@craftspace/cli 0.2.0 → 0.2.2

package/dist/index.js

@@ -18187,6 +18187,22 @@ var TREE_KINDS = [
   PageKind.Artifact,
   PageKind.Table
 ];
+var PageLayer;
+(function(PageLayer2) {
+  PageLayer2["Record"] = "record";
+  PageLayer2["Knowledge"] = "knowledge";
+  PageLayer2["Skill"] = "skill";
+})(PageLayer || (PageLayer = {}));
+var KIND_LAYER = {
+  [PageKind.Page]: PageLayer.Knowledge,
+  [PageKind.Decision]: PageLayer.Knowledge,
+  [PageKind.Skill]: PageLayer.Skill,
+  [PageKind.Meeting]: PageLayer.Record,
+  [PageKind.Thread]: PageLayer.Record,
+  [PageKind.Customer]: PageLayer.Record,
+  [PageKind.Artifact]: PageLayer.Record,
+  [PageKind.Table]: PageLayer.Record
+};
 var AUTHORABLE_KINDS = [PageKind.Page, PageKind.Decision, PageKind.Customer, PageKind.Skill];
 var PAGE_COLORS = [
   "slate",
@@ -18937,6 +18953,10 @@ var AUDIT_GROUPS = [
       AuditAction.WorkflowSecretRotated
     ]
   },
+  {
+    label: "MCP calls",
+    actions: [AuditAction.McpToolCall, AuditAction.McpRequest]
+  },
   {
     label: "Organization",
     actions: [
@@ -18948,6 +18968,7 @@ var AUDIT_GROUPS = [
   }
 ];
 var AUDIT_LISTED_ACTIONS = AUDIT_GROUPS.flatMap((group) => group.actions);
+var AUDIT_DEFAULT_ACTIONS = AUDIT_LISTED_ACTIONS.filter((action) => AUDIT_TIERS[action] !== AuditTier.Volume);
 var AUDIT_VERBS = {
   [AuditAction.AccessDenied]: "Was refused",
   [AuditAction.MemberSignedIn]: "Signed in",
@@ -19016,6 +19037,7 @@ var AuditEntrySchema = external_exports.object({
   target: AuditTargetSchema.optional(),
   data: external_exports.record(external_exports.string(), external_exports.unknown()),
   ip: external_exports.string().optional(),
+  userAgent: external_exports.string().optional(),
   createdAt: external_exports.string()
 });
 var AuditSummarySchema = external_exports.object({
@@ -19258,6 +19280,12 @@ var CreateConnectionBodySchema = external_exports.object({
   // sent it, and can start a connect for that one kit and nothing else.
   inviteToken: external_exports.string().optional()
 });
+var ReplaceConnectionSecretBodySchema = external_exports.object({
+  mcpUrl: external_exports.url().optional(),
+  authToken: external_exports.string().min(1).optional(),
+  dsn: external_exports.string().min(1).optional(),
+  apiKey: external_exports.string().min(1).optional()
+});
 var ConnectionIdParamsSchema = external_exports.object({ id: external_exports.string() });
 var PendingOAuthSchema = external_exports.object({
   id: external_exports.string(),
@@ -19754,7 +19782,7 @@ var SaveWorkstationBodySchema = external_exports.object({
 var WorkstationResponseSchema = external_exports.object({ workstation: WorkstationSchema });
 
 // ../../shared/dist/machines/machine.js
-var CLI_VERSION = "0.2.0";
+var CLI_VERSION = "0.2.2";
 var MACHINE_BEAT_INTERVAL_MS = 15e3;
 var MACHINE_BEAT_BUSY_INTERVAL_MS = 3e3;
 var MACHINE_RUN_OUTPUT_MAX = 32e3;
@@ -19874,6 +19902,7 @@ var AddMachineKeyBodySchema = external_exports.object({
   key: external_exports.string().min(60).max(4e3),
   label: external_exports.string().max(80).optional()
 });
+var RenameMachineBodySchema = external_exports.object({ name: external_exports.string().min(1).max(64) });
 var StartRunBodySchema = external_exports.object({ argv: external_exports.array(external_exports.string().max(4e3)).min(1).max(64) });
 var AnswerRunBodySchema = external_exports.object({ text: external_exports.string().min(1).max(4e3) });
 var MachineRunsResponseSchema = external_exports.object({ runs: external_exports.array(MachineRunSchema) });
@@ -20221,7 +20250,7 @@ var MemberActivityListResponse = external_exports.object({
 // dist/machine.js
 import { execFile as execFile3 } from "node:child_process";
 import { mkdir, readFile as readFile2, readdir, rm, writeFile } from "node:fs/promises";
-import os3 from "node:os";
+import os4 from "node:os";
 import path4 from "node:path";
 import { promisify as promisify3 } from "node:util";
 
@@ -22091,6 +22120,7 @@ var dist_default6 = createPrompt((config2, done) => {
 
 // dist/run.js
 import { spawn } from "node:child_process";
+import os from "node:os";
 var runner = {
   attended(argv) {
     return new Promise((resolve) => {
@@ -22101,6 +22131,7 @@ var runner = {
   },
   async unattended({ work, onProgress }) {
     const argv = headlessArgv(work);
+    const raw = argv[0] === "script";
     let output = "";
     let agentSessionId = work.agentSessionId ?? void 0;
     let lastText = "";
@@ -22126,10 +22157,24 @@ var runner = {
       }
     };
     const code = await new Promise((resolve) => {
-      const child = spawn(argv[0], argv.slice(1), { stdio: ["ignore", "pipe", "pipe"] });
+      const child = spawn(argv[0], argv.slice(1), {
+        stdio: ["ignore", "pipe", "pipe"],
+        cwd: os.homedir(),
+        env: {
+          ...process.env,
+          TERM: process.env.TERM ?? "xterm-256color",
+          COLUMNS: process.env.COLUMNS ?? "120",
+          LINES: process.env.LINES ?? "40"
+        }
+      });
+      append("");
       child.stdout.setEncoding("utf8");
       child.stderr.setEncoding("utf8");
       child.stdout.on("data", (chunk) => {
+        if (raw) {
+          append(chunk);
+          return;
+        }
         pending += chunk;
         const lines = pending.split("\n");
         pending = lines.pop() ?? "";
@@ -22179,8 +22224,11 @@ function headlessArgv(work) {
   return [argv[0], "-p", argv.slice(1).join(" "), ...streaming];
 }
 function underTty(argv) {
-  return process.platform === "linux" ? ["script", "-qec", argv.join(" "), "/dev/null"] : ["script", "-q", "/dev/null", ...argv];
+  const line = `stty rows ${PTY_ROWS} cols ${PTY_COLS} 2>/dev/null; exec ${argv.join(" ")}`;
+  return process.platform === "linux" ? ["script", "-qec", line, "/dev/null"] : ["script", "-q", "/dev/null", "sh", "-c", line];
 }
+var PTY_ROWS = 40;
+var PTY_COLS = 120;
 function isAgent(command) {
   return AGENTS.has((command ?? "").split("/").pop() ?? "");
 }
@@ -22209,7 +22257,7 @@ function parseJson(line) {
 
 // dist/setup.js
 import { execFile as execFile2 } from "node:child_process";
-import os2 from "node:os";
+import os3 from "node:os";
 import path3 from "node:path";
 import { promisify as promisify2 } from "node:util";
 
@@ -22217,12 +22265,12 @@ import { promisify as promisify2 } from "node:util";
 import { execFile } from "node:child_process";
 import net from "node:net";
 import { access, readFile } from "node:fs/promises";
-import os from "node:os";
+import os2 from "node:os";
 import path2 from "node:path";
 import { promisify } from "node:util";
 var run = promisify(execFile);
 var probe = {
-  async tools({ mcpPath = path2.join(os.homedir(), ".mcp.json") } = {}) {
+  async tools({ mcpPath = path2.join(os2.homedir(), ".mcp.json") } = {}) {
     const [brain, claude, codex, git, chrome, ssh] = await Promise.all([
       brainWired(mcpPath),
       version2({ id: "claude", command: "claude" }),
@@ -22268,7 +22316,7 @@ async function gitAndGithub() {
   };
 }
 async function githubAccount() {
-  const raw = await readFile(path2.join(os.homedir(), ".config", "gh", "hosts.yml"), "utf8").catch(() => null);
+  const raw = await readFile(path2.join(os2.homedir(), ".config", "gh", "hosts.yml"), "utf8").catch(() => null);
   return raw === null ? null : githubUser(raw);
 }
 function githubUser(hostsYml) {
@@ -22308,7 +22356,7 @@ async function firstLine(command, args) {
   return line === "" ? { ran: false, why: "broken" } : { ran: true, line: line.slice(0, 200) };
 }
 function short(target) {
-  return target.startsWith(os.homedir()) ? `~${target.slice(os.homedir().length)}` : target;
+  return target.startsWith(os2.homedir()) ? `~${target.slice(os2.homedir().length)}` : target;
 }
 var MAC_CHROME = ["/Applications/Google Chrome.app/Contents/MacOS/Google Chrome"];
 var LINUX_CHROME = ["google-chrome", "google-chrome-stable", "chromium"];
@@ -22363,8 +22411,8 @@ function toolDirs() {
   return [
     path3.dirname(process.execPath),
     ...prefix === void 0 ? [] : [path3.join(prefix, "bin")],
-    path3.join(os2.homedir(), ".local", "bin"),
-    path3.join(os2.homedir(), ".npm-global", "bin"),
+    path3.join(os3.homedir(), ".local", "bin"),
+    path3.join(os3.homedir(), ".npm-global", "bin"),
     "/opt/homebrew/bin",
     "/usr/local/bin"
   ];
@@ -22419,7 +22467,7 @@ var RETRY_AFTER_MS = 216e5;
 var run3 = promisify3(execFile3);
 var machine = {
   home() {
-    return process.env.CRAFTSPACE_CLI_HOME ?? path4.join(os3.homedir(), ".craftspace");
+    return process.env.CRAFTSPACE_CLI_HOME ?? path4.join(os4.homedir(), ".craftspace");
   },
   async login({ token, url: url2, install }) {
     const answer = await call({
@@ -22428,11 +22476,11 @@ var machine = {
       method: "POST",
       path: "/api/machines/login",
       body: {
-        name: os3.hostname().split(".")[0] ?? "machine",
+        name: os4.hostname().split(".")[0] ?? "machine",
         platform: `${process.platform}-${process.arch}`,
-        sshUser: os3.userInfo().username,
-        cores: os3.cpus().length,
-        memoryGb: Math.max(1, Math.round(os3.totalmem() / 1024 ** 3)),
+        sshUser: os4.userInfo().username,
+        cores: os4.cpus().length,
+        memoryGb: Math.max(1, Math.round(os4.totalmem() / 1024 ** 3)),
         cli: CLI_VERSION,
         publicKey: await ensureKey()
       },
@@ -22445,8 +22493,7 @@ var machine = {
     await installService();
     probed = {
       at: Date.now(),
-      tools: await setup.run({ install, rewire, say: (line) => process.stdout.write(`${line}
-`) })
+      tools: await setup.run({ install, rewire, say: (text) => process.stdout.write(text) })
     };
     return answer.machine;
   },
@@ -22495,7 +22542,7 @@ Signed in as ${signed.ownerName}. This machine is ${signed.name}.
         sessions: await readSessions(),
         runs: drainReports(),
         tools: await tools(),
-        sshUser: os3.userInfo().username
+        sshUser: os4.userInfo().username
       },
       schema: MachineBeatResponseSchema
     });
@@ -22528,6 +22575,17 @@ Signed in as ${signed.ownerName}. This machine is ${signed.name}.
       return runHere(argv);
     return runThere({ argv, on });
   },
+  async daemonLine() {
+    if (process.env.CRAFTSPACE_NO_SERVICE === "1")
+      return `not installed. Start it with: ${here()} daemon`;
+    if (process.platform !== "linux")
+      return BEATING;
+    if (!await serviceRunning())
+      return `not running. Start it with: ${here()} daemon`;
+    if (!await userLingers())
+      return `beating, but it stops when you log out. Run: ${LINGER_LINE}`;
+    return BEATING;
+  },
   async logout() {
     const config2 = await readConfig();
     const token = await readToken();
@@ -22736,7 +22794,7 @@ async function ensureKey() {
   if (existing !== null)
     return existing.trim();
   await mkdir(machine.home(), { recursive: true, mode: 448 });
-  await run3("ssh-keygen", ["-t", "ed25519", "-N", "", "-q", "-f", priv, "-C", `craftspace-${os3.hostname()}`]);
+  await run3("ssh-keygen", ["-t", "ed25519", "-N", "", "-q", "-f", priv, "-C", `craftspace-${os4.hostname()}`]);
   return (await readFile2(pub, "utf8")).trim();
 }
 async function readConfig() {
@@ -22764,7 +22822,7 @@ async function readSessions() {
   return sessions.slice(0, MAX_REPORTED_SESSIONS);
 }
 async function writeAuthorizedKeys(keys) {
-  const target = path4.join(os3.homedir(), ".ssh", "authorized_keys");
+  const target = path4.join(os4.homedir(), ".ssh", "authorized_keys");
   const current = await readFile2(target, "utf8").catch(() => "");
   const before = current.split(KEYS_BEGIN)[0] ?? "";
   const after = current.includes(KEYS_END) ? current.split(KEYS_END)[1] ?? "" : "";
@@ -22804,6 +22862,31 @@ async function writeAgentConfigs({ url: url2, token, writes }) {
     owned.push(target);
   }
   await writeFile(ownedPath(), JSON.stringify({ paths: owned }, null, 2));
+  await acceptClaudeGates(serversIn(planned));
+}
+function serversIn(writes) {
+  return writes.flatMap((write) => isPlainObject3(write.contents.mcpServers) ? Object.keys(write.contents.mcpServers) : []);
+}
+async function acceptClaudeGates(servers) {
+  const target = path4.join(os4.homedir(), ".claude.json");
+  const raw = await readFile2(target, "utf8").catch(() => null);
+  if (raw === null)
+    return;
+  const parsed = JSON.parse(raw);
+  const projects = isPlainObject3(parsed.projects) ? parsed.projects : {};
+  const found = projects[os4.homedir()];
+  const here2 = isPlainObject3(found) ? { ...found } : {};
+  const enabled = /* @__PURE__ */ new Set([...Array.isArray(here2.enabledMcpjsonServers) ? here2.enabledMcpjsonServers : [], ...servers]);
+  if (here2.hasTrustDialogAccepted === true && enabled.size === asArray(here2.enabledMcpjsonServers).length)
+    return;
+  here2.hasTrustDialogAccepted = true;
+  here2.enabledMcpjsonServers = [...enabled];
+  const next = { ...parsed, projects: { ...projects, [os4.homedir()]: here2 } };
+  await writeFile(target, `${JSON.stringify(next, null, 2)}
+`, { mode: 384 });
+}
+function asArray(value) {
+  return Array.isArray(value) ? value : [];
 }
 function mergeInto(current, incoming) {
   const merged = { ...current };
@@ -22846,20 +22929,19 @@ async function weCreated(target) {
   return backup === null;
 }
 async function installService() {
-  if (process.env.CRAFTSPACE_NO_SERVICE === "1") {
-    process.stdout.write("Skipping the service. Run the beat yourself with: craftspace daemon\n");
+  if (process.env.CRAFTSPACE_NO_SERVICE === "1")
     return;
-  }
   if (process.platform === "linux") {
-    const dir = path4.join(os3.homedir(), ".config", "systemd", "user");
+    const dir = path4.join(os4.homedir(), ".config", "systemd", "user");
     await mkdir(dir, { recursive: true });
     await writeFile(path4.join(dir, `${SERVICE_NAME}.service`), systemdUnit());
+    await run3("loginctl", ["enable-linger", os4.userInfo().username]).catch(() => void 0);
     await run3("systemctl", ["--user", "daemon-reload"]).catch(() => void 0);
     await run3("systemctl", ["--user", "enable", "--now", SERVICE_NAME]).catch(() => void 0);
     return;
   }
   if (process.platform === "darwin") {
-    const target = path4.join(os3.homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
+    const target = path4.join(os4.homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
     await mkdir(path4.dirname(target), { recursive: true });
     await writeFile(target, launchdPlist());
     await run3("launchctl", ["unload", target]).catch(() => void 0);
@@ -22869,11 +22951,11 @@ async function installService() {
 async function uninstallService() {
   if (process.platform === "linux") {
     await run3("systemctl", ["--user", "disable", "--now", SERVICE_NAME]).catch(() => void 0);
-    await rm(path4.join(os3.homedir(), ".config", "systemd", "user", `${SERVICE_NAME}.service`), { force: true });
+    await rm(path4.join(os4.homedir(), ".config", "systemd", "user", `${SERVICE_NAME}.service`), { force: true });
     return;
   }
   if (process.platform === "darwin") {
-    const target = path4.join(os3.homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
+    const target = path4.join(os4.homedir(), "Library", "LaunchAgents", `${LAUNCH_LABEL}.plist`);
     await run3("launchctl", ["unload", target]).catch(() => void 0);
     await rm(target, { force: true });
   }
@@ -22907,11 +22989,21 @@ function launchdPlist() {
 </plist>
 `;
 }
+function here() {
+  return `${process.execPath} ${entryPath()}`;
+}
+async function serviceRunning() {
+  return await run3("systemctl", ["--user", "is-active", SERVICE_NAME]).catch(() => null) !== null;
+}
+async function userLingers() {
+  const shown = await run3("loginctl", ["show-user", os4.userInfo().username, "-p", "Linger"]).catch(() => null);
+  return shown?.stdout.includes("Linger=yes") === true;
+}
 function entryPath() {
   return path4.join(path4.dirname(new URL(import.meta.url).pathname), "index.js");
 }
 function expand(target) {
-  return target.startsWith("~/") ? path4.join(os3.homedir(), target.slice(2)) : target;
+  return target.startsWith("~/") ? path4.join(os4.homedir(), target.slice(2)) : target;
 }
 function configPath() {
   return path4.join(machine.home(), "config.json");
@@ -22923,9 +23015,9 @@ function ownedPath() {
   return path4.join(machine.home(), "owned.json");
 }
 function load2() {
-  const cores = Math.max(1, os3.cpus().length);
-  const busy = Math.min(100, (os3.loadavg()[0] ?? 0) / cores * 100);
-  const used = (os3.totalmem() - os3.freemem()) / os3.totalmem() * 100;
+  const cores = Math.max(1, os4.cpus().length);
+  const busy = Math.min(100, (os4.loadavg()[0] ?? 0) / cores * 100);
+  const used = (os4.totalmem() - os4.freemem()) / os4.totalmem() * 100;
   return { cpuPercent: Math.round(busy), memoryPercent: Math.round(used) };
 }
 function nextDelayMs(failures, busy = false) {
@@ -22949,6 +23041,8 @@ var MAX_BACKOFF_MS = 12e4;
 var KEYS_BEGIN = "# craftspace begin";
 var KEYS_END = "# craftspace end";
 var POLL_INTERVAL_MS = 1e3;
+var BEATING = "beating every 15s, outbound only, and keeps this set up";
+var LINGER_LINE = `sudo loginctl enable-linger ${os4.userInfo().username}`;
 var DEFAULT_URL = process.env.CRAFTSPACE_URL ?? "https://craftspace.app";
 var PROBE_EVERY_MS = 3e5;
 var probed = null;
@@ -22966,7 +23060,7 @@ program2.command("login").description("sign this machine in").option("--token <t
     `Signed in as ${signed.ownerName}`,
     `Machine      ${signed.name} \xB7 ${signed.platform} \xB7 ${signed.cores ?? "?"} vCPU`,
     "MCP wired    ~/.mcp.json",
-    "Daemon       beating every 15s, outbound only, and keeps this set up",
+    `Daemon       ${await machine.daemonLine()}`,
     "",
     `Listed at ${url2.replace(/\/$/, "")}/workstations`,
     ""

package/dist/machine.d.ts

@@ -21,6 +21,7 @@ export declare const machine: {
         argv: string[];
         on?: string;
     }): Promise<number>;
+    daemonLine(): Promise<string>;
     logout(): Promise<void>;
 };
 export declare function tokenIn(line: string): string | undefined;

package/dist/machine.js

@@ -37,7 +37,7 @@ export const machine = {
         await installService();
         probed = {
             at: Date.now(),
-            tools: await setup.run({ install, rewire, say: (line) => process.stdout.write(`${line}\n`) }),
+            tools: await setup.run({ install, rewire, say: (text) => process.stdout.write(text) }),
         };
         return answer.machine;
     },
@@ -118,6 +118,17 @@ export const machine = {
             return runHere(argv);
         return runThere({ argv, on });
     },
+    async daemonLine() {
+        if (process.env.CRAFTSPACE_NO_SERVICE === '1')
+            return `not installed. Start it with: ${here()} daemon`;
+        if (process.platform !== 'linux')
+            return BEATING;
+        if (!(await serviceRunning()))
+            return `not running. Start it with: ${here()} daemon`;
+        if (!(await userLingers()))
+            return `beating, but it stops when you log out. Run: ${LINGER_LINE}`;
+        return BEATING;
+    },
     async logout() {
         const config = await readConfig();
         const token = await readToken();
@@ -348,8 +359,6 @@ async function readSessions() {
     }
     return sessions.slice(0, MAX_REPORTED_SESSIONS);
 }
-// Only the block between our markers is ours. Everything a person put in this file by hand is left exactly
-// where it was, because the fastest way to lock a team out of its own box is to rewrite this file wholesale.
 async function writeAuthorizedKeys(keys) {
     const target = path.join(os.homedir(), '.ssh', 'authorized_keys');
     const current = await readFile(target, 'utf8').catch(() => '');
@@ -387,6 +396,30 @@ async function writeAgentConfigs({ url, token, writes, }) {
         owned.push(target);
     }
     await writeFile(ownedPath(), JSON.stringify({ paths: owned }, null, 2));
+    await acceptClaudeGates(serversIn(planned));
+}
+function serversIn(writes) {
+    return writes.flatMap((write) => isPlainObject(write.contents.mcpServers) ? Object.keys(write.contents.mcpServers) : []);
+}
+async function acceptClaudeGates(servers) {
+    const target = path.join(os.homedir(), '.claude.json');
+    const raw = await readFile(target, 'utf8').catch(() => null);
+    if (raw === null)
+        return;
+    const parsed = JSON.parse(raw);
+    const projects = isPlainObject(parsed.projects) ? parsed.projects : {};
+    const found = projects[os.homedir()];
+    const here = isPlainObject(found) ? { ...found } : {};
+    const enabled = new Set([...(Array.isArray(here.enabledMcpjsonServers) ? here.enabledMcpjsonServers : []), ...servers]);
+    if (here.hasTrustDialogAccepted === true && enabled.size === asArray(here.enabledMcpjsonServers).length)
+        return;
+    here.hasTrustDialogAccepted = true;
+    here.enabledMcpjsonServers = [...enabled];
+    const next = { ...parsed, projects: { ...projects, [os.homedir()]: here } };
+    await writeFile(target, `${JSON.stringify(next, null, 2)}\n`, { mode: 0o600 });
+}
+function asArray(value) {
+    return Array.isArray(value) ? value : [];
 }
 function mergeInto(current, incoming) {
     const merged = { ...current };
@@ -429,14 +462,13 @@ async function weCreated(target) {
     return backup === null;
 }
 async function installService() {
-    if (process.env.CRAFTSPACE_NO_SERVICE === '1') {
-        process.stdout.write('Skipping the service. Run the beat yourself with: craftspace daemon\n');
+    if (process.env.CRAFTSPACE_NO_SERVICE === '1')
         return;
-    }
     if (process.platform === 'linux') {
         const dir = path.join(os.homedir(), '.config', 'systemd', 'user');
         await mkdir(dir, { recursive: true });
         await writeFile(path.join(dir, `${SERVICE_NAME}.service`), systemdUnit());
+        await run('loginctl', ['enable-linger', os.userInfo().username]).catch(() => undefined);
         await run('systemctl', ['--user', 'daemon-reload']).catch(() => undefined);
         await run('systemctl', ['--user', 'enable', '--now', SERVICE_NAME]).catch(() => undefined);
         return;
@@ -490,6 +522,16 @@ function launchdPlist() {
 </plist>
 `;
 }
+function here() {
+    return `${process.execPath} ${entryPath()}`;
+}
+async function serviceRunning() {
+    return (await run('systemctl', ['--user', 'is-active', SERVICE_NAME]).catch(() => null)) !== null;
+}
+async function userLingers() {
+    const shown = await run('loginctl', ['show-user', os.userInfo().username, '-p', 'Linger']).catch(() => null);
+    return shown?.stdout.includes('Linger=yes') === true;
+}
 function entryPath() {
     return path.join(path.dirname(new URL(import.meta.url).pathname), 'index.js');
 }
@@ -532,6 +574,8 @@ const MAX_BACKOFF_MS = 120_000;
 const KEYS_BEGIN = '# craftspace begin';
 const KEYS_END = '# craftspace end';
 const POLL_INTERVAL_MS = 1_000;
+const BEATING = 'beating every 15s, outbound only, and keeps this set up';
+const LINGER_LINE = `sudo loginctl enable-linger ${os.userInfo().username}`;
 const DEFAULT_URL = process.env.CRAFTSPACE_URL ?? 'https://craftspace.app';
 const PROBE_EVERY_MS = 300_000;
 let probed = null;

package/dist/run.js

@@ -1,4 +1,5 @@
 import { spawn } from 'node:child_process';
+import os from 'node:os';
 import { MACHINE_RUN_OUTPUT_MAX, spreadIfDefined } from '@craftspace/shared';
 export const runner = {
     attended(argv) {
@@ -10,6 +11,7 @@ export const runner = {
     },
     async unattended({ work, onProgress, }) {
         const argv = headlessArgv(work);
+        const raw = argv[0] === 'script';
         let output = '';
         let agentSessionId = work.agentSessionId ?? undefined;
         let lastText = '';
@@ -33,10 +35,24 @@ export const runner = {
             }
         };
         const code = await new Promise((resolve) => {
-            const child = spawn(argv[0], argv.slice(1), { stdio: ['ignore', 'pipe', 'pipe'] });
+            const child = spawn(argv[0], argv.slice(1), {
+                stdio: ['ignore', 'pipe', 'pipe'],
+                cwd: os.homedir(),
+                env: {
+                    ...process.env,
+                    TERM: process.env.TERM ?? 'xterm-256color',
+                    COLUMNS: process.env.COLUMNS ?? '120',
+                    LINES: process.env.LINES ?? '40',
+                },
+            });
+            append('');
             child.stdout.setEncoding('utf8');
             child.stderr.setEncoding('utf8');
             child.stdout.on('data', (chunk) => {
+                if (raw) {
+                    append(chunk);
+                    return;
+                }
                 pending += chunk;
                 const lines = pending.split('\n');
                 pending = lines.pop() ?? '';
@@ -85,10 +101,13 @@ export function headlessArgv(work) {
     return [argv[0], '-p', argv.slice(1).join(' '), ...streaming];
 }
 function underTty(argv) {
+    const line = `stty rows ${PTY_ROWS} cols ${PTY_COLS} 2>/dev/null; exec ${argv.join(' ')}`;
     return process.platform === 'linux'
-        ? ['script', '-qec', argv.join(' '), '/dev/null']
-        : ['script', '-q', '/dev/null', ...argv];
+        ? ['script', '-qec', line, '/dev/null']
+        : ['script', '-q', '/dev/null', 'sh', '-c', line];
 }
+const PTY_ROWS = 40;
+const PTY_COLS = 120;
 function isAgent(command) {
     return AGENTS.has((command ?? '').split('/').pop() ?? '');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@craftspace/cli",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "type": "module",
   "description": "Sign a Mac or Linux machine into Craftspace and keep its agent setup in step.",
   "license": "MIT",