@agentsky/sky 2.28.0 → 2.30.0

package/dist/index.js

@@ -11,7 +11,7 @@ import {
   streamEvents,
   uploadFile,
   writeResponseFile
-} from "./chunk-5OBCA2MM.js";
+} from "./chunk-TIFRDEFP.js";
 import {
   CLI_VERSION,
   USER_AGENT,
@@ -22,7 +22,7 @@ import {
   currentUniverse,
   loadConfig,
   saveConfig
-} from "./chunk-ABDGMJYV.js";
+} from "./chunk-KNGZR3CX.js";
 import {
   AGENT_TYPES,
   MODEL_SUBSCRIPTION_PLAN_PHRASE,
@@ -44,11 +44,11 @@ import {
   skillRefSchema,
   splitMcpServers,
   supersededBy
-} from "./chunk-OFH52W34.js";
+} from "./chunk-JOLDBZV3.js";
 import "./chunk-MLKGABMK.js";
 
 // src/index.ts
-import { existsSync as existsSync13, readFileSync as readFileSync20, writeFileSync as writeFileSync10 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync21, writeFileSync as writeFileSync11 } from "fs";
 import { basename as basename9, resolve as resolve9 } from "path";
 import { createInterface as createInterface6 } from "readline";
 import { Command } from "commander";
@@ -3440,8 +3440,10 @@ async function triggerRequest(id, resource, change) {
 // src/session-workspace.ts
 import { spawnSync as spawnSync4 } from "child_process";
 import { createHash as createHash5, randomUUID } from "crypto";
-import { readdirSync as readdirSync5, statSync as statSync6 } from "fs";
-import { basename as basename7, join as join12, relative as relative3, resolve as resolve5 } from "path";
+import { existsSync as existsSync10, lstatSync as lstatSync2, mkdirSync as mkdirSync4, readdirSync as readdirSync5, readFileSync as readFileSync12, renameSync, statSync as statSync6, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir8, hostname as hostname2, tmpdir as tmpdir2 } from "os";
+import { basename as basename7, dirname as dirname6, join as join12, relative as relative3, resolve as resolve5 } from "path";
+import { inflateRawSync } from "zlib";
 var SINGLE_IMPORT_MAX = 25 * 1024 * 1024;
 var PART_SIZE = 8 * 1024 * 1024;
 var SKIPPED2 = /* @__PURE__ */ new Set([".git", "node_modules"]);
@@ -3561,6 +3563,97 @@ async function handoff(id, targetAgent, opts = {}) {
   }
   return h;
 }
+function zipEntries(archive) {
+  let end = archive.length - 22;
+  while (end >= 0 && archive.readUInt32LE(end) !== 101010256) end -= 1;
+  if (end < 0) throw new ApiError(422, "checkpoint_invalid", "the downloaded conversation is not a readable archive");
+  const entries = /* @__PURE__ */ new Map();
+  let at = archive.readUInt32LE(end + 16);
+  for (let index = archive.readUInt16LE(end + 10); index > 0; index -= 1) {
+    const method = archive.readUInt16LE(at + 10);
+    const size = archive.readUInt32LE(at + 20);
+    const nameLength = archive.readUInt16LE(at + 28);
+    const local = archive.readUInt32LE(at + 42);
+    const start = local + 30 + archive.readUInt16LE(local + 26) + archive.readUInt16LE(local + 28);
+    const packed = archive.subarray(start, start + size);
+    if (method !== 0 && method !== 8) throw new ApiError(422, "checkpoint_invalid", "the downloaded conversation uses an unsupported compression");
+    entries.set(archive.subarray(at + 46, at + 46 + nameLength).toString("utf8"), method === 8 ? inflateRawSync(packed) : Buffer.from(packed));
+    at += 46 + nameLength + archive.readUInt16LE(at + 30) + archive.readUInt16LE(at + 32);
+  }
+  return entries;
+}
+function conversationFiles(archive, harness2) {
+  const entries = zipEntries(archive);
+  const manifest = JSON.parse(entries.get("manifest.json")?.toString("utf8") ?? "null");
+  const nativeId = manifest?.metadata?.native_session_id ?? "";
+  if (manifest?.format !== "asteroids.native-checkpoint" || manifest.source_harness !== harness2 || !Array.isArray(manifest.files) || !/^[A-Za-z0-9_-]{1,200}$/.test(nativeId)) {
+    throw new ApiError(422, "checkpoint_invalid", "the downloaded conversation is not one this computer can continue");
+  }
+  const ours = (path) => {
+    const parts = path.split("/");
+    if (parts.some((part) => !part || part === "." || part === "..")) return false;
+    if (harness2 === "claude_code") return parts[0] === "projects" && parts.length >= 3 && (parts[2] === `${nativeId}.jsonl` || parts[2] === nativeId);
+    return parts[0] === "sessions" && parts.at(-1).startsWith("rollout-") && parts.at(-1).endsWith(`${nativeId}.jsonl`);
+  };
+  const files2 = manifest.files.filter((file) => ours(file.path)).map((file) => {
+    const data = entries.get(`files/${file.path}`);
+    if (!data || data.length !== file.size || createHash5("sha256").update(data).digest("hex") !== file.sha256) {
+      throw new ApiError(422, "checkpoint_invalid", "the downloaded conversation is incomplete; try again");
+    }
+    return { path: file.path, data };
+  });
+  if (!files2.length) throw new ApiError(422, "checkpoint_invalid", "the downloaded conversation has no transcript");
+  return { nativeId, files: files2 };
+}
+async function verifiedDownload(path) {
+  const res = await apiRaw("GET", path);
+  if (!res.ok) {
+    const body = await res.json().catch(() => null);
+    throw new ApiError(res.status, body?.error?.code ?? "request_failed", body?.error?.message ?? `AgentSky answered ${res.status}`);
+  }
+  const bytes = Buffer.from(await res.arrayBuffer());
+  const expected = res.headers.get("x-content-sha256");
+  if (expected && createHash5("sha256").update(bytes).digest("hex") !== expected) throw new ApiError(502, "download_corrupt", "the download was damaged; try again");
+  return bytes;
+}
+async function continueHere(id, dir, opts = {}) {
+  const session2 = (await api("GET", `/sessions/${encodeURIComponent(id)}`)).session;
+  const harness2 = session2.agentType;
+  if (harness2 !== "claude_code" && harness2 !== "codex") throw new ApiError(409, "harness_unsupported", "only Claude Code and Codex sessions can continue on a computer");
+  let { handoff: h } = await api("POST", `/sessions/${encodeURIComponent(id)}/local-handoff`, { machine: hostname2().slice(0, 120) }, { idempotencyKey: opts.idempotencyKey ?? randomUUID() });
+  opts.onStatus?.(h);
+  while (!TERMINAL.has(h.status)) {
+    await new Promise((r) => setTimeout(r, opts.pollMs ?? 2e3));
+    const next = (await api("GET", `/session-handoffs/${encodeURIComponent(h.id)}`)).handoff;
+    if (next.status !== h.status) opts.onStatus?.(next);
+    h = next;
+  }
+  if (h.status !== "completed") throw new ApiError(422, h.error?.code ?? "handoff_failed", h.error?.message ?? "the session could not be moved; it stays in the cloud");
+  const { nativeId, files: files2 } = conversationFiles(await verifiedDownload(`/session-handoffs/${encodeURIComponent(h.id)}/checkpoint`), harness2);
+  const root = harness2 === "codex" ? process.env.CODEX_HOME || join12(homedir8(), ".codex") : process.env.CLAUDE_CONFIG_DIR || join12(homedir8(), ".claude");
+  const stamp = Date.now();
+  for (const file of files2) {
+    const target = join12(root, file.path);
+    mkdirSync4(dirname6(target), { recursive: true });
+    if (existsSync10(target)) {
+      if (!lstatSync2(target).isFile()) throw new ApiError(409, "restore_blocked", `something other than a file is in the way at ${target}`);
+      if (readFileSync12(target).equals(file.data)) continue;
+      renameSync(target, `${target}.before-agentsky-${stamp}`);
+    }
+    writeFileSync7(target, file.data, { mode: 384 });
+  }
+  const folder = resolve5(dir);
+  mkdirSync4(folder, { recursive: true });
+  const carried = h.workspace_carried === true;
+  if (carried) {
+    const archive = join12(tmpdir2(), `agentsky-workspace-${h.id}.tar.gz`);
+    writeFileSync7(archive, await verifiedDownload(`/session-handoffs/${encodeURIComponent(h.id)}/workspace`), { mode: 384 });
+    const tar = spawnSync4("tar", ["-xzf", archive, "-C", folder]);
+    if (tar.status !== 0) throw new ApiError(422, "workspace_unpack_failed", `tar failed: ${tar.stderr.toString().trim()}`);
+  }
+  const resume = harness2 === "codex" ? `cd ${JSON.stringify(folder)} && codex resume ${nativeId}` : `cd ${JSON.stringify(folder)} && claude --resume ${nativeId}`;
+  return { harness: harness2, nativeId, folder, workspaceCarried: carried, resume };
+}
 
 // src/render.ts
 var dim = (s) => `\x1B[2m${s}\x1B[0m`;
@@ -3682,15 +3775,15 @@ async function readTurn(sessionId, opts = {}) {
 }
 
 // src/setup.ts
-import { mkdirSync as mkdirSync4, readFileSync as readFileSync14, writeFileSync as writeFileSync7 } from "fs";
-import { dirname as dirname7, join as join15 } from "path";
+import { mkdirSync as mkdirSync5, readFileSync as readFileSync15, writeFileSync as writeFileSync8 } from "fs";
+import { dirname as dirname8, join as join15 } from "path";
 import { createInterface as createInterface3 } from "readline";
 
 // src/setup-local.ts
 import { isUtf8 as isUtf83 } from "buffer";
-import { existsSync as existsSync10, readdirSync as readdirSync6, readFileSync as readFileSync12, statSync as statSync7 } from "fs";
-import { homedir as homedir8 } from "os";
-import { dirname as dirname6, isAbsolute as isAbsolute2, join as join13, resolve as resolve6 } from "path";
+import { existsSync as existsSync11, readdirSync as readdirSync6, readFileSync as readFileSync13, statSync as statSync7 } from "fs";
+import { homedir as homedir9 } from "os";
+import { dirname as dirname7, isAbsolute as isAbsolute2, join as join13, resolve as resolve6 } from "path";
 import { parse as parseToml4 } from "smol-toml";
 var MAX_SKILL_FILE_BYTES = 1024 * 1024;
 var MAX_IMPORT_DEPTH = 5;
@@ -3719,7 +3812,7 @@ function skillFiles2(root, prefix) {
     if (entry2.isDirectory()) {
       if (!SKIPPED_DIRS.has(entry2.name)) files2.push(...skillFiles2(path, `${prefix}/${entry2.name}`));
     } else if (entry2.isFile() && !sensitive(entry2.name) && statSync7(path).size <= MAX_SKILL_FILE_BYTES) {
-      const bytes = redacted(readFileSync12(path));
+      const bytes = redacted(readFileSync13(path));
       if (bytes) files2.push({ path: `${prefix}/${entry2.name}`, bytes });
     }
   }
@@ -3729,7 +3822,7 @@ function readLocalSkills(agents) {
   const skills2 = [];
   const ignored = [];
   for (const agent2 of agents) {
-    if (!existsSync10(agent2.skillsDir)) continue;
+    if (!existsSync11(agent2.skillsDir)) continue;
     for (const entry2 of readdirSync6(agent2.skillsDir, { withFileTypes: true })) {
       const dir = join13(agent2.skillsDir, entry2.name);
       let isDir2 = entry2.isDirectory();
@@ -3740,8 +3833,8 @@ function readLocalSkills(agents) {
           isDir2 = false;
         }
       }
-      if (!isDir2 || !existsSync10(join13(dir, "SKILL.md")) || isInstalledSkill(dir)) continue;
-      const name = frontmatterName(readFileSync12(join13(dir, "SKILL.md"), "utf8"));
+      if (!isDir2 || !existsSync11(join13(dir, "SKILL.md")) || isInstalledSkill(dir)) continue;
+      const name = frontmatterName(readFileSync13(join13(dir, "SKILL.md"), "utf8"));
       if (!name) {
         ignored.push({ agent: agent2.id, dir, reason: "SKILL.md has no name" });
         continue;
@@ -3769,11 +3862,11 @@ function inlineImports(content, from, home, depth, seen) {
     }
     const target = fence ? void 0 : line.match(/^@(\S+\.(?:md|markdown|txt))$/i)?.[1];
     if (!target || depth >= MAX_IMPORT_DEPTH) return line;
-    const path = target.startsWith("~/") ? join13(home, target.slice(2)) : isAbsolute2(target) ? target : resolve6(dirname6(from), target);
+    const path = target.startsWith("~/") ? join13(home, target.slice(2)) : isAbsolute2(target) ? target : resolve6(dirname7(from), target);
     if (seen.includes(path)) return "";
     let imported;
     try {
-      imported = readFileSync12(path, "utf8");
+      imported = readFileSync13(path, "utf8");
     } catch {
       return line;
     }
@@ -3781,7 +3874,7 @@ function inlineImports(content, from, home, depth, seen) {
     return inlineImports(imported, path, home, depth + 1, seen).trim();
   }).join("\n");
 }
-function readGlobalInstructions(agents, home = homedir8()) {
+function readGlobalInstructions(agents, home = homedir9()) {
   const found = [];
   for (const agent2 of agents) {
     const file = INSTRUCTION_FILES2[agent2.id];
@@ -3789,7 +3882,7 @@ function readGlobalInstructions(agents, home = homedir8()) {
     const path = join13(agent2.root, file);
     let raw;
     try {
-      raw = readFileSync12(path, "utf8");
+      raw = readFileSync13(path, "utf8");
     } catch {
       continue;
     }
@@ -3808,7 +3901,7 @@ ${item.content.trim()}`).join("\n\n");
 }
 function readJson3(path) {
   try {
-    return JSON.parse(readFileSync12(path, "utf8"));
+    return JSON.parse(readFileSync13(path, "utf8"));
   } catch {
     return void 0;
   }
@@ -3825,12 +3918,12 @@ function serversOf(agent2, home) {
   if (agent2.id === "claude_code") return readJson3(join13(home, ".claude.json"))?.mcpServers ?? {};
   if (agent2.id === "cursor") return readJson3(join13(agent2.root, "mcp.json"))?.mcpServers ?? {};
   try {
-    return parseToml4(readFileSync12(join13(agent2.root, "config.toml"), "utf8")).mcp_servers ?? {};
+    return parseToml4(readFileSync13(join13(agent2.root, "config.toml"), "utf8")).mcp_servers ?? {};
   } catch {
     return {};
   }
 }
-function findLocalSecrets(agents, home = homedir8()) {
+function findLocalSecrets(agents, home = homedir9()) {
   const secrets2 = [];
   for (const agent2 of agents) {
     for (const [name, def] of Object.entries(serversOf(agent2, home))) {
@@ -3847,8 +3940,8 @@ function findLocalSecrets(agents, home = homedir8()) {
 
 // src/subscriptions.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync11, readFileSync as readFileSync13 } from "fs";
-import { homedir as homedir9 } from "os";
+import { existsSync as existsSync12, readFileSync as readFileSync14 } from "fs";
+import { homedir as homedir10 } from "os";
 import { join as join14 } from "path";
 import { createInterface as createInterface2 } from "readline";
 var ALIASES = {
@@ -3944,12 +4037,12 @@ async function connectClaude() {
   const expiry = sub.expiresAt ? ` (expires ~${sub.expiresAt.slice(0, 10)})` : "";
   console.log(`Connected Claude subscription${expiry}. Powers new eligible agents.`);
 }
-function codexSignIn(env = process.env, home = homedir9()) {
+function codexSignIn(env = process.env, home = homedir10()) {
   const path = join14(env.CODEX_HOME || join14(home, ".codex"), "auth.json");
-  if (!existsSync11(path)) {
+  if (!existsSync12(path)) {
     throw new ApiError(404, "no_codex_auth", `no ${path} \u2014 run \`codex login\` first`);
   }
-  const raw = readFileSync13(path, "utf8");
+  const raw = readFileSync14(path, "utf8");
   try {
     const parsed = JSON.parse(raw);
     return { path, raw, account: parsed.tokens?.account_id };
@@ -3957,12 +4050,12 @@ function codexSignIn(env = process.env, home = homedir9()) {
     throw new ApiError(400, "invalid_codex_auth", `${path} isn't valid JSON \u2014 re-run \`codex login\``);
   }
 }
-function cursorSignIn(env = process.env, home = homedir9()) {
+function cursorSignIn(env = process.env, home = homedir10()) {
   const path = join14(env.XDG_CONFIG_HOME || join14(home, ".config"), "cursor", "auth.json");
-  if (!existsSync11(path)) {
+  if (!existsSync12(path)) {
     throw new ApiError(404, "no_cursor_auth", `no ${path} \u2014 run \`cursor-agent login\` first`);
   }
-  const raw = readFileSync13(path, "utf8");
+  const raw = readFileSync14(path, "utf8");
   try {
     const parsed = JSON.parse(raw);
     if (typeof parsed.accessToken !== "string" || typeof parsed.refreshToken !== "string") throw new Error("shape");
@@ -4123,11 +4216,11 @@ function planProviders(names2) {
   }));
 }
 function reportPath() {
-  return join15(dirname7(configPath()), "setup.json");
+  return join15(dirname8(configPath()), "setup.json");
 }
 function loadReport() {
   try {
-    const saved = JSON.parse(readFileSync14(reportPath(), "utf8"));
+    const saved = JSON.parse(readFileSync15(reportPath(), "utf8"));
     return { agents: saved.agents ?? [], plans: saved.plans ?? [], ...saved.secrets ? { secrets: saved.secrets } : {} };
   } catch {
     return { agents: [], plans: [] };
@@ -4140,8 +4233,8 @@ function mergeReport(base, next) {
   return { agents, plans, ...secrets2 ? { secrets: secrets2 } : {} };
 }
 function saveReport(report) {
-  mkdirSync4(dirname7(reportPath()), { recursive: true });
-  writeFileSync7(reportPath(), `${JSON.stringify(report, null, 2)}
+  mkdirSync5(dirname8(reportPath()), { recursive: true });
+  writeFileSync8(reportPath(), `${JSON.stringify(report, null, 2)}
 `, { mode: 384 });
 }
 function confirm3(question) {
@@ -4512,7 +4605,7 @@ function renderArtifact(artifact2) {
 }
 
 // src/skills-store.ts
-import { readdirSync as readdirSync7, readFileSync as readFileSync15, statSync as statSync8 } from "fs";
+import { readdirSync as readdirSync7, readFileSync as readFileSync16, statSync as statSync8 } from "fs";
 import { basename as basename8, join as join16, relative as relative4, resolve as resolve7 } from "path";
 function skillBundle(dir) {
   const root = resolve7(dir);
@@ -4522,7 +4615,7 @@ function skillBundle(dir) {
     for (const name of readdirSync7(path).sort()) {
       const full = join16(path, name);
       if (statSync8(full).isDirectory()) walk(full);
-      else files2.push({ path: `${top}/${relative4(root, full)}`, bytes: readFileSync15(full) });
+      else files2.push({ path: `${top}/${relative4(root, full)}`, bytes: readFileSync16(full) });
     }
   };
   walk(root);
@@ -4574,8 +4667,8 @@ async function setAgentSkill(agentId, skillId, verb) {
 
 // src/task-export.ts
 import { createHash as createHash6 } from "crypto";
-import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync8 } from "fs";
-import { dirname as dirname8, join as join17 } from "path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync9 } from "fs";
+import { dirname as dirname9, join as join17 } from "path";
 import { stringify as stringifyToml } from "smol-toml";
 var TEXT_MAX = 2e4;
 function scrub(text, names2) {
@@ -4866,8 +4959,8 @@ async function exportTaskHarbor(taskRef, outDir, opts) {
   const written2 = [];
   for (const [path, content] of files2) {
     const target = join17(outDir, path);
-    mkdirSync5(dirname8(target), { recursive: true });
-    writeFileSync8(target, content, typeof content === "string" ? { mode: path.endsWith(".sh") || path.endsWith(".py") ? 493 : 420 } : void 0);
+    mkdirSync6(dirname9(target), { recursive: true });
+    writeFileSync9(target, content, typeof content === "string" ? { mode: path.endsWith(".sh") || path.endsWith(".py") ? 493 : 420 } : void 0);
     written2.push(path);
   }
   return { written: written2, record };
@@ -5219,6 +5312,66 @@ function renderReachRequest(request) {
   return `${request.id}  ${request.status}${request.error ? `  ${request.error.code}: ${request.error.message}` : ""}`;
 }
 
+// ../../packages/uikit-components/src/capabilities-overview.ts
+var CAPABILITY_KINDS = [
+  { kind: "connector", title: "Connected apps", manage: "connectors" },
+  { kind: "tool", title: "Tools", manage: "tools" },
+  { kind: "plugin", title: "Plugins", manage: "plugins" },
+  { kind: "mcp_server", title: "MCP servers", manage: "vaults" },
+  { kind: "vault", title: "Secrets", manage: "vaults" },
+  { kind: "browser", title: "Browser logins", manage: "browser-logins" },
+  { kind: "mac", title: "Lent by your Macs", manage: "mac" },
+  { kind: "plan", title: "Your plans", manage: "plans" }
+];
+var CAPABILITY_WHERE_LABEL = { cloud: "Cloud", mac: "Mac", both: "Cloud and Mac" };
+var CAPABILITY_STATUS_LABEL = {
+  on: "On",
+  connected: "Connected",
+  needs_signin: "Needs sign-in",
+  needs_permission: "Needs permission",
+  off: "Off"
+};
+var CAPABILITY_COST_LABEL = { free: "Free", credits: "Credits", plan: "Your plan", provider: "Provider pricing" };
+function sharerLabel(sharer) {
+  if (sharer.type === "me") return "You";
+  if (sharer.type === "workspace") return "Workspace";
+  return sharer.name;
+}
+function needsAttention(item) {
+  return item.status === "needs_signin" || item.status === "needs_permission";
+}
+function capabilityLine(item) {
+  const where = item.kind === "mac" && item.machine ? item.machine.name : CAPABILITY_WHERE_LABEL[item.where];
+  return [where, sharerLabel(item.shared_by), CAPABILITY_COST_LABEL[item.cost]].join(" \xB7 ");
+}
+var attentionFirst = (a, b) => Number(needsAttention(b)) - Number(needsAttention(a));
+function capabilityGroups(items) {
+  return CAPABILITY_KINDS.flatMap(({ kind, title, manage }) => {
+    const rows = items.filter((item) => item.kind === kind).sort(attentionFirst);
+    if (rows.length === 0) return [];
+    return [{ kind, title, manage, items: rows, attention: rows.filter(needsAttention).length }];
+  });
+}
+
+// src/capabilities.ts
+async function listCapabilities() {
+  return api("GET", "/capabilities");
+}
+function renderCapabilities(overview, options = {}) {
+  const rows = options.attention ? overview.data.filter(needsAttention) : overview.data;
+  const lines = [];
+  for (const group of capabilityGroups(rows)) {
+    lines.push(group.attention ? `${group.title}  (${group.attention} need${group.attention === 1 ? "s" : ""} you)` : group.title);
+    for (const item of group.items) {
+      const detail = item.detail ? `  ${item.detail}` : "";
+      lines.push(`  ${item.name}  ${CAPABILITY_STATUS_LABEL[item.status].toLowerCase()}  ${capabilityLine(item)}${detail}`);
+    }
+  }
+  for (const gap of overview.unavailable) lines.push(`(${gap.message})`);
+  if (!lines.length) return options.attention ? "nothing needs you" : "nothing yet: connect an app (sky connectors) or install a plugin (sky plugins install)";
+  return lines.join("\n");
+}
+
 // src/compare.ts
 async function listComparisons(opts = {}) {
   const qs = opts.archived ? "?archived=true" : "";
@@ -5299,14 +5452,14 @@ function renderThreadSummary(t) {
 }
 
 // src/library.ts
-import { readFileSync as readFileSync17 } from "fs";
+import { readFileSync as readFileSync18 } from "fs";
 
 // src/api-command.ts
-import { readFileSync as readFileSync16 } from "fs";
+import { readFileSync as readFileSync17 } from "fs";
 var API_METHODS = ["GET", "POST", "PUT", "PATCH", "DELETE"];
-function readData(data, stdin = () => readFileSync16(0, "utf8")) {
+function readData(data, stdin = () => readFileSync17(0, "utf8")) {
   if (data === void 0) return void 0;
-  const raw = data === "-" ? stdin() : data.startsWith("@") ? readFileSync16(data.slice(1), "utf8") : data;
+  const raw = data === "-" ? stdin() : data.startsWith("@") ? readFileSync17(data.slice(1), "utf8") : data;
   try {
     JSON.parse(raw);
   } catch {
@@ -5512,7 +5665,7 @@ function registerLibraryLinkCommands(library2) {
   });
   libraryLinks.command("save").description("save through a live recipient edit grant; --revision is the opaque source revision from links read").requiredOption("--token <token>", "43-character token from the authenticated shared URL (public URLs have no writer)").requiredOption("--revision <revision>", "native source revision from links read; stale revisions fail without retry").option("--file <path>", "UTF-8 text file to save").option("--data <json>", "instead of --file, JSON/ @file / - containing exactly one text/html/office/docx/restoreRevision and optional requestId").action(async (opts) => {
     if (opts.file !== void 0 === (opts.data !== void 0)) throw new Error("Choose exactly one of --file or --data.");
-    const body = opts.file !== void 0 ? { text: new TextDecoder("utf-8", { fatal: true }).decode(readFileSync17(opts.file)) } : JSON.parse(readData(opts.data));
+    const body = opts.file !== void 0 ? { text: new TextDecoder("utf-8", { fatal: true }).decode(readFileSync18(opts.file)) } : JSON.parse(readData(opts.data));
     if (!body || typeof body !== "object" || Array.isArray(body)) throw new Error("--data must be a JSON object with one native save field.");
     if ("revision" in body && body.revision !== opts.revision) throw new Error("--data revision must match --revision.");
     console.log(JSON.stringify(await saveSharedLibraryFile(opts.token, sharedLibrarySaveSchema.parse({ ...body, revision: opts.revision })), null, 2));
@@ -5555,7 +5708,7 @@ function renderTodo(todo) {
 }
 
 // src/design-systems.ts
-import { readdirSync as readdirSync8, readFileSync as readFileSync18, statSync as statSync9 } from "fs";
+import { readdirSync as readdirSync8, readFileSync as readFileSync19, statSync as statSync9 } from "fs";
 import { join as join18, relative as relative5, sep as sep3 } from "path";
 var TEXT2 = /\.(mdx?|markdown|txt|json|m?js|cjs|jsx|tsx?|css|html?|svg|xml|csv|ya?ml|toml)$/i;
 var MEDIA = {
@@ -5606,7 +5759,7 @@ function fileTableFrom(dir) {
         continue;
       }
       const key = relative5(dir, path).split(sep3).join("/");
-      const bytes = readFileSync18(path);
+      const bytes = readFileSync19(path);
       files2[key] = TEXT2.test(name) ? bytes.toString("utf8") : `data:${MEDIA[name.split(".").pop()?.toLowerCase() ?? ""] ?? "application/octet-stream"};base64,${bytes.toString("base64")}`;
     }
   };
@@ -5715,19 +5868,19 @@ function workspaceFlagIsCommands(argv, commandPath) {
 }
 
 // src/harness.ts
-import { existsSync as existsSync12, mkdirSync as mkdirSync6, readFileSync as readFileSync19, writeFileSync as writeFileSync9 } from "fs";
-import { dirname as dirname9, join as join19, resolve as resolve8 } from "path";
+import { existsSync as existsSync13, mkdirSync as mkdirSync7, readFileSync as readFileSync20, writeFileSync as writeFileSync10 } from "fs";
+import { dirname as dirname10, join as join19, resolve as resolve8 } from "path";
 var HARNESS_FILE = "harness.json";
 function harnessFilePath(dir) {
   return join19(resolve8(dir), HARNESS_FILE);
 }
 function readHarnessFile(dir) {
   const path = harnessFilePath(dir);
-  if (!existsSync12(path)) {
+  if (!existsSync13(path)) {
     throw new Error(`no ${HARNESS_FILE} found in ${resolve8(dir)} \u2014 run \`sky harness init\` first`);
   }
   try {
-    return JSON.parse(readFileSync19(path, "utf8"));
+    return JSON.parse(readFileSync20(path, "utf8"));
   } catch (err) {
     throw new Error(`could not parse ${path}: ${err instanceof Error ? err.message : String(err)}`);
   }
@@ -5754,11 +5907,11 @@ var INIT_COMMENT = `# harness.json \u2014 workspace harness profile skeleton
 `;
 function harnessInit(dir) {
   const path = harnessFilePath(dir);
-  if (existsSync12(path)) {
+  if (existsSync13(path)) {
     throw new Error(`${path} already exists \u2014 delete it to re-init`);
   }
-  mkdirSync6(dirname9(path), { recursive: true });
-  writeFileSync9(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
+  mkdirSync7(dirname10(path), { recursive: true });
+  writeFileSync10(path, `${JSON.stringify(INIT_SKELETON, null, 2)}
 `);
   console.log(`Created ${path}`);
   console.log(INIT_COMMENT);
@@ -6515,6 +6668,14 @@ session.command("handoff <ref> <targetAgent>").description("hand the session's c
     if (done.target_session) console.log(`${done.target_session}  (${done.resolved_mode === "native_fork" ? "forked" : "from a written summary"})`);
   })
 );
+session.command("continue-here <ref>").description("move an idle Claude Code or Codex session you own onto this computer and print how to resume it; the cloud session then takes no more turns").option("--dir <folder>", "where the session's workspace goes", ".").action(
+  run(async (ref, opts) => {
+    const id = await resolveSessionRef(ref);
+    const moved = await continueHere(id, opts.dir, { onStatus: (h) => console.error(`${h.id}: ${h.status}`) });
+    if (!moved.workspaceCarried) console.error("The workspace was not copied with this move; copy what you need with sky session workspace ls and cat.");
+    console.log(moved.resume);
+  })
+);
 session.command("cloud-copy <ref>").description("what is kept in the cloud for a chat synced from your own computer: its working folder and native session").option("--json", "print the raw answer").action(
   run(async (ref, opts) => {
     const id = await resolveSessionRef(ref);
@@ -6548,7 +6709,7 @@ sessionWorkspace.command("cat <ref> <path>").description("print a file (up to 1
   run(async (ref, path, opts) => {
     const bytes = await readFile(await resolveSessionRef(ref), path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.error(`saved ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -6565,7 +6726,7 @@ sessionWorkspace.command("patch <ref> [repo]").description("the work in a reposi
     console.error(`${meta.repo}: ${meta.commits.length} commit${meta.commits.length === 1 ? "" : "s"} since ${meta.base_branch || "the imported copy"} (${meta.base_commit.slice(0, 12)})`);
     if (!patch.length) console.error("nothing changed");
     else if (opts.out) {
-      writeFileSync10(opts.out, patch);
+      writeFileSync11(opts.out, patch);
       console.error(`wrote ${opts.out} \u2014 apply with: git apply ${opts.out}`);
     } else process.stdout.write(patch);
   })
@@ -6799,7 +6960,7 @@ async function launchFromFile(path, spec, opts) {
 program.command("launch").description("scaffold ./agent.toml if absent, create the agent and its first session (idle until the first message), print its address").option("-f, --file <path>", "agent file", "agent.toml").option("--type <type>", "override the file's harness: hermes | claude_code | codex | openclaw | pi | dsh | kimi_code | opencode").option("--llm <llm>", "override the file's model (must suit the harness)").option("--start", "boot the first session now instead of on the first message").action(
   run(async (opts) => {
     const path = resolve9(opts.file);
-    if (!existsSync13(path)) {
+    if (!existsSync14(path)) {
       const name = basename9(process.cwd()).replace(/[^a-zA-Z0-9 _-]/g, "") || "my-agent";
       scaffoldAgentFile(path, name);
       console.log(`Scaffolded ${opts.file} \u2014 edit it anytime; re-apply with \`sky deploy\`.`);
@@ -7070,14 +7231,14 @@ task.command("get <task> <path>").description("read one task file; prints it, or
   run(async (taskId, path, opts) => {
     const bytes = await readTaskFile(taskId, path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
 );
 task.command("put <task> <path> <local>").description("write a local file to <path> in the task's files (every session of the task sees it)").action(
   run(async (taskId, path, local) => {
-    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync20(local), mediaTypeFor(local));
+    const { file, conflict } = await writeTaskFile(taskId, path, readFileSync21(local), mediaTypeFor(local));
     console.log(`${renderTaskFile(file)}${conflict ? "  (replaced a version you had not seen)" : ""}`);
   })
 );
@@ -7315,7 +7476,7 @@ library.command("list").description("your Library, newest first").option("--sear
 );
 library.command("upload <path>").description("save a file from this computer to your Library").option("--workspace <key>", "place it in this workspace").action(
   run(async (path, opts) => {
-    const bytes = readFileSync20(path);
+    const bytes = readFileSync21(path);
     const { artifact: artifact2 } = await uploadToLibrary({ bytes, name: basename9(path), mediaType: "application/octet-stream" }, `sky-upload-${crypto.randomUUID()}`, opts.workspace);
     console.log(renderLibraryArtifact(artifact2));
   })
@@ -7346,7 +7507,7 @@ library.command("place <id> <workspace>").description('place your artifact in a
 library.command("download <id> <out>").description("save one version's bytes to a file").option("--version <n>", "a saved version (the current one when omitted)").action(
   run(async (id, out, opts) => {
     const { bytes } = await downloadLibraryArtifact(id, opts.version ? Number(opts.version) : void 0);
-    writeFileSync10(out, bytes);
+    writeFileSync11(out, bytes);
     console.log(`wrote ${bytes.length} bytes to ${out}`);
   })
 );
@@ -7389,7 +7550,7 @@ artifact.command("get <id> <path>").description("read one file of an artifact; p
   run(async (id, path, opts) => {
     const bytes = await readArtifactFile(id, path);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else process.stdout.write(bytes);
   })
@@ -7427,14 +7588,14 @@ designSystem.command("import <task> <folder>").description("import a local desig
 );
 designSystem.command("tokens <id> <file>").description("save a tokens.json file as the system's next version; --base is the version you edited").requiredOption("--base <version>", "the version the file was edited from", (value) => Number(value)).option("--note <note>", "one line saying what changed").action(
   run(async (id, file, opts) => {
-    const tokens = JSON.parse(readFileSync20(resolve9(file), "utf8"));
+    const tokens = JSON.parse(readFileSync21(resolve9(file), "utf8"));
     console.log(renderArtifact(await saveDesignTokens(id, opts.base, tokens, opts.note)));
   })
 );
 designSystem.command("write <id> <path> [file]").description("save one of the system's editable files (path such as project/README.md) from a local file as its next version, or put back an earlier version's copy with --restore").requiredOption("--base <version>", "the version the file was edited from", (value) => Number(value)).option("--restore <version>", "restore the file as it was in this version instead of reading [file]", (value) => Number(value)).option("--note <note>", "one line saying what changed").action(
   run(async (id, path, file, opts) => {
     if (file === void 0 === (opts.restore === void 0)) throw Error("Give a local [file] to save, or --restore <version>.");
-    const change = opts.restore === void 0 ? { content: readFileSync20(resolve9(file), "utf8") } : { restore_version: opts.restore };
+    const change = opts.restore === void 0 ? { content: readFileSync21(resolve9(file), "utf8") } : { restore_version: opts.restore };
     console.log(renderArtifact(await saveDesignSystemFile(id, path, opts.base, change, opts.note)));
   })
 );
@@ -7747,7 +7908,7 @@ usageOptions(
   run(async (opts) => {
     const { bytes } = await apiBytes("GET", `/billing/usage/export${usageQuery(opts)}`);
     if (opts.out) {
-      writeFileSync10(opts.out, bytes);
+      writeFileSync11(opts.out, bytes);
       console.log(`Wrote ${bytes.length} bytes to ${opts.out}`);
     } else {
       process.stdout.write(bytes);
@@ -8103,6 +8264,16 @@ vendor.command("usage <id>").description("the agents and tasks that used this ve
     for (const t of tasks) console.log(`  task   ${t.session_id}  ${t.title ?? "(untitled)"}  ${t.last_used_at.slice(0, 10)}`);
   })
 );
+program.command("capabilities").description("everything your agents can use here: connected apps, tools, plugins, MCP servers, secrets, browser logins, what your Macs lend and your plans \u2014 where each works, who shared it, its status and its cost").option("--attention", "only what needs you: a sign-in or a permission").option("--json", "print as JSON").action(
+  run(async (opts) => {
+    const overview = await listCapabilities();
+    if (opts.json) {
+      console.log(JSON.stringify(overview, null, 2));
+      return;
+    }
+    console.log(renderCapabilities(overview, { attention: opts.attention }));
+  })
+);
 var mac = program.command("mac").description("your Macs: what each lends to agents now, and asking one for a folder, a browser window, its screen or its apps and files");
 mac.command("list").description("your Macs: online or not, what each can lend, and the folders, browser windows and screens lent now").option("--json", "print as JSON").action(
   run(async (opts) => {
@@ -8359,7 +8530,7 @@ notes.command("read <storeId> <noteId>").description("print one note").action(
 notes.command("save <storeId> <file>").description("write a note from a local file: --path creates one, --note saves a new version of one").option("--path <path>", "path of a new note, e.g. /projects/launch.md").option("--note <noteId>", "the note to update").action(
   run(async (storeId, file, opts) => {
     if (!opts.path === !opts.note) throw new Error("pass exactly one of --path (new note) or --note (update)");
-    const content = readFileSync20(file, "utf8");
+    const content = readFileSync21(file, "utf8");
     const target = `/memory_stores/${encodeURIComponent(storeId)}/memories${opts.note ? `/${encodeURIComponent(opts.note)}` : ""}`;
     const { memory: memory2 } = await api("POST", target, { content, ...opts.path ? { path: opts.path } : {} });
     console.log(`Saved ${memory2.path} (${memory2.id})`);
@@ -8459,7 +8630,7 @@ harness.command("connect").description("run an ACP agent (the command after --)
 }));
 var traceCmd = program.command("trace").description("correlate this machine's agent work with the cloud sessions it starts (metadata only unless you choose content)");
 traceCmd.command("start").description("start a trace: a grant for this machine, a root span, and the spool the hooks write to").option("--name <name>", "a name for the task").option("--source <source>", "how this machine reports itself", "claude-code").option("--hooks [settings]", "also install the Claude Code hooks (default: ./.claude/settings.local.json)").option("--capture <scopes>", "also send content, redacted on this machine first: any of prompts,tool_output,files").option("--file <path>", "a file the files scope may send (repeatable)", collect).option("--dir <path>", "a folder whose files the files scope may send when a file tool touches them (repeatable)", collect).action(run(async (opts) => {
-  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-6KAXVDDM.js");
+  const { readState, writeState, record, installClaudeHooks, parseContentScopes, chosenPaths, fileEvent } = await import("./trace-5SW4YMCC.js");
   if (readState()) throw new Error("a trace is already running here \u2014 `sky trace stop` it first");
   const scopes = parseContentScopes(opts.capture);
   const chosen = chosenPaths(opts.file ?? [], opts.dir ?? []);
@@ -8494,7 +8665,7 @@ traceCmd.command("start").description("start a trace: a grant for this machine,
 }));
 traceCmd.command("hook").description("record one Claude Code hook event read from stdin (run by the installed hooks; never fails, prints nothing)").action(async () => {
   try {
-    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-6KAXVDDM.js");
+    const { readState, record, flush, grantSender, eventsForClaudeHook, contentForClaudeHook, clearState } = await import("./trace-5SW4YMCC.js");
     const chunks = [];
     for await (const chunk of process.stdin) chunks.push(chunk);
     const input = JSON.parse(Buffer.concat(chunks).toString("utf8") || "{}");
@@ -8507,14 +8678,14 @@ traceCmd.command("hook").description("record one Claude Code hook event read fro
   }
 });
 traceCmd.command("flush").description("send what the spool holds, retrying with backoff").action(run(async () => {
-  const { readState, flush, grantSender } = await import("./trace-6KAXVDDM.js");
+  const { readState, flush, grantSender } = await import("./trace-5SW4YMCC.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   const outcome = await flush(grantSender(state), { attempts: 4 });
   console.log(`sent ${outcome.sent}, refused ${outcome.refused}, given up ${outcome.expired}, still pending ${outcome.pending}${outcome.stopped ? ` (stopped: ${outcome.stopped})` : ""}`);
 }));
 traceCmd.command("status").description("the running trace and its spool").action(run(async () => {
-  const { readState, spoolStatus } = await import("./trace-6KAXVDDM.js");
+  const { readState, spoolStatus } = await import("./trace-5SW4YMCC.js");
   const state = readState();
   if (!state) {
     console.log("No trace is running here.");
@@ -8524,7 +8695,7 @@ traceCmd.command("status").description("the running trace and its spool").action
   console.log(`${state.trace_id} as ${state.source}: ${spool.pending} pending, ${spool.dropped_full} dropped (spool full), ${spool.dropped_expired} given up, ${spool.refused} refused`);
 }));
 traceCmd.command("show [id]").description("the trace bundle: spans, the sessions they reach, cost counted once per session").option("--json", "print the bundle as JSON").action(run(async (id, opts) => {
-  const { readState } = await import("./trace-6KAXVDDM.js");
+  const { readState } = await import("./trace-5SW4YMCC.js");
   const ref = id ?? readState()?.trace_id;
   if (!ref) throw new Error("name a trace, or start one here");
   const bundle = await api("GET", `/traces/${ref}`);
@@ -8551,7 +8722,7 @@ traceCmd.command("show [id]").description("the trace bundle: spans, the sessions
   for (const gap of bundle.gaps) console.log(`  gap: ${gap.span_id} ${gap.reason}`);
 }));
 traceCmd.command("stop").description("end the root span, send what is left, and revoke this machine's grant").action(run(async () => {
-  const { readState, record, flush, grantSender, clearState } = await import("./trace-6KAXVDDM.js");
+  const { readState, record, flush, grantSender, clearState } = await import("./trace-5SW4YMCC.js");
   const state = readState();
   if (!state) throw new Error("no trace is running here");
   if (state.root_span) record(() => [{ span_id: state.root_span, kind: "end", outcome: "completed" }]);
@@ -8561,7 +8732,7 @@ traceCmd.command("stop").description("end the root span, send what is left, and
   console.log(`Stopped ${state.trace_id}${outcome.pending ? ` (${outcome.pending} events could not be sent)` : ""}`);
 }));
 traceCmd.command("sync [payload]").description("upload this machine's agent sessions (Claude Code, Codex, Cursor, Gemini CLI and every other agent `--agents` lists) to the matching workspace's trace library, redacted here first").option("--enable", "turn sync on for this machine").option("--disable", "turn sync off; nothing more is uploaded").option("--route <match=workspace>", "send sessions whose folder path contains <match> to <workspace> (repeatable; replaces the saved rules)", collect).option("--default <workspace>", "where a session no rule matches goes").option("--keep-local", "keep sessions no rule matches on this machine (the default)").option("--session <ref>", "only this session: its id or transcript path (repeatable)", collect).option("--import <export>", "add a downloaded cloud export (claude.ai, ChatGPT, Gemini, Grok, DeepSeek \u2026: its .zip, folder or file) so sync uploads it (repeatable)", collect).option("--agents", "list the agents sync reads and which are on this machine").option("--full", "re-read every session, not only files that changed").option("--limit <n>", "at most this many changed sessions this run", (v) => Number.parseInt(v, 10)).option("--dry-run", "show what would be uploaded without uploading").option("--hook", "run from a Claude Code SessionEnd hook or Codex notify: upload that session in the background and return at once").option("--install-schedule", "also sweep every 15 minutes (macOS launchd)").option("--status", "what sync has done on this machine").option("--quiet", "print only failures").action(async (payload, opts) => {
-  const lib = await import("./trace-library-C7ZM4BA2.js");
+  const lib = await import("./trace-library-RKZNJ5O5.js");
   if (opts.hook) {
     try {
       let raw = payload ?? "";
@@ -8621,9 +8792,9 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
     }
     if (opts.installSchedule) {
       const { join: join20 } = await import("path");
-      const { homedir: homedir10 } = await import("os");
+      const { homedir: homedir11 } = await import("os");
       const { execFileSync } = await import("child_process");
-      const log = join20(homedir10(), ".config", "sky", "trace-sync.log");
+      const log = join20(homedir11(), ".config", "sky", "trace-sync.log");
       const plist = lib.installLaunchd([process.execPath, process.argv[1], "trace", "sync", "--quiet"], log);
       try {
         execFileSync("launchctl", ["unload", plist], { stdio: "ignore" });
@@ -8633,11 +8804,11 @@ traceCmd.command("sync [payload]").description("upload this machine's agent sess
       console.log(`Sweeping every 15 minutes (${plist}); a full re-read runs weekly. Log: ${log}`);
     }
     if (opts.status) {
-      const { readFileSync: readFileSync21 } = await import("fs");
+      const { readFileSync: readFileSync22 } = await import("fs");
       const { join: join20 } = await import("path");
       let state = { sessions: {} };
       try {
-        state = JSON.parse(readFileSync21(join20(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
+        state = JSON.parse(readFileSync22(join20(lib.syncConfigPath(), "..", "trace-sync-state.json"), "utf8"));
       } catch {
       }
       const counts = /* @__PURE__ */ new Map();
@@ -8676,7 +8847,7 @@ traceCmd.command("search <query...>").description("search every session in a wor
   console.log(opts.json ? JSON.stringify(page, null, 2) : renderContextPage(page));
 }));
 traceCmd.command("library").description("list the sessions in a workspace's trace library, most recently updated first").option("--workspace <slug>", "the workspace (default: the current one)").option("--limit <n>", "how many", (v) => Number.parseInt(v, 10), 20).option("--json", "print the page as JSON").action(run(async (opts) => {
-  const { libraryRequest } = await import("./trace-library-C7ZM4BA2.js");
+  const { libraryRequest } = await import("./trace-library-RKZNJ5O5.js");
   const workspace2 = opts.workspace ?? currentUniverse();
   if (!workspace2) throw new Error("name a workspace with --workspace");
   const page = await libraryRequest("GET", `/trace-library?limit=${opts.limit}`, workspace2);