@agentsky/sky 2.22.0 → 2.24.0

package/dist/index.js

@@ -4,12 +4,13 @@ import {
   api,
   apiBytes,
   apiForm,
+  apiRaw,
   downloadFileTo,
   postEvents,
   resolveSessionRef,
   streamEvents,
   uploadFile
-} from "./chunk-EBH3KXSU.js";
+} from "./chunk-UHMKEYJN.js";
 import {
   CLI_VERSION,
   USER_AGENT,
@@ -20,7 +21,7 @@ import {
   currentUniverse,
   loadConfig,
   saveConfig
-} from "./chunk-XT3W75V3.js";
+} from "./chunk-RAFHOB5S.js";
 import {
   AGENT_TYPES,
   MODEL_SUBSCRIPTION_PLAN_PHRASE,
@@ -42,17 +43,17 @@ import {
   skillRefSchema,
   splitMcpServers,
   supersededBy
-} from "./chunk-YMYQT6KR.js";
+} from "./chunk-277AZSSG.js";
 import "./chunk-MLKGABMK.js";
 
 // src/index.ts
-import { existsSync as existsSync12, readFileSync as readFileSync17, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync18, writeFileSync as writeFileSync11 } from "fs";
 import { basename as basename9, resolve as resolve9 } from "path";
 import { createInterface as createInterface6 } from "readline";
 import { Command } from "commander";
 
 // src/files.ts
-import { readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { existsSync, readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
 import { basename as basename2, extname, join as join2 } from "path";
 
 // src/resumable-upload.ts
@@ -250,6 +251,16 @@ function eventsFor(text, files2, system, interactionMode2) {
   if (system?.trim()) events.push({ type: "system.message", content: [{ type: "text", text: system }] });
   return events;
 }
+function isFileId(ref) {
+  return /^file_[A-Za-z0-9]+$/.test(ref);
+}
+async function attachment(ref, opts = {}) {
+  if (opts.byId || isFileId(ref) && !existsSync(ref)) {
+    if (!isFileId(ref)) throw new Error(`--file-id takes a stored file's id (file_\u2026), got ${JSON.stringify(ref)}`);
+    return { file: await api("GET", `/files/${encodeURIComponent(ref)}`), uploaded: false };
+  }
+  return { file: await uploadLocalFile(ref), uploaded: true };
+}
 
 // src/goal.ts
 var CHECK_SEPARATOR = " :: ";
@@ -410,6 +421,52 @@ function renderApiKey(key) {
   return `${key.id}  ${key.token_prefix}\u2026  ${key.status.padEnd(7)} ${key.scopes.join(",").padEnd(16)} ${where}  ${used}  ${key.name}${key.current ? "  (this key)" : ""}`;
 }
 
+// src/account-access.ts
+function linkToken(ref) {
+  const fromUrl = /\/s\/([A-Za-z0-9_-]+)\/?(?:[?#].*)?$/.exec(ref.trim());
+  const token = fromUrl ? fromUrl[1] : ref.trim();
+  if (!/^[A-Za-z0-9_-]{16,64}$/.test(token)) throw new ApiError(400, "invalid_request", "a share link is a /s/<token> URL or its token");
+  return token;
+}
+async function sendViaLink(ref, text, idempotencyKey) {
+  await api("POST", `/links/${encodeURIComponent(linkToken(ref))}/messages`, { text }, { idempotencyKey });
+}
+async function stopViaLink(ref) {
+  await api("POST", `/links/${encodeURIComponent(linkToken(ref))}/interrupt`);
+}
+function inviteCode(ref) {
+  const fromUrl = /\/i\/([^/?#]+)\/?(?:[?#].*)?$/.exec(ref.trim());
+  const code = fromUrl ? decodeURIComponent(fromUrl[1]) : ref.trim();
+  if (!code) throw new ApiError(400, "invalid_request", "a credit invite is an /i/<code> URL or its code");
+  return code;
+}
+async function claimCreditInvite(ref) {
+  return api("POST", "/billing/credit-invites/claim", { code: inviteCode(ref) });
+}
+function renderCreditInviteClaim(claim) {
+  const amount = `$${claim.amount_usd.toFixed(2)}`;
+  return claim.status === "granted" ? `Added ${amount} of credit to your balance` : `Already claimed: this link added ${amount} to your balance`;
+}
+async function listAppGrants() {
+  return (await api("GET", "/oauth_grants")).oauth_grants;
+}
+async function revokeAppGrant(clientId) {
+  await api("DELETE", `/oauth_grants/${encodeURIComponent(clientId)}`);
+}
+function renderAppGrant(grant) {
+  const since = grant.allowed_at ? `  since ${grant.allowed_at.slice(0, 10)}` : "";
+  const review = grant.review_status === "approved" ? "" : "  (unreviewed)";
+  return `${grant.client_id}  ${grant.name || "(unnamed)"}  ${grant.scopes.join(" ")}${since}${review}`;
+}
+async function unsubscribeMarketing() {
+  const { notification_preferences } = await api(
+    "PATCH",
+    "/notification-preferences",
+    { email: { marketing: false } }
+  );
+  return { marketing: notification_preferences.email.marketing };
+}
+
 // src/context.ts
 function memoryBody(operation, version) {
   return { ...operation, expectedVersion: version };
@@ -448,9 +505,9 @@ function renderContextPage(page) {
 }
 
 // src/agent-file.ts
-import { existsSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2, resolve as resolve2 } from "path";
-import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import { parse as parseToml } from "smol-toml";
 var fileInstructionSchema = external_exports.object({
   name: external_exports.string(),
   content: external_exports.string().optional(),
@@ -466,7 +523,8 @@ var agentFileSchema = external_exports.object({
   type: external_exports.enum(AGENT_TYPES).optional(),
   llm: external_exports.string().optional(),
   reasoning_effort: external_exports.enum(REASONING_EFFORT_VALUES).optional(),
-  capabilities: capabilitiesSchema.optional(),
+  capabilities: capabilitiesSchema.removeDefault().optional(),
+  // omitted = leave the agent's as they are
   prompt: external_exports.string().optional(),
   prompt_file: external_exports.string().optional(),
   instructions: external_exports.array(fileInstructionSchema).optional(),
@@ -523,13 +581,40 @@ function readAgentFile(path) {
   return { file, spec };
 }
 function stampId(path, id) {
-  const doc = parseToml(readFileSync3(path, "utf8"));
-  doc.id = id;
-  delete doc.slug;
-  writeFileSync2(path, stringifyToml(doc));
+  writeFileSync2(path, stampIdText(readFileSync3(path, "utf8"), id));
+}
+function stampIdText(text, id) {
+  const out = [];
+  let topLevel = true;
+  let openString = null;
+  let stamped = false;
+  let nameAt = -1;
+  for (const line of text.split("\n")) {
+    if (openString) {
+      if (line.includes(openString)) openString = null;
+      out.push(line);
+      continue;
+    }
+    if (/^\s*\[/.test(line)) topLevel = false;
+    if (topLevel && /^\s*(id|slug)\s*=/.test(line)) {
+      if (/^\s*id\s*=/.test(line) && !stamped) {
+        out.push(`id = ${JSON.stringify(id)}`);
+        stamped = true;
+      }
+      continue;
+    }
+    if (topLevel && nameAt < 0 && /^\s*name\s*=/.test(line)) nameAt = out.length;
+    const opener = /=\s*("""|''')/.exec(line);
+    if (opener && !line.slice(opener.index + opener[0].length).includes(opener[1])) openString = opener[1];
+    out.push(line);
+  }
+  if (!stamped) out.splice(nameAt + 1, 0, `id = ${JSON.stringify(id)}`);
+  const next = out.join("\n");
+  if (parseToml(next).id !== id) throw new Error("could not stamp the agent id into the file");
+  return next;
 }
 function scaffoldAgentFile(path, name) {
-  if (existsSync(path)) throw new Error(`${path} already exists`);
+  if (existsSync2(path)) throw new Error(`${path} already exists`);
   writeFileSync2(
     path,
     `# agent.toml \u2014 everything the create wizard can set. Only \`name\` is required.
@@ -550,6 +635,38 @@ You are ${name}, a helpful long-lived agent.
 `
   );
 }
+function deployPatch(spec) {
+  return {
+    displayName: spec.displayName,
+    ...spec.agentType ? { agentType: spec.agentType } : {},
+    ...spec.llm ? { llm: spec.llm } : {},
+    ...spec.capabilities ? { capabilities: spec.capabilities } : {},
+    ...spec.reasoningEffort ? { reasoningEffort: spec.reasoningEffort } : {},
+    ...spec.skills ? { skills: spec.skills } : {},
+    ...spec.hiringPolicy ? { hiringPolicy: spec.hiringPolicy } : {},
+    ...spec.environmentId ? { environmentId: spec.environmentId } : {}
+  };
+}
+function deployReport(id, spec, before, after, promptChanged) {
+  if (spec.agentType && after.agentType !== spec.agentType) {
+    throw new Error(`${id} is still ${after.agentType}: the API did not apply type = "${spec.agentType}"`);
+  }
+  if (spec.llm && after.llm !== spec.llm) {
+    throw new Error(`${id} still runs ${after.llm}: the API did not apply llm = "${spec.llm}"`);
+  }
+  const changed = [];
+  if (promptChanged) changed.push("prompt");
+  if (after.version !== before.version) changed.push("settings");
+  if (!changed.length) return [`${id} is up to date \u2014 nothing to deploy (version ${after.version})`];
+  const lines = [`Deployed ${id}: ${changed.join(" and ")} updated (version ${before.version} \u2192 ${after.version})`];
+  if (after.agentType !== before.agentType || after.llm !== before.llm) {
+    lines.push(`  now ${after.agentType} \xB7 ${after.llm} for new sessions (was ${before.agentType} \xB7 ${before.llm})`);
+  }
+  if (spec.skills && after.version !== before.version) {
+    lines.push(`  Skills apply to new sessions; running sessions keep the skills they started with \u2014 start one with \`sky session create ${id}\`.`);
+  }
+  return lines;
+}
 
 // src/catalog.ts
 var bare = (handle) => handle.replace(/^@/, "");
@@ -616,7 +733,7 @@ function renderCatalogAgent(agent2) {
 
 // src/clone.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { homedir } from "os";
 import { basename as basename3, join as join3 } from "path";
 import { createInterface } from "readline";
@@ -682,9 +799,9 @@ function readClaudeCode() {
     sources.push("global CLAUDE.md");
   }
   for (const name of ["CLAUDE.md", "AGENTS.md"]) {
-    const project = readIfExists(join3(process.cwd(), name));
-    if (project?.trim()) {
-      parts.push({ label: `Project ${name}`, content: project });
+    const project2 = readIfExists(join3(process.cwd(), name));
+    if (project2?.trim()) {
+      parts.push({ label: `Project ${name}`, content: project2 });
       sources.push(`project ${name}`);
       break;
     }
@@ -722,9 +839,9 @@ function detectHarness(explicit) {
     }
     return explicit;
   }
-  if (existsSync2(claudeConfigRoot())) return "claude_code";
-  if (existsSync2(join3(homedir(), ".codex"))) return "codex";
-  if (existsSync2(join3(homedir(), ".openclaw"))) return "openclaw";
+  if (existsSync3(claudeConfigRoot())) return "claude_code";
+  if (existsSync3(join3(homedir(), ".codex"))) return "codex";
+  if (existsSync3(join3(homedir(), ".openclaw"))) return "openclaw";
   throw new Error(
     "no local harness found (~/.claude, ~/.codex, ~/.openclaw) \u2014 pass --harness to override"
   );
@@ -739,11 +856,11 @@ function linkPath(configRoot) {
   return join3(configRoot, "agentsky-link.json");
 }
 function readLink(configRoot) {
-  const link = readJson(linkPath(configRoot));
-  return link?.agentId ? link : void 0;
+  const link2 = readJson(linkPath(configRoot));
+  return link2?.agentId ? link2 : void 0;
 }
-function writeLink(configRoot, link) {
-  writeFileSync3(linkPath(configRoot), `${JSON.stringify(link, null, 2)}
+function writeLink(configRoot, link2) {
+  writeFileSync3(linkPath(configRoot), `${JSON.stringify(link2, null, 2)}
 `);
 }
 var DEFAULT_VAULT_NAME = "default";
@@ -909,14 +1026,14 @@ async function createClone(local, opts) {
   await confirmAndVaultSecrets(local.secretCandidates, opts.yes ?? false);
   if (opts.open) openBrowser(url);
 }
-async function syncClone(local, link, opts) {
-  const since = link.lastSyncedAt ?? link.clonedAt;
+async function syncClone(local, link2, opts) {
+  const since = link2.lastSyncedAt ?? link2.clonedAt;
   console.log(
-    `Syncing ${link.agentId} from ${local.configRoot} (last synced ${since ? new Date(since).toLocaleDateString() : "never"})`
+    `Syncing ${link2.agentId} from ${local.configRoot} (last synced ${since ? new Date(since).toLocaleDateString() : "never"})`
   );
   if (opts.dryRun) {
     console.log(
-      `  would push prompt (${kb(local.prompt)}) to ${link.agentId}. Dry run \u2014 nothing sent.`
+      `  would push prompt (${kb(local.prompt)}) to ${link2.agentId}. Dry run \u2014 nothing sent.`
     );
     return;
   }
@@ -924,24 +1041,24 @@ async function syncClone(local, link, opts) {
   try {
     ({ agent: agent2 } = await api(
       "GET",
-      `/agents/${encodeURIComponent(link.agentId)}`
+      `/agents/${encodeURIComponent(link2.agentId)}`
     ));
   } catch (error) {
     if (error instanceof ApiError && error.status === 404) {
       throw new Error(
-        `linked agent ${link.agentId} no longer exists \u2014 run \`sky clone --new\` to launch a fresh one`
+        `linked agent ${link2.agentId} no longer exists \u2014 run \`sky clone --new\` to launch a fresh one`
       );
     }
     throw error;
   }
   if (agent2.agentType !== local.harness) {
     throw new Error(
-      `linked agent ${link.agentId} is ${agent2.agentType}, this machine runs ${local.harness} \u2014 run \`sky clone --new\` to launch a fresh agent`
+      `linked agent ${link2.agentId} is ${agent2.agentType}, this machine runs ${local.harness} \u2014 run \`sky clone --new\` to launch a fresh agent`
     );
   }
   const result = await api(
     "PUT",
-    `/agents/${encodeURIComponent(link.agentId)}/prompt`,
+    `/agents/${encodeURIComponent(link2.agentId)}/prompt`,
     { prompt: local.prompt }
   );
   console.log(
@@ -949,11 +1066,11 @@ async function syncClone(local, link, opts) {
   );
   const drift = [];
   const localModel = local.model ?? null;
-  const linkedModel = link.llm ?? agent2.llm;
+  const linkedModel = link2.llm ?? agent2.llm;
   if (localModel && linkedModel && localModel !== linkedModel) {
     drift.push(`model changed ${linkedModel} \u2192 ${localModel}`);
   }
-  const before = new Set(link.mcpServers ?? []);
+  const before = new Set(link2.mcpServers ?? []);
   const nowKept = Object.keys(local.keptServers);
   const newServers = nowKept.filter((n) => !before.has(n));
   const goneServers = [...before].filter((n) => !nowKept.includes(n));
@@ -968,39 +1085,39 @@ async function syncClone(local, link, opts) {
       `  left out of clone (secret-bearing): ${local.droppedServers.map((d) => `${d.name} MCP`).join(", ")}`
     );
   }
-  writeLink(local.configRoot, { ...link, lastSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
-  console.log(`Synced ${link.agentId}.`);
+  writeLink(local.configRoot, { ...link2, lastSyncedAt: (/* @__PURE__ */ new Date()).toISOString() });
+  console.log(`Synced ${link2.agentId}.`);
   await confirmAndVaultSecrets(local.secretCandidates, opts.yes ?? false);
-  if (opts.open) openBrowser(`${apiBase()}/agents/${link.agentId}`);
+  if (opts.open) openBrowser(`${apiBase()}/agents/${link2.agentId}`);
 }
 async function clone(opts) {
   const harness2 = detectHarness(opts.harness);
   const local = readLocal(harness2);
-  const link = opts.new ? void 0 : readLink(local.configRoot);
-  if (link) await syncClone(local, link, opts);
+  const link2 = opts.new ? void 0 : readLink(local.configRoot);
+  if (link2) await syncClone(local, link2, opts);
   else await createClone(local, opts);
 }
 
 // src/import-local.ts
-import { closeSync as closeSync3, existsSync as existsSync5, openSync as openSync3, readdirSync as readdirSync4, readFileSync as readFileSync8, readSync as readSync3, statSync as statSync5 } from "fs";
+import { closeSync as closeSync3, existsSync as existsSync6, openSync as openSync3, readdirSync as readdirSync4, readFileSync as readFileSync8, readSync as readSync3, statSync as statSync5 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join7 } from "path";
 import { createHash as createHash3 } from "crypto";
 
 // src/import-files.ts
 import { isUtf8 } from "buffer";
-import { existsSync as existsSync4, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
 import { homedir as homedir3 } from "os";
 import { dirname as dirname4, extname as extname2, isAbsolute, join as join5, relative as relative2, resolve as resolve4, sep as sep2, basename as basename5 } from "path";
 
 // src/import-workspace.ts
 import { spawnSync } from "child_process";
-import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync5, realpathSync, statSync as statSync3 } from "fs";
+import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync5, realpathSync, statSync as statSync3 } from "fs";
 import { homedir as homedir2 } from "os";
 import { basename as basename4, dirname as dirname3, join as join4, relative, sep } from "path";
 import { parse as parseToml2 } from "smol-toml";
 var MAX_TREE = 5e3;
-var SKILL_LINE = /Base directory for this skill: (\/[^\s"'\\<>]+)/g;
+var SKILL_LINE = /Base directory for this skill: (\/[^\n\r"'\\<>]+)/g;
 function git(cwd, ...args) {
   const run2 = spawnSync("git", ["-C", cwd, ...args], { encoding: "utf8", timeout: 1e4, maxBuffer: 32 * 1024 * 1024 });
   return run2.status === 0 ? run2.stdout : null;
@@ -1046,8 +1163,7 @@ function skillRoots(cwd, home) {
   ];
 }
 function pluginSkill(plugin, skill, home) {
-  const base = join4(process.env.CLAUDE_CONFIG_DIR ?? join4(home, ".claude"), "plugins");
-  const walk = (dir, depth) => {
+  const walk = (dir, depth, underPlugin) => {
     if (depth > 7) return null;
     let entries;
     try {
@@ -1058,13 +1174,13 @@ function pluginSkill(plugin, skill, home) {
     for (const entry2 of entries) {
       if (!entry2.isDirectory() || entry2.name === "node_modules" || entry2.name === ".git") continue;
       const path = join4(dir, entry2.name);
-      if (entry2.name === skill && basename4(dir) === "skills" && path.includes(`${sep}${plugin}${sep}`) && isFile(join4(path, "SKILL.md"))) return path;
-      const found = walk(path, depth + 1);
+      if (entry2.name === skill && basename4(dir) === "skills" && (underPlugin || path.includes(`${sep}${plugin}${sep}`)) && isFile(join4(path, "SKILL.md"))) return realpathSync(path);
+      const found = walk(path, depth + 1, underPlugin);
       if (found) return found;
     }
     return null;
   };
-  return walk(base, 0);
+  return walk(join4(process.env.CLAUDE_CONFIG_DIR ?? join4(home, ".claude"), "plugins"), 0, false) ?? walk(join4(home, "Library", "Application Support", "Claude", "local-agent-mode-sessions", "skills-plugin"), 0, true);
 }
 function findSkill(name, cwd, home) {
   const [scope, skill] = name.includes(":") ? name.split(":", 2) : [null, name];
@@ -1084,23 +1200,24 @@ function loadedSkills(records, touched, cwd, home = homedir2()) {
     if (![...dirs.values()].includes(real)) dirs.set(name, real);
     return true;
   };
+  const called = [];
   for (const record of records) {
     const texts = [];
     strings(record, texts);
-    for (const text of texts) for (const match of text.matchAll(SKILL_LINE)) add(match[1].replace(/[.,;:)]+$/, ""));
+    for (const text of texts) for (const match of text.matchAll(SKILL_LINE)) add(match[1].trim().replace(/[.,;:)]+$/, ""));
     const content = record?.message?.content;
     if (!Array.isArray(content)) continue;
     for (const block of content) {
       const b = block;
-      if (b?.type !== "tool_use" || b.name !== "Skill" || typeof b.input?.skill !== "string") continue;
-      const name = b.input.skill.replace(/^\//, "");
-      if (!name || dirs.has(name) || [...dirs.keys()].some((key) => key.endsWith(`:${name}`) || name.endsWith(`:${key}`))) continue;
-      const dir = findSkill(name, cwd, home);
-      if (!dir || !add(dir, name)) missing.add(name);
+      if (b?.type === "tool_use" && b.name === "Skill" && typeof b.input?.skill === "string") called.push(b.input.skill.replace(/^\//, ""));
     }
   }
   for (const path of touched) if (basename4(path) === "SKILL.md") add(dirname3(path));
-  for (const name of dirs.keys()) missing.delete(name);
+  for (const name of called) {
+    if (!name || dirs.has(name) || [...dirs.keys()].some((key) => key.endsWith(`:${name}`) || name.endsWith(`:${key}`))) continue;
+    const dir = findSkill(name, cwd, home);
+    if (!dir || !add(dir, name)) missing.add(name);
+  }
   return { found: [...dirs].map(([name, dir]) => ({ name: name.replace(/[^A-Za-z0-9._:-]/g, "-"), dir })), missing: [...missing] };
 }
 function readJson2(path) {
@@ -1224,7 +1341,7 @@ function skillFiles(skill) {
       else if (entry2.isFile()) out.push({ path, name: `skills/${skill.name}/${relative(skill.dir, path).split(sep).join("/")}` });
     }
   };
-  if (existsSync3(skill.dir)) walk(skill.dir, 0);
+  if (existsSync4(skill.dir)) walk(skill.dir, 0);
   return out;
 }
 function codexThreadName(sessionId, home = homedir2()) {
@@ -1350,13 +1467,13 @@ function touchedPaths(records, cwd, home = homedir3()) {
 }
 function gitRoot(dir) {
   for (let d = dir; ; d = dirname4(d)) {
-    if (existsSync4(join5(d, ".git"))) return d;
+    if (existsSync5(join5(d, ".git"))) return d;
     if (d === dirname4(d)) return null;
   }
 }
 function instructionPaths(cwd, harness2, home = homedir3()) {
   const out = [];
-  if (cwd && existsSync4(cwd)) {
+  if (cwd && existsSync5(cwd)) {
     const root = gitRoot(cwd) ?? cwd;
     for (let d = resolve4(cwd); ; d = dirname4(d)) {
       for (const name of INSTRUCTION_FILES) out.push(join5(d, name));
@@ -1879,7 +1996,7 @@ function sniffTitle(filePath) {
 function listClaudeCodeSessions(limit) {
   const root = process.env.CLAUDE_CONFIG_DIR ?? join7(homedir4(), ".claude");
   const projectsDir = join7(root, "projects");
-  if (!existsSync5(projectsDir)) return [];
+  if (!existsSync6(projectsDir)) return [];
   const sessions = [];
   try {
     for (const encoded of readdirSync4(projectsDir)) {
@@ -1905,7 +2022,7 @@ function listClaudeCodeSessions(limit) {
         let discoveryError;
         const subagentFiles = [];
         const subagentDir = join7(projectDir, sessionId, "subagents");
-        if (existsSync5(subagentDir)) {
+        if (existsSync6(subagentDir)) {
           try {
             const subFiles = readdirSync4(subagentDir).filter((f) => f.endsWith(".jsonl")).sort();
             for (const f of subFiles) {
@@ -2183,7 +2300,7 @@ async function importSession(opts) {
   }
   const result = await response.json();
   const finalTraceId = result.traceId ?? traceId;
-  const environment = opts.files === false || opts.environment === false || !cwd || !existsSync5(cwd) ? null : await uploadEnvironment(base, key, finalTraceId, cwd, resourceLines, opts.onProgress).catch((error) => ({ error: error instanceof Error ? error.message : String(error) }));
+  const environment = opts.files === false || opts.environment === false || !cwd || !existsSync6(cwd) ? null : await uploadEnvironment(base, key, finalTraceId, cwd, resourceLines, opts.onProgress).catch((error) => ({ error: error instanceof Error ? error.message : String(error) }));
   return {
     traceId: finalTraceId,
     url: `${base}/playground/new?import=${encodeURIComponent(finalTraceId)}`,
@@ -2296,7 +2413,7 @@ import { hostname } from "os";
 import { spawn as spawn2 } from "child_process";
 
 // src/mcp-register.ts
-import { existsSync as existsSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
 import { spawnSync as spawnSync3 } from "child_process";
 import { homedir as homedir6 } from "os";
 import { join as join10 } from "path";
@@ -2304,7 +2421,7 @@ import { parse as parseToml3 } from "smol-toml";
 import { isMap, parseDocument } from "yaml";
 
 // src/local-agents.ts
-import { existsSync as existsSync6 } from "fs";
+import { existsSync as existsSync7 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join8 } from "path";
 function localAgents(env = process.env, home = homedir5()) {
@@ -2318,7 +2435,7 @@ function localAgents(env = process.env, home = homedir5()) {
   ];
 }
 function detectLocalAgents(env = process.env, home = homedir5()) {
-  return localAgents(env, home).filter((agent2) => existsSync6(agent2.root));
+  return localAgents(env, home).filter((agent2) => existsSync7(agent2.root));
 }
 function selectLocalAgents(ids, env = process.env, home = homedir5()) {
   if (!ids?.length) return detectLocalAgents(env, home);
@@ -2441,6 +2558,12 @@ Details: \`${REFERENCES_DIR}/workspaces.md\` in this skill's folder.
   cheaper or different agent to get around a refusal.
 - \`get_usage\` shows the balance; check it before starting several cloud sessions
   at once so the person is told once, up front, instead of after the first fails.
+- Anything else the person can do on agentsky.dev or in the Mac app (rename or
+  archive a thread, edit a Library file or skill, change an agent's model, invite
+  a member, \u2026) is an API operation: find it with \`search_api\`, read its
+  parameters with \`describe_api\`, and run it with \`call_api\`. It acts as the
+  person with their own key, so make only the change they asked for. Where MCP
+  is missing, \`sky api search <words>\` and \`sky api <METHOD> <path>\` do the same.
 
 ## How to pick
 
@@ -2828,7 +2951,7 @@ function installSkill(agent2, opts = {}) {
 var MCP_SERVER_NAME = SKILL_NAME;
 function detectHermes(env = process.env, home = homedir6()) {
   const root = env.HERMES_HOME || join10(home, ".hermes");
-  return existsSync7(root) ? { id: "hermes", name: "Hermes", root } : null;
+  return existsSync8(root) ? { id: "hermes", name: "Hermes", root } : null;
 }
 function detectMcpClients(env = process.env, home = homedir6()) {
   const hermes = detectHermes(env, home);
@@ -2988,7 +3111,7 @@ function refreshMcpRegistrations(opts, clients = detectMcpClients(), runner = sy
 }
 
 // src/shell-env.ts
-import { appendFileSync, existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "fs";
+import { appendFileSync, existsSync as existsSync9, mkdirSync as mkdirSync3, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir7 } from "os";
 import { basename as basename6, dirname as dirname5, join as join11 } from "path";
 var TOKEN_ENV = "AGENTSKY_API_KEY";
@@ -3004,13 +3127,13 @@ function shellStartupFiles(env = process.env, home = homedir7(), platform = proc
   const shell = basename6(env.SHELL ?? "");
   const files2 = [];
   const zshenv = join11(env.ZDOTDIR || home, ".zshenv");
-  if (shell === "zsh" || platform === "darwin" || existsSync8(zshenv)) files2.push({ path: zshenv, kind: "sh" });
+  if (shell === "zsh" || platform === "darwin" || existsSync9(zshenv)) files2.push({ path: zshenv, kind: "sh" });
   const bashrc = join11(home, ".bashrc");
-  if (shell === "bash" || existsSync8(bashrc)) files2.push({ path: bashrc, kind: "sh" });
+  if (shell === "bash" || existsSync9(bashrc)) files2.push({ path: bashrc, kind: "sh" });
   const bashProfile = join11(home, ".bash_profile");
-  if (existsSync8(bashProfile)) files2.push({ path: bashProfile, kind: "sh" });
+  if (existsSync9(bashProfile)) files2.push({ path: bashProfile, kind: "sh" });
   const fish = join11(env.XDG_CONFIG_HOME || join11(home, ".config"), "fish");
-  if (shell === "fish" || existsSync8(fish)) files2.push({ path: join11(fish, "conf.d", "agentsky.fish"), kind: "fish" });
+  if (shell === "fish" || existsSync9(fish)) files2.push({ path: join11(fish, "conf.d", "agentsky.fish"), kind: "fish" });
   return files2;
 }
 function writeShellEnv(token, opts = {}) {
@@ -3026,7 +3149,7 @@ function writeShellEnv(token, opts = {}) {
     writeFileSync6(fish, `${header2}${token ? `set -gx ${TOKEN_ENV} ${quoted(token)}` : `set -e ${TOKEN_ENV}`}
 `, { mode: 384 });
     for (const file of startup) {
-      const existing = existsSync8(file.path) ? readFileSync11(file.path, "utf8") : "";
+      const existing = existsSync9(file.path) ? readFileSync11(file.path, "utf8") : "";
       if (existing.includes(HOOK_MARK)) continue;
       const line = file.kind === "fish" ? `${HOOK_MARK}
 test -f ${quoted(fish)}; and source ${quoted(fish)}
@@ -3397,12 +3520,42 @@ function clip(value, max = 120) {
   const text = typeof value === "string" ? value : JSON.stringify(value);
   return text.length > max ? `${text.slice(0, max)}\u2026` : text;
 }
-function renderEvent(event, data) {
+function createEventRenderer(out = process.stdout) {
+  const seen = /* @__PURE__ */ new Set();
+  let openStream = null;
+  const closeLine = () => {
+    if (openStream === null) return;
+    out.write("\n");
+    openStream = null;
+  };
+  return (event, data) => {
+    const id = typeof data.id === "string" ? data.id : void 0;
+    if (id) {
+      if (seen.has(id)) return;
+      seen.add(id);
+    }
+    if (event !== "agent.message") {
+      if (event && event !== "keepalive") closeLine();
+      renderOther(event, data);
+      return;
+    }
+    const parts = Array.isArray(data.parts) ? data.parts : [];
+    const streamId = typeof parts[0]?.stream_id === "string" ? parts[0].stream_id : null;
+    const text = String(data.text ?? "");
+    if (streamId === null) {
+      closeLine();
+      out.write(`${text}
+`);
+    } else {
+      if (openStream !== streamId) closeLine();
+      out.write(text);
+      openStream = streamId;
+    }
+  };
+}
+function renderOther(event, data) {
   const part = data.part;
   switch (event) {
-    case "agent.message":
-      console.log(String(data.text ?? ""));
-      break;
     case "agent.reasoning":
       console.log(dim(`\xB7 ${clip(part?.text ?? "")}`));
       break;
@@ -3434,11 +3587,12 @@ function renderEvent(event, data) {
 }
 
 // src/session-read.ts
-var TURN_TYPES = ["user.message", "agent.message", "session.status_idle", "session.status_terminated", "session.error"];
+var TURN_STARTS = /* @__PURE__ */ new Set(["user.message", "goal.defined", "goal.iteration"]);
+var TURN_TYPES = [...TURN_STARTS, "agent.message", "session.status_idle", "session.status_terminated", "session.error"];
 function latestTurn(events) {
   let start = 0;
   for (let index = events.length - 1; index >= 0; index -= 1) {
-    if (events[index].type === "user.message") {
+    if (TURN_STARTS.has(events[index].type)) {
       start = index + 1;
       break;
     }
@@ -3485,7 +3639,7 @@ import { createInterface as createInterface3 } from "readline";
 
 // src/setup-local.ts
 import { isUtf8 as isUtf83 } from "buffer";
-import { existsSync as existsSync9, readdirSync as readdirSync6, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync6, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
 import { homedir as homedir8 } from "os";
 import { dirname as dirname6, isAbsolute as isAbsolute2, join as join13, resolve as resolve6 } from "path";
 import { parse as parseToml4 } from "smol-toml";
@@ -3526,7 +3680,7 @@ function readLocalSkills(agents) {
   const skills2 = [];
   const ignored = [];
   for (const agent2 of agents) {
-    if (!existsSync9(agent2.skillsDir)) continue;
+    if (!existsSync10(agent2.skillsDir)) continue;
     for (const entry2 of readdirSync6(agent2.skillsDir, { withFileTypes: true })) {
       const dir = join13(agent2.skillsDir, entry2.name);
       let isDir2 = entry2.isDirectory();
@@ -3537,7 +3691,7 @@ function readLocalSkills(agents) {
           isDir2 = false;
         }
       }
-      if (!isDir2 || !existsSync9(join13(dir, "SKILL.md")) || isInstalledSkill(dir)) continue;
+      if (!isDir2 || !existsSync10(join13(dir, "SKILL.md")) || isInstalledSkill(dir)) continue;
       const name = frontmatterName(readFileSync12(join13(dir, "SKILL.md"), "utf8"));
       if (!name) {
         ignored.push({ agent: agent2.id, dir, reason: "SKILL.md has no name" });
@@ -3644,7 +3798,7 @@ function findLocalSecrets(agents, home = homedir8()) {
 
 // src/subscriptions.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync13 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join14 } from "path";
 import { createInterface as createInterface2 } from "readline";
@@ -3743,7 +3897,7 @@ async function connectClaude() {
 }
 function codexSignIn(env = process.env, home = homedir9()) {
   const path = join14(env.CODEX_HOME || join14(home, ".codex"), "auth.json");
-  if (!existsSync10(path)) {
+  if (!existsSync11(path)) {
     throw new ApiError(404, "no_codex_auth", `no ${path} \u2014 run \`codex login\` first`);
   }
   const raw = readFileSync13(path, "utf8");
@@ -3756,7 +3910,7 @@ function codexSignIn(env = process.env, home = homedir9()) {
 }
 function cursorSignIn(env = process.env, home = homedir9()) {
   const path = join14(env.XDG_CONFIG_HOME || join14(home, ".config"), "cursor", "auth.json");
-  if (!existsSync10(path)) {
+  if (!existsSync11(path)) {
     throw new ApiError(404, "no_cursor_auth", `no ${path} \u2014 run \`cursor-agent login\` first`);
   }
   const raw = readFileSync13(path, "utf8");
@@ -3878,7 +4032,9 @@ async function subscriptionUsage(name, account) {
   return usage;
 }
 function renderSubscriptionUsage(name, usage) {
-  const label = MODEL_SUBSCRIPTION_PROVIDER_NAME[managedProviderFor(name)];
+  const provider = managedProviderFor(name);
+  const label = MODEL_SUBSCRIPTION_PROVIDER_NAME[provider];
+  if (usage.status === "unavailable" && (usage.reason === "unsupported" || provider === "anthropic" && usage.reason === "permission")) return [`${label}: usage isn't available for this account type`];
   if (usage.status === "unavailable") return [`${label}: usage unavailable (${usage.reason ?? "unknown"})`];
   const head = [`${label}${usage.plan ? ` ${usage.plan}` : ""}`, usage.allowed === false ? "limit reached" : null].filter(Boolean).join(" \xB7 ");
   const rows = usage.windows.map(
@@ -4353,12 +4509,25 @@ async function getSkillUsage(since) {
   const qs = since ? `?since=${encodeURIComponent(since)}` : "";
   return api("GET", `/skills/usage${qs}`);
 }
+function nextSkills(current, skillId, verb) {
+  const has = current.some((ref) => ref.type === "skill" && ref.skillId === skillId);
+  if (verb === "attach") return has ? null : [...current, { type: "skill", skillId, version: "latest" }];
+  return has ? current.filter((ref) => !(ref.type === "skill" && ref.skillId === skillId)) : null;
+}
+async function setAgentSkill(agentId, skillId, verb) {
+  const path = `/agents/${encodeURIComponent(agentId)}`;
+  const { agent: agent2 } = await api("GET", path);
+  const skills2 = nextSkills(agent2.skills ?? [], skillId, verb);
+  if (!skills2) return "unchanged";
+  await api("PATCH", path, { skills: skills2, expectedVersion: agent2.version });
+  return "changed";
+}
 
 // src/task-export.ts
 import { createHash as createHash6 } from "crypto";
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync8 } from "fs";
 import { dirname as dirname8, join as join17 } from "path";
-import { stringify as stringifyToml2 } from "smol-toml";
+import { stringify as stringifyToml } from "smol-toml";
 var TEXT_MAX = 2e4;
 function scrub(text, names2) {
   let out = redactPlainText(text).text;
@@ -4536,7 +4705,7 @@ Write your deliverables under /workspace/outputs.
 `);
   out.set(
     "task.toml",
-    stringifyToml2({
+    stringifyToml({
       metadata: {
         name: `agentsky-${idHash}`,
         tier: opts.tier,
@@ -4961,6 +5130,44 @@ function renderBrowserProfile(profile) {
   return lines.join("\n");
 }
 
+// src/mac.ts
+var REACH_KINDS = ["folder", "browser", "screen", "host"];
+var OPEN = /* @__PURE__ */ new Set(["pending", "asking"]);
+var MAX_WAIT_SECONDS = 25;
+async function listMacs() {
+  return (await api("GET", "/desktop/machines")).machines;
+}
+async function askMac(machine, kind, reason) {
+  if (!REACH_KINDS.includes(kind)) throw new Error(`kind must be one of ${REACH_KINDS.join(", ")}`);
+  return api("POST", `/desktop/machines/${encodeURIComponent(machine)}/reach-requests`, { kind, reason });
+}
+async function readReachRequest(id, waitSeconds = 0) {
+  const wait = Math.min(Math.max(Math.floor(waitSeconds), 0), MAX_WAIT_SECONDS);
+  return (await api("GET", `/desktop/reach-requests/${encodeURIComponent(id)}${wait ? `?wait=${wait}` : ""}`)).reach_request;
+}
+async function waitForAnswer(id, budgetSeconds) {
+  const until = Date.now() + budgetSeconds * 1e3;
+  for (; ; ) {
+    const left = Math.ceil((until - Date.now()) / 1e3);
+    const request = await readReachRequest(id, Math.max(left, 0));
+    if (!OPEN.has(request.status) || left <= 0) return request;
+  }
+}
+async function takeBack(mount) {
+  await api("DELETE", `/desktop/mounts/${encodeURIComponent(mount)}`);
+}
+function renderMac(mac2) {
+  const lends = mac2.reach ? mac2.reach.kinds.join(", ") || "nothing" : "unknown (update the Mac app)";
+  const screen = mac2.reach && !mac2.reach.kinds.includes("screen") ? `  screen: ${mac2.reach.screen}` : "";
+  const lines = [`${mac2.id}  ${mac2.name}  ${mac2.online ? "online" : "offline"}  can lend: ${lends}${screen}`];
+  for (const mount of mac2.mounts ?? []) lines.push(`  ${mount.id}  ${mount.kind.padEnd(7)}  ${mount.root ?? mount.label}`);
+  return lines.join("\n");
+}
+function renderReachRequest(request) {
+  if (request.status === "granted" && request.mount) return `${request.id}  granted  ${request.mount.id} (${request.mount.kind}${request.mount.root ? ` ${request.mount.root}` : ""})`;
+  return `${request.id}  ${request.status}${request.error ? `  ${request.error.code}: ${request.error.message}` : ""}`;
+}
+
 // src/compare.ts
 async function listComparisons(opts = {}) {
   const qs = opts.archived ? "?archived=true" : "";
@@ -4981,6 +5188,53 @@ async function listThreads2(opts = {}) {
   const { threads } = await api("GET", `/threads${qs}`);
   return threads;
 }
+async function startThread(body) {
+  return api("POST", "/threads", body);
+}
+var threadPath = (id) => `/threads/${encodeURIComponent(id)}`;
+async function getThread(id) {
+  return api("GET", threadPath(id));
+}
+async function organizeThread(id, change) {
+  return api("PATCH", threadPath(id), change);
+}
+async function deleteThread(id) {
+  return api("DELETE", threadPath(id));
+}
+async function sendThreadMessage(id, body) {
+  return api("POST", `${threadPath(id)}/messages`, body);
+}
+async function addThreadAgent(id, body) {
+  return api("POST", `${threadPath(id)}/agents`, body);
+}
+async function removeThreadAgent(id, columnId) {
+  return api("DELETE", `${threadPath(id)}/agents/${encodeURIComponent(columnId)}`);
+}
+async function interruptThread(id, columnId) {
+  return api("POST", `${threadPath(id)}/interrupt`, columnId ? { columnId } : {});
+}
+async function forkThread(id, body) {
+  return api("POST", `${threadPath(id)}/fork`, body);
+}
+async function changeThreadModel(id, change, columnId) {
+  return api("PATCH", `${threadPath(id)}/engine${columnId ? `?column=${encodeURIComponent(columnId)}` : ""}`, change);
+}
+async function searchThreads(q, opts = {}) {
+  const params = new URLSearchParams({ q, ...opts.threads ? { threads: opts.threads } : {}, ...opts.cursor ? { cursor: opts.cursor } : {} });
+  return api("GET", `/threads/search?${params}`);
+}
+async function threadOptions() {
+  return api("GET", "/threads/options");
+}
+async function joinThread(sessionId) {
+  return api("POST", "/threads/joinable", { sessionId });
+}
+async function listProjects() {
+  return api("GET", "/projects");
+}
+async function rememberProject(project2) {
+  return api("PUT", "/projects", { project: project2 });
+}
 function renderComparisonSummary(c) {
   const agents = c.agents.map((a) => `${a.agentType}/${a.llm}`).join(" vs ");
   const status = c.statusLine ?? c.attention ?? (c.archived ? "archived" : "active");
@@ -4993,8 +5247,202 @@ function renderThreadSummary(t) {
   return `${t.id.slice(0, 12)}  ${flag}${t.title.slice(0, 40).padEnd(44)} [${agents}]  ${status}`;
 }
 
+// src/library.ts
+var artifactPath = (id) => `/library/artifacts/${encodeURIComponent(id)}`;
+async function listLibrary(query = {}) {
+  const params = new URLSearchParams(Object.entries(query).filter((entry2) => Boolean(entry2[1])));
+  const qs = params.size ? `?${params}` : "";
+  return api("GET", `/library/artifacts${qs}`);
+}
+async function uploadToLibrary(file, requestId, workspace2) {
+  const form = new FormData();
+  form.append("file", new Blob([new Uint8Array(file.bytes)], { type: file.mediaType }), file.name);
+  form.append("requestId", requestId);
+  if (workspace2) form.append("workspace", workspace2);
+  return apiForm("POST", "/library/artifacts", form);
+}
+async function getLibraryArtifact(id) {
+  return api("GET", artifactPath(id));
+}
+async function deleteLibraryArtifact(id, revision) {
+  return api("DELETE", artifactPath(id), { revision });
+}
+async function shareLibraryArtifact(id, enabled) {
+  const { currentVersion } = await getLibraryArtifact(id);
+  return api("PATCH", `${artifactPath(id)}/share`, { enabled, revision: currentVersion });
+}
+async function placeLibraryArtifact(id, workspace2) {
+  return api("PATCH", `${artifactPath(id)}/workspace`, { workspace: workspace2 });
+}
+async function downloadLibraryArtifact(id, version) {
+  return apiBytes("GET", `${artifactPath(id)}/download${version ? `?version=${version}` : ""}`);
+}
+function renderLibraryArtifact(artifact2) {
+  const version = artifact2.currentVersion ? `v${artifact2.currentVersion}` : "";
+  return `${artifact2.id}  ${artifact2.name}  ${version}${artifact2.shared ? "  shared" : ""}`;
+}
+
+// src/api-command.ts
+import { readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
+var API_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
+function readData(data, stdin = () => readFileSync16(0, "utf8")) {
+  if (data === void 0) return void 0;
+  const raw = data === "-" ? stdin() : data.startsWith("@") ? readFileSync16(data.slice(1), "utf8") : data;
+  try {
+    JSON.parse(raw);
+  } catch {
+    throw new Error("--data must be JSON (inline, @file or - for stdin)");
+  }
+  return raw;
+}
+function requestPath(path, query = []) {
+  if (!path.startsWith("/") || path.startsWith("//")) throw new Error("path must start with /, e.g. /threads");
+  const clean = path.replace(/^\/v1(?=\/)/, "");
+  const params = new URLSearchParams();
+  for (const pair of query) {
+    const at = pair.indexOf("=");
+    if (at <= 0) throw new Error(`--query needs key=value, got "${pair}"`);
+    params.append(pair.slice(0, at), pair.slice(at + 1));
+  }
+  const sep3 = clean.includes("?") ? "&" : "?";
+  const encoded = params.toString();
+  return encoded ? `${clean}${sep3}${encoded}` : clean;
+}
+function matchOperations(doc, words) {
+  const needles = words.map((w) => w.toLowerCase());
+  const out = [];
+  for (const [path, item] of Object.entries(doc.paths ?? {})) {
+    for (const [method, op] of Object.entries(item)) {
+      if (!API_METHODS.includes(method.toUpperCase())) continue;
+      const hay = `${method} ${path} ${op.summary ?? ""} ${op.operationId ?? ""}`.toLowerCase();
+      if (needles.every((n) => hay.includes(n))) out.push({ method: method.toUpperCase(), path, summary: op.summary, operationId: op.operationId });
+    }
+  }
+  return out.sort((a, b) => a.path.localeCompare(b.path) || a.method.localeCompare(b.method));
+}
+async function searchApi(words) {
+  const res = await apiRaw("GET", "/openapi.json", { auth: false });
+  if (!res.ok) throw new Error(`could not read the API reference (${res.status})`);
+  const ops = matchOperations(await res.json(), words);
+  if (!ops.length) {
+    console.log("no operations match");
+    return;
+  }
+  for (const op of ops) console.log(`${op.method.padEnd(6)} ${op.path}${op.summary ? `  \u2014 ${op.summary}` : ""}`);
+}
+async function callApi(method, path, opts) {
+  const verb = method.toUpperCase();
+  if (!API_METHODS.includes(verb)) throw new Error(`method must be one of ${API_METHODS.join(", ")} or "search"`);
+  const body = readData(opts.data);
+  if (body !== void 0 && verb === "GET") throw new Error("a GET takes no --data; use --query");
+  const res = await apiRaw(verb, requestPath(path, opts.query), { body, idempotencyKey: opts.idempotencyKey, universe: opts.workspace });
+  const type = res.headers.get("content-type") ?? "";
+  if (opts.output) {
+    writeFileSync9(opts.output, new Uint8Array(await res.arrayBuffer()));
+    console.error(`${res.status} \u2192 ${opts.output}`);
+  } else if (/json/.test(type)) {
+    const text = await res.text();
+    let printed = text;
+    try {
+      printed = JSON.stringify(JSON.parse(text), null, 2);
+    } catch {
+    }
+    (res.ok ? console.log : console.error)(printed);
+  } else if (/^text\/|xml|csv|markdown/.test(type) || !type) {
+    (res.ok ? console.log : console.error)(await res.text());
+  } else {
+    console.error(`${res.status}: ${type} body (${res.headers.get("content-length") ?? "?"} bytes); pass --output <file> to save it`);
+  }
+  if (!res.ok && res.status !== 304) process.exitCode = 1;
+}
+
+// src/billing-plans.ts
+var readCodingPlan = () => api("GET", "/billing/coding-plan");
+function joinCodingPlan(dollars2, requestId) {
+  const amount = Number(dollars2.trim().replace(/^\$/, ""));
+  if (!Number.isInteger(amount) || amount <= 0) throw new Error(`<dollars> must be whole dollars, got ${JSON.stringify(dollars2)}`);
+  return api("POST", "/billing/coding-plan", { amount_usd: amount, request_id: requestId });
+}
+var cancelCodingPlan = () => api("DELETE", "/billing/coding-plan");
+function renderCodingPlan(plan) {
+  if (!plan.active) {
+    const lines2 = [`coding plan: not a member (enrollment ${plan.enrollment}; monthly amounts $${plan.amounts_usd.join(", $")})`];
+    if (plan.charge_failure) lines2.push(`  last charge failed: ${plan.charge_failure}`);
+    return lines2.join("\n");
+  }
+  const until = plan.current_period_end?.slice(0, 10) ?? "?";
+  const lines = [`coding plan: $${plan.monthly_credit_usd}/month, paid until ${until}, ${plan.renews ? "renews" : "does not renew"}`];
+  if (plan.charge_failure) lines.push(`  last charge failed: ${plan.charge_failure}`);
+  return lines.join("\n");
+}
+function readRequestUsage(opts) {
+  const query = usageQuery(opts);
+  const cursor = opts.cursor ? `${query ? "&" : "?"}cursor=${encodeURIComponent(opts.cursor)}` : "";
+  return api("GET", `/billing/usage/requests${query}${cursor}`);
+}
+function renderRequestUsage(page) {
+  const lines = page.rows.map((row) => `${row.at.slice(0, 19).replace("T", " ")}  ${(row.apiKeyName ?? "").padEnd(16).slice(0, 16)} ${(row.model ?? "-").padEnd(28).slice(0, 28)} ${String(row.httpStatus ?? "-").padStart(3)} ${String(row.inputTokens ?? 0).padStart(9)} in ${String(row.outputTokens ?? 0).padStart(8)} out ${`$${(row.billedCostUsd ?? 0).toFixed(6)}`.padStart(11)}`);
+  if (!lines.length) lines.push("no API requests in this range");
+  if (page.nextCursor) lines.push(`more: --cursor ${page.nextCursor}`);
+  return lines.join("\n");
+}
+var readReferralLinks = () => api("GET", "/billing/referral-links");
+function referralLinkBody(opts) {
+  if (opts.price === void 0 === !opts.sku?.length) throw new Error("pass --price for every model, or --sku id=multiplier for each SKU, not both");
+  const body = {};
+  if (opts.price !== void 0) body.customer_multiplier = multiplier("--price", opts.price);
+  if (opts.sku?.length) {
+    body.sku_prices = opts.sku.map((pair) => {
+      const at = pair.lastIndexOf("=");
+      if (at <= 0) throw new Error(`--sku must be id=multiplier, got ${JSON.stringify(pair)}`);
+      return { sku_id: pair.slice(0, at), multiplier: multiplier("--sku", pair.slice(at + 1)) };
+    });
+  }
+  if (opts.email) body.audience_email = opts.email;
+  if (opts.uses) body.max_redemptions = wholeNumber2("--uses", opts.uses);
+  if (opts.days) body.expires_in_days = wholeNumber2("--days", opts.days);
+  return body;
+}
+var createReferralLink = (opts) => api("POST", "/billing/referral-links", referralLinkBody(opts));
+var disableReferralLink = (id) => api("POST", `/billing/referral-links/${encodeURIComponent(id)}/disable`);
+function renderReferralLinks(dashboard) {
+  const lines = [`priced from ${dashboard.source_plan.name}: customers pay at least ${Math.round(dashboard.source_plan.multiplier * 100)}% of public price`];
+  for (const link2 of dashboard.links) {
+    const state = link2.disabled_at ? "disabled" : `expires ${link2.expires_at.slice(0, 10)}`;
+    const audience = link2.audience_email ? ` for ${link2.audience_email} (${link2.email_status})` : "";
+    lines.push(`  ${link2.id}  ${Math.round(link2.customer_multiplier * 100)}%  ${link2.redeemed_count}/${link2.max_redemptions} used  ${state}${audience}`);
+    lines.push(`    ${link2.url}`);
+  }
+  if (!dashboard.links.length) lines.push("  no links yet");
+  const earned = dashboard.earnings.reduce((sum, earning) => sum + earning.amount_usd, 0);
+  lines.push(`earned $${earned.toFixed(2)} from ${dashboard.earnings.length} customer${dashboard.earnings.length === 1 ? "" : "s"}`);
+  return lines.join("\n");
+}
+function multiplier(flag, value) {
+  const trimmed = value.trim();
+  const percent = trimmed.endsWith("%");
+  const number = Number(percent ? trimmed.slice(0, -1) : trimmed);
+  if (!Number.isFinite(number) || number <= 0) throw new Error(`${flag} must be a share of public price like 0.8 or 80%, got ${JSON.stringify(value)}`);
+  return percent ? number / 100 : number;
+}
+function wholeNumber2(flag, value) {
+  if (!/^\d+$/.test(value.trim())) throw new Error(`${flag} must be a whole number, got ${JSON.stringify(value)}`);
+  return Number(value.trim());
+}
+
+// src/workspace-flag.ts
+function workspaceFlagIsCommands(argv, commandPath) {
+  let at = 0;
+  let matched = 0;
+  for (; at < argv.length && matched < commandPath.length; at += 1) {
+    if (argv[at] === commandPath[matched]) matched += 1;
+  }
+  if (matched < commandPath.length) return false;
+  return argv.slice(at).some((arg) => arg === "--workspace" || arg.startsWith("--workspace="));
+}
+
 // src/harness.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync17, writeFileSync as writeFileSync10 } from "fs";
 import { dirname as dirname9, join as join18, resolve as resolve8 } from "path";
 var HARNESS_FILE = "harness.json";
 function harnessFilePath(dir) {
@@ -5002,11 +5450,11 @@ function harnessFilePath(dir) {
 }
 function readHarnessFile(dir) {
   const path = harnessFilePath(dir);
-  if (!existsSync11(path)) {
+  if (!existsSync12(path)) {
     throw new Error(`no ${HARNESS_FILE} found in ${resolve8(dir)} \u2014 run \`sky harness init\` first`);
   }
   try {
-    return JSON.parse(readFileSync16(path, "utf8"));
+    return JSON.parse(readFileSync17(path, "utf8"));
   } catch (err) {
     throw new Error(`could not parse ${path}: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -5033,11 +5481,11 @@ var INIT_COMMENT = `# harness.json \u2014 workspace harness profile skeleton
 `;
 function harnessInit(dir) {
   const path = harnessFilePath(dir);
-  if (existsSync11(path)) {
+  if (existsSync12(path)) {
     throw new Error(`${path} already exists \u2014 delete it to re-init`);
   }
   mkdirSync6(dirname9(path), { recursive: true });
-  writeFileSync9(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
+  writeFileSync10(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
 `);
   console.log(`Created ${path}`);
   console.log(INIT_COMMENT);
@@ -5170,9 +5618,16 @@ function printModelBilling(session2) {
 }
 var program = new Command();
 program.name("sky").description("Launch and talk to long-lived agents \u2014 agentsky.dev").version(CLI_VERSION).option("--workspace <slug>", "workspace to act in (overrides sky universe switch and SKY_UNIVERSE; alias of --universe on sub-commands)");
-program.hook("preAction", () => {
+program.hook("preAction", (_root, action) => {
   const workspace2 = program.opts().workspace;
-  if (workspace2) process.env.SKY_WORKSPACE = workspace2;
+  if (!workspace2) return;
+  const path = [];
+  for (let command = action; command && command !== program; command = command.parent) path.unshift(command.name());
+  if (action.options.some((option) => option.long === "--workspace") && workspaceFlagIsCommands(process.argv.slice(2), path)) {
+    action.setOptionValue("workspace", workspace2);
+    return;
+  }
+  process.env.SKY_WORKSPACE = workspace2;
 });
 var lastProgressDecile = -1;
 function uploadProgress(sent, total) {
@@ -5207,6 +5662,9 @@ auth.command("whoami").description("who the current token acts as").action(
     console.log(
       `${who.user.email ?? "unknown"} \xB7 universe ${who.universe.slug}${who.universe.isPersonal ? " (default)" : ""} \xB7 scopes ${who.scopes.join(",")}`
     );
+    if (who.credential_universe) {
+      console.log(`  this key is fixed to workspace ${who.credential_universe}: it cannot act in other workspaces or create new ones (make an account-wide key with \`sky keys create\`, or \`sky auth login\`)`);
+    }
   })
 );
 auth.command("connect <provider>").description("connect a model subscription: claude (setup-token) or chatgpt (Codex sign-in); --browser signs any plan in on its own page").option("-y, --yes", "skip the consent prompt").option("--browser", "sign in on the provider's page instead of using this machine's sign-in (claude, chatgpt, cursor, grok, muse)").option("--account <id>", "with --browser: re-sign an additional account, or `new` to add one").option("--label <label>", "with --browser: name the account").option("--no-open", "with --browser: print the sign-in link without opening it").action(
@@ -5231,6 +5689,19 @@ auth.command("usage <provider>").description("plan allowance left on a connected
 auth.command("switch-to-credits <provider>").description("move the agents on a model subscription onto platform credits (do this before disconnecting)").option("--account <id>", "an additional account (default: the provider's first account)").option("-y, --yes", "skip the confirmation prompt").action(run(async (name, opts) => switchToCredits(name, opts)));
 auth.command("accounts").description("list connected model subscriptions and the agents they power").action(run(async () => listSubscriptions()));
 auth.command("disconnect <provider>").description("disconnect a model subscription (agents on it fail until switched)").option("-y, --yes", "skip the confirmation prompt").action(run(async (name, opts) => disconnect(name, opts)));
+auth.command("apps").description("the registered apps you let into your account, with the scopes you allowed").action(
+  run(async () => {
+    const grants = await listAppGrants();
+    if (!grants.length) console.log("No apps have access to your account.");
+    for (const grant of grants) console.log(renderAppGrant(grant));
+  })
+);
+auth.command("revoke-app <clientId>").description("remove an app's access to your account; its tokens stop working at once (admin scope)").action(
+  run(async (clientId) => {
+    await revokeAppGrant(clientId);
+    console.log(`Removed ${clientId}'s access to your account`);
+  })
+);
 var universe = program.command("universe").description("grouping boundary for agents");
 universe.command("list").action(
   run(async () => {
@@ -5277,7 +5748,7 @@ universe.command("invite <emails...>").description("invite people by email; prin
   run(async (emails, opts) => {
     const result = await invite(await workspaceSlug(opts.universe), emails, opts);
     for (const i of result.invites) console.log(`invited ${i.email} as ${i.role}  ${i.id}`);
-    for (const link of result.links) console.log(`  ${link.email} joins with: sky universe join ${link.token}`);
+    for (const link2 of result.links) console.log(`  ${link2.email} joins with: sky universe join ${link2.token}`);
     if (!result.invites.length) console.log("nobody new to invite \u2014 everyone listed is already a member");
   })
 );
@@ -5330,6 +5801,12 @@ workspace.command("list").action(
   })
 );
 workspace.command("delete <slug>").description("permanently delete a workspace you own and everything in it (asks you to type the slug)").option("-y, --yes", "skip typing the slug").action(run(deleteWorkspaceCommand));
+async function renameWorkspaceCommand(slug, name) {
+  const { universe: renamed } = await api("PATCH", `/universes/${encodeURIComponent(slug)}`, { name: name.join(" ") });
+  console.log(`${renamed.slug} is now "${renamed.name}"`);
+}
+universe.command("rename <slug> <name...>").description("rename a workspace you own (its slug stays)").action(run(renameWorkspaceCommand));
+workspace.command("rename <slug> <name...>").description("rename a workspace you own (alias of universe rename)").action(run(renameWorkspaceCommand));
 var policy = program.command("policy").description("policy rules: tool calls, spend caps, call counts, capabilities");
 async function policyScope(opts) {
   return opts.session ? { session: await resolveSessionRef(opts.session) } : { slug: await workspaceSlug(opts.universe) };
@@ -5440,7 +5917,7 @@ agent.command("destroy <id>").description("delete the spec; requires all session
     console.log(`Destroyed ${id}`);
   })
 );
-agent.command("message <id> [text]").description("send one message to the default session and stream the turn until idle").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks)").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
+agent.command("message <id> [text]").description("send one message to the default session and stream the turn until idle").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks); a file_\u2026 id attaches that stored file").option("--file-id <id...>", "attach files already uploaded (`sky files upload`), by id, without uploading again").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
   run(
     async (id, text, opts) => sendAndFollow(await resolveSessionRef(id), text ?? "", opts)
   )
@@ -5554,7 +6031,7 @@ session.command("delete <id>").description("permanently delete the session, its
     console.log(`Deleted ${id}`);
   })
 );
-session.command("message <ref> [text]").description("send one message (session id, or agent id = its default session)").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks)").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
+session.command("message <ref> [text]").description("send one message (session id, or agent id = its default session)").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks); a file_\u2026 id attaches that stored file").option("--file-id <id...>", "attach files already uploaded (`sky files upload`), by id, without uploading again").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
   run(
     async (ref, text, opts) => sendAndFollow(await resolveSessionRef(ref), text ?? "", opts)
   )
@@ -5594,12 +6071,12 @@ session.command("share <ref>").description("print the session's share link, turn
       console.log(`Sharing is off for ${id}`);
       return;
     }
-    const link = await api("POST", path, {
+    const link2 = await api("POST", path, {
       access: opts.view ? "view" : "prompt",
       ...opts.rotate ? { rotate: true } : {}
     });
-    if (link.shareUrl) console.log(link.shareUrl);
-    else console.log(`view-only token: ${link.token} \u2014 read with GET /links/${link.token}/events`);
+    if (link2.shareUrl) console.log(link2.shareUrl);
+    else console.log(`view-only token: ${link2.token} \u2014 read with GET /links/${link2.token}/events`);
   })
 );
 session.command("usage <ref>").description("what the session has cost so far, and its newest billed entries").option("--limit <n>", "entries to list (default 20)").option("--json", "print the API's answer as JSON").action(
@@ -5747,7 +6224,7 @@ sessionWorkspace.command("cat <ref> <path>").description("print a file (up to 1
   run(async (ref, path, opts) => {
     const bytes = await readFile(await resolveSessionRef(ref), path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.error(`saved ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -5764,7 +6241,7 @@ sessionWorkspace.command("patch <ref> [repo]").description("the work in a reposi
     console.error(`${meta.repo}: ${meta.commits.length} commit${meta.commits.length === 1 ? "" : "s"} since ${meta.base_branch || "the imported copy"} (${meta.base_commit.slice(0, 12)})`);
     if (!patch.length) console.error("nothing changed");
     else if (opts.out) {
-      writeFileSync10(opts.out, patch);
+      writeFileSync11(opts.out, patch);
       console.error(`wrote ${opts.out} \u2014 apply with: git apply ${opts.out}`);
     } else process.stdout.write(patch);
   })
@@ -5818,9 +6295,10 @@ function interactionMode(opts) {
 }
 async function uploadAttachments(opts) {
   const files2 = [];
-  for (const path of [...opts.image ?? [], ...opts.file ?? []]) {
-    const file = await uploadLocalFile(path);
-    console.error(`uploaded ${file.filename} \u2192 ${file.id}`);
+  const refs = [...opts.image ?? [], ...opts.file ?? []].map((ref) => ({ ref, byId: false }));
+  for (const { ref, byId } of [...refs, ...(opts.fileId ?? []).map((ref2) => ({ ref: ref2, byId: true }))]) {
+    const { file, uploaded } = await attachment(ref, { byId });
+    console.error(uploaded ? `uploaded ${file.filename} \u2192 ${file.id}` : `attaching ${file.id} (${file.filename})`);
     files2.push(file);
   }
   return files2;
@@ -5837,9 +6315,10 @@ async function sendAndFollow(sessionId, text, opts) {
   const controller = new AbortController();
   let opened = null;
   if (!opts.detach) {
+    const render = createEventRenderer();
     opened = (async () => {
       for await (const frame of streamEvents(sessionId, controller.signal)) {
-        renderEvent(frame.event, frame.data);
+        render(frame.event, frame.data);
         if (turnOver(frame)) {
           controller.abort();
           break;
@@ -5860,10 +6339,11 @@ async function chatLoop(sessionId, opts = {}) {
   const controller = new AbortController();
   const rl = createInterface6({ input: process.stdin, output: process.stdout, prompt: "> " });
   let system = opts.system;
+  const render = createEventRenderer();
   void (async () => {
     try {
       for await (const frame of streamEvents(sessionId, controller.signal)) {
-        renderEvent(frame.event, frame.data);
+        render(frame.event, frame.data);
         if (frame.event === "session.status_terminated") rl.close();
         else if (frame.event === "session.status_idle") rl.prompt();
       }
@@ -5970,10 +6450,32 @@ secrets.command("unset <id> <key>").action(
     console.log(`unset ${key}`);
   })
 );
-program.command("launch").description("scaffold ./agent.toml if absent, create the agent, print its address").option("-f, --file <path>", "agent file", "agent.toml").option("--type <type>", "override the file's harness: hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode").option("--llm <llm>", "override the file's model (must suit the harness)").action(
+async function launchFromFile(path, spec, opts) {
+  const { vcpus, memoryMb, ...specBody } = spec;
+  const body = {
+    ...specBody,
+    ...opts.type ? { agentType: opts.type } : {},
+    ...opts.llm ? { llm: opts.llm } : {}
+  };
+  const { agent: created } = await api("POST", "/agents", body);
+  const { session: session2 } = await api("POST", "/sessions", {
+    agent: created.id,
+    ...opts.start ? {} : { provision: "deferred" },
+    ...vcpus !== void 0 ? { vcpus } : {},
+    ...memoryMb !== void 0 ? { memoryMb } : {}
+  });
+  stampId(path, created.id);
+  console.log(`Launched ${created.id} (${created.agentType} \xB7 ${created.llm})`);
+  printModelBilling(session2);
+  console.log(opts.start ? "  its first session is starting now" : "  its first session starts on the first message");
+  if (!spec.llm && !opts.llm) console.log(`  model: ${created.llm}, the ${created.agentType} default \u2014 set llm = "\u2026" in ${basename9(path)} and run \`sky deploy\` to change it`);
+  console.log(`  sky agent message ${created.id} "hello"`);
+  console.log(`  sky agent chat ${created.id}`);
+}
+program.command("launch").description("scaffold ./agent.toml if absent, create the agent and its first session (idle until the first message), print its address").option("-f, --file <path>", "agent file", "agent.toml").option("--type <type>", "override the file's harness: hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode").option("--llm <llm>", "override the file's model (must suit the harness)").option("--start", "boot the first session now instead of on the first message").action(
   run(async (opts) => {
     const path = resolve9(opts.file);
-    if (!existsSync12(path)) {
+    if (!existsSync13(path)) {
       const name = basename9(process.cwd()).replace(/[^a-zA-Z0-9 _-]/g, "") || "my-agent";
       scaffoldAgentFile(path, name);
       console.log(`Scaffolded ${opts.file} \u2014 edit it anytime; re-apply with \`sky deploy\`.`);
@@ -5983,55 +6485,27 @@ program.command("launch").description("scaffold ./agent.toml if absent, create t
       console.log(`${file.id} already launched \u2014 use \`sky deploy\` to re-apply.`);
       return;
     }
-    const { vcpus, memoryMb, ...specBody } = spec;
-    const body = {
-      ...specBody,
-      ...opts.type ? { agentType: opts.type } : {},
-      ...opts.llm ? { llm: opts.llm } : {}
-    };
-    const { agent: created } = await api("POST", "/agents", body);
-    console.log("Starting its runtime\u2026");
-    const { session: session2 } = await api("POST", "/sessions", {
-      agent: created.id,
-      ...vcpus !== void 0 ? { vcpus } : {},
-      ...memoryMb !== void 0 ? { memoryMb } : {}
-    });
-    stampId(path, created.id);
-    console.log(`Launched ${created.id} (${created.agentType} \xB7 ${created.llm})`);
-    printModelBilling(session2);
-    console.log(`  sky agent message ${created.id} "hello"`);
-    console.log(`  sky agent chat ${created.id}`);
+    await launchFromFile(path, spec, opts);
   })
 );
-program.command("deploy").description("re-apply ./agent.toml to the existing agent (idempotent)").option("-f, --file <path>", "agent file", "agent.toml").action(
+program.command("deploy").description("re-apply ./agent.toml to the existing agent (idempotent: an unchanged file changes nothing)").option("-f, --file <path>", "agent file", "agent.toml").action(
   run(async (opts) => {
     const path = resolve9(opts.file);
     const { file, spec } = readAgentFile(path);
     if (!file.id) {
       console.log("No agent id in the file yet \u2014 running launch instead.");
-      const { vcpus, memoryMb, ...specBody } = spec;
-      const { agent: created } = await api("POST", "/agents", specBody);
-      await api("POST", "/sessions", {
-        agent: created.id,
-        ...vcpus !== void 0 ? { vcpus } : {},
-        ...memoryMb !== void 0 ? { memoryMb } : {}
-      });
-      stampId(path, created.id);
-      console.log(`Launched ${created.id}`);
+      await launchFromFile(path, spec, {});
       return;
     }
+    const ref = encodeURIComponent(file.id);
+    const { agent: before } = await api("GET", `/agents/${ref}`);
+    let promptChanged = false;
     if (spec.prompt !== void 0) {
-      await api("PUT", `/agents/${encodeURIComponent(file.id)}/prompt`, {
-        prompt: spec.prompt
-      });
+      const saved = await api("PUT", `/agents/${ref}/prompt`, { prompt: spec.prompt });
+      promptChanged = saved.unchanged === false;
     }
-    await api("PATCH", `/agents/${encodeURIComponent(file.id)}`, {
-      displayName: spec.displayName,
-      ...spec.capabilities ? { capabilities: spec.capabilities } : {},
-      ...spec.reasoningEffort ? { reasoningEffort: spec.reasoningEffort } : {},
-      ...spec.skills ? { skills: spec.skills } : {}
-    });
-    console.log(`Deployed ${file.id} (prompt + settings re-applied)`);
+    const { agent: after } = await api("PATCH", `/agents/${ref}`, deployPatch(spec));
+    for (const line of deployReport(file.id, spec, before, after, promptChanged)) console.log(line);
   })
 );
 program.command("clone").description("clone your local agent (Claude Code, \u2026) into the cloud; re-run to sync its prompt").option("--harness <type>", "claude_code | codex | openclaw (default: detected)").option("--new", "always launch a fresh agent, even if this machine is linked").option("--dry-run", "print the plan and send nothing").option("-y, --yes", "skip the confirmation").option("--open", "open the agent page when done").action(
@@ -6272,14 +6746,14 @@ task.command("get <task> <path>").description("read one task file; prints it, or
   run(async (taskId, path, opts) => {
     const bytes = await readTaskFile(taskId, path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
 );
 task.command("put <task> <path> <local>").description("write a local file to <path> in the task's files (every session of the task sees it)").action(
   run(async (taskId, path, local) => {
-    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync17(local), mediaTypeFor(local));
+    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync18(local), mediaTypeFor(local));
     console.log(`${renderTaskFile(file)}${conflict ? "  (replaced a version you had not seen)" : ""}`);
   })
 );
@@ -6352,7 +6826,7 @@ task.command("verdict <task> <did-the-job>").description("record whether the tas
     console.log(`Recorded verdict on task ${updated.id}: did_the_job=${value === "yes"}`);
   })
 );
-var skills = program.command("skills").description("the workspace's skill store: upload a skill, then attach it to an agent by id");
+var skills = program.command("skills").description("the workspace's skill store: upload a skill, then attach it to an agent (sky skills attach, or [[skills]] in agent.toml)");
 skills.command("upload <dir>").description("upload a skill directory (SKILL.md at its root) as a new skill").option("--name <name>", "display name (default: the directory's name)").option("--json", "print the stored skill as JSON").action(
   run(async (dir, opts) => {
     const { skill } = await uploadSkill(dir, opts.name);
@@ -6360,7 +6834,7 @@ skills.command("upload <dir>").description("upload a skill directory (SKILL.md a
       console.log(JSON.stringify(skill));
       return;
     }
-    console.log(`Uploaded ${skill.id} (${skill.displayName ?? dir}). Attach it in agent.toml:`);
+    console.log(`Uploaded ${skill.id} (${skill.displayName ?? dir}). Attach it: sky skills attach ${skill.id} --agent <id>, or in agent.toml:`);
     console.log(`  [[skills]]
   type = "skill"
   skillId = "${skill.id}"`);
@@ -6373,6 +6847,18 @@ skills.command("list").description("the workspace's stored skills").action(
     for (const skill of list) console.log(`${skill.id}  ${skill.displayName ?? ""}`);
   })
 );
+for (const [verb, blurb] of [
+  ["attach", "add a stored skill to an agent; its new sessions load it"],
+  ["detach", "remove a skill from an agent; its new sessions no longer load it"]
+]) {
+  skills.command(`${verb} <skill>`).description(blurb).requiredOption("--agent <id>", "the agent").action(
+    run(async (skillId, opts) => {
+      const outcome = await setAgentSkill(opts.agent, skillId, verb);
+      if (outcome === "unchanged") console.log(`${skillId} is ${verb === "attach" ? "already" : "not"} attached to ${opts.agent}`);
+      else console.log(`${verb === "attach" ? "Attached" : "Detached"} ${skillId} ${verb === "attach" ? "to" : "from"} ${opts.agent} \u2014 new sessions ${verb === "attach" ? "load it" : "no longer load it"}; running sessions keep the skills they started with`);
+    })
+  );
+}
 skills.command("usage").description("view and miss counts per skill name in this workspace").option("--since <iso>", `start date (ISO 8601); default is the last 30 days`).option("--json", "print JSON").action(
   run(async (opts) => {
     const summary = await getSkillUsage(opts.since);
@@ -6416,6 +6902,56 @@ reflections.command("list").description("the workspace's proposals, newest first
 );
 reflections.command("approve <id>").description("write the proposal through the skill or memory store").action(run(async (id) => decideReflection(id, "approve")));
 reflections.command("reject <id>").description("decline the proposal; nothing is written").action(run(async (id) => decideReflection(id, "reject")));
+var library = program.command("library").description("your artifact Library on agentsky.dev: files and sites your agents saved or you uploaded");
+library.command("list").description("your Library, newest first").option("--search <text>", "only names that match").option("--cursor <cursor>", "the next page").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const page = await listLibrary({ q: opts.search, cursor: opts.cursor });
+    if (opts.json) {
+      console.log(JSON.stringify(page, null, 2));
+      return;
+    }
+    if (!page.artifacts.length) console.log("no artifacts");
+    for (const a of page.artifacts) console.log(renderLibraryArtifact(a));
+    if (page.nextCursor) console.log(`more: --cursor ${page.nextCursor}`);
+  })
+);
+library.command("upload <path>").description("save a file from this computer to your Library").option("--workspace <key>", "place it in this workspace").action(
+  run(async (path, opts) => {
+    const bytes = readFileSync18(path);
+    const { artifact: artifact2 } = await uploadToLibrary({ bytes, name: basename9(path), mediaType: "application/octet-stream" }, `sky-upload-${crypto.randomUUID()}`, opts.workspace);
+    console.log(renderLibraryArtifact(artifact2));
+  })
+);
+library.command("show <id>").description("one artifact and its saved versions").action(run(async (id) => {
+  console.log(JSON.stringify(await getLibraryArtifact(id), null, 2));
+}));
+library.command("delete <id>").description("delete your artifact with all its versions").action(
+  run(async (id) => {
+    const { currentVersion } = await getLibraryArtifact(id);
+    await deleteLibraryArtifact(id, currentVersion ?? 0);
+    console.log(`deleted ${id}`);
+  })
+);
+for (const [verb, enabled, description] of [
+  ["share", true, "turn on the artifact's public link"],
+  ["unshare", false, "turn off the artifact's public link"]
+]) {
+  library.command(`${verb} <id>`).description(description).action(run(async (id) => {
+    const state = await shareLibraryArtifact(id, enabled);
+    console.log(state.url ?? `${verb}: ${id}`);
+  }));
+}
+library.command("place <id> <workspace>").description('place your artifact in a workspace, or "me" to take it back to you alone').action(run(async (id, workspace2) => {
+  await placeLibraryArtifact(id, workspace2 === "me" ? null : workspace2);
+  console.log(`placed ${id}`);
+}));
+library.command("download <id> <out>").description("save one version's bytes to a file").option("--version <n>", "a saved version (the current one when omitted)").action(
+  run(async (id, out, opts) => {
+    const { bytes } = await downloadLibraryArtifact(id, opts.version ? Number(opts.version) : void 0);
+    writeFileSync11(out, bytes);
+    console.log(`wrote ${bytes.length} bytes to ${out}`);
+  })
+);
 var artifact = program.command("artifact").description("artifacts: publish a task's files as a named, shareable result");
 artifact.command("list").description("the workspace's artifacts, or one task's with --task").option("--task <task>", "only this task's artifacts").action(
   run(async (opts) => {
@@ -6433,7 +6969,7 @@ artifact.command("get <id> <path>").description("read one file of an artifact; p
   run(async (id, path, opts) => {
     const bytes = await readArtifactFile(id, path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -6532,6 +7068,12 @@ for (const [verb, blurb] of [
     })
   );
 }
+routine.command("rm <id>").description("delete a routine: it never runs again; the sessions it started are kept").action(
+  run(async (id) => {
+    await api("DELETE", `/routines/${encodeURIComponent(id)}`);
+    console.log(`Deleted routine ${id}. It will not run again; sessions it started are kept.`);
+  })
+);
 routine.command("runs [id]").description("every fire attempt, newest first \u2014 of one routine, or all of them").option("--failed", "only runs that failed to start").option("--limit <n>", "how many (default 20)").action(
   run(async (id, opts) => {
     const params = new URLSearchParams({ limit: opts.limit ?? "20" });
@@ -6683,6 +7225,19 @@ program.command("config").description("show the CLI config location and current
   console.log(`  token:    ${config.token ? `${config.token.slice(0, 10)}\u2026` : "(none)"}`);
   console.log(`  universe: ${config.currentUniverse ?? "(default)"}`);
 });
+var link = program.command("link").description("a session someone shared with you by a guest link: send to it and stop it");
+link.command("send <link> <text...>").description("send a message through a guest link (/s/<token> URL or token); it runs and bills as the session's owner").option("--idempotency-key <key>", "repeat a send without sending twice (default: a new key)").action(
+  run(async (ref, words, opts) => {
+    await sendViaLink(ref, words.join(" "), opts.idempotencyKey ?? `sky-${crypto.randomUUID()}`);
+    console.log("Sent. Read the reply with GET /links/<token>/events.");
+  })
+);
+link.command("stop <link>").description("stop the turn running on the session a guest link opens").action(
+  run(async (ref) => {
+    await stopViaLink(ref);
+    console.log("Stopped.");
+  })
+);
 var billing = program.command("billing").description("your balance, auto top-up, usage across sessions and API keys, and buying credit");
 billing.command("show").description("balance, whether a card is saved, and auto top-up").action(
   run(async () => {
@@ -6709,6 +7264,11 @@ billing.command("topup <dollars>").description("buy credit with your saved card:
     console.log(renderTopup(result));
   })
 );
+billing.command("claim <link>").description("claim a credit invite link (agentsky.dev/i/<code>, or just the code) for your own balance").action(
+  run(async (link2) => {
+    console.log(renderCreditInviteClaim(await claimCreditInvite(link2)));
+  })
+);
 billing.command("auto-topup").description("show auto top-up, or change it: --on/--off, --threshold <5|10|20>, --amount <10|20|50|100>").option("--on", "charge the saved card when the balance falls under the threshold").option("--off", "stop charging automatically").option("--threshold <dollars>", "the balance that triggers a charge").option("--amount <dollars>", "the credit each charge adds").action(
   run(async (opts) => {
     const body = autoTopupBody(opts);
@@ -6731,13 +7291,42 @@ usageOptions(
   run(async (opts) => {
     const { bytes } = await apiBytes("GET", `/billing/usage/export${usageQuery(opts)}`);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else {
       process.stdout.write(bytes);
     }
   })
 );
+billing.command("requests").description("one row per API request your developer API keys made, newest first, a page at a time").option("--from <day>", "first UTC day, YYYY-MM-DD (default: 29 days ago)").option("--to <day>", "first UTC day not included (default: tomorrow)").option("--key <id>", "only this API key").option("--cursor <cursor>", "the next page, as printed after the previous one").option("--json", "print the API's answer as JSON").action(
+  run(async (opts) => {
+    const page = await readRequestUsage(opts);
+    console.log(opts.json ? JSON.stringify(page, null, 2) : renderRequestUsage(page));
+  })
+);
+var codingPlan = billing.command("coding-plan").description("the coding plan: monthly credit on your saved card, API gateway calls billed at cost");
+codingPlan.command("show").description("whether you are a member, the monthly amount, and whether it renews").action(run(async () => console.log(renderCodingPlan(await readCodingPlan()))));
+codingPlan.command("join <dollars>").description("join with your saved card (charged now), or change your monthly amount from the next renewal").option("--request-id <id>", "repeat a request without charging twice (default: a new id)").action(
+  run(async (dollars2, opts) => {
+    console.log(renderCodingPlan(await joinCodingPlan(dollars2, opts.requestId ?? `sky-${crypto.randomUUID()}`)));
+  })
+);
+codingPlan.command("cancel").description("stop the plan renewing; the paid month stays").action(run(async () => console.log(renderCodingPlan(await cancelCodingPlan()))));
+var referralLinks = billing.command("referral-links").description("customer discount links for the API gateway (accounts on a discount plan)");
+referralLinks.command("list").description("your links, their use, and what referred customers earned you").action(run(async () => console.log(renderReferralLinks(await readReferralLinks()))));
+referralLinks.command("create").description("create a link priced at no less than your own price; --email sends it to one customer").option("--price <share>", "what the customer pays for every model, as a share of public price: 0.8 or 80%").option("--sku <id=share>", "a price for one SKU; repeat for several", collect).option("--email <address>", "email the link to this customer; it then redeems once").option("--uses <n>", "how many customers can redeem it (default 100)").option("--days <n>", "days until it expires (default 30)").action(
+  run(async (opts) => {
+    const { url, email_status: emailStatus } = await createReferralLink(opts);
+    console.log(emailStatus ? `${url}
+email: ${emailStatus}` : url);
+  })
+);
+referralLinks.command("disable <id>").description("stop a link being redeemed; customers already enrolled keep their price").action(
+  run(async (id) => {
+    await disableReferralLink(id);
+    console.log(`Disabled ${id}`);
+  })
+);
 var keys = program.command("keys").description("your own API keys: list, create, revoke, restore (admin scope)");
 keys.command("list").action(
   run(async () => {
@@ -7058,6 +7647,48 @@ vendor.command("usage <id>").description("the agents and tasks that used this ve
     for (const t of tasks) console.log(`  task   ${t.session_id}  ${t.title ?? "(untitled)"}  ${t.last_used_at.slice(0, 10)}`);
   })
 );
+var mac = program.command("mac").description("your Macs: what each lends to agents now, and asking one for a folder, a browser window, its screen or its apps and files");
+mac.command("list").description("your Macs: online or not, what each can lend, and the folders, browser windows and screens lent now").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const macs = await listMacs();
+    if (opts.json) {
+      console.log(JSON.stringify(macs, null, 2));
+      return;
+    }
+    if (!macs.length) console.log("no Macs connected; sign in to the AgentSky Mac app");
+    for (const entry2 of macs) console.log(renderMac(entry2));
+  })
+);
+mac.command("ask <machine> <kind>").description("ask a Mac to lend a folder, a browser window, its screen or its apps and files (host: local chats, call notes, uploads, saves, local git); the person answers on the Mac. Prints the MCP URL a session attaches once it is granted").requiredOption("--reason <text>", "why, in one sentence the person reads on their Mac").option("--no-wait", "return as soon as the Mac has the ask").option("--json", "print as JSON").action(
+  run(async (machine, kind, opts) => {
+    const asked = await askMac(machine, kind, opts.reason);
+    const answer = opts.wait ? await waitForAnswer(asked.reach_request.id, 240) : asked.reach_request;
+    if (opts.json) {
+      console.log(JSON.stringify({ reach_request: answer, mcp_url: asked.mcp_url }, null, 2));
+      return;
+    }
+    console.log(renderReachRequest(answer));
+    console.log(`mcp_url: ${asked.mcp_url}`);
+    if (answer.status === "granted") console.log("attach it as an MCP server: mcp_servers on POST /v1/sessions (MCP start_session: sources), or PATCH /v1/sessions/{id}");
+    else if (!["pending", "asking"].includes(answer.status)) process.exitCode = 1;
+  })
+);
+mac.command("ask-status <id>").description("where an ask stands: pending, asking, granted, denied, unavailable or expired").option("--wait <seconds>", "wait up to this long (at most 25) for the person to answer", "0").option("--json", "print as JSON").action(
+  run(async (id, opts) => {
+    const answer = await readReachRequest(id, Number(opts.wait) || 0);
+    if (opts.json) {
+      console.log(JSON.stringify(answer, null, 2));
+      return;
+    }
+    console.log(renderReachRequest(answer));
+  })
+);
+mac.command("take-back <mount>").description("end a folder, browser window, screen or apps and files lent from a Mac; every later call to it fails").action(
+  run(async (mount) => {
+    await takeBack(mount);
+    console.log(`took back ${mount}`);
+  })
+);
 var browserProfile = program.command("browser-profile").description("saved-login profiles: the sites your agents stay signed in to");
 browserProfile.command("list").description("your workspace's browser profiles: the sites your agents stay signed in to").option("--json", "print as JSON").action(
   run(async (opts) => {
@@ -7121,10 +7752,16 @@ notifications.command("get").description("show the current notification preferen
       console.log(JSON.stringify(prefs, null, 2));
       return;
     }
-    console.log(`email:  needs_you=${prefs.email.needs_you}  done=${prefs.email.done}`);
+    console.log(`email:  needs_you=${prefs.email.needs_you}  done=${prefs.email.done}  marketing=${prefs.email.marketing}`);
     console.log(`push:   needs_you=${prefs.push.needs_you}  done=${prefs.push.done}`);
   })
 );
+notifications.command("unsubscribe-marketing").description("stop AgentSky marketing email to your address; login and account email continue").action(
+  run(async () => {
+    const { marketing } = await unsubscribeMarketing();
+    console.log(marketing ? "Marketing email is still on." : "Unsubscribed from AgentSky marketing email.");
+  })
+);
 notifications.command("set").description("update notification preferences (pass at least one flag)").option("--email-needs-you <bool>", "email when the task needs your input: true or false").option("--email-done <bool>", "email when the task finishes: true or false").option("--push-needs-you <bool>", "push notification when the task needs your input: true or false").option("--push-done <bool>", "push notification when the task finishes: true or false").action(
   run(async (opts) => {
     const parseBool = (v) => v === void 0 ? void 0 : v === "true" ? true : v === "false" ? false : (() => {
@@ -7193,6 +7830,85 @@ help.command("get <slug>").description("read a help article by its slug").option
     console.log(article.body);
   })
 );
+program.command("api <method> [path...]").description("call any AgentSky API operation (GET|POST|PUT|PATCH|DELETE <path>), or `sky api search <words\u2026>` to find one").option("-d, --data <json>", "JSON body: inline, @file, or - for stdin").option("-q, --query <key=value>", "query parameter (repeatable)", (v, acc) => [...acc, v], []).option("--workspace <slug>", "send the request in this workspace (X-Universe)").option("--idempotency-key <key>", "retry-safe key for a POST").option("-o, --output <file>", "save the body to a file (for downloads)").action(
+  run(async (method, rest, opts) => {
+    if (method.toLowerCase() === "search") return searchApi(rest);
+    if (rest.length !== 1) throw new Error("usage: sky api <METHOD> <path> (one path), or sky api search <words\u2026>");
+    return callApi(method, rest[0], opts);
+  })
+);
+agent.command("edit <id>").description("change an agent's name, engine, model or thinking level (as its Library folder does)").option("--name <name>", "new name").option("--engine <agentType>", "engine, e.g. CLAUDE_CODE, CODEX, HERMES").option("--model <llm>", "model id, e.g. anthropic/claude-sonnet-4-5").option("--thinking <effort>", 'reasoning effort, or "default" to clear the pin').action(
+  run(async (id, opts) => {
+    const body = {
+      ...opts.name ? { displayName: opts.name } : {},
+      ...opts.engine ? { agentType: opts.engine } : {},
+      ...opts.model ? { llm: opts.model } : {},
+      ...opts.thinking ? { reasoningEffort: opts.thinking === "default" ? null : opts.thinking } : {}
+    };
+    if (!Object.keys(body).length) throw new Error("pass at least one of --name, --engine, --model, --thinking");
+    const { agent: a } = await api("PATCH", `/agents/${encodeURIComponent(id)}`, body);
+    console.log(`${a.id} \u2014 ${a.displayName} \xB7 ${a.agentType} \xB7 ${a.llm}${a.reasoningEffort ? ` \xB7 ${a.reasoningEffort}` : ""}`);
+  })
+);
+skills.command("revisions <skillId>").description("a skill's saved versions, newest first").option("--json", "print as JSON").action(
+  run(async (skillId, opts) => {
+    const page = await api("GET", `/skills/${encodeURIComponent(skillId)}/revisions`);
+    const rows = page.revisions ?? [];
+    if (opts.json) return void console.log(JSON.stringify(rows, null, 2));
+    if (!rows.length) return void console.log("no versions");
+    for (const r of rows) console.log(`${r.id}  ${r.createdAt ?? r.created_at ?? ""}`);
+  })
+);
+skills.command("cat <skillId> <revisionId> <path>").description("print one file (e.g. SKILL.md) of a skill version").action(
+  run(async (skillId, revisionId, path) => {
+    const res = await apiRaw("GET", `/skills/${encodeURIComponent(skillId)}/revisions/${encodeURIComponent(revisionId)}/content?path=${encodeURIComponent(path)}`);
+    if (!res.ok) throw new ApiError(res.status, "http_error", await res.text() || `${res.status}`);
+    process.stdout.write(await res.text());
+  })
+);
+skills.command("rm <skillId>").description("delete a skill from the workspace").action(
+  run(async (skillId) => {
+    await api("DELETE", `/skills/${encodeURIComponent(skillId)}`);
+    console.log(`Deleted ${skillId}`);
+  })
+);
+var notes = program.command("notes").description("memory notes in the Library's memory stores: list, read, write (every save keeps a version)");
+notes.command("stores").description("the workspace's memory stores").action(
+  run(async () => {
+    const { memory_stores: stores } = await api("GET", "/memory_stores?limit=100");
+    if (!stores.length) return void console.log("no memory stores");
+    for (const st of stores) console.log(`${st.id}  ${st.name}`);
+  })
+);
+notes.command("list <storeId> [folder]").description("the notes in a store, optionally under a folder ending in /").action(
+  run(async (storeId, folder) => {
+    const q = folder ? `&path_prefix=${encodeURIComponent(folder)}` : "";
+    const { memories } = await api("GET", `/memory_stores/${encodeURIComponent(storeId)}/memories?limit=100${q}`);
+    if (!memories.length) return void console.log("no notes");
+    for (const n of memories) console.log(`${n.id}  ${n.path}`);
+  })
+);
+notes.command("read <storeId> <noteId>").description("print one note").action(
+  run(async (storeId, noteId) => {
+    const { memory: memory2 } = await api("GET", `/memory_stores/${encodeURIComponent(storeId)}/memories/${encodeURIComponent(noteId)}`);
+    process.stdout.write(memory2.content.endsWith("\n") ? memory2.content : `${memory2.content}
+`);
+  })
+);
+notes.command("save <storeId> <file>").description("write a note from a local file: --path creates one, --note saves a new version of one").option("--path <path>", "path of a new note, e.g. /projects/launch.md").option("--note <noteId>", "the note to update").action(
+  run(async (storeId, file, opts) => {
+    if (!opts.path === !opts.note) throw new Error("pass exactly one of --path (new note) or --note (update)");
+    const content = readFileSync18(file, "utf8");
+    const target = `/memory_stores/${encodeURIComponent(storeId)}/memories${opts.note ? `/${encodeURIComponent(opts.note)}` : ""}`;
+    const { memory: memory2 } = await api("POST", target, { content, ...opts.path ? { path: opts.path } : {} });
+    console.log(`Saved ${memory2.path} (${memory2.id})`);
+  })
+);
+workspace.command("context").description("what every session in the workspace loads at start: AGENTS.md, MEMORY.md, indexes, your member page").action(
+  run(async () => {
+    console.log(JSON.stringify(await api("GET", "/workspace-context"), null, 2));
+  })
+);
 var vault = program.command("vault").description("vaults: credentials a session is granted when it starts (values write-only)");
 vault.command("list").description("the workspace's vaults").action(
   run(async () => {
@@ -7282,7 +7998,7 @@ harness.command("connect").description("run an ACP agent (the command after --)
 }));
 var traceCmd = program.command("trace").description("correlate this machine's agent work with the cloud sessions it starts (metadata only unless you choose content)");
 traceCmd.command("start").description("start a trace: a grant for this machine, a root span, and the spool the hooks write to").option("--name <name>", "a name for the task").option("--source <source>", "how this machine reports itself", "claude-code").option("--hooks [settings]", "also install the Claude Code hooks (default: ./.claude/settings.local.json)").option("--capture <scopes>", "also send content, redacted on this machine first: any of prompts,tool_output,files").option("--file <path>", "a file the files scope may send (repeatable)", collect).option("--dir <path>", "a folder whose files the files scope may send when a file tool touches them (repeatable)", collect).action(run(async (opts) => {
-  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-PDIOL2TC.js");
+  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-CFHCOGKB.js");
   if (readState()) throw new Error("a trace is already running here \u2014 `sky trace stop` it first");
   const scopes = parseContentScopes(opts.capture);
   const chosen = chosenPaths(opts.file ?? [], opts.dir ?? []);
@@ -7317,7 +8033,7 @@ traceCmd.command("start").description("start a trace: a grant for this machine,
 }));
 traceCmd.command("hook").description("record one Claude Code hook event read from stdin (run by the installed hooks; never fails, prints nothing)").action(async () => {
   try {
-    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-PDIOL2TC.js");
+    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-CFHCOGKB.js");
     const chunks = [];
     for await (const chunk of process.stdin) chunks.push(chunk);
     const input = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
@@ -7330,14 +8046,14 @@ traceCmd.command("hook").description("record one Claude Code hook event read fro
   }
 });
 traceCmd.command("flush").description("send what the spool holds, retrying with backoff").action(run(async () => {
-  const { readState, flush, grantSender } = await import("./trace-PDIOL2TC.js");
+  const { readState, flush, grantSender } = await import("./trace-CFHCOGKB.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   const outcome = await flush(grantSender(state), { attempts: 4 });
   console.log(`sent ${outcome.sent}, refused ${outcome.refused}, given up ${outcome.expired}, still pending ${outcome.pending}${outcome.stopped ? ` (stopped: ${outcome.stopped})` : ""}`);
 }));
 traceCmd.command("status").description("the running trace and its spool").action(run(async () => {
-  const { readState, spoolStatus } = await import("./trace-PDIOL2TC.js");
+  const { readState, spoolStatus } = await import("./trace-CFHCOGKB.js");
   const state = readState();
   if (!state) {
     console.log("No trace is running here.");
@@ -7347,7 +8063,7 @@ traceCmd.command("status").description("the running trace and its spool").action
   console.log(`${state.trace_id} as ${state.source}: ${spool.pending} pending, ${spool.dropped_full} dropped (spool full), ${spool.dropped_expired} given up, ${spool.refused} refused`);
 }));
 traceCmd.command("show [id]").description("the trace bundle: spans, the sessions they reach, cost counted once per session").option("--json", "print the bundle as JSON").action(run(async (id, opts) => {
-  const { readState } = await import("./trace-PDIOL2TC.js");
+  const { readState } = await import("./trace-CFHCOGKB.js");
   const ref = id ?? readState()?.trace_id;
   if (!ref) throw new Error("name a trace, or start one here");
   const bundle = await api("GET", `/traces/${ref}`);
@@ -7374,7 +8090,7 @@ traceCmd.command("show [id]").description("the trace bundle: spans, the sessions
   for (const gap of bundle.gaps) console.log(`  gap: ${gap.span_id} ${gap.reason}`);
 }));
 traceCmd.command("stop").description("end the root span, send what is left, and revoke this machine's grant").action(run(async () => {
-  const { readState, record, flush, grantSender, clearState } = await import("./trace-PDIOL2TC.js");
+  const { readState, record, flush, grantSender, clearState } = await import("./trace-CFHCOGKB.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   if (state.root_span) record(() => [{ span_id: state.root_span, kind: "end", outcome: "completed" }]);
@@ -7384,7 +8100,7 @@ traceCmd.command("stop").description("end the root span, send what is left, and
   console.log(`Stopped ${state.trace_id}${outcome.pending ? ` (${outcome.pending} events could not be sent)` : ""}`);
 }));
 traceCmd.command("sync [payload]").description("upload this machine's agent sessions (Claude Code, Codex, Cursor, Gemini CLI and every other agent `--agents` lists) to the matching workspace's trace library, redacted here first").option("--enable", "turn sync on for this machine").option("--disable", "turn sync off; nothing more is uploaded").option("--route <match=workspace>", "send sessions whose folder path contains <match> to <workspace> (repeatable; replaces the saved rules)", collect).option("--default <workspace>", "where a session no rule matches goes").option("--keep-local", "keep sessions no rule matches on this machine (the default)").option("--session <ref>", "only this session: its id or transcript path (repeatable)", collect).option("--import <export>", "add a downloaded cloud export (claude.ai, ChatGPT, Gemini, Grok, DeepSeek \u2026: its .zip, folder or file) so sync uploads it (repeatable)", collect).option("--agents", "list the agents sync reads and which are on this machine").option("--full", "re-read every session, not only files that changed").option("--limit <n>", "at most this many changed sessions this run", (v) => Number.parseInt(v, 10)).option("--dry-run", "show what would be uploaded without uploading").option("--hook", "run from a Claude Code SessionEnd hook or Codex notify: upload that session in the background and return at once").option("--install-schedule", "also sweep every 15 minutes (macOS launchd)").option("--status", "what sync has done on this machine").option("--quiet", "print only failures").action(async (payload, opts) => {
-  const lib = await import("./trace-library-TA3QUBHJ.js");
+  const lib = await import("./trace-library-2VHTJCOY.js");
   if (opts.hook) {
     try {
       let raw = payload ?? "";
@@ -7456,11 +8172,11 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
       console.log(`Sweeping every 15 minutes (${plist}); a full re-read runs weekly. Log: ${log}`);
     }
     if (opts.status) {
-      const { readFileSync: readFileSync18 } = await import("fs");
+      const { readFileSync: readFileSync19 } = await import("fs");
       const { join: join19 } = await import("path");
       let state = { sessions: {} };
       try {
-        state = JSON.parse(readFileSync18(join19(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
+        state = JSON.parse(readFileSync19(join19(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
       } catch {
       }
       const counts = /* @__PURE__ */ new Map();
@@ -7493,7 +8209,7 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
   })();
 });
 traceCmd.command("search <query...>").description("search every session in a workspace's trace library (literal substring)").option("--workspace <slug>", "the workspace to search (default: the current one)").option("--limit <n>", "hits per page", (v) => Number.parseInt(v, 10), 20).option("--cursor <cursor>", "the next page of an earlier search").option("--json", "print the page as JSON").action(run(async (words, opts) => {
-  const { libraryRequest } = await import("./trace-library-TA3QUBHJ.js");
+  const { libraryRequest } = await import("./trace-library-2VHTJCOY.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const params = new URLSearchParams({ q: words.join(" "), scope: "traces", limit: String(opts.limit), ...opts.cursor ? { cursor: opts.cursor } : {} });
@@ -7510,7 +8226,7 @@ traceCmd.command("search <query...>").description("search every session in a wor
   if (page.nextCursor) console.log(`More: sky trace search ${JSON.stringify(words.join(" "))} --workspace ${workspace2} --cursor ${page.nextCursor}`);
 }));
 traceCmd.command("library").description("list the sessions in a workspace's trace library, most recently updated first").option("--workspace <slug>", "the workspace (default: the current one)").option("--limit <n>", "how many", (v) => Number.parseInt(v, 10), 20).option("--json", "print the page as JSON").action(run(async (opts) => {
-  const { libraryRequest } = await import("./trace-library-TA3QUBHJ.js");
+  const { libraryRequest } = await import("./trace-library-2VHTJCOY.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const page = await libraryRequest("GET", `/trace-library?limit=${opts.limit}`, workspace2);
@@ -7626,6 +8342,140 @@ thread.command("list").description("your workspace threads, most recently update
     for (const t of threads) console.log(renderThreadSummary(t));
   })
 );
+thread.command("start <text>").description("start a thread and send it its first message, as the web composer does").requiredOption("--agent <type>", "the agent's harness type (e.g. claude_code, codex)").option("--llm <model>", "the model (the harness default when omitted)").option("--effort <level>", "thinking level").option("--vs <type:model...>", "more agents that get the same message, side by side", (val, acc) => [...acc, val], []).option("--saved-agent <id>", "run on one of your saved agents").option("--workspace <slug>", "start it in this team workspace").option("--plan", "send the first message in Plan mode").option("--json", "print the new thread as JSON").action(
+  run(async (text, opts) => {
+    const compared = (opts.vs ?? []).map((v) => {
+      const [agentType, llm] = v.split(":");
+      if (!agentType) throw new ApiError(400, "invalid_request", `--vs must be type[:model], got "${v}"`);
+      return { agentType, ...llm ? { llm } : {} };
+    });
+    const result = await startThread({
+      requestId: `sky-thread-${crypto.randomUUID()}`,
+      agentType: opts.agent,
+      text,
+      ...opts.llm ? { llm: opts.llm } : {},
+      ...opts.effort ? { reasoningEffort: opts.effort } : {},
+      ...compared.length ? { compare: compared } : {},
+      ...opts.savedAgent ? { agentId: opts.savedAgent } : {},
+      ...opts.workspace ? { workspace: opts.workspace } : {},
+      ...opts.plan ? { interactionMode: "plan" } : {}
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+      return;
+    }
+    console.log(`started ${result.playgroundId}`);
+    for (const col of result.columns) console.log(`  agent ${col.columnId}  session ${col.sessionId}`);
+  })
+);
+thread.command("show <id>").description("one thread with every agent and the session each one runs in").option("--json", "print as JSON").action(
+  run(async (id, opts) => {
+    const detail = await getThread(id);
+    if (opts.json) {
+      console.log(JSON.stringify(detail, null, 2));
+      return;
+    }
+    console.log(`thread ${detail.id}  ${detail.title}`);
+    for (const col of detail.columns) console.log(`  agent ${col.id}  session ${col.sessionId}  ${col.blind ? "(hidden until the vote)" : `${col.agentType}/${col.llm}`}  ${col.status ?? col.podStatus ?? ""}`);
+  })
+);
+thread.command("rename <id> <title>").description("rename a thread").action(run(async (id, title) => {
+  await organizeThread(id, { title });
+  console.log(`renamed ${id}`);
+}));
+for (const [verb, change, description] of [
+  ["pin", { pinned: true }, "pin a thread to the top of the rail"],
+  ["unpin", { pinned: false }, "unpin a thread"],
+  ["archive", { archived: true }, "put a thread away"],
+  ["unarchive", { archived: false }, "bring an archived thread back"],
+  ["mark-read", { seen: true }, "mark a thread read"],
+  ["mark-unread", { seen: false }, "mark a thread unread"]
+]) {
+  thread.command(`${verb} <id>`).description(description).action(run(async (id) => {
+    await organizeThread(id, change);
+    console.log(`${verb}: ${id}`);
+  }));
+}
+thread.command("delete <id>").description("delete a thread with its sessions").action(run(async (id) => {
+  await deleteThread(id);
+  console.log(`deleted ${id}`);
+}));
+thread.command("send <id> <text>").description("send one message to every agent of the thread, or to the ones --agent names").option("--agent <columnId...>", "only these agents (column ids from `sky thread show`)").option("--json", "print each agent's outcome as JSON").action(
+  run(async (id, text, opts) => {
+    const { results } = await sendThreadMessage(id, { text, deliveryId: crypto.randomUUID(), ...opts.agent?.length ? { columnIds: opts.agent } : {} });
+    if (opts.json) {
+      console.log(JSON.stringify(results, null, 2));
+      return;
+    }
+    for (const [column, outcome] of Object.entries(results)) console.log(`  ${column}  ${outcome.ok ? "sent" : `not sent: ${outcome.error ?? "refused"}`}`);
+  })
+);
+thread.command("add-agent <id>").description("add an agent to the thread, in a session of its own").requiredOption("--agent <type>", "the agent's harness type").option("--llm <model>", "the model").option("--effort <level>", "thinking level").action(
+  run(async (id, opts) => {
+    const { columns } = await addThreadAgent(id, { requestId: `sky-agent-${crypto.randomUUID()}`, agentType: opts.agent, ...opts.llm ? { llm: opts.llm } : {}, ...opts.effort ? { reasoningEffort: opts.effort } : {} });
+    for (const col of columns) console.log(`added agent ${col.columnId}  session ${col.sessionId}`);
+  })
+);
+thread.command("remove-agent <id> <columnId>").description("take one agent out of the thread; its session is left as it is").action(run(async (id, columnId) => {
+  await removeThreadAgent(id, columnId);
+  console.log(`removed ${columnId}`);
+}));
+thread.command("stop <id>").description("stop what the thread's agents are doing").option("--agent <columnId>", "stop only this agent").action(run(async (id, opts) => {
+  await interruptThread(id, opts.agent);
+  console.log(`stopped ${id}`);
+}));
+thread.command("fork <id>").description("continue one agent's conversation in a thread of its own").option("--agent <columnId>", "the agent to fork (the first when omitted)").option("--at <messageId>", "carry the conversation only up to this message").option("--to <type:model>", "continue on another agent or model").action(
+  run(async (id, opts) => {
+    const [agentType, llm] = (opts.to ?? "").split(":");
+    const { playgroundId } = await forkThread(id, {
+      requestId: `sky-fork-${crypto.randomUUID()}`,
+      ...opts.agent ? { columnId: opts.agent } : {},
+      ...opts.at ? { messageId: opts.at } : {},
+      ...agentType ? { target: { agentType, ...llm ? { llm } : {} } } : {}
+    });
+    console.log(`forked into ${playgroundId}`);
+  })
+);
+thread.command("model <id>").description("change the model or thinking level one agent of the thread runs on, from its next turn").option("--agent <columnId>", "the agent (the first when omitted)").option("--llm <model>", "the new model").option("--effort <level>", 'the new thinking level, or "default"').action(
+  run(async (id, opts) => {
+    if (!opts.llm && !opts.effort) throw new ApiError(400, "invalid_request", "Provide --llm or --effort.");
+    const result = await changeThreadModel(id, { ...opts.llm ? { llm: opts.llm } : {}, ...opts.effort ? { reasoningEffort: opts.effort === "default" ? null : opts.effort } : {} }, opts.agent);
+    console.log(`now ${result.llm}${result.reasoningEffort ? ` (${result.reasoningEffort})` : ""}`);
+  })
+);
+thread.command("search <query>").description("search the words of your conversations").option("--archived", "search archived threads only").option("--all", "search active and archived threads").option("--cursor <cursor>", "the next page").action(
+  run(async (query, opts) => {
+    const threads = opts.all ? "all" : opts.archived ? "archived" : void 0;
+    console.log(JSON.stringify(await searchThreads(query, { ...threads ? { threads } : {}, ...opts.cursor ? { cursor: opts.cursor } : {} }), null, 2));
+  })
+);
+thread.command("options").description("what a new thread can start on: agents, models, thinking levels and grantable tools").action(run(async () => {
+  console.log(JSON.stringify(await threadOptions(), null, 2));
+}));
+thread.command("join <sessionId>").description("open a teammate's thread, or one shared with you, as the session link does").action(
+  run(async (sessionId) => {
+    const opened = await joinThread(sessionId);
+    console.log(opened.readOnly ? `read-only: session ${opened.sessionId}` : `opened ${opened.playgroundId}`);
+  })
+);
+var project = program.command("project").description("the GitHub repositories a new thread can start on");
+project.command("list").description("repositories a new thread can start on, and the one you chose last").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const listed = await listProjects();
+    if (opts.json) {
+      console.log(JSON.stringify(listed, null, 2));
+      return;
+    }
+    if (listed.unavailable) console.log(listed.unavailable.message);
+    for (const repo of listed.repos) console.log(`${repo.fullName === listed.last?.repoFullName ? "* " : "  "}${repo.fullName}`);
+  })
+);
+project.command("use [repo]").description("remember a repository (owner/name) for your next new thread, or none when omitted").option("--branch <branch>", "the branch", "main").action(
+  run(async (repo, opts) => {
+    const { project: remembered } = await rememberProject(repo ? { repoFullName: repo, branch: opts.branch } : null);
+    console.log(remembered ? `next thread starts on ${remembered.repoFullName}@${remembered.branch}` : "next thread starts on no repository");
+  })
+);
 session.command("feedback <id>").description("read the thumbs-up/down feedback on this session's messages").option("--json", "print as JSON").action(
   run(async (id, opts) => {
     const result = await api(
@@ -7682,7 +8532,7 @@ session.command("code-review <id>").description("run the code-review assistant o
     }
   })
 );
-session.command("snapshot <id>").description("read or revoke the public share link for a session").requiredOption("--thread <threadId>", "the thread/comparison that owns this session").option("--revoke", "revoke the snapshot link instead of reading it").option("--json", "print as JSON").action(
+session.command("snapshot <id>").usage("<id> --thread <threadId> [--revoke] [--json]").description("read or revoke the public share link for a session; --thread is required").requiredOption("--thread <threadId>", "(required) the thread/comparison that owns this session").option("--revoke", "revoke the snapshot link instead of reading it").option("--json", "print as JSON").action(
   run(async (id, opts) => {
     const path = `/sessions/${encodeURIComponent(id)}/snapshot?thread=${encodeURIComponent(opts.thread)}`;
     const result = await api(opts.revoke ? "DELETE" : "GET", path);