@agentsky/sky 2.24.1 → 2.25.0

package/dist/{chunk-S4YG3TXA.js → chunk-LPUGEMCV.js}

@@ -38,7 +38,7 @@ function currentUniverse() {
 }
 
 // src/version.ts
-var CLI_VERSION = "2.24.1";
+var CLI_VERSION = "2.25.0";
 var USER_AGENT = `sky-cli/${CLI_VERSION} (${process.platform}; node/${process.versions.node})`;
 
 export {

package/dist/{chunk-KWLEADJQ.js → chunk-QROAAJN2.js}

@@ -3,7 +3,7 @@ import {
   apiBase,
   apiToken,
   currentUniverse
-} from "./chunk-S4YG3TXA.js";
+} from "./chunk-LPUGEMCV.js";
 
 // src/api.ts
 import { createWriteStream, writeFileSync } from "fs";
@@ -97,6 +97,9 @@ async function downloadFileTo(fileId, outPath) {
     headers: { "user-agent": USER_AGENT, ...authHeaders() }
   });
   if (!res.ok) await parseError(res);
+  return writeResponseFile(res, outPath);
+}
+async function writeResponseFile(res, outPath) {
   if (!res.body) {
     writeFileSync(outPath, new Uint8Array(0));
     return 0;
@@ -189,6 +192,7 @@ export {
   uploadFile,
   apiForm,
   downloadFileTo,
+  writeResponseFile,
   apiBytes,
   resolveSessionRef,
   streamEvents,

package/dist/index.js

@@ -9,8 +9,9 @@ import {
   postEvents,
   resolveSessionRef,
   streamEvents,
-  uploadFile
-} from "./chunk-KWLEADJQ.js";
+  uploadFile,
+  writeResponseFile
+} from "./chunk-QROAAJN2.js";
 import {
   CLI_VERSION,
   USER_AGENT,
@@ -21,7 +22,7 @@ import {
   currentUniverse,
   loadConfig,
   saveConfig
-} from "./chunk-S4YG3TXA.js";
+} from "./chunk-LPUGEMCV.js";
 import {
   AGENT_TYPES,
   MODEL_SUBSCRIPTION_PLAN_PHRASE,
@@ -47,7 +48,7 @@ import {
 import "./chunk-MLKGABMK.js";
 
 // src/index.ts
-import { existsSync as existsSync13, readFileSync as readFileSync19, writeFileSync as writeFileSync11 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync20, writeFileSync as writeFileSync10 } from "fs";
 import { basename as basename9, resolve as resolve9 } from "path";
 import { createInterface as createInterface6 } from "readline";
 import { Command } from "commander";
@@ -2643,6 +2644,35 @@ it, and name its path in the brief.
 6. Tell the person what was done, which agent did which part, and what it cost
    (\`get_task\` reports the task's cost).
 
+## Share an existing Library document
+
+Use \`read_library_file_links\` with the document's exact \`ref\` to read its
+current revision, supported access and real available members. The reference
+can name a Drive file (including an uploaded meeting note), task file, memory
+note, skill file, agent user instructions (\`{kind:"agent_prompt",agentId}\`), saved artifact or platform artifact. Only the user-authored AGENTS.md is shared; system instructions and credentials are never included. \`workspace\` names the
+audience workspace, never a storage move or the connection's default.
+\`share_library_file\` changes only the requested workspace/member grants;
+\`publish_library_file\` enables or disables a public view-only link while
+preserving other grants. Both read first and merge against the current
+revision. \`revoke_library_file_links\` needs the explicit revision you reviewed.
+A conflict is an error: read the current state before intentionally retrying.
+These tools send no messages and start no sessions. CLI equivalents are
+\`sky library links show\`, \`share\`, \`publish\` and \`revoke\`; their help
+shows every reference shape. Existing artifact links and version pins keep
+using their existing controls and \`share_artifact\`.
+
+When you receive a Library shared/public URL, \`read_shared_library_file\`
+accepts the 43-character token at its end; \`public: true\` chooses the public
+view-only reader. A recipient with a live edit grant can use
+\`save_shared_library_file\` with the opaque source revision from that read
+and exactly one native text/HTML/Office/restore field. Public links have no
+writer. The CLI equivalents are \`sky library links read --token \u2026\`
+(\`--output\` streams original bytes) and \`sky library links save --token \u2026
+--revision \u2026 --file \u2026\`; \`--data\` accepts the other native save fields.
+A 403 is not a saved result; a 409 requires reading current state before an
+intentional retry. This source revision is distinct from the integer revision
+of the sharing settings.
+
 ## Build an agent that the person's own application runs
 
 When the person wants an agent their product starts for its customers, built
@@ -5261,6 +5291,83 @@ function renderThreadSummary(t) {
   return `${t.id.slice(0, 12)}  ${flag}${t.title.slice(0, 40).padEnd(44)} [${agents}]  ${status}`;
 }
 
+// src/library.ts
+import { readFileSync as readFileSync17 } from "fs";
+
+// src/api-command.ts
+import { readFileSync as readFileSync16 } from "fs";
+var API_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
+function readData(data, stdin = () => readFileSync16(0, "utf8")) {
+  if (data === void 0) return void 0;
+  const raw = data === "-" ? stdin() : data.startsWith("@") ? readFileSync16(data.slice(1), "utf8") : data;
+  try {
+    JSON.parse(raw);
+  } catch {
+    throw new Error("--data must be JSON (inline, @file or - for stdin)");
+  }
+  return raw;
+}
+function requestPath(path, query = []) {
+  if (!path.startsWith("/") || path.startsWith("//")) throw new Error("path must start with /, e.g. /threads");
+  const clean = path.replace(/^\/v1(?=\/)/, "");
+  const params = new URLSearchParams();
+  for (const pair of query) {
+    const at = pair.indexOf("=");
+    if (at <= 0) throw new Error(`--query needs key=value, got "${pair}"`);
+    params.append(pair.slice(0, at), pair.slice(at + 1));
+  }
+  const sep4 = clean.includes("?") ? "&" : "?";
+  const encoded = params.toString();
+  return encoded ? `${clean}${sep4}${encoded}` : clean;
+}
+function matchOperations(doc, words) {
+  const needles = words.map((w) => w.toLowerCase());
+  const out = [];
+  for (const [path, item] of Object.entries(doc.paths ?? {})) {
+    for (const [method, op] of Object.entries(item)) {
+      if (!API_METHODS.includes(method.toUpperCase())) continue;
+      const hay = `${method} ${path} ${op.summary ?? ""} ${op.operationId ?? ""}`.toLowerCase();
+      if (needles.every((n) => hay.includes(n))) out.push({ method: method.toUpperCase(), path, summary: op.summary, operationId: op.operationId });
+    }
+  }
+  return out.sort((a, b) => a.path.localeCompare(b.path) || a.method.localeCompare(b.method));
+}
+async function searchApi(words) {
+  const res = await apiRaw("GET", "/openapi.json", { auth: false });
+  if (!res.ok) throw new Error(`could not read the API reference (${res.status})`);
+  const ops = matchOperations(await res.json(), words);
+  if (!ops.length) {
+    console.log("no operations match");
+    return;
+  }
+  for (const op of ops) console.log(`${op.method.padEnd(6)} ${op.path}${op.summary ? `  \u2014 ${op.summary}` : ""}`);
+}
+async function callApi(method, path, opts) {
+  const verb = method.toUpperCase();
+  if (!API_METHODS.includes(verb)) throw new Error(`method must be one of ${API_METHODS.join(", ")} or "search"`);
+  const body = readData(opts.data);
+  if (body !== void 0 && verb === "GET") throw new Error("a GET takes no --data; use --query");
+  const res = await apiRaw(verb, requestPath(path, opts.query), { body, idempotencyKey: opts.idempotencyKey, universe: opts.workspace });
+  const type = res.headers.get("content-type") ?? "";
+  if (opts.output) {
+    await writeResponseFile(res, opts.output);
+    console.error(`${res.status} \u2192 ${opts.output}`);
+  } else if (/json/.test(type)) {
+    const text = await res.text();
+    let printed = text;
+    try {
+      printed = JSON.stringify(JSON.parse(text), null, 2);
+    } catch {
+    }
+    (res.ok ? console.log : console.error)(printed);
+  } else if (/^text\/|xml|csv|markdown/.test(type) || !type) {
+    (res.ok ? console.log : console.error)(await res.text());
+  } else {
+    console.error(`${res.status}: ${type} body (${res.headers.get("content-length") ?? "?"} bytes); pass --output <file> to save it`);
+  }
+  if (!res.ok && res.status !== 304) process.exitCode = 1;
+}
+
 // src/library.ts
 var artifactPath = (id) => `/library/artifacts/${encodeURIComponent(id)}`;
 async function listLibrary(query = {}) {
@@ -5295,9 +5402,139 @@ function renderLibraryArtifact(artifact2) {
   const version = artifact2.currentVersion ? `v${artifact2.currentVersion}` : "";
   return `${artifact2.id}  ${artifact2.name}  ${version}${artifact2.shared ? "  shared" : ""}`;
 }
+var libraryFileRefSchema = external_exports.discriminatedUnion("kind", [
+  external_exports.object({ kind: external_exports.literal("agent_prompt"), agentId: external_exports.string().min(1).max(200).regex(/^[a-zA-Z0-9_-]+$/) }).strict(),
+  external_exports.object({ kind: external_exports.literal("file"), fileId: external_exports.string().min(1), sessionId: external_exports.string().min(1).optional() }).strict(),
+  external_exports.object({ kind: external_exports.literal("task_file"), taskId: external_exports.string().min(1), path: external_exports.string().min(1) }).strict(),
+  external_exports.object({ kind: external_exports.literal("memory_note"), storeId: external_exports.string().min(1), memoryId: external_exports.string().min(1) }).strict(),
+  external_exports.object({ kind: external_exports.literal("skill_file"), skillId: external_exports.string().min(1), path: external_exports.string().min(1) }).strict(),
+  external_exports.object({ kind: external_exports.literal("artifact"), artifactId: external_exports.string().min(1) }).strict(),
+  external_exports.object({ kind: external_exports.literal("platform_artifact"), artifactId: external_exports.string().min(1), path: external_exports.string().min(1).optional() }).strict()
+]);
+var linkAccessSchema = external_exports.enum(["none", "view", "edit"]);
+var linkMemberSchema = external_exports.object({ userId: external_exports.string().min(1), access: external_exports.enum(["view", "edit"]) });
+var linkRevisionSchema = external_exports.number().int().nonnegative();
+var libraryLinksSchema = external_exports.object({
+  link: external_exports.object({
+    id: external_exports.string().nullable(),
+    ref: libraryFileRefSchema,
+    workspace: external_exports.string().nullable(),
+    revision: linkRevisionSchema,
+    editable: external_exports.boolean(),
+    workspaceAccess: linkAccessSchema,
+    members: external_exports.array(linkMemberSchema),
+    publicEnabled: external_exports.boolean(),
+    sharedUrl: external_exports.string().nullable(),
+    publicUrl: external_exports.string().nullable()
+  }),
+  availableMembers: external_exports.array(external_exports.object({ userId: external_exports.string(), name: external_exports.string().nullable(), email: external_exports.string().nullable() }))
+});
+function parseLibraryFileRef(value) {
+  return libraryFileRefSchema.parse(JSON.parse(value));
+}
+async function getLibraryLinks(ref, workspace2) {
+  const params = new URLSearchParams({ ref: JSON.stringify(libraryFileRefSchema.parse(ref)), ...workspace2 ? { workspace: workspace2 } : {} });
+  const result = libraryLinksSchema.parse(await api("GET", `/library/links?${params}`));
+  if (JSON.stringify(result.link.ref) !== JSON.stringify(libraryFileRefSchema.parse(ref)) || workspace2 !== void 0 && result.link.workspace !== workspace2) throw new Error("The API returned sharing for a different source. No access was changed.");
+  return result;
+}
+async function updateLibraryLinks(ref, change) {
+  const current = await getLibraryLinks(ref, change.workspace);
+  if (change.revision !== void 0 && linkRevisionSchema.parse(change.revision) !== current.link.revision) throw new Error("Sharing changed since that revision. Read the current links and retry.");
+  const members = new Map(current.link.members.map((member) => [member.userId, member]));
+  for (const member of change.memberChanges ?? []) {
+    const userId = external_exports.string().min(1).parse(member.userId);
+    const access = linkAccessSchema.parse(member.access);
+    if (access === "none") members.delete(userId);
+    else members.set(userId, { userId, access });
+  }
+  return libraryLinksSchema.parse(await api("PUT", "/library/links", {
+    ref,
+    workspace: current.link.workspace,
+    revision: current.link.revision,
+    workspaceAccess: change.workspaceAccess === void 0 ? current.link.workspaceAccess : linkAccessSchema.parse(change.workspaceAccess),
+    members: [...members.values()],
+    publicEnabled: change.publicEnabled === void 0 ? current.link.publicEnabled : external_exports.boolean().parse(change.publicEnabled)
+  }));
+}
+async function revokeLibraryLinks(ref, revision, workspace2) {
+  return libraryLinksSchema.parse(await api("DELETE", "/library/links", {
+    ref: libraryFileRefSchema.parse(ref),
+    revision: linkRevisionSchema.parse(revision),
+    ...workspace2 ? { workspace: workspace2 } : {}
+  }));
+}
+var sharedLibraryToken = external_exports.string().length(43).regex(/^[A-Za-z0-9_-]{43}$/, "use the 43-character token from the Library shared or public URL");
+var sharedLibrarySource = external_exports.object({
+  name: external_exports.string(),
+  format: external_exports.enum(["file", "site"]),
+  mediaType: external_exports.string(),
+  revision: external_exports.string(),
+  editable: external_exports.boolean(),
+  url: external_exports.string(),
+  maxBytes: external_exports.number(),
+  history: external_exports.array(external_exports.record(external_exports.string(), external_exports.unknown()))
+}).passthrough();
+var sharedLibrarySaved = external_exports.object({ url: external_exports.string(), revision: external_exports.string().min(1), publishedAt: external_exports.string().datetime({ offset: true }), text: external_exports.string().nullable().optional(), historyRevision: external_exports.string().optional() });
+var sharedLibrarySaveSchema = external_exports.object({
+  revision: external_exports.string().min(1),
+  text: external_exports.string().optional(),
+  html: external_exports.string().optional(),
+  office: external_exports.string().optional(),
+  docx: external_exports.string().optional(),
+  restoreRevision: external_exports.string().min(1).optional(),
+  requestId: external_exports.string().uuid().optional()
+}).strict().refine((body) => [body.text, body.html, body.office, body.docx, body.restoreRevision].filter((field) => field !== void 0).length === 1, "provide exactly one of text, html, office, docx or restoreRevision");
+async function readSharedLibraryFile(token, options = {}) {
+  const path = `/library/${options.public ? "public" : "shared"}/${sharedLibraryToken.parse(token)}`;
+  if (!options.output) return sharedLibrarySource.parse(await api("GET", path, void 0, { auth: options.public !== true }));
+  const response = await apiRaw("GET", `${path}?raw=1`, { auth: options.public !== true });
+  if (!response.ok) {
+    const body = await response.json().catch(() => null);
+    throw new ApiError(response.status, body?.error?.code ?? "http_error", body?.error?.message ?? `Download failed (${response.status}).`);
+  }
+  return { output: options.output, bytes: await writeResponseFile(response, options.output) };
+}
+async function saveSharedLibraryFile(token, body) {
+  return sharedLibrarySaved.parse(await api("PUT", `/library/shared/${sharedLibraryToken.parse(token)}`, sharedLibrarySaveSchema.parse(body)));
+}
+function registerLibraryLinkCommands(library2) {
+  const libraryLinks = library2.command("links").description("share or publish any Library file; --workspace selects the sharing audience without moving the file");
+  libraryLinks.command("read").description("read a shared native document snapshot; --public reads a public view-only link").requiredOption("--token <token>", "43-character token from a Library shared or public URL").option("--public", "use the public reader without sending your API key").option("--output <file>", "stream the original bytes to this file instead of printing the JSON snapshot").action(async (opts) => {
+    console.log(JSON.stringify(await readSharedLibraryFile(opts.token, opts), null, 2));
+  });
+  libraryLinks.command("save").description("save through a live recipient edit grant; --revision is the opaque source revision from links read").requiredOption("--token <token>", "43-character token from the authenticated shared URL (public URLs have no writer)").requiredOption("--revision <revision>", "native source revision from links read; stale revisions fail without retry").option("--file <path>", "UTF-8 text file to save").option("--data <json>", "instead of --file, JSON/ @file / - containing exactly one text/html/office/docx/restoreRevision and optional requestId").action(async (opts) => {
+    if (opts.file !== void 0 === (opts.data !== void 0)) throw new Error("Choose exactly one of --file or --data.");
+    const body = opts.file !== void 0 ? { text: new TextDecoder("utf-8", { fatal: true }).decode(readFileSync17(opts.file)) } : JSON.parse(readData(opts.data));
+    if (!body || typeof body !== "object" || Array.isArray(body)) throw new Error("--data must be a JSON object with one native save field.");
+    if ("revision" in body && body.revision !== opts.revision) throw new Error("--data revision must match --revision.");
+    console.log(JSON.stringify(await saveSharedLibraryFile(opts.token, sharedLibrarySaveSchema.parse({ ...body, revision: opts.revision })), null, 2));
+  });
+  const linkRefOption = (command) => command.requiredOption("--ref <json>", 'file reference JSON, e.g. {"kind":"file","fileId":"file_\u2026"}').option("--workspace <slug>", "the team audience for this link (omit for private/public-only sharing)");
+  const linkRevision = (value) => value === void 0 ? void 0 : linkRevisionSchema.parse(Number(external_exports.string().regex(/^\d+$/, "revision must be a nonnegative integer").parse(value)));
+  const printLibraryLinks = (value) => console.log(JSON.stringify(value, null, 2));
+  linkRefOption(libraryLinks.command("show").description("read sharing, real workspace members and the current revision without creating a link")).action(async (opts) => printLibraryLinks(await getLibraryLinks(parseLibraryFileRef(opts.ref), opts.workspace)));
+  linkRefOption(libraryLinks.command("share").description("change workspace or specific members' access while preserving every unmentioned grant")).option("--workspace-access <access>", "none, view or edit (edit requires an editable source)").option("--member <user:access>", "grant a member view or edit; repeat to update several members", (value, previous) => [...previous, value], []).option("--remove-member <user>", "clear a member override; workspace access still applies", (value, previous) => [...previous, value], []).option("--revision <n>", "refuse if sharing changed since this reviewed revision").action(async (opts) => {
+    if (opts.workspaceAccess === void 0 && !opts.member?.length && !opts.removeMember?.length) throw new Error("Choose --workspace-access, --member or --remove-member; links show reads without changing access.");
+    const memberChanges = (opts.member ?? []).map((value) => {
+      const colon = value.lastIndexOf(":");
+      if (colon < 1) throw new Error("--member must be a user id followed by :view or :edit");
+      return { userId: value.slice(0, colon), access: external_exports.enum(["view", "edit"]).parse(value.slice(colon + 1)) };
+    });
+    memberChanges.push(...(opts.removeMember ?? []).map((userId) => ({ userId, access: "none" })));
+    printLibraryLinks(await updateLibraryLinks(parseLibraryFileRef(opts.ref), {
+      workspace: opts.workspace,
+      revision: linkRevision(opts.revision),
+      memberChanges,
+      workspaceAccess: opts.workspaceAccess === void 0 ? void 0 : external_exports.enum(["none", "view", "edit"]).parse(opts.workspaceAccess)
+    }));
+  });
+  linkRefOption(libraryLinks.command("publish").description("create a public view-only link; --disable revokes only public access and keeps other grants")).option("--disable", "turn off public viewing").option("--revision <n>", "refuse if sharing changed since this reviewed revision").action(async (opts) => printLibraryLinks(await updateLibraryLinks(parseLibraryFileRef(opts.ref), { workspace: opts.workspace, revision: linkRevision(opts.revision), publicEnabled: !opts.disable })));
+  linkRefOption(libraryLinks.command("revoke").description("stop all sharing at an explicitly reviewed revision")).requiredOption("--revision <n>", "current revision from links show; stale revisions fail without retry").action(async (opts) => printLibraryLinks(await revokeLibraryLinks(parseLibraryFileRef(opts.ref), linkRevision(opts.revision), opts.workspace)));
+}
 
 // src/design-systems.ts
-import { readdirSync as readdirSync8, readFileSync as readFileSync16, statSync as statSync9 } from "fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync18, statSync as statSync9 } from "fs";
 import { join as join18, relative as relative5, sep as sep3 } from "path";
 var TEXT2 = /\.(mdx?|markdown|txt|json|m?js|cjs|jsx|tsx?|css|html?|svg|xml|csv|ya?ml|toml)$/i;
 var MEDIA = {
@@ -5341,7 +5578,7 @@ function fileTableFrom(dir) {
         continue;
       }
       const key = relative5(dir, path).split(sep3).join("/");
-      const bytes = readFileSync16(path);
+      const bytes = readFileSync18(path);
       files2[key] = TEXT2.test(name) ? bytes.toString("utf8") : `data:${MEDIA[name.split(".").pop()?.toLowerCase() ?? ""] ?? "application/octet-stream"};base64,${bytes.toString("base64")}`;
     }
   };
@@ -5364,80 +5601,6 @@ async function designComments(id, input) {
   return api(input ? "POST" : "GET", `/artifacts/${encodeURIComponent(id)}/design-system/comments`, input);
 }
 
-// src/api-command.ts
-import { readFileSync as readFileSync17, writeFileSync as writeFileSync9 } from "fs";
-var API_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
-function readData(data, stdin = () => readFileSync17(0, "utf8")) {
-  if (data === void 0) return void 0;
-  const raw = data === "-" ? stdin() : data.startsWith("@") ? readFileSync17(data.slice(1), "utf8") : data;
-  try {
-    JSON.parse(raw);
-  } catch {
-    throw new Error("--data must be JSON (inline, @file or - for stdin)");
-  }
-  return raw;
-}
-function requestPath(path, query = []) {
-  if (!path.startsWith("/") || path.startsWith("//")) throw new Error("path must start with /, e.g. /threads");
-  const clean = path.replace(/^\/v1(?=\/)/, "");
-  const params = new URLSearchParams();
-  for (const pair of query) {
-    const at = pair.indexOf("=");
-    if (at <= 0) throw new Error(`--query needs key=value, got "${pair}"`);
-    params.append(pair.slice(0, at), pair.slice(at + 1));
-  }
-  const sep4 = clean.includes("?") ? "&" : "?";
-  const encoded = params.toString();
-  return encoded ? `${clean}${sep4}${encoded}` : clean;
-}
-function matchOperations(doc, words) {
-  const needles = words.map((w) => w.toLowerCase());
-  const out = [];
-  for (const [path, item] of Object.entries(doc.paths ?? {})) {
-    for (const [method, op] of Object.entries(item)) {
-      if (!API_METHODS.includes(method.toUpperCase())) continue;
-      const hay = `${method} ${path} ${op.summary ?? ""} ${op.operationId ?? ""}`.toLowerCase();
-      if (needles.every((n) => hay.includes(n))) out.push({ method: method.toUpperCase(), path, summary: op.summary, operationId: op.operationId });
-    }
-  }
-  return out.sort((a, b) => a.path.localeCompare(b.path) || a.method.localeCompare(b.method));
-}
-async function searchApi(words) {
-  const res = await apiRaw("GET", "/openapi.json", { auth: false });
-  if (!res.ok) throw new Error(`could not read the API reference (${res.status})`);
-  const ops = matchOperations(await res.json(), words);
-  if (!ops.length) {
-    console.log("no operations match");
-    return;
-  }
-  for (const op of ops) console.log(`${op.method.padEnd(6)} ${op.path}${op.summary ? `  \u2014 ${op.summary}` : ""}`);
-}
-async function callApi(method, path, opts) {
-  const verb = method.toUpperCase();
-  if (!API_METHODS.includes(verb)) throw new Error(`method must be one of ${API_METHODS.join(", ")} or "search"`);
-  const body = readData(opts.data);
-  if (body !== void 0 && verb === "GET") throw new Error("a GET takes no --data; use --query");
-  const res = await apiRaw(verb, requestPath(path, opts.query), { body, idempotencyKey: opts.idempotencyKey, universe: opts.workspace });
-  const type = res.headers.get("content-type") ?? "";
-  if (opts.output) {
-    writeFileSync9(opts.output, new Uint8Array(await res.arrayBuffer()));
-    console.error(`${res.status} \u2192 ${opts.output}`);
-  } else if (/json/.test(type)) {
-    const text = await res.text();
-    let printed = text;
-    try {
-      printed = JSON.stringify(JSON.parse(text), null, 2);
-    } catch {
-    }
-    (res.ok ? console.log : console.error)(printed);
-  } else if (/^text\/|xml|csv|markdown/.test(type) || !type) {
-    (res.ok ? console.log : console.error)(await res.text());
-  } else {
-    console.error(`${res.status}: ${type} body (${res.headers.get("content-length") ?? "?"} bytes); pass --output <file> to save it`);
-  }
-  if (!res.ok && res.status !== 304) process.exitCode = 1;
-}
-
 // src/billing-plans.ts
 var readCodingPlan = () => api("GET", "/billing/coding-plan");
 function joinCodingPlan(dollars2, requestId) {
@@ -5524,7 +5687,7 @@ function workspaceFlagIsCommands(argv, commandPath) {
 }
 
 // src/harness.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync18, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "fs";
 import { dirname as dirname9, join as join19, resolve as resolve8 } from "path";
 var HARNESS_FILE = "harness.json";
 function harnessFilePath(dir) {
@@ -5536,7 +5699,7 @@ function readHarnessFile(dir) {
     throw new Error(`no ${HARNESS_FILE} found in ${resolve8(dir)} \u2014 run \`sky harness init\` first`);
   }
   try {
-    return JSON.parse(readFileSync18(path, "utf8"));
+    return JSON.parse(readFileSync19(path, "utf8"));
   } catch (err) {
     throw new Error(`could not parse ${path}: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -5567,7 +5730,7 @@ function harnessInit(dir) {
     throw new Error(`${path} already exists \u2014 delete it to re-init`);
   }
   mkdirSync6(dirname9(path), { recursive: true });
-  writeFileSync10(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
+  writeFileSync9(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
 `);
   console.log(`Created ${path}`);
   console.log(INIT_COMMENT);
@@ -6306,7 +6469,7 @@ sessionWorkspace.command("cat <ref> <path>").description("print a file (up to 1
   run(async (ref, path, opts) => {
     const bytes = await readFile(await resolveSessionRef(ref), path);
     if (opts.out) {
-      writeFileSync11(opts.out, bytes);
+      writeFileSync10(opts.out, bytes);
       console.error(`saved ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -6323,7 +6486,7 @@ sessionWorkspace.command("patch <ref> [repo]").description("the work in a reposi
     console.error(`${meta.repo}: ${meta.commits.length} commit${meta.commits.length === 1 ? "" : "s"} since ${meta.base_branch || "the imported copy"} (${meta.base_commit.slice(0, 12)})`);
     if (!patch.length) console.error("nothing changed");
     else if (opts.out) {
-      writeFileSync11(opts.out, patch);
+      writeFileSync10(opts.out, patch);
       console.error(`wrote ${opts.out} \u2014 apply with: git apply ${opts.out}`);
     } else process.stdout.write(patch);
   })
@@ -6828,14 +6991,14 @@ task.command("get <task> <path>").description("read one task file; prints it, or
   run(async (taskId, path, opts) => {
     const bytes = await readTaskFile(taskId, path);
     if (opts.out) {
-      writeFileSync11(opts.out, bytes);
+      writeFileSync10(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
 );
 task.command("put <task> <path> <local>").description("write a local file to <path> in the task's files (every session of the task sees it)").action(
   run(async (taskId, path, local) => {
-    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync19(local), mediaTypeFor(local));
+    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync20(local), mediaTypeFor(local));
     console.log(`${renderTaskFile(file)}${conflict ? "  (replaced a version you had not seen)" : ""}`);
   })
 );
@@ -6908,6 +7071,34 @@ task.command("verdict <task> <did-the-job>").description("record whether the tas
     console.log(`Recorded verdict on task ${updated.id}: did_the_job=${value === "yes"}`);
   })
 );
+var plugins = program.command("plugins").description("Claude Code plugins in the workspace: install from GitHub, list, remove");
+plugins.command("list").description("the workspace's installed plugins and the skills each one installed").option("--json", "print the list as JSON").action(
+  run(async (opts) => {
+    const { plugins: list } = await api("GET", "/plugins");
+    if (opts.json) return void console.log(JSON.stringify(list));
+    if (list.length === 0) return void console.log("No plugins. `sky plugins install github:owner/repo[/path][@ref]`");
+    for (const p of list) console.log(`${p.name}  ${p.skills.length} skill${p.skills.length === 1 ? "" : "s"}: ${p.skills.map((s) => s.displayName.split("/").pop()).join(", ")}`);
+  })
+);
+plugins.command("install <source>").description("install or update a plugin: github:owner/repo[/path][@ref] or a github.com URL").option("--json", "print the result as JSON").action(
+  run(async (source, opts) => {
+    const result = await api("POST", "/plugins", { source });
+    if (opts.json) return void console.log(JSON.stringify(result));
+    console.log(`Installed ${result.plugin.name}${result.plugin.version ? ` ${result.plugin.version}` : ""} from ${result.plugin.source}: ${result.skills.length} skill(s), on for every new session.`);
+    for (const c of result.connectors) {
+      const state = c.app === null ? "no AgentSky connector for it yet" : c.connected ? `uses your ${c.app} connection` : `connect ${c.app}: ${c.connect_url}`;
+      console.log(`  connector ${c.server}: ${state}`);
+    }
+    for (const s of result.skipped) console.log(`  skipped ${s.part}: ${s.reason}`);
+    for (const r of result.removed) console.log(`  ${r.part}: ${r.result.replace("_", " ")} (no longer in the plugin)`);
+  })
+);
+plugins.command("rm <name>").description("remove a plugin's skills (a skill a session still holds is switched off)").action(
+  run(async (name) => {
+    const result = await api("DELETE", `/plugins/${encodeURIComponent(name)}`);
+    console.log(`Removed ${result.name}: ${result.parts.map((p) => `${p.part} ${p.result.replace("_", " ")}`).join(", ")}`);
+  })
+);
 var skills = program.command("skills").description("the workspace's skill store: upload a skill, then attach it to an agent (sky skills attach, or [[skills]] in agent.toml)");
 skills.command("upload <dir>").description("upload a skill directory (SKILL.md at its root) as a new skill").option("--name <name>", "display name (default: the directory's name)").option("--json", "print the stored skill as JSON").action(
   run(async (dir, opts) => {
@@ -6999,7 +7190,7 @@ library.command("list").description("your Library, newest first").option("--sear
 );
 library.command("upload <path>").description("save a file from this computer to your Library").option("--workspace <key>", "place it in this workspace").action(
   run(async (path, opts) => {
-    const bytes = readFileSync19(path);
+    const bytes = readFileSync20(path);
     const { artifact: artifact2 } = await uploadToLibrary({ bytes, name: basename9(path), mediaType: "application/octet-stream" }, `sky-upload-${crypto.randomUUID()}`, opts.workspace);
     console.log(renderLibraryArtifact(artifact2));
   })
@@ -7030,10 +7221,11 @@ library.command("place <id> <workspace>").description('place your artifact in a
 library.command("download <id> <out>").description("save one version's bytes to a file").option("--version <n>", "a saved version (the current one when omitted)").action(
   run(async (id, out, opts) => {
     const { bytes } = await downloadLibraryArtifact(id, opts.version ? Number(opts.version) : void 0);
-    writeFileSync11(out, bytes);
+    writeFileSync10(out, bytes);
     console.log(`wrote ${bytes.length} bytes to ${out}`);
   })
 );
+registerLibraryLinkCommands(library);
 var artifact = program.command("artifact").description("artifacts: publish a task's files as a named, shareable result");
 artifact.command("list").description("the workspace's artifacts, or one task's with --task").option("--task <task>", "only this task's artifacts").action(
   run(async (opts) => {
@@ -7051,7 +7243,7 @@ artifact.command("get <id> <path>").description("read one file of an artifact; p
   run(async (id, path, opts) => {
     const bytes = await readArtifactFile(id, path);
     if (opts.out) {
-      writeFileSync11(opts.out, bytes);
+      writeFileSync10(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -7089,7 +7281,7 @@ designSystem.command("import <task> <folder>").description("import a local desig
 );
 designSystem.command("tokens <id> <file>").description("save a tokens.json file as the system's next version; --base is the version you edited").requiredOption("--base <version>", "the version the file was edited from", (value) => Number(value)).option("--note <note>", "one line saying what changed").action(
   run(async (id, file, opts) => {
-    const tokens = JSON.parse(readFileSync19(resolve9(file), "utf8"));
+    const tokens = JSON.parse(readFileSync20(resolve9(file), "utf8"));
     console.log(renderArtifact(await saveDesignTokens(id, opts.base, tokens, opts.note)));
   })
 );
@@ -7402,7 +7594,7 @@ usageOptions(
   run(async (opts) => {
     const { bytes } = await apiBytes("GET", `/billing/usage/export${usageQuery(opts)}`);
     if (opts.out) {
-      writeFileSync11(opts.out, bytes);
+      writeFileSync10(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else {
       process.stdout.write(bytes);
@@ -8014,7 +8206,7 @@ notes.command("read <storeId> <noteId>").description("print one note").action(
 notes.command("save <storeId> <file>").description("write a note from a local file: --path creates one, --note saves a new version of one").option("--path <path>", "path of a new note, e.g. /projects/launch.md").option("--note <noteId>", "the note to update").action(
   run(async (storeId, file, opts) => {
     if (!opts.path === !opts.note) throw new Error("pass exactly one of --path (new note) or --note (update)");
-    const content = readFileSync19(file, "utf8");
+    const content = readFileSync20(file, "utf8");
     const target = `/memory_stores/${encodeURIComponent(storeId)}/memories${opts.note ? `/${encodeURIComponent(opts.note)}` : ""}`;
     const { memory: memory2 } = await api("POST", target, { content, ...opts.path ? { path: opts.path } : {} });
     console.log(`Saved ${memory2.path} (${memory2.id})`);
@@ -8114,7 +8306,7 @@ harness.command("connect").description("run an ACP agent (the command after --)
 }));
 var traceCmd = program.command("trace").description("correlate this machine's agent work with the cloud sessions it starts (metadata only unless you choose content)");
 traceCmd.command("start").description("start a trace: a grant for this machine, a root span, and the spool the hooks write to").option("--name <name>", "a name for the task").option("--source <source>", "how this machine reports itself", "claude-code").option("--hooks [settings]", "also install the Claude Code hooks (default: ./.claude/settings.local.json)").option("--capture <scopes>", "also send content, redacted on this machine first: any of prompts,tool_output,files").option("--file <path>", "a file the files scope may send (repeatable)", collect).option("--dir <path>", "a folder whose files the files scope may send when a file tool touches them (repeatable)", collect).action(run(async (opts) => {
-  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-WLTD4C22.js");
+  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-HV4E2BPX.js");
   if (readState()) throw new Error("a trace is already running here \u2014 `sky trace stop` it first");
   const scopes = parseContentScopes(opts.capture);
   const chosen = chosenPaths(opts.file ?? [], opts.dir ?? []);
@@ -8149,7 +8341,7 @@ traceCmd.command("start").description("start a trace: a grant for this machine,
 }));
 traceCmd.command("hook").description("record one Claude Code hook event read from stdin (run by the installed hooks; never fails, prints nothing)").action(async () => {
   try {
-    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-WLTD4C22.js");
+    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-HV4E2BPX.js");
     const chunks = [];
     for await (const chunk of process.stdin) chunks.push(chunk);
     const input = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
@@ -8162,14 +8354,14 @@ traceCmd.command("hook").description("record one Claude Code hook event read fro
   }
 });
 traceCmd.command("flush").description("send what the spool holds, retrying with backoff").action(run(async () => {
-  const { readState, flush, grantSender } = await import("./trace-WLTD4C22.js");
+  const { readState, flush, grantSender } = await import("./trace-HV4E2BPX.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   const outcome = await flush(grantSender(state), { attempts: 4 });
   console.log(`sent ${outcome.sent}, refused ${outcome.refused}, given up ${outcome.expired}, still pending ${outcome.pending}${outcome.stopped ? ` (stopped: ${outcome.stopped})` : ""}`);
 }));
 traceCmd.command("status").description("the running trace and its spool").action(run(async () => {
-  const { readState, spoolStatus } = await import("./trace-WLTD4C22.js");
+  const { readState, spoolStatus } = await import("./trace-HV4E2BPX.js");
   const state = readState();
   if (!state) {
     console.log("No trace is running here.");
@@ -8179,7 +8371,7 @@ traceCmd.command("status").description("the running trace and its spool").action
   console.log(`${state.trace_id} as ${state.source}: ${spool.pending} pending, ${spool.dropped_full} dropped (spool full), ${spool.dropped_expired} given up, ${spool.refused} refused`);
 }));
 traceCmd.command("show [id]").description("the trace bundle: spans, the sessions they reach, cost counted once per session").option("--json", "print the bundle as JSON").action(run(async (id, opts) => {
-  const { readState } = await import("./trace-WLTD4C22.js");
+  const { readState } = await import("./trace-HV4E2BPX.js");
   const ref = id ?? readState()?.trace_id;
   if (!ref) throw new Error("name a trace, or start one here");
   const bundle = await api("GET", `/traces/${ref}`);
@@ -8206,7 +8398,7 @@ traceCmd.command("show [id]").description("the trace bundle: spans, the sessions
   for (const gap of bundle.gaps) console.log(`  gap: ${gap.span_id} ${gap.reason}`);
 }));
 traceCmd.command("stop").description("end the root span, send what is left, and revoke this machine's grant").action(run(async () => {
-  const { readState, record, flush, grantSender, clearState } = await import("./trace-WLTD4C22.js");
+  const { readState, record, flush, grantSender, clearState } = await import("./trace-HV4E2BPX.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   if (state.root_span) record(() => [{ span_id: state.root_span, kind: "end", outcome: "completed" }]);
@@ -8216,7 +8408,7 @@ traceCmd.command("stop").description("end the root span, send what is left, and
   console.log(`Stopped ${state.trace_id}${outcome.pending ? ` (${outcome.pending} events could not be sent)` : ""}`);
 }));
 traceCmd.command("sync [payload]").description("upload this machine's agent sessions (Claude Code, Codex, Cursor, Gemini CLI and every other agent `--agents` lists) to the matching workspace's trace library, redacted here first").option("--enable", "turn sync on for this machine").option("--disable", "turn sync off; nothing more is uploaded").option("--route <match=workspace>", "send sessions whose folder path contains <match> to <workspace> (repeatable; replaces the saved rules)", collect).option("--default <workspace>", "where a session no rule matches goes").option("--keep-local", "keep sessions no rule matches on this machine (the default)").option("--session <ref>", "only this session: its id or transcript path (repeatable)", collect).option("--import <export>", "add a downloaded cloud export (claude.ai, ChatGPT, Gemini, Grok, DeepSeek \u2026: its .zip, folder or file) so sync uploads it (repeatable)", collect).option("--agents", "list the agents sync reads and which are on this machine").option("--full", "re-read every session, not only files that changed").option("--limit <n>", "at most this many changed sessions this run", (v) => Number.parseInt(v, 10)).option("--dry-run", "show what would be uploaded without uploading").option("--hook", "run from a Claude Code SessionEnd hook or Codex notify: upload that session in the background and return at once").option("--install-schedule", "also sweep every 15 minutes (macOS launchd)").option("--status", "what sync has done on this machine").option("--quiet", "print only failures").action(async (payload, opts) => {
-  const lib = await import("./trace-library-YMAVLH4Y.js");
+  const lib = await import("./trace-library-HJWI7KM7.js");
   if (opts.hook) {
     try {
       let raw = payload ?? "";
@@ -8288,11 +8480,11 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
       console.log(`Sweeping every 15 minutes (${plist}); a full re-read runs weekly. Log: ${log}`);
     }
     if (opts.status) {
-      const { readFileSync: readFileSync20 } = await import("fs");
+      const { readFileSync: readFileSync21 } = await import("fs");
       const { join: join20 } = await import("path");
       let state = { sessions: {} };
       try {
-        state = JSON.parse(readFileSync20(join20(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
+        state = JSON.parse(readFileSync21(join20(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
       } catch {
       }
       const counts = /* @__PURE__ */ new Map();
@@ -8331,7 +8523,7 @@ traceCmd.command("search <query...>").description("search every session in a wor
   console.log(opts.json ? JSON.stringify(page, null, 2) : renderContextPage(page));
 }));
 traceCmd.command("library").description("list the sessions in a workspace's trace library, most recently updated first").option("--workspace <slug>", "the workspace (default: the current one)").option("--limit <n>", "how many", (v) => Number.parseInt(v, 10), 20).option("--json", "print the page as JSON").action(run(async (opts) => {
-  const { libraryRequest } = await import("./trace-library-YMAVLH4Y.js");
+  const { libraryRequest } = await import("./trace-library-HJWI7KM7.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const page = await libraryRequest("GET", `/trace-library?limit=${opts.limit}`, workspace2);

package/dist/{trace-WLTD4C22.js → trace-HV4E2BPX.js}

@@ -1,7 +1,7 @@
 import {
   USER_AGENT,
   configPath
-} from "./chunk-S4YG3TXA.js";
+} from "./chunk-LPUGEMCV.js";
 import {
   TRACE_CONTENT_SCOPES,
   redactTraceText

package/dist/{trace-library-YMAVLH4Y.js → trace-library-HJWI7KM7.js}

@@ -1,11 +1,11 @@
 import {
   ApiError
-} from "./chunk-KWLEADJQ.js";
+} from "./chunk-QROAAJN2.js";
 import {
   USER_AGENT,
   apiBase,
   apiToken
-} from "./chunk-S4YG3TXA.js";
+} from "./chunk-LPUGEMCV.js";
 import {
   SessionSourceCollector,
   publicRemote,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsky/sky",
-  "version": "2.24.1",
+  "version": "2.25.0",
   "description": "sky \u2014 the AgentSky developer CLI: launch and talk to long-lived agents from your terminal.",
   "license": "MIT",
   "type": "module",