@buzzni/saycode-cli 0.3.2 → 0.3.3

package/index.mjs

@@ -40,7 +40,7 @@ function _mergeNamespaces(n, m) {
   }
   return Object.freeze(Object.defineProperty(n, Symbol.toStringTag, { value: "Module" }));
 }
-const version = "0.3.2";
+const version = "0.3.3";
 const manifest = {
   version
 };
@@ -58,13 +58,13 @@ function parseAgentControlArgs(verb, target, rest, hasPositionalTarget) {
   return null;
 }
 const AGENT_VERBS = ["whoami", "ls", "read", "wait", "prompt", "spawn", ...AGENT_CONTROL_VERBS];
-function fail(message) {
+function fail$1(message) {
   return { command: "error", message };
 }
 function parseAgentArgs(flags, positionals) {
   const [verb, ...rest] = positionals;
   if (!verb || !AGENT_VERBS.includes(verb)) {
-    return fail(`agent needs one of: ${AGENT_VERBS.join(", ")}`);
+    return fail$1(`agent needs one of: ${AGENT_VERBS.join(", ")}`);
   }
   const timeout = flags.timeoutMs !== void 0 ? { timeoutMs: flags.timeoutMs } : {};
   const hasPositionalTarget = flags.sessionId === void 0 && rest[0] !== void 0;
@@ -77,18 +77,18 @@ function parseAgentArgs(flags, positionals) {
     case "ls":
       return { command: "agent", verb: "ls" };
     case "read": {
-      if (!target) return fail("agent read needs a session id (see `saycode agent ls`)");
+      if (!target) return fail$1("agent read needs a session id (see `saycode agent ls`)");
       return { command: "agent", verb: "read", sessionId: target, ...flags.last !== void 0 ? { last: flags.last } : {} };
     }
     case "wait": {
-      if (!target) return fail("agent wait needs a session id (see `saycode agent ls`)");
-      if (!flags.until) return fail("agent wait needs --until turn-end|waiting-input|completed");
+      if (!target) return fail$1("agent wait needs a session id (see `saycode agent ls`)");
+      if (!flags.until) return fail$1("agent wait needs --until turn-end|waiting-input|completed");
       return { command: "agent", verb: "wait", sessionId: target, until: flags.until, ...timeout };
     }
     case "prompt": {
-      if (!target) return fail("agent prompt needs a session id (see `saycode agent ls`)");
+      if (!target) return fail$1("agent prompt needs a session id (see `saycode agent ls`)");
       const text2 = rest.slice(hasPositionalTarget ? 1 : 0).join(" ").trim();
-      if (!text2) return fail("agent prompt needs the text to send");
+      if (!text2) return fail$1("agent prompt needs the text to send");
       return {
         command: "agent",
         verb: "prompt",
@@ -104,16 +104,16 @@ function parseAgentArgs(flags, positionals) {
       const files = flags.files ?? [];
       if (flags.handoff) {
         if (flags.prompt !== void 0) {
-          return fail("agent spawn --handoff sends the conversation, so it cannot also take --prompt");
+          return fail$1("agent spawn --handoff sends the conversation, so it cannot also take --prompt");
         }
         if (files.length > 0) {
-          return fail("agent spawn --handoff sends the conversation, so it cannot also take --file");
+          return fail$1("agent spawn --handoff sends the conversation, so it cannot also take --file");
         }
         const mode = flags.mode?.trim() || "summary";
         if (mode === "full") {
-          return fail("agent spawn --handoff does not support --mode full yet; only summary is available");
+          return fail$1("agent spawn --handoff does not support --mode full yet; only summary is available");
         }
-        if (mode !== "summary") return fail(`agent spawn --handoff got an unknown --mode: ${mode}`);
+        if (mode !== "summary") return fail$1(`agent spawn --handoff got an unknown --mode: ${mode}`);
         const from = flags.from?.trim();
         return {
           command: "agent",
@@ -125,7 +125,7 @@ function parseAgentArgs(flags, positionals) {
         };
       }
       const text2 = flags.prompt?.trim();
-      if (!text2) return fail("agent spawn needs --prompt <text>");
+      if (!text2) return fail$1("agent spawn needs --prompt <text>");
       return {
         command: "agent",
         verb: "spawn",
@@ -137,7 +137,7 @@ function parseAgentArgs(flags, positionals) {
       };
     }
     default:
-      return fail(`unsupported agent verb: ${verb}`);
+      return fail$1(`unsupported agent verb: ${verb}`);
   }
 }
 function fencedMarkdownRanges(content) {
@@ -816,12 +816,21 @@ const extensionPanelKo = {
 };
 const extensionInstallKo = {
   "extensions.installOfficial": "확장 설치",
+  "extensions.installArtifactPublisher": "공개 링크 확장 설치",
   "extensions.installDescription": "계속하려면 공식 확장을 설치하세요.",
   "extensions.machineExecutePermission": "이 확장은 미리 정의된 동작에만 machine.execute 권한을 요청합니다.",
   "extensions.notInstalled": "요청한 확장이 설치되지 않았습니다.",
   "extensions.disabled": "요청한 확장이 비활성화되어 있습니다.",
   "extensions.quarantined": "요청한 확장이 반복된 오류로 격리되었습니다.",
-  "extensions.unavailable": "요청한 확장이 설치되어 있지만 현재 사용할 수 없습니다."
+  "extensions.unavailable": "요청한 확장이 설치되어 있지만 현재 사용할 수 없습니다.",
+  "extensions.permission.artifactPublishPublic": "선택한 결과물의 공개 링크를 만들 수 있습니다. 파일 내용과 링크 처리는 Saycode Core가 담당합니다.",
+  "artifactPublication.dialogTitle": "공개 링크",
+  "artifactPublication.copy": "링크 복사",
+  "artifactPublication.copied": "복사됨",
+  "artifactPublication.open": "링크 열기",
+  "artifactPublication.revoke": "공개 중지",
+  "artifactPublication.revoking": "중지 중…",
+  "artifactPublication.failed": "공개 링크 작업에 실패했습니다."
 };
 const personalChatsLandingKo = {
   "personalChats.heroTitle": "무엇을 도와드릴까요?",
@@ -1132,7 +1141,9 @@ const machineSettingsConsoleKo = {
   "machineConsole.updateTimeout": "업데이트가 시작됐지만 완료를 확인하지 못했습니다. 잠시 후 다시 진단해 주세요.",
   "machineConsole.updateFailed": "CLI 업데이트에 실패했습니다.",
   "machineConsole.aiCliStarted": "Codex와 Claude Code 설치를 시작했습니다.",
-  "machineConsole.aiCliFailed": "AI CLI 설치를 시작하지 못했습니다."
+  "machineConsole.aiCliFailed": "AI CLI 설치를 시작하지 못했습니다.",
+  "machineConsole.machineActionFailed": "머신 작업에 실패했습니다.",
+  "machineConsole.extensionCommandsUnavailable": "Extension 명령을 사용할 수 없습니다."
 };
 const sessionTokenUsageKo = {
   "sessionTokenUsage.total": "누적 {count} 토큰",
@@ -1260,7 +1271,12 @@ const additionalDirectoriesKo = {
   "additionalDirectories.limitReached": "추가 디렉터리는 최대 8개까지 등록할 수 있습니다.",
   "additionalDirectories.machineMismatch": "현재 머신과 다른 위치에서 선택한 디렉터리입니다.",
   "additionalDirectories.saveFailed": "디렉터리를 등록하지 못했습니다.",
-  "additionalDirectories.folderLoadFailed": "디렉터리를 불러오지 못했습니다."
+  "additionalDirectories.folderLoadFailed": "디렉터리를 불러오지 못했습니다.",
+  "additionalDirectories.relatedMountMissing": "관련 프로젝트 디렉터리 {count}개를 자동 마운트에서 제외하고 세션을 시작했습니다.",
+  "additionalDirectories.relatedMountLinkLookupFailed": "관련 프로젝트 목록을 불러오지 못해 자동 마운트 없이 세션을 시작했습니다.",
+  "additionalDirectories.relatedMountLookupFailed": "관련 프로젝트 {count}개를 불러오지 못해 제외하고 세션을 시작했습니다.",
+  "additionalDirectories.relatedMountRuntimeUnsupported": "이 머신의 Happy CLI가 관련 프로젝트 자동 마운트를 지원하지 않아 기본 세션으로 시작했습니다.",
+  "additionalDirectories.relatedMountLimit": "관련 프로젝트 디렉터리 상한을 넘어 {count}개를 제외하고 세션을 시작했습니다."
 };
 const agentHandoffKo = {
   "agentHandoff.open": "다른 에이전트로 이어가기",
@@ -1332,6 +1348,15 @@ const subagentKo = {
 const reviewNavigationKo = {
   "review.action.openSourceSession": "원본 대화로 이동: {title}"
 };
+const chatFolderUploadKo = {
+  "upload.kindFolder": "폴더",
+  "upload.folderReference": "{path} ({count}개 파일)",
+  "upload.folderChip": "{name} · {count}개 파일",
+  "upload.folderEmpty": "폴더에 업로드할 파일이 없습니다: {name}",
+  "upload.progress": "파일 업로드 중 {done}/{total}",
+  "upload.partialIssue": "업로드 실패 {failed}개 · 건너뜀 {skipped}개",
+  "upload.invalidPath": "안전하지 않은 첨부 경로입니다."
+};
 const aiCommitPrKo = {
   "aiCommitPr.stagedCount": "스테이지된 파일 {count}개",
   "aiCommitPr.noStaged": "스테이지된 변경이 없습니다.",
@@ -1404,7 +1429,14 @@ const projectLinksKo = {
   "projectLinks.mcpToggleHint": "켜면 AI가 관련 프로젝트로 작업을 제안했을 때 확인 없이 바로 진행됩니다.",
   "projectLinks.mcpToggleFailed": "설정을 바꾸지 못했습니다."
 };
-const catalogExtensionsKo = { ...taskNotificationKo, ...machineUsageKo, ...completionInboxKo, ...agentBoardKo, ...fanoutLifecycleKo, ...conversationSearchKo, ...browserCookieImportKo, ...orcaPortKo, ...usageAnalyticsKo, ...outboundWebhookKo, ...scheduledAutomationsKo, ...githubTriggersKo, ...memoryHubKo, ...extensionPanelKo, ...extensionInstallKo, ...personalChatsKo, ...newSessionStarterKo, ...browserConsoleCaptureKo, ...completionSignalKo, ...agentLoopDetectionKo, ...operationModelRetryKo, ...skillCatalogKo, ...ciAutoFixKo, ...collaborationKo, ...backgroundTaskKo, ...sessionTitleKo, ...accountSettingsKo, ...projectScopeKo, ...machineSettingsConsoleKo, ...sessionTokenUsageKo, ...worktreeSetupKo, ...connectionIndicatorKo, ...voiceDictationKo, ...newSessionProfileKo, ...agentBoardBroadcastKo, ...judgementEvidenceKo, ...releaseNoteKo, ...notificationSoundKo, ...officeViewerKo, ...additionalDirectoriesKo, ...agentHandoffKo, ...sidebarUpdateKo, ...autopilotSelfReviewRoundsKo, ...aiCommitPrKo, ...externalWorktreeInboxKo, ...externalSessionVaultKo, ...terminalFontKo, ...globalPauseKo, ...subagentKo, ...reviewNavigationKo, ...projectLinksKo, ...projectHandoffKo };
+const connectorReadinessKo = {
+  "connectorReadiness.badge": "커넥터 {count}건 확인 필요",
+  "connectorReadiness.state.needsAuth": "다시 연결 필요",
+  "connectorReadiness.state.runtimeFailed": "연결 실패",
+  "connectorReadiness.state.configMissing": "설정 없음",
+  "connectorReadiness.state.unknown": "상태 미확인"
+};
+const catalogExtensionsKo = { ...taskNotificationKo, ...machineUsageKo, ...completionInboxKo, ...agentBoardKo, ...fanoutLifecycleKo, ...conversationSearchKo, ...browserCookieImportKo, ...orcaPortKo, ...usageAnalyticsKo, ...outboundWebhookKo, ...scheduledAutomationsKo, ...githubTriggersKo, ...memoryHubKo, ...extensionPanelKo, ...extensionInstallKo, ...personalChatsKo, ...newSessionStarterKo, ...browserConsoleCaptureKo, ...completionSignalKo, ...agentLoopDetectionKo, ...operationModelRetryKo, ...skillCatalogKo, ...ciAutoFixKo, ...collaborationKo, ...backgroundTaskKo, ...sessionTitleKo, ...accountSettingsKo, ...projectScopeKo, ...machineSettingsConsoleKo, ...sessionTokenUsageKo, ...worktreeSetupKo, ...connectionIndicatorKo, ...voiceDictationKo, ...newSessionProfileKo, ...agentBoardBroadcastKo, ...judgementEvidenceKo, ...releaseNoteKo, ...notificationSoundKo, ...officeViewerKo, ...additionalDirectoriesKo, ...agentHandoffKo, ...sidebarUpdateKo, ...autopilotSelfReviewRoundsKo, ...aiCommitPrKo, ...externalWorktreeInboxKo, ...externalSessionVaultKo, ...terminalFontKo, ...globalPauseKo, ...subagentKo, ...reviewNavigationKo, ...projectLinksKo, ...projectHandoffKo, ...chatFolderUploadKo, ...connectorReadinessKo };
 const onboardingKo = {
   "onboarding.dialogAria": "시작 설정",
   "onboarding.eyebrow": "처음 시작하기",
@@ -1500,6 +1532,44 @@ const ko = {
   "common.reset": "초기화",
   "common.cancel": "취소",
   "common.close": "닫기",
+  "networkDataSaver.transferConfirm": "{operation} 작업은 데이터를 많이 사용할 수 있습니다. 예상 크기: {size}. 계속할까요?",
+  "networkDataSaver.sizeUnknown": "알 수 없음",
+  "networkDataSaver.operation.update-download": "업데이트 다운로드",
+  "networkDataSaver.operation.file-upload": "파일 업로드",
+  "networkDataSaver.operation.folder-upload": "폴더 업로드",
+  "networkDataSaver.operation.file-download": "파일 다운로드",
+  "networkDataSaver.operation.project-deploy": "프로젝트 배포",
+  "networkDataSaver.operation.project-import": "프로젝트 가져오기",
+  "networkDataSaver.title": "네트워크 데이터 절약",
+  "networkDataSaver.description": "macOS가 비용이 들거나 저데이터 모드인 경로로 판단하면 백그라운드 데이터 사용을 자동으로 줄입니다.",
+  "networkDataSaver.loading": "네트워크 상태를 확인하는 중…",
+  "networkDataSaver.unsupported": "이 앱 버전에서는 네트워크 비용 상태를 확인할 수 없습니다.",
+  "networkDataSaver.status.active": "데이터 절약 중",
+  "networkDataSaver.status.inactive": "데이터 절약 꺼짐",
+  "networkDataSaver.modeLabel": "절약 방식",
+  "networkDataSaver.mode.automatic": "자동",
+  "networkDataSaver.mode.always-save": "항상 절약",
+  "networkDataSaver.mode.never-save": "절약 안 함",
+  "networkDataSaver.interfaceLabel": "현재 연결",
+  "networkDataSaver.interface.wifi": "Wi-Fi",
+  "networkDataSaver.interface.wired-ethernet": "유선 이더넷",
+  "networkDataSaver.interface.cellular": "셀룰러",
+  "networkDataSaver.interface.loopback": "로컬 연결",
+  "networkDataSaver.interface.other": "기타 연결",
+  "networkDataSaver.interface.unknown": "알 수 없음",
+  "networkDataSaver.reasonLabel": "판단 이유",
+  "networkDataSaver.reason.expensive": "비용이 드는 네트워크로 감지됨",
+  "networkDataSaver.reason.constrained": "저데이터 모드로 감지됨",
+  "networkDataSaver.reason.offline": "오프라인",
+  "networkDataSaver.reason.unrestricted": "일반 네트워크로 감지됨",
+  "networkDataSaver.reason.unknown": "네트워크 비용 상태를 알 수 없음",
+  "networkDataSaver.reason.user-always": "사용자가 항상 절약을 선택함",
+  "networkDataSaver.reason.user-never": "사용자가 절약 안 함을 선택함",
+  "networkDataSaver.deferred.title": "절약 중 지연되는 작업",
+  "networkDataSaver.activeHelp": "수동 새로고침은 계속 사용할 수 있고, 대용량 작업은 확인 후 한 번 허용할 수 있습니다.",
+  "networkDataSaver.deferred.model": "난이도 모델 최초 다운로드",
+  "networkDataSaver.deferred.memory": "Memory Layer 대화 백필",
+  "networkDataSaver.deferred.gitPr": "백그라운드 Git 및 PR 새로고침",
   "happyCliUpdate.title": "Happy CLI 업데이트가 있습니다",
   "happyCliUpdate.checkTitle": "Happy CLI 업데이트 확인",
   "happyCliUpdate.managerTitle": "Happy CLI 업데이트 관리",
@@ -3397,6 +3467,7 @@ const ko = {
   "file.readFailed": "파일을 읽지 못했습니다.",
   "session.loadMessagesFailed": "대화 메시지를 불러올 수 없습니다.",
   "session.sendToSessionFailed": "대화에 메시지를 보낼 수 없습니다.",
+  "session.sendBlockedAccountKeyLocked": "이 대화는 계정 키로 잠겨 있습니다. 잠금을 해제한 뒤 다시 시도하세요.",
   "message.noEncryptKey": "메시지 삭제 이벤트를 암호화할 세션 키를 찾을 수 없습니다.",
   "machineSel.boundMissing": "프로젝트에 연결된 머신 정보를 찾을 수 없습니다. 새로고침 후 다시 시도해주세요.",
   "machineSel.connectedMachine": "연결된 머신",
@@ -3784,6 +3855,7 @@ const ko = {
   "settingsTab.language": "언어",
   "settingsTab.machines": "머신",
   "settingsTab.mobile": "모바일 연결",
+  "settingsTab.network": "네트워크 데이터 절약",
   "settingsTab.env": "환경 변수",
   "settingsTab.security": "보안",
   "settingsTab.memory": "Memory",
@@ -3792,12 +3864,15 @@ const ko = {
   "settingsTab.extensions": "확장",
   "settingsTab.about": "정보",
   "settingsTab.shortcuts": "단축키",
-  "extensions.help": "필요한 기능만 로컬 확장 패키지로 설치하고 관리합니다.",
+  "extensions.help": "필요한 기능만 공식 또는 로컬 확장 패키지로 설치하고 관리합니다.",
   "extensions.installLocal": "로컬 파일 설치",
   "extensions.loading": "설치된 확장을 불러오는 중입니다.",
   "extensions.empty": "설치된 확장이 없습니다.",
   "extensions.permissions": "권한",
   "extensions.noPermissions": "요청 권한 없음",
+  "extensions.permission.browserViewerOpen": "접근 가능한 온라인 머신에서 원격 Chrome 화면을 준비해 기본 브라우저로 엽니다. 소프트웨어 설치는 포함하지 않습니다.",
+  "extensions.permission.browserViewerInstall": "선택한 머신에 원격 화면용 시스템 패키지(Xvfb/noVNC)를 설치합니다. Chrome 설치는 포함하지 않습니다.",
+  "extensions.permission.browserViewerInstallChrome": "선택한 머신에 Google Chrome을 설치합니다. 머신의 시스템 소프트웨어가 변경됩니다.",
   "extensions.approvePermission": "'{permission}' 승인",
   "extensions.revokePermission": "'{permission}' 철회",
   "extensions.enable": "활성화",
@@ -6904,6 +6979,147 @@ function decryptJsonWithCandidates(blob, keys) {
   decryptCacheSet(blob, keys, null);
   return null;
 }
+function bounded(value2, maxLength) {
+  if (typeof value2 !== "string" || value2.length === 0 || value2.length > maxLength) return void 0;
+  return value2;
+}
+function parseCloudLoginResult(raw) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
+    throw new Error("CLOUD_LOGIN_RESPONSE_INVALID");
+  }
+  const value2 = raw;
+  const required = (field, maxLength) => {
+    const entry = bounded(value2[field], maxLength);
+    if (entry === void 0) throw new Error("CLOUD_LOGIN_RESPONSE_INVALID");
+    return entry;
+  };
+  const accountPublicKey = bounded(value2.accountPublicKey, 128);
+  const accountKeySalt = bounded(value2.accountKeySalt, 128);
+  return {
+    userId: required("userId", 256),
+    username: required("username", 256),
+    token: required("token", 8192),
+    secret: required("secret", 8192),
+    ...accountPublicKey ? { accountPublicKey } : {},
+    ...accountKeySalt ? { accountKeySalt } : {}
+  };
+}
+const ENVELOPE_VERSION = 0;
+const EPHEMERAL_PUBLIC_KEY_LENGTH = 32;
+const ENVELOPE_NONCE_LENGTH = 24;
+const ENVELOPE_HEADER_LENGTH = 1 + EPHEMERAL_PUBLIC_KEY_LENGTH + ENVELOPE_NONCE_LENGTH;
+const GCM_VERSION = 0;
+const GCM_NONCE_LENGTH = 12;
+const GCM_TAG_LENGTH = 16;
+function unwrapDataEncryptionKey(envelopeBase64, recipientPrivateKey) {
+  let envelope;
+  try {
+    envelope = decodeBase64(envelopeBase64);
+  } catch {
+    return null;
+  }
+  if (envelope.length <= ENVELOPE_HEADER_LENGTH) return null;
+  if (envelope[0] !== ENVELOPE_VERSION) return null;
+  const ephemeralPublicKey = envelope.subarray(1, 1 + EPHEMERAL_PUBLIC_KEY_LENGTH);
+  const nonce = envelope.subarray(1 + EPHEMERAL_PUBLIC_KEY_LENGTH, ENVELOPE_HEADER_LENGTH);
+  const ciphertext = envelope.subarray(ENVELOPE_HEADER_LENGTH);
+  const opened = nacl.box.open(ciphertext, nonce, ephemeralPublicKey, recipientPrivateKey);
+  return opened ? new Uint8Array(opened) : null;
+}
+async function importGcmKey(dataEncryptionKey) {
+  return crypto.subtle.importKey("raw", new Uint8Array(dataEncryptionKey), "AES-GCM", false, ["encrypt", "decrypt"]);
+}
+async function decryptDataKeyToString(dataEncryptionKey, bundleBase64) {
+  let bundle;
+  try {
+    bundle = decodeBase64(bundleBase64);
+  } catch {
+    return null;
+  }
+  if (bundle.length < 1 + GCM_NONCE_LENGTH + GCM_TAG_LENGTH) return null;
+  if (bundle[0] !== GCM_VERSION) return null;
+  const nonce = bundle.subarray(1, 1 + GCM_NONCE_LENGTH);
+  const ciphertextWithTag = bundle.subarray(1 + GCM_NONCE_LENGTH);
+  try {
+    const key = await importGcmKey(dataEncryptionKey);
+    const plaintext = await crypto.subtle.decrypt({ name: "AES-GCM", iv: new Uint8Array(nonce) }, key, new Uint8Array(ciphertextWithTag));
+    return new TextDecoder().decode(plaintext);
+  } catch {
+    return null;
+  }
+}
+async function encryptDataKeyContent(dataEncryptionKey, value2) {
+  const nonce = nacl.randomBytes(GCM_NONCE_LENGTH);
+  const key = await importGcmKey(dataEncryptionKey);
+  const plaintext = new TextEncoder().encode(JSON.stringify(value2));
+  const ciphertextWithTag = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: new Uint8Array(nonce) }, key, plaintext));
+  const bundle = new Uint8Array(1 + GCM_NONCE_LENGTH + ciphertextWithTag.length);
+  bundle[0] = GCM_VERSION;
+  bundle.set(nonce, 1);
+  bundle.set(ciphertextWithTag, 1 + GCM_NONCE_LENGTH);
+  return encodeBase64(bundle);
+}
+const dekBySessionId = /* @__PURE__ */ new Map();
+const lockedSessionIds = /* @__PURE__ */ new Set();
+const fingerprints = /* @__PURE__ */ new Map();
+function registerSessionDek(session, accountPrivateKey) {
+  const envelope = session.dataEncryptionKey ?? null;
+  if (!envelope) {
+    dekBySessionId.delete(session.id);
+    lockedSessionIds.delete(session.id);
+    fingerprints.delete(session.id);
+    return;
+  }
+  const fingerprint = `${envelope}|${accountPrivateKey ? "1" : "0"}`;
+  if (fingerprints.get(session.id) === fingerprint) return;
+  fingerprints.set(session.id, fingerprint);
+  const dek = accountPrivateKey ? unwrapDataEncryptionKey(envelope, accountPrivateKey) : null;
+  if (dek) {
+    dekBySessionId.set(session.id, dek);
+    lockedSessionIds.delete(session.id);
+  } else {
+    dekBySessionId.delete(session.id);
+    lockedSessionIds.add(session.id);
+  }
+}
+function getSessionDek(sessionId) {
+  return dekBySessionId.get(sessionId) ?? null;
+}
+const MAX_ENTRIES = 3e3;
+const headerCache = /* @__PURE__ */ new Map();
+function cacheGet(store, sessionId, ciphertext) {
+  return store.get(sessionId)?.get(ciphertext) ?? null;
+}
+function cacheSet(store, sessionId, ciphertext, plaintext) {
+  let perSession = store.get(sessionId);
+  if (!perSession) {
+    perSession = /* @__PURE__ */ new Map();
+    store.set(sessionId, perSession);
+  }
+  perSession.set(ciphertext, plaintext);
+  if (perSession.size > MAX_ENTRIES) {
+    const oldest = perSession.keys().next().value;
+    if (oldest !== void 0) perSession.delete(oldest);
+  }
+}
+function getCachedDataKeyMetadataJson(sessionId, ciphertext) {
+  return cacheGet(headerCache, sessionId, ciphertext);
+}
+async function preDecryptSessionHeaders(sessions, accountPrivateKey) {
+  await Promise.all(sessions.map(async (session) => {
+    registerSessionDek(session, accountPrivateKey);
+    const dek = getSessionDek(session.id);
+    if (!dek) return;
+    if (session.metadata && getCachedDataKeyMetadataJson(session.id, session.metadata) === null) {
+      const json = await decryptDataKeyToString(dek, session.metadata);
+      if (json !== null) cacheSet(headerCache, session.id, session.metadata, json);
+    }
+    if (session.agentState && getCachedDataKeyMetadataJson(session.id, session.agentState) === null) {
+      const json = await decryptDataKeyToString(dek, session.agentState);
+      if (json !== null) cacheSet(headerCache, session.id, session.agentState, json);
+    }
+  }));
+}
 function buildUserTextMessageContent(input) {
   return {
     role: "user",
@@ -7022,7 +7238,7 @@ function personalMachinesPath(companyId) {
 function myMachinesPath(companyId) {
   return `/api/admin/companies/${encodeURIComponent(companyId)}/my-machines`;
 }
-function record$1(value2) {
+function record$2(value2) {
   return value2 && typeof value2 === "object" && !Array.isArray(value2) ? value2 : {};
 }
 function array(value2) {
@@ -7041,7 +7257,7 @@ function provider(value2) {
   return PROVIDERS.includes(str(value2)) ? str(value2) : null;
 }
 function parseBundle(value2) {
-  const row2 = record$1(value2);
+  const row2 = record$2(value2);
   const id = str(row2.id);
   const bundleProvider = provider(row2.provider);
   if (!id || !bundleProvider) return null;
@@ -7060,7 +7276,7 @@ function parseBundle(value2) {
   };
 }
 function parseDeployment(value2) {
-  const row2 = record$1(value2);
+  const row2 = record$2(value2);
   const machineId = str(row2.machineId);
   const bundleId = str(row2.bundleId);
   if (!machineId || !bundleId) return null;
@@ -7080,10 +7296,10 @@ function parseDeployment(value2) {
   };
 }
 function parseStatus(value2) {
-  const row2 = record$1(value2);
+  const row2 = record$2(value2);
   const statusProvider = provider(row2.provider);
   if (!statusProvider) return void 0;
-  const rotationRow = record$1(row2.rotation);
+  const rotationRow = record$2(row2.rotation);
   const state = str(rotationRow.state);
   const rotation = ROTATION_STATES.includes(state) ? {
     state,
@@ -7104,7 +7320,7 @@ function parseStatus(value2) {
   };
 }
 function parseMachineResult(value2) {
-  const row2 = record$1(value2);
+  const row2 = record$2(value2);
   const machineId = str(row2.machineId);
   if (!machineId) return null;
   if (row2.ok !== true) {
@@ -7119,28 +7335,28 @@ function parseMachineResult(value2) {
   };
 }
 function parseAiCredentialVaultSnapshot(value2) {
-  const body = record$1(value2);
+  const body = record$2(value2);
   return {
     bundles: array(body.bundles).map(parseBundle).filter((bundle) => bundle !== null),
     deployments: array(body.deployments).map(parseDeployment).filter((deployment) => deployment !== null)
   };
 }
 function parseAiCredentialCaptureResponse(value2) {
-  const body = record$1(value2);
+  const body = record$2(value2);
   const bundle = parseBundle(body.bundle);
   if (!bundle) throw new Error("AI credential capture response did not contain a bundle");
   return { bundle, warnings: array(body.warnings).filter((warning) => typeof warning === "string") };
 }
 function parseAiCredentialBatchResult(value2) {
-  const body = record$1(value2);
+  const body = record$2(value2);
   return {
     results: array(body.results).map(parseMachineResult).filter((result) => result !== null),
     warnings: array(body.warnings).filter((warning) => typeof warning === "string")
   };
 }
 function parseSelfServiceMachines(value2) {
-  return array(record$1(value2).machines).map((entry) => {
-    const row2 = record$1(entry);
+  return array(record$2(value2).machines).map((entry) => {
+    const row2 = record$2(entry);
     return {
       machineId: str(row2.machineId),
       type: row2.type === "shared" ? "shared" : "personal",
@@ -7153,8 +7369,8 @@ function parseSelfServiceMachines(value2) {
   }).filter((machine) => machine.machineId !== "");
 }
 function parsePersonalMachines(value2) {
-  return array(record$1(value2).machines).map((entry) => {
-    const row2 = record$1(entry);
+  return array(record$2(value2).machines).map((entry) => {
+    const row2 = record$2(entry);
     const type = row2.type === "shared" ? "shared" : "personal";
     return {
       machineId: str(row2.machineId),
@@ -7524,6 +7740,123 @@ function parseProjectListV2Page(body) {
     total: page.total
   };
 }
+const PUBLIC_ID_PATTERN = /^[A-Za-z0-9_-]{32}$/;
+const CHECKSUM_PATTERN = /^[a-f\d]{64}$/i;
+const MAX_ID_LENGTH = 256;
+const MAX_TITLE_LENGTH = 255;
+const MAX_WARNINGS = 32;
+const MAX_WARNING_LENGTH = 500;
+const PUBLICATION_KEYS = /* @__PURE__ */ new Set([
+  "id",
+  "publicId",
+  "sourceType",
+  "sourceIdentity",
+  "sourceChecksumSha256",
+  "title",
+  "contentType",
+  "sizeBytes",
+  "checksumSha256",
+  "status",
+  "createdAt",
+  "revokedAt",
+  "publicUrl"
+]);
+function fail(detail) {
+  throw new Error(`artifact publication response is invalid: ${detail}`);
+}
+function record$1(value2, label) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) fail(`${label} must be an object`);
+  return value2;
+}
+function exactKeys(value2, keys) {
+  const expected = new Set(keys);
+  if (Object.keys(value2).some((key) => !expected.has(key)) || keys.some((key) => !(key in value2))) fail("response fields do not match the contract");
+}
+function nonEmptyString$1(value2, label, maxLength = MAX_ID_LENGTH) {
+  if (typeof value2 !== "string" || !value2 || value2.trim() !== value2 || value2.length > maxLength) fail(`${label} is invalid`);
+  return value2;
+}
+function checksum(value2, label) {
+  if (typeof value2 !== "string" || !CHECKSUM_PATTERN.test(value2)) fail(`${label} is invalid`);
+}
+function safeInteger(value2, label) {
+  if (typeof value2 !== "number" || !Number.isSafeInteger(value2) || value2 < 0) fail(`${label} is invalid`);
+}
+function warnings(value2) {
+  if (!Array.isArray(value2) || value2.length > MAX_WARNINGS || value2.some((warning) => typeof warning !== "string" || warning.length > MAX_WARNING_LENGTH)) fail("warnings are invalid");
+  return [...value2];
+}
+function isLoopbackHostname(hostname) {
+  return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
+}
+function parseTrustedPublicUrl(value2, apiBaseUrl, publicId) {
+  if (typeof value2 !== "string") fail("publicUrl is invalid");
+  let publicUrl;
+  let apiUrl;
+  try {
+    publicUrl = new URL(value2);
+    apiUrl = new URL(apiBaseUrl);
+  } catch {
+    fail("publicUrl is invalid");
+  }
+  if (publicUrl.protocol !== "https:" && !(publicUrl.protocol === "http:" && isLoopbackHostname(publicUrl.hostname)) || publicUrl.origin !== apiUrl.origin || publicUrl.protocol !== apiUrl.protocol || publicUrl.username || publicUrl.password || publicUrl.search || publicUrl.hash || publicUrl.pathname !== `/artifacts/${publicId}`) fail("publicUrl is not trusted");
+  return publicUrl.toString();
+}
+function sourceIdentity(source) {
+  return source.type === "project-file" ? JSON.stringify([
+    source.projectId,
+    ...source.worktreeId ? [source.worktreeId] : [],
+    source.path
+  ]) : JSON.stringify([source.chatId, source.path]);
+}
+function validatePublication(value2, apiBaseUrl, operation, expectedSource) {
+  const publication = record$1(value2, "publication");
+  if (Object.keys(publication).some((key) => !PUBLICATION_KEYS.has(key))) {
+    fail("publication contains an unexpected field");
+  }
+  if ([...PUBLICATION_KEYS].some((key) => !(key in publication))) {
+    fail("publication is missing a field");
+  }
+  const publicationId = nonEmptyString$1(publication.id, "publication id");
+  const publicId = nonEmptyString$1(publication.publicId, "public id");
+  if (!PUBLIC_ID_PATTERN.test(publicId)) fail("public id is invalid");
+  if (!["project-file", "personal-chat-file", "personal-chat-artifact"].includes(String(publication.sourceType))) {
+    fail("source type is invalid");
+  }
+  const parsedSourceIdentity = nonEmptyString$1(publication.sourceIdentity, "source identity", 4096);
+  if (expectedSource && (publication.sourceType !== expectedSource.type || parsedSourceIdentity !== sourceIdentity(expectedSource))) fail("source does not match the request");
+  checksum(publication.sourceChecksumSha256, "source checksum");
+  const title = nonEmptyString$1(publication.title, "title", MAX_TITLE_LENGTH);
+  nonEmptyString$1(publication.contentType, "content type");
+  safeInteger(publication.sizeBytes, "size");
+  checksum(publication.checksumSha256, "checksum");
+  safeInteger(publication.createdAt, "created time");
+  const expectedStatus = operation === "publish" ? "active" : "revoked";
+  if (publication.status !== expectedStatus) fail("status does not match the operation");
+  if (publication.revokedAt !== null && typeof publication.revokedAt !== "number" || typeof publication.revokedAt === "number" && (!Number.isSafeInteger(publication.revokedAt) || publication.revokedAt < 0) || expectedStatus === "active" && publication.revokedAt !== null || expectedStatus === "revoked" && publication.revokedAt === null) fail("revoked time is invalid");
+  return {
+    publicationId,
+    publicId,
+    publicUrl: parseTrustedPublicUrl(publication.publicUrl, apiBaseUrl, publicId),
+    title,
+    status: expectedStatus
+  };
+}
+function parseStaticArtifactPublicationResult(value2, options) {
+  const response = record$1(value2, "response");
+  if (options.operation === "publish") {
+    exactKeys(response, ["publication", "publicUrl", "reused"]);
+    if (typeof response.reused !== "boolean") fail("reused is invalid");
+    const publication2 = validatePublication(response.publication, options.apiBaseUrl, options.operation, options.source);
+    const publicUrl = parseTrustedPublicUrl(response.publicUrl, options.apiBaseUrl, publication2.publicId);
+    if (publication2.publicUrl !== publicUrl) fail("public URLs do not match");
+    return { version: 1, ...publication2, reused: response.reused, warnings: [] };
+  }
+  exactKeys(response, ["publication", "warnings"]);
+  const parsedWarnings = warnings(response.warnings);
+  const publication = validatePublication(response.publication, options.apiBaseUrl, options.operation);
+  return { version: 1, ...publication, reused: false, warnings: parsedWarnings };
+}
 function asRecord(value2) {
   return value2 && typeof value2 === "object" && !Array.isArray(value2) ? value2 : null;
 }
@@ -16132,6 +16465,18 @@ function coerceCreatedBy(value2) {
   const displayName = nonEmptyString(value2.displayName);
   return displayName ? { accountId, displayName } : { accountId };
 }
+function decryptSessionJsonSync(sessionId, blob, candidateKeys) {
+  if (!blob) return null;
+  const cached = getCachedDataKeyMetadataJson(sessionId, blob);
+  if (cached !== null) {
+    try {
+      return JSON.parse(cached);
+    } catch {
+      return null;
+    }
+  }
+  return decryptJsonWithCandidates(blob, candidateKeys);
+}
 function apiSessionToSession(api, candidateKeys, existing) {
   const updatedAt = mergeUpdatedAt(api.updatedAt);
   const summaryText = decryptSummaryText(api.metadata, candidateKeys) ?? existing?.summaryText;
@@ -16141,8 +16486,8 @@ function apiSessionToSession(api, candidateKeys, existing) {
   const pendingExitPlanMode = apiSessionAgentStatePendingExitPlanMode(api.agentState, candidateKeys);
   const pendingPermissionRequests = apiSessionAgentStatePendingPermissions(api.agentState, candidateKeys);
   const agentControlledByUser = apiSessionAgentStateControlledByUser(api.agentState, candidateKeys);
-  const agentState = api.agentState ? decryptJsonWithCandidates(api.agentState, candidateKeys) : null;
-  const metadata = decryptJsonWithCandidates(api.metadata, candidateKeys);
+  const agentState = api.agentState ? decryptSessionJsonSync(api.id, api.agentState, candidateKeys) : null;
+  const metadata = decryptSessionJsonSync(api.id, api.metadata, candidateKeys);
   const agent = agentFromFlavor(typeof metadata?.flavor === "string" ? metadata.flavor : void 0) ?? existing?.agent;
   const models = coerceSessionModels(metadata?.models) ?? existing?.models;
   const worktree = coerceSessionWorktree(metadata?.worktree) ?? coerceSessionWorktree(metadata) ?? existing?.worktree;
@@ -16486,18 +16831,18 @@ function readCloudMobileLoginPairingErrorCode(body) {
 const PAIRING_ID_PATTERN = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
 const CODE_PATTERN = /^[A-Za-z0-9_-]{43}$/;
 const STATUSES = /* @__PURE__ */ new Set(["pending", "consumed", "revoked", "expired"]);
-function invalidResponse() {
+function invalidResponse$1() {
   throw new Error("PAIRING_RESPONSE_INVALID");
 }
 function parseCloudMobileLoginPairing(raw, options = {}) {
-  if (!raw || typeof raw !== "object" || Array.isArray(raw)) invalidResponse();
+  if (!raw || typeof raw !== "object" || Array.isArray(raw)) invalidResponse$1();
   const value2 = raw;
-  if (typeof value2.pairingId !== "string" || !PAIRING_ID_PATTERN.test(value2.pairingId)) invalidResponse();
-  if (!Number.isSafeInteger(value2.expiresAt) || value2.expiresAt <= 0) invalidResponse();
-  if (!Number.isSafeInteger(value2.serverTime) || value2.serverTime <= 0) invalidResponse();
-  if (typeof value2.status !== "string" || !STATUSES.has(value2.status)) invalidResponse();
-  if (options.requireCode && (typeof value2.code !== "string" || !CODE_PATTERN.test(value2.code))) invalidResponse();
-  if (value2.code !== void 0 && (typeof value2.code !== "string" || !CODE_PATTERN.test(value2.code))) invalidResponse();
+  if (typeof value2.pairingId !== "string" || !PAIRING_ID_PATTERN.test(value2.pairingId)) invalidResponse$1();
+  if (!Number.isSafeInteger(value2.expiresAt) || value2.expiresAt <= 0) invalidResponse$1();
+  if (!Number.isSafeInteger(value2.serverTime) || value2.serverTime <= 0) invalidResponse$1();
+  if (typeof value2.status !== "string" || !STATUSES.has(value2.status)) invalidResponse$1();
+  if (options.requireCode && (typeof value2.code !== "string" || !CODE_PATTERN.test(value2.code))) invalidResponse$1();
+  if (value2.code !== void 0 && (typeof value2.code !== "string" || !CODE_PATTERN.test(value2.code))) invalidResponse$1();
   return {
     pairingId: value2.pairingId,
     expiresAt: value2.expiresAt,
@@ -16506,6 +16851,43 @@ function parseCloudMobileLoginPairing(raw, options = {}) {
     ...typeof value2.code === "string" ? { code: value2.code } : {}
   };
 }
+const BROWSER_VIEWER_OPEN_TIMEOUT_MS = 13e4;
+const BROWSER_VIEWER_INSTALL_TIMEOUT_MS = 31e4;
+function invalidResponse() {
+  throw new Error("BROWSER_VIEWER_RESPONSE_INVALID");
+}
+function responseRecord(value2) {
+  if (!value2 || typeof value2 !== "object" || Array.isArray(value2)) invalidResponse();
+  return value2;
+}
+function parseBrowserViewerOpenResponse(value2) {
+  const response = responseRecord(value2);
+  if (typeof response.token !== "string" || response.token.length === 0 || typeof response.relayUrl !== "string" && response.relayUrl !== null || response.routingVersion !== 1 || typeof response.previewDomain !== "string" && response.previewDomain !== null || !Number.isInteger(response.webPort) || response.webPort < 1 || response.webPort > 65535 || typeof response.bridgeReady !== "boolean") invalidResponse();
+  return {
+    token: response.token,
+    relayUrl: response.relayUrl,
+    routingVersion: 1,
+    previewDomain: response.previewDomain,
+    webPort: response.webPort,
+    bridgeReady: response.bridgeReady
+  };
+}
+function parseBrowserViewerInstallResponse(value2) {
+  const response = responseRecord(value2);
+  if (response.action === "already-installed") return { kind: "already-installed" };
+  if (response.action === "run") {
+    if (response.ok !== true) invalidResponse();
+    return { kind: "installed" };
+  }
+  if (response.action === "manual") {
+    if (typeof response.command !== "string" || typeof response.reason !== "string") invalidResponse();
+    return {
+      kind: "manual-required",
+      reason: response.command.length === 0 ? "unsupported-platform" : "admin-required"
+    };
+  }
+  return invalidResponse();
+}
 const FIXED_API_BASE_URL = "https://saycode.ai";
 const FIXED_SYNC_BASE_URL = "https://saycode.ai";
 const machineRegistryCache = /* @__PURE__ */ new Map();
@@ -16686,6 +17068,7 @@ function normalizeMachine(row2, candidateKeys) {
     mcpCallerGrantPublicKey: readMcpCallerGrantPublicKey(daemonState),
     automationSupport,
     filesystemScope: decrypted.filesystemScope,
+    additionalDirectories: decrypted.additionalDirectories,
     registry
   };
 }
@@ -16713,7 +17096,7 @@ class ApiClient {
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify(input)
     }, DEFAULT_REQUEST_TIMEOUT_MS);
-    return this.handleResponse(response);
+    return parseCloudLoginResult(await this.handleResponse(response));
   }
   async getMe() {
     return this.request("/api/auth/me", { boundary: "api" });
@@ -17952,23 +18335,26 @@ class ApiClient {
       boundary: "api"
     });
   }
-  async fetchSessions(candidateKeys = [], tokenOverride) {
+  async fetchSessions(candidateKeys = [], tokenOverride, accountPrivateKey = null) {
     const data = await this.request("/v1/sessions", {
       boundary: "sync",
       tokenOverride
     });
     const rows = Array.isArray(data) ? data : data.sessions ?? [];
+    await preDecryptSessionHeaders(rows, accountPrivateKey);
     return rows.map((row2) => apiSessionToSession(row2, candidateKeys));
   }
-  async fetchSessionsPage(candidateKeys = [], cursor, limit = 200, tokenOverride) {
+  async fetchSessionsPage(candidateKeys = [], cursor, limit = 200, tokenOverride, accountPrivateKey = null) {
     const params = new URLSearchParams({ limit: String(limit) });
     if (cursor) params.set("cursor", cursor);
     const data = await this.request(
       `/v2/sessions?${params.toString()}`,
       { boundary: "sync", tokenOverride }
     );
+    const rows = data.sessions ?? [];
+    await preDecryptSessionHeaders(rows, accountPrivateKey);
     return {
-      sessions: (data.sessions ?? []).map((row2) => apiSessionToSession(row2, candidateKeys)),
+      sessions: rows.map((row2) => apiSessionToSession(row2, candidateKeys)),
       nextCursor: data.nextCursor ?? null,
       hasNext: data.hasNext === true
     };
@@ -17983,8 +18369,10 @@ class ApiClient {
     });
     return data.sessions ?? [];
   }
-  async lookupSessions(candidateKeys, ids, tokenOverride) {
-    return (await this.lookupApiSessions(ids, tokenOverride)).map((row2) => apiSessionToSession(row2, candidateKeys));
+  async lookupSessions(candidateKeys, ids, tokenOverride, accountPrivateKey = null) {
+    const rows = await this.lookupApiSessions(ids, tokenOverride);
+    await preDecryptSessionHeaders(rows, accountPrivateKey);
+    return rows.map((row2) => apiSessionToSession(row2, candidateKeys));
   }
   async deleteSession(sessionId, tokenOverride) {
     await this.request(`/v1/sessions/${encodeURIComponent(sessionId)}`, {
@@ -18169,9 +18557,8 @@ class ApiClient {
   }
   async sendUserTextMessage(input) {
     const localId = input.localId || `desktop-${Date.now()}-${Math.random().toString(36).slice(2)}`;
-    const key = input.secretBase64 ? decodeBase64(input.secretBase64) : null;
     const content = buildUserTextMessageContent(input);
-    const encoded = encodeMessageContent(content, key);
+    const encoded = input.dataEncryptionKey ? await encryptDataKeyContent(input.dataEncryptionKey, content) : encodeMessageContent(content, input.secretBase64 ? decodeBase64(input.secretBase64) : null);
     const result = await this.sendMessages(input.sessionId, [{ localId, content: encoded }], input.tokenOverride);
     return { localId, sentSeq: result.messages?.[0]?.seq };
   }
@@ -18243,6 +18630,34 @@ class ApiClient {
     }
     return resolvedProjectPreviewRelayUrl({ ...input, response: { ...response, token: response.token }, syncBaseUrl: this.config.syncBaseUrl });
   }
+  async openBrowserViewer(machineId, signal) {
+    return parseBrowserViewerOpenResponse(await this.request(
+      `/api/machines/${encodeURIComponent(machineId)}/browser-viewer/open`,
+      {
+        method: "POST",
+        boundary: "api",
+        signal,
+        timeoutMs: BROWSER_VIEWER_OPEN_TIMEOUT_MS
+      }
+    ));
+  }
+  async installBrowserViewer(machineId, signal) {
+    return this.installBrowserViewerComponent(machineId, "install", signal);
+  }
+  async installBrowserViewerChrome(machineId, signal) {
+    return this.installBrowserViewerComponent(machineId, "install-chrome", signal);
+  }
+  async installBrowserViewerComponent(machineId, action, signal) {
+    return parseBrowserViewerInstallResponse(await this.request(
+      `/api/machines/${encodeURIComponent(machineId)}/browser-viewer/${action}`,
+      {
+        method: "POST",
+        boundary: "api",
+        signal,
+        timeoutMs: BROWSER_VIEWER_INSTALL_TIMEOUT_MS
+      }
+    ));
+  }
   // --- Project deploy & share (specs/desktop-project-deploy-share) ---
   async moveProject(projectId, input) {
     return this.request(`/api/projects/${encodeURIComponent(projectId)}/move`, {
@@ -18364,6 +18779,30 @@ class ApiClient {
       timeoutMs: LONG_REQUEST_TIMEOUT_MS
     });
   }
+  async publishStaticArtifact(source, signal) {
+    const { version: _version, ...serverSource } = source;
+    const response = await this.request("/api/artifact-publications", {
+      method: "POST",
+      boundary: "api",
+      body: JSON.stringify({ source: serverSource }),
+      signal
+    });
+    return parseStaticArtifactPublicationResult(response, {
+      apiBaseUrl: this.config.apiBaseUrl,
+      operation: "publish",
+      source
+    });
+  }
+  async revokeStaticArtifactPublication(publicationId, signal) {
+    const response = await this.request(
+      `/api/artifact-publications/${encodeURIComponent(publicationId)}`,
+      { method: "DELETE", boundary: "api", signal }
+    );
+    return parseStaticArtifactPublicationResult(response, {
+      apiBaseUrl: this.config.apiBaseUrl,
+      operation: "revoke"
+    });
+  }
   async getDeployGitHubFiles(projectId, branch = "main") {
     const data = await this.request("/deploy/github-files", {
       method: "POST",
@@ -19784,11 +20223,11 @@ function reduceSessionReadState(state, change, merge, fingerprintLimit = DEFAULT
   const { item } = change;
   if (state.fingerprints.includes(item.fingerprint)) return state;
   if (change.kind === "event" && item.cursor !== null && state.cursor !== null && item.cursor < state.cursor) return state;
-  const fingerprints = [...state.fingerprints, item.fingerprint].slice(-Math.max(1, fingerprintLimit));
+  const fingerprints2 = [...state.fingerprints, item.fingerprint].slice(-Math.max(1, fingerprintLimit));
   return {
     value: merge(state.value, item.value),
     cursor: item.cursor === null ? state.cursor : Math.max(state.cursor ?? item.cursor, item.cursor),
-    fingerprints
+    fingerprints: fingerprints2
   };
 }
 function record(value2) {
@@ -20741,7 +21180,7 @@ function chatUploadRelPath(file, id) {
   if (file.type.startsWith("image/")) return `.aplus/uploads/${id}.${extensionFor(file)}`;
   return `.aplus/uploads/${id}-${safeFileName(file)}`;
 }
-async function uploadChatFileToMachineCore(file, workspaceRoot, deps) {
+async function uploadChatFileToMachineCore(file, workspaceRoot, deps, relativePath) {
   const root = workspaceRoot.trim().replace(/\/+$/, "");
   if (!root) throw new Error(translateCurrent("upload.noWorkspaceRoot"));
   const id = (deps.now?.() ?? Date.now()).toString(36) + (deps.random?.() ?? Math.random()).toString(36).slice(2, 8);
@@ -21190,6 +21629,7 @@ const USAGE_SETTINGS_NAVIGATION_DESTINATIONS = [
   "settings_shortcuts",
   "settings_machines",
   "settings_mobile",
+  "settings_network",
   "settings_env",
   "settings_security",
   "settings_memory",
@@ -24043,13 +24483,16 @@ function parseSpawnRecord(value2) {
 }
 const LEDGER_FILE_MODE = 384;
 const PREVIEW_MAX_LENGTH = 200;
-function agentLineagePath(homeDir) {
+function agentLineagePath(rootDir) {
+  return join(rootDir, ".aplus", "agent-lineage.jsonl");
+}
+function legacyAgentLineagePath(homeDir) {
   return join(homeDir, ".saycode", "agent-lineage.jsonl");
 }
-function readSpawnRecords(homeDir) {
+function readLedger(path) {
   let raw;
   try {
-    raw = readFileSync(agentLineagePath(homeDir), "utf8");
+    raw = readFileSync(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return [];
     throw error;
@@ -24067,12 +24510,38 @@ function readSpawnRecords(homeDir) {
   }
   return records;
 }
-function countSpawnsFor(homeDir, agentKey) {
-  return readSpawnRecords(homeDir).filter((record2) => record2.agentKey === agentKey).length;
+function recordIdentity(record2) {
+  return JSON.stringify([
+    record2.ts,
+    record2.agentKey,
+    record2.root,
+    record2.depth,
+    record2.childSessionId,
+    record2.parentSessionId ?? null,
+    record2.agent,
+    record2.promptPreview,
+    record2.outcome
+  ]);
+}
+function readSpawnRecords(homeDir, rootDir) {
+  const records = [
+    ...readLedger(legacyAgentLineagePath(homeDir)),
+    ...readLedger(agentLineagePath(rootDir))
+  ];
+  const seen = /* @__PURE__ */ new Set();
+  return records.filter((record2) => {
+    const identity = recordIdentity(record2);
+    if (seen.has(identity)) return false;
+    seen.add(identity);
+    return true;
+  });
+}
+function countSpawnsFor(homeDir, rootDir, agentKey) {
+  return readSpawnRecords(homeDir, rootDir).filter((record2) => record2.agentKey === agentKey).length;
 }
-function appendSpawnRecord(homeDir, record2) {
-  const path = agentLineagePath(homeDir);
-  mkdirSync(join(homeDir, ".saycode"), { recursive: true, mode: 448 });
+function appendSpawnRecord(rootDir, record2) {
+  const path = agentLineagePath(rootDir);
+  mkdirSync(join(rootDir, ".aplus"), { recursive: true, mode: 448 });
   const entry = { ...record2, promptPreview: record2.promptPreview.slice(0, PREVIEW_MAX_LENGTH) };
   appendFileSync(path, `${JSON.stringify(entry)}
 `, { mode: LEDGER_FILE_MODE });
@@ -24276,7 +24745,7 @@ async function openStream(context, transport, sessionId) {
 }
 function createAgentRuntime(context, transport, env = process.env) {
   const keys = [decodeBase64(context.syncCredential.secret)];
-  const homeDir = context.homeDir;
+  const homeDir = context.homeDir, lineageRoot = readAgentEnv(env)?.root ?? context.homeDir;
   const credentialHome = context.credential.source === "saycode" ? null : dirname(context.credential.path);
   return {
     env,
@@ -24317,9 +24786,9 @@ function createAgentRuntime(context, transport, env = process.env) {
       return { sessionId: result.sessionId };
     },
     newAgentId: () => randomBytes(8).toString("hex"),
-    countSpawns: (agentKey) => countSpawnsFor(homeDir, agentKey),
-    recordSpawn: (record2) => appendSpawnRecord(homeDir, record2),
-    readLineage: () => readSpawnRecords(homeDir),
+    countSpawns: (agentKey) => countSpawnsFor(homeDir, lineageRoot, agentKey),
+    recordSpawn: (record2) => appendSpawnRecord(lineageRoot, record2),
+    readLineage: () => readSpawnRecords(homeDir, lineageRoot),
     steerSession: (sessionId, text2) => steerAgentSession(transport, sessionId, text2),
     stopSession: (machineId, sessionId) => stopAgentSession(transport, machineId, sessionId),
     // Omitted entirely without API access: a Happy `access.key` is sync-only, so

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@buzzni/saycode-cli",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Drive Saycode sessions across your machines from the terminal.",
   "type": "module",
   "bin": {