@agentsky/sky 2.23.0 → 2.24.0

package/dist/index.js

@@ -4,12 +4,13 @@ import {
   api,
   apiBytes,
   apiForm,
+  apiRaw,
   downloadFileTo,
   postEvents,
   resolveSessionRef,
   streamEvents,
   uploadFile
-} from "./chunk-HQPOCQRQ.js";
+} from "./chunk-UHMKEYJN.js";
 import {
   CLI_VERSION,
   USER_AGENT,
@@ -20,7 +21,7 @@ import {
   currentUniverse,
   loadConfig,
   saveConfig
-} from "./chunk-V5XLV37X.js";
+} from "./chunk-RAFHOB5S.js";
 import {
   AGENT_TYPES,
   MODEL_SUBSCRIPTION_PLAN_PHRASE,
@@ -42,17 +43,17 @@ import {
   skillRefSchema,
   splitMcpServers,
   supersededBy
-} from "./chunk-HDPDY77W.js";
+} from "./chunk-277AZSSG.js";
 import "./chunk-MLKGABMK.js";
 
 // src/index.ts
-import { existsSync as existsSync12, readFileSync as readFileSync17, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync18, writeFileSync as writeFileSync11 } from "fs";
 import { basename as basename9, resolve as resolve9 } from "path";
 import { createInterface as createInterface6 } from "readline";
 import { Command } from "commander";
 
 // src/files.ts
-import { readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { existsSync, readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
 import { basename as basename2, extname, join as join2 } from "path";
 
 // src/resumable-upload.ts
@@ -250,6 +251,16 @@ function eventsFor(text, files2, system, interactionMode2) {
   if (system?.trim()) events.push({ type: "system.message", content: [{ type: "text", text: system }] });
   return events;
 }
+function isFileId(ref) {
+  return /^file_[A-Za-z0-9]+$/.test(ref);
+}
+async function attachment(ref, opts = {}) {
+  if (opts.byId || isFileId(ref) && !existsSync(ref)) {
+    if (!isFileId(ref)) throw new Error(`--file-id takes a stored file's id (file_\u2026), got ${JSON.stringify(ref)}`);
+    return { file: await api("GET", `/files/${encodeURIComponent(ref)}`), uploaded: false };
+  }
+  return { file: await uploadLocalFile(ref), uploaded: true };
+}
 
 // src/goal.ts
 var CHECK_SEPARATOR = " :: ";
@@ -494,9 +505,9 @@ function renderContextPage(page) {
 }
 
 // src/agent-file.ts
-import { existsSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "fs";
 import { dirname as dirname2, resolve as resolve2 } from "path";
-import { parse as parseToml, stringify as stringifyToml } from "smol-toml";
+import { parse as parseToml } from "smol-toml";
 var fileInstructionSchema = external_exports.object({
   name: external_exports.string(),
   content: external_exports.string().optional(),
@@ -512,7 +523,8 @@ var agentFileSchema = external_exports.object({
   type: external_exports.enum(AGENT_TYPES).optional(),
   llm: external_exports.string().optional(),
   reasoning_effort: external_exports.enum(REASONING_EFFORT_VALUES).optional(),
-  capabilities: capabilitiesSchema.optional(),
+  capabilities: capabilitiesSchema.removeDefault().optional(),
+  // omitted = leave the agent's as they are
   prompt: external_exports.string().optional(),
   prompt_file: external_exports.string().optional(),
   instructions: external_exports.array(fileInstructionSchema).optional(),
@@ -569,13 +581,40 @@ function readAgentFile(path) {
   return { file, spec };
 }
 function stampId(path, id) {
-  const doc = parseToml(readFileSync3(path, "utf8"));
-  doc.id = id;
-  delete doc.slug;
-  writeFileSync2(path, stringifyToml(doc));
+  writeFileSync2(path, stampIdText(readFileSync3(path, "utf8"), id));
+}
+function stampIdText(text, id) {
+  const out = [];
+  let topLevel = true;
+  let openString = null;
+  let stamped = false;
+  let nameAt = -1;
+  for (const line of text.split("\n")) {
+    if (openString) {
+      if (line.includes(openString)) openString = null;
+      out.push(line);
+      continue;
+    }
+    if (/^\s*\[/.test(line)) topLevel = false;
+    if (topLevel && /^\s*(id|slug)\s*=/.test(line)) {
+      if (/^\s*id\s*=/.test(line) && !stamped) {
+        out.push(`id = ${JSON.stringify(id)}`);
+        stamped = true;
+      }
+      continue;
+    }
+    if (topLevel && nameAt < 0 && /^\s*name\s*=/.test(line)) nameAt = out.length;
+    const opener = /=\s*("""|''')/.exec(line);
+    if (opener && !line.slice(opener.index + opener[0].length).includes(opener[1])) openString = opener[1];
+    out.push(line);
+  }
+  if (!stamped) out.splice(nameAt + 1, 0, `id = ${JSON.stringify(id)}`);
+  const next = out.join("\n");
+  if (parseToml(next).id !== id) throw new Error("could not stamp the agent id into the file");
+  return next;
 }
 function scaffoldAgentFile(path, name) {
-  if (existsSync(path)) throw new Error(`${path} already exists`);
+  if (existsSync2(path)) throw new Error(`${path} already exists`);
   writeFileSync2(
     path,
     `# agent.toml \u2014 everything the create wizard can set. Only \`name\` is required.
@@ -596,6 +635,38 @@ You are ${name}, a helpful long-lived agent.
 `
   );
 }
+function deployPatch(spec) {
+  return {
+    displayName: spec.displayName,
+    ...spec.agentType ? { agentType: spec.agentType } : {},
+    ...spec.llm ? { llm: spec.llm } : {},
+    ...spec.capabilities ? { capabilities: spec.capabilities } : {},
+    ...spec.reasoningEffort ? { reasoningEffort: spec.reasoningEffort } : {},
+    ...spec.skills ? { skills: spec.skills } : {},
+    ...spec.hiringPolicy ? { hiringPolicy: spec.hiringPolicy } : {},
+    ...spec.environmentId ? { environmentId: spec.environmentId } : {}
+  };
+}
+function deployReport(id, spec, before, after, promptChanged) {
+  if (spec.agentType && after.agentType !== spec.agentType) {
+    throw new Error(`${id} is still ${after.agentType}: the API did not apply type = "${spec.agentType}"`);
+  }
+  if (spec.llm && after.llm !== spec.llm) {
+    throw new Error(`${id} still runs ${after.llm}: the API did not apply llm = "${spec.llm}"`);
+  }
+  const changed = [];
+  if (promptChanged) changed.push("prompt");
+  if (after.version !== before.version) changed.push("settings");
+  if (!changed.length) return [`${id} is up to date \u2014 nothing to deploy (version ${after.version})`];
+  const lines = [`Deployed ${id}: ${changed.join(" and ")} updated (version ${before.version} \u2192 ${after.version})`];
+  if (after.agentType !== before.agentType || after.llm !== before.llm) {
+    lines.push(`  now ${after.agentType} \xB7 ${after.llm} for new sessions (was ${before.agentType} \xB7 ${before.llm})`);
+  }
+  if (spec.skills && after.version !== before.version) {
+    lines.push(`  Skills apply to new sessions; running sessions keep the skills they started with \u2014 start one with \`sky session create ${id}\`.`);
+  }
+  return lines;
+}
 
 // src/catalog.ts
 var bare = (handle) => handle.replace(/^@/, "");
@@ -662,7 +733,7 @@ function renderCatalogAgent(agent2) {
 
 // src/clone.ts
 import { spawn } from "child_process";
-import { existsSync as existsSync2, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { existsSync as existsSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { homedir } from "os";
 import { basename as basename3, join as join3 } from "path";
 import { createInterface } from "readline";
@@ -768,9 +839,9 @@ function detectHarness(explicit) {
     }
     return explicit;
   }
-  if (existsSync2(claudeConfigRoot())) return "claude_code";
-  if (existsSync2(join3(homedir(), ".codex"))) return "codex";
-  if (existsSync2(join3(homedir(), ".openclaw"))) return "openclaw";
+  if (existsSync3(claudeConfigRoot())) return "claude_code";
+  if (existsSync3(join3(homedir(), ".codex"))) return "codex";
+  if (existsSync3(join3(homedir(), ".openclaw"))) return "openclaw";
   throw new Error(
     "no local harness found (~/.claude, ~/.codex, ~/.openclaw) \u2014 pass --harness to override"
   );
@@ -1028,20 +1099,20 @@ async function clone(opts) {
 }
 
 // src/import-local.ts
-import { closeSync as closeSync3, existsSync as existsSync5, openSync as openSync3, readdirSync as readdirSync4, readFileSync as readFileSync8, readSync as readSync3, statSync as statSync5 } from "fs";
+import { closeSync as closeSync3, existsSync as existsSync6, openSync as openSync3, readdirSync as readdirSync4, readFileSync as readFileSync8, readSync as readSync3, statSync as statSync5 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join7 } from "path";
 import { createHash as createHash3 } from "crypto";
 
 // src/import-files.ts
 import { isUtf8 } from "buffer";
-import { existsSync as existsSync4, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
+import { existsSync as existsSync5, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
 import { homedir as homedir3 } from "os";
 import { dirname as dirname4, extname as extname2, isAbsolute, join as join5, relative as relative2, resolve as resolve4, sep as sep2, basename as basename5 } from "path";
 
 // src/import-workspace.ts
 import { spawnSync } from "child_process";
-import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync5, realpathSync, statSync as statSync3 } from "fs";
+import { existsSync as existsSync4, readdirSync as readdirSync2, readFileSync as readFileSync5, realpathSync, statSync as statSync3 } from "fs";
 import { homedir as homedir2 } from "os";
 import { basename as basename4, dirname as dirname3, join as join4, relative, sep } from "path";
 import { parse as parseToml2 } from "smol-toml";
@@ -1270,7 +1341,7 @@ function skillFiles(skill) {
       else if (entry2.isFile()) out.push({ path, name: `skills/${skill.name}/${relative(skill.dir, path).split(sep).join("/")}` });
     }
   };
-  if (existsSync3(skill.dir)) walk(skill.dir, 0);
+  if (existsSync4(skill.dir)) walk(skill.dir, 0);
   return out;
 }
 function codexThreadName(sessionId, home = homedir2()) {
@@ -1396,13 +1467,13 @@ function touchedPaths(records, cwd, home = homedir3()) {
 }
 function gitRoot(dir) {
   for (let d = dir; ; d = dirname4(d)) {
-    if (existsSync4(join5(d, ".git"))) return d;
+    if (existsSync5(join5(d, ".git"))) return d;
     if (d === dirname4(d)) return null;
   }
 }
 function instructionPaths(cwd, harness2, home = homedir3()) {
   const out = [];
-  if (cwd && existsSync4(cwd)) {
+  if (cwd && existsSync5(cwd)) {
     const root = gitRoot(cwd) ?? cwd;
     for (let d = resolve4(cwd); ; d = dirname4(d)) {
       for (const name of INSTRUCTION_FILES) out.push(join5(d, name));
@@ -1925,7 +1996,7 @@ function sniffTitle(filePath) {
 function listClaudeCodeSessions(limit) {
   const root = process.env.CLAUDE_CONFIG_DIR ?? join7(homedir4(), ".claude");
   const projectsDir = join7(root, "projects");
-  if (!existsSync5(projectsDir)) return [];
+  if (!existsSync6(projectsDir)) return [];
   const sessions = [];
   try {
     for (const encoded of readdirSync4(projectsDir)) {
@@ -1951,7 +2022,7 @@ function listClaudeCodeSessions(limit) {
         let discoveryError;
         const subagentFiles = [];
         const subagentDir = join7(projectDir, sessionId, "subagents");
-        if (existsSync5(subagentDir)) {
+        if (existsSync6(subagentDir)) {
           try {
             const subFiles = readdirSync4(subagentDir).filter((f) => f.endsWith(".jsonl")).sort();
             for (const f of subFiles) {
@@ -2229,7 +2300,7 @@ async function importSession(opts) {
   }
   const result = await response.json();
   const finalTraceId = result.traceId ?? traceId;
-  const environment = opts.files === false || opts.environment === false || !cwd || !existsSync5(cwd) ? null : await uploadEnvironment(base, key, finalTraceId, cwd, resourceLines, opts.onProgress).catch((error) => ({ error: error instanceof Error ? error.message : String(error) }));
+  const environment = opts.files === false || opts.environment === false || !cwd || !existsSync6(cwd) ? null : await uploadEnvironment(base, key, finalTraceId, cwd, resourceLines, opts.onProgress).catch((error) => ({ error: error instanceof Error ? error.message : String(error) }));
   return {
     traceId: finalTraceId,
     url: `${base}/playground/new?import=${encodeURIComponent(finalTraceId)}`,
@@ -2342,7 +2413,7 @@ import { hostname } from "os";
 import { spawn as spawn2 } from "child_process";
 
 // src/mcp-register.ts
-import { existsSync as existsSync7, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync10, writeFileSync as writeFileSync5 } from "fs";
 import { spawnSync as spawnSync3 } from "child_process";
 import { homedir as homedir6 } from "os";
 import { join as join10 } from "path";
@@ -2350,7 +2421,7 @@ import { parse as parseToml3 } from "smol-toml";
 import { isMap, parseDocument } from "yaml";
 
 // src/local-agents.ts
-import { existsSync as existsSync6 } from "fs";
+import { existsSync as existsSync7 } from "fs";
 import { homedir as homedir5 } from "os";
 import { join as join8 } from "path";
 function localAgents(env = process.env, home = homedir5()) {
@@ -2364,7 +2435,7 @@ function localAgents(env = process.env, home = homedir5()) {
   ];
 }
 function detectLocalAgents(env = process.env, home = homedir5()) {
-  return localAgents(env, home).filter((agent2) => existsSync6(agent2.root));
+  return localAgents(env, home).filter((agent2) => existsSync7(agent2.root));
 }
 function selectLocalAgents(ids, env = process.env, home = homedir5()) {
   if (!ids?.length) return detectLocalAgents(env, home);
@@ -2487,6 +2558,12 @@ Details: \`${REFERENCES_DIR}/workspaces.md\` in this skill's folder.
   cheaper or different agent to get around a refusal.
 - \`get_usage\` shows the balance; check it before starting several cloud sessions
   at once so the person is told once, up front, instead of after the first fails.
+- Anything else the person can do on agentsky.dev or in the Mac app (rename or
+  archive a thread, edit a Library file or skill, change an agent's model, invite
+  a member, \u2026) is an API operation: find it with \`search_api\`, read its
+  parameters with \`describe_api\`, and run it with \`call_api\`. It acts as the
+  person with their own key, so make only the change they asked for. Where MCP
+  is missing, \`sky api search <words>\` and \`sky api <METHOD> <path>\` do the same.
 
 ## How to pick
 
@@ -2874,7 +2951,7 @@ function installSkill(agent2, opts = {}) {
 var MCP_SERVER_NAME = SKILL_NAME;
 function detectHermes(env = process.env, home = homedir6()) {
   const root = env.HERMES_HOME || join10(home, ".hermes");
-  return existsSync7(root) ? { id: "hermes", name: "Hermes", root } : null;
+  return existsSync8(root) ? { id: "hermes", name: "Hermes", root } : null;
 }
 function detectMcpClients(env = process.env, home = homedir6()) {
   const hermes = detectHermes(env, home);
@@ -3034,7 +3111,7 @@ function refreshMcpRegistrations(opts, clients = detectMcpClients(), runner = sy
 }
 
 // src/shell-env.ts
-import { appendFileSync, existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "fs";
+import { appendFileSync, existsSync as existsSync9, mkdirSync as mkdirSync3, readFileSync as readFileSync11, writeFileSync as writeFileSync6 } from "fs";
 import { homedir as homedir7 } from "os";
 import { basename as basename6, dirname as dirname5, join as join11 } from "path";
 var TOKEN_ENV = "AGENTSKY_API_KEY";
@@ -3050,13 +3127,13 @@ function shellStartupFiles(env = process.env, home = homedir7(), platform = proc
   const shell = basename6(env.SHELL ?? "");
   const files2 = [];
   const zshenv = join11(env.ZDOTDIR || home, ".zshenv");
-  if (shell === "zsh" || platform === "darwin" || existsSync8(zshenv)) files2.push({ path: zshenv, kind: "sh" });
+  if (shell === "zsh" || platform === "darwin" || existsSync9(zshenv)) files2.push({ path: zshenv, kind: "sh" });
   const bashrc = join11(home, ".bashrc");
-  if (shell === "bash" || existsSync8(bashrc)) files2.push({ path: bashrc, kind: "sh" });
+  if (shell === "bash" || existsSync9(bashrc)) files2.push({ path: bashrc, kind: "sh" });
   const bashProfile = join11(home, ".bash_profile");
-  if (existsSync8(bashProfile)) files2.push({ path: bashProfile, kind: "sh" });
+  if (existsSync9(bashProfile)) files2.push({ path: bashProfile, kind: "sh" });
   const fish = join11(env.XDG_CONFIG_HOME || join11(home, ".config"), "fish");
-  if (shell === "fish" || existsSync8(fish)) files2.push({ path: join11(fish, "conf.d", "agentsky.fish"), kind: "fish" });
+  if (shell === "fish" || existsSync9(fish)) files2.push({ path: join11(fish, "conf.d", "agentsky.fish"), kind: "fish" });
   return files2;
 }
 function writeShellEnv(token, opts = {}) {
@@ -3072,7 +3149,7 @@ function writeShellEnv(token, opts = {}) {
     writeFileSync6(fish, `${header2}${token ? `set -gx ${TOKEN_ENV} ${quoted(token)}` : `set -e ${TOKEN_ENV}`}
 `, { mode: 384 });
     for (const file of startup) {
-      const existing = existsSync8(file.path) ? readFileSync11(file.path, "utf8") : "";
+      const existing = existsSync9(file.path) ? readFileSync11(file.path, "utf8") : "";
       if (existing.includes(HOOK_MARK)) continue;
       const line = file.kind === "fish" ? `${HOOK_MARK}
 test -f ${quoted(fish)}; and source ${quoted(fish)}
@@ -3443,12 +3520,42 @@ function clip(value, max = 120) {
   const text = typeof value === "string" ? value : JSON.stringify(value);
   return text.length > max ? `${text.slice(0, max)}\u2026` : text;
 }
-function renderEvent(event, data) {
+function createEventRenderer(out = process.stdout) {
+  const seen = /* @__PURE__ */ new Set();
+  let openStream = null;
+  const closeLine = () => {
+    if (openStream === null) return;
+    out.write("\n");
+    openStream = null;
+  };
+  return (event, data) => {
+    const id = typeof data.id === "string" ? data.id : void 0;
+    if (id) {
+      if (seen.has(id)) return;
+      seen.add(id);
+    }
+    if (event !== "agent.message") {
+      if (event && event !== "keepalive") closeLine();
+      renderOther(event, data);
+      return;
+    }
+    const parts = Array.isArray(data.parts) ? data.parts : [];
+    const streamId = typeof parts[0]?.stream_id === "string" ? parts[0].stream_id : null;
+    const text = String(data.text ?? "");
+    if (streamId === null) {
+      closeLine();
+      out.write(`${text}
+`);
+    } else {
+      if (openStream !== streamId) closeLine();
+      out.write(text);
+      openStream = streamId;
+    }
+  };
+}
+function renderOther(event, data) {
   const part = data.part;
   switch (event) {
-    case "agent.message":
-      console.log(String(data.text ?? ""));
-      break;
     case "agent.reasoning":
       console.log(dim(`\xB7 ${clip(part?.text ?? "")}`));
       break;
@@ -3480,11 +3587,12 @@ function renderEvent(event, data) {
 }
 
 // src/session-read.ts
-var TURN_TYPES = ["user.message", "agent.message", "session.status_idle", "session.status_terminated", "session.error"];
+var TURN_STARTS = /* @__PURE__ */ new Set(["user.message", "goal.defined", "goal.iteration"]);
+var TURN_TYPES = [...TURN_STARTS, "agent.message", "session.status_idle", "session.status_terminated", "session.error"];
 function latestTurn(events) {
   let start = 0;
   for (let index = events.length - 1; index >= 0; index -= 1) {
-    if (events[index].type === "user.message") {
+    if (TURN_STARTS.has(events[index].type)) {
       start = index + 1;
       break;
     }
@@ -3531,7 +3639,7 @@ import { createInterface as createInterface3 } from "readline";
 
 // src/setup-local.ts
 import { isUtf8 as isUtf83 } from "buffer";
-import { existsSync as existsSync9, readdirSync as readdirSync6, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
+import { existsSync as existsSync10, readdirSync as readdirSync6, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
 import { homedir as homedir8 } from "os";
 import { dirname as dirname6, isAbsolute as isAbsolute2, join as join13, resolve as resolve6 } from "path";
 import { parse as parseToml4 } from "smol-toml";
@@ -3572,7 +3680,7 @@ function readLocalSkills(agents) {
   const skills2 = [];
   const ignored = [];
   for (const agent2 of agents) {
-    if (!existsSync9(agent2.skillsDir)) continue;
+    if (!existsSync10(agent2.skillsDir)) continue;
     for (const entry2 of readdirSync6(agent2.skillsDir, { withFileTypes: true })) {
       const dir = join13(agent2.skillsDir, entry2.name);
       let isDir2 = entry2.isDirectory();
@@ -3583,7 +3691,7 @@ function readLocalSkills(agents) {
           isDir2 = false;
         }
       }
-      if (!isDir2 || !existsSync9(join13(dir, "SKILL.md")) || isInstalledSkill(dir)) continue;
+      if (!isDir2 || !existsSync10(join13(dir, "SKILL.md")) || isInstalledSkill(dir)) continue;
       const name = frontmatterName(readFileSync12(join13(dir, "SKILL.md"), "utf8"));
       if (!name) {
         ignored.push({ agent: agent2.id, dir, reason: "SKILL.md has no name" });
@@ -3690,7 +3798,7 @@ function findLocalSecrets(agents, home = homedir8()) {
 
 // src/subscriptions.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync10, readFileSync as readFileSync13 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync13 } from "fs";
 import { homedir as homedir9 } from "os";
 import { join as join14 } from "path";
 import { createInterface as createInterface2 } from "readline";
@@ -3789,7 +3897,7 @@ async function connectClaude() {
 }
 function codexSignIn(env = process.env, home = homedir9()) {
   const path = join14(env.CODEX_HOME || join14(home, ".codex"), "auth.json");
-  if (!existsSync10(path)) {
+  if (!existsSync11(path)) {
     throw new ApiError(404, "no_codex_auth", `no ${path} \u2014 run \`codex login\` first`);
   }
   const raw = readFileSync13(path, "utf8");
@@ -3802,7 +3910,7 @@ function codexSignIn(env = process.env, home = homedir9()) {
 }
 function cursorSignIn(env = process.env, home = homedir9()) {
   const path = join14(env.XDG_CONFIG_HOME || join14(home, ".config"), "cursor", "auth.json");
-  if (!existsSync10(path)) {
+  if (!existsSync11(path)) {
     throw new ApiError(404, "no_cursor_auth", `no ${path} \u2014 run \`cursor-agent login\` first`);
   }
   const raw = readFileSync13(path, "utf8");
@@ -3924,7 +4032,9 @@ async function subscriptionUsage(name, account) {
   return usage;
 }
 function renderSubscriptionUsage(name, usage) {
-  const label = MODEL_SUBSCRIPTION_PROVIDER_NAME[managedProviderFor(name)];
+  const provider = managedProviderFor(name);
+  const label = MODEL_SUBSCRIPTION_PROVIDER_NAME[provider];
+  if (usage.status === "unavailable" && (usage.reason === "unsupported" || provider === "anthropic" && usage.reason === "permission")) return [`${label}: usage isn't available for this account type`];
   if (usage.status === "unavailable") return [`${label}: usage unavailable (${usage.reason ?? "unknown"})`];
   const head = [`${label}${usage.plan ? ` ${usage.plan}` : ""}`, usage.allowed === false ? "limit reached" : null].filter(Boolean).join(" \xB7 ");
   const rows = usage.windows.map(
@@ -4399,12 +4509,25 @@ async function getSkillUsage(since) {
   const qs = since ? `?since=${encodeURIComponent(since)}` : "";
   return api("GET", `/skills/usage${qs}`);
 }
+function nextSkills(current, skillId, verb) {
+  const has = current.some((ref) => ref.type === "skill" && ref.skillId === skillId);
+  if (verb === "attach") return has ? null : [...current, { type: "skill", skillId, version: "latest" }];
+  return has ? current.filter((ref) => !(ref.type === "skill" && ref.skillId === skillId)) : null;
+}
+async function setAgentSkill(agentId, skillId, verb) {
+  const path = `/agents/${encodeURIComponent(agentId)}`;
+  const { agent: agent2 } = await api("GET", path);
+  const skills2 = nextSkills(agent2.skills ?? [], skillId, verb);
+  if (!skills2) return "unchanged";
+  await api("PATCH", path, { skills: skills2, expectedVersion: agent2.version });
+  return "changed";
+}
 
 // src/task-export.ts
 import { createHash as createHash6 } from "crypto";
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync8 } from "fs";
 import { dirname as dirname8, join as join17 } from "path";
-import { stringify as stringifyToml2 } from "smol-toml";
+import { stringify as stringifyToml } from "smol-toml";
 var TEXT_MAX = 2e4;
 function scrub(text, names2) {
   let out = redactPlainText(text).text;
@@ -4582,7 +4705,7 @@ Write your deliverables under /workspace/outputs.
 `);
   out.set(
     "task.toml",
-    stringifyToml2({
+    stringifyToml({
       metadata: {
         name: `agentsky-${idHash}`,
         tier: opts.tier,
@@ -5159,6 +5282,80 @@ function renderLibraryArtifact(artifact2) {
   return `${artifact2.id}  ${artifact2.name}  ${version}${artifact2.shared ? "  shared" : ""}`;
 }
 
+// src/api-command.ts
+import { readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
+var API_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
+function readData(data, stdin = () => readFileSync16(0, "utf8")) {
+  if (data === void 0) return void 0;
+  const raw = data === "-" ? stdin() : data.startsWith("@") ? readFileSync16(data.slice(1), "utf8") : data;
+  try {
+    JSON.parse(raw);
+  } catch {
+    throw new Error("--data must be JSON (inline, @file or - for stdin)");
+  }
+  return raw;
+}
+function requestPath(path, query = []) {
+  if (!path.startsWith("/") || path.startsWith("//")) throw new Error("path must start with /, e.g. /threads");
+  const clean = path.replace(/^\/v1(?=\/)/, "");
+  const params = new URLSearchParams();
+  for (const pair of query) {
+    const at = pair.indexOf("=");
+    if (at <= 0) throw new Error(`--query needs key=value, got "${pair}"`);
+    params.append(pair.slice(0, at), pair.slice(at + 1));
+  }
+  const sep3 = clean.includes("?") ? "&" : "?";
+  const encoded = params.toString();
+  return encoded ? `${clean}${sep3}${encoded}` : clean;
+}
+function matchOperations(doc, words) {
+  const needles = words.map((w) => w.toLowerCase());
+  const out = [];
+  for (const [path, item] of Object.entries(doc.paths ?? {})) {
+    for (const [method, op] of Object.entries(item)) {
+      if (!API_METHODS.includes(method.toUpperCase())) continue;
+      const hay = `${method} ${path} ${op.summary ?? ""} ${op.operationId ?? ""}`.toLowerCase();
+      if (needles.every((n) => hay.includes(n))) out.push({ method: method.toUpperCase(), path, summary: op.summary, operationId: op.operationId });
+    }
+  }
+  return out.sort((a, b) => a.path.localeCompare(b.path) || a.method.localeCompare(b.method));
+}
+async function searchApi(words) {
+  const res = await apiRaw("GET", "/openapi.json", { auth: false });
+  if (!res.ok) throw new Error(`could not read the API reference (${res.status})`);
+  const ops = matchOperations(await res.json(), words);
+  if (!ops.length) {
+    console.log("no operations match");
+    return;
+  }
+  for (const op of ops) console.log(`${op.method.padEnd(6)} ${op.path}${op.summary ? `  \u2014 ${op.summary}` : ""}`);
+}
+async function callApi(method, path, opts) {
+  const verb = method.toUpperCase();
+  if (!API_METHODS.includes(verb)) throw new Error(`method must be one of ${API_METHODS.join(", ")} or "search"`);
+  const body = readData(opts.data);
+  if (body !== void 0 && verb === "GET") throw new Error("a GET takes no --data; use --query");
+  const res = await apiRaw(verb, requestPath(path, opts.query), { body, idempotencyKey: opts.idempotencyKey, universe: opts.workspace });
+  const type = res.headers.get("content-type") ?? "";
+  if (opts.output) {
+    writeFileSync9(opts.output, new Uint8Array(await res.arrayBuffer()));
+    console.error(`${res.status} \u2192 ${opts.output}`);
+  } else if (/json/.test(type)) {
+    const text = await res.text();
+    let printed = text;
+    try {
+      printed = JSON.stringify(JSON.parse(text), null, 2);
+    } catch {
+    }
+    (res.ok ? console.log : console.error)(printed);
+  } else if (/^text\/|xml|csv|markdown/.test(type) || !type) {
+    (res.ok ? console.log : console.error)(await res.text());
+  } else {
+    console.error(`${res.status}: ${type} body (${res.headers.get("content-length") ?? "?"} bytes); pass --output <file> to save it`);
+  }
+  if (!res.ok && res.status !== 304) process.exitCode = 1;
+}
+
 // src/billing-plans.ts
 var readCodingPlan = () => api("GET", "/billing/coding-plan");
 function joinCodingPlan(dollars2, requestId) {
@@ -5233,8 +5430,19 @@ function wholeNumber2(flag, value) {
   return Number(value.trim());
 }
 
+// src/workspace-flag.ts
+function workspaceFlagIsCommands(argv, commandPath) {
+  let at = 0;
+  let matched = 0;
+  for (; at < argv.length && matched < commandPath.length; at += 1) {
+    if (argv[at] === commandPath[matched]) matched += 1;
+  }
+  if (matched < commandPath.length) return false;
+  return argv.slice(at).some((arg) => arg === "--workspace" || arg.startsWith("--workspace="));
+}
+
 // src/harness.ts
-import { existsSync as existsSync11, mkdirSync as mkdirSync6, readFileSync as readFileSync16, writeFileSync as writeFileSync9 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync17, writeFileSync as writeFileSync10 } from "fs";
 import { dirname as dirname9, join as join18, resolve as resolve8 } from "path";
 var HARNESS_FILE = "harness.json";
 function harnessFilePath(dir) {
@@ -5242,11 +5450,11 @@ function harnessFilePath(dir) {
 }
 function readHarnessFile(dir) {
   const path = harnessFilePath(dir);
-  if (!existsSync11(path)) {
+  if (!existsSync12(path)) {
     throw new Error(`no ${HARNESS_FILE} found in ${resolve8(dir)} \u2014 run \`sky harness init\` first`);
   }
   try {
-    return JSON.parse(readFileSync16(path, "utf8"));
+    return JSON.parse(readFileSync17(path, "utf8"));
   } catch (err) {
     throw new Error(`could not parse ${path}: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -5273,11 +5481,11 @@ var INIT_COMMENT = `# harness.json \u2014 workspace harness profile skeleton
 `;
 function harnessInit(dir) {
   const path = harnessFilePath(dir);
-  if (existsSync11(path)) {
+  if (existsSync12(path)) {
     throw new Error(`${path} already exists \u2014 delete it to re-init`);
   }
   mkdirSync6(dirname9(path), { recursive: true });
-  writeFileSync9(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
+  writeFileSync10(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
 `);
   console.log(`Created ${path}`);
   console.log(INIT_COMMENT);
@@ -5410,9 +5618,16 @@ function printModelBilling(session2) {
 }
 var program = new Command();
 program.name("sky").description("Launch and talk to long-lived agents \u2014 agentsky.dev").version(CLI_VERSION).option("--workspace <slug>", "workspace to act in (overrides sky universe switch and SKY_UNIVERSE; alias of --universe on sub-commands)");
-program.hook("preAction", () => {
+program.hook("preAction", (_root, action) => {
   const workspace2 = program.opts().workspace;
-  if (workspace2) process.env.SKY_WORKSPACE = workspace2;
+  if (!workspace2) return;
+  const path = [];
+  for (let command = action; command && command !== program; command = command.parent) path.unshift(command.name());
+  if (action.options.some((option) => option.long === "--workspace") && workspaceFlagIsCommands(process.argv.slice(2), path)) {
+    action.setOptionValue("workspace", workspace2);
+    return;
+  }
+  process.env.SKY_WORKSPACE = workspace2;
 });
 var lastProgressDecile = -1;
 function uploadProgress(sent, total) {
@@ -5447,6 +5662,9 @@ auth.command("whoami").description("who the current token acts as").action(
     console.log(
       `${who.user.email ?? "unknown"} \xB7 universe ${who.universe.slug}${who.universe.isPersonal ? " (default)" : ""} \xB7 scopes ${who.scopes.join(",")}`
     );
+    if (who.credential_universe) {
+      console.log(`  this key is fixed to workspace ${who.credential_universe}: it cannot act in other workspaces or create new ones (make an account-wide key with \`sky keys create\`, or \`sky auth login\`)`);
+    }
   })
 );
 auth.command("connect <provider>").description("connect a model subscription: claude (setup-token) or chatgpt (Codex sign-in); --browser signs any plan in on its own page").option("-y, --yes", "skip the consent prompt").option("--browser", "sign in on the provider's page instead of using this machine's sign-in (claude, chatgpt, cursor, grok, muse)").option("--account <id>", "with --browser: re-sign an additional account, or `new` to add one").option("--label <label>", "with --browser: name the account").option("--no-open", "with --browser: print the sign-in link without opening it").action(
@@ -5583,6 +5801,12 @@ workspace.command("list").action(
   })
 );
 workspace.command("delete <slug>").description("permanently delete a workspace you own and everything in it (asks you to type the slug)").option("-y, --yes", "skip typing the slug").action(run(deleteWorkspaceCommand));
+async function renameWorkspaceCommand(slug, name) {
+  const { universe: renamed } = await api("PATCH", `/universes/${encodeURIComponent(slug)}`, { name: name.join(" ") });
+  console.log(`${renamed.slug} is now "${renamed.name}"`);
+}
+universe.command("rename <slug> <name...>").description("rename a workspace you own (its slug stays)").action(run(renameWorkspaceCommand));
+workspace.command("rename <slug> <name...>").description("rename a workspace you own (alias of universe rename)").action(run(renameWorkspaceCommand));
 var policy = program.command("policy").description("policy rules: tool calls, spend caps, call counts, capabilities");
 async function policyScope(opts) {
   return opts.session ? { session: await resolveSessionRef(opts.session) } : { slug: await workspaceSlug(opts.universe) };
@@ -5693,7 +5917,7 @@ agent.command("destroy <id>").description("delete the spec; requires all session
     console.log(`Destroyed ${id}`);
   })
 );
-agent.command("message <id> [text]").description("send one message to the default session and stream the turn until idle").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks)").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
+agent.command("message <id> [text]").description("send one message to the default session and stream the turn until idle").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks); a file_\u2026 id attaches that stored file").option("--file-id <id...>", "attach files already uploaded (`sky files upload`), by id, without uploading again").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
   run(
     async (id, text, opts) => sendAndFollow(await resolveSessionRef(id), text ?? "", opts)
   )
@@ -5807,7 +6031,7 @@ session.command("delete <id>").description("permanently delete the session, its
     console.log(`Deleted ${id}`);
   })
 );
-session.command("message <ref> [text]").description("send one message (session id, or agent id = its default session)").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks)").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
+session.command("message <ref> [text]").description("send one message (session id, or agent id = its default session)").option("--detach", "don't follow the stream; exit once the message is accepted").option("--file <path...>", "attach local files (uploaded first, sent as document blocks); a file_\u2026 id attaches that stored file").option("--file-id <id...>", "attach files already uploaded (`sky files upload`), by id, without uploading again").option("--image <path...>", "attach local images (uploaded first, sent as image blocks)").option("--system <text>", "per-turn system text sent alongside the message").option("--plan", "plan mode: the agent inspects and answers with a plan, then waits for you to choose to implement it").option("--build", "build mode for this turn, overriding a session left in plan mode").action(
   run(
     async (ref, text, opts) => sendAndFollow(await resolveSessionRef(ref), text ?? "", opts)
   )
@@ -6000,7 +6224,7 @@ sessionWorkspace.command("cat <ref> <path>").description("print a file (up to 1
   run(async (ref, path, opts) => {
     const bytes = await readFile(await resolveSessionRef(ref), path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.error(`saved ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -6017,7 +6241,7 @@ sessionWorkspace.command("patch <ref> [repo]").description("the work in a reposi
     console.error(`${meta.repo}: ${meta.commits.length} commit${meta.commits.length === 1 ? "" : "s"} since ${meta.base_branch || "the imported copy"} (${meta.base_commit.slice(0, 12)})`);
     if (!patch.length) console.error("nothing changed");
     else if (opts.out) {
-      writeFileSync10(opts.out, patch);
+      writeFileSync11(opts.out, patch);
       console.error(`wrote ${opts.out} \u2014 apply with: git apply ${opts.out}`);
     } else process.stdout.write(patch);
   })
@@ -6071,9 +6295,10 @@ function interactionMode(opts) {
 }
 async function uploadAttachments(opts) {
   const files2 = [];
-  for (const path of [...opts.image ?? [], ...opts.file ?? []]) {
-    const file = await uploadLocalFile(path);
-    console.error(`uploaded ${file.filename} \u2192 ${file.id}`);
+  const refs = [...opts.image ?? [], ...opts.file ?? []].map((ref) => ({ ref, byId: false }));
+  for (const { ref, byId } of [...refs, ...(opts.fileId ?? []).map((ref2) => ({ ref: ref2, byId: true }))]) {
+    const { file, uploaded } = await attachment(ref, { byId });
+    console.error(uploaded ? `uploaded ${file.filename} \u2192 ${file.id}` : `attaching ${file.id} (${file.filename})`);
     files2.push(file);
   }
   return files2;
@@ -6090,9 +6315,10 @@ async function sendAndFollow(sessionId, text, opts) {
   const controller = new AbortController();
   let opened = null;
   if (!opts.detach) {
+    const render = createEventRenderer();
     opened = (async () => {
       for await (const frame of streamEvents(sessionId, controller.signal)) {
-        renderEvent(frame.event, frame.data);
+        render(frame.event, frame.data);
         if (turnOver(frame)) {
           controller.abort();
           break;
@@ -6113,10 +6339,11 @@ async function chatLoop(sessionId, opts = {}) {
   const controller = new AbortController();
   const rl = createInterface6({ input: process.stdin, output: process.stdout, prompt: "> " });
   let system = opts.system;
+  const render = createEventRenderer();
   void (async () => {
     try {
       for await (const frame of streamEvents(sessionId, controller.signal)) {
-        renderEvent(frame.event, frame.data);
+        render(frame.event, frame.data);
         if (frame.event === "session.status_terminated") rl.close();
         else if (frame.event === "session.status_idle") rl.prompt();
       }
@@ -6223,10 +6450,32 @@ secrets.command("unset <id> <key>").action(
     console.log(`unset ${key}`);
   })
 );
-program.command("launch").description("scaffold ./agent.toml if absent, create the agent, print its address").option("-f, --file <path>", "agent file", "agent.toml").option("--type <type>", "override the file's harness: hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode").option("--llm <llm>", "override the file's model (must suit the harness)").action(
+async function launchFromFile(path, spec, opts) {
+  const { vcpus, memoryMb, ...specBody } = spec;
+  const body = {
+    ...specBody,
+    ...opts.type ? { agentType: opts.type } : {},
+    ...opts.llm ? { llm: opts.llm } : {}
+  };
+  const { agent: created } = await api("POST", "/agents", body);
+  const { session: session2 } = await api("POST", "/sessions", {
+    agent: created.id,
+    ...opts.start ? {} : { provision: "deferred" },
+    ...vcpus !== void 0 ? { vcpus } : {},
+    ...memoryMb !== void 0 ? { memoryMb } : {}
+  });
+  stampId(path, created.id);
+  console.log(`Launched ${created.id} (${created.agentType} \xB7 ${created.llm})`);
+  printModelBilling(session2);
+  console.log(opts.start ? "  its first session is starting now" : "  its first session starts on the first message");
+  if (!spec.llm && !opts.llm) console.log(`  model: ${created.llm}, the ${created.agentType} default \u2014 set llm = "\u2026" in ${basename9(path)} and run \`sky deploy\` to change it`);
+  console.log(`  sky agent message ${created.id} "hello"`);
+  console.log(`  sky agent chat ${created.id}`);
+}
+program.command("launch").description("scaffold ./agent.toml if absent, create the agent and its first session (idle until the first message), print its address").option("-f, --file <path>", "agent file", "agent.toml").option("--type <type>", "override the file's harness: hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode").option("--llm <llm>", "override the file's model (must suit the harness)").option("--start", "boot the first session now instead of on the first message").action(
   run(async (opts) => {
     const path = resolve9(opts.file);
-    if (!existsSync12(path)) {
+    if (!existsSync13(path)) {
       const name = basename9(process.cwd()).replace(/[^a-zA-Z0-9 _-]/g, "") || "my-agent";
       scaffoldAgentFile(path, name);
       console.log(`Scaffolded ${opts.file} \u2014 edit it anytime; re-apply with \`sky deploy\`.`);
@@ -6236,55 +6485,27 @@ program.command("launch").description("scaffold ./agent.toml if absent, create t
       console.log(`${file.id} already launched \u2014 use \`sky deploy\` to re-apply.`);
       return;
     }
-    const { vcpus, memoryMb, ...specBody } = spec;
-    const body = {
-      ...specBody,
-      ...opts.type ? { agentType: opts.type } : {},
-      ...opts.llm ? { llm: opts.llm } : {}
-    };
-    const { agent: created } = await api("POST", "/agents", body);
-    console.log("Starting its runtime\u2026");
-    const { session: session2 } = await api("POST", "/sessions", {
-      agent: created.id,
-      ...vcpus !== void 0 ? { vcpus } : {},
-      ...memoryMb !== void 0 ? { memoryMb } : {}
-    });
-    stampId(path, created.id);
-    console.log(`Launched ${created.id} (${created.agentType} \xB7 ${created.llm})`);
-    printModelBilling(session2);
-    console.log(`  sky agent message ${created.id} "hello"`);
-    console.log(`  sky agent chat ${created.id}`);
+    await launchFromFile(path, spec, opts);
   })
 );
-program.command("deploy").description("re-apply ./agent.toml to the existing agent (idempotent)").option("-f, --file <path>", "agent file", "agent.toml").action(
+program.command("deploy").description("re-apply ./agent.toml to the existing agent (idempotent: an unchanged file changes nothing)").option("-f, --file <path>", "agent file", "agent.toml").action(
   run(async (opts) => {
     const path = resolve9(opts.file);
     const { file, spec } = readAgentFile(path);
     if (!file.id) {
       console.log("No agent id in the file yet \u2014 running launch instead.");
-      const { vcpus, memoryMb, ...specBody } = spec;
-      const { agent: created } = await api("POST", "/agents", specBody);
-      await api("POST", "/sessions", {
-        agent: created.id,
-        ...vcpus !== void 0 ? { vcpus } : {},
-        ...memoryMb !== void 0 ? { memoryMb } : {}
-      });
-      stampId(path, created.id);
-      console.log(`Launched ${created.id}`);
+      await launchFromFile(path, spec, {});
       return;
     }
+    const ref = encodeURIComponent(file.id);
+    const { agent: before } = await api("GET", `/agents/${ref}`);
+    let promptChanged = false;
     if (spec.prompt !== void 0) {
-      await api("PUT", `/agents/${encodeURIComponent(file.id)}/prompt`, {
-        prompt: spec.prompt
-      });
+      const saved = await api("PUT", `/agents/${ref}/prompt`, { prompt: spec.prompt });
+      promptChanged = saved.unchanged === false;
     }
-    await api("PATCH", `/agents/${encodeURIComponent(file.id)}`, {
-      displayName: spec.displayName,
-      ...spec.capabilities ? { capabilities: spec.capabilities } : {},
-      ...spec.reasoningEffort ? { reasoningEffort: spec.reasoningEffort } : {},
-      ...spec.skills ? { skills: spec.skills } : {}
-    });
-    console.log(`Deployed ${file.id} (prompt + settings re-applied)`);
+    const { agent: after } = await api("PATCH", `/agents/${ref}`, deployPatch(spec));
+    for (const line of deployReport(file.id, spec, before, after, promptChanged)) console.log(line);
   })
 );
 program.command("clone").description("clone your local agent (Claude Code, \u2026) into the cloud; re-run to sync its prompt").option("--harness <type>", "claude_code | codex | openclaw (default: detected)").option("--new", "always launch a fresh agent, even if this machine is linked").option("--dry-run", "print the plan and send nothing").option("-y, --yes", "skip the confirmation").option("--open", "open the agent page when done").action(
@@ -6525,14 +6746,14 @@ task.command("get <task> <path>").description("read one task file; prints it, or
   run(async (taskId, path, opts) => {
     const bytes = await readTaskFile(taskId, path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
 );
 task.command("put <task> <path> <local>").description("write a local file to <path> in the task's files (every session of the task sees it)").action(
   run(async (taskId, path, local) => {
-    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync17(local), mediaTypeFor(local));
+    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync18(local), mediaTypeFor(local));
     console.log(`${renderTaskFile(file)}${conflict ? "  (replaced a version you had not seen)" : ""}`);
   })
 );
@@ -6605,7 +6826,7 @@ task.command("verdict <task> <did-the-job>").description("record whether the tas
     console.log(`Recorded verdict on task ${updated.id}: did_the_job=${value === "yes"}`);
   })
 );
-var skills = program.command("skills").description("the workspace's skill store: upload a skill, then attach it to an agent by id");
+var skills = program.command("skills").description("the workspace's skill store: upload a skill, then attach it to an agent (sky skills attach, or [[skills]] in agent.toml)");
 skills.command("upload <dir>").description("upload a skill directory (SKILL.md at its root) as a new skill").option("--name <name>", "display name (default: the directory's name)").option("--json", "print the stored skill as JSON").action(
   run(async (dir, opts) => {
     const { skill } = await uploadSkill(dir, opts.name);
@@ -6613,7 +6834,7 @@ skills.command("upload <dir>").description("upload a skill directory (SKILL.md a
       console.log(JSON.stringify(skill));
       return;
     }
-    console.log(`Uploaded ${skill.id} (${skill.displayName ?? dir}). Attach it in agent.toml:`);
+    console.log(`Uploaded ${skill.id} (${skill.displayName ?? dir}). Attach it: sky skills attach ${skill.id} --agent <id>, or in agent.toml:`);
     console.log(`  [[skills]]
   type = "skill"
   skillId = "${skill.id}"`);
@@ -6626,6 +6847,18 @@ skills.command("list").description("the workspace's stored skills").action(
     for (const skill of list) console.log(`${skill.id}  ${skill.displayName ?? ""}`);
   })
 );
+for (const [verb, blurb] of [
+  ["attach", "add a stored skill to an agent; its new sessions load it"],
+  ["detach", "remove a skill from an agent; its new sessions no longer load it"]
+]) {
+  skills.command(`${verb} <skill>`).description(blurb).requiredOption("--agent <id>", "the agent").action(
+    run(async (skillId, opts) => {
+      const outcome = await setAgentSkill(opts.agent, skillId, verb);
+      if (outcome === "unchanged") console.log(`${skillId} is ${verb === "attach" ? "already" : "not"} attached to ${opts.agent}`);
+      else console.log(`${verb === "attach" ? "Attached" : "Detached"} ${skillId} ${verb === "attach" ? "to" : "from"} ${opts.agent} \u2014 new sessions ${verb === "attach" ? "load it" : "no longer load it"}; running sessions keep the skills they started with`);
+    })
+  );
+}
 skills.command("usage").description("view and miss counts per skill name in this workspace").option("--since <iso>", `start date (ISO 8601); default is the last 30 days`).option("--json", "print JSON").action(
   run(async (opts) => {
     const summary = await getSkillUsage(opts.since);
@@ -6684,7 +6917,7 @@ library.command("list").description("your Library, newest first").option("--sear
 );
 library.command("upload <path>").description("save a file from this computer to your Library").option("--workspace <key>", "place it in this workspace").action(
   run(async (path, opts) => {
-    const bytes = readFileSync17(path);
+    const bytes = readFileSync18(path);
     const { artifact: artifact2 } = await uploadToLibrary({ bytes, name: basename9(path), mediaType: "application/octet-stream" }, `sky-upload-${crypto.randomUUID()}`, opts.workspace);
     console.log(renderLibraryArtifact(artifact2));
   })
@@ -6715,7 +6948,7 @@ library.command("place <id> <workspace>").description('place your artifact in a
 library.command("download <id> <out>").description("save one version's bytes to a file").option("--version <n>", "a saved version (the current one when omitted)").action(
   run(async (id, out, opts) => {
     const { bytes } = await downloadLibraryArtifact(id, opts.version ? Number(opts.version) : void 0);
-    writeFileSync10(out, bytes);
+    writeFileSync11(out, bytes);
     console.log(`wrote ${bytes.length} bytes to ${out}`);
   })
 );
@@ -6736,7 +6969,7 @@ artifact.command("get <id> <path>").description("read one file of an artifact; p
   run(async (id, path, opts) => {
     const bytes = await readArtifactFile(id, path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -6835,6 +7068,12 @@ for (const [verb, blurb] of [
     })
   );
 }
+routine.command("rm <id>").description("delete a routine: it never runs again; the sessions it started are kept").action(
+  run(async (id) => {
+    await api("DELETE", `/routines/${encodeURIComponent(id)}`);
+    console.log(`Deleted routine ${id}. It will not run again; sessions it started are kept.`);
+  })
+);
 routine.command("runs [id]").description("every fire attempt, newest first \u2014 of one routine, or all of them").option("--failed", "only runs that failed to start").option("--limit <n>", "how many (default 20)").action(
   run(async (id, opts) => {
     const params = new URLSearchParams({ limit: opts.limit ?? "20" });
@@ -7052,7 +7291,7 @@ usageOptions(
   run(async (opts) => {
     const { bytes } = await apiBytes("GET", `/billing/usage/export${usageQuery(opts)}`);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else {
       process.stdout.write(bytes);
@@ -7591,6 +7830,85 @@ help.command("get <slug>").description("read a help article by its slug").option
     console.log(article.body);
   })
 );
+program.command("api <method> [path...]").description("call any AgentSky API operation (GET|POST|PUT|PATCH|DELETE <path>), or `sky api search <words\u2026>` to find one").option("-d, --data <json>", "JSON body: inline, @file, or - for stdin").option("-q, --query <key=value>", "query parameter (repeatable)", (v, acc) => [...acc, v], []).option("--workspace <slug>", "send the request in this workspace (X-Universe)").option("--idempotency-key <key>", "retry-safe key for a POST").option("-o, --output <file>", "save the body to a file (for downloads)").action(
+  run(async (method, rest, opts) => {
+    if (method.toLowerCase() === "search") return searchApi(rest);
+    if (rest.length !== 1) throw new Error("usage: sky api <METHOD> <path> (one path), or sky api search <words\u2026>");
+    return callApi(method, rest[0], opts);
+  })
+);
+agent.command("edit <id>").description("change an agent's name, engine, model or thinking level (as its Library folder does)").option("--name <name>", "new name").option("--engine <agentType>", "engine, e.g. CLAUDE_CODE, CODEX, HERMES").option("--model <llm>", "model id, e.g. anthropic/claude-sonnet-4-5").option("--thinking <effort>", 'reasoning effort, or "default" to clear the pin').action(
+  run(async (id, opts) => {
+    const body = {
+      ...opts.name ? { displayName: opts.name } : {},
+      ...opts.engine ? { agentType: opts.engine } : {},
+      ...opts.model ? { llm: opts.model } : {},
+      ...opts.thinking ? { reasoningEffort: opts.thinking === "default" ? null : opts.thinking } : {}
+    };
+    if (!Object.keys(body).length) throw new Error("pass at least one of --name, --engine, --model, --thinking");
+    const { agent: a } = await api("PATCH", `/agents/${encodeURIComponent(id)}`, body);
+    console.log(`${a.id} \u2014 ${a.displayName} \xB7 ${a.agentType} \xB7 ${a.llm}${a.reasoningEffort ? ` \xB7 ${a.reasoningEffort}` : ""}`);
+  })
+);
+skills.command("revisions <skillId>").description("a skill's saved versions, newest first").option("--json", "print as JSON").action(
+  run(async (skillId, opts) => {
+    const page = await api("GET", `/skills/${encodeURIComponent(skillId)}/revisions`);
+    const rows = page.revisions ?? [];
+    if (opts.json) return void console.log(JSON.stringify(rows, null, 2));
+    if (!rows.length) return void console.log("no versions");
+    for (const r of rows) console.log(`${r.id}  ${r.createdAt ?? r.created_at ?? ""}`);
+  })
+);
+skills.command("cat <skillId> <revisionId> <path>").description("print one file (e.g. SKILL.md) of a skill version").action(
+  run(async (skillId, revisionId, path) => {
+    const res = await apiRaw("GET", `/skills/${encodeURIComponent(skillId)}/revisions/${encodeURIComponent(revisionId)}/content?path=${encodeURIComponent(path)}`);
+    if (!res.ok) throw new ApiError(res.status, "http_error", await res.text() || `${res.status}`);
+    process.stdout.write(await res.text());
+  })
+);
+skills.command("rm <skillId>").description("delete a skill from the workspace").action(
+  run(async (skillId) => {
+    await api("DELETE", `/skills/${encodeURIComponent(skillId)}`);
+    console.log(`Deleted ${skillId}`);
+  })
+);
+var notes = program.command("notes").description("memory notes in the Library's memory stores: list, read, write (every save keeps a version)");
+notes.command("stores").description("the workspace's memory stores").action(
+  run(async () => {
+    const { memory_stores: stores } = await api("GET", "/memory_stores?limit=100");
+    if (!stores.length) return void console.log("no memory stores");
+    for (const st of stores) console.log(`${st.id}  ${st.name}`);
+  })
+);
+notes.command("list <storeId> [folder]").description("the notes in a store, optionally under a folder ending in /").action(
+  run(async (storeId, folder) => {
+    const q = folder ? `&path_prefix=${encodeURIComponent(folder)}` : "";
+    const { memories } = await api("GET", `/memory_stores/${encodeURIComponent(storeId)}/memories?limit=100${q}`);
+    if (!memories.length) return void console.log("no notes");
+    for (const n of memories) console.log(`${n.id}  ${n.path}`);
+  })
+);
+notes.command("read <storeId> <noteId>").description("print one note").action(
+  run(async (storeId, noteId) => {
+    const { memory: memory2 } = await api("GET", `/memory_stores/${encodeURIComponent(storeId)}/memories/${encodeURIComponent(noteId)}`);
+    process.stdout.write(memory2.content.endsWith("\n") ? memory2.content : `${memory2.content}
+`);
+  })
+);
+notes.command("save <storeId> <file>").description("write a note from a local file: --path creates one, --note saves a new version of one").option("--path <path>", "path of a new note, e.g. /projects/launch.md").option("--note <noteId>", "the note to update").action(
+  run(async (storeId, file, opts) => {
+    if (!opts.path === !opts.note) throw new Error("pass exactly one of --path (new note) or --note (update)");
+    const content = readFileSync18(file, "utf8");
+    const target = `/memory_stores/${encodeURIComponent(storeId)}/memories${opts.note ? `/${encodeURIComponent(opts.note)}` : ""}`;
+    const { memory: memory2 } = await api("POST", target, { content, ...opts.path ? { path: opts.path } : {} });
+    console.log(`Saved ${memory2.path} (${memory2.id})`);
+  })
+);
+workspace.command("context").description("what every session in the workspace loads at start: AGENTS.md, MEMORY.md, indexes, your member page").action(
+  run(async () => {
+    console.log(JSON.stringify(await api("GET", "/workspace-context"), null, 2));
+  })
+);
 var vault = program.command("vault").description("vaults: credentials a session is granted when it starts (values write-only)");
 vault.command("list").description("the workspace's vaults").action(
   run(async () => {
@@ -7680,7 +7998,7 @@ harness.command("connect").description("run an ACP agent (the command after --)
 }));
 var traceCmd = program.command("trace").description("correlate this machine's agent work with the cloud sessions it starts (metadata only unless you choose content)");
 traceCmd.command("start").description("start a trace: a grant for this machine, a root span, and the spool the hooks write to").option("--name <name>", "a name for the task").option("--source <source>", "how this machine reports itself", "claude-code").option("--hooks [settings]", "also install the Claude Code hooks (default: ./.claude/settings.local.json)").option("--capture <scopes>", "also send content, redacted on this machine first: any of prompts,tool_output,files").option("--file <path>", "a file the files scope may send (repeatable)", collect).option("--dir <path>", "a folder whose files the files scope may send when a file tool touches them (repeatable)", collect).action(run(async (opts) => {
-  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-ZRU624EY.js");
+  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-CFHCOGKB.js");
   if (readState()) throw new Error("a trace is already running here \u2014 `sky trace stop` it first");
   const scopes = parseContentScopes(opts.capture);
   const chosen = chosenPaths(opts.file ?? [], opts.dir ?? []);
@@ -7715,7 +8033,7 @@ traceCmd.command("start").description("start a trace: a grant for this machine,
 }));
 traceCmd.command("hook").description("record one Claude Code hook event read from stdin (run by the installed hooks; never fails, prints nothing)").action(async () => {
   try {
-    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-ZRU624EY.js");
+    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-CFHCOGKB.js");
     const chunks = [];
     for await (const chunk of process.stdin) chunks.push(chunk);
     const input = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
@@ -7728,14 +8046,14 @@ traceCmd.command("hook").description("record one Claude Code hook event read fro
   }
 });
 traceCmd.command("flush").description("send what the spool holds, retrying with backoff").action(run(async () => {
-  const { readState, flush, grantSender } = await import("./trace-ZRU624EY.js");
+  const { readState, flush, grantSender } = await import("./trace-CFHCOGKB.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   const outcome = await flush(grantSender(state), { attempts: 4 });
   console.log(`sent ${outcome.sent}, refused ${outcome.refused}, given up ${outcome.expired}, still pending ${outcome.pending}${outcome.stopped ? ` (stopped: ${outcome.stopped})` : ""}`);
 }));
 traceCmd.command("status").description("the running trace and its spool").action(run(async () => {
-  const { readState, spoolStatus } = await import("./trace-ZRU624EY.js");
+  const { readState, spoolStatus } = await import("./trace-CFHCOGKB.js");
   const state = readState();
   if (!state) {
     console.log("No trace is running here.");
@@ -7745,7 +8063,7 @@ traceCmd.command("status").description("the running trace and its spool").action
   console.log(`${state.trace_id} as ${state.source}: ${spool.pending} pending, ${spool.dropped_full} dropped (spool full), ${spool.dropped_expired} given up, ${spool.refused} refused`);
 }));
 traceCmd.command("show [id]").description("the trace bundle: spans, the sessions they reach, cost counted once per session").option("--json", "print the bundle as JSON").action(run(async (id, opts) => {
-  const { readState } = await import("./trace-ZRU624EY.js");
+  const { readState } = await import("./trace-CFHCOGKB.js");
   const ref = id ?? readState()?.trace_id;
   if (!ref) throw new Error("name a trace, or start one here");
   const bundle = await api("GET", `/traces/${ref}`);
@@ -7772,7 +8090,7 @@ traceCmd.command("show [id]").description("the trace bundle: spans, the sessions
   for (const gap of bundle.gaps) console.log(`  gap: ${gap.span_id} ${gap.reason}`);
 }));
 traceCmd.command("stop").description("end the root span, send what is left, and revoke this machine's grant").action(run(async () => {
-  const { readState, record, flush, grantSender, clearState } = await import("./trace-ZRU624EY.js");
+  const { readState, record, flush, grantSender, clearState } = await import("./trace-CFHCOGKB.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   if (state.root_span) record(() => [{ span_id: state.root_span, kind: "end", outcome: "completed" }]);
@@ -7782,7 +8100,7 @@ traceCmd.command("stop").description("end the root span, send what is left, and
   console.log(`Stopped ${state.trace_id}${outcome.pending ? ` (${outcome.pending} events could not be sent)` : ""}`);
 }));
 traceCmd.command("sync [payload]").description("upload this machine's agent sessions (Claude Code, Codex, Cursor, Gemini CLI and every other agent `--agents` lists) to the matching workspace's trace library, redacted here first").option("--enable", "turn sync on for this machine").option("--disable", "turn sync off; nothing more is uploaded").option("--route <match=workspace>", "send sessions whose folder path contains <match> to <workspace> (repeatable; replaces the saved rules)", collect).option("--default <workspace>", "where a session no rule matches goes").option("--keep-local", "keep sessions no rule matches on this machine (the default)").option("--session <ref>", "only this session: its id or transcript path (repeatable)", collect).option("--import <export>", "add a downloaded cloud export (claude.ai, ChatGPT, Gemini, Grok, DeepSeek \u2026: its .zip, folder or file) so sync uploads it (repeatable)", collect).option("--agents", "list the agents sync reads and which are on this machine").option("--full", "re-read every session, not only files that changed").option("--limit <n>", "at most this many changed sessions this run", (v) => Number.parseInt(v, 10)).option("--dry-run", "show what would be uploaded without uploading").option("--hook", "run from a Claude Code SessionEnd hook or Codex notify: upload that session in the background and return at once").option("--install-schedule", "also sweep every 15 minutes (macOS launchd)").option("--status", "what sync has done on this machine").option("--quiet", "print only failures").action(async (payload, opts) => {
-  const lib = await import("./trace-library-QOQUAL5H.js");
+  const lib = await import("./trace-library-2VHTJCOY.js");
   if (opts.hook) {
     try {
       let raw = payload ?? "";
@@ -7854,11 +8172,11 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
       console.log(`Sweeping every 15 minutes (${plist}); a full re-read runs weekly. Log: ${log}`);
     }
     if (opts.status) {
-      const { readFileSync: readFileSync18 } = await import("fs");
+      const { readFileSync: readFileSync19 } = await import("fs");
       const { join: join19 } = await import("path");
       let state = { sessions: {} };
       try {
-        state = JSON.parse(readFileSync18(join19(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
+        state = JSON.parse(readFileSync19(join19(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
       } catch {
       }
       const counts = /* @__PURE__ */ new Map();
@@ -7891,7 +8209,7 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
   })();
 });
 traceCmd.command("search <query...>").description("search every session in a workspace's trace library (literal substring)").option("--workspace <slug>", "the workspace to search (default: the current one)").option("--limit <n>", "hits per page", (v) => Number.parseInt(v, 10), 20).option("--cursor <cursor>", "the next page of an earlier search").option("--json", "print the page as JSON").action(run(async (words, opts) => {
-  const { libraryRequest } = await import("./trace-library-QOQUAL5H.js");
+  const { libraryRequest } = await import("./trace-library-2VHTJCOY.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const params = new URLSearchParams({ q: words.join(" "), scope: "traces", limit: String(opts.limit), ...opts.cursor ? { cursor: opts.cursor } : {} });
@@ -7908,7 +8226,7 @@ traceCmd.command("search <query...>").description("search every session in a wor
   if (page.nextCursor) console.log(`More: sky trace search ${JSON.stringify(words.join(" "))} --workspace ${workspace2} --cursor ${page.nextCursor}`);
 }));
 traceCmd.command("library").description("list the sessions in a workspace's trace library, most recently updated first").option("--workspace <slug>", "the workspace (default: the current one)").option("--limit <n>", "how many", (v) => Number.parseInt(v, 10), 20).option("--json", "print the page as JSON").action(run(async (opts) => {
-  const { libraryRequest } = await import("./trace-library-QOQUAL5H.js");
+  const { libraryRequest } = await import("./trace-library-2VHTJCOY.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const page = await libraryRequest("GET", `/trace-library?limit=${opts.limit}`, workspace2);
@@ -8214,7 +8532,7 @@ session.command("code-review <id>").description("run the code-review assistant o
     }
   })
 );
-session.command("snapshot <id>").description("read or revoke the public share link for a session").requiredOption("--thread <threadId>", "the thread/comparison that owns this session").option("--revoke", "revoke the snapshot link instead of reading it").option("--json", "print as JSON").action(
+session.command("snapshot <id>").usage("<id> --thread <threadId> [--revoke] [--json]").description("read or revoke the public share link for a session; --thread is required").requiredOption("--thread <threadId>", "(required) the thread/comparison that owns this session").option("--revoke", "revoke the snapshot link instead of reading it").option("--json", "print as JSON").action(
   run(async (id, opts) => {
     const path = `/sessions/${encodeURIComponent(id)}/snapshot?thread=${encodeURIComponent(opts.thread)}`;
     const result = await api(opts.revoke ? "DELETE" : "GET", path);