts.agent);
+  console.log(`stopped ${id}`);
+}));
+thread.command("fork <id>").description("continue one agent's conversation in a thread of its own").option("--agent <columnId>", "the agent to fork (the first when omitted)").option("--at <messageId>", "carry the conversation only up to this message").option("--to <type:model>", "continue on another agent or model").action(
+  run(async (id, opts) => {
+    const [agentType, llm] = (opts.to ?? "").split(":");
+    const { playgroundId } = await forkThread(id, {
+      requestId: `sky-fork-${crypto.randomUUID()}`,
+      ...opts.agent ? { columnId: opts.agent } : {},
+      ...opts.at ? { messageId: opts.at } : {},
+      ...agentType ? { target: { agentType, ...llm ? { llm } : {} } } : {}
+    });
+    console.log(`forked into ${playgroundId}`);
+  })
+);
+thread.command("model <id>").description("change the model or thinking level one agent of the thread runs on, from its next turn").option("--agent <columnId>", "the agent (the first when omitted)").option("--llm <model>", "the new model").option("--effort <level>", 'the new thinking level, or "default"').action(
+  run(async (id, opts) => {
+    if (!opts.llm && !opts.effort) throw new ApiError(400, "invalid_request", "Provide --llm or --effort.");
+    const result = await changeThreadModel(id, { ...opts.llm ? { llm: opts.llm } : {}, ...opts.effort ? { reasoningEffort: opts.effort === "default" ? null : opts.effort } : {} }, opts.agent);
+    console.log(`now ${result.llm}${result.reasoningEffort ? ` (${result.reasoningEffort})` : ""}`);
+  })
+);
+thread.command("search <query>").description("search the words of your conversations").option("--archived", "search archived threads only").option("--all", "search active and archived threads").option("--cursor <cursor>", "the next page").action(
+  run(async (query, opts) => {
+    const threads = opts.all ? "all" : opts.archived ? "archived" : void 0;
+    console.log(JSON.stringify(await searchThreads(query, { ...threads ? { threads } : {}, ...opts.cursor ? { cursor: opts.cursor } : {} }), null, 2));
+  })
+);
+thread.command("options").description("what a new thread can start on: agents, models, thinking levels and grantable tools").action(run(async () => {
+  console.log(JSON.stringify(await threadOptions(), null, 2));
+}));
+thread.command("join <sessionId>").description("open a teammate's thread, or one shared with you, as the session link does").action(
+  run(async (sessionId) => {
+    const opened = await joinThread(sessionId);
+    console.log(opened.readOnly ? `read-only: session ${opened.sessionId}` : `opened ${opened.playgroundId}`);
+  })
+);
+var project = program.command("project").description("the GitHub repositories a new thread can start on");
+project.command("list").description("repositories a new thread can start on, and the one you chose last").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const listed = await listProjects();
+    if (opts.json) {
+      console.log(JSON.stringify(listed, null, 2));
+      return;
+    }
+    if (listed.unavailable) console.log(listed.unavailable.message);
+    for (const repo of listed.repos) console.log(`${repo.fullName === listed.last?.repoFullName ? "* " : "  "}${repo.fullName}`);
+  })
+);
+project.command("use [repo]").description("remember a repository (owner/name) for your next new thread, or none when omitted").option("--branch <branch>", "the branch", "main").action(
+  run(async (repo, opts) => {
+    const { project: remembered } = await rememberProject(repo ? { repoFullName: repo, branch: opts.branch } : null);
+    console.log(remembered ? `next thread starts on ${remembered.repoFullName}@${remembered.branch}` : "next thread starts on no repository");
+  })
+);
 session.command("feedback <id>").description("read the thumbs-up/down feedback on this session's messages").option("--json", "print as JSON").action(
   run(async (id, opts) => {
     const result = await api(

package/dist/{src-TGRDQ5XR.js → src-UMT6FHLG.js}

@@ -2,7 +2,7 @@ import {
   admittedInputScopeSchema,
   external_exports,
   messagePartSchema
-} from "./chunk-YMYQT6KR.js";
+} from "./chunk-HDPDY77W.js";
 import "./chunk-MLKGABMK.js";
 
 // ../../packages/chat/src/stream.ts

package/dist/{trace-PDIOL2TC.js → trace-ZRU624EY.js}

@@ -1,11 +1,11 @@
 import {
   USER_AGENT,
   configPath
-} from "./chunk-XT3W75V3.js";
+} from "./chunk-V5XLV37X.js";
 import {
   TRACE_CONTENT_SCOPES,
   redactTraceText
-} from "./chunk-YMYQT6KR.js";
+} from "./chunk-HDPDY77W.js";
 import "./chunk-MLKGABMK.js";
 
 // src/trace.ts

package/dist/{trace-library-TA3QUBHJ.js → trace-library-QOQUAL5H.js}

@@ -1,16 +1,16 @@
 import {
   ApiError
-} from "./chunk-EBH3KXSU.js";
+} from "./chunk-HQPOCQRQ.js";
 import {
   USER_AGENT,
   apiBase,
   apiToken
-} from "./chunk-XT3W75V3.js";
+} from "./chunk-V5XLV37X.js";
 import {
   SessionSourceCollector,
   publicRemote,
   redactTraceText
-} from "./chunk-YMYQT6KR.js";
+} from "./chunk-HDPDY77W.js";
 import "./chunk-MLKGABMK.js";
 
 // src/trace-library.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsky/sky",
-  "version": "2.22.0",
+  "version": "2.23.0",
   "description": "sky \u2014 the AgentSky developer CLI: launch and talk to long-lived agents from your terminal.",
   "license": "MIT",
   "type": "module",